b17ba4ab5eefef08d39e4ecda4341235
- SHA256 f166ff7bf5585d3cff368be6a5a51673c57bb24df6c555619ee3e90c7f066a3d
Overview
overview
7Static
static
7PPNTV_V4.0_Setup.exe
windows7-x64
7PPNTV_V4.0_Setup.exe
windows10-2004-x64
7$PLUGINSDI...ns.dll
windows7-x64
3$PLUGINSDI...ns.dll
windows10-2004-x64
3$SYSDIR/Fo...TV.dll
windows7-x64
1$SYSDIR/Fo...TV.dll
windows10-2004-x64
1$SYSDIR/KCharUtil.dll
windows7-x64
3$SYSDIR/KCharUtil.dll
windows10-2004-x64
3$SYSDIR/KN...nt.dll
windows7-x64
1$SYSDIR/KN...nt.dll
windows10-2004-x64
1$SYSDIR/KTxtLog.dll
windows7-x64
1$SYSDIR/KTxtLog.dll
windows10-2004-x64
3$SYSDIR/UC...re.dll
windows7-x64
3$SYSDIR/UC...re.dll
windows10-2004-x64
3$SYSDIR/UC...rl.dll
windows7-x64
1$SYSDIR/UC...rl.dll
windows10-2004-x64
1$SYSDIR/UC...et.dll
windows7-x64
1$SYSDIR/UC...et.dll
windows10-2004-x64
3$SYSDIR/forcetv.dll
windows7-x64
1$SYSDIR/forcetv.dll
windows10-2004-x64
1$SYSDIR/p2pgrid.dll
windows7-x64
1$SYSDIR/p2pgrid.dll
windows10-2004-x64
1$SYSDIR/ppshell.exe
windows7-x64
1$SYSDIR/ppshell.exe
windows10-2004-x64
1$WINDIR/Fo...TV.dll
windows7-x64
1$WINDIR/Fo...TV.dll
windows10-2004-x64
1$WINDIR/KN...nt.dll
windows7-x64
1$WINDIR/KN...nt.dll
windows10-2004-x64
1$WINDIR/KTxtLog.dll
windows7-x64
1$WINDIR/KTxtLog.dll
windows10-2004-x64
3$WINDIR/forcetv.dll
windows7-x64
1$WINDIR/forcetv.dll
windows10-2004-x64
1Behavioral task
behavioral1
Sample
PPNTV_V4.0_Setup.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PPNTV_V4.0_Setup.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/InstallOptions.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
$SYSDIR/ForceGridTV.dll
Resource
win7-20240215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
$SYSDIR/ForceGridTV.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
$SYSDIR/KCharUtil.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
$SYSDIR/KCharUtil.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
$SYSDIR/KNetClient.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
$SYSDIR/KNetClient.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
$SYSDIR/KTxtLog.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
$SYSDIR/KTxtLog.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral13
Sample
$SYSDIR/UCLiveCore.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral14
Sample
$SYSDIR/UCLiveCore.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral15
Sample
$SYSDIR/UCLiveCtrl.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
$SYSDIR/UCLiveCtrl.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral17
Sample
$SYSDIR/UCLiveSocket.dll
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
$SYSDIR/UCLiveSocket.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral19
Sample
$SYSDIR/forcetv.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral20
Sample
$SYSDIR/forcetv.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral21
Sample
$SYSDIR/p2pgrid.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
$SYSDIR/p2pgrid.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
$SYSDIR/ppshell.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral24
Sample
$SYSDIR/ppshell.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral25
Sample
$WINDIR/ForceGridTV.dll
Resource
win7-20240215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral26
Sample
$WINDIR/ForceGridTV.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral27
Sample
$WINDIR/KNetClient.dll
Resource
win7-20240220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
$WINDIR/KNetClient.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
$WINDIR/KTxtLog.dll
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
$WINDIR/KTxtLog.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral31
Sample
$WINDIR/forcetv.dll
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral32
Sample
$WINDIR/forcetv.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target b17ba4ab5eefef08d39e4ecda4341235
- Size 12.3MB
- Sample240304-hll28acd21
- SHA256 f166ff7bf5585d3cff368be6a5a51673c57bb24df6c555619ee3e90c7f066a3d
- MD5 b17ba4ab5eefef08d39e4ecda4341235
- SHA1 b7ce96fd7d240d9d5bb79482281258e6fd9c30b1
- SHA512 de6a66558e64151f5a0220f3ec5d53e63c4d560a22b30e1104ec5555de8d519e2250e5c5af4d3a567bc42d518b89c1898d63034165068c888cfe6c376e27a721
- SSDEEP 196608:+/NrjYa9iPWdCYu2KNr/JrN1/tMOPvcySCcWqljsCsT09itsAeia3Ay5QsMM6:MrZiWCxrRpFtRrcvljsC2eia3Aoan
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 6 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack002/Modules/TvKoo/KooPlayer.ocx acprotect static1/unpack002/Modules/uusee/ARMP.ocx acprotect static1/unpack002/Modules/uusee/UUUpgrade.ocx acprotect static1/unpack002/Modules/uusee/in_psp.dll acprotect static1/unpack002/Modules/uusee/out_mmshttp.dll acprotect static1/unpack002/Modules/uusee/updateC2.ocx acprotect -
resource yara_rule static1/unpack002/Modules/Dopstreamer/dbghelp.dll aspack_v212_v242 static1/unpack002/Modules/pplive/FWUpnp.dll aspack_v212_v242 static1/unpack002/Modules/uusee/ARMPD.dll aspack_v212_v242 static1/unpack002/Modules/uusee/UUPlayer.dll aspack_v212_v242 -
resource yara_rule static1/unpack002/Modules/TvKoo/KooPlayer.ocx upx static1/unpack002/Modules/uusee/ARMP.ocx upx static1/unpack002/Modules/uusee/UUUpgrade.ocx upx static1/unpack002/Modules/uusee/in_psp.dll upx static1/unpack002/Modules/uusee/out_mmshttp.dll upx static1/unpack002/Modules/uusee/updateC2.ocx upx - Unsigned PE 55 IoCs
Checks for missing Authenticode signature.
resource unpack001/PPNTV_V4.0_Setup.exe unpack002/$PLUGINSDIR/InstallOptions.dll unpack002/$SYSDIR/ForceGridTV.dll unpack002/$SYSDIR/KCharUtil.dll unpack002/$SYSDIR/KNetClient.dll unpack002/$SYSDIR/KTxtLog.dll unpack002/$SYSDIR/UCLiveCore.dll unpack002/$SYSDIR/UCLiveCtrl.ocx unpack002/$SYSDIR/UCLiveSocket.dll unpack002/$SYSDIR/forcetv.dll unpack002/$SYSDIR/p2pgrid.dll unpack002/$SYSDIR/ppshell.exe unpack002/$WINDIR/ForceGridTV.dll unpack002/$WINDIR/KNetClient.dll unpack002/$WINDIR/KTxtLog.dll unpack002/$WINDIR/forcetv.dll unpack002/$WINDIR/p2pgrid.dll unpack002/Modules/Dopstreamer/dbghelp.dll unpack002/Modules/QQLive/P2PPlayer.dll unpack002/Modules/QQLive/QQLive.dll unpack002/Modules/QQLive/QQLive.ocx unpack002/Modules/QQLive/QQLiveSrcDec.dll unpack002/Modules/QQLive/TNProxy.dll unpack002/Modules/QQLive/TRadio.ocx unpack002/Modules/QQLive/TVChannel.dll unpack002/Modules/QQLive/VCodec.dll unpack002/Modules/feidian/MMCShell.dll unpack002/Modules/feidian/XListCtrlDDRA.dll unpack002/Modules/feidian/dbghelp.dll unpack002/Modules/feidian/fdcdlib.dll unpack002/Modules/feidian/p2pclient.dll unpack002/Modules/itv/GUpdate.dll unpack002/Modules/itv/pCastCtl.dll unpack002/Modules/itv/pcast.dll unpack002/Modules/sopcast/live/IPCamD.ocx unpack002/Modules/sopcast/live/sopocx.ocx unpack002/Modules/sopcast/vod/sopocx.ocx unpack002/Modules/sopcast/vod/sopvod.exe unpack002/Modules/tvants/TvantsX.ocx unpack002/Modules/tvants/riched20.dll unpack002/Modules/tvu/libeay32.dll unpack002/Modules/tvu/libexpatw.dll unpack002/Modules/tvu/msvcp71.dll unpack002/Modules/tvu/msvcr71.dll unpack002/Modules/tvu/ssleay32.dll unpack004/out.upx unpack005/out.upx unpack006/out.upx unpack007/out.upx unpack008/out.upx unpack002/PPNTVUpdate.exe unpack002/new.exe unpack002/ppntv.exe unpack002/skins/new.exe unpack002/uninst.exe - NSIS installer 2 IoCs
resource yara_rule static1/unpack001/PPNTV_V4.0_Setup.exe nsis_installer_1 static1/unpack002/uninst.exe nsis_installer_1
File Explorer
-
b17ba4ab5eefef08d39e4ecda4341235.rar 12.3MB
-
PPNTV_V4.0_Setup.exe.exe 12.3MB
-
$PLUGINSDIR/InstallOptions.dll.dll 12KB
-
$PLUGINSDIR/ioSpecial.ini211B
-
$PLUGINSDIR/modern-wizard.bmp150KB
-
$SYSDIR/ForceGridTV.dll.dll 104KB
-
$SYSDIR/KCharUtil.dll.dll 64KB
-
$SYSDIR/KNetClient.dll.dll 104KB
-
$SYSDIR/KTxtLog.dll.dll 60KB
-
$SYSDIR/UCLiveCore.dll.dll 156KB
-
$SYSDIR/UCLiveCtrl.ocx.dll 564KB
-
$SYSDIR/UCLiveSocket.dll.dll 236KB
-
$SYSDIR/forceplayer.inf1KB
-
$SYSDIR/forcetv.dll.dll 440KB
-
$SYSDIR/forcetv.xml429B
-
$SYSDIR/local.xml73B
-
$SYSDIR/p2pgrid.dll.dll 780KB
-
$SYSDIR/ppshell.exe.exe 312KB
-
$SYSDIR/realmediaSDK.reg8KB
-
$SYSDIR/ver.ini16B
-
$WINDIR/ForceGridTV.dll.dll 104KB
-
$WINDIR/KNetClient.dll.dll 104KB
-
$WINDIR/KTxtLog.dll.dll 60KB
-
$WINDIR/forcetv.dll.dll 396KB
-
$WINDIR/p2pgrid.dll.dll 776KB
-
$WINDIR/realmediaSDK.reg8KB
-
ConfigUpdate.ini56B
-
Modules/Dopool/LiveClientPlatform.exe.exe 405KB
-
Modules/Dopool/LiveClientPlugIn.dll.dll 341KB
-
Modules/Dopool/dopvod.exe.exe 1.1MB
-
Modules/Dopool/dopvodcom.dll.dll 289KB
-
Modules/Dopstreamer/DopVodCom.dll.dll 289KB
-
Modules/Dopstreamer/LiveClientPlatform.exe.exe 405KB
-
Modules/Dopstreamer/LiveClientPlugIn.dll.dll 341KB
-
Modules/Dopstreamer/dbghelp.dll.dll 594KB
-
Modules/Dopstreamer/dopvod.exe.exe 1.1MB
-
Modules/MySee/Booter.ocx.dll 129KB
-
Modules/PPStream/PSNetwork.dll.dll 637KB
-
Modules/PPStream/PowerList.ocx.dll 375KB
-
Modules/PPStream/PowerPlayer.dll.dll 477KB
-
Modules/PPStream/pp2play.dll.dll 178KB
-
Modules/PPStream/ppssg.dll.dll 279KB
-
Modules/PPStream/vodnet.dll.dll 843KB
-
Modules/PPStream/vodres.dll.dll 231KB
-
Modules/PPStream/xd.dll.dll 198KB
-
Modules/QQLive/P2PPlayer.dll.dll 220KB
-
Modules/QQLive/QQLive.dll.dll 732KB
-
Modules/QQLive/QQLive.ocx.dll 76KB
-
Modules/QQLive/QQLiveSrcDec.dll.dll 216KB
-
Modules/QQLive/TNProxy.dll.dll 632KB
-
Modules/QQLive/TRadio.ocx.dll 316KB
-
Modules/QQLive/TVChannel.dll.dll 36KB
-
Modules/QQLive/VCodec.dll.dll 340KB
-
Modules/QQLive/busy.gif.gif 10KB
-
Modules/QQLive/loading.gif.gif 7KB
-
Modules/QQLive/notAllowd.gif.gif 13KB
-
Modules/Sopcast/vod/skin/DURATION_SLIDER_HOVER.bmp3KB
-
Modules/Sopcast/vod/skin/DURATION_SLIDER_NORMAL.bmp3KB
-
Modules/Sopcast/vod/skin/DURATION_SLIDER_PRESSED.bmp486B
-
Modules/Sopcast/vod/skin/FULLSCREEN_DISABLED.bmp870B
-
Modules/Sopcast/vod/skin/FULLSCREEN_HOVER.bmp870B
-
Modules/Sopcast/vod/skin/FULLSCREEN_NORMAL.bmp870B
-
Modules/Sopcast/vod/skin/FULLSCREEN_PRESSED.bmp870B
-
Modules/Sopcast/vod/skin/MAIN_DIALOG.bmp321KB
-
Modules/Sopcast/vod/skin/MUTE_HOVER.bmp1KB
-
Modules/Sopcast/vod/skin/MUTE_NORMAL.bmp1KB
-
Modules/Sopcast/vod/skin/MUTE_PRESSED.bmp1KB
-
Modules/Sopcast/vod/skin/PAUSE_HOVER.bmp3KB
-
Modules/Sopcast/vod/skin/PAUSE_NORMAL.bmp3KB
-
Modules/Sopcast/vod/skin/PAUSE_PRESSED.bmp3KB
-
Modules/Sopcast/vod/skin/PLAY_HOVER.bmp3KB
-
Modules/Sopcast/vod/skin/PLAY_NORMAL.bmp3KB
-
Modules/Sopcast/vod/skin/PLAY_PRESSED.bmp3KB
-
Modules/Sopcast/vod/skin/SOPLOGO_HOVER.bmp4KB
-
Modules/Sopcast/vod/skin/SOPLOGO_NORMAL.bmp4KB
-
Modules/Sopcast/vod/skin/SOPLOGO_PRESSED.bmp4KB
-
Modules/Sopcast/vod/skin/SOPSTATUS_NORMAL.bmp7KB
-
Modules/Sopcast/vod/skin/STOP_DISABLED.bmp870B
-
Modules/Sopcast/vod/skin/STOP_HOVER.bmp870B
-
Modules/Sopcast/vod/skin/STOP_NORMAL.bmp870B
-
Modules/Sopcast/vod/skin/STOP_PRESSED.bmp870B
-
Modules/Sopcast/vod/skin/UNMUTE_HOVER.bmp1KB
-
Modules/Sopcast/vod/skin/UNMUTE_NORMAL.bmp1KB
-
Modules/Sopcast/vod/skin/UNMUTE_PRESSED.bmp1KB
-
Modules/Sopcast/vod/skin/VOLUME_SLIDER_HOVER.bmp2KB
-
Modules/Sopcast/vod/skin/VOLUME_SLIDER_NORMAL.bmp2KB
-
Modules/Sopcast/vod/skin/VOLUME_SLIDER_PRESSED.bmp390B
-
Modules/Sopcast/vod/skin/sopcore.xml.xml 2KB
-
Modules/TvKoo/KooPlayer.ocx.dll 281KB
-
Modules/feidian/MMCShell.dll.dll 288KB
-
Modules/feidian/XListCtrlDDRA.dll.dll 104KB
-
Modules/feidian/dbghelp.dll.dll 625KB
-
Modules/feidian/fdcdlib.dll.dll 76KB
-
Modules/feidian/p2pclient.dll.dll 396KB
-
Modules/itv/GUpdate.dll.dll 272KB
-
Modules/itv/pCastCtl.dll.dll 1.0MB
-
Modules/itv/pcast.dll.dll 540KB
-
Modules/pplive/EE/ERco.dll.dll 117KB
-
Modules/pplive/EE/KOM.dll.dll 45KB
-
Modules/pplive/EE/MIR.dll.dll 425KB
-
Modules/pplive/EE/PPV.PTV24B
-
Modules/pplive/EE/PPd.dll.dll 37KB
-
Modules/pplive/EE/TNE.dll.dll 109KB
-
Modules/pplive/EE/params.ini227B
-
Modules/pplive/EE/tpi.dll.dll 885KB
-
Modules/pplive/FWUpnp.dll.dll 64KB
-
Modules/pplive/Graph.dll.dll 109KB
-
Modules/pplive/Language/CA.ini43KB
-
Modules/pplive/Language/CHTW.ini27KB
-
Modules/pplive/Language/CHU.ini27KB
-
Modules/pplive/Language/DE.ini43KB
-
Modules/pplive/Language/EN.ini38KB
-
Modules/pplive/Language/ES.ini43KB
-
Modules/pplive/Live.dll.dll 53KB
-
Modules/pplive/MngModule.dll.dll 77KB
-
Modules/pplive/NetTools.dll.dll 297KB
-
Modules/pplive/OPlayer.ocx.dll 109KB
-
Modules/pplive/PP/1012/KOM.dll.dll 45KB
-
Modules/pplive/PP/1012/TEN.dll.dll 393KB
-
Modules/pplive/PP/1012/eroc.dll.dll 49KB
-
Modules/pplive/PP/1012/mir.dll.dll 485KB
-
Modules/pplive/PP/1012/tpi.dll.dll 885KB
-
Modules/pplive/PP/ERoc.dll.dll 117KB
-
Modules/pplive/PP/KOM.dll.dll 45KB
-
Modules/pplive/PP/MIR.dll.dll 425KB
-
Modules/pplive/PP/PCP.dll.dll 85KB
-
Modules/pplive/PP/PPF.dll.dll 185KB
-
Modules/pplive/PP/TEN.dll.dll 109KB
-
Modules/pplive/PP/tpi.dll.dll 885KB
-
Modules/pplive/PPH.dll.dll 21KB
-
Modules/pplive/PPK.dll.dll 69KB
-
Modules/pplive/ProductUpdate.dll.dll 197KB
-
Modules/pplive/RGBFilters.dll.dll 149KB
-
Modules/pplive/SynacastEWA.ocx.dll 1.5MB
-
Modules/pplive/SynacastList.ocx.dll 1.1MB
-
Modules/pplive/TaskDownload.dll.dll 49KB
-
Modules/pplive/Troubleshooter.dll.dll 229KB
-
Modules/pplive/TrustUpload.dll.dll 33KB
-
Modules/pplive/UI.dll.dll 1.9MB
-
Modules/pplive/am.dll.dll 257KB
-
Modules/pplive/common.dll.dll 33KB
-
Modules/pplive/ets.dll.dll 85KB
-
Modules/pplive/pplive.exe.exe 185KB
-
Modules/pplive/ppvod.dll.dll 97KB
-
Modules/pplive/uilib.dll.dll 401KB
-
Modules/pplive/vod.dll.dll 833KB
-
Modules/sopcast/live/IPCamD.ocx.dll 360KB
-
Modules/sopcast/live/adv/SopAdver.exe.exe 558KB
-
Modules/sopcast/live/adv/default/home.html380B
-
Modules/sopcast/live/adv/default/index.html.html 315B
-
Modules/sopcast/live/adv/default/main.htm.html 602B
-
Modules/sopcast/live/adv/default/sopcast.jpg.jpg 34KB
-
Modules/sopcast/live/adv/sopadver.dat12KB
-
Modules/sopcast/live/config.xml1KB
-
Modules/sopcast/live/skin/DURATION_SLIDER_HOVER.bmp3KB
-
Modules/sopcast/live/skin/DURATION_SLIDER_NORMAL.bmp3KB
-
Modules/sopcast/live/skin/DURATION_SLIDER_PRESSED.bmp486B
-
Modules/sopcast/live/skin/EXPLAYER_DISABLED.bmp870B
-
Modules/sopcast/live/skin/EXPLAYER_HOVER.bmp870B
-
Modules/sopcast/live/skin/EXPLAYER_NORMAL.bmp870B
-
Modules/sopcast/live/skin/EXPLAYER_PRESSED.bmp870B
-
Modules/sopcast/live/skin/FULLSCREEN_DISABLED.bmp870B
-
Modules/sopcast/live/skin/FULLSCREEN_HOVER.bmp870B
-
Modules/sopcast/live/skin/FULLSCREEN_NORMAL.bmp870B
-
Modules/sopcast/live/skin/FULLSCREEN_PRESSED.bmp870B
-
Modules/sopcast/live/skin/MAIN_DIALOG.bmp321KB
-
Modules/sopcast/live/skin/MUTE_HOVER.bmp1KB
-
Modules/sopcast/live/skin/MUTE_NORMAL.bmp1KB
-
Modules/sopcast/live/skin/MUTE_PRESSED.bmp1KB
-
Modules/sopcast/live/skin/PAUSE_HOVER.bmp3KB
-
Modules/sopcast/live/skin/PAUSE_NORMAL.bmp3KB
-
Modules/sopcast/live/skin/PAUSE_PRESSED.bmp3KB
-
Modules/sopcast/live/skin/PLAY_HOVER.bmp3KB
-
Modules/sopcast/live/skin/PLAY_NORMAL.bmp3KB
-
Modules/sopcast/live/skin/PLAY_PRESSED.bmp3KB
-
Modules/sopcast/live/skin/SOPLOGO_HOVER.bmp4KB
-
Modules/sopcast/live/skin/SOPLOGO_NORMAL.bmp4KB
-
Modules/sopcast/live/skin/SOPLOGO_PRESSED.bmp4KB
-
Modules/sopcast/live/skin/SOPSTATUS_NORMAL.bmp7KB
-
Modules/sopcast/live/skin/STOP_DISABLED.bmp870B
-
Modules/sopcast/live/skin/STOP_HOVER.bmp870B
-
Modules/sopcast/live/skin/STOP_NORMAL.bmp870B
-
Modules/sopcast/live/skin/STOP_PRESSED.bmp870B
-
Modules/sopcast/live/skin/UNMUTE_HOVER.bmp1KB
-
Modules/sopcast/live/skin/UNMUTE_NORMAL.bmp1KB
-
Modules/sopcast/live/skin/UNMUTE_PRESSED.bmp1KB
-
Modules/sopcast/live/skin/VOLUME_SLIDER_HOVER.bmp2KB
-
Modules/sopcast/live/skin/VOLUME_SLIDER_NORMAL.bmp2KB
-
Modules/sopcast/live/skin/VOLUME_SLIDER_PRESSED.bmp390B
-
Modules/sopcast/live/skin/sopcore.xml3KB
-
Modules/sopcast/live/sopocx.ocx.dll 1.6MB
-
Modules/sopcast/live/sopvod.exe.exe 1.4MB
-
Modules/sopcast/vod/sopocx.ocx.dll 1.7MB
-
Modules/sopcast/vod/sopvod.exe.exe 1.4MB
-
Modules/tvants/Languages/tvantsx_chs.ini24KB
-
Modules/tvants/TvantsX.ocx.dll 1.3MB
-
Modules/tvants/riched20.dll.dll 421KB
-
Modules/tvants/unicows.dll.dll 252KB
-
Modules/tvu/TVUAx.dll.dll 317KB
-
Modules/tvu/libeay32.dll.dll 1004KB
-
Modules/tvu/libexpatw.dll.dll 140KB
-
Modules/tvu/msvcp71.dll.dll 488KB
-
Modules/tvu/msvcr71.dll.dll 340KB
-
Modules/tvu/ssleay32.dll.dll 192KB
-
Modules/uusee/ARMP.ocx.dll 608KB
-
out.upx.dll 1.6MB
-
Modules/uusee/ARMPD.dll.dll 184KB
-
Modules/uusee/MultiVMR9.dll.dll 154KB
-
Modules/uusee/UUPlayer.dll.dll 153KB
-
Modules/uusee/UUPlayer.ocx.dll 37KB
-
Modules/uusee/UUUpgrade.ocx.dll 45KB
-
out.upx.dll 120KB
-
Modules/uusee/in_psp.dll.dll 367KB
-
out.upx.dll 856KB
-
Modules/uusee/out_mmshttp.dll.dll 94KB
-
out.upx.dll 194KB
-
Modules/uusee/updateC2.ocx.dll 39KB
-
out.upx.dll 88KB
-
PPNTVUpdate.exe.exe 606KB
-
chis.ini293B
-
new.exe.exe 489KB
-
ppntv.exe.exe 1.0MB
-
readme.txt4KB
-
skins/new.exe.exe 489KB
-
skins/ĬƤ.skn59KB
-
skins/ˮѣ.skn29KB
-
skins/ٿ쳵.skn45KB
-
skins/Լ.skn35KB
-
skins/ɰƻ.skn56KB
-
uninst.exe.exe 61KB
-
-ٷվ.url200B
PPNTV_V4.0_Setup.exe
- IMPHASH 9c523d8653da5455667e3f82274f2f88
- SHA256 a98ddf17d101b04361c16815ff535922e65a404408ee5b1084ce22499da2c375
- MD5 74d7f9c2f102ccd0ab7597f6ece3ddbc
- SHA1 dbe8a1195e77d5639ddc3846c3882bca2ebc4261
- SHA512 7e23550078dd001818d6fcb0fe824ce5c5b046b859ee445c3daa5ae58a11fe556d8fd8358522d1c68d36068bf9b647fcf1b5f779a144b7168255e9338a334d58
- SSDEEP 196608:b/NrjYa9iPWdCYu2KNr/JrN1/tMOPvcySCcWqljsCsT09itsAeia3Ay5QsMMZ:ZrZiWCxrRpFtRrcvljsC2eia3Aoau
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
lstrcmpiA
CopyFileA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetCurrentProcess
user32
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=152, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=9, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/InstallOptions.dll
- IMPHASH 57354bdeea3dfae6e948101add87501a
- SHA256 b3ba181120cd5b57e2cd5435bbd64c3257f7525ade359f89554e93f466692125
- MD5 444e1109d960c307df0ca2b33a24731b
- SHA1 55e3b57d06128911ed4af44858d199d9b1945edc
- SHA512 9efdb45ee0eae73c24d3f01ff799160090f2b1f0f28ee8da3af52992fec220bf905070ce5a6cc1b5657642440ad29c22bc6889cd3ee1f674a908a935dcf4c2a8
- SSDEEP 384:fKlm7i+c3QW6ckPhyDEaLny2bbBBIXwZ:Cqi8BcyhEhLfbbTI
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10417
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
GetModuleHandleA
lstrcmpiA
GetPrivateProfileStringA
lstrcatA
lstrcpynA
WritePrivateProfileStringA
lstrlenA
lstrcpyA
GlobalFree
MultiByteToWideChar
GlobalAlloc
user32
GetDlgCtrlID
GetClientRect
SetWindowRgn
MapWindowPoints
LoadImageA
SetWindowLongA
CreateWindowExA
MapDialogRect
SetWindowPos
GetWindowRect
CreateDialogParamA
ShowWindow
EnableWindow
GetDlgItem
DestroyIcon
DestroyWindow
DispatchMessageA
TranslateMessage
GetMessageA
IsDialogMessageA
PtInRect
LoadCursorA
SetCursor
DrawTextA
GetWindowLongA
DrawFocusRect
CallWindowProcA
PostMessageA
MessageBoxA
CharNextA
wsprintfA
GetWindowTextA
SetWindowTextA
SendMessageA
LoadIconA
gdi32
SetTextColor
GetObjectA
SelectObject
GetDIBits
CreateRectRgn
CombineRgn
DeleteObject
CreateCompatibleDC
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
ShellExecuteA
comdlg32
GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError
dialog
initDialog
show
Name
.text
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
152B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
954B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=65, id=1, productName=Unmarked objects,
count=11, id=93, version=2179,
count=1, id=49, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
$PLUGINSDIR/ioSpecial.ini
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- MD5 SHA1 SHA512
$PLUGINSDIR/modern-wizard.bmp
- SHA256 6e78a070782d7c48933dfaa948daa3bb9e527ada4e6877d955c85a054dc5bebd
- MD5 81f5ad5df6179032398fe2c1164c2076
- SHA1 25ac26e9d84a383400891f8c6025f842d344b172
- SHA512 742372d5d9fb4ccb5659c6814b4ef2cbc009ea39316762a58e71e3cc57399fe6c7cf98def469e6878c60a9899f8900ef3df416b11f6c76fb7393c80167c17e34
- SSDEEP 1536:RtOy8u/w2JJLpR6hYDcPceBI1f4BSdSEJRHKS6WH+9inhlhiI:RroAJLpYhucPcexSkEJtKS6WHEghlhv
- MD5 SHA1 SHA512 SSDEEP
$SYSDIR/ForceGridTV.dll
- IMPHASH e996301d67992f83bfcde7573bc6e7a2
- SHA256 f6190bb278427b06f3607cf7e733444169b14c6816f080234a7115dbe177c286
- MD5 f92b2cbe79f372e837645c51294be1d7
- SHA1 6a0b26d14a08628cd46eaa2b49e03cb8a196c736
- SHA512 f5a34e78bd7330f7b6ed43cae9e47bc377e9a1255121309713228c97b7a0f8a265c93db32a08078fe4f67b5fd67db31f033a91658ff59949f3fd70d09ba6a5c2
- SSDEEP 1536:hfTSdax4n2VrdVoxUs9hb/uM6IM/pbpapo72fwJ75LqHiulNc51DAv:hfoa4n2VpVvsHQJaAJ5LqHiulOD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
g:\ktl\ppv\ctrl\ForceGridTV\ForceGridTV.pdb
kernel32
GlobalAlloc
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
GlobalLock
LCMapStringA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
GlobalUnlock
IsDBCSLeadByte
lstrcpynA
GetPrivateProfileStringA
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetModuleFileNameA
lstrlenA
lstrcpyA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringW
GetProcAddress
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
ExitProcess
user32
DefWindowProcA
CharNextA
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
DestroyWindow
EqualRect
IntersectRect
ReleaseDC
GetDC
SetWindowLongA
wsprintfA
UnregisterClassA
OffsetRect
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetParent
SetFocus
ShowWindow
GetFocus
IsChild
BeginPaint
GetClientRect
EndPaint
InvalidateRect
IsWindow
GetKeyState
CallWindowProcA
GetWindowLongA
gdi32
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutA
CreateDCA
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shell32
SHGetFileInfoA
ole32
StringFromGUID2
CLSIDFromString
CoTaskMemFree
StringFromCLSID
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
WriteClassStm
OleSaveToStream
CoCreateInstance
oleaut32
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
VariantClear
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
shlwapi
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=78, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, version=2179,
count=4, id=25, version=9210,
count=2, id=93, version=2067,
count=11, id=93, version=2179,
count=194, id=1, productName=Unmarked objects,
count=20, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
$SYSDIR/KCharUtil.dll
- IMPHASH 23d4177c49d1f22307fa956e01da843e
- SHA256 41a038f4ea4c5dfcab3c6bd10bdf3fe7d3f49d1dcf5bda1d379f5400106fde5e
- MD5 ef5ad8803bac7a15122509b68bac6cf3
- SHA1 8e37fc8be123a230c14f4004a4d33daa86151b00
- SHA512 6537c46b14687a1bd6609494126a1dff4c8de55b634665dbe4ac1239b3ef7ac9c1d4dc92789c29482d7ee01b6ab6c86616da32956229c2fe3367b4b971fe6b3f
- SSDEEP 768:bBCnzqzFPT3kxvnqkiqZzOF9gVOE4kLQ1qpidSsdOty:96zAFPT36MqMF9gl4kLeSbty
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
12377
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\CodeBase\KCharUtil\KCharUtil\KCharUtil.pdb
kernel32
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetLastError
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
Base64ToBinary
BinaryToBase64
BinaryToHex
HexToBinary
KCRCFullByte
KCRCHalfByte
KCRCNoTable
KMD5Digest
KMD5Finally
KMD5Init
KMD5PushData
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=72, id=109, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=76, id=1, productName=Unmarked objects,
count=36, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/KNetClient.dll
- IMPHASH 585f9f6afc83781d382390a6f564ed53
- SHA256 25dafcd096ad484d2675067163ed3f507a551253192347c900526e455708c090
- MD5 4b4c4e2253a1c26508c375f4629bfcf5
- SHA1 31b1896ef1d64022666b24a7acd6e2be44a83156
- SHA512 4c89e428739d5000a98ab3871f699d058b531657a0aa5705b6bdcab41bc97f0d9626fae3a89bb50b1df9266cb05c481e43244456536dd4e172b2ad2857b65278
- SSDEEP 1536:T6opNcLPuu8qmaqqfHxjoBxSV5JbsjcHs9kMnNOzt5t:ONLPaqmaqqfRdLEQt5t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\CodeBase\KNetClient\KNetClient\KNetClient.pdb
ws2_32
WSACloseEvent
WSAGetLastError
WSARecvFrom
WSASendTo
socket
connect
send
select
recv
gethostname
getsockname
getpeername
inet_ntoa
gethostbyname
WSACleanup
WSAStartup
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAAccept
WSAConnect
htons
bind
listen
WSACreateEvent
WSAEventSelect
WSARecv
WSASend
WSASocketA
closesocket
iphlpapi
GetAdaptersInfo
kernel32
GetProcAddress
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
CloseHandle
TerminateThread
WaitForSingleObject
GetLastError
Sleep
CreateEventA
HeapFree
HeapAlloc
GetProcessHeap
GetCPInfo
GetSystemTimeAsFileTime
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitThread
GetCurrentThreadId
CreateThread
HeapReAlloc
GetCommandLineA
GetVersionExA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
wvsprintfA
KCleanSocket
KCreateClientTcp
KCreateClientUdp
KDns2UL
KGetLocalIPs
KGetLocalMacs
KGetSkName
KGetSkPeer
KInitSocket
KUL2A
Name
.text
Size
64KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=99, id=109, productName=VS2005 build 50727, version=50727,
count=123, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=49, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/KTxtLog.dll
- IMPHASH de6eff14577b79e427b9f449e65fd5fb
- SHA256 2e3c095da0ce73e5ef3b83584801e8306b8605a572a6b6610bc34e9c26ce8b4a
- MD5 b77bfed0ebc5db971e2a8641aa86bb58
- SHA1 441285407e0e509b56492ffba64adffd2c5706aa
- SHA512 1ccb5025ea12a39d87839ed2ee55fdb475d27b0bf94c96e4c291bcb0510c2ff34906c7701415f67ef61041521094be07143761369502dc70ad5c085683700cd6
- SSDEEP 768:aoYlPwLqu1Zi13uXjmuGJspcdpuZ2PgeRKEJjZjOtV5/N:aoYupi13uy+SdpuZmjpktv/N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\CodeBase\Log\KLog\KTxtLog.pdb
kernel32
GetStdHandle
SetEndOfFile
SetFilePointer
GetLastError
CreateFileA
GetLocalTime
FlushFileBuffers
CloseHandle
WriteFile
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
wsprintfA
CloseKLog
FlushKLog
InitKLog
KLogBinary
KLogString
SetKLogExt
SetKLogRunning
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=72, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=85, id=1, productName=Unmarked objects,
count=35, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/UCLiveCore.dll
- IMPHASH 6cadff3a66fcd1b55f99a13908183fcc
- SHA256 b3630697c768f29f5f274a9f4d67bdedd2bf929a798eeeb8329c6d8102791b7b
- MD5 ed4e65ab51a08a51cdd2fa64a122fb02
- SHA1 8820e4af8824b9d9881250a1f378bdf7e9e363aa
- SHA512 ae7c3b05eaf2f0b95935f8d0281ae7a577e56818da9e4e3fde77cdae5c71a67b21ad435265bc2fd8c6fe52ca7bf36bcfd77bc98ce7e3309bc37fff1fc9f11193
- SSDEEP 3072:dNtEXT0LPzVxmGaD2UROPc77Xi7psbYFYdc3p49ZtgS0:dEQdxtaDHb7Xi728GqB
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
64136
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\ULike\product\UCLiveCore.pdb
user32
PostMessageA
TranslateMessage
DispatchMessageA
GetMessageA
ws2_32
gethostbyname
htons
inet_addr
htonl
WSAStartup
winmm
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeKillEvent
timeEndPeriod
kernel32
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetProcAddress
CloseHandle
Sleep
GetModuleFileNameA
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
RaiseException
GetLastError
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
HeapSize
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
GetLocaleInfoA
CreateNiceXCtrl
Name
.text
Size
112KB
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=136, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=118, id=1, productName=Unmarked objects,
count=56, id=110, productName=VS2005 build 50727, version=50727,
count=22, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/UCLiveCtrl.ocx
- IMPHASH 7a7a04cdd66bced17436c313e4affa1c
- SHA256 0d5b18a55cf9733c9da6d2a7ca6601350d44bfd2bc70dd21b4ebf7328016d226
- MD5 72e52fdc5d3c013e62f8d50b1f307d3f
- SHA1 af7a6fc6fa91480cab7ac7ada4f0e85ce4e22bae
- SHA512 efdac3b9b403f0cd576af2f2bd9347d1cbf6c16aa3b320fdac0aeea7a43feac7ba702065518d1a5210a1c844913977004fbf2e3375f264bd42c2d0ac69c6bfcb
- SSDEEP 6144:tYgpyZcB3+xrLmKOL2+SGrOyxMN6LIIct7Qt1yBWjYWEuCfH76Tu13otIiH:tYYUrihSSOyfU9QtIKYWEu8H76bJ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
288184
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\ULike\product\UCLiveCtrl.pdb
kernel32
GetFileAttributesA
GetFileTime
GetProfileIntA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapReAlloc
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
ExitThread
RtlUnwind
ExitProcess
HeapSize
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
FindResourceExA
FileTimeToLocalFileTime
IsProcessorFeaturePresent
InterlockedCompareExchange
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
WritePrivateProfileStringA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GetUserDefaultLCID
GetModuleFileNameW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetCurrentProcessId
CopyFileA
GlobalSize
FormatMessageA
LocalFree
GlobalFree
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetVersionExA
GetThreadLocale
ResetEvent
SetEvent
WaitForSingleObject
CreateEventA
OutputDebugStringA
FreeResource
WriteFile
CreateFileA
LockResource
DeleteFileA
GetTempPathA
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
IsDBCSLeadByte
GetVersion
CompareStringA
lstrcmpiA
InterlockedExchange
CompareStringW
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SetLastError
RaiseException
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
lstrcmpA
lstrlenW
GetLastError
WideCharToMultiByte
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
InterlockedIncrement
Sleep
CloseHandle
CreateThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetACP
InitializeCriticalSection
user32
MapDialogRect
GetDialogBaseUnits
GetSysColorBrush
CopyAcceleratorTableA
UnregisterClassA
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
SetRect
SetWindowRgn
CreateMenu
DestroyMenu
SetRectEmpty
DrawEdge
SetParent
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
InflateRect
GetWindowDC
GetWindowThreadProcessId
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
IsWindowEnabled
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
SetWindowContextHelpId
RemovePropA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
IntersectRect
EnableWindow
SendMessageA
ReleaseCapture
IsWindow
GetDesktopWindow
InvalidateRgn
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
OffsetRect
GetDlgCtrlID
PeekMessageA
GetKeyState
PtInRect
GetWindowRect
GetCursorPos
SetCursor
PostMessageA
SetTimer
KillTimer
GetTabbedTextExtentA
DestroyIcon
PostThreadMessageA
GetDCEx
MessageBeep
GetNextDlgGroupItem
GetPropA
InvalidateRect
SetCapture
MoveWindow
ScreenToClient
ClientToScreen
CreateAcceleratorTableA
SetWindowPos
CharNextA
GetParent
GetClassNameA
RedrawWindow
GetDlgItem
GetWindow
SetFocus
GetFocus
IsChild
ReleaseDC
GetDC
EndPaint
FillRect
GetClientRect
BeginPaint
GetSysColor
DestroyAcceleratorTable
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
RegisterWindowMessageA
GetWindowLongA
DefWindowProcA
CallWindowProcA
DestroyWindow
CreateWindowExA
SetWindowLongA
RegisterClassExA
GetClassInfoExA
LoadCursorA
CharUpperA
IsRectEmpty
CopyRect
TabbedTextOutA
DrawTextA
DrawTextExA
ShowWindow
GrayStringA
gdi32
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SetRectRgn
CombineRgn
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
GetRgnBox
GetTextAlign
EnumFontFamiliesExA
Rectangle
UnrealizeObject
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
CreatePen
GetObjectA
MoveToEx
IntersectClipRect
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CreateFontA
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetMapMode
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
BitBlt
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegEnumKeyA
RegCreateKeyA
RegQueryValueExA
RegOpenKeyA
RegSetValueA
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteKeyA
RegQueryValueA
shell32
ExtractIconA
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
oledlg
ord8
ole32
CoRevokeClassObject
CoRegisterClassObject
OleDuplicateData
ReleaseStgMedium
StringFromCLSID
ReadFmtUserTypeStg
CreateDataCache
CoTaskMemRealloc
CoTaskMemFree
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
OleUninitialize
OleCreateMenuDescriptor
CreateOleAdviseHolder
OleDestroyMenuDescriptor
OleSaveToStream
CreateDataAdviseHolder
CoDisconnectObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
ReadClassStm
OleLoadFromStream
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
CoRegisterMessageFilter
oleaut32
SysStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
VariantChangeType
SysAllocStringByteLen
VariantCopy
DispCallFunc
RegisterTypeLi
OleCreatePropertyFrame
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayCreate
OleLoadPicture
OleCreatePictureIndirect
GetErrorInfo
SysAllocString
ws2_32
setsockopt
inet_addr
htons
bind
inet_ntoa
recv
closesocket
send
listen
socket
accept
??0CUIMemDC@@QAE@PAVCDC@@ABVCRect@@K@Z
??1CUIMemDC@@UAE@XZ
??_7CUIMemDC@@6B@
?Discard@CUIMemDC@@QAEXXZ
?FromDC@CUIMemDC@@QAEXXZ
?GetBitmap@CUIMemDC@@QAEAAVCBitmap@@XZ
?GetRuntimeClass@CUIMemDC@@UBEPAUCRuntimeClass@@XZ
?classCUIMemDC@CUIMemDC@@2UCRuntimeClass@@B
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
376KB
Virtual Size
372KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=584, id=1, productName=Unmarked objects,
count=28, id=125, productName=VS2005 build 50727, version=50727,
count=143, id=109, productName=VS2005 build 50727, version=50727,
count=196, id=110, productName=VS2005 build 50727, version=50727,
count=18, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/UCLiveSocket.dll
- IMPHASH 6eea8373661ba2a1eea0166c07d7c6c8
- SHA256 6bb88490b9900b3224bd16e51d04d7aabb797fb3b4a667d881bfcf2998849253
- MD5 d26b2a4cc625665d559093d11f2a9a8d
- SHA1 a41bc98ee40ba6e968aa5b474c14dd35003b357c
- SHA512 4a3e434793234b8768a746513cf5a4fe0af054b5278f7688d82e80127027b81e21e10d13821f3084254cb80b09a5d8ef313f5c1635328ac5d9ed8029f49ea1cf
- SSDEEP 3072:M1wrwjQ039wj42yOnjptvt3g4OkoiltFKDd5toZtavThzyP:mwMc62xgTHgcB5tJFy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
89626
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
select
sendto
bind
WSAIoctl
closesocket
setsockopt
htons
socket
inet_ntoa
ntohs
WSAStartup
WSACleanup
inet_addr
recvfrom
WSAGetLastError
iphlpapi
GetAdaptersInfo
kernel32
GetLastError
SetEnvironmentVariableA
CompareStringW
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
HeapSize
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
CloseHandle
Sleep
CreateThread
LoadLibraryA
GetProcAddress
GetModuleFileNameA
CreateEventA
WaitForSingleObject
SetEvent
GetCurrentProcess
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
GetTimeZoneInformation
ExitThread
LCMapStringA
LCMapStringW
GetCPInfo
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
VirtualFree
VirtualAlloc
HeapReAlloc
HeapDestroy
HeapCreate
ExitProcess
WriteFile
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
CreateULikeSocketCtrl
Name
.text
Size
164KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=125, productName=VS2005 build 50727, version=50727,
count=138, id=109, productName=VS2005 build 50727, version=50727,
count=12, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=126, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=72, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/forceplayer.inf
- SHA256 c0706e9601a2a9ad8232f204d24f3da68ccbf4d9f33d0751e9c28bc0ccc170e0
- MD5 81d39e21d743ab018fee18fca0aaba81
- SHA1 0278dfe3c48997a5deb4fb5899248e1489febd92
- SHA512 49c5d59477c0dfe79db3309b65726a9460411343b1b988696210be0b23d3c0a03547626be455aa7550b4801b2ceb5d28a7d19916a0c4b43c0dcb43b999bfa387
- MD5 SHA1 SHA512
$SYSDIR/forcetv.dll
- IMPHASH b6b8164057779e7562f402e7f1725b8e
- SHA256 0da38fd942c81a0f12c4b7cb6eafa6d664e6d314455e02500a0a10c2459d4498
- MD5 9de90e605c862a5d5cd6aaf3294e4c31
- SHA1 67ef6f2147ed83d0e7f6ee384835f6c8cd4801b2
- SHA512 cf442a7ae10675a983517f4fe96e708b18b442b805bfcd1624f5764a63460bf70aeafe6c7659b7ce74cd3bc28300ba7350b128288ac1f28f03270b409bdec278
- SSDEEP 6144:MKQ9gl1VQYkve1TsLPrgfYQcbQsSyu1qf/N/CDJyen+tahFNN8gMbjBeeeeeeee3:wCQY8cygxd4/NsJo1j
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
259366
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\myprogram\gd\media\mediaplay\mediaplay\Release\mediaplay.pdb
comctl32
_TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
MulDiv
GlobalUnlock
GlobalLock
lstrcpynA
IsDBCSLeadByte
SetLastError
FlushInstructionCache
GetCurrentProcess
HeapAlloc
lstrcmpA
GetCurrentThreadId
Sleep
GlobalAddAtomA
GlobalHandle
LocalFree
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
GetProcAddress
IsBadWritePtr
VirtualFree
HeapCreate
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
SetEndOfFile
WriteFile
CreateFileA
ReadFile
GetFileSize
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcatA
InterlockedIncrement
InterlockedDecrement
GlobalFree
GlobalAlloc
SizeofResource
LockResource
LoadResource
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
FindResourceExA
FindResourceA
user32
SetCursor
wsprintfA
CreateAcceleratorTableA
UnregisterClassA
GetClientRect
GetWindowLongA
LoadImageA
DrawTextA
SetWindowContextHelpId
MessageBoxA
SetWindowLongA
CreateWindowExA
DestroyWindow
SetWindowTextA
MoveWindow
SetWindowPos
GetWindowRect
GetDC
ReleaseDC
ShowWindow
IsWindowVisible
SetTimer
EnableWindow
SetParent
MapDialogRect
IsWindow
SendMessageA
GetSystemMetrics
GetParent
DefWindowProcA
GetWindowTextA
GetWindowTextLengthA
UnionRect
GetKeyState
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
GetForegroundWindow
RegisterHotKey
LoadMenuA
CreateDialogIndirectParamA
wsprintfW
mouse_event
GetWindowThreadProcessId
TrackPopupMenu
ModifyMenuA
GetSubMenu
DestroyMenu
UnregisterHotKey
UnhookWindowsHookEx
GetDlgItem
SetWindowsHookExA
RegisterClassExA
LoadCursorA
GetClassInfoExA
RegisterWindowMessageA
GetSysColor
CallWindowProcA
InvalidateRect
GetClassNameA
RedrawWindow
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
SetCapture
TrackMouseEvent
GetCursorPos
ScreenToClient
ReleaseCapture
PostMessageA
CallNextHookEx
SendDlgItemMessageA
BeginPaint
EndPaint
EndDialog
FillRect
KillTimer
CharNextA
ClientToScreen
PtInRect
gdi32
GetDIBits
SetDIBitsToDevice
CreateRectRgnIndirect
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
SetTextAlign
TextOutA
SetTextColor
SetBkMode
GetStockObject
GetObjectA
CreateSolidBrush
CreateCompatibleBitmap
GetDeviceCaps
CreateFontA
BitBlt
CreateCompatibleDC
SelectObject
StretchBlt
DeleteDC
DeleteObject
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetFileInfoA
ole32
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CLSIDFromString
CreateDataAdviseHolder
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
OleCreate
OleSetContainedObject
OleUninitialize
OleInitialize
CoCreateInstance
StringFromGUID2
OleLoadFromStream
WriteClassStm
OleSaveToStream
CLSIDFromProgID
oleaut32
DispCallFunc
GetErrorInfo
SetErrorInfo
OleCreatePropertyFrame
VariantChangeType
LoadRegTypeLi
OleCreateFontIndirect
CreateErrorInfo
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
SafeArrayCreate
SafeArrayAccessData
SafeArrayDestroy
VariantInit
VariantClear
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
shlwapi
PathFindExtensionA
wininet
HttpQueryInfoA
InternetReadFile
InternetOpenUrlA
InternetCanonicalizeUrlA
InternetCloseHandle
InternetOpenA
FtpGetFileSize
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
300KB
Virtual Size
299KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=28, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=134, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=8, id=95, version=2179,
count=2, id=93, version=2067,
count=14, id=93, version=2179,
count=7, id=25, version=9210,
count=306, id=1, productName=Unmarked objects,
count=48, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
$SYSDIR/forcetv.xml
- SHA256 e830487fd406b9f22cb167002308e80d7e2fef869c4f6310d4e9296b834568db
- MD5 efaca6230c8e24a5b6fec3905d0b97e9
- SHA1 b57c62805c255a1e6a2a79dd1acbe0c807be20a3
- SHA512 4c4a218d46f7726b377c681d9c8d7de7454ab21f0d4b37df19f0824298c65018e222721eaa87c0dcfe858130fe2e470ac36bde0a2f67a8ed4d86c72ac88a82a7
- MD5 SHA1 SHA512
$SYSDIR/local.xml
- SHA256 bfe3a9b48e0e406938e2c6107d9687b13a4bffaf2f9987aa17b4120ac71c6db7
- MD5 a6831281746a7a7631454dcc20c44d3d
- SHA1 c9b353d896ac0c02558b737af88bef81917e8328
- SHA512 a9562d685871d079e9b45a24f661827b206e7b8a3b0b87d5d32632ae9d1dec0be69fac44c8d8a18fd9fc9273eddd138d9fd2c04a91014f47fdc387bd69ad46ce
- MD5 SHA1 SHA512
$SYSDIR/p2pgrid.dll
- IMPHASH 74b2b24fef1743a7ac72e7ce84142afd
- SHA256 8df2a4b4ef9b49cc93f67daaea139bcf70ebeae42c4a0b7bc0caf210064174e7
- MD5 a9867f35868bc0c46524e0bb05b57c32
- SHA1 d7c91e2ba574c2de2db77ab9525202fc7142d62b
- SHA512 d9ac8e71713fb60af2e713fa80a519e19499522db64fe242f239864cb3a560d294f44fe1d13c606405b250bb7e1d0c391f820f4e524276b92670d2827eba349a
- SSDEEP 12288:hZYn4juB/oOxKa/0nvNepFIC6VdJHALYtLl/N9A5trjJSmKPDPLJSTqiLdNy:h5yBggEvNJALYtLD9A59cmKPDPLETpN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
409377
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\ppvn\src_v2\p2pgrid\p2pgrid.pdb
kernel32
CreateMutexA
GetCurrentProcessId
InterlockedExchange
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
FindResourceExA
LockResource
GetThreadLocale
SetThreadLocale
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
SetLastError
InterlockedIncrement
IsDBCSLeadByte
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
HeapCreate
CreateThread
ExitThread
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
GetACP
GetLogicalDrives
GetDriveTypeA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetTempFileNameA
GetTempPathA
FlushFileBuffers
SetFilePointer
WaitForSingleObject
TerminateThread
Sleep
CreateDirectoryA
GetFileSize
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
ReadFile
WriteFile
SetEndOfFile
GetLocalTime
OutputDebugStringA
FindFirstFileA
GetSystemTime
CreateFileA
GetFileTime
FileTimeToSystemTime
DeleteFileA
FindNextFileA
FindClose
GetCurrentThreadId
CloseHandle
InterlockedDecrement
GlobalAlloc
GetProcAddress
HeapAlloc
GetProcessHeap
GetTickCount
HeapFree
user32
DestroyWindow
DefWindowProcA
PtInRect
UnionRect
SetWindowLongA
GetWindowLongA
CharNextA
GetClassInfoExA
LoadCursorA
ReleaseDC
GetDC
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
ShowWindow
CreateWindowExA
wsprintfA
MessageBoxA
UnregisterClassA
GetParent
SetFocus
GetFocus
IsChild
RegisterClassExA
InvalidateRect
IsWindow
GetKeyState
CallWindowProcA
BeginPaint
GetClientRect
gdi32
SetMapMode
LPtoDP
SetViewportOrgEx
DeleteDC
CreateDCA
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetDeviceCaps
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
shell32
SHGetFileInfoA
ole32
CoTaskMemFree
StringFromGUID2
CLSIDFromString
StringFromCLSID
OleLoadFromStream
OleRegEnumVerbs
CoTaskMemRealloc
OleRegGetMiscStatus
CreateDataAdviseHolder
CreateOleAdviseHolder
WriteClassStm
OleSaveToStream
CoTaskMemAlloc
OleRegGetUserType
CoCreateInstance
oleaut32
OleCreatePropertyFrame
GetErrorInfo
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi
shlwapi
PathIsDirectoryA
PathFileExistsA
ktxtlog
KLogString
KLogBinary
CloseKLog
InitKLog
knetclient
KCreateClientUdp
KGetSkName
KGetLocalIPs
KCreateClientTcp
KUL2A
KDns2UL
KInitSocket
kcharutil
BinaryToHex
KCRCFullByte
HexToBinary
ws2_32
ntohl
ntohs
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
584KB
Virtual Size
581KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
100KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=3, id=126, version=50327,
count=29, id=125, productName=VS2005 build 50727, version=50727,
count=4, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=146, id=109, productName=VS2005 build 50727, version=50727,
count=253, id=1, productName=Unmarked objects,
count=19, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=94, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/ppshell.exe
- IMPHASH 8d3132543bbf0c0239f7130b99a0285c
- SHA256 216bd1bceb7373dc830c8ba519bde636a42e345fcf87b6e069d8d10ad41421a3
- MD5 f83b75eed7333d314dfad747a363e975
- SHA1 f919bc23ab84ec93c1d1e0005a3b09f7e1ccc0d2
- SHA512 d97e55af5d605c1b430d2ef84fd699b96ae6ab954c4f11d46059885d5fd3f5d2b3452dff9fe7e2fa7fba456d5318852b892289bdbe594338db14dbdad04f2dc0
- SSDEEP 6144:9edx/owg4Q65pf98KCnFkOt/0fBBkZKdmLc9zxt68+sNb1EPI:9wfQ+f98KCFH0fBBkZsmLc9zxt68+mEw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
131465
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
n:\ktl\ppvn\src_v2\p2pgrid\ppshell.pdb
kernel32
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetProcessHeap
GetStartupInfoA
RaiseException
ExitProcess
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
VirtualFree
HeapDestroy
HeapCreate
SetErrorMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetTickCount
FileTimeToSystemTime
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
WritePrivateProfileStringA
GlobalUnlock
GlobalFree
GetCurrentProcessId
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
GlobalLock
lstrcmpA
GlobalAlloc
GetThreadLocale
InterlockedIncrement
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
SetLastError
lstrcmpW
GetModuleHandleA
GetVersionExA
lstrlenA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
InterlockedExchange
WriteProfileStringA
GetProfileStringA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
LoadLibraryExA
GetProcAddress
FreeLibrary
GetCommandLineA
CreateMutexA
GetLastError
GetStdHandle
CloseHandle
user32
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
ReleaseDC
GetDC
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
SetCursor
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
PostQuitMessage
CharNextA
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
EnableWindow
SendMessageA
FindWindowA
wsprintfA
DrawIcon
IsIconic
SetForegroundWindow
IsWindowVisible
GetMenu
PostMessageA
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxA
CreateWindowExA
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
GetClassInfoExA
GetClassInfoA
SetRect
IsRectEmpty
CopyAcceleratorTableA
LoadCursorA
GetSysColorBrush
GetClientRect
UpdateWindow
SetTimer
KillTimer
LoadIconA
GetSystemMetrics
SetWindowLongA
CharUpperA
GetWindow
GetWindowRect
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
GetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
PtInRect
CopyRect
EqualRect
GetParent
AdjustWindowRectEx
GetSysColor
RegisterClassA
ShowWindow
gdi32
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetRgnBox
GetMapMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetViewportExtEx
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
comctl32
ord17
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoRevokeClassObject
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CoTaskMemAlloc
oleaut32
VariantChangeType
VariantInit
SysAllocStringLen
OleCreateFontIndirect
SysFreeString
SysStringLen
SysAllocStringByteLen
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy
VariantClear
Name
.text
Size
204KB
Virtual Size
203KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=25, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=541, id=1, productName=Unmarked objects,
count=26, id=125, productName=VS2005 build 50727, version=50727,
count=137, id=109, productName=VS2005 build 50727, version=50727,
count=161, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$SYSDIR/realmediaSDK.reg
- SHA256 060984c52e8bf4f216060866e534a52e1f049d39a433bf156955a47ac273b607
- MD5 4800e990c36781af2df7e21d53d703ae
- SHA1 7294f56972f50ce3e123253da557b93ef3ee4fee
- SHA512 e6971b4e18bded52b9fa5021c51630923085b22af0ba366e9bdb74e68d31f3833c66653655a8c79a230b0dfdc8f96e21960f23a784ebadf2eee5d1dbe3b54a34
- SSDEEP 96:NeK2yryHy9y4o4y4AL/zq2y2Wt1Oi++v+yyon1YxcyOyBC3Rf6opO/YY6iF1R14:NWS8ZCQMIbDO
- MD5 SHA1 SHA512 SSDEEP
$SYSDIR/ver.ini
- SHA256 12beeb27e72afdef45b0afe3d2e11aa68c66aaf53cb665ebee6e4e02796b4c87
- MD5 8fbca6df009af89476844ff7ffdda139
- SHA1 aefae6253da1f2e9074ff05e81039779e4425f9d
- SHA512 aa7cd6d1713e4b28ec122f6ac508e9047f6eca24ea2c0d35cc644c7a870c36587e2e4c2df70615bbacbf672b44355f186aaf4151089919feba7f3e014cddcad6
- MD5 SHA1 SHA512
$WINDIR/ForceGridTV.dll
- IMPHASH e996301d67992f83bfcde7573bc6e7a2
- SHA256 f6190bb278427b06f3607cf7e733444169b14c6816f080234a7115dbe177c286
- MD5 f92b2cbe79f372e837645c51294be1d7
- SHA1 6a0b26d14a08628cd46eaa2b49e03cb8a196c736
- SHA512 f5a34e78bd7330f7b6ed43cae9e47bc377e9a1255121309713228c97b7a0f8a265c93db32a08078fe4f67b5fd67db31f033a91658ff59949f3fd70d09ba6a5c2
- SSDEEP 1536:hfTSdax4n2VrdVoxUs9hb/uM6IM/pbpapo72fwJ75LqHiulNc51DAv:hfoa4n2VpVvsHQJaAJ5LqHiulOD
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46936
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
g:\ktl\ppv\ctrl\ForceGridTV\ForceGridTV.pdb
kernel32
GlobalAlloc
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
GetStringTypeW
GetStringTypeA
GlobalLock
LCMapStringA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
WriteFile
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
HeapSize
SetUnhandledExceptionFilter
TerminateProcess
GlobalUnlock
IsDBCSLeadByte
lstrcpynA
GetPrivateProfileStringA
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
GetWindowsDirectoryA
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetModuleFileNameA
lstrlenA
lstrcpyA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
InterlockedExchange
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
LCMapStringW
GetProcAddress
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
HeapReAlloc
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
ExitProcess
user32
DefWindowProcA
CharNextA
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
DestroyWindow
EqualRect
IntersectRect
ReleaseDC
GetDC
SetWindowLongA
wsprintfA
UnregisterClassA
OffsetRect
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetParent
SetFocus
ShowWindow
GetFocus
IsChild
BeginPaint
GetClientRect
EndPaint
InvalidateRect
IsWindow
GetKeyState
CallWindowProcA
GetWindowLongA
gdi32
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutA
CreateDCA
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegCreateKeyA
RegSetValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shell32
SHGetFileInfoA
ole32
StringFromGUID2
CLSIDFromString
CoTaskMemFree
StringFromCLSID
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
WriteClassStm
OleSaveToStream
CoCreateInstance
oleaut32
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
VariantInit
VariantClear
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
SysStringLen
SysAllocString
SysFreeString
shlwapi
PathFindExtensionA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=78, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, version=2179,
count=4, id=25, version=9210,
count=2, id=93, version=2067,
count=11, id=93, version=2179,
count=194, id=1, productName=Unmarked objects,
count=20, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
$WINDIR/KNetClient.dll
- IMPHASH 585f9f6afc83781d382390a6f564ed53
- SHA256 25dafcd096ad484d2675067163ed3f507a551253192347c900526e455708c090
- MD5 4b4c4e2253a1c26508c375f4629bfcf5
- SHA1 31b1896ef1d64022666b24a7acd6e2be44a83156
- SHA512 4c89e428739d5000a98ab3871f699d058b531657a0aa5705b6bdcab41bc97f0d9626fae3a89bb50b1df9266cb05c481e43244456536dd4e172b2ad2857b65278
- SSDEEP 1536:T6opNcLPuu8qmaqqfHxjoBxSV5JbsjcHs9kMnNOzt5t:ONLPaqmaqqfRdLEQt5t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
30778
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\CodeBase\KNetClient\KNetClient\KNetClient.pdb
ws2_32
WSACloseEvent
WSAGetLastError
WSARecvFrom
WSASendTo
socket
connect
send
select
recv
gethostname
getsockname
getpeername
inet_ntoa
gethostbyname
WSACleanup
WSAStartup
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAAccept
WSAConnect
htons
bind
listen
WSACreateEvent
WSAEventSelect
WSARecv
WSASend
WSASocketA
closesocket
iphlpapi
GetAdaptersInfo
kernel32
GetProcAddress
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
CloseHandle
TerminateThread
WaitForSingleObject
GetLastError
Sleep
CreateEventA
HeapFree
HeapAlloc
GetProcessHeap
GetCPInfo
GetSystemTimeAsFileTime
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitThread
GetCurrentThreadId
CreateThread
HeapReAlloc
GetCommandLineA
GetVersionExA
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
user32
wvsprintfA
KCleanSocket
KCreateClientTcp
KCreateClientUdp
KDns2UL
KGetLocalIPs
KGetLocalMacs
KGetSkName
KGetSkPeer
KInitSocket
KUL2A
Name
.text
Size
64KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=125, productName=VS2005 build 50727, version=50727,
count=99, id=109, productName=VS2005 build 50727, version=50727,
count=123, id=1, productName=Unmarked objects,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=49, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$WINDIR/KTxtLog.dll
- IMPHASH de6eff14577b79e427b9f449e65fd5fb
- SHA256 2e3c095da0ce73e5ef3b83584801e8306b8605a572a6b6610bc34e9c26ce8b4a
- MD5 b77bfed0ebc5db971e2a8641aa86bb58
- SHA1 441285407e0e509b56492ffba64adffd2c5706aa
- SHA512 1ccb5025ea12a39d87839ed2ee55fdb475d27b0bf94c96e4c291bcb0510c2ff34906c7701415f67ef61041521094be07143761369502dc70ad5c085683700cd6
- SSDEEP 768:aoYlPwLqu1Zi13uXjmuGJspcdpuZ2PgeRKEJjZjOtV5/N:aoYupi13uy+SdpuZmjpktv/N
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
6568
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\CodeBase\Log\KLog\KTxtLog.pdb
kernel32
GetStdHandle
SetEndOfFile
SetFilePointer
GetLastError
CreateFileA
GetLocalTime
FlushFileBuffers
CloseHandle
WriteFile
OutputDebugStringA
GetSystemTime
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
MultiByteToWideChar
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
user32
wsprintfA
CloseKLog
FlushKLog
InitKLog
KLogBinary
KLogString
SetKLogExt
SetKLogRunning
Name
.text
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
648B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=125, productName=VS2005 build 50727, version=50727,
count=72, id=109, productName=VS2005 build 50727, version=50727,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=85, id=1, productName=Unmarked objects,
count=35, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$WINDIR/forcetv.dll
- IMPHASH 95bcfd97945610a41a284667a6377e10
- SHA256 4084e5778b20d69c81e8408e36e50d2258b0140e756fca05f37f055917c4f68b
- MD5 648d0b9a057aad40da0ec1a57f79339c
- SHA1 fd3de21a41da3cb8751e353b366faf92e349a75f
- SHA512 e278d601e92d611aedf0046f20ab156021fe9d0572247563e7c559ee5fead0a5c4526d97ef21825ee8e19f0b4923c53bfddcc86671eca6dec61f7f97c4c261e9
- SSDEEP 6144:GDxEu/h7cN87Ic3cTYFYD+rTzrWoejax5yFBtCN9+5YV6HXtIPuDhqtWhoAaI2D6:axEu/h7cGS1yxDWZSjUj/t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
224440
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
f:\myprogram\gd\media\mediaplay\mediaplay\Release\mediaplay.pdb
comctl32
_TrackMouseEvent
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
GlobalLock
GlobalAlloc
lstrcpynA
IsDBCSLeadByte
SetLastError
Sleep
FlushInstructionCache
GetCurrentProcess
HeapAlloc
lstrcmpA
GetCurrentThreadId
GlobalAddAtomA
GlobalFree
GlobalHandle
LocalFree
FlushFileBuffers
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetCPInfo
GetOEMCP
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
GetProcAddress
IsBadWritePtr
VirtualFree
HeapCreate
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
SetEndOfFile
WriteFile
CreateFileA
ReadFile
GetFileSize
GetSystemDirectoryA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
EnterCriticalSection
LeaveCriticalSection
GetLastError
lstrcpyA
lstrlenA
GetModuleFileNameA
lstrcatA
InterlockedIncrement
InterlockedDecrement
SizeofResource
LockResource
LoadResource
GlobalUnlock
MulDiv
GetModuleHandleA
lstrcmpiA
GetProcessHeap
HeapFree
FindResourceExA
FindResourceA
user32
SetWindowsHookExA
LoadImageA
wsprintfA
CreateAcceleratorTableA
UnregisterClassA
SetWindowLongA
SetWindowContextHelpId
MapDialogRect
UnionRect
GetWindowLongA
CreateWindowExA
DestroyWindow
SetWindowTextA
MoveWindow
SetWindowPos
GetWindowRect
GetClientRect
GetDC
ReleaseDC
ShowWindow
IsWindowVisible
SetWindowRgn
EnableWindow
SetParent
IsWindow
SendMessageA
GetSystemMetrics
DefWindowProcA
GetWindowTextA
GetWindowTextLengthA
EqualRect
IntersectRect
GetKeyState
GetForegroundWindow
RegisterHotKey
LoadMenuA
CreateDialogIndirectParamA
mouse_event
GetWindowThreadProcessId
TrackPopupMenu
ModifyMenuA
GetSubMenu
DestroyMenu
UnregisterHotKey
UnhookWindowsHookEx
MessageBoxA
SetTimer
OffsetRect
RegisterClassExA
LoadCursorA
GetClassInfoExA
RegisterWindowMessageA
GetSysColor
CallWindowProcA
InvalidateRect
GetClassNameA
RedrawWindow
SetFocus
GetFocus
IsChild
GetWindow
DestroyAcceleratorTable
GetDesktopWindow
InvalidateRgn
GetDlgItem
SetCapture
TrackMouseEvent
GetCursorPos
ScreenToClient
ReleaseCapture
PostMessageA
CallNextHookEx
SendDlgItemMessageA
BeginPaint
EndPaint
EndDialog
FillRect
KillTimer
CharNextA
GetParent
DrawTextA
ClientToScreen
PtInRect
gdi32
GetDIBits
SetDIBitsToDevice
CreateRectRgnIndirect
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
SetTextAlign
TextOutA
GetStockObject
GetObjectA
CreateSolidBrush
SetTextColor
SetBkMode
CreateCompatibleBitmap
GetDeviceCaps
CreateFontA
BitBlt
CreateCompatibleDC
SelectObject
StretchBlt
DeleteDC
DeleteObject
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
shell32
ShellExecuteA
SHGetFileInfoA
ole32
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CreateDataAdviseHolder
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemAlloc
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
StringFromCLSID
CoTaskMemFree
CoCreateInstance
StringFromGUID2
OleLoadFromStream
WriteClassStm
OleSaveToStream
CLSIDFromString
oleaut32
VariantChangeType
GetErrorInfo
OleCreatePropertyFrame
LoadRegTypeLi
OleCreateFontIndirect
VariantInit
DispCallFunc
VariantClear
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
shlwapi
PathFindExtensionA
wininet
FtpGetFileSize
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
InternetCanonicalizeUrlA
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
264KB
Virtual Size
263KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=28, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=133, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, version=2179,
count=2, id=93, version=2067,
count=14, id=93, version=2179,
count=7, id=25, version=9210,
count=299, id=1, productName=Unmarked objects,
count=45, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
$WINDIR/p2pgrid.dll
- IMPHASH 74b2b24fef1743a7ac72e7ce84142afd
- SHA256 04d1b37663866f978263160a7832420baddd9ef8dc744b752cd1aa86df97a2eb
- MD5 763fa0de5b89845acf97dd3a2d817adf
- SHA1 2df5ac00e01c671579b33801a220a9e41b2bf67c
- SHA512 75f705982d523987b481cda2a72a08eae2b9269a01ee57c0f49848e82a244af3bf24642c8e51ac93d29d38c2582359fe026ce5dff5e694b66477c03a5e712cd9
- SSDEEP 24576:/3bmVFSF37fsavC4TvfVHk5OxiKPDTCRTJxvqMo:/3bJfswCAvfVHk5OxYTZ
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
408769
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
n:\ktl\ppvn\src_v2\p2pgrid\p2pgrid.pdb
kernel32
CreateMutexA
GetCurrentProcessId
InterlockedExchange
CompareStringA
CompareStringW
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoW
GetTimeZoneInformation
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
IsValidCodePage
GetOEMCP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
ExitProcess
GlobalLock
GlobalUnlock
MulDiv
GetCurrentProcess
FlushInstructionCache
FindResourceExA
LockResource
GetThreadLocale
SetThreadLocale
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
SetLastError
InterlockedIncrement
IsDBCSLeadByte
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
HeapCreate
CreateThread
ExitThread
GetSystemTimeAsFileTime
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
InterlockedCompareExchange
GetVersionExA
GetLocaleInfoA
GetACP
GetLogicalDrives
GetDriveTypeA
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetTempFileNameA
GetTempPathA
FlushFileBuffers
SetFilePointer
WaitForSingleObject
TerminateThread
Sleep
CreateDirectoryA
GetFileSize
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
ReadFile
WriteFile
SetEndOfFile
GetLocalTime
OutputDebugStringA
FindFirstFileA
GetSystemTime
CreateFileA
GetFileTime
FileTimeToSystemTime
DeleteFileA
FindNextFileA
FindClose
GetCurrentThreadId
CloseHandle
InterlockedDecrement
GlobalAlloc
GetProcAddress
HeapAlloc
GetProcessHeap
GetTickCount
HeapFree
user32
DestroyWindow
DefWindowProcA
PtInRect
UnionRect
SetWindowLongA
GetWindowLongA
CharNextA
GetClassInfoExA
LoadCursorA
ReleaseDC
GetDC
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
EndPaint
ShowWindow
CreateWindowExA
wsprintfA
MessageBoxA
UnregisterClassA
GetParent
SetFocus
GetFocus
IsChild
RegisterClassExA
InvalidateRect
IsWindow
GetKeyState
CallWindowProcA
BeginPaint
GetClientRect
gdi32
SetMapMode
LPtoDP
SetViewportOrgEx
DeleteDC
CreateDCA
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetDeviceCaps
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutA
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
shell32
SHGetFileInfoA
ole32
CoTaskMemFree
StringFromGUID2
CLSIDFromString
StringFromCLSID
OleLoadFromStream
OleRegEnumVerbs
CoTaskMemRealloc
OleRegGetMiscStatus
CreateDataAdviseHolder
CreateOleAdviseHolder
WriteClassStm
OleSaveToStream
CoTaskMemAlloc
OleRegGetUserType
CoCreateInstance
oleaut32
OleCreatePropertyFrame
GetErrorInfo
VariantChangeType
VariantCopy
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen
LoadRegTypeLi
shlwapi
PathIsDirectoryA
PathFileExistsA
ktxtlog
KLogString
KLogBinary
CloseKLog
InitKLog
knetclient
KCreateClientUdp
KGetSkName
KGetLocalIPs
KCreateClientTcp
KUL2A
KDns2UL
KInitSocket
kcharutil
BinaryToHex
KCRCFullByte
HexToBinary
ws2_32
ntohl
ntohs
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
584KB
Virtual Size
580KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
36KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=123, productName=VS2005 build 50727, version=50727,
count=3, id=126, version=50327,
count=29, id=125, productName=VS2005 build 50727, version=50727,
count=4, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=146, id=109, productName=VS2005 build 50727, version=50727,
count=253, id=1, productName=Unmarked objects,
count=19, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=94, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
$WINDIR/realmediaSDK.reg
- SHA256 060984c52e8bf4f216060866e534a52e1f049d39a433bf156955a47ac273b607
- MD5 4800e990c36781af2df7e21d53d703ae
- SHA1 7294f56972f50ce3e123253da557b93ef3ee4fee
- SHA512 e6971b4e18bded52b9fa5021c51630923085b22af0ba366e9bdb74e68d31f3833c66653655a8c79a230b0dfdc8f96e21960f23a784ebadf2eee5d1dbe3b54a34
- SSDEEP 96:NeK2yryHy9y4o4y4AL/zq2y2Wt1Oi++v+yyon1YxcyOyBC3Rf6opO/YY6iF1R14:NWS8ZCQMIbDO
- MD5 SHA1 SHA512 SSDEEP
ConfigUpdate.ini
- SHA256 0e119e9acd86236353961de3794cecaec4623c0aac3102069282cdc3da2186b2
- MD5 4f6f9ebe814a7d8b7d9cab6d19d540e9
- SHA1 40804dff3fd65e304ae6bc857b7137efc4157e0d
- SHA512 1a2cbcea8143b80fef4a2cf91990ebf65e17149c1ea9910eeeca65d368a6a31677d5a117f00742d998418d02d74c9112eb71aed0cbacee9708afcd4f2b1fcc7c
- MD5 SHA1 SHA512
Modules/Dopool/LiveClientPlatform.exe
- IMPHASH 059d53774a2759557f5e6cbb3953d3cd
- SHA256 c446e997edf239fd6d32a7cb74b1d1c6899bb1cb084d66182d0180796d5fb6b7
- MD5 5eb4ed341b20bed78e2bf65290ea3203
- SHA1 f6578468d49c2cd57e6e051ad0c85edb209ea114
- SHA512 5bbd5745289f0589399d0a6f651b600cb0ca9a43d5f8d1b2a9f95cb9257972dffb0cd8c36b60af175c384cc6a3406028575af0e344684f127701141ad0fba09d
- SSDEEP 12288:Dv1CVRJSi3jNGnQG4mmTTyWWWWWWWWWWWWWWWW:BMpMQGsTT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
58:b3:5a:9a:fa:2e:b6:bb:51:92:5b:e9:73:58:d9:fa:b2:10:24:60
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
161353
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
e:\Develop\VC.NETProject\DopLiveSystem\LiveClientPlatform\Release\LiveClientPlatform.pdb
kernel32
CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
ExitThread
HeapSize
GetACP
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
GetThreadLocale
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
WritePrivateProfileStringA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SuspendThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
CreateEventA
ReleaseMutex
CreateMutexA
SetLastError
CreateThread
GetVersionExA
lstrlenA
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
InterlockedExchange
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCommandLineA
CreateFileMappingA
CloseHandle
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
GetExitCodeThread
TerminateThread
SetEvent
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
user32
GrayStringA
DrawTextExA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
SystemParametersInfoA
DestroyMenu
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
ValidateRect
PeekMessageA
TranslateMessage
DispatchMessageA
GetCursorPos
UnregisterClassA
SetForegroundWindow
ClientToScreen
EndPaint
BeginPaint
GetClassInfoA
ReleaseDC
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
SetCursor
LoadCursorA
GetSysColorBrush
RegisterClassExA
RedrawWindow
GetDC
SetWindowRgn
PostMessageA
DrawTextA
LoadBitmapA
CopyRect
SetRect
EnableWindow
GetSystemMetrics
LoadIconA
KillTimer
SetTimer
GetClientRect
IsIconic
SendMessageA
DrawIcon
gdi32
DeleteDC
ScaleWindowExtEx
DPtoLP
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
CreateFontIndirectA
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
CreateBitmap
GetDeviceCaps
CreateRectRgn
CombineRgn
DeleteObject
GetStockObject
GetPixel
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetSecurityDescriptorSacl
RegQueryValueExA
RegOpenKeyA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorSacl
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
winmm
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeKillEvent
timeGetTime
ws2_32
accept
recv
send
sendto
listen
getsockname
bind
select
inet_ntoa
htonl
gethostbyname
socket
recvfrom
closesocket
ntohs
connect
__WSAFDIsSet
inet_addr
htons
WSACleanup
WSAStartup
Name
.text
Size
224KB
Virtual Size
222KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=554, id=1, productName=Unmarked objects,
count=27, id=125, productName=VS2005 build 50727, version=50727,
count=138, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=153, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/Dopool/LiveClientPlugIn.dll
- IMPHASH 9cba61a10c778508f701dc80c31e386c
- SHA256 cc75a01a984659551145551094b47d4eeba478ef2de322d7dc166d7eeba01201
- MD5 a75fff9a0a1116415e9c749ebc064358
- SHA1 c8ed80a8e5b70e808118bcf432751be9e6ff56e4
- SHA512 11296cfa7f08f0f098d9afda5dcc21fe09b4e0f5d3bfa3f1084ff0606ca3ef7736e358e1986bd1d2e0c883c3da3d89f15393b13853879c1ce47872f830e73092
- SSDEEP 6144:OmXSfmCF+HPb7KcyxqBEi5tDFyXObfm1ujh1RjbptpDQ:OBGS0tDiObfm1u
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
68:e0:c2:66:00:10:f9:e1:dd:45:0d:a5:6c:12:e3:41:b5:37:44:01
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
146952
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Develop\VC.NETProject\DopLiveSystem\LiveClientPlugIn\Release\LiveClientPlugIn.pdb
kernel32
CreateFileA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFindAtomA
GetVersionExA
GlobalFlags
WritePrivateProfileStringA
GlobalGetAtomNameA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalDeleteAtom
ReleaseMutex
CreateMutexA
GetModuleFileNameW
GetProcAddress
WaitForSingleObject
FormatMessageA
LocalFree
CompareStringA
GetVersion
InterlockedExchange
GetThreadLocale
SetThreadLocale
GlobalHandle
GlobalFree
Sleep
GetModuleHandleA
LoadLibraryExA
GlobalLock
GlobalUnlock
lstrcmpA
GetCurrentThreadId
SetLastError
GlobalAlloc
GetCurrentProcess
FlushInstructionCache
LoadLibraryA
FreeLibrary
IsDBCSLeadByte
lstrcmpW
CreateProcessA
lstrcmpiA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
GetModuleFileNameA
lstrlenA
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSection
user32
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CopyAcceleratorTableA
IsDialogMessageA
UnionRect
PtInRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetNextDlgTabItem
EnumChildWindows
CreateDialogIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
RegisterClassExA
LoadCursorA
GetClassInfoExA
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
TranslateMessage
CallWindowProcA
LoadBitmapA
ReleaseCapture
GetClassNameA
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ScreenToClient
ClientToScreen
MoveWindow
GetKeyState
IsWindow
SetFocus
GetFocus
GetParent
SystemParametersInfoA
CreateWindowExA
MapDialogRect
DrawTextA
SetWindowContextHelpId
IsChild
GetWindow
SendDlgItemMessageA
ShowWindow
CharNextA
GetSystemMetrics
GetMessageA
CallNextHookEx
SetWindowsHookExA
SetCursor
GetSysColor
DefWindowProcA
DestroyWindow
GetDialogBaseUnits
GetDC
ReleaseDC
SendMessageA
GetDlgItem
SetDlgItemTextA
KillTimer
SetTimer
GetClientRect
SetWindowPos
GetWindowLongA
SetWindowLongA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageA
IsWindowVisible
GetActiveWindow
FillRect
DispatchMessageA
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
UnregisterClassA
GetSysColorBrush
DrawTextExA
DestroyMenu
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
IsIconic
GetWindowPlacement
GetDlgCtrlID
GetWindowRect
EndPaint
GrayStringA
TabbedTextOutA
gdi32
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
CreateBitmap
GetClipBox
SetViewportOrgEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteDC
RestoreDC
CreateDCA
GetObjectA
Rectangle
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject
SetTextColor
SetBkColor
SetBkMode
GetDeviceCaps
GetStockObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
OleSaveToStream
WriteClassStm
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CreateOleAdviseHolder
OleLoadFromStream
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
StringFromGUID2
StringFromCLSID
CoTaskMemFree
OleInitialize
oleaut32
OleCreatePropertyFrame
VariantChangeType
SysAllocStringByteLen
OleTranslateColor
OleCreateFontIndirect
SysStringByteLen
VariantClear
VariantInit
VarUI4FromStr
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SafeArrayCreate
SafeArrayPutElement
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
winmm
timeGetTime
rpcrt4
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
208KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
4KB
Virtual Size
576B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=25, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=555, id=1, productName=Unmarked objects,
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=126, id=110, productName=VS2005 build 50727, version=50727,
count=137, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/Dopool/dopvod.exe
- IMPHASH 9d0fb00508cbf33b1a71e65d968372b9
- SHA256 5df3583c8e24ee9f415c8b614c9e6c879e0cdbf4e4559f516597cc498fce1124
- MD5 e53cb4725c8af5c0d01681d1c117c805
- SHA1 e2e5f7372046d252c348be6cfd615142c7ee88a7
- SHA512 13f2a2ec9c95887c58a5168f14be79d691d9be485140e217bae5fc30e7d48e5996f210d275d5416feb33690396e2f167718f1712494aa6e066fef7e0e614df35
- SSDEEP 24576:larI+HRGtMtgz7Mjh+Q+9KzSbi8UxrlWbQEgakfHbF5l:larIwe2IM3+9KDRWSakfHbh
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
cc:e0:8a:7f:47:dd:19:13:ff:d1:76:85:bd:70:0c:bd:0e:40:05:d2
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
56310
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\Work\DopStream\NiHao\Release\NiHao.pdb
kernel32
CreateThread
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
SetEnvironmentVariableA
CreateDirectoryA
Sleep
UnmapViewOfFile
MapViewOfFile
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
TerminateProcess
ExitProcess
RtlUnwind
CloseHandle
GetTickCount
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
CreateEventW
PulseEvent
GetVersionExW
DeleteFileW
MoveFileExW
MoveFileW
GetFileAttributesW
CreateFileW
GetDiskFreeSpaceW
GetFileInformationByHandle
GetTempPathW
OpenFileMappingW
CreateFileMappingW
GetSystemTime
CreateMutexW
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
FormatMessageA
LocalFree
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
MulDiv
SetLastError
lstrcpynA
ReleaseMutex
SignalObjectAndWait
ResetEvent
FindNextFileW
FindFirstFileW
LockFileEx
CreateMutexA
GetDriveTypeA
InterlockedDecrement
WritePrivateProfileStringA
GlobalUnlock
GlobalFree
FreeResource
CreateEventA
SetEvent
WaitForSingleObject
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
GetEnvironmentVariableW
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileMappingA
GetLastError
SetStdHandle
user32
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
IsRectEmpty
CharNextA
ReleaseCapture
SetCapture
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
GetWindowPlacement
PtInRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
RegisterClipboardFormatA
PostThreadMessageA
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
SystemParametersInfoA
DestroyMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetClassInfoA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
GetCursorPos
SetForegroundWindow
ClientToScreen
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
SetCursor
LoadCursorA
GetSysColorBrush
RegisterClassExA
KillTimer
SetTimer
RedrawWindow
GetDC
SetWindowRgn
PostMessageA
DrawTextA
LoadBitmapA
CopyRect
SetRect
CharUpperA
EnableWindow
GetSystemMetrics
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon
gdi32
CreateRectRgnIndirect
GetMapMode
PtVisible
DPtoLP
GetBkColor
GetTextColor
GetDeviceCaps
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
GetRgnBox
BitBlt
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
CreateRectRgn
CombineRgn
DeleteObject
GetStockObject
GetPixel
CreateFontIndirectA
GetObjectA
CreateCompatibleDC
SelectObject
RectVisible
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
SetSecurityDescriptorSacl
RegSetValueExA
RegCreateKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
UrlUnescapeA
PathIsUNCA
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
VariantCopy
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
SysStringLen
winmm
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeKillEvent
timeGetTime
ws2_32
sendto
socket
closesocket
htonl
htons
recvfrom
select
setsockopt
listen
ntohl
accept
WSACloseEvent
send
connect
WSACreateEvent
inet_addr
inet_ntoa
gethostbyname
bind
getsockname
WSAStartup
recv
WSAGetLastError
gethostname
WSASetLastError
ntohs
ioctlsocket
WSASend
WSARecv
WSAEventSelect
WSACleanup
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
__WSAFDIsSet
wininet
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetSetOptionExA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetSetFilePointer
InternetConnectA
HttpOpenRequestA
Name
.text
Size
900KB
Virtual Size
899KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
84KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=23, id=93, version=2179,
count=685, id=1, productName=Unmarked objects,
count=31, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=388, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=139, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/Dopool/dopvodcom.dll
- IMPHASH aef71b39fd9c1ff7ecd8b2a78f03f535
- SHA256 721c7719cfd2c3e5597bdcffd3feda7031c0e0c035b91fae7508af18400a8720
- MD5 90208af14a580b412d98886ff5b17a02
- SHA1 96c4ceb204c30d85bbc5d7d00f9ceb8e97e27549
- SHA512 ca90e192863556c03b72388b10090b4836ecbdd4795bbf5954e4d188f7439be3cfe2cf735cf7adfad2b6507a0ba12605974da68a3dcf8e77e7cc6bc574686ee3
- SSDEEP 6144:maO7byGMXKhfN/4fg47ybp40KqBLA+kQlcTmHSsebrN5w3mCM6:maEbyGMXKTwfFWbjtpM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
92:67:70:10:c4:fd:a0:8c:aa:9d:9d:46:1a:b5:16:7a:c4:b2:ea:a8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
95862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\Work\DopStreamPlayer\dopvodcom\Release\dopvodcom.pdb
rpcrt4
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
kernel32
LocalReAlloc
TlsFree
SetErrorMode
WritePrivateProfileStringA
GlobalFlags
GlobalFindAtomA
GlobalGetAtomNameA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
TlsSetValue
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
GetCommandLineA
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
TlsAlloc
TlsGetValue
GlobalReAlloc
LocalAlloc
ReleaseMutex
CreateMutexA
FormatMessageA
LocalFree
GlobalAddAtomA
GetCurrentThread
GlobalDeleteAtom
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
GetVersion
CreateThread
Sleep
GetExitCodeThread
TerminateThread
GlobalHandle
GlobalFree
CreateEventA
CreateTimerQueueTimer
GetCurrentThreadId
CloseHandle
lstrcmpA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
GetCurrentProcess
FlushInstructionCache
SetLastError
lstrcmpW
WaitForSingleObject
DeleteTimerQueueTimer
LoadLibraryA
GetProcessHeap
HeapFree
ResetEvent
SetEvent
MulDiv
LockResource
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
lstrcatA
GetModuleFileNameA
lstrcpyA
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WinExec
user32
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
IsIconic
GetWindowPlacement
CopyRect
GetSystemMetrics
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
ClientToScreen
GetDlgCtrlID
GetClassLongA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
CharNextA
SetWindowLongA
GetWindowLongA
PostMessageA
SetWindowTextA
SetWindowPos
GetClientRect
GetDlgItem
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
PostQuitMessage
CreateDialogIndirectParamA
EnumChildWindows
ShowWindow
GetNextDlgTabItem
CopyAcceleratorTableA
GetCapture
WinHelpA
IsDialogMessageA
IntersectRect
GetWindowRect
DestroyMenu
GetDialogBaseUnits
ReleaseDC
GetDC
SendMessageA
UnregisterClassA
DefWindowProcA
DestroyWindow
GetSysColor
DrawTextA
SendDlgItemMessageA
SystemParametersInfoA
IsChild
GetFocus
SetFocus
GetWindow
IsWindow
GetKeyState
GetParent
ReleaseCapture
SetCapture
FillRect
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcA
EndPaint
BeginPaint
DestroyAcceleratorTable
RedrawWindow
GetClassNameA
wsprintfA
EqualRect
OffsetRect
SetWindowRgn
UnionRect
PtInRect
MapDialogRect
SetWindowContextHelpId
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
CreateAcceleratorTableA
gdi32
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
Rectangle
SetTextColor
SetBkMode
GetStockObject
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateBitmap
CreateRectRgnIndirect
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
SetBkColor
CreateDCA
LPtoDP
SaveDC
SetMapMode
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
comctl32
ord17
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
WriteClassStm
OleSaveToStream
OleLockRunning
oleaut32
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantClear
VariantInit
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
VariantChangeType
SysAllocStringByteLen
OleCreatePropertyFrame
OleTranslateColor
BSTR_UserFree
ws2_32
htonl
htons
bind
socket
accept
recv
send
closesocket
listen
winmm
timeGetTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
168KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
4KB
Virtual Size
51B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=7, id=95, version=2179,
count=21, id=93, version=2179,
count=554, id=1, productName=Unmarked objects,
count=29, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=80, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=133, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/Dopstreamer/DopVodCom.dll
- IMPHASH aef71b39fd9c1ff7ecd8b2a78f03f535
- SHA256 f41d90d1b2026486f37df05cedc1410345a34ce9e5c8ada9a1a40271bb982a26
- MD5 942ae0be31eefab9c916209528de3c6f
- SHA1 43c5787d7aeac7b60516b84c21b9b51fcf739b0c
- SHA512 5f8b35f76e8d1b49a1bfea923843574f1aa2767158f38cce3823994cdcba25853a0360d9a60966e409507c011828658a74b5980a278a0542bd4acbc4d9ac7ab7
- SSDEEP 6144:aaw7byGMXKhfN/4fg47ybp4NeqO5A+kQlcTmHSsebrN5wbmCMN:aa2byGMXKTwfFWbZppM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5f:c8:e3:84:2a:86:3c:04:4f:a9:34:94:6f:0d:f4:c8:c8:a1:5f:4a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
95862
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\Work\DopStreamPlayer\dopvodcom\Release\dopvodcom.pdb
rpcrt4
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrStubForwardingFunction
NdrStubCall2
kernel32
LocalReAlloc
TlsFree
SetErrorMode
WritePrivateProfileStringA
GlobalFlags
GlobalFindAtomA
GlobalGetAtomNameA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCPInfo
GetOEMCP
TlsSetValue
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
HeapReAlloc
GetCommandLineA
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
TlsAlloc
TlsGetValue
GlobalReAlloc
LocalAlloc
ReleaseMutex
CreateMutexA
FormatMessageA
LocalFree
GlobalAddAtomA
GetCurrentThread
GlobalDeleteAtom
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
GetVersion
CreateThread
Sleep
GetExitCodeThread
TerminateThread
GlobalHandle
GlobalFree
CreateEventA
CreateTimerQueueTimer
GetCurrentThreadId
CloseHandle
lstrcmpA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
GetCurrentProcess
FlushInstructionCache
SetLastError
lstrcmpW
WaitForSingleObject
DeleteTimerQueueTimer
LoadLibraryA
GetProcessHeap
HeapFree
ResetEvent
SetEvent
MulDiv
LockResource
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
lstrcatA
GetModuleFileNameA
lstrcpyA
lstrcpynA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
WinExec
user32
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
IsIconic
GetWindowPlacement
CopyRect
GetSystemMetrics
GetSysColorBrush
GrayStringA
DrawTextExA
TabbedTextOutA
ClientToScreen
GetDlgCtrlID
GetClassLongA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
CharNextA
SetWindowLongA
GetWindowLongA
PostMessageA
SetWindowTextA
SetWindowPos
GetClientRect
GetDlgItem
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
PostQuitMessage
CreateDialogIndirectParamA
EnumChildWindows
ShowWindow
GetNextDlgTabItem
CopyAcceleratorTableA
GetCapture
WinHelpA
IsDialogMessageA
IntersectRect
GetWindowRect
DestroyMenu
GetDialogBaseUnits
ReleaseDC
GetDC
SendMessageA
UnregisterClassA
DefWindowProcA
DestroyWindow
GetSysColor
DrawTextA
SendDlgItemMessageA
SystemParametersInfoA
IsChild
GetFocus
SetFocus
GetWindow
IsWindow
GetKeyState
GetParent
ReleaseCapture
SetCapture
FillRect
InvalidateRect
InvalidateRgn
GetDesktopWindow
CallWindowProcA
EndPaint
BeginPaint
DestroyAcceleratorTable
RedrawWindow
GetClassNameA
wsprintfA
EqualRect
OffsetRect
SetWindowRgn
UnionRect
PtInRect
MapDialogRect
SetWindowContextHelpId
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
GetClassInfoExA
LoadCursorA
RegisterClassExA
CreateWindowExA
CreateAcceleratorTableA
gdi32
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
RestoreDC
Rectangle
SetTextColor
SetBkMode
GetStockObject
GetDeviceCaps
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetClipBox
CreateBitmap
CreateRectRgnIndirect
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectA
SetBkColor
CreateDCA
LPtoDP
SaveDC
SetMapMode
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegEnumKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegDeleteKeyA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
comctl32
ord17
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
OleInitialize
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
OleRegEnumVerbs
OleRegGetUserType
CreateOleAdviseHolder
OleRegGetMiscStatus
OleLoadFromStream
WriteClassStm
OleSaveToStream
OleLockRunning
oleaut32
BSTR_UserUnmarshal
BSTR_UserMarshal
BSTR_UserSize
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantClear
VariantInit
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
VariantChangeType
SysAllocStringByteLen
OleCreatePropertyFrame
OleTranslateColor
BSTR_UserFree
ws2_32
htonl
htons
bind
socket
accept
recv
send
closesocket
listen
winmm
timeGetTime
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
168KB
Virtual Size
166KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
4KB
Virtual Size
51B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=7, id=95, version=2179,
count=21, id=93, version=2179,
count=554, id=1, productName=Unmarked objects,
count=29, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=80, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=133, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/Dopstreamer/LiveClientPlatform.exe
- IMPHASH 059d53774a2759557f5e6cbb3953d3cd
- SHA256 0e6f00a521ca8ffdb3add97d66c499ea10bfafa499a5dd185096563ae7b7cca4
- MD5 518337e53bc59112197660fdaac16185
- SHA1 19dd3462b8cb995101bdf5cfe3ff77de37c1863a
- SHA512 d1139a45bf534febd9ea4bd7740ef06db050a5febeaa029f252d27cf794a68e2371e68a08fdc0f3239bbb07e5a92f6001beef991c280f040828ed4c81bf861d7
- SSDEEP 12288:gTIqwv06aneLW3vbdQoUmT9WWWWWWWWWWWWWWWWW:gZllfbdQaT9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
35:ef:9d:be:1b:c9:85:e3:d6:99:f7:4e:a7:8f:e2:b0:d2:90:a8:dd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
160905
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
e:\Develop\VC.NETProject\DopLiveSystem\LiveClientPlatform\Release\LiveClientPlatform.pdb
kernel32
CreateFileA
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
ExitProcess
HeapAlloc
HeapFree
HeapReAlloc
VirtualAlloc
GetProcessHeap
GetStartupInfoA
GetSystemTimeAsFileTime
ExitThread
HeapSize
GetACP
GetStdHandle
VirtualFree
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
GetThreadLocale
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
InterlockedDecrement
GetModuleFileNameW
WritePrivateProfileStringA
FreeResource
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
GetModuleFileNameA
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
lstrcmpA
FreeLibrary
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SuspendThread
GetCurrentThreadId
ResumeThread
SetThreadPriority
CreateEventA
ReleaseMutex
CreateMutexA
SetLastError
CreateThread
GetVersionExA
lstrlenA
CompareStringA
GetVersion
GetLastError
MultiByteToWideChar
InterlockedExchange
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetCommandLineA
CreateFileMappingA
CloseHandle
Sleep
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
WaitForSingleObject
GetExitCodeThread
TerminateThread
SetEvent
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
user32
GrayStringA
DrawTextExA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
GetWindowPlacement
GetWindow
UnhookWindowsHookEx
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
SystemParametersInfoA
DestroyMenu
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
ValidateRect
PeekMessageA
TranslateMessage
DispatchMessageA
GetCursorPos
UnregisterClassA
SetForegroundWindow
ClientToScreen
EndPaint
BeginPaint
GetClassInfoA
ReleaseDC
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
SetCursor
LoadCursorA
GetSysColorBrush
RegisterClassExA
RedrawWindow
GetDC
SetWindowRgn
PostMessageA
DrawTextA
LoadBitmapA
CopyRect
SetRect
EnableWindow
GetSystemMetrics
LoadIconA
KillTimer
SetTimer
GetClientRect
IsIconic
SendMessageA
DrawIcon
gdi32
DeleteDC
ScaleWindowExtEx
DPtoLP
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
CreateFontIndirectA
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
CreateBitmap
GetDeviceCaps
CreateRectRgn
CombineRgn
DeleteObject
GetStockObject
GetPixel
BitBlt
SelectObject
CreateCompatibleDC
GetObjectA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetSecurityDescriptorSacl
RegQueryValueExA
RegOpenKeyA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
GetSecurityDescriptorSacl
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
winmm
timeSetEvent
timeGetDevCaps
timeBeginPeriod
timeKillEvent
timeGetTime
ws2_32
accept
recv
send
sendto
listen
getsockname
bind
select
inet_ntoa
htonl
gethostbyname
socket
recvfrom
closesocket
ntohs
connect
__WSAFDIsSet
inet_addr
htons
WSACleanup
WSAStartup
Name
.text
Size
224KB
Virtual Size
221KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
66KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
92KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=554, id=1, productName=Unmarked objects,
count=27, id=125, productName=VS2005 build 50727, version=50727,
count=138, id=109, productName=VS2005 build 50727, version=50727,
count=7, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=153, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/Dopstreamer/LiveClientPlugIn.dll
- IMPHASH 9cba61a10c778508f701dc80c31e386c
- SHA256 db9c3b90c20b7ce924419160cf114ea9c1c435d395e5e87d4d21d0c67de9dbf9
- MD5 1ed7c73ee85a94ed0090066c50f3dfd7
- SHA1 fd8608b33ea8979554f79750fca5b95a3c1affd6
- SHA512 5739c58f3d99e0c26fb88051f53afb81366c2aa69936cf6cc3a48b37b40d23ed8a8901d51139a6b1d7fe3ac88823504371524640635ad1ea9c3da1c473f49adb
- SSDEEP 6144:mgnwlRyfR83rgmkK95bhskGoy3+s2MWtZnjbpqdnAVn:mrmkGZ+s2MW4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
74:b3:ec:b7:86:f8:b4:09:4d:9b:fd:0f:81:2d:5f:ca:01:a6:cf:3b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
146968
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\Develop\VC.NETProject\DopLiveSystem\LiveClientPlugIn\Release\LiveClientPlugIn.pdb
kernel32
CreateFileA
GetCPInfo
GetOEMCP
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFindAtomA
GetVersionExA
GlobalFlags
WritePrivateProfileStringA
GlobalGetAtomNameA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
LocalAlloc
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalDeleteAtom
ReleaseMutex
CreateMutexA
GetModuleFileNameW
GetProcAddress
WaitForSingleObject
FormatMessageA
LocalFree
CompareStringA
GetVersion
InterlockedExchange
GetThreadLocale
SetThreadLocale
GlobalHandle
GlobalFree
Sleep
GetModuleHandleA
LoadLibraryExA
GlobalLock
GlobalUnlock
lstrcmpA
GetCurrentThreadId
SetLastError
GlobalAlloc
GetCurrentProcess
FlushInstructionCache
LoadLibraryA
FreeLibrary
IsDBCSLeadByte
lstrcmpW
CreateProcessA
lstrcmpiA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
MulDiv
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
GetModuleFileNameA
lstrlenA
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSection
user32
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
CopyAcceleratorTableA
IsDialogMessageA
UnionRect
PtInRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetNextDlgTabItem
EnumChildWindows
CreateDialogIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
RegisterClassExA
LoadCursorA
GetClassInfoExA
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
TranslateMessage
CallWindowProcA
LoadBitmapA
ReleaseCapture
GetClassNameA
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ScreenToClient
ClientToScreen
MoveWindow
GetKeyState
IsWindow
SetFocus
GetFocus
GetParent
SystemParametersInfoA
CreateWindowExA
MapDialogRect
DrawTextA
SetWindowContextHelpId
IsChild
GetWindow
SendDlgItemMessageA
ShowWindow
CharNextA
GetSystemMetrics
GetMessageA
CallNextHookEx
SetWindowsHookExA
SetCursor
GetSysColor
DefWindowProcA
DestroyWindow
GetDialogBaseUnits
GetDC
ReleaseDC
SendMessageA
GetDlgItem
SetDlgItemTextA
KillTimer
SetTimer
GetClientRect
SetWindowPos
GetWindowLongA
SetWindowLongA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
GetCursorPos
PeekMessageA
IsWindowVisible
GetActiveWindow
FillRect
DispatchMessageA
MessageBoxA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowThreadProcessId
UnregisterClassA
GetSysColorBrush
DrawTextExA
DestroyMenu
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
IsIconic
GetWindowPlacement
GetDlgCtrlID
GetWindowRect
EndPaint
GrayStringA
TabbedTextOutA
gdi32
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
CreateBitmap
GetClipBox
SetViewportOrgEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
DeleteDC
RestoreDC
CreateDCA
GetObjectA
Rectangle
CreateFontIndirectA
SelectObject
GetTextMetricsA
GetTextExtentPointA
DeleteObject
SetTextColor
SetBkColor
SetBkMode
GetDeviceCaps
GetStockObject
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shlwapi
PathFindExtensionA
PathFindFileNameA
ole32
OleSaveToStream
WriteClassStm
CreateDataAdviseHolder
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CreateOleAdviseHolder
OleLoadFromStream
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleLockRunning
CoTaskMemRealloc
CoTaskMemAlloc
CLSIDFromString
CoCreateInstance
StringFromGUID2
StringFromCLSID
CoTaskMemFree
OleInitialize
oleaut32
OleCreatePropertyFrame
VariantChangeType
SysAllocStringByteLen
OleTranslateColor
OleCreateFontIndirect
SysStringByteLen
VariantClear
VariantInit
VarUI4FromStr
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserUnmarshal
BSTR_UserFree
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
LoadRegTypeLi
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SafeArrayCreate
SafeArrayPutElement
SysAllocStringLen
SysStringLen
SysAllocString
SysFreeString
winmm
timeGetTime
rpcrt4
NdrStubForwardingFunction
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer2_Release
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrStubCall2
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
208KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.orpc
Size
4KB
Virtual Size
576B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
60KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=25, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=555, id=1, productName=Unmarked objects,
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=126, id=110, productName=VS2005 build 50727, version=50727,
count=137, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/Dopstreamer/dbghelp.dll
- SHA256 d7e83c7f59c311425237dec3ef3bef7a56b7242efb5459ce869f5bf339ce2828
- MD5 e0808f9e9121e7b81ea690ab4f5f0e3f
- SHA1 b17fbfafe9f41d98982bded0c1bfe8c9985514e3
- SHA512 bacd1a4751c6ec25756d5fe732e479cb3c3f9b24faacdc3c7d8451f0e151ba0d044f51ffc45894ac14c5536578c4c50a150f560a4aa85ae045e30e4f99d7f6ae
- SSDEEP 12288:g0BSfTnCPjjcLctBHcKPEGCR38w4HPWpeFAdiGxoY6oly:g0BynWjjcLqB8KPEGCR38w4HPWW6oY63
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
659457
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
dbghelp.pdb
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumerateLoadedModules
EnumerateLoadedModules64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
StackWalk
StackWalk64
SymCleanup
SymEnumSourceFiles
SymEnumSym
SymEnumSymbols
SymEnumTypes
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetTypeFromName
SymGetTypeInfo
SymInitialize
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymMatchFileName
SymMatchString
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetContext
SymSetOptions
SymSetSearchPath
SymSetSymWithAddr64
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnmapDebugInformation
WinDbgExtensionDllInit
dbghelp
dh
lm
lmi
omap
srcfiles
sym
vc7fpo
Name
.text
Size
569KB
Virtual Size
572KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
2KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=46, id=96, version=4031,
count=2, id=95, version=4031,
count=215, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=7, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=31, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Modules/Dopstreamer/dopvod.exe
- IMPHASH 3b1306f68c59909df3c8689d5b33ac1b
- SHA256 d229f353ad3b2c3a7ed531291e2f0b6a00075800504056e59abd07c5828c4d3d
- MD5 87e955299a2da0379025e356ec1cb1b1
- SHA1 53f2d68cc113260910af1eb6e34cc5ccf239db7b
- SHA512 96498b943e4b3b09ce124ac243060fa3fb6e9579e6678a224c67315b12f7b2c4851c20f68dd58fb5d33a0dab057a0042b9e153ce8787796e8d0e46fb7d2b2fa7
- SSDEEP 24576:CnfxXrRaZblA8MmdZMGMybeGPjmzCuKNJKbUGM28qJWL8pK:Cnfx9CbK+MaeGBCbhQqJWLn
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a6:82:9f:74:b0:f6:23:b1:57:07:3a:1b:70:05:2a:a1:f9:0d:ab:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Serial Number
42:ce:8a:30:d3:56:02:f8:41:18:6c:6e:20:53:19:04
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Apr 25, 2007 - Jul 9, 2019
Subject
CN=北京闪动科技有限公司,OU=Class 3 - for Microsoft Authenticode Signing,O=北京闪动科技有限公司,L=北京市,ST=北京市,C=CN
Serial Number
a8:cd:6d:a9:2b:db:a6:6f:03:db:2e:c0:c2:0a:70:e0
Issuer
CN=WoSign Code Signing Authority,O=WoSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jul 3, 2007 - Jul 2, 2008
Minor OS version
0
Major OS version
4
Entry point
56422
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
d:\Work\DopStream\NiHao\Release\NiHao.pdb
kernel32
GetCommandLineA
CreateThread
HeapReAlloc
HeapSize
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
SetEnvironmentVariableA
CreateDirectoryA
Sleep
UnmapViewOfFile
MapViewOfFile
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
TerminateProcess
ExitProcess
RtlUnwind
CloseHandle
GetTickCount
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateEventW
PulseEvent
GetVersionExW
DeleteFileW
MoveFileExW
MoveFileW
GetFileAttributesW
CreateFileW
GetDiskFreeSpaceW
GetFileInformationByHandle
GetTempPathW
OpenFileMappingW
CreateFileMappingW
GetSystemTime
CreateMutexW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GlobalFlags
InterlockedIncrement
GetCurrentDirectoryA
FormatMessageA
LocalFree
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
MulDiv
SetLastError
lstrcpynA
InterlockedDecrement
WritePrivateProfileStringA
ReleaseMutex
SignalObjectAndWait
ResetEvent
FindNextFileW
FindFirstFileW
LockFileEx
CreateMutexA
GetDriveTypeA
GlobalUnlock
GlobalFree
FreeResource
CreateEventA
SetEvent
WaitForSingleObject
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetCurrentThread
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
GetEnvironmentVariableW
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetUnhandledExceptionFilter
CreateFileMappingA
GetLastError
CreateFileA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
SetStdHandle
user32
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
CopyAcceleratorTableA
IsRectEmpty
CharNextA
ReleaseCapture
SetCapture
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsChild
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
UpdateWindow
GetMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
EqualRect
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
OffsetRect
IntersectRect
GetWindowPlacement
PtInRect
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GrayStringA
DrawTextExA
TabbedTextOutA
GetWindowTextA
SetFocus
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
UnhookWindowsHookEx
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
RegisterClipboardFormatA
PostThreadMessageA
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetSysColor
SystemParametersInfoA
DestroyMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetClassInfoA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
GetCursorPos
SetForegroundWindow
ClientToScreen
LoadMenuA
GetSubMenu
SetMenuDefaultItem
FindWindowA
GetWindowRect
SetCursor
LoadCursorA
GetSysColorBrush
RegisterClassExA
KillTimer
SetTimer
RedrawWindow
GetDC
SetWindowRgn
PostMessageA
DrawTextA
LoadBitmapA
CopyRect
SetRect
CharUpperA
EnableWindow
GetSystemMetrics
LoadIconA
GetClientRect
IsIconic
SendMessageA
DrawIcon
gdi32
CreateRectRgnIndirect
GetMapMode
PtVisible
DPtoLP
GetBkColor
GetTextColor
GetDeviceCaps
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
GetRgnBox
BitBlt
GetWindowExtEx
GetViewportExtEx
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
CreateRectRgn
CombineRgn
DeleteObject
GetStockObject
GetPixel
CreateFontIndirectA
GetObjectA
CreateCompatibleDC
SelectObject
RectVisible
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
GetSecurityDescriptorSacl
ConvertStringSecurityDescriptorToSecurityDescriptorA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
SetSecurityDescriptorSacl
RegSetValueExA
RegCreateKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
UrlUnescapeA
PathIsUNCA
oledlg
ord8
ole32
CLSIDFromProgID
CLSIDFromString
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
VariantCopy
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysAllocStringByteLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
SysStringLen
winmm
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeKillEvent
timeGetTime
dbghelp
MiniDumpWriteDump
ws2_32
htonl
bind
getsockname
htons
sendto
socket
closesocket
recvfrom
recv
setsockopt
listen
ntohl
accept
WSACloseEvent
send
connect
__WSAFDIsSet
select
inet_addr
inet_ntoa
gethostbyname
WSAStartup
WSAGetLastError
gethostname
WSASetLastError
ntohs
ioctlsocket
WSASend
WSARecv
WSAEventSelect
WSACleanup
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSACreateEvent
wininet
InternetGetLastResponseInfoA
InternetCloseHandle
HttpQueryInfoA
HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetSetOptionExA
InternetCanonicalizeUrlA
InternetCrackUrlA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetOpenA
InternetConnectA
Name
.text
Size
900KB
Virtual Size
898KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
136KB
Virtual Size
134KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
84KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=10, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=25, id=93, version=2179,
count=686, id=1, productName=Unmarked objects,
count=31, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=388, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=139, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/MySee/Booter.ocx
- IMPHASH 4f387f0ae635f629f7391590578a355a
- SHA256 cd8578091cc93afa5a8c53d9477461a9ce1b679229d387f9fd40a977e5dbd557
- MD5 0b5b2a213a07e675ee37da1a75878fb1
- SHA1 737c7dff213f48e4508e439eb284bd8bfe20c657
- SHA512 af2eba46a70c9a7d3002b0ebe893a62371cb4535604f44a4725361c504384760d3d2d6db9a570743d828bbb9f86cd3ac23dad8e7284c8ec3139e6d0756e38ea5
- SSDEEP 3072:qjQRNeWMeR1zOk8H0eVcO7s0Ptd+Yj+tdKlSr:kQXR1zOXn7PVcJd5
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
57:64:6e:2b:55:00:23:d4:90:53:4a:55:3e:ab:0d:0a
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2009
Subject
CN=Beijing Gaov Info.Tech Co.\,LTD.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=B207 R&D Building\, Tsinghua Science Park Haidian District,O=Beijing Gaov Info.Tech Co.\,LTD.,L=Beijing,ST=Beijing,C=CN
Serial Number
29:c9:19:da:fc:60:d2:75:a8:fb:14:a6:d7:8b:12:1a
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 8, 2005 - Aug 8, 2006
Minor OS version
0
Major OS version
4
Entry point
54906
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\yangluo\mysee2\src.head\app\plugin\Booter\Release\app.plugin.booter.pdb
kernel32
Sleep
CreateFileA
GetSystemTime
GetTempPathA
CreateProcessA
GetSystemDirectoryA
HeapFree
GetProcessHeap
lstrcmpiA
GetModuleHandleA
lstrcpynA
IsDBCSLeadByte
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
CreateMutexA
CreateThread
FlushFileBuffers
FindResourceExA
SetStdHandle
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
LoadLibraryA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
FindResourceA
LoadResource
LockResource
SizeofResource
CreateSemaphoreA
OpenSemaphoreA
WaitForSingleObject
ReleaseSemaphore
WriteFile
GetFileSize
CloseHandle
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetModuleFileNameA
lstrlenA
InterlockedExchange
lstrcpyA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
QueryPerformanceCounter
RtlUnwind
TerminateProcess
GetProcAddress
VirtualFree
HeapCreate
GetCommandLineA
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapSize
HeapReAlloc
HeapDestroy
user32
ShowWindow
GetKeyState
IsChild
UnregisterClassA
PostMessageA
SetFocus
InvalidateRect
IsWindow
DestroyWindow
GetWindowLongA
CharNextA
PtInRect
UnionRect
SetWindowPos
SetWindowRgn
OffsetRect
EqualRect
IntersectRect
ReleaseDC
GetDC
CallWindowProcA
GetClassInfoExA
DefWindowProcA
RegisterClassExA
GetFocus
LoadCursorA
wsprintfA
CreateWindowExA
BeginPaint
GetClientRect
EndPaint
GetParent
SetWindowLongA
gdi32
CreateDCA
LPtoDP
SetMapMode
SetViewportOrgEx
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetClipRgn
CreateRectRgn
SelectClipRgn
Rectangle
SetTextAlign
TextOutA
DeleteObject
DeleteDC
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteValueA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shell32
SHGetFileInfoA
ole32
StringFromCLSID
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CoTaskMemAlloc
CoTaskMemFree
CreateOleAdviseHolder
OleLoadFromStream
WriteClassStm
OleSaveToStream
CreateDataAdviseHolder
CoCreateInstance
StringFromGUID2
oleaut32
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
VarUI4FromStr
VariantClear
VariantInit
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
SysStringLen
SetErrorInfo
CreateErrorInfo
SysFreeString
shlwapi
PathFindExtensionA
wininet
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFileExA
InternetCloseHandle
wintrust
WinVerifyTrust
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
80KB
Virtual Size
78KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=113, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, version=2179,
count=4, id=25, version=9210,
count=2, id=93, version=2067,
count=15, id=93, version=2179,
count=224, id=1, productName=Unmarked objects,
count=16, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/PPStream/PSNetwork.dll
- IMPHASH 9df42075d1961df48275e7885b07e77b
- SHA256 6db6e7bd4f7940ffd816f09e219ce1b246516580db70fef41508b0e1bdc8b82f
- MD5 5f9daf9021a52bf3ed959496bd28208b
- SHA1 a79174b0a44eac572bd8a586d5c1ce165c6098dd
- SHA512 1986d494619bd141a1ad5fbc5d040997a42446bf8ecd239b78659b60f76288836cd48f632d397a4a8127ef182ea2c7afc56830185406a5dd6bf335a5703f1b4c
- SSDEEP 12288:Irlv4E3GT/u5W57z0+Q6B2mMlTYEgj4pROZiwkQ/jNHtNR:wwE2T25W5BQ6PMlTYEgWiltNR
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
449187
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord2915
ord5572
ord4277
ord4278
ord2763
ord1228
ord6283
ord3721
ord3619
ord809
ord795
ord2614
ord556
ord3663
ord3626
ord2414
ord4275
ord5875
ord2864
ord1088
ord2122
ord1641
ord3797
ord6358
ord6197
ord2859
ord6880
ord926
ord2860
ord4129
ord5683
ord6663
ord4774
ord4402
ord3640
ord693
ord4243
ord3301
ord3910
ord6605
ord2754
ord6696
ord3293
ord6282
ord538
ord6569
ord1085
ord5601
ord802
ord542
ord922
ord6905
ord6007
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord2546
ord291
ord5710
ord2824
ord6874
ord2642
ord1175
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord3953
ord2725
ord771
ord2528
ord1008
ord497
ord1948
ord5303
ord4699
ord5715
ord817
ord565
ord2726
ord4226
ord6215
ord2086
ord5450
ord6394
ord5440
ord6383
ord283
ord5678
ord5789
ord5787
ord5873
ord6172
ord5736
ord2814
ord834
ord3573
ord3089
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord1669
ord5681
ord4224
ord2652
ord6334
ord3874
ord3092
ord858
ord1768
ord5280
ord470
ord755
ord4234
ord2301
ord324
ord567
ord6467
ord1168
ord1146
ord641
ord656
ord3610
ord4424
ord3402
ord4837
ord5290
ord1776
ord6055
ord3597
ord4853
ord4376
ord6199
ord2370
ord4202
ord6877
ord3337
ord4171
ord6311
ord2764
ord3097
ord6453
ord3998
ord6907
ord939
ord5953
ord2379
ord4710
ord3996
ord4258
ord825
ord2302
ord489
ord768
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4835
ord3798
ord5287
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4854
ord4377
ord5265
ord4358
ord4948
ord4976
ord4742
ord4905
ord5160
ord5162
ord5161
ord1907
ord940
ord356
ord535
ord941
ord2770
ord2781
ord4058
ord3181
ord3178
ord3310
ord668
ord2818
ord540
ord3811
ord2820
ord537
ord800
ord860
ord823
ord539
msvcrt
strstr
_beginthreadex
_mbscmp
memset
memcmp
memcpy
atoi
sprintf
strlen
time
srand
rand
__CxxFrameHandler
_purecall
_stricmp
_strcmpi
_strnicmp
_vsnprintf
_except_handler3
__dllonexit
atof
_mbccpy
_mbsnbcmp
_mbsstr
_mbclen
_mbsncmp
_mbschr
strncpy
fopen
fwrite
fflush
fclose
_mbsicmp
sscanf
_mbsrchr
??8type_info@@QBEHABV0@@Z
_CxxThrowException
_ftol
toupper
vsprintf
strcpy
exit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
free
_initterm
malloc
_adjust_fdiv
_endthreadex
kernel32
DeviceIoControl
lstrcmpA
LoadLibraryA
GetProcAddress
LockFile
WriteFile
UnlockFile
ReadFile
MoveFileA
FindFirstFileA
FindNextFileA
FindClose
GetFileSize
SetFilePointer
SetEndOfFile
GetFileAttributesA
GlobalFree
GetModuleFileNameA
GlobalAlloc
GlobalLock
GlobalUnlock
LocalAlloc
lstrcpyA
ResetEvent
SetEvent
WaitForSingleObject
GetExitCodeThread
CreateFileA
GetVersionExA
WideCharToMultiByte
LocalFree
InterlockedDecrement
TerminateProcess
CreateDirectoryA
GetPrivateProfileStringA
WritePrivateProfileStringA
SetLastError
GetLastError
InterlockedExchange
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
GetPrivateProfileIntA
DeleteFileA
QueryPerformanceCounter
QueryPerformanceFrequency
lstrlenW
GetTempFileNameA
GetTempPathA
SetUnhandledExceptionFilter
VirtualQuery
GetFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
IsBadReadPtr
MultiByteToWideChar
FreeLibrary
LoadLibraryExA
InterlockedIncrement
GetWindowsDirectoryA
CreateProcessA
GetCurrentThreadId
lstrcpynA
lstrcmpiA
CreateEventA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
OpenFile
GetACP
CopyFileA
SetFileTime
SystemTimeToFileTime
CloseHandle
GetTickCount
GetSystemTime
user32
EnableWindow
GetMessagePos
RegisterWindowMessageA
FillRect
MessageBeep
GetMenuItemCount
GetMenuItemID
LoadMenuA
GetSubMenu
PostMessageA
SetWindowPos
GetCursorPos
ScreenToClient
UpdateWindow
SendDlgItemMessageA
SetDlgItemTextA
ShowWindow
SetForegroundWindow
LoadCursorA
CopyIcon
GetWindowRect
GetDC
ReleaseDC
InflateRect
InvalidateRect
IsWindow
SetCursor
PtInRect
ReleaseCapture
RedrawWindow
SetCapture
DestroyCursor
GetSysColor
wsprintfA
GetMessageA
TranslateMessage
PostThreadMessageA
GetParent
GetSystemMetrics
GetClientRect
DrawIcon
SendMessageA
SetWindowLongA
GetWindowLongA
IsWindowVisible
IsIconic
KillTimer
SetTimer
DispatchMessageA
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
LoadIconA
gdi32
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
GetStockObject
advapi32
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegEnumValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCloseKey
GetUserNameA
shell32
ExtractIconA
SHGetSpecialFolderPathA
ShellExecuteExA
ShellExecuteA
ole32
CoInitialize
OleRun
CoCreateInstance
CoCreateGuid
StringFromCLSID
CoTaskMemFree
CoUninitialize
oleaut32
SysAllocString
VariantClear
SysFreeString
GetErrorInfo
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?_Xran@std@@YAXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??9std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
ws2_32
getpeername
gethostname
WSAStartup
recvfrom
WSACleanup
sendto
send
recv
inet_addr
connect
gethostbyname
setsockopt
shutdown
WSACreateEvent
WSAEventSelect
WSACloseEvent
WSASocketA
socket
htons
bind
getsockname
ntohs
listen
WSASetEvent
WSAWaitForMultipleEvents
WSAGetLastError
WSASetLastError
WSAResetEvent
WSAEnumNetworkEvents
accept
closesocket
WSASend
inet_ntoa
WSARecv
wininet
InternetOpenUrlA
HttpQueryInfoA
InternetReadFile
InternetGetConnectedState
InternetOpenA
InternetCloseHandle
InternetSetCookieA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
??0CPSNetwork@@QAE@ABV0@@Z
??0CPSNetwork@@QAE@XZ
??1CPSNetwork@@UAE@XZ
??4CPSNetwork@@QAEAAV0@ABV0@@Z
??_7CPSNetwork@@6B@
?Connect@CPSNetwork@@QAEHXZ
?Disconnect@CPSNetwork@@QAEXXZ
?GetCacheTime@CPSNetwork@@QAEHXZ
?GetChannelName@CPSNetwork@@QAEPBDXZ
?GetChannelOnlineCount@CPSNetwork@@QAEKXZ
?GetComment@CPSNetwork@@QAEPBDH@Z
?GetHttpURL@CPSNetwork@@QAEPBDH@Z
?GetMsg@CPSNetwork@@QAEHAAKPAD@Z
?GetPercent@CPSNetwork@@QAEHAAK0@Z
?GetStatus@CPSNetwork@@QAE?AW4PLAY_STATUS@@XZ
?GetStreamingType@CPSNetwork@@QAE?AW4STREAMING_TYPE@@XZ
?Save@CPSNetwork@@QAEHPBD@Z
?SetLogLevel@CPSNetwork@@QAEHH@Z
?SetParam@CPSNetwork@@QAEXPBD0@Z
?ShowPropertyDlg@CPSNetwork@@QAEXH@Z
FIO_Create
Name
.text
Size
469KB
Virtual Size
468KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
65KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
225KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2067,
count=3, id=11, version=8798,
count=3, id=12, version=7291,
count=10, id=19, version=8022,
count=11, productName=Unmarked objects (old),
count=16, id=19, version=8034,
count=2, id=11, version=8047,
count=10, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=612, id=1, productName=Unmarked objects,
count=100, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/PPStream/PowerList.ocx
- IMPHASH 5ba8070d240d1b3ffdced8e99c8f818f
- SHA256 05471a3163037f43e3d33357a17fef8f21f27676db09dbb6c58751eddc635ef5
- MD5 ffe9bf09a71a850b4695c138efd4c82d
- SHA1 eb2c1ce1bc78155cf0f136b339845ffffedd6d25
- SHA512 23c35a604dd781b34da0e1380038d9920c3270f86b45fff465d25cccb5b5b09704a6621daf50af2c0d181d1f85e4271b9472fd7e99c943bf2e26ee313a5745ff
- SSDEEP 6144:z4W1esvSZTbugVLt0Sdiu0x6Oflk42pFo3pQ5juF4Mx86jM6VA4Agz4n3Sa:v1JS1Te2mYOflk42pFo3p8juCUVS4A4Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
230876
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord640
ord5785
ord1640
ord323
ord6907
ord4224
ord665
ord1979
ord5442
ord3318
ord5186
ord354
ord939
ord6467
ord668
ord1980
ord3181
ord2781
ord2770
ord356
ord6905
ord2763
ord5450
ord6394
ord5440
ord6383
ord5572
ord2915
ord4407
ord3742
ord818
ord1270
ord1232
ord4275
ord2152
ord755
ord470
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord6194
ord1641
ord3706
ord3573
ord6197
ord6379
ord1844
ord4400
ord682
ord3089
ord2393
ord2862
ord1265
ord6909
ord6720
ord3797
ord6199
ord2614
ord4160
ord3402
ord3721
ord3619
ord809
ord795
ord556
ord1088
ord2122
ord3874
ord6358
ord6418
ord703
ord404
ord603
ord273
ord275
ord816
ord3908
ord562
ord940
ord923
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord3670
ord561
ord1134
ord3952
ord2724
ord6354
ord1216
ord1227
ord1877
ord4249
ord2486
ord2687
ord4006
ord2727
ord2730
ord2729
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord3640
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord6320
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord4534
ord2954
ord2384
ord6370
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord723
ord3946
ord423
ord5314
ord5333
ord2541
ord4949
ord801
ord3811
ord3310
ord3996
ord5861
ord541
ord4202
ord2100
ord4459
ord4299
ord5033
ord4502
ord6030
ord6385
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord2514
ord6052
ord1775
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord449
ord746
ord2278
ord5161
ord5162
ord5160
ord4905
ord4742
ord4976
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord3699
ord489
ord2370
ord2302
ord4234
ord4710
ord924
ord2919
ord1132
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord6453
ord768
ord860
ord941
ord497
ord1008
ord2528
ord771
ord1146
ord1644
ord2863
ord2864
ord3815
ord5981
ord2795
ord6270
ord2438
ord3654
ord2584
ord4220
ord2859
ord5875
ord2754
ord472
ord5788
ord4297
ord4133
ord2414
ord2567
ord6605
ord6880
ord3301
ord3663
ord3626
ord2860
ord1168
ord1669
ord3754
ord2652
ord2379
ord6696
ord6242
ord289
ord5789
ord613
ord3910
ord3286
ord3293
ord2380
ord2818
ord540
ord2817
ord6877
ord800
ord537
ord2764
ord4129
ord858
ord6648
ord6282
ord535
ord6283
ord4243
ord567
ord4113
ord693
ord5241
ord4402
ord1776
ord4078
ord6055
ord3370
ord5277
ord5261
ord2582
ord825
ord5674
ord823
ord1131
msvcrt
srand
_mbsicmp
memmove
_access
abs
strncpy
strcpy
_mbscmp
atol
exit
_endthreadex
_beginthreadex
memset
atoi
sprintf
time
strlen
__CxxFrameHandler
_stricmp
memcpy
toupper
wcsncpy
strchr
strcat
_ftol
strstr
fclose
fflush
fwrite
_mbsstr
fopen
free
malloc
_purecall
strcmp
rand
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
fseek
ftell
fread
strtoul
wcslen
atof
kernel32
GlobalFree
GetSystemTime
CreateProcessA
GetWindowsDirectoryA
FindResourceA
LoadResource
SizeofResource
LockResource
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
GetModuleFileNameA
Sleep
CreateDirectoryA
lstrcatA
GetACP
GlobalAlloc
GlobalLock
GlobalUnlock
DeleteFileA
lstrcmpiA
LoadLibraryA
GetProcAddress
FreeLibrary
LocalFree
LocalAlloc
lstrcpyA
SetEvent
WaitForSingleObject
CloseHandle
LeaveCriticalSection
EnterCriticalSection
GetExitCodeThread
DeleteCriticalSection
InitializeCriticalSection
lstrlenA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetTickCount
MulDiv
user32
MessageBoxA
SetWindowLongA
GetWindowLongA
PtInRect
ScreenToClient
GetCursorPos
SetWindowPos
SendMessageA
IsWindow
CopyRect
ReleaseDC
GetDC
CopyImage
PostMessageA
IsRectEmpty
SetRect
CharLowerA
ShowWindow
SetForegroundWindow
CopyIcon
RedrawWindow
DestroyCursor
GetSysColor
GetMenuItemInfoA
GetMenuStringW
GetMenuItemID
ModifyMenuA
SetPropA
SetCapture
GetCapture
ReleaseCapture
GrayStringA
GetClipCursor
ClipCursor
SetCursor
DrawTextA
TabbedTextOutA
ClientToScreen
InvertRect
SetRectEmpty
FillRect
SetWindowRgn
GetClientRect
InflateRect
GetClassInfoA
DefWindowProcA
LoadCursorA
IsWindowVisible
OpenClipboard
GetWindowRect
CheckMenuItem
GetMenuItemCount
GetPropA
GetParent
EnableMenuItem
DeleteMenu
GetSubMenu
LoadMenuA
SendMessageTimeoutA
GetSystemMetrics
SetTimer
KillTimer
InvalidateRect
CloseClipboard
EmptyClipboard
SetClipboardData
EnableWindow
gdi32
GetDeviceCaps
CreateFontIndirectA
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePolygonRgn
CreateRectRgn
CombineRgn
CreateSolidBrush
GetCurrentObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
SelectObject
GetTextColor
GetTextExtentPoint32A
GetObjectA
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegSetValueA
RegOpenKeyExA
RegQueryValueA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyA
RegOpenKeyA
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
comctl32
_TrackMouseEvent
ImageList_GetImageInfo
ole32
CoCreateInstance
CreateStreamOnHGlobal
olepro32
ord251
oleaut32
LoadRegTypeLi
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Xran@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
ws2_32
socket
bind
closesocket
getsockname
htons
sendto
recvfrom
ntohs
inet_addr
gethostbyname
WSAStartup
WSACleanup
rasapi32
RasEnumConnectionsA
RasGetConnectStatusA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
wininet
InternetCloseHandle
InternetOpenA
InternetGetConnectedState
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetSetOptionA
InternetGetCookieA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=4, id=95, version=2190,
count=26, id=93, version=2179,
count=1, id=11, version=8047,
count=8, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=726, id=1, productName=Unmarked objects,
count=38, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/PPStream/PowerPlayer.dll
- IMPHASH 2d505a3c1161ed55b64ec81b9f248dbf
- SHA256 b487c3e1c79a112f447bd0b9412c89d15482a667cea031b716312ef69ec5dddc
- MD5 ef2e168578160062e606adb40bf472e3
- SHA1 5d851a09394f6f11133a28904dc1953eb0d994d8
- SHA512 2c0004909594eb68c9eb5ad013abc2375c0cb097935bdc12e3e971b4219299f28b1adb97f44403dd27ddfabb3b7f3ec9768ae1a211e9a682b5cd4d286bb92528
- SSDEEP 6144:kjnLn6qM/zrD3/Qxo/qSObJ0UJEGGssGiy5bYcCKFtnG0iCbg/ZXMB5zcKy4g:0L6qKzPo6/qSs3sNK0xZ8B5cKZg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
225436
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord6199
ord4476
ord6143
ord539
ord613
ord289
ord6111
ord1175
ord2393
ord1567
ord268
ord3619
ord809
ord556
ord1088
ord2122
ord3797
ord6358
ord1200
ord926
ord2860
ord6385
ord6930
ord5450
ord6394
ord5440
ord6383
ord6379
ord772
ord6142
ord500
ord5860
ord3986
ord5606
ord939
ord4284
ord5873
ord5834
ord2841
ord2448
ord2044
ord2107
ord5861
ord6883
ord6648
ord6663
ord703
ord404
ord603
ord273
ord275
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord3571
ord640
ord5785
ord1640
ord323
ord816
ord3908
ord562
ord940
ord1233
ord5575
ord6194
ord6378
ord3815
ord5981
ord6442
ord465
ord4204
ord6928
ord2652
ord4224
ord1669
ord5710
ord2763
ord3716
ord790
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord3670
ord561
ord1134
ord3952
ord1205
ord2724
ord6354
ord1216
ord1227
ord6010
ord1877
ord4249
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord4006
ord2727
ord2730
ord2729
ord1226
ord1210
ord5572
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord4287
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord4534
ord2954
ord2384
ord6370
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord723
ord3946
ord423
ord5332
ord5328
ord5331
ord5314
ord5333
ord2541
ord4949
ord2998
ord4459
ord5033
ord4502
ord6030
ord6876
ord1601
ord3474
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord4713
ord6371
ord5286
ord4438
ord3279
ord4625
ord449
ord746
ord2278
ord6311
ord4171
ord2753
ord3546
ord4317
ord2243
ord5788
ord472
ord5787
ord6646
ord6334
ord2450
ord4133
ord4297
ord3005
ord4033
ord433
ord1132
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord1979
ord665
ord924
ord922
ord1641
ord641
ord795
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord2688
ord801
ord541
ord283
ord2795
ord6215
ord2086
ord2642
ord3092
ord2116
ord2614
ord6778
ord1168
ord2567
ord3874
ord2380
ord765
ord4299
ord6453
ord6605
ord6880
ord609
ord2108
ord2078
ord3698
ord3574
ord4396
ord2575
ord6467
ord4275
ord3742
ord4160
ord4202
ord2956
ord533
ord5194
ord1997
ord5448
ord2764
ord798
ord2915
ord941
ord4278
ord4023
ord6282
ord6283
ord5683
ord4277
ord4129
ord5875
ord5789
ord2754
ord6172
ord2859
ord5768
ord2864
ord4034
ord535
ord1949
ord818
ord2135
ord823
ord1146
ord1644
ord2863
ord6270
ord2379
ord2438
ord3654
ord2584
ord4220
ord470
ord755
ord4710
ord6380
ord6197
ord4234
ord2302
ord2370
ord2414
ord3626
ord3663
ord825
ord324
ord567
ord540
ord860
ord858
ord800
ord537
ord6877
ord2818
ord354
ord5186
ord3318
ord2919
ord5649
ord5442
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4853
ord4376
ord5265
ord3573
ord3721
ord4424
ord3402
ord5290
ord1776
ord2439
ord6055
ord1131
msvcrt
strstr
_mbsicmp
abs
fopen
fwrite
fflush
fclose
sprintf
time
strcmp
memset
atoi
_ftol
__CxxFrameHandler
_stricmp
strlen
_mbsstr
??0exception@@QAE@ABV0@@Z
_CxxThrowException
_beginthreadex
_endthreadex
exit
memcpy
strcpy
_access
_mbscmp
toupper
memcmp
wcsncpy
pow
atol
strcat
strchr
_mbsrchr
strncpy
strncmp
memmove
strrchr
wcstol
wcscmp
wcslen
rand
srand
strtoul
calloc
free
malloc
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
_onexit
__dllonexit
kernel32
UnmapViewOfFile
lstrlenW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
OpenFile
GetCurrentProcess
GetCurrentProcessId
GetSystemTime
OpenProcess
GetExitCodeProcess
TerminateProcess
WinExec
lstrcpynA
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
ResumeThread
MulDiv
GlobalFree
CreateEventA
FindResourceA
LoadResource
SizeofResource
LockResource
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetACP
GetVersionExA
DeviceIoControl
InterlockedDecrement
WriteFile
ReadFile
GetLastError
SetFilePointer
CreateFileA
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeLibrary
LoadLibraryA
GetProcAddress
MoveFileA
CopyFileA
GetWindowsDirectoryA
GetModuleFileNameA
CreateDirectoryA
GlobalAlloc
GlobalLock
GlobalUnlock
LeaveCriticalSection
LocalFree
LocalAlloc
ResetEvent
SetEvent
WaitForSingleObject
EnterCriticalSection
GetExitCodeThread
DeleteCriticalSection
InitializeCriticalSection
CreateProcessA
CloseHandle
lstrcpyA
GetPrivateProfileStringA
GetTickCount
Sleep
DeleteFileA
GetPrivateProfileIntA
WritePrivateProfileStringA
lstrlenA
lstrcatA
user32
GetMenuState
InsertMenuItemA
GetMessageA
DispatchMessageA
GetMenuStringA
RegisterClassA
DefWindowProcA
GetClassInfoA
CharLowerA
IntersectRect
IsRectEmpty
MoveWindow
OffsetRect
mouse_event
InvalidateRect
IsWindow
GetDC
ReleaseDC
PostThreadMessageA
GetCapture
CreatePopupMenu
AppendMenuA
CheckMenuItem
EnableMenuItem
DeleteMenu
InsertMenuA
GetPropA
RemoveMenu
MonitorFromWindow
GetMonitorInfoA
GetDesktopWindow
SetParent
SetRectEmpty
ShowCursor
GrayStringA
TabbedTextOutA
wsprintfA
ShowWindow
SetForegroundWindow
LoadCursorA
CopyIcon
SetWindowLongA
ReleaseCapture
RedrawWindow
DestroyCursor
GetMenuItemCount
GetMenuItemInfoA
GetMenuStringW
GetMenuItemID
ModifyMenuA
UpdateWindow
CopyRect
GetSystemMetrics
SystemParametersInfoA
GetWindowLongA
IsWindowVisible
GetParent
ClientToScreen
KillTimer
SetTimer
PostMessageA
SetRect
ScreenToClient
PtInRect
SetCursor
LoadMenuA
GetSubMenu
GetCursorPos
GetClientRect
TranslateMessage
EnableWindow
MessageBoxA
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SendMessageA
SetPropA
DrawTextA
SetCapture
InflateRect
FrameRect
GetWindowRect
GetSysColor
FillRect
gdi32
SetBkColor
GetViewportExtEx
GetWindowExtEx
SetMapMode
GetMapMode
PtVisible
RectVisible
CreateBitmap
ExtTextOutA
Escape
GetNearestColor
Rectangle
GetTextMetricsA
GetObjectA
CreateFontIndirectA
StretchBlt
CreateRectRgnIndirect
CombineRgn
FillRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetDeviceCaps
GetStockObject
PatBlt
DeleteObject
SetTextColor
SetBkMode
GetTextExtentPoint32A
SelectObject
LPtoDP
TextOutA
CreateSolidBrush
DPtoLP
advapi32
RegSetValueA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
shell32
ShellExecuteA
ShellExecuteExA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
comctl32
_TrackMouseEvent
ole32
CoInitialize
CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
olepro32
ord251
oleaut32
SafeArrayDestroy
SafeArrayAccessData
SafeArrayCreateVector
SysFreeString
VariantClear
SysAllocStringLen
SysAllocString
LoadRegTypeLi
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0logic_error@std@@QAE@ABV01@@Z
??0out_of_range@std@@QAE@ABV01@@Z
??1out_of_range@std@@UAE@XZ
??_7out_of_range@std@@6B@
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Xran@std@@YAXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
psnetwork
?SetParam@CPSNetwork@@QAEXPBD0@Z
??1CPSNetwork@@UAE@XZ
??0CPSNetwork@@QAE@XZ
?GetHttpURL@CPSNetwork@@QAEPBDH@Z
?GetStatus@CPSNetwork@@QAE?AW4PLAY_STATUS@@XZ
?ShowPropertyDlg@CPSNetwork@@QAEXH@Z
?Save@CPSNetwork@@QAEHPBD@Z
?GetPercent@CPSNetwork@@QAEHAAK0@Z
?GetComment@CPSNetwork@@QAEPBDH@Z
?GetStreamingType@CPSNetwork@@QAE?AW4STREAMING_TYPE@@XZ
?Connect@CPSNetwork@@QAEHXZ
?Disconnect@CPSNetwork@@QAEXXZ
?GetChannelName@CPSNetwork@@QAEPBDXZ
ws2_32
WSACleanup
inet_ntoa
WSAStartup
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
233KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
116KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=1, id=12, version=7291,
count=9, id=95, version=2190,
count=22, id=93, version=2179,
count=3, id=11, version=8047,
count=9, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=843, id=1, productName=Unmarked objects,
count=82, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/PPStream/pp2play.dll
- IMPHASH b4342e0c3831cddde2421170f2967eb3
- SHA256 04d633faa38888b318c664475f17f2d0f9bd77b8e7c93bb983933c01854da6d9
- MD5 23b51c94b1e0ace537b130e51020012b
- SHA1 3ca7cc4efa5d646ba2e40824acfa13aceb4a3e96
- SHA512 b2eafcd129652f138768aad1b03320f4972b49fd7f51a417c68ca68f317369bb5b450534e786d619c4b7e3d1344a9434067c43612c3a8f2502957094a9f85dfa
- SSDEEP 3072:HnJQGtJ1dFX90A6inc4hSpBnocBZj8lhgv/sFfuEJIvSm6A+:HnrtJ1dFX36t4hE644gvMfuSmg
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
87054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MoveFileA
GetWindowsDirectoryA
GetVersionExA
CloseHandle
WriteFile
LCMapStringW
ReadFile
SetStdHandle
GetOEMCP
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
GetCPInfo
CopyFileA
SetFilePointer
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
SetUnhandledExceptionFilter
GetModuleHandleA
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
HeapFree
GetModuleFileNameA
GetACP
LCMapStringA
GetLastError
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileIntA
GetLocaleInfoA
GetSystemDefaultLCID
LeaveCriticalSection
lstrlenA
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
Sleep
FreeLibrary
HeapAlloc
GetFileAttributesA
RaiseException
RtlUnwind
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
FlushFileBuffers
user32
GetClientRect
GetMonitorInfoA
GetDlgItem
GetDC
ReleaseDC
RegisterClassA
DeleteMenu
EnableMenuItem
GetMenuItemCount
wsprintfA
CheckMenuItem
DestroyMenu
CreatePopupMenu
InsertMenuA
AppendMenuA
TrackPopupMenu
RemoveMenu
GetCursorPos
PtInRect
LoadCursorA
SetCursor
BeginPaint
EndPaint
DefWindowProcA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
EnumDisplayMonitors
SetMenu
GetMenu
GetMessageA
TranslateMessage
DispatchMessageA
InvalidateRect
KillTimer
SetTimer
SetFocus
DestroyWindow
GetSystemMetrics
BringWindowToTop
SetParent
GetWindowLongA
GetWindowTextA
SetWindowTextA
GetParent
GetDesktopWindow
GetWindowRect
SetWindowPos
SendMessageA
PostMessageA
UpdateWindow
ShowWindow
CreateWindowExA
SetWindowLongA
SetRect
MonitorFromWindow
IsWindow
shell32
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
gdi32
SetStretchBltMode
CreateCompatibleDC
GetDIBits
DeleteDC
DeleteObject
CreateCompatibleBitmap
GetObjectA
GetStockObject
SelectObject
Rectangle
StretchBlt
ole32
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitializeEx
StringFromGUID2
CLSIDFromString
advapi32
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
oleaut32
SysStringLen
SysFreeString
PP2Play_Init
PP2Play_Uninit
Name
.text
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=28, version=9178,
count=4, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=12, version=7291,
count=30, id=14, version=7299,
count=123, id=10, version=8047,
count=18, id=11, version=8047,
count=3, id=95, version=2190,
count=17, id=93, version=2179,
count=204, id=1, productName=Unmarked objects,
count=19, id=11, version=8966,
count=2, id=10, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/PPStream/ppssg.dll
- IMPHASH f081458843f2d19144c9ea849004741c
- SHA256 01e6057bf03bb4a0ef5d10c4bcdfc634f6dbc492e135718c7627e7f2695dac4d
- MD5 2c4c36219218e6b1005bb79bc94cf0a8
- SHA1 c4a21a7c4f786261e3d1694218a0c186a118625d
- SHA512 daf0525d6eb88675d9efcb34ae9e7617d3ebcd93f7888875e2986589cf4db862a95a35e72f493028e1972abae4c0c99c676f1629c6561f449878cfea460be801
- SSDEEP 6144:DidxtMl3AJ5WmHBp/OsC17vb6Eit8d9vD1W5jlRJ6WuviVCyajHNQxnmLxhjbaaz:DidxtMtAJ5Wmhp/OsC17vb6EitC9vD1d
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
181702
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
GetFileAttributesA
CreateFileA
SetEndOfFile
SetFilePointer
GetFileSize
DeleteFileA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
MoveFileA
ReadFile
UnlockFile
WriteFile
LockFile
CreateDirectoryA
RemoveDirectoryA
WritePrivateProfileStringA
GetPrivateProfileIntA
LeaveCriticalSection
GetProcessHeap
HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryExA
lstrcpynA
HeapCreate
HeapDestroy
LoadLibraryA
GetTickCount
CreateEventA
GetVersionExA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SuspendThread
OpenMutexA
CreateMutexA
LocalFree
LocalAlloc
OutputDebugStringA
lstrcpyA
lstrlenA
ResetEvent
SetEvent
WaitForSingleObject
CloseHandle
HeapFree
GetExitCodeThread
SetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
IsBadCodePtr
IsBadReadPtr
InterlockedExchange
IsBadWritePtr
ExitProcess
RaiseException
RtlUnwind
ExitThread
GetCurrentThreadId
CreateThread
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
HeapReAlloc
HeapSize
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
VirtualFree
user32
MsgWaitForMultipleObjects
TranslateMessage
wsprintfA
MessageBoxA
DispatchMessageA
PeekMessageA
advapi32
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptCreateHash
ws2_32
inet_ntoa
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_addr
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
DllRegisterServer
DllUnregisterServer
GetXML
IL
IsNeedUpdate
LSG
MDSKAMS
MENMS
MGBIMS
MNRMS
MP2PRMS
MPTMS
MQFBURLMS
MRCMS
MRDSMS
MRFBMS
MRFBMS2
MRURLIDMS
OUDPMR
PSGBF
SHF
Name
.text
Size
216KB
Virtual Size
214KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
784B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=105, version=2067,
count=111, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=93, version=2067,
count=9, id=93, version=2179,
count=146, id=1, productName=Unmarked objects,
count=36, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
Modules/PPStream/vodnet.dll
- IMPHASH 62aef98f1430551b1795a1b174da9375
- SHA256 7b3d8d61669e39b7cde1c20bd85dc7dfb63c9180f47665177499920b632e45e1
- MD5 e965149427c2d7d296f0fa5b4f3a9f31
- SHA1 57f4d3cd142cbc0c4d56efc65443040045c29e47
- SHA512 9b9c2032de98cc127c2aa24ec2b07624c6e4b38f94bbdaf68745151537d73f32db88044c372399d275d25b2f2086f772b6194e136dc32ad394e4d8037a9f1ea2
- SSDEEP 12288:438KMkgJsSIY7QeJutO5sXscGBUiTqSIkKP0hFwNrf7hl7oQE:438KDgGSIYMBq5RT7KP0cyQE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
561793
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\PPStream-Vod-Work\XSearchNew\ppsvod\PPStreamVod\Release\PPStreamVod.pdb
kernel32
RaiseException
FindResourceExA
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
ExitThread
TerminateProcess
GetFileType
VirtualAlloc
VirtualQuery
GetCommandLineA
HeapReAlloc
SetStdHandle
HeapSize
SetErrorMode
GetCurrentProcessId
LCMapStringA
LCMapStringW
GetTimeZoneInformation
UnhandledExceptionFilter
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
FlushFileBuffers
FileTimeToLocalFileTime
MulDiv
GlobalAlloc
FormatMessageA
GlobalLock
GlobalUnlock
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
GlobalFree
VirtualProtect
FileTimeToSystemTime
OpenFile
GetModuleHandleA
GlobalMemoryStatus
HeapCreate
HeapAlloc
HeapDestroy
GetProcessHeap
HeapFree
GetSystemInfo
lstrcpynA
CompareStringW
CompareStringA
GetVersion
GetFileTime
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
LoadLibraryExA
GetProcAddress
FreeLibrary
DeviceIoControl
CreateFileA
FindFirstFileA
FindNextFileA
FindClose
CreateDirectoryA
LockFile
WriteFile
UnlockFile
ReadFile
GetFileSize
SetFilePointer
SetEndOfFile
GetFileAttributesA
CreateThread
ResumeThread
lstrcpyA
LocalFree
LocalAlloc
ResetEvent
WaitForSingleObject
SetEvent
GetExitCodeThread
MultiByteToWideChar
CreateEventA
GetLastError
SetLastError
CreateProcessA
GetModuleFileNameA
RemoveDirectoryA
Sleep
CloseHandle
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetTickCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
SetUnhandledExceptionFilter
InitializeCriticalSection
user32
LoadCursorA
GetSysColorBrush
DestroyMenu
ValidateRect
SetCursor
PostQuitMessage
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
RegisterWindowMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
GetKeyState
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
PtInRect
GetWindow
MapDialogRect
ShowWindow
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
CreateWindowExA
TranslateMessage
GetSystemMetrics
GetWindowLongA
GetCursorPos
GetSysColor
SetWindowPos
ScreenToClient
GetWindowRect
GetMessageA
wsprintfA
CharUpperA
IsWindow
PostMessageA
GetParent
PeekMessageA
DispatchMessageA
MessageBoxA
PostThreadMessageA
SetWindowLongA
SendMessageA
EnableWindow
SetTimer
IsWindowVisible
gdi32
TextOutA
EnumFontFamiliesExA
PtVisible
DeleteObject
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
RectVisible
GetObjectA
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
ExtTextOutA
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegQueryValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegEnumKeyA
RegQueryInfoKeyA
RegEnumValueA
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyExA
CryptReleaseContext
CryptAcquireContextA
comctl32
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ImageList_Destroy
shlwapi
UrlUnescapeA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathFindFileNameA
ws2_32
inet_ntoa
WSAGetLastError
inet_addr
setsockopt
shutdown
send
recv
WSASocketA
select
ioctlsocket
gethostname
sendto
WSACleanup
recvfrom
WSAStartup
getpeername
closesocket
WSASetEvent
WSACloseEvent
WSAEventSelect
WSASend
WSASetLastError
WSACreateEvent
accept
WSAEnumNetworkEvents
WSAResetEvent
WSARecv
WSAWaitForMultipleEvents
listen
ntohs
getsockname
bind
htons
socket
connect
gethostbyname
__WSAFDIsSet
ole32
CoCreateGuid
StringFromCLSID
CoTaskMemFree
oleaut32
VariantInit
VariantChangeType
VariantClear
SysFreeString
SysAllocString
wininet
InternetReadFile
HttpQueryInfoA
InternetGetLastResponseInfoA
InternetOpenUrlA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetGetConnectedState
InternetOpenA
InternetCloseHandle
InternetSetCookieA
winmm
timeGetTime
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CreateVodInstance
CreateVodInstanceByPPSAP
DestroyVodInstance
Disconnect
DllRegisterServer
DllUnregisterServer
EventNotify
GetChannelName
GetChannelOnlineCount
GetHttpURL
GetPlayingURL
GetStatus
GetStreamingType
PlayURL
PlayURLForTest
SetEchoSvr
SetParam
ShowPropertyDlg
StopFile
Name
.text
Size
672KB
Virtual Size
669KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=105, version=2067,
count=7, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=23, id=93, version=2179,
count=655, id=1, productName=Unmarked objects,
count=34, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=174, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=9, id=39, version=8491,
count=7, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=188, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
Modules/PPStream/vodres.dll
- IMPHASH 17d925673c006e9901a6cf1f4b413522
- SHA256 ed56d41fba641c677a4f23b49973754983b2743eef026885280df72c39a23a21
- MD5 e58c0fd82b6b65b9108db6cf569af5fe
- SHA1 69acc53534cecc13e0cf472ad7fc1c25e53b6b29
- SHA512 ddc18a1afdbc7489075ebf26df5beecd7673b7bb5dcb0fa88f74ef8ffbe9723c62b7c4ba102843893b4f4620a9fe03614cab5cf9709ced6cbd761678b3a35d4b
- SSDEEP 3072:VoY3Gd/7XlWZTlqFjbBouwFnNiVDG79KjPDv/mKuu21QQyzHBeFZJUlcI44:ODhWZUbOuwxNku9KjPDNu6QcBeFBh4
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
121370
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
WideCharToMultiByte
lstrlenA
GetTickCount
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
GetPrivateProfileIntA
RemoveDirectoryA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
DeleteFileA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetExitCodeThread
SetEvent
WaitForSingleObject
ResetEvent
OutputDebugStringA
lstrcpyA
ResumeThread
CreateThread
GetFileAttributesA
SetEndOfFile
SetFilePointer
GetFileSize
ReadFile
UnlockFile
WriteFile
GetSystemInfo
GetModuleFileNameA
CreateFileA
_llseek
Sleep
GetCurrentThreadId
SetLastError
MultiByteToWideChar
PostQueuedCompletionStatus
HeapAlloc
GetProcessHeap
lstrcpynA
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
GetPrivateProfileStringA
OpenEventA
CreateEventA
QueryPerformanceCounter
GetVersionExA
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoW
SetEnvironmentVariableA
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetModuleHandleA
GetCurrentProcessId
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
LoadLibraryA
lstrcmpiA
GetCurrentProcess
VirtualProtectEx
WriteProcessMemory
VirtualQuery
GetProcAddress
Module32Next
Module32First
CreateToolhelp32Snapshot
LockFile
CloseHandle
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
RtlUnwind
RaiseException
GetSystemTimeAsFileTime
ExitThread
ExitProcess
TerminateProcess
GetFileType
HeapFree
GetTimeFormatA
GetDateFormatA
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
HeapReAlloc
HeapSize
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetTimeZoneInformation
VirtualProtect
FreeEnvironmentStringsA
user32
GetMessageA
GetParent
wsprintfA
PostMessageA
PostThreadMessageA
IsWindow
advapi32
CryptAcquireContextA
CryptCreateHash
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegDeleteKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptReleaseContext
imagehlp
ImageDirectoryEntryToData
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
CFA
CFW
CH
DllRegisterServer
DllUnregisterServer
GFS
GOR
GetDelayTmCnt
InitialRootDir
OF
RF
RFE
RegMessageRecv
SFP
SFPE
SetQuitFlag
WF
WFE
Name
.text
Size
168KB
Virtual Size
165KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
792B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=30, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=126, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=93, version=2067,
count=9, id=93, version=2179,
count=173, id=1, productName=Unmarked objects,
count=59, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
Modules/PPStream/xd.dll
- IMPHASH fdf4208ee9ebfe4dc732a4c08e8100a0
- SHA256 1b6667d2051d5c69f0014b8b71b09dde25e274120f6234f2e28ea1690d081169
- MD5 868fad0a9073cac5162f7d1d804d2d8b
- SHA1 5b5372ea5f5f694ea051e78cfa579536bc4ef3a5
- SHA512 33db9af8040e9d42015ea63e6c3aed8711d9dc039223bdb5ee2e2606c40755a84ac17cd48a6d07ab8b3bf760688638a55b6f0a6e4f19faa867770c7b09943bdc
- SSDEEP 3072:bO6YsvLupxrvyJPmqKeZwyaA71qSEuzFebQRAHMK5awXlpB3ek:NNSbuJ+HwwyawAQzFoPH9awnR3
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=SHANGHAI ZHONGYUAN NETWORKS LIMITED,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Product Department,O=SHANGHAI ZHONGYUAN NETWORKS LIMITED,L=Shanghai,ST=Shanghai,C=CN
Serial Number
64:6a:7c:3d:37:aa:20:67:3c:5e:27:ee:72:d8:f3:0e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 12, 2007 - Jul 11, 2008
Minor OS version
0
Major OS version
4
Entry point
120378
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
GetFileAttributesA
CreateFileA
SetEndOfFile
SetFilePointer
GetFileSize
DeleteFileA
FindClose
GetLastError
FindNextFileA
FindFirstFileA
MoveFileA
ReadFile
UnlockFile
WriteFile
LockFile
CreateDirectoryA
RemoveDirectoryA
lstrcmpiA
LeaveCriticalSection
GetFileTime
GetProcAddress
LoadLibraryA
GetCurrentThreadId
GetTickCount
GetVersionExA
GetSystemTime
FileTimeToSystemTime
GetPrivateProfileIntA
ReleaseMutex
GetCurrentProcessId
GetWindowsDirectoryA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SuspendThread
OpenMutexA
CreateMutexA
LocalFree
LocalAlloc
OutputDebugStringA
lstrcpyA
lstrlenA
ResetEvent
SetEvent
WaitForSingleObject
CloseHandle
FileTimeToLocalFileTime
GetExitCodeThread
GetStringTypeW
GetStringTypeA
SetEnvironmentVariableA
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
InterlockedExchange
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
RaiseException
RtlUnwind
ExitThread
CreateThread
GetModuleHandleA
TerminateProcess
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapFree
GetCommandLineA
HeapAlloc
QueryPerformanceCounter
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
UnhandledExceptionFilter
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
user32
MsgWaitForMultipleObjects
PeekMessageA
MessageBoxA
TranslateMessage
DispatchMessageA
advapi32
CryptHashData
CryptGetHashParam
CryptDestroyHash
CryptReleaseContext
CryptAcquireContextA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyA
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
CryptCreateHash
ws2_32
setsockopt
select
__WSAFDIsSet
shutdown
socket
connect
htons
htonl
bind
closesocket
ioctlsocket
WSACleanup
gethostbyname
inet_addr
send
recv
WSAGetLastError
WSAStartup
DllRegisterServer
DllUnregisterServer
FX
GLM
GX
Name
.text
Size
157KB
Virtual Size
156KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
776B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=15, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=105, version=2067,
count=118, id=95, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=2, id=93, version=2067,
count=7, id=93, version=2179,
count=155, id=1, productName=Unmarked objects,
count=27, id=96, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=92, productName=VS2003 (.NET) SP1 build 6030, version=6030,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) SP1 build 6030, version=6030,
Modules/QQLive/P2PPlayer.dll
- IMPHASH a972765d4f7da0ffccb4375291449098
- SHA256 9d18ae1d2c126f75b6982582618c95abccaf02cf708192d35dd44c0edd5918d5
- MD5 12be70623cd2c6b9e506b302bbf4c0ae
- SHA1 03f459bfa8194b1ef7e7aa9e0f254b2204c90014
- SHA512 03850f7d4afe50191538a522db3c904f605ad9894163506432ab83333180c4ce4f3dad8ff6100861742d92b1f31492b0700d1ce753c92d847b274d6432a01d35
- SSDEEP 3072:0/5+Nhna0X49b6zgV+vsWUsiGPWiNsUulqnAzPoLo61vQCkDq0MP:OSa0X49sgTvENXh1vQm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42508
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
RaiseException
HeapAlloc
GetCommandLineA
RtlUnwind
HeapFree
TerminateProcess
HeapSize
ExitProcess
HeapReAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetTimeZoneInformation
GetACP
GetStartupInfoA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WritePrivateProfileStringA
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFileAttributesA
GetFileTime
GetFileSize
FileTimeToSystemTime
GetTickCount
FileTimeToLocalFileTime
GetShortPathNameA
GetVolumeInformationA
GetFullPathNameA
FindFirstFileA
FindClose
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
MulDiv
GetLastError
SetLastError
lstrcpynA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
lstrlenW
GlobalFree
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
lstrcmpA
GetCurrentThread
InterlockedIncrement
MultiByteToWideChar
GetThreadLocale
LoadLibraryA
SetUnhandledExceptionFilter
VirtualAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
lstrlenA
GetEnvironmentVariableA
SetStdHandle
user32
RegisterClipboardFormatA
CreateDialogIndirectParamA
EndDialog
PostThreadMessageA
LoadStringA
SetRect
CopyAcceleratorTableA
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowDC
DestroyMenu
GetDC
ReleaseDC
GetSysColorBrush
LoadCursorA
GetDesktopWindow
ClientToScreen
PtInRect
GetClassNameA
UnregisterClassA
DestroyIcon
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
CharNextA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
ShowWindow
MessageBeep
IsDialogMessageA
LoadIconA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
GetNextDlgGroupItem
DispatchMessageA
SetActiveWindow
SetFocus
AdjustWindowRectEx
GetClientRect
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetParent
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
CharUpperA
MoveWindow
SetWindowTextA
PeekMessageA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
wsprintfA
IsWindow
EnableWindow
GetFocus
EnableMenuItem
gdi32
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DPtoLP
LPtoDP
GetMapMode
SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SelectObject
SaveDC
RestoreDC
DeleteObject
GetStockObject
DeleteDC
GetBkColor
GetTextColor
GetDeviceCaps
GetObjectA
SetBkColor
CreateBitmap
SetTextColor
GetClipBox
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegDeleteValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegQueryValueA
RegCreateKeyExA
RegOpenKeyExA
shell32
ExtractIconA
comctl32
ord17
oledlg
ord8
ole32
OleInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
OleUninitialize
CoRegisterMessageFilter
CoGetClassObject
StringFromCLSID
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoRevokeClassObject
CoRegisterClassObject
StringFromGUID2
StgCreateDocfileOnILockBytes
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
olepro32
ord253
oleaut32
VariantTimeToSystemTime
SysAllocStringByteLen
SysStringLen
VariantCopy
SysAllocString
VariantClear
VariantChangeType
SysAllocStringLen
SysStringByteLen
SysFreeString
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
132KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=39, id=19, version=8022,
count=49, productName=Unmarked objects (old),
count=429, id=1, productName=Unmarked objects,
count=19, id=19, version=8034,
count=27, id=14, version=7299,
count=137, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=94, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/QQLive.dll
- IMPHASH 200367198fe9ec3c2938c49f3afed75b
- SHA256 02b5af486ae03b55ee4378dfa6286e9fb35afd680c33ce66a970748b681f0e68
- MD5 de0c3dee0f68b52583db8623feca7b75
- SHA1 209827a5f47a88a37b79148d61c7cb0facda17d5
- SHA512 dbad86b4fbed4be9635867158a4f8d60b47fbd375c524823be5cb061a1c0cf210b7944fca18a3861111f787a048083c8a20744b41d9dc9cd5bff4cc288a811d7
- SSDEEP 12288:XTcquk3I503o67mxS4TeREe8hARrz0vAGecwYX3vBT33rYQSQ:Dcquk3Iaokh4TeREe8h8rz0/e1e5T33H
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
470844
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
CreateEventA
ResetEvent
GetTickCount
CreateSemaphoreA
ReleaseSemaphore
Sleep
WaitForMultipleObjects
GetProcAddress
LoadLibraryA
FreeLibrary
CreateThread
GetLocalTime
ReleaseMutex
CreateMutexA
DisableThreadLibraryCalls
HeapDestroy
lstrcpyA
WaitForSingleObject
SetEvent
WideCharToMultiByte
lstrlenW
GetShortPathNameA
GetModuleHandleA
TerminateThread
GetCurrentThreadId
DeleteFileA
GetPrivateProfileStringA
GetSystemTime
CreateDirectoryA
FindClose
FindFirstFileA
CloseHandle
GetPrivateProfileIntA
lstrlenA
GetModuleFileNameA
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrcatA
MultiByteToWideChar
GetUserDefaultLCID
RtlUnwind
SetHandleCount
ReadFile
SetUnhandledExceptionFilter
HeapSize
SetLastError
SetEnvironmentVariableA
GetLocaleInfoW
SetEndOfFile
CreateFileA
IsBadCodePtr
IsBadReadPtr
VirtualAlloc
IsBadWritePtr
CompareStringA
GetCPInfo
LCMapStringW
LCMapStringA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
SetStdHandle
GetEnvironmentStringsW
InitializeCriticalSection
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetOEMCP
GetACP
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
TlsFree
TlsAlloc
WriteFile
UnhandledExceptionFilter
HeapAlloc
HeapFree
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetLastError
TerminateProcess
InterlockedExchange
CompareStringW
RaiseException
ExitProcess
GetCurrentProcess
TlsSetValue
TlsGetValue
ExitThread
GetTimeZoneInformation
GetVersion
GetSystemTimeAsFileTime
ResumeThread
GetCommandLineA
HeapReAlloc
user32
ReleaseDC
GetDC
CharNextA
PostMessageA
MessageBoxA
gdi32
DeleteDC
DeleteObject
SelectObject
CreateFontIndirectA
CreateCompatibleDC
GetDIBits
ExtTextOutA
CreateDIBitmap
GetTextExtentPoint32A
SetDIBitsToDevice
ole32
CoCreateInstance
CoLoadLibrary
CoFreeLibrary
oleaut32
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
ws2_32
sendto
recvfrom
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_addr
send
recv
WSAGetLastError
getpeername
accept
select
__WSAFDIsSet
ioctlsocket
socket
bind
listen
htons
htonl
ntohs
ntohl
inet_ntoa
closesocket
setsockopt
shutdown
connect
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ReleaseCommLib
Name
.text
Size
544KB
Virtual Size
540KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
84KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
44KB
Virtual Size
145KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
48KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=31, id=14, version=7299,
count=13, id=11, version=8047,
count=6, id=10, version=8047,
count=208, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=4, productName=Unmarked objects (old),
count=8, id=19, version=8022,
count=13, id=19, version=8034,
count=167, id=1, productName=Unmarked objects,
count=104, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/QQLive.ocx
- IMPHASH 0298f8d4265383da1c838571cb552377
- SHA256 0723530aea087f916e4a3b5636a072510df32cd8fd4abaef1c08c7bbe271b6ed
- MD5 226d0316edfec044cc656a9987e11728
- SHA1 d8c0173c6a958b9b28eef7265bdf1dd6f729ed66
- SHA512 50eec7898564a9701aea2cdd85548bc4888263533598a1962d314ef0e7ba7e590a5f7eb2c0e5ea1ee384b26df42b29c2fc531e44387e7ef96aca8785ed85f601
- SSDEEP 768:B8eI1Hc9iIDjXtX88I0z1qq9Z/hntZ0RXLb/B53NTugC2+fb5urLTozOCBVoKYDC:GeyH89X88TYqXZ0RXdY4CBVolqv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31263
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
inet_ntoa
WSACleanup
inet_addr
ntohl
gethostname
WSAStartup
gethostbyname
mfc42
ord3147
ord3259
ord2982
ord3136
ord5714
ord4465
ord2985
ord3081
ord3262
ord3401
ord3830
ord3831
ord2976
ord3079
ord4080
ord4622
ord4424
ord3670
ord561
ord3825
ord6354
ord1216
ord1168
ord6467
ord1227
ord1877
ord1134
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord743
ord446
ord1177
ord1226
ord4249
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord1210
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord2137
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord4648
ord6055
ord4078
ord1776
ord4407
ord5241
ord2384
ord5307
ord5289
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord800
ord723
ord3946
ord540
ord423
ord5322
ord5339
ord5334
ord5328
ord5332
ord2541
ord4949
ord641
ord2514
ord324
ord4459
ord4502
ord4006
ord2727
ord2730
ord2729
ord2379
ord4299
ord5033
ord2795
ord858
ord1892
ord4698
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord6052
ord1775
ord2385
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord746
ord449
ord2278
ord941
ord4278
ord6663
ord535
ord3742
ord3663
ord6374
ord3402
ord4627
ord3721
ord3619
ord3626
ord795
ord818
ord860
ord567
ord2414
ord1270
ord1232
ord4275
ord2688
ord2864
ord2380
ord6215
ord2244
ord2116
ord2135
ord5575
ord4480
ord3089
ord6199
ord2818
ord6453
ord3920
ord4129
ord2784
ord665
ord1979
ord5186
ord354
ord4033
ord433
ord1949
ord4034
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord3952
ord2724
ord815
ord823
ord825
ord5163
ord6370
ord2954
ord4252
ord1255
ord1578
ord1176
ord269
ord826
ord342
ord1131
ord1132
ord1116
ord1243
ord1575
ord1577
ord1182
ord600
ord1253
ord1570
ord1197
msvcrt
strlen
memset
__CxxFrameHandler
memcpy
sprintf
fwrite
rename
fopen
fclose
_splitpath
strcat
srand
_adjust_fdiv
strcpy
fprintf
sscanf
malloc
_initterm
free
_onexit
__dllonexit
??1type_info@@UAE@XZ
_ftol
strchr
atol
atoi
strstr
time
isdigit
_vsnprintf
rand
_fstat
_fileno
kernel32
DeleteFileA
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
GetTickCount
OpenEventA
OutputDebugStringA
lstrlenA
GetModuleFileNameA
LocalFree
MultiByteToWideChar
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
lstrcpyA
SetEvent
GetLocalTime
user32
SystemParametersInfoA
DefWindowProcA
SetTimer
PostMessageA
SendMessageA
CopyRect
SetRectEmpty
GetClassInfoA
LoadCursorA
EnableWindow
wsprintfA
KillTimer
gdi32
DeleteObject
CreateSolidBrush
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey
ole32
OleInitialize
CoFreeLibrary
CoLoadLibrary
oleaut32
LoadRegTypeLi
winmm
mixerGetControlDetailsA
mixerClose
mixerOpen
mixerGetLineInfoA
mixerGetNumDevs
mixerSetControlDetails
mixerGetLineControlsA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=6, id=19, version=8022,
count=2, productName=Unmarked objects (old),
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=4, version=9782,
count=403, id=1, productName=Unmarked objects,
count=15, id=19, version=8034,
count=29, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/QQLiveSrcDec.dll
- IMPHASH 2eb4f7046a577b1ce2ecff21f5ea5685
- SHA256 e73b20b5f116b2e86117728610eab5e217c01d65ec37ddd2d6e1c30866512e37
- MD5 ee2305c1ef9c03f4aabc657b5a9b22d7
- SHA1 d493211169a8c29ef857f42566e94e134ebd693d
- SHA512 5c24a820a103f91bb5f8a88ec007dd485cf468ccd0ae53d717131c3b0419e54594fccf8acabfb89dc86861da1bc436bab3216ee419d4d262f93bdd840af64e2b
- SSDEEP 3072:4rg3cL4D4eikT5pjcWDNiJcOELXgNEpAH4BrGuv5nQ2aL/Wru2zqkFTVV/xJYN/x:4U3cgxld4PELXGYBrbcE5zqkFTxI/Nv
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
104397
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
ntohl
WSAStartup
WSACleanup
closesocket
recv
send
connect
inet_addr
socket
WSAGetLastError
htons
kernel32
RaiseException
GetProcAddress
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
LeaveCriticalSection
DeleteCriticalSection
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
CreateThread
WideCharToMultiByte
GetACP
CreateSemaphoreA
InitializeCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
InterlockedIncrement
InterlockedDecrement
ResetEvent
GetCurrentProcess
GetCurrentThreadId
SetEvent
VirtualAlloc
VirtualFree
InterlockedExchange
FreeLibrary
LoadLibraryA
GetModuleHandleA
Sleep
ReleaseSemaphore
WriteFile
SetFilePointer
GetStringTypeA
GetLastError
GetVersionExA
GetCommandLineA
GetVersion
GetEnvironmentStrings
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
SetLastError
TlsFree
SetHandleCount
RtlUnwind
HeapFree
HeapAlloc
GetFileType
GetStartupInfoA
GetStdHandle
GetOEMCP
TlsSetValue
TlsAlloc
HeapCreate
HeapReAlloc
TlsGetValue
GetEnvironmentVariableA
HeapDestroy
IsBadWritePtr
ExitProcess
TerminateProcess
user32
SetRectEmpty
wsprintfA
advapi32
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey
RegEnumKeyExA
RegSetValueA
RegSetValueExA
RegCreateKeyA
ole32
StringFromGUID2
CoLoadLibrary
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
CoInitialize
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
P2PMediaStreamIoctl
Name
.text
Size
136KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
992B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=36, id=14, version=7299,
count=118, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=4, productName=Unmarked objects (old),
count=4, id=19, version=8022,
count=134, id=1, productName=Unmarked objects,
count=13, id=19, version=8034,
count=1, id=28, version=9178,
count=67, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/TNProxy.dll
- IMPHASH cd70e39e6e438786ef4a72074fe055fb
- SHA256 a5eb63b4b688db5a52426f652d3957137c745cde145674eb9d0599d0c744605f
- MD5 cc6921226c188f77f860dc7e79bf52ca
- SHA1 89c678e1585d3b20e5dae828841b592351501a48
- SHA512 dc22597524112bf077c7f492ba461ada06131b64bfaa527c13a3ae4976c75e31f8604038d3c0c1417a8cb3ae594c933d76ec77a075d3359abcdb0acdae97074b
- SSDEEP 12288:TxD02aCBEGyBGBbYBlRxS3j0fBCyiN9mL:J0l9LcbYB7gT0iN0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
437332
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
InterlockedDecrement
HeapFree
FreeEnvironmentStringsW
ExitThread
GetTimeZoneInformation
SetEnvironmentVariableA
InterlockedExchange
CompareStringA
GetLocaleInfoW
GetStringTypeW
Sleep
CloseHandle
TlsGetValue
TlsAlloc
TlsFree
TlsSetValue
GetTickCount
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetLastError
TerminateProcess
SetUnhandledExceptionFilter
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
SetFilePointer
ReadFile
GetCurrentProcess
RtlUnwind
WideCharToMultiByte
GetCommandLineA
GetVersion
RaiseException
CreateThread
GetCurrentThreadId
GetStringTypeA
HeapCreate
GetSystemTime
GetLocalTime
HeapAlloc
InterlockedIncrement
ExitProcess
HeapReAlloc
SetLastError
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
CompareStringW
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
HeapDestroy
GetCPInfo
VirtualFree
WriteFile
UnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
IsValidLocale
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
FlushFileBuffers
ws2_32
htonl
inet_addr
htons
ntohs
ntohl
setsockopt
listen
bind
WSAGetLastError
connect
inet_ntoa
__WSAFDIsSet
select
getpeername
recv
accept
ioctlsocket
gethostbyname
gethostname
closesocket
socket
send
sendto
recvfrom
WSACleanup
WSAStartup
iphlpapi
GetAdaptersInfo
GetIfEntry
wininet
InternetGetConnectedState
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
508KB
Virtual Size
506KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
52KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
131KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=5, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=23, id=11, version=8047,
count=28, id=14, version=7299,
count=136, id=10, version=8047,
count=24, id=10, version=8966,
count=2, id=93, version=2179,
count=5, productName=Unmarked objects (old),
count=13, id=19, version=8034,
count=143, id=1, productName=Unmarked objects,
count=58, id=11, version=8966,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/TRadio.ocx
- IMPHASH dd27a8fc8270628e2b7a039bf349b8db
- SHA256 9c6fa9f98d8120d5b3fef07df0542140448e06a971a16ea6d5128a0e659a05d8
- MD5 0979b18119733a7750da4aa0ff6d0e96
- SHA1 b3cb200b5e3f173142cf260edd1413f3a3affc37
- SHA512 51b2cd743fb1bf8fe7311c11355240922ee964dda75e7cc340853d883bf47441270a199323bcf8ce048eb3f8879a19c8231388c17378c87656be4319acccc8ca
- SSDEEP 3072:VvbjJuXRW1rRWqd/5Aun3rWaj+mkKzZdKZwNT8DXbYAF4ADVF5QUilRouqja+JV2:VjVOG0q7n3rUKzZoZL3DDzvag4M
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
88143
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
socket
closesocket
bind
recvfrom
sendto
select
WSAGetLastError
ntohl
ntohs
WSAResetEvent
inet_ntoa
WSACleanup
WSACreateEvent
WSAStartup
WSAAsyncSelect
htonl
setsockopt
WSACloseEvent
WSASetEvent
inet_addr
htons
kernel32
CreateFileA
ReadFile
DuplicateHandle
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
GetCurrentProcess
WriteFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
GlobalSize
WritePrivateProfileStringA
FindResourceExA
CopyFileA
GetFileTime
GetProfileIntA
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
ExitProcess
TerminateProcess
HeapSize
SizeofResource
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTickCount
SetEvent
WaitForSingleObject
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
CreateEventA
CreateThread
MultiByteToWideChar
GetModuleHandleA
GetModuleFileNameA
lstrlenA
OutputDebugStringA
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalFlags
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetLastError
lstrcpynA
MulDiv
SetLastError
GetUserDefaultLCID
IsDBCSLeadByte
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
lstrlenW
GlobalLock
GlobalAlloc
lstrcmpA
GetCurrentThread
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetProcAddress
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
SetHandleCount
GetFileAttributesA
GetFileSize
HeapReAlloc
user32
InvalidateRect
GetDesktopWindow
DestroyMenu
CreateMenu
IsRectEmpty
RegisterClipboardFormatA
PtInRect
SetCapture
ReleaseCapture
GetDC
ReleaseDC
SetRectEmpty
TabbedTextOutA
DrawTextA
GrayStringA
SetRect
GetClassNameA
ClientToScreen
GetWindowDC
CreateDialogIndirectParamA
EndDialog
EnumChildWindows
LockWindowUpdate
DestroyIcon
UnregisterClassA
LoadStringA
GetSysColorBrush
InsertMenuA
GetMenuStringA
CharUpperA
AppendMenuA
RemoveMenu
DrawEdge
InflateRect
GetDCEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
IsWindowEnabled
SetCursor
LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
GetTabbedTextExtentA
GetDialogBaseUnits
SetParent
IsDialogMessageA
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
SendMessageA
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
wsprintfA
MoveWindow
FillRect
EnableWindow
DefWindowProcA
BeginPaint
GetClientRect
EndPaint
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
LoadCursorA
IsWindow
GetClassInfoA
GetParent
KillTimer
SetWindowTextA
CopyRect
SetTimer
PostMessageA
SetWindowsHookExA
gdi32
RectVisible
TextOutA
ExtTextOutA
Escape
SaveDC
PtVisible
SetMapMode
SelectObject
SetBkMode
SetROP2
CombineRgn
SetViewportOrgEx
CreateMetaFileA
DeleteDC
CloseMetaFile
DeleteMetaFile
LPtoDP
GetDeviceCaps
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
RestoreDC
MoveToEx
GetCurrentPositionEx
DeleteObject
CreateRectRgn
ScaleWindowExtEx
CreatePen
CreateSolidBrush
CreatePatternBrush
CopyMetaFileA
CreateDCA
GetTextMetricsA
GetTextExtentPoint32A
GetTextAlign
CreateFontIndirectA
EnumFontFamiliesExA
PatBlt
UnrealizeObject
Rectangle
SetRectRgn
CreateRectRgnIndirect
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
SelectClipRgn
OffsetViewportOrgEx
GetStockObject
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegEnumKeyA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegDeleteKeyA
RegSetValueA
RegCloseKey
RegEnumValueA
RegOpenKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyA
RegQueryValueExA
shell32
ExtractIconA
comctl32
ord17
ole32
OleDuplicateData
StringFromGUID2
CoCreateInstance
IIDFromString
CoDisconnectObject
OleLoadFromStream
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CreateStreamOnHGlobal
CoRegisterClassObject
ReadFmtUserTypeStg
StringFromCLSID
ReadClassStm
CreateOleAdviseHolder
CoTaskMemFree
OleSaveToStream
ReleaseStgMedium
CreateDataAdviseHolder
OleDestroyMenuDescriptor
CreateDataCache
CoTaskMemAlloc
OleCreateMenuDescriptor
CoRevokeClassObject
olepro32
ord250
ord252
ord251
ord253
oleaut32
VariantClear
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysFreeString
VariantInit
LoadRegTypeLi
VariantChangeType
SysAllocString
VariantCopy
SysAllocStringLen
SysAllocStringByteLen
SysStringLen
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
192KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=39, id=19, version=8022,
count=73, productName=Unmarked objects (old),
count=27, id=14, version=7299,
count=139, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=487, id=1, productName=Unmarked objects,
count=21, id=19, version=8034,
count=132, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/TVChannel.dll
- IMPHASH a3e31be2f7962d46237211d249faa5d0
- SHA256 9e213bc6c8859e10efafed3c53a4fefdf17eb3b7fe2074f169a8d2b64443a365
- MD5 b960580733b126435027dfaf04ce44bf
- SHA1 93392624a0da1410c0b8faa0425b3cdc2278e61c
- SHA512 411f18896e31c5721a3506bbbe3f252f59b402aa7294d3ae47782991bd55b9cb2f53bf52373c6b6b3115b883f4b1159aacbab53ff57637d8f10f6880ab7e28e4
- SSDEEP 384:nOSUm6qpCfF28La34fVjsI9lk2HIkoRwjlk2WtV5bMvmMh:UXqUVuo1smkeSGxkvtV5bQmO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11867
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord5290
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4353
ord3798
ord818
ord1232
ord1168
ord567
ord825
ord4275
ord4033
ord800
ord537
ord2152
ord433
ord823
ord5575
ord2379
ord540
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4424
ord3742
ord5307
ord6374
ord5714
ord4622
ord3738
ord561
ord815
ord5500
ord1132
ord6467
ord1131
ord6354
ord1799
ord614
ord1206
ord2623
ord290
ord6055
ord4226
ord2486
ord4003
ord1601
ord860
ord1158
ord3258
ord2233
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord2033
ord2727
ord2730
ord2729
ord5431
ord3348
ord4351
ord2989
ord3579
ord2625
ord297
ord619
ord1114
ord3237
ord1226
ord539
ord1214
ord2988
ord1113
ord2464
ord2393
ord1656
ord434
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord5289
ord4079
ord4698
ord1223
ord1253
ord1255
ord1197
ord600
ord826
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord269
ord1578
ord1570
ord1243
msvcrt
_strcmpi
??1type_info@@UAE@XZ
_ftol
free
__CxxFrameHandler
_adjust_fdiv
_initterm
malloc
_onexit
__dllonexit
kernel32
LocalFree
lstrlenA
LocalAlloc
user32
SetTimer
wsprintfA
EnableWindow
IsWindow
GetClassInfoA
advapi32
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
ole32
StringFromGUID2
oleaut32
VariantInit
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
Name
.text
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=3, id=19, version=8022,
count=2, productName=Unmarked objects (old),
count=8, id=19, version=8034,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=169, id=1, productName=Unmarked objects,
count=8, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/VCodec.dll
- IMPHASH 7bb281f2034c5cb2d33ce586943ce4e6
- SHA256 8c68f733978454b5907a32c3640421ad63ceec368eba198f31fecdfa255daa79
- MD5 6492399438daa0f92f6e63a3a03ba993
- SHA1 087658cf1885500211905f0ff71ca6767a675047
- SHA512 b7275001f8041969be85580349382b556f6484b1931988cd3fc481d4e85673099fe832f7e5610c5abe24006a2c9b6bfbda4a855328c67537d42242f55f00e255
- SSDEEP 6144:+A2IhABXYK6e7oQtYxB6Kf8JPut2I92C2Lfd5FUikdrvM:+A2IhABXYKPYFfCub2LfFSz
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
275053
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InterlockedIncrement
InterlockedDecrement
RtlUnwind
msvcrt
__CxxFrameHandler
_ftol
fclose
??2@YAPAXI@Z
fwrite
fseek
fopen
sprintf
free
??3@YAXPAX@Z
calloc
floor
_errno
_initterm
_adjust_fdiv
malloc
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
276KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
4KB
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=42, version=8803,
count=4, id=14, version=7299,
count=5, id=10, version=8047,
count=2, id=4, version=8047,
count=1, id=42, version=9030,
count=81, productName=Unmarked objects (old),
count=3, id=19, version=8034,
count=25, id=1, productName=Unmarked objects,
count=2, id=48, version=9044,
count=24, id=49, version=9044,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/QQLive/busy.gif
- SHA256 128d93cade7711771e1399c01e49d58ede359510e398cbe7b519f0b99a66e8af
- MD5 d6a75934404ca61ebcc325eea122039f
- SHA1 04885559d28a46fde6119fe426f29b3e90cb86cb
- SHA512 aee3bab8807cb752a3ff3b28dab9e13fcc658c4cd5474651f73be1139cd06c322ab3578f3bd5294d4de46c81c326793172cafdc37312bf44fe465a9ea51637ad
- SSDEEP 192:Hn6DwO73MNn6NobUNGjT/Imyrr4PHnThDDH00ok2uaT9523YqwRN9Kz7zgk5aNRB:HdO4V6NooGH1YsHU0okVaAYqAaz/gZJ1
- MD5 SHA1 SHA512 SSDEEP
Modules/QQLive/loading.gif
- SHA256 b35fccf945607518559f69117c4f53ac1c5c90bc3cdcffd1a5505039e1d7aa67
- MD5 f993c494495d6e8e0562d8d141566fc3
- SHA1 29126847e4193eac35de85c5f0b53c0efa081ff6
- SHA512 0f9dc74c098dec87390d1d95d8fe51d57431a1b2249e026c51f30bb4a261c1a261fda3bbd4752901dcc13e71fcadc2385e9efc8fa2f998080f9d73430b0dfc04
- SSDEEP 192:4dDNdpsb53bbZDusshaEasH6qysEN84U2ks2lGv:4dDxK531uZeNo2sY
- MD5 SHA1 SHA512 SSDEEP
Modules/QQLive/notAllowd.gif
- SHA256 15e40150221facefe87b1b23a410445bcc5a0c5559bd63d8b09c4f9a68a2ebc9
- MD5 ac7b9c171ddb985bb8d650f3c682eb05
- SHA1 7d7edce61bc2e16535a2f76fad40bdc57855575e
- SHA512 a40447227ba6adb174179d2dc7099bf4d3cc10d35207877e3ad764643f87000dfb95763f9536b3bd9d3569fb109ea743cda7e693786873a60d1fc07b61f86a01
- SSDEEP 384:rnmQczvCUdUjk86Ubmk8ADn7V2DrO2cx+FGfCriQfM:GzvCVaksAnVKbcx+FGa/E
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/DURATION_SLIDER_HOVER.bmp
- SHA256 c0ef69c18ee948a9c9d55b6ad1495ec7b13f6401351d542d2528d6c27a0639f2
- MD5 388fdb98345b542ed39ad73a700345cd
- SHA1 335958426df1d521eb4786d513af11b88d61f793
- SHA512 22a6cb01d282f1f9510f1808a35a9b4c091ecde6d8f7c3043548de630744d1310a0e8aadc462b5fe26b1bb56a370713f0b32dab7271596d11c5c49e403b67de8
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/DURATION_SLIDER_NORMAL.bmp
- SHA256 8c1532fe644b1485441c5ee2e7a974646d28a739fa9153472b7a9cf3651a3570
- MD5 bdabfcbfe55bbf9aa7ac6dc873040961
- SHA1 e02087af5028a2706824713f47ed92a3e76f77c7
- SHA512 72e66f74234a0238d7f0577853924ebe3d3b589d244e65c8d804eaac04169657fba3b2e2d49ad8391703dd3735cf65450aa76f2093239481d58cdefbc00030aa
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/DURATION_SLIDER_PRESSED.bmp
- SHA256 700b88c98125172ecd3b56fedc2f993c09f8967d93bfa006e6302c6114798884
- MD5 1a2b8c3f0cf8386c6e64a110d82c481b
- SHA1 cb5b8babc29e455e0c47dd51c86bf4ae25dc1b80
- SHA512 ee34cbb50e4fa1f91a8f7826560a012ba74182c96a1de16b013016cda09d036e5dad8ed55befc7cc4b7eee7514dbab8e461d7692ab87a5512149a314acbe434e
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/FULLSCREEN_DISABLED.bmp
- SHA256 1f6a0bc9d74a9081a4351b60a22069b2c78258c30c199c3ac4f8abf3ee9ec941
- MD5 11d03bddaa7d4c8280547a91036a835c
- SHA1 c921e968dcef0c5ca6e0e476b6d298e163b1df5d
- SHA512 c639a92ea3047e8fd83da16fd16bd66511f0cd82b90d6921228171604a7a0898a5d60603f46cfee275309a1cad36aad8bcdae6a5655faecefbf1f65330be1883
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/FULLSCREEN_HOVER.bmp
- SHA256 9edd53d3896ffbfd24ce8e6bb3d765543cf73065f6b70e73311e283976db6982
- MD5 07b26d3daee0ce359b1fe9c06770034f
- SHA1 63ff6830f882c05eee457b403b87bf43216c51bf
- SHA512 814a0a329f5dbaedc820dbc808bfde6ba33219f285746bf1238e4fa1588a7cf40f426615ef5e277b637b1e15e7a976ad6e9a989735a12c1d227e20d08ac9cd8d
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/FULLSCREEN_NORMAL.bmp
- SHA256 fb744ae8a79a8d06f7a5fcc2e033fa96617780a0cd5a1ca829db650ad1b1bb88
- MD5 436bb0be8eb676bb860219ae42da169b
- SHA1 74cdd6f91ef9ec60c47ef3a1a9e31ef87348b8f6
- SHA512 0da648d6f6af34553ea590d5fcf0ce1c100b563b646c139fe882d3c31c078daa1692d2a7df1e74af18b992332330a09b47b99d7ea98ee6a47cb08a8ba8e497a7
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/FULLSCREEN_PRESSED.bmp
- SHA256 70d3942b0e9f306855793a7ed5e8244f628c4cd85c9bd8f5a0b4b9758bb651a2
- MD5 5cb4026e8373219d973f11c35451065e
- SHA1 a535aa706f716a2c5be65294156cc3c2f4c590da
- SHA512 f5a4546681e8dfe1718ba6677aede19bdb08bd906c8438c1ca908a94a260f51aa52961aef770ebc6a20410c8717bc400cd7fedd1637922913f7bec35708b81db
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/MAIN_DIALOG.bmp
- SHA256 2f5610d10cd669531184db0abed520f34b69dc39dbf58ff64b397065bcd38082
- MD5 5240d0cce5dc0a077dcc9bfd76808e5b
- SHA1 d2e8ae4e14d68073c2551aad4ff1e113aa4fdd5e
- SHA512 92a7386c2b5340b4ce4570f9c52921ec84c4398a2a53c012f643263fd1a50e2af797dbb8658c4810e1dd1d0ae7e8633c02e575ed3305e24b8ee2132430f7d4ea
- SSDEEP 768:RicccccczccccccccccccccccccccccccccccccccccccccccccccccccccccccL:JgkM4OzKO
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/MUTE_HOVER.bmp
- SHA256 905858061f98c9ba62f231c0a85dff68497fbb64fcf3876a3fd79ed172dc1c19
- MD5 787340248d4c3e6009ea404d151326af
- SHA1 35c34bd5b67033e79604a4100236d467a77ba76b
- SHA512 c2a99bc562db802e2c30fa669fc099a412b5ced91597444fdedbb4b4cd78c7144c735cd0a591539fab0f9efa3c3c9926204325f3145f397034103cdc457f55a5
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/MUTE_NORMAL.bmp
- SHA256 3e4cd2429df15ed1c5b928b19d15e6e0fc3450c8887ce874e6f7b55da4d67e93
- MD5 3395030cb99467aeef5cac0d2483a92d
- SHA1 ba36a427a226f5bed0598994b273367bc7fddc85
- SHA512 7a515dcfe196e3f24f79405bdc4d3fd01637c7bec58a07363b360bae0430e9f384033acea1b57239d51a053436076346db042a91db6bfd86ea098d89dbdffb18
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/MUTE_PRESSED.bmp
- SHA256 3e3f29482371ae4847ee91aeed9135d3051278a2bb97acba07084233afa3b4d2
- MD5 fe7f9835226e1f66d8945b1696678656
- SHA1 53c886b1e1c11f7d583ed7df3eb8f537e9263374
- SHA512 ec680459c9d2b00c6c5767c38bc5772346dc83a8828ced6fadfdb4184251da4938d6fef82aafebfa9a53a8bf995f548082b7b03a43cdd39a51b3e6e68a25fd7f
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PAUSE_HOVER.bmp
- SHA256 cd857849d79efb4410b00dff8f6177ed0b6983548db07072d3ebc7a49da31f4a
- MD5 46863f6f7dff4c4125d8f3f8a8f00d6b
- SHA1 bd563c37badc2c7164af38aecbf5fd82b6fe11ab
- SHA512 0b09ce27fb451ef37095f37db8d1bd25c0e0b86728aee3112db7aca3ac8e8dbfd786acd99b06b3119f842747f6b0a3d26d0284cf5bd03c2334051695fae3d30a
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PAUSE_NORMAL.bmp
- SHA256 49a79f2b7f566709277416ae4d00c2d42167ff6b03a3291d46598ad79ad8d6dc
- MD5 e79f8438f27a08ca19fe42023aa2524b
- SHA1 cfc69e16b0d4642f51de0dc9e52667db144987b8
- SHA512 809dece0cb888d6b90de80c7803477a0537308c595260933cf75940b880be2691277069269bc6842fd3fb0847c3be3ea07c63516a9320bdddd105cd36cd1c53b
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PAUSE_PRESSED.bmp
- SHA256 b9282b858654a7d81994604f55f6861c4bed0f1098bfb0cc65e469fd9038fed5
- MD5 2a38f2d13cfd6ebd3d17b2c66a25d309
- SHA1 19c2ecd5463d1edaaa6548defc9e28ce75871b02
- SHA512 e6677a51f9873401227ba09c936689eccb0272b680081d37db36ed207810dd085240ff3f1abc95d39d1dbf91faf88cb8a13f5a3424e92dcac738a516b329777a
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PLAY_HOVER.bmp
- SHA256 d57c4311d6f6ba380927dd9d7e70f6b320bf3c230ff79a391be7143ce0c51903
- MD5 323d9ff80f5ec91a3a9a17041a05fdbc
- SHA1 f7faff1cd4eb3ecd47fed9c281ae1907f085b02f
- SHA512 708a2d6b31db1414a7b7f1aff0c7bb1cd381071d34ddb079de15ef739a716cfb19cb5125827e124371478130d5a098a583b28e11bac53d86a0e6310be739bfe0
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PLAY_NORMAL.bmp
- SHA256 5b5fb0aab40036261ccf8a4b2003fc23c70254a3f5bb9a1175b7e7e5d61d842a
- MD5 0343898b3076d1295e994b0a67127c05
- SHA1 b3df845e4637cc447664f08445e1d8bcd1333892
- SHA512 e3c22917348deec13935741a6d7445e49e136cc471fd0960827f707096ab56e24713ca6cc7d5851d790b48f3bc3326e4b270610fb2821d2a7b672b190bbefc22
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/PLAY_PRESSED.bmp
- SHA256 98188a12a82991b28989fb7a85bddb0da89e755b3f6733e7e996400ede3ca463
- MD5 50c90ebe9acafd6d90aa5c414f08b0fa
- SHA1 fc4cd19c0c01e856a29a75f0333a8cd6ea8690a3
- SHA512 8ab9079468fd8ca93e84817e036e8aeb7ca003c0d822a16fd4ac9c56e4435d0292021b51a0bd91987f461a4cc622b339147da8e0ec7f029b8034bd4cde32fbdb
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/SOPLOGO_HOVER.bmp
- SHA256 49090bf9b55c047fc6fd7468b4e30389166416f2905bbcd2585923b8a6fd262b
- MD5 f6745d4167e510de292ce67f4b063687
- SHA1 fdcb895df771c8fcea13e6892dc14a155d4f265b
- SHA512 801a5355db3dc8e0ac4cfb3b779fa780f0753533afa3cef15278edcdc8b7a82c19ed9fb8e5b24b6b9276ddb0b90df32ac2c418b95052a0be385173a85865c414
- SSDEEP 96:SdyAeecVxcccc3aMN8YHcC91arUDwm1xC8cK1gNvfKL7wbmN03eXFSz2OT:SSecVxcccc37lR1armwm1x37QO7OmCSI
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/SOPLOGO_NORMAL.bmp
- SHA256 49090bf9b55c047fc6fd7468b4e30389166416f2905bbcd2585923b8a6fd262b
- MD5 f6745d4167e510de292ce67f4b063687
- SHA1 fdcb895df771c8fcea13e6892dc14a155d4f265b
- SHA512 801a5355db3dc8e0ac4cfb3b779fa780f0753533afa3cef15278edcdc8b7a82c19ed9fb8e5b24b6b9276ddb0b90df32ac2c418b95052a0be385173a85865c414
- SSDEEP 96:SdyAeecVxcccc3aMN8YHcC91arUDwm1xC8cK1gNvfKL7wbmN03eXFSz2OT:SSecVxcccc37lR1armwm1x37QO7OmCSI
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/SOPLOGO_PRESSED.bmp
- SHA256 49090bf9b55c047fc6fd7468b4e30389166416f2905bbcd2585923b8a6fd262b
- MD5 f6745d4167e510de292ce67f4b063687
- SHA1 fdcb895df771c8fcea13e6892dc14a155d4f265b
- SHA512 801a5355db3dc8e0ac4cfb3b779fa780f0753533afa3cef15278edcdc8b7a82c19ed9fb8e5b24b6b9276ddb0b90df32ac2c418b95052a0be385173a85865c414
- SSDEEP 96:SdyAeecVxcccc3aMN8YHcC91arUDwm1xC8cK1gNvfKL7wbmN03eXFSz2OT:SSecVxcccc37lR1armwm1x37QO7OmCSI
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/SOPSTATUS_NORMAL.bmp
- SHA256 4e3ac116c074020af25e4e1d9f4a7422066174447c9087dfcb5419ba683865d9
- MD5 7d6369163dc87e12df8fe1bc15ee6fc0
- SHA1 ebe1e12e5c950f8099138d123b717a6cfda79f0d
- SHA512 94ab6856f298e5a024dd972ebec4b58cfa2405821ab06573656f742a402585345a6a683969591e758824849ef5e494a3ccbc9fbe871c997b0fc12a10493d7c72
- SSDEEP 192:vpgvd8mHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHa:vpOd8R
- MD5 SHA1 SHA512 SSDEEP
Modules/Sopcast/vod/skin/STOP_DISABLED.bmp
- SHA256 0ba9ac8f8482eff5848a077c80b850f4e58e7172185c3038c652c9f3f413acf9
- MD5 39337f2f983fc1cd021942f37e19b523
- SHA1 7bc02b7732dbcb1a1ee24ece092ca269596d5819
- SHA512 1c68ab8c91828f57ea0b2ec21ef142ba94d90d3d9047960cecd95e2aca9b5897decbdcf936551f37f1736db0af558263dbb05699e8e33790b81ffa1661d7b242
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/STOP_HOVER.bmp
- SHA256 37e97ac0d1320e09d575aeb087ac329c6fdeff130d1e8c05c0438b1dac989f10
- MD5 20f9bb165c3f3d60fc53b1595f86ce14
- SHA1 561caba867c675e8145a90fa322c406cf01603d6
- SHA512 adea4b397210dc26bf98efa502e89af861a001d9e1425d5fb3cc2b34ad560f765fbb05fd9c2e91eb1e9bbeaac7152ebe52ab7338b5b30021e933a6395f7db81d
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/STOP_NORMAL.bmp
- SHA256 2615068d0dd0d1c807b5c7fb1fece4611d964aa2afa795f0028347c4c9178319
- MD5 73516979d0e11729558fa613344b9db3
- SHA1 5213c09c81335d0845f076c238cdd4890848d8dd
- SHA512 4e7e6332d3f74c3cc702a8a5dbf63e94012aca111b785f41ff2453de13b1c3ca890aa6ef0979981ff3cb90175658cbbccba32d49721cef4895fcd4241cad3b60
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/STOP_PRESSED.bmp
- SHA256 d841701bbc85afa9480deae782939d06396e4113a3a213631ad1938555c981c0
- MD5 d4a7ffd7fa1179854792f1f37662a8ee
- SHA1 cf769a04138ee0f936176ac245e76ce5b14d0a68
- SHA512 4bed933d8bf7db4f2fcc82b06129c26d77ee4ee49061aca775c177ebb47f95331d3b506fde6eb3f6092ff3808d11fa237de917e793b0c3bbae93c92c6d10bc9d
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/UNMUTE_HOVER.bmp
- SHA256 9ff32c94609e0f25317017bf5d260102beb8b11f3629b1edd02b265a68af33a6
- MD5 382ba697102db6a9373929f5b26f8c4d
- SHA1 6acac2b6997c8d02be31b7384061b1c6713587bf
- SHA512 05e2fed611c522d106ca5bdc39ea1f539187d13b10b31b6bbcfdbd0a09481480a04a6656904ce6f93027476ef621a52433950e9b9dc5c24f79eaa673d0cac79a
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/UNMUTE_NORMAL.bmp
- SHA256 2a32d72c6036763da322a31735ab4f1a9785a2bda56c4f73c1b878f426dd20a6
- MD5 9a3bebed6c89ce1c3c6760a0c3cdc140
- SHA1 be78fcc9cabedaf97e6c280440e4e155312419fe
- SHA512 0790a9bbab98017dff0c0ee00bc4268d42591a1429ef6cd74911bd3a80547c944cfdc782be36e7e4b1a5e30a2c745d344aee9f8d814e9d549a8e94810510f2b8
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/UNMUTE_PRESSED.bmp
- SHA256 0b5f3d8012eb5511c5760a7a78ac7ace286d36c09d525b39ba646e1c2bcef0c5
- MD5 f8153a6c7da84b97ab8ec8649872351c
- SHA1 9b7d0dcf27f7dcdfda823449dc7dfb948b35c793
- SHA512 b6031aab03dd50215c7c72db6a6f1f3da1b179565ef43bcf854d00b302cec9d5ba6fb08602ee9fdddf0cac49ebcfa190b5180cfe5d2ea4fceae9b3944639ac97
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/VOLUME_SLIDER_HOVER.bmp
- SHA256 ca9fb8e48979d8cda955db98ef122a1cd4ce7a56e5ce8437513dea088492e251
- MD5 2a6a651e3526b7ec2a7e24d79388ba7b
- SHA1 f54e10a68ab919eb7d5bd2379fe71f65bc65e3e2
- SHA512 587454ad0a9a5eec6e633c3129ef8d9b079ace0ec2d677c88009a0c0d3d3ff8e54df84db5197f09202f66e9faa04cdc9968a11d281ca865f2bf0f68e081f6a3d
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/VOLUME_SLIDER_NORMAL.bmp
- SHA256 b65504b15eebe6796d43a46d9767df332895fcaa1e2a85babfc325915d55b477
- MD5 88a33102d71fa2a3260dcf4cbb6988b2
- SHA1 7a2dd67e8bfb98295aa0d9adee1bdfbf3fea705e
- SHA512 090cd6fb43a3e0570a2af9361f31b9c10eeba8f25f76f02877a789414889b4e59e9a9b6697259ce5655d29db98d7a813277d89d864143af22ed95845ba3af659
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/VOLUME_SLIDER_PRESSED.bmp
- SHA256 deace2e64c0a9d33318cd19017c3142e6aa4999b6847bcdf67c4a1ae88cca251
- MD5 4aad989d2b60b88539501c88f3297439
- SHA1 1a9b4b7cfa2b63bc02e4b4b9836feae075431674
- SHA512 f21ea8d0b92c20504e92986dc17d7d82733e0d3027ef8d50bddb0f9509b42c164980e685174bcdad7fd2094f351827528ce81ecd9c60f640ba992edfed7c8773
- MD5 SHA1 SHA512
Modules/Sopcast/vod/skin/sopcore.xml
- SHA256 7e640520704d05238279160d195104e40b71ab7a0e64d114426d7e10d8749e8f
- MD5 c0184798ae0d699a4347657b4bb1809b
- SHA1 f16a67c5c725e7989685f1804cd5954317d719dc
- SHA512 d3a7d169a5d3a6baca505ca97c63636bf80f555a49c11f74ad1c7ea02821e9321ab35a5be6c11162fcc47bed208a456ee3c9f53d4a89e42c7ed3e39004a2fbe3
- MD5 SHA1 SHA512
Modules/TvKoo/KooPlayer.ocx
- SHA256 cfae4deb8b5d8d77721b98df7e92fc0a10f65a0a3741460604c4697b4b976eff
- MD5 908d19ab87499465c0433bea3e23a985
- SHA1 11919e102e7cd3fab7398486f2e989b5cd513995
- SHA512 2f488fdd25fc4ec7dd09302f1d86ef1627f8088936a78f5e6f437803b5f5f4b7f650ddc178621ff5ce7902da258e8cde63e715979814fe884e5d55ae7610b3f5
- SSDEEP 6144:Z6dd3YwSnsHnQQuohhK2HGGG8zxBZt8TjeRkynlhE2YI/ZnraLu:ZEIPsHQQVhh5BGs8P9ylainuq
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
f1:d0:97:d4:c5:68:f0:f5:a9:b1:4a:f2:71:1a:75:a1:92:e6:43:cd
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Chengdu Koos Information Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CEO,O=Chengdu Koos Information Technology Co.\,Ltd,L=Chengdu,ST=sichuan,C=CN
Chains
Feb 29, 2024
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Timespan
Jan 29, 1996 - Aug 1, 2028
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Chengdu Koos Information Technology Co.\,Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=CEO,O=Chengdu Koos Information Technology Co.\,Ltd,L=Chengdu,ST=sichuan,C=CN
Serial Number
60:00:1d:d8:c5:a2:48:57:e4:7d:69:88:9a:88:17:fd
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 30, 2007 - Jan 30, 2008
Minor OS version
0
Major OS version
4
Entry point
728448
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
UPX0
Size
Virtual Size
440KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
268KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=13, id=28, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=12, version=7291,
count=39, id=19, version=8022,
count=100, productName=Unmarked objects (old),
count=517, id=1, productName=Unmarked objects,
count=23, id=19, version=8034,
count=30, id=14, version=7299,
count=141, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=170, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/feidian/MMCShell.dll
- IMPHASH db66491969ea03ade0fd771b90e730f7
- SHA256 f5207d8c6eed19e4f98eca02675c599753fd29be1ce2e83415e8db630a8b17af
- MD5 dc219c06db37aeed564a7a81c4724d31
- SHA1 36382de99830d3b476b60bca6bc22dbc705514bc
- SHA512 ef527a989961f86646e6e7a92ad8928b83626d1f9e9536e97b96b20621d8580fa25cc45ae9660728525bf86d18212c31087c1f38650512577108a61276737a1c
- SSDEEP 3072:6h4J5UFIoVJ1z8/Ishj7n0f2neM7c2eIzzhbIBb6SS2MMV+UybJlQnJRl5EEhUOq:6hU5OvKjx7xFQOSZFdyE9JKPpSjK1WDS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121824
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetFileTime
GetShortPathNameA
GetModuleHandleA
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
IsDBCSLeadByte
HeapDestroy
GetLocalTime
SetThreadPriority
CreateThread
FileTimeToLocalFileTime
GetTickCount
HeapReAlloc
HeapFree
GlobalFree
GlobalReAlloc
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointer
GetStringTypeA
RtlUnwind
FileTimeToSystemTime
HeapCreate
GetSystemInfo
HeapAlloc
DisableThreadLibraryCalls
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
Thread32Next
CompareStringA
GetCurrentDirectoryA
CreateProcessA
lstrcpyA
MulDiv
lstrcmpA
Sleep
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetVersionExA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
ReadFile
ReleaseMutex
lstrcatA
GetTempPathA
GetTempFileNameA
FormatMessageA
LocalFree
GetThreadLocale
GetStringTypeExA
DebugBreak
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
lstrcpynA
lstrcmpiA
lstrlenA
TlsSetValue
FlushFileBuffers
TerminateProcess
DeleteFileA
TlsGetValue
CreateFileA
WriteFile
WaitForMultipleObjects
TerminateThread
WaitForSingleObject
GetSystemTime
SystemTimeToFileTime
CreateMutexA
CreateEventA
OutputDebugStringA
SetEvent
EnterCriticalSection
ResetEvent
GetStringTypeW
LeaveCriticalSection
CloseHandle
DeleteCriticalSection
InitializeCriticalSection
SetLastError
GetLastError
user32
EnableWindow
ReleaseDC
EqualRect
OffsetRect
CharUpperA
GetDesktopWindow
SetParent
MoveWindow
GetDC
IsRectEmpty
IntersectRect
CopyRect
ShowWindow
ScreenToClient
GetCursorPos
GetForegroundWindow
SetForegroundWindow
GetWindow
PostMessageA
LoadStringA
wvsprintfA
CharNextA
GetClassInfoExA
LoadCursorA
RegisterClassExA
FillRect
wsprintfA
SendMessageTimeoutA
PostThreadMessageA
DestroyWindow
GetClassNameA
GetClientRect
GetMenu
AdjustWindowRectEx
SetWindowPos
CreateWindowExA
GetWindowLongA
SetWindowLongA
KillTimer
ClientToScreen
GetWindowRect
PtInRect
GetParent
SetCapture
SystemParametersInfoA
SetTimer
BeginPaint
LoadBitmapA
DefWindowProcA
IsWindow
SendMessageA
MsgWaitForMultipleObjects
DrawTextA
SetWindowRgn
IsWindowEnabled
EnumChildWindows
EnumThreadWindows
UnregisterClassA
UpdateWindow
InvalidateRect
GetWindowRgn
GetCapture
ReleaseCapture
GetDlgCtrlID
CallWindowProcA
GetClassInfoA
GetKeyState
UnionRect
IsChild
GetFocus
SetRect
SetCursor
GetMessageA
PeekMessageA
RedrawWindow
RegisterWindowMessageA
EndPaint
SetFocus
gdi32
BitBlt
StretchBlt
SetStretchBltMode
CreateCompatibleBitmap
CreateCompatibleDC
OffsetRgn
FillRgn
CombineRgn
CreateDCA
SetBkMode
Polyline
CreatePen
GetObjectA
ExtCreateRegion
CreateDIBSection
CreateBitmap
LPtoDP
SetWindowOrgEx
SetViewportOrgEx
DPtoLP
CreateFontIndirectA
SelectObject
GetTextColor
GetBkColor
SetBkColor
SetTextColor
GetClipRgn
ExtSelectClipRgn
GetStockObject
DeleteDC
CreateRectRgnIndirect
GetWindowExtEx
GetViewportExtEx
GetMapMode
SetMapMode
GetDeviceCaps
RestoreDC
SaveDC
CreateRectRgn
CreateSolidBrush
DeleteObject
PtInRegion
advapi32
OpenServiceA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
EnumServicesStatusA
ControlService
QueryServiceStatus
StartServiceA
CloseServiceHandle
RegCloseKey
OpenSCManagerA
RegEnumValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegDeleteValueA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
CoGetMalloc
CoReleaseMarshalData
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
WriteClassStm
OleSaveToStream
OleLoadFromStream
CreateOleAdviseHolder
CoCreateInstance
CoUnmarshalInterface
CoLockObjectExternal
oleaut32
SysStringLen
SysAllocStringLen
SysAllocString
VariantClear
SysFreeString
LoadRegTypeLi
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
RegisterTypeLi
LoadTypeLi
VarUI4FromStr
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_GetIconSize
msimg32
TransparentBlt
ws2_32
ntohl
inet_addr
WSACleanup
WSAStartup
closesocket
WSAGetLastError
WSASetLastError
recv
shutdown
send
connect
gethostbyname
htons
socket
__WSAFDIsSet
select
ioctlsocket
setsockopt
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
wininet
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenA
HttpOpenRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetConnectA
InternetSetOptionA
InternetOpenUrlA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
shrdata
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
110KB
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=9, id=14, version=7299,
count=8, id=95, version=2190,
count=25, id=93, version=2179,
count=300, id=1, productName=Unmarked objects,
count=10, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=18, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/feidian/XListCtrlDDRA.dll
- IMPHASH 1cd63e934d5b38d33aac278ea1d8ef06
- SHA256 03c3fdd23d6b0982eac96289671ab6d66c783d3ba98e37bc9b9de88b5c326614
- MD5 54b2bd5d43aca70ea8fcb0f1313669eb
- SHA1 68aea08eb618998ae218afea5d41ce14f80fc002
- SHA512 d3af17108040e26902363ec1d85e0bd0f127ce6ef3ffd133be37c62ccce4144407184c29c0a101db791495c9f27b46bb130dda430fbe3e432bef79250549f006
- SSDEEP 1536:MR0gEaqkWQH+euaDaEczRgkF+edm7WqLbcvLQz1LkrV4p4B:YfrrWOUaDaEczRgk47LQcgVOo
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
56869
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord823
ord567
ord825
ord6215
ord4275
ord6199
ord1270
ord1232
ord1168
ord800
ord4160
ord540
ord3619
ord1641
ord2860
ord2379
ord5277
ord2089
ord3797
ord2864
ord3626
ord3663
ord755
ord537
ord6172
ord5789
ord5875
ord5873
ord2567
ord2414
ord5787
ord283
ord2380
ord5788
ord472
ord2754
ord2642
ord4123
ord470
ord5981
ord3089
ord860
ord3874
ord5290
ord3803
ord2859
ord3610
ord656
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord692
ord6197
ord6380
ord4287
ord6128
ord3752
ord613
ord5678
ord5736
ord289
ord3711
ord783
ord3742
ord2099
ord3825
ord2112
ord4299
ord539
ord3402
ord3021
ord6453
ord4124
ord818
ord4400
ord682
ord2243
ord4133
ord4297
ord6654
ord2862
ord640
ord5785
ord1640
ord323
ord5053
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord5794
ord5579
ord5571
ord6061
ord5864
ord3596
ord6194
ord6021
ord3571
ord4243
ord2582
ord4402
ord3370
ord3640
ord686
ord693
ord384
ord1642
ord1146
ord6242
ord6696
ord4224
ord3286
ord3496
ord6905
ord3706
ord5781
ord2818
ord858
ord3301
ord6762
ord6007
ord3998
ord6907
ord2408
ord3293
ord535
ord955
ord6442
ord6605
ord1253
ord342
ord1182
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord4424
ord4627
ord4080
ord1844
ord3079
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord6880
ord1949
msvcrt
_mbstok
_mbscmp
memmove
_mbsicmp
_ftol
qsort
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
free
_initterm
malloc
_adjust_fdiv
__CxxFrameHandler
kernel32
GetProcAddress
FreeLibrary
LoadLibraryA
lstrcpynA
user32
GetWindowRect
GetFocus
PtInRect
GetSysColor
DrawFrameControl
GetParent
GetClientRect
RedrawWindow
GetDesktopWindow
SendMessageA
GetWindowLongA
CopyRect
GetClassInfoA
DefWindowProcA
LoadCursorA
InvalidateRect
LockWindowUpdate
SetParent
IsRectEmpty
GetCapture
UpdateWindow
LoadBitmapA
SetWindowLongA
GrayStringA
DrawTextA
TabbedTextOutA
FrameRect
IsWindow
BringWindowToTop
RegisterWindowMessageA
InflateRect
ClientToScreen
SetCursor
SetRect
ShowScrollBar
ReleaseCapture
SetCapture
SetForegroundWindow
EnableWindow
GetDC
ReleaseDC
GetCursorPos
ScreenToClient
KillTimer
SetTimer
PostMessageA
GetSystemMetrics
SystemParametersInfoA
gdi32
StretchBlt
CreateCompatibleDC
DPtoLP
GetMapMode
CreateCompatibleBitmap
LPtoDP
BitBlt
GetBkColor
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateRectRgn
GdiSetBatchLimit
GetCurrentObject
GetTextExtentPoint32A
Rectangle
SelectObject
GetViewportExtEx
CreateFontIndirectA
GetObjectA
comctl32
_TrackMouseEvent
ImageList_Create
ImageList_AddMasked
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Draw
msvcp60
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Xran@std@@YAXXZ
??0CXListCtrl@@QAE@XZ
??1CXListCtrl@@UAE@XZ
??_7CXListCtrl@@6B@
?CountCheckedItems@CXListCtrl@@QAEHH@Z
?DeleteAllItems@CXListCtrl@@QAEHXZ
?DeleteAllToolTips@CXListCtrl@@QAEXXZ
?DeleteItem@CXListCtrl@@QAEHH@Z
?DeleteProgress@CXListCtrl@@QAEXHH@Z
?DrawCheckbox@CXListCtrl@@IAEXHHPAVCDC@@KKAAVCRect@@PAUXLISTCTRLDATA@@@Z
?DrawComboBox@CXListCtrl@@IAEXHH@Z
?DrawEdit@CXListCtrl@@IAEXHH@Z
?DrawImage@CXListCtrl@@IAEHHHPAVCDC@@KKVCRect@@PAUXLISTCTRLDATA@@@Z
?DrawProgress@CXListCtrl@@IAEXHHPAVCDC@@KKAAVCRect@@PAUXLISTCTRLDATA@@@Z
?DrawTextA@CXListCtrl@@IAEXHHPAVCDC@@KKAAVCRect@@PAUXLISTCTRLDATA@@@Z
?FindDataItem@CXListCtrl@@QAEHK@Z
?GetBold@CXListCtrl@@QAEHHH@Z
?GetCellPadding@CXListCtrl@@QAEHXZ
?GetCheckbox@CXListCtrl@@QAEHHH@Z
?GetColors@CXListCtrl@@IAEXXZ
?GetColumns@CXListCtrl@@QAEHXZ
?GetComboText@CXListCtrl@@QAE?AVCString@@HH@Z
?GetCurSel@CXListCtrl@@QAEHXZ
?GetDrawColors@CXListCtrl@@IAEXHHAAK0@Z
?GetEllipsis@CXListCtrl@@QAEHXZ
?GetEnabled@CXListCtrl@@QAEHH@Z
?GetExtendedStyleX@CXListCtrl@@QAEKXZ
?GetHeaderCheckedState@CXListCtrl@@QAEHH@Z
?GetItemCheckedState@CXListCtrl@@QAEHHH@Z
?GetItemColors@CXListCtrl@@QAEHHHAAK0@Z
?GetItemData@CXListCtrl@@QAEKH@Z
?GetItemToolTipText@CXListCtrl@@QAE?AVCString@@HH@Z
?GetListModified@CXListCtrl@@QAEHXZ
?GetMessageMap@CXListCtrl@@MBEPBUAFX_MSGMAP@@XZ
?GetModified@CXListCtrl@@QAEHHH@Z
?GetSubItemRect@CXListCtrl@@QAEHHHHAAVCRect@@@Z
?InsertItem@CXListCtrl@@QAEHHPBD@Z
?InsertItem@CXListCtrl@@QAEHHPBDKK@Z
?InsertItem@CXListCtrl@@QAEHPBUtagLVITEMA@@@Z
?OnClick@CXListCtrl@@IAEHPAUtagNMHDR@@PAJ@Z
?OnColumnClick@CXListCtrl@@IAEHPAUtagNMHDR@@PAJ@Z
?OnComboComplete@CXListCtrl@@IAEJIJ@Z
?OnComboEscape@CXListCtrl@@IAEJIJ@Z
?OnCreate@CXListCtrl@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnCustomDraw@CXListCtrl@@IAEXPAUtagNMHDR@@PAJ@Z
?OnDestroy@CXListCtrl@@IAEXXZ
?OnEraseBkgnd@CXListCtrl@@IAEHPAVCDC@@@Z
?OnItemChanging@CXListCtrl@@IAEHPAUtagNMHDR@@PAJ@Z
?OnKeyDown@CXListCtrl@@IAEXIII@Z
?OnLButtonDown@CXListCtrl@@IAEXIVCPoint@@@Z
?OnLButtonUp@CXListCtrl@@IAEXIVCPoint@@@Z
?OnMouseLeave@CXListCtrl@@IAEJIJ@Z
?OnMouseMove@CXListCtrl@@IAEXIVCPoint@@@Z
?OnNcLButtonDown@CXListCtrl@@IAEXIVCPoint@@@Z
?OnPaint@CXListCtrl@@IAEXXZ
?OnRButtonDown@CXListCtrl@@IAEXIVCPoint@@@Z
?OnSysColorChange@CXListCtrl@@IAEXXZ
?OnTimer@CXListCtrl@@IAEXI@Z
?OnToolHitTest@CXListCtrl@@UBEHVCPoint@@PAUtagTOOLINFOA@@@Z
?OnToolTipText@CXListCtrl@@MAEHIPAUtagNMHDR@@PAJ@Z
?OnXEditEscape@CXListCtrl@@IAEJIJ@Z
?OnXEditKillFocus@CXListCtrl@@IAEJIJ@Z
?PreSubclassWindow@CXListCtrl@@UAEXXZ
?PreTranslateMessage@CXListCtrl@@UAEHPAUtagMSG@@@Z
?SetBold@CXListCtrl@@QAEHHHH@Z
?SetButton@CXListCtrl@@QAEHHHPAVCButton@@@Z
?SetCellPadding@CXListCtrl@@QAEXH@Z
?SetCheckbox@CXListCtrl@@QAEHHHH@Z
?SetColumnWidth@CXListCtrl@@UAEHHH@Z
?SetComboBox@CXListCtrl@@QAEHHHHPAVCStringArray@@HHH@Z
?SetCurSel@CXListCtrl@@QAEHHH@Z
?SetEdit@CXListCtrl@@QAEHHH@Z
?SetEllipsis@CXListCtrl@@QAEHH@Z
?SetEnabled@CXListCtrl@@QAEHHH@Z
?SetExtendedStyleX@CXListCtrl@@QAEKK@Z
?SetHeaderAlignment@CXListCtrl@@QAEXI@Z
?SetHeaderCheckedState@CXListCtrl@@QAEHHH@Z
?SetHeaderTextColor@CXListCtrl@@QAEXK@Z
?SetItem@CXListCtrl@@QAEHPBUtagLVITEMA@@@Z
?SetItemCheckedState@CXListCtrl@@QAEXHHH@Z
?SetItemColors@CXListCtrl@@QAEXHHKK@Z
?SetItemData@CXListCtrl@@QAEHHK@Z
?SetItemImage@CXListCtrl@@QAEHHHH@Z
?SetItemText@CXListCtrl@@QAEHHHPBD@Z
?SetItemText@CXListCtrl@@QAEHHHPBDKK@Z
?SetItemToolTipText@CXListCtrl@@QAEHHHPBD@Z
?SetListModified@CXListCtrl@@QAEXH@Z
?SetModified@CXListCtrl@@QAEXHHH@Z
?SetProgress@CXListCtrl@@QAEHHHHPBD@Z
?SubclassHeaderControl@CXListCtrl@@IAEXXZ
?UpdateProgress@CXListCtrl@@QAEXHHH@Z
?UpdateSubItem@CXListCtrl@@QAEXHH@Z
?WM_XLISTCTRL_CHECKBOX_CLICKED@@3IA
?WM_XLISTCTRL_COMBO_SELECTION@@3IA
?WM_XLISTCTRL_EDIT_END@@3IA
?_GetBaseMessageMap@CXListCtrl@@KGPBUAFX_MSGMAP@@XZ
?_messageEntries@CXListCtrl@@0QBUAFX_MSGMAP_ENTRY@@B
?messageMap@CXListCtrl@@1UAFX_MSGMAP@@B
?setForbitRedraw@CXListCtrl@@QAEXH@Z
Name
.text
Size
56KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
964B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=14, version=7299,
count=2, id=11, version=8047,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=301, id=1, productName=Unmarked objects,
count=3, id=4, version=9782,
count=15, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/feidian/dbghelp.dll
- IMPHASH 42cfa6142c38112bdaffa05fb22db82e
- SHA256 f881e5f97ab35531a84a1acd1bbff981a16ed3dfd2e112dfd3fdb4667768b937
- MD5 0a689529bfb40f136f2b6dfbdb6cf457
- SHA1 383f2f4998244c8e861a1ee25879eab24340d2f1
- SHA512 9284de1743a43cb6656138bcd21c6da6e485a111bfb62a1d34479725d13f42c55741cc5af2216e6eac3b97456e284c2d107cddf1f20989c47d347814513b2c92
- SSDEEP 12288:Q0BSfTnCPjjcLctBHcKPEGCR38w4HPWpeFAdiGxoYtAG:Q0BynWjjcLqB8KPEGCR38w4HPWW6oYt7
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
198628
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
dbghelp.pdb
msvcrt
__dllonexit
_wcsicmp
wcsncpy
wcscmp
wcsncmp
__CxxFrameHandler
_wsplitpath
_wcsnicmp
towlower
__unDName
fclose
wcstol
_CxxThrowException
bsearch
_snwprintf
fread
fseek
_wfopen
fopen
_osver
_mbsnbcpy
fflush
_iob
_wmakepath
wcsrchr
wcscpy
_wcsdup
ftell
_wgetenv
_mbsicmp
_access
_fullpath
_fsopen
_wfsopen
_sopen
_wsopen
_wfullpath
_read
_write
_onexit
_chsize
_close
_get_osfhandle
_open_osfhandle
_winminor
_winmajor
_mbscmp
_memicmp
wcsncat
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_adjust_fdiv
_initterm
time
memmove
_ftol
swprintf
calloc
wcscat
_ltoa
_itoa
printf
_vsnprintf
strncat
tolower
_strcmpi
_makepath
_purecall
malloc
free
_strlwr
isspace
ctime
strstr
??2@YAPAXI@Z
??3@YAXPAX@Z
qsort
strncmp
_strnicmp
isxdigit
wcslen
sprintf
strrchr
strncpy
_except_handler3
_splitpath
_stricmp
strchr
_lseeki64
wprintf
kernel32
GetFileType
Sleep
DeviceIoControl
ExpandEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
CopyFileA
SetFileAttributesA
CopyFileW
GetFileAttributesW
SetFileAttributesW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
CreateFileMappingW
LCMapStringW
GetDriveTypeW
GetCurrentProcess
UnmapViewOfFile
GetEnvironmentVariableA
SetLastError
CloseHandle
CreateFileA
GetLastError
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
GetFullPathNameA
LocalAlloc
LocalFree
lstrcpyA
GetDriveTypeA
TlsGetValue
TlsAlloc
TlsFree
HeapReAlloc
HeapAlloc
HeapFree
IsDBCSLeadByte
GetProcAddress
GetModuleHandleA
lstrlenA
HeapDestroy
HeapCreate
DisableThreadLibraryCalls
GetVersionExA
MapViewOfFile
CreateFileMappingA
FreeLibrary
GetFileSize
LoadLibraryA
DuplicateHandle
ExpandEnvironmentStringsA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcessId
VirtualFree
SetErrorMode
GetFileAttributesA
ReadProcessMemory
VirtualProtect
VirtualAlloc
DeleteFileW
WriteFile
CreateFileW
OutputDebugStringA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetSystemInfo
GetVersionExW
GetProcessHeap
SuspendThread
ResumeThread
GetThreadContext
VirtualQueryEx
LoadLibraryW
TerminateThread
SetEndOfFile
GetThreadSelectorEntry
MapViewOfFileEx
FlushViewOfFile
TlsSetValue
CreateThread
version
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
rpcrt4
UuidCreate
DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumerateLoadedModules
EnumerateLoadedModules64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
StackWalk
StackWalk64
SymCleanup
SymEnumSourceFiles
SymEnumSym
SymEnumSymbols
SymEnumTypes
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetTypeFromName
SymGetTypeInfo
SymInitialize
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymMatchFileName
SymMatchString
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetContext
SymSetOptions
SymSetSearchPath
SymSetSymWithAddr64
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnmapDebugInformation
WinDbgExtensionDllInit
dbghelp
dh
lm
lmi
omap
srcfiles
sym
vc7fpo
Name
.text
Size
569KB
Virtual Size
568KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=46, id=96, version=4031,
count=2, id=95, version=4031,
count=215, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=7, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=12, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=31, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Modules/feidian/fdcdlib.dll
- IMPHASH 58ebe63bde2e8d9e022f7f601830ac71
- SHA256 ee06d4d6d67df5859bf337d08b0e1d44b768e57fb308ab0184d5a1ea82f211fb
- MD5 886c777349956fafde60e57c4b2e4265
- SHA1 8e3f0c7de9ce7d44d3c9049cdce1217b4de8cfb4
- SHA512 61b6eef5e28b06f504ee3091b3c48d8028f1cb004ccb6bd108faf2c7d3fed76eb8e29650e0aaa7e21b91555f13eedc3eacfd5c0ec799eb680ff569211953588f
- SSDEEP 1536:qMq39F/VPJDBJvgGwMnToIfjIOlIOuoqNh:Dq39FrzvgGVTBfFvuoqNh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
42122
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_fdopen
fopen
_errno
malloc
sprintf
fwrite
fread
fclose
free
fprintf
fflush
fseek
fputc
strerror
clearerr
_initterm
_adjust_fdiv
_vsnprintf
ftell
kernel32
DisableThreadLibraryCalls
adler32
compress
compress2
compressBound
crc32
deflate
deflateBound
deflateCopy
deflateEnd
deflateInit2_
deflateInit_
deflateParams
deflatePrime
deflateReset
deflateSetDictionary
get_crc_table
gzclearerr
gzclose
gzdopen
gzeof
gzerror
gzflush
gzgetc
gzgets
gzopen
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzsetparams
gztell
gzungetc
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCopy
inflateEnd
inflateInit2_
inflateInit_
inflateReset
inflateSetDictionary
inflateSync
inflateSyncPoint
uncompress
zError
zlibCompileFlags
zlibVersion
Name
.text
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
810B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2179,
count=1, id=14, version=7299,
count=5, id=10, version=8047,
count=3, id=4, version=8047,
count=22, id=1, productName=Unmarked objects,
count=13, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=2, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/feidian/p2pclient.dll
- IMPHASH e00fb02c225d904dd30891ee10598d1d
- SHA256 eec630e27e9521792549d1492ad938c52e686a040a25acb9030e420617c175d1
- MD5 18a16fe2a32a78983b1ad7d1154f9397
- SHA1 a17cc803cee6afd7dd00c0593c8fdf6737109859
- SHA512 57e42f582da71f1d3106b29f064772aff9e561c35faa380722ac2cc5f5d87452b37e53bd25060c72af889a5f48ebb09507481b97e2a6541ee1ceba9e57496192
- SSDEEP 12288:Y4dfmPsdSRrfDu/Vvy7W/s9GIPBdTXvq:Y4dmPLSiGIPBdTS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
241559
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\pxp\Bin\Release\p2pclient.pdb
kernel32
TlsGetValue
GetLocalTime
TlsFree
TlsSetValue
TlsAlloc
RaiseException
GetTickCount
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
Sleep
CloseHandle
CreateFileA
MultiByteToWideChar
SuspendThread
ResumeThread
WaitForSingleObject
SetEvent
CreateEventA
WriteFile
OutputDebugStringA
MoveFileExA
GetStdHandle
AllocConsole
CreateThread
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerA
GetLastError
LocalFree
FormatMessageA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
LoadLibraryA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
SetFilePointer
FlushFileBuffers
ReadFile
GetConsoleMode
GetConsoleCP
GetOEMCP
GetACP
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
HeapSize
SetLastError
GetModuleHandleA
GetProcAddress
GetModuleFileNameA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
LCMapStringA
LCMapStringW
GetCPInfo
user32
GetMessageA
SendMessageA
PostThreadMessageA
PeekMessageA
MsgWaitForMultipleObjectsEx
ws2_32
ioctlsocket
WSAStartup
getsockname
listen
recv
WSACleanup
ntohl
htonl
accept
setsockopt
ntohs
socket
sendto
select
recvfrom
getpeername
send
gethostbyname
shutdown
closesocket
WSAGetLastError
inet_ntoa
inet_addr
htons
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSAEventSelect
connect
bind
shlwapi
SHGetValueA
wininet
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetCloseHandle
HttpEndRequestA
P2PGetPort
P2PInit
P2PSetBufferState
P2PSetUserID
P2PStartChannel
P2PStopChannel
Name
.text
Size
297KB
Virtual Size
297KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=156, id=1, productName=Unmarked objects,
count=90, id=110, productName=VS2005 build 50727, version=50727,
count=185, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/itv/GUpdate.dll
- IMPHASH 9a44b356444d958ad2b0058963e15e6e
- SHA256 1644aa382eae4b2c65071fcf503c07a463d4b7fa373e3dfd85d9cca5a4856975
- MD5 81a272ee1b7bacdc1baa07bb062073c9
- SHA1 988375d7fbd4e9c440cddd5a5ddb297dfd3a7e9f
- SHA512 362a059e143132134bd31115b265a26a5eeb56066f2c0bf4e93c5f905a2a00d21510c0528922b21b09ac7a08864c4fe69e524587d56545f3f2f7c81cba652dd7
- SSDEEP 6144:EOnNMiXQ/gHXDKPDBest+JeSbxx/6+v0R3W:9eIQgHz8Be4iP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
121916
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rpcrt4
UuidCreate
UuidFromStringA
RpcStringFreeA
UuidToStringA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
kernel32
SetLastError
GetCurrentThreadId
GetACP
lstrcmpA
GlobalUnlock
GlobalLock
CreateThread
GetTempPathA
GlobalHandle
GetVersionExA
ResetEvent
WaitForSingleObject
SetEvent
ResumeThread
CreateEventA
FreeResource
InterlockedExchange
GetExitCodeProcess
CreateProcessA
DeleteFileA
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetSystemDirectoryA
GetPrivateProfileStringA
TerminateThread
GetTempFileNameA
WriteConsoleA
FlushFileBuffers
SetStdHandle
GetConsoleMode
GetConsoleCP
LoadLibraryA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
ReadFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetOEMCP
GetCPInfo
Sleep
GetStdHandle
WriteFile
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetLocaleInfoA
GetCurrentProcess
FlushInstructionCache
MulDiv
FindResourceExA
LockResource
GetThreadLocale
SetThreadLocale
GetModuleHandleA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
FreeLibrary
InterlockedDecrement
InterlockedIncrement
IsDBCSLeadByte
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
GlobalAlloc
DeviceIoControl
GlobalFree
CreateFileA
GetConsoleOutputCP
WriteConsoleW
user32
CharNextA
SetWindowLongA
GetWindowLongA
DestroyWindow
MoveWindow
GetWindowRect
ScreenToClient
ShowWindow
GetDlgItem
IsWindow
SendMessageA
wsprintfA
GetDC
DrawTextA
GetSysColor
CreateWindowExA
SetRect
ReleaseDC
GetDesktopWindow
GetDialogBaseUnits
DefWindowProcA
GetUpdateRect
CopyAcceleratorTableA
IsDialogMessageA
UnionRect
PtInRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
GetNextDlgTabItem
EnumChildWindows
CreateDialogIndirectParamA
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
RegisterClassExA
LoadCursorA
GetClassInfoExA
DestroyAcceleratorTable
UnregisterClassA
CallWindowProcA
ReleaseCapture
GetClassNameA
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ClientToScreen
GetClientRect
PostMessageA
BeginPaint
FillRect
EndPaint
GetKeyState
SetFocus
GetFocus
GetParent
SystemParametersInfoA
MapDialogRect
SetWindowContextHelpId
IsChild
GetWindow
SendDlgItemMessageA
SetWindowPos
CharUpperBuffA
gdi32
CreateCompatibleBitmap
CreateSolidBrush
LPtoDP
SaveDC
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
DeleteDC
CreateCompatibleDC
CreateDCA
GetObjectA
SetBkColor
CreateFontIndirectA
GetTextMetricsA
GetTextExtentPointA
DeleteObject
GetStockObject
SelectObject
BitBlt
SetTextColor
SetBkMode
GetDeviceCaps
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
RestoreDC
Rectangle
advapi32
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
ole32
CoTaskMemFree
StringFromGUID2
CoCreateInstance
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CoTaskMemRealloc
CreateStreamOnHGlobal
OleRegGetMiscStatus
OleUninitialize
CreateOleAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
CreateDataAdviseHolder
CoTaskMemAlloc
CLSIDFromString
OleInitialize
oleaut32
SysAllocStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
QueryPathOfRegTypeLi
OleTranslateColor
OleCreatePropertyFrame
OleLoadPicture
SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
SysStringByteLen
SysStringLen
SysAllocStringLen
VariantCopy
VariantClear
VariantInit
VarBstrCmp
VarBstrCat
VarUI4FromStr
RegisterTypeLi
shlwapi
PathFileExistsA
urlmon
URLDownloadToFileA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
176KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=125, productName=VS2005 build 50727, version=50727,
count=7, id=95, version=2067,
count=2, id=37, version=8755,
count=2, id=93, version=2035,
count=4, id=25, version=9210,
count=13, id=93, version=2067,
count=300, id=1, productName=Unmarked objects,
count=76, id=110, productName=VS2005 build 50727, version=50727,
count=134, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/itv/pCastCtl.dll
- IMPHASH b0517ebfd5dbd69335fc4ff43a95a0b4
- SHA256 de33d981b9ad5706830f204ea70f4e7e911cda3f9139a9da19261a1c67c74393
- MD5 cc0465570ab49eacec71f734b610a9bd
- SHA1 2b0d04f500555f3ca16ea6621749c59469c2bae4
- SHA512 6ce5742ef7768be7b810201be46f3f392c8f9af2bf2095f1b1dd679bb8f30e8031e616155ef288c8ee7e9d43d528a3dfe3bf71c12c18705f5ea121fdd8b18909
- SSDEEP 24576:yDpxQiqfhGfoJr5kyDzzgQ4y09gjqWFX9tZHaY:yYhGfsr5pzz/sg3tDZHL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
231514
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
VirtualProtect
VirtualQuery
IsBadWritePtr
GetFileAttributesA
FindClose
FindFirstFileA
CreateDirectoryA
DeleteFileA
GetTempFileNameA
IsBadCodePtr
OpenProcess
ReadProcessMemory
HeapFree
GetProcessHeap
GlobalFree
DeviceIoControl
SetConsoleTitleA
AllocConsole
FreeConsole
GetStdHandle
LocalFree
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
TlsSetValue
CreateMutexA
TlsAlloc
RaiseException
TlsGetValue
ReleaseMutex
SetThreadContext
GetThreadContext
SuspendThread
GlobalReAlloc
ResetEvent
InterlockedExchange
SetThreadPriority
GetTickCount
DebugBreak
ReadFile
GetFileSize
IsBadReadPtr
OutputDebugStringA
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
QueryPerformanceCounter
SetEndOfFile
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
SetStdHandle
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
FlushFileBuffers
GetStringTypeW
GetStringTypeA
VirtualFree
HeapCreate
GetCPInfo
GetOEMCP
HeapSize
TlsFree
GetSystemInfo
VirtualAlloc
GetTimeZoneInformation
GetCommandLineA
ExitThread
TerminateProcess
ExitProcess
HeapReAlloc
HeapAlloc
RtlUnwind
GetSystemTimeAsFileTime
GetDateFormatA
GetTimeFormatA
GetCurrentThread
DuplicateHandle
GetCurrentProcessId
SetUnhandledExceptionFilter
GetACP
ReleaseSemaphore
CompareStringA
lstrcmpA
CreateSemaphoreA
CreateThread
GetTempPathA
WinExec
CreateEventA
SetEvent
TerminateThread
ResumeThread
WaitForSingleObject
GetExitCodeThread
LockResource
CreateFileA
WriteFile
CloseHandle
GetCurrentThreadId
GetModuleHandleA
GetShortPathNameA
LoadLibraryExA
FindResourceA
LoadResource
SizeofResource
GetCurrentProcess
FlushInstructionCache
DisableThreadLibraryCalls
GlobalAlloc
GlobalLock
GlobalUnlock
LoadLibraryA
GetProcAddress
FreeLibrary
lstrcatA
lstrcpyA
HeapDestroy
EnterCriticalSection
IsDBCSLeadByte
InterlockedDecrement
InterlockedIncrement
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
lstrlenA
lstrcpynA
GetLastError
SetLastError
LeaveCriticalSection
GetModuleFileNameA
DeleteCriticalSection
GetVersionExA
InitializeCriticalSection
user32
PostThreadMessageA
MsgWaitForMultipleObjects
PeekMessageA
LoadImageA
MoveWindow
SetLastErrorEx
CharLowerBuffA
DispatchMessageA
SetParent
GetSystemMetrics
SetWindowPlacement
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetActiveWindow
SetForegroundWindow
SetRect
TranslateMessage
CharUpperBuffA
wvsprintfA
EndDialog
GetWindowLongA
SetWindowTextA
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
SystemParametersInfoA
GetWindowRect
GetWindow
GetParent
wsprintfA
KillTimer
SetWindowLongA
SetTimer
CharNextA
PtInRect
UnionRect
ReleaseDC
GetDC
DefWindowProcA
CallWindowProcA
DestroyWindow
IsWindow
GetKeyState
SetWindowRgn
OffsetRect
EqualRect
SetClassLongA
RegisterWindowMessageA
MessageBeep
CreateAcceleratorTableA
GetWindowTextLengthA
GetWindowTextA
DrawTextA
IsWindowEnabled
DrawFocusRect
GetDlgCtrlID
SetCursor
GetCapture
UpdateWindow
DestroyCursor
GetAsyncKeyState
GetClassNameA
RedrawWindow
InvalidateRgn
GetDesktopWindow
GetSysColor
GetActiveWindow
SetMenuItemInfoA
IntersectRect
InvalidateRect
RegisterClassExA
LoadCursorA
GetClassInfoExA
CreateWindowExA
ShowWindow
SetFocus
IsChild
GetFocus
EndPaint
BeginPaint
ScreenToClient
GetCursorPos
SetCapture
ReleaseCapture
SendMessageA
PostMessageA
IsWindowVisible
MessageBoxA
LoadMenuA
EnableMenuItem
DestroyMenu
SetRectEmpty
DialogBoxParamA
GetSubMenu
FillRect
TrackPopupMenuEx
LoadStringA
gdi32
CreateDIBSection
ExtCreateRegion
SetROP2
GetRgnBox
SelectClipRgn
PtInRegion
CreateRectRgnIndirect
OffsetRgn
CreateRectRgn
CombineRgn
RestoreDC
DeleteMetaFile
CloseMetaFile
SetWindowExtEx
CreateMetaFileA
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
SelectObject
CreateSolidBrush
GetObjectA
GetStockObject
SetTextColor
SetBkMode
CreateFontIndirectA
TextOutA
SetBkColor
GetTextExtentPoint32A
ExcludeClipRect
LineTo
MoveToEx
DeleteDC
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
GetDeviceCaps
CreatePen
CreateDCA
advapi32
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegDeleteValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ole32
StringFromCLSID
OleRun
StringFromGUID2
CoTaskMemFree
CoCreateGuid
StringFromIID
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoInitializeEx
OleSaveToStream
WriteClassStm
OleLoadFromStream
CoInitialize
CoUninitialize
CreateDataAdviseHolder
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SysFreeString
SysAllocString
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
VariantClear
DispCallFunc
LoadRegTypeLi
SysStringLen
OleCreatePropertyFrame
SysAllocStringLen
OleTranslateColor
VariantChangeType
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantInit
GetErrorInfo
ws2_32
send
socket
inet_addr
gethostbyname
htons
inet_ntoa
ioctlsocket
connect
WSAGetLastError
recv
WSAStartup
closesocket
WSACleanup
sendto
ntohl
ntohs
select
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
_TrackMouseEvent
ImageList_Draw
ImageList_GetImageCount
ImageList_Destroy
ImageList_LoadImageA
ord17
urlmon
URLDownloadToFileA
CreatePcastSession
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
ReleasePcastSession
Name
.text
Size
296KB
Virtual Size
294KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
612KB
Virtual Size
611KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=105, version=2067,
count=36, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=14, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=405, id=1, productName=Unmarked objects,
count=166, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=89, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/itv/pcast.dll
- IMPHASH 4969a2954c65dac7bf4437f34fbe8680
- SHA256 105a33541dc5f9dd7a544e3ea770b27546bef45aef83e35f7f9be3089ba97339
- MD5 289d83204d994407219cd8e8b8767ac5
- SHA1 5c9abb3e39217daca87a04335eb62f0d9ba1f6cf
- SHA512 b723d47a219e0728a72cbabdf74c7f69dbb2322cb5edc96cf4ed7c88845949922a106fc700e53f24147bcc07f332c912015d7274c0b6555cadd2c75ef71d1a40
- SSDEEP 12288:n6L1Asrwum65cIUdJtydVzz7MnQ4yGQw9gZNtQTfWFcS+K9tZyeaBSFL:6Jr5kyDzzgQ4y09gjqWFX9tZHaY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
315319
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleFileNameA
GetTickCount
GetFileAttributesA
CreateMutexA
TlsSetValue
TlsGetValue
ReleaseMutex
TlsFree
TlsAlloc
GetSystemTimeAsFileTime
QueryPerformanceCounter
QueryPerformanceFrequency
GetLastError
LocalFree
FormatMessageA
SetLastError
DeleteFileA
lstrlenA
GetFileType
CreateFileA
ReadFile
WriteFile
GetFileSize
SetFilePointer
GetModuleHandleA
GlobalFree
DeviceIoControl
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalUnlock
GlobalLock
GetCurrentProcess
GetCurrentProcessId
GetVersionExA
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetDiskFreeSpaceExA
FreeLibrary
GetPrivateProfileStringA
CreateDirectoryA
GetSystemDirectoryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
GetLocaleInfoW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
OutputDebugStringA
CreateEventA
CreateThread
CloseHandle
TerminateThread
SetEvent
WaitForSingleObject
WideCharToMultiByte
InterlockedExchange
GetTimeZoneInformation
Sleep
GetStringTypeW
GetStringTypeA
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
FlushFileBuffers
GetOEMCP
GetACP
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
ExitProcess
GetCPInfo
GetCommandLineA
GetCurrentThreadId
HeapReAlloc
HeapFree
HeapAlloc
GetDateFormatA
GetTimeFormatA
RaiseException
RtlUnwind
InterlockedIncrement
InterlockedDecrement
user32
PostMessageA
PeekMessageA
PostThreadMessageA
SendMessageA
FindWindowA
advapi32
RegOpenKeyA
RegCreateKeyA
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
ws2_32
WSACleanup
ioctlsocket
select
__WSAFDIsSet
WSAGetLastError
getsockname
WSAStartup
setsockopt
bind
socket
WSARecv
WSASend
htons
ntohs
closesocket
connect
recv
ntohl
htonl
sendto
getpeername
recvfrom
WSASetLastError
inet_ntoa
shutdown
accept
listen
inet_addr
gethostbyname
send
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
CreatePcastSession
ReleasePcastSession
Name
.text
Size
388KB
Virtual Size
387KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
104KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=105, version=2067,
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=165, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=21, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=226, id=1, productName=Unmarked objects,
count=104, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/pplive/EE/ERco.dll
- IMPHASH e43bbcb8f87ee846306b634ce05db32f
- SHA256 fe494034c1c376db58446c09e5790a36368712ac09bf9d9ed43f3178b96d97fe
- MD5 b38539149d25c9d7c7b04b826f768e99
- SHA1 6e9e3da8ed5f35341a3f667be597efc5ab2ae030
- SHA512 bdd002088435842e51e4589b99a2a566c18de185db90d1ea58e63b0ba2abab68d79e7363c73e4ca50a7fc7122702f34d0a94e3d01d8dba1646b451019861aa22
- SSDEEP 3072:DwxUV6hlBFqhov9f7xyBAQUyLGZmJgoi9lzfw:hV6ZV9yBA/yL6A
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dc:ca:28:a8:d7:3d:cf:d7:63:19:a6:42:d1:ba:45:67:f9:e3:7c:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
28664
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentProcess
OutputDebugStringA
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
Module32Next
GetLongPathNameA
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetLocalTime
GetLastError
lstrcatA
lstrcpyA
VirtualQuery
GetModuleFileNameA
FindFirstFileA
AllocConsole
GetConsoleTitleA
lstrcpynA
WaitForMultipleObjects
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
GetTickCount
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
Sleep
InterlockedExchange
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
FlushFileBuffers
WriteFile
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
CreateFileA
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
user32
MessageBoxA
shlwapi
PathAppendA
PathRemoveFileSpecA
PathFindFileNameA
PathCombineA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
TS_XXXX
Name
.text
Size
72KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=22, id=14, version=7299,
count=95, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=11, version=8047,
count=7, id=19, version=8034,
count=108, id=1, productName=Unmarked objects,
count=21, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/EE/KOM.dll
- IMPHASH 6903731fae21a3a4d1993323396b9b1c
- SHA256 0228a344d3555acabb624eece6a161bc0ccbeaeb8886862b195e65453b9b3af0
- MD5 791b3b756eb5e32f609a4b52e0e278de
- SHA1 d245ffed36183f24c6aaaf9a09f9a213c209c93d
- SHA512 511006581ee72642e591718b7933fcaaef59947f138e0ad26185ad0355419ce697925bcb1f46630c7d52a77f0811b701b6496591171a580e048c480f81fca303
- SSDEEP 768:gc9vQxV+Jh/+X2sy64NbmacFIbaEA0lg1tgL3Dkb9Oil9:gctQxV+3/+X2sy6c6aQIo9L
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5b:4f:bd:f3:ca:b8:ed:3d:b5:0d:1e:85:45:47:bb:e1:e8:ac:0f:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
21561
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
GetLastError
LoadLibraryA
GetModuleFileNameA
VirtualQuery
GetVersion
GetCurrentProcessId
GetCommandLineA
GetTickCount
CreateEventA
CloseHandle
GetLocalTime
OutputDebugStringA
lstrcpyA
SetEvent
CreateThread
ResetEvent
TerminateThread
WaitForSingleObject
ole32
CoCreateGuid
msvcp60
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
??1_Lockit@std@@QAE@XZ
msvcrt
_onexit
??2@YAPAXI@Z
__CxxFrameHandler
memmove
sprintf
fclose
fflush
vfprintf
fprintf
fopen
_except_handler3
free
__dllonexit
_adjust_fdiv
_initterm
malloc
ws2_32
gethostname
gethostbyname
rpcrt4
UuidToStringA
shlwapi
StrStrIA
PathIsRelativeA
PathAppendA
PathRemoveFileSpecA
TS_0001
TS_0002
TS_0003
TS_0004
TS_0005
TS_0006
TS_0007
TS_0008
TS_0009
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=1, id=11, version=8047,
count=4, id=4, version=8047,
count=50, id=1, productName=Unmarked objects,
count=9, id=19, version=8034,
count=6, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/EE/MIR.dll
- IMPHASH a9717fb0d05edd8309962b74c6ef524d
- SHA256 372174e6ea589aa9ddba088821828bae69e6db146c2e6bb5d3aac0e7fc7bc043
- MD5 99de491347f98c8d2c7eea8845838b45
- SHA1 9da501bce70a96fcbd2346c20abc5ffe12b5b165
- SHA512 2deb40be3e233bc8f2423acb00a98e2fdc22e08297139ffa8d55cbf4dc641afeb036c7464bf487ff135d8ba0f251582b59bd575541ed5601fd608dcf0709713f
- SSDEEP 6144:H9zWBHQl1MqNRo7Wxf5KA2jCxGkxdTbwSX0okT0:MgMMKW1UixNDXc0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:05:d5:7c:a9:ae:46:cf:1a:3a:b0:fa:12:fe:fc:9f:01:64:1c:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
331755
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcp60
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0runtime_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??1overflow_error@std@@UAE@XZ
??_7overflow_error@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Xran@std@@YAXXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
ws2_32
inet_ntoa
ntohs
WSAGetLastError
htons
msvcrt
??0exception@@QAE@ABQBD@Z
_ftol
strstr
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
sprintf
_vsnprintf
strncpy
memmove
srand
rand
_CxxThrowException
_snprintf
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
VirtualQuery
GetTickCount
QueryPerformanceCounter
GetModuleFileNameA
UnmapViewOfFile
GetProcAddress
LoadLibraryA
GetLastError
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
FreeLibrary
GetVersionExA
GetPrivateProfileIntA
WritePrivateProfileStringA
CloseHandle
user32
wsprintfA
PostMessageA
TS_XXXX
Name
.text
Size
340KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=11, version=8047,
count=5, id=4, version=8047,
count=86, id=1, productName=Unmarked objects,
count=6, id=19, version=8034,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=39, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/EE/PPV.PTV
- SHA256 8d57345582f7c30992333d257a6ee9915d778beef9180976025995fe81312177
- MD5 974914f8d5648f1a87849a4f34eb630f
- SHA1 881933c9678d6da984e049e1d7f9908791ecc3b8
- SHA512 e5e714040179ec4881795e6d6a67f9276a849c09dcf9aa948d071868855391230b8d1176d75d5196dbc1aa056dab54cefb2f4fce5ebfde3abe5788d757979c16
- MD5 SHA1 SHA512
Modules/pplive/EE/PPd.dll
- IMPHASH f4f5ca5701f67504dddc3c239b245332
- SHA256 8142bd9f06e3e6b483459e4052424d5a84c0d707a2618facdcdfed53c1d3e10d
- MD5 e223870fb6c33e627cb8aefbfcb157c2
- SHA1 38ae6512323f0ff7fa120026439af7fed224fb6d
- SHA512 66c75d6cddcfb24e58571981b9245f320e20a0bbd0e4f02ee127fcad4b82295682fd54cf169715449a6641c42e8b729c0f97bf1db2a5914378b0d072f68cbc64
- SSDEEP 384:yKz1QzYT0ueLin00IAUjho/7/6w82nxEjWw3+QKYLCcgKmbbb9OilgaF:d1ZlnfU4zg2xES++3YL3Dkb9OilZF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f4:99:fa:89:a6:7d:32:34:05:11:0a:37:55:3a:5e:b8:8e:5c:0e:94
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
15050
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rpcrt4
UuidFromStringA
UuidToStringA
RpcStringFreeA
wininet
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpOpenRequestA
mfc42
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord2725
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord924
ord800
ord537
ord860
ord540
ord2818
ord535
ord600
ord1578
ord5302
ord826
ord5300
ord3346
ord2396
ord5199
ord1089
ord6467
ord1255
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord4080
ord269
msvcrt
localtime
exit
_mbsnicmp
_mbsspn
_mbscspn
fprintf
atoi
printf
??2@YAPAXI@Z
malloc
free
sprintf
toupper
__CxxFrameHandler
fread
fseek
ftell
time
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_stricmp
fwrite
fclose
fopen
rewind
kernel32
OpenFileMappingA
Sleep
OpenEventA
GetCurrentProcessId
GetModuleFileNameA
SetProcessWorkingSetSize
GetLastError
VirtualLock
VirtualAlloc
DeleteFileA
LocalFree
LocalAlloc
MapViewOfFile
CloseHandle
UnmapViewOfFile
GetTickCount
GetCurrentProcess
GlobalMemoryStatus
GetVersion
user32
CharNextA
advapi32
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
msvcp60
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
shlwapi
PathStripPathA
PathAppendA
PathRemoveFileSpecA
RD_XXXX
Work
Name
.text
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=25, version=9210,
count=2, id=93, version=2067,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=2, id=4, version=9782,
count=136, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=5, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/EE/TNE.dll
- IMPHASH 69630f4e49cba917c47d520250bf1ff5
- SHA256 f88efd6ce9f2f50e48dd00b12a2234a54ec8c5fc3882910fc92042e31c844fc5
- MD5 d289df580a9453bebc5b51a35b7cb6ae
- SHA1 257f5bb5cfd3810d7718b2f03908900809017164
- SHA512 de958d109de0ab4e83927e98ed4d7aff16b7b29185eff32f48e055af884ba18ccf1640d0e4a2118a6b0440ead5577daf45e6683897dce96b9c01541fd4ab865f
- SSDEEP 3072:pyrBHd/KjVgNbZDIms3mKZNEhGWHlnUAf:pyrBHJKjVgPDCmKZi7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4b:e7:16:9d:5e:18:47:9a:e5:7b:97:f7:fd:e1:55:8c:da:65:16:a9
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
44181
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
EnterCriticalSection
GetTickCount
GetModuleFileNameA
GetLocalTime
GetLastError
CreateThread
CancelIo
TerminateThread
GetVersionExA
GetModuleHandleA
CreateEventA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
SetConsoleTitleA
GetQueuedCompletionStatus
GetProcAddress
LoadLibraryA
VirtualQuery
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
HeapCreate
GetCurrentProcessId
SetEndOfFile
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
ReadFile
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapDestroy
HeapSize
Sleep
InterlockedExchange
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
user32
PeekMessageA
PostThreadMessageA
DestroyWindow
RegisterClassExA
CreateWindowExA
GetMessageA
iphlpapi
GetIfTable
GetIpAddrTable
SetTcpEntry
ws2_32
WSAEnumNetworkEvents
WSACancelAsyncRequest
WSACleanup
WSAStartup
WSACloseEvent
getsockname
shutdown
closesocket
getpeername
listen
WSAWaitForMultipleEvents
gethostbyname
WSAEventSelect
connect
WSAGetLastError
WSASocketA
setsockopt
htons
htonl
bind
inet_addr
WSASetLastError
WSACreateEvent
WSAAsyncGetHostByName
WSARecv
WSASendTo
WSARecvFrom
WSAGetOverlappedResult
WSAAccept
WSASend
shlwapi
PathRemoveFileSpecA
TS_XXXX
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
567KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=3, id=12, version=7291,
count=24, id=14, version=7299,
count=88, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=93, version=2067,
count=7, id=93, version=2179,
count=136, id=1, productName=Unmarked objects,
count=32, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/EE/params.ini
- SHA256 210217bef9a2c599e87b7859d5d3cf29e4debb7eb8571017fcd19cd0237e6be4
- MD5 2988a0c20567d513db5f253afc91ac52
- SHA1 36d539a0e0719c3a3783aeeed19f6b79d9cabc31
- SHA512 8f6bc41af554781bac5fb4200b4b93e02f08e469a2edb44e707886c190b0e82e5cf2904d994d374f215421dcaf40846c2e252cdfdf144080f985f112a8fdafe7
- MD5 SHA1 SHA512
Modules/pplive/EE/tpi.dll
- IMPHASH 90547e4eb5ec31263ac362ca3152bc21
- SHA256 e4b6e204ef37bb6eda9e3b78b5ca78f1805dbab5487b76dd74b504810304ac10
- MD5 d93fd2fcd68d91d0d096a52b988ea433
- SHA1 577a6f2a6a22c8c4e5ea068028bcdb353cbb92c6
- SHA512 172516122596af33e48380433287ee8f401c87e10f423fc03e0e2c004e4c41faf1c681769542008449bd8af59fccf95646ae4f485183e969f437d1ce1082f75d
- SSDEEP 12288:jSUJV+dsIQUp2hiTTAct6cu6OruCPeRWcYPN2euhYqNg:jSUT+uIQUpSA8w6cuLruPRo2e8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:04:8b:b8:cd:d1:1c:ba:1e:0b:24:c7:db:5d:0a:6b:23:6a:8d:fb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
12838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
ntohl
kernel32
GetEnvironmentVariableA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Locate
Name
.text
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
824KB
Virtual Size
822KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=11, version=8047,
count=72, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/FWUpnp.dll
- SHA256 999398a5998318e7e1ef52761f71aebd04f2ef727a4af5187aecfbfa23ffb8de
- MD5 f7f69e99c27658a94eb7b9b5a82c1899
- SHA1 6632c428a843074b49a147df77b1ba5570d7b935
- SHA512 443fb90ae725b1c20719453db8c03c723398d9242fc5b43617e79730e4db703a0b5004b0a12aae837402a32dcc13360bc603693c21594164fc84535c95b6b37e
- SSDEEP 1536:xtAOOk9WTrUe+twT1C5hBUv4tQlHbRF2t7y9o9L:xKOOuW3cw85hBUjHbH2tBL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:11:4f:3c:6e:d2:11:a8:10:0c:bf:59:92:cf:89:b4:55:49:fa:ae
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
110593
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
FWAppAdd
FWAppIsEnable
FWExceptionSetAllowed
FWExcptionAllowed
FWFree
FWInit
FWOff
FWOn
FWPortAdd
FWison
GetExIP
GetMapPort
GetSessionState
GetUPnPVersion
SetCallBack
SetQuitFlag
SetSessionState
SetUPnPWaitTime
UPNPGetExIp
UPNPaddPort
UPNPdelPort
UPnPGetMapPort
addPortmap
delPortmap
Name
.text
Size
32KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
1024B
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=24, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=98, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=129, id=1, productName=Unmarked objects,
count=33, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/pplive/Graph.dll
- IMPHASH a926f099a497d457de25e6893c04e4d4
- SHA256 cf764037d060c8cda8ade20e03a65a95e60ab59ce292f4ca53a2f6a5ca1194dd
- MD5 8d5d22f5c9fede085ee9a1a66932ddde
- SHA1 1ad27aef00e0a5515ec528d02fe92617475663cc
- SHA512 a4fd2182651ced986afe0bd72463d58ce8802c1e13bbd902c584b39ac2c124c6c3d35b29730452319fcb68c510fa5f138a051a69f8dad0482671d8ecddd2b646
- SSDEEP 1536:kb8cV3sIcuk5qrpt16cl3uJ+hVQDfwFgLq6CJw1e9:a5VIDorptMcRgsyLq6CJwS
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
56:45:10:0b:db:4b:63:ec:cd:2a:83:e6:bf:b3:84:c5:fe:a8:dc:83
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
39699
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord561
ord825
ord815
ord755
ord2754
ord470
ord2864
ord823
ord6467
ord3953
ord2725
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord3738
ord5277
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord4710
ord6215
ord2086
ord6055
ord1776
ord6374
ord5290
ord3742
ord818
ord2152
ord567
ord4275
ord1176
ord1575
ord1168
ord1577
ord1182
ord1116
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord2124
ord4274
msvcrt
wcscpy
??1type_info@@UAE@XZ
malloc
_initterm
free
_onexit
__dllonexit
strstr
_ftol
wcsncpy
__CxxFrameHandler
strncpy
_vsnprintf
sprintf
_adjust_fdiv
kernel32
LocalFree
GetVersionExA
GetLastError
WaitForMultipleObjects
GetCurrentThread
GetThreadPriority
SetThreadPriority
GetCurrentThreadId
GetACP
CreateSemaphoreA
GetProcAddress
ResetEvent
SetEvent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
WaitForSingleObject
CloseHandle
CreateEventA
WideCharToMultiByte
GetCurrentProcessId
GetModuleHandleA
GetModuleFileNameA
DeleteCriticalSection
TerminateThread
InitializeCriticalSection
CreateThread
lstrlenA
MultiByteToWideChar
Sleep
GetTickCount
VirtualQuery
OutputDebugStringA
LocalAlloc
user32
wsprintfA
wvsprintfA
MsgWaitForMultipleObjects
PeekMessageA
GetSystemMetrics
DispatchMessageA
SetWindowPos
GetDoubleClickTime
ScreenToClient
EnableWindow
RegisterWindowMessageA
GetQueueStatus
MoveWindow
PostThreadMessageA
InvalidateRect
PostMessageA
GetClientRect
GetWindowRect
CallWindowProcA
ole32
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize
GetRunningObjectTable
CreateItemMoniker
CoCreateInstance
StgIsStorageFile
StgOpenStorage
CoInitialize
oleaut32
SysAllocString
SysFreeString
winmm
timeSetEvent
timeGetTime
GClose
GGetAudioVolume
GGetBandwidth
GGetBufferProgress
GGetVideoSize
GIsFullScreen
GIsPause
GIsPlay
GIsStop
GOpen
GPause
GPlay
GSetAudioVolume
GSetFullScreen
GSetWindow
GShowGraph
GStop
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=19, version=8022,
count=2, productName=Unmarked objects (old),
count=1, id=11, version=8047,
count=7, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, version=9782,
count=1, id=28, version=9178,
count=186, id=1, productName=Unmarked objects,
count=8, id=19, version=8034,
count=10, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/Language/CA.ini
- SHA256 9b871165b2bf7f50720e55435c67530a333df9b85fb15e21042328f5b358ce19
- MD5 abaead4cd81f2334a18b6cec551a89bc
- SHA1 e3fb479afe03ae2793bea30445bf830663e239fc
- SHA512 6a3b5a61247379ac84bdd4d53d878e4ea2badd03409248a50431a6e49750d5daac679ab83d7b074bceb7481bd9be2dbd685e4ef8c1de357c6c5e52d72d0108bf
- SSDEEP 768:9MoFKgBYa8rI6Gx625vXOoXJmt1o9xtS1Ahaj/FhkGESncJu7xJoxAQxRuluYIUp:rcaAIz425vXOqQ1o9xxaj/FhkGE48gh/
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Language/CHTW.ini
- SHA256 568f334cbaca00d66e3bfe20d902c0b1468d711c421c911d0437bd1d305f7c1f
- MD5 007d61f05f12245244a4c804142ae51f
- SHA1 a6dbcfc1368ed07414dcf000e3718a22f545b8a9
- SHA512 836c35ec6df8b07a1179ceb595bbb30471de4ff9e8d4dc2fba85a801a42311778340b09f73b43bf379eb4f25bd2da10bc1be62f56720e94c1e9b011fd6b99caa
- SSDEEP 768:emp6233B9CvtVhvH0HnTTZCWYEBRMpDfPXFc0PW6EkYl:emp6233B9CvtjsHTTZCWQpDXFcI6
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Language/CHU.ini
- SHA256 86d89afd5a023cc480887001701398c264108139b2c1c21a214ab1ee28a54050
- MD5 45d0925d50be5772080eb6544b2a84c3
- SHA1 d6495397d9126babb02c718adde590ab98a847fe
- SHA512 c59126403cef2a6c3e374d8142c07cc341123b87cd426257c17210eb081bede573eefca024fd2a1ef3889e07a9bda75585af15ff98ae4669bcb2a5cf7edde1f3
- SSDEEP 768:vfp6Opsk9jKGmpB5Q1KStJe8JHxporbZj2vf3SnRWHp4k0S+FqFxkP38:vfp6Opsk9jKGArQ1Ko/JHxporbCSnRoT
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Language/DE.ini
- SHA256 24fbea354b488d45a73dfa2b134e55f5776244d06489b53fa3a366469fdf4263
- MD5 4ea1c7c4185149fd3db19479395df39a
- SHA1 cb7e8bb531e3e4d7207252aa7f6ec1f5767b8afc
- SHA512 9389773d8312cc275ec5dfd0689c32222e927cb9a080002e26429db436aefaf9d7f4fe801ff3b4edcd05876ab804dc5f0b634c3d9b26b9dab0755f682e718380
- SSDEEP 768:eUAayypJwNz625fXOofsNglbRGQKiC34LmWoKZz6VIJgnBuYIgFfLHm0XRs+23op:TAayyHwNm25fXOosNglbRGQKiy4LmfKo
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Language/EN.ini
- SHA256 e0000f17ddb01d80b2acbad4738f39397518a8d50f24de881b745c9f127490b9
- MD5 fb3a0fe365f206cf11a218621d676135
- SHA1 cdfadb6af59be103581256520a9b538ed8a2ffc9
- SHA512 eef96c21aa3873305c3fffc72e84a88139f44329aa13d77e667444885182e2f3c5bfa7d71295b3e209085b98bdb9895b89808ffc26d2ae25b0437de7bf62a025
- SSDEEP 768:1ocqa3qAQ61t2dvXOoefDHjOuTeuFJlxquYIVFfLHm0XRs+23cRnz:zqaK61t2dvXOFfvOuTvHphHmk7Rnz
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Language/ES.ini
- SHA256 3e775832442ceea2866dc37f75d1605c7a9ce870e8d30ac484da3f8f50430385
- MD5 83007c8299aaa4062c343699cd0045bd
- SHA1 bcb79587006b7a98ad04c43cd6100ebfeaa91a5e
- SHA512 7f3491f9bb5e3208c73b1af697c6f01a1dfa388c567aeee874fef3086740670434617456eca0d2d3cbcd1999728fc8a1c2664f178ebbe7557136b5593721091c
- SSDEEP 768:hiax3ZJl625vXOoF93ePXSxuw30J5luYIMFfLHm0XRs+23oGyRnz:hiahZJs25vXOu93ePCxuw3YhHmkfGyRz
- MD5 SHA1 SHA512 SSDEEP
Modules/pplive/Live.dll
- IMPHASH 747885eb44bbd036ea9219206c5c0ec6
- SHA256 cda27de0bd64afb805db737173cc6b59e59dee6118c7136770547e0f40115cd2
- MD5 33e1fc6beb356bb8b5f5aee3e9f0fd13
- SHA1 e214245fc3ca3796eef154834b598b828fe4098b
- SHA512 a349c319d42257f83c992c61d9e07dee2f95b30d8ba07d876c2f939fdf4b216d7158824c8e90b8c5d43aebead9919cd72f1d770fd0c519c0b67e38920dfeb1db
- SSDEEP 1536:Ahf6tB++cu3UTDHK8vntfCPidecoEFe9b:A3m3CUidyEi
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6b:9f:37:eb:ad:bc:fc:1b:5e:c5:f6:5f:4d:52:b1:67:15:8d:2f:81
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
25965
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord1176
ord1243
ord6467
ord1578
ord600
ord826
ord269
ord5856
ord4204
ord535
ord860
ord924
ord858
ord540
ord3663
ord1871
ord825
ord834
ord936
ord920
ord537
ord800
ord823
msvcrt
_purecall
__CxxFrameHandler
strlen
_snprintf
memset
_strnicmp
atoi
toupper
islower
strcmp
strcpy
_ftol
memcpy
_mbscspn
_mbsspn
_mbsnicmp
__dllonexit
_onexit
free
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
kernel32
GetModuleHandleA
MapViewOfFile
CreateMutexA
GetSystemTime
GetSystemDirectoryA
OpenProcess
GetCurrentProcessId
WaitForMultipleObjects
GetCurrentProcess
SetProcessWorkingSetSize
VirtualQuery
GetModuleFileNameA
LoadLibraryA
GetProcAddress
SetEvent
GetStdHandle
PeekNamedPipe
ReadFile
Sleep
MultiByteToWideChar
WideCharToMultiByte
GetACP
CreateThread
CloseHandle
WaitForSingleObject
TerminateThread
CreateEventA
GetVersionExA
ReleaseMutex
LocalAlloc
LocalFree
UnmapViewOfFile
FlushViewOfFile
OpenFileMappingA
user32
FindWindowA
PostMessageA
CharNextA
CreateWindowExA
IsWindow
RegisterClassExA
DefWindowProcA
GetWindowLongA
DestroyWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetDesktopWindow
SetWindowLongA
shlwapi
PathAppendA
StrStrIA
PathRemoveFileSpecA
ws2_32
inet_addr
inet_ntoa
gethostbyname
wininet
InternetTimeToSystemTimeA
InternetTimeFromSystemTime
uilib
ord17
ord13
ord8
ord7
ord386
ord365
ord387
ord378
ord234
ord284
ord192
ord203
ord376
ord360
ord391
ord270
ord213
ord269
ord328
ord323
ord329
ord325
ord326
ord191
msvcp60
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
rpcrt4
UuidFromStringA
RD_XXXX
Name
.text
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=12, version=7291,
count=2, id=25, version=9210,
count=1, id=95, version=2179,
count=2, id=93, version=2067,
count=8, id=93, version=2179,
count=3, id=14, version=7299,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=177, id=1, productName=Unmarked objects,
count=10, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/MngModule.dll
- IMPHASH d942b0037fbf54aaf35ab2b644c6085a
- SHA256 9a3ee8791ed39bf056197319abcc28c7fd104f9c304b8a7d47d8ed41bcf08d7c
- MD5 91e98371dea703c551a018481a845898
- SHA1 b657c0bdb85a34618b4fffbc6c323bcef85ee1f7
- SHA512 4eb491e448f0d98fd981435985538442dc60a29c8e1a0152855e44e6bde98df2ebdb6e8dc9cd50577410653ec9904f11a86bc0c21ee17ade046bb693eb0d8abc
- SSDEEP 1536:DqQL5YCZ2Sjwpxry0cMycqcDb7Ooh2qNqzge1uiL4M9ersqe9:Dq25YCZYycq2b7Ooh8ge1u448qe
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
5d:eb:b3:e8:ce:a8:75:70:82:4e:ec:20:60:66:d9:97:59:0d:f8:f0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
40271
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1132
ord1131
ord6354
ord2725
ord1168
ord5572
ord2915
ord3584
ord543
ord3825
ord860
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord825
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord2614
ord535
ord537
ord2764
ord4129
ord5710
ord939
ord2818
ord6467
ord540
ord539
ord926
ord924
ord922
ord858
ord800
ord823
ord5500
ord803
ord1116
msvcrt
__dllonexit
malloc
isspace
isalnum
_strdup
_except_handler3
_onexit
_initterm
vsprintf
_itoa
__CxxFrameHandler
_mbscmp
?terminate@@YAXXZ
_purecall
_adjust_fdiv
??1type_info@@UAE@XZ
realloc
free
kernel32
GetSystemTime
SystemTimeToFileTime
GetTickCount
lstrcatA
lstrcpyA
InitializeCriticalSection
DeleteCriticalSection
HeapDestroy
LoadLibraryA
GetProcAddress
FreeLibrary
CreateEventA
CreateThread
InterlockedDecrement
SetEvent
InterlockedIncrement
GetPrivateProfileIntA
LeaveCriticalSection
GetModuleHandleA
GetShortPathNameA
lstrlenW
WideCharToMultiByte
WriteFile
WaitForSingleObject
CreatePipe
GetModuleFileNameA
MultiByteToWideChar
OpenProcess
TerminateProcess
CreateProcessA
CloseHandle
GetCurrentThreadId
Sleep
OutputDebugStringA
GetPrivateProfileStringA
LocalFree
LocalAlloc
EnterCriticalSection
lstrlenA
user32
GetMessageA
IsWindow
FindWindowA
PostThreadMessageA
CharNextA
DispatchMessageA
PostMessageA
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
ole32
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
CoDisconnectObject
CoUninitialize
oleaut32
LoadRegTypeLi
LoadTypeLi
SysStringLen
RegisterTypeLi
SysFreeString
SysAllocString
shlwapi
PathAppendA
PathRemoveFileSpecA
msvcp60
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
rpcrt4
UuidFromStringA
DllCanUnloadNow
DllGetClassObject
ExecCommand
Name
.text
Size
40KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=4, id=95, version=2179,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=3, id=11, version=8047,
count=6, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=183, id=1, productName=Unmarked objects,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/NetTools.dll
- SHA256 8250ba8bb14d7e975a06aebd8b8d1dd8eb55b797eab58871a20977bf8d62bd9c
- MD5 f0345cee3be1674c5bde070b9535cab2
- SHA1 f4331984ccb76ccf204fb4746a7b16a0f45e0e9a
- SHA512 aef83d177ef7a12b5ac5e884dcb0371bbd4e1e2659eb865feb78a757380d8c192b3ead4d99143a38d26d9a34dd4eaf0a4052dc06865795e405f7e4bcc71afaa2
- SSDEEP 6144:/+BCHkNTwvv4tgnyaFVWAHuHzlVrJdon1mLdsbVwuk7:/MukSvA3a67HzlHdSO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f7:e5:10:bd:b1:88:ad:d9:1e:d8:2b:ee:5d:22:fd:75:76:16:47:4d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
254100
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Etadpu
GetTickCountInt64
GetUTC_SystemTime
GetUTC_TDateTime
HTTP_Get_To_File
HTTP_Get_To_Mem
HTTP_Post_To_File
HTTP_Post_To_Mem
InitUTCTimeByHTTP
InitUTCTimeBySNTP
SetHTTPFuncTimeOut
SetTimeFuncTimeOut
Name
CODE
Size
244KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
7KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
375B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Modules/pplive/OPlayer.ocx
- IMPHASH 57a72e6530e78f648e7c2a7e8cb2a7e1
- SHA256 c3064690d5732271011768c19a31322d3344396891d31d935c093bc32379c7be
- MD5 13f9b20e6ef0988b499d36032dde9945
- SHA1 e5698453b1725d83e8fa05985fc094240859ca0a
- SHA512 0f2528bbe1e4c817840b43443aa045a950acc37fe0d9daf9a7d878cdc48d2e8d7e048473712b386dbc49e4c668fc35b4028168cd3f6f11ef32559d7dd032122f
- SSDEEP 1536:w4KjtpqSN1DWvXxWPTieeaW1JcY9n5LDHnNTsyE1OK1yzB9PnyixTh/kC:EtkSTDWvhqeaW1JcU5LDtwSl9PnTjB
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
53:01:f1:d8:f5:03:e7:20:a3:dc:6f:51:2a:50:e4:29:de:e7:ec:c8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
62278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ddraw
DirectDrawCreateEx
mfc42
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord3670
ord561
ord3952
ord2724
ord6354
ord1216
ord1168
ord6467
ord1227
ord1132
ord1131
ord1877
ord4249
ord2486
ord2687
ord2688
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord5199
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord2954
ord2384
ord6370
ord2983
ord3148
ord3260
ord4466
ord2986
ord3080
ord4081
ord4624
ord5825
ord723
ord3946
ord423
ord2545
ord2541
ord4949
ord641
ord2514
ord324
ord2124
ord6215
ord1134
ord2864
ord4459
ord2379
ord4756
ord4299
ord6197
ord6380
ord6880
ord5033
ord1601
ord6030
ord4202
ord5575
ord2795
ord4765
ord4743
ord4788
ord4006
ord2729
ord2727
ord2730
ord1567
ord268
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord6052
ord1775
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord449
ord746
ord2278
ord600
ord826
ord269
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord815
ord537
ord2915
ord860
ord2818
ord858
ord433
ord4033
ord540
ord4034
ord535
ord800
ord1949
ord818
ord2135
ord567
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord3402
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord823
ord825
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord4636
ord1116
msvcrt
_mbsstr
strncpy
fopen
fclose
printf
sprintf
__CxxFrameHandler
_ftol
_mbslwr
_adjust_fdiv
atof
_purecall
_beginthreadex
_mbsnbcpy
_mbscmp
__dllonexit
_onexit
??1type_info@@UAE@XZ
free
_initterm
malloc
kernel32
GetProcAddress
FindFirstFileA
RemoveDirectoryA
FindClose
GetModuleFileNameA
CreateDirectoryA
WaitForMultipleObjects
CreateEventA
SetEvent
MulDiv
lstrcpynA
GetPrivateProfileIntA
GetPrivateProfileStringA
LeaveCriticalSection
GetCurrentThreadId
LocalFree
InitializeCriticalSection
GetTickCount
Sleep
WaitForSingleObject
CloseHandle
WideCharToMultiByte
MultiByteToWideChar
GetModuleHandleA
OutputDebugStringA
CreateFileA
lstrlenA
WriteFile
DeleteCriticalSection
LocalAlloc
EnterCriticalSection
user32
SetRect
SetTimer
GetSystemMetrics
GetDesktopWindow
SetParent
GetWindowLongA
SystemParametersInfoA
KillTimer
GetParent
EnableWindow
SendMessageA
LoadImageA
GetDC
GetClientRect
ReleaseDC
GetWindowRect
gdi32
GetTextColor
GetTextExtentPoint32A
SetTextColor
TextOutA
GetDeviceCaps
CreateFontIndirectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteDC
GetObjectA
DeleteObject
BitBlt
SetBkMode
comdlg32
ChooseFontA
shell32
ShellExecuteA
SHFileOperationA
comctl32
_TrackMouseEvent
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoFreeLibrary
CoTaskMemFree
StgOpenStorageEx
CoLoadLibrary
oleaut32
SysAllocStringLen
SysFreeString
LoadRegTypeLi
msvcp60
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
64KB
Virtual Size
60KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=19, version=8022,
count=1, id=11, version=8047,
count=8, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=4, version=9782,
count=16, id=19, version=8034,
count=12, productName=Unmarked objects (old),
count=437, id=1, productName=Unmarked objects,
count=3, id=25, version=9210,
count=1, id=29, version=9178,
count=3, id=28, version=9178,
count=36, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/PP/1012/KOM.dll
- IMPHASH b89954776fbee0fe8e136a8340e93cb5
- SHA256 931f4446bd3c62b6056449fe3c2203885e7273a93e1bda64d6c00fe5a238ce64
- MD5 ffd6a4ab04fd374896cfc5531cdf713f
- SHA1 e7140ff5e12d703ad7dfdd93cb2368e54ae659cc
- SHA512 4630264a830b3505d83f3d4d293095190a13d0c695ccd078684dedb88d760211bfc621b91874a71197a47bb652df28c85b725a5cee1cae889e2642a976435d49
- SSDEEP 768:7qEJgdVUkOcnZEZ97ELUcUaKzTAykxLEbMJD9:7q5dV1OcnZEAwcUpIke9
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
91:74:f7:9e:fe:77:0d:04:1e:fc:be:20:b1:01:df:77:dd:99:e1:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
21321
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
LoadLibraryA
GetModuleFileNameA
VirtualQuery
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersion
GetCurrentProcessId
GetCommandLineA
GetTickCount
CreateEventA
CloseHandle
GetLocalTime
lstrcpyA
OutputDebugStringA
SetEvent
CreateThread
ResetEvent
TerminateThread
WaitForSingleObject
ole32
CoCreateGuid
msvcp60
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
??1_Lockit@std@@QAE@XZ
msvcrt
__dllonexit
_adjust_fdiv
??2@YAPAXI@Z
__CxxFrameHandler
memmove
sprintf
fclose
fflush
vfprintf
fprintf
fopen
_except_handler3
free
malloc
_onexit
_initterm
ws2_32
gethostname
gethostbyname
shlwapi
PathAppendA
PathRemoveFileSpecA
StrStrIA
PathIsRelativeA
TS_0001
TS_0002
TS_0003
TS_0004
TS_0005
TS_0006
TS_0007
TS_0008
TS_0009
Name
.text
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=1, id=11, version=8047,
count=4, id=4, version=8047,
count=50, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=6, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/1012/TEN.dll
- IMPHASH a8b849ddbbeba5b1b22da412e2f6e424
- SHA256 14e275f65402217a59de2f0b29dd7dfb7f63100e47fc22e4e7d4985c919b36b2
- MD5 d249c6649858496addc0bfe9f8ded8fb
- SHA1 557c543447cb299c49261f29168c4a80eb56e5d9
- SHA512 66ccfff09f2768ccd888331eb438bc2d861b7cd995b582d56742625a83d8e5f8d8ddfed5580e441ac83fb7b39145dfe5875d0542dc0a3b9b15674e76fac19fea
- SSDEEP 12288:f0b8+dGR+LlqG24teHUtDe9++lZZBEG1tiuh/A:fEdGRqX24tcUABn1tiuho
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
16:dc:18:fb:08:b1:1b:27:f5:d9:25:70:77:fa:92:69:50:ff:04:3a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
223516
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\SynacastSVN\network\asio_ten\release\NET.pdb
kernel32
VirtualQuery
GetModuleFileNameW
lstrcatW
LoadLibraryW
GetProcAddress
LocalFree
GetQueuedCompletionStatus
FormatMessageA
DeleteCriticalSection
LeaveCriticalSection
InitializeCriticalSection
SetLastError
WaitForSingleObject
InterlockedExchange
TlsSetValue
Sleep
GetSystemTimeAsFileTime
TlsFree
InterlockedDecrement
EnterCriticalSection
InterlockedCompareExchange
TlsGetValue
InterlockedIncrement
InterlockedExchangeAdd
TlsAlloc
PostQueuedCompletionStatus
CloseHandle
GetLastError
CreateIoCompletionPort
CreateThread
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultLCID
GetStringTypeExA
FreeLibrary
LCMapStringA
LCMapStringW
LoadLibraryA
GetModuleHandleA
GetVersionExA
ReleaseMutex
GetCurrentProcessId
ExitThread
GetCurrentThreadId
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
HeapAlloc
GetProcessHeap
RtlUnwind
RaiseException
GetCPInfo
WriteFile
GetStdHandle
GetModuleFileNameA
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
ws2_32
WSAAddressToStringA
ntohs
htons
htonl
getpeername
WSASendTo
WSARecvFrom
WSASocketW
bind
getsockname
WSAGetLastError
listen
WSAStartup
ntohl
WSASend
accept
__WSAFDIsSet
setsockopt
WSACleanup
select
WSASetLastError
getsockopt
closesocket
connect
ioctlsocket
inet_addr
WSAStringToAddressA
WSARecv
mswsock
AcceptEx
user32
LoadStringA
TS_XXXX
Name
.text
Size
296KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
868B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=25, id=125, productName=VS2005 build 50727, version=50727,
count=66, id=110, productName=VS2005 build 50727, version=50727,
count=144, id=109, productName=VS2005 build 50727, version=50727,
count=9, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=137, id=1, productName=Unmarked objects,
count=16, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/pplive/PP/1012/eroc.dll
- IMPHASH 562780c9d084d026e0b182e13b30b5ea
- SHA256 3d6080326645bcc5d5dfac9ac25807cbbb3e6ec66826e5e4b62ef690a5a34465
- MD5 4f83ec0b34c6ddbeec4e83645ffe958b
- SHA1 f1a79897e0ef9a8adf799695bb5f37f56cedc934
- SHA512 8a7c55167380a36c77bf65ac08d1f26eb10b7be982cdc47ce4fb161185534549a6eee450d5dc6329f961b0ae5cc9d91512d7a24414dff403112478edbd0e8994
- SSDEEP 1536:uivcDsVlIHlkFtXbBimmODErmnXyfrIJPGorXkz:L0D08kzXVimmrrqVJPG/
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4d:1d:ca:fd:5e:07:d5:c0:f3:01:0d:dc:06:42:92:9e:c4:00:ee:71
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
26187
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetUnhandledExceptionFilter
OutputDebugStringA
CloseHandle
GetLongPathNameA
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCommandLineA
GetLocalTime
GetLastError
GetCurrentProcess
lstrcatA
lstrcpyA
VirtualQuery
GetModuleFileNameA
LoadLibraryA
Module32Next
GetProcAddress
FreeLibrary
FindFirstFileA
Thread32Next
GetCurrentThreadId
SuspendThread
Thread32First
GetModuleHandleA
GetCurrentThread
AllocConsole
GetConsoleTitleA
GetTickCount
lstrcpynA
CreateThread
TlsGetValue
TlsSetValue
TlsAlloc
WaitForMultipleObjects
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
user32
MessageBoxA
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
msvcrt
_vsnprintf
_adjust_fdiv
_except_handler3
fopen
_snprintf
__CxxFrameHandler
fflush
vfprintf
strncpy
fclose
_initterm
free
puts
fputs
freopen
_iob
printf
_fsopen
??2@YAPAXI@Z
fprintf
sprintf
malloc
__dllonexit
_onexit
?terminate@@YAXXZ
shlwapi
PathCombineA
PathAppendA
PathRemoveFileSpecA
PathFindFileNameA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
TS_XXXX
Name
.text
Size
24KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=3, id=11, version=8047,
count=4, id=4, version=8047,
count=86, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=12, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/1012/mir.dll
- IMPHASH 9b97a19dc34556068be0af763ee0c011
- SHA256 b096f1078941492763e43630b1f1ef3e8a8228057b504eebdabc3345fdad7d75
- MD5 243784d323879b0092fc74b783efb3ad
- SHA1 dd3f90d223548a1e966721fe17b2b7c54f0975f6
- SHA512 850c917df2ad2db1eb7cf8b0fbb4b126f7b35379f5676964e41da890319acba4128d5631cf4e2fbc9940f80b084bfe3eaca0b71fd0cc3a8a9dff63a58ea4c13c
- SSDEEP 6144:eaGhk87eNBw/vITIsIem3GJJHA8kX+6fZSv/OD6cOQKRwCkKrQpa:pGB7eNBw/8IeO+HAHnBhDUXLkSka
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
62:b1:86:c8:7b:fd:00:95:b6:48:8d:77:b2:28:65:28:85:36:ff:b3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
277334
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\svn\bin\Release\mir.pdb
kernel32
GetLastError
VirtualQuery
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
GetCurrentProcessId
MapViewOfFile
CreateFileMappingW
GetTickCount
GetModuleFileNameW
LoadLibraryW
GetProcAddress
GetPrivateProfileIntW
FreeLibrary
CloseHandle
UnmapViewOfFile
GetSystemDefaultLangID
GetVersionExW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
RaiseException
RtlUnwind
GetCPInfo
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
WriteFile
VirtualAlloc
HeapReAlloc
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetFilePointer
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
advapi32
CryptAcquireContextW
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptReleaseContext
CryptDestroyHash
ole32
CoUninitialize
CoInitialize
ws2_32
inet_ntoa
ntohs
WSAGetLastError
htons
user32
PostMessageW
TS_XXXX
Name
.text
Size
344KB
Virtual Size
340KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=125, productName=VS2005 build 50727, version=50727,
count=52, id=110, productName=VS2005 build 50727, version=50727,
count=124, id=109, productName=VS2005 build 50727, version=50727,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=113, id=1, productName=Unmarked objects,
count=50, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/pplive/PP/1012/tpi.dll
- IMPHASH 90547e4eb5ec31263ac362ca3152bc21
- SHA256 15757550a377de6c571a0edc6df263224c650255e646ff1e9f2b5f5fa73692da
- MD5 2b4db7b10beafb90ccd59cf0b165cb7f
- SHA1 6e602aeb694c9858a8529131e42c59f1d23f2ab2
- SHA512 943b61d61ef40fa60a65f944fc4e779c4cb48756c7fbd80a2f70da733b8c75e6727fabcf96d134a30a950df03606d1b38db70fd7af5b6b1b050a41a03df6b5b1
- SSDEEP 12288:fSUJV+dsIQUp2hiTTAct6cu6OruCPeRWcYPN2euhYqNgM:fSUT+uIQUpSA8w6cuLruPRo2e8J
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:04:8b:b8:cd:d1:1c:ba:1e:0b:24:c7:db:5d:0a:6b:23:6a:8d:fb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
12838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
ntohl
kernel32
GetEnvironmentVariableA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Locate
Name
.text
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
824KB
Virtual Size
822KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=11, version=8047,
count=72, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/ERoc.dll
- IMPHASH e43bbcb8f87ee846306b634ce05db32f
- SHA256 b31d875ad245684b965439587834d0bd36bce2ca6e8ddbc9e12ab5829b51d23a
- MD5 5ab1cc3c2cd1e34c5d7e9d019474cea9
- SHA1 f4226ee27c8686cdb8752b7003422040ce6c9693
- SHA512 227a60f849a9c81d868256bde03e214435959cf2f225ee73698b370c88a84367e4b12e77a318c2a5a31d40ea3669ecfa0b16ff6e5df97d617669ac9f2405f91f
- SSDEEP 3072:swxUV6hlBFqhov9f7xyBAQUyLGZmJgoi9lzf9:iV6ZV9yBA/yL6N
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
dc:ca:28:a8:d7:3d:cf:d7:63:19:a6:42:d1:ba:45:67:f9:e3:7c:30
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
28664
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
SetUnhandledExceptionFilter
GetCurrentThread
GetCurrentProcess
OutputDebugStringA
GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
Module32Next
GetLongPathNameA
Module32First
CreateToolhelp32Snapshot
GetCurrentProcessId
GetLocalTime
GetLastError
lstrcatA
lstrcpyA
VirtualQuery
GetModuleFileNameA
FindFirstFileA
AllocConsole
GetConsoleTitleA
lstrcpynA
WaitForMultipleObjects
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
GetTickCount
CreateThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
SetEvent
ResetEvent
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetStringTypeW
GetStringTypeA
Sleep
InterlockedExchange
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
FlushFileBuffers
WriteFile
FatalAppExitA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetStdHandle
SetFilePointer
InterlockedDecrement
InterlockedIncrement
CreateFileA
IsBadReadPtr
IsBadCodePtr
UnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
SetEndOfFile
ReadFile
SetConsoleCtrlHandler
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetEnvironmentVariableA
user32
MessageBoxA
shlwapi
PathAppendA
PathRemoveFileSpecA
PathFindFileNameA
PathCombineA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
TS_XXXX
Name
.text
Size
72KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=22, id=14, version=7299,
count=95, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=11, version=8047,
count=7, id=19, version=8034,
count=108, id=1, productName=Unmarked objects,
count=21, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/KOM.dll
- IMPHASH cbc91b0b3146001c961a5b05f81618b8
- SHA256 9749dce19dbb3046a2d12434d624009af61f4ce50b6742d9cf9738fc3a37a5c2
- MD5 b6c17edab6d9736fc860d31ef5d85f78
- SHA1 62ebec229dec0a8306d4d9039d9496eb9f44c8b3
- SHA512 ec5224b2300c9a6da3b621979e6b31524d587c59286849b86fd2550005b9f9a19efb3fe4464d658601540bfbf8688616d2f0bb9bbdc7bcf011f67cd47f825e7f
- SSDEEP 768:6+sXfu+mVxG+3CFvsQprwddzog5iA0lMcfL3Dkb9OilW:svu+mVg+3CFvsVzpcfo9Q
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
81:9b:14:b3:60:ef:7d:11:c5:c1:05:f2:e5:94:8a:51:8f:8b:e1:9d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
22217
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetProcAddress
GetLastError
LoadLibraryA
GetModuleFileNameA
VirtualQuery
GetVersion
GetCurrentProcessId
GetCommandLineA
GetTickCount
CreateEventA
CloseHandle
GetLocalTime
lstrcpyA
OutputDebugStringA
SetEvent
CreateThread
ResetEvent
TerminateThread
WaitForSingleObject
ole32
CoCreateGuid
msvcp60
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
??1_Lockit@std@@QAE@XZ
msvcrt
_onexit
??2@YAPAXI@Z
__CxxFrameHandler
memmove
sprintf
fclose
fflush
vfprintf
fprintf
fopen
_except_handler3
free
__dllonexit
_adjust_fdiv
_initterm
malloc
ws2_32
gethostname
gethostbyname
rpcrt4
UuidToStringA
shlwapi
StrStrIA
PathIsRelativeA
PathAppendA
PathRemoveFileSpecA
TS_0001
TS_0002
TS_0003
TS_0004
TS_0005
TS_0006
TS_0007
TS_0008
TS_0009
Name
.text
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=1, id=14, version=7299,
count=4, id=10, version=8047,
count=1, id=11, version=8047,
count=4, id=4, version=8047,
count=50, id=1, productName=Unmarked objects,
count=9, id=19, version=8034,
count=6, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/MIR.dll
- IMPHASH a9717fb0d05edd8309962b74c6ef524d
- SHA256 cc9e4c2b1f87399a75c9c1c8a0f801d4c4a8274894ab3db99d88c34306dff1e7
- MD5 135b1873b626e63fa039b8d4287e75ee
- SHA1 d90317b7c016176ac08a6814fddcc39f8fb81db6
- SHA512 fa17b478c701bb566d81d3401b96cfc1c39956def587d1db97dcbaf76d269d88ec102a31ce52f8307e77b5f4e841d6a8cb1ded742ba23c7b7bde782991efbf75
- SSDEEP 6144:k9zWBHQl1MqNRo7Wxf5KA2jCxGkxdTbwSX0okT0:ngMMKW1UixNDXc0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
29:05:d5:7c:a9:ae:46:cf:1a:3a:b0:fa:12:fe:fc:9f:01:64:1c:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
331755
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcp60
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??0runtime_error@std@@QAE@ABV01@@Z
??0overflow_error@std@@QAE@ABV01@@Z
??1overflow_error@std@@UAE@XZ
??_7overflow_error@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Xran@std@@YAXXZ
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?length@?$char_traits@D@std@@SAIPBD@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
ws2_32
inet_ntoa
ntohs
WSAGetLastError
htons
msvcrt
??0exception@@QAE@ABQBD@Z
_ftol
strstr
free
_initterm
malloc
_adjust_fdiv
__dllonexit
_onexit
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
sprintf
_vsnprintf
strncpy
memmove
srand
rand
_CxxThrowException
_snprintf
_purecall
??2@YAPAXI@Z
__CxxFrameHandler
kernel32
VirtualQuery
GetTickCount
QueryPerformanceCounter
GetModuleFileNameA
UnmapViewOfFile
GetProcAddress
LoadLibraryA
GetLastError
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
FreeLibrary
GetVersionExA
GetPrivateProfileIntA
WritePrivateProfileStringA
CloseHandle
user32
wsprintfA
PostMessageA
TS_XXXX
Name
.text
Size
340KB
Virtual Size
336KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=11, version=8047,
count=5, id=4, version=8047,
count=86, id=1, productName=Unmarked objects,
count=6, id=19, version=8034,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=39, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/PCP.dll
- IMPHASH f7da0542502914a50a6e3fc6a88c6309
- SHA256 a76497b730d228bc737f3064c9af74ba3483876f5c3aeed06d7144b938227e99
- MD5 4574b9161e57393b459924b2f0b8e446
- SHA1 36daa25dd5343c7781054f241ef0439ddd0e1ce3
- SHA512 c43023a31cbfb1ee4ed9c015df5ac17990acfdf3cc46a76fbf1a2a32e8ae170e6518620bef3512c5a6e1d31225a2d0e234a3537dd77b7da041c1bae9af1f301c
- SSDEEP 1536:DR2nUePLlQ94uqci1lQ8qITHUHNIlWTzQgBGNSg/jwa0KwvCJEYNTgKo9N:wfxQ9ni1lQ8qITHUHN+y1MvjLuCJEYBO
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c8:c2:4e:46:5d:85:a6:08:09:31:e0:19:34:f4:6a:cb:6a:89:d8:6b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
48889
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord815
ord561
ord825
ord1199
ord1247
ord6467
ord823
ord5810
ord5481
ord2031
ord4863
ord5796
ord5478
ord1971
ord966
ord3570
ord278
ord605
ord2077
ord6055
ord4078
ord1776
ord4407
ord5241
ord2385
ord5163
ord6374
ord2985
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord3742
ord818
ord6442
ord567
ord4275
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord1116
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4353
ord4274
msvcrt
malloc
free
srand
_snprintf
fclose
_errno
memmove
sprintf
_vsnprintf
_purecall
vfprintf
vprintf
fflush
__CxxFrameHandler
_fsopen
fgets
fwrite
??0exception@@QAE@ABV0@@Z
_CxxThrowException
??0exception@@QAE@XZ
_beginthreadex
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
rand
??1exception@@UAE@XZ
kernel32
WriteFile
GetLastError
ReadFile
CreateFileA
CloseHandle
FreeLibrary
GetModuleFileNameA
GetProcAddress
VirtualQuery
OutputDebugStringA
GetLocalTime
FlushFileBuffers
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
GetTickCount
WaitForSingleObject
CreateEventA
SetEvent
GetExitCodeThread
TerminateThread
LocalFree
LocalAlloc
SetFilePointer
user32
PostMessageA
EnableWindow
SetTimer
KillTimer
wsock32
connect
closesocket
ntohs
ioctlsocket
inet_addr
gethostname
gethostbyname
htons
getsockname
WSAGetLastError
socket
recv
send
setsockopt
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
shlwapi
PathFindFileNameA
PathRemoveFileSpecA
PathAppendA
PathRenameExtensionA
rpcrt4
UuidCreate
UuidFromStringA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
PCP_CleanUp
PCP_Detect
PCP_Join
PCP_Leave
PCP_List
PCP_Set
PCP_StartUp
PCP_Stats
Name
.text
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
936B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, productName=Unmarked objects (old),
count=10, id=19, version=8034,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=199, id=1, productName=Unmarked objects,
count=34, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PP/PPF.dll
- IMPHASH cc4aabc887f145bdbc613594d25ce8a3
- SHA256 565af61a130144b277ec409c76137c124819a3e5729073dd6ca68090a3e87812
- MD5 46239ee42a259c5053e1555fc9f28e45
- SHA1 9993ef05309fc1acf042581c6f0f4d9f1b3a7ca9
- SHA512 f86b301d50b5a6eb6bf8fa6c6aed2a725ab6da844936ca4d7dc0c60c9ef169f29877636c1a6fa9f49a461e766e0b09dc0a476c9d68c1bd27fc70e29d50f4fa08
- SSDEEP 3072:j6rziSvYLoJ/NNjBJc5Ew+AIyeCnbGiciL/oWmntN0/b:j6vDtZjBRAIyeycic9tNa
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
73:55:0d:cc:12:ad:33:a8:35:e3:76:40:48:dc:cc:e4:aa:0e:ac:7b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
109491
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
pcp
ord3
ord1
ord5
ord7
ord8
ord6
ord2
rpcrt4
UuidFromStringA
ws2_32
gethostname
inet_ntoa
inet_addr
gethostbyname
recv
connect
closesocket
socket
htons
send
setsockopt
shlwapi
PathFindFileNameA
mfc42
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord818
ord5163
ord2152
ord1233
ord567
ord4204
ord800
ord537
ord2379
ord665
ord858
ord922
ord353
ord535
ord1187
ord939
ord2818
ord540
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3953
ord4622
ord3738
ord561
ord815
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord4275
ord823
ord825
ord834
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord1270
msvcrt
_adjust_fdiv
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
_EH_prolog
_iob
tolower
strchr
strncmp
isspace
isalnum
fputs
memchr
fputc
fprintf
atof
_purecall
_snprintf
_mbsnicmp
_itoa
_mbscspn
_CxxThrowException
isalpha
localtime
vprintf
_beginthreadex
memmove
_strdup
free
fread
strncpy
fwrite
_mkdir
_mbscmp
exit
atoi
time
srand
isdigit
printf
sprintf
_findfirst
_findnext
_findclose
__CxxFrameHandler
_i64toa
sscanf
_ftol
fopen
fseek
ftell
fclose
_unlink
rand
_mbsspn
kernel32
LocalAlloc
GetProcAddress
LoadLibraryA
GetSystemTime
Sleep
CloseHandle
RemoveDirectoryA
SetEndOfFile
SetFilePointer
CreateFileA
GetPrivateProfileStringA
CreateMutexA
OutputDebugStringA
GetLastError
FormatMessageA
LocalFree
WritePrivateProfileStringA
GetExitCodeThread
DeleteFileA
GetTickCount
GetPrivateProfileIntA
lstrlenA
WaitForSingleObject
CreateEventA
SetEvent
TerminateThread
user32
SetTimer
wsprintfA
EnableWindow
TranslateMessage
DispatchMessageA
PostMessageA
CharNextA
GetMessageA
SendMessageA
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoCreateGuid
msvcp60
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1ios_base@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
RD_XXXX
Name
.text
Size
136KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=2, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=12, id=19, version=8034,
count=276, id=1, productName=Unmarked objects,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
count=11, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=7, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/PP/TEN.dll
- IMPHASH 69630f4e49cba917c47d520250bf1ff5
- SHA256 1aef8cb2c69a6a308acbd5f4211d09c0fdb0f19eb2aa77d4d38a1681e18805dd
- MD5 5a8165f95b5d1b29e690585e84b5a833
- SHA1 99b450b34862689e42649e84dd3d5048bc47d684
- SHA512 953d0807eff50c107e76904b904303d94c8994ead099f732f67898bfbb41ef95ae0da87aea683ee835e1900ef7f7d36342fceca53ac06bdc6fb7e99a1d1f2faa
- SSDEEP 3072:uyrBHd/KjVgNbZDIms3mKZNEhGWHlYUAxlN:uyrBHJKjVgPDCmKZi0nN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
24:fc:a6:e4:3b:13:a0:ea:9d:30:3a:37:92:16:64:43:ee:ac:b6:f5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
44181
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
CloseHandle
EnterCriticalSection
GetTickCount
GetModuleFileNameA
GetLocalTime
GetLastError
CreateThread
CancelIo
TerminateThread
GetVersionExA
GetModuleHandleA
CreateEventA
WaitForSingleObject
SetEvent
WaitForMultipleObjects
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
SetConsoleTitleA
GetQueuedCompletionStatus
GetProcAddress
LoadLibraryA
VirtualQuery
InterlockedIncrement
InterlockedDecrement
HeapFree
HeapAlloc
HeapCreate
GetCurrentProcessId
SetEndOfFile
CreateFileA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
SetStdHandle
GetOEMCP
GetACP
LCMapStringW
LCMapStringA
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
ReadFile
SetHandleCount
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapDestroy
HeapSize
Sleep
InterlockedExchange
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetCommandLineA
GetVersion
RaiseException
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
user32
PeekMessageA
PostThreadMessageA
DestroyWindow
RegisterClassExA
CreateWindowExA
GetMessageA
iphlpapi
GetIfTable
GetIpAddrTable
SetTcpEntry
ws2_32
WSAEnumNetworkEvents
WSACancelAsyncRequest
WSACleanup
WSAStartup
WSACloseEvent
getsockname
shutdown
closesocket
getpeername
listen
WSAWaitForMultipleEvents
gethostbyname
WSAEventSelect
connect
WSAGetLastError
WSASocketA
setsockopt
htons
htonl
bind
inet_addr
WSASetLastError
WSACreateEvent
WSAAsyncGetHostByName
WSARecv
WSASendTo
WSARecvFrom
WSAGetOverlappedResult
WSAAccept
WSASend
shlwapi
PathRemoveFileSpecA
TS_XXXX
Name
.text
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
567KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
896B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=3, id=12, version=7291,
count=24, id=14, version=7299,
count=88, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=93, version=2067,
count=7, id=93, version=2179,
count=136, id=1, productName=Unmarked objects,
count=32, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/PP/tpi.dll
- IMPHASH 90547e4eb5ec31263ac362ca3152bc21
- SHA256 a97e515ed904873fa342278e9dc077784ad1adc0e56b008063e3a72931ca2804
- MD5 4093471de5aee3871152a52e8d40d8d3
- SHA1 a3469ef48c71589dfe47e9d260f14ec02a3ae91e
- SHA512 564c9f62e4399b7aadf50bfd78f6eaae0667ccae3e8c9dcacca7587442680668969a6c05e2aedcd00419a915d14910870a013f6c341a3debad701202b29175a2
- SSDEEP 12288:4SUJV+dsIQUp2hiTTAct6cu6OruCPeRWcYPN2euhYqNg8:4SUT+uIQUpSA8w6cuLruPRo2e8p
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8b:04:8b:b8:cd:d1:1c:ba:1e:0b:24:c7:db:5d:0a:6b:23:6a:8d:fb
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
12838
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
ntohl
kernel32
GetEnvironmentVariableA
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
HeapFree
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
Locate
Name
.text
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
824KB
Virtual Size
822KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=21, id=14, version=7299,
count=60, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=11, version=8047,
count=72, id=1, productName=Unmarked objects,
count=5, id=19, version=8034,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/PPH.dll
- SHA256 46cf2c017cc6c2ed6d158f452b6a4c65047ce977b512c69975b512ffd4489b8d
- MD5 e069554f940f612fd3a7b0a7414cb070
- SHA1 f8b963ad850c873c0f5aff894600ddb44985e451
- SHA512 4afca587c4ca63ee1d4aac43c50a635630a2d6fc6459b78b204812738ea09ad558d1819f7da85a957470f7d29c185f33d3dfee232ca20960bc63bc6df9750f2a
- SSDEEP 384:i3tx0iQxqslQmN9eaUON2AzMCqxLCcgKmbbb9Oilnur:i3siQxqcQmGONPsL3Dkb9Oilur
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
36:21:b4:25:77:99:cd:64:94:1c:92:9a:74:ff:d9:91:5f:57:cc:29
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
15296
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
GetModuleDelayImportFuncIAT_API
GetModuleImportFuncIAT_API
Name
CODE
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
1024B
Virtual Size
892B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
127B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
832B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
512B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Modules/pplive/PPK.dll
- IMPHASH 44f95edaf7f2016ee8a58fe172a31f66
- SHA256 fd305ed9435b3bc87538d350104b421dc5f81cb57229e4b5e29072dfc26fc7e1
- MD5 0bad1cdd7c0632c3aa9c17661263334b
- SHA1 4af3cfd023ceb3b49df00ab8868f76a70d2e046d
- SHA512 9d8a05034b11cc327d689a34fe636ffd2f1bda8e75f30ab48dee0fd9ae2fea31153170359563491188314face2c002c8b01c24e9edfee7ba3205b12f1cb6b591
- SSDEEP 1536:EmQ7pFIbWR94W9yWH4Oth4uUtFBu8ZOM4o91:EN7jhRnykOuUtFBu8ZZV1
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
70:d9:e6:3e:f7:41:33:f9:f1:9e:17:b4:c3:76:b1:6a:f9:bf:c8:a5
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
14336
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetCurrentThread
GetSystemTime
GetModuleFileNameW
GetEnvironmentStrings
SetLastError
VirtualQuery
InterlockedIncrement
TlsSetValue
TlsFree
TlsAlloc
Sleep
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
ResumeThread
VirtualProtect
VirtualAlloc
InterlockedCompareExchange
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
GetThreadContext
SetThreadContext
SuspendThread
WriteFile
SetFilePointer
CloseHandle
GetProcAddress
LoadLibraryA
GetModuleHandleA
RtlUnwind
GetCommandLineA
GetVersionExA
InterlockedExchange
FlushFileBuffers
DeleteCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
ExitProcess
TerminateProcess
HeapFree
TlsGetValue
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
SetStdHandle
HeapReAlloc
SetUnhandledExceptionFilter
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
GetSystemInfo
AttachHook
DettachHook
Name
.text
Size
36KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=89, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=101, id=1, productName=Unmarked objects,
count=20, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/pplive/ProductUpdate.dll
- IMPHASH 68c26a84839644d56cbe4d8858a83342
- SHA256 041835eef2d10917451ce06bc7f72311c62766f5dc391e2ab302db810f506c32
- MD5 1e6409742c17fc566feec3cc03fecc48
- SHA1 e26233d8186a1088b152e5fb9e025464f7eee303
- SHA512 3115dd11e57d0090f27040450b017a6a0ce603164ba33c18a3315fbe1c808d581778e9b8c14b56019ee011170009bb9baa584e0d175ace8ae13323b81b91fbb9
- SSDEEP 3072:0qBezZSNgMJKpwJYfaVIsUk+e+RuAZI4yCUGtwhd/w64+DnE4fmTXT+fWGk1VGB6:gVCqwJVI/3uAZI4yfGtwr/wMLm
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
15:40:c6:4c:e5:8f:b1:d2:9f:1b:20:93:06:fa:e0:d2:45:95:06:0b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
26762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3698
ord800
ord567
ord540
ord535
ord823
ord825
ord641
ord765
ord2302
ord5953
ord2818
ord4160
ord860
ord537
ord6467
ord1133
ord1168
ord4710
ord1200
ord941
ord858
ord924
ord926
ord6874
ord5572
ord2915
ord2370
ord324
ord4234
ord4809
ord5981
ord2379
ord1816
ord4853
ord1146
ord4299
ord6215
ord2086
ord755
ord470
ord4376
ord3092
ord2642
ord6453
ord1175
ord2645
ord5232
ord1567
ord2393
ord6197
ord5718
ord3797
ord2147
ord2864
ord1180
ord268
ord1568
ord4078
ord4274
ord2982
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord3953
ord6778
ord5710
ord5683
ord668
ord3181
ord4058
ord2781
ord2770
ord356
ord3521
ord3522
ord1988
ord3638
ord690
ord389
ord1154
ord1105
ord1979
ord6385
ord4129
ord2763
ord4277
ord2764
ord5353
ord5356
ord5808
ord1075
ord5204
ord3229
ord1263
ord1228
ord665
ord5186
ord354
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord6055
ord3597
ord4425
ord5280
ord1775
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord6375
ord1776
ord6052
ord2514
ord4998
ord5268
ord5265
ord1116
msvcrt
atol
??1type_info@@UAE@XZ
__dllonexit
_strdup
_mbscmp
_mbsnicmp
_mbsspn
_adjust_fdiv
malloc
_initterm
_onexit
strtoul
__CxxFrameHandler
rand
free
_access
atoi
_mbscspn
kernel32
LocalFree
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileIntA
DeleteFileA
GetPrivateProfileStringA
CreateMutexA
GetLastError
FindResourceA
LoadResource
LockResource
LoadLibraryA
GetProcAddress
FreeLibrary
CreateDirectoryA
CopyFileA
CreateProcessA
CloseHandle
GetTempPathA
GetModuleFileNameA
LocalAlloc
user32
SendMessageA
IsWindow
EnableWindow
LoadIconA
DrawIcon
wsprintfA
CharNextA
IsWindowEnabled
GetActiveWindow
SetActiveWindow
GetCursorPos
IsWindowVisible
PostMessageA
IsIconic
GetSystemMetrics
GetClientRect
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
shlwapi
PathFileExistsA
PathMatchSpecA
PathIsDirectoryA
PathRemoveFileSpecA
PathAppendA
msvcp60
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
RD_XXXX
Name
.text
Size
28KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
140KB
Virtual Size
137KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=93, version=2067,
count=6, id=93, version=2179,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=261, id=1, productName=Unmarked objects,
count=16, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/RGBFilters.dll
- IMPHASH 449c04ce4bee0ec2e55db2247890c8ee
- SHA256 b30898c26acef77aee2b895bf0d1fc1295d5e16c057eabe6c204cbf196fcc326
- MD5 000da88d27676d971f26f2f5100ac542
- SHA1 f166f45eb69fac119b0729ae73b65fdac05ebc13
- SHA512 1442b2e3cfd9bbb9eff73d5f8d76d98f3debddba24264146f6349506b21185cd1f4d649e85084474584906297c10a3f76efa2dedd7ca144a0206ce3ec5cc0186
- SSDEEP 3072:4TL2zhYZiyyjSWWKmN1R7MJ2gieV9VqsptONjylvXyMm37sD44KbDINhFn:46SuP2feF5VunNOviV37sD5Kgn
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
80:82:fa:f1:3a:02:c9:be:80:42:bc:ba:d1:16:2a:32:15:ac:8b:ab
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
88633
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcrt
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
free
_wtoi
_purecall
rand
_ftol
??2@YAPAXI@Z
strncpy
??3@YAXPAX@Z
__CxxFrameHandler
winmm
timeEndPeriod
timeBeginPeriod
timeKillEvent
timeSetEvent
timeGetTime
kernel32
GetCurrentThread
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
CloseHandle
CreateEventA
ResetEvent
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
Sleep
MulDiv
FreeLibrary
LoadLibraryA
InterlockedExchange
GetThreadPriority
CreateThread
GetModuleHandleA
WideCharToMultiByte
GetACP
SetThreadPriority
GetProcAddress
user32
wvsprintfA
MsgWaitForMultipleObjects
PeekMessageA
GetQueueStatus
RegisterWindowMessageA
wsprintfA
GetDC
ReleaseDC
ShowWindow
DestroyWindow
DispatchMessageA
PostThreadMessageA
gdi32
SetTextColor
CreateDIBSection
CreateCompatibleDC
DeleteObject
DeleteDC
GetDeviceCaps
TextOutA
GdiFlush
SelectObject
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegCloseKey
RegEnumKeyExA
ole32
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
StringFromGUID2
CoInitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
92KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, productName=Unmarked objects (old),
count=4, id=19, version=8022,
count=12, id=19, version=8034,
count=6, id=14, version=7299,
count=4, id=10, version=8047,
count=3, id=4, version=8047,
count=94, id=1, productName=Unmarked objects,
count=1, id=28, version=9178,
count=38, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/SynacastEWA.ocx
- IMPHASH ac5314d8b3e60ce207524c1517a7b399
- SHA256 2829146cf129ff962a6800455667e3647a66bab8836ce0bcd93e20e8c13d5d83
- MD5 eb4f5ede4c4aaf41ea14db9b34e0a4da
- SHA1 1a08983ec7bac3bbe097f4b4d50445d7de49088e
- SHA512 8816f085328f2513f0397fc14e73b24cdf5344b10cacd152f8d50d3fb7071b487d387573eb6fbc2192a88ee35b1de3c93b2a5c5acec727008b94c8baf0248df6
- SSDEEP 12288:KZuh2wa2JAt8BHxcYS5DYot36LWqaFkVba4DrkkkkkkHqi3Bi8NOI:EqtmR5DYoF6lZBi8NOI
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
83:27:ea:37:27:17:2c:6b:5e:a0:41:07:58:87:40:d8:35:09:f3:89
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
274057
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord6638
ord4142
ord5142
ord6330
ord816
ord6213
ord6237
ord562
ord2706
ord1941
ord4029
ord5679
ord556
ord809
ord1088
ord2114
ord3701
ord2444
ord4282
ord3792
ord956
ord4390
ord3567
ord2566
ord6354
ord609
ord2567
ord3569
ord2397
ord5047
ord5977
ord3871
ord4155
ord3711
ord790
ord3541
ord5330
ord3716
ord5777
ord465
ord1921
ord942
ord5568
ord2910
ord4028
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord2716
ord4074
ord4692
ord5303
ord5285
ord5710
ord3947
ord3396
ord4616
ord3665
ord561
ord815
ord6350
ord1213
ord6466
ord1224
ord927
ord6865
ord3452
ord6038
ord1869
ord4244
ord2478
ord2679
ord6360
ord3321
ord6361
ord4466
ord5494
ord3273
ord3348
ord3676
ord446
ord743
ord1174
ord4001
ord3253
ord2719
ord2722
ord2721
ord1223
ord1207
ord2431
ord1686
ord5614
ord994
ord4336
ord4681
ord4633
ord5670
ord2148
ord4850
ord4914
ord5998
ord2129
ord1955
ord5207
ord2948
ord3863
ord5144
ord4699
ord4701
ord2871
ord2993
ord5645
ord4108
ord4655
ord4654
ord4762
ord4644
ord4897
ord4542
ord4515
ord4588
ord6211
ord4919
ord4924
ord4929
ord4653
ord4903
ord4902
ord4662
ord4661
ord4660
ord4642
ord4683
ord5017
ord4648
ord4637
ord4348
ord4774
ord4643
ord4631
ord4630
ord5054
ord4578
ord4365
ord4355
ord3491
ord4733
ord4735
ord4732
ord4403
ord4597
ord5002
ord4409
ord4986
ord4973
ord2480
ord3399
ord4533
ord4528
ord2949
ord2376
ord6366
ord2978
ord3143
ord3255
ord4460
ord2981
ord3075
ord4076
ord4618
ord5821
ord723
ord3941
ord423
ord2533
ord4943
ord6026
ord4453
ord5027
ord4496
ord4779
ord2787
ord6374
ord4215
ord2576
ord3649
ord2430
ord6266
ord1637
ord5020
ord4124
ord1884
ord4247
ord1209
ord4564
ord4666
ord4837
ord5005
ord4707
ord6367
ord5282
ord4432
ord3274
ord4619
ord449
ord746
ord2270
ord2822
ord941
ord6770
ord6279
ord6278
ord1863
ord4524
ord5681
ord3269
ord3574
ord439
ord736
ord3231
ord4517
ord4078
ord1937
ord4522
ord4536
ord4538
ord4519
ord834
ord920
ord6921
ord6919
ord5852
ord4272
ord6655
ord6918
ord3706
ord783
ord4688
ord1129
ord1115
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord289
ord2855
ord1634
ord5785
ord4294
ord613
ord470
ord540
ord538
ord800
ord2810
ord2746
ord755
ord6451
ord1165
ord1229
ord5257
ord1128
ord2371
ord6437
ord2859
ord4279
ord6376
ord6375
ord6193
ord4270
ord2406
ord818
ord3621
ord3658
ord825
ord567
ord3614
ord3737
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord2606
ord433
ord5571
ord6597
ord2070
ord268
ord1560
ord1131
ord2680
ord2127
ord3397
ord6017
ord6190
ord3591
ord5860
ord6057
ord5567
ord5575
ord5732
ord5674
ord5790
ord5869
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord2372
ord2756
ord354
ord5180
ord1971
ord665
ord356
ord2762
ord2773
ord3180
ord3176
ord668
ord5706
ord1594
ord6868
ord4199
ord1105
ord537
ord823
ord2634
ord3084
ord6107
ord6874
ord6139
ord2057
ord4219
ord2078
ord922
ord860
ord535
ord925
ord940
ord2559
ord5871
ord6168
ord801
ord541
ord2858
ord6195
ord3087
ord2294
ord795
ord6654
ord4273
ord858
ord3211
ord4037
ord4704
ord5491
ord4229
ord324
ord641
ord3592
ord4419
ord5276
ord1767
ord6048
ord2506
ord4992
ord4847
ord4370
ord5261
ord2854
ord1143
ord1230
ord2144
ord861
ord4197
ord323
ord1633
ord5781
ord640
ord3566
ord4350
ord6871
ord3142
ord2977
ord5273
ord2116
ord2438
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord4982
ord6051
msvcrt
free
wcsncpy
time
_purecall
swprintf
wcscpy
_wfopen
fgetws
fclose
memcmp
_wcsnicmp
wcslen
_wtol
_ftol
wcscmp
abs
memset
_strcmpi
memmove
strlen
atoi
__CxxFrameHandler
wcstoul
_wcslwr
_wcsdup
_wcsicmp
_except_handler3
fflush
vfprintf
fopen
_snprintf
strncpy
fabs
rand
srand
iswspace
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_CxxThrowException
strcmp
wcsstr
strrchr
strcat
strcpy
_i64tow
_wtoi
sprintf
fwrite
islower
toupper
malloc
wcscat
wcsncmp
_wsplitpath
wcstok
memcpy
kernel32
LocalFree
CreateDirectoryA
GetSystemDirectoryA
GetTempPathA
DeleteFileA
WinExec
LoadLibraryExW
GetModuleHandleA
GetVersionExA
CreateFileA
UnmapViewOfFile
FlushViewOfFile
ReleaseMutex
CreateMutexW
DeviceIoControl
lstrcpyW
lstrcatW
WritePrivateProfileStringW
GetVersion
GetTempPathW
GetPrivateProfileStringW
GetExitCodeProcess
ResetEvent
GetSystemTime
CreateEventA
SetEvent
FindResourceW
SizeofResource
LoadResource
LockResource
OpenProcess
TerminateProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
CreateDirectoryW
ExpandEnvironmentStringsW
lstrcmpW
Sleep
CreateProcessW
GetModuleHandleW
VirtualQuery
GetCurrentThread
FindFirstFileA
CreateToolhelp32Snapshot
Module32FirstW
GetCurrentProcessId
GetLongPathNameA
Module32NextW
LoadLibraryA
GetModuleFileNameA
lstrcpyA
lstrcatA
GetCurrentProcess
GetLocalTime
OutputDebugStringA
SetUnhandledExceptionFilter
GetVersionExW
CreateEventW
GetLastError
GetProcAddress
GetWindowsDirectoryW
LoadLibraryW
FreeLibrary
lstrcpynW
GlobalAlloc
GlobalReAlloc
GlobalFree
GetModuleFileNameW
GetPrivateProfileIntW
GetFileTime
CompareFileTime
SetFileTime
DeleteFileW
SystemTimeToFileTime
CreateThread
OpenThread
OutputDebugStringW
GetTickCount
InterlockedIncrement
InterlockedDecrement
GetCurrentThreadId
lstrlenW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
OpenFileMappingW
MapViewOfFile
CloseHandle
GlobalLock
lstrlenA
MultiByteToWideChar
GlobalUnlock
GetACP
MulDiv
LocalAlloc
user32
CreateWindowExW
TabbedTextOutW
GetWindow
PtInRect
GetCursorPos
GetWindowRect
RegisterWindowMessageW
LoadCursorW
ReleaseDC
SetWindowRgn
GetDC
SetCursor
SendMessageW
LoadIconW
EqualRect
FrameRect
SystemParametersInfoW
wsprintfW
MessageBoxW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
WaitForInputIdle
FindWindowW
GetMenuItemCount
EnableMenuItem
ModifyMenuW
DestroyWindow
GetClassNameW
SetCursorPos
GetKeyState
MessageBoxA
RegisterClipboardFormatW
CopyIcon
GetMessagePos
MessageBeep
LoadMenuW
LoadImageW
GetIconInfo
CreateIconIndirect
GetSysColor
FillRect
DrawStateW
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
GetActiveWindow
GetNextDlgTabItem
GetWindowLongW
DestroyIcon
DestroyCursor
DestroyMenu
ReleaseCapture
SetCapture
LoadBitmapW
RedrawWindow
GetDoubleClickTime
SetRect
EnableWindow
DefWindowProcW
InvalidateRect
ShowWindow
GetParent
SetParent
GetSystemMetrics
GetAncestor
MonitorFromWindow
DrawTextW
GrayStringW
IsWindowVisible
GetClientRect
InflateRect
KillTimer
SetTimer
MoveWindow
IsChild
PostMessageW
UpdateWindow
WindowFromPoint
GetSystemMenu
IsWindow
CheckMenuItem
OffsetRect
ScreenToClient
BringWindowToTop
GetWindowThreadProcessId
mouse_event
SetRectEmpty
SetWindowPos
CopyRect
GetMonitorInfoW
DeleteMenu
gdi32
DeleteDC
DeleteObject
CombineRgn
ExtCreateRegion
CreateDIBSection
MaskBlt
CreateBitmap
SetBkColor
SetMapMode
SetTextColor
GetPixel
SetPixel
CreateFontIndirectW
CreateRectRgnIndirect
GetWindowExtEx
CreateSolidBrush
Escape
MoveToEx
CreatePen
GetTextMetricsW
SetBkMode
SetTextJustification
CreateRoundRectRgn
FrameRgn
SelectClipRgn
GetViewportExtEx
DPtoLP
GetBkColor
GetTextExtentPoint32W
CreateCompatibleBitmap
CreateRectRgn
CreateCompatibleDC
BitBlt
StretchBlt
SelectObject
GetStockObject
ExtTextOutW
TextOutW
RectVisible
PtVisible
LPtoDP
LineTo
GetMapMode
GetObjectW
CreateFontW
GetDeviceCaps
advapi32
InitializeSecurityDescriptor
RegCreateKeyExW
RegQueryValueW
RegDeleteKeyW
RegCloseKey
SetSecurityDescriptorDacl
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
shell32
ShellExecuteExW
ShellExecuteW
comctl32
ord17
ImageList_GetImageCount
ImageList_GetIcon
_TrackMouseEvent
ole32
StringFromGUID2
CoInitialize
CoUninitialize
CoCreateGuid
CoCreateInstance
oleaut32
SysAllocString
VariantClear
VariantCopy
LoadRegTypeLi
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysStringLen
GetErrorInfo
SysFreeString
urlmon
URLDownloadToFileA
URLDownloadToFileW
msvcp60
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
?clear@ios_base@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
rpcrt4
UuidToStringW
UuidFromStringA
UuidToStringA
RpcStringFreeA
atl
ord42
ord47
winmm
PlaySoundW
shlwapi
PathAppendW
PathRemoveFileSpecW
PathStripPathW
PathFileExistsW
PathFindExtensionW
StrStrIW
PathAppendA
PathRemoveFileSpecA
PathFindFileNameA
StrStrIA
PathRemoveExtensionW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
ws2_32
gethostname
inet_addr
inet_ntoa
gethostbyname
wininet
InternetTimeToSystemTimeA
DeleteUrlCacheEntryW
uilib
ord191
ord323
ord374
ord328
ord391
ord269
ord376
ord203
ord192
ord284
ord378
ord387
ord365
ord386
ord213
ord270
ord326
ord325
ord360
ord329
ord234
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
288KB
Virtual Size
285KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=1, id=12, version=7291,
count=7, id=95, version=2179,
count=1, id=28, version=9178,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=22, id=93, version=2179,
count=3, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=5, id=4, version=9782,
count=930, id=1, productName=Unmarked objects,
count=78, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/SynacastList.ocx
- IMPHASH 79c6b016f602808cf23e80df53e907c7
- SHA256 488cbdf3b2cbb1976d89cce1e2c46941d3d1c2b04e906df6d70b136c469439ff
- MD5 cc400fc92d88392e6eeff3b734133d6d
- SHA1 6ec7e3b427311f6758e9ff439e01289af754093b
- SHA512 3b14be850b1be17af5034c0c9fff46a5d528c378d7bcdb03ca829f145da0e745987217bda277fb8ae9b7aa7278474b6ae4cbe300180a7ff5651e8efff6ca106a
- SSDEEP 12288:Ja1aZ8JgOCetayuHNh6hEuPVOy7vxMdspIsAV3UDqZ4Vs:M1k8J/TopHX6hEuNV7vxMdsOBED5Vs
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d3:6e:cf:41:92:40:1d:94:ba:a5:ab:12:7e:82:59:20:1a:79:a9:1c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
635427
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3802
ord4124
ord2114
ord6174
ord922
ord537
ord2854
ord4279
ord4282
ord5977
ord2081
ord5436
ord6379
ord5446
ord6390
ord6160
ord6105
ord5887
ord2608
ord291
ord5261
ord4847
ord4992
ord2506
ord6048
ord1767
ord4419
ord3592
ord686
ord641
ord925
ord324
ord2294
ord4229
ord2631
ord3516
ord2072
ord4704
ord2440
ord4272
ord4273
ord6654
ord2858
ord6868
ord4215
ord2576
ord3649
ord6266
ord2430
ord1637
ord6398
ord6451
ord6597
ord2538
ord4768
ord3517
ord3806
ord6655
ord2756
ord3491
ord2706
ord6871
ord6279
ord6278
ord3312
ord929
ord3805
ord5930
ord5830
ord2036
ord609
ord795
ord4983
ord4920
ord4925
ord4930
ord3348
ord3574
ord729
ord2496
ord613
ord289
ord1699
ord430
ord941
ord2862
ord6211
ord6921
ord6920
ord816
ord562
ord2478
ord668
ord798
ord3180
ord1989
ord5461
ord5188
ord533
ord3176
ord1972
ord3173
ord4053
ord2773
ord2762
ord356
ord6403
ord3728
ord810
ord4266
ord3909
ord5681
ord3269
ord736
ord439
ord6004
ord3995
ord3282
ord3298
ord5491
ord3292
ord6190
ord4037
ord3291
ord3211
ord3231
ord4321
ord3748
ord4118
ord4319
ord5506
ord1640
ord429
ord3749
ord4320
ord1826
ord4744
ord5010
ord4369
ord4846
ord5276
ord355
ord4224
ord5228
ord1177
ord1173
ord1561
ord5264
ord4828
ord4602
ord4710
ord4601
ord4629
ord5061
ord2567
ord4390
ord3569
ord3716
ord4370
ord2293
ord2362
ord5949
ord6193
ord6375
ord1869
ord6038
ord3452
ord2679
ord4244
ord2070
ord3232
ord2615
ord6437
ord2078
ord4453
ord4779
ord5027
ord4496
ord4754
ord3016
ord4078
ord5884
ord4759
ord4729
ord4737
ord4990
ord4782
ord3194
ord4197
ord956
ord4002
ord1698
ord4524
ord4517
ord1937
ord4522
ord4536
ord4538
ord4519
ord2857
ord3087
ord6331
ord3494
ord5679
ord2559
ord3810
ord5330
ord4213
ord2570
ord2403
ord2015
ord4392
ord3577
ord616
ord6316
ord6238
ord815
ord2504
ord2716
ord3947
ord6371
ord4480
ord2546
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5869
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord3396
ord3665
ord561
ord6113
ord1131
ord6350
ord1213
ord1224
ord1128
ord2423
ord547
ord6748
ord2621
ord6360
ord3321
ord6361
ord4466
ord5494
ord3273
ord3676
ord446
ord743
ord1174
ord4001
ord1223
ord1207
ord2431
ord1686
ord5614
ord994
ord4336
ord4681
ord4633
ord5670
ord2148
ord4850
ord4914
ord5998
ord2129
ord1955
ord5207
ord2948
ord3863
ord5144
ord4699
ord4701
ord2871
ord2993
ord5645
ord4108
ord4655
ord4654
ord4762
ord4644
ord4897
ord4542
ord4515
ord4588
ord4982
ord4919
ord4924
ord4929
ord4653
ord4903
ord4902
ord4662
ord4661
ord4660
ord4642
ord4683
ord5017
ord4648
ord4637
ord4348
ord4774
ord4643
ord4631
ord4630
ord5054
ord4578
ord4365
ord4355
ord4350
ord4733
ord4735
ord4732
ord4403
ord4597
ord5002
ord4986
ord4973
ord2480
ord3399
ord4533
ord2949
ord2376
ord6366
ord2978
ord3143
ord3255
ord2981
ord3075
ord4076
ord4618
ord5821
ord723
ord3941
ord423
ord5329
ord2533
ord4943
ord6354
ord4409
ord1884
ord4247
ord1209
ord4564
ord4666
ord4837
ord5005
ord4707
ord6367
ord5282
ord4432
ord3274
ord4619
ord449
ord746
ord2270
ord1190
ord1148
ord6867
ord1787
ord2127
ord1941
ord2144
ord3568
ord1836
ord2572
ord3625
ord4394
ord682
ord5047
ord1258
ord6900
ord6712
ord6771
ord6640
ord4583
ord4582
ord4893
ord4364
ord4886
ord5070
ord4335
ord4343
ord4884
ord4525
ord4539
ord4537
ord4520
ord4523
ord4518
ord4958
ord4955
ord4103
ord5236
ord3743
ord1719
ord4426
ord813
ord560
ord5256
ord4717
ord4268
ord3687
ord2085
ord2836
ord2099
ord3747
ord6124
ord6456
ord5787
ord5706
ord6865
ord4199
ord5852
ord6918
ord6376
ord3750
ord1912
ord3284
ord1115
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord6168
ord6017
ord6185
ord4324
ord6182
ord5752
ord6188
ord5755
ord2966
ord927
ord6195
ord3871
ord1594
ord4155
ord4219
ord861
ord2606
ord2855
ord942
ord2810
ord3253
ord1105
ord354
ord5180
ord665
ord940
ord548
ord6665
ord2721
ord2722
ord6466
ord2719
ord3998
ord1088
ord1264
ord2385
ord3084
ord4294
ord2371
ord470
ord3792
ord2746
ord3133
ord4292
ord4128
ord755
ord4270
ord1165
ord1229
ord1263
ord567
ord556
ord818
ord809
ord656
ord3737
ord4621
ord3257
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord3605
ord3397
ord5273
ord5286
ord3614
ord283
ord472
ord5784
ord3701
ord2444
ord1633
ord2910
ord5568
ord323
ord5790
ord5781
ord2442
ord640
ord3591
ord5860
ord6057
ord5567
ord5575
ord5732
ord5674
ord1129
ord5785
ord4221
ord290
ord614
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3131
ord4459
ord3254
ord3142
ord2977
ord1791
ord1130
ord3915
ord1143
ord1634
ord384
ord2088
ord2406
ord3621
ord3566
ord6646
ord5871
ord2372
ord2859
ord3658
ord1863
ord825
ord540
ord858
ord538
ord800
ord823
ord536
ord535
ord5296
ord2787
msvcrt
_waccess
swprintf
memmove
islower
toupper
atoi
malloc
_wtol
_itow
wcsstr
free
wcscmp
__CxxFrameHandler
_wcsdup
_strdup
atol
wcscpy
_ultow
wcsncpy
wcslen
_wcsicmp
isspace
isalnum
wcschr
_purecall
wcscat
_strcmpi
realloc
wcstoul
iswspace
_wcslwr
iswdigit
_beginthread
strtok
wcstok
wcspbrk
swscanf
_wtoi
_ftol
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
kernel32
LocalFree
GetVersionExA
GetWindowsDirectoryW
WinExec
GlobalFree
FindResourceW
lstrcatW
GetModuleHandleW
GetShortPathNameW
RemoveDirectoryW
lstrcpyW
HeapDestroy
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetTimeZoneInformation
lstrcmpiW
MulDiv
CreateProcessW
Sleep
CloseHandle
lstrcpynW
FreeLibrary
GetVersionExW
GetLastError
MoveFileW
DeleteFileW
IsBadReadPtr
GetDateFormatW
GetTimeFormatW
GetLocalTime
OutputDebugStringW
GetModuleFileNameW
CreateDirectoryW
GetTickCount
GetCurrentThreadId
FlushInstructionCache
lstrcmpW
GlobalAlloc
GlobalLock
GlobalUnlock
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
InitializeCriticalSection
lstrlenW
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
SystemTimeToTzSpecificLocalTime
CopyFileW
SystemTimeToFileTime
SetFileTime
GetFileAttributesExW
FileTimeToSystemTime
GetSystemTime
GetACP
LoadLibraryExW
LoadLibraryW
GetCurrentProcess
GetProcAddress
LocalAlloc
user32
PtInRect
IsRectEmpty
OffsetRect
GetFocus
SetTimer
DrawTextW
GrayStringW
CreateWindowExW
DefWindowProcW
SetWindowLongW
SetWindowTextW
GetDlgItem
FillRect
ChildWindowFromPoint
GetDC
IsChild
GetClassNameW
CreateIconIndirect
GetIconInfo
WindowFromPoint
DragDetect
DrawEdge
ShowScrollBar
GetCapture
GetClipCursor
ClipCursor
GetSystemMetrics
DrawFocusRect
IntersectRect
ClientToScreen
CreatePopupMenu
CallNextHookEx
CharNextW
MessageBoxW
GetComboBoxInfo
DestroyWindow
RedrawWindow
GetDesktopWindow
CreateAcceleratorTableW
wsprintfW
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
TranslateMessage
GetMessageW
UnionRect
LoadBitmapW
CopyRect
GetSysColor
SendMessageW
IsWindow
KillTimer
SetWindowPos
MapWindowPoints
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
GetWindowLongW
GetClientRect
RegisterClassExW
LoadCursorW
GetClassInfoExW
RegisterWindowMessageW
CallWindowProcW
MoveWindow
SetWindowRgn
SetRect
EndPaint
ScreenToClient
GetForegroundWindow
LoadImageW
DestroyIcon
WaitForInputIdle
SetActiveWindow
SetMenuItemInfoW
GetDlgCtrlID
ShowWindow
UpdateWindow
GetCursorPos
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
LoadIconW
IsWindowEnabled
InflateRect
EqualRect
RegisterClipboardFormatW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetAncestor
IsWindowVisible
EnumWindows
GetMenuItemCount
GetMenuItemID
LoadMenuW
GetSubMenu
RemoveMenu
InsertMenuW
ModifyMenuW
GetMenuItemInfoW
AppendMenuW
SetMenuDefaultItem
EnableWindow
CopyIcon
SetCursor
GetKeyState
DrawFrameControl
GetCursor
DestroyCursor
GetClassInfoW
OpenClipboard
EmptyClipboard
SetClipboardData
IsZoomed
BeginPaint
SetFocus
PostMessageW
GetWindowTextW
GetWindowTextLengthW
DispatchMessageW
CloseClipboard
SetRectEmpty
TabbedTextOutW
ReleaseDC
gdi32
PtInRegion
StretchBlt
CreatePen
Polyline
SetBkColor
SetMapMode
GetMapMode
DPtoLP
GetBkColor
LPtoDP
GetViewportExtEx
GetWindowExtEx
CombineRgn
CreateRectRgn
CreateDCW
GetTextExtentPoint32W
GetCurrentObject
CreateFontIndirectW
CreateHalftonePalette
CreatePalette
GetDIBColorTable
RealizePalette
CreateDIBSection
SetTextColor
LineTo
MoveToEx
SetBkMode
SetTextJustification
FrameRgn
FillRgn
SelectClipRgn
OffsetRgn
CreateRoundRectRgn
GetPixel
PlgBlt
CreateBitmap
CreatePolygonRgn
GetObjectW
GetDeviceCaps
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
ExtCreateRegion
DeleteObject
GetTextMetricsW
SelectObject
GetStockObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueW
RegCloseKey
comctl32
ImageList_GetImageInfo
ImageList_AddMasked
_TrackMouseEvent
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetIcon
ord17
ImageList_GetImageCount
ole32
IIDFromString
OleLockRunning
CoUninitialize
CoInitialize
StringFromGUID2
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoTaskMemAlloc
CoCreateGuid
olepro32
ord253
oleaut32
VariantCopy
SystemTimeToVariantTime
SysFreeString
SysAllocString
SysStringLen
SysAllocStringLen
LoadRegTypeLi
VariantClear
VariantChangeType
OleLoadPicturePath
DispCallFunc
RegisterTypeLi
LoadTypeLi
VariantTimeToSystemTime
urlmon
URLDownloadToCacheFileW
msvcp60
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1Init@ios_base@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0Init@ios_base@std@@QAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
rpcrt4
UuidFromStringA
RpcStringFreeW
UuidFromStringW
UuidToStringW
msimg32
GradientFill
wininet
InternetTimeToSystemTimeA
InternetTimeToSystemTimeW
DeleteUrlCacheEntryW
shlwapi
StrCmpIW
PathAppendW
PathRemoveFileSpecW
StrStrIA
PathFileExistsW
StrCmpNIW
PathFindFileNameW
StrStrIW
uilib
ord328
ord323
ord204
ord235
ord326
ord360
ord213
ord191
ord299
ord269
ord383
ord359
ord5
ord374
ord192
ord378
ord376
ord387
ord365
ord386
ord276
ord203
ord284
ord234
ord270
ord325
ord329
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
660KB
Virtual Size
659KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
320KB
Virtual Size
317KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
52KB
Virtual Size
49KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=12, version=7291,
count=14, id=95, version=2179,
count=4, id=25, version=9210,
count=1, id=28, version=9178,
count=2, id=93, version=2067,
count=24, id=93, version=2179,
count=3, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=1056, id=1, productName=Unmarked objects,
count=70, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/TaskDownload.dll
- IMPHASH 30248e8496f224640d3234b24b5caa46
- SHA256 57e4460923fa33175c9434493a0c2732dbc3129c0c61592096196736efb81d5c
- MD5 2bae6c335a155865f56e3da718377b44
- SHA1 d5f3231a7a3213e2b560ef5ede6fc90c2ec55564
- SHA512 3897d08c4e2c8a540d0876af049f2c056c18570115e107dfce2af53fb46b4f4639bc5f986bfc288f5c682770f099396446bf212fe627b0ca894e243691964128
- SSDEEP 768:yemN4WPku1aGE0b3Rcm13IppUUZ6PfJimye1C/HRldIkJyFsz8L3Dkb9OilA:YNJrb8UM6X47e1CpQkyFsz8o9+
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3f:32:f4:58:52:81:2a:65:50:4e:d6:88:79:45:e8:20:9d:3a:61:72
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
21818
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord561
ord825
ord815
ord540
ord800
ord5500
ord858
ord860
ord1132
ord6467
ord1131
ord6354
ord665
ord1979
ord5186
ord354
ord941
ord4129
ord537
ord932
ord834
ord823
ord668
ord3738
ord936
ord3311
ord3181
ord4058
ord2781
ord2770
ord356
ord6663
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord4424
ord4622
ord4080
ord3079
ord1116
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord1980
ord4274
msvcrt
tolower
strchr
strncmp
isspace
isalnum
__CxxFrameHandler
_mbsnbcpy
isalpha
fputs
free
fseek
ftell
fclose
fread
_access
_mbsicmp
atoi
strcpy
sprintf
fopen
strlen
_strdup
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
??1type_info@@UAE@XZ
_snprintf
memcpy
fprintf
strcmp
_purecall
memmove
kernel32
CompareFileTime
SetFileTime
FreeLibrary
GetModuleFileNameA
CreateDirectoryA
GetLastError
CreateMutexA
WideCharToMultiByte
MultiByteToWideChar
GetFileTime
FileTimeToSystemTime
GetSystemTime
WritePrivateProfileStringA
lstrlenA
LocalFree
LocalAlloc
SystemTimeToFileTime
GetPrivateProfileStringA
GetPrivateProfileIntA
SetFileAttributesA
Sleep
GetProcAddress
DeleteFileA
SetCurrentDirectoryA
LoadLibraryA
user32
wsprintfA
advapi32
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
shlwapi
PathRemoveFileSpecA
PathIsDirectoryA
StrStrIA
PathFindExtensionA
PathStripPathA
PathAppendA
wininet
InternetTimeToSystemTimeA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RD_XXXX
Name
.text
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=93, version=2067,
count=6, id=93, version=2179,
count=3, id=14, version=7299,
count=1, id=11, version=8047,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=173, id=1, productName=Unmarked objects,
count=10, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/Troubleshooter.dll
- IMPHASH 5f8a63c8cd603895caebfaac3026eb66
- SHA256 c570e88a5691b960381ccf04725d07fb9ebd290c1fd35804f0b3a6622f10e579
- MD5 2725ef352c99713c437864c45521e78d
- SHA1 176451b9ede7a2ed207bb72195b48ad3f1eeb287
- SHA512 60869d83b8b99663d8582e7da4bc40ac360268ca447e41589cb74491be215c44a46344d2be84dd498e81953ad9e6ee69f2f08ffea751694900915a2de4a33e80
- SSDEEP 3072:xzr1oq7pA72IpnLzp313EbnFtLeIfeCMjckjiwtPFozJy:xX1oqlA72IdAFtLAl7I8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7d:a1:e8:74:27:7a:d1:db:73:04:bb:31:78:0e:52:97:f7:30:e8:29
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
78127
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5285
ord5710
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord2388
ord4418
ord3733
ord561
ord815
ord3948
ord2717
ord1115
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord600
ord826
ord269
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord354
ord350
ord5180
ord5438
ord1971
ord665
ord3611
ord3122
ord5647
ord6381
ord5461
ord4272
ord2914
ord5188
ord533
ord3719
ord3506
ord3171
ord3178
ord3175
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord1989
ord2912
ord5462
ord860
ord798
ord6865
ord4197
ord2756
ord4124
ord2810
ord823
ord927
ord922
ord2606
ord2910
ord5568
ord537
ord940
ord942
ord5852
ord4199
ord535
ord925
ord858
ord3658
ord1863
ord1165
ord825
ord540
ord6466
ord538
ord861
ord800
ord4155
ord4616
msvcrt
memmove
time
srand
atoi
toupper
islower
fgets
__CxxFrameHandler
_purecall
wcscat
wcscpy
free
realloc
malloc
wprintf
swprintf
printf
_except_handler3
wcstoul
wcscmp
wcslen
rand
_CxxThrowException
__dllonexit
_onexit
_initterm
_adjust_fdiv
??1type_info@@UAE@XZ
_wcsdup
kernel32
GetCurrentThread
GetLastError
GetCurrentProcess
LocalAlloc
LocalFree
GetVersionExW
GetModuleHandleW
GetSystemInfo
lstrcmpiW
GetACP
lstrlenA
MultiByteToWideChar
lstrcpyW
CloseHandle
FlushViewOfFile
ReleaseMutex
WaitForSingleObject
OpenFileMappingW
MapViewOfFile
CreateMutexW
LoadLibraryW
GetProcAddress
FreeLibrary
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetModuleFileNameW
WideCharToMultiByte
lstrlenW
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetPrivateProfileIntW
GetPrivateProfileStringW
OutputDebugStringW
SetEvent
HeapDestroy
UnmapViewOfFile
ExpandEnvironmentStringsW
user32
GetDlgItem
SetWindowTextW
EndDialog
GetWindowTextLengthW
SetFocus
MessageBoxW
SetWindowPos
MapWindowPoints
SystemParametersInfoW
GetWindowRect
SendMessageW
GetWindowLongW
GetParent
EnableWindow
ShowWindow
KillTimer
SetTimer
GetClientRect
PostMessageW
GetSystemMetrics
GetWindowTextW
SetWindowLongW
GetWindow
DialogBoxParamW
advapi32
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
FreeSid
RevertToSelf
AccessCheck
RegCreateKeyExW
ImpersonateSelf
OpenThreadToken
OpenProcessToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
VariantCopy
VariantTimeToSystemTime
SysStringByteLen
SysAllocStringByteLen
VariantInit
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
VariantClear
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString
msvcp60
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Split@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??Mstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Xlen@std@@YAXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
iphlpapi
GetAdaptersInfo
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ws2_32
connect
htons
select
__WSAFDIsSet
gethostbyname
inet_addr
closesocket
ioctlsocket
socket
shlwapi
StrStrIA
StrStrIW
PathRemoveFileSpecW
PathAppendW
PathFileExistsW
Robin
Name
.text
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
100KB
Virtual Size
97KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=11, version=8798,
count=5, id=95, version=2179,
count=2, id=93, version=2067,
count=14, id=93, version=2179,
count=2, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=329, id=1, productName=Unmarked objects,
count=19, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/TrustUpload.dll
- IMPHASH 6a99e90bda650fc3dc8bf2cf45c76303
- SHA256 2fdc183044611024d1df33bcf02140049696869eb4d8267728034e8809e672ce
- MD5 7496bf7d7af001e28cef2e270f6da35b
- SHA1 6922c2bec32c1a46e5ac27dea49132da5dc8376f
- SHA512 29405d8cb3563b722e76e3d3d8c5bbd2e34ee755a5523ec16b422e0a071cbeda2cf2f12636d7fe095678565719242763a1ae5127f1e67003dc3cdfb5492d4ff7
- SSDEEP 384:u6pma6bSFQLQdKlTmv3u4tjOTgeDfQhd/reLCcgKmbbb9Oil/8:uHbRlu+wOTrfudTeL3Dkb9Oil/8
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
59:e8:7d:98:f3:af:2f:ae:fa:e4:8c:2c:b8:41:79:59:16:f6:e0:b0
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
9771
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord825
ord815
ord540
ord800
ord665
ord5572
ord2915
ord1979
ord858
ord5186
ord354
ord2818
ord5500
ord860
ord1132
ord6467
ord1131
ord2985
ord941
ord2820
ord3811
ord6877
ord668
ord547
ord3185
ord3181
ord2781
ord2770
ord356
ord1176
ord1116
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord1578
ord600
ord826
ord269
ord2512
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord5731
ord3922
ord2554
ord4486
ord6375
ord6354
ord4274
msvcrt
_initterm
_mbsnbcpy
_access
_itoa
free
strtol
malloc
_mbscspn
_mbsspn
_mbsnicmp
??2@YAPAXI@Z
??1type_info@@UAE@XZ
_adjust_fdiv
__CxxFrameHandler
_onexit
__dllonexit
kernel32
LocalFree
GetPrivateProfileStringA
CreateMutexA
GetPrivateProfileIntA
CreateFileA
GetFileTime
CreateEventA
GetLastError
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
CloseHandle
FreeLibrary
GetModuleFileNameA
GetCurrentProcessId
DeleteFileA
GetTempPathA
CreateDirectoryA
LocalAlloc
user32
CharNextA
advapi32
RegOpenKeyExA
RegQueryValueExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
ole32
CoInitialize
CoUninitialize
urlmon
URLDownloadToCacheFileA
shlwapi
PathRemoveFileSpecA
PathIsDirectoryA
PathAppendA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
RD_XXXX
Name
.text
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
962B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=93, version=2067,
count=8, id=93, version=2179,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=129, id=1, productName=Unmarked objects,
count=5, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/UI.dll
- IMPHASH f476ee6c1b5fb2965a6df1a16b7bbf28
- SHA256 962b06920b1c92849aebc5e026192c9543041ba5d9ad9f02da5151acac93c9d0
- MD5 a1c8c5cf450138d9087d25b2a5bf28b4
- SHA1 d873d7020ce2def4dd75a230dfaa8a6b09692b27
- SHA512 4cf0962ddb514f4a1d6e765bd115f0df75079dfea4733e656cad95373fd48da929c889685d2fe39ab467fe00d6366fa59b3e58b7afadf7e748f1a948816e6fef
- SSDEEP 24576:tSPdXqHz5xkjC2Cw599HihZt15Q2BsF3+:tS5qHz5xkr99HiTxruFu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
d4:38:d4:ac:b2:37:07:33:6a:8c:da:ce:35:54:af:4a:79:3d:1b:12
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=R&D Department,O=Synacast Corp.,L=Shanghai,ST=Shanghai,C=CN
Serial Number
6d:c5:29:38:96:c8:31:e0:df:16:07:97:15:bb:89:8e
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 27, 2007 - Sep 26, 2008
Minor OS version
0
Major OS version
4
Entry point
354211
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
shlwapi
StrCpyW
PathIsDirectoryW
StrStrIW
PathAppendW
StrStrIA
PathRemoveFileSpecW
PathFileExistsW
msimg32
GradientFill
wininet
DeleteUrlCacheEntryW
InternetTimeFromSystemTimeW
InternetTimeToSystemTimeW
uilib
ord392
mfc42u
ord4426
ord364
ord784
ord641
ord614
ord4236
ord6211
ord1197
ord2078
ord5031
ord5277
ord6195
ord1941
ord2144
ord1134
ord5977
ord4078
ord1937
ord6375
ord1258
ord2225
ord613
ord289
ord858
ord3087
ord2746
ord3215
ord4312
ord4282
ord5047
ord5261
ord4370
ord4847
ord4992
ord2506
ord6048
ord1767
ord5276
ord4419
ord3592
ord324
ord2127
ord2294
ord4229
ord6376
ord4704
ord433
ord2373
ord2372
ord3716
ord795
ord922
ord927
ord6466
ord2680
ord5798
ord3491
ord6451
ord2281
ord2362
ord6330
ord3348
ord4616
ord3574
ord2615
ord290
ord1560
ord268
ord6278
ord801
ord6139
ord6874
ord541
ord2756
ord816
ord562
ord3016
ord665
ord5438
ord3313
ord5180
ord354
ord834
ord837
ord920
ord935
ord933
ord3393
ord3728
ord2574
ord4396
ord3365
ord3635
ord810
ord693
ord3991
ord2857
ord3282
ord6003
ord3993
ord4219
ord3298
ord3281
ord5930
ord2634
ord6004
ord537
ord3875
ord3420
ord3049
ord929
ord3296
ord6667
ord6879
ord1761
ord940
ord3688
ord2403
ord2015
ord4213
ord2570
ord4392
ord3577
ord616
ord3805
ord2293
ord6631
ord836
ord5929
ord3222
ord3403
ord3753
ord4273
ord2805
ord6898
ord3523
ord6090
ord4029
ord1826
ord4744
ord5010
ord4369
ord4846
ord355
ord4224
ord5228
ord1177
ord1173
ord1561
ord5264
ord4828
ord4602
ord4710
ord4601
ord2083
ord5061
ord4124
ord5674
ord6168
ord5732
ord4197
ord3701
ord3000
ord6865
ord6655
ord860
ord6664
ord1787
ord5706
ord3568
ord6166
ord2755
ord2235
ord5783
ord4238
ord3915
ord6237
ord5785
ord353
ord1184
ord1791
ord4221
ord1172
ord2289
ord2355
ord2350
ord2287
ord2356
ord6868
ord802
ord542
ord2291
ord3312
ord6565
ord5597
ord1086
ord3494
ord3626
ord683
ord3221
ord5142
ord1863
ord668
ord1972
ord3176
ord2773
ord2762
ord356
ord6654
ord772
ord500
ord6191
ord3865
ord4118
ord6122
ord5857
ord713
ord5855
ord414
ord5618
ord1085
ord4470
ord2538
ord3810
ord291
ord5571
ord941
ord6770
ord4199
ord937
ord6921
ord5854
ord6136
ord341
ord654
ord1105
ord1971
ord4053
ord4450
ord6138
ord5274
ord3490
ord3808
ord5856
ord2637
ord5446
ord6390
ord2836
ord5436
ord6379
ord2099
ord1808
ord326
ord4266
ord2290
ord1921
ord5777
ord2966
ord5755
ord6188
ord5752
ord6182
ord4324
ord6185
ord6017
ord5790
ord5575
ord5567
ord6057
ord5860
ord3591
ord6190
ord3727
ord4265
ord2423
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5710
ord3733
ord561
ord815
ord3948
ord1131
ord2717
ord6919
ord5285
ord798
ord1989
ord5461
ord5188
ord533
ord2478
ord5256
ord1718
ord3743
ord5236
ord6050
ord4103
ord4954
ord4957
ord4518
ord4523
ord4520
ord4537
ord4539
ord4525
ord4883
ord4714
ord4341
ord4334
ord5070
ord4527
ord4886
ord4364
ord4893
ord4582
ord4583
ord1833
ord535
ord861
ord803
ord543
ord3579
ord4279
ord609
ord2567
ord2914
ord2606
ord538
ord942
ord2444
ord2910
ord5568
ord925
ord4155
ord1637
ord2088
ord2445
ord3871
ord5871
ord472
ord5784
ord4292
ord4128
ord2559
ord283
ord2858
ord6266
ord2855
ord2430
ord384
ord686
ord3649
ord2576
ord4215
ord3569
ord4390
ord3614
ord3084
ord6597
ord1165
ord269
ord826
ord600
ord1571
ord1230
ord818
ord3737
ord2114
ord1088
ord540
ord2810
ord6354
ord800
ord6193
ord3792
ord4294
ord470
ord755
ord2371
ord2859
ord2854
ord6871
ord4270
ord809
ord567
ord556
ord4418
ord4621
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord3397
ord5286
ord1143
ord1634
ord2745
ord5869
ord2397
ord2406
ord3658
ord3621
ord323
ord1633
ord5781
ord640
ord3566
ord823
ord825
ord1563
ord1194
ord1240
ord342
ord1179
ord1570
ord1568
ord1115
ord4629
ord1248
ord1250
msvcrt
_initterm
_strcmpi
_wcsnicmp
_adjust_fdiv
??1type_info@@UAE@XZ
free
_wcsdup
malloc
wcslen
memset
wcscpy
memcpy
?terminate@@YAXXZ
_onexit
__dllonexit
_waccess
iswspace
wcstoul
isxdigit
time
_ultow
srand
wcscat
_except_handler3
??0exception@@QAE@ABV0@@Z
_wcsicmp
_itow
_wtoi
strcat
rand
islower
toupper
sprintf
wcscmp
memcmp
swprintf
wcsncpy
_CxxThrowException
_ftol
floor
realloc
tolower
strchr
strncmp
isspace
isalnum
isalpha
fputs
fputc
fopen
fseek
ftell
fclose
fread
fprintf
atoi
strcmp
_purecall
strcpy
_snprintf
strlen
memmove
__CxxFrameHandler
kernel32
GlobalUnlock
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GlobalLock
LockResource
EnterCriticalSection
LeaveCriticalSection
GetWindowsDirectoryW
LoadLibraryW
MulDiv
lstrlenW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalAlloc
FreeLibrary
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
lstrcpyW
VirtualQuery
TerminateProcess
CloseHandle
CreateProcessW
WideCharToMultiByte
GetACP
GetVersionExW
MultiByteToWideChar
lstrlenA
GetLastError
DeviceIoControl
GetTickCount
FindResourceW
GetSystemTime
GetLocalTime
CreateThread
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
OutputDebugStringW
SetProcessAffinityMask
GetCurrentProcess
CreateFileW
DeleteFileW
ReadFile
SetFilePointer
GetFileSize
lstrcatW
GetTempFileNameW
GetShortPathNameW
GetTempPathW
LocalFree
WriteFile
LocalAlloc
WaitForSingleObject
GetEnvironmentVariableW
Sleep
GlobalFree
GlobalReAlloc
CreateDirectoryW
GetCurrentThreadId
SetThreadExecutionState
SetProcessWorkingSetSize
GetVersion
CopyFileW
SetFileAttributesW
FlushInstructionCache
lstrcmpW
ExpandEnvironmentStringsW
lstrcmpiW
GetLongPathNameW
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetCommandLineW
CreateEventW
HeapDestroy
LoadResource
user32
GetClassInfoExW
RegisterClassExW
RegisterWindowMessageW
GetKeyState
GetWindowThreadProcessId
CharNextW
CharLowerW
MessageBeep
CallWindowProcW
SetWindowLongW
DefWindowProcW
DeleteMenu
GetMenu
UnregisterHotKey
RegisterHotKey
ShowWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
IsMenu
SetMenuItemInfoW
SetMenuDefaultItem
GetWindow
IsZoomed
IsIconic
GetSystemMenu
GetDesktopWindow
CreatePopupMenu
AppendMenuW
InsertMenuW
SetWindowPos
GetAncestor
GetWindowDC
PeekMessageW
MapWindowPoints
GetDlgCtrlID
FindWindowExW
SetForegroundWindow
GetFocus
IsWindowEnabled
SetFocus
GetClassNameW
DrawIcon
LoadIconW
IsWindowVisible
GetDoubleClickTime
WaitForInputIdle
SetWindowRgn
TrackPopupMenuEx
CreateWindowExW
IsChild
ExitWindowsEx
TabbedTextOutW
GrayStringW
LoadAcceleratorsW
TranslateAcceleratorW
GetWindowPlacement
DestroyMenu
GetCursorPos
EqualRect
SystemParametersInfoW
GetSystemMetrics
IsRectEmpty
IntersectRect
UpdateWindow
EnumWindows
GetWindowTextW
wsprintfW
PtInRect
SetRect
SetRectEmpty
SetActiveWindow
RedrawWindow
IsWindow
DrawTextW
GetWindowLongW
CopyIcon
DestroyCursor
RemoveMenu
LoadBitmapW
GetDC
GetParent
GetWindowRect
CreateIcon
GetClassInfoW
ModifyMenuW
GetMenuItemInfoW
GetMenuStringW
GetMenuItemID
GetMenuItemCount
EnableMenuItem
CheckMenuItem
LoadMenuW
LoadImageW
GetIconInfo
PostMessageW
CopyRect
InflateRect
FrameRect
GetSysColorBrush
DrawFocusRect
DrawStateW
OffsetRect
DrawEdge
DrawFrameControl
GetSysColor
FillRect
GetMessagePos
KillTimer
GetSubMenu
GetActiveWindow
GetCapture
SetTimer
SetCapture
WindowFromPoint
ReleaseCapture
GetNextDlgGroupItem
DestroyIcon
ClientToScreen
ScreenToClient
LoadCursorW
EnableWindow
GetClientRect
SetCursor
ReleaseDC
InvalidateRect
SendMessageW
SubtractRect
GetNextDlgTabItem
gdi32
RectVisible
StretchDIBits
SetBkMode
SetTextColor
GetGlyphOutlineW
PatBlt
GetPixel
CreateSolidBrush
CreatePen
CreateFontW
SetViewportOrgEx
SetBkColor
Rectangle
CombineRgn
ExtCreateRegion
CreateRectRgn
SetBrushOrgEx
CreatePatternBrush
PtVisible
TextOutW
ExtTextOutW
Escape
StretchBlt
CreateRectRgnIndirect
SetStretchBltMode
SelectObject
GetDIBits
CreateDIBSection
DeleteDC
GetTextExtentPoint32W
CreateFontIndirectW
GetStockObject
SetPixel
CreateCompatibleBitmap
CreateBitmap
BitBlt
MaskBlt
GetObjectW
GetViewportOrgEx
CreateCompatibleDC
DeleteObject
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegSaveKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegRestoreKeyW
OpenProcessToken
LookupPrivilegeValueW
shell32
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW
Shell_NotifyIconW
comctl32
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_Draw
ImageList_Destroy
ImageList_GetImageCount
_TrackMouseEvent
InitCommonControlsEx
ole32
OleInitialize
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysStringLen
VariantClear
VariantInit
SysAllocString
VariantTimeToSystemTime
VariantCopy
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
SysFreeString
urlmon
URLDownloadToCacheFileW
URLDownloadToFileW
wsock32
gethostbyname
gethostname
ioctlsocket
inet_addr
msvcp60
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
??8std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??0logic_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
winmm
PlaySoundW
rpcrt4
UuidFromStringW
UuidFromStringA
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
GetA
GetB
RD_XXXX
Name
.text
Size
376KB
Virtual Size
375KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
84KB
Virtual Size
80KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=2, id=12, version=7291,
count=8, id=95, version=2179,
count=2, id=93, version=2067,
count=3, id=14, version=7299,
count=3, id=11, version=8047,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=26, id=93, version=2179,
count=960, id=1, productName=Unmarked objects,
count=7, id=25, version=9210,
count=1, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=120, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/am.dll
- IMPHASH 62020c9fc9f85259d8f75d9864ad3ca4
- SHA256 bcad28980dc89933d4072469c78838944dbc7d980e801058698cf3d8582de005
- MD5 edecef0f5938b2556258b3a61b77f8bc
- SHA1 620c1391f35fde3fe29a791a0cf8c2c4214a5ac5
- SHA512 cb85214054fa8762f4d6463ffa501b22edd88b50c4e1ae49e50e903b30cb3cd233f131feefdb8093b0d211011a16ce1a62c2c70d7572e816177c4e340caed0d1
- SSDEEP 6144:HS17k5zItqz+YfTm9BiUGprSf69WfyIBye5w99lZmgLb:Hl+HehSfpfyIBy/99db
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
6f:e4:69:79:89:54:35:84:8c:d0:74:d7:1b:df:a3:7c:7a:2d:eb:12
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
162185
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord3953
ord2725
ord922
ord4202
ord4204
ord353
ord941
ord665
ord1979
ord5186
ord354
ord833
ord4465
ord1980
ord3181
ord4058
ord2781
ord2770
ord356
ord4129
ord4278
ord6662
ord5933
ord919
ord269
ord826
ord600
ord1578
ord6467
ord1255
ord1253
ord1570
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord1197
ord1243
ord342
ord1182
ord1577
ord1168
ord1575
ord1176
ord1116
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord3584
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord928
ord926
ord6877
ord268
ord1567
ord6928
ord6930
ord2818
ord860
ord834
ord936
ord920
ord837
ord5934
ord6672
ord932
ord858
ord535
ord537
ord803
ord540
ord823
ord543
ord825
ord800
ord668
msvcrt
__CxxFrameHandler
sprintf
_mbscmp
rand
srand
_adjust_fdiv
_initterm
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
_ftol
_mbsnbicmp
fclose
??1type_info@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBD@Z
free
_CxxThrowException
memmove
_mbsicmp
atoi
_mbstok
_splitpath
_mbsnbcmp
malloc
_strdup
toupper
fwrite
fopen
??1exception@@UAE@XZ
kernel32
CreateProcessA
CloseHandle
WideCharToMultiByte
CreateDirectoryA
VirtualQuery
GetModuleFileNameA
InterlockedDecrement
LeaveCriticalSection
GetTempPathA
EnterCriticalSection
GetSystemTime
GetTickCount
GetACP
lstrlenA
MultiByteToWideChar
SetEvent
WaitForSingleObject
TerminateThread
DeleteCriticalSection
InitializeCriticalSection
GetLastError
CreateEventA
CreateThread
LoadResource
SizeofResource
FindResourceA
LocalFree
LocalAlloc
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CopyFileA
CompareFileTime
SystemTimeToFileTime
DeleteFileA
LockResource
GetFileTime
user32
DefWindowProcA
SetWindowLongA
GetWindowLongA
CreateWindowExA
GetDesktopWindow
DestroyWindow
SetTimer
KillTimer
PostMessageA
SendMessageA
RegisterClassExA
WaitForInputIdle
wsprintfA
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysFreeString
VariantClear
VariantInit
SysAllocStringByteLen
SysStringByteLen
SysAllocString
urlmon
URLDownloadToFileA
wininet
InternetTimeToSystemTimeA
DeleteUrlCacheEntry
shlwapi
PathFindExtensionA
PathFindFileNameA
PathStripPathA
StrStrIA
PathRemoveFileSpecA
PathAppendA
PathFileExistsA
msvcp60
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0locale@std@@QAE@XZ
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?clear@ios_base@std@@QAEXH_N@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??_7out_of_range@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??1locale@std@@QAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??_7bad_cast@std@@6B@
??1_Locinfo@std@@QAE@XZ
?_Term@?$ctype@D@std@@KAXXZ
?_Cltab@?$ctype@D@std@@0PBFB
_Getctype
??0_Locinfo@std@@QAE@PBD@Z
??_7?$ctype@D@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
?_Iscloc@locale@std@@QBE_NXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I_N@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
??1?$ctype@D@std@@UAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
uilib
ord293
ord276
ord374
ord234
ord386
ord365
ord360
ord376
ord192
ord203
ord284
ord378
ord387
PA_1
PA_2
Name
.text
Size
172KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
28KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=11, version=8798,
count=2, id=25, version=9210,
count=2, id=95, version=2179,
count=2, id=93, version=2067,
count=14, id=93, version=2179,
count=3, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=355, id=1, productName=Unmarked objects,
count=10, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=3, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/common.dll
- IMPHASH 4af413a6eee4fec07c0985b05516f3f9
- SHA256 5e6fa45b2600a1b1ecd1cb26343593aa6d193c270197bcc468fc5bafa6e1fbbd
- MD5 d158a6a9d330fd633f992a99147bc910
- SHA1 d0d37e71584d9ce135d62bb962d69bd91dfbbacb
- SHA512 3f6b29937cb7d591946d6653719e6f2f88fcedd1d12fa957c80f5242c9905a585f1fae5ec773899a91a794a93df233680065fe0ac829028beb6e95616bbfbdbf
- SSDEEP 384:OLzG5MfQvPOoREFhdXsLCcgKmbbb9OilTT:U4M09REFhdXsL3Dkb9OilTT
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
b7:9d:e9:fe:26:0a:b0:a9:e6:7a:19:85:83:0e:ae:f0:35:41:c2:ef
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
8523
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42u
ord3341
ord5296
ord5298
ord2717
ord4074
ord4692
ord5303
ord5285
ord5710
ord3948
ord2977
ord3142
ord3254
ord4459
ord3131
ord3257
ord2980
ord3076
ord2971
ord3825
ord3826
ord3820
ord3074
ord4075
ord4616
ord4418
ord3733
ord561
ord825
ord815
ord823
ord3579
ord543
ord803
ord698
ord800
ord861
ord2388
ord540
ord668
ord3176
ord2773
ord2762
ord356
ord858
ord925
ord1165
ord6466
ord911
ord398
ord913
ord4182
ord6279
ord6278
ord4273
ord2755
ord5461
ord798
ord5444
ord532
ord3432
ord4184
ord5588
ord6868
ord1173
ord1568
ord1570
ord1179
ord342
ord1240
ord1194
ord1563
ord1248
ord1250
ord1571
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord396
ord4269
ord600
ord826
ord269
ord1115
msvcrt
__CxxFrameHandler
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_wtol
wcscmp
kernel32
LocalFree
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
shlwapi
PathRemoveFileSpecW
GetLanguageResW
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
832B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
798B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=2, id=93, version=2179,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=4, version=9782,
count=109, id=1, productName=Unmarked objects,
count=6, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/ets.dll
- IMPHASH 9fcff45561cdb369433d22c4865e1cc1
- SHA256 ad8bfb651faa1494ec4385a41e2ec6444f762d2cee394694ff7a5d793237550a
- MD5 f62a657fe909d8086ebdd8b3c884d8ee
- SHA1 82ebab9e5688c2fb2049e60a6424b0939f42bb1d
- SHA512 7ffa9523584a25224538596d2b3ad1aa1a67f451205dca25bfbdeff943363f0cfc7b9578ae30b52f5bb423ccdfd87b6177a371bc1fdf5d1431c505f41705e537
- SSDEEP 1536:a1Js9GTcNr58nk/7WoXWrUwNCcrAZ5F4LnEso9N:aO4CWojYra1ZN
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:9f:cb:6d:d2:65:86:df:bf:4b:72:ec:ac:72:e0:bf:a9:33:cf:58
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
13533
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
MultiByteToWideChar
lstrlenA
lstrlenW
WideCharToMultiByte
HeapDestroy
DeleteCriticalSection
DisableThreadLibraryCalls
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetShortPathNameA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
InterlockedDecrement
InterlockedIncrement
user32
CharNextA
ole32
CoCreateInstance
oleaut32
LoadRegTypeLi
LoadTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
msvcrt
_purecall
??2@YAPAXI@Z
free
_except_handler3
?terminate@@YAXXZ
_initterm
malloc
_adjust_fdiv
isalnum
__CxxFrameHandler
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
12KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=3, productName=Unmarked objects (old),
count=8, id=19, version=8022,
count=45, id=1, productName=Unmarked objects,
count=7, id=19, version=8034,
count=8, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=5, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/pplive/pplive.exe
- IMPHASH 7ee8f291c029c1eab354b299ecd0d2d5
- SHA256 2f815f82a771281b342fb850d8c6716724a08a20436f803c19514af7d1dd49a9
- MD5 6ea66987e03d72c2f69d7f773a9bf7de
- SHA1 27149b5c17f3a7044ba90fbad0a8c9f911c6a4a1
- SHA512 5567f726c910a923b1c7b3370779a26371520124ad89044ad18cd468c17250f4849bb3ee7d6462c271d17ffcc770095d71c357631700e1935e02cf94cc1ba32a
- SSDEEP 3072:OhJaqrDZcx/9ov1cccccccccccccccccccc6JBO:AxF
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
55:35:be:77:00:f4:c4:32:16:7f:74:a3:cf:79:70:c8:83:9f:bc:4c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
8804
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
lstrcmpiA
GetCurrentThreadId
GetCurrentThread
GetCommandLineA
GetProcAddress
LoadLibraryA
FreeLibrary
SetUnhandledExceptionFilter
OutputDebugStringA
GetLocalTime
GetCurrentProcess
lstrcatA
lstrcpyA
GetModuleFileNameA
GetLastError
CloseHandle
Module32Next
GetLongPathNameA
GetCurrentProcessId
Module32First
CreateToolhelp32Snapshot
FindFirstFileA
VirtualQuery
GetModuleHandleA
GetStartupInfoA
user32
MessageBoxA
GetDesktopWindow
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
msvcrt
_controlfp
__CxxFrameHandler
strlen
??2@YAPAXI@Z
memset
_snprintf
_except_handler3
fflush
vfprintf
fopen
strncpy
fclose
__p___argv
__p___argc
free
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shlwapi
PathRemoveFileSpecA
PathFindFileNameA
PathAppendA
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
160KB
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=3, id=14, version=7299,
count=11, id=10, version=8047,
count=1, id=11, version=8047,
count=4, id=4, version=8047,
count=2, id=93, version=2067,
count=5, id=93, version=2179,
count=73, id=1, productName=Unmarked objects,
count=5, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
Modules/pplive/ppvod.dll
- IMPHASH 1227fdb0c266773320320ce65cc35980
- SHA256 0eb1f35c25d8abb040ad69768bcf55587d9eaf164915c1d5415db28b468f590d
- MD5 0086760c174d0ccdbe7a5630fa853568
- SHA1 ef9cd9478165bafe0b3c1583057114119ca2d210
- SHA512 5e2380ebe87932a026810bf508693dae8cd7291e440e14d15f890691fa15dd890e1d65a1a4e2e86f9547287df27c39fd7a7a656c60330278b658a5c3bf0e0c8c
- SSDEEP 1536:QqukxHzxWDhe0Z6TZbDjJRGT7dlVrLe9:QqxHzfdzJRGT7dlVr0
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
38:1d:4e:2f:fb:b6:74:90:f2:cc:8a:29:81:ac:68:1a:38:df:d1:35
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
22203
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
LoadLibraryA
TerminateThread
WaitForSingleObject
CloseHandle
FreeLibrary
CreateThread
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
VirtualQuery
Sleep
ReadFile
PeekNamedPipe
GetStdHandle
SetProcessWorkingSetSize
GetCurrentProcess
WideCharToMultiByte
GetProcAddress
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
lstrlenW
OutputDebugStringA
SetUnhandledExceptionFilter
FlushFileBuffers
SetFilePointer
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCPInfo
GetACP
GetOEMCP
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetFileType
user32
RegisterClassA
CharNextA
MessageBoxA
DispatchMessageA
DefWindowProcA
KillTimer
PostQuitMessage
TranslateMessage
LoadIconA
LoadCursorA
PostMessageA
CreateWindowExA
SetTimer
ShowWindow
UpdateWindow
GetMessageA
gdi32
GetStockObject
oleaut32
SysFreeString
ws2_32
gethostbyname
inet_ntoa
htons
inet_addr
shlwapi
PathAppendA
PathRemoveFileSpecA
RD_XXXX
Name
.text
Size
52KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=25, version=9210,
count=24, id=14, version=7299,
count=102, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=10, version=8047,
count=8, id=11, version=8047,
count=2, id=93, version=2067,
count=9, id=93, version=2179,
count=111, id=1, productName=Unmarked objects,
count=13, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/uilib.dll
- IMPHASH 67e94c3f1fffd051da36c298db203f85
- SHA256 0dc9ab9818123a7b71231d67d81834124770d082f529b15c9d2229a0539d8926
- MD5 c958afd38285e2bc6cf57487af195924
- SHA1 8f9d584763ada81023701cde32b8c7ffcabece24
- SHA512 5ca3072f0f05f9e4690374243e4f73c5b81786458e9c30e1f49b31ad9f437c5207d80c2c5b872e66e8fda35a2285114f243d3d1ad048ef75dbb5aed79c54d116
- SSDEEP 6144:Slt/AZFFh6X+QTLweZpoW6Cr4z48UgWTBYk6+TVva:qlAZR5WpovyaWTC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
c5:dd:af:83:4b:29:16:3f:20:ce:c1:72:fc:ed:6d:30:f8:d7:a1:b4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
202333
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord1168
ord1132
ord6467
ord1131
ord2725
ord5500
ord815
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord825
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord823
ord269
msvcrt
fputc
fopen
fseek
ftell
fclose
fread
fprintf
atof
atoi
strcmp
sscanf
_snprintf
_iob
tolower
isspace
wcscmp
_purecall
memset
_mbsnbcpy
_strdup
memmove
fputs
isalpha
isalnum
strtod
strncmp
strchr
memcmp
_ltoa
atol
strncpy
floor
_ftol
_CxxThrowException
fwrite
fflush
getc
printf
exp
log
isprint
realloc
malloc
strstr
free
strlen
strtok
wcslen
strspn
__CxxFrameHandler
memcpy
_strcmpi
exit
getenv
abort
_CIpow
abs
fmod
fabs
sin
cos
sqrt
longjmp
_setjmp3
__CxxLongjmpUnwind
div
calloc
_mbslen
sprintf
_except_handler3
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
strcpy
kernel32
LocalAlloc
LocalFree
GlobalSize
GlobalAlloc
GlobalLock
SizeofResource
LoadResource
LockResource
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
GetShortPathNameA
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrlenA
GetACP
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetSystemTime
GetPrivateProfileStringA
GetLastError
GetModuleFileNameA
GlobalUnlock
GetPrivateProfileIntA
WritePrivateProfileStringA
InitializeCriticalSection
user32
wsprintfA
PostMessageA
SetTimer
RegisterWindowMessageA
CharNextA
GetIconInfo
GetDC
ReleaseDC
SetRect
KillTimer
IsRectEmpty
InvalidateRect
DrawTextA
gdi32
CreateFontIndirectA
GetStockObject
SetTextColor
SetBkMode
StretchDIBits
RectVisible
CreateCompatibleBitmap
CreateBitmap
SetBkColor
StretchBlt
GetClipBox
CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
BitBlt
GetObjectA
SelectObject
RealizePalette
GetDIBits
CreateCompatibleDC
CreateDIBSection
DeleteDC
CreateDIBitmap
ExtCreateRegion
CombineRgn
DeleteObject
advapi32
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
ole32
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
oleaut32
RegisterTypeLi
LoadTypeLi
SysAllocString
SysFreeString
msvcp60
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDH@Z
?fail@ios_base@std@@QBE_NXZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
shlwapi
PathRemoveFileSpecA
PathAppendA
DllCanUnloadNow
DllGetClassObject
DllGetInstance
DllRegisterServer
DllUnregisterServer
Name
.text
Size
316KB
Virtual Size
314KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=41, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=2, id=25, version=9210,
count=2, id=12, version=7291,
count=4, id=95, version=2179,
count=2, id=93, version=2067,
count=10, id=93, version=2179,
count=3, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=3, id=4, version=9782,
count=283, id=1, productName=Unmarked objects,
count=33, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/pplive/vod.dll
- IMPHASH ebc8400330088a91b2e44de0a9975098
- SHA256 6ad38a321b9b3d7bbdee25c04e6b99aae1fd982897edd97f63e201b579ce3e0b
- MD5 dec7c6b06a6d73f9389701047586de97
- SHA1 85e2d4b8b7d7c39cc7534a85143fbc99cac8c547
- SHA512 193173b29fd47dbd484c78416fa46d77b833ff1bd40c55d393515a086730d43fd8184095be7f232ee6f514a3d4e0c4f5d7d6d288773c9b08aabe2c6a15458fea
- SSDEEP 24576:1GbRm58Guo94P9C/qfUDAgUKdp14sT5taWwT7:saCgf14sNtal7
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4d:6a:a8:aa:29:94:ee:a6:47:2b:b4:f2:e9:6c:6c:4a:b6:65:2d:92
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=Synacast Corp.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=technology department,O=Synacast Corp.,L=shanghai,ST=shanghai,C=CN
Serial Number
24:d5:13:d1:17:51:9f:61:79:0d:16:19:1e:61:be:e1
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 22, 2006 - Sep 24, 2007
Minor OS version
0
Major OS version
4
Entry point
420083
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
rpcrt4
UuidFromStringA
RpcStringFreeA
UuidToStringA
kernel32
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GlobalDeleteAtom
lstrcmpA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GlobalAddAtomA
GetModuleFileNameW
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
SetErrorMode
GlobalGetAtomNameA
GlobalFlags
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetThreadLocale
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
ExitThread
CreateThread
GetCommandLineA
GetProcessHeap
RtlUnwind
RaiseException
HeapSize
GetACP
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
SetHandleCount
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetEnvironmentVariableA
ReleaseMutex
CreateMutexA
SetEndOfFile
FlushFileBuffers
ReadFile
InterlockedCompareExchange
TlsSetValue
GetSystemTimeAsFileTime
SetLastError
GetQueuedCompletionStatus
CreateIoCompletionPort
Sleep
TlsGetValue
InterlockedDecrement
InterlockedIncrement
PostQueuedCompletionStatus
InterlockedExchangeAdd
DeleteFileA
FindNextFileA
FindClose
GetFileAttributesA
CreateDirectoryA
FindFirstFileA
SetCurrentDirectoryA
ReleaseSemaphore
CreateSemaphoreA
WaitForMultipleObjects
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
GetTickCount
GetVersion
CompareStringA
InterlockedExchange
CompareStringW
lstrlenA
TlsFree
TlsAlloc
SetUnhandledExceptionFilter
WriteFile
GetCurrentProcess
GetCurrentThread
GetModuleHandleA
GetLocalTime
SetFilePointer
WaitForSingleObject
ResetEvent
SetEvent
GetLastError
CreateEventA
LocalFree
FormatMessageA
GetVersionExA
WideCharToMultiByte
MultiByteToWideChar
VirtualQuery
GetWindowsDirectoryA
GetDiskFreeSpaceExA
GetDriveTypeA
GetLogicalDriveStringsA
CloseHandle
DeviceIoControl
CreateFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
OutputDebugStringA
GetModuleFileNameA
ExitProcess
CreateFileW
user32
RegisterWindowMessageA
LoadIconA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
ShowWindow
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
PostMessageA
GetSystemMetrics
GetWindowTextA
LoadCursorA
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
UnhookWindowsHookEx
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
DestroyMenu
CopyRect
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
PostQuitMessage
CheckMenuItem
EnableMenuItem
ModifyMenuA
SendMessageA
GetParent
GetFocus
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
IsWindowEnabled
EnableWindow
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
CreateWindowExA
gdi32
ScaleWindowExtEx
DeleteDC
GetStockObject
SetWindowExtEx
ScaleViewportExtEx
ExtTextOutA
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
CreateBitmap
GetDeviceCaps
TextOutA
RectVisible
PtVisible
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
Escape
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegCloseKey
RegQueryValueExA
shell32
SHFileOperationA
shlwapi
PathRemoveFileSpecA
PathFindFileNameA
PathFindExtensionA
oleaut32
VariantClear
VariantChangeType
VariantInit
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
ws2_32
connect
accept
__WSAFDIsSet
WSASendTo
WSARecv
WSAResetEvent
WSARecvFrom
WSAIoctl
setsockopt
socket
WSASend
getsockopt
ioctlsocket
getsockname
select
WSAStringToAddressA
WSAGetOverlappedResult
inet_addr
WSAStartup
WSACleanup
inet_ntoa
gethostbyname
WSAGetLastError
htons
getservbyname
htonl
ntohs
getservbyport
gethostbyaddr
WSASetLastError
ntohl
closesocket
send
WSASocketA
bind
listen
WSAAccept
recv
WSACreateEvent
WSASetEvent
imagehlp
SymGetSymFromAddr
SymFunctionTableAccess
SymGetModuleBase
StackWalk
iphlpapi
GetIpAddrTable
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U_FileInfo@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@U_FileInfo@@V?$allocator@U_FileInfo@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@VFSConfigSerialize@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U_FileInfo@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@U_FileInfo@@V?$allocator@U_FileInfo@@@std@@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@VFSConfigSerialize@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z
GetVoDObj
Name
.text
Size
636KB
Virtual Size
634KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
56KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=126, version=50327,
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=198, id=109, productName=VS2005 build 50727, version=50727,
count=169, id=110, productName=VS2005 build 50727, version=50727,
count=31, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=550, id=1, productName=Unmarked objects,
count=59, id=114, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/sopcast/live/IPCamD.ocx
- IMPHASH 2f2318259ea15606512e90161e270683
- SHA256 617e22de19096c0d7db195d2747b4278b8140f5224e5da1f2510be4294a98d68
- MD5 9d85377bc3307ca875edcadd4c823e12
- SHA1 b5bd995719fc68f18a6e7df7cbfa2ee05a52d2e4
- SHA512 208d653a0ccb966255c862d90c6004e4e9d44e92d07e02bf3aa5ca915f503f50f980e1ce449038636446ed0aabd61219622e6b9b9a5c9e57c454d36c49ccc6c4
- SSDEEP 6144:vp3dOzhDOngEv+SjAMv1LeBuGMkalycd88GCBo5eFor3Rttez7ycYWeiVVQiWt:vptOzhCngEvDpv1LeBu77Borr3RtEFY9
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
272297
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
ws2_32
connect
send
recv
getsockname
gethostname
gethostbyname
WSAEventSelect
htons
ntohl
recvfrom
socket
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
ioctlsocket
WSARecvFrom
WSASendTo
WSASetEvent
WSACloseEvent
WSASocketA
setsockopt
bind
WSAJoinLeaf
WSACreateEvent
ntohs
closesocket
inet_addr
WSAStartup
winmm
waveInUnprepareHeader
waveInPrepareHeader
waveInAddBuffer
waveInStop
waveInReset
waveInClose
waveInOpen
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetVolume
waveOutReset
waveOutClose
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutOpen
timeGetTime
waveInStart
waveInGetNumDevs
waveInGetDevCapsA
msvfw32
ICCompressorFree
ICSeqCompressFrameStart
ICDecompress
ICCompress
ICOpen
ICSendMessage
ICClose
ICSeqCompressFrameEnd
ddraw
DirectDrawCreateEx
mfc42
ord5265
ord4998
ord4710
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord324
ord641
ord4234
ord755
ord5787
ord5794
ord470
ord5280
ord3021
ord3573
ord2379
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3401
ord4622
ord4424
ord3670
ord540
ord815
ord2724
ord3952
ord561
ord860
ord1199
ord6354
ord1216
ord6467
ord1227
ord1168
ord1877
ord4249
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord2818
ord562
ord816
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord5785
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord4654
ord4643
ord4354
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord2954
ord6055
ord1776
ord2384
ord6370
ord5290
ord2983
ord3148
ord3260
ord4466
ord3269
ord2986
ord3080
ord4081
ord4624
ord5825
ord663
ord773
ord723
ord3946
ord348
ord501
ord423
ord3584
ord543
ord803
ord2541
ord4949
ord1200
ord4459
ord2795
ord1131
ord2393
ord537
ord268
ord1567
ord1083
ord1138
ord5600
ord4299
ord5033
ord4502
ord6779
ord2764
ord4202
ord535
ord6030
ord858
ord924
ord922
ord4129
ord5683
ord1601
ord2820
ord2841
ord5450
ord6394
ord2107
ord5440
ord6383
ord2864
ord2086
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord4376
ord4853
ord4713
ord6371
ord5286
ord4438
ord3279
ord4625
ord449
ord746
ord2278
ord1105
ord940
ord2763
ord4277
ord5353
ord5207
ord389
ord3181
ord4058
ord2781
ord668
ord2770
ord356
ord941
ord2614
ord1979
ord6385
ord2652
ord1669
ord1175
ord3811
ord5356
ord5808
ord1075
ord5204
ord3229
ord1228
ord6648
ord3742
ord818
ord567
ord4275
ord613
ord289
ord6172
ord5875
ord926
ord2405
ord551
ord3758
ord3408
ord3227
ord3054
ord3425
ord3880
ord5216
ord3337
ord5789
ord3619
ord6215
ord5981
ord6453
ord1146
ord1948
ord5303
ord2726
ord4699
ord5715
ord817
ord2256
ord565
ord4226
ord785
ord518
ord1640
ord1641
ord3626
ord3571
ord3663
ord323
ord640
ord5791
ord6157
ord5442
ord2414
ord823
ord825
ord354
ord5186
ord665
ord800
ord6571
ord5460
ord1871
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord1243
ord342
ord1182
ord1577
ord1575
ord1176
ord1116
ord1132
ord4594
ord5621
msvcrt
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
free
malloc
fflush
fseek
fwrite
fread
getenv
exit
cos
sin
memcmp
strcpy
atol
longjmp
__CxxLongjmpUnwind
_setjmp3
fopen
sprintf
fclose
_chdir
atoi
sscanf
strlen
_ftol
memset
memmove
_mbscmp
printf
abs
pow
memcpy
__CxxFrameHandler
_rmdir
_mkdir
kernel32
lstrcpyA
CloseHandle
Sleep
ResetEvent
SetEvent
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalLock
LocalUnlock
LocalFree
GlobalUnlock
GetCurrentThreadId
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
FreeLibrary
LoadLibraryA
GlobalFree
GlobalLock
GetPrivateProfileIntA
GetModuleFileNameA
SetFilePointer
GetFileSize
CreateFileA
ReadFile
WriteFile
FormatMessageA
GetLastError
CreateEventA
TerminateThread
GetExitCodeThread
GetTickCount
DeleteFileA
SetThreadPriority
CopyFileA
CreateThread
GetVersionExA
GetProcAddress
GetModuleHandleA
GlobalAlloc
user32
PostThreadMessageA
ChangeDisplaySettingsA
InvalidateRect
RedrawWindow
SetTimer
KillTimer
GetDesktopWindow
SetRect
EqualRect
MessageBoxA
SendMessageA
IsWindow
DispatchMessageA
TranslateMessage
PeekMessageA
GetSystemMetrics
ReleaseDC
GetDC
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
ClientToScreen
CopyRect
GetParent
PostQuitMessage
GetClientRect
PostMessageA
wsprintfA
EnableWindow
gdi32
GetBitmapDimensionEx
CreateCompatibleBitmap
CreatePalette
GetPaletteEntries
CreateBitmap
CreateCompatibleDC
RealizePalette
BitBlt
StretchBlt
Rectangle
SetDIBits
GetSystemPaletteEntries
GetDIBits
StretchDIBits
GetNearestPaletteIndex
PatBlt
CreateFontA
SelectObject
CreateSolidBrush
DeleteObject
SetGraphicsMode
SetWorldTransform
SetStretchBltMode
GetClipBox
GetDCOrgEx
SetBitmapDimensionEx
GetObjectA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
ole32
CoInitialize
CoUninitialize
oleaut32
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
272KB
Virtual Size
269KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=12, version=7291,
count=3, id=19, version=8022,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=4, version=9782,
count=20, id=10, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=45, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=29, version=9178,
count=2, id=25, version=9210,
count=564, id=1, productName=Unmarked objects,
count=17, id=19, version=8034,
count=29, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/sopcast/live/adv/SopAdver.exe
- IMPHASH e12536e3a46a10c8c59fa9222791aaaf
- SHA256 ed8792100011a52414e775d9b9b6b58e41fd08424ca31b26e1a5b7d7e8122621
- MD5 b4eb760a06186e2eddfdeb153c4e3026
- SHA1 9c346229e6ea89360547781d446479742aced8b6
- SHA512 2c65f9f0eb5423e7e013cda3612f98031da2e2dbb7bd0f124da7284e1d1acb97de007e01fd669c1f81dc640b8fadb6700a84929dcfc95685eb695a7224c5aa2b
- SSDEEP 12288:4zvy2ThI0km5p59PXeJ18t3ACHouRcgicaCpyOM+P2Skv42wjH3/HaT7:4zvy2ThI0km5p59PXeJIoscgicaCnP2f
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=www.sopcast.com,OU=www.sopcast.com,O=www.sopcast.com,L=Shanghai,ST=Shanghai,C=CN
Serial Number
aa:62:6d:ce:85:20:a4:b7:bc:af:e5:6c:97:e0:8c:51
Issuer
CN=WoTrust Code Signing Authority,O=Wotone Communications\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jan 8, 2007 - Jan 8, 2008
Subject
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Serial Number
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Jul 9, 1999 - Jul 9, 2019
Subject
CN=WoTrust Code Signing Authority,O=Wotone Communications\, Inc.,C=US
Serial Number
05:c5:91:db:3a:74:ae:ee:0c:4c:77:e3:f7:79:9c:88
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Aug 30, 2006 - Jul 9, 2019
Minor OS version
0
Major OS version
4
Entry point
367384
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Documents and Settings\Van\Application Data\SopCast\adv\SopAdver.pdb
winmm
timeGetTime
kernel32
InterlockedDecrement
LocalAlloc
GlobalReAlloc
GlobalHandle
LocalReAlloc
TlsFree
lstrcatW
SetErrorMode
WritePrivateProfileStringW
GlobalAddAtomW
GlobalFlags
GetModuleHandleA
GlobalFindAtomW
GetCurrentProcess
ExitProcess
RtlUnwind
HeapFree
ExitThread
CreateThread
GetTimeFormatA
GetDateFormatA
HeapAlloc
TerminateProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
GetCurrentThread
VirtualQuery
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
UnhandledExceptionFilter
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetOEMCP
GetCPInfo
SetStdHandle
GetStringTypeA
GetStringTypeW
GetDriveTypeA
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcmpW
GlobalDeleteAtom
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
SetLastError
GlobalFree
lstrcpyW
lstrlenW
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
CreateFileA
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemTimeAsFileTime
GetSystemTime
GetFullPathNameW
GetFullPathNameA
UnlockFile
LockFileEx
LockFile
GetFileSize
SetEndOfFile
FlushFileBuffers
GetTempPathW
GetTempPathA
GetFileAttributesA
DeleteFileA
GetVersionExA
RemoveDirectoryW
GetModuleFileNameW
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
FreeLibrary
WriteFile
SetFileTime
GetCurrentDirectoryW
GetFileAttributesW
WideCharToMultiByte
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CreateFileW
SetFilePointer
GetCommandLineW
GetModuleHandleW
MultiByteToWideChar
CreateEventW
ResetEvent
InterlockedIncrement
GetCurrentThreadId
SetEvent
WaitForMultipleObjects
TerminateThread
GetLastError
EnterCriticalSection
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
CloseHandle
CreateMutexW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
DeleteFileW
FindFirstFileW
FindClose
CreateDirectoryW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetSystemInfo
user32
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconW
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoW
RegisterClassW
DefWindowProcW
CallWindowProcW
SystemParametersInfoA
IsIconic
CopyRect
SetWindowPos
SetWindowLongW
GetDlgItem
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
SetWindowTextW
GetClassNameW
SetMenuItemBitmaps
GetFocus
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
DestroyMenu
ShowWindow
GetWindowTextW
SendMessageW
MessageBoxW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
UnhookWindowsHookEx
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
PostMessageW
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
UnregisterClassW
PtInRect
GetWindowPlacement
gdi32
DeleteDC
GetStockObject
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
GetDeviceCaps
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
ExtTextOutW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
comctl32
ord17
shlwapi
PathFindExtensionW
PathFindFileNameW
oleaut32
VariantInit
VariantChangeType
VariantClear
wininet
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
HttpQueryInfoW
InternetReadFile
ws2_32
getservbyname
htonl
gethostbyaddr
socket
inet_addr
connect
getservbyport
ntohs
gethostbyname
WSACleanup
getsockname
inet_ntoa
select
htons
WSAStartup
WSASocketW
bind
listen
WSAAccept
WSACreateEvent
WSAGetLastError
recv
closesocket
send
WSACloseEvent
WSASend
WSARecv
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSAEventSelect
Name
.text
Size
452KB
Virtual Size
450KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
84KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
944B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=105, version=2067,
count=7, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=30, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=5, id=39, version=8491,
count=1, id=18, version=8444,
count=21, id=93, version=2179,
count=523, id=1, productName=Unmarked objects,
count=223, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=88, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/sopcast/live/adv/default/home.html
- SHA256 ef28f7308424a1c333234df2d933b4c3bd346896100d388a7bad95f4ff4f430d
- MD5 ac4c6265d1a5ef0830957f4b9b07ec6c
- SHA1 285423c32ab7d006085c16f858d980770fdfdeaa
- SHA512 11c6e1b63e0621ff769f4d740b1437bd8a3169dbb6f358b30bd07affd34e2d59c5807718c2393360339741532cf04d8bd9f9f7d5fac176ac58e89b1fa38a0411
- MD5 SHA1 SHA512
Modules/sopcast/live/adv/default/index.html
- SHA256 f7204f096d90559cee9f48aac39eb8779ee1f62a0a58c0d3a9b4ce7c55cad3e3
- MD5 9d5381c086b86f540ace8dcffcc5c144
- SHA1 e7ac466f8922251b6884b803b3a9c84e7ca2c49d
- SHA512 65ea79bf30afd76cdb7c99df40d7a3ec2a23219ead98c4fbb59e3ebb83b02c64b005046c358da6465181af25c89b2f0ea91a712fe83deced030c8d10828d99d6
- MD5 SHA1 SHA512
Modules/sopcast/live/adv/default/main.htm
- SHA256 b80b11ccdf56cacdb2bd24fc23bca6ab8749459fb7193d857ba3d7a9fdf4ce08
- MD5 f39e0f9f0a906876fdd744d344df972e
- SHA1 8ce870ea11b6ddd6d3fda6838ee77d126adf9fc7
- SHA512 beff5b1a560774ec33793fb89c31f307eb65d05faaa749b8a071852cb07a84aa273c84b944beddc8b859bddcc25a6c907ba4b1278685a0f7fb36b411097d6702
- MD5 SHA1 SHA512
Modules/sopcast/live/adv/default/sopcast.jpg
- SHA256 9396753ec20abfb27f0ae6aac26bb58f49ca3fd38cf85d415a6868dee7ade5fc
- MD5 2bf4481cce1d06f660f4b5be37ec28f3
- SHA1 a9c78e9c663526a37820d7b4f4e6859533eb8ee2
- SHA512 4f5fa51e0c030ce18cfec52e69c402211ebdf4610ce04c1aee2147e42b2bbaa2e0a348be34df4e52ee7a1f28220f389a09cb47341d740d7fb6ed4b3e0cae4cf7
- SSDEEP 768:G5V/fdV/fRrbllZ8DfE6kuZxBh7tqDpkDHzW:ibRPN6f9kQ7qz
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/adv/sopadver.dat
- SHA256 6f5d393ad9b7de5d1c3f27d71aa570b7f1d57e6f5a51528ae97e44c1fb6dcc56
- MD5 ad39a9a5b6fce0ed96084a7646fef975
- SHA1 5eed0ba0755d1ae9963410a938c3e8638ed3e4c6
- SHA512 bc2f8d892624ab6fbe456d9d62edf93979d550dadb277689e57842a95a7485a6bd28331683abf577c0ebd8d27d537e528c7c57de4fbda36cbd0a2e3a8ae8df1e
- SSDEEP 96:o8UUDwd+9d+NVM9pva1RH6P3XtTs2S5Q2tOSAz2CwLrX:4c+M9pvaEXtTs/OQTX
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/config.xml
- SHA256 bb501e38c177cef3253464bc91c46971f618ff2fb9ddbd587ee139c833f83afe
- MD5 94b3f767e5515117d1ed9cfabbffb60e
- SHA1 a5c8c81ad25f13a2f65a59210f8682d44b1f47fa
- SHA512 cd34e0f4879b73ad1f511a365f289ba090cd39bb131c12b7197aff48eff41c07ab43c1f385bb4f256335777b0cfa42504298ab6c8ebc5f3a7bf3ce912a9a1c60
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/DURATION_SLIDER_HOVER.bmp
- SHA256 c0ef69c18ee948a9c9d55b6ad1495ec7b13f6401351d542d2528d6c27a0639f2
- MD5 388fdb98345b542ed39ad73a700345cd
- SHA1 335958426df1d521eb4786d513af11b88d61f793
- SHA512 22a6cb01d282f1f9510f1808a35a9b4c091ecde6d8f7c3043548de630744d1310a0e8aadc462b5fe26b1bb56a370713f0b32dab7271596d11c5c49e403b67de8
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/DURATION_SLIDER_NORMAL.bmp
- SHA256 8c1532fe644b1485441c5ee2e7a974646d28a739fa9153472b7a9cf3651a3570
- MD5 bdabfcbfe55bbf9aa7ac6dc873040961
- SHA1 e02087af5028a2706824713f47ed92a3e76f77c7
- SHA512 72e66f74234a0238d7f0577853924ebe3d3b589d244e65c8d804eaac04169657fba3b2e2d49ad8391703dd3735cf65450aa76f2093239481d58cdefbc00030aa
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/DURATION_SLIDER_PRESSED.bmp
- SHA256 700b88c98125172ecd3b56fedc2f993c09f8967d93bfa006e6302c6114798884
- MD5 1a2b8c3f0cf8386c6e64a110d82c481b
- SHA1 cb5b8babc29e455e0c47dd51c86bf4ae25dc1b80
- SHA512 ee34cbb50e4fa1f91a8f7826560a012ba74182c96a1de16b013016cda09d036e5dad8ed55befc7cc4b7eee7514dbab8e461d7692ab87a5512149a314acbe434e
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/EXPLAYER_DISABLED.bmp
- SHA256 ab25bfacfb0f91662eb6d4afd6148051d558750f6dbe4e6e2bc04f9d47d095e4
- MD5 54cd789b1b4105ac9221170d1789252b
- SHA1 c2e1a8b8a3011e1d06d640e2ee9827ebc1847fac
- SHA512 9dce6b2a3569205274e8add5d9d2f3ce7bf91d5e42c9b46c8aceff616cdd056274442dff9d0d9b1efd916b5c2386bf9eca8078d6c6f8de95db93618e92f3869c
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/EXPLAYER_HOVER.bmp
- SHA256 dadc3c55f8761fc11935a62a7c8c6740035a003f4edf1f4e3d6e242ed4d116dd
- MD5 371f98e6b7de963f06c53c9fb60e78fc
- SHA1 b0406cd74bfa6d7d70c3047f6e17b65dc0c595a6
- SHA512 3aa7c606f008d6cc594fb78e1bb7f6a51eab2dd9c393c7013c6e4a84c2c580ccb64de17a0c4d8a35d3e36b2ccb2edb4ccd4ec9f263483808ecbadbd012e0c2b5
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/EXPLAYER_NORMAL.bmp
- SHA256 ee6a7d9dff996968f9aa57da483e18ba0b16077fc9918f0149ea6aaa88f0858b
- MD5 d660d68878ba2070a2e8b68f7072e15e
- SHA1 4e06cede44231c716ee5e2373fd3aa0a015c74be
- SHA512 e2562ace310696e55e8cd1ddeb34c0c7399998285aac7a61b69cd16a890c5b1faf0af54eeceaf9efdf86666bee01678b1c0658f917116c6ae47cd0399dcd1537
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/EXPLAYER_PRESSED.bmp
- SHA256 a1ec9d7832c2f065b0ccfe75cab57202bacbc06879b18e8b064e8ea642df80e7
- MD5 529f72cf54fe3266ce9d50170ed6951e
- SHA1 3ab4a49953fbb8c0c0c4107824c180f69046fc47
- SHA512 a3188f0098ba26c20762995db3081361b590fcb6ea317037efe9ba6a297325966553ab82c0e25f7a122ba774711a3f6947b23138543c595ca3532b26f24cbc58
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/FULLSCREEN_DISABLED.bmp
- SHA256 1f6a0bc9d74a9081a4351b60a22069b2c78258c30c199c3ac4f8abf3ee9ec941
- MD5 11d03bddaa7d4c8280547a91036a835c
- SHA1 c921e968dcef0c5ca6e0e476b6d298e163b1df5d
- SHA512 c639a92ea3047e8fd83da16fd16bd66511f0cd82b90d6921228171604a7a0898a5d60603f46cfee275309a1cad36aad8bcdae6a5655faecefbf1f65330be1883
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/FULLSCREEN_HOVER.bmp
- SHA256 9edd53d3896ffbfd24ce8e6bb3d765543cf73065f6b70e73311e283976db6982
- MD5 07b26d3daee0ce359b1fe9c06770034f
- SHA1 63ff6830f882c05eee457b403b87bf43216c51bf
- SHA512 814a0a329f5dbaedc820dbc808bfde6ba33219f285746bf1238e4fa1588a7cf40f426615ef5e277b637b1e15e7a976ad6e9a989735a12c1d227e20d08ac9cd8d
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/FULLSCREEN_NORMAL.bmp
- SHA256 fb744ae8a79a8d06f7a5fcc2e033fa96617780a0cd5a1ca829db650ad1b1bb88
- MD5 436bb0be8eb676bb860219ae42da169b
- SHA1 74cdd6f91ef9ec60c47ef3a1a9e31ef87348b8f6
- SHA512 0da648d6f6af34553ea590d5fcf0ce1c100b563b646c139fe882d3c31c078daa1692d2a7df1e74af18b992332330a09b47b99d7ea98ee6a47cb08a8ba8e497a7
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/FULLSCREEN_PRESSED.bmp
- SHA256 70d3942b0e9f306855793a7ed5e8244f628c4cd85c9bd8f5a0b4b9758bb651a2
- MD5 5cb4026e8373219d973f11c35451065e
- SHA1 a535aa706f716a2c5be65294156cc3c2f4c590da
- SHA512 f5a4546681e8dfe1718ba6677aede19bdb08bd906c8438c1ca908a94a260f51aa52961aef770ebc6a20410c8717bc400cd7fedd1637922913f7bec35708b81db
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/MAIN_DIALOG.bmp
- SHA256 64ccd66e5139b4ade92ee8563ec4413e7219c1cb9903afdf3403b1229363235e
- MD5 38764fdbdb789104036eaee88810dbfd
- SHA1 211dfedaab8446f9ae4bf6c5d8808e8216d5ee67
- SHA512 980f3f324fbc4631821eb3793958e4071dce0cbd72da82f0a8b96a5a5b6243a8d5fe3ade0f4d2c1a73bfb29436e96723d2fa3b75b693636a40574ab1ab0e49e0
- SSDEEP 768:Ricccccczccccccccccccccccccccccccccccccccccccccccccccccccccccccy:Jg0zKO
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/skin/MUTE_HOVER.bmp
- SHA256 905858061f98c9ba62f231c0a85dff68497fbb64fcf3876a3fd79ed172dc1c19
- MD5 787340248d4c3e6009ea404d151326af
- SHA1 35c34bd5b67033e79604a4100236d467a77ba76b
- SHA512 c2a99bc562db802e2c30fa669fc099a412b5ced91597444fdedbb4b4cd78c7144c735cd0a591539fab0f9efa3c3c9926204325f3145f397034103cdc457f55a5
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/MUTE_NORMAL.bmp
- SHA256 3e4cd2429df15ed1c5b928b19d15e6e0fc3450c8887ce874e6f7b55da4d67e93
- MD5 3395030cb99467aeef5cac0d2483a92d
- SHA1 ba36a427a226f5bed0598994b273367bc7fddc85
- SHA512 7a515dcfe196e3f24f79405bdc4d3fd01637c7bec58a07363b360bae0430e9f384033acea1b57239d51a053436076346db042a91db6bfd86ea098d89dbdffb18
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/MUTE_PRESSED.bmp
- SHA256 3e3f29482371ae4847ee91aeed9135d3051278a2bb97acba07084233afa3b4d2
- MD5 fe7f9835226e1f66d8945b1696678656
- SHA1 53c886b1e1c11f7d583ed7df3eb8f537e9263374
- SHA512 ec680459c9d2b00c6c5767c38bc5772346dc83a8828ced6fadfdb4184251da4938d6fef82aafebfa9a53a8bf995f548082b7b03a43cdd39a51b3e6e68a25fd7f
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PAUSE_HOVER.bmp
- SHA256 cd857849d79efb4410b00dff8f6177ed0b6983548db07072d3ebc7a49da31f4a
- MD5 46863f6f7dff4c4125d8f3f8a8f00d6b
- SHA1 bd563c37badc2c7164af38aecbf5fd82b6fe11ab
- SHA512 0b09ce27fb451ef37095f37db8d1bd25c0e0b86728aee3112db7aca3ac8e8dbfd786acd99b06b3119f842747f6b0a3d26d0284cf5bd03c2334051695fae3d30a
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PAUSE_NORMAL.bmp
- SHA256 49a79f2b7f566709277416ae4d00c2d42167ff6b03a3291d46598ad79ad8d6dc
- MD5 e79f8438f27a08ca19fe42023aa2524b
- SHA1 cfc69e16b0d4642f51de0dc9e52667db144987b8
- SHA512 809dece0cb888d6b90de80c7803477a0537308c595260933cf75940b880be2691277069269bc6842fd3fb0847c3be3ea07c63516a9320bdddd105cd36cd1c53b
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PAUSE_PRESSED.bmp
- SHA256 b9282b858654a7d81994604f55f6861c4bed0f1098bfb0cc65e469fd9038fed5
- MD5 2a38f2d13cfd6ebd3d17b2c66a25d309
- SHA1 19c2ecd5463d1edaaa6548defc9e28ce75871b02
- SHA512 e6677a51f9873401227ba09c936689eccb0272b680081d37db36ed207810dd085240ff3f1abc95d39d1dbf91faf88cb8a13f5a3424e92dcac738a516b329777a
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PLAY_HOVER.bmp
- SHA256 d57c4311d6f6ba380927dd9d7e70f6b320bf3c230ff79a391be7143ce0c51903
- MD5 323d9ff80f5ec91a3a9a17041a05fdbc
- SHA1 f7faff1cd4eb3ecd47fed9c281ae1907f085b02f
- SHA512 708a2d6b31db1414a7b7f1aff0c7bb1cd381071d34ddb079de15ef739a716cfb19cb5125827e124371478130d5a098a583b28e11bac53d86a0e6310be739bfe0
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PLAY_NORMAL.bmp
- SHA256 5b5fb0aab40036261ccf8a4b2003fc23c70254a3f5bb9a1175b7e7e5d61d842a
- MD5 0343898b3076d1295e994b0a67127c05
- SHA1 b3df845e4637cc447664f08445e1d8bcd1333892
- SHA512 e3c22917348deec13935741a6d7445e49e136cc471fd0960827f707096ab56e24713ca6cc7d5851d790b48f3bc3326e4b270610fb2821d2a7b672b190bbefc22
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/PLAY_PRESSED.bmp
- SHA256 98188a12a82991b28989fb7a85bddb0da89e755b3f6733e7e996400ede3ca463
- MD5 50c90ebe9acafd6d90aa5c414f08b0fa
- SHA1 fc4cd19c0c01e856a29a75f0333a8cd6ea8690a3
- SHA512 8ab9079468fd8ca93e84817e036e8aeb7ca003c0d822a16fd4ac9c56e4435d0292021b51a0bd91987f461a4cc622b339147da8e0ec7f029b8034bd4cde32fbdb
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/SOPLOGO_HOVER.bmp
- SHA256 2fe29c3afb2d0c65d84685464dc5212390604c621f4fa4fcc7afc5256ff2743f
- MD5 664ca0fdee0423a2ebc5bdbe3ea14e4f
- SHA1 d270592e321b69771665d8a9dc18f9f9e3cbdf29
- SHA512 bb6d9a514079868acb74855cecb39659ae55ec0e3cfca202b0cc90d47fadaf30f4e29d9d01d87972fa358fe117914f7688b9702cf321850c631a605c15ea3010
- SSDEEP 96:3vSy34c0/ccckMzeYHAwZRBZkFrU1BcDKxo51M1JdNifwdgbmNOahfGe51/6Ejfu:3qyIcAcccTrANrA6WxojM70S+mNOadG5
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/skin/SOPLOGO_NORMAL.bmp
- SHA256 49090bf9b55c047fc6fd7468b4e30389166416f2905bbcd2585923b8a6fd262b
- MD5 f6745d4167e510de292ce67f4b063687
- SHA1 fdcb895df771c8fcea13e6892dc14a155d4f265b
- SHA512 801a5355db3dc8e0ac4cfb3b779fa780f0753533afa3cef15278edcdc8b7a82c19ed9fb8e5b24b6b9276ddb0b90df32ac2c418b95052a0be385173a85865c414
- SSDEEP 96:SdyAeecVxcccc3aMN8YHcC91arUDwm1xC8cK1gNvfKL7wbmN03eXFSz2OT:SSecVxcccc37lR1armwm1x37QO7OmCSI
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/skin/SOPLOGO_PRESSED.bmp
- SHA256 49090bf9b55c047fc6fd7468b4e30389166416f2905bbcd2585923b8a6fd262b
- MD5 f6745d4167e510de292ce67f4b063687
- SHA1 fdcb895df771c8fcea13e6892dc14a155d4f265b
- SHA512 801a5355db3dc8e0ac4cfb3b779fa780f0753533afa3cef15278edcdc8b7a82c19ed9fb8e5b24b6b9276ddb0b90df32ac2c418b95052a0be385173a85865c414
- SSDEEP 96:SdyAeecVxcccc3aMN8YHcC91arUDwm1xC8cK1gNvfKL7wbmN03eXFSz2OT:SSecVxcccc37lR1armwm1x37QO7OmCSI
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/skin/SOPSTATUS_NORMAL.bmp
- SHA256 4e3ac116c074020af25e4e1d9f4a7422066174447c9087dfcb5419ba683865d9
- MD5 7d6369163dc87e12df8fe1bc15ee6fc0
- SHA1 ebe1e12e5c950f8099138d123b717a6cfda79f0d
- SHA512 94ab6856f298e5a024dd972ebec4b58cfa2405821ab06573656f742a402585345a6a683969591e758824849ef5e494a3ccbc9fbe871c997b0fc12a10493d7c72
- SSDEEP 192:vpgvd8mHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHHa:vpOd8R
- MD5 SHA1 SHA512 SSDEEP
Modules/sopcast/live/skin/STOP_DISABLED.bmp
- SHA256 0ba9ac8f8482eff5848a077c80b850f4e58e7172185c3038c652c9f3f413acf9
- MD5 39337f2f983fc1cd021942f37e19b523
- SHA1 7bc02b7732dbcb1a1ee24ece092ca269596d5819
- SHA512 1c68ab8c91828f57ea0b2ec21ef142ba94d90d3d9047960cecd95e2aca9b5897decbdcf936551f37f1736db0af558263dbb05699e8e33790b81ffa1661d7b242
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/STOP_HOVER.bmp
- SHA256 37e97ac0d1320e09d575aeb087ac329c6fdeff130d1e8c05c0438b1dac989f10
- MD5 20f9bb165c3f3d60fc53b1595f86ce14
- SHA1 561caba867c675e8145a90fa322c406cf01603d6
- SHA512 adea4b397210dc26bf98efa502e89af861a001d9e1425d5fb3cc2b34ad560f765fbb05fd9c2e91eb1e9bbeaac7152ebe52ab7338b5b30021e933a6395f7db81d
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/STOP_NORMAL.bmp
- SHA256 2615068d0dd0d1c807b5c7fb1fece4611d964aa2afa795f0028347c4c9178319
- MD5 73516979d0e11729558fa613344b9db3
- SHA1 5213c09c81335d0845f076c238cdd4890848d8dd
- SHA512 4e7e6332d3f74c3cc702a8a5dbf63e94012aca111b785f41ff2453de13b1c3ca890aa6ef0979981ff3cb90175658cbbccba32d49721cef4895fcd4241cad3b60
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/STOP_PRESSED.bmp
- SHA256 d841701bbc85afa9480deae782939d06396e4113a3a213631ad1938555c981c0
- MD5 d4a7ffd7fa1179854792f1f37662a8ee
- SHA1 cf769a04138ee0f936176ac245e76ce5b14d0a68
- SHA512 4bed933d8bf7db4f2fcc82b06129c26d77ee4ee49061aca775c177ebb47f95331d3b506fde6eb3f6092ff3808d11fa237de917e793b0c3bbae93c92c6d10bc9d
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/UNMUTE_HOVER.bmp
- SHA256 9ff32c94609e0f25317017bf5d260102beb8b11f3629b1edd02b265a68af33a6
- MD5 382ba697102db6a9373929f5b26f8c4d
- SHA1 6acac2b6997c8d02be31b7384061b1c6713587bf
- SHA512 05e2fed611c522d106ca5bdc39ea1f539187d13b10b31b6bbcfdbd0a09481480a04a6656904ce6f93027476ef621a52433950e9b9dc5c24f79eaa673d0cac79a
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/UNMUTE_NORMAL.bmp
- SHA256 2a32d72c6036763da322a31735ab4f1a9785a2bda56c4f73c1b878f426dd20a6
- MD5 9a3bebed6c89ce1c3c6760a0c3cdc140
- SHA1 be78fcc9cabedaf97e6c280440e4e155312419fe
- SHA512 0790a9bbab98017dff0c0ee00bc4268d42591a1429ef6cd74911bd3a80547c944cfdc782be36e7e4b1a5e30a2c745d344aee9f8d814e9d549a8e94810510f2b8
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/UNMUTE_PRESSED.bmp
- SHA256 0b5f3d8012eb5511c5760a7a78ac7ace286d36c09d525b39ba646e1c2bcef0c5
- MD5 f8153a6c7da84b97ab8ec8649872351c
- SHA1 9b7d0dcf27f7dcdfda823449dc7dfb948b35c793
- SHA512 b6031aab03dd50215c7c72db6a6f1f3da1b179565ef43bcf854d00b302cec9d5ba6fb08602ee9fdddf0cac49ebcfa190b5180cfe5d2ea4fceae9b3944639ac97
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/VOLUME_SLIDER_HOVER.bmp
- SHA256 ca9fb8e48979d8cda955db98ef122a1cd4ce7a56e5ce8437513dea088492e251
- MD5 2a6a651e3526b7ec2a7e24d79388ba7b
- SHA1 f54e10a68ab919eb7d5bd2379fe71f65bc65e3e2
- SHA512 587454ad0a9a5eec6e633c3129ef8d9b079ace0ec2d677c88009a0c0d3d3ff8e54df84db5197f09202f66e9faa04cdc9968a11d281ca865f2bf0f68e081f6a3d
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/VOLUME_SLIDER_NORMAL.bmp
- SHA256 b65504b15eebe6796d43a46d9767df332895fcaa1e2a85babfc325915d55b477
- MD5 88a33102d71fa2a3260dcf4cbb6988b2
- SHA1 7a2dd67e8bfb98295aa0d9adee1bdfbf3fea705e
- SHA512 090cd6fb43a3e0570a2af9361f31b9c10eeba8f25f76f02877a789414889b4e59e9a9b6697259ce5655d29db98d7a813277d89d864143af22ed95845ba3af659
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/VOLUME_SLIDER_PRESSED.bmp
- SHA256 deace2e64c0a9d33318cd19017c3142e6aa4999b6847bcdf67c4a1ae88cca251
- MD5 4aad989d2b60b88539501c88f3297439
- SHA1 1a9b4b7cfa2b63bc02e4b4b9836feae075431674
- SHA512 f21ea8d0b92c20504e92986dc17d7d82733e0d3027ef8d50bddb0f9509b42c164980e685174bcdad7fd2094f351827528ce81ecd9c60f640ba992edfed7c8773
- MD5 SHA1 SHA512
Modules/sopcast/live/skin/sopcore.xml
- SHA256 ba8059f552769817bc7cfc94db3df40b7d38d66a09054a255279683269db6113
- MD5 a66173f71d8c4cd7bfc7308582924f71
- SHA1 3591d2fc753fe2e82b08fcf894991003c9d0ed32
- SHA512 23b811443218f8da996b49147c12a91283488bc90841197712d44b2f9c12a766932f6a82a40a0315a9d5fecc771ccb685f99bcd943792d5ceb7607bd18ff2abd
- MD5 SHA1 SHA512
Modules/sopcast/live/sopocx.ocx
- IMPHASH c2173ff671752d8cec086aabb9d8ee4b
- SHA256 43b317f49f199ce723a84a273c6761cf149bdb73eac73d75963049580b4f7124
- MD5 a788741d4406e31e101b5e2489b4951e
- SHA1 e7a8a9de5da1d73d0352f856c7a2df346727b286
- SHA512 a388a5d117aefdef1a596ca0ed1d1860f95fbcdd027e2a3685a40386fff7d5e65ca80963473f027189f9f9d71a8403e292e760d23d01cd1e27e46d85789f28f2
- SSDEEP 24576:3vdIbJRgGzWlfqKq6Slp9mEwq6NQiLakZpkfCYD44UlsMkcTopi4/28bW82J6:fd25yyAEwo2vkfb/DMkcTopZ/U82J6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
526900
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\SopSolution\SopCast\sopocx.pdb
kernel32
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
SetConsoleCtrlHandler
IsBadReadPtr
IsBadCodePtr
GetOEMCP
CompareStringA
SetEnvironmentVariableA
SetEnvironmentVariableW
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
CreateFileA
GetCurrentDirectoryA
GetFullPathNameA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetDriveTypeA
HeapSize
TerminateProcess
VirtualQuery
FlushConsoleInputBuffer
GlobalMemoryStatus
FindFirstFileA
GetSystemInfo
VirtualAlloc
GetStringTypeExA
ReleaseSemaphore
CreateSemaphoreA
VirtualProtect
ExitThread
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
PostQueuedCompletionStatus
GetQueuedCompletionStatus
OpenProcess
CreateIoCompletionPort
ReleaseMutex
CreateMutexA
InterlockedCompareExchange
FormatMessageA
HeapAlloc
HeapFree
CreateThread
lstrcpyA
GetProfileIntW
WritePrivateProfileStringW
FindResourceExW
GetFileTime
GetFileAttributesW
FileTimeToLocalFileTime
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetTickCount
FileTimeToSystemTime
GlobalFlags
RaiseException
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
GetUserDefaultLCID
IsDBCSLeadByte
lstrcmpiW
GetModuleFileNameW
InterlockedDecrement
InterlockedIncrement
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GetLastError
SetLastError
GlobalFree
CopyFileW
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
CompareStringW
GetLongPathNameW
MultiByteToWideChar
lstrcatW
lstrlenW
WinExec
lstrcpyW
FindFirstFileW
FindClose
CreateDirectoryW
CreateFileW
CloseHandle
WideCharToMultiByte
MoveFileW
DeleteFileW
Sleep
FindResourceW
LoadResource
LockResource
SizeofResource
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
SetStdHandle
InterlockedExchange
user32
ReleaseDC
GetDC
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
PeekMessageW
DestroyMenu
SendMessageW
PostMessageW
SetTimer
KillTimer
GetParent
GetDlgCtrlID
EnableWindow
GetWindowTextW
GetWindow
GetForegroundWindow
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
MessageBoxW
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoW
RegisterClassW
IsRectEmpty
SetRect
CopyAcceleratorTableW
InvalidateRect
InvalidateRgn
SetCapture
UnregisterClassW
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
ReleaseCapture
SetParent
DrawEdge
DestroyWindow
InflateRect
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
GetProcessWindowStation
GetUserObjectInformationW
LoadStringA
PtInRect
CopyRect
GetSystemMetrics
CreateMenu
RegisterClipboardFormatW
TabbedTextOutW
wsprintfW
DrawTextW
DrawTextExW
GrayStringW
SetCursor
LoadCursorW
SetRectEmpty
EnumChildWindows
LockWindowUpdate
PostQuitMessage
GetNextDlgGroupItem
MessageBeep
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
ClientToScreen
FillRect
GetWindowDC
BeginPaint
EndPaint
MessageBoxA
RedrawWindow
WindowFromPoint
GetDCEx
PostThreadMessageW
GetDialogBaseUnits
DestroyIcon
GetTabbedTextExtentA
CharUpperW
MapWindowPoints
CharNextW
gdi32
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
DeleteObject
CreatePatternBrush
GetStockObject
CreatePen
CreateSolidBrush
GetTextMetricsW
SetRectRgn
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetTextAlign
EnumFontFamiliesExW
Rectangle
UnrealizeObject
CreateCompatibleBitmap
CreateFontW
StretchBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetViewportOrgEx
CombineRgn
DeleteDC
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
LPtoDP
GetRgnBox
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateDCW
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetDeviceCaps
CopyMetaFileW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegisterEventSourceA
IsTextUnicode
DeregisterEventSource
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
ReportEventA
shell32
ExtractIconW
ShellExecuteW
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
CoDisconnectObject
CreateDataCache
CoRegisterClassObject
CoRevokeClassObject
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateDataAdviseHolder
OleSaveToStream
CreateOleAdviseHolder
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CreateILockBytesOnHGlobal
ReadClassStm
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
ReadFmtUserTypeStg
CoCreateInstance
CoTaskMemFree
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
OleLoadFromStream
CoRegisterMessageFilter
CoGetClassObject
CreateStreamOnHGlobal
OleDuplicateData
oleaut32
RegisterTypeLi
LoadTypeLi
OleCreatePropertyFrame
SafeArrayDestroy
SystemTimeToVariantTime
SysStringByteLen
SysStringLen
VariantChangeType
VariantClear
SysFreeString
LoadRegTypeLi
SysAllocStringLen
SysAllocString
VariantInit
VariantCopy
OleCreateFontIndirect
OleLoadPicture
OleCreatePictureIndirect
ws2_32
WSARecv
getservbyname
WSAStringToAddressA
WSASocketW
WSARecvFrom
WSASendTo
__WSAFDIsSet
shutdown
ioctlsocket
WSASend
setsockopt
listen
ntohl
ntohs
WSAStartup
WSACleanup
gethostbyname
closesocket
htonl
htons
inet_addr
accept
socket
recv
send
WSAAsyncSelect
recvfrom
sendto
connect
WSASetLastError
getpeername
getsockname
WSAGetLastError
bind
select
psapi
GetModuleFileNameExW
EnumProcesses
EnumProcessModules
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
284KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
80KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
112KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=105, version=2067,
count=14, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=23, id=93, version=2179,
count=691, id=1, productName=Unmarked objects,
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=342, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=256, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=18, version=8444,
count=47, id=39, version=8491,
count=267, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/sopcast/live/sopvod.exe
- IMPHASH 9fd81548dc7e4ed8bb13478d429cd562
- SHA256 ef2c951aaaadb3420b851109bae29315c07e6bffb191472cf6a51785b749021e
- MD5 640bdfce33d8f9ed032975599631c4e0
- SHA1 c3781ce3818ae2eb75d429c9f9412e8532151b49
- SHA512 e71a86982f8872848530f0f583b3f190d037396352d2f775227d94fee4ae048fa108fcbd9be478e3fbc77c1a92237efae3a3ffd52aebaf4badb6c96c45e9888b
- SSDEEP 24576:nhjyygxh/O+1Ml56fa8aiV/YN2eGycl/MLZ61fRFGYSeMNMf6/+xUbEp0V:0yqWlYfaJxQ9+YSq/p0V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=www.sopcast.com,OU=www.sopcast.com,O=www.sopcast.com,L=Shanghai,ST=Shanghai,C=CN
Serial Number
aa:62:6d:ce:85:20:a4:b7:bc:af:e5:6c:97:e0:8c:51
Issuer
CN=WoTrust Code Signing Authority,O=Wotone Communications\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning
Timespan
Jan 8, 2007 - Jan 8, 2008
Subject
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Serial Number
44:be:0c:8b:50:00:24:b4:11:d3:36:2d:e0:b3:5f:1b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Jul 9, 1999 - Jul 9, 2019
Subject
CN=WoTrust Code Signing Authority,O=Wotone Communications\, Inc.,C=US
Serial Number
05:c5:91:db:3a:74:ae:ee:0c:4c:77:e3:f7:79:9c:88
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageMicrosoftCommercialCodeSigning, ExtKeyUsageClientAuth
Timespan
Aug 30, 2006 - Jul 9, 2019
Minor OS version
0
Major OS version
4
Entry point
1051652
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ws2_32
WSASendTo
WSARecvFrom
WSASetLastError
sendto
setsockopt
__WSAFDIsSet
shutdown
getsockname
getpeername
WSAGetLastError
accept
listen
bind
ioctlsocket
htonl
ntohl
ntohs
WSAStartup
WSACleanup
inet_addr
gethostbyname
socket
htons
connect
closesocket
send
select
recv
kernel32
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
HeapSize
GetCPInfo
GetOEMCP
GetACP
SetUnhandledExceptionFilter
GetEnvironmentStringsW
MultiByteToWideChar
Sleep
GetDiskFreeSpaceExA
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateThread
TerminateThread
GetTickCount
WideCharToMultiByte
GetCurrentThreadId
GetLastError
GetVersion
GetFileType
GetStdHandle
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
SetLastError
GetLocaleInfoA
GetDiskFreeSpaceA
GetSystemInfo
InterlockedDecrement
CreateEventA
InterlockedIncrement
InterlockedExchange
PulseEvent
DeleteFileA
MoveFileExA
MoveFileA
SetEndOfFile
SetFilePointer
DuplicateHandle
GetCurrentProcess
GetFileAttributesA
GetFileInformationByHandle
GetTempPathA
GetSystemTime
ReadFile
WriteFile
FlushFileBuffers
FindClose
FindNextFileA
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
VirtualProtect
SetStdHandle
GetStartupInfoA
SetHandleCount
FlushConsoleInputBuffer
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
TerminateProcess
RtlUnwind
RaiseException
DebugBreak
EnterCriticalSection
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetCommandLineA
GetCurrentDirectoryA
GetFullPathNameA
SetConsoleCtrlHandler
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetModuleFileNameA
GetProcessHeap
LCMapStringA
LCMapStringW
user32
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetUserObjectInformationW
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
208KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=9, id=105, version=2067,
count=2, id=93, version=2067,
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=322, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=176, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=347, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=42, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/sopcast/vod/sopocx.ocx
- IMPHASH da1cdcc97d256655d1a347a28854815b
- SHA256 29b4a02ab383be996bf21a3125121a2aeb39daeb6ac146b247d59a7822bf6922
- MD5 1ad7d13e6b535c3221e92ea76bac7c85
- SHA1 9d8c5ba6bb12c331c96ad1ac9729986bce3b7e74
- SHA512 f73f578bc8625ca257502397a22cf961d520d2d8674884050e1c3aaf0c219c2a2914146dc29d2331c304829a648bcdb51d94ea173f3e5f73e1368887a12d5732
- SSDEEP 24576:t3dpzBwGQ1JwTOTShxYFcqT0JF1GCdbvrFhScxq9BDk2/4sgaT5pbBneBsF:xlwGQ1UxYOqyLGN9ATaT5pbBneBs
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
596317
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\SopSolution\bin\sopocx.pdb
kernel32
DeleteFileA
GetTimeZoneInformation
QueryPerformanceCounter
GetCurrentProcessId
GetModuleFileNameA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
GetStringTypeA
GetStringTypeW
SetStdHandle
MoveFileA
IsBadReadPtr
IsBadCodePtr
GetOEMCP
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
GetCPInfo
VirtualQuery
GetSystemInfo
FlushConsoleInputBuffer
GlobalMemoryStatus
VirtualAlloc
VirtualProtect
GetCurrentDirectoryA
GetFullPathNameA
FindFirstFileA
GetDriveTypeA
GetStringTypeExA
ReleaseSemaphore
CreateSemaphoreA
HeapSize
TerminateProcess
ExitThread
HeapReAlloc
GetCommandLineA
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
PostQueuedCompletionStatus
GetQueuedCompletionStatus
OpenProcess
CreateIoCompletionPort
ReleaseMutex
CreateMutexA
FormatMessageA
InterlockedCompareExchange
HeapAlloc
GetProcessHeap
HeapFree
CreateThread
GetTickCount
lstrcpyA
GetFileTime
GetFileAttributesW
GetProfileIntW
WritePrivateProfileStringW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FindResourceExW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalFlags
RaiseException
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
LoadLibraryW
GetLocaleInfoW
GetUserDefaultLCID
IsDBCSLeadByte
lstrcmpiW
GetModuleFileNameW
InterlockedIncrement
InterlockedDecrement
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
GetModuleHandleA
LoadLibraryA
FreeLibrary
lstrcmpW
GetModuleHandleW
GetProcAddress
GetVersionExA
GetLastError
SetLastError
GlobalFree
CopyFileW
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrcpynW
LocalFree
GetLongPathNameW
lstrcatW
lstrlenW
WinExec
MultiByteToWideChar
WideCharToMultiByte
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
lstrcpyW
FindFirstFileW
FindClose
CreateDirectoryW
CreateFileW
CloseHandle
MoveFileW
DeleteFileW
Sleep
FindResourceW
LoadResource
LockResource
SetConsoleCtrlHandler
SizeofResource
user32
GetCursorPos
ValidateRect
SetMenuItemBitmaps
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapW
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
ReleaseDC
GetDC
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
WinHelpW
GetCapture
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
TranslateMessage
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
LoadIconW
PeekMessageW
InvalidateRgn
PostMessageW
SetTimer
KillTimer
GetParent
SendMessageW
GetDlgCtrlID
EnableWindow
GetWindowTextW
GetWindow
GetForegroundWindow
RemoveMenu
GetSubMenu
GetMenuItemCount
GetProcessWindowStation
MessageBoxW
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetClientRect
GetMenu
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoW
RegisterClassW
GetMessageW
SetParent
DrawEdge
InflateRect
InvalidateRect
DestroyMenu
UnregisterClassW
DefWindowProcW
CallWindowProcW
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
CreateMenu
IsRectEmpty
RegisterClipboardFormatW
wsprintfW
DestroyWindow
ReleaseCapture
GetUserObjectInformationW
LoadStringA
InsertMenuW
GetMenuItemID
AppendMenuW
GetMenuStringW
GetMenuState
PtInRect
CopyRect
GetSystemMetrics
SetCapture
TabbedTextOutW
DrawTextExW
DrawTextW
GrayStringW
SetCursor
LoadCursorW
SetRectEmpty
SetRect
EnumChildWindows
LockWindowUpdate
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
GetSysColorBrush
ClientToScreen
FillRect
GetWindowDC
BeginPaint
EndPaint
GetDialogBaseUnits
GetTabbedTextExtentA
DestroyIcon
CharUpperW
MessageBoxA
RedrawWindow
WindowFromPoint
PostThreadMessageW
GetDCEx
GetNextDlgGroupItem
CopyAcceleratorTableW
MapWindowPoints
CharNextW
MessageBeep
gdi32
MoveToEx
SetTextAlign
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreateFontIndirectW
GetStockObject
CreatePen
CreateSolidBrush
GetMapMode
DPtoLP
GetTextMetricsW
GetTextAlign
EnumFontFamiliesExW
GetBkColor
GetTextColor
GetRgnBox
Rectangle
UnrealizeObject
CreateCompatibleBitmap
CreateFontW
StretchBlt
DeleteObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetViewportOrgEx
CombineRgn
DeleteDC
DeleteMetaFile
CloseMetaFile
CreateMetaFileW
LPtoDP
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateDCW
SetMapMode
SetROP2
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
BitBlt
SetRectRgn
CreateCompatibleDC
CreatePatternBrush
GetDeviceCaps
CopyMetaFileW
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegisterEventSourceA
IsTextUnicode
ReportEventW
RegisterEventSourceW
DeregisterEventSource
OpenProcessToken
GetTokenInformation
GetLengthSid
CopySid
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegDeleteKeyW
RegEnumKeyW
RegCreateKeyW
RegOpenKeyW
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryValueW
RegCloseKey
ReportEventA
shell32
ShellExecuteW
ExtractIconW
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
OleDestroyMenuDescriptor
CreateDataAdviseHolder
OleSaveToStream
CreateOleAdviseHolder
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
CreateStreamOnHGlobal
ReadClassStm
OleIsCurrentClipboard
OleFlushClipboard
OleLoadFromStream
StgCreateDocfileOnILockBytes
OleCreateMenuDescriptor
CoGetClassObject
StringFromCLSID
ReleaseStgMedium
CoTaskMemAlloc
ReadFmtUserTypeStg
CoTaskMemFree
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
StgOpenStorageOnILockBytes
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CreateDataCache
CreateILockBytesOnHGlobal
OleDuplicateData
oleaut32
RegisterTypeLi
SysAllocString
LoadTypeLi
OleCreatePropertyFrame
SysStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
LoadRegTypeLi
SysAllocStringLen
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
OleLoadPicture
OleCreateFontIndirect
OleCreatePictureIndirect
ws2_32
WSARecv
getservbyname
WSAStringToAddressA
WSASocketW
WSARecvFrom
WSASendTo
sendto
__WSAFDIsSet
select
shutdown
getsockname
getpeername
ioctlsocket
WSASend
WSASetLastError
gethostbyname
inet_addr
connect
WSAGetLastError
setsockopt
send
recv
closesocket
accept
ntohs
ntohl
htons
htonl
WSAStartup
WSACleanup
listen
bind
socket
psapi
GetModuleFileNameExW
EnumProcesses
EnumProcessModules
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
308KB
Virtual Size
304KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
80KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
112KB
Virtual Size
109KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=105, version=2067,
count=13, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=23, id=93, version=2179,
count=686, id=1, productName=Unmarked objects,
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=342, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=250, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=18, version=8444,
count=37, id=39, version=8491,
count=261, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/sopcast/vod/sopvod.exe
- IMPHASH 9fd81548dc7e4ed8bb13478d429cd562
- SHA256 13a971db88db4e5cd9321d60291d4e8cddeae600e0df9fb4289fca74ba303ac1
- MD5 a5e8a736cf3c4d50d7cab9aaff23be99
- SHA1 3f2ef21956c5abe13e659b8d161f46636125f655
- SHA512 7281e59aef2ff10bed77c4e87d26ab54c8d3fac8333c710d11cd5111b731bf80eba5d05f12823392ae69d6b8d60d6f05c747a061ee84212176b7f016d8e053ef
- SSDEEP 24576:t6O3fJWmoeA0PD9pZVZTaCa1DPXu558mqc3GQ1wYOU4vRq7EbC+VmLelpYo:tjW0nbZG9P9k4vPfpY
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1050500
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
ws2_32
WSASendTo
WSARecvFrom
WSASetLastError
sendto
setsockopt
__WSAFDIsSet
shutdown
getsockname
getpeername
WSAGetLastError
accept
listen
bind
ioctlsocket
htonl
ntohl
ntohs
WSAStartup
WSACleanup
inet_addr
gethostbyname
socket
htons
connect
closesocket
send
select
recv
kernel32
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
HeapSize
GetCPInfo
GetOEMCP
GetACP
SetUnhandledExceptionFilter
GetEnvironmentStringsW
MultiByteToWideChar
Sleep
GetDiskFreeSpaceExA
CreateMutexA
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateThread
TerminateThread
GetTickCount
WideCharToMultiByte
GetCurrentThreadId
GetLastError
GetVersion
GetFileType
GetStdHandle
GetCurrentProcessId
GlobalMemoryStatus
QueryPerformanceCounter
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
SetLastError
GetLocaleInfoA
GetDiskFreeSpaceA
GetSystemInfo
InterlockedDecrement
CreateEventA
InterlockedIncrement
InterlockedExchange
PulseEvent
DeleteFileA
MoveFileExA
MoveFileA
SetEndOfFile
SetFilePointer
DuplicateHandle
GetCurrentProcess
GetFileAttributesA
GetFileInformationByHandle
GetTempPathA
GetSystemTime
ReadFile
WriteFile
FlushFileBuffers
FindClose
FindNextFileA
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
VirtualQuery
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
VirtualProtect
SetStdHandle
GetStartupInfoA
SetHandleCount
FlushConsoleInputBuffer
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
TerminateProcess
RtlUnwind
RaiseException
DebugBreak
EnterCriticalSection
LeaveCriticalSection
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
GetCommandLineA
GetCurrentDirectoryA
GetFullPathNameA
SetConsoleCtrlHandler
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
TlsAlloc
TlsFree
TlsSetValue
TlsGetValue
GetModuleFileNameA
GetProcessHeap
LCMapStringA
LCMapStringW
user32
GetProcessWindowStation
GetDesktopWindow
MessageBoxA
GetUserObjectInformationW
advapi32
RegisterEventSourceA
ReportEventA
DeregisterEventSource
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
208KB
Virtual Size
205KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
64KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=9, id=105, version=2067,
count=2, id=93, version=2067,
count=39, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=322, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=176, id=1, productName=Unmarked objects,
count=9, id=93, version=2179,
count=347, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=42, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/tvants/Languages/tvantsx_chs.ini
- SHA256 41d9d14c77ca4c9e28b16174a4ea9205632886c45c872c58eb8549b1dd09bf8d
- MD5 ac00b362ae15cebf06ed2cfd7885fd0d
- SHA1 26bbc8c942e482752d10965099efeabf9d3e60f8
- SHA512 b0868f307833d8f062755834036ccf498b0889d33f5662931e944648349165631c423b99a3bb97988c6b6a55253b4197033fab3eef6b8949d6c5973a653879b8
- SSDEEP 384:tvUCn2iZ2jXF0oNNb8LxW+2x2uz6UnZLp5r7zpHH9AIdKzE1Q01DK6qZimVmBT:tvNnPZ2J3vmXuz6gntH9A8qEZ1BmVmx
- MD5 SHA1 SHA512 SSDEEP
Modules/tvants/TvantsX.ocx
- IMPHASH 6875d19c3a33d2551ac60203561b8a1a
- SHA256 e7efab4ba50b4549a628f0bb6f87f70f8b507d23cd8a0a07ebc458d15f000ee5
- MD5 ea00840dd1c49a44df20faa35dc87137
- SHA1 f975a9af865ccef5852fc4a5cbe3cfe5c8bd197a
- SHA512 acab14c6cd11a980b48c8ed65ef97b6c893a20797e4ce885463817eb0a0835a7c197ad08be98bd9f050122a30f54eb513472a0887f2d5166eb569c622c81d578
- SSDEEP 24576:g4R7wo525+BZYIJ3ONsKyI/+ox8AcLMko:FR7w61csKhrx8pro
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
800716
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
d:\working\tvants\output\releaseunicode\TvantsX.pdb
kernel32
InterlockedExchange
CompareStringA
FreeLibrary
GlobalFree
GetTickCount
LocalFree
GetPrivateProfileStringA
WritePrivateProfileStringA
Beep
GlobalAlloc
GlobalLock
GlobalUnlock
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTime
SetLastError
GetThreadLocale
ResumeThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FreeResource
lstrcmpiA
lstrlenA
InterlockedDecrement
LocalAlloc
GetCurrentThread
ResetEvent
WaitForSingleObject
CloseHandle
GetLocalTime
GetCurrentProcessId
SetEvent
EnumResourceNamesW
SizeofResource
LoadLibraryA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GetLastError
GetVersion
Sleep
MulDiv
LoadResource
LockResource
SetEnvironmentVariableA
GetDriveTypeA
GetCurrentDirectoryA
CreateFileA
SetStdHandle
GetConsoleOutputCP
WriteConsoleA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetModuleHandleA
QueryPerformanceCounter
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetConsoleMode
GetConsoleCP
GetDateFormatA
GetTimeFormatA
LCMapStringA
GetOEMCP
GetACP
VirtualFree
HeapCreate
HeapDestroy
GetTimeZoneInformation
HeapSize
VirtualQuery
GetSystemInfo
VirtualAlloc
CreateThread
ExitThread
ExitProcess
GetProcessHeap
GetCommandLineA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RaiseException
HeapReAlloc
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
RtlUnwind
GetFileTime
GlobalFlags
SetErrorMode
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
GlobalReAlloc
TlsGetValue
IsDBCSLeadByte
GetUserDefaultLCID
GlobalSize
InterlockedIncrement
SuspendThread
SetThreadPriority
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GlobalDeleteAtom
GetVersionExA
TlsAlloc
GetStringTypeA
GlobalHandle
LocalReAlloc
TlsFree
FindClose
VirtualProtect
ReadFile
TlsSetValue
advapi32
OpenSCManagerW
OpenServiceW
CloseServiceHandle
RegCloseKey
user32
DestroyIcon
GetSysColor
CopyRect
OffsetRect
FrameRect
DrawFocusRect
ClientToScreen
ScreenToClient
GetActiveWindow
GetCapture
SetCapture
GetParent
WindowFromPoint
DestroyCursor
GetCursorPos
ReleaseCapture
SetCursor
IsWindow
GetWindowThreadProcessId
IsIconic
GetDesktopWindow
SetForegroundWindow
SetWindowPos
GetSubMenu
SetTimer
GetFocus
GetMenuItemCount
GetMenuItemID
IsMenu
GetMenu
EnumChildWindows
UnionRect
SetParent
GetDlgCtrlID
TranslateMessage
MsgWaitForMultipleObjects
GetAsyncKeyState
GetWindow
IsChild
GetDlgItem
MoveWindow
ShowWindow
IsRectEmpty
PtInRect
SetRect
SetRectEmpty
SetFocus
RedrawWindow
IsWindowVisible
InvalidateRect
GetClientRect
GetWindowRect
SetWindowRgn
FillRect
InflateRect
GetSystemMenu
UnregisterClassA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
DestroyWindow
GetSystemMetrics
SetActiveWindow
GetWindowPlacement
SystemParametersInfoA
IntersectRect
SetWindowPlacement
DeferWindowPos
EqualRect
AdjustWindowRectEx
UpdateWindow
GetKeyState
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
CallNextHookEx
SendDlgItemMessageA
CheckMenuItem
EnableMenuItem
GetMenuState
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
ValidateRect
ShowOwnedPopups
RemoveMenu
MapDialogRect
SetWindowContextHelpId
DrawEdge
GetDC
ReleaseDC
GetWindowDC
BeginPaint
EndPaint
InvalidateRgn
DestroyMenu
CreateMenu
LockWindowUpdate
MessageBeep
SetMenu
BringWindowToTop
CreatePopupMenu
ReuseDDElParam
UnpackDDElParam
GetDialogBaseUnits
GetSysColorBrush
GetNextDlgGroupItem
GetTabbedTextExtentA
GetDCEx
gdi32
SetMapMode
SetROP2
SetBkMode
PatBlt
DPtoLP
RestoreDC
SaveDC
StretchBlt
CreateCompatibleBitmap
CreateBitmap
CreateCompatibleDC
SelectObject
SetBkColor
BitBlt
SetTextColor
GetTextColor
DeleteObject
GetStockObject
GetDeviceCaps
CreateRoundRectRgn
IntersectClipRect
LineTo
MoveToEx
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
Escape
GetBkColor
DeleteMetaFile
CloseMetaFile
LPtoDP
GetClipBox
DeleteDC
SetViewportOrgEx
OffsetViewportOrgEx
UnrealizeObject
Rectangle
GetTextAlign
GetRgnBox
GetMapMode
SetRectRgn
CreateRectRgnIndirect
CombineRgn
CreateSolidBrush
CreatePen
CreatePatternBrush
ExtSelectClipRgn
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
comctl32
ord17
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
PathIsRelativeW
StrToIntExA
PathFileExistsW
ws2_32
gethostbyname
WSAStartup
closesocket
WSAGetLastError
inet_addr
htonl
inet_ntoa
listen
shutdown
setsockopt
getsockopt
WSAAsyncSelect
accept
ioctlsocket
ntohs
sendto
recv
send
connect
WSASetLastError
getpeername
getsockname
bind
select
socket
htons
WSACleanup
recvfrom
ntohl
ole32
CoUninitialize
CoInitializeSecurity
CoInitialize
CoCreateGuid
CoTaskMemFree
StringFromCLSID
StringFromGUID2
CoRevokeClassObject
ReadFmtUserTypeStg
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CLSIDFromProgID
CLSIDFromString
CreateDataCache
OleSaveToStream
CoDisconnectObject
ReadClassStm
CreateOleAdviseHolder
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CreateDataAdviseHolder
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CreateStreamOnHGlobal
OleLoadFromStream
OleIsCurrentClipboard
OleFlushClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoCreateInstance
CoRegisterClassObject
oleaut32
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleLoadPicture
OleCreatePictureIndirect
VariantCopy
OleCreateFontIndirect
OleCreatePropertyFrame
LoadTypeLi
RegisterTypeLi
SysStringLen
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
VariantInit
SysAllocString
VariantClear
LoadRegTypeLi
SysAllocStringLen
SysFreeString
iphlpapi
GetIpAddrTable
GetTcpTable
GetBestRoute
shell32
DragFinish
winspool.drv
ClosePrinter
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
960KB
Virtual Size
958KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
204KB
Virtual Size
201KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
96KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=15, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=30, id=125, productName=VS2005 build 50727, version=50727,
count=24, id=123, productName=VS2005 build 50727, version=50727,
count=3, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=541, id=1, productName=Unmarked objects,
count=154, id=126, version=50727,
count=375, id=110, productName=VS2005 build 50727, version=50727,
count=359, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/tvants/riched20.dll
- IMPHASH e1388f5ee2c2170d512b114c86870acd
- SHA256 80a68cf8a1313ba39d1788290e0e1e15653bdc2c674929135b835ad6a9d6382f
- MD5 453fc52f12006b1eeab0982a88ad263c
- SHA1 5e3dc319a154d3b8bec2716384ceddd3a29e9bb7
- SHA512 c010bab733ce3cacaf7fa7f03f5e5ea0aadc1e65d262f50b19276c08bc495d27655a8cd675e2557f8bbb6895b295ffaeadaf77c144edff7cc76d491ff9a5de84
- SSDEEP 12288:qXfxM1uYLsQQLBzMc/XcLhxrNst8K9hCI:qX5M1vwQAzvcXNQf9t
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
5401
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
riched20.pdb
msvcrt
_adjust_fdiv
malloc
_initterm
free
_ftol
memmove
kernel32
SetUnhandledExceptionFilter
InterlockedExchange
RaiseException
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetUserDefaultLCID
GetProfileIntA
LeaveCriticalSection
GetSystemDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
LocalLock
Sleep
GetTickCount
IsBadReadPtr
FreeLibrary
GetProcAddress
GetLocaleInfoW
LocalFree
lstrcmpiA
lstrlenA
FormatMessageA
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetSystemDefaultLangID
FindAtomA
GetCurrentThreadId
IsBadWritePtr
GetLastError
ReadFile
WriteFile
CloseHandle
SetFilePointer
IsValidCodePage
GetThreadLocale
GlobalAlloc
GlobalFree
GlobalFlags
GlobalReAlloc
GlobalSize
GlobalLock
GlobalHandle
GlobalUnlock
MulDiv
GetVersionExA
lstrcmpiW
GetACP
LocalAlloc
LocalReAlloc
GetModuleHandleA
GetStringTypeExA
FindAtomW
GetStringTypeExW
CreateFileA
CreateFileW
CompareStringA
CompareStringW
GetProfileSectionA
GetProfileSectionW
LoadLibraryA
LoadLibraryW
GetModuleFileNameA
GetModuleFileNameW
EnterCriticalSection
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExW
RegEnumKeyExA
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExA
user32
SetTimer
KillTimer
ScrollWindowEx
SetForegroundWindow
SetScrollInfo
GetWindow
IsWindow
GetDesktopWindow
SystemParametersInfoW
WindowFromPoint
GetForegroundWindow
IsChild
IsWindowEnabled
GetCapture
GetCaretPos
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardOwner
GetClipboardData
CharUpperW
MessageBoxA
UnregisterClassA
SetCaretPos
EnableScrollBar
wvsprintfA
DefWindowProcA
DefWindowProcW
GetWindowLongA
GetWindowLongW
GetClassLongA
GetClassLongW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
SetWindowLongA
SetWindowLongW
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
RegisterWindowMessageA
PostQuitMessage
MessageBoxW
GetKeyboardLayout
SendMessageA
FindWindowA
SystemParametersInfoA
GetKeyboardLayoutList
CharLowerA
CharLowerBuffW
CharUpperA
CharUpperBuffW
SendMessageW
UnregisterClassW
RegisterClassA
RegisterClassW
GetDoubleClickTime
ShowCaret
HideCaret
CreateCaret
SetScrollPos
SetScrollRange
IsWindowVisible
MapWindowPoints
GetDlgItem
GetFocus
IsIconic
DestroyCaret
WindowFromDC
DestroyMenu
MessageBeep
RegisterClipboardFormatA
GetParent
TrackPopupMenu
SetCapture
GetAsyncKeyState
ReleaseCapture
GetMessageTime
GetMessagePos
IntersectRect
OffsetRect
InvertRect
CopyRect
ActivateKeyboardLayout
IsWindowUnicode
EnableWindow
GetDC
ReleaseDC
CreateWindowExW
CreateWindowExA
SetParent
ClientToScreen
MoveWindow
BeginPaint
FillRect
EndPaint
InflateRect
ShowWindow
InvalidateRect
SetWindowPos
UpdateWindow
GetClientRect
DrawFocusRect
GetCursorPos
ScreenToClient
GetWindowRect
PtInRect
GetKeyState
GetSysColor
DrawFrameControl
GetSystemMetrics
SetCursor
GetCursor
DestroyWindow
ShowScrollBar
SetFocus
gdi32
GetTextMetricsA
CreateFontIndirectW
CreateFontIndirectA
GetCharWidthA
GetCharWidthW
EnumFontFamiliesExW
LPtoDP
GetMapMode
CreatePalette
GetObjectType
Escape
CreatePatternBrush
CreateMetaFileA
CloseMetaFile
EnumMetaFile
SetViewportOrgEx
GetMetaFileBitsEx
CreateBitmap
SetMetaFileBitsEx
CreateSolidBrush
ExtTextOutA
CreateCompatibleBitmap
SetMapMode
GetObjectA
DPtoLP
GetBkMode
TranslateCharsetInfo
GetOutlineTextMetricsA
GetTextCharsetInfo
GetTextMetricsW
CreatePen
MoveToEx
LineTo
BitBlt
SetWindowOrgEx
SetWindowExtEx
GetPixel
ExtTextOutW
GetDeviceCaps
SetTextAlign
DeleteObject
CreateCompatibleDC
StretchBlt
DeleteDC
CreateDIBSection
SetROP2
GetStockObject
Rectangle
GetCurrentObject
SelectObject
SelectPalette
RealizePalette
SaveDC
RestoreDC
SetBkMode
PatBlt
SetBkColor
SetTextColor
IntersectClipRect
GetObjectW
CreateICA
CreateICW
GetTextFaceA
GetTextFaceW
DeleteMetaFile
CreateTextServices
IID_IRichEditOle
IID_IRichEditOleCallback
IID_ITextHost
IID_ITextHost2
IID_ITextServices
REExtendedRegisterClass
RichEdit10ANSIWndProc
RichEditANSIWndProc
Name
.text
Size
378KB
Virtual Size
378KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
30KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=302, id=1, productName=Unmarked objects,
count=11, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=96, version=4031,
count=7, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=63, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Modules/tvants/unicows.dll
- IMPHASH 628730441f2453f40c61ce661f08e0ca
- SHA256 f06f36fa03a5db4980c9d1120ada1d9e558515be73eff5b7cd34c48c0d9afd35
- MD5 f8d176db5b14aed7c9b25e0640226bd1
- SHA1 a31c1c641639f5b50e79e0330cfc91e6613bf7f9
- SHA512 ceb50c3de105cb8a9541161c2bc9d65cc86c9b2bf5e6e40dcb8c8227ba38e0713d30aa84d8479c78e03ee63ef2f75debe7a5bc6a86cc6dcbcee106d93b9597bf
- SSDEEP 6144:Y4OkcR5cbvIFc8vuB4ShpH4BemwbVkEZ77:YFkedmBPjHv777
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a7:a2:13:01:eb:da:5d:60:b9:4a:67:90:6b:06:79:8b:f5:ed:1c:2f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Serial Number
c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Timespan
Jan 10, 1997 - Dec 31, 2020
Subject
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:de:aa:11:d4:d8:40:9a:a8:be:e6
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 10, 2000 - Nov 12, 2005
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:7d:a7:00:00:00:00:00:48
Issuer
CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 25, 2003 - Jan 25, 2005
Minor OS version
2
Major OS version
5
Entry point
59636
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
e:\dnsrv\sdktools\unicows\godot\obj\i386\unicows.pdb
kernel32
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeA
GetDriveTypeW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesW
FindClose
IsDBCSLeadByte
GetFullPathNameA
GetFullPathNameW
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDriveStringsW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeHandleStateW
GetNumberFormatA
GetNumberFormatW
GetPrivateProfileIntA
GetPrivateProfileIntW
GetPrivateProfileSectionA
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
GetPrivateProfileStringW
GetPrivateProfileStructA
GetPrivateProfileStructW
GetProfileIntA
GetProfileIntW
GetProfileSectionA
GetProfileSectionW
GetProfileStringA
GetProfileStringW
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeExA
GetStringTypeExW
GetSystemDirectoryA
GetSystemDirectoryW
GetTempFileNameW
GetTempPathW
GetTimeFormatA
GetTimeFormatW
GetVersionExA
GetVersionExW
GetVolumeInformationA
GetVolumeInformationW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomA
GlobalFindAtomW
GlobalGetAtomNameA
GlobalGetAtomNameW
IsBadStringPtrW
IsValidCodePage
LCMapStringA
LCMapStringW
LoadLibraryW
LoadLibraryExW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
MoveFileW
OpenEventA
GetDefaultCommConfigW
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenSemaphoreA
OpenSemaphoreW
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PeekConsoleInputW
QueryDosDeviceA
QueryDosDeviceW
ReadConsoleA
ReadConsoleW
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputA
ReadConsoleOutputW
ReadConsoleOutputCharacterA
ReadConsoleOutputCharacterW
RemoveDirectoryA
RemoveDirectoryW
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SearchPathA
SearchPathW
SetComputerNameA
SetComputerNameW
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryA
SetCurrentDirectoryW
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetFileAttributesA
SetFileAttributesW
SetLocaleInfoA
SetLocaleInfoW
SetVolumeLabelA
SetVolumeLabelW
VerLanguageNameA
VerLanguageNameW
WaitNamedPipeA
WaitNamedPipeW
WriteConsoleA
WriteConsoleW
WriteConsoleInputA
WriteConsoleInputW
WriteConsoleOutputA
WriteConsoleOutputW
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WritePrivateProfileSectionA
WritePrivateProfileSectionW
WritePrivateProfileStringA
WritePrivateProfileStringW
WritePrivateProfileStructA
WritePrivateProfileStructW
WriteProfileSectionA
WriteProfileSectionW
WriteProfileStringA
WriteProfileStringW
FindResourceA
IsBadWritePtr
SetErrorMode
GetStringTypeW
FindResourceW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetDefaultCommConfigA
GetDateFormatW
GetDateFormatA
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrencyFormatW
GetCurrencyFormatA
GetConsoleTitleW
GetConsoleTitleA
GetComputerNameW
GetComputerNameA
GetAtomNameW
GetAtomNameA
FormatMessageW
FormatMessageA
HeapReAlloc
LocalAlloc
FreeEnvironmentStringsW
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileA
FindFirstChangeNotificationW
FindFirstChangeNotificationA
FindAtomW
FindAtomA
FillConsoleOutputCharacterW
FillConsoleOutputCharacterA
FatalAppExitW
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
EnumTimeFormatsW
EnumTimeFormatsA
EnumSystemLocalesW
EnumSystemLocalesA
EnumSystemCodePagesW
EnumDateFormatsW
EnumDateFormatsA
EnumCalendarInfoW
EnumCalendarInfoA
DeleteFileW
CreateSemaphoreW
CreateSemaphoreA
CreateProcessW
CreateProcessA
CreateNamedPipeW
CreateNamedPipeA
CreateMutexW
CreateMutexA
CreateMailslotW
CreateMailslotA
CreateFileMappingW
CreateFileMappingA
CreateFileW
CreateEventW
CreateEventA
CreateDirectoryExW
CreateDirectoryExA
CreateDirectoryW
CreateDirectoryA
CopyFileW
CopyFileA
CompareStringW
CommConfigDialogW
CommConfigDialogA
CallNamedPipeW
CallNamedPipeA
BuildCommDCBAndTimeoutsW
BuildCommDCBAndTimeoutsA
BuildCommDCBW
BuildCommDCBA
AddAtomW
AddAtomA
InitializeCriticalSection
GetACP
GetOEMCP
DeleteCriticalSection
GetFileAttributesA
LoadLibraryExA
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
lstrlenW
FindResourceExW
SizeofResource
LoadResource
LockResource
FreeResource
GetTempFileNameA
GetTempPathA
DeleteFileA
MoveFileA
_lclose
_lread
_lwrite
_llseek
VirtualQuery
GetSystemInfo
VirtualFree
VirtualAlloc
VirtualProtect
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetCurrentProcessId
GetLastError
EnterCriticalSection
LeaveCriticalSection
CompareStringA
LocalFree
GlobalAddAtomA
lstrcpyA
AreFileApisANSI
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
WideCharToMultiByte
GetCurrentThreadId
lstrcmpA
lstrcmpiA
GetLocaleInfoA
CreateFileA
GetFileSize
CloseHandle
IsDBCSLeadByteEx
LoadLibraryA
InterlockedExchange
FreeLibrary
GetCPInfo
GetVersion
GetModuleHandleA
GetProcAddress
lstrlenA
GetProcessHeap
HeapAlloc
SetLastError
MultiByteToWideChar
OpenEventW
HeapFree
RtlUnwind
user32
TranslateAcceleratorW
TabbedTextOutA
TabbedTextOutW
UnregisterClassA
UnregisterClassW
VkKeyScanExA
VkKeyScanExW
WinHelpA
WinHelpW
wvsprintfW
CharLowerW
CharUpperW
EnumClipboardFormats
GetClipboardData
VkKeyScanW
wsprintfW
IsCharUpperW
IsCharLowerW
IsCharAlphaNumericW
IsCharAlphaW
InsertMenuItemW
InsertMenuItemA
InsertMenuW
InsertMenuA
GrayStringW
GrayStringA
GetWindowTextLengthW
GetWindowTextLengthA
GetWindowTextW
GetWindowTextA
GetWindowLongW
GetTabbedTextExtentW
GetTabbedTextExtentA
GetPropW
GetMessageW
GetMenuStringW
GetMenuStringA
GetMenuItemInfoW
GetMenuItemInfoA
GetKeyNameTextW
GetKeyboardLayout
GetKeyNameTextA
GetKeyboardLayoutNameW
GetKeyboardLayoutNameA
GetDlgItemTextW
GetDlgItemTextA
GetClipboardFormatNameW
GetClipboardFormatNameA
GetClassNameW
GetClassLongW
GetClassLongA
GetClassInfoExW
GetClassInfoExA
GetClassInfoW
GetClassInfoA
FindWindowExW
FindWindowExA
FindWindowW
FindWindowA
EnableWindow
EnumPropsExW
EnumPropsExA
EnumPropsW
EnumPropsA
EnumDisplaySettingsW
EnumDisplaySettingsA
DrawTextExW
DrawTextExA
DrawTextW
DrawTextA
DrawStateW
DrawStateA
DlgDirSelectExW
DlgDirSelectExA
DlgDirSelectComboBoxExW
DlgDirSelectComboBoxExA
DlgDirListComboBoxW
DlgDirListComboBoxA
SystemParametersInfoW
DlgDirListA
DispatchMessageW
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamW
DialogBoxIndirectParamA
DefMDIChildProcW
DefFrameProcW
DefDlgProcW
DdeQueryStringW
DdeQueryStringA
DdeQueryConvInfo
DdeInitializeW
DdeInitializeA
DdeCreateStringHandleW
DdeCreateStringHandleA
DdeConnectList
DdeConnect
CharUpperBuffW
IsCharLowerA
CharToOemBuffW
CharToOemW
CharPrevW
CharNextW
CharLowerBuffW
IsCharUpperA
SystemParametersInfoA
SetWindowTextW
SetWindowTextA
SetWindowsHookExW
SetWindowsHookW
SetWindowsHookA
SetWindowLongW
SetPropW
SetMenuItemInfoW
SetMenuItemInfoA
SetDlgItemTextW
SetDlgItemTextA
SetClassLongW
SetClassLongA
SendNotifyMessageW
SendMessageTimeoutW
SendMessageCallbackW
SendMessageW
SendDlgItemMessageW
RemovePropW
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClipboardFormatA
RegisterClassExW
RegisterClassExA
RegisterClassW
RegisterClassA
PostThreadMessageW
PostMessageW
PeekMessageW
OemToCharBuffW
OemToCharW
ModifyMenuW
ModifyMenuA
MessageBoxIndirectW
MessageBoxIndirectA
MessageBoxExW
MessageBoxW
MapVirtualKeyExW
ChangeMenuW
ChangeMenuA
ChangeDisplaySettingsW
ChangeDisplaySettingsA
CreateWindowExW
CreateWindowExA
CreateMDIWindowW
CreateMDIWindowA
CreateDialogParamW
CreateDialogParamA
CreateDialogIndirectParamW
CreateDialogIndirectParamA
CreateAcceleratorTableW
CreateAcceleratorTableA
CopyAcceleratorTableW
CopyAcceleratorTableA
CallWindowProcW
CallMsgFilterW
CallMsgFilterA
AppendMenuW
AppendMenuA
GetWindowThreadProcessId
SetWindowLongA
TranslateAcceleratorA
IsDialogMessageA
DispatchMessageA
PeekMessageA
GetMessageA
PostThreadMessageA
PostMessageA
SendNotifyMessageA
SendMessageTimeoutA
SendMessageCallbackA
SendMessageA
DefWindowProcA
CallWindowProcA
DefMDIChildProcA
DefFrameProcA
DefDlgProcA
GetWindowLongA
GetParent
GetDlgItem
DestroyWindow
SetPropA
RemovePropA
GetClassNameA
UnhookWindowsHookEx
SetWindowsHookExA
RegisterWindowMessageA
CallNextHookEx
MapVirtualKeyExA
EnumChildWindows
MapVirtualKeyW
MapVirtualKeyA
LoadStringW
LoadMenuIndirectW
IsDlgButtonChecked
GetPropA
LoadMenuIndirectA
LoadMenuW
LoadMenuA
LoadKeyboardLayoutW
LoadKeyboardLayoutA
LoadImageW
LoadImageA
LoadIconW
LoadIconA
LoadCursorFromFileW
LoadCursorFromFileA
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
LoadAcceleratorsW
LoadAcceleratorsA
IsWindowUnicode
IsWindow
DlgDirListW
IsDialogMessageW
IsClipboardFormatAvailable
gdi32
GetEnhMetaFileDescriptionW
GetGlyphOutlineA
GetGlyphOutlineW
GetICMProfileA
GetICMProfileW
GetKerningPairsA
GetKerningPairsW
GetLogColorSpaceA
GetLogColorSpaceW
GetMetaFileA
GetMetaFileW
GetObjectA
GetObjectType
GetObjectW
GetOutlineTextMetricsA
GetOutlineTextMetricsW
GetTextExtentExPointA
GetTextExtentExPointW
GetTextExtentPointA
GetEnhMetaFileDescriptionA
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceA
GetTextFaceW
GetTextMetricsA
GetTextMetricsW
PolyTextOutA
PolyTextOutW
RemoveFontResourceA
RemoveFontResourceW
ResetDCA
ResetDCW
SetICMProfileA
SetICMProfileW
StartDocA
StartDocW
TextOutW
UpdateICMRegKeyA
UpdateICMRegKeyW
GetEnhMetaFileW
GetEnhMetaFileA
GetCharacterPlacementW
GetCharacterPlacementA
GetCharWidthFloatW
GetCharWidthFloatA
GetCharWidth32W
GetCharWidthW
GetCharWidthA
GetCharABCWidthsFloatW
GetCharABCWidthsFloatA
GetCharABCWidthsW
GetCharABCWidthsA
ExtTextOutW
ExtTextOutA
EnumICMProfilesW
EnumICMProfilesA
EnumFontsW
EnumFontsA
EnumFontFamiliesExW
EnumFontFamiliesExA
EnumFontFamiliesW
EnumFontFamiliesA
CreateScalableFontResourceW
CreateScalableFontResourceA
CreateMetaFileW
CreateMetaFileA
CreateICW
CreateICA
CreateFontIndirectW
CreateFontIndirectA
CreateFontW
CreateFontA
CreateEnhMetaFileW
CreateEnhMetaFileA
CreateDCW
CreateDCA
CreateColorSpaceW
CreateColorSpaceA
CopyMetaFileW
CopyMetaFileA
CopyEnhMetaFileW
CopyEnhMetaFileA
AddFontResourceW
AddFontResourceA
GetFontData
GetTextExtentPointW
TranslateCharsetInfo
GetTextCharset
mpr
WNetGetUniversalNameW
MultinetGetConnectionPerformanceW
WNetAddConnectionA
WNetAddConnectionW
WNetAddConnection2A
WNetAddConnection2W
WNetAddConnection3A
WNetAddConnection3W
WNetCancelConnectionA
WNetCancelConnectionW
WNetCancelConnection2A
WNetCancelConnection2W
WNetConnectionDialog1A
WNetConnectionDialog1W
WNetDisconnectDialog1A
WNetDisconnectDialog1W
WNetEnumResourceA
WNetEnumResourceW
WNetGetConnectionA
WNetGetConnectionW
WNetGetLastErrorA
WNetGetLastErrorW
WNetGetNetworkInformationA
WNetGetNetworkInformationW
WNetGetProviderNameA
WNetUseConnectionW
WNetUseConnectionA
WNetOpenEnumW
WNetOpenEnumA
WNetGetUserW
WNetGetUserA
MultinetGetConnectionPerformanceA
WNetGetUniversalNameA
WNetGetResourceParentW
WNetGetResourceParentA
WNetGetResourceInformationW
WNetGetResourceInformationA
WNetGetProviderNameW
advapi32
RegOpenKeyA
RegEnumValueA
RegUnLoadKeyW
RegUnLoadKeyA
RegSetValueExW
RegSetValueExA
RegSetValueW
RegSetValueA
RegSaveKeyW
RegSaveKeyA
RegReplaceKeyW
RegReplaceKeyA
RegQueryValueExW
RegQueryValueExA
RegQueryValueW
RegQueryValueA
RegQueryMultipleValuesW
RegQueryMultipleValuesA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyW
RegCloseKey
RegLoadKeyW
RegLoadKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyW
RegEnumKeyA
RegDeleteValueW
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegCreateKeyW
RegCreateKeyA
RegConnectRegistryW
RegConnectRegistryA
IsTextUnicode
GetUserNameW
GetUserNameA
RegOpenKeyExA
comdlg32
GetOpenFileNameW
GetFileTitleW
GetFileTitleA
FindTextW
ChooseFontW
ChooseFontA
ChooseColorW
ChooseColorA
ReplaceTextW
FindTextA
ReplaceTextA
GetOpenFileNameA
GetSaveFileNameA
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgW
GetSaveFileNameW
version
VerQueryValueW
VerQueryValueA
VerInstallFileW
VerInstallFileA
VerFindFileW
VerFindFileA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW
GetFileVersionInfoA
shell32
SHGetPathFromIDListA
ord180
ord179
SHGetFileInfoA
SHFileOperationA
SHChangeNotify
SHBrowseForFolderA
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteW
ShellExecuteA
ShellAboutW
ShellAboutA
FindExecutableW
FindExecutableA
ExtractIconExA
DragQueryFileA
DragQueryFileW
ExtractIconW
ExtractIconA
winspool.drv
GetPrinterW
GetPrinterDataW
GetPrinterDriverW
GetPrinterDriverDirectoryA
GetPrinterDriverDirectoryW
GetPrintProcessorDirectoryA
GetPrintProcessorDirectoryW
GetJobW
OpenPrinterW
ResetPrinterA
ResetPrinterW
SetJobA
SetJobW
SetPrinterA
SetPrinterW
SetPrinterDataA
SetPrinterDataW
StartDocPrinterA
EnumPrintProcessorsW
EnumPrintProcessorDatatypesW
EnumPrintersW
EnumPrinterDriversW
EnumPortsW
EnumMonitorsW
DocumentPropertiesW
DocumentPropertiesA
DeviceCapabilitiesW
DeviceCapabilitiesA
DeletePrintProvidorW
DeletePrintProvidorA
DeletePrintProcessorW
DeletePrintProcessorA
DeletePrinterDriverW
DeletePrinterDriverA
DeletePortW
DeletePortA
DeleteMonitorW
DeleteMonitorA
ConfigurePortW
ConfigurePortA
AdvancedDocumentPropertiesW
AdvancedDocumentPropertiesA
AddPrintProvidorW
AddPrintProvidorA
AddPrintProcessorW
AddPrintProcessorA
AddPrinterDriverW
AddPrinterDriverA
AddPrinterW
AddPrinterA
AddPortW
AddPortA
AddMonitorW
AddMonitorA
AddJobW
AddJobA
OpenPrinterA
StartDocPrinterW
oledlg
OleUIUpdateLinksW
OleUIPromptUserW
OleUIPasteSpecialW
OleUIObjectPropertiesW
OleUIInsertObjectW
OleUIEditLinksW
OleUIConvertW
OleUIChangeSourceW
OleUIChangeIconW
OleUIBusyW
ord8
OleUIAddVerbMenuW
ord1
ord6
winmm
waveOutGetErrorTextW
waveOutGetErrorTextA
waveOutGetDevCapsW
waveOutGetDevCapsA
waveInGetErrorTextW
mixerGetControlDetailsW
midiOutGetErrorTextW
midiOutGetErrorTextA
midiOutGetDevCapsW
midiOutGetDevCapsA
midiInGetErrorTextW
midiInGetDevCapsW
midiInGetDevCapsA
mciSendStringW
mciSendStringA
mciSendCommandW
mciGetErrorStringW
mciGetErrorStringA
midiInGetErrorTextA
mciGetDeviceIDW
mciGetDeviceIDA
joyGetDevCapsW
joyGetDevCapsA
auxGetDevCapsW
auxGetDevCapsA
PlaySoundW
PlaySoundA
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRenameA
mmioRenameW
mmioStringToFOURCCA
mmioStringToFOURCCW
sndPlaySoundA
sndPlaySoundW
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
mixerGetDevCapsA
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
msvfw32
MCIWndCreateW
MCIWndCreateA
GetSaveFileNamePreviewW
GetOpenFileNamePreviewW
imm32
ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext
ImmGetCompositionStringW
AcquireCredentialsHandleW
AddAtomW
AddFontResourceW
AddJobW
AddMonitorW
AddPortW
AddPrintProcessorW
AddPrintProvidorW
AddPrinterDriverW
AddPrinterW
AdvancedDocumentPropertiesW
AppendMenuW
BeginUpdateResourceA
BeginUpdateResourceW
BroadcastSystemMessageW
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CallMsgFilterW
CallNamedPipeW
CallWindowProcA
CallWindowProcW
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
ChangeMenuW
CharLowerBuffW
CharLowerW
CharNextW
CharPrevW
CharToOemBuffW
CharToOemW
CharUpperBuffW
CharUpperW
ChooseColorW
ChooseFontW
CommConfigDialogW
CompareStringW
ConfigurePortW
CopyAcceleratorTableW
CopyEnhMetaFileW
CopyFileExW
CopyFileW
CopyMetaFileW
CreateAcceleratorTableW
CreateColorSpaceW
CreateDCW
CreateDialogIndirectParamW
CreateDialogParamW
CreateDirectoryExW
CreateDirectoryW
CreateEnhMetaFileW
CreateEventW
CreateFileMappingW
CreateFileW
CreateFontIndirectW
CreateFontW
CreateICW
CreateMDIWindowW
CreateMailslotW
CreateMetaFileW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateScalableFontResourceW
CreateSemaphoreW
CreateStdAccessibleProxyW
CreateWaitableTimerW
CreateWindowExW
CryptAcquireContextW
CryptEnumProviderTypesW
CryptEnumProvidersW
CryptGetDefaultProviderW
CryptSetProviderExW
CryptSetProviderW
CryptSignHashW
CryptVerifySignatureW
DdeConnect
DdeConnectList
DdeCreateStringHandleW
DdeInitializeW
DdeQueryConvInfo
DdeQueryStringW
DefDlgProcW
DefFrameProcW
DefMDIChildProcW
DefWindowProcW
DeleteFileW
DeleteMonitorW
DeletePortW
DeletePrintProcessorW
DeletePrintProvidorW
DeletePrinterDriverW
DeviceCapabilitiesW
DialogBoxIndirectParamW
DialogBoxParamW
DispatchMessageW
DlgDirListComboBoxW
DlgDirListW
DlgDirSelectComboBoxExW
DlgDirSelectExW
DocumentPropertiesW
DragQueryFileW
DrawStateW
DrawTextExW
DrawTextW
EnableWindow
EndUpdateResourceA
EndUpdateResourceW
EnumCalendarInfoExW
EnumCalendarInfoW
EnumClipboardFormats
EnumDateFormatsExW
EnumDateFormatsW
EnumDisplayDevicesW
EnumDisplaySettingsExW
EnumDisplaySettingsW
EnumFontFamiliesExW
EnumFontFamiliesW
EnumFontsW
EnumICMProfilesW
EnumMonitorsW
EnumPortsW
EnumPrintProcessorDatatypesW
EnumPrintProcessorsW
EnumPrinterDriversW
EnumPrintersW
EnumPropsA
EnumPropsExA
EnumPropsExW
EnumPropsW
EnumSystemCodePagesW
EnumSystemLocalesW
EnumTimeFormatsW
EnumerateSecurityPackagesW
ExpandEnvironmentStringsW
ExtTextOutW
ExtractIconExW
ExtractIconW
FatalAppExitW
FillConsoleOutputCharacterW
FindAtomW
FindExecutableW
FindFirstChangeNotificationW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FindTextW
FindWindowExW
FindWindowW
FormatMessageW
FreeContextBuffer
FreeEnvironmentStringsW
GetAltTabInfoW
GetAtomNameW
GetCPInfo
GetCPInfoExW
GetCalendarInfoW
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidth32W
GetCharWidthFloatW
GetCharWidthW
GetCharacterPlacementW
GetClassInfoExW
GetClassInfoW
GetClassLongW
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetComputerNameW
GetConsoleTitleW
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentHwProfileW
GetDateFormatW
GetDefaultCommConfigW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetDlgItemTextW
GetDriveTypeW
GetEnhMetaFileDescriptionW
GetEnhMetaFileW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesExW
GetFileAttributesW
GetFileTitleW
GetFileVersionInfoSizeW
GetFileVersionInfoW
GetFullPathNameW
GetGlyphOutlineW
GetICMProfileW
GetJobW
GetKerningPairsW
GetKeyNameTextW
GetKeyboardLayoutNameW
GetLocaleInfoW
GetLogColorSpaceW
GetLogicalDriveStringsW
GetLongPathNameW
GetMenuItemInfoW
GetMenuStringW
GetMessageW
GetMetaFileW
GetModuleFileNameW
GetModuleHandleW
GetMonitorInfoW
GetNamedPipeHandleStateW
GetNumberFormatW
GetObjectW
GetOpenFileNamePreviewW
GetOpenFileNameW
GetOutlineTextMetricsW
GetPrintProcessorDirectoryW
GetPrinterDataW
GetPrinterDriverDirectoryW
GetPrinterDriverW
GetPrinterW
GetPrivateProfileIntW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileStructW
GetProcAddress
GetProfileIntW
GetProfileSectionW
GetProfileStringW
GetPropA
GetPropW
GetRoleTextW
GetSaveFileNamePreviewW
GetSaveFileNameW
GetShortPathNameW
GetStartupInfoW
GetStateTextW
GetStringTypeExW
GetStringTypeW
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetTabbedTextExtentW
GetTempFileNameW
GetTempPathW
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextExtentPointW
GetTextFaceW
GetTextMetricsW
GetTimeFormatW
GetUserNameW
GetVersionExW
GetVolumeInformationW
GetWindowLongA
GetWindowLongW
GetWindowModuleFileNameW
GetWindowTextLengthW
GetWindowTextW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalFindAtomW
GlobalGetAtomNameW
GrayStringW
InitSecurityInterfaceW
InitializeSecurityContextW
InsertMenuItemW
InsertMenuW
IsBadStringPtrW
IsCharAlphaNumericW
IsCharAlphaW
IsCharLowerW
IsCharUpperW
IsClipboardFormatAvailable
IsDestinationReachableW
IsDialogMessageW
IsTextUnicode
IsValidCodePage
IsWindowUnicode
LCMapStringW
LoadAcceleratorsW
LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadKeyboardLayoutW
LoadLibraryExW
LoadLibraryW
LoadMenuIndirectW
LoadMenuW
LoadStringW
MCIWndCreateW
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxExW
MessageBoxIndirectW
MessageBoxW
ModifyMenuW
MoveFileW
MultiByteToWideChar
MultinetGetConnectionPerformanceW
OemToCharBuffW
OemToCharW
OleUIAddVerbMenuW
OleUIBusyW
OleUIChangeIconW
OleUIChangeSourceW
OleUIConvertW
OleUIEditLinksW
OleUIInsertObjectW
OleUIObjectPropertiesW
OleUIPasteSpecialW
OleUIPromptUserW
OleUIUpdateLinksW
OpenEventW
OpenFileMappingW
OpenMutexW
OpenPrinterW
OpenSemaphoreW
OpenWaitableTimerW
OutputDebugStringW
PageSetupDlgW
PeekConsoleInputW
PeekMessageW
PlaySoundW
PolyTextOutW
PostMessageW
PostThreadMessageW
PrintDlgW
QueryContextAttributesW
QueryCredentialsAttributesW
QueryDosDeviceW
QuerySecurityPackageInfoW
RasConnectionNotificationW
RasCreatePhonebookEntryW
RasDeleteEntryW
RasDeleteSubEntryW
RasDialW
RasEditPhonebookEntryW
RasEnumConnectionsW
RasEnumDevicesW
RasEnumEntriesW
RasGetConnectStatusW
RasGetEntryDialParamsW
RasGetEntryPropertiesW
RasGetErrorStringW
RasGetProjectionInfoW
RasHangUpW
RasRenameEntryW
RasSetEntryDialParamsW
RasSetEntryPropertiesW
RasSetSubEntryPropertiesW
RasValidateEntryNameW
ReadConsoleInputW
ReadConsoleOutputCharacterW
ReadConsoleOutputW
ReadConsoleW
RegConnectRegistryW
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumKeyW
RegEnumValueW
RegLoadKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryInfoKeyW
RegQueryMultipleValuesW
RegQueryValueExW
RegQueryValueW
RegReplaceKeyW
RegSaveKeyW
RegSetValueExW
RegSetValueW
RegUnLoadKeyW
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterWindowMessageW
RemoveDirectoryW
RemoveFontResourceW
RemovePropA
RemovePropW
ReplaceTextW
ResetDCW
ResetPrinterW
SHBrowseForFolderW
SHChangeNotify
SHFileOperationW
SHGetFileInfoW
SHGetNewLinkInfoW
SHGetPathFromIDListW
ScrollConsoleScreenBufferW
SearchPathW
SendDlgItemMessageW
SendMessageCallbackW
SendMessageTimeoutW
SendMessageW
SendNotifyMessageW
SetCalendarInfoW
SetClassLongW
SetComputerNameW
SetConsoleTitleW
SetCurrentDirectoryW
SetDefaultCommConfigW
SetDlgItemTextW
SetEnvironmentVariableW
SetFileAttributesW
SetICMProfileW
SetJobW
SetLocaleInfoW
SetMenuItemInfoW
SetPrinterDataW
SetPrinterW
SetPropA
SetPropW
SetVolumeLabelW
SetWindowLongA
SetWindowLongW
SetWindowTextW
SetWindowsHookExW
SetWindowsHookW
ShellAboutW
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconW
StartDocPrinterW
StartDocW
SystemParametersInfoW
TabbedTextOutW
TextOutW
TranslateAcceleratorW
UnregisterClassW
UpdateICMRegKeyW
UpdateResourceA
UpdateResourceW
VerFindFileW
VerInstallFileW
VerLanguageNameW
VerQueryValueW
VkKeyScanExW
VkKeyScanW
WNetAddConnection2W
WNetAddConnection3W
WNetAddConnectionW
WNetCancelConnection2W
WNetCancelConnectionW
WNetConnectionDialog1W
WNetDisconnectDialog1W
WNetEnumResourceW
WNetGetConnectionW
WNetGetLastErrorW
WNetGetNetworkInformationW
WNetGetProviderNameW
WNetGetResourceInformationW
WNetGetResourceParentW
WNetGetUniversalNameW
WNetGetUserW
WNetOpenEnumW
WNetUseConnectionW
WaitNamedPipeW
WideCharToMultiByte
WinHelpW
WriteConsoleInputW
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WriteConsoleW
WritePrivateProfileSectionW
WritePrivateProfileStringW
WritePrivateProfileStructW
WriteProfileSectionW
WriteProfileStringW
__FreeAllLibrariesInMsluDll
auxGetDevCapsW
capCreateCaptureWindowW
capGetDriverDescriptionW
joyGetDevCapsW
lstrcatW
lstrcmpW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
mciGetDeviceIDW
mciGetErrorStringW
mciSendCommandW
mciSendStringW
midiInGetDevCapsW
midiInGetErrorTextW
midiOutGetDevCapsW
midiOutGetErrorTextW
mixerGetControlDetailsW
mixerGetDevCapsW
mixerGetLineControlsW
mixerGetLineInfoW
mmioInstallIOProcW
mmioOpenW
mmioRenameW
mmioStringToFOURCCW
sndPlaySoundW
waveInGetDevCapsW
waveInGetErrorTextW
waveOutGetDevCapsW
waveOutGetErrorTextW
wsprintfW
wvsprintfW
Name
.text
Size
228KB
Virtual Size
228KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=29, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=863, id=1, productName=Unmarked objects,
count=1, id=92, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=5, id=15, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=19, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=94, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=90, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
Modules/tvu/TVUAx.dll
- IMPHASH 7aee9784a135db7bfbb04324a3f1898d
- SHA256 ae668f46867896c487356085e062d34b0536a62725b7a401677fc16166ddef0b
- MD5 a0eed9105c93ef13e073ce7463f1d5e5
- SHA1 f5d4004727bbfa6801197ff3dbe2317a18a0fc62
- SHA512 a6df583772354f1e9399e53a46955f2b6c76d330d7444ea95bdd282e3f0c3819cb0ca6dc79be937cfb10c5f5135f6958b03bd182ec699bf5e1d07fc6d3df8ac1
- SSDEEP 6144:EfPd6Ps09S3Pxyw2UWKKgQQLYi7PwqSjLOl+oemFOhsp:E3d6Ps0s3Yw2UWjQH7PwZjLQdp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
e0:a7:96:3a:0f:c3:7d:7f:f6:c4:7f:81:c9:67:5d:63:6c:ef:b4:9f
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=TVU networks,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=TVU networks,ST=California,C=US
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=TVU networks,OU=Digital ID Class 3 - Microsoft Software Validation v2,O=TVU networks,ST=California,C=US
Serial Number
60:8a:e0:c6:15:ae:c8:f8:37:4c:ae:19:b3:5b:40
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 30, 2007 - Jan 25, 2008
Minor OS version
0
Major OS version
4
Entry point
196236
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\home\luntbuild\work\app-winrd\products\winrd\prj\TVUAx\Release\TVUAx.pdb
ws2_32
WSARecvFrom
WSASendTo
__WSAFDIsSet
getsockname
getpeername
WSAGetLastError
accept
listen
gethostname
ntohs
send
recv
sendto
recvfrom
shutdown
inet_addr
ntohl
closesocket
bind
htons
htonl
socket
WSACleanup
setsockopt
gethostbyname
WSAStartup
select
connect
ioctlsocket
inet_ntoa
kernel32
lstrcpyA
GetModuleFileNameA
lstrcatA
InterlockedIncrement
InterlockedDecrement
HeapFree
GetProcessHeap
GetModuleHandleA
lstrcpynA
IsDBCSLeadByte
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
FindResourceExA
SizeofResource
LockResource
LoadResource
FindResourceA
lstrcmpA
LocalFree
TlsSetValue
TlsAlloc
TlsGetValue
CreateThread
CreateMutexA
ReleaseMutex
OutputDebugStringA
GetTickCount
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
CompareStringW
GetStringTypeW
GetStringTypeA
WriteFile
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
GetCurrentProcessId
QueryPerformanceCounter
UnhandledExceptionFilter
TerminateProcess
GetProcAddress
TlsFree
SetLastError
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
GetTimeZoneInformation
GetCommandLineA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
ExitProcess
ResumeThread
ExitThread
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
CompareStringA
lstrlenA
lstrlenW
lstrcmpiA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
Sleep
CreateEventA
SetEvent
CloseHandle
TerminateThread
WaitForSingleObject
RaiseException
SetEnvironmentVariableA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
LCMapStringA
LCMapStringW
FlushFileBuffers
SetStdHandle
user32
GetDC
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
SetWindowPos
UnionRect
PtInRect
SendMessageA
CharNextA
DefWindowProcA
DestroyWindow
MessageBoxA
IsWindow
PostMessageA
UnregisterClassA
DestroyCursor
SetRectEmpty
UpdateWindow
ScreenToClient
GetCursorPos
ReleaseCapture
GetCapture
SetCapture
SetCursor
GetDlgCtrlID
DrawFocusRect
GetSysColor
IsWindowEnabled
GetWindowTextA
GetWindowTextLengthA
CreateCursor
GetClassNameA
SetWindowTextA
GetDlgItem
MapWindowPoints
GetWindowRect
GetWindow
EndDialog
GetDlgItemTextA
RegisterWindowMessageA
InvalidateRgn
GetDesktopWindow
DestroyAcceleratorTable
RedrawWindow
CreateAcceleratorTableA
FindWindowA
BringWindowToTop
IsWindowVisible
IsZoomed
PostQuitMessage
ReleaseDC
GetActiveWindow
DialogBoxParamA
SetWindowLongA
GetWindowLongA
CallWindowProcA
DrawTextA
InflateRect
FillRect
CopyRect
GetKeyState
InvalidateRect
ShowWindow
SetFocus
IsChild
GetFocus
GetParent
CreateWindowExA
RegisterClassExA
wsprintfA
LoadCursorA
GetClassInfoExA
LoadBitmapA
SystemParametersInfoA
BeginPaint
GetClientRect
EndPaint
MoveWindow
gdi32
SetMapMode
LPtoDP
CreateDCA
DeleteObject
BitBlt
CreateCompatibleDC
SetTextColor
GetStockObject
SetViewportOrgEx
GetObjectA
SelectClipRgn
CreateRectRgn
GetClipRgn
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleBitmap
DeleteDC
GetDeviceCaps
CreateMetaFileA
SaveDC
SetWindowOrgEx
SetWindowExtEx
RestoreDC
CloseMetaFile
CreateRectRgnIndirect
SelectObject
SetBkMode
DeleteMetaFile
advapi32
RegCreateKeyExA
RegQueryValueExA
RegEnumKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
SHGetFileInfoA
ole32
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
StringFromCLSID
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
WriteClassStm
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleSaveToStream
oleaut32
SysAllocStringLen
OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
OleCreatePropertyFrame
SysAllocStringByteLen
SysStringByteLen
VariantChangeType
VariantClear
VariantInit
VarUI4FromStr
RegisterTypeLi
SysFreeString
UnRegisterTypeLi
LoadTypeLi
SysAllocString
libexpatw
ord52
ord31
ord53
ord18
ord25
ord21
ord16
libeay32
ord2254
ssleay32
ord21
ord141
ord12
ord110
ord74
ord183
ord6
ord43
ord86
ord87
ord75
ord58
ord78
ord108
ord96
ord77
ord48
ord8
ord142
shlwapi
PathFindExtensionA
comctl32
_TrackMouseEvent
DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer
Name
.text
Size
236KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
20KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=105, version=2067,
count=27, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=6, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=95, version=2179,
count=6, id=25, version=9210,
count=2, id=93, version=2067,
count=179, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=348, id=1, productName=Unmarked objects,
count=13, id=93, version=2179,
count=53, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/tvu/libeay32.dll
- IMPHASH 9a8fb143a010f07506356c42d6154f05
- SHA256 9dcdf0788656330a749bfd11db86422bc9b9ee7f08d9f48a95cd2569b99b6299
- MD5 2e07a92527c8ab899f5a42e1df5dc283
- SHA1 0ca898564a26aaa8eff2acb8473f2bd21f0d77ee
- SHA512 5cea182eb98a12f0248516414e1f9e0387611c69ed4d82c5c8af45c8d7d7ee8b9bcc31bb7a5783ba45151d11fcd4cb22087c3d11af744342d267db8259ca54a2
- SSDEEP 12288:jgvWBxJt6D3LdvvOtZMeQgwVPrZWjstZpqX1bIX2Wrh:Ne3F+Z3wpZdpqlbIGWrh
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
662490
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
wsock32
recvfrom
sendto
bind
listen
accept
ntohl
inet_ntoa
WSACancelBlockingCall
WSACleanup
WSAStartup
gethostbyname
getsockopt
getservbyname
ntohs
htons
htonl
socket
setsockopt
connect
send
WSASetLastError
recv
WSAGetLastError
shutdown
closesocket
gdi32
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetObjectA
BitBlt
GetBitmapBits
DeleteObject
DeleteDC
CreateDCA
advapi32
ReportEventA
DeregisterEventSource
RegisterEventSourceA
user32
MessageBoxA
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
msvcr71
_write
_fileno
_stat
_chmod
_getch
strstr
_read
sprintf
wcsstr
_vsnprintf
vfprintf
_iob
abort
free
realloc
malloc
memchr
time
localtime
gmtime
strncpy
_errno
memmove
isxdigit
isdigit
fprintf
_getpid
fputs
fclose
fread
fwrite
fflush
fopen
_setmode
ftell
fseek
fgets
atoi
perror
qsort
strcmp
getenv
strerror
strchr
isalnum
isspace
strncmp
strtoul
strrchr
tolower
isupper
sscanf
exit
strtol
signal
printf
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
kernel32
SetLastError
LoadLibraryA
FreeLibrary
FindClose
GetProcAddress
GetTickCount
GetThreadTimes
GetCurrentThread
ExitProcess
GetFileType
GetVersion
QueryPerformanceCounter
GetCurrentProcessId
GlobalMemoryStatus
CloseHandle
GetVersionExA
FlushConsoleInputBuffer
GetModuleHandleA
GetCurrentThreadId
FindNextFileA
GetLastError
FindFirstFileA
GetStdHandle
ACCESS_DESCRIPTION_free
ACCESS_DESCRIPTION_it
ACCESS_DESCRIPTION_new
AES_cbc_encrypt
AES_cfb128_encrypt
AES_cfb1_encrypt
AES_cfb8_encrypt
AES_cfbr_encrypt_block
AES_ctr128_encrypt
AES_decrypt
AES_ecb_encrypt
AES_encrypt
AES_ofb128_encrypt
AES_options
AES_set_decrypt_key
AES_set_encrypt_key
ASN1_ANY_it
ASN1_BIT_STRING_asn1_meth
ASN1_BIT_STRING_free
ASN1_BIT_STRING_get_bit
ASN1_BIT_STRING_it
ASN1_BIT_STRING_name_print
ASN1_BIT_STRING_new
ASN1_BIT_STRING_num_asc
ASN1_BIT_STRING_set
ASN1_BIT_STRING_set_asc
ASN1_BIT_STRING_set_bit
ASN1_BMPSTRING_free
ASN1_BMPSTRING_it
ASN1_BMPSTRING_new
ASN1_BOOLEAN_it
ASN1_ENUMERATED_free
ASN1_ENUMERATED_get
ASN1_ENUMERATED_it
ASN1_ENUMERATED_new
ASN1_ENUMERATED_set
ASN1_ENUMERATED_to_BN
ASN1_FBOOLEAN_it
ASN1_GENERALIZEDTIME_check
ASN1_GENERALIZEDTIME_free
ASN1_GENERALIZEDTIME_it
ASN1_GENERALIZEDTIME_new
ASN1_GENERALIZEDTIME_print
ASN1_GENERALIZEDTIME_set
ASN1_GENERALIZEDTIME_set_string
ASN1_GENERALSTRING_free
ASN1_GENERALSTRING_it
ASN1_GENERALSTRING_new
ASN1_HEADER_free
ASN1_HEADER_new
ASN1_IA5STRING_asn1_meth
ASN1_IA5STRING_free
ASN1_IA5STRING_it
ASN1_IA5STRING_new
ASN1_INTEGER_cmp
ASN1_INTEGER_dup
ASN1_INTEGER_free
ASN1_INTEGER_get
ASN1_INTEGER_it
ASN1_INTEGER_new
ASN1_INTEGER_set
ASN1_INTEGER_to_BN
ASN1_NULL_free
ASN1_NULL_it
ASN1_NULL_new
ASN1_OBJECT_create
ASN1_OBJECT_free
ASN1_OBJECT_it
ASN1_OBJECT_new
ASN1_OCTET_STRING_NDEF_it
ASN1_OCTET_STRING_cmp
ASN1_OCTET_STRING_dup
ASN1_OCTET_STRING_free
ASN1_OCTET_STRING_it
ASN1_OCTET_STRING_new
ASN1_OCTET_STRING_set
ASN1_PRINTABLESTRING_free
ASN1_PRINTABLESTRING_it
ASN1_PRINTABLESTRING_new
ASN1_PRINTABLE_free
ASN1_PRINTABLE_it
ASN1_PRINTABLE_new
ASN1_PRINTABLE_type
ASN1_SEQUENCE_it
ASN1_STRING_TABLE_add
ASN1_STRING_TABLE_cleanup
ASN1_STRING_TABLE_get
ASN1_STRING_cmp
ASN1_STRING_data
ASN1_STRING_dup
ASN1_STRING_encode
ASN1_STRING_free
ASN1_STRING_get_default_mask
ASN1_STRING_length
ASN1_STRING_length_set
ASN1_STRING_new
ASN1_STRING_print
ASN1_STRING_print_ex
ASN1_STRING_print_ex_fp
ASN1_STRING_set
ASN1_STRING_set_by_NID
ASN1_STRING_set_default_mask
ASN1_STRING_set_default_mask_asc
ASN1_STRING_to_UTF8
ASN1_STRING_type
ASN1_STRING_type_new
ASN1_T61STRING_free
ASN1_T61STRING_it
ASN1_T61STRING_new
ASN1_TBOOLEAN_it
ASN1_TIME_check
ASN1_TIME_free
ASN1_TIME_it
ASN1_TIME_new
ASN1_TIME_print
ASN1_TIME_set
ASN1_TIME_to_generalizedtime
ASN1_TYPE_free
ASN1_TYPE_get
ASN1_TYPE_get_int_octetstring
ASN1_TYPE_get_octetstring
ASN1_TYPE_new
ASN1_TYPE_set
ASN1_TYPE_set_int_octetstring
ASN1_TYPE_set_octetstring
ASN1_UNIVERSALSTRING_free
ASN1_UNIVERSALSTRING_it
ASN1_UNIVERSALSTRING_new
ASN1_UNIVERSALSTRING_to_string
ASN1_UTCTIME_check
ASN1_UTCTIME_cmp_time_t
ASN1_UTCTIME_free
ASN1_UTCTIME_it
ASN1_UTCTIME_new
ASN1_UTCTIME_print
ASN1_UTCTIME_set
ASN1_UTCTIME_set_string
ASN1_UTF8STRING_free
ASN1_UTF8STRING_it
ASN1_UTF8STRING_new
ASN1_VISIBLESTRING_free
ASN1_VISIBLESTRING_it
ASN1_VISIBLESTRING_new
ASN1_add_oid_module
ASN1_check_infinite_end
ASN1_const_check_infinite_end
ASN1_d2i_bio
ASN1_d2i_fp
ASN1_digest
ASN1_dup
ASN1_generate_nconf
ASN1_generate_v3
ASN1_get_object
ASN1_i2d_bio
ASN1_i2d_fp
ASN1_item_d2i
ASN1_item_d2i_bio
ASN1_item_d2i_fp
ASN1_item_digest
ASN1_item_dup
ASN1_item_ex_d2i
ASN1_item_ex_free
ASN1_item_ex_i2d
ASN1_item_ex_new
ASN1_item_free
ASN1_item_i2d
ASN1_item_i2d_bio
ASN1_item_i2d_fp
ASN1_item_ndef_i2d
ASN1_item_new
ASN1_item_pack
ASN1_item_sign
ASN1_item_unpack
ASN1_item_verify
ASN1_mbstring_copy
ASN1_mbstring_ncopy
ASN1_object_size
ASN1_pack_string
ASN1_parse
ASN1_parse_dump
ASN1_primitive_free
ASN1_primitive_new
ASN1_put_eoc
ASN1_put_object
ASN1_seq_pack
ASN1_seq_unpack
ASN1_sign
ASN1_tag2bit
ASN1_tag2str
ASN1_template_d2i
ASN1_template_free
ASN1_template_i2d
ASN1_template_new
ASN1_unpack_string
ASN1_verify
AUTHORITY_INFO_ACCESS_free
AUTHORITY_INFO_ACCESS_it
AUTHORITY_INFO_ACCESS_new
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BASIC_CONSTRAINTS_free
BASIC_CONSTRAINTS_it
BASIC_CONSTRAINTS_new
BF_cbc_encrypt
BF_cfb64_encrypt
BF_decrypt
BF_ecb_encrypt
BF_encrypt
BF_ofb64_encrypt
BF_options
BF_set_key
BIGNUM_it
BIO_accept
BIO_callback_ctrl
BIO_copy_next_retry
BIO_ctrl
BIO_ctrl_get_read_request
BIO_ctrl_get_write_guarantee
BIO_ctrl_pending
BIO_ctrl_reset_read_request
BIO_ctrl_wpending
BIO_debug_callback
BIO_dgram_non_fatal_error
BIO_dump
BIO_dump_cb
BIO_dump_fp
BIO_dump_indent
BIO_dump_indent_cb
BIO_dump_indent_fp
BIO_dup_chain
BIO_f_base64
BIO_f_buffer
BIO_f_cipher
BIO_f_md
BIO_f_nbio_test
BIO_f_null
BIO_f_reliable
BIO_fd_non_fatal_error
BIO_fd_should_retry
BIO_find_type
BIO_free
BIO_free_all
BIO_get_accept_socket
BIO_get_ex_data
BIO_get_ex_new_index
BIO_get_host_ip
BIO_get_port
BIO_get_retry_BIO
BIO_get_retry_reason
BIO_gethostbyname
BIO_gets
BIO_indent
BIO_int_ctrl
BIO_new
BIO_new_accept
BIO_new_bio_pair
BIO_new_connect
BIO_new_dgram
BIO_new_fd
BIO_new_file
BIO_new_fp
BIO_new_mem_buf
BIO_new_socket
BIO_next
BIO_nread
BIO_nread0
BIO_number_read
BIO_number_written
BIO_nwrite
BIO_nwrite0
BIO_pop
BIO_printf
BIO_ptr_ctrl
BIO_push
BIO_puts
BIO_read
BIO_s_accept
BIO_s_bio
BIO_s_connect
BIO_s_datagram
BIO_s_fd
BIO_s_file
BIO_s_mem
BIO_s_null
BIO_s_socket
BIO_set
BIO_set_cipher
BIO_set_ex_data
BIO_set_tcp_ndelay
BIO_snprintf
BIO_sock_cleanup
BIO_sock_error
BIO_sock_init
BIO_sock_non_fatal_error
BIO_sock_should_retry
BIO_socket_ioctl
BIO_socket_nbio
BIO_vfree
BIO_vprintf
BIO_vsnprintf
BIO_write
BN_BLINDING_convert
BN_BLINDING_convert_ex
BN_BLINDING_create_param
BN_BLINDING_free
BN_BLINDING_get_flags
BN_BLINDING_get_thread_id
BN_BLINDING_invert
BN_BLINDING_invert_ex
BN_BLINDING_new
BN_BLINDING_set_flags
BN_BLINDING_set_thread_id
BN_BLINDING_update
BN_CTX_end
BN_CTX_free
BN_CTX_get
BN_CTX_init
BN_CTX_new
BN_CTX_start
BN_GENCB_call
BN_GF2m_add
BN_GF2m_arr2poly
BN_GF2m_mod
BN_GF2m_mod_arr
BN_GF2m_mod_div
BN_GF2m_mod_div_arr
BN_GF2m_mod_exp
BN_GF2m_mod_exp_arr
BN_GF2m_mod_inv
BN_GF2m_mod_inv_arr
BN_GF2m_mod_mul
BN_GF2m_mod_mul_arr
BN_GF2m_mod_solve_quad
BN_GF2m_mod_solve_quad_arr
BN_GF2m_mod_sqr
BN_GF2m_mod_sqr_arr
BN_GF2m_mod_sqrt
BN_GF2m_mod_sqrt_arr
BN_GF2m_poly2arr
BN_MONT_CTX_copy
BN_MONT_CTX_free
BN_MONT_CTX_init
BN_MONT_CTX_new
BN_MONT_CTX_set
BN_MONT_CTX_set_locked
BN_RECP_CTX_free
BN_RECP_CTX_init
BN_RECP_CTX_new
BN_RECP_CTX_set
BN_add
BN_add_word
BN_bin2bn
BN_bn2bin
BN_bn2dec
BN_bn2hex
BN_bn2mpi
BN_bntest_rand
BN_clear
BN_clear_bit
BN_clear_free
BN_cmp
BN_copy
BN_dec2bn
BN_div
BN_div_recp
BN_div_word
BN_dup
BN_exp
BN_free
BN_from_montgomery
BN_gcd
BN_generate_prime
BN_generate_prime_ex
BN_get0_nist_prime_192
BN_get0_nist_prime_224
BN_get0_nist_prime_256
BN_get0_nist_prime_384
BN_get0_nist_prime_521
BN_get_params
BN_get_word
BN_hex2bn
BN_init
BN_is_bit_set
BN_is_prime
BN_is_prime_ex
BN_is_prime_fasttest
BN_is_prime_fasttest_ex
BN_kronecker
BN_lshift
BN_lshift1
BN_mask_bits
BN_mod_add
BN_mod_add_quick
BN_mod_exp
BN_mod_exp2_mont
BN_mod_exp_mont
BN_mod_exp_mont_consttime
BN_mod_exp_mont_word
BN_mod_exp_recp
BN_mod_exp_simple
BN_mod_inverse
BN_mod_lshift
BN_mod_lshift1
BN_mod_lshift1_quick
BN_mod_lshift_quick
BN_mod_mul
BN_mod_mul_montgomery
BN_mod_mul_reciprocal
BN_mod_sqr
BN_mod_sqrt
BN_mod_sub
BN_mod_sub_quick
BN_mod_word
BN_mpi2bn
BN_mul
BN_mul_word
BN_new
BN_nist_mod_192
BN_nist_mod_224
BN_nist_mod_256
BN_nist_mod_384
BN_nist_mod_521
BN_nnmod
BN_num_bits
BN_num_bits_word
BN_options
BN_print
BN_print_fp
BN_pseudo_rand
BN_pseudo_rand_range
BN_rand
BN_rand_range
BN_reciprocal
BN_rshift
BN_rshift1
BN_set_bit
BN_set_negative
BN_set_params
BN_set_word
BN_sqr
BN_sub
BN_sub_word
BN_swap
BN_to_ASN1_ENUMERATED
BN_to_ASN1_INTEGER
BN_uadd
BN_ucmp
BN_usub
BN_value_one
BUF_MEM_free
BUF_MEM_grow
BUF_MEM_grow_clean
BUF_MEM_new
BUF_memdup
BUF_strdup
BUF_strlcat
BUF_strlcpy
BUF_strndup
CAST_cbc_encrypt
CAST_cfb64_encrypt
CAST_decrypt
CAST_ecb_encrypt
CAST_encrypt
CAST_ofb64_encrypt
CAST_set_key
CBIGNUM_it
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
COMP_CTX_free
COMP_CTX_new
COMP_compress_block
COMP_expand_block
COMP_rle
COMP_zlib
CONF_dump_bio
CONF_dump_fp
CONF_free
CONF_get1_default_config_file
CONF_get_number
CONF_get_section
CONF_get_string
CONF_imodule_get_flags
CONF_imodule_get_module
CONF_imodule_get_name
CONF_imodule_get_usr_data
CONF_imodule_get_value
CONF_imodule_set_flags
CONF_imodule_set_usr_data
CONF_load
CONF_load_bio
CONF_load_fp
CONF_module_add
CONF_module_get_usr_data
CONF_module_set_usr_data
CONF_modules_finish
CONF_modules_free
CONF_modules_load
CONF_modules_load_file
CONF_modules_unload
CONF_parse_list
CONF_set_default_method
CONF_set_nconf
CRL_DIST_POINTS_free
CRL_DIST_POINTS_it
CRL_DIST_POINTS_new
CRYPTO_add_lock
CRYPTO_cleanup_all_ex_data
CRYPTO_dbg_free
CRYPTO_dbg_get_options
CRYPTO_dbg_malloc
CRYPTO_dbg_realloc
CRYPTO_dbg_set_options
CRYPTO_destroy_dynlockid
CRYPTO_dup_ex_data
CRYPTO_ex_data_new_class
CRYPTO_free
CRYPTO_free_ex_data
CRYPTO_free_locked
CRYPTO_get_add_lock_callback
CRYPTO_get_dynlock_create_callback
CRYPTO_get_dynlock_destroy_callback
CRYPTO_get_dynlock_lock_callback
CRYPTO_get_dynlock_value
CRYPTO_get_ex_data
CRYPTO_get_ex_data_implementation
CRYPTO_get_ex_new_index
CRYPTO_get_id_callback
CRYPTO_get_lock_name
CRYPTO_get_locked_mem_ex_functions
CRYPTO_get_locked_mem_functions
CRYPTO_get_locking_callback
CRYPTO_get_mem_debug_functions
CRYPTO_get_mem_debug_options
CRYPTO_get_mem_ex_functions
CRYPTO_get_mem_functions
CRYPTO_get_new_dynlockid
CRYPTO_get_new_lockid
CRYPTO_is_mem_check_on
CRYPTO_lock
CRYPTO_malloc
CRYPTO_malloc_locked
CRYPTO_mem_ctrl
CRYPTO_mem_leaks
CRYPTO_mem_leaks_cb
CRYPTO_mem_leaks_fp
CRYPTO_new_ex_data
CRYPTO_num_locks
CRYPTO_pop_info
CRYPTO_push_info_
CRYPTO_realloc
CRYPTO_realloc_clean
CRYPTO_remalloc
CRYPTO_remove_all_info
CRYPTO_set_add_lock_callback
CRYPTO_set_dynlock_create_callback
CRYPTO_set_dynlock_destroy_callback
CRYPTO_set_dynlock_lock_callback
CRYPTO_set_ex_data
CRYPTO_set_ex_data_implementation
CRYPTO_set_id_callback
CRYPTO_set_locked_mem_ex_functions
CRYPTO_set_locked_mem_functions
CRYPTO_set_locking_callback
CRYPTO_set_mem_debug_functions
CRYPTO_set_mem_debug_options
CRYPTO_set_mem_ex_functions
CRYPTO_set_mem_functions
CRYPTO_thread_id
DES_cbc_cksum
DES_cbc_encrypt
DES_cfb64_encrypt
DES_cfb_encrypt
DES_check_key_parity
DES_crypt
DES_decrypt3
DES_ecb3_encrypt
DES_ecb_encrypt
DES_ede3_cbc_encrypt
DES_ede3_cbcm_encrypt
DES_ede3_cfb64_encrypt
DES_ede3_cfb_encrypt
DES_ede3_ofb64_encrypt
DES_enc_read
DES_enc_write
DES_encrypt1
DES_encrypt2
DES_encrypt3
DES_fcrypt
DES_is_weak_key
DES_key_sched
DES_ncbc_encrypt
DES_ofb64_encrypt
DES_ofb_encrypt
DES_options
DES_pcbc_encrypt
DES_quad_cksum
DES_random_key
DES_read_2passwords
DES_read_password
DES_set_key
DES_set_key_checked
DES_set_key_unchecked
DES_set_odd_parity
DES_string_to_2keys
DES_string_to_key
DES_xcbc_encrypt
DES_xwhite_in2out
DH_OpenSSL
DH_check
DH_check_pub_key
DH_compute_key
DH_free
DH_generate_key
DH_generate_parameters
DH_generate_parameters_ex
DH_get_default_method
DH_get_ex_data
DH_get_ex_new_index
DH_new
DH_new_method
DH_set_default_method
DH_set_ex_data
DH_set_method
DH_size
DH_up_ref
DHparams_print
DHparams_print_fp
DIRECTORYSTRING_free
DIRECTORYSTRING_it
DIRECTORYSTRING_new
DISPLAYTEXT_free
DISPLAYTEXT_it
DISPLAYTEXT_new
DIST_POINT_NAME_free
DIST_POINT_NAME_it
DIST_POINT_NAME_new
DIST_POINT_free
DIST_POINT_it
DIST_POINT_new
DSA_OpenSSL
DSA_SIG_free
DSA_SIG_new
DSA_do_sign
DSA_do_verify
DSA_dup_DH
DSA_free
DSA_generate_key
DSA_generate_parameters
DSA_generate_parameters_ex
DSA_get_default_method
DSA_get_ex_data
DSA_get_ex_new_index
DSA_new
DSA_new_method
DSA_print
DSA_print_fp
DSA_set_default_method
DSA_set_ex_data
DSA_set_method
DSA_sign
DSA_sign_setup
DSA_size
DSA_up_ref
DSA_verify
DSAparams_print
DSAparams_print_fp
DSO_METHOD_dl
DSO_METHOD_dlfcn
DSO_METHOD_null
DSO_METHOD_openssl
DSO_METHOD_vms
DSO_METHOD_win32
DSO_bind_func
DSO_bind_var
DSO_convert_filename
DSO_ctrl
DSO_flags
DSO_free
DSO_get_default_method
DSO_get_filename
DSO_get_loaded_filename
DSO_get_method
DSO_load
DSO_merge
DSO_new
DSO_new_method
DSO_set_default_method
DSO_set_filename
DSO_set_method
DSO_set_name_converter
DSO_up_ref
ECDH_OpenSSL
ECDH_compute_key
ECDH_get_default_method
ECDH_get_ex_data
ECDH_get_ex_new_index
ECDH_set_default_method
ECDH_set_ex_data
ECDH_set_method
ECDSA_OpenSSL
ECDSA_SIG_free
ECDSA_SIG_new
ECDSA_do_sign
ECDSA_do_sign_ex
ECDSA_do_verify
ECDSA_get_default_method
ECDSA_get_ex_data
ECDSA_get_ex_new_index
ECDSA_set_default_method
ECDSA_set_ex_data
ECDSA_set_method
ECDSA_sign
ECDSA_sign_ex
ECDSA_sign_setup
ECDSA_size
ECDSA_verify
ECPKParameters_print
ECPKParameters_print_fp
ECParameters_print
ECParameters_print_fp
EC_GF2m_simple_method
EC_GFp_mont_method
EC_GFp_nist_method
EC_GFp_simple_method
EC_GROUP_check
EC_GROUP_check_discriminant
EC_GROUP_clear_free
EC_GROUP_cmp
EC_GROUP_copy
EC_GROUP_dup
EC_GROUP_free
EC_GROUP_get0_generator
EC_GROUP_get0_seed
EC_GROUP_get_asn1_flag
EC_GROUP_get_basis_type
EC_GROUP_get_cofactor
EC_GROUP_get_curve_GF2m
EC_GROUP_get_curve_GFp
EC_GROUP_get_curve_name
EC_GROUP_get_degree
EC_GROUP_get_order
EC_GROUP_get_pentanomial_basis
EC_GROUP_get_point_conversion_form
EC_GROUP_get_seed_len
EC_GROUP_get_trinomial_basis
EC_GROUP_have_precompute_mult
EC_GROUP_method_of
EC_GROUP_new
EC_GROUP_new_by_curve_name
EC_GROUP_new_curve_GF2m
EC_GROUP_new_curve_GFp
EC_GROUP_precompute_mult
EC_GROUP_set_asn1_flag
EC_GROUP_set_curve_GF2m
EC_GROUP_set_curve_GFp
EC_GROUP_set_curve_name
EC_GROUP_set_generator
EC_GROUP_set_point_conversion_form
EC_GROUP_set_seed
EC_KEY_check_key
EC_KEY_copy
EC_KEY_dup
EC_KEY_free
EC_KEY_generate_key
EC_KEY_get0_group
EC_KEY_get0_private_key
EC_KEY_get0_public_key
EC_KEY_get_conv_form
EC_KEY_get_enc_flags
EC_KEY_get_key_method_data
EC_KEY_insert_key_method_data
EC_KEY_new
EC_KEY_new_by_curve_name
EC_KEY_precompute_mult
EC_KEY_print
EC_KEY_print_fp
EC_KEY_set_asn1_flag
EC_KEY_set_conv_form
EC_KEY_set_enc_flags
EC_KEY_set_group
EC_KEY_set_private_key
EC_KEY_set_public_key
EC_KEY_up_ref
EC_METHOD_get_field_type
EC_POINT_add
EC_POINT_bn2point
EC_POINT_clear_free
EC_POINT_cmp
EC_POINT_copy
EC_POINT_dbl
EC_POINT_dup
EC_POINT_free
EC_POINT_get_Jprojective_coordinates_GFp
EC_POINT_get_affine_coordinates_GF2m
EC_POINT_get_affine_coordinates_GFp
EC_POINT_hex2point
EC_POINT_invert
EC_POINT_is_at_infinity
EC_POINT_is_on_curve
EC_POINT_make_affine
EC_POINT_method_of
EC_POINT_mul
EC_POINT_new
EC_POINT_oct2point
EC_POINT_point2bn
EC_POINT_point2hex
EC_POINT_point2oct
EC_POINT_set_Jprojective_coordinates_GFp
EC_POINT_set_affine_coordinates_GF2m
EC_POINT_set_affine_coordinates_GFp
EC_POINT_set_compressed_coordinates_GF2m
EC_POINT_set_compressed_coordinates_GFp
EC_POINT_set_to_infinity
EC_POINTs_make_affine
EC_POINTs_mul
EC_get_builtin_curves
EDIPARTYNAME_free
EDIPARTYNAME_it
EDIPARTYNAME_new
ENGINE_add
ENGINE_add_conf_module
ENGINE_by_id
ENGINE_cleanup
ENGINE_cmd_is_executable
ENGINE_ctrl
ENGINE_ctrl_cmd
ENGINE_ctrl_cmd_string
ENGINE_finish
ENGINE_free
ENGINE_get_DH
ENGINE_get_DSA
ENGINE_get_ECDH
ENGINE_get_ECDSA
ENGINE_get_RAND
ENGINE_get_RSA
ENGINE_get_STORE
ENGINE_get_cipher
ENGINE_get_cipher_engine
ENGINE_get_ciphers
ENGINE_get_cmd_defns
ENGINE_get_ctrl_function
ENGINE_get_default_DH
ENGINE_get_default_DSA
ENGINE_get_default_ECDH
ENGINE_get_default_ECDSA
ENGINE_get_default_RAND
ENGINE_get_default_RSA
ENGINE_get_destroy_function
ENGINE_get_digest
ENGINE_get_digest_engine
ENGINE_get_digests
ENGINE_get_ex_data
ENGINE_get_ex_new_index
ENGINE_get_finish_function
ENGINE_get_first
ENGINE_get_flags
ENGINE_get_id
ENGINE_get_init_function
ENGINE_get_last
ENGINE_get_load_privkey_function
ENGINE_get_load_pubkey_function
ENGINE_get_name
ENGINE_get_next
ENGINE_get_prev
ENGINE_get_static_state
ENGINE_get_table_flags
ENGINE_init
ENGINE_load_4758cca
ENGINE_load_aep
ENGINE_load_atalla
ENGINE_load_builtin_engines
ENGINE_load_chil
ENGINE_load_cryptodev
ENGINE_load_cswift
ENGINE_load_dynamic
ENGINE_load_nuron
ENGINE_load_openssl
ENGINE_load_padlock
ENGINE_load_private_key
ENGINE_load_public_key
ENGINE_load_sureware
ENGINE_load_ubsec
ENGINE_new
ENGINE_register_DH
ENGINE_register_DSA
ENGINE_register_ECDH
ENGINE_register_ECDSA
ENGINE_register_RAND
ENGINE_register_RSA
ENGINE_register_STORE
ENGINE_register_all_DH
ENGINE_register_all_DSA
ENGINE_register_all_ECDH
ENGINE_register_all_ECDSA
ENGINE_register_all_RAND
ENGINE_register_all_RSA
ENGINE_register_all_STORE
ENGINE_register_all_ciphers
ENGINE_register_all_complete
ENGINE_register_all_digests
ENGINE_register_ciphers
ENGINE_register_complete
ENGINE_register_digests
ENGINE_remove
ENGINE_set_DH
ENGINE_set_DSA
ENGINE_set_ECDH
ENGINE_set_ECDSA
ENGINE_set_RAND
ENGINE_set_RSA
ENGINE_set_STORE
ENGINE_set_ciphers
ENGINE_set_cmd_defns
ENGINE_set_ctrl_function
ENGINE_set_default
ENGINE_set_default_DH
ENGINE_set_default_DSA
ENGINE_set_default_ECDH
ENGINE_set_default_ECDSA
ENGINE_set_default_RAND
ENGINE_set_default_RSA
ENGINE_set_default_ciphers
ENGINE_set_default_digests
ENGINE_set_default_string
ENGINE_set_destroy_function
ENGINE_set_digests
ENGINE_set_ex_data
ENGINE_set_finish_function
ENGINE_set_flags
ENGINE_set_id
ENGINE_set_init_function
ENGINE_set_load_privkey_function
ENGINE_set_load_pubkey_function
ENGINE_set_name
ENGINE_set_table_flags
ENGINE_unregister_DH
ENGINE_unregister_DSA
ENGINE_unregister_ECDH
ENGINE_unregister_ECDSA
ENGINE_unregister_RAND
ENGINE_unregister_RSA
ENGINE_unregister_STORE
ENGINE_unregister_ciphers
ENGINE_unregister_digests
ENGINE_up_ref
ERR_add_error_data
ERR_clear_error
ERR_error_string
ERR_error_string_n
ERR_free_strings
ERR_func_error_string
ERR_get_err_state_table
ERR_get_error
ERR_get_error_line
ERR_get_error_line_data
ERR_get_implementation
ERR_get_next_error_library
ERR_get_state
ERR_get_string_table
ERR_lib_error_string
ERR_load_ASN1_strings
ERR_load_BIO_strings
ERR_load_BN_strings
ERR_load_BUF_strings
ERR_load_COMP_strings
ERR_load_CONF_strings
ERR_load_CRYPTO_strings
ERR_load_DH_strings
ERR_load_DSA_strings
ERR_load_DSO_strings
ERR_load_ECDH_strings
ERR_load_ECDSA_strings
ERR_load_EC_strings
ERR_load_ENGINE_strings
ERR_load_ERR_strings
ERR_load_EVP_strings
ERR_load_OBJ_strings
ERR_load_OCSP_strings
ERR_load_PEM_strings
ERR_load_PKCS12_strings
ERR_load_PKCS7_strings
ERR_load_RAND_strings
ERR_load_RSA_strings
ERR_load_STORE_strings
ERR_load_UI_strings
ERR_load_X509V3_strings
ERR_load_X509_strings
ERR_load_crypto_strings
ERR_load_strings
ERR_peek_error
ERR_peek_error_line
ERR_peek_error_line_data
ERR_peek_last_error
ERR_peek_last_error_line
ERR_peek_last_error_line_data
ERR_pop_to_mark
ERR_print_errors
ERR_print_errors_cb
ERR_print_errors_fp
ERR_put_error
ERR_reason_error_string
ERR_release_err_state_table
ERR_remove_state
ERR_set_error_data
ERR_set_implementation
ERR_set_mark
ERR_unload_strings
EVP_BytesToKey
EVP_CIPHER_CTX_cleanup
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_init
EVP_CIPHER_CTX_new
EVP_CIPHER_CTX_rand_key
EVP_CIPHER_CTX_set_key_length
EVP_CIPHER_CTX_set_padding
EVP_CIPHER_asn1_to_param
EVP_CIPHER_get_asn1_iv
EVP_CIPHER_param_to_asn1
EVP_CIPHER_set_asn1_iv
EVP_CIPHER_type
EVP_CipherFinal
EVP_CipherFinal_ex
EVP_CipherInit
EVP_CipherInit_ex
EVP_CipherUpdate
EVP_DecodeBlock
EVP_DecodeFinal
EVP_DecodeInit
EVP_DecodeUpdate
EVP_DecryptFinal
EVP_DecryptFinal_ex
EVP_DecryptInit
EVP_DecryptInit_ex
EVP_DecryptUpdate
EVP_Digest
EVP_DigestFinal
EVP_DigestFinal_ex
EVP_DigestInit
EVP_DigestInit_ex
EVP_DigestUpdate
EVP_EncodeBlock
EVP_EncodeFinal
EVP_EncodeInit
EVP_EncodeUpdate
EVP_EncryptFinal
EVP_EncryptFinal_ex
EVP_EncryptInit
EVP_EncryptInit_ex
EVP_EncryptUpdate
EVP_MD_CTX_cleanup
EVP_MD_CTX_copy
EVP_MD_CTX_copy_ex
EVP_MD_CTX_create
EVP_MD_CTX_destroy
EVP_MD_CTX_init
EVP_OpenFinal
EVP_OpenInit
EVP_PBE_CipherInit
EVP_PBE_alg_add
EVP_PBE_cleanup
EVP_PKCS82PKEY
EVP_PKEY2PKCS8
EVP_PKEY2PKCS8_broken
EVP_PKEY_add1_attr
EVP_PKEY_add1_attr_by_NID
EVP_PKEY_add1_attr_by_OBJ
EVP_PKEY_add1_attr_by_txt
EVP_PKEY_assign
EVP_PKEY_bits
EVP_PKEY_cmp
EVP_PKEY_cmp_parameters
EVP_PKEY_copy_parameters
EVP_PKEY_decrypt
EVP_PKEY_delete_attr
EVP_PKEY_encrypt
EVP_PKEY_free
EVP_PKEY_get1_DH
EVP_PKEY_get1_DSA
EVP_PKEY_get1_EC_KEY
EVP_PKEY_get1_RSA
EVP_PKEY_get_attr
EVP_PKEY_get_attr_by_NID
EVP_PKEY_get_attr_by_OBJ
EVP_PKEY_get_attr_count
EVP_PKEY_missing_parameters
EVP_PKEY_new
EVP_PKEY_save_parameters
EVP_PKEY_set1_DH
EVP_PKEY_set1_DSA
EVP_PKEY_set1_EC_KEY
EVP_PKEY_set1_RSA
EVP_PKEY_size
EVP_PKEY_type
EVP_SealFinal
EVP_SealInit
EVP_SignFinal
EVP_VerifyFinal
EVP_add_cipher
EVP_add_digest
EVP_aes_128_cbc
EVP_aes_128_cfb1
EVP_aes_128_cfb128
EVP_aes_128_cfb8
EVP_aes_128_ecb
EVP_aes_128_ofb
EVP_aes_192_cbc
EVP_aes_192_cfb1
EVP_aes_192_cfb128
EVP_aes_192_cfb8
EVP_aes_192_ecb
EVP_aes_192_ofb
EVP_aes_256_cbc
EVP_aes_256_cfb1
EVP_aes_256_cfb128
EVP_aes_256_cfb8
EVP_aes_256_ecb
EVP_aes_256_ofb
EVP_bf_cbc
EVP_bf_cfb64
EVP_bf_ecb
EVP_bf_ofb
EVP_cast5_cbc
EVP_cast5_cfb64
EVP_cast5_ecb
EVP_cast5_ofb
EVP_cleanup
EVP_des_cbc
EVP_des_cfb1
EVP_des_cfb64
EVP_des_cfb8
EVP_des_ecb
EVP_des_ede
EVP_des_ede3
EVP_des_ede3_cbc
EVP_des_ede3_cfb1
EVP_des_ede3_cfb64
EVP_des_ede3_cfb8
EVP_des_ede3_ecb
EVP_des_ede3_ofb
EVP_des_ede_cbc
EVP_des_ede_cfb64
EVP_des_ede_ecb
EVP_des_ede_ofb
EVP_des_ofb
EVP_desx_cbc
EVP_dss
EVP_dss1
EVP_ecdsa
EVP_enc_null
EVP_get_cipherbyname
EVP_get_digestbyname
EVP_get_pw_prompt
EVP_idea_cbc
EVP_idea_cfb64
EVP_idea_ecb
EVP_idea_ofb
EVP_md2
EVP_md4
EVP_md5
EVP_md_null
EVP_rc2_40_cbc
EVP_rc2_64_cbc
EVP_rc2_cbc
EVP_rc2_cfb64
EVP_rc2_ecb
EVP_rc2_ofb
EVP_rc4
EVP_rc4_40
EVP_read_pw_string
EVP_ripemd160
EVP_set_pw_prompt
EVP_sha
EVP_sha1
EVP_sha224
EVP_sha256
EVP_sha384
EVP_sha512
EXTENDED_KEY_USAGE_free
EXTENDED_KEY_USAGE_it
EXTENDED_KEY_USAGE_new
GENERAL_NAMES_free
GENERAL_NAMES_it
GENERAL_NAMES_new
GENERAL_NAME_free
GENERAL_NAME_it
GENERAL_NAME_new
GENERAL_NAME_print
GENERAL_SUBTREE_free
GENERAL_SUBTREE_it
GENERAL_SUBTREE_new
HMAC
HMAC_CTX_cleanup
HMAC_CTX_init
HMAC_Final
HMAC_Init
HMAC_Init_ex
HMAC_Update
KRB5_APREQBODY_free
KRB5_APREQBODY_it
KRB5_APREQBODY_new
KRB5_APREQ_free
KRB5_APREQ_it
KRB5_APREQ_new
KRB5_AUTHDATA_free
KRB5_AUTHDATA_it
KRB5_AUTHDATA_new
KRB5_AUTHENTBODY_free
KRB5_AUTHENTBODY_it
KRB5_AUTHENTBODY_new
KRB5_AUTHENT_free
KRB5_AUTHENT_it
KRB5_AUTHENT_new
KRB5_CHECKSUM_free
KRB5_CHECKSUM_it
KRB5_CHECKSUM_new
KRB5_ENCDATA_free
KRB5_ENCDATA_it
KRB5_ENCDATA_new
KRB5_ENCKEY_free
KRB5_ENCKEY_it
KRB5_ENCKEY_new
KRB5_PRINCNAME_free
KRB5_PRINCNAME_it
KRB5_PRINCNAME_new
KRB5_TICKET_free
KRB5_TICKET_it
KRB5_TICKET_new
KRB5_TKTBODY_free
KRB5_TKTBODY_it
KRB5_TKTBODY_new
LONG_it
MD2
MD2_Final
MD2_Init
MD2_Update
MD2_options
MD4
MD4_Final
MD4_Init
MD4_Transform
MD4_Update
MD5
MD5_Final
MD5_Init
MD5_Transform
MD5_Update
NAME_CONSTRAINTS_free
NAME_CONSTRAINTS_it
NAME_CONSTRAINTS_new
NCONF_WIN32
NCONF_default
NCONF_dump_bio
NCONF_dump_fp
NCONF_free
NCONF_free_data
NCONF_get_number_e
NCONF_get_section
NCONF_get_string
NCONF_load
NCONF_load_bio
NCONF_load_fp
NCONF_new
NETSCAPE_CERT_SEQUENCE_free
NETSCAPE_CERT_SEQUENCE_it
NETSCAPE_CERT_SEQUENCE_new
NETSCAPE_SPKAC_free
NETSCAPE_SPKAC_it
NETSCAPE_SPKAC_new
NETSCAPE_SPKI_b64_decode
NETSCAPE_SPKI_b64_encode
NETSCAPE_SPKI_free
NETSCAPE_SPKI_get_pubkey
NETSCAPE_SPKI_it
NETSCAPE_SPKI_new
NETSCAPE_SPKI_print
NETSCAPE_SPKI_set_pubkey
NETSCAPE_SPKI_sign
NETSCAPE_SPKI_verify
NOTICEREF_free
NOTICEREF_it
NOTICEREF_new
OBJ_NAME_add
OBJ_NAME_cleanup
OBJ_NAME_do_all
OBJ_NAME_do_all_sorted
OBJ_NAME_get
OBJ_NAME_init
OBJ_NAME_new_index
OBJ_NAME_remove
OBJ_add_object
OBJ_bsearch
OBJ_bsearch_ex
OBJ_cleanup
OBJ_cmp
OBJ_create
OBJ_create_objects
OBJ_dup
OBJ_ln2nid
OBJ_new_nid
OBJ_nid2ln
OBJ_nid2obj
OBJ_nid2sn
OBJ_obj2nid
OBJ_obj2txt
OBJ_sn2nid
OBJ_txt2nid
OBJ_txt2obj
OCSP_BASICRESP_add1_ext_i2d
OCSP_BASICRESP_add_ext
OCSP_BASICRESP_delete_ext
OCSP_BASICRESP_free
OCSP_BASICRESP_get1_ext_d2i
OCSP_BASICRESP_get_ext
OCSP_BASICRESP_get_ext_by_NID
OCSP_BASICRESP_get_ext_by_OBJ
OCSP_BASICRESP_get_ext_by_critical
OCSP_BASICRESP_get_ext_count
OCSP_BASICRESP_it
OCSP_BASICRESP_new
OCSP_CERTID_free
OCSP_CERTID_it
OCSP_CERTID_new
OCSP_CERTSTATUS_free
OCSP_CERTSTATUS_it
OCSP_CERTSTATUS_new
OCSP_CRLID_free
OCSP_CRLID_it
OCSP_CRLID_new
OCSP_ONEREQ_add1_ext_i2d
OCSP_ONEREQ_add_ext
OCSP_ONEREQ_delete_ext
OCSP_ONEREQ_free
OCSP_ONEREQ_get1_ext_d2i
OCSP_ONEREQ_get_ext
OCSP_ONEREQ_get_ext_by_NID
OCSP_ONEREQ_get_ext_by_OBJ
OCSP_ONEREQ_get_ext_by_critical
OCSP_ONEREQ_get_ext_count
OCSP_ONEREQ_it
OCSP_ONEREQ_new
OCSP_REQINFO_free
OCSP_REQINFO_it
OCSP_REQINFO_new
OCSP_REQUEST_add1_ext_i2d
OCSP_REQUEST_add_ext
OCSP_REQUEST_delete_ext
OCSP_REQUEST_free
OCSP_REQUEST_get1_ext_d2i
OCSP_REQUEST_get_ext
OCSP_REQUEST_get_ext_by_NID
OCSP_REQUEST_get_ext_by_OBJ
OCSP_REQUEST_get_ext_by_critical
OCSP_REQUEST_get_ext_count
OCSP_REQUEST_it
OCSP_REQUEST_new
OCSP_REQUEST_print
OCSP_RESPBYTES_free
OCSP_RESPBYTES_it
OCSP_RESPBYTES_new
OCSP_RESPDATA_free
OCSP_RESPDATA_it
OCSP_RESPDATA_new
OCSP_RESPID_free
OCSP_RESPID_it
OCSP_RESPID_new
OCSP_RESPONSE_free
OCSP_RESPONSE_it
OCSP_RESPONSE_new
OCSP_RESPONSE_print
OCSP_REVOKEDINFO_free
OCSP_REVOKEDINFO_it
OCSP_REVOKEDINFO_new
OCSP_SERVICELOC_free
OCSP_SERVICELOC_it
OCSP_SERVICELOC_new
OCSP_SIGNATURE_free
OCSP_SIGNATURE_it
OCSP_SIGNATURE_new
OCSP_SINGLERESP_add1_ext_i2d
OCSP_SINGLERESP_add_ext
OCSP_SINGLERESP_delete_ext
OCSP_SINGLERESP_free
OCSP_SINGLERESP_get1_ext_d2i
OCSP_SINGLERESP_get_ext
OCSP_SINGLERESP_get_ext_by_NID
OCSP_SINGLERESP_get_ext_by_OBJ
OCSP_SINGLERESP_get_ext_by_critical
OCSP_SINGLERESP_get_ext_count
OCSP_SINGLERESP_it
OCSP_SINGLERESP_new
OCSP_accept_responses_new
OCSP_archive_cutoff_new
OCSP_basic_add1_cert
OCSP_basic_add1_nonce
OCSP_basic_add1_status
OCSP_basic_sign
OCSP_basic_verify
OCSP_cert_id_new
OCSP_cert_status_str
OCSP_cert_to_id
OCSP_check_nonce
OCSP_check_validity
OCSP_copy_nonce
OCSP_crlID_new
OCSP_crl_reason_str
OCSP_id_cmp
OCSP_id_get0_info
OCSP_id_issuer_cmp
OCSP_onereq_get0_id
OCSP_parse_url
OCSP_request_add0_id
OCSP_request_add1_cert
OCSP_request_add1_nonce
OCSP_request_is_signed
OCSP_request_onereq_count
OCSP_request_onereq_get0
OCSP_request_set1_name
OCSP_request_sign
OCSP_request_verify
OCSP_resp_count
OCSP_resp_find
OCSP_resp_find_status
OCSP_resp_get0
OCSP_response_create
OCSP_response_get1_basic
OCSP_response_status
OCSP_response_status_str
OCSP_sendreq_bio
OCSP_single_get0_status
OCSP_url_svcloc_new
OPENSSL_DIR_end
OPENSSL_DIR_read
OPENSSL_add_all_algorithms_conf
OPENSSL_add_all_algorithms_noconf
OPENSSL_cleanse
OPENSSL_config
OPENSSL_ia32cap_loc
OPENSSL_issetugid
OPENSSL_load_builtin_modules
OPENSSL_no_config
OSSL_DES_version
OSSL_libdes_version
OTHERNAME_free
OTHERNAME_it
OTHERNAME_new
OpenSSLDie
OpenSSL_add_all_ciphers
OpenSSL_add_all_digests
PBE2PARAM_free
PBE2PARAM_it
PBE2PARAM_new
PBEPARAM_free
PBEPARAM_it
PBEPARAM_new
PBKDF2PARAM_free
PBKDF2PARAM_it
PBKDF2PARAM_new
PEM_ASN1_read
PEM_ASN1_read_bio
PEM_ASN1_write
PEM_ASN1_write_bio
PEM_SealFinal
PEM_SealInit
PEM_SealUpdate
PEM_SignFinal
PEM_SignInit
PEM_SignUpdate
PEM_X509_INFO_read
PEM_X509_INFO_read_bio
PEM_X509_INFO_write_bio
PEM_bytes_read_bio
PEM_def_callback
PEM_dek_info
PEM_do_header
PEM_get_EVP_CIPHER_INFO
PEM_proc_type
PEM_read
PEM_read_DHparams
PEM_read_DSAPrivateKey
PEM_read_DSA_PUBKEY
PEM_read_DSAparams
PEM_read_ECPKParameters
PEM_read_ECPrivateKey
PEM_read_EC_PUBKEY
PEM_read_NETSCAPE_CERT_SEQUENCE
PEM_read_PKCS7
PEM_read_PKCS8
PEM_read_PKCS8_PRIV_KEY_INFO
PEM_read_PUBKEY
PEM_read_PrivateKey
PEM_read_RSAPrivateKey
PEM_read_RSAPublicKey
PEM_read_RSA_PUBKEY
PEM_read_X509
PEM_read_X509_AUX
PEM_read_X509_CERT_PAIR
PEM_read_X509_CRL
PEM_read_X509_REQ
PEM_read_bio
PEM_read_bio_DHparams
PEM_read_bio_DSAPrivateKey
PEM_read_bio_DSA_PUBKEY
PEM_read_bio_DSAparams
PEM_read_bio_ECPKParameters
PEM_read_bio_ECPrivateKey
PEM_read_bio_EC_PUBKEY
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_read_bio_PKCS7
PEM_read_bio_PKCS8
PEM_read_bio_PKCS8_PRIV_KEY_INFO
PEM_read_bio_PUBKEY
PEM_read_bio_PrivateKey
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_RSA_PUBKEY
PEM_read_bio_X509
PEM_read_bio_X509_AUX
PEM_read_bio_X509_CERT_PAIR
PEM_read_bio_X509_CRL
PEM_read_bio_X509_REQ
PEM_write
PEM_write_DHparams
PEM_write_DSAPrivateKey
PEM_write_DSA_PUBKEY
PEM_write_DSAparams
PEM_write_ECPKParameters
PEM_write_ECPrivateKey
PEM_write_EC_PUBKEY
PEM_write_NETSCAPE_CERT_SEQUENCE
PEM_write_PKCS7
PEM_write_PKCS8
PEM_write_PKCS8PrivateKey
PEM_write_PKCS8PrivateKey_nid
PEM_write_PKCS8_PRIV_KEY_INFO
PEM_write_PUBKEY
PEM_write_PrivateKey
PEM_write_RSAPrivateKey
PEM_write_RSAPublicKey
PEM_write_RSA_PUBKEY
PEM_write_X509
PEM_write_X509_AUX
PEM_write_X509_CERT_PAIR
PEM_write_X509_CRL
PEM_write_X509_REQ
PEM_write_X509_REQ_NEW
PEM_write_bio
PEM_write_bio_DHparams
PEM_write_bio_DSAPrivateKey
PEM_write_bio_DSA_PUBKEY
PEM_write_bio_DSAparams
PEM_write_bio_ECPKParameters
PEM_write_bio_ECPrivateKey
PEM_write_bio_EC_PUBKEY
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS7
PEM_write_bio_PKCS8
PEM_write_bio_PKCS8PrivateKey
PEM_write_bio_PKCS8PrivateKey_nid
PEM_write_bio_PKCS8_PRIV_KEY_INFO
PEM_write_bio_PUBKEY
PEM_write_bio_PrivateKey
PEM_write_bio_RSAPrivateKey
PEM_write_bio_RSAPublicKey
PEM_write_bio_RSA_PUBKEY
PEM_write_bio_X509
PEM_write_bio_X509_AUX
PEM_write_bio_X509_CERT_PAIR
PEM_write_bio_X509_CRL
PEM_write_bio_X509_REQ
PEM_write_bio_X509_REQ_NEW
PKCS12_AUTHSAFES_it
PKCS12_BAGS_free
PKCS12_BAGS_it
PKCS12_BAGS_new
PKCS12_MAC_DATA_free
PKCS12_MAC_DATA_it
PKCS12_MAC_DATA_new
PKCS12_MAKE_KEYBAG
PKCS12_MAKE_SHKEYBAG
PKCS12_PBE_add
PKCS12_PBE_keyivgen
PKCS12_SAFEBAGS_it
PKCS12_SAFEBAG_free
PKCS12_SAFEBAG_it
PKCS12_SAFEBAG_new
PKCS12_add_CSPName_asc
PKCS12_add_cert
PKCS12_add_friendlyname_asc
PKCS12_add_friendlyname_uni
PKCS12_add_key
PKCS12_add_localkeyid
PKCS12_add_safe
PKCS12_add_safes
PKCS12_certbag2x509
PKCS12_certbag2x509crl
PKCS12_create
PKCS12_decrypt_skey
PKCS12_free
PKCS12_gen_mac
PKCS12_get_attr_gen
PKCS12_get_friendlyname
PKCS12_init
PKCS12_it
PKCS12_item_decrypt_d2i
PKCS12_item_i2d_encrypt
PKCS12_item_pack_safebag
PKCS12_key_gen_asc
PKCS12_key_gen_uni
PKCS12_new
PKCS12_newpass
PKCS12_pack_authsafes
PKCS12_pack_p7data
PKCS12_pack_p7encdata
PKCS12_parse
PKCS12_pbe_crypt
PKCS12_set_mac
PKCS12_setup_mac
PKCS12_unpack_authsafes
PKCS12_unpack_p7data
PKCS12_unpack_p7encdata
PKCS12_verify_mac
PKCS12_x5092certbag
PKCS12_x509crl2certbag
PKCS1_MGF1
PKCS5_PBE_add
PKCS5_PBE_keyivgen
PKCS5_PBKDF2_HMAC_SHA1
PKCS5_pbe2_set
PKCS5_pbe_set
PKCS5_v2_PBE_keyivgen
PKCS7_ATTR_SIGN_it
PKCS7_ATTR_VERIFY_it
PKCS7_DIGEST_free
PKCS7_DIGEST_it
PKCS7_DIGEST_new
PKCS7_ENCRYPT_free
PKCS7_ENCRYPT_it
PKCS7_ENCRYPT_new
PKCS7_ENC_CONTENT_free
PKCS7_ENC_CONTENT_it
PKCS7_ENC_CONTENT_new
PKCS7_ENVELOPE_free
PKCS7_ENVELOPE_it
PKCS7_ENVELOPE_new
PKCS7_ISSUER_AND_SERIAL_digest
PKCS7_ISSUER_AND_SERIAL_free
PKCS7_ISSUER_AND_SERIAL_it
PKCS7_ISSUER_AND_SERIAL_new
PKCS7_RECIP_INFO_free
PKCS7_RECIP_INFO_it
PKCS7_RECIP_INFO_new
PKCS7_RECIP_INFO_set
PKCS7_SIGNED_free
PKCS7_SIGNED_it
PKCS7_SIGNED_new
PKCS7_SIGNER_INFO_free
PKCS7_SIGNER_INFO_it
PKCS7_SIGNER_INFO_new
PKCS7_SIGNER_INFO_set
PKCS7_SIGN_ENVELOPE_free
PKCS7_SIGN_ENVELOPE_it
PKCS7_SIGN_ENVELOPE_new
PKCS7_add_attrib_smimecap
PKCS7_add_attribute
PKCS7_add_certificate
PKCS7_add_crl
PKCS7_add_recipient
PKCS7_add_recipient_info
PKCS7_add_signature
PKCS7_add_signed_attribute
PKCS7_add_signer
PKCS7_cert_from_signer_info
PKCS7_content_new
PKCS7_ctrl
PKCS7_dataDecode
PKCS7_dataFinal
PKCS7_dataInit
PKCS7_dataVerify
PKCS7_decrypt
PKCS7_digest_from_attributes
PKCS7_dup
PKCS7_encrypt
PKCS7_free
PKCS7_get0_signers
PKCS7_get_attribute
PKCS7_get_issuer_and_serial
PKCS7_get_signed_attribute
PKCS7_get_signer_info
PKCS7_get_smimecap
PKCS7_it
PKCS7_new
PKCS7_set0_type_other
PKCS7_set_attributes
PKCS7_set_cipher
PKCS7_set_content
PKCS7_set_digest
PKCS7_set_signed_attributes
PKCS7_set_type
PKCS7_sign
PKCS7_signatureVerify
PKCS7_simple_smimecap
PKCS7_verify
PKCS8_PRIV_KEY_INFO_free
PKCS8_PRIV_KEY_INFO_it
PKCS8_PRIV_KEY_INFO_new
PKCS8_add_keyusage
PKCS8_decrypt
PKCS8_encrypt
PKCS8_set_broken
PKEY_USAGE_PERIOD_free
PKEY_USAGE_PERIOD_it
PKEY_USAGE_PERIOD_new
POLICYINFO_free
POLICYINFO_it
POLICYINFO_new
POLICYQUALINFO_free
POLICYQUALINFO_it
POLICYQUALINFO_new
POLICY_CONSTRAINTS_free
POLICY_CONSTRAINTS_it
POLICY_CONSTRAINTS_new
POLICY_MAPPINGS_it
POLICY_MAPPING_free
POLICY_MAPPING_it
POLICY_MAPPING_new
PROXY_CERT_INFO_EXTENSION_free
PROXY_CERT_INFO_EXTENSION_it
PROXY_CERT_INFO_EXTENSION_new
PROXY_POLICY_free
PROXY_POLICY_it
PROXY_POLICY_new
RAND_SSLeay
RAND_add
RAND_bytes
RAND_cleanup
RAND_egd
RAND_egd_bytes
RAND_event
RAND_file_name
RAND_get_rand_method
RAND_load_file
RAND_poll
RAND_pseudo_bytes
RAND_query_egd_bytes
RAND_screen
RAND_seed
RAND_set_rand_engine
RAND_set_rand_method
RAND_status
RAND_write_file
RC2_cbc_encrypt
RC2_cfb64_encrypt
RC2_decrypt
RC2_ecb_encrypt
RC2_encrypt
RC2_ofb64_encrypt
RC2_set_key
RC4
RC4_options
RC4_set_key
RIPEMD160
RIPEMD160_Final
RIPEMD160_Init
RIPEMD160_Transform
RIPEMD160_Update
RSAPrivateKey_asn1_meth
RSAPrivateKey_dup
RSAPrivateKey_it
RSAPublicKey_dup
RSAPublicKey_it
RSA_PKCS1_SSLeay
RSA_X931_hash_id
RSA_blinding_off
RSA_blinding_on
RSA_check_key
RSA_flags
RSA_free
RSA_generate_key
RSA_generate_key_ex
RSA_get_default_method
RSA_get_ex_data
RSA_get_ex_new_index
RSA_get_method
RSA_memory_lock
RSA_new
RSA_new_method
RSA_null_method
RSA_padding_add_PKCS1_OAEP
RSA_padding_add_PKCS1_PSS
RSA_padding_add_PKCS1_type_1
RSA_padding_add_PKCS1_type_2
RSA_padding_add_SSLv23
RSA_padding_add_X931
RSA_padding_add_none
RSA_padding_check_PKCS1_OAEP
RSA_padding_check_PKCS1_type_1
RSA_padding_check_PKCS1_type_2
RSA_padding_check_SSLv23
RSA_padding_check_X931
RSA_padding_check_none
RSA_print
RSA_print_fp
RSA_private_decrypt
RSA_private_encrypt
RSA_public_decrypt
RSA_public_encrypt
RSA_set_default_method
RSA_set_ex_data
RSA_set_method
RSA_setup_blinding
RSA_sign
RSA_sign_ASN1_OCTET_STRING
RSA_size
RSA_up_ref
RSA_verify
RSA_verify_ASN1_OCTET_STRING
RSA_verify_PKCS1_PSS
SHA
SHA1
SHA1_Final
SHA1_Init
SHA1_Transform
SHA1_Update
SHA224
SHA224_Final
SHA224_Init
SHA224_Update
SHA256
SHA256_Final
SHA256_Init
SHA256_Transform
SHA256_Update
SHA384
SHA384_Final
SHA384_Init
SHA384_Update
SHA512
SHA512_Final
SHA512_Init
SHA512_Transform
SHA512_Update
SHA_Final
SHA_Init
SHA_Transform
SHA_Update
SMIME_crlf_copy
SMIME_read_PKCS7
SMIME_text
SMIME_write_PKCS7
SSLeay
SSLeay_version
STORE_ATTR_INFO_compare
STORE_ATTR_INFO_free
STORE_ATTR_INFO_get0_cstr
STORE_ATTR_INFO_get0_dn
STORE_ATTR_INFO_get0_number
STORE_ATTR_INFO_get0_sha1str
STORE_ATTR_INFO_in
STORE_ATTR_INFO_in_ex
STORE_ATTR_INFO_in_range
STORE_ATTR_INFO_modify_cstr
STORE_ATTR_INFO_modify_dn
STORE_ATTR_INFO_modify_number
STORE_ATTR_INFO_modify_sha1str
STORE_ATTR_INFO_new
STORE_ATTR_INFO_set_cstr
STORE_ATTR_INFO_set_dn
STORE_ATTR_INFO_set_number
STORE_ATTR_INFO_set_sha1str
STORE_Memory
STORE_OBJECT_free
STORE_OBJECT_new
STORE_create_method
STORE_ctrl
STORE_delete_arbitrary
STORE_delete_certificate
STORE_delete_crl
STORE_delete_number
STORE_delete_private_key
STORE_delete_public_key
STORE_destroy_method
STORE_free
STORE_generate_crl
STORE_generate_key
STORE_get_arbitrary
STORE_get_certificate
STORE_get_crl
STORE_get_ex_data
STORE_get_ex_new_index
STORE_get_method
STORE_get_number
STORE_get_private_key
STORE_get_public_key
STORE_list_certificate_end
STORE_list_certificate_endp
STORE_list_certificate_next
STORE_list_certificate_start
STORE_list_crl_end
STORE_list_crl_endp
STORE_list_crl_next
STORE_list_crl_start
STORE_list_private_key_end
STORE_list_private_key_endp
STORE_list_private_key_next
STORE_list_private_key_start
STORE_list_public_key_end
STORE_list_public_key_endp
STORE_list_public_key_next
STORE_list_public_key_start
STORE_method_get_cleanup_function
STORE_method_get_ctrl_function
STORE_method_get_delete_function
STORE_method_get_generate_function
STORE_method_get_get_function
STORE_method_get_initialise_function
STORE_method_get_list_end_function
STORE_method_get_list_next_function
STORE_method_get_list_start_function
STORE_method_get_lock_store_function
STORE_method_get_modify_function
STORE_method_get_revoke_function
STORE_method_get_store_function
STORE_method_get_unlock_store_function
STORE_method_get_update_store_function
STORE_method_set_cleanup_function
STORE_method_set_ctrl_function
STORE_method_set_delete_function
STORE_method_set_generate_function
STORE_method_set_get_function
STORE_method_set_initialise_function
STORE_method_set_list_end_function
STORE_method_set_list_next_function
STORE_method_set_list_start_function
STORE_method_set_lock_store_function
STORE_method_set_modify_function
STORE_method_set_revoke_function
STORE_method_set_store_function
STORE_method_set_unlock_store_function
STORE_method_set_update_store_function
STORE_modify_arbitrary
STORE_modify_certificate
STORE_modify_crl
STORE_modify_number
STORE_modify_private_key
STORE_modify_public_key
STORE_new_engine
STORE_new_method
STORE_parse_attrs_end
STORE_parse_attrs_endp
STORE_parse_attrs_next
STORE_parse_attrs_start
STORE_revoke_certificate
STORE_revoke_private_key
STORE_revoke_public_key
STORE_set_ex_data
STORE_set_method
STORE_store_arbitrary
STORE_store_certificate
STORE_store_crl
STORE_store_number
STORE_store_private_key
STORE_store_public_key
SXNETID_free
SXNETID_it
SXNETID_new
SXNET_add_id_INTEGER
SXNET_add_id_asc
SXNET_add_id_ulong
SXNET_free
SXNET_get_id_INTEGER
SXNET_get_id_asc
SXNET_get_id_ulong
SXNET_it
SXNET_new
TXT_DB_create_index
TXT_DB_free
TXT_DB_get_by_index
TXT_DB_insert
TXT_DB_read
TXT_DB_write
UI_OpenSSL
UI_UTIL_read_pw
UI_UTIL_read_pw_string
UI_add_error_string
UI_add_info_string
UI_add_input_boolean
UI_add_input_string
UI_add_user_data
UI_add_verify_string
UI_construct_prompt
UI_create_method
UI_ctrl
UI_destroy_method
UI_dup_error_string
UI_dup_info_string
UI_dup_input_boolean
UI_dup_input_string
UI_dup_verify_string
UI_free
UI_get0_action_string
UI_get0_output_string
UI_get0_result
UI_get0_result_string
UI_get0_test_string
UI_get0_user_data
UI_get_default_method
UI_get_ex_data
UI_get_ex_new_index
UI_get_input_flags
UI_get_method
UI_get_result_maxsize
UI_get_result_minsize
UI_get_string_type
UI_method_get_closer
UI_method_get_flusher
UI_method_get_opener
UI_method_get_reader
UI_method_get_writer
UI_method_set_closer
UI_method_set_flusher
UI_method_set_opener
UI_method_set_reader
UI_method_set_writer
UI_new
UI_new_method
UI_process
UI_set_default_method
UI_set_ex_data
UI_set_method
UI_set_result
USERNOTICE_free
USERNOTICE_it
USERNOTICE_new
UTF8_getc
UTF8_putc
X509V3_EXT_CRL_add_conf
X509V3_EXT_CRL_add_nconf
X509V3_EXT_REQ_add_conf
X509V3_EXT_REQ_add_nconf
X509V3_EXT_add
X509V3_EXT_add_alias
X509V3_EXT_add_conf
X509V3_EXT_add_list
X509V3_EXT_add_nconf
X509V3_EXT_add_nconf_sk
X509V3_EXT_cleanup
X509V3_EXT_conf
X509V3_EXT_conf_nid
X509V3_EXT_d2i
X509V3_EXT_get
X509V3_EXT_get_nid
X509V3_EXT_i2d
X509V3_EXT_nconf
X509V3_EXT_nconf_nid
X509V3_EXT_print
X509V3_EXT_print_fp
X509V3_EXT_val_prn
X509V3_NAME_from_section
X509V3_add1_i2d
X509V3_add_standard_extensions
X509V3_add_value
X509V3_add_value_bool
X509V3_add_value_bool_nf
X509V3_add_value_int
X509V3_add_value_uchar
X509V3_conf_free
X509V3_extensions_print
X509V3_get_d2i
X509V3_get_section
X509V3_get_string
X509V3_get_value_bool
X509V3_get_value_int
X509V3_parse_list
X509V3_section_free
X509V3_set_conf_lhash
X509V3_set_ctx
X509V3_set_nconf
X509V3_string_free
X509_ALGOR_dup
X509_ALGOR_free
X509_ALGOR_it
X509_ALGOR_new
X509_ATTRIBUTE_count
X509_ATTRIBUTE_create
X509_ATTRIBUTE_create_by_NID
X509_ATTRIBUTE_create_by_OBJ
X509_ATTRIBUTE_create_by_txt
X509_ATTRIBUTE_dup
X509_ATTRIBUTE_free
X509_ATTRIBUTE_get0_data
X509_ATTRIBUTE_get0_object
X509_ATTRIBUTE_get0_type
X509_ATTRIBUTE_it
X509_ATTRIBUTE_new
X509_ATTRIBUTE_set1_data
X509_ATTRIBUTE_set1_object
X509_CERT_AUX_free
X509_CERT_AUX_it
X509_CERT_AUX_new
X509_CERT_AUX_print
X509_CERT_PAIR_free
X509_CERT_PAIR_it
X509_CERT_PAIR_new
X509_CINF_free
X509_CINF_it
X509_CINF_new
X509_CRL_INFO_free
X509_CRL_INFO_it
X509_CRL_INFO_new
X509_CRL_add0_revoked
X509_CRL_add1_ext_i2d
X509_CRL_add_ext
X509_CRL_cmp
X509_CRL_delete_ext
X509_CRL_digest
X509_CRL_dup
X509_CRL_free
X509_CRL_get_ext
X509_CRL_get_ext_by_NID
X509_CRL_get_ext_by_OBJ
X509_CRL_get_ext_by_critical
X509_CRL_get_ext_count
X509_CRL_get_ext_d2i
X509_CRL_it
X509_CRL_new
X509_CRL_print
X509_CRL_print_fp
X509_CRL_set_issuer_name
X509_CRL_set_lastUpdate
X509_CRL_set_nextUpdate
X509_CRL_set_version
X509_CRL_sign
X509_CRL_sort
X509_CRL_verify
X509_EXTENSION_create_by_NID
X509_EXTENSION_create_by_OBJ
X509_EXTENSION_dup
X509_EXTENSION_free
X509_EXTENSION_get_critical
X509_EXTENSION_get_data
X509_EXTENSION_get_object
X509_EXTENSION_it
X509_EXTENSION_new
X509_EXTENSION_set_critical
X509_EXTENSION_set_data
X509_EXTENSION_set_object
X509_INFO_free
X509_INFO_new
X509_LOOKUP_by_alias
X509_LOOKUP_by_fingerprint
X509_LOOKUP_by_issuer_serial
X509_LOOKUP_by_subject
X509_LOOKUP_ctrl
X509_LOOKUP_file
X509_LOOKUP_free
X509_LOOKUP_hash_dir
X509_LOOKUP_init
X509_LOOKUP_new
X509_LOOKUP_shutdown
X509_NAME_ENTRY_create_by_NID
X509_NAME_ENTRY_create_by_OBJ
X509_NAME_ENTRY_create_by_txt
X509_NAME_ENTRY_dup
X509_NAME_ENTRY_free
X509_NAME_ENTRY_get_data
X509_NAME_ENTRY_get_object
X509_NAME_ENTRY_it
X509_NAME_ENTRY_new
X509_NAME_ENTRY_set_data
X509_NAME_ENTRY_set_object
X509_NAME_add_entry
X509_NAME_add_entry_by_NID
X509_NAME_add_entry_by_OBJ
X509_NAME_add_entry_by_txt
X509_NAME_cmp
X509_NAME_delete_entry
X509_NAME_digest
X509_NAME_dup
X509_NAME_entry_count
X509_NAME_free
X509_NAME_get_entry
X509_NAME_get_index_by_NID
X509_NAME_get_index_by_OBJ
X509_NAME_get_text_by_NID
X509_NAME_get_text_by_OBJ
X509_NAME_hash
X509_NAME_it
X509_NAME_new
X509_NAME_oneline
X509_NAME_print
X509_NAME_print_ex
X509_NAME_print_ex_fp
X509_NAME_set
X509_OBJECT_free_contents
X509_OBJECT_idx_by_subject
X509_OBJECT_retrieve_by_subject
X509_OBJECT_retrieve_match
X509_OBJECT_up_ref_count
X509_PKEY_free
X509_PKEY_new
X509_POLICY_NODE_print
X509_PUBKEY_free
X509_PUBKEY_get
X509_PUBKEY_it
X509_PUBKEY_new
X509_PUBKEY_set
X509_PURPOSE_add
X509_PURPOSE_cleanup
X509_PURPOSE_get0
X509_PURPOSE_get0_name
X509_PURPOSE_get0_sname
X509_PURPOSE_get_by_id
X509_PURPOSE_get_by_sname
X509_PURPOSE_get_count
X509_PURPOSE_get_id
X509_PURPOSE_get_trust
X509_PURPOSE_set
X509_REQ_INFO_free
X509_REQ_INFO_it
X509_REQ_INFO_new
X509_REQ_add1_attr
X509_REQ_add1_attr_by_NID
X509_REQ_add1_attr_by_OBJ
X509_REQ_add1_attr_by_txt
X509_REQ_add_extensions
X509_REQ_add_extensions_nid
X509_REQ_check_private_key
X509_REQ_delete_attr
X509_REQ_digest
X509_REQ_dup
X509_REQ_extension_nid
X509_REQ_free
X509_REQ_get1_email
X509_REQ_get_attr
X509_REQ_get_attr_by_NID
X509_REQ_get_attr_by_OBJ
X509_REQ_get_attr_count
X509_REQ_get_extension_nids
X509_REQ_get_extensions
X509_REQ_get_pubkey
X509_REQ_it
X509_REQ_new
X509_REQ_print
X509_REQ_print_ex
X509_REQ_print_fp
X509_REQ_set_extension_nids
X509_REQ_set_pubkey
X509_REQ_set_subject_name
X509_REQ_set_version
X509_REQ_sign
X509_REQ_to_X509
X509_REQ_verify
X509_REVOKED_add1_ext_i2d
X509_REVOKED_add_ext
X509_REVOKED_delete_ext
X509_REVOKED_free
X509_REVOKED_get_ext
X509_REVOKED_get_ext_by_NID
X509_REVOKED_get_ext_by_OBJ
X509_REVOKED_get_ext_by_critical
X509_REVOKED_get_ext_count
X509_REVOKED_get_ext_d2i
X509_REVOKED_it
X509_REVOKED_new
X509_REVOKED_set_revocationDate
X509_REVOKED_set_serialNumber
X509_SIG_free
X509_SIG_it
X509_SIG_new
X509_STORE_CTX_cleanup
X509_STORE_CTX_free
X509_STORE_CTX_get0_param
X509_STORE_CTX_get0_policy_tree
X509_STORE_CTX_get1_chain
X509_STORE_CTX_get1_issuer
X509_STORE_CTX_get_chain
X509_STORE_CTX_get_current_cert
X509_STORE_CTX_get_error
X509_STORE_CTX_get_error_depth
X509_STORE_CTX_get_ex_data
X509_STORE_CTX_get_ex_new_index
X509_STORE_CTX_get_explicit_policy
X509_STORE_CTX_init
X509_STORE_CTX_new
X509_STORE_CTX_purpose_inherit
X509_STORE_CTX_set0_crls
X509_STORE_CTX_set0_param
X509_STORE_CTX_set_cert
X509_STORE_CTX_set_chain
X509_STORE_CTX_set_default
X509_STORE_CTX_set_depth
X509_STORE_CTX_set_error
X509_STORE_CTX_set_ex_data
X509_STORE_CTX_set_flags
X509_STORE_CTX_set_purpose
X509_STORE_CTX_set_time
X509_STORE_CTX_set_trust
X509_STORE_CTX_set_verify_cb
X509_STORE_CTX_trusted_stack
X509_STORE_add_cert
X509_STORE_add_crl
X509_STORE_add_lookup
X509_STORE_free
X509_STORE_get_by_subject
X509_STORE_load_locations
X509_STORE_new
X509_STORE_set1_param
X509_STORE_set_default_paths
X509_STORE_set_depth
X509_STORE_set_flags
X509_STORE_set_purpose
X509_STORE_set_trust
X509_TRUST_add
X509_TRUST_cleanup
X509_TRUST_get0
X509_TRUST_get0_name
X509_TRUST_get_by_id
X509_TRUST_get_count
X509_TRUST_get_flags
X509_TRUST_get_trust
X509_TRUST_set
X509_TRUST_set_default
X509_VAL_free
X509_VAL_it
X509_VAL_new
X509_VERIFY_PARAM_add0_policy
X509_VERIFY_PARAM_add0_table
X509_VERIFY_PARAM_clear_flags
X509_VERIFY_PARAM_free
X509_VERIFY_PARAM_get_depth
X509_VERIFY_PARAM_get_flags
X509_VERIFY_PARAM_inherit
X509_VERIFY_PARAM_lookup
X509_VERIFY_PARAM_new
X509_VERIFY_PARAM_set1
X509_VERIFY_PARAM_set1_name
X509_VERIFY_PARAM_set1_policies
X509_VERIFY_PARAM_set_depth
X509_VERIFY_PARAM_set_flags
X509_VERIFY_PARAM_set_purpose
X509_VERIFY_PARAM_set_time
X509_VERIFY_PARAM_set_trust
X509_VERIFY_PARAM_table_cleanup
X509_add1_ext_i2d
X509_add1_reject_object
X509_add1_trust_object
X509_add_ext
X509_alias_get0
X509_alias_set1
X509_asn1_meth
X509_certificate_type
X509_check_ca
X509_check_issued
X509_check_private_key
X509_check_purpose
X509_check_trust
X509_cmp
X509_cmp_current_time
X509_cmp_time
X509_delete_ext
X509_digest
X509_dup
X509_email_free
X509_find_by_issuer_and_serial
X509_find_by_subject
X509_free
X509_get0_pubkey_bitstr
X509_get1_email
X509_get_default_cert_area
X509_get_default_cert_dir
X509_get_default_cert_dir_env
X509_get_default_cert_file
X509_get_default_cert_file_env
X509_get_default_private_dir
X509_get_ex_data
X509_get_ex_new_index
X509_get_ext
X509_get_ext_by_NID
X509_get_ext_by_OBJ
X509_get_ext_by_critical
X509_get_ext_count
X509_get_ext_d2i
X509_get_issuer_name
X509_get_pubkey
X509_get_pubkey_parameters
X509_get_serialNumber
X509_get_subject_name
X509_gmtime_adj
X509_issuer_and_serial_cmp
X509_issuer_and_serial_hash
X509_issuer_name_cmp
X509_issuer_name_hash
X509_it
X509_keyid_get0
X509_keyid_set1
X509_load_cert_crl_file
X509_load_cert_file
X509_load_crl_file
X509_new
X509_ocspid_print
X509_policy_check
X509_policy_level_get0_node
X509_policy_level_node_count
X509_policy_node_get0_parent
X509_policy_node_get0_policy
X509_policy_node_get0_qualifiers
X509_policy_tree_free
X509_policy_tree_get0_level
X509_policy_tree_get0_policies
X509_policy_tree_get0_user_policies
X509_policy_tree_level_count
X509_print
X509_print_ex
X509_print_ex_fp
X509_print_fp
X509_pubkey_digest
X509_reject_clear
X509_set_ex_data
X509_set_issuer_name
X509_set_notAfter
X509_set_notBefore
X509_set_pubkey
X509_set_serialNumber
X509_set_subject_name
X509_set_version
X509_sign
X509_signature_print
X509_subject_name_cmp
X509_subject_name_hash
X509_supported_extension
X509_time_adj
X509_to_X509_REQ
X509_trust_clear
X509_verify
X509_verify_cert
X509_verify_cert_error_string
X509at_add1_attr
X509at_add1_attr_by_NID
X509at_add1_attr_by_OBJ
X509at_add1_attr_by_txt
X509at_delete_attr
X509at_get_attr
X509at_get_attr_by_NID
X509at_get_attr_by_OBJ
X509at_get_attr_count
X509v3_add_ext
X509v3_delete_ext
X509v3_get_ext
X509v3_get_ext_by_NID
X509v3_get_ext_by_OBJ
X509v3_get_ext_by_critical
X509v3_get_ext_count
ZLONG_it
_ossl_096_des_random_seed
_ossl_old_crypt
_ossl_old_des_cbc_cksum
_ossl_old_des_cbc_encrypt
_ossl_old_des_cfb64_encrypt
_ossl_old_des_cfb_encrypt
_ossl_old_des_crypt
_ossl_old_des_decrypt3
_ossl_old_des_ecb3_encrypt
_ossl_old_des_ecb_encrypt
_ossl_old_des_ede3_cbc_encrypt
_ossl_old_des_ede3_cfb64_encrypt
_ossl_old_des_ede3_ofb64_encrypt
_ossl_old_des_enc_read
_ossl_old_des_enc_write
_ossl_old_des_encrypt
_ossl_old_des_encrypt2
_ossl_old_des_encrypt3
_ossl_old_des_fcrypt
_ossl_old_des_is_weak_key
_ossl_old_des_key_sched
_ossl_old_des_ncbc_encrypt
_ossl_old_des_ofb64_encrypt
_ossl_old_des_ofb_encrypt
_ossl_old_des_options
_ossl_old_des_pcbc_encrypt
_ossl_old_des_quad_cksum
_ossl_old_des_random_key
_ossl_old_des_random_seed
_ossl_old_des_read_2passwords
_ossl_old_des_read_password
_ossl_old_des_read_pw
_ossl_old_des_read_pw_string
_ossl_old_des_set_key
_ossl_old_des_set_odd_parity
_ossl_old_des_string_to_2keys
_ossl_old_des_string_to_key
_ossl_old_des_xcbc_encrypt
_ossl_old_des_xwhite_in2out
_shadow_DES_check_key
_shadow_DES_rw_mode
a2d_ASN1_OBJECT
a2i_ASN1_ENUMERATED
a2i_ASN1_INTEGER
a2i_ASN1_STRING
a2i_IPADDRESS
a2i_IPADDRESS_NC
asc2uni
asn1_Finish
asn1_GetSequence
asn1_add_error
asn1_const_Finish
asn1_do_adb
asn1_do_lock
asn1_enc_free
asn1_enc_init
asn1_enc_restore
asn1_enc_save
asn1_ex_c2i
asn1_ex_i2c
asn1_get_choice_selector
asn1_get_field_ptr
asn1_set_choice_selector
bn_add_words
bn_div_words
bn_dup_expand
bn_expand2
bn_mul_add_words
bn_mul_words
bn_sqr_words
bn_sub_words
c2i_ASN1_BIT_STRING
c2i_ASN1_INTEGER
c2i_ASN1_OBJECT
d2i_ACCESS_DESCRIPTION
d2i_ASN1_BIT_STRING
d2i_ASN1_BMPSTRING
d2i_ASN1_BOOLEAN
d2i_ASN1_ENUMERATED
d2i_ASN1_GENERALIZEDTIME
d2i_ASN1_GENERALSTRING
d2i_ASN1_HEADER
d2i_ASN1_IA5STRING
d2i_ASN1_INTEGER
d2i_ASN1_NULL
d2i_ASN1_OBJECT
d2i_ASN1_OCTET_STRING
d2i_ASN1_PRINTABLE
d2i_ASN1_PRINTABLESTRING
d2i_ASN1_SET
d2i_ASN1_T61STRING
d2i_ASN1_TIME
d2i_ASN1_TYPE
d2i_ASN1_UINTEGER
d2i_ASN1_UNIVERSALSTRING
d2i_ASN1_UTCTIME
d2i_ASN1_UTF8STRING
d2i_ASN1_VISIBLESTRING
d2i_ASN1_bytes
d2i_ASN1_type_bytes
d2i_AUTHORITY_INFO_ACCESS
d2i_AUTHORITY_KEYID
d2i_AutoPrivateKey
d2i_BASIC_CONSTRAINTS
d2i_CERTIFICATEPOLICIES
d2i_CRL_DIST_POINTS
d2i_DHparams
d2i_DIRECTORYSTRING
d2i_DISPLAYTEXT
d2i_DIST_POINT
d2i_DIST_POINT_NAME
d2i_DSAPrivateKey
d2i_DSAPrivateKey_bio
d2i_DSAPrivateKey_fp
d2i_DSAPublicKey
d2i_DSA_PUBKEY
d2i_DSA_PUBKEY_bio
d2i_DSA_PUBKEY_fp
d2i_DSA_SIG
d2i_DSAparams
d2i_ECDSA_SIG
d2i_ECPKParameters
d2i_ECParameters
d2i_ECPrivateKey
d2i_ECPrivateKey_bio
d2i_ECPrivateKey_fp
d2i_EC_PUBKEY
d2i_EC_PUBKEY_bio
d2i_EC_PUBKEY_fp
d2i_EDIPARTYNAME
d2i_EXTENDED_KEY_USAGE
d2i_GENERAL_NAME
d2i_GENERAL_NAMES
d2i_KRB5_APREQ
d2i_KRB5_APREQBODY
d2i_KRB5_AUTHDATA
d2i_KRB5_AUTHENT
d2i_KRB5_AUTHENTBODY
d2i_KRB5_CHECKSUM
d2i_KRB5_ENCDATA
d2i_KRB5_ENCKEY
d2i_KRB5_PRINCNAME
d2i_KRB5_TICKET
d2i_KRB5_TKTBODY
d2i_NETSCAPE_CERT_SEQUENCE
d2i_NETSCAPE_SPKAC
d2i_NETSCAPE_SPKI
d2i_NOTICEREF
d2i_Netscape_RSA
d2i_OCSP_BASICRESP
d2i_OCSP_CERTID
d2i_OCSP_CERTSTATUS
d2i_OCSP_CRLID
d2i_OCSP_ONEREQ
d2i_OCSP_REQINFO
d2i_OCSP_REQUEST
d2i_OCSP_RESPBYTES
d2i_OCSP_RESPDATA
d2i_OCSP_RESPID
d2i_OCSP_RESPONSE
d2i_OCSP_REVOKEDINFO
d2i_OCSP_SERVICELOC
d2i_OCSP_SIGNATURE
d2i_OCSP_SINGLERESP
d2i_OTHERNAME
d2i_PBE2PARAM
d2i_PBEPARAM
d2i_PBKDF2PARAM
d2i_PKCS12
d2i_PKCS12_BAGS
d2i_PKCS12_MAC_DATA
d2i_PKCS12_SAFEBAG
d2i_PKCS12_bio
d2i_PKCS12_fp
d2i_PKCS7
d2i_PKCS7_DIGEST
d2i_PKCS7_ENCRYPT
d2i_PKCS7_ENC_CONTENT
d2i_PKCS7_ENVELOPE
d2i_PKCS7_ISSUER_AND_SERIAL
d2i_PKCS7_RECIP_INFO
d2i_PKCS7_SIGNED
d2i_PKCS7_SIGNER_INFO
d2i_PKCS7_SIGN_ENVELOPE
d2i_PKCS7_bio
d2i_PKCS7_fp
d2i_PKCS8PrivateKey_bio
d2i_PKCS8PrivateKey_fp
d2i_PKCS8_PRIV_KEY_INFO
d2i_PKCS8_PRIV_KEY_INFO_bio
d2i_PKCS8_PRIV_KEY_INFO_fp
d2i_PKCS8_bio
d2i_PKCS8_fp
d2i_PKEY_USAGE_PERIOD
d2i_POLICYINFO
d2i_POLICYQUALINFO
d2i_PROXY_CERT_INFO_EXTENSION
d2i_PROXY_POLICY
d2i_PUBKEY
d2i_PUBKEY_bio
d2i_PUBKEY_fp
d2i_PrivateKey
d2i_PrivateKey_bio
d2i_PrivateKey_fp
d2i_PublicKey
d2i_RSAPrivateKey
d2i_RSAPrivateKey_bio
d2i_RSAPrivateKey_fp
d2i_RSAPublicKey
d2i_RSAPublicKey_bio
d2i_RSAPublicKey_fp
d2i_RSA_NET
d2i_RSA_PUBKEY
d2i_RSA_PUBKEY_bio
d2i_RSA_PUBKEY_fp
d2i_SXNET
d2i_SXNETID
d2i_USERNOTICE
d2i_X509
d2i_X509_ALGOR
d2i_X509_ATTRIBUTE
d2i_X509_AUX
d2i_X509_CERT_AUX
d2i_X509_CERT_PAIR
d2i_X509_CINF
d2i_X509_CRL
d2i_X509_CRL_INFO
d2i_X509_CRL_bio
d2i_X509_CRL_fp
d2i_X509_EXTENSION
d2i_X509_NAME
d2i_X509_NAME_ENTRY
d2i_X509_PKEY
d2i_X509_PUBKEY
d2i_X509_REQ
d2i_X509_REQ_INFO
d2i_X509_REQ_bio
d2i_X509_REQ_fp
d2i_X509_REVOKED
d2i_X509_SIG
d2i_X509_VAL
d2i_X509_bio
d2i_X509_fp
get_rfc2409_prime_1024
get_rfc2409_prime_768
get_rfc3526_prime_1536
get_rfc3526_prime_2048
get_rfc3526_prime_3072
get_rfc3526_prime_4096
get_rfc3526_prime_6144
get_rfc3526_prime_8192
hex_to_string
i2a_ACCESS_DESCRIPTION
i2a_ASN1_ENUMERATED
i2a_ASN1_INTEGER
i2a_ASN1_OBJECT
i2a_ASN1_STRING
i2c_ASN1_BIT_STRING
i2c_ASN1_INTEGER
i2d_ACCESS_DESCRIPTION
i2d_ASN1_BIT_STRING
i2d_ASN1_BMPSTRING
i2d_ASN1_BOOLEAN
i2d_ASN1_ENUMERATED
i2d_ASN1_GENERALIZEDTIME
i2d_ASN1_GENERALSTRING
i2d_ASN1_HEADER
i2d_ASN1_IA5STRING
i2d_ASN1_INTEGER
i2d_ASN1_NULL
i2d_ASN1_OBJECT
i2d_ASN1_OCTET_STRING
i2d_ASN1_PRINTABLE
i2d_ASN1_PRINTABLESTRING
i2d_ASN1_SET
i2d_ASN1_T61STRING
i2d_ASN1_TIME
i2d_ASN1_TYPE
i2d_ASN1_UNIVERSALSTRING
i2d_ASN1_UTCTIME
i2d_ASN1_UTF8STRING
i2d_ASN1_VISIBLESTRING
i2d_ASN1_bytes
i2d_AUTHORITY_INFO_ACCESS
i2d_AUTHORITY_KEYID
i2d_BASIC_CONSTRAINTS
i2d_CERTIFICATEPOLICIES
i2d_CRL_DIST_POINTS
i2d_DHparams
i2d_DIRECTORYSTRING
i2d_DISPLAYTEXT
i2d_DIST_POINT
i2d_DIST_POINT_NAME
i2d_DSAPrivateKey
i2d_DSAPrivateKey_bio
i2d_DSAPrivateKey_fp
i2d_DSAPublicKey
i2d_DSA_PUBKEY
i2d_DSA_PUBKEY_bio
i2d_DSA_PUBKEY_fp
i2d_DSA_SIG
i2d_DSAparams
i2d_ECDSA_SIG
i2d_ECPKParameters
i2d_ECParameters
i2d_ECPrivateKey
i2d_ECPrivateKey_bio
i2d_ECPrivateKey_fp
i2d_EC_PUBKEY
i2d_EC_PUBKEY_bio
i2d_EC_PUBKEY_fp
i2d_EDIPARTYNAME
i2d_EXTENDED_KEY_USAGE
i2d_GENERAL_NAME
i2d_GENERAL_NAMES
i2d_KRB5_APREQ
i2d_KRB5_APREQBODY
i2d_KRB5_AUTHDATA
i2d_KRB5_AUTHENT
i2d_KRB5_AUTHENTBODY
i2d_KRB5_CHECKSUM
i2d_KRB5_ENCDATA
i2d_KRB5_ENCKEY
i2d_KRB5_PRINCNAME
i2d_KRB5_TICKET
i2d_KRB5_TKTBODY
i2d_NETSCAPE_CERT_SEQUENCE
i2d_NETSCAPE_SPKAC
i2d_NETSCAPE_SPKI
i2d_NOTICEREF
i2d_Netscape_RSA
i2d_OCSP_BASICRESP
i2d_OCSP_CERTID
i2d_OCSP_CERTSTATUS
i2d_OCSP_CRLID
i2d_OCSP_ONEREQ
i2d_OCSP_REQINFO
i2d_OCSP_REQUEST
i2d_OCSP_RESPBYTES
i2d_OCSP_RESPDATA
i2d_OCSP_RESPID
i2d_OCSP_RESPONSE
i2d_OCSP_REVOKEDINFO
i2d_OCSP_SERVICELOC
i2d_OCSP_SIGNATURE
i2d_OCSP_SINGLERESP
i2d_OTHERNAME
i2d_PBE2PARAM
i2d_PBEPARAM
i2d_PBKDF2PARAM
i2d_PKCS12
i2d_PKCS12_BAGS
i2d_PKCS12_MAC_DATA
i2d_PKCS12_SAFEBAG
i2d_PKCS12_bio
i2d_PKCS12_fp
i2d_PKCS7
i2d_PKCS7_DIGEST
i2d_PKCS7_ENCRYPT
i2d_PKCS7_ENC_CONTENT
i2d_PKCS7_ENVELOPE
i2d_PKCS7_ISSUER_AND_SERIAL
i2d_PKCS7_NDEF
i2d_PKCS7_RECIP_INFO
i2d_PKCS7_SIGNED
i2d_PKCS7_SIGNER_INFO
i2d_PKCS7_SIGN_ENVELOPE
i2d_PKCS7_bio
i2d_PKCS7_fp
i2d_PKCS8PrivateKeyInfo_bio
i2d_PKCS8PrivateKeyInfo_fp
i2d_PKCS8PrivateKey_bio
i2d_PKCS8PrivateKey_fp
i2d_PKCS8PrivateKey_nid_bio
i2d_PKCS8PrivateKey_nid_fp
i2d_PKCS8_PRIV_KEY_INFO
i2d_PKCS8_PRIV_KEY_INFO_bio
i2d_PKCS8_PRIV_KEY_INFO_fp
i2d_PKCS8_bio
i2d_PKCS8_fp
i2d_PKEY_USAGE_PERIOD
i2d_POLICYINFO
i2d_POLICYQUALINFO
i2d_PROXY_CERT_INFO_EXTENSION
i2d_PROXY_POLICY
i2d_PUBKEY
i2d_PUBKEY_bio
i2d_PUBKEY_fp
i2d_PrivateKey
i2d_PrivateKey_bio
i2d_PrivateKey_fp
i2d_PublicKey
i2d_RSAPrivateKey
i2d_RSAPrivateKey_bio
i2d_RSAPrivateKey_fp
i2d_RSAPublicKey
i2d_RSAPublicKey_bio
i2d_RSAPublicKey_fp
i2d_RSA_NET
i2d_RSA_PUBKEY
i2d_RSA_PUBKEY_bio
i2d_RSA_PUBKEY_fp
i2d_SXNET
i2d_SXNETID
i2d_USERNOTICE
i2d_X509
i2d_X509_ALGOR
i2d_X509_ATTRIBUTE
i2d_X509_AUX
i2d_X509_CERT_AUX
i2d_X509_CERT_PAIR
i2d_X509_CINF
i2d_X509_CRL
i2d_X509_CRL_INFO
i2d_X509_CRL_bio
i2d_X509_CRL_fp
i2d_X509_EXTENSION
i2d_X509_NAME
i2d_X509_NAME_ENTRY
i2d_X509_PKEY
i2d_X509_PUBKEY
i2d_X509_REQ
i2d_X509_REQ_INFO
i2d_X509_REQ_bio
i2d_X509_REQ_fp
i2d_X509_REVOKED
i2d_X509_SIG
i2d_X509_VAL
i2d_X509_bio
i2d_X509_fp
i2o_ECPublicKey
i2s_ASN1_ENUMERATED
i2s_ASN1_ENUMERATED_TABLE
i2s_ASN1_INTEGER
i2s_ASN1_OCTET_STRING
i2t_ASN1_OBJECT
i2v_ASN1_BIT_STRING
i2v_GENERAL_NAME
i2v_GENERAL_NAMES
idea_cbc_encrypt
idea_cfb64_encrypt
idea_ecb_encrypt
idea_encrypt
idea_ofb64_encrypt
idea_options
idea_set_decrypt_key
idea_set_encrypt_key
lh_delete
lh_doall
lh_doall_arg
lh_free
lh_insert
lh_new
lh_node_stats
lh_node_stats_bio
lh_node_usage_stats
lh_node_usage_stats_bio
lh_num_items
lh_retrieve
lh_stats
lh_stats_bio
lh_strhash
ms_time_cmp
ms_time_diff
ms_time_free
ms_time_get
ms_time_new
name_cmp
o2i_ECPublicKey
pitem_free
pitem_new
pqueue_find
pqueue_free
pqueue_insert
pqueue_iterator
pqueue_new
pqueue_next
pqueue_peek
pqueue_pop
pqueue_print
s2i_ASN1_INTEGER
s2i_ASN1_OCTET_STRING
sk_delete
sk_delete_ptr
sk_dup
sk_find
sk_find_ex
sk_free
sk_insert
sk_is_sorted
sk_new
sk_new_null
sk_num
sk_pop
sk_pop_free
sk_push
sk_set
sk_set_cmp_func
sk_shift
sk_sort
sk_unshift
sk_value
sk_zero
string_to_hex
uni2asc
v2i_ASN1_BIT_STRING
v2i_GENERAL_NAME
v2i_GENERAL_NAMES
v2i_GENERAL_NAME_ex
Name
.text
Size
644KB
Virtual Size
643KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
248KB
Virtual Size
247KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
60KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
44KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=105, version=2067,
count=2, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=9, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=2, id=93, version=2067,
count=9, id=93, version=2179,
count=129, id=1, productName=Unmarked objects,
count=498, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/tvu/libexpatw.dll
- IMPHASH 16adaa296932ee15ea6dacef0485a6a3
- SHA256 e3a27b372d3d7ae7b13e47e5f760808af99d0960873f62705a37efd01aaedcff
- MD5 41813f05f1babc907640550d1c41b456
- SHA1 ddd20043a06e36caa7dce8575cdeb52ac4d2cdf7
- SHA512 0de1f6eebe3d61426eeab4c05bd7d883f8884cd71dc2af466dc583149d6b5f20bfd05057ccdeb717b7ec6fdad5a1a12cb963d6ac8a9621478ad1f5bb378c8594
- SSDEEP 3072:Lmys9X5hM6ko7yMD7D1w+Nq5YfDm3KLqKLRHDIOdHS:Lm/M64Mf+MqCfDm3KLqKqOdy
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
90469
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
HeapFree
HeapReAlloc
HeapAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetLastError
TlsFree
TlsSetValue
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
UnhandledExceptionFilter
WriteFile
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
HeapSize
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
XML_DefaultCurrent
XML_ErrorString
XML_ExpatVersion
XML_ExpatVersionInfo
XML_ExternalEntityParserCreate
XML_FreeContentModel
XML_GetBase
XML_GetBuffer
XML_GetCurrentByteCount
XML_GetCurrentByteIndex
XML_GetCurrentColumnNumber
XML_GetCurrentLineNumber
XML_GetErrorCode
XML_GetFeatureList
XML_GetIdAttributeIndex
XML_GetInputContext
XML_GetParsingStatus
XML_GetSpecifiedAttributeCount
XML_MemFree
XML_MemMalloc
XML_MemRealloc
XML_Parse
XML_ParseBuffer
XML_ParserCreate
XML_ParserCreateNS
XML_ParserCreate_MM
XML_ParserFree
XML_ParserReset
XML_ResumeParser
XML_SetAttlistDeclHandler
XML_SetBase
XML_SetCdataSectionHandler
XML_SetCharacterDataHandler
XML_SetCommentHandler
XML_SetDefaultHandler
XML_SetDefaultHandlerExpand
XML_SetDoctypeDeclHandler
XML_SetElementDeclHandler
XML_SetElementHandler
XML_SetEncoding
XML_SetEndCdataSectionHandler
XML_SetEndDoctypeDeclHandler
XML_SetEndElementHandler
XML_SetEndNamespaceDeclHandler
XML_SetEntityDeclHandler
XML_SetExternalEntityRefHandler
XML_SetExternalEntityRefHandlerArg
XML_SetNamespaceDeclHandler
XML_SetNotStandaloneHandler
XML_SetNotationDeclHandler
XML_SetParamEntityParsing
XML_SetProcessingInstructionHandler
XML_SetReturnNSTriplet
XML_SetSkippedEntityHandler
XML_SetStartCdataSectionHandler
XML_SetStartDoctypeDeclHandler
XML_SetStartElementHandler
XML_SetStartNamespaceDeclHandler
XML_SetUnknownEncodingHandler
XML_SetUnparsedEntityDeclHandler
XML_SetUserData
XML_SetXmlDeclHandler
XML_StopParser
XML_UseForeignDTD
XML_UseParserAsHandlerArg
Name
.text
Size
104KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
20KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=20, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=3, id=93, version=2179,
count=71, id=1, productName=Unmarked objects,
count=71, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/tvu/msvcp71.dll
- IMPHASH 5e2398adb60a70c7ab04e7cba75a7983
- SHA256 df96156f6a548fd6fe5672918de5ae4509d3c810a57bffd2a91de45a3ed5b23b
- MD5 561fa2abb31dfa8fab762145f81667c2
- SHA1 c8ccb04eedac821a13fae314a2435192860c72b8
- SHA512 7d960aa8e3cce22d63a6723d7f00c195de7de83b877eca126e339e2d8cc9859e813e05c5c0a5671a75bb717243e9295fd13e5e17d8c6660eb59f5baee63a7c43
- SSDEEP 12288:fJzxYPVsBnxO/R7krZhUgiW6QR7t5k3Ooc8iHkC2eq:fZxvBnxOJ7ki3Ooc8iHkC2e
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
11696
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcp71.pdb
msvcr71
setvbuf
fflush
ungetc
fgetc
fwrite
fputc
_Getdays
_Getmonths
fgetpos
fseek
fsetpos
fclose
__iob_func
fopen
atan2
cos
exp
ldexp
log
pow
sin
sqrt
tan
fgetwc
fputwc
ungetwc
strtol
_errno
_Strftime
strcspn
strtoul
_strtoi64
_strtoui64
sprintf
abort
realloc
setlocale
_CxxThrowException
??0exception@@QAE@XZ
malloc
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
__uncaught_exception
towlower
towupper
strcmp
__pctype_func
___lc_codepage_func
___lc_handle_func
_unlock
_lock
___setlc_active_func
___unguarded_readlc_active_add_func
_except_handler3
_local_unwind2
__crtCompareStringA
___lc_collate_cp_func
__crtLCMapStringA
isupper
islower
__crtGetStringTypeW
__crtLCMapStringW
_callnewh
__crtCompareStringW
strtod
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__security_error_handler
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
??0bad_cast@@QAE@PBD@Z
??1bad_cast@@UAE@XZ
??0bad_cast@@QAE@ABV0@@Z
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
___mb_cur_max_func
??_V@YAXPAX@Z
??3@YAXPAX@Z
_Gettnames
localeconv
free
memset
memchr
strlen
memcmp
wcslen
memmove
??1exception@@UAE@XZ
memcpy
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetLocaleInfoA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
MultiByteToWideChar
DisableThreadLibraryCalls
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAC@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAE@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
??$?5DU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAE@Z
??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAG@Z
??$?5GU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@PAG@Z
??$?5GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?5MDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5MGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@M@0@@Z
??$?5NDU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5NGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@N@0@@Z
??$?5ODU?$char_traits@D@std@@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5OGU?$char_traits@G@std@@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$complex@O@0@@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AA_W@Z
??$?5_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@PA_W@Z
??$?5_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
??$?6GU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??$?6GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?6MDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6MGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6M_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@M@0@@Z
??$?6NDU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6NGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6N_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@N@0@@Z
??$?6ODU?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6OGU?$char_traits@G@std@@@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6O_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$complex@O@0@@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@C@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@E@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBC@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??$?6U?$char_traits@D@std@@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBE@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@PB_W@Z
??$?6_WU?$char_traits@_W@std@@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@_W@Z
??$?6_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@0@AAV10@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?8GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?8M@std@@YA_NABMABV?$complex@M@0@@Z
??$?8M@std@@YA_NABV?$complex@M@0@0@Z
??$?8M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?8N@std@@YA_NABNABV?$complex@N@0@@Z
??$?8N@std@@YA_NABV?$complex@N@0@0@Z
??$?8N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?8O@std@@YA_NABOABV?$complex@O@0@@Z
??$?8O@std@@YA_NABV?$complex@O@0@0@Z
??$?8O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?9GU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?9M@std@@YA_NABMABV?$complex@M@0@@Z
??$?9M@std@@YA_NABV?$complex@M@0@0@Z
??$?9M@std@@YA_NABV?$complex@M@0@ABM@Z
??$?9N@std@@YA_NABNABV?$complex@N@0@@Z
??$?9N@std@@YA_NABV?$complex@N@0@0@Z
??$?9N@std@@YA_NABV?$complex@N@0@ABN@Z
??$?9O@std@@YA_NABOABV?$complex@O@0@@Z
??$?9O@std@@YA_NABV?$complex@O@0@0@Z
??$?9O@std@@YA_NABV?$complex@O@0@ABO@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?9_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?DM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?DN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?DN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?DO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?DO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?GM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?GM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?GN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?GN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?GO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?GO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@GABV10@@Z
??$?HGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@@Z
??$?HM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?HN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@@Z
??$?HN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?HO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@@Z
??$?HO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@_W@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_WABV10@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_WABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$?KM@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$?KN@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$?KN@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$?KO@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$?KO@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?MGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?NDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?NGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?N_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?OGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?O_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??$?PDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
??$?PGU?$char_traits@G@std@@V?$allocator@G@1@@std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??$?P_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NPB_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$_Fabs@M@std@@YAMABV?$complex@M@0@PAH@Z
??$_Fabs@N@std@@YANABV?$complex@N@0@PAH@Z
??$_Fabs@O@std@@YAOABV?$complex@O@0@PAH@Z
??$abs@M@std@@YAMABV?$complex@M@0@@Z
??$abs@N@std@@YANABV?$complex@N@0@@Z
??$abs@O@std@@YAOABV?$complex@O@0@@Z
??$arg@M@std@@YAMABV?$complex@M@0@@Z
??$arg@N@std@@YANABV?$complex@N@0@@Z
??$arg@O@std@@YAOABV?$complex@O@0@@Z
??$conj@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$conj@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$conj@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cos@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cos@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cos@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$cosh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$cosh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$cosh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$exp@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$exp@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$exp@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@D@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??$getline@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@G@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@@Z
??$getline@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@0@AAV10@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@_W@Z
??$imag@M@std@@YAMABV?$complex@M@0@@Z
??$imag@N@std@@YANABV?$complex@N@0@@Z
??$imag@O@std@@YAOABV?$complex@O@0@@Z
??$log10@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log10@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log10@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$log@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$log@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$log@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$norm@M@std@@YAMABV?$complex@M@0@@Z
??$norm@N@std@@YANABV?$complex@N@0@@Z
??$norm@O@std@@YAOABV?$complex@O@0@@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM0@Z
??$polar@M@std@@YA?AV?$complex@M@0@ABM@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN0@Z
??$polar@N@std@@YA?AV?$complex@N@0@ABN@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO0@Z
??$polar@O@std@@YA?AV?$complex@O@0@ABO@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABMABV10@@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@0@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@ABM@Z
??$pow@M@std@@YA?AV?$complex@M@0@ABV10@H@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABNABV10@@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@0@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@ABN@Z
??$pow@N@std@@YA?AV?$complex@N@0@ABV10@H@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABOABV10@@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@0@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@ABO@Z
??$pow@O@std@@YA?AV?$complex@O@0@ABV10@H@Z
??$real@M@std@@YAMABV?$complex@M@0@@Z
??$real@N@std@@YANABV?$complex@N@0@@Z
??$real@O@std@@YAOABV?$complex@O@0@@Z
??$sin@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sin@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sin@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sinh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sinh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sinh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$sqrt@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$sqrt@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$sqrt@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tan@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tan@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tan@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??$tanh@M@std@@YA?AV?$complex@M@0@ABV10@@Z
??$tanh@N@std@@YA?AV?$complex@N@0@ABV10@@Z
??$tanh@O@std@@YA?AV?$complex@O@0@ABV10@@Z
??0?$_Complex_base@MU_C_float_complex@@@std@@QAE@ABM0@Z
??0?$_Complex_base@NU_C_double_complex@@@std@@QAE@ABN0@Z
??0?$_Complex_base@OU_C_ldouble_complex@@@std@@QAE@ABO0@Z
??0?$_Mpunct@D@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@D@std@@QAE@I_N@Z
??0?$_Mpunct@G@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@G@std@@QAE@I_N@Z
??0?$_Mpunct@_W@std@@QAE@ABV_Locinfo@1@I_N@Z
??0?$_Mpunct@_W@std@@QAE@I_N@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@IAE@V?$allocator@D@1@@Z
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@IAE@V?$allocator@G@1@@Z
??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@IAE@V?$allocator@_W@1@@Z
??0?$_String_val@_WV?$allocator@_W@std@@@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@ABV01@@Z
??0?$allocator@X@std@@QAE@XZ
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAE@XZ
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@PBDHH@Z
??0?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@IIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@Vconst_iterator@01@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@IIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@IGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGI@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@Vconst_iterator@01@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@IIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@I_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WI@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_WIABV?$allocator@_W@1@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@Vconst_iterator@01@0@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@1@H@Z
??0?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@H@Z
??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@DDH@std@@QAE@I@Z
??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@GDH@std@@QAE@I@Z
??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z
??0?$codecvt@_WDH@std@@QAE@I@Z
??0?$collate@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@D@std@@QAE@I@Z
??0?$collate@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@G@std@@QAE@I@Z
??0?$collate@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$collate@_W@std@@QAE@I@Z
??0?$complex@M@std@@QAE@ABM0@Z
??0?$complex@M@std@@QAE@ABU_C_float_complex@@@Z
??0?$complex@M@std@@QAE@ABV?$complex@N@1@@Z
??0?$complex@M@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@N@std@@QAE@ABN0@Z
??0?$complex@N@std@@QAE@ABU_C_double_complex@@@Z
??0?$complex@N@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@N@std@@QAE@ABV?$complex@O@1@@Z
??0?$complex@O@std@@QAE@ABO0@Z
??0?$complex@O@std@@QAE@ABU_C_ldouble_complex@@@Z
??0?$complex@O@std@@QAE@ABV?$complex@M@1@@Z
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@D@std@@QAE@PBF_NI@Z
??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@G@std@@QAE@I@Z
??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$ctype@_W@std@@QAE@I@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@D@std@@QAE@I@Z
??0?$messages@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@G@std@@QAE@I@Z
??0?$messages@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$messages@_W@std@@QAE@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$00@std@@QAE@I@Z
??0?$moneypunct@D$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@D$0A@@std@@QAE@I@Z
??0?$moneypunct@G$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$00@std@@QAE@I@Z
??0?$moneypunct@G$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
??0?$moneypunct@_W$00@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$00@std@@QAE@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$moneypunct@_W$0A@@std@@QAE@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$numpunct@D@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@D@std@@QAE@I@Z
??0?$numpunct@G@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@G@std@@QAE@I@Z
??0?$numpunct@_W@std@@QAE@ABV_Locinfo@1@I@Z
??0?$numpunct@_W@std@@QAE@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z
??0Init@ios_base@std@@QAE@XZ
??0_Locimp@locale@std@@AAE@ABV012@@Z
??0_Locinfo@std@@QAE@HPBD@Z
??0_Locinfo@std@@QAE@PBD@Z
??0_Lockit@std@@QAE@H@Z
??0_Lockit@std@@QAE@XZ
??0_Mutex@std@@QAE@XZ
??0_Timevec@std@@QAE@ABV01@@Z
??0_Timevec@std@@QAE@PAX@Z
??0_UShinit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??0codecvt_base@std@@QAE@I@Z
??0ctype_base@std@@QAE@I@Z
??0facet@locale@std@@IAE@I@Z
??0id@locale@std@@QAE@I@Z
??0ios_base@std@@IAE@XZ
??0ios_base@std@@QAE@ABV01@@Z
??0locale@std@@AAE@PAV_Locimp@01@@Z
??0locale@std@@QAE@ABV01@0H@Z
??0locale@std@@QAE@ABV01@@Z
??0locale@std@@QAE@ABV01@PBDH@Z
??0locale@std@@QAE@PBDH@Z
??0locale@std@@QAE@W4_Uninitialized@1@@Z
??0locale@std@@QAE@XZ
??0messages_base@std@@QAE@I@Z
??0money_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0strstream@std@@QAE@PADHH@Z
??0time_base@std@@QAE@I@Z
??1?$_Mpunct@D@std@@MAE@XZ
??1?$_Mpunct@G@std@@MAE@XZ
??1?$_Mpunct@_W@std@@MAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_fstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_fstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ifstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ifstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_ofstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ofstream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@UAE@XZ
??1?$codecvt@DDH@std@@MAE@XZ
??1?$codecvt@GDH@std@@MAE@XZ
??1?$codecvt@_WDH@std@@MAE@XZ
??1?$collate@D@std@@MAE@XZ
??1?$collate@G@std@@MAE@XZ
??1?$collate@_W@std@@MAE@XZ
??1?$ctype@D@std@@MAE@XZ
??1?$ctype@G@std@@MAE@XZ
??1?$ctype@_W@std@@MAE@XZ
??1?$messages@D@std@@UAE@XZ
??1?$messages@G@std@@UAE@XZ
??1?$messages@_W@std@@UAE@XZ
??1?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$moneypunct@D$00@std@@UAE@XZ
??1?$moneypunct@D$0A@@std@@UAE@XZ
??1?$moneypunct@G$00@std@@UAE@XZ
??1?$moneypunct@G$0A@@std@@UAE@XZ
??1?$moneypunct@_W$00@std@@UAE@XZ
??1?$moneypunct@_W$0A@@std@@UAE@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$numpunct@D@std@@MAE@XZ
??1?$numpunct@G@std@@MAE@XZ
??1?$numpunct@_W@std@@MAE@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ
??1Init@ios_base@std@@QAE@XZ
??1_Locinfo@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
??1_Mutex@std@@QAE@XZ
??1_Timevec@std@@QAE@XZ
??1_UShinit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1codecvt_base@std@@UAE@XZ
??1ctype_base@std@@UAE@XZ
??1facet@locale@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1istrstream@std@@UAE@XZ
??1locale@std@@QAE@XZ
??1messages_base@std@@UAE@XZ
??1money_base@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1strstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
??1time_base@std@@UAE@XZ
??4?$_Complex_base@MU_C_float_complex@@@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@NU_C_double_complex@@@std@@QAEAAV01@ABV01@@Z
??4?$_Complex_base@OU_C_ldouble_complex@@@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@M@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@N@std@@QAEAAV01@ABV01@@Z
??4?$_Ctraits@O@std@@QAEAAV01@ABV01@@Z
??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z
??4?$_Locbase@H@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@DV?$allocator@D@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@GV?$allocator@G@std@@@std@@QAEAAV01@ABV01@@Z
??4?$_String_val@_WV?$allocator@_W@std@@@std@@QAEAAV01@ABV01@@Z
??4?$allocator@X@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??4?$char_traits@D@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
??4?$char_traits@_W@std@@QAEAAU01@ABU01@@Z
??4?$complex@M@std@@QAEAAV01@ABM@Z
??4?$complex@M@std@@QAEAAV01@ABV01@@Z
??4?$complex@N@std@@QAEAAV01@ABN@Z
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
??4?$complex@O@std@@QAEAAV01@ABO@Z
??4?$complex@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z
??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z
??4Init@ios_base@std@@QAEAAV012@ABV012@@Z
??4_Num_base@std@@QAEAAU01@ABU01@@Z
??4_Num_float_base@std@@QAEAAU01@ABU01@@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??4_String_base@std@@QAEAAV01@ABV01@@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
??4_UShinit@std@@QAEAAV01@ABV01@@Z
??4_Winit@std@@QAEAAV01@ABV01@@Z
??4ios_base@std@@QAEAAV01@ABV01@@Z
??4locale@std@@QAEAAV01@ABV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z
??7ios_base@std@@QBE_NXZ
??8locale@std@@QBE_NABV01@@Z
??9locale@std@@QBE_NABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
??Bid@locale@std@@QAEIXZ
??Bios_base@std@@QBEPAXXZ
??X?$complex@M@std@@QAEAAV01@ABM@Z
??X?$complex@M@std@@QAEAAV01@ABV01@@Z
??X?$complex@N@std@@QAEAAV01@ABN@Z
??X?$complex@N@std@@QAEAAV01@ABV01@@Z
??X?$complex@O@std@@QAEAAV01@ABO@Z
??X?$complex@O@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@_W@Z
??Y?$complex@M@std@@QAEAAV01@ABM@Z
??Y?$complex@M@std@@QAEAAV01@ABV01@@Z
??Y?$complex@N@std@@QAEAAV01@ABN@Z
??Y?$complex@N@std@@QAEAAV01@ABV01@@Z
??Y?$complex@O@std@@QAEAAV01@ABO@Z
??Y?$complex@O@std@@QAEAAV01@ABV01@@Z
??Z?$complex@M@std@@QAEAAV01@ABM@Z
??Z?$complex@M@std@@QAEAAV01@ABV01@@Z
??Z?$complex@N@std@@QAEAAV01@ABN@Z
??Z?$complex@N@std@@QAEAAV01@ABV01@@Z
??Z?$complex@O@std@@QAEAAV01@ABO@Z
??Z?$complex@O@std@@QAEAAV01@ABV01@@Z
??_0?$complex@M@std@@QAEAAV01@ABM@Z
??_0?$complex@M@std@@QAEAAV01@ABV01@@Z
??_0?$complex@N@std@@QAEAAV01@ABN@Z
??_0?$complex@N@std@@QAEAAV01@ABV01@@Z
??_0?$complex@O@std@@QAEAAV01@ABO@Z
??_0?$complex@O@std@@QAEAAV01@ABV01@@Z
??_7?$_Mpunct@D@std@@6B@
??_7?$_Mpunct@G@std@@6B@
??_7?$_Mpunct@_W@std@@6B@
??_7?$basic_filebuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_filebuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_fstream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_fstream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_fstream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ifstream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??_7?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@6B@
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ofstream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??_7?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??_7?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@6B@
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??_7?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??_7?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@6B@
??_7?$codecvt@DDH@std@@6B@
??_7?$codecvt@GDH@std@@6B@
??_7?$codecvt@_WDH@std@@6B@
??_7?$collate@D@std@@6B@
??_7?$collate@G@std@@6B@
??_7?$collate@_W@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$messages@D@std@@6B@
??_7?$messages@G@std@@6B@
??_7?$messages@_W@std@@6B@
??_7?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$moneypunct@D$00@std@@6B@
??_7?$moneypunct@D$0A@@std@@6B@
??_7?$moneypunct@G$00@std@@6B@
??_7?$moneypunct@G$0A@@std@@6B@
??_7?$moneypunct@_W$00@std@@6B@
??_7?$moneypunct@_W$0A@@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$numpunct@D@std@@6B@
??_7?$numpunct@G@std@@6B@
??_7?$numpunct@_W@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7messages_base@std@@6B@
??_7money_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_fstream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_fstream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_fstream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_fstream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_fstream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_fstream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ifstream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??_8?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B@
??_8?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@7B@
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ofstream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??_8?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B@
??_8?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@7B@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_D?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_D?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_D?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_F?$_String_val@DV?$allocator@D@std@@@std@@QAEXXZ
??_F?$_String_val@GV?$allocator@G@std@@@std@@QAEXXZ
??_F?$_String_val@_WV?$allocator@_W@std@@@std@@QAEXXZ
??_F?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEXXZ
??_F?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEXXZ
??_F?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
??_F?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_F?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_F?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_F?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_F?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_F?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_F?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_F?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_F?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_F?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??_F?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??_F?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??_F?$codecvt@DDH@std@@QAEXXZ
??_F?$codecvt@GDH@std@@QAEXXZ
??_F?$codecvt@_WDH@std@@QAEXXZ
??_F?$collate@D@std@@QAEXXZ
??_F?$collate@G@std@@QAEXXZ
??_F?$collate@_W@std@@QAEXXZ
??_F?$complex@M@std@@QAEXXZ
??_F?$complex@N@std@@QAEXXZ
??_F?$complex@O@std@@QAEXXZ
??_F?$ctype@D@std@@QAEXXZ
??_F?$ctype@G@std@@QAEXXZ
??_F?$ctype@_W@std@@QAEXXZ
??_F?$messages@D@std@@QAEXXZ
??_F?$messages@G@std@@QAEXXZ
??_F?$messages@_W@std@@QAEXXZ
??_F?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$moneypunct@D$00@std@@QAEXXZ
??_F?$moneypunct@D$0A@@std@@QAEXXZ
??_F?$moneypunct@G$00@std@@QAEXXZ
??_F?$moneypunct@G$0A@@std@@QAEXXZ
??_F?$moneypunct@_W$00@std@@QAEXXZ
??_F?$moneypunct@_W$0A@@std@@QAEXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$numpunct@D@std@@QAEXXZ
??_F?$numpunct@G@std@@QAEXXZ
??_F?$numpunct@_W@std@@QAEXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ
??_F_Locinfo@std@@QAEXXZ
??_F_Timevec@std@@QAEXXZ
??_Fcodecvt_base@std@@QAEXXZ
??_Fctype_base@std@@QAEXXZ
??_Ffacet@locale@std@@QAEXXZ
??_Fid@locale@std@@QAEXXZ
??_Fmessages_base@std@@QAEXXZ
??_Fmoney_base@std@@QAEXXZ
??_Ftime_base@std@@QAEXXZ
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z
?_Addfac@locale@std@@QAEAAV12@PAVfacet@12@II@Z
?_Addstd@ios_base@std@@QAEXXZ
?_BADOFF@std@@3JB
?_Callfns@ios_base@std@@AAEXW4event@12@@Z
?_Clocptr@_Locimp@locale@std@@0PAV123@A
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXII@Z
?_Copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXII@Z
?_Copy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEXII@Z
?_Cosh@?$_Ctraits@M@std@@SAMMM@Z
?_Cosh@?$_Ctraits@N@std@@SANNN@Z
?_Cosh@?$_Ctraits@O@std@@SAOOO@Z
?_Decref@facet@locale@std@@QAEPAV123@XZ
?_Donarrow@?$ctype@G@std@@IBEDGD@Z
?_Donarrow@?$ctype@_W@std@@IBED_WD@Z
?_Dowiden@?$ctype@G@std@@IBEGD@Z
?_Dowiden@?$ctype@_W@std@@IBE_WD@Z
?_Endwrite@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAE_NXZ
?_Endwrite@?$basic_filebuf@GU?$char_traits@G@std@@@std@@IAE_NXZ
?_Endwrite@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@IAE_NXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXI@Z
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXI@Z
?_Eos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEXI@Z
?_Exp@?$_Ctraits@M@std@@SAFPAMMF@Z
?_Exp@?$_Ctraits@N@std@@SAFPANNF@Z
?_Exp@?$_Ctraits@O@std@@SAFPAOOF@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z
?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z
?_Fpz@std@@3_JA
?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$collate@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$collate@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$collate@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$messages@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$messages@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$messages@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@D$00@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@D$0A@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@G$00@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@G$0A@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@_W$00@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$moneypunct@_W$0A@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$numpunct@G@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$numpunct@_W@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@@Z
?_Getcat@facet@locale@std@@SAIPAPBV123@@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QBEHXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1ABVlocale@2@@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1ABVlocale@2@@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1ABVlocale@2@@Z
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAH@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAH@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAH@Z
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getmfld@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@AAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0_NAAVios_base@2@@Z
?_Getmfld@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@AAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0_NAAVios_base@2@@Z
?_Getmfld@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@AAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0_NAAVios_base@2@@Z
?_Getmonths@_Locinfo@std@@QBEPBDXZ
?_Getname@_Locinfo@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?_Getptr@_Timevec@std@@QBEPAXXZ
?_Getstate@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
?_Getstate@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEHH@Z
?_Getstate@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAEHH@Z
?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAE_NI_N@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAE_NI_N@Z
?_Grow@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAE_NI_N@Z
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Index@ios_base@std@@0HA
?_Infv@?$_Ctraits@M@std@@SAMM@Z
?_Infv@?$_Ctraits@N@std@@SANN@Z
?_Infv@?$_Ctraits@O@std@@SAOO@Z
?_Init@?$_Mpunct@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$_Mpunct@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$_Mpunct@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?_Init@?$basic_filebuf@GU?$char_traits@G@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?_Init@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAPAD0PAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAPAG0PAH001@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPAPA_W0PAH001@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
?_Init@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXPBGIH@Z
?_Init@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEXPB_WIH@Z
?_Init@?$codecvt@DDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$codecvt@GDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$codecvt@_WDH@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$collate@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$collate@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$collate@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$ctype@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$messages@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$messages@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$messages@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$numpunct@D@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$numpunct@G@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$numpunct@_W@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?_Init@ios_base@std@@IAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
?_Init_cnt@Init@ios_base@std@@0HA
?_Init_cnt@_UShinit@std@@0HA
?_Init_cnt@_Winit@std@@0HA
?_Initcvt@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAV?$codecvt@DDH@2@@Z
?_Initcvt@?$basic_filebuf@GU?$char_traits@G@std@@@std@@IAEXPAV?$codecvt@GDH@2@@Z
?_Initcvt@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@IAEXPAV?$codecvt@_WDH@2@@Z
?_Inside@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAE_NPBD@Z
?_Inside@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAE_NPBG@Z
?_Inside@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAE_NPB_W@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?_Iput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPADI@Z
?_Iput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPADI@Z
?_Iput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPADI@Z
?_Isinf@?$_Ctraits@M@std@@SA_NM@Z
?_Isinf@?$_Ctraits@N@std@@SA_NN@Z
?_Isinf@?$_Ctraits@O@std@@SA_NO@Z
?_Isnan@?$_Ctraits@M@std@@SA_NM@Z
?_Isnan@?$_Ctraits@N@std@@SA_NN@Z
?_Isnan@?$_Ctraits@O@std@@SA_NO@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
?_Makpat@?$_Mpunct@D@std@@AAEXAAUpattern@money_base@2@III@Z
?_Makpat@?$_Mpunct@G@std@@AAEXAAUpattern@money_base@2@III@Z
?_Makpat@?$_Mpunct@_W@std@@AAEXAAUpattern@money_base@2@III@Z
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ
?_Myptr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ
?_Myptr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEPA_WXZ
?_Myptr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?_Nanv@?$_Ctraits@M@std@@SAMM@Z
?_Nanv@?$_Ctraits@N@std@@SANN@Z
?_Nanv@?$_Ctraits@O@std@@SAOO@Z
?_Nomemory@std@@YAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Pdif@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@KAIVconst_iterator@12@0@Z
?_Pdif@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@KAIVconst_iterator@12@0@Z
?_Pdif@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KAIVconst_iterator@12@0@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?_Ptr_cerr@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_cin@std@@3PAV?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Ptr_clog@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_cout@std@@3PAV?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ptr_wcerr@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcerr@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wcin@std@@3PAV?$basic_istream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcin@std@@3PAV?$basic_istream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wclog@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wclog@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Ptr_wcout@std@@3PAV?$basic_ostream@GU?$char_traits@G@std@@@1@A
?_Ptr_wcout@std@@3PAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?_Put@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@Vconst_iterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@I@Z
?_Put@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@I@Z
?_Put@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@Vconst_iterator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@I@Z
?_Put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PBDI@Z
?_Put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PBGI@Z
?_Put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PB_WI@Z
?_Putc@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PBDI@Z
?_Putc@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PBDI@Z
?_Putc@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PBDI@Z
?_Putgrouped@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PBDID@Z
?_Putgrouped@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PBDIG@Z
?_Putgrouped@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PBDI_W@Z
?_Putmfld@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@_NAAVios_base@2@D1V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?_Putmfld@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@_NAAVios_base@2@G1V?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?_Putmfld@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_NAAVios_base@2@_W1V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?_Register@facet@locale@std@@QAEXXZ
?_Rep@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@DI@Z
?_Rep@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@GI@Z
?_Rep@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@CA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_WI@Z
?_Rep@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@DI@Z
?_Rep@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@GI@Z
?_Rep@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_WI@Z
?_Root2@?CA@???$_Fabs@M@std@@YAMABV?$complex@M@1@PAH@Z@4MB
?_Root2@?CA@???$_Fabs@N@std@@YANABV?$complex@N@1@PAH@Z@4NB
?_Sinh@?$_Ctraits@M@std@@SAMMM@Z
?_Sinh@?$_Ctraits@N@std@@SANNN@Z
?_Sinh@?$_Ctraits@O@std@@SAOOO@Z
?_Stinit@?1??_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
?_Stinit@?1??_Init@?$basic_filebuf@GU?$char_traits@G@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
?_Stinit@?1??_Init@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@23@@Z@4HA
?_Sync@ios_base@std@@0_NA
?_Tidy@?$_Mpunct@D@std@@AAEXXZ
?_Tidy@?$_Mpunct@G@std@@AAEXXZ
?_Tidy@?$_Mpunct@_W@std@@AAEXXZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
?_Tidy@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@IAEXXZ
?_Tidy@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEXXZ
?_Tidy@?$ctype@D@std@@IAEXXZ
?_Tidy@?$numpunct@D@std@@AAEXXZ
?_Tidy@?$numpunct@G@std@@AAEXXZ
?_Tidy@?$numpunct@_W@std@@AAEXXZ
?_Tidy@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AAEXXZ
?_Tidy@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AAEXXZ
?_Tidy@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AAEXXZ
?_Tidy@ios_base@std@@AAEXXZ
?_Tidy@strstreambuf@std@@IAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Xlen@_String_base@std@@QBEXXZ
?_Xran@_String_base@std@@QBEXXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W0@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_W@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@PB_WI@Z
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Vconst_iterator@12@0@Z
?assign@?$char_traits@D@std@@SAPADPADID@Z
?assign@?$char_traits@D@std@@SAXAADABD@Z
?assign@?$char_traits@G@std@@SAPAGPAGIG@Z
?assign@?$char_traits@G@std@@SAXAAGABG@Z
?assign@?$char_traits@_W@std@@SAPA_WPA_WI_W@Z
?assign@?$char_traits@_W@std@@SAXAA_WAB_W@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEABDI@Z
?at@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
?at@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEABGI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAA_WI@Z
?at@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEAB_WI@Z
?atan2@?$_Ctraits@M@std@@SAMMM@Z
?atan2@?$_Ctraits@N@std@@SANNN@Z
?atan2@?$_Ctraits@O@std@@SAOOO@Z
?bad@ios_base@std@@QBE_NXZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AVconst_iterator@12@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AVconst_iterator@12@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?capacity@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?capacity@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAABV12@XZ
?classic_table@?$ctype@D@std@@KAPBFXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?clear@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?clear@ios_base@std@@QAEXH@Z
?clear@ios_base@std@@QAEXH_N@Z
?clear@ios_base@std@@QAEXI@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
?close@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@XZ
?close@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@XZ
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?close@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?close@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXXZ
?close@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?close@?$messages@D@std@@QBEXH@Z
?close@?$messages@G@std@@QBEXH@Z
?close@?$messages@_W@std@@QBEXH@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIABV12@II@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBD@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHPBD@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@II@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHPBG@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHABV12@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIABV12@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIABV12@II@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIPB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHIIPB_WI@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?compare@?$char_traits@G@std@@SAHPBG0I@Z
?compare@?$char_traits@_W@std@@SAHPB_W0I@Z
?compare@?$collate@D@std@@QBEHPBD000@Z
?compare@?$collate@G@std@@QBEHPBG000@Z
?compare@?$collate@_W@std@@QBEHPB_W000@Z
?copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADII@Z
?copy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPAGII@Z
?copy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPA_WII@Z
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?copy@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?copy@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEAAV12@ABV12@@Z
?copyfmt@ios_base@std@@QAEAAV12@ABV12@@Z
?cos@?$_Ctraits@M@std@@SAMM@Z
?cos@?$_Ctraits@N@std@@SANN@Z
?cos@?$_Ctraits@O@std@@SAOO@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?curr_symbol@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?curr_symbol@?$_Mpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?curr_symbol@?$_Mpunct@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?data@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?data@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ
?date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AW4dateorder@time_base@2@XZ
?decimal_point@?$_Mpunct@D@std@@QBEDXZ
?decimal_point@?$_Mpunct@G@std@@QBEGXZ
?decimal_point@?$_Mpunct@_W@std@@QBE_WXZ
?decimal_point@?$numpunct@D@std@@QBEDXZ
?decimal_point@?$numpunct@G@std@@QBEGXZ
?decimal_point@?$numpunct@_W@std@@QBE_WXZ
?denorm_min@?$numeric_limits@C@std@@SACXZ
?denorm_min@?$numeric_limits@D@std@@SADXZ
?denorm_min@?$numeric_limits@E@std@@SAEXZ
?denorm_min@?$numeric_limits@F@std@@SAFXZ
?denorm_min@?$numeric_limits@G@std@@SAGXZ
?denorm_min@?$numeric_limits@H@std@@SAHXZ
?denorm_min@?$numeric_limits@I@std@@SAIXZ
?denorm_min@?$numeric_limits@J@std@@SAJXZ
?denorm_min@?$numeric_limits@K@std@@SAKXZ
?denorm_min@?$numeric_limits@M@std@@SAMXZ
?denorm_min@?$numeric_limits@N@std@@SANXZ
?denorm_min@?$numeric_limits@O@std@@SAOXZ
?denorm_min@?$numeric_limits@_J@std@@SA_JXZ
?denorm_min@?$numeric_limits@_K@std@@SA_KXZ
?denorm_min@?$numeric_limits@_N@std@@SA_NXZ
?denorm_min@?$numeric_limits@_W@std@@SA_WXZ
?digits10@?$numeric_limits@C@std@@2HB
?digits10@?$numeric_limits@D@std@@2HB
?digits10@?$numeric_limits@E@std@@2HB
?digits10@?$numeric_limits@F@std@@2HB
?digits10@?$numeric_limits@G@std@@2HB
?digits10@?$numeric_limits@H@std@@2HB
?digits10@?$numeric_limits@I@std@@2HB
?digits10@?$numeric_limits@J@std@@2HB
?digits10@?$numeric_limits@K@std@@2HB
?digits10@?$numeric_limits@M@std@@2HB
?digits10@?$numeric_limits@N@std@@2HB
?digits10@?$numeric_limits@O@std@@2HB
?digits10@?$numeric_limits@_J@std@@2HB
?digits10@?$numeric_limits@_K@std@@2HB
?digits10@?$numeric_limits@_N@std@@2HB
?digits10@?$numeric_limits@_W@std@@2HB
?digits10@_Num_base@std@@2HB
?digits@?$numeric_limits@C@std@@2HB
?digits@?$numeric_limits@D@std@@2HB
?digits@?$numeric_limits@E@std@@2HB
?digits@?$numeric_limits@F@std@@2HB
?digits@?$numeric_limits@G@std@@2HB
?digits@?$numeric_limits@H@std@@2HB
?digits@?$numeric_limits@I@std@@2HB
?digits@?$numeric_limits@J@std@@2HB
?digits@?$numeric_limits@K@std@@2HB
?digits@?$numeric_limits@M@std@@2HB
?digits@?$numeric_limits@N@std@@2HB
?digits@?$numeric_limits@O@std@@2HB
?digits@?$numeric_limits@_J@std@@2HB
?digits@?$numeric_limits@_K@std@@2HB
?digits@?$numeric_limits@_N@std@@2HB
?digits@?$numeric_limits@_W@std@@2HB
?digits@_Num_base@std@@2HB
?do_always_noconv@?$codecvt@GDH@std@@MBE_NXZ
?do_always_noconv@?$codecvt@_WDH@std@@MBE_NXZ
?do_always_noconv@codecvt_base@std@@MBE_NXZ
?do_close@?$messages@D@std@@MBEXH@Z
?do_close@?$messages@G@std@@MBEXH@Z
?do_close@?$messages@_W@std@@MBEXH@Z
?do_compare@?$collate@D@std@@MBEHPBD000@Z
?do_compare@?$collate@G@std@@MBEHPBG000@Z
?do_compare@?$collate@_W@std@@MBEHPB_W000@Z
?do_curr_symbol@?$_Mpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_curr_symbol@?$_Mpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_curr_symbol@?$_Mpunct@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?do_date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AW4dateorder@time_base@2@XZ
?do_decimal_point@?$_Mpunct@D@std@@MBEDXZ
?do_decimal_point@?$_Mpunct@G@std@@MBEGXZ
?do_decimal_point@?$_Mpunct@_W@std@@MBE_WXZ
?do_decimal_point@?$numpunct@D@std@@MBEDXZ
?do_decimal_point@?$numpunct@G@std@@MBEGXZ
?do_decimal_point@?$numpunct@_W@std@@MBE_WXZ
?do_encoding@?$codecvt@GDH@std@@MBEHXZ
?do_encoding@?$codecvt@_WDH@std@@MBEHXZ
?do_encoding@codecvt_base@std@@MBEHXZ
?do_falsename@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_falsename@?$numpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_falsename@?$numpunct@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?do_frac_digits@?$_Mpunct@D@std@@MBEHXZ
?do_frac_digits@?$_Mpunct@G@std@@MBEHXZ
?do_frac_digits@?$_Mpunct@_W@std@@MBEHXZ
?do_get@?$messages@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z
?do_get@?$messages@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@HHHABV32@@Z
?do_get@?$messages@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@HHHABV32@@Z
?do_get@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?do_get@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?do_get@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?do_get@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?do_get@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?do_get@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?do_get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?do_grouping@?$_Mpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_grouping@?$_Mpunct@G@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_grouping@?$_Mpunct@_W@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_grouping@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_grouping@?$numpunct@G@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_grouping@?$numpunct@_W@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_hash@?$collate@D@std@@MBEJPBD0@Z
?do_hash@?$collate@G@std@@MBEJPBG0@Z
?do_hash@?$collate@_W@std@@MBEJPB_W0@Z
?do_in@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_in@?$codecvt@GDH@std@@MBEHAAHPBD1AAPBDPAG3AAPAG@Z
?do_in@?$codecvt@_WDH@std@@MBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?do_is@?$ctype@G@std@@MBEPBGPBG0PAF@Z
?do_is@?$ctype@G@std@@MBE_NFG@Z
?do_is@?$ctype@_W@std@@MBEPB_WPB_W0PAF@Z
?do_is@?$ctype@_W@std@@MBE_NF_W@Z
?do_length@?$codecvt@DDH@std@@MBEHABHPBD1I@Z
?do_length@?$codecvt@GDH@std@@MBEHABHPBD1I@Z
?do_length@?$codecvt@_WDH@std@@MBEHABHPBD1I@Z
?do_max_length@?$codecvt@GDH@std@@MBEHXZ
?do_max_length@?$codecvt@_WDH@std@@MBEHXZ
?do_max_length@codecvt_base@std@@MBEHXZ
?do_narrow@?$ctype@D@std@@MBEDDD@Z
?do_narrow@?$ctype@D@std@@MBEPBDPBD0DPAD@Z
?do_narrow@?$ctype@G@std@@MBEDGD@Z
?do_narrow@?$ctype@G@std@@MBEPBGPBG0DPAD@Z
?do_narrow@?$ctype@_W@std@@MBED_WD@Z
?do_narrow@?$ctype@_W@std@@MBEPB_WPB_W0DPAD@Z
?do_neg_format@?$_Mpunct@D@std@@MBE?AUpattern@money_base@2@XZ
?do_neg_format@?$_Mpunct@G@std@@MBE?AUpattern@money_base@2@XZ
?do_neg_format@?$_Mpunct@_W@std@@MBE?AUpattern@money_base@2@XZ
?do_negative_sign@?$_Mpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_negative_sign@?$_Mpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_negative_sign@?$_Mpunct@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?do_open@?$messages@D@std@@MBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?do_open@?$messages@G@std@@MBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?do_open@?$messages@_W@std@@MBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?do_out@?$codecvt@DDH@std@@MBEHAAHPBD1AAPBDPAD3AAPAD@Z
?do_out@?$codecvt@GDH@std@@MBEHAAHPBG1AAPBGPAD3AAPAD@Z
?do_out@?$codecvt@_WDH@std@@MBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?do_pos_format@?$_Mpunct@D@std@@MBE?AUpattern@money_base@2@XZ
?do_pos_format@?$_Mpunct@G@std@@MBE?AUpattern@money_base@2@XZ
?do_pos_format@?$_Mpunct@_W@std@@MBE?AUpattern@money_base@2@XZ
?do_positive_sign@?$_Mpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_positive_sign@?$_Mpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_positive_sign@?$_Mpunct@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?do_put@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@_NAAVios_base@2@DABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?do_put@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@_NAAVios_base@2@DO@Z
?do_put@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@_NAAVios_base@2@GABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?do_put@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@_NAAVios_base@2@GO@Z
?do_put@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_NAAVios_base@2@_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?do_put@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_NAAVios_base@2@_WO@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z
?do_put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z
?do_put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z
?do_put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z
?do_scan_is@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_scan_is@?$ctype@_W@std@@MBEPB_WFPB_W0@Z
?do_scan_not@?$ctype@G@std@@MBEPBGFPBG0@Z
?do_scan_not@?$ctype@_W@std@@MBEPB_WFPB_W0@Z
?do_thousands_sep@?$_Mpunct@D@std@@MBEDXZ
?do_thousands_sep@?$_Mpunct@G@std@@MBEGXZ
?do_thousands_sep@?$_Mpunct@_W@std@@MBE_WXZ
?do_thousands_sep@?$numpunct@D@std@@MBEDXZ
?do_thousands_sep@?$numpunct@G@std@@MBEGXZ
?do_thousands_sep@?$numpunct@_W@std@@MBE_WXZ
?do_tolower@?$ctype@D@std@@MBEDD@Z
?do_tolower@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_tolower@?$ctype@G@std@@MBEGG@Z
?do_tolower@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_tolower@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z
?do_tolower@?$ctype@_W@std@@MBE_W_W@Z
?do_toupper@?$ctype@D@std@@MBEDD@Z
?do_toupper@?$ctype@D@std@@MBEPBDPADPBD@Z
?do_toupper@?$ctype@G@std@@MBEGG@Z
?do_toupper@?$ctype@G@std@@MBEPBGPAGPBG@Z
?do_toupper@?$ctype@_W@std@@MBEPB_WPA_WPB_W@Z
?do_toupper@?$ctype@_W@std@@MBE_W_W@Z
?do_transform@?$collate@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD0@Z
?do_transform@?$collate@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@PBG0@Z
?do_transform@?$collate@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@PB_W0@Z
?do_truename@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?do_truename@?$numpunct@G@std@@MBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?do_truename@?$numpunct@_W@std@@MBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?do_unshift@?$codecvt@DDH@std@@MBEHAAHPAD1AAPAD@Z
?do_unshift@?$codecvt@GDH@std@@MBEHAAHPAD1AAPAD@Z
?do_unshift@?$codecvt@_WDH@std@@MBEHAAHPAD1AAPAD@Z
?do_widen@?$ctype@D@std@@MBEDD@Z
?do_widen@?$ctype@D@std@@MBEPBDPBD0PAD@Z
?do_widen@?$ctype@G@std@@MBEGD@Z
?do_widen@?$ctype@G@std@@MBEPBDPBD0PAG@Z
?do_widen@?$ctype@_W@std@@MBEPBDPBD0PA_W@Z
?do_widen@?$ctype@_W@std@@MBE_WD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
?empty@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE_NXZ
?empty@locale@std@@SA?AV12@XZ
?encoding@codecvt_base@std@@QBEHXZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AVconst_iterator@12@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AVconst_iterator@12@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AVconst_iterator@12@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?endl@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?ends@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?eof@?$char_traits@D@std@@SAHXZ
?eof@?$char_traits@G@std@@SAGXZ
?eof@?$char_traits@_W@std@@SAGXZ
?eof@ios_base@std@@QBE_NXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?epsilon@?$numeric_limits@C@std@@SACXZ
?epsilon@?$numeric_limits@D@std@@SADXZ
?epsilon@?$numeric_limits@E@std@@SAEXZ
?epsilon@?$numeric_limits@F@std@@SAFXZ
?epsilon@?$numeric_limits@G@std@@SAGXZ
?epsilon@?$numeric_limits@H@std@@SAHXZ
?epsilon@?$numeric_limits@I@std@@SAIXZ
?epsilon@?$numeric_limits@J@std@@SAJXZ
?epsilon@?$numeric_limits@K@std@@SAKXZ
?epsilon@?$numeric_limits@M@std@@SAMXZ
?epsilon@?$numeric_limits@N@std@@SANXZ
?epsilon@?$numeric_limits@O@std@@SAOXZ
?epsilon@?$numeric_limits@_J@std@@SA_JXZ
?epsilon@?$numeric_limits@_K@std@@SA_KXZ
?epsilon@?$numeric_limits@_N@std@@SA_NXZ
?epsilon@?$numeric_limits@_W@std@@SA_WXZ
?eq@?$char_traits@D@std@@SA_NABD0@Z
?eq@?$char_traits@G@std@@SA_NABG0@Z
?eq@?$char_traits@_W@std@@SA_NAB_W0@Z
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?eq_int_type@?$char_traits@G@std@@SA_NABG0@Z
?eq_int_type@?$char_traits@_W@std@@SA_NABG0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@0@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@V312@0@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@V312@@Z
?erase@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@II@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@0@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@@Z
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
?exceptions@ios_base@std@@QAEXH@Z
?exceptions@ios_base@std@@QAEXI@Z
?exceptions@ios_base@std@@QBEHXZ
?exp@?$_Ctraits@M@std@@SAMM@Z
?exp@?$_Ctraits@N@std@@SANN@Z
?exp@?$_Ctraits@O@std@@SAOO@Z
?fail@ios_base@std@@QBE_NXZ
?falsename@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?falsename@?$numpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?falsename@?$numpunct@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGXZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE_W_W@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WXZ
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find@?$char_traits@D@std@@SAPBDPBDIABD@Z
?find@?$char_traits@G@std@@SAPBGPBGIABG@Z
?find@?$char_traits@_W@std@@SAPB_WPB_WIAB_W@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_first_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find_first_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_last_not_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?find_last_of@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?flags@ios_base@std@@QAEHH@Z
?flags@ios_base@std@@QBEHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?flush@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?flush@std@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?frac_digits@?$_Mpunct@D@std@@QBEHXZ
?frac_digits@?$_Mpunct@G@std@@QBEHXZ
?frac_digits@?$_Mpunct@_W@std@@QBEHXZ
?freeze@strstreambuf@std@@QAEX_N@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QBEHXZ
?gcount@?$basic_istream@GU?$char_traits@G@std@@@std@@QBEHXZ
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QBEHXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAV?$basic_streambuf@DU?$char_traits@D@std@@@2@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@AAV?$basic_streambuf@GU?$char_traits@G@std@@@2@G@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGHG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@AA_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?get@?$messages@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z
?get@?$messages@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@HHHABV32@@Z
?get@?$messages@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@HHHABV32@@Z
?get@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?get@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?get@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?get@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?get@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0_NAAVios_base@2@AAHAAO@Z
?get@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0_NAAVios_base@2@AAHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAG@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAI@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAJ@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAK@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAM@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAN@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAO@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAAPAX@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_J@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_K@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHAA_N@Z
?get_allocator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$allocator@D@2@XZ
?get_allocator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$allocator@G@2@XZ
?get_allocator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$allocator@_W@2@XZ
?get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGHG@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH_W@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QBE?AVlocale@2@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?global@locale@std@@SA?AV12@ABV12@@Z
?good@ios_base@std@@QBE_NXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?grouping@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?grouping@?$_Mpunct@G@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?grouping@?$_Mpunct@_W@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?grouping@?$numpunct@G@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?grouping@?$numpunct@_W@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?has_denorm@_Num_base@std@@2W4float_denorm_style@2@B
?has_denorm@_Num_float_base@std@@2W4float_denorm_style@2@B
?has_denorm_loss@_Num_base@std@@2_NB
?has_denorm_loss@_Num_float_base@std@@2_NB
?has_infinity@_Num_base@std@@2_NB
?has_infinity@_Num_float_base@std@@2_NB
?has_quiet_NaN@_Num_base@std@@2_NB
?has_quiet_NaN@_Num_float_base@std@@2_NB
?has_signaling_NaN@_Num_base@std@@2_NB
?has_signaling_NaN@_Num_float_base@std@@2_NB
?hash@?$collate@D@std@@QBEJPBD0@Z
?hash@?$collate@G@std@@QBEJPBG0@Z
?hash@?$collate@_W@std@@QBEJPB_W0@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
?id@?$codecvt@GDH@std@@2V0locale@2@A
?id@?$codecvt@_WDH@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@G@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@G@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$messages@D@std@@2V0locale@2@A
?id@?$messages@G@std@@2V0locale@2@A
?id@?$messages@_W@std@@2V0locale@2@A
?id@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$moneypunct@D$00@std@@2V0locale@2@A
?id@?$moneypunct@D$0A@@std@@2V0locale@2@A
?id@?$moneypunct@G$00@std@@2V0locale@2@A
?id@?$moneypunct@G$0A@@std@@2V0locale@2@A
?id@?$moneypunct@_W$00@std@@2V0locale@2@A
?id@?$moneypunct@_W$0A@@std@@2V0locale@2@A
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@G@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
?ignore@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@HG@Z
?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@HG@Z
?imag@?$_Complex_base@MU_C_float_complex@@@std@@QAEMABM@Z
?imag@?$_Complex_base@MU_C_float_complex@@@std@@QBEMXZ
?imag@?$_Complex_base@NU_C_double_complex@@@std@@QAENABN@Z
?imag@?$_Complex_base@NU_C_double_complex@@@std@@QBENXZ
?imag@?$_Complex_base@OU_C_ldouble_complex@@@std@@QAEOABO@Z
?imag@?$_Complex_base@OU_C_ldouble_complex@@@std@@QBEOXZ
?imbue@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEXABVlocale@2@@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
?imbue@ios_base@std@@QAE?AVlocale@2@ABV32@@Z
?in@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@GDH@std@@QBEHAAHPBD1AAPBDPAG3AAPAG@Z
?in@?$codecvt@_WDH@std@@QBEHAAHPBD1AAPBDPA_W3AAPA_W@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?in_avail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ
?in_avail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?infinity@?$numeric_limits@C@std@@SACXZ
?infinity@?$numeric_limits@D@std@@SADXZ
?infinity@?$numeric_limits@E@std@@SAEXZ
?infinity@?$numeric_limits@F@std@@SAFXZ
?infinity@?$numeric_limits@G@std@@SAGXZ
?infinity@?$numeric_limits@H@std@@SAHXZ
?infinity@?$numeric_limits@I@std@@SAIXZ
?infinity@?$numeric_limits@J@std@@SAJXZ
?infinity@?$numeric_limits@K@std@@SAKXZ
?infinity@?$numeric_limits@M@std@@SAMXZ
?infinity@?$numeric_limits@N@std@@SANXZ
?infinity@?$numeric_limits@O@std@@SAOXZ
?infinity@?$numeric_limits@_J@std@@SA_JXZ
?infinity@?$numeric_limits@_K@std@@SA_KXZ
?infinity@?$numeric_limits@_N@std@@SA_NXZ
?infinity@?$numeric_limits@_W@std@@SA_WXZ
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IAEXPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?init@?$basic_ios@GU?$char_traits@G@std@@@std@@IAEXPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@_N@Z
?init@?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAEXPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_N@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AViterator@12@V312@D@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@II@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IID@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXViterator@12@ID@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXViterator@12@PBD1@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXViterator@12@Vconst_iterator@12@1@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@V312@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AViterator@12@V312@G@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IABV12@II@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIG@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBG@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IPBGI@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXViterator@12@IG@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXViterator@12@PBG1@Z
?insert@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXViterator@12@Vconst_iterator@12@1@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AViterator@12@V312@_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IABV12@@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IABV12@II@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IPB_WI@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXViterator@12@I_W@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXViterator@12@PB_W1@Z
?insert@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXViterator@12@Vconst_iterator@12@1@Z
?intl@?$moneypunct@D$00@std@@2_NB
?intl@?$moneypunct@D$0A@@std@@2_NB
?intl@?$moneypunct@G$00@std@@2_NB
?intl@?$moneypunct@G$0A@@std@@2_NB
?intl@?$moneypunct@_W$00@std@@2_NB
?intl@?$moneypunct@_W$0A@@std@@2_NB
?ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE_N_N@Z
?ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?is@?$ctype@D@std@@QBEPBDPBD0PAF@Z
?is@?$ctype@D@std@@QBE_NFD@Z
?is@?$ctype@G@std@@QBEPBGPBG0PAF@Z
?is@?$ctype@G@std@@QBE_NFG@Z
?is@?$ctype@_W@std@@QBEPB_WPB_W0PAF@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?is_bounded@_Num_base@std@@2_NB
?is_bounded@_Num_float_base@std@@2_NB
?is_bounded@_Num_int_base@std@@2_NB
?is_exact@_Num_base@std@@2_NB
?is_exact@_Num_float_base@std@@2_NB
?is_exact@_Num_int_base@std@@2_NB
?is_iec559@_Num_base@std@@2_NB
?is_iec559@_Num_float_base@std@@2_NB
?is_integer@_Num_base@std@@2_NB
?is_integer@_Num_float_base@std@@2_NB
?is_integer@_Num_int_base@std@@2_NB
?is_modulo@?$numeric_limits@_N@std@@2_NB
?is_modulo@_Num_base@std@@2_NB
?is_modulo@_Num_float_base@std@@2_NB
?is_modulo@_Num_int_base@std@@2_NB
?is_open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QBE_NXZ
?is_open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QBE_NXZ
?is_open@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QBE_NXZ
?is_open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?is_open@?$basic_fstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
?is_open@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QBE_NXZ
?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?is_open@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
?is_open@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QBE_NXZ
?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ
?is_open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
?is_open@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QBE_NXZ
?is_signed@?$numeric_limits@C@std@@2_NB
?is_signed@?$numeric_limits@D@std@@2_NB
?is_signed@?$numeric_limits@E@std@@2_NB
?is_signed@?$numeric_limits@F@std@@2_NB
?is_signed@?$numeric_limits@G@std@@2_NB
?is_signed@?$numeric_limits@H@std@@2_NB
?is_signed@?$numeric_limits@I@std@@2_NB
?is_signed@?$numeric_limits@J@std@@2_NB
?is_signed@?$numeric_limits@K@std@@2_NB
?is_signed@?$numeric_limits@_J@std@@2_NB
?is_signed@?$numeric_limits@_K@std@@2_NB
?is_signed@?$numeric_limits@_N@std@@2_NB
?is_signed@?$numeric_limits@_W@std@@2_NB
?is_signed@_Num_base@std@@2_NB
?is_signed@_Num_float_base@std@@2_NB
?is_specialized@_Num_base@std@@2_NB
?is_specialized@_Num_float_base@std@@2_NB
?is_specialized@_Num_int_base@std@@2_NB
?isfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?isfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
?isfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?iword@ios_base@std@@QAEAAJH@Z
?ldexp@?$_Ctraits@M@std@@SAMMH@Z
?ldexp@?$_Ctraits@N@std@@SANNH@Z
?ldexp@?$_Ctraits@O@std@@SAOOH@Z
?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?length@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?length@?$char_traits@D@std@@SAIPBD@Z
?length@?$char_traits@G@std@@SAIPBG@Z
?length@?$char_traits@_W@std@@SAIPB_W@Z
?length@?$codecvt@DDH@std@@QBEHABHPBD1I@Z
?length@?$codecvt@GDH@std@@QBEHABHPBD1I@Z
?length@?$codecvt@_WDH@std@@QBEHABHPBD1I@Z
?log@?$_Ctraits@M@std@@SAMM@Z
?log@?$_Ctraits@N@std@@SANN@Z
?log@?$_Ctraits@O@std@@SAOO@Z
?lt@?$char_traits@D@std@@SA_NABD0@Z
?lt@?$char_traits@G@std@@SA_NABG0@Z
?lt@?$char_traits@_W@std@@SA_NAB_W0@Z
?max@?$numeric_limits@C@std@@SACXZ
?max@?$numeric_limits@D@std@@SADXZ
?max@?$numeric_limits@E@std@@SAEXZ
?max@?$numeric_limits@F@std@@SAFXZ
?max@?$numeric_limits@G@std@@SAGXZ
?max@?$numeric_limits@H@std@@SAHXZ
?max@?$numeric_limits@I@std@@SAIXZ
?max@?$numeric_limits@J@std@@SAJXZ
?max@?$numeric_limits@K@std@@SAKXZ
?max@?$numeric_limits@M@std@@SAMXZ
?max@?$numeric_limits@N@std@@SANXZ
?max@?$numeric_limits@O@std@@SAOXZ
?max@?$numeric_limits@_J@std@@SA_JXZ
?max@?$numeric_limits@_K@std@@SA_KXZ
?max@?$numeric_limits@_N@std@@SA_NXZ
?max@?$numeric_limits@_W@std@@SA_WXZ
?max_exponent10@?$numeric_limits@M@std@@2HB
?max_exponent10@?$numeric_limits@N@std@@2HB
?max_exponent10@?$numeric_limits@O@std@@2HB
?max_exponent10@_Num_base@std@@2HB
?max_exponent@?$numeric_limits@M@std@@2HB
?max_exponent@?$numeric_limits@N@std@@2HB
?max_exponent@?$numeric_limits@O@std@@2HB
?max_exponent@_Num_base@std@@2HB
?max_length@codecvt_base@std@@QBEHXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?max_size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?min@?$numeric_limits@C@std@@SACXZ
?min@?$numeric_limits@D@std@@SADXZ
?min@?$numeric_limits@E@std@@SAEXZ
?min@?$numeric_limits@F@std@@SAFXZ
?min@?$numeric_limits@G@std@@SAGXZ
?min@?$numeric_limits@H@std@@SAHXZ
?min@?$numeric_limits@I@std@@SAIXZ
?min@?$numeric_limits@J@std@@SAJXZ
?min@?$numeric_limits@K@std@@SAKXZ
?min@?$numeric_limits@M@std@@SAMXZ
?min@?$numeric_limits@N@std@@SANXZ
?min@?$numeric_limits@O@std@@SAOXZ
?min@?$numeric_limits@_J@std@@SA_JXZ
?min@?$numeric_limits@_K@std@@SA_KXZ
?min@?$numeric_limits@_N@std@@SA_NXZ
?min@?$numeric_limits@_W@std@@SA_WXZ
?min_exponent10@?$numeric_limits@M@std@@2HB
?min_exponent10@?$numeric_limits@N@std@@2HB
?min_exponent10@?$numeric_limits@O@std@@2HB
?min_exponent10@_Num_base@std@@2HB
?min_exponent@?$numeric_limits@M@std@@2HB
?min_exponent@?$numeric_limits@N@std@@2HB
?min_exponent@?$numeric_limits@O@std@@2HB
?min_exponent@_Num_base@std@@2HB
?move@?$char_traits@D@std@@SAPADPADPBDI@Z
?move@?$char_traits@G@std@@SAPAGPAGPBGI@Z
?move@?$char_traits@_W@std@@SAPA_WPA_WPB_WI@Z
?name@locale@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?narrow@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDDD@Z
?narrow@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEDGD@Z
?narrow@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBED_WD@Z
?narrow@?$ctype@D@std@@QBEDDD@Z
?narrow@?$ctype@D@std@@QBEPBDPBD0DPAD@Z
?narrow@?$ctype@G@std@@QBEDGD@Z
?narrow@?$ctype@G@std@@QBEPBGPBG0DPAD@Z
?narrow@?$ctype@_W@std@@QBED_WD@Z
?narrow@?$ctype@_W@std@@QBEPB_WPB_W0DPAD@Z
?neg_format@?$_Mpunct@D@std@@QBE?AUpattern@money_base@2@XZ
?neg_format@?$_Mpunct@G@std@@QBE?AUpattern@money_base@2@XZ
?neg_format@?$_Mpunct@_W@std@@QBE?AUpattern@money_base@2@XZ
?negative_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?negative_sign@?$_Mpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?negative_sign@?$_Mpunct@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?not_eof@?$char_traits@D@std@@SAHABH@Z
?not_eof@?$char_traits@G@std@@SAGABG@Z
?not_eof@?$char_traits@_W@std@@SAGABG@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDHH@Z
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDI@Z
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDHH@Z
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDI@Z
?open@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PBDHH@Z
?open@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PBDI@Z
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?open@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXPBDI@Z
?open@?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXPBDHH@Z
?open@?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXPBDI@Z
?open@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDHH@Z
?open@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDI@Z
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXPBDI@Z
?open@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXPBDI@Z
?open@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDI@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDI@Z
?open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXPBDI@Z
?open@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDHH@Z
?open@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QAEXPBDI@Z
?open@?$messages@D@std@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?open@?$messages@G@std@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?open@?$messages@_W@std@@QBEHABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@ABVlocale@2@@Z
?opfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE_NXZ
?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE_NXZ
?opfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE_NXZ
?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ
?osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?out@?$codecvt@DDH@std@@QBEHAAHPBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@GDH@std@@QBEHAAHPBG1AAPBGPAD3AAPAD@Z
?out@?$codecvt@_WDH@std@@QBEHAAHPB_W1AAPB_WPAD3AAPAD@Z
?overflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?overflow@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?overflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?overflow@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHH@Z
?overflow@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAEGG@Z
?overflow@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@MAEGG@Z
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbackfail@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?pbackfail@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?pbackfail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGG@Z
?pbackfail@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHH@Z
?pbackfail@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAEGG@Z
?pbackfail@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@MAEGG@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEGXZ
?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?pos_format@?$_Mpunct@D@std@@QBE?AUpattern@money_base@2@XZ
?pos_format@?$_Mpunct@G@std@@QBE?AUpattern@money_base@2@XZ
?pos_format@?$_Mpunct@_W@std@@QBE?AUpattern@money_base@2@XZ
?positive_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?positive_sign@?$_Mpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?positive_sign@?$_Mpunct@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?pow@?$_Ctraits@M@std@@SAMMM@Z
?pow@?$_Ctraits@N@std@@SANNN@Z
?pow@?$_Ctraits@O@std@@SAOOO@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBEPA_WXZ
?precision@ios_base@std@@QAEHH@Z
?precision@ios_base@std@@QBEHXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubimbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubimbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@JHH@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@JII@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@JHH@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@JII@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@JHH@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@JII@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@H@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@V32@I@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PADH@Z
?pubsetbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PAGH@Z
?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEPAV12@PA_WH@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHXZ
?pubsync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z
?push_back@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXG@Z
?push_back@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEX_W@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?put@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@_NAAVios_base@2@DABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?put@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@_NAAVios_base@2@DO@Z
?put@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@_NAAVios_base@2@GABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?put@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@_NAAVios_base@2@GO@Z
?put@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_NAAVios_base@2@_WABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?put@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_NAAVios_base@2@_WO@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DJ@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DK@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DN@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DO@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBX@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_J@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_K@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@D_N@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GJ@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GK@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GN@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GO@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBX@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_J@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_K@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@G_N@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WJ@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WK@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WN@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WO@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBX@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_J@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_K@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_W_N@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@DD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBUtm@@PBD3@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@DD@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBUtm@@PBG3@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@DD@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QBE?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBUtm@@PB_W4@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?putback@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@G@Z
?putback@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@_W@Z
?pword@ios_base@std@@QAEAAPAXH@Z
?quiet_NaN@?$numeric_limits@C@std@@SACXZ
?quiet_NaN@?$numeric_limits@D@std@@SADXZ
?quiet_NaN@?$numeric_limits@E@std@@SAEXZ
?quiet_NaN@?$numeric_limits@F@std@@SAFXZ
?quiet_NaN@?$numeric_limits@G@std@@SAGXZ
?quiet_NaN@?$numeric_limits@H@std@@SAHXZ
?quiet_NaN@?$numeric_limits@I@std@@SAIXZ
?quiet_NaN@?$numeric_limits@J@std@@SAJXZ
?quiet_NaN@?$numeric_limits@K@std@@SAKXZ
?quiet_NaN@?$numeric_limits@M@std@@SAMXZ
?quiet_NaN@?$numeric_limits@N@std@@SANXZ
?quiet_NaN@?$numeric_limits@O@std@@SAOXZ
?quiet_NaN@?$numeric_limits@_J@std@@SA_JXZ
?quiet_NaN@?$numeric_limits@_K@std@@SA_KXZ
?quiet_NaN@?$numeric_limits@_N@std@@SA_NXZ
?quiet_NaN@?$numeric_limits@_W@std@@SA_WXZ
?radix@_Num_base@std@@2HB
?radix@_Num_float_base@std@@2HB
?radix@_Num_int_base@std@@2HB
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rbegin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rbegin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rbegin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?rbegin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?rdbuf@?$basic_fstream@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_filebuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_fstream@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_filebuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_fstream@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_filebuf@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_filebuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_filebuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_ifstream@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_filebuf@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PAV32@@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPAV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?rdbuf@?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPAV?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?rdbuf@?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPAV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?rdbuf@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_filebuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_filebuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_ofstream@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_filebuf@_WU?$char_traits@_W@std@@@2@XZ
?rdbuf@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPAV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?rdbuf@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPAV?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?rdbuf@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPAV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?rdbuf@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPAV?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?rdbuf@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPAV?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?rdbuf@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPAV?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?rdstate@ios_base@std@@QBEHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?read@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PA_WH@Z
?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHPADH@Z
?readsome@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEHPAGH@Z
?readsome@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEHPA_WH@Z
?real@?$_Complex_base@MU_C_float_complex@@@std@@QAEMABM@Z
?real@?$_Complex_base@MU_C_float_complex@@@std@@QBEMXZ
?real@?$_Complex_base@NU_C_double_complex@@@std@@QAENABN@Z
?real@?$_Complex_base@NU_C_double_complex@@@std@@QBENXZ
?real@?$_Complex_base@OU_C_ldouble_complex@@@std@@QAEOABO@Z
?real@?$_Complex_base@OU_C_ldouble_complex@@@std@@QBEOXZ
?register_callback@ios_base@std@@QAEXP6AXW4event@12@AAV12@H@ZH@Z
?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rend@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@XZ
?rend@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rend@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@@2@XZ
?rend@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$reverse_iterator@Viterator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?rend@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$reverse_iterator@Vconst_iterator@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@XZ
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIID@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0ID@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0PBD1@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0PBD@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0PBDI@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@Viterator@12@0Vconst_iterator@12@1@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@II@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIIG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIPBGI@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0IG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0PBG1@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0PBG@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0PBGI@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@Viterator@12@0Vconst_iterator@12@1@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIABV12@II@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@III_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@IIPB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0ABV12@@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0I_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0PB_W1@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0PB_W@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0PB_WI@Z
?replace@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@Viterator@12@0Vconst_iterator@12@1@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?reserve@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXID@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXIG@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
?resize@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI_W@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGII@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WII@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?round_error@?$numeric_limits@C@std@@SACXZ
?round_error@?$numeric_limits@D@std@@SADXZ
?round_error@?$numeric_limits@E@std@@SAEXZ
?round_error@?$numeric_limits@F@std@@SAFXZ
?round_error@?$numeric_limits@G@std@@SAGXZ
?round_error@?$numeric_limits@H@std@@SAHXZ
?round_error@?$numeric_limits@I@std@@SAIXZ
?round_error@?$numeric_limits@J@std@@SAJXZ
?round_error@?$numeric_limits@K@std@@SAKXZ
?round_error@?$numeric_limits@M@std@@SAMXZ
?round_error@?$numeric_limits@N@std@@SANXZ
?round_error@?$numeric_limits@O@std@@SAOXZ
?round_error@?$numeric_limits@_J@std@@SA_JXZ
?round_error@?$numeric_limits@_K@std@@SA_KXZ
?round_error@?$numeric_limits@_N@std@@SA_NXZ
?round_error@?$numeric_limits@_W@std@@SA_WXZ
?round_style@_Num_base@std@@2W4float_round_style@2@B
?round_style@_Num_float_base@std@@2W4float_round_style@2@B
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?scan_is@?$ctype@D@std@@QBEPBDFPBD0@Z
?scan_is@?$ctype@G@std@@QBEPBGFPBG0@Z
?scan_is@?$ctype@_W@std@@QBEPB_WFPB_W0@Z
?scan_not@?$ctype@D@std@@QBEPBDFPBD0@Z
?scan_not@?$ctype@G@std@@QBEPBGFPBG0@Z
?scan_not@?$ctype@_W@std@@QBEPB_WFPB_W0@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@JH@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekoff@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JHH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@JH@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@JH@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
?seekpos@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?setbuf@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PADH@Z
?setbuf@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEPAV?$basic_streambuf@GU?$char_traits@G@std@@@2@PAGH@Z
?setbuf@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEPAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PA_WH@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEPAV12@PAGH@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_WH@Z
?setf@ios_base@std@@QAEHH@Z
?setf@ios_base@std@@QAEHHH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG00@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEXPAG0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXPA_W0@Z
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXI@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEXI@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXI@Z
?setstate@ios_base@std@@QAEXH@Z
?setstate@ios_base@std@@QAEXH_N@Z
?setstate@ios_base@std@@QAEXI@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPADH@Z
?sgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPAGH@Z
?sgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPA_WH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?signaling_NaN@?$numeric_limits@C@std@@SACXZ
?signaling_NaN@?$numeric_limits@D@std@@SADXZ
?signaling_NaN@?$numeric_limits@E@std@@SAEXZ
?signaling_NaN@?$numeric_limits@F@std@@SAFXZ
?signaling_NaN@?$numeric_limits@G@std@@SAGXZ
?signaling_NaN@?$numeric_limits@H@std@@SAHXZ
?signaling_NaN@?$numeric_limits@I@std@@SAIXZ
?signaling_NaN@?$numeric_limits@J@std@@SAJXZ
?signaling_NaN@?$numeric_limits@K@std@@SAKXZ
?signaling_NaN@?$numeric_limits@M@std@@SAMXZ
?signaling_NaN@?$numeric_limits@N@std@@SANXZ
?signaling_NaN@?$numeric_limits@O@std@@SAOXZ
?signaling_NaN@?$numeric_limits@_J@std@@SA_JXZ
?signaling_NaN@?$numeric_limits@_K@std@@SA_KXZ
?signaling_NaN@?$numeric_limits@_N@std@@SA_NXZ
?signaling_NaN@?$numeric_limits@_W@std@@SA_WXZ
?sin@?$_Ctraits@M@std@@SAMM@Z
?sin@?$_Ctraits@N@std@@SANN@Z
?sin@?$_Ctraits@O@std@@SAOO@Z
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
?size@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputbackc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputbackc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGG@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEHPBGH@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEHPB_WH@Z
?sqrt@?$_Ctraits@M@std@@SAMM@Z
?sqrt@?$_Ctraits@N@std@@SANN@Z
?sqrt@?$_Ctraits@O@std@@SAOO@Z
?stossc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?stossc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?stossc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?str@?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?str@?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?str@?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?str@?$basic_istringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?str@?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?str@?$basic_ostringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?str@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?str@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?str@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?str@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?str@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?str@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@@Z
?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@@Z
?str@?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sungetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEGXZ
?sungetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?sync@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?sync@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?sync@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?sync@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEHXZ
?sync@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?table@?$ctype@D@std@@IBEPBFXZ
?table_size@?$ctype@D@std@@2IB
?tan@?$_Ctraits@M@std@@SAMM@Z
?tan@?$_Ctraits@N@std@@SANN@Z
?tan@?$_Ctraits@O@std@@SAOO@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE?AV?$fpos@H@2@XZ
?thousands_sep@?$_Mpunct@D@std@@QBEDXZ
?thousands_sep@?$_Mpunct@G@std@@QBEGXZ
?thousands_sep@?$_Mpunct@_W@std@@QBE_WXZ
?thousands_sep@?$numpunct@D@std@@QBEDXZ
?thousands_sep@?$numpunct@G@std@@QBEGXZ
?thousands_sep@?$numpunct@_W@std@@QBE_WXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@PAV32@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QAEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@PAV32@@Z
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEPAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@PAV32@@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBEPAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?tinyness_before@_Num_base@std@@2_NB
?tinyness_before@_Num_float_base@std@@2_NB
?to_char_type@?$char_traits@D@std@@SADABH@Z
?to_char_type@?$char_traits@G@std@@SAGABG@Z
?to_char_type@?$char_traits@_W@std@@SA_WABG@Z
?to_int_type@?$char_traits@D@std@@SAHABD@Z
?to_int_type@?$char_traits@G@std@@SAGABG@Z
?to_int_type@?$char_traits@_W@std@@SAGAB_W@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@G@std@@QBEGG@Z
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?tolower@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?tolower@?$ctype@_W@std@@QBE_W_W@Z
?toupper@?$ctype@D@std@@QBEDD@Z
?toupper@?$ctype@D@std@@QBEPBDPADPBD@Z
?toupper@?$ctype@G@std@@QBEGG@Z
?toupper@?$ctype@G@std@@QBEPBGPAGPBG@Z
?toupper@?$ctype@_W@std@@QBEPB_WPA_WPB_W@Z
?toupper@?$ctype@_W@std@@QBE_W_W@Z
?transform@?$collate@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@PBD0@Z
?transform@?$collate@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@PBG0@Z
?transform@?$collate@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@PB_W0@Z
?traps@_Num_base@std@@2_NB
?traps@_Num_float_base@std@@2_NB
?truename@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?truename@?$numpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
?truename@?$numpunct@_W@std@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?uflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?uflow@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?uncaught_exception@std@@YA_NXZ
?underflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?underflow@?$basic_filebuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?underflow@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHXZ
?underflow@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAEGXZ
?underflow@?$basic_stringbuf@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@MAEGXZ
?underflow@strstreambuf@std@@MAEHXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?unget@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@XZ
?unget@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?unsetf@ios_base@std@@QAEXH@Z
?unshift@?$codecvt@DDH@std@@QBEHAAHPAD1AAPAD@Z
?unshift@?$codecvt@GDH@std@@QBEHAAHPAD1AAPAD@Z
?unshift@?$codecvt@_WDH@std@@QBEHAAHPAD1AAPAD@Z
?wcerr@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcin@std@@3V?$basic_istream@GU?$char_traits@G@std@@@1@A
?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A
?wclog@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QBEGD@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
?widen@?$ctype@D@std@@QBEDD@Z
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?widen@?$ctype@G@std@@QBEGD@Z
?widen@?$ctype@G@std@@QBEPBDPBD0PAG@Z
?widen@?$ctype@_W@std@@QBEPBDPBD0PA_W@Z
?widen@?$ctype@_W@std@@QBE_WD@Z
?width@ios_base@std@@QAEHH@Z
?width@ios_base@std@@QBEHXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@PBGH@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@PB_WH@Z
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
?ws@std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@1@AAV21@@Z
?ws@std@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@1@AAV21@@Z
?xalloc@ios_base@std@@SAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHPAGH@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPA_WH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHPBGH@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHPB_WH@Z
_Atexit
_Cosh
_Denorm
_Dnorm
_Dscale
_Dtest
_Eps
_Exp
_FCosh
_FDenorm
_FDnorm
_FDscale
_FDtest
_FEps
_FExp
_FInf
_FNan
_FRteps
_FSinh
_FSnan
_FXbig
_FZero
_Getcoll
_Getctype
_Getcvt
_Getwctype
_Getwctypes
_Hugeval
_Inf
_LCosh
_LDenorm
_LDscale
_LDtest
_LEps
_LExp
_LInf
_LNan
_LPoly
_LRteps
_LSinh
_LSnan
_LXbig
_LZero
_Mbrtowc
_Nan
_Poly
_Rteps
_Sinh
_Snan
_Stod
_Stof
_Stold
_Strcoll
_Strxfrm
_Tolower
_Toupper
_Towlower
_Towupper
_Wcrtomb
_Wcscoll
_Wcsxfrm
_Xbig
_Zero
__Wcrtomb_lk
btowc
mbrlen
mbrtowc
mbsrtowcs
towctrans
wcrtomb
wcsrtombs
wctob
wctrans
wctype
Name
.text
Size
188KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
268KB
Virtual Size
266KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2179,
count=111, id=1, productName=Unmarked objects,
count=3, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=4, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=37, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=47, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS.NET 2003 [7.1] build 3077, version=3077,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/tvu/msvcr71.dll
- IMPHASH 7acc8c379c768a1ecd81ec502ff5f33e
- SHA256 8094af5ee310714caebccaeee7769ffb08048503ba478b879edfef5f1a24fefe
- MD5 86f1895ae8c5e8b17d99ece768a70732
- SHA1 d5502a1d00787d68f548ddeebbde1eca5e2b38ca
- SHA512 3b7ce2b67056b6e005472b73447d2226677a8cadae70428873f7efa5ed11a3b3dbf6b1a42c5b05b1f2b1d8e06ff50dfc6532f043af8452ed87687eefbf1791da
- SSDEEP 6144:OcV9z83OtqxnEYmt3NEnvfF+Tbmbw6An8FMciFMNrb3YgxxpbCAOxO2ElvlE:Ooz83OtIEzW+/m/AyF7bCrO/E
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
8863
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr71.pdb
kernel32
GetModuleFileNameA
GetModuleFileNameW
ExitProcess
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
FindNextFileA
FindFirstFileA
FindClose
FindNextFileW
FindFirstFileW
HeapAlloc
HeapFree
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
GetACP
GetOEMCP
GetCPInfo
LoadLibraryA
MultiByteToWideChar
GetCommandLineW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
InitializeCriticalSection
RtlUnwind
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
InterlockedExchange
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetEnvironmentVariableA
SetEnvironmentVariableW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
HeapSize
VirtualProtect
GetSystemInfo
FlushFileBuffers
SetFilePointer
SetStdHandle
CompareStringA
CompareStringW
Sleep
Beep
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetLogicalDrives
SetErrorMode
GetFileAttributesA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetDriveTypeA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
GetFileAttributesW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
DeleteFileW
MoveFileW
RemoveDirectoryW
GetDriveTypeW
MoveFileA
RaiseException
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadCodePtr
GetExitCodeProcess
WaitForSingleObject
FreeLibrary
CreateProcessA
CreateProcessW
HeapValidate
HeapCompact
HeapWalk
ReadConsoleA
SetConsoleMode
GetConsoleMode
IsDBCSLeadByteEx
GetConsoleCP
ReadConsoleW
SetEndOfFile
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
DuplicateHandle
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleInputA
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
LockFile
UnlockFile
CreateFileA
CreatePipe
ReadFile
CreateFileW
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetLocalTime
SetLocalTime
$I10_OUTPUT
??0__non_rtti_object@@QAE@ABV0@@Z
??0__non_rtti_object@@QAE@PBD@Z
??0bad_cast@@AAE@PBQBD@Z
??0bad_cast@@QAE@ABQBD@Z
??0bad_cast@@QAE@ABV0@@Z
??0bad_cast@@QAE@PBD@Z
??0bad_typeid@@QAE@ABV0@@Z
??0bad_typeid@@QAE@PBD@Z
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
??1__non_rtti_object@@UAE@XZ
??1bad_cast@@UAE@XZ
??1bad_typeid@@UAE@XZ
??1exception@@UAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4__non_rtti_object@@QAEAAV0@ABV0@@Z
??4bad_cast@@QAEAAV0@ABV0@@Z
??4bad_typeid@@QAEAAV0@ABV0@@Z
??4exception@@QAEAAV0@ABV0@@Z
??8type_info@@QBEHABV0@@Z
??9type_info@@QBEHABV0@@Z
??_7__non_rtti_object@@6B@
??_7bad_cast@@6B@
??_7bad_typeid@@6B@
??_7exception@@6B@
??_Fbad_cast@@QAEXXZ
??_Fbad_typeid@@QAEXXZ
??_U@YAPAXI@Z
??_V@YAXPAX@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?before@type_info@@QBEHABV1@@Z
?name@type_info@@QBEPBDXZ
?raw_name@type_info@@QBEPBDXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?unexpected@@YAXXZ
?vswprintf@@YAHPAGIPBGPAD@Z
?vswprintf@@YAHPA_WIPB_WPAD@Z
?what@exception@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CxxThrowException
_EH_prolog
_Getdays
_Getmonths
_Gettnames
_HUGE
_Strftime
_XcptFilter
__CppXcptFilter
__CxxCallUnwindDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__buffer_overrun
__crtCompareStringA
__crtCompareStringW
__crtGetLocaleInfoW
__crtGetStringTypeW
__crtLCMapStringA
__crtLCMapStringW
__dllonexit
__doserrno
__fpecode
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__lc_clike
__lc_codepage
__lc_collate_cp
__lc_handle
__lconv_init
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__amblksiz
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fileinfo
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__osver
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__winmajor
__p__winminor
__p__winver
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__security_error_handler
__set_app_type
__set_buffer_overrun_handler
__setlc_active
__setusermatherr
__threadhandle
__threadid
__toascii
__unDName
__unDNameEx
__uncaught_exception
__unguarded_readlc_active
__wargv
__wcserror
__wgetmainargs
__winitenv
_abnormal_termination
_access
_acmdln
_adj_fdiv_m16i
_adj_fdiv_m32
_adj_fdiv_m32i
_adj_fdiv_m64
_adj_fdiv_r
_adj_fdivr_m16i
_adj_fdivr_m32
_adj_fdivr_m32i
_adj_fdivr_m64
_adj_fpatan
_adj_fprem
_adj_fprem1
_adj_fptan
_adjust_fdiv
_aexit_rtn
_aligned_free
_aligned_malloc
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_realloc
_amsg_exit
_assert
_atodbl
_atoi64
_atoldbl
_beep
_beginthread
_beginthreadex
_c_exit
_cabs
_callnewh
_cexit
_cgets
_cgetws
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_clearfp
_close
_commit
_commode
_control87
_controlfp
_copysign
_cprintf
_cputs
_cputws
_creat
_cscanf
_ctime64
_cwait
_cwprintf
_cwscanf
_daylight
_dstbias
_dup
_dup2
_ecvt
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fcloseall
_fcvt
_fdopen
_fgetchar
_fgetwchar
_filbuf
_fileinfo
_filelength
_filelengthi64
_fileno
_findclose
_findfirst
_findfirst64
_findfirsti64
_findnext
_findnext64
_findnexti64
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fputchar
_fputwchar
_fsopen
_fstat
_fstat64
_fstati64
_ftime
_ftime64
_ftol
_fullpath
_futime
_futime64
_gcvt
_get_heap_handle
_get_osfhandle
_get_sbh_threshold
_getch
_getche
_getcwd
_getdcwd
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getsystime
_getw
_getwch
_getwche
_getws
_global_unwind2
_gmtime64
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_i64toa
_i64tow
_initterm
_inp
_inpd
_inpw
_iob
_isatty
_isctype
_ismbbalnum
_ismbbalpha
_ismbbgraph
_ismbbkalnum
_ismbbkana
_ismbbkprint
_ismbbkpunct
_ismbblead
_ismbbprint
_ismbbpunct
_ismbbtrail
_ismbcalnum
_ismbcalpha
_ismbcdigit
_ismbcgraph
_ismbchira
_ismbckata
_ismbcl0
_ismbcl1
_ismbcl2
_ismbclegal
_ismbclower
_ismbcprint
_ismbcpunct
_ismbcspace
_ismbcsymbol
_ismbcupper
_ismbslead
_ismbstrail
_isnan
_itoa
_itow
_j0
_j1
_jn
_kbhit
_lfind
_loaddll
_local_unwind2
_localtime64
_lock
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lseek
_lseeki64
_ltoa
_ltow
_makepath
_mbbtombc
_mbbtype
_mbcasemap
_mbccpy
_mbcjistojms
_mbcjmstojis
_mbclen
_mbctohira
_mbctokata
_mbctolower
_mbctombb
_mbctoupper
_mbctype
_mbsbtype
_mbscat
_mbschr
_mbscmp
_mbscoll
_mbscpy
_mbscspn
_mbsdec
_mbsdup
_mbsicmp
_mbsicoll
_mbsinc
_mbslen
_mbslwr
_mbsnbcat
_mbsnbcmp
_mbsnbcnt
_mbsnbcoll
_mbsnbcpy
_mbsnbicmp
_mbsnbicoll
_mbsnbset
_mbsncat
_mbsnccnt
_mbsncmp
_mbsncoll
_mbsncpy
_mbsnextc
_mbsnicmp
_mbsnicoll
_mbsninc
_mbsnset
_mbspbrk
_mbsrchr
_mbsrev
_mbsset
_mbsspn
_mbsspnp
_mbsstr
_mbstok
_mbstrlen
_mbsupr
_memccpy
_memicmp
_mkdir
_mktemp
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_osplatform
_osver
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_purecall
_putch
_putenv
_putw
_putwch
_putws
_pwctype
_read
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotr
_safe_fdiv
_safe_fdivr
_safe_fprem
_safe_fprem1
_scalb
_scprintf
_scwprintf
_searchenv
_seh_longjmp_unwind
_set_SSE2_enable
_set_error_mode
_set_purecall_handler
_set_sbh_threshold
_set_security_error_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snscanf
_snwprintf
_snwscanf
_sopen
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_stat
_stat64
_stati64
_statusfp
_strcmpi
_strdate
_strdup
_strerror
_stricmp
_stricoll
_strlwr
_strncoll
_strnicmp
_strnicoll
_strnset
_strrev
_strset
_strtime
_strtoi64
_strtoui64
_strupr
_swab
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time64
_timezone
_tolower
_toupper
_tzname
_tzset
_ui64toa
_ui64tow
_ultoa
_ultow
_umask
_ungetch
_ungetwch
_unlink
_unloaddll
_unlock
_utime
_utime64
_vscprintf
_vscwprintf
_vsnprintf
_vsnwprintf
_waccess
_wasctime
_wchdir
_wchmod
_wcmdln
_wcreat
_wcsdup
_wcserror
_wcsicmp
_wcsicoll
_wcslwr
_wcsncoll
_wcsnicmp
_wcsnicoll
_wcsnset
_wcsrev
_wcsset
_wcstoi64
_wcstoui64
_wcsupr
_wctime
_wctime64
_wctype
_wenviron
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wfdopen
_wfindfirst
_wfindfirst64
_wfindfirsti64
_wfindnext
_wfindnext64
_wfindnexti64
_wfopen
_wfreopen
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetenv
_winmajor
_winminor
_winver
_wmakepath
_wmkdir
_wmktemp
_wopen
_wperror
_wpgmptr
_wpopen
_wputenv
_wremove
_wrename
_write
_wrmdir
_wsearchenv
_wsetlocale
_wsopen
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wsplitpath
_wstat
_wstat64
_wstati64
_wstrdate
_wstrtime
_wsystem
_wtempnam
_wtmpnam
_wtof
_wtoi
_wtoi64
_wtol
_wunlink
_wutime
_wutime64
_y0
_y1
_yn
abort
abs
acos
asctime
asin
atan
atan2
atexit
atof
atoi
atol
bsearch
calloc
ceil
clearerr
clock
cos
cosh
ctime
difftime
div
exit
exp
fabs
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
floor
fmod
fopen
fprintf
fputc
fputs
fputwc
fputws
fread
free
freopen
frexp
fscanf
fseek
fsetpos
ftell
fwprintf
fwrite
fwscanf
getc
getchar
getenv
gets
getwc
getwchar
gmtime
is_wctype
isalnum
isalpha
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
labs
ldexp
ldiv
localeconv
localtime
log
log10
longjmp
malloc
mblen
mbstowcs
mbtowc
memchr
memcmp
memcpy
memmove
memset
mktime
modf
perror
pow
printf
putc
putchar
puts
putwc
putwchar
qsort
raise
rand
realloc
remove
rename
rewind
scanf
setbuf
setlocale
setvbuf
signal
sin
sinh
sprintf
sqrt
srand
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtod
strtok
strtol
strtoul
strxfrm
swprintf
swscanf
system
tan
tanh
time
tmpfile
tmpnam
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vfwprintf
vprintf
vsprintf
vswprintf
vwprintf
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcscspn
wcsftime
wcslen
wcsncat
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcsspn
wcsstr
wcstod
wcstok
wcstol
wcstombs
wcstoul
wcsxfrm
wctomb
wprintf
wscanf
Name
.text
Size
228KB
Virtual Size
226KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=25, version=9210,
count=155, id=1, productName=Unmarked objects,
count=23, id=96, version=3052,
count=77, id=15, version=3052,
count=527, id=95, version=3052,
count=1, id=92, version=3052,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, version=3052,
Modules/tvu/ssleay32.dll
- IMPHASH ec3469e6569d715ba5e5e1375e9767e9
- SHA256 17a201733dc5702a89a25ad682f19e6c03c91ef7a3d6e1817145806240a8b45f
- MD5 2f53a197cf546a7ca5e4927b42013240
- SHA1 bb054e32637d4a1da10936774595c1b26e4f9fdd
- SHA512 4efa1596e9a726eac160e8657c385c00e83c2298959bf82edb29c3a895cd83b56522a7a66e300431a8037191d922dc6816ddafd5fca3294579592e09da4c593c
- SSDEEP 3072:KcKUgwlLeNEs5qTb5nqSWBsFmIj8Mj23gLysKArRKbO1U1T7uzEa36ctqd:/lSNt5qTVnDWBsgIj+QLysKUlU1O3R
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
136301
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
libeay32
ord1654
ord903
ord252
ord2206
ord857
ord176
ord641
ord2821
ord281
ord290
ord654
ord181
ord188
ord269
ord3109
ord2630
ord910
ord2411
ord754
ord490
ord222
ord167
ord168
ord169
ord85
ord52
ord2201
ord289
ord493
ord911
ord464
ord3245
ord354
ord2936
ord3244
ord323
ord3067
ord2894
ord961
ord89
ord109
ord202
ord3239
ord866
ord110
ord3422
ord2929
ord3644
ord3570
ord2578
ord111
ord3010
ord3480
ord2924
ord3459
ord3512
ord3608
ord3575
ord3663
ord123
ord201
ord118
ord3666
ord219
ord498
ord285
ord635
ord912
ord909
ord3724
ord313
ord495
ord120
ord151
ord3178
ord3695
ord3550
ord3418
ord203
ord128
ord31
ord830
ord727
ord2760
ord282
ord572
ord3719
ord216
ord206
ord497
ord3682
ord2877
ord3711
ord205
ord486
ord484
ord763
ord577
ord907
ord87
ord481
ord3729
ord333
ord2915
ord256
ord1096
ord1097
ord2589
ord1145
ord1144
ord1081
ord2292
ord622
ord627
ord657
ord653
ord1653
ord2784
ord965
ord964
ord2572
ord2747
ord3704
ord3758
ord3767
ord3647
ord3766
ord3365
ord3460
ord3454
ord3754
ord3394
ord187
ord897
ord3414
ord3495
ord67
ord65
ord53
ord78
ord98
ord3559
ord3399
ord636
ord914
ord626
ord890
ord1004
ord3527
ord364
ord1010
ord2051
ord58
ord66
ord630
ord628
ord1041
ord1007
ord1005
ord1027
ord3378
ord3437
ord316
ord629
ord892
ord74
ord248
ord1655
ord575
ord1025
ord246
ord1100
ord679
ord2524
ord3595
ord1023
ord3505
ord401
ord93
ord3396
ord3657
ord887
ord889
ord891
ord315
ord1147
ord189
ord314
ord956
ord280
ord2181
ord399
ord748
ord279
ord283
ord400
ord751
ord750
ord774
ord3205
ord37
ord35
ord824
ord822
ord8
ord1091
ord3700
ord3623
ord32
ord718
ord7
ord716
ord703
ord680
ord86
ord88
ord1101
ord293
ord322
ord2996
ord3155
ord2927
ord325
ord329
ord318
ord304
ord292
ord299
ord955
ord2252
ord91
ord247
ord904
ord901
ord623
ord905
msvcr71
_iob
_errno
free
_initterm
malloc
_adjust_fdiv
__CppXcptFilter
_except_handler3
__dllonexit
_onexit
strncmp
memmove
time
fprintf
kernel32
GetLastError
DisableThreadLibraryCalls
SetLastError
BIO_f_ssl
BIO_new_buffer_ssl_connect
BIO_new_ssl
BIO_new_ssl_connect
BIO_ssl_copy_session_id
BIO_ssl_shutdown
DTLSv1_client_method
DTLSv1_method
DTLSv1_server_method
ERR_load_SSL_strings
SSL_CIPHER_description
SSL_CIPHER_get_bits
SSL_CIPHER_get_name
SSL_CIPHER_get_version
SSL_COMP_add_compression_method
SSL_COMP_get_compression_methods
SSL_COMP_get_name
SSL_CTX_add_client_CA
SSL_CTX_add_session
SSL_CTX_callback_ctrl
SSL_CTX_check_private_key
SSL_CTX_ctrl
SSL_CTX_flush_sessions
SSL_CTX_free
SSL_CTX_get_cert_store
SSL_CTX_get_client_CA_list
SSL_CTX_get_ex_data
SSL_CTX_get_ex_new_index
SSL_CTX_get_quiet_shutdown
SSL_CTX_get_timeout
SSL_CTX_get_verify_callback
SSL_CTX_get_verify_depth
SSL_CTX_get_verify_mode
SSL_CTX_load_verify_locations
SSL_CTX_new
SSL_CTX_remove_session
SSL_CTX_sessions
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_cipher_list
SSL_CTX_set_client_CA_list
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_set_default_verify_paths
SSL_CTX_set_ex_data
SSL_CTX_set_generate_session_id
SSL_CTX_set_msg_callback
SSL_CTX_set_purpose
SSL_CTX_set_quiet_shutdown
SSL_CTX_set_session_id_context
SSL_CTX_set_ssl_version
SSL_CTX_set_timeout
SSL_CTX_set_tmp_dh_callback
SSL_CTX_set_tmp_ecdh_callback
SSL_CTX_set_tmp_rsa_callback
SSL_CTX_set_trust
SSL_CTX_set_verify
SSL_CTX_set_verify_depth
SSL_CTX_use_PrivateKey
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate
SSL_CTX_use_certificate_ASN1
SSL_CTX_use_certificate_chain_file
SSL_CTX_use_certificate_file
SSL_SESSION_cmp
SSL_SESSION_free
SSL_SESSION_get_ex_data
SSL_SESSION_get_ex_new_index
SSL_SESSION_get_id
SSL_SESSION_get_time
SSL_SESSION_get_timeout
SSL_SESSION_hash
SSL_SESSION_new
SSL_SESSION_print
SSL_SESSION_print_fp
SSL_SESSION_set_ex_data
SSL_SESSION_set_time
SSL_SESSION_set_timeout
SSL_accept
SSL_add_client_CA
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_alert_desc_string
SSL_alert_desc_string_long
SSL_alert_type_string
SSL_alert_type_string_long
SSL_callback_ctrl
SSL_check_private_key
SSL_clear
SSL_connect
SSL_copy_session_id
SSL_ctrl
SSL_do_handshake
SSL_dup
SSL_dup_CA_list
SSL_free
SSL_get1_session
SSL_get_SSL_CTX
SSL_get_certificate
SSL_get_cipher_list
SSL_get_ciphers
SSL_get_client_CA_list
SSL_get_current_cipher
SSL_get_current_compression
SSL_get_current_expansion
SSL_get_default_timeout
SSL_get_error
SSL_get_ex_data
SSL_get_ex_data_X509_STORE_CTX_idx
SSL_get_ex_new_index
SSL_get_fd
SSL_get_finished
SSL_get_info_callback
SSL_get_peer_cert_chain
SSL_get_peer_certificate
SSL_get_peer_finished
SSL_get_privatekey
SSL_get_quiet_shutdown
SSL_get_rbio
SSL_get_read_ahead
SSL_get_rfd
SSL_get_session
SSL_get_shared_ciphers
SSL_get_shutdown
SSL_get_ssl_method
SSL_get_verify_callback
SSL_get_verify_depth
SSL_get_verify_mode
SSL_get_verify_result
SSL_get_version
SSL_get_wbio
SSL_get_wfd
SSL_has_matching_session_id
SSL_library_init
SSL_load_client_CA_file
SSL_load_error_strings
SSL_new
SSL_peek
SSL_pending
SSL_read
SSL_renegotiate
SSL_renegotiate_pending
SSL_rstate_string
SSL_rstate_string_long
SSL_set_accept_state
SSL_set_bio
SSL_set_cipher_list
SSL_set_client_CA_list
SSL_set_connect_state
SSL_set_ex_data
SSL_set_fd
SSL_set_generate_session_id
SSL_set_info_callback
SSL_set_msg_callback
SSL_set_purpose
SSL_set_quiet_shutdown
SSL_set_read_ahead
SSL_set_rfd
SSL_set_session
SSL_set_session_id_context
SSL_set_shutdown
SSL_set_ssl_method
SSL_set_tmp_dh_callback
SSL_set_tmp_ecdh_callback
SSL_set_tmp_rsa_callback
SSL_set_trust
SSL_set_verify
SSL_set_verify_depth
SSL_set_verify_result
SSL_set_wfd
SSL_shutdown
SSL_state
SSL_state_string
SSL_state_string_long
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
SSL_version
SSL_want
SSL_write
SSLv23_client_method
SSLv23_method
SSLv23_server_method
SSLv2_client_method
SSLv2_method
SSLv2_server_method
SSLv3_client_method
SSLv3_method
SSLv3_server_method
TLSv1_client_method
TLSv1_method
TLSv1_server_method
d2i_SSL_SESSION
i2d_SSL_SESSION
ssl2_ciphers
ssl3_ciphers
Name
.text
Size
132KB
Virtual Size
129KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
32KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=93, version=2179,
count=1, id=96, productName=VS2003 (.NET) build 3077, version=3077,
count=4, id=15, productName=VS2003 (.NET) build 3077, version=3077,
count=5, id=93, productName=VS2003 (.NET) build 3077, version=3077,
count=253, id=1, productName=Unmarked objects,
count=50, id=95, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=92, productName=VS2003 (.NET) build 3077, version=3077,
count=1, id=94, productName=VS2003 (.NET) build 3052, version=3052,
count=1, id=90, productName=VS2003 (.NET) build 3077, version=3077,
Modules/uusee/ARMP.ocx
- SHA256 2c68698d1375e3e0a832466a4ab155bb58efc825b8dfd511ab1db50b19a3e567
- MD5 4598cfcc8fb790df41deeee2c07474c4
- SHA1 99ed66b1c93009a394e52b5f6e2db5bfefab9306
- SHA512 1758c36e9584cdcdd6a81d8dc1040ce69101331f54a8bf355c125361ba3c9a1741e2b187ed657fb00bdf1f1df401cd02fc2bee995e520f04f4808bfa0bce9ebf
- SSDEEP 12288:v3yGPgKAaDmPk9aEIOdBaszTq5ESJnu0pLjiaofoRswAg:Pp4yKPwIOTa6Tyb9jiaaov
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
ae:05:ce:6b:d2:1a:d3:f3:6b:67:2a:85:2a:17:a8:ca:bc:8d:08:5c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
1911392
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DisableHook
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnableHook
Name
UPX0
Size
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
591KB
Virtual Size
592KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
11KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=126, version=50327,
count=56, id=125, productName=VS2005 build 50727, version=50727,
count=12, id=95, version=2067,
count=6, id=18, version=8444,
count=149, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=25, version=9210,
count=1, id=28, version=9178,
count=16, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=41, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=728, id=1, productName=Unmarked objects,
count=196, id=109, productName=VS2005 build 50727, version=50727,
count=274, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
out.upx
- SHA256 1bc8676e8c6cc98876a100bc5aec404a1b5c6aeea66510008cd341a9094596ee
- MD5 0c23d687fc18dddb7eac0f1a194888a7
- SHA1 9e8020cad149f59047bcffc68b545cfd3fa04752
- SHA512 d89bd8f591c54a3be353053dab5ffeced0d3671b35dc96331e497e3626bc8eee114c5730b61d0fc18891c888167f0fbe3c51e2bb6c4f13aefbbf059fc648fa87
- SSDEEP 49152:dF0tCMwCw2cxxOTzrcjMCZ+pok4yTruE/4N/I:dF0tCMWOTzrcjMCZ+po2u2W
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1123298
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
244KB
Virtual Size
241KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
68KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
24KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
100KB
Virtual Size
98KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=126, version=50327,
count=56, id=125, productName=VS2005 build 50727, version=50727,
count=12, id=95, version=2067,
count=6, id=18, version=8444,
count=149, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=2, id=25, version=9210,
count=1, id=28, version=9178,
count=16, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=41, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=728, id=1, productName=Unmarked objects,
count=196, id=109, productName=VS2005 build 50727, version=50727,
count=274, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/uusee/ARMPD.dll
- SHA256 bf00460005af24cab9a5001d84ffeb4c2bfd48357454b0ff40d73661ce400e73
- MD5 93498abe3f33d629eb2c87fabf754702
- SHA1 a93061c1512ce54ec0de9150fb51d8bcd3b17956
- SHA512 9a2609bb5182224c7198991bd519e584ee14f8459ff78d5d7d15db3abdeaf0cefe13ac505681c79a08bd70686297345dafa451bac3cd6bcdac831b2848382827
- SSDEEP 3072:oH8AyQYa7ic4NRPOjdIZo+pnNnKeTb196WuFUSgJT0LfAY7LeNE8QsfCqZstFVY4:eEJ7WRHKnIU1iSjcfAFNE8QsaqZaVYEP
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
3c:75:6a:cb:2f:c0:cb:d3:5a:b2:5a:a4:d1:4c:92:41:5a:90:d1:fe
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
376833
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
106KB
Virtual Size
244KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
4KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
10KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=126, version=50327,
count=32, id=125, productName=VS2005 build 50727, version=50727,
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=182, id=1, productName=Unmarked objects,
count=174, id=109, productName=VS2005 build 50727, version=50727,
count=111, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/uusee/MultiVMR9.dll
- IMPHASH c7c3bb1a201ec32acd96926fa96925b5
- SHA256 d58fd13b6185a99b39ab7f45c27042c83550a3f069d2ff1e4ba89995b79bef33
- MD5 ca523a10f1ae659b0bf7f249da2dbf48
- SHA1 08398f0583e0cb87cb8ac7e86ec082192717d4d5
- SHA512 a7ed7d1f4523529fdc88d991b81e12ed3b0d126dc0c1e16b9392a9fad1d88c0b447bf89d8cfe5a681d2ccb663d5ca1388e0d4a546b08d25598f6952a4c9ff180
- SSDEEP 3072:xLpBpZf0xOOcYbpzgnoBgnpnMt/DHN3BCo:xl9f0Lbhgn/n0DvCo
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
92:0d:c5:0d:2e:df:b0:d6:74:5a:8a:eb:86:e9:b5:68:3d:ec:f7:5a
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSEE Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSEE Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Serial Number
70:ba:e4:1d:10:d9:29:34:b6:38:ca:7b:03:cc:ba:bf
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Timespan
Jan 29, 1996 - Aug 1, 2028
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSEE Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSEE Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
14:ec:ac:f5:6d:b6:19:fa:17:72:47:5a:d2:c3:bf:30
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 8, 2006 - Jun 8, 2007
Minor OS version
0
Major OS version
4
Entry point
36291
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
d3d9
Direct3DCreate9
kernel32
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
CloseHandle
Sleep
CreateThread
FreeLibrary
LoadLibraryA
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSection
RaiseException
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetLastError
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
IsDebuggerPresent
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
FreeEnvironmentStringsW
user32
IsWindow
advapi32
RegSetValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
ole32
StringFromCLSID
CoCreateInstance
CoTaskMemFree
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
76KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
36KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
16KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=20, id=125, productName=VS2005 build 50727, version=50727,
count=13, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=92, id=1, productName=Unmarked objects,
count=1, id=28, version=9178,
count=90, id=109, productName=VS2005 build 50727, version=50727,
count=48, id=110, productName=VS2005 build 50727, version=50727,
count=1, id=122, productName=VS2005 build 50727, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
Modules/uusee/UUPlayer.dll
- SHA256 bafbc8b874835bd6b4d1a5c395223d2b9bf2b812c0e2c2b01ac6069b4fc791ac
- MD5 ae3dc11a968fe2ddd7370794799bcff5
- SHA1 e1b3f06e4066d4f1377067d653de63c5f93d9537
- SHA512 8c87d2e7f0de3f14254eab698f3f43b3c8295afab07501760bd0936e5b983de85ef9582304125e98d240d2a51518c5749068a9afd203e43ba5166c5ad9b7365a
- SSDEEP 3072:kuotvNYFqqo9m68rYoJqki5ijfn2vf4ayUV2vW60NW8ozQnaasIdtu5Ig9:kuot1YFqqo9T8rYSc5I/2jyUDW8oEnaj
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
0c:7c:eb:1c:59:cd:6a:79:d1:e6:23:54:a7:61:ed:43:d1:0a:85:a6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
245761
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
512B
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
136KB
Virtual Size
212KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.aspack
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.adata
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=1, id=11, version=8047,
count=2, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=3, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=3, id=4, version=9782,
count=68, id=1, productName=Unmarked objects,
count=2, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/uusee/UUPlayer.ocx
- IMPHASH 630b7922ada3adb18e2cf84b4222d063
- SHA256 16a3e28d13bb21ce81badc7369b253d1f8c21e580c35ebc737d0947adf1f05d7
- MD5 b81ca56146392016dea90d669a3a48dc
- SHA1 f19a5fe0d4735d8e5ff886c11797961f9572154d
- SHA512 7d8684bdf00ba297e5eb06d29b08271536a6d0346a5091a6b030ed591c82769edbb67fcfa00d287510e14acba39f93976f53859943afefdcfc0d66226b20021b
- SSDEEP 384:e+5TeKg0Bbe0BbUPJuQqpR+bLCcgv7Ibp:F5TrgoeoUPJfL3Jbp
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:af:f1:78:50:39:a2:6d:87:51:05:52:8c:f6:bd:14:34:a6:a0:38
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSEE Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSEE Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US
Serial Number
0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2008
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSEE Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSEE Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
14:ec:ac:f5:6d:b6:19:fa:17:72:47:5a:d2:c3:bf:30
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 8, 2006 - Jun 8, 2007
Minor OS version
0
Major OS version
4
Entry point
9223
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mfc42
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3401
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3670
ord561
ord825
ord3952
ord2724
ord6354
ord1216
ord1168
ord6467
ord1227
ord823
ord1877
ord4249
ord2486
ord2687
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord446
ord743
ord1177
ord1226
ord1210
ord2439
ord1693
ord5618
ord994
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord6002
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4113
ord4661
ord4660
ord4768
ord4650
ord4903
ord4548
ord4521
ord4594
ord4988
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord4666
ord4648
ord4689
ord5023
ord5731
ord4643
ord4486
ord4780
ord4649
ord4637
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord4738
ord4409
ord4603
ord5008
ord4415
ord4992
ord4979
ord2488
ord3404
ord4539
ord2954
ord6055
ord4078
ord1776
ord4407
ord5241
ord2384
ord5163
ord6370
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2983
ord3148
ord3260
ord4466
ord3269
ord2986
ord3080
ord4081
ord4624
ord5825
ord723
ord3946
ord423
ord2860
ord2541
ord4949
ord2864
ord1892
ord4252
ord1212
ord4570
ord4672
ord4843
ord5011
ord5265
ord4376
ord4853
ord4998
ord4713
ord2514
ord6052
ord1775
ord2385
ord6371
ord5286
ord4438
ord3279
ord4625
ord4425
ord449
ord746
ord2278
ord1132
ord1116
ord1176
ord1575
ord1577
ord1182
ord342
ord1243
ord1197
ord1570
ord1253
ord1255
ord2512
ord4654
ord2554
ord1578
ord600
ord826
ord269
ord6375
ord4354
ord815
ord1131
msvcrt
wcsncpy
wcslen
__CxxFrameHandler
_EH_prolog
__dllonexit
_onexit
??1type_info@@UAE@XZ
_adjust_fdiv
malloc
_initterm
free
kernel32
LocalFree
LocalAlloc
user32
EnableWindow
SendMessageA
FillRect
gdi32
Ellipse
GetStockObject
ole32
CoCreateInstance
oleaut32
LoadRegTypeLi
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
.text
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=19, version=8022,
count=4, productName=Unmarked objects (old),
count=8, id=19, version=8034,
count=1, id=14, version=7299,
count=4, id=10, productName=VS98 (6.0) build 8168, version=8168,
count=234, id=1, productName=Unmarked objects,
count=9, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=1, id=6, productName=VS98 (6.0) cvtres build 1720, version=1720,
count=6, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
Modules/uusee/UUUpgrade.ocx
- SHA256 7ab9e88a22dd979ebb82136dda0b0ff565779d2a1ccbca9c5aeaaff2c371fdbd
- MD5 7bc97a07037798f56746758985d78889
- SHA1 b9af1e714185dedd4101897956ac966ec6c07ae0
- SHA512 3d659b6a2277bd2b1fcd252de1ca717a464ab63a60c973513ceffa63785c875fb93682396decfa99ac5a714396163639b22df7f7773bb7227407239668823cc6
- SSDEEP 768:vBZ1K2fAY33yJO4ol0kddlj67up9ZgjxxhdSz1F7aRhkQvLUb5:vyYyE0kddlAup9ZexkckQvc5
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
db:c7:ff:45:e6:ab:d3:73:1b:c3:4f:64:69:0f:ac:56:2e:a0:7f:d7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
145264
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
UPX0
Size
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
30KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
9KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=2, id=95, version=2190,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=4, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=466, id=1, productName=Unmarked objects,
count=29, id=93, version=2179,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
out.upx
- SHA256 eb5828d998394415783e9a8c842155517e9d5f0b3b076247a06ba1436cb6734f
- MD5 90bf7d5f9658c2d789b6e75dc0127c71
- SHA1 5384544b1ac81484160e658acb241fea586832f3
- SHA512 7c0d877e1760a88e125de17413df55ba878341de6ab8e266ec7741ac0dcacd189de6bd7dcf85f816f8564991f8d1976c43c230a737438aff37a2a6e4cf577cba
- SSDEEP 1536:sDT50garBvjY79rZ2ubGx7+EeDCger8e6lKXMEkQcN4puxRa:sDTWgc279gubOzr8ZlkMEkU
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
55355
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
56KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=1, id=11, version=8047,
count=3, id=14, version=7299,
count=4, id=10, version=8047,
count=4, id=4, version=8047,
count=4, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=2, id=4, productName=VS98 (6.0) imp/exp build 8168,, version=8168,
count=466, id=1, productName=Unmarked objects,
count=29, id=93, version=2179,
count=11, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Modules/uusee/in_psp.dll
- SHA256 c9b7a08e4447c45ccbcf70f0a321eddb0c9d9bb42a9270893cbdeba1201bf436
- MD5 a7f347822ba79f1c33deaad7cfdd03e1
- SHA1 63f15760bd2a461892bc8d587039de6595869204
- SHA512 b07821dcfac913399180fe7d93bda4e1c83b3f0ca50ff182449c671cb64bc2c7efb06d4b35cf17aa4c2ceb78e390b410f7326f740316cb7003205f11070a78ee
- SSDEEP 6144:eXXt6PGpE10Q6HJgQFiDra9EnUfonvFveVcD5UqdqmqOhcB/Rk4Gt9F:ent6PYQ6HOQFiPaOnCoNvMcyqdqqwRk3
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
e0:17:43:8f:a8:20:5f:5e:25:17:79:f4:c3:d1:58:1f:2d:29:04:43
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
961040
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
uuseePSPmodlePlugin
uuseePSPmodlePlugin2
uuseePSPmodlePlugin3
uuseePSPmodlePlugin4
Name
UPX0
Size
Virtual Size
640KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
295KB
Virtual Size
296KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
66KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 a012d6bbb089d2d26c06e35730ea06ee086bd4d01ad616ca32b7b44488d71fa8
- MD5 88b2e973554274c8fa1ca4e4a0e26862
- SHA1 856e79dbb0be42dda0d4eba5e7ca7be2a94a55f7
- SHA512 443072130f89b373591544623431d38e23ce8dfaf9ec650411b8e4f67d7dad67a794bd272786d4569c29553c4c091ee89396a3de47cfc831a679a64db4880a26
- SSDEEP 24576:lNn9/3lnbS7ZlklMlWmQunWHwiwHTxXe7xl/:l7lbUJowHVXeL
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
732492
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
.text
Size
708KB
Virtual Size
707KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
21KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
174B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
65KB
Virtual Size
65KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Modules/uusee/out_mmshttp.dll
- SHA256 86538e4b57f6c2811bfe7ad8d18ce8a7965362639a87f020e1b3b16bbad32bfd
- MD5 b16b56aa3222abe533ea2e20950ff0be
- SHA1 8305406000f7f18b06827c0b6d4f0a5fe8371e1d
- SHA512 1d93c6b4f65d8989eb1989999e92edbf3061e3454eb2e8bd14dec2c06e0398ef4c500367b919f566859b35dca13abd7ea969a49e349725e0ac50a2503f1987de
- SSDEEP 1536:Lf7n9G3+TWB0nmcg7S/K2yr1cxM2L4GZ2hhntDEpoKZhDwppWSGH9cg:f9dTWBZwKrkZwJJE6KvKWSGHh
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
d6:2f:d4:d3:d3:28:01:3c:40:70:45:4a:07:54:f1:b0:a7:56:d6:44
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
231024
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
RebootServer2
TestPortUp2
uuseeOutmodulePlugin
uuseeOutmodulePlugin2
Name
UPX0
Size
Virtual Size
148KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
74KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
13KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
out.upx
- SHA256 5f82afb8100f2190db2c1e1446b33c67a45b0df79df850493975066dcb31dc05
- MD5 fd17f6c14595f91080de56172903fabc
- SHA1 c597d7f565cb64938f6b758a5664c40489884879
- SHA512 b9ce3b75de15a60fc8a9094a435460a6b29ab6173ff9999d422d1035596b55e07d75f596abf843c6aa4d4ac1b105d01ce81fc915de76adb99f3a3cdff0dde253
- SSDEEP 3072:G06QI/rlw5vjYVcSrRoZY/Qz2abTHT6rHWlCjfmkWElIrzWSGHo:G06HWVEQaWsqk9lor
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
165608
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
165B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Modules/uusee/updateC2.ocx
- SHA256 16572aff524e65384de2123617e289fd20a413fa30560f1e1c8f8de8560af233
- MD5 d526673d0f020bb34a92216d77dac6e8
- SHA1 b52f8e40d6f35740ba973a84f6d7847ed53f9cf2
- SHA512 9fc01d40ddd12d5701a20ad93d212668a6204f671feed734c0bd0f459dadb0ed759ea9ed9686fd65752bf5d942a400c8709ba693b61957a04f41de16aba51292
- SSDEEP 768:Z81Cxn8PQaWIq816SUk6pr+S6Bt6IK7mfLUbOY:CE8Lc8gL1prmDHK7mfcOY
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
PE Signature issue
Digest
7d:6e:ca:05:38:9a:f5:cf:7c:8a:a0:b5:9e:82:5c:86:6b:b1:b5:e7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Chains
Feb 29, 2024
Subject
CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US
Serial Number
38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Issuer
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jun 15, 2007 - Jun 14, 2012
Subject
CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US
Serial Number
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 4, 2003 - Dec 3, 2013
Subject
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Serial Number
41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2
Issuer
OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 16, 2004 - Jul 15, 2014
Subject
CN=UUSee Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Multimedia Dept.,O=UUSee Inc.,L=Beijing,ST=Beijing,C=CN
Serial Number
4c:be:c6:c0:7a:72:06:31:ba:4c:7f:9e:e7:bd:75:60
Issuer
CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2007 - May 24, 2008
Minor OS version
0
Major OS version
4
Entry point
110160
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Name
UPX0
Size
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX1
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=3, id=19, version=8022,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=4, version=9782,
count=2, id=93, version=2179,
count=422, id=1, productName=Unmarked objects,
count=16, id=19, version=8034,
count=15, productName=Unmarked objects (old),
count=15, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
out.upx
- SHA256 37a2ac74d997572deb21da8843203b4861ab1cc5bcb1e07263e9211e826c68f1
- MD5 b4d5d5783b47ae0915b121566e330a5d
- SHA1 50aeabfbc6a6dafcb999bf014c17c74cc1d0f3de
- SHA512 cf6d2fbdd19039a8035487682660e3c4ab50427bdb3f901939e928c04b62bec8bb9a2ddeaaa927af3ba84aefdad4ef06a0b1eeae707ba3d0a737be0d099ac62e
- SSDEEP 1536:XBKv4OX5qPtlDvSQq3PikUeLkwNbuQ6ouLbrm:XM/qPXSQqakUe3NOouLbK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
48253
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.text
Size
48KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
16KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=19, version=8022,
count=1, id=11, version=8047,
count=4, id=14, version=7299,
count=4, id=10, version=8047,
count=2, id=4, version=8047,
count=2, id=4, version=9782,
count=2, id=93, version=2179,
count=422, id=1, productName=Unmarked objects,
count=16, id=19, version=8034,
count=15, productName=Unmarked objects (old),
count=15, id=11, productName=VS98 (6.0) SP6 build 8804, version=9782,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
PPNTVUpdate.exe
- SHA256 790c95bdf0dabadad6765649d911b7e8b1fc3e701d8b9bab416c3fcdbc3db10e
- MD5 2826bacb13cdf5b65d1ae754d4134071
- SHA1 a481441419144149b6ebf7aa3be1e25e23739584
- SHA512 402ae8c24f5650c04608e0926820497fd3dc49f3e085445de78649692cc7afc90f6793e226a1a97e354cdc011ffac3867f33fab561684b5abaed81a3c028d4f3
- SSDEEP 12288:f1ZdXP8CVe03EF5L5u8uQ2bEW/j1IP6CtnJbcnkYH3DEy:fDd/8a4NgYsePHJonkYH3
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
513212
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
497KB
Virtual Size
497KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
20B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
51KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
chis.ini
- SHA256 b816ae8e7258358b8b4a99c0b003ab01c7da36ad93b9ac1b098cfdc0e2f1fc8f
- MD5 75ba3e8a4de967aa9a034c6a17f663ba
- SHA1 8716bc65023f31951c414993df85231c73027c10
- SHA512 41bafa587df757d16ec80c8b9407fd7b9dbafeaaf3c9cca50c074da242ded5dff41905800aede5ec4593c2331bee8e96055429bc76d2186979e8bf05b0c0602b
- MD5 SHA1 SHA512
new.exe
- SHA256 2a7e44c734d6fdf2fd5de6707873e0b5771ac4f7193a1e363619a28ae2f30023
- MD5 46006beb5ddcea2946ccd58f83de4f6f
- SHA1 2811d19c74965e90d7d3ad1d003d0d0c02b8b661
- SHA512 840b8d4c7adcc783d77cdbb11c98d105505f03daea244b271b1623415a55c1baf915d6ef9fc1670e3e9832ba03e141a882f36d5ec71fff60dfe85b310a55b175
- SSDEEP 6144:Jw2aDCjev48XDY4Y3XSWxDQxZ/17iYvMihCnVZALxn3b5Z0qaumGNA4r8NG3futK:+RDCiPY4YyWx8tUIxnLzmECI2jJs/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
412804
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
399KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
ppntv.exe
- SHA256 9f7873a2b7439b4dca4da67d43b42f945706eb08e19a945e641e4a7c0a88d8aa
- MD5 a8a791c2d878ed0e8ecdb06357a9a71d
- SHA1 d40101f029b873bf745692d26a6e58e3439117c9
- SHA512 7831abb39be97576e4a13dd57535c02778d75ce5da863a6a406e019a60601a21a87d6060f4463945454ea856b50a34cf9ee47619fe54fa30209d3b15174b670d
- SSDEEP 24576:u10lN6OdiMj0ufautRlj6w7XyyJV+TmNn5:UpOdBXyQl7V+TmN
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
807412
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
785KB
Virtual Size
784KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
52KB
Virtual Size
51KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
168KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
readme.txt
- SHA256 fd2b07646ebc21dbb36c6b9e7d26bd130060fd8d46608be2a038f2d1c586af9d
- MD5 2e6fc620ea4483f4975235e785bfc4cc
- SHA1 1ccbe14633b9c9450aba7662d2af75fe601152b5
- SHA512 cb97f6e806ba3378c51b6c0bf7cbc6789975aec4e136a4c95a1f9d3984ff8a29693c7cd0ecb6c7fe7e05ccd888b3a7fe9d4f3e1ef9af5df419a8bfb266c3b362
- SSDEEP 96:2wIM/x2AAkWcemCY3+LFeSKG041cWrGISuY8RIsP:2wDRAkTemCY3UeS0VWrGI08RIsP
- MD5 SHA1 SHA512 SSDEEP
skins/new.exe
- SHA256 2a7e44c734d6fdf2fd5de6707873e0b5771ac4f7193a1e363619a28ae2f30023
- MD5 46006beb5ddcea2946ccd58f83de4f6f
- SHA1 2811d19c74965e90d7d3ad1d003d0d0c02b8b661
- SHA512 840b8d4c7adcc783d77cdbb11c98d105505f03daea244b271b1623415a55c1baf915d6ef9fc1670e3e9832ba03e141a882f36d5ec71fff60dfe85b310a55b175
- SSDEEP 6144:Jw2aDCjev48XDY4Y3XSWxDQxZ/17iYvMihCnVZALxn3b5Z0qaumGNA4r8NG3futK:+RDCiPY4YyWx8tUIxnLzmECI2jJs/
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
412804
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
399KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
skins/ĬƤ.skn
- SHA256 3f1253f6aa46f70f2e3a0d64db9100010eecedd5ec6bae43da306c6b80bc7f9c
- MD5 80726d6d76fbb545269202968507b8cd
- SHA1 882909fa00687d2cb4c44e935b3a560eab53495b
- SHA512 9b371eaa37ae6473a5b276eeb72d284d4992bbd63c80347674d83b658091634d36272b1e9d158c3effd320d26e7a9a8bcf59671c9be703af0494a4e330218cbc
- SSDEEP 1536:H2hmkt12CUFuOBo+14Ybpo+GwzfiSm5eM8YR61MPeF:Whmm2B0K4+pxTz25eM8DiPeF
- MD5 SHA1 SHA512 SSDEEP
skins/ˮѣ.skn
- SHA256 995a6a630e9054096b521ad57bad38ea259daee29be5ba09a613d858be223959
- MD5 06edb360047b7c9ccaf3b8857996cb50
- SHA1 24d4293a41848478d86cb3132ef767c076820694
- SHA512 a5dbe2f3f33951d48c97a6bf444e622ab92e419993971b3f16e81b135897fac60a337477b7a9c8802a8ff3da0afe64b2079044935ec2078f9c245aa90f349ed1
- SSDEEP 384:0eFOyOHqUNzp+S1W4FXhgiOLZbTUT54iNs1k5v/rj1f0D408tX75iJBaSDn0dys3:0MqHbQF4FQbTUqEsCBzjdpXgJA5ysWzW
- MD5 SHA1 SHA512 SSDEEP
skins/ٿ쳵.skn
- SHA256 df8959ad6256d7d09c273a62fe4720a0f0292da013c5201ce9cf2389be8ef3a6
- MD5 109f598ccdfe050754cd5b0e4a5a9074
- SHA1 370104d99badda2c8a275177d15ee1e005090781
- SHA512 ff1042cdfd9dd57581953fd0544338daef600abfb7bf2f1b2ef42aa265ed380cbe2ad16cbce72a055dfa446e08aee92ca9f00683ead7b7cc51b035f1db9b0bff
- SSDEEP 768:BaBlfvP3sa+gjKOZDh34MIEoa0o1T1/lrvljbdlzYO1Vx2oB797BrKPdNstqqZFo:BaBl3PcH07hTtGo1T1/lrv9plzDD2ypa
- MD5 SHA1 SHA512 SSDEEP
skins/Լ.skn
- SHA256 49a037f4e2886113217c95b63c958c0a829c668bbd7b9e036bbb247b1a2149fa
- MD5 7f97fab69c365e14d7cb7ebfc4edabbc
- SHA1 e53370139c382820cfaf30d10edeb86319a552b3
- SHA512 eb78dcd8b3deaee0b73c143ff656b99eadd65051a8bc40179a815d7dd8e9cd61e1e379aff4337f427cbde95a8c4a07976596e7bbd7da153a9f809299507a163f
- SSDEEP 768:iCnfFgcSdlJIGZb/p2oW6efYQkIFwpYE5GCVZuBvW20gEHb0aNIrUnfHXQ:5f/SdlJxb/JgMIWpYgGCVZudW2RgXWwY
- MD5 SHA1 SHA512 SSDEEP
skins/ɰƻ.skn
- SHA256 24190c527bba9e2514e60535f5f6ba8781602620d7008c70f6189b60526c7c1c
- MD5 67ac3890cd1841686dc1987742b3e7c4
- SHA1 60658f4eb73d2d9fcb752de9c365f76ddff990a5
- SHA512 bde2f6f7627faed86d31b597f0b1eb3a6e56964af3e4249d86dcb10e722da2819ad66a397f19c9a94549bd55f83816b94803faf0ba234f2a34b3055bd54f7ea2
- SSDEEP 1536:qqmhZ1TD7u79T+fUGKeNQj3XJJ8GGQVfpYO65:LmhZ1f7u79T+fLuX8G9DA
- MD5 SHA1 SHA512 SSDEEP
uninst.exe
- IMPHASH 9c523d8653da5455667e3f82274f2f88
- SHA256 c508ee0f460b3a53736b6a1299d549ba1a0d4d75e0dfa9ef51359328c051b5a5
- MD5 465e5a5041384d9d4526ee78aa26e66c
- SHA1 ad04734e0e50a2085fb07445c2517da29ed0f903
- SHA512 403faef32783c35b8ad9bbced18f6d6827cb9de6e76965f028c817b0061aa313b77879f00705eb4d7e72467c3f4f2fb3c62d4acfb4bfdf99c0f39bdffa0ae0d7
- SSDEEP 768:PebbuV4LlKWVJd9dxVh1qAOYwXzBx2JqF86eWkJRjc4wKFtWsQcsCP8nn3gYRNBd:mbSqZVJdThUxmskJ/QcPYRNxVsjK
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
-
NSIS installer
Minor OS version
0
Major OS version
4
Entry point
13017
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CloseHandle
SetFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
CreateFileA
GetFileSize
GetModuleFileNameA
GetTickCount
lstrcmpiA
CopyFileA
ExitProcess
GetCommandLineA
GetWindowsDirectoryA
GetTempPathA
lstrcpynA
GetDiskFreeSpaceA
GlobalUnlock
GlobalLock
CreateThread
CreateProcessA
RemoveDirectoryA
GetTempFileNameA
lstrlenA
lstrcatA
GetSystemDirectoryA
lstrcmpA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
GlobalFree
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
SetErrorMode
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
WriteFile
ReadFile
MulDiv
SetFilePointer
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetCurrentProcess
user32
ScreenToClient
GetWindowRect
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
EndDialog
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxA
CharPrevA
DispatchMessageA
PeekMessageA
CreateDialogParamA
DestroyWindow
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
RegisterClassA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
TrackPopupMenu
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow
InvalidateRect
SendMessageA
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
ShowWindow
gdi32
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
SHFileOperationA
SHGetSpecialFolderLocation
advapi32
RegQueryValueExA
RegSetValueExA
RegEnumKeyA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyExA
comctl32
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
ole32
OleInitialize
OleUninitialize
CoCreateInstance
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
Name
.text
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
110KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
36KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, version=2190,
count=152, id=1, productName=Unmarked objects,
count=17, id=93, version=2179,
count=9, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
-ٷվ.url
- SHA256 ac8789a5075528aa134742a30d5e2af4d8e2ce6d4143253d0d741f9c030943f8
- MD5 21a17ccf717e44d2886a9d231cd10a96
- SHA1 0844eede4d9a9828e03673c9b5f994aa9b8cff87
- SHA512 c7ad7f77e8b5f016286da97473abaa7e0ccb7595736bdc111edfda177b5a6521358e57f886c83412aac249a519348b13078d2f9cc40067ecb52d885270f1e950
- MD5 SHA1 SHA512