Extracted

• Checkers_PACK.rar

  .rar
• Checkers PACK/Checkers PACK/4Shared Cracker V1/4Shared Cracker V1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 192KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/4Shared Cracker V1/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/Scan Results.txt
• Checkers PACK/Checkers PACK/4Shared Cracker V1/dll Library/sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\Mostafa\Desktop\NightMovieCracker\Rapidbaz Cracker\obj\Debug\NightMovie Cracker V1.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/Anatomy.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 196KB - Virtual size: 195KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Tom\Desktop\cc_standard\Colorful.Console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 89KB - Virtual size: 89KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/MailKit.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 684KB - Virtual size: 683KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04/01/2017, 00:00

  Not After

  18/01/2028, 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Signer

  Actual PE Digest

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 648KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Tom\Desktop\cc_standard\Colorful.Console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 89KB - Virtual size: 89KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/MailKit.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 684KB - Virtual size: 683KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04/01/2017, 00:00

  Not After

  18/01/2028, 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Signer

  Actual PE Digest

  e7:f7:51:e6:72:c9:8b:01:74:26:25:32:5b:fe:58:a5:df:cb:23:3c:93:43:64:58:dc:10:9e:40:c8:d1:97:dc

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 648KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/lib.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  U0

  Size: 663KB - Virtual size: 663KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 453KB - Virtual size: 453KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Crank

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/x64/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\MR.ViPER\Downloads\Compressed\xNet-master\xNet-master\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Anatomy Fortnite Skin Checker/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\MR.ViPER\Downloads\Compressed\xNet-master\xNet-master\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Apple Valid Emails Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 172KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/AppleWeb.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  Es'

  Size: 741KB - Virtual size: 741KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 194KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Apple Valid Emails Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/BlackBerry.dll

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 880KB - Virtual size: 880KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 200KB - Virtual size: 200KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/BlackBerry.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 174KB - Virtual size: 173KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/BlackBerry.runtimeconfig.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/CaptchaSharp.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\CaptchaSharp\CaptchaSharp\obj\Release\netstandard2.0\CaptchaSharp.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 107KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\netstandard2.0\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/Config/config.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/Config/login.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/Microsoft.Practices.ServiceLocation.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  27/03/2013, 20:08

  Not After

  27/06/2014, 20:08

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22/04/2014, 17:39

  Not After

  22/07/2015, 17:39

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db

  Signer

  Actual PE Digest

  bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42

  Signer

  Actual PE Digest

  ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/netstandard2.0/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 669KB - Virtual size: 668KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/RuriLib.Parallelization.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\OpenBullet2\RuriLib.Parallelization\obj\Release\net5.0\RuriLib.Parallelization.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 30KB - Virtual size: 29KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/XAct.Core.PCL.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\CI\Jenkins\Workspaces\XActLib\XAct.Core\XAct.Core.PCL\obj\Debug\XAct.Core.PCL.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 473KB - Virtual size: 473KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/BlackBerry.dll

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 880KB - Virtual size: 880KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 200KB - Virtual size: 200KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/BlackBerry.runtimeconfig.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/CaptchaSharp.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\CaptchaSharp\CaptchaSharp\obj\Release\netstandard2.0\CaptchaSharp.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 107KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\netstandard2.0\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Config/config.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Config/login.json
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Microsoft.Practices.ServiceLocation.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:33:e5:27:86:a3:0e:4a:2a:80:00:00:00:00:00:33

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  27/03/2013, 20:08

  Not After

  27/06/2014, 20:08

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:ca:6c:d5:32:12:35:c4:e1:55:00:01:00:00:00:ca

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22/04/2014, 17:39

  Not After

  22/07/2015, 17:39

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db

  Signer

  Actual PE Digest

  bf:23:e5:a2:48:e2:ef:6e:1b:b1:95:e9:3d:7c:0b:22:ce:06:59:db

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Projects\CommonServiceLocator\main\Microsoft.Practices.ServiceLocation.PortableClassLibrary\obj\Release\Microsoft.Practices.ServiceLocation.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42

  Signer

  Actual PE Digest

  ee:c0:2c:41:83:44:ba:ad:9f:7a:0a:20:0d:a7:27:4f:fe:7f:9a:a8:86:d1:c1:4b:9d:c6:49:d0:d6:2c:94:42

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/netstandard2.0/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 669KB - Virtual size: 668KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/RuriLib.Parallelization.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\OpenBullet2\RuriLib.Parallelization\obj\Release\net5.0\RuriLib.Parallelization.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 30KB - Virtual size: 29KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/XAct.Core.PCL.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\CI\Jenkins\Workspaces\XActLib\XAct.Core\XAct.Core.PCL\obj\Debug\XAct.Core.PCL.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 473KB - Virtual size: 473KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BLACKBERRY YAHOO CHECKER + VM MODULES/data/d3d9.exe

  .exe windows:6 windows x64 arch:x64

  6dbf27f4c70fe2c8ed3e0122ba75d641

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb

  Imports

  kernel32

  FindNextFileW

  GetCurrentProcess

  GetModuleHandleExW

  GetModuleFileNameW

  LeaveCriticalSection

  InitializeCriticalSection

  GetEnvironmentVariableW

  FindClose

  MultiByteToWideChar

  GetLastError

  GetFileAttributesExW

  GetFullPathNameW

  GetProcAddress

  DeleteCriticalSection

  WideCharToMultiByte

  IsWow64Process

  LoadLibraryExW

  FreeLibrary

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  EnterCriticalSection

  FindFirstFileExW

  OutputDebugStringW

  LoadLibraryA

  GetModuleHandleW

  InitializeCriticalSectionAndSpinCount

  SetLastError

  RaiseException

  RtlPcToFileHeader

  RtlUnwindEx

  InitializeSListHead

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  IsDebuggerPresent

  IsProcessorFeaturePresent

  TerminateProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  LCMapStringEx

  DecodePointer

  EncodePointer

  InitializeCriticalSectionEx

  GetStringTypeW

  user32

  MessageBoxW

  shell32

  ShellExecuteW

  advapi32

  RegOpenKeyExW

  RegGetValueW

  DeregisterEventSource

  RegisterEventSourceW

  ReportEventW

  RegCloseKey

  api-ms-win-crt-runtime-l1-1-0

  _exit

  __p___argc

  _initterm_e

  _initterm

  _get_initial_wide_environment

  _invalid_parameter_noinfo_noreturn

  _initialize_wide_environment

  _configure_wide_argv

  _initialize_onexit_table

  _set_app_type

  __p___wargv

  _seh_filter_exe

  _register_onexit_function

  _cexit

  terminate

  _errno

  exit

  abort

  _crt_atexit

  _c_exit

  _register_thread_local_exe_atexit_callback

  api-ms-win-crt-stdio-l1-1-0

  setvbuf

  fflush

  _wfopen

  __stdio_common_vswprintf

  __stdio_common_vfwprintf

  _set_fmode

  __stdio_common_vsprintf_s

  __acrt_iob_func

  fputwc

  fputws

  __p__commode

  api-ms-win-crt-heap-l1-1-0

  _set_new_mode

  _callnewh

  free

  malloc

  calloc

  api-ms-win-crt-string-l1-1-0

  wcsnlen

  strcpy_s

  _wcsdup

  strcspn

  wcsncmp

  toupper

  api-ms-win-crt-convert-l1-1-0

  _wtoi

  wcstoul

  api-ms-win-crt-locale-l1-1-0

  setlocale

  ___lc_locale_name_func

  localeconv

  _unlock_locales

  _lock_locales

  ___mb_cur_max_func

  _configthreadlocale

  __pctype_func

  ___lc_codepage_func

  api-ms-win-crt-math-l1-1-0

  frexp

  __setusermatherr

  api-ms-win-crt-time-l1-1-0

  _gmtime64_s

  _time64

  wcsftime

  Sections

  .text

  Size: 97KB - Virtual size: 96KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 37KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _RDATA

  Size: 512B - Virtual size: 244B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 200KB - Virtual size: 200KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 792B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/binbtc.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  ?`wc

  Size: 400KB - Virtual size: 399KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 144KB - Virtual size: 144KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/LiteDB/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/Results/Result 10-05-18 16-48-23/Bad_Combo.txt
• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/btcclicks Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BTC clicks Accounts Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Bunifu_UI_v1.52.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Developer Zoone\Documents\Visual Studio 2013\Projects\Bunifu_Framework\BunifuUI\WindowsFormsControlLibrary1\obj\Release\Bunifu_UI_v1.52.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 230KB - Virtual size: 229KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Bypasser.exe.bak

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  UPX0

  Size: - Virtual size: 560KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  UPX1

  Size: 345KB - Virtual size: 348KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• out.upx

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .text

  Size: 568KB - Virtual size: 567KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 191KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\extreme-net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 118KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/Bunifu_UI_v1.52.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Developer Zoone\Documents\Visual Studio 2013\Projects\Bunifu_Framework\BunifuUI\WindowsFormsControlLibrary1\obj\Release\Bunifu_UI_v1.52.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 230KB - Virtual size: 229KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/Bypasser.exe.bak

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  UPX0

  Size: - Virtual size: 560KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  UPX1

  Size: 345KB - Virtual size: 348KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• out.upx

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .text

  Size: 568KB - Virtual size: 567KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 191KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\extreme-net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 118KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/UplayServer.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  &uuzmZI

  Size: 347KB - Virtual size: 347KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Toolkit/uPlayUpdater.exe

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  UPX0

  Size: - Virtual size: 560KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  UPX1

  Size: 345KB - Virtual size: 348KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 218KB - Virtual size: 218KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/Best uPlay Checker v1.0.1/Uplay Checker v1.0.1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 173KB - Virtual size: 172KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/Bohoo Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 177KB - Virtual size: 176KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/__init__.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/apostrophemask.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/apostrophenullencode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/appendnullbyte.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/base64encode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/between.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/bhsys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  }[K,uRY/

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 878KB - Virtual size: 877KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/bluecoat.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/chardoubleencode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/charencode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/charunicodeencode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/charunicodeescape.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/commalesslimit.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/commalessmid.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/commentbeforeparentheses.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/concat2concatws.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/equaltolike.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/escapequotes.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/greatest.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/halfversionedmorekeywords.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/htmlencode.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/ifnull2casewhenisnull.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/ifnull2ifisnull.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/informationschemacomment.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/least.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/lowercase.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/modsecurityversioned.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/modsecurityzeroversioned.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/multiplespaces.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/nonrecursivereplacement.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/overlongutf8.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/overlongutf8more.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/percentage.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/plus2concat.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/plus2fnconcat.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/randomcase.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/randomcomments.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/securesphere.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/sp_password.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2comment.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2dash.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2hash.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2morecomment.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2morehash.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2mssqlblank.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2mssqlhash.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2mysqlblank.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2mysqldash.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2plus.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/space2randomblank.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/symboliclogical.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/unionalltounion.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/unmagicquotes.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/uppercase.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/varnish.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/versionedkeywords.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/versionedmorekeywords.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/tamper/xforwardedfor.py

  .py .sh linux
• Checkers PACK/Checkers PACK/Bohoo Accounts Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/Bonusbitcoin Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 207KB - Virtual size: 206KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/Results/Result 09-05-18 09-53-08/Good.txt
• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/db.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  :v n
  /%m

  Size: 432KB - Virtual size: 432KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 155KB - Virtual size: 155KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/settings/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Bonusbitcoin Accounts Checker By X-SLAYER-/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/BreakingNord.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 179KB - Virtual size: 178KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Figgle.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Drew\dev\libs\Figgle\Figgle\obj\Release\net45\Figgle.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 470KB - Virtual size: 469KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Figgle.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Drew\dev\libs\Figgle\Figgle\obj\Release\net45\Figgle.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 470KB - Virtual size: 469KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/NordingSoft/sysNording.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 104KB - Virtual size: 104KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 85KB - Virtual size: 84KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/BreakingNord Checker (NordVPN)/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/CBS CHECKER/CBS.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 173KB - Virtual size: 172KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/CertUtils.jsm

  .js
• Checkers PACK/Checkers PACK/CBS CHECKER/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/win32kns.sys

  .dll windows:10 windows x64 arch:x64

  8ad76ac1666b38d8fac63c2ee968b264

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  win32kns.pdb

  Imports

  ntoskrnl.exe

  IoAllocateIrp

  ExAllocatePoolWithTag

  ExFreePoolWithTag

  MmUnlockPages

  KeInsertQueueApc

  IoReuseIrp

  KeSetEvent

  HviGetHypervisorFeatures

  KeInitializeEvent

  KeWaitForSingleObject

  RtlInitUnicodeString

  IoCreateDriver

  MmGetSystemRoutineAddress

  IoWMIRegistrationControl

  RtlCompareMemory

  IoFreeMdl

  HviIsAnyHypervisorPresent

  IoAllocateMdl

  MmBuildMdlForNonPagedPool

  IoFreeIrp

  KeInitializeApc

  KeLeaveCriticalRegion

  ExAcquirePushLockSharedEx

  ExReleasePushLockSharedEx

  ExReleasePushLockExclusiveEx

  ExAcquirePushLockExclusiveEx

  KeClearEvent

  KeEnterCriticalRegion

  netio.sys

  WskCaptureProviderNPI

  WskReleaseProviderNPI

  WskDeregister

  WskRegister

  wpprecorder.sys

  imp_WppRecorderConfigure

  imp_WppRecorderReplay

  imp_WppRecorderLogDelete

  imp_WppRecorderLogCreate

  WppAutoLogTrace

  WppAutoLogStart

  WppAutoLogStop

  Exports

  Exports

  DllInitialize

  DllUnload

  IVBroadcast

  IVFreeIVSRContext

  IVInitialize

  IVRecv

  IVRegisterChildNotification

  IVResolveContainerId

  IVSend

  IVUninitialize

  IVUnregisterChildNotification

  Sections

  .text

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 921B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 756B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .edata

  Size: 512B - Virtual size: 338B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  INIT

  Size: 512B - Virtual size: 177B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  GFIDS

  Size: 512B - Virtual size: 172B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 748B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/CertUtils.jsm

  .js
• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/ua.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CBS CHECKER/xpinstall/win32kns.sys

  .dll windows:10 windows x64 arch:x64

  8ad76ac1666b38d8fac63c2ee968b264

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  win32kns.pdb

  Imports

  ntoskrnl.exe

  IoAllocateIrp

  ExAllocatePoolWithTag

  ExFreePoolWithTag

  MmUnlockPages

  KeInsertQueueApc

  IoReuseIrp

  KeSetEvent

  HviGetHypervisorFeatures

  KeInitializeEvent

  KeWaitForSingleObject

  RtlInitUnicodeString

  IoCreateDriver

  MmGetSystemRoutineAddress

  IoWMIRegistrationControl

  RtlCompareMemory

  IoFreeMdl

  HviIsAnyHypervisorPresent

  IoAllocateMdl

  MmBuildMdlForNonPagedPool

  IoFreeIrp

  KeInitializeApc

  KeLeaveCriticalRegion

  ExAcquirePushLockSharedEx

  ExReleasePushLockSharedEx

  ExReleasePushLockExclusiveEx

  ExAcquirePushLockExclusiveEx

  KeClearEvent

  KeEnterCriticalRegion

  netio.sys

  WskCaptureProviderNPI

  WskReleaseProviderNPI

  WskDeregister

  WskRegister

  wpprecorder.sys

  imp_WppRecorderConfigure

  imp_WppRecorderReplay

  imp_WppRecorderLogDelete

  imp_WppRecorderLogCreate

  WppAutoLogTrace

  WppAutoLogStart

  WppAutoLogStop

  Exports

  Exports

  DllInitialize

  DllUnload

  IVBroadcast

  IVFreeIVSRContext

  IVInitialize

  IVRecv

  IVRegisterChildNotification

  IVResolveContainerId

  IVSend

  IVUninitialize

  IVUnregisterChildNotification

  Sections

  .text

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 921B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 1024B - Virtual size: 756B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  PAGE

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .edata

  Size: 512B - Virtual size: 338B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  INIT

  Size: 512B - Virtual size: 177B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  GFIDS

  Size: 512B - Virtual size: 172B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 748B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Tom\Desktop\cc_standard\Colorful.Console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 89KB - Virtual size: 89KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/UPLAY.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 167KB - Virtual size: 167KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/UPLAY.exe.config
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/UPLAY.pdb
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/combo.txt
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Tom\Desktop\cc_standard\Colorful.Console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 89KB - Virtual size: 89KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/UPLAY.exe.config
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/UPLAY.pdb
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/combo.txt
• Checkers PACK/Checkers PACK/CHECKER Uplay BY SPACEMAN/interface/pbdHost.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\Space\Desktop\C# Uplay\UPLAY\UPLAY\obj\Debug\UPLAY.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 36KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/Crunchyroll.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 174KB - Virtual size: 174KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/c2.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\welaz\source\repos\Crunchyroll\Crunchyroll\obj\Release\Crunchyroll.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/NetUtil/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/aepic.dll

  .dll windows:10 windows x64 arch:x64

  2b5a38d4fa8fb52bf13456eb07f516b0

  
  

  Code Sign

  33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/05/2019, 21:24

  Not After

  02/05/2020, 21:24

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3e:2f:73:d2:af:28:34:9b:6b:3b:38:4d:f6:75:c4:73:03:b2:d4:ec:82:8f:e4:14:ba:18:41:18:c6:1d:fd:36

  Signer

  Actual PE Digest

  3e:2f:73:d2:af:28:34:9b:6b:3b:38:4d:f6:75:c4:73:03:b2:d4:ec:82:8f:e4:14:ba:18:41:18:c6:1d:fd:36

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  aepic.pdb

  Imports

  msvcrt

  _CxxThrowException

  strnlen

  ?what@exception@@UEBAPEBDXZ

  _wcsicmp

  ___lc_codepage_func

  _XcptFilter

  _amsg_exit

  _initterm

  ?terminate@@YAXXZ

  _lock

  _unlock

  __dllonexit

  ___mb_cur_max_func

  ??1type_info@@UEAA@XZ

  memset

  abort

  __crtCompareStringW

  memmove_s

  _vsnprintf_s

  strncmp

  towlower

  ___lc_collate_cp_func

  memcmp

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@XZ

  _wtoi

  calloc

  ??1exception@@UEAA@XZ

  memcpy_s

  malloc

  ??0exception@@QEAA@AEBQEBD@Z

  _purecall

  memmove

  ___lc_handle_func

  __crtLCMapStringW

  ??0exception@@QEAA@AEBQEBDH@Z

  memcpy

  setlocale

  wcstombs

  _vsnwprintf

  ??0bad_cast@@QEAA@PEBD@Z

  __C_specific_handler

  ??1bad_cast@@UEAA@XZ

  free

  strtol

  realloc

  __CxxFrameHandler3

  _errno

  strncpy_s

  ??0bad_cast@@QEAA@AEBV0@@Z

  _vsnwprintf_s

  _vscwprintf

  strchr

  _set_errno

  tolower

  __pctype_func

  iscntrl

  _wsplitpath_s

  _onexit

  isspace

  wcstoul

  _wtoi64

  sprintf_s

  _vsnprintf

  strcpy_s

  _wcsnicmp

  wcschr

  wcsrchr

  wcscpy_s

  wcscat_s

  _wcslwr

  wcsstr

  wcscmp

  ntdll

  RtlGetVersion

  RtlReleaseRelativeName

  NtLoadKeyEx

  RtlDosPathNameToRelativeNtPathName_U

  RtlStringFromGUID

  RtlRandomEx

  NtQueryKey

  WinSqmIsOptedInEx

  RtlFreeSid

  RtlAllocateAndInitializeSid

  RtlNtStatusToDosError

  RtlAdjustPrivilege

  RtlImageDirectoryEntryToData

  RtlVerifyVersionInfo

  LdrResSearchResource

  RtlTimeToTimeFields

  ZwMapViewOfSection

  ZwUnmapViewOfSection

  ZwQuerySystemInformation

  RtlGetNativeSystemInformation

  RtlUpcaseUnicodeChar

  RtlAnsiStringToUnicodeString

  RtlxAnsiStringToUnicodeSize

  RtlInitString

  EtwEventRegister

  EtwEventWrite

  EtwEventUnregister

  RtlSecondsSince1970ToTime

  NtQueryLicenseValue

  ZwCreateSection

  ZwQueryInformationFile

  ZwCreateFile

  RtlAppendUnicodeToString

  RtlAppendUnicodeStringToString

  ZwQueryValueKey

  RtlInitUnicodeStringEx

  ZwEnumerateKey

  ZwOpenKey

  RtlFreeUnicodeString

  RtlInitUnicodeString

  RtlDosPathNameToNtPathName_U_WithStatus

  ZwClose

  RtlLeaveCriticalSection

  RtlInitializeCriticalSection

  RtlMultiByteToUnicodeN

  RtlInitAnsiString

  RtlEnterCriticalSection

  RtlEqualString

  RtlDeleteCriticalSection

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  RtlFreeHeap

  RtlReAllocateHeap

  RtlAllocateHeap

  EtwTraceMessage

  rpcrt4

  UuidCreate

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapReAlloc

  GetProcessHeap

  HeapFree

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  TlsAlloc

  GetThreadPriority

  SetThreadPriority

  TlsGetValue

  ResumeThread

  GetCurrentProcess

  TerminateProcess

  GetCurrentThreadId

  TlsSetValue

  GetCurrentProcessId

  CreateThread

  GetCurrentThread

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  LocaleNameToLCID

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDeleteString

  WindowsCreateStringReference

  WindowsDuplicateString

  WindowsCreateString

  WindowsGetStringRawBuffer

  WindowsIsStringEmpty

  WindowsStringHasEmbeddedNull

  api-ms-win-core-winrt-l1-1-0

  RoActivateInstance

  RoUninitialize

  RoGetActivationFactory

  RoInitialize

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  RaiseException

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceBeginInitialize

  WakeAllConditionVariable

  SleepConditionVariableSRW

  InitOnceExecuteOnce

  InitOnceComplete

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  DebugBreak

  OutputDebugStringW

  IsDebuggerPresent

  api-ms-win-core-winrt-error-l1-1-0

  RoOriginateErrorW

  RoOriginateError

  GetRestrictedErrorInfo

  RoTransformError

  SetRestrictedErrorInfo

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  AcquireSRWLockShared

  InitializeCriticalSectionEx

  ReleaseMutex

  EnterCriticalSection

  InitializeCriticalSection

  SetWaitableTimer

  CreateMutexExW

  OpenSemaphoreW

  WaitForSingleObjectEx

  ReleaseSemaphore

  OpenWaitableTimerW

  CreateEventW

  CreateMutexW

  ReleaseSRWLockExclusive

  AcquireSRWLockExclusive

  DeleteCriticalSection

  WaitForSingleObject

  SetEvent

  InitializeSRWLock

  CreateEventExW

  ReleaseSRWLockShared

  CreateSemaphoreExW

  api-ms-win-core-com-l1-1-0

  CoWaitForMultipleHandles

  CoGetCallContext

  CoCreateInstance

  CoCreateFreeThreadedMarshaler

  CoUninitialize

  CoInitializeEx

  CoTaskMemAlloc

  CoGetInterfaceAndReleaseStream

  CoMarshalInterface

  CreateStreamOnHGlobal

  CoReleaseMarshalData

  CoGetApartmentType

  CoTaskMemFree

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-winrt-error-l1-1-1

  IsErrorPropagationEnabled

  RoReportFailedDelegate

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  GetTokenInformation

  InitializeSecurityDescriptor

  SetSecurityDescriptorOwner

  DuplicateTokenEx

  SetSecurityDescriptorDacl

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-shcore-thread-l1-1-0

  SHSetThreadRef

  SHGetThreadRef

  SetProcessReference

  GetProcessReference

  api-ms-win-core-realtime-l1-1-0

  QueryThreadCycleTime

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemDirectoryW

  GetTickCount64

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetSystemWindowsDirectoryW

  api-ms-win-core-string-l1-1-0

  GetStringTypeW

  WideCharToMultiByte

  MultiByteToWideChar

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-libraryloader-l1-2-0

  GetProcAddress

  FreeLibrary

  GetModuleHandleW

  GetModuleFileNameW

  GetModuleFileNameA

  LoadLibraryExW

  GetModuleHandleExW

  FreeLibraryAndExitThread

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  api-ms-win-core-file-l1-1-0

  GetFileAttributesW

  GetLongPathNameW

  FindClose

  FindNextFileW

  GetLogicalDriveStringsW

  QueryDosDeviceW

  GetDriveTypeW

  FindFirstFileW

  GetTempFileNameW

  WriteFile

  CreateFileW

  DeleteFileW

  GetVolumeInformationByHandleW

  api-ms-win-core-sysinfo-l1-2-0

  VerSetConditionMask

  GetSystemFirmwareTable

  api-ms-win-core-file-l1-2-0

  GetTempPathW

  api-ms-win-security-provider-l1-1-0

  SetEntriesInAclW

  api-ms-win-core-registry-l1-1-0

  RegEnumKeyExW

  RegDeleteValueW

  RegOpenKeyExW

  RegGetValueW

  RegSetValueExW

  RegCloseKey

  RegQueryInfoKeyW

  RegDeleteTreeW

  RegSaveKeyExW

  RegCreateKeyExW

  RegDeleteKeyExW

  RegUnLoadKeyW

  RegLoadAppKeyW

  RegLoadKeyW

  RegFlushKey

  RegSetKeySecurity

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-core-registry-l1-1-1

  RegSetKeyValueW

  RegDeleteKeyValueW

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyW

  RegOpenKeyW

  api-ms-win-core-kernel32-legacy-l1-1-1

  VerifyVersionInfoW

  api-ms-win-core-shlwapi-legacy-l1-1-0

  PathUnExpandEnvStringsW

  PathFileExistsW

  api-ms-win-core-processenvironment-l1-1-0

  GetCommandLineW

  GetCurrentDirectoryW

  api-ms-win-core-file-l2-1-0

  MoveFileExW

  api-ms-win-core-path-l1-1-0

  PathAllocCombine

  PathCchCanonicalizeEx

  PathCchRemoveFileSpec

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-shcore-path-l1-1-0

  ord170

  api-ms-win-shcore-obsolete-l1-1-0

  CommandLineToArgvW

  api-ms-win-core-synch-l1-2-1

  WaitForMultipleObjects

  CreateSemaphoreW

  CreateWaitableTimerW

  bcrypt

  BCryptOpenAlgorithmProvider

  BCryptFinishHash

  BCryptCloseAlgorithmProvider

  BCryptDestroyHash

  BCryptHashData

  BCryptCreateHash

  BCryptGetProperty

  api-ms-win-security-cryptoapi-l1-1-0

  CryptAcquireContextW

  CryptGetHashParam

  CryptReleaseContext

  CryptCreateHash

  CryptHashData

  CryptDestroyHash

  api-ms-win-eventing-classicprovider-l1-1-0

  TraceEvent

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-sidebyside-l1-1-0

  ReleaseActCtx

  QueryActCtxW

  CreateActCtxW

  api-ms-win-core-timezone-l1-1-0

  FileTimeToSystemTime

  api-ms-win-core-threadpool-l1-2-0

  WaitForThreadpoolTimerCallbacks

  TrySubmitThreadpoolCallback

  SetThreadpoolTimer

  CreateThreadpoolTimer

  CallbackMayRunLong

  CloseThreadpoolTimer

  FreeLibraryWhenCallbackReturns

  oleaut32

  SysFreeString

  SysAllocString

  VariantClear

  VariantInit

  VariantCopy

  VariantChangeType

  api-ms-win-security-sddl-l1-1-0

  ConvertSidToStringSidW

  api-ms-win-core-string-l2-1-1

  SHLoadIndirectString

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  PicAmiClose

  PicAmiInitialize

  PicFreeFileInfo

  PicRetrieveFileInfo

  PicRetrieveFileInfoAppx

  UpdateSoftwareInventoryTC2

  Sections

  .text

  Size: 332KB - Virtual size: 332KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 132KB - Virtual size: 132KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/config.dpr
• Checkers PACK/Checkers PACK/CRUNCHY ROLL CHECKER [BLAZING FAST]/msacm32.dll

  .dll windows:10 windows x86 arch:x86

  d708117077f81f5ebb8a7ce8dab0b96b

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Signer

  Actual PE Digest

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msacm32.pdb

  Imports

  msvcrt

  _vsnwprintf

  memcmp

  _initterm

  _except_handler4_common

  memcpy

  free

  _amsg_exit

  _XcptFilter

  iswctype

  malloc

  memset

  ntdll

  NtClose

  RtlOpenCurrentUser

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegEnumValueW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueA

  RegEnumKeyExA

  RegSetValueExA

  RegEnumValueA

  RegCreateKeyExW

  RegEnumKeyExW

  RegQueryValueExA

  api-ms-win-core-privateprofile-l1-1-0

  WritePrivateProfileStringW

  GetProfileStringW

  GetPrivateProfileStringW

  api-ms-win-core-processthreads-l1-1-0

  TlsFree

  GetCurrentProcessId

  GetCurrentThreadId

  GetCurrentProcess

  TlsGetValue

  TerminateProcess

  TlsAlloc

  TlsSetValue

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyA

  RegOpenKeyW

  RegDeleteKeyW

  RegCreateKeyW

  RegCreateKeyA

  RegOpenKeyA

  api-ms-win-core-string-l2-1-0

  CharNextW

  CharLowerBuffW

  CharPrevW

  api-ms-win-core-libraryloader-l1-2-0

  LockResource

  GetModuleFileNameW

  LoadResource

  FreeResource

  LoadStringW

  GetProcAddress

  GetModuleHandleW

  SizeofResource

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  SetEvent

  CreateEventW

  EnterCriticalSection

  InitializeCriticalSection

  ResetEvent

  DeleteCriticalSection

  WaitForSingleObject

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  LocalFree

  GlobalAlloc

  LocalAlloc

  api-ms-win-core-string-obsolete-l1-1-0

  lstrlenA

  lstrcmpW

  api-ms-win-core-heap-obsolete-l1-1-0

  GlobalReAlloc

  GlobalUnlock

  GlobalHandle

  GlobalLock

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  WideCharToMultiByte

  api-ms-win-core-localization-l1-2-0

  GetACP

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-mm-misc-l1-1-0

  SendDriverMessage

  CloseDriver

  OpenDriver

  api-ms-win-mm-mme-l1-1-0

  waveInGetDevCapsW

  waveOutGetNumDevs

  waveOutGetDevCapsW

  waveOutOpen

  waveInOpen

  waveInGetNumDevs

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  XRegThunkEntry

  acmDriverAddA

  acmDriverAddW

  acmDriverClose

  acmDriverDetailsA

  acmDriverDetailsW

  acmDriverEnum

  acmDriverID

  acmDriverMessage

  acmDriverOpen

  acmDriverPriority

  acmDriverRemove

  acmFilterChooseA

  acmFilterChooseW

  acmFilterDetailsA

  acmFilterDetailsW

  acmFilterEnumA

  acmFilterEnumW

  acmFilterTagDetailsA

  acmFilterTagDetailsW

  acmFilterTagEnumA

  acmFilterTagEnumW

  acmFormatChooseA

  acmFormatChooseW

  acmFormatDetailsA

  acmFormatDetailsW

  acmFormatEnumA

  acmFormatEnumW

  acmFormatSuggest

  acmFormatTagDetailsA

  acmFormatTagDetailsW

  acmFormatTagEnumA

  acmFormatTagEnumW

  acmGetVersion

  acmMessage32

  acmMetrics

  acmStreamClose

  acmStreamConvert

  acmStreamMessage

  acmStreamOpen

  acmStreamPrepareHeader

  acmStreamReset

  acmStreamSize

  acmStreamUnprepareHeader

  Sections

  .text

  Size: 69KB - Virtual size: 69KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 256B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/CodChecker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/CodChecker.exe.config
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/CodChecker.pdb
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net45\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/Leaf.xNet.xml

  .xml .js polyglot
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/Newtonsoft.Json.xml

  .xml
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/CodChecker.exe.config
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/CodChecker.pdb
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net45\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Leaf.xNet.xml

  .xml .js polyglot
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/Newtonsoft.Json.xml

  .xml
• Checkers PACK/Checkers PACK/CallOfDuty CHECKER PRO/mf/assembly.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 153KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/AudioSes.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  3914a82d5955b5043566f9cffe3b46f7

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

  Signer

  Actual PE Digest

  52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  audioses.pdb

  Imports

  msvcp_win

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  ?_Xbad_function_call@std@@YAXXZ

  ?_Xlength_error@std@@YAXPBD@Z

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_destroy_in_situ

  api-ms-win-crt-time-l1-1-0

  _time64

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-private-l1-1-0

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__localtime64_s

  _o__purecall

  _o__recalloc

  _o__register_onexit_function

  _o__resetstkoflw

  _o__seh_filter_dll

  _o__wcsicmp

  _o__wcsnicmp

  memmove

  _o__wsplitpath_s

  _o__wtof

  _o__wtoi

  _o_calloc

  _o_ceil

  _o_floor

  _o_free

  _o_log2

  _o_malloc

  _o_realloc

  _o_terminate

  _o_wcscat_s

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wmemcpy_s

  wcschr

  _except_handler4_common

  _o__execute_onexit_table

  _o__errno

  _o__crt_atexit

  _o__configure_narrow_argv

  _o__CIsqrt

  _o__CIsin

  _o__CIpow

  _o__CIlog10

  _o__cexit

  _o__aligned_malloc

  _o__aligned_free

  _o___stdio_common_vswprintf

  _o___stdio_common_vsnprintf_s

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  _CxxThrowException

  memcmp

  memcpy

  rpcrt4

  NdrDllUnregisterProxy

  CStdStubBuffer_Connect

  NdrClientCall4

  CStdStubBuffer_IsIIDSupported

  CStdStubBuffer_Invoke

  IUnknown_QueryInterface_Proxy

  NdrCStdStubBuffer_Release

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  NdrOleAllocate

  I_RpcExceptionFilter

  RpcSmDestroyClientContext

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  RpcStringFreeW

  IUnknown_AddRef_Proxy

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerQueryInterface

  I_RpcMapWin32Status

  NdrDllCanUnloadNow

  RpcBindingFree

  NdrDllGetClassObject

  NdrDllRegisterProxy

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient19

  ObjectStublessClient7

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  ObjectStublessClient5

  ObjectStublessClient20

  ObjectStublessClient18

  ObjectStublessClient17

  ObjectStublessClient3

  ObjectStublessClient10

  ObjectStublessClient22

  ObjectStublessClient15

  ObjectStublessClient11

  ObjectStublessClient14

  ObjectStublessClient12

  ObjectStublessClient16

  ObjectStublessClient4

  ObjectStublessClient21

  ObjectStublessClient13

  oleaut32

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  BSTR_UserSize

  BSTR_UserFree

  LPSAFEARRAY_UserSize

  LPSAFEARRAY_UserFree

  LPSAFEARRAY_UserUnmarshal

  BSTR_UserUnmarshal

  VarUI4FromStr

  BSTR_UserMarshal

  LPSAFEARRAY_UserMarshal

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameW

  FindResourceExW

  GetModuleHandleExW

  GetModuleHandleW

  FreeLibrary

  LockResource

  LoadLibraryExW

  SizeofResource

  GetModuleFileNameA

  DisableThreadLibraryCalls

  LoadResource

  GetProcAddress

  api-ms-win-core-localization-l1-2-0

  GetThreadLocale

  FormatMessageW

  SetThreadLocale

  api-ms-win-core-synch-l1-2-0

  InitOnceBeginInitialize

  InitOnceExecuteOnce

  Sleep

  InitOnceInitialize

  InitOnceComplete

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  DeleteCriticalSection

  SetEvent

  AcquireSRWLockShared

  CreateMutexExW

  ReleaseSemaphore

  InitializeSRWLock

  WaitForSingleObject

  InitializeCriticalSection

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  CancelWaitableTimer

  ReleaseSRWLockShared

  TryEnterCriticalSection

  LeaveCriticalSection

  ReleaseMutex

  WaitForMultipleObjectsEx

  ReleaseSRWLockExclusive

  ResetEvent

  OpenSemaphoreW

  CreateWaitableTimerExW

  EnterCriticalSection

  SetWaitableTimer

  AcquireSRWLockExclusive

  CreateEventW

  InitializeCriticalSectionAndSpinCount

  WaitForSingleObjectEx

  api-ms-win-core-heap-l1-1-0

  HeapSize

  HeapReAlloc

  HeapAlloc

  HeapFree

  HeapDestroy

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  RaiseException

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-winrt-string-l1-1-0

  WindowsCreateString

  WindowsDeleteString

  WindowsCreateStringReference

  WindowsGetStringLen

  WindowsGetStringRawBuffer

  WindowsCompareStringOrdinal

  WindowsDuplicateString

  WindowsIsStringEmpty

  WindowsStringHasEmbeddedNull

  api-ms-win-core-com-l1-1-0

  CLSIDFromString

  CoUninitialize

  CoCreateGuid

  StringFromGUID2

  CoCreateInstance

  CoTaskMemRealloc

  CoCreateFreeThreadedMarshaler

  PropVariantCopy

  CoTaskMemAlloc

  CoWaitForMultipleHandles

  CoTaskMemFree

  CoInitializeEx

  CoGetApartmentType

  PropVariantClear

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegOpenKeyExW

  RegGetValueW

  RegQueryInfoKeyW

  RegCloseKey

  RegQueryValueExW

  RegCreateKeyExW

  RegEnumKeyExW

  RegDeleteValueW

  api-ms-win-eventing-provider-l1-1-0

  EventSetInformation

  EventUnregister

  EventActivityIdControl

  EventWriteTransfer

  EventRegister

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-eventing-classicprovider-l1-1-0

  UnregisterTraceGuids

  RegisterTraceGuidsW

  TraceEvent

  GetTraceEnableLevel

  GetTraceEnableFlags

  TraceMessage

  GetTraceLoggerHandle

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  GetCurrentProcess

  GetCurrentProcessId

  TerminateProcess

  CreateThread

  GetCurrentThread

  SetThreadPriority

  api-ms-win-core-string-l2-1-0

  IsCharAlphaW

  CharNextW

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolThreadMinimum

  SetThreadpoolThreadMaximum

  CloseThreadpoolWork

  CreateThreadpool

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  SetThreadpoolTimer

  SubmitThreadpoolWork

  TrySubmitThreadpoolCallback

  CreateThreadpoolTimer

  CloseThreadpoolCleanupGroup

  CloseThreadpoolCleanupGroupMembers

  CreateThreadpoolCleanupGroup

  CreateThreadpoolWork

  CloseThreadpool

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringW

  DebugBreak

  IsDebuggerPresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  QueryPerformanceFrequency

  api-ms-win-core-handle-l1-1-0

  DuplicateHandle

  CloseHandle

  api-ms-win-core-string-obsolete-l1-1-0

  lstrcmpiW

  lstrcmpW

  mmdevapi

  ord29

  ord11

  ord30

  ord5

  ord10

  api-ms-win-power-base-l1-1-0

  PowerRegisterSuspendResumeNotification

  PowerUnregisterSuspendResumeNotification

  api-ms-win-core-winrt-l1-1-0

  RoActivateInstance

  RoGetActivationFactory

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  MapViewOfFileEx

  api-ms-win-core-synch-l1-2-1

  WaitForMultipleObjects

  api-ms-win-core-file-l1-1-0

  GetFileSize

  CreateFileW

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-winrt-robuffer-l1-1-0

  RoGetBufferMarshaler

  api-ms-win-core-realtime-l1-1-0

  QueryUnbiasedInterruptTime

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount64

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-memory-l1-1-1

  GetProcessWorkingSetSizeEx

  VirtualLock

  VirtualUnlock

  SetProcessWorkingSetSizeEx

  PrefetchVirtualMemory

  api-ms-win-devices-config-l1-1-1

  CM_Get_Device_Interface_ListW

  CM_Get_Device_Interface_List_SizeW

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  api-ms-win-service-winsvc-l1-1-0

  QueryServiceStatus

  api-ms-win-core-windowserrorreporting-l1-1-0

  WerRegisterMemoryBlock

  api-ms-win-mm-time-l1-1-0

  timeBeginPeriod

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyW

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-processthreads-l1-1-1

  GetProcessMitigationPolicy

  IsProcessorFeaturePresent

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-featurestaging-l1-1-0

  GetFeatureEnabledState

  SubscribeFeatureStateChangeNotification

  UnsubscribeFeatureStateChangeNotification

  RecordFeatureUsage

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  ntdll

  RtlLockMemoryZone

  RtlFreeMemoryBlockLookaside

  RtlCreateMemoryZone

  RtlDestroyMemoryBlockLookaside

  RtlExtendMemoryBlockLookaside

  EtwRegisterTraceGuidsW

  EtwGetTraceEnableLevel

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableFlags

  EtwUnregisterTraceGuids

  RtlQueryWnfStateData

  RtlSubscribeWnfStateChangeNotification

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlEqualWnfChangeStamps

  ShipAssert

  RtlQueryPackageClaims

  RtlCreateMemoryBlockLookaside

  RtlDestroyMemoryZone

  RtlAllocateMemoryBlockLookaside

  RtlAllocateMemoryZone

  RtlUnlockMemoryZone

  NtQueryInformationThread

  NtAlpcConnectPort

  RtlInitUnicodeStringEx

  RtlSetLastWin32ErrorAndNtStatusFromNtStatus

  AlpcInitializeMessageAttribute

  AlpcGetMessageAttribute

  NtAlpcSendWaitReceivePort

  NtSetInformationThread

  NtQueryInformationProcess

  RtlNtStatusToDosError

  api-ms-win-service-private-l1-1-0

  SubscribeServiceChangeNotifications

  UnsubscribeServiceChangeNotifications

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 969KB - Virtual size: 969KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  RT_CODE

  Size: 512B - Virtual size: 327B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  RT_BSS

  Size: - Virtual size: 40B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 108B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  RT_CONST

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  RT_DATA

  Size: 512B - Virtual size: 48B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 61KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 57KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/CloudflareSolverRe.Captcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe.Captcha\obj\Release\netstandard1.1\CloudflareSolverRe.Captcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/Netflix Cracked.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/AudioSes.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  3914a82d5955b5043566f9cffe3b46f7

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

  Signer

  Actual PE Digest

  52:c6:68:ee:6e:70:8d:7c:98:98:0c:a5:2a:e3:72:0a:1b:12:84:9e:75:07:b9:9d:19:81:aa:22:51:3c:34:ed

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  audioses.pdb

  Imports

  msvcp_win

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  ?_Xbad_function_call@std@@YAXXZ

  ?_Xlength_error@std@@YAXPBD@Z

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_destroy_in_situ

  api-ms-win-crt-time-l1-1-0

  _time64

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-private-l1-1-0

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__localtime64_s

  _o__purecall

  _o__recalloc

  _o__register_onexit_function

  _o__resetstkoflw

  _o__seh_filter_dll

  _o__wcsicmp

  _o__wcsnicmp

  memmove

  _o__wsplitpath_s

  _o__wtof

  _o__wtoi

  _o_calloc

  _o_ceil

  _o_floor

  _o_free

  _o_log2

  _o_malloc

  _o_realloc

  _o_terminate

  _o_wcscat_s

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wmemcpy_s

  wcschr

  _except_handler4_common

  _o__execute_onexit_table

  _o__errno

  _o__crt_atexit

  _o__configure_narrow_argv

  _o__CIsqrt

  _o__CIsin

  _o__CIpow

  _o__CIlog10

  _o__cexit

  _o__aligned_malloc

  _o__aligned_free

  _o___stdio_common_vswprintf

  _o___stdio_common_vsnprintf_s

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  _CxxThrowException

  memcmp

  memcpy

  rpcrt4

  NdrDllUnregisterProxy

  CStdStubBuffer_Connect

  NdrClientCall4

  CStdStubBuffer_IsIIDSupported

  CStdStubBuffer_Invoke

  IUnknown_QueryInterface_Proxy

  NdrCStdStubBuffer_Release

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  NdrOleAllocate

  I_RpcExceptionFilter

  RpcSmDestroyClientContext

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  RpcStringBindingComposeW

  RpcBindingFromStringBindingW

  RpcStringFreeW

  IUnknown_AddRef_Proxy

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerQueryInterface

  I_RpcMapWin32Status

  NdrDllCanUnloadNow

  RpcBindingFree

  NdrDllGetClassObject

  NdrDllRegisterProxy

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient19

  ObjectStublessClient7

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  ObjectStublessClient5

  ObjectStublessClient20

  ObjectStublessClient18

  ObjectStublessClient17

  ObjectStublessClient3

  ObjectStublessClient10

  ObjectStublessClient22

  ObjectStublessClient15

  ObjectStublessClient11

  ObjectStublessClient14

  ObjectStublessClient12

  ObjectStublessClient16

  ObjectStublessClient4

  ObjectStublessClient21

  ObjectStublessClient13

  oleaut32

  VariantTimeToSystemTime

  SystemTimeToVariantTime

  BSTR_UserSize

  BSTR_UserFree

  LPSAFEARRAY_UserSize

  LPSAFEARRAY_UserFree

  LPSAFEARRAY_UserUnmarshal

  BSTR_UserUnmarshal

  VarUI4FromStr

  BSTR_UserMarshal

  LPSAFEARRAY_UserMarshal

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameW

  FindResourceExW

  GetModuleHandleExW

  GetModuleHandleW

  FreeLibrary

  LockResource

  LoadLibraryExW

  SizeofResource

  GetModuleFileNameA

  DisableThreadLibraryCalls

  LoadResource

  GetProcAddress

  api-ms-win-core-localization-l1-2-0

  GetThreadLocale

  FormatMessageW

  SetThreadLocale

  api-ms-win-core-synch-l1-2-0

  InitOnceBeginInitialize

  InitOnceExecuteOnce

  Sleep

  InitOnceInitialize

  InitOnceComplete

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  DeleteCriticalSection

  SetEvent

  AcquireSRWLockShared

  CreateMutexExW

  ReleaseSemaphore

  InitializeSRWLock

  WaitForSingleObject

  InitializeCriticalSection

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  CancelWaitableTimer

  ReleaseSRWLockShared

  TryEnterCriticalSection

  LeaveCriticalSection

  ReleaseMutex

  WaitForMultipleObjectsEx

  ReleaseSRWLockExclusive

  ResetEvent

  OpenSemaphoreW

  CreateWaitableTimerExW

  EnterCriticalSection

  SetWaitableTimer

  AcquireSRWLockExclusive

  CreateEventW

  InitializeCriticalSectionAndSpinCount

  WaitForSingleObjectEx

  api-ms-win-core-heap-l1-1-0

  HeapSize

  HeapReAlloc

  HeapAlloc

  HeapFree

  HeapDestroy

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  RaiseException

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-winrt-string-l1-1-0

  WindowsCreateString

  WindowsDeleteString

  WindowsCreateStringReference

  WindowsGetStringLen

  WindowsGetStringRawBuffer

  WindowsCompareStringOrdinal

  WindowsDuplicateString

  WindowsIsStringEmpty

  WindowsStringHasEmbeddedNull

  api-ms-win-core-com-l1-1-0

  CLSIDFromString

  CoUninitialize

  CoCreateGuid

  StringFromGUID2

  CoCreateInstance

  CoTaskMemRealloc

  CoCreateFreeThreadedMarshaler

  PropVariantCopy

  CoTaskMemAlloc

  CoWaitForMultipleHandles

  CoTaskMemFree

  CoInitializeEx

  CoGetApartmentType

  PropVariantClear

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegOpenKeyExW

  RegGetValueW

  RegQueryInfoKeyW

  RegCloseKey

  RegQueryValueExW

  RegCreateKeyExW

  RegEnumKeyExW

  RegDeleteValueW

  api-ms-win-eventing-provider-l1-1-0

  EventSetInformation

  EventUnregister

  EventActivityIdControl

  EventWriteTransfer

  EventRegister

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-eventing-classicprovider-l1-1-0

  UnregisterTraceGuids

  RegisterTraceGuidsW

  TraceEvent

  GetTraceEnableLevel

  GetTraceEnableFlags

  TraceMessage

  GetTraceLoggerHandle

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  GetCurrentProcess

  GetCurrentProcessId

  TerminateProcess

  CreateThread

  GetCurrentThread

  SetThreadPriority

  api-ms-win-core-string-l2-1-0

  IsCharAlphaW

  CharNextW

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolThreadMinimum

  SetThreadpoolThreadMaximum

  CloseThreadpoolWork

  CreateThreadpool

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  SetThreadpoolTimer

  SubmitThreadpoolWork

  TrySubmitThreadpoolCallback

  CreateThreadpoolTimer

  CloseThreadpoolCleanupGroup

  CloseThreadpoolCleanupGroupMembers

  CreateThreadpoolCleanupGroup

  CreateThreadpoolWork

  CloseThreadpool

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringW

  DebugBreak

  IsDebuggerPresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  QueryPerformanceFrequency

  api-ms-win-core-handle-l1-1-0

  DuplicateHandle

  CloseHandle

  api-ms-win-core-string-obsolete-l1-1-0

  lstrcmpiW

  lstrcmpW

  mmdevapi

  ord29

  ord11

  ord30

  ord5

  ord10

  api-ms-win-power-base-l1-1-0

  PowerRegisterSuspendResumeNotification

  PowerUnregisterSuspendResumeNotification

  api-ms-win-core-winrt-l1-1-0

  RoActivateInstance

  RoGetActivationFactory

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  MapViewOfFileEx

  api-ms-win-core-synch-l1-2-1

  WaitForMultipleObjects

  api-ms-win-core-file-l1-1-0

  GetFileSize

  CreateFileW

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-winrt-robuffer-l1-1-0

  RoGetBufferMarshaler

  api-ms-win-core-realtime-l1-1-0

  QueryUnbiasedInterruptTime

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount64

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-memory-l1-1-1

  GetProcessWorkingSetSizeEx

  VirtualLock

  VirtualUnlock

  SetProcessWorkingSetSizeEx

  PrefetchVirtualMemory

  api-ms-win-devices-config-l1-1-1

  CM_Get_Device_Interface_ListW

  CM_Get_Device_Interface_List_SizeW

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  api-ms-win-service-winsvc-l1-1-0

  QueryServiceStatus

  api-ms-win-core-windowserrorreporting-l1-1-0

  WerRegisterMemoryBlock

  api-ms-win-mm-time-l1-1-0

  timeBeginPeriod

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyW

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-processthreads-l1-1-1

  GetProcessMitigationPolicy

  IsProcessorFeaturePresent

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-featurestaging-l1-1-0

  GetFeatureEnabledState

  SubscribeFeatureStateChangeNotification

  UnsubscribeFeatureStateChangeNotification

  RecordFeatureUsage

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  ntdll

  RtlLockMemoryZone

  RtlFreeMemoryBlockLookaside

  RtlCreateMemoryZone

  RtlDestroyMemoryBlockLookaside

  RtlExtendMemoryBlockLookaside

  EtwRegisterTraceGuidsW

  EtwGetTraceEnableLevel

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableFlags

  EtwUnregisterTraceGuids

  RtlQueryWnfStateData

  RtlSubscribeWnfStateChangeNotification

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlEqualWnfChangeStamps

  ShipAssert

  RtlQueryPackageClaims

  RtlCreateMemoryBlockLookaside

  RtlDestroyMemoryZone

  RtlAllocateMemoryBlockLookaside

  RtlAllocateMemoryZone

  RtlUnlockMemoryZone

  NtQueryInformationThread

  NtAlpcConnectPort

  RtlInitUnicodeStringEx

  RtlSetLastWin32ErrorAndNtStatusFromNtStatus

  AlpcInitializeMessageAttribute

  AlpcGetMessageAttribute

  NtAlpcSendWaitReceivePort

  NtSetInformationThread

  NtQueryInformationProcess

  RtlNtStatusToDosError

  api-ms-win-service-private-l1-1-0

  SubscribeServiceChangeNotifications

  UnsubscribeServiceChangeNotifications

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 969KB - Virtual size: 969KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  RT_CODE

  Size: 512B - Virtual size: 327B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  RT_BSS

  Size: - Virtual size: 40B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 108B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  RT_CONST

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  RT_DATA

  Size: 512B - Virtual size: 48B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 61KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 57KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/CloudflareSolverRe.Captcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe.Captcha\obj\Release\netstandard1.1\CloudflareSolverRe.Captcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/d3dx10_34.dll

  .dll windows:6 windows x86 arch:x86

  0008d86c47dcdd56b224627bb2f25287

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  04/04/2006, 17:44

  Not After

  26/04/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageContentCommitment

  KeyUsageCertSign

  KeyUsageCRLSign

  61:46:9e:cb:00:04:00:00:00:65

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/04/2006, 19:43

  Not After

  04/10/2007, 19:53

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Signer

  Actual PE Digest

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_34.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _adjust_fdiv

  _amsg_exit

  _initterm

  free

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  __CxxFrameHandler

  gdi32

  GetGlyphOutlineA

  SelectObject

  GetCharacterPlacementA

  GetCharacterPlacementW

  CreateDIBSection

  DeleteDC

  DeleteObject

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkColor

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetTextColor

  kernel32

  CreateFileA

  GetFileSizeEx

  ReadFile

  WideCharToMultiByte

  GetFullPathNameA

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  DebugBreak

  WaitForMultipleObjects

  ReleaseSemaphore

  MultiByteToWideChar

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  DeleteCriticalSection

  InitializeCriticalSection

  EnterCriticalSection

  LoadLibraryA

  LeaveCriticalSection

  GetVersion

  GetProcAddress

  DisableThreadLibraryCalls

  IsProcessorFeaturePresent

  CreateFileW

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  WriteFile

  GetLastError

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  ReleaseMutex

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10DisassembleEffect

  D3DX10DisassembleShader

  D3DX10FilterTexture

  D3DX10GetDriverLevel

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10ReflectShader

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 386KB - Virtual size: 386KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/ncBIN.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 693KB - Virtual size: 693KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/bin/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/d3dx10_34.dll

  .dll windows:6 windows x86 arch:x86

  0008d86c47dcdd56b224627bb2f25287

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  04/04/2006, 17:44

  Not After

  26/04/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageContentCommitment

  KeyUsageCertSign

  KeyUsageCRLSign

  61:46:9e:cb:00:04:00:00:00:65

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/04/2006, 19:43

  Not After

  04/10/2007, 19:53

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Signer

  Actual PE Digest

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_34.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _adjust_fdiv

  _amsg_exit

  _initterm

  free

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  __CxxFrameHandler

  gdi32

  GetGlyphOutlineA

  SelectObject

  GetCharacterPlacementA

  GetCharacterPlacementW

  CreateDIBSection

  DeleteDC

  DeleteObject

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkColor

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetTextColor

  kernel32

  CreateFileA

  GetFileSizeEx

  ReadFile

  WideCharToMultiByte

  GetFullPathNameA

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  DebugBreak

  WaitForMultipleObjects

  ReleaseSemaphore

  MultiByteToWideChar

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  DeleteCriticalSection

  InitializeCriticalSection

  EnterCriticalSection

  LoadLibraryA

  LeaveCriticalSection

  GetVersion

  GetProcAddress

  DisableThreadLibraryCalls

  IsProcessorFeaturePresent

  CreateFileW

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  WriteFile

  GetLastError

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  ReleaseMutex

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10DisassembleEffect

  D3DX10DisassembleShader

  D3DX10FilterTexture

  D3DX10GetDriverLevel

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10ReflectShader

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 386KB - Virtual size: 386KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker N3tflix Cracked BY Scorpio/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Checker Wish By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 175KB - Virtual size: 175KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/PortalWeb.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\FDC files\Desktop\interface_v3\interface\interface\obj\Debug\@interface.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 10KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/desktop.ini
• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Virus Total/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Virus Total/f.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 596KB - Virtual size: 595KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 58KB - Virtual size: 58KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/Virus Total/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/desktop.ini
• Checkers PACK/Checkers PACK/Checker Wish By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/Coinify Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/lib.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  YnPj|BG

  Size: 380KB - Virtual size: 379KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 142KB - Virtual size: 141KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Coinify Accounts Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/CyberGhost VPN Checker by xRisky.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 178KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/Read before using.txt
• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Location/sysVPN.exe

  .exe windows:5 windows x86 arch:x86

  ae2946d958311115e85d738fa4c8b7c2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  kernel32

  GetACP

  GetStringTypeExW

  LocalFree

  CloseHandle

  SizeofResource

  GetCurrentProcessId

  VirtualProtect

  SetEnvironmentVariableW

  ReadProcessMemory

  QueryPerformanceFrequency

  SetProcessWorkingSetSize

  VirtualFree

  GetFullPathNameW

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  WriteProcessMemory

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  ReadFile

  GetLastError

  GetModuleFileNameW

  SetLastError

  FindResourceW

  CreateThread

  CompareStringW

  LoadLibraryA

  ResetEvent

  GetVersion

  FreeResource

  RaiseException

  OpenProcess

  FormatMessageW

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  LoadLibraryExW

  LockResource

  GetCurrentThreadId

  UnhandledExceptionFilter

  VirtualQuery

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  GetStringTypeExA

  LoadResource

  SuspendThread

  GetTickCount

  GetStartupInfoW

  InitializeCriticalSection

  GetThreadPriority

  SetThreadPriority

  GetCurrentProcess

  AllocConsole

  VirtualAlloc

  GetSystemInfo

  GetCommandLineW

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  VerSetConditionMask

  GetDiskFreeSpaceW

  FindFirstFileW

  GetUserDefaultUILanguage

  lstrlenW

  CompareStringA

  SetEndOfFile

  QueryPerformanceCounter

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  ExitThread

  DeleteCriticalSection

  TlsGetValue

  GetDateFormatW

  SetErrorMode

  IsValidLocale

  TlsSetValue

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  CreateEventW

  SetThreadLocale

  GetThreadLocale

  ole32

  CoInitialize

  CoUninitialize

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  user32

  CharUpperBuffA

  CharUpperBuffW

  CharNextW

  MsgWaitForMultipleObjects

  CharLowerBuffA

  CharLowerBuffW

  LoadStringW

  CharUpperW

  PeekMessageW

  GetSystemMetrics

  MessageBoxW

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopy

  VariantChangeType

  msvcrt

  memcpy

  netapi32

  NetWkstaGetInfo

  NetApiBufferFree

  advapi32

  RegQueryValueExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  RegOpenKeyExW

  Exports

  Exports

  P0

  P1

  TMethodImplementationIntercept

  Z1

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 757KB - Virtual size: 757KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 541KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 512B - Virtual size: 420B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 189B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 28B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Read before using.txt
• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/CyberGhost VPN Checker by xRisky/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/DarkAio v1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/DarkAio v1.exe.config
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/Readme - How To Use.txt
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/designmode.css
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US.dic
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/DarkAio v1.exe.config
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/Readme - How To Use.txt
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/designmode.css
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/en-US.dic
• Checkers PACK/Checkers PACK/DARKAIO - ALL IN ONE CHECKER/en-US/ffmpeg.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Users\ashwi\Desktop\DarkAio v1 by @Team_Pentesters\1DarkAio v1.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 842KB - Virtual size: 842KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/Disney+ Protected.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 191KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DISNEY+ CHECKER WITH CAPTURE/config/svg.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 305KB - Virtual size: 305KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 265KB - Virtual size: 265KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/DBC Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 197KB - Virtual size: 197KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/Results/Result 09-05-18 09-46-33/Bad.txt
• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/Results/Result 09-05-18 09-49-18/Bad.txt
• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/Results/Result 09-05-18 09-59-06/Bad.txt
• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/Results/Result 10-05-18 16-54-21/Bad.txt
• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/debug.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  0J]m!w89

  Size: 360KB - Virtual size: 360KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 140KB - Virtual size: 139KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/hwid/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Death By Captcha Accounts Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/DeathByCaptcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Alejandro De Jesus\Desktop\dbc_api_net\DeathByCaptcha\obj\Debug\DeathByCaptcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 940B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/Deathbycaphca Cracker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 195KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/bcastdvr.proxy.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  1b05ea5f90a138982c4f04f953c32511

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  bcastdvr.proxy.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  malloc

  _XcptFilter

  _amsg_exit

  free

  memcmp

  rpcrt4

  CStdStubBuffer_Disconnect

  NdrOleAllocate

  NdrCStdStubBuffer_Release

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  NdrCStdStubBuffer2_Release

  CStdStubBuffer_QueryInterface

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Connect

  CStdStubBuffer_Invoke

  NdrStubForwardingFunction

  CStdStubBuffer_CountRefs

  NdrStubCall2

  CStdStubBuffer_IsIIDSupported

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerRelease

  IUnknown_AddRef_Proxy

  CStdStubBuffer_DebugServerQueryInterface

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserUnmarshal

  HSTRING_UserMarshal

  HSTRING_UserSize

  HSTRING_UserFree

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient3

  ObjectStublessClient27

  CStdStubBuffer2_CountRefs

  ObjectStublessClient28

  ObjectStublessClient20

  ObjectStublessClient15

  ObjectStublessClient23

  CStdStubBuffer2_Disconnect

  ObjectStublessClient7

  ObjectStublessClient13

  ObjectStublessClient11

  CStdStubBuffer2_QueryInterface

  ObjectStublessClient19

  ObjectStublessClient14

  ObjectStublessClient12

  NdrProxyForwardingFunction4

  NdrProxyForwardingFunction5

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  CStdStubBuffer2_Connect

  ObjectStublessClient26

  ObjectStublessClient24

  ObjectStublessClient10

  NdrProxyForwardingFunction3

  ObjectStublessClient25

  ObjectStublessClient22

  ObjectStublessClient18

  ObjectStublessClient16

  ObjectStublessClient21

  ObjectStublessClient29

  ObjectStublessClient17

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  TerminateProcess

  GetCurrentProcess

  GetCurrentProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/bcastdvr.proxy.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  1b05ea5f90a138982c4f04f953c32511

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  bcastdvr.proxy.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  malloc

  _XcptFilter

  _amsg_exit

  free

  memcmp

  rpcrt4

  CStdStubBuffer_Disconnect

  NdrOleAllocate

  NdrCStdStubBuffer_Release

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  NdrCStdStubBuffer2_Release

  CStdStubBuffer_QueryInterface

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Connect

  CStdStubBuffer_Invoke

  NdrStubForwardingFunction

  CStdStubBuffer_CountRefs

  NdrStubCall2

  CStdStubBuffer_IsIIDSupported

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerRelease

  IUnknown_AddRef_Proxy

  CStdStubBuffer_DebugServerQueryInterface

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserUnmarshal

  HSTRING_UserMarshal

  HSTRING_UserSize

  HSTRING_UserFree

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient3

  ObjectStublessClient27

  CStdStubBuffer2_CountRefs

  ObjectStublessClient28

  ObjectStublessClient20

  ObjectStublessClient15

  ObjectStublessClient23

  CStdStubBuffer2_Disconnect

  ObjectStublessClient7

  ObjectStublessClient13

  ObjectStublessClient11

  CStdStubBuffer2_QueryInterface

  ObjectStublessClient19

  ObjectStublessClient14

  ObjectStublessClient12

  NdrProxyForwardingFunction4

  NdrProxyForwardingFunction5

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  CStdStubBuffer2_Connect

  ObjectStublessClient26

  ObjectStublessClient24

  ObjectStublessClient10

  NdrProxyForwardingFunction3

  ObjectStublessClient25

  ObjectStublessClient22

  ObjectStublessClient18

  ObjectStublessClient16

  ObjectStublessClient21

  ObjectStublessClient29

  ObjectStublessClient17

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  TerminateProcess

  GetCurrentProcess

  GetCurrentProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/db.exe

  .exe windows:4 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .text

  Size: 23KB - Virtual size: 22KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .enigma1

  Size: 488KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .enigma2

  Size: 264KB - Virtual size: 264KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/data/eappcfg.dll

  .dll windows:10 windows x86 arch:x86

  5a0044836b791222e0b3b32cdc02e151

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  eappcfg.pdb

  Imports

  msvcrt

  _unlock

  _lock

  _initterm

  malloc

  __dllonexit

  free

  wcsrchr

  _vsnwprintf

  _vsnprintf

  memcpy_s

  _onexit

  swprintf_s

  _wtol

  _beginthreadex

  wcscat_s

  _endthreadex

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  _amsg_exit

  _XcptFilter

  memmove

  _except_handler4_common

  memcpy

  _CxxThrowException

  ??0exception@@QAE@ABQBDH@Z

  ??0exception@@QAE@ABQBD@Z

  memcmp

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _purecall

  _snwprintf_s

  memset

  ntdll

  DbgPrint

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwTraceMessage

  EtwEventRegister

  EtwEventUnregister

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetProcAddress

  FreeLibrary

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-synch-l1-1-0

  WaitForMultipleObjectsEx

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetVersionExW

  GetSystemDirectoryW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  HeapSize

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegOpenKeyExW

  RegLoadMUIStringW

  RegEnumKeyExW

  RegCreateKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  EapHostPeerConfigBlob2Xml

  EapHostPeerConfigXml2Blob

  EapHostPeerCreateMethodConfiguration

  EapHostPeerCredentialsXml2Blob

  EapHostPeerFreeErrorMemory

  EapHostPeerFreeMemory

  EapHostPeerGetMethodProperties

  EapHostPeerGetMethods

  EapHostPeerInvokeConfigUI

  EapHostPeerInvokeIdentityUI

  EapHostPeerInvokeInteractiveUI

  EapHostPeerQueryCredentialInputFields

  EapHostPeerQueryInteractiveUIInputFields

  EapHostPeerQueryUIBlobFromInteractiveUIInputFields

  EapHostPeerQueryUserBlobFromCredentialInputFields

  Sections

  .text

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/DeathByCaptcha Checker by Calix/eappcfg.dll

  .dll windows:10 windows x86 arch:x86

  5a0044836b791222e0b3b32cdc02e151

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  eappcfg.pdb

  Imports

  msvcrt

  _unlock

  _lock

  _initterm

  malloc

  __dllonexit

  free

  wcsrchr

  _vsnwprintf

  _vsnprintf

  memcpy_s

  _onexit

  swprintf_s

  _wtol

  _beginthreadex

  wcscat_s

  _endthreadex

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  _amsg_exit

  _XcptFilter

  memmove

  _except_handler4_common

  memcpy

  _CxxThrowException

  ??0exception@@QAE@ABQBDH@Z

  ??0exception@@QAE@ABQBD@Z

  memcmp

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _purecall

  _snwprintf_s

  memset

  ntdll

  DbgPrint

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwTraceMessage

  EtwEventRegister

  EtwEventUnregister

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetProcAddress

  FreeLibrary

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-synch-l1-1-0

  WaitForMultipleObjectsEx

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetVersionExW

  GetSystemDirectoryW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  HeapSize

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegOpenKeyExW

  RegLoadMUIStringW

  RegEnumKeyExW

  RegCreateKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  EapHostPeerConfigBlob2Xml

  EapHostPeerConfigXml2Blob

  EapHostPeerCreateMethodConfiguration

  EapHostPeerCredentialsXml2Blob

  EapHostPeerFreeErrorMemory

  EapHostPeerFreeMemory

  EapHostPeerGetMethodProperties

  EapHostPeerGetMethods

  EapHostPeerInvokeConfigUI

  EapHostPeerInvokeIdentityUI

  EapHostPeerInvokeInteractiveUI

  EapHostPeerQueryCredentialInputFields

  EapHostPeerQueryInteractiveUIInputFields

  EapHostPeerQueryUIBlobFromInteractiveUIInputFields

  EapHostPeerQueryUserBlobFromCredentialInputFields

  Sections

  .text

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/DirectTv Now.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/procs/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/procs/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/procs/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/procs/db.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  E:\!!my oncrx\Pro...for URET\Patcher\dfg\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 171B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 31KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/procs/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Directv Now Checker by RubiconT/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/tc.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  c:\users\omnil\source\repos\Token Checker\Token Checker\obj\Debug\Token Checker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 18KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/tokens.txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/unverified - Copy (2).txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/unverified - Copy.txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/verified - Copy (2).txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Debug/verified - Copy.txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Token Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Discord Agora's Token Checker/tokens.txt
• Checkers PACK/Checkers PACK/Discord Checker by xPolish/DiscordChecker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 187KB - Virtual size: 187KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Checker by xPolish/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Discord Checker by xPolish/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Discord Checker by xPolish/system/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Checker by xPolish/system/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Discord Checker by xPolish/system/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Checker by xPolish/system/bindc.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\xPolish\source\repos\DiscordChecker\DiscordChecker\obj\Debug\DiscordChecker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Checker by xPolish/system/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Discord Checker by xPolish/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/EZCrack v1.7.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 179KB - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/LiteDB/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/LiteDB/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/LiteDB/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/LiteDB/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 499KB - Virtual size: 498KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/LiteDB/comctl32.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/Modules.txt
• Checkers PACK/Checkers PACK/EZCrackv1.7 Multi Account Checker/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 499KB - Virtual size: 498KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/D3DCompiler_38.dll

  .dll windows:6 windows x86 arch:x86

  876f2e4dfac14ab805dcdb2d1452c596

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0f:78:4d:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23/08/2007, 00:23

  Not After

  23/02/2009, 00:33

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Signer

  Actual PE Digest

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D3DCompiler_38.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  isspace

  _amsg_exit

  _initterm

  _XcptFilter

  _CxxThrowException

  memset

  memcpy

  _strdup

  isxdigit

  atof

  modf

  isalnum

  _isnan

  ceil

  _finite

  _clearfp

  _controlfp

  strrchr

  strncmp

  _fpclass

  _strnicmp

  _purecall

  setlocale

  _stricmp

  toupper

  isdigit

  isalpha

  tolower

  atoi

  qsort

  memmove

  getenv

  malloc

  free

  sscanf

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  strchr

  _vsnprintf

  __CxxFrameHandler

  strstr

  floor

  _CIfmod

  _CItanh

  _CItan

  _CIsinh

  _CIsin

  _CIlog

  _CIpow

  _CIexp

  _CIsqrt

  _CIcosh

  _CIcos

  _CIatan2

  _CIatan

  _CIasin

  _CIacos

  gdi32

  DeleteObject

  kernel32

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  RtlUnwind

  UnmapViewOfFile

  CloseHandle

  FreeLibrary

  DeleteCriticalSection

  InitializeCriticalSection

  UnhandledExceptionFilter

  GetFullPathNameA

  OutputDebugStringA

  MultiByteToWideChar

  GetModuleHandleA

  LoadLibraryA

  lstrcmpiA

  TlsFree

  TlsAlloc

  InterlockedExchange

  Sleep

  TlsSetValue

  InterlockedCompareExchange

  TlsGetValue

  GetVersion

  GetSystemInfo

  GetProcAddress

  VirtualAlloc

  DisableThreadLibraryCalls

  VirtualFree

  SetUnhandledExceptionFilter

  Exports

  Exports

  D3DCompileFromMemory

  D3DDisassembleCode

  D3DDisassembleEffect

  D3DGetCodeDebugInfo

  D3DGetInputAndOutputSignatureBlob

  D3DGetInputSignatureBlob

  D3DGetOutputSignatureBlob

  D3DPreprocessFromMemory

  D3DReflectCode

  D3DReturnFailure1

  DebugSetMute

  Sections

  .text

  Size: 1.4MB - Virtual size: 1.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/IronPython.Wpf.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Wpf\obj\Release\net45\IronPython.Wpf.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/Microsoft.Dynamic.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\Microsoft.Dynamic\obj\Release\net45\Microsoft.Dynamic.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 869KB - Virtual size: 869KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 996B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/Microsoft.Scripting.Metadata.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\Microsoft.Scripting.Metadata\obj\Release\net45\Microsoft.Scripting.Metadata.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 85KB - Virtual size: 84KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/_atr3.exe
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/_hoster.dat
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/_mail_pass.txt
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/CORE/mfc120chs.dll

  .dll windows:6 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  17/11/2016, 22:09

  Not After

  17/02/2018, 22:09

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b9:51:4e:6b:8b:95:85:05:b8:84:05:b0:a8:78:f7:1c:9a:b0:d6:3d:e6:ec:8c:3f:74:46:e2:b4:fb:33:2c:dc

  Signer

  Actual PE Digest

  b9:51:4e:6b:8b:95:85:05:b8:84:05:b0:a8:78:f7:1c:9a:b0:d6:3d:e6:ec:8c:3f:74:46:e2:b4:fb:33:2c:dc

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  bb:09:4d:24:cb:20:7d:a5:4f:8e:81:54:49:65:7f:c3:0b:4a:38:91

  Signer

  Actual PE Digest

  bb:09:4d:24:cb:20:7d:a5:4f:8e:81:54:49:65:7f:c3:0b:4a:38:91

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/D3DCompiler_38.dll

  .dll windows:6 windows x86 arch:x86

  876f2e4dfac14ab805dcdb2d1452c596

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0f:78:4d:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23/08/2007, 00:23

  Not After

  23/02/2009, 00:33

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Signer

  Actual PE Digest

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D3DCompiler_38.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  isspace

  _amsg_exit

  _initterm

  _XcptFilter

  _CxxThrowException

  memset

  memcpy

  _strdup

  isxdigit

  atof

  modf

  isalnum

  _isnan

  ceil

  _finite

  _clearfp

  _controlfp

  strrchr

  strncmp

  _fpclass

  _strnicmp

  _purecall

  setlocale

  _stricmp

  toupper

  isdigit

  isalpha

  tolower

  atoi

  qsort

  memmove

  getenv

  malloc

  free

  sscanf

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  strchr

  _vsnprintf

  __CxxFrameHandler

  strstr

  floor

  _CIfmod

  _CItanh

  _CItan

  _CIsinh

  _CIsin

  _CIlog

  _CIpow

  _CIexp

  _CIsqrt

  _CIcosh

  _CIcos

  _CIatan2

  _CIatan

  _CIasin

  _CIacos

  gdi32

  DeleteObject

  kernel32

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  RtlUnwind

  UnmapViewOfFile

  CloseHandle

  FreeLibrary

  DeleteCriticalSection

  InitializeCriticalSection

  UnhandledExceptionFilter

  GetFullPathNameA

  OutputDebugStringA

  MultiByteToWideChar

  GetModuleHandleA

  LoadLibraryA

  lstrcmpiA

  TlsFree

  TlsAlloc

  InterlockedExchange

  Sleep

  TlsSetValue

  InterlockedCompareExchange

  TlsGetValue

  GetVersion

  GetSystemInfo

  GetProcAddress

  VirtualAlloc

  DisableThreadLibraryCalls

  VirtualFree

  SetUnhandledExceptionFilter

  Exports

  Exports

  D3DCompileFromMemory

  D3DDisassembleCode

  D3DDisassembleEffect

  D3DGetCodeDebugInfo

  D3DGetInputAndOutputSignatureBlob

  D3DGetInputSignatureBlob

  D3DGetOutputSignatureBlob

  D3DPreprocessFromMemory

  D3DReflectCode

  D3DReturnFailure1

  DebugSetMute

  Sections

  .text

  Size: 1.4MB - Virtual size: 1.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/IronPython.Wpf.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Wpf\obj\Release\net45\IronPython.Wpf.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/Microsoft.Dynamic.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\Microsoft.Dynamic\obj\Release\net45\Microsoft.Dynamic.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 869KB - Virtual size: 869KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 996B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/Microsoft.Scripting.Metadata.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\Microsoft.Scripting.Metadata\obj\Release\net45\Microsoft.Scripting.Metadata.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 85KB - Virtual size: 84KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/_atr3 MAIL CHECKER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 189KB - Virtual size: 189KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Access Checker _atr3/_hoster.dat
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/_mail_pass.txt
• Checkers PACK/Checkers PACK/Email Access Checker _atr3/mfc120chs.dll

  .dll windows:6 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:00:c5:96:40:60:4b:f4:de:ae:2e:00:00:00:00:00:c5

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  17/11/2016, 22:09

  Not After

  17/02/2018, 22:09

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b9:51:4e:6b:8b:95:85:05:b8:84:05:b0:a8:78:f7:1c:9a:b0:d6:3d:e6:ec:8c:3f:74:46:e2:b4:fb:33:2c:dc

  Signer

  Actual PE Digest

  b9:51:4e:6b:8b:95:85:05:b8:84:05:b0:a8:78:f7:1c:9a:b0:d6:3d:e6:ec:8c:3f:74:46:e2:b4:fb:33:2c:dc

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  bb:09:4d:24:cb:20:7d:a5:4f:8e:81:54:49:65:7f:c3:0b:4a:38:91

  Signer

  Actual PE Digest

  bb:09:4d:24:cb:20:7d:a5:4f:8e:81:54:49:65:7f:c3:0b:4a:38:91

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/BFE.DLL

  .dll windows:10 windows x64 arch:x64

  af3ccebee341bc1634b9269a2d4ab01d

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  bfe.pdb

  Imports

  msvcrt

  _initterm

  __C_specific_handler

  wcscspn

  _wcslwr

  bsearch

  _ultoa_s

  strpbrk

  strstr

  sprintf_s

  isprint

  _ltoa_s

  _i64toa_s

  _ui64toa_s

  wprintf

  memmove

  memcpy

  malloc

  memcmp

  log

  wcstoul

  _vsnprintf

  _vsnwprintf

  _wcsicmp

  free

  wcstol

  qsort

  _amsg_exit

  iswctype

  _XcptFilter

  wcschr

  _wcsnicmp

  _ultow

  tolower

  wcsnlen

  memset

  ntdll

  NtQueryObject

  RtlGetSaclSecurityDescriptor

  RtlValidRelativeSecurityDescriptor

  RtlNumberOfSetBits

  RtlInitializeBitMap

  WinSqmIsOptedIn

  WinSqmSetDWORD

  WinSqmAddToStream

  RtlValidSid

  RtlLengthSid

  NtDeviceIoControlFile

  RtlAllocateHeap

  RtlInitializeSRWLock

  RtlReleaseSRWLockShared

  RtlAcquireSRWLockShared

  RtlReleaseSRWLockExclusive

  RtlAcquireSRWLockExclusive

  RtlIpv6AddressToStringW

  RtlIpv4AddressToStringW

  RtlGetCurrentServiceSessionId

  RtlCreateHashTable

  RtlDeleteHashTable

  RtlInsertEntryHashTable

  RtlRemoveEntryHashTable

  RtlLookupEntryHashTable

  RtlGetNextEntryHashTable

  RtlInitEnumerationHashTable

  RtlEnumerateEntryHashTable

  RtlEndEnumerationHashTable

  RtlContractHashTable

  RtlGetOwnerSecurityDescriptor

  RtlAdjustPrivilege

  RtlAbsoluteToSelfRelativeSD

  RtlSetOwnerSecurityDescriptor

  RtlSelfRelativeToAbsoluteSD2

  RtlCreateServiceSid

  RtlIntegerToUnicodeString

  RtlInitUnicodeString

  RtlSubAuthorityCountSid

  TpReleaseTimer

  TpWaitForTimer

  RtlFreeHeap

  RtlIpv4AddressToStringA

  RtlIpv6AddressToStringA

  RtlEthernetAddressToStringA

  TpSetTimer

  TpIsTimerSet

  TpAllocTimer

  RtlEqualSid

  RtlLengthSecurityDescriptor

  RtlApplicationVerifierStop

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwEventWrite

  EtwEventActivityIdControl

  EtwEventUnregister

  EtwEventRegister

  RtlNtStatusToDosError

  EtwTraceMessage

  RtlExpandHashTable

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  RtlSetThreadPreferredUILanguages

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  LoadStringW

  DisableThreadLibraryCalls

  GetProcAddress

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  GetCurrentThreadId

  CreateThread

  TlsGetValue

  GetCurrentThread

  OpenThreadToken

  TlsSetValue

  GetCurrentProcess

  TerminateProcess

  TlsFree

  TlsAlloc

  GetProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTime

  GetSystemTimeAsFileTime

  GetTickCount64

  GetTickCount

  api-ms-win-core-rtlsupport-l1-1-0

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  RtlCaptureContext

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-synch-l1-1-0

  CreateEventW

  CreateSemaphoreExW

  ReleaseSRWLockShared

  EnterCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  ReleaseSemaphore

  AcquireSRWLockShared

  AcquireSRWLockExclusive

  TryAcquireSRWLockExclusive

  SetEvent

  InitializeSRWLock

  InitializeCriticalSectionAndSpinCount

  WaitForSingleObject

  ReleaseSRWLockExclusive

  api-ms-win-core-threadpool-legacy-l1-1-0

  CreateTimerQueueTimer

  DeleteTimerQueueEx

  CreateTimerQueue

  DeleteTimerQueueTimer

  UnregisterWaitEx

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-security-base-l1-1-0

  DestroyPrivateObjectSecurity

  GetPrivateObjectSecurity

  GetSecurityDescriptorControl

  CreatePrivateObjectSecurityEx

  GetSecurityDescriptorLength

  SetSecurityDescriptorControl

  SetPrivateObjectSecurityEx

  MapGenericMask

  PrivilegeCheck

  EqualSid

  CopySid

  InitializeSecurityDescriptor

  AllocateAndInitializeSid

  CreateWellKnownSid

  FreeSid

  InitializeAcl

  GetLengthSid

  AddAccessAllowedAce

  SetSecurityDescriptorDacl

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  CompareStringW

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapDestroy

  HeapFree

  GetProcessHeap

  HeapSize

  HeapCreate

  HeapReAlloc

  rpcrt4

  RpcRaiseException

  RpcImpersonateClient

  RpcServerInqCallAttributesW

  UuidCreate

  RpcGetAuthorizationContextForClient

  RpcBindingVectorFree

  RpcServerUnregisterIfEx

  RpcFreeAuthorizationContext

  RpcEpUnregister

  NdrServerCallAll

  NdrServerCall2

  RpcServerUseProtseqW

  RpcServerRegisterIf3

  I_RpcExceptionFilter

  MesHandleFree

  RpcServerInqBindings

  MesEncodeDynBufferHandleCreate

  MesDecodeBufferHandleCreate

  UuidFromStringW

  RpcRevertToSelf

  NdrMesTypeEncode3

  NdrMesTypeDecode3

  I_RpcBindingInqLocalClientPID

  RpcEpRegisterW

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  authz

  AuthzGetInformationFromContext

  AuthzAccessCheck

  AuthziFreeAuditEventType

  AuthzInitializeResourceManager

  AuthzFreeResourceManager

  AuthzFreeContext

  AuthzInitializeContextFromSid

  AuthzFreeAuditEvent

  AuthziLogAuditEvent

  AuthziInitializeAuditEventType

  AuthziInitializeAuditParamsFromArray

  AuthziInitializeAuditEvent

  ws2_32

  htonl

  api-ms-win-core-timezone-l1-1-0

  FileTimeToSystemTime

  iphlpapi

  GetCurrentThreadCompartmentId

  api-ms-win-core-file-l1-1-0

  WriteFile

  CreateFileW

  DeleteFileW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-core-psapi-l1-1-0

  QueryFullProcessImageNameW

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  CreateFileMappingW

  UnmapViewOfFile

  api-ms-win-core-perfcounters-l1-1-0

  PerfCreateInstance

  PerfStartProvider

  PerfSetULongLongCounterValue

  PerfSetULongCounterValue

  PerfStopProvider

  PerfSetCounterSetInfo

  api-ms-win-core-registry-l1-1-0

  RegCreateKeyExW

  RegOpenKeyExW

  RegDeleteValueW

  RegQueryValueExW

  RegQueryInfoKeyW

  RegCloseKey

  RegSetValueExW

  RegEnumValueW

  api-ms-win-core-string-l2-1-1

  SHLoadIndirectString

  api-ms-win-core-threadpool-l1-2-0

  CloseThreadpoolWork

  SubmitThreadpoolWork

  SetThreadpoolTimer

  CreateThreadpoolTimer

  CloseThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CreateThreadpoolWork

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventSetInformation

  EventRegister

  EventWriteTransfer

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-eventing-controller-l1-1-0

  StartTraceW

  EnableTraceEx2

  ControlTraceW

  api-ms-win-eventing-consumer-l1-1-0

  ProcessTrace

  OpenTraceW

  CloseTrace

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-threadpool-private-l1-1-0

  RegisterWaitForSingleObjectEx

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  BfeGetDirectDispatchTable

  BfeOnServiceStartTypeChange

  BfeServiceMain

  SvchostPushServiceGlobals

  Sections

  .text

  Size: 442KB - Virtual size: 441KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 356KB - Virtual size: 355KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 360B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/BFE.DLL

  .dll windows:10 windows x64 arch:x64

  af3ccebee341bc1634b9269a2d4ab01d

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  bfe.pdb

  Imports

  msvcrt

  _initterm

  __C_specific_handler

  wcscspn

  _wcslwr

  bsearch

  _ultoa_s

  strpbrk

  strstr

  sprintf_s

  isprint

  _ltoa_s

  _i64toa_s

  _ui64toa_s

  wprintf

  memmove

  memcpy

  malloc

  memcmp

  log

  wcstoul

  _vsnprintf

  _vsnwprintf

  _wcsicmp

  free

  wcstol

  qsort

  _amsg_exit

  iswctype

  _XcptFilter

  wcschr

  _wcsnicmp

  _ultow

  tolower

  wcsnlen

  memset

  ntdll

  NtQueryObject

  RtlGetSaclSecurityDescriptor

  RtlValidRelativeSecurityDescriptor

  RtlNumberOfSetBits

  RtlInitializeBitMap

  WinSqmIsOptedIn

  WinSqmSetDWORD

  WinSqmAddToStream

  RtlValidSid

  RtlLengthSid

  NtDeviceIoControlFile

  RtlAllocateHeap

  RtlInitializeSRWLock

  RtlReleaseSRWLockShared

  RtlAcquireSRWLockShared

  RtlReleaseSRWLockExclusive

  RtlAcquireSRWLockExclusive

  RtlIpv6AddressToStringW

  RtlIpv4AddressToStringW

  RtlGetCurrentServiceSessionId

  RtlCreateHashTable

  RtlDeleteHashTable

  RtlInsertEntryHashTable

  RtlRemoveEntryHashTable

  RtlLookupEntryHashTable

  RtlGetNextEntryHashTable

  RtlInitEnumerationHashTable

  RtlEnumerateEntryHashTable

  RtlEndEnumerationHashTable

  RtlContractHashTable

  RtlGetOwnerSecurityDescriptor

  RtlAdjustPrivilege

  RtlAbsoluteToSelfRelativeSD

  RtlSetOwnerSecurityDescriptor

  RtlSelfRelativeToAbsoluteSD2

  RtlCreateServiceSid

  RtlIntegerToUnicodeString

  RtlInitUnicodeString

  RtlSubAuthorityCountSid

  TpReleaseTimer

  TpWaitForTimer

  RtlFreeHeap

  RtlIpv4AddressToStringA

  RtlIpv6AddressToStringA

  RtlEthernetAddressToStringA

  TpSetTimer

  TpIsTimerSet

  TpAllocTimer

  RtlEqualSid

  RtlLengthSecurityDescriptor

  RtlApplicationVerifierStop

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwEventWrite

  EtwEventActivityIdControl

  EtwEventUnregister

  EtwEventRegister

  RtlNtStatusToDosError

  EtwTraceMessage

  RtlExpandHashTable

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  RtlSetThreadPreferredUILanguages

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  LoadStringW

  DisableThreadLibraryCalls

  GetProcAddress

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  GetCurrentThreadId

  CreateThread

  TlsGetValue

  GetCurrentThread

  OpenThreadToken

  TlsSetValue

  GetCurrentProcess

  TerminateProcess

  TlsFree

  TlsAlloc

  GetProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTime

  GetSystemTimeAsFileTime

  GetTickCount64

  GetTickCount

  api-ms-win-core-rtlsupport-l1-1-0

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  RtlCaptureContext

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-synch-l1-1-0

  CreateEventW

  CreateSemaphoreExW

  ReleaseSRWLockShared

  EnterCriticalSection

  DeleteCriticalSection

  LeaveCriticalSection

  ReleaseSemaphore

  AcquireSRWLockShared

  AcquireSRWLockExclusive

  TryAcquireSRWLockExclusive

  SetEvent

  InitializeSRWLock

  InitializeCriticalSectionAndSpinCount

  WaitForSingleObject

  ReleaseSRWLockExclusive

  api-ms-win-core-threadpool-legacy-l1-1-0

  CreateTimerQueueTimer

  DeleteTimerQueueEx

  CreateTimerQueue

  DeleteTimerQueueTimer

  UnregisterWaitEx

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-security-base-l1-1-0

  DestroyPrivateObjectSecurity

  GetPrivateObjectSecurity

  GetSecurityDescriptorControl

  CreatePrivateObjectSecurityEx

  GetSecurityDescriptorLength

  SetSecurityDescriptorControl

  SetPrivateObjectSecurityEx

  MapGenericMask

  PrivilegeCheck

  EqualSid

  CopySid

  InitializeSecurityDescriptor

  AllocateAndInitializeSid

  CreateWellKnownSid

  FreeSid

  InitializeAcl

  GetLengthSid

  AddAccessAllowedAce

  SetSecurityDescriptorDacl

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  CompareStringW

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapDestroy

  HeapFree

  GetProcessHeap

  HeapSize

  HeapCreate

  HeapReAlloc

  rpcrt4

  RpcRaiseException

  RpcImpersonateClient

  RpcServerInqCallAttributesW

  UuidCreate

  RpcGetAuthorizationContextForClient

  RpcBindingVectorFree

  RpcServerUnregisterIfEx

  RpcFreeAuthorizationContext

  RpcEpUnregister

  NdrServerCallAll

  NdrServerCall2

  RpcServerUseProtseqW

  RpcServerRegisterIf3

  I_RpcExceptionFilter

  MesHandleFree

  RpcServerInqBindings

  MesEncodeDynBufferHandleCreate

  MesDecodeBufferHandleCreate

  UuidFromStringW

  RpcRevertToSelf

  NdrMesTypeEncode3

  NdrMesTypeDecode3

  I_RpcBindingInqLocalClientPID

  RpcEpRegisterW

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  authz

  AuthzGetInformationFromContext

  AuthzAccessCheck

  AuthziFreeAuditEventType

  AuthzInitializeResourceManager

  AuthzFreeResourceManager

  AuthzFreeContext

  AuthzInitializeContextFromSid

  AuthzFreeAuditEvent

  AuthziLogAuditEvent

  AuthziInitializeAuditEventType

  AuthziInitializeAuditParamsFromArray

  AuthziInitializeAuditEvent

  ws2_32

  htonl

  api-ms-win-core-timezone-l1-1-0

  FileTimeToSystemTime

  iphlpapi

  GetCurrentThreadCompartmentId

  api-ms-win-core-file-l1-1-0

  WriteFile

  CreateFileW

  DeleteFileW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-core-psapi-l1-1-0

  QueryFullProcessImageNameW

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  CreateFileMappingW

  UnmapViewOfFile

  api-ms-win-core-perfcounters-l1-1-0

  PerfCreateInstance

  PerfStartProvider

  PerfSetULongLongCounterValue

  PerfSetULongCounterValue

  PerfStopProvider

  PerfSetCounterSetInfo

  api-ms-win-core-registry-l1-1-0

  RegCreateKeyExW

  RegOpenKeyExW

  RegDeleteValueW

  RegQueryValueExW

  RegQueryInfoKeyW

  RegCloseKey

  RegSetValueExW

  RegEnumValueW

  api-ms-win-core-string-l2-1-1

  SHLoadIndirectString

  api-ms-win-core-threadpool-l1-2-0

  CloseThreadpoolWork

  SubmitThreadpoolWork

  SetThreadpoolTimer

  CreateThreadpoolTimer

  CloseThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CreateThreadpoolWork

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventSetInformation

  EventRegister

  EventWriteTransfer

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-eventing-controller-l1-1-0

  StartTraceW

  EnableTraceEx2

  ControlTraceW

  api-ms-win-eventing-consumer-l1-1-0

  ProcessTrace

  OpenTraceW

  CloseTrace

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-threadpool-private-l1-1-0

  RegisterWaitForSingleObjectEx

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  BfeGetDirectDispatchTable

  BfeOnServiceStartTypeChange

  BfeServiceMain

  SvchostPushServiceGlobals

  Sections

  .text

  Size: 442KB - Virtual size: 441KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 356KB - Virtual size: 355KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 9KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 360B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/cc.dll

  .dll windows:10 windows x64 arch:x64

  e3d3af6e0b819e6e4e57a42ba9c239b9

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  WSDApi.pdb

  Imports

  msvcrt

  __dllonexit

  _onexit

  strncmp

  _unlock

  _wtol

  _stricmp

  vfwprintf_s

  strcmp

  fwprintf_s

  _wfsopen

  _wcserror

  iswdigit

  memset

  _get_errno

  fclose

  _strnicmp

  memcpy

  time

  memmove_s

  wcstok_s

  _callnewh

  _XcptFilter

  _amsg_exit

  _vsnprintf

  _initterm

  tolower

  free

  _lock

  __C_specific_handler

  _purecall

  wcsstr

  wcsncmp

  towlower

  _wcsdup

  _localtime64

  _time64

  _vsnwprintf

  memcpy_s

  _wcsnicmp

  wcschr

  malloc

  _wcsicmp

  memcmp

  wcscmp

  ntdll

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableFlags

  EtwRegisterTraceGuidsW

  EtwUnregisterTraceGuids

  EtwTraceMessage

  RtlIpv6StringToAddressExW

  RtlIpv4StringToAddressExW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  EtwGetTraceEnableLevel

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  GetModuleHandleW

  FreeLibrary

  GetProcAddress

  GetModuleHandleExW

  GetModuleFileNameW

  LoadLibraryExW

  DisableThreadLibraryCalls

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolIo

  CloseThreadpoolWork

  CloseThreadpoolWait

  WaitForThreadpoolWaitCallbacks

  WaitForThreadpoolWorkCallbacks

  CreateThreadpoolWork

  SubmitThreadpoolWork

  StartThreadpoolIo

  TrySubmitThreadpoolCallback

  SetThreadpoolThreadMinimum

  SetThreadpoolWait

  CreateThreadpoolWait

  CloseThreadpoolIo

  WaitForThreadpoolIoCallbacks

  CancelThreadpoolIo

  CloseThreadpool

  CreateThreadpool

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolCleanupGroup

  CloseThreadpoolCleanupGroupMembers

  SetThreadpoolThreadMaximum

  CloseThreadpoolTimer

  CreateThreadpoolCleanupGroup

  SetThreadpoolTimer

  CreateThreadpoolTimer

  api-ms-win-core-synch-l1-1-0

  AcquireSRWLockShared

  ReleaseSemaphore

  ResetEvent

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  WaitForSingleObject

  SetEvent

  ReleaseMutex

  WaitForSingleObjectEx

  OpenSemaphoreW

  CreateSemaphoreExW

  CreateMutexExW

  InitializeCriticalSection

  InitializeSRWLock

  CreateWaitableTimerExW

  CancelWaitableTimer

  SetWaitableTimer

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  SleepEx

  ReleaseSRWLockShared

  CreateEventW

  WaitForMultipleObjectsEx

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  GetTickCount64

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  GetCurrentProcessId

  CreateThread

  GetCurrentThreadId

  GetCurrentProcess

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  DuplicateHandle

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapFree

  rpcrt4

  UuidCreate

  UuidFromStringA

  ws2_32

  htons

  setsockopt

  ntohs

  WSASocketW

  WSAStringToAddressW

  getsockname

  socket

  WSAIoctl

  closesocket

  WSACleanup

  GetAddrInfoW

  FreeAddrInfoW

  WSAAddressToStringW

  WSASendTo

  WSADuplicateSocketW

  WSARecvFrom

  shutdown

  WSAStartup

  WSAGetLastError

  bind

  api-ms-win-eventing-provider-l1-1-0

  EventActivityIdControl

  EventWriteTransfer

  EventUnregister

  EventSetInformation

  EventRegister

  api-ms-win-core-synch-l1-2-0

  InitOnceComplete

  WakeAllConditionVariable

  InitOnceBeginInitialize

  Sleep

  SleepConditionVariableSRW

  api-ms-win-core-io-l1-1-0

  CancelIoEx

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  api-ms-win-core-io-l1-1-1

  CancelIo

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegOpenKeyExA

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  iphlpapi

  CancelMibChangeNotify2

  GetBestRoute2

  ConvertInterfaceGuidToLuid

  GetAdaptersAddresses

  NotifyUnicastIpAddressChange

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-threadpool-legacy-l1-1-0

  UnregisterWaitEx

  QueueUserWorkItem

  nsi

  NsiGetParameter

  api-ms-win-core-threadpool-private-l1-1-0

  RegisterWaitForSingleObjectEx

  webservices

  WsWriteChars

  WsWriteEndAttribute

  WsSetWriterPosition

  WsGetWriterPosition

  WsMoveWriter

  WsWriteStartElement

  WsWriteBytes

  WsWriteEndElement

  WsMoveReader

  WsWriteXmlnsAttribute

  WsWriteEndStartElement

  WsWriteValue

  WsWriteCharsUtf8

  WsWriteText

  WsReadStartElement

  WsEndWriterCanonicalization

  WsSetOutputToBuffer

  WsGetWriterProperty

  WsFreeReader

  WsCopyNode

  WsGetReaderNode

  WsSetOutput

  WsCreateWriter

  WsSetInputToBuffer

  WsCreateReader

  WsFreeHeap

  WsStartWriterCanonicalization

  WsCreateXmlBuffer

  WsCreateHeap

  WsFreeWriter

  WsWriteStartAttribute

  WsReadBytes

  WsReadChars

  WsEndReaderCanonicalization

  WsStartReaderCanonicalization

  WsReadEndAttribute

  WsReadStartAttribute

  WsFindAttribute

  WsSkipNode

  WsReadNode

  WsSetInput

  WsReadEndElement

  WsReadToStartElement

  firewallapi

  FWGetConfig

  FWQueryFirewallRules

  IcfChangeNotificationDestroy

  IsFirewallInCoExistanceMode

  IcfChangeNotificationCreate

  FWOpenPolicyStore

  IcfAddrChangeNotificationCreate

  FWFreeFirewallRules

  FWClosePolicyStore

  FWGetGlobalConfig

  FWResetIndicatedTupleInUse

  FWIndicateTupleInUse

  api-ms-win-core-com-l1-1-0

  CoUninitialize

  CoInitializeEx

  CoWaitForMultipleHandles

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  WSDAddFirewallCheck

  WSDAllocateLinkedMemory

  WSDAttachLinkedMemory

  WSDCancelNetworkChangeNotify

  WSDCompareEndpoints

  WSDCopyEndpoint

  WSDCopyNameList

  WSDCreateDeviceHost

  WSDCreateDeviceHost2

  WSDCreateDeviceHostAdvanced

  WSDCreateDeviceProxy

  WSDCreateDeviceProxy2

  WSDCreateDeviceProxyAdvanced

  WSDCreateDiscoveryProvider

  WSDCreateDiscoveryProvider2

  WSDCreateDiscoveryPublisher

  WSDCreateDiscoveryPublisher2

  WSDCreateHttpAddress

  WSDCreateHttpMessageParameters

  WSDCreateHttpTransport

  WSDCreateMetadataAgent

  WSDCreateOutboundAttachment

  WSDCreateUdpAddress

  WSDCreateUdpMessageParameters

  WSDCreateUdpTransport

  WSDDetachLinkedMemory

  WSDFreeLinkedMemory

  WSDGenerateFault

  WSDGenerateFaultEx

  WSDGenerateRandomDelay

  WSDGetConfigurationOption

  WSDNotifyNetworkChange

  WSDProcessFault

  WSDRemoveFirewallCheck

  WSDSetConfigurationOption

  WSDUriDecode

  WSDUriEncode

  WSDXMLAddChild

  WSDXMLAddSibling

  WSDXMLBuildAnyForSingleElement

  WSDXMLCleanupElement

  WSDXMLCompareNames

  WSDXMLCreateContext

  WSDXMLGetNameFromBuiltinNamespace

  WSDXMLGetValueFromAny

  Sections

  .text

  Size: 564KB - Virtual size: 563KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 1024B - Virtual size: 640B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CertUtils/en-US.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/Email Checker by Shield.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 168KB - Virtual size: 168KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Email Checker by Shield/cc.dll

  .dll windows:10 windows x64 arch:x64

  e3d3af6e0b819e6e4e57a42ba9c239b9

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  WSDApi.pdb

  Imports

  msvcrt

  __dllonexit

  _onexit

  strncmp

  _unlock

  _wtol

  _stricmp

  vfwprintf_s

  strcmp

  fwprintf_s

  _wfsopen

  _wcserror

  iswdigit

  memset

  _get_errno

  fclose

  _strnicmp

  memcpy

  time

  memmove_s

  wcstok_s

  _callnewh

  _XcptFilter

  _amsg_exit

  _vsnprintf

  _initterm

  tolower

  free

  _lock

  __C_specific_handler

  _purecall

  wcsstr

  wcsncmp

  towlower

  _wcsdup

  _localtime64

  _time64

  _vsnwprintf

  memcpy_s

  _wcsnicmp

  wcschr

  malloc

  _wcsicmp

  memcmp

  wcscmp

  ntdll

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableFlags

  EtwRegisterTraceGuidsW

  EtwUnregisterTraceGuids

  EtwTraceMessage

  RtlIpv6StringToAddressExW

  RtlIpv4StringToAddressExW

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  EtwGetTraceEnableLevel

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  GetModuleHandleW

  FreeLibrary

  GetProcAddress

  GetModuleHandleExW

  GetModuleFileNameW

  LoadLibraryExW

  DisableThreadLibraryCalls

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolIo

  CloseThreadpoolWork

  CloseThreadpoolWait

  WaitForThreadpoolWaitCallbacks

  WaitForThreadpoolWorkCallbacks

  CreateThreadpoolWork

  SubmitThreadpoolWork

  StartThreadpoolIo

  TrySubmitThreadpoolCallback

  SetThreadpoolThreadMinimum

  SetThreadpoolWait

  CreateThreadpoolWait

  CloseThreadpoolIo

  WaitForThreadpoolIoCallbacks

  CancelThreadpoolIo

  CloseThreadpool

  CreateThreadpool

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolCleanupGroup

  CloseThreadpoolCleanupGroupMembers

  SetThreadpoolThreadMaximum

  CloseThreadpoolTimer

  CreateThreadpoolCleanupGroup

  SetThreadpoolTimer

  CreateThreadpoolTimer

  api-ms-win-core-synch-l1-1-0

  AcquireSRWLockShared

  ReleaseSemaphore

  ResetEvent

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  WaitForSingleObject

  SetEvent

  ReleaseMutex

  WaitForSingleObjectEx

  OpenSemaphoreW

  CreateSemaphoreExW

  CreateMutexExW

  InitializeCriticalSection

  InitializeSRWLock

  CreateWaitableTimerExW

  CancelWaitableTimer

  SetWaitableTimer

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  SleepEx

  ReleaseSRWLockShared

  CreateEventW

  WaitForMultipleObjectsEx

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  GetTickCount64

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  GetCurrentProcessId

  CreateThread

  GetCurrentThreadId

  GetCurrentProcess

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  DuplicateHandle

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapFree

  rpcrt4

  UuidCreate

  UuidFromStringA

  ws2_32

  htons

  setsockopt

  ntohs

  WSASocketW

  WSAStringToAddressW

  getsockname

  socket

  WSAIoctl

  closesocket

  WSACleanup

  GetAddrInfoW

  FreeAddrInfoW

  WSAAddressToStringW

  WSASendTo

  WSADuplicateSocketW

  WSARecvFrom

  shutdown

  WSAStartup

  WSAGetLastError

  bind

  api-ms-win-eventing-provider-l1-1-0

  EventActivityIdControl

  EventWriteTransfer

  EventUnregister

  EventSetInformation

  EventRegister

  api-ms-win-core-synch-l1-2-0

  InitOnceComplete

  WakeAllConditionVariable

  InitOnceBeginInitialize

  Sleep

  SleepConditionVariableSRW

  api-ms-win-core-io-l1-1-0

  CancelIoEx

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  api-ms-win-core-io-l1-1-1

  CancelIo

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegOpenKeyExA

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  MultiByteToWideChar

  iphlpapi

  CancelMibChangeNotify2

  GetBestRoute2

  ConvertInterfaceGuidToLuid

  GetAdaptersAddresses

  NotifyUnicastIpAddressChange

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-threadpool-legacy-l1-1-0

  UnregisterWaitEx

  QueueUserWorkItem

  nsi

  NsiGetParameter

  api-ms-win-core-threadpool-private-l1-1-0

  RegisterWaitForSingleObjectEx

  webservices

  WsWriteChars

  WsWriteEndAttribute

  WsSetWriterPosition

  WsGetWriterPosition

  WsMoveWriter

  WsWriteStartElement

  WsWriteBytes

  WsWriteEndElement

  WsMoveReader

  WsWriteXmlnsAttribute

  WsWriteEndStartElement

  WsWriteValue

  WsWriteCharsUtf8

  WsWriteText

  WsReadStartElement

  WsEndWriterCanonicalization

  WsSetOutputToBuffer

  WsGetWriterProperty

  WsFreeReader

  WsCopyNode

  WsGetReaderNode

  WsSetOutput

  WsCreateWriter

  WsSetInputToBuffer

  WsCreateReader

  WsFreeHeap

  WsStartWriterCanonicalization

  WsCreateXmlBuffer

  WsCreateHeap

  WsFreeWriter

  WsWriteStartAttribute

  WsReadBytes

  WsReadChars

  WsEndReaderCanonicalization

  WsStartReaderCanonicalization

  WsReadEndAttribute

  WsReadStartAttribute

  WsFindAttribute

  WsSkipNode

  WsReadNode

  WsSetInput

  WsReadEndElement

  WsReadToStartElement

  firewallapi

  FWGetConfig

  FWQueryFirewallRules

  IcfChangeNotificationDestroy

  IsFirewallInCoExistanceMode

  IcfChangeNotificationCreate

  FWOpenPolicyStore

  IcfAddrChangeNotificationCreate

  FWFreeFirewallRules

  FWClosePolicyStore

  FWGetGlobalConfig

  FWResetIndicatedTupleInUse

  FWIndicateTupleInUse

  api-ms-win-core-com-l1-1-0

  CoUninitialize

  CoInitializeEx

  CoWaitForMultipleHandles

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  WSDAddFirewallCheck

  WSDAllocateLinkedMemory

  WSDAttachLinkedMemory

  WSDCancelNetworkChangeNotify

  WSDCompareEndpoints

  WSDCopyEndpoint

  WSDCopyNameList

  WSDCreateDeviceHost

  WSDCreateDeviceHost2

  WSDCreateDeviceHostAdvanced

  WSDCreateDeviceProxy

  WSDCreateDeviceProxy2

  WSDCreateDeviceProxyAdvanced

  WSDCreateDiscoveryProvider

  WSDCreateDiscoveryProvider2

  WSDCreateDiscoveryPublisher

  WSDCreateDiscoveryPublisher2

  WSDCreateHttpAddress

  WSDCreateHttpMessageParameters

  WSDCreateHttpTransport

  WSDCreateMetadataAgent

  WSDCreateOutboundAttachment

  WSDCreateUdpAddress

  WSDCreateUdpMessageParameters

  WSDCreateUdpTransport

  WSDDetachLinkedMemory

  WSDFreeLinkedMemory

  WSDGenerateFault

  WSDGenerateFaultEx

  WSDGenerateRandomDelay

  WSDGetConfigurationOption

  WSDNotifyNetworkChange

  WSDProcessFault

  WSDRemoveFirewallCheck

  WSDSetConfigurationOption

  WSDUriDecode

  WSDUriEncode

  WSDXMLAddChild

  WSDXMLAddSibling

  WSDXMLBuildAnyForSingleElement

  WSDXMLCleanupElement

  WSDXMLCompareNames

  WSDXMLCreateContext

  WSDXMLGetNameFromBuiltinNamespace

  WSDXMLGetValueFromAny

  Sections

  .text

  Size: 564KB - Virtual size: 563KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 1024B - Virtual size: 640B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/D.Net.Clipboard.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\rvs1\Desktop\D.Net.Clipboard\D.Net.Clipboard\obj\Debug\D.Net.Clipboard.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/FPSN Checker By Angeal(Cracked by MR_Liosion).exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 636KB - Virtual size: 635KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/Newtonsoft.Json.xml

  .xml
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/freehqproxy.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\Users\Kati\Downloads\BITCOINSTEALER\freehqproxy.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/freehqproxy.pdb
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/nunit.framework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\nunit\nunit\src\NUnitFramework\framework\obj\Release\net-4.5\nunit.framework.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 305KB - Virtual size: 305KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/D.Net.Clipboard.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\rvs1\Desktop\D.Net.Clipboard\D.Net.Clipboard\obj\Debug\D.Net.Clipboard.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/LisionSoft.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 92KB - Virtual size: 92KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 327KB - Virtual size: 327KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 636KB - Virtual size: 635KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/Newtonsoft.Json.xml

  .xml
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/README.txt
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/__init__.py

  .py .sh linux
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/freehqproxy.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\Users\Kati\Downloads\BITCOINSTEALER\freehqproxy.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/freehqproxy.pdb
• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/nunit.framework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\src\nunit\nunit\src\NUnitFramework\framework\obj\Release\net-4.5\nunit.framework.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 305KB - Virtual size: 305KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/F.PSN Checker By Angeal v1.1.0/safe2bin/safe2bin.py

  .py .sh linux
• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/FortNite [Brute&Checker] 1.0.0 - [Cracked By PC-RET].exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 184KB - Virtual size: 184KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/RLSettings.exe

  .exe windows:6 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  Size: 246KB - Virtual size: 428KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 31KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 1KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 5KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 17KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 174KB - Virtual size: 2.5MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 932KB - Virtual size: 936KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/procs/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/FortNite Brute Checker 1 0 0 - Cracked By PC-RET/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Fortnite Checker Keker 1.0.0.79.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 254KB - Virtual size: 254KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 302KB - Virtual size: 302KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/MySql.Data.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  G:\ade\build-cnet\sb_1-29906840-1533600993.48\connector-net\MySQL.Data\src\obj\Release\net452\MySql.Data.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 392KB - Virtual size: 391KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/RMActivate.exe

  .exe windows:10 windows x86 arch:x86

  ebcdff4fe394a3e0cd90455a8a72ef29

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  rmactivate.pdb

  Imports

  msvcrt

  _wcsnicmp

  memcpy

  wcscpy_s

  _snwprintf_s

  _stricmp

  ??0exception@@QAE@ABQBD@Z

  _controlfp

  ?terminate@@YAXXZ

  _except_handler4_common

  _initterm

  __setusermatherr

  __p__fmode

  _cexit

  _exit

  exit

  __set_app_type

  __getmainargs

  _amsg_exit

  __p__commode

  _XcptFilter

  _callnewh

  malloc

  free

  ??0exception@@QAE@ABV0@@Z

  ??1exception@@UAE@XZ

  ?what@exception@@UBEPBDXZ

  _CxxThrowException

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  memmove

  _wcsicmp

  memset

  api-ms-win-core-memory-l1-1-0

  VirtualQuery

  VirtualAlloc

  VirtualProtect

  VirtualFree

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  UnhandledExceptionFilter

  RaiseException

  SetUnhandledExceptionFilter

  SetLastError

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObject

  ReleaseMutex

  DeleteCriticalSection

  LeaveCriticalSection

  ReleaseSRWLockExclusive

  AcquireSRWLockExclusive

  EnterCriticalSection

  CreateMutexA

  InitializeCriticalSection

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentThreadId

  GetCurrentProcess

  GetCurrentThread

  api-ms-win-core-libraryloader-l1-2-0

  LoadLibraryExA

  GetProcAddress

  FreeLibrary

  GetModuleFileNameW

  LoadLibraryExW

  GetModuleHandleW

  api-ms-win-core-errorhandling-l1-1-2

  RaiseFailFastException

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemWindowsDirectoryW

  GetSystemTimeAsFileTime

  GetTickCount

  GetVersionExA

  GetSystemDirectoryW

  GetSystemInfo

  GetSystemTime

  wintrust

  WTHelperGetProvSignerFromChain

  WTHelperProvDataFromStateData

  WinVerifyTrust

  api-ms-win-eventing-classicprovider-l1-1-0

  GetTraceEnableFlags

  GetTraceEnableLevel

  GetTraceLoggerHandle

  TraceMessage

  UnregisterTraceGuids

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapSetInformation

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  CoCreateGuid

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  crypt32

  CertVerifyCertificateChainPolicy

  CryptProtectData

  api-ms-win-core-file-l1-1-0

  GetDriveTypeW

  DeleteFileW

  GetLogicalDriveStringsW

  GetVolumeInformationW

  CreateFileA

  CreateFileW

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-registry-l1-1-0

  RegOpenKeyExA

  RegSetValueExA

  RegCreateKeyExA

  RegDeleteValueA

  RegCloseKey

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processenvironment-l1-1-0

  GetEnvironmentStringsW

  cryptsp

  CryptContextAddRef

  CryptAcquireContextW

  CryptGetDefaultProviderW

  CryptReleaseContext

  CryptGenRandom

  CryptDestroyKey

  CryptExportKey

  CryptGenKey

  CryptCreateHash

  CryptHashData

  CryptDestroyHash

  CryptGetHashParam

  CryptDeriveKey

  api-ms-win-eventing-obsolete-l1-1-0

  RegisterTraceGuidsA

  api-ms-win-core-toolhelp-l1-1-0

  Module32NextW

  Module32FirstW

  CreateToolhelp32Snapshot

  Sections

  .text

  Size: 508KB - Virtual size: 507KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/Recovery Data/xNet.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  CeKQ)

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 300KB - Virtual size: 300KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 31KB - Virtual size: 30KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/proxies.txt
• Checkers PACK/Checkers PACK/Fortnite Checker Keker 1_0_0_79/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/DiscordRPC.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\discord-rpc-csharp\Discord RPC\obj\Release\DiscordRPC.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 67KB - Virtual size: 66KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimCLR_v3.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 194KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/DiscordRPC.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\discord-rpc-csharp\Discord RPC\obj\Release\DiscordRPC.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 67KB - Virtual size: 66KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/SoftOtim syS.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 858KB - Virtual size: 857KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/OtimSoft/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker OtimCLR3_/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/Fortnite Checker BW.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 195KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/Fortnite.exe.config
• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/Fortnite.exe.config
• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 31KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 266KB - Virtual size: 265KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/bin/xNet-Ameliorated.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\SEEZORR\Desktop\xNet-Ameliorated-master\xNet-Ameliorated\xNet-Ameliorated\obj\Debug\xNet-Ameliorated.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Checker by Burnwood/xNet-Ameliorated.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\SEEZORR\Desktop\xNet-Ameliorated-master\xNet-Ameliorated\xNet-Ameliorated\obj\Debug\xNet-Ameliorated.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/Fskin.exe

  .exe windows:4 windows x64 arch:x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  *'tGR`

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 196KB - Virtual size: 195KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/KnownGameList.bin
• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/broadcastpause720.h264
• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Dump/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Fort Skinner.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 190KB - Virtual size: 190KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Fortnite Skinner Checker V1.9.1/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 225KB - Virtual size: 224KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy.com Checker Cracked.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\SioVer\Desktop\Crackers\Godaddy.com Checker\Godaddy.com Checker\obj\Debug\Godaddy.com Checker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy.com Checker.exe.CodeAnalysisLog.xml
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy.com Checker.exe.config
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy.com Checker.pdb
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/Godaddy.com Checker.xml
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 311KB - Virtual size: 310KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/ALL.txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/REAL1.txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[00_15_24].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[01_04_44].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[01_05_27].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[01_15_25].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[02_18_13].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[02_20_59].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[02_51_50].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[08_40_25].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[12_14_07].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[14_13_11].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[15_00_06].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[15_09_11].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[15_26_51].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[16_07_07].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[16_07_47].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[16_10_59].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[16_45_30].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[18_22_46].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[19_07_31].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[21_32_05].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[21_32_13].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[23_49_37].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/RESULT-FOLDER/good_bal.txt[23_50_34].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Godaddy.com Checker Cracked.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\SioVer\Desktop\Crackers\Godaddy.com Checker\Godaddy.com Checker\obj\Debug\Godaddy.com Checker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Godaddy.com Checker.exe.CodeAnalysisLog.xml
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Godaddy.com Checker.exe.config
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Godaddy.com Checker.pdb
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Godaddy.com Checker.xml
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 311KB - Virtual size: 310KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/ALL.txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/REAL1.txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[00_15_24].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[01_04_44].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[01_05_27].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[01_15_25].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[02_18_13].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[02_20_59].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[02_51_50].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[08_40_25].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[12_14_07].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[14_13_11].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[15_00_06].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[15_09_11].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[15_26_51].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[16_07_07].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[16_07_47].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[16_10_59].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[16_45_30].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[18_22_46].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[19_07_31].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[21_32_05].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[21_32_13].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[23_49_37].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/RESULT-FOLDER/good_bal.txt[23_50_34].txt
• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/log.exe

  .exe windows:4 windows x86 arch:x86

  d3a62971944197f0701c7049a9c739d1

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetModuleFileNameA

  GetLongPathNameA

  CreateMutexA

  OpenMutexA

  Process32Next

  Process32First

  CreateToolhelp32Snapshot

  SizeofResource

  LockResource

  LoadResource

  FindResourceA

  GetLocaleInfoA

  Process32NextW

  Process32FirstW

  lstrlenA

  GetDriveTypeA

  CreateProcessA

  GetTickCount

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  WinExec

  GetCurrentProcessId

  CreateDirectoryW

  CopyFileA

  GetFileAttributesW

  GetLogicalDriveStringsA

  GetCurrentProcess

  ResumeThread

  SetThreadContext

  WriteProcessMemory

  VirtualAllocEx

  ReadProcessMemory

  GetThreadContext

  VirtualAlloc

  GlobalFree

  LocalAlloc

  TerminateProcess

  ReadFile

  PeekNamedPipe

  GetStdHandle

  CreatePipe

  OpenProcess

  DuplicateHandle

  GetCurrentThread

  lstrcpynA

  ExitProcess

  AllocConsole

  GetStartupInfoA

  ExpandEnvironmentStringsA

  FindFirstFileA

  FindNextFileA

  GetLastError

  LoadLibraryA

  GetProcAddress

  CreateFileMappingA

  MapViewOfFileEx

  DeleteFileA

  RemoveDirectoryA

  CloseHandle

  GetFileAttributesA

  SetFileAttributesA

  SetEvent

  TerminateThread

  FindFirstFileW

  FindNextFileW

  FindClose

  GetLocalTime

  CreateEventA

  WaitForSingleObject

  CreateDirectoryA

  ExitThread

  Sleep

  GetModuleHandleA

  DeleteFileW

  CreateThread

  user32

  GetWindowTextLengthA

  GetForegroundWindow

  UnhookWindowsHookEx

  CloseClipboard

  GetClipboardData

  OpenClipboard

  SetClipboardData

  EmptyClipboard

  ExitWindowsEx

  MessageBoxA

  GetKeyboardLayoutNameA

  GetWindowThreadProcessId

  ShowWindow

  CloseWindow

  GetWindowTextA

  GetWindowTextW

  EnumWindows

  SendInput

  CreateWindowExA

  RegisterClassExA

  AppendMenuA

  CreatePopupMenu

  TrackPopupMenu

  SetForegroundWindow

  GetCursorPos

  DefWindowProcA

  GetKeyState

  CallNextHookEx

  SetWindowsHookExA

  GetMessageA

  TranslateMessage

  GetKeyboardLayout

  FindWindowA

  DispatchMessageA

  IsWindowVisible

  gdi32

  CreateDCA

  CreateCompatibleDC

  GetDeviceCaps

  CreateCompatibleBitmap

  SelectObject

  StretchBlt

  GetObjectA

  GetDIBits

  DeleteObject

  DeleteDC

  advapi32

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  RegCreateKeyExA

  RegQueryInfoKeyA

  RegEnumKeyExA

  RegEnumValueA

  RegDeleteValueA

  RegCreateKeyA

  RegSetValueExA

  RegOpenKeyExA

  RegDeleteKeyA

  RegCloseKey

  RegQueryValueExA

  GetUserNameW

  shell32

  ShellExecuteA

  ExtractIconA

  Shell_NotifyIconA

  ShellExecuteExA

  ShellExecuteW

  msvcp60

  ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ

  ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADXZ

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z

  ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBD@Z

  ??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z

  ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

  ??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z

  ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z

  ?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

  ??9std@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z

  ??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@G@Z

  ?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z

  ?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIGI@Z

  ?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB

  ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z

  ??0Init@ios_base@std@@QAE@XZ

  ??1Init@ios_base@std@@QAE@XZ

  ??0_Winit@std@@QAE@XZ

  ??1_Winit@std@@QAE@XZ

  ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z

  ?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

  ??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBGABV10@@Z

  ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@DABV10@@Z

  ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

  ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z

  ?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

  ?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

  ?length@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ

  ??Bios_base@std@@QBEPAXXZ

  ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

  ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z

  ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@IDABV?$allocator@D@1@@Z

  ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z

  ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z

  ?is_open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QBE_NXZ

  ?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

  ??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z

  ??0logic_error@std@@QAE@ABV01@@Z

  ??0out_of_range@std@@QAE@ABV01@@Z

  ??1out_of_range@std@@UAE@XZ

  ??0out_of_range@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z

  ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

  ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

  ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z

  ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDIABV?$allocator@D@1@@Z

  ??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z

  ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z

  ??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z

  ??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@D@Z

  ?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

  ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

  ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z

  ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

  ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ

  ??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z

  ?empty@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE_NXZ

  ??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z

  ?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIABV12@I@Z

  ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z

  ??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z

  ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z

  ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ

  ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

  ??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@PBG@Z

  ?end@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ

  ?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEPAGXZ

  ??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@G@Z

  ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z

  ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z

  ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JW4seekdir@ios_base@2@@Z

  ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ

  ?is_open@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QBE_NXZ

  ??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z

  ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z

  msvcrt

  _wrename

  _controlfp

  __set_app_type

  __p__fmode

  __p__commode

  _adjust_fdiv

  __setusermatherr

  _initterm

  __getmainargs

  _acmdln

  _XcptFilter

  _exit

  _onexit

  __dllonexit

  ??1type_info@@UAE@XZ

  _iob

  freopen

  srand

  rand

  mbstowcs

  realloc

  _itoa

  sprintf

  getenv

  toupper

  tolower

  wcscmp

  printf

  strncmp

  malloc

  free

  _EH_prolog

  __CxxFrameHandler

  time

  localtime

  strftime

  puts

  atoi

  _ftol

  ??2@YAPAXI@Z

  _except_handler3

  exit

  ??0exception@@QAE@ABV0@@Z

  _CxxThrowException

  winmm

  waveInOpen

  waveInStop

  waveInClose

  waveInAddBuffer

  waveInPrepareHeader

  waveInUnprepareHeader

  waveInStart

  shlwapi

  PathFileExistsA

  ws2_32

  htons

  gethostbyname

  closesocket

  socket

  send

  WSAGetLastError

  connect

  recv

  WSAStartup

  urlmon

  URLDownloadToFileA

  gdiplus

  GdipLoadImageFromStreamICM

  GdipDisposeImage

  GdipCloneImage

  GdipAlloc

  GdipSaveImageToStream

  GdipSaveImageToFile

  GdipLoadImageFromStream

  GdiplusStartup

  GdipGetImageEncoders

  GdipFree

  GdipGetImageEncodersSize

  wininet

  InternetCloseHandle

  InternetOpenUrlA

  InternetOpenA

  InternetReadFile

  Sections

  .text

  Size: 60KB - Virtual size: 59KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 20KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy Checker Cracked/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/CloudflareSolverRe.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe\obj\Release\netstandard1.1\CloudflareSolverRe.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/Godaddy.com REG CHECKER BY ZARAMSIM.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 182KB - Virtual size: 182KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/IronPython.Wpf.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Wpf\obj\Release\net45\IronPython.Wpf.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/SuperEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 120KB - Virtual size: 120KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/Windows.System.UserDeviceAssociation.dll

  .dll windows:10 windows x86 arch:x86

  58d3184f6b40ff5d7f83f469452c70a7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  Windows.System.UserDeviceAssociation.pdb

  Imports

  msvcrt

  free

  malloc

  _initterm

  _unlock

  __dllonexit

  _onexit

  ?terminate@@YAXXZ

  _except_handler4_common

  __CxxFrameHandler3

  memcmp

  ??1type_info@@UAE@XZ

  _callnewh

  memmove

  memcpy

  _CxxThrowException

  ?what@exception@@UBEPBDXZ

  ??0exception@@QAE@ABQBDH@Z

  _XcptFilter

  ??0exception@@QAE@ABQBD@Z

  _vsnprintf_s

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1exception@@UAE@XZ

  memcpy_s

  _purecall

  _vsnwprintf

  _amsg_exit

  ??3@YAXPAX@Z

  _lock

  memset

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDuplicateString

  WindowsDeleteString

  WindowsCompareStringOrdinal

  HSTRING_UserSize

  HSTRING_UserMarshal

  WindowsCreateStringReference

  WindowsIsStringEmpty

  HSTRING_UserFree

  WindowsGetStringRawBuffer

  HSTRING_UserUnmarshal

  WindowsCreateString

  WindowsStringHasEmbeddedNull

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-winrt-error-l1-1-0

  SetRestrictedErrorInfo

  RoOriginateError

  RoOriginateErrorW

  RoTransformError

  api-ms-win-core-synch-l1-1-0

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  AcquireSRWLockShared

  OpenSemaphoreW

  WaitForSingleObjectEx

  ReleaseMutex

  WaitForSingleObject

  InitializeCriticalSectionEx

  CreateEventW

  InitializeSRWLock

  CreateMutexExW

  LeaveCriticalSection

  DeleteCriticalSection

  ReleaseSemaphore

  AcquireSRWLockExclusive

  CreateSemaphoreExW

  api-ms-win-core-synch-l1-2-0

  Sleep

  WakeAllConditionVariable

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  TerminateProcess

  GetCurrentProcessId

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  RaiseException

  GetLastError

  rpcrt4

  NdrOleFree

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  CStdStubBuffer_Connect

  CStdStubBuffer_IsIIDSupported

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrCStdStubBuffer_Release

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrStubCall2

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  NdrProxyForwardingFunction3

  ObjectStublessClient8

  ObjectStublessClient6

  ObjectStublessClient9

  NdrProxyForwardingFunction4

  ObjectStublessClient7

  CStdStubBuffer2_Disconnect

  ObjectStublessClient3

  CStdStubBuffer2_QueryInterface

  CStdStubBuffer2_CountRefs

  ObjectStublessClient10

  NdrProxyForwardingFunction5

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  OutputDebugStringW

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  api-ms-win-core-com-l1-1-0

  CoCreateFreeThreadedMarshaler

  CoTaskMemAlloc

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-winrt-error-l1-1-1

  RoGetMatchingRestrictedErrorInfo

  IsErrorPropagationEnabled

  RoReportFailedDelegate

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  GetProcAddress

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapFree

  HeapAlloc

  api-ms-win-appmodel-runtime-l1-1-0

  GetCurrentPackageFullName

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/nsi.dll

  .dll windows:10 windows x86 arch:x86

  9f19b08ba92c5e2d2fffc1b3724649db

  
  

  Code Sign

  33:00:00:01:bb:34:d5:ee:69:78:e6:94:db:00:00:00:00:01:bb

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/06/2018, 18:57

  Not After

  29/05/2019, 18:57

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Signer

  Actual PE Digest

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  nsi.pdb

  Imports

  ntdll

  NtWaitForSingleObject

  RtlNtStatusToDosError

  NtDeviceIoControlFile

  memset

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  CreateEventA

  Exports

  Exports

  NsiAllocateAndGetPersistentDataWithMaskTable

  NsiAllocateAndGetTable

  NsiCancelChangeNotification

  NsiDeregisterChangeNotification

  NsiDeregisterChangeNotificationEx

  NsiEnumerateObjectsAllParameters

  NsiEnumerateObjectsAllParametersEx

  NsiEnumerateObjectsAllPersistentParametersWithMask

  NsiFreePersistentDataWithMaskTable

  NsiFreeTable

  NsiGetAllParameters

  NsiGetAllParametersEx

  NsiGetAllPersistentParametersWithMask

  NsiGetObjectSecurity

  NsiGetParameter

  NsiGetParameterEx

  NsiRegisterChangeNotification

  NsiRegisterChangeNotificationEx

  NsiRequestChangeNotification

  NsiRequestChangeNotificationEx

  NsiSetAllParameters

  NsiSetAllParametersEx

  NsiSetAllPersistentParametersWithMask

  NsiSetObjectSecurity

  NsiSetParameter

  NsiSetParameterEx

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 838B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/CloudflareSolverRe.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe\obj\Release\netstandard1.1\CloudflareSolverRe.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/IronPython.Wpf.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Wpf\obj\Release\net45\IronPython.Wpf.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/SuperEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 120KB - Virtual size: 120KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/Windows.System.UserDeviceAssociation.dll

  .dll windows:10 windows x86 arch:x86

  58d3184f6b40ff5d7f83f469452c70a7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  Windows.System.UserDeviceAssociation.pdb

  Imports

  msvcrt

  free

  malloc

  _initterm

  _unlock

  __dllonexit

  _onexit

  ?terminate@@YAXXZ

  _except_handler4_common

  __CxxFrameHandler3

  memcmp

  ??1type_info@@UAE@XZ

  _callnewh

  memmove

  memcpy

  _CxxThrowException

  ?what@exception@@UBEPBDXZ

  ??0exception@@QAE@ABQBDH@Z

  _XcptFilter

  ??0exception@@QAE@ABQBD@Z

  _vsnprintf_s

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1exception@@UAE@XZ

  memcpy_s

  _purecall

  _vsnwprintf

  _amsg_exit

  ??3@YAXPAX@Z

  _lock

  memset

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDuplicateString

  WindowsDeleteString

  WindowsCompareStringOrdinal

  HSTRING_UserSize

  HSTRING_UserMarshal

  WindowsCreateStringReference

  WindowsIsStringEmpty

  HSTRING_UserFree

  WindowsGetStringRawBuffer

  HSTRING_UserUnmarshal

  WindowsCreateString

  WindowsStringHasEmbeddedNull

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-winrt-error-l1-1-0

  SetRestrictedErrorInfo

  RoOriginateError

  RoOriginateErrorW

  RoTransformError

  api-ms-win-core-synch-l1-1-0

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  AcquireSRWLockShared

  OpenSemaphoreW

  WaitForSingleObjectEx

  ReleaseMutex

  WaitForSingleObject

  InitializeCriticalSectionEx

  CreateEventW

  InitializeSRWLock

  CreateMutexExW

  LeaveCriticalSection

  DeleteCriticalSection

  ReleaseSemaphore

  AcquireSRWLockExclusive

  CreateSemaphoreExW

  api-ms-win-core-synch-l1-2-0

  Sleep

  WakeAllConditionVariable

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  TerminateProcess

  GetCurrentProcessId

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  RaiseException

  GetLastError

  rpcrt4

  NdrOleFree

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  CStdStubBuffer_Connect

  CStdStubBuffer_IsIIDSupported

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrCStdStubBuffer_Release

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrStubCall2

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  NdrProxyForwardingFunction3

  ObjectStublessClient8

  ObjectStublessClient6

  ObjectStublessClient9

  NdrProxyForwardingFunction4

  ObjectStublessClient7

  CStdStubBuffer2_Disconnect

  ObjectStublessClient3

  CStdStubBuffer2_QueryInterface

  CStdStubBuffer2_CountRefs

  ObjectStublessClient10

  NdrProxyForwardingFunction5

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  OutputDebugStringW

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  api-ms-win-core-com-l1-1-0

  CoCreateFreeThreadedMarshaler

  CoTaskMemAlloc

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-winrt-error-l1-1-1

  RoGetMatchingRestrictedErrorInfo

  IsErrorPropagationEnabled

  RoReportFailedDelegate

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  GetProcAddress

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapFree

  HeapAlloc

  api-ms-win-appmodel-runtime-l1-1-0

  GetCurrentPackageFullName

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/nsi.dll

  .dll windows:10 windows x86 arch:x86

  9f19b08ba92c5e2d2fffc1b3724649db

  
  

  Code Sign

  33:00:00:01:bb:34:d5:ee:69:78:e6:94:db:00:00:00:00:01:bb

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/06/2018, 18:57

  Not After

  29/05/2019, 18:57

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Signer

  Actual PE Digest

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  nsi.pdb

  Imports

  ntdll

  NtWaitForSingleObject

  RtlNtStatusToDosError

  NtDeviceIoControlFile

  memset

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  CreateEventA

  Exports

  Exports

  NsiAllocateAndGetPersistentDataWithMaskTable

  NsiAllocateAndGetTable

  NsiCancelChangeNotification

  NsiDeregisterChangeNotification

  NsiDeregisterChangeNotificationEx

  NsiEnumerateObjectsAllParameters

  NsiEnumerateObjectsAllParametersEx

  NsiEnumerateObjectsAllPersistentParametersWithMask

  NsiFreePersistentDataWithMaskTable

  NsiFreeTable

  NsiGetAllParameters

  NsiGetAllParametersEx

  NsiGetAllPersistentParametersWithMask

  NsiGetObjectSecurity

  NsiGetParameter

  NsiGetParameterEx

  NsiRegisterChangeNotification

  NsiRegisterChangeNotificationEx

  NsiRequestChangeNotification

  NsiRequestChangeNotificationEx

  NsiSetAllParameters

  NsiSetAllParametersEx

  NsiSetAllPersistentParametersWithMask

  NsiSetObjectSecurity

  NsiSetParameter

  NsiSetParameterEx

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 838B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Godaddy.com REG CHECKER BY ZARAMSIM Fixed By x-slayer.fun/source/sc32.exe

  .exe windows:4 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  Size: 28KB - Virtual size: 120KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 512B - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 512B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 68KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: - Virtual size: 2.5MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 909KB - Virtual size: 912KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/GoldFlix Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 177KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/VirusTotal.txt
• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/VirusTotal.txt
• Checkers PACK/Checkers PACK/GoldFlix GC Netflix Checker/core/gfsys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Users\hamza\AppData\Local\Temporary Projects\WindowsApplication1\obj\x86\Release\WindowsApplication1.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 242KB - Virtual size: 242KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 160B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 174KB - Virtual size: 174KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/Grammarly Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 191KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/Grammar Bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  +}m^n/

  Size: 564KB - Virtual size: 564KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 40KB - Virtual size: 39KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/SysSoft/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Grammarly Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/CloudflareSolverRe.Captcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe.Captcha\obj\Release\netstandard1.1\CloudflareSolverRe.Captcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/HBOGO Cracked.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/Proxies/Proxies.txt
• Checkers PACK/Checkers PACK/HBO GO CHECKER/Virus Total/VT.txt
• Checkers PACK/Checkers PACK/HBO GO CHECKER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/Proxies/Proxies.txt
• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/binCheck.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 36KB - Virtual size: 35KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 150KB - Virtual size: 150KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/bin/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HBO GO CHECKER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  /`-'w}U

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 122KB - Virtual size: 121KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 976B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/HITFLIX CHECKER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  +Lp Sr

  Size: 746KB - Virtual size: 746KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 869KB - Virtual size: 869KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 144B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/designmode.css
• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 46KB - Virtual size: 46KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  /`-'w}U

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 122KB - Virtual size: 121KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 976B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  /`-'w}U

  Size: 129KB - Virtual size: 129KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 228KB - Virtual size: 227KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  +Lp Sr

  Size: 746KB - Virtual size: 746KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 869KB - Virtual size: 869KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 144B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HITFLIX CHECKER/sys/serv.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  :t_Pg

  Size: 36KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 46KB - Virtual size: 46KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/HideMyAss Req.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 258KB - Virtual size: 258KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 194KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 311KB - Virtual size: 310KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/README.txt
• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/AntiCaptcha/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/Hide My Ass Checker by xRisky.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 213KB - Virtual size: 212KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\VB\winforms-modernui-master\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 311KB - Virtual size: 310KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/README.txt
• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Hide My Ass Checker by xRisky/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/HixerX-Yahoo.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 207KB - Virtual size: 206KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/WebDriver.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/sxs.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 53KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 424KB - Virtual size: 424KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/rdpcorets/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\j1st1k\Desktop\xNet-3.3.3\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/sas.dll

  .dll windows:10 windows x64 arch:x64

  fe806c7a1beddc2709d9013be1d72b0b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  SAS.pdb

  Imports

  msvcrt

  _vsnwprintf

  _XcptFilter

  __C_specific_handler

  _initterm

  malloc

  free

  _amsg_exit

  memset

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  GetCurrentProcess

  GetCurrentProcessId

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-rtlsupport-l1-1-0

  RtlLookupFunctionEntry

  RtlCaptureContext

  RtlVirtualUnwind

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  kernel32

  LoadLibraryA

  HeapFree

  SetLastError

  HeapAlloc

  GetProcessHeap

  GetProcAddress

  FreeLibrary

  rpcrt4

  NdrClientCall3

  RpcBindingFromStringBindingW

  RpcStringBindingComposeW

  RpcBindingSetAuthInfoExW

  RpcStringFreeW

  RpcBindingFree

  I_RpcExceptionFilter

  Exports

  Exports

  SendSAS

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 512B - Virtual size: 360B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 196B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/HixerX - Yahoo Checker/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\j1st1k\Desktop\xNet-3.3.3\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/Hotstar CHECKER V0.1 By Scorpio.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/hsSYS.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  4W7NV2

  Size: 48KB - Virtual size: 48KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 2.9MB - Virtual size: 2.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 63KB - Virtual size: 63KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .dark

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/udf/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hotstar CHECKER V0.1 By Scorpio#7447/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Auth.json
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/GDI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Moses\source\repos\GDI\GDI\obj\Release\GDI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 840B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Hulu Checker wCapture.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 168KB - Virtual size: 168KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Loki.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 322KB - Virtual size: 321KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/Readme.txt
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/combo.txt
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/key.txt
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Auth.json
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/GDI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Moses\source\repos\GDI\GDI\obj\Release\GDI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 840B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Loki.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 322KB - Virtual size: 321KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/Readme.txt
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/combo.txt
• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/hBin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  ,o`zS

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 103KB - Virtual size: 103KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Bed

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Account Checker With Capture/shell/key.txt
• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/aepic.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/nspr-config

  .sh linux
• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/.gitattributes/nssckbi.dll

  .dll windows:4 windows x86 arch:x86

  56ed15a990d58148d7b09af9a12bb6bd

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\nssckbi\nssckbi.pdb

  Imports

  plc4

  PL_strlen

  plds4

  PL_ArenaAllocate

  PL_HashTableEnumerateEntries

  PL_HashTableLookup

  PL_HashTableRemove

  PL_HashTableAdd

  PL_HashTableDestroy

  PL_CompareValues

  PL_NewHashTable

  PL_FinishArenaPool

  PL_InitArenaPool

  nspr4

  PR_CallOnce

  PR_GetThreadPrivate

  PR_SetThreadPrivate

  PR_NewThreadPrivateIndex

  PR_Free

  PR_Calloc

  PR_Unlock

  PR_Lock

  PR_DestroyLock

  PR_NewLock

  mozcrt19

  _crt_debugger_hook

  _except_handler4_common

  _onexit

  _lock

  __dllonexit

  _unlock

  __clean_type_info_names_internal

  __CppXcptFilter

  _adjust_fdiv

  _amsg_exit

  memcpy

  memset

  memcmp

  memmove

  _encode_pointer

  _malloc_crt

  free

  _encoded_null

  _decode_pointer

  _initterm

  _initterm_e

  kernel32

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  Exports

  Exports

  C_GetFunctionList

  Sections

  .text

  Size: 40KB - Virtual size: 38KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 248KB - Virtual size: 245KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 776B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/Hulu.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 168KB - Virtual size: 168KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/nspr-config

  .sh linux
• Checkers PACK/Checkers PACK/Hulu CHECKER BY THIEX/nssckbi.dll

  .dll windows:4 windows x86 arch:x86

  56ed15a990d58148d7b09af9a12bb6bd

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\builds\moz2_slave\rel-192-xr-w32-bld\build\obj-firefox\nss\nssckbi\nssckbi.pdb

  Imports

  plc4

  PL_strlen

  plds4

  PL_ArenaAllocate

  PL_HashTableEnumerateEntries

  PL_HashTableLookup

  PL_HashTableRemove

  PL_HashTableAdd

  PL_HashTableDestroy

  PL_CompareValues

  PL_NewHashTable

  PL_FinishArenaPool

  PL_InitArenaPool

  nspr4

  PR_CallOnce

  PR_GetThreadPrivate

  PR_SetThreadPrivate

  PR_NewThreadPrivateIndex

  PR_Free

  PR_Calloc

  PR_Unlock

  PR_Lock

  PR_DestroyLock

  PR_NewLock

  mozcrt19

  _crt_debugger_hook

  _except_handler4_common

  _onexit

  _lock

  __dllonexit

  _unlock

  __clean_type_info_names_internal

  __CppXcptFilter

  _adjust_fdiv

  _amsg_exit

  memcpy

  memset

  memcmp

  memmove

  _encode_pointer

  _malloc_crt

  free

  _encoded_null

  _decode_pointer

  _initterm

  _initterm_e

  kernel32

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  Exports

  Exports

  C_GetFunctionList

  Sections

  .text

  Size: 40KB - Virtual size: 38KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 248KB - Virtual size: 245KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 776B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/Hulu checker by RubiconT.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 163KB - Virtual size: 162KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/eappcfg.dll

  .dll windows:10 windows x86 arch:x86

  5a0044836b791222e0b3b32cdc02e151

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  eappcfg.pdb

  Imports

  msvcrt

  _unlock

  _lock

  _initterm

  malloc

  __dllonexit

  free

  wcsrchr

  _vsnwprintf

  _vsnprintf

  memcpy_s

  _onexit

  swprintf_s

  _wtol

  _beginthreadex

  wcscat_s

  _endthreadex

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  _amsg_exit

  _XcptFilter

  memmove

  _except_handler4_common

  memcpy

  _CxxThrowException

  ??0exception@@QAE@ABQBDH@Z

  ??0exception@@QAE@ABQBD@Z

  memcmp

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _purecall

  _snwprintf_s

  memset

  ntdll

  DbgPrint

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwTraceMessage

  EtwEventRegister

  EtwEventUnregister

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetProcAddress

  FreeLibrary

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-synch-l1-1-0

  WaitForMultipleObjectsEx

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetVersionExW

  GetSystemDirectoryW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  HeapSize

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegOpenKeyExW

  RegLoadMUIStringW

  RegEnumKeyExW

  RegCreateKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  EapHostPeerConfigBlob2Xml

  EapHostPeerConfigXml2Blob

  EapHostPeerCreateMethodConfiguration

  EapHostPeerCredentialsXml2Blob

  EapHostPeerFreeErrorMemory

  EapHostPeerFreeMemory

  EapHostPeerGetMethodProperties

  EapHostPeerGetMethods

  EapHostPeerInvokeConfigUI

  EapHostPeerInvokeIdentityUI

  EapHostPeerInvokeInteractiveUI

  EapHostPeerQueryCredentialInputFields

  EapHostPeerQueryInteractiveUIInputFields

  EapHostPeerQueryUIBlobFromInteractiveUIInputFields

  EapHostPeerQueryUserBlobFromCredentialInputFields

  Sections

  .text

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/bin32.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  E:\!!my oncrx\Pro...for URET\Patcher\dfg\WindowsApplication1\WindowsApplication1\obj\x86\Debug\WindowsApplication1.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 171B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/eappcfg.dll

  .dll windows:10 windows x86 arch:x86

  5a0044836b791222e0b3b32cdc02e151

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  eappcfg.pdb

  Imports

  msvcrt

  _unlock

  _lock

  _initterm

  malloc

  __dllonexit

  free

  wcsrchr

  _vsnwprintf

  _vsnprintf

  memcpy_s

  _onexit

  swprintf_s

  _wtol

  _beginthreadex

  wcscat_s

  _endthreadex

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  _amsg_exit

  _XcptFilter

  memmove

  _except_handler4_common

  memcpy

  _CxxThrowException

  ??0exception@@QAE@ABQBDH@Z

  ??0exception@@QAE@ABQBD@Z

  memcmp

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _purecall

  _snwprintf_s

  memset

  ntdll

  DbgPrint

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwTraceMessage

  EtwEventRegister

  EtwEventUnregister

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetProcAddress

  FreeLibrary

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-synch-l1-1-0

  WaitForMultipleObjectsEx

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetVersionExW

  GetSystemDirectoryW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  HeapSize

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegOpenKeyExW

  RegLoadMUIStringW

  RegEnumKeyExW

  RegCreateKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  EapHostPeerConfigBlob2Xml

  EapHostPeerConfigXml2Blob

  EapHostPeerCreateMethodConfiguration

  EapHostPeerCredentialsXml2Blob

  EapHostPeerFreeErrorMemory

  EapHostPeerFreeMemory

  EapHostPeerGetMethodProperties

  EapHostPeerGetMethods

  EapHostPeerInvokeConfigUI

  EapHostPeerInvokeIdentityUI

  EapHostPeerInvokeInteractiveUI

  EapHostPeerQueryCredentialInputFields

  EapHostPeerQueryInteractiveUIInputFields

  EapHostPeerQueryUIBlobFromInteractiveUIInputFields

  EapHostPeerQueryUserBlobFromCredentialInputFields

  Sections

  .text

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/sysdll/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by RubiconT/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/AngleSharp.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Code\AngleSharp\AngleSharp.Core\src\AngleSharp\bin\Release\net45\AngleSharp.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/AntiCaptcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\kamil\source\repos\AntiCaptcha\AntiCaptcha\obj\Release\netstandard2.0\AntiCaptcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/HuluHost.exe

  .exe windows:5 windows x86 arch:x86

  ae2946d958311115e85d738fa4c8b7c2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  kernel32

  GetACP

  GetStringTypeExW

  LocalFree

  CloseHandle

  SizeofResource

  GetCurrentProcessId

  VirtualProtect

  SetEnvironmentVariableW

  ReadProcessMemory

  QueryPerformanceFrequency

  SetProcessWorkingSetSize

  VirtualFree

  GetFullPathNameW

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  WriteProcessMemory

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  ReadFile

  GetLastError

  GetModuleFileNameW

  SetLastError

  FindResourceW

  CreateThread

  CompareStringW

  LoadLibraryA

  ResetEvent

  GetVersion

  FreeResource

  RaiseException

  OpenProcess

  FormatMessageW

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  LoadLibraryExW

  LockResource

  GetCurrentThreadId

  UnhandledExceptionFilter

  VirtualQuery

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  GetStringTypeExA

  LoadResource

  SuspendThread

  GetTickCount

  GetStartupInfoW

  InitializeCriticalSection

  GetThreadPriority

  SetThreadPriority

  GetCurrentProcess

  AllocConsole

  VirtualAlloc

  GetSystemInfo

  GetCommandLineW

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  VerSetConditionMask

  GetDiskFreeSpaceW

  FindFirstFileW

  GetUserDefaultUILanguage

  lstrlenW

  CompareStringA

  SetEndOfFile

  QueryPerformanceCounter

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  ExitThread

  DeleteCriticalSection

  TlsGetValue

  GetDateFormatW

  SetErrorMode

  IsValidLocale

  TlsSetValue

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  CreateEventW

  SetThreadLocale

  GetThreadLocale

  ole32

  CoInitialize

  CoUninitialize

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  user32

  CharUpperBuffA

  CharUpperBuffW

  CharNextW

  MsgWaitForMultipleObjects

  CharLowerBuffA

  CharLowerBuffW

  LoadStringW

  CharUpperW

  PeekMessageW

  GetSystemMetrics

  MessageBoxW

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopy

  VariantChangeType

  msvcrt

  memcpy

  netapi32

  NetWkstaGetInfo

  NetApiBufferFree

  advapi32

  RegQueryValueExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  RegOpenKeyExW

  Exports

  Exports

  P0

  P1

  TMethodImplementationIntercept

  Z1

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 757KB - Virtual size: 757KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 541KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 512B - Virtual size: 420B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 189B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 28B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.8MB - Virtual size: 1.8MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/AntiCaptcha/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/Hulu Checker by xRisky.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 178KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/Read before using.txt
• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Hulu Checker by xRisky/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/IQOpton Checker [v1.0].exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/Qoollo.Turbo.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_DLL

  PDB Paths

  F:\Work\Qoollo\Turbo\src\Qoollo.Turbo\obj\Release\Qoollo.Turbo.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 348KB - Virtual size: 347KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 908B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/IQOpton Checker [v10]32.dll

  .dll windows:5 windows x86 arch:x86

  8420c9e80d53d716c9d682dfad563ea8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\MyProjects\gitlab\ILProtector\ILProtector\Output2010\Win32\Release\Protect32.pdb

  Imports

  kernel32

  MapViewOfFile

  UnmapViewOfFile

  CreateFileW

  GetFileSizeEx

  GetLastError

  SetLastError

  CreateFileMappingW

  CloseHandle

  Sleep

  QueueUserWorkItem

  DeleteCriticalSection

  IsBadReadPtr

  GetProcAddress

  LoadLibraryW

  InterlockedCompareExchange

  InterlockedDecrement

  GetModuleFileNameW

  QueryPerformanceFrequency

  QueryPerformanceCounter

  EnterCriticalSection

  LeaveCriticalSection

  GetModuleHandleW

  InitializeCriticalSection

  LocalFree

  FlushFileBuffers

  SetStdHandle

  WriteConsoleW

  SetFilePointer

  GetStringTypeW

  InterlockedIncrement

  EncodePointer

  DecodePointer

  HeapFree

  HeapAlloc

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCommandLineA

  RtlUnwind

  RaiseException

  WideCharToMultiByte

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  TerminateProcess

  GetCurrentProcess

  LCMapStringW

  GetCPInfo

  IsProcessorFeaturePresent

  HeapSize

  ExitProcess

  WriteFile

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetConsoleCP

  GetConsoleMode

  HeapCreate

  HeapDestroy

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetACP

  GetOEMCP

  IsValidCodePage

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetTickCount

  GetCurrentProcessId

  HeapReAlloc

  advapi32

  CryptAcquireContextA

  CryptReleaseContext

  CryptGenRandom

  oleaut32

  SafeArrayDestroy

  SysFreeString

  SysAllocString

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayGetElement

  VariantInit

  VariantCopy

  SafeArrayGetLBound

  VariantClear

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  winmm

  timeGetTime

  mscoree

  CorBindToRuntimeEx

  Exports

  Exports

  P0

  Sections

  .text

  Size: 524KB - Virtual size: 524KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 101KB - Virtual size: 101KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 50KB - Virtual size: 62KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/IQOpton Checker [v10]64.dll

  .dll windows:5 windows x64 arch:x64

  c7bb123507ad86be53b59f78d6765e94

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  c:\MyProjects\gitlab\ILProtector\ILProtector\Output2010\x64\Release\Protect64.pdb

  Imports

  kernel32

  MapViewOfFile

  UnmapViewOfFile

  CreateFileW

  GetFileSizeEx

  GetLastError

  SetLastError

  CreateFileMappingW

  CloseHandle

  Sleep

  DeleteCriticalSection

  GetModuleHandleW

  LoadLibraryW

  GetProcAddress

  GetModuleFileNameW

  QueryPerformanceFrequency

  QueryPerformanceCounter

  EnterCriticalSection

  LeaveCriticalSection

  QueueUserWorkItem

  InitializeCriticalSection

  LocalFree

  FlushFileBuffers

  SetStdHandle

  WriteConsoleW

  SetFilePointer

  GetStringTypeW

  EncodePointer

  DecodePointer

  HeapFree

  HeapAlloc

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  RtlLookupFunctionEntry

  RtlUnwindEx

  RaiseException

  RtlPcToFileHeader

  WideCharToMultiByte

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  TerminateProcess

  GetCurrentProcess

  LCMapStringW

  GetCPInfo

  HeapSize

  ExitProcess

  WriteFile

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetConsoleCP

  GetConsoleMode

  HeapSetInformation

  GetVersion

  HeapCreate

  HeapDestroy

  FlsGetValue

  FlsFree

  FlsAlloc

  GetACP

  GetOEMCP

  IsValidCodePage

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetTickCount

  GetCurrentProcessId

  HeapReAlloc

  advapi32

  CryptAcquireContextA

  CryptReleaseContext

  CryptGenRandom

  oleaut32

  SafeArrayDestroy

  SysFreeString

  SysAllocString

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayGetElement

  VariantInit

  VariantCopy

  SafeArrayGetLBound

  VariantClear

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  winmm

  timeGetTime

  mscoree

  CorBindToRuntimeEx

  Exports

  Exports

  P0

  Sections

  .text

  Size: 543KB - Virtual size: 542KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 168KB - Virtual size: 168KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 54KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  data

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1020B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/Qoollo.Turbo.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_DLL

  PDB Paths

  F:\Work\Qoollo\Turbo\src\Qoollo.Turbo\obj\Release\Qoollo.Turbo.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 348KB - Virtual size: 347KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 908B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/sysIQQ.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 145KB - Virtual size: 145KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/IQOption Checker [v1.0]/xNet/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/Instagram Account Checker By Amir v0.1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 202KB - Virtual size: 202KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/SHELL/xml.exe

  .exe windows:4 windows x86 arch:x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Sections

  CODE

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  DATA

  Size: 1024B - Virtual size: 536B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  BSS

  Size: - Virtual size: 42KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: - Virtual size: 8B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Instagram Account Checker By Amir v0.1/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/Ipvanich vpn CHECKER V0.1 by Scorpio#7447.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 179KB - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/vpnbit32.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  ^f%=S5f-

  Size: 48KB - Virtual size: 48KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 2.9MB - Virtual size: 2.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 366KB - Virtual size: 366KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .dark

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/bin/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Ipvanich vpn CHECKER V0.1 By scorpio#7447/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Champions.json
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Champions.version
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/LoL_data_updater.py
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Runes.json
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/Runes.version
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/cleaned.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.3MB - Virtual size: 1.3MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Data/system.yaml
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/LeagueOfLegendsAccountChecker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 190KB - Virtual size: 189KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/LOL Checker by AC - Cleaned/system.yaml
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/MegaChecker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 162KB - Virtual size: 161KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/cmp1.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/cmp2.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/cmp3.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/cmp4.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/cmp1.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/cmp2.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/cmp3.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/cmp4.wav
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/license_mega.license
• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/library/model.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  MegaChecker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 3.4MB - Virtual size: 3.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MegaNZ Checker 2022/license_mega.license
• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/Minecraft Checker by xRisky.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 239KB - Virtual size: 239KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/MinC.exe

  .exe windows:5 windows x86 arch:x86

  ae2946d958311115e85d738fa4c8b7c2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  kernel32

  GetACP

  GetStringTypeExW

  LocalFree

  CloseHandle

  SizeofResource

  GetCurrentProcessId

  VirtualProtect

  SetEnvironmentVariableW

  ReadProcessMemory

  QueryPerformanceFrequency

  SetProcessWorkingSetSize

  VirtualFree

  GetFullPathNameW

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  WriteProcessMemory

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  ReadFile

  GetLastError

  GetModuleFileNameW

  SetLastError

  FindResourceW

  CreateThread

  CompareStringW

  LoadLibraryA

  ResetEvent

  GetVersion

  FreeResource

  RaiseException

  OpenProcess

  FormatMessageW

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  LoadLibraryExW

  LockResource

  GetCurrentThreadId

  UnhandledExceptionFilter

  VirtualQuery

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  GetStringTypeExA

  LoadResource

  SuspendThread

  GetTickCount

  GetStartupInfoW

  InitializeCriticalSection

  GetThreadPriority

  SetThreadPriority

  GetCurrentProcess

  AllocConsole

  VirtualAlloc

  GetSystemInfo

  GetCommandLineW

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  VerSetConditionMask

  GetDiskFreeSpaceW

  FindFirstFileW

  GetUserDefaultUILanguage

  lstrlenW

  CompareStringA

  SetEndOfFile

  QueryPerformanceCounter

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  ExitThread

  DeleteCriticalSection

  TlsGetValue

  GetDateFormatW

  SetErrorMode

  IsValidLocale

  TlsSetValue

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  CreateEventW

  SetThreadLocale

  GetThreadLocale

  ole32

  CoInitialize

  CoUninitialize

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  user32

  CharUpperBuffA

  CharUpperBuffW

  CharNextW

  MsgWaitForMultipleObjects

  CharLowerBuffA

  CharLowerBuffW

  LoadStringW

  CharUpperW

  PeekMessageW

  GetSystemMetrics

  MessageBoxW

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopy

  VariantChangeType

  msvcrt

  memcpy

  netapi32

  NetWkstaGetInfo

  NetApiBufferFree

  advapi32

  RegQueryValueExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  RegOpenKeyExW

  Exports

  Exports

  P0

  P1

  TMethodImplementationIntercept

  Z1

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 757KB - Virtual size: 757KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 541KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 512B - Virtual size: 420B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 189B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 28B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/secproc/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 102KB - Virtual size: 101KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Minecraft Checker by xRisky/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 102KB - Virtual size: 101KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1008B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/Mail.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1020KB - Virtual size: 1019KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/Multichecker 1.05.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/OpenPop.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 56KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/Mail.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1020KB - Virtual size: 1019KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/OpenPop.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 56KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/data/xnet.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  Co< d

  Size: 709KB - Virtual size: 709KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 125KB - Virtual size: 125KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 266KB - Virtual size: 265KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultiChecker 1.05 Cracked By Devil/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Bunifu_UI_v1.52.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 218KB - Virtual size: 217KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Bunifu_UI_v1.52.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 218KB - Virtual size: 217KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Multy-X.exe.config

  .xml
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Multy-X.xml

  .xml
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Screenshots/04.13.49.png

  .png
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/dorklist.txt
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/sysMult.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 2.4MB - Virtual size: 2.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 225KB - Virtual size: 224KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Mult-Cracked.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Multy-X.exe.config

  .xml
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Multy-X.xml

  .xml
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Screenshots/04.13.49.png

  .png
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/dorklist.txt
• Checkers PACK/Checkers PACK/MultyX Cracked v1.5/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/NetFlix GC Checker by xRisky.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 35KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/MetroSuite 2.0.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 291KB - Virtual size: 290KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NetFlix GC Checker by xRisky/data/litedb.exe

  .exe windows:5 windows x86 arch:x86

  ae2946d958311115e85d738fa4c8b7c2

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  kernel32

  GetACP

  GetStringTypeExW

  LocalFree

  CloseHandle

  SizeofResource

  GetCurrentProcessId

  VirtualProtect

  SetEnvironmentVariableW

  ReadProcessMemory

  QueryPerformanceFrequency

  SetProcessWorkingSetSize

  VirtualFree

  GetFullPathNameW

  ExitProcess

  HeapAlloc

  GetCPInfoExW

  WriteProcessMemory

  RtlUnwind

  GetCPInfo

  GetStdHandle

  GetModuleHandleW

  FreeLibrary

  HeapDestroy

  ReadFile

  GetLastError

  GetModuleFileNameW

  SetLastError

  FindResourceW

  CreateThread

  CompareStringW

  LoadLibraryA

  ResetEvent

  GetVersion

  FreeResource

  RaiseException

  OpenProcess

  FormatMessageW

  SwitchToThread

  GetExitCodeThread

  GetCurrentThread

  LoadLibraryExW

  LockResource

  GetCurrentThreadId

  UnhandledExceptionFilter

  VirtualQuery

  VirtualQueryEx

  Sleep

  EnterCriticalSection

  SetFilePointer

  GetStringTypeExA

  LoadResource

  SuspendThread

  GetTickCount

  GetStartupInfoW

  InitializeCriticalSection

  GetThreadPriority

  SetThreadPriority

  GetCurrentProcess

  AllocConsole

  VirtualAlloc

  GetSystemInfo

  GetCommandLineW

  LeaveCriticalSection

  GetProcAddress

  ResumeThread

  GetVersionExW

  VerifyVersionInfoW

  HeapCreate

  VerSetConditionMask

  GetDiskFreeSpaceW

  FindFirstFileW

  GetUserDefaultUILanguage

  lstrlenW

  CompareStringA

  SetEndOfFile

  QueryPerformanceCounter

  HeapFree

  WideCharToMultiByte

  FindClose

  MultiByteToWideChar

  LoadLibraryW

  SetEvent

  CreateFileW

  GetLocaleInfoW

  GetLocalTime

  WaitForSingleObject

  WriteFile

  ExitThread

  DeleteCriticalSection

  TlsGetValue

  GetDateFormatW

  SetErrorMode

  IsValidLocale

  TlsSetValue

  GetSystemDefaultUILanguage

  EnumCalendarInfoW

  LocalAlloc

  CreateEventW

  SetThreadLocale

  GetThreadLocale

  ole32

  CoInitialize

  CoUninitialize

  version

  GetFileVersionInfoSizeW

  VerQueryValueW

  GetFileVersionInfoW

  user32

  CharUpperBuffA

  CharUpperBuffW

  CharNextW

  MsgWaitForMultipleObjects

  CharLowerBuffA

  CharLowerBuffW

  LoadStringW

  CharUpperW

  PeekMessageW

  GetSystemMetrics

  MessageBoxW

  oleaut32

  SafeArrayPutElement

  GetErrorInfo

  VariantInit

  VariantClear

  SysFreeString

  SafeArrayAccessData

  SysReAllocStringLen

  SafeArrayCreate

  SafeArrayGetElement

  SysAllocStringLen

  SafeArrayUnaccessData

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  VariantCopy

  VariantChangeType

  msvcrt

  memcpy

  netapi32

  NetWkstaGetInfo

  NetApiBufferFree

  advapi32

  RegQueryValueExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExA

  RegOpenKeyExW

  Exports

  Exports

  P0

  P1

  TMethodImplementationIntercept

  Z1

  __dbk_fcall_wrapper

  dbkFCallWrapperAddr

  Sections

  .text

  Size: 757KB - Virtual size: 757KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 28KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 541KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 512B - Virtual size: 420B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 189B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .tls

  Size: - Virtual size: 28B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 93B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/AntiCaptcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\kamil\source\repos\AntiCaptcha\AntiCaptcha\obj\Release\netstandard2.0\AntiCaptcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/Netflix by GOD Cracked By GM`ka.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 172KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/ProxySocket.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  V:\Development\Viking.ApplicationFramework\ProxySocket\src\obj\Release\ProxySocket.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 18KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/bcastdvr.proxy.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  1b05ea5f90a138982c4f04f953c32511

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  bcastdvr.proxy.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  malloc

  _XcptFilter

  _amsg_exit

  free

  memcmp

  rpcrt4

  CStdStubBuffer_Disconnect

  NdrOleAllocate

  NdrCStdStubBuffer_Release

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  NdrCStdStubBuffer2_Release

  CStdStubBuffer_QueryInterface

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Connect

  CStdStubBuffer_Invoke

  NdrStubForwardingFunction

  CStdStubBuffer_CountRefs

  NdrStubCall2

  CStdStubBuffer_IsIIDSupported

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerRelease

  IUnknown_AddRef_Proxy

  CStdStubBuffer_DebugServerQueryInterface

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserUnmarshal

  HSTRING_UserMarshal

  HSTRING_UserSize

  HSTRING_UserFree

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient3

  ObjectStublessClient27

  CStdStubBuffer2_CountRefs

  ObjectStublessClient28

  ObjectStublessClient20

  ObjectStublessClient15

  ObjectStublessClient23

  CStdStubBuffer2_Disconnect

  ObjectStublessClient7

  ObjectStublessClient13

  ObjectStublessClient11

  CStdStubBuffer2_QueryInterface

  ObjectStublessClient19

  ObjectStublessClient14

  ObjectStublessClient12

  NdrProxyForwardingFunction4

  NdrProxyForwardingFunction5

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  CStdStubBuffer2_Connect

  ObjectStublessClient26

  ObjectStublessClient24

  ObjectStublessClient10

  NdrProxyForwardingFunction3

  ObjectStublessClient25

  ObjectStublessClient22

  ObjectStublessClient18

  ObjectStublessClient16

  ObjectStublessClient21

  ObjectStublessClient29

  ObjectStublessClient17

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  TerminateProcess

  GetCurrentProcess

  GetCurrentProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/msacm32.dll

  .dll windows:10 windows x86 arch:x86

  d708117077f81f5ebb8a7ce8dab0b96b

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Signer

  Actual PE Digest

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msacm32.pdb

  Imports

  msvcrt

  _vsnwprintf

  memcmp

  _initterm

  _except_handler4_common

  memcpy

  free

  _amsg_exit

  _XcptFilter

  iswctype

  malloc

  memset

  ntdll

  NtClose

  RtlOpenCurrentUser

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegEnumValueW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueA

  RegEnumKeyExA

  RegSetValueExA

  RegEnumValueA

  RegCreateKeyExW

  RegEnumKeyExW

  RegQueryValueExA

  api-ms-win-core-privateprofile-l1-1-0

  WritePrivateProfileStringW

  GetProfileStringW

  GetPrivateProfileStringW

  api-ms-win-core-processthreads-l1-1-0

  TlsFree

  GetCurrentProcessId

  GetCurrentThreadId

  GetCurrentProcess

  TlsGetValue

  TerminateProcess

  TlsAlloc

  TlsSetValue

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyA

  RegOpenKeyW

  RegDeleteKeyW

  RegCreateKeyW

  RegCreateKeyA

  RegOpenKeyA

  api-ms-win-core-string-l2-1-0

  CharNextW

  CharLowerBuffW

  CharPrevW

  api-ms-win-core-libraryloader-l1-2-0

  LockResource

  GetModuleFileNameW

  LoadResource

  FreeResource

  LoadStringW

  GetProcAddress

  GetModuleHandleW

  SizeofResource

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  SetEvent

  CreateEventW

  EnterCriticalSection

  InitializeCriticalSection

  ResetEvent

  DeleteCriticalSection

  WaitForSingleObject

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  LocalFree

  GlobalAlloc

  LocalAlloc

  api-ms-win-core-string-obsolete-l1-1-0

  lstrlenA

  lstrcmpW

  api-ms-win-core-heap-obsolete-l1-1-0

  GlobalReAlloc

  GlobalUnlock

  GlobalHandle

  GlobalLock

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  WideCharToMultiByte

  api-ms-win-core-localization-l1-2-0

  GetACP

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-mm-misc-l1-1-0

  SendDriverMessage

  CloseDriver

  OpenDriver

  api-ms-win-mm-mme-l1-1-0

  waveInGetDevCapsW

  waveOutGetNumDevs

  waveOutGetDevCapsW

  waveOutOpen

  waveInOpen

  waveInGetNumDevs

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  XRegThunkEntry

  acmDriverAddA

  acmDriverAddW

  acmDriverClose

  acmDriverDetailsA

  acmDriverDetailsW

  acmDriverEnum

  acmDriverID

  acmDriverMessage

  acmDriverOpen

  acmDriverPriority

  acmDriverRemove

  acmFilterChooseA

  acmFilterChooseW

  acmFilterDetailsA

  acmFilterDetailsW

  acmFilterEnumA

  acmFilterEnumW

  acmFilterTagDetailsA

  acmFilterTagDetailsW

  acmFilterTagEnumA

  acmFilterTagEnumW

  acmFormatChooseA

  acmFormatChooseW

  acmFormatDetailsA

  acmFormatDetailsW

  acmFormatEnumA

  acmFormatEnumW

  acmFormatSuggest

  acmFormatTagDetailsA

  acmFormatTagDetailsW

  acmFormatTagEnumA

  acmFormatTagEnumW

  acmGetVersion

  acmMessage32

  acmMetrics

  acmStreamClose

  acmStreamConvert

  acmStreamMessage

  acmStreamOpen

  acmStreamPrepareHeader

  acmStreamReset

  acmStreamSize

  acmStreamUnprepareHeader

  Sections

  .text

  Size: 69KB - Virtual size: 69KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 256B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/AntiCaptcha.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\kamil\source\repos\AntiCaptcha\AntiCaptcha\obj\Release\netstandard2.0\AntiCaptcha.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/ProxySocket.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  V:\Development\Viking.ApplicationFramework\ProxySocket\src\obj\Release\ProxySocket.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 18KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/bcastdvr.proxy.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  1b05ea5f90a138982c4f04f953c32511

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  bcastdvr.proxy.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  malloc

  _XcptFilter

  _amsg_exit

  free

  memcmp

  rpcrt4

  CStdStubBuffer_Disconnect

  NdrOleAllocate

  NdrCStdStubBuffer_Release

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  NdrCStdStubBuffer2_Release

  CStdStubBuffer_QueryInterface

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Connect

  CStdStubBuffer_Invoke

  NdrStubForwardingFunction

  CStdStubBuffer_CountRefs

  NdrStubCall2

  CStdStubBuffer_IsIIDSupported

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerRelease

  IUnknown_AddRef_Proxy

  CStdStubBuffer_DebugServerQueryInterface

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserUnmarshal

  HSTRING_UserMarshal

  HSTRING_UserSize

  HSTRING_UserFree

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient3

  ObjectStublessClient27

  CStdStubBuffer2_CountRefs

  ObjectStublessClient28

  ObjectStublessClient20

  ObjectStublessClient15

  ObjectStublessClient23

  CStdStubBuffer2_Disconnect

  ObjectStublessClient7

  ObjectStublessClient13

  ObjectStublessClient11

  CStdStubBuffer2_QueryInterface

  ObjectStublessClient19

  ObjectStublessClient14

  ObjectStublessClient12

  NdrProxyForwardingFunction4

  NdrProxyForwardingFunction5

  ObjectStublessClient6

  ObjectStublessClient8

  ObjectStublessClient9

  CStdStubBuffer2_Connect

  ObjectStublessClient26

  ObjectStublessClient24

  ObjectStublessClient10

  NdrProxyForwardingFunction3

  ObjectStublessClient25

  ObjectStublessClient22

  ObjectStublessClient18

  ObjectStublessClient16

  ObjectStublessClient21

  ObjectStublessClient29

  ObjectStublessClient17

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  TerminateProcess

  GetCurrentProcess

  GetCurrentProcessId

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 16KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/msacm32.dll

  .dll windows:10 windows x86 arch:x86

  d708117077f81f5ebb8a7ce8dab0b96b

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Signer

  Actual PE Digest

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msacm32.pdb

  Imports

  msvcrt

  _vsnwprintf

  memcmp

  _initterm

  _except_handler4_common

  memcpy

  free

  _amsg_exit

  _XcptFilter

  iswctype

  malloc

  memset

  ntdll

  NtClose

  RtlOpenCurrentUser

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegEnumValueW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueA

  RegEnumKeyExA

  RegSetValueExA

  RegEnumValueA

  RegCreateKeyExW

  RegEnumKeyExW

  RegQueryValueExA

  api-ms-win-core-privateprofile-l1-1-0

  WritePrivateProfileStringW

  GetProfileStringW

  GetPrivateProfileStringW

  api-ms-win-core-processthreads-l1-1-0

  TlsFree

  GetCurrentProcessId

  GetCurrentThreadId

  GetCurrentProcess

  TlsGetValue

  TerminateProcess

  TlsAlloc

  TlsSetValue

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyA

  RegOpenKeyW

  RegDeleteKeyW

  RegCreateKeyW

  RegCreateKeyA

  RegOpenKeyA

  api-ms-win-core-string-l2-1-0

  CharNextW

  CharLowerBuffW

  CharPrevW

  api-ms-win-core-libraryloader-l1-2-0

  LockResource

  GetModuleFileNameW

  LoadResource

  FreeResource

  LoadStringW

  GetProcAddress

  GetModuleHandleW

  SizeofResource

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  SetEvent

  CreateEventW

  EnterCriticalSection

  InitializeCriticalSection

  ResetEvent

  DeleteCriticalSection

  WaitForSingleObject

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  LocalFree

  GlobalAlloc

  LocalAlloc

  api-ms-win-core-string-obsolete-l1-1-0

  lstrlenA

  lstrcmpW

  api-ms-win-core-heap-obsolete-l1-1-0

  GlobalReAlloc

  GlobalUnlock

  GlobalHandle

  GlobalLock

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  WideCharToMultiByte

  api-ms-win-core-localization-l1-2-0

  GetACP

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-mm-misc-l1-1-0

  SendDriverMessage

  CloseDriver

  OpenDriver

  api-ms-win-mm-mme-l1-1-0

  waveInGetDevCapsW

  waveOutGetNumDevs

  waveOutGetDevCapsW

  waveOutOpen

  waveInOpen

  waveInGetNumDevs

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  XRegThunkEntry

  acmDriverAddA

  acmDriverAddW

  acmDriverClose

  acmDriverDetailsA

  acmDriverDetailsW

  acmDriverEnum

  acmDriverID

  acmDriverMessage

  acmDriverOpen

  acmDriverPriority

  acmDriverRemove

  acmFilterChooseA

  acmFilterChooseW

  acmFilterDetailsA

  acmFilterDetailsW

  acmFilterEnumA

  acmFilterEnumW

  acmFilterTagDetailsA

  acmFilterTagDetailsW

  acmFilterTagEnumA

  acmFilterTagEnumW

  acmFormatChooseA

  acmFormatChooseW

  acmFormatDetailsA

  acmFormatDetailsW

  acmFormatEnumA

  acmFormatEnumW

  acmFormatSuggest

  acmFormatTagDetailsA

  acmFormatTagDetailsW

  acmFormatTagEnumA

  acmFormatTagEnumW

  acmGetVersion

  acmMessage32

  acmMetrics

  acmStreamClose

  acmStreamConvert

  acmStreamMessage

  acmStreamOpen

  acmStreamPrepareHeader

  acmStreamReset

  acmStreamSize

  acmStreamUnprepareHeader

  Sections

  .text

  Size: 69KB - Virtual size: 69KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 256B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker by GOD Cracked By GM`ka/xNet/procs.exe

  .exe windows:4 windows x86 arch:x86

  29b61e5a552b3a9bc00953de1c93be41

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  SetFileAttributesA

  GetShortPathNameA

  GetFullPathNameA

  MoveFileA

  SetCurrentDirectoryA

  GetFileAttributesA

  GetLastError

  CompareFileTime

  SearchPathA

  Sleep

  GetTickCount

  GetFileSize

  GetModuleFileNameA

  GetCurrentProcess

  CopyFileA

  ExitProcess

  CreateDirectoryA

  lstrcmpiA

  GetCommandLineA

  GetVersion

  SetErrorMode

  lstrcpynA

  GetDiskFreeSpaceA

  GlobalUnlock

  GlobalLock

  CreateThread

  CreateProcessA

  RemoveDirectoryA

  CreateFileA

  GetTempFileNameA

  lstrlenA

  lstrcatA

  GetSystemDirectoryA

  LoadLibraryA

  SetFileTime

  CloseHandle

  GlobalFree

  lstrcmpA

  ExpandEnvironmentStringsA

  GetExitCodeProcess

  GlobalAlloc

  WaitForSingleObject

  GetWindowsDirectoryA

  GetTempPathA

  GetProcAddress

  FindFirstFileA

  FindNextFileA

  DeleteFileA

  SetFilePointer

  ReadFile

  FindClose

  GetPrivateProfileStringA

  WritePrivateProfileStringA

  WriteFile

  MulDiv

  LoadLibraryExA

  GetModuleHandleA

  MultiByteToWideChar

  FreeLibrary

  user32

  GetWindowRect

  EnableMenuItem

  GetSystemMenu

  ScreenToClient

  SetClassLongA

  IsWindowEnabled

  SetWindowPos

  GetSysColor

  GetWindowLongA

  SetCursor

  LoadCursorA

  CheckDlgButton

  GetMessagePos

  LoadBitmapA

  CallWindowProcA

  IsWindowVisible

  CloseClipboard

  SetForegroundWindow

  PostQuitMessage

  RegisterClassA

  EndDialog

  AppendMenuA

  CreatePopupMenu

  GetSystemMetrics

  SetDlgItemTextA

  GetDlgItemTextA

  MessageBoxIndirectA

  CharPrevA

  DispatchMessageA

  PeekMessageA

  EnableWindow

  InvalidateRect

  SendMessageA

  DefWindowProcA

  BeginPaint

  GetClientRect

  FillRect

  DrawTextA

  EndPaint

  SystemParametersInfoA

  CreateWindowExA

  GetClassInfoA

  DialogBoxParamA

  CharNextA

  ExitWindowsEx

  DestroyWindow

  OpenClipboard

  TrackPopupMenu

  SendMessageTimeoutA

  GetDC

  LoadImageA

  GetDlgItem

  FindWindowExA

  IsWindow

  SetClipboardData

  SetWindowLongA

  EmptyClipboard

  SetTimer

  CreateDialogParamA

  wsprintfA

  ShowWindow

  SetWindowTextA

  gdi32

  SelectObject

  SetBkMode

  CreateFontIndirectA

  SetTextColor

  DeleteObject

  GetDeviceCaps

  CreateBrushIndirect

  SetBkColor

  shell32

  SHGetSpecialFolderLocation

  SHGetPathFromIDListA

  SHBrowseForFolderA

  SHGetFileInfoA

  ShellExecuteA

  SHFileOperationA

  advapi32

  RegDeleteValueA

  SetFileSecurityA

  RegOpenKeyExA

  RegDeleteKeyA

  RegEnumValueA

  RegCloseKey

  RegCreateKeyExA

  RegSetValueExA

  RegQueryValueExA

  RegEnumKeyA

  comctl32

  ImageList_Create

  ImageList_Destroy

  ord17

  ImageList_AddMasked

  ole32

  OleUninitialize

  OleInitialize

  CoTaskMemFree

  CoCreateInstance

  Sections

  .text

  Size: 24KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 151KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 32KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 149KB - Virtual size: 149KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/IronPython.Modules.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Modules\obj\Release\net45\IronPython.Modules.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 724KB - Virtual size: 723KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/NetFlix_Shitter_V3.0_By_Team-Otimus-protected_Protected.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/IronPython.Modules.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython.Modules\obj\Release\net45\IronPython.Modules.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 724KB - Virtual size: 723KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/Shitter 3.0.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.9MB - Virtual size: 1.9MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 104KB - Virtual size: 103KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/eappcfg.dll

  .dll windows:10 windows x86 arch:x86

  5a0044836b791222e0b3b32cdc02e151

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  eappcfg.pdb

  Imports

  msvcrt

  _unlock

  _lock

  _initterm

  malloc

  __dllonexit

  free

  wcsrchr

  _vsnwprintf

  _vsnprintf

  memcpy_s

  _onexit

  swprintf_s

  _wtol

  _beginthreadex

  wcscat_s

  _endthreadex

  ?terminate@@YAXXZ

  ??1type_info@@UAE@XZ

  __CxxFrameHandler3

  _amsg_exit

  _XcptFilter

  memmove

  _except_handler4_common

  memcpy

  _CxxThrowException

  ??0exception@@QAE@ABQBDH@Z

  ??0exception@@QAE@ABQBD@Z

  memcmp

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  _purecall

  _snwprintf_s

  memset

  ntdll

  DbgPrint

  EtwEventEnabled

  EtwEventWriteTransfer

  EtwTraceMessage

  EtwEventRegister

  EtwEventUnregister

  EtwUnregisterTraceGuids

  EtwGetTraceEnableFlags

  EtwGetTraceLoggerHandle

  EtwGetTraceEnableLevel

  EtwRegisterTraceGuidsW

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetProcAddress

  FreeLibrary

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetLastError

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-synch-l1-1-0

  WaitForMultipleObjectsEx

  DeleteCriticalSection

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemInfo

  GetSystemTimeAsFileTime

  GetVersionExW

  GetSystemDirectoryW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  HeapSize

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  UnmapViewOfFile

  CreateFileMappingW

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegOpenKeyExW

  RegLoadMUIStringW

  RegEnumKeyExW

  RegCreateKeyExW

  RegQueryInfoKeyW

  RegCloseKey

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  EapHostPeerConfigBlob2Xml

  EapHostPeerConfigXml2Blob

  EapHostPeerCreateMethodConfiguration

  EapHostPeerCredentialsXml2Blob

  EapHostPeerFreeErrorMemory

  EapHostPeerFreeMemory

  EapHostPeerGetMethodProperties

  EapHostPeerGetMethods

  EapHostPeerInvokeConfigUI

  EapHostPeerInvokeIdentityUI

  EapHostPeerInvokeInteractiveUI

  EapHostPeerQueryCredentialInputFields

  EapHostPeerQueryInteractiveUIInputFields

  EapHostPeerQueryUIBlobFromInteractiveUIInputFields

  EapHostPeerQueryUserBlobFromCredentialInputFields

  Sections

  .text

  Size: 168KB - Virtual size: 167KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/msacm32.dll

  .dll windows:10 windows x86 arch:x86

  d708117077f81f5ebb8a7ce8dab0b96b

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Signer

  Actual PE Digest

  e3:64:04:69:25:10:88:de:3a:54:50:63:59:34:87:31:dc:6d:85:71:52:d3:a1:d4:19:23:73:ff:c1:e4:c5:c9

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msacm32.pdb

  Imports

  msvcrt

  _vsnwprintf

  memcmp

  _initterm

  _except_handler4_common

  memcpy

  free

  _amsg_exit

  _XcptFilter

  iswctype

  malloc

  memset

  ntdll

  NtClose

  RtlOpenCurrentUser

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegEnumValueW

  RegSetValueExW

  RegOpenKeyExA

  RegQueryValueExW

  RegCloseKey

  RegOpenKeyExW

  RegDeleteValueA

  RegEnumKeyExA

  RegSetValueExA

  RegEnumValueA

  RegCreateKeyExW

  RegEnumKeyExW

  RegQueryValueExA

  api-ms-win-core-privateprofile-l1-1-0

  WritePrivateProfileStringW

  GetProfileStringW

  GetPrivateProfileStringW

  api-ms-win-core-processthreads-l1-1-0

  TlsFree

  GetCurrentProcessId

  GetCurrentThreadId

  GetCurrentProcess

  TlsGetValue

  TerminateProcess

  TlsAlloc

  TlsSetValue

  api-ms-win-core-registry-l2-1-0

  RegDeleteKeyA

  RegOpenKeyW

  RegDeleteKeyW

  RegCreateKeyW

  RegCreateKeyA

  RegOpenKeyA

  api-ms-win-core-string-l2-1-0

  CharNextW

  CharLowerBuffW

  CharPrevW

  api-ms-win-core-libraryloader-l1-2-0

  LockResource

  GetModuleFileNameW

  LoadResource

  FreeResource

  LoadStringW

  GetProcAddress

  GetModuleHandleW

  SizeofResource

  api-ms-win-core-synch-l1-1-0

  LeaveCriticalSection

  SetEvent

  CreateEventW

  EnterCriticalSection

  InitializeCriticalSection

  ResetEvent

  DeleteCriticalSection

  WaitForSingleObject

  api-ms-win-core-heap-l2-1-0

  GlobalFree

  LocalFree

  GlobalAlloc

  LocalAlloc

  api-ms-win-core-string-obsolete-l1-1-0

  lstrlenA

  lstrcmpW

  api-ms-win-core-heap-obsolete-l1-1-0

  GlobalReAlloc

  GlobalUnlock

  GlobalHandle

  GlobalLock

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-memory-l1-1-0

  CreateFileMappingW

  MapViewOfFile

  UnmapViewOfFile

  api-ms-win-core-libraryloader-l1-2-1

  FindResourceW

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  MultiByteToWideChar

  WideCharToMultiByte

  api-ms-win-core-localization-l1-2-0

  GetACP

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-mm-misc-l1-1-0

  SendDriverMessage

  CloseDriver

  OpenDriver

  api-ms-win-mm-mme-l1-1-0

  waveInGetDevCapsW

  waveOutGetNumDevs

  waveOutGetDevCapsW

  waveOutOpen

  waveInOpen

  waveInGetNumDevs

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  XRegThunkEntry

  acmDriverAddA

  acmDriverAddW

  acmDriverClose

  acmDriverDetailsA

  acmDriverDetailsW

  acmDriverEnum

  acmDriverID

  acmDriverMessage

  acmDriverOpen

  acmDriverPriority

  acmDriverRemove

  acmFilterChooseA

  acmFilterChooseW

  acmFilterDetailsA

  acmFilterDetailsW

  acmFilterEnumA

  acmFilterEnumW

  acmFilterTagDetailsA

  acmFilterTagDetailsW

  acmFilterTagEnumA

  acmFilterTagEnumW

  acmFormatChooseA

  acmFormatChooseW

  acmFormatDetailsA

  acmFormatDetailsW

  acmFormatEnumA

  acmFormatEnumW

  acmFormatSuggest

  acmFormatTagDetailsA

  acmFormatTagDetailsW

  acmFormatTagEnumA

  acmFormatTagEnumW

  acmGetVersion

  acmMessage32

  acmMetrics

  acmStreamClose

  acmStreamConvert

  acmStreamMessage

  acmStreamOpen

  acmStreamPrepareHeader

  acmStreamReset

  acmStreamSize

  acmStreamUnprepareHeader

  Sections

  .text

  Size: 69KB - Virtual size: 69KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 256B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/Team-Otimus V3.0/ttdinject.exe

  .exe windows:10 windows x86 arch:x86

  367eea8a58343fabeb992f3c6fa9cea3

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6e:ef:d4:63:60:14:bd:df:eb:94:2a:7e:0d:70:7d:be:14:e0:96:21:6a:df:ad:71:5a:f4:16:6c:f3:e6:8e:3b

  Signer

  Actual PE Digest

  6e:ef:d4:63:60:14:bd:df:eb:94:2a:7e:0d:70:7d:be:14:e0:96:21:6a:df:ad:71:5a:f4:16:6c:f3:e6:8e:3b

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  TTDInject.pdb

  Imports

  api-ms-win-crt-stdio-l1-1-0

  _set_fmode

  __stdio_common_vsprintf_s

  __stdio_common_vsnprintf_s

  __p__commode

  __stdio_common_vswprintf

  __stdio_common_vswprintf_s

  __stdio_common_vfprintf

  _wfopen

  fclose

  __acrt_iob_func

  __stdio_common_vsprintf

  fflush

  _ftelli64

  _fseeki64

  fread

  api-ms-win-crt-string-l1-1-0

  towlower

  iswspace

  iswxdigit

  isspace

  tolower

  _wcsdup

  _wcsicmp

  wcsnlen

  strcpy_s

  wcscat_s

  api-ms-win-crt-convert-l1-1-0

  strtof

  _wtol

  strtod

  wcstoull

  wcstoul

  api-ms-win-crt-heap-l1-1-0

  _callnewh

  calloc

  _set_new_mode

  _calloc_base

  malloc

  free

  _free_base

  api-ms-win-crt-runtime-l1-1-0

  _invalid_parameter_noinfo_noreturn

  _errno

  _controlfp_s

  _crt_atexit

  _register_onexit_function

  _initialize_onexit_table

  terminate

  _seh_filter_exe

  _cexit

  abort

  _invalid_parameter_noinfo

  _register_thread_local_exe_atexit_callback

  _c_exit

  exit

  __p___wargv

  __p___argc

  _set_app_type

  _exit

  _initterm_e

  _initterm

  _get_initial_wide_environment

  _initialize_wide_environment

  _configure_wide_argv

  api-ms-win-crt-locale-l1-1-0

  __pctype_func

  ___lc_locale_name_func

  ___lc_codepage_func

  ___mb_cur_max_func

  _lock_locales

  _configthreadlocale

  _unlock_locales

  localeconv

  setlocale

  api-ms-win-crt-math-l1-1-0

  ldexp

  _CIpow

  ntdll

  RtlGetVersion

  NtResumeThread

  NtQueryInformationThread

  RtlUnwind

  NtQueryInformationProcess

  NtSuspendThread

  NtSetInformationProcess

  api-ms-win-core-libraryloader-l1-1-0

  GetModuleHandleA

  GetModuleFileNameW

  GetModuleHandleExW

  GetModuleHandleW

  GetProcAddress

  GetModuleFileNameA

  FreeLibrary

  LoadLibraryExW

  api-ms-win-core-version-l1-1-0

  VerQueryValueW

  GetFileVersionInfoSizeExW

  GetFileVersionInfoExW

  api-ms-win-core-synch-l1-1-0

  CreateSemaphoreExW

  WaitForSingleObjectEx

  OpenSemaphoreW

  EnterCriticalSection

  ReleaseMutex

  SetEvent

  CreateMutexExW

  LeaveCriticalSection

  InitializeCriticalSectionEx

  DeleteCriticalSection

  CreateEventW

  WaitForSingleObject

  ResetEvent

  InitializeCriticalSectionAndSpinCount

  ReleaseSemaphore

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  SetLastError

  RaiseException

  api-ms-win-core-processthreads-l1-1-0

  OpenThread

  CreateProcessW

  CreateRemoteThread

  OpenProcessToken

  ResumeThread

  TerminateProcess

  GetCurrentProcessId

  GetCurrentThreadId

  GetCurrentProcess

  GetExitCodeProcess

  GetProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  LCMapStringEx

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  OutputDebugStringW

  IsDebuggerPresent

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-com-l1-1-0

  CoUninitialize

  CoInitializeEx

  CoCreateInstance

  api-ms-win-security-base-l1-1-0

  FreeSid

  CheckTokenMembership

  AdjustTokenPrivileges

  AllocateAndInitializeSid

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  GetStringTypeW

  CompareStringOrdinal

  WideCharToMultiByte

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemInfo

  GetSystemTimeAsFileTime

  rpcrt4

  UuidCreate

  api-ms-win-security-lsalookup-l2-1-0

  LookupPrivilegeValueW

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceExecuteOnce

  api-ms-win-core-memory-l1-1-0

  VirtualProtectEx

  VirtualAllocEx

  VirtualFreeEx

  VirtualFree

  VirtualProtect

  ReadProcessMemory

  VirtualQuery

  VirtualQueryEx

  WriteProcessMemory

  VirtualAlloc

  crypt32

  CryptStringToBinaryW

  api-ms-win-core-registry-l1-1-0

  RegOpenKeyExW

  RegQueryValueExW

  RegSetValueExW

  RegCloseKey

  RegDeleteValueW

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  OpenProcess

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-fibers-l1-1-0

  FlsFree

  FlsSetValue

  FlsGetValue

  FlsAlloc

  api-ms-win-core-kernel32-legacy-l1-1-0

  LoadLibraryW

  api-ms-win-core-registry-l2-1-0

  RegOpenKeyW

  api-ms-win-core-toolhelp-l1-1-0

  Thread32First

  CreateToolhelp32Snapshot

  Thread32Next

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 50KB - Virtual size: 49KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 7KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker Shitter By Team-Otimus V3.0/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/License.txt
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/Netflix Checker V3.1 by Centrix.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 172KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/Read me!.txt
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/License.txt
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/Read me!.txt
• Checkers PACK/Checkers PACK/Netflix Checker V3.1 by Cetrix/sysdll/bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 24KB - Virtual size: 23KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 47KB - Virtual size: 46KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/msvcp100.dll

  .dll windows:5 windows x86 arch:x86

  7a0d9f66efd1839f136ca6896fa52dfa

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:b2:9b:00:00:00:00:00:15

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  21/02/2011, 20:53

  Not After

  21/05/2012, 20:53

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:a2:30:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:01

  Not After

  25/07/2013, 19:11

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  bf:b0:fa:8d:3c:66:79:75:e3:a2:ca:10:72:d2:b3:8d:c5:59:ee:76

  Signer

  Actual PE Digest

  bf:b0:fa:8d:3c:66:79:75:e3:a2:ca:10:72:d2:b3:8d:c5:59:ee:76

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msvcp100.i386.pdb

  Imports

  msvcr100

  rand_s

  memset

  memmove

  fgetc

  ungetc

  _lock_file

  _unlock_file

  fflush

  setvbuf

  memcpy_s

  fwrite

  fgetpos

  _fseeki64

  fsetpos

  fclose

  _fsopen

  _wfsopen

  fseek

  ldexp

  wcslen

  memchr

  memmove_s

  sprintf_s

  _Strftime

  strcspn

  setlocale

  _realloc_crt

  strcmp

  _malloc_crt

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  _purecall

  strerror

  fgetwc

  fputwc

  ungetwc

  __uncaught_exception

  towlower

  towupper

  _create_locale

  _ui64toa_s

  _free_locale

  __pctype_func

  _errno

  ___mb_cur_max_l_func

  ___lc_codepage_func

  ___lc_handle_func

  __crtCompareStringA

  memcmp

  ___lc_collate_cp_func

  __crtLCMapStringA

  __iob_func

  ?Alloc@Concurrency@@YAPAXI@Z

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z

  ?Yield@Context@Concurrency@@SAXXZ

  ??1critical_section@Concurrency@@QAE@XZ

  ??0invalid_link_target@Concurrency@@QAE@PBD@Z

  ??0message_not_found@Concurrency@@QAE@XZ

  ??0bad_target@Concurrency@@QAE@XZ

  ??0invalid_operation@Concurrency@@QAE@PBD@Z

  ?set@event@Concurrency@@QAEXXZ

  ?wait@event@Concurrency@@QAEII@Z

  ??1event@Concurrency@@QAE@XZ

  ??0event@Concurrency@@QAE@XZ

  ?Free@Concurrency@@YAXPAX@Z

  ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ?_UnderlyingYield@details@Concurrency@@YAXXZ

  ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ

  ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

  ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

  ??1_SpinLock@details@Concurrency@@QAE@XZ

  ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z

  ?Log2@details@Concurrency@@YAKI@Z

  isupper

  _calloc_crt

  islower

  __crtLCMapStringW

  isspace

  tolower

  strtod

  __crtCompareStringW

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  _encoded_null

  _initterm

  _initterm_e

  _amsg_exit

  __CppXcptFilter

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  _except_handler4_common

  _crt_debugger_hook

  __clean_type_info_names_internal

  fputs

  fputc

  abort

  log

  ??0bad_cast@std@@QAE@ABV01@@Z

  ??1bad_cast@std@@UAE@XZ

  ??0bad_cast@std@@QAE@PBD@Z

  _Getmonths

  _Getdays

  malloc

  __CxxFrameHandler3

  ??2@YAPAXI@Z

  ___mb_cur_max_func

  memcpy

  strlen

  ??_V@YAXPAX@Z

  _Gettnames

  localeconv

  free

  ??0exception@std@@QAE@ABQBD@Z

  ?what@exception@std@@UBEPBDXZ

  ??0exception@std@@QAE@ABQBDH@Z

  ??3@YAXPAX@Z

  ??0exception@std@@QAE@ABV01@@Z

  _CxxThrowException

  ??1exception@std@@UAE@XZ

  ??0operation_timed_out@Concurrency@@QAE@XZ

  ??0exception@std@@QAE@XZ

  kernel32

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  Sleep

  GetStringTypeW

  InterlockedDecrement

  InterlockedIncrement

  GetLocaleInfoW

  GetCurrentThreadId

  WideCharToMultiByte

  MultiByteToWideChar

  InterlockedExchange

  InterlockedCompareExchange

  DecodePointer

  EncodePointer

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  GetSystemTimeAsFileTime

  Exports

  Exports

  ??0?$_Yarn@D@std@@QAE@ABV01@@Z

  ??0?$_Yarn@D@std@@QAE@PBD@Z

  ??0?$_Yarn@D@std@@QAE@XZ

  ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

  ??0?$basic_ios@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IAE@XZ

  ??0?$basic_ios@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ

  ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@$$QAV01@@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@W4_Uninitialized@1@_N@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@ABV01@@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@ABV01@@Z

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAE@XZ

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@ABV01@@Z

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

  ??0?$codecvt@DDH@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$codecvt@DDH@std@@QAE@I@Z

  ??0?$codecvt@GDH@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$codecvt@GDH@std@@QAE@I@Z

  ??0?$codecvt@_WDH@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$codecvt@_WDH@std@@QAE@I@Z

  ??0?$ctype@D@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$ctype@D@std@@QAE@PBF_NI@Z

  ??0?$ctype@G@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$ctype@G@std@@QAE@I@Z

  ??0?$ctype@_W@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$ctype@_W@std@@QAE@I@Z

  ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

  ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

  ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

  ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

  ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

  ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IAE@PBDI@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

  ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAE@PBDI@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IAE@PBDI@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAE@I@Z

  ??0Init@ios_base@std@@QAE@XZ

  ??0_Concurrent_queue_base_v4@details@Concurrency@@IAE@I@Z

  ??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@ABV_Concurrent_queue_base_v4@12@@Z

  ??0_Container_base12@std@@QAE@ABU01@@Z

  ??0_Container_base12@std@@QAE@XZ

  ??0_Init_locks@std@@QAE@XZ

  ??0_Locimp@locale@std@@AAE@ABV012@@Z

  ??0_Locimp@locale@std@@AAE@_N@Z

  ??0_Locinfo@std@@QAE@HPBD@Z

  ??0_Locinfo@std@@QAE@PBD@Z

  ??0_Lockit@std@@QAE@H@Z

  ??0_Lockit@std@@QAE@XZ

  ??0_Mutex@std@@QAE@W4_Uninitialized@1@@Z

  ??0_Mutex@std@@QAE@XZ

  ??0_Runtime_object@details@Concurrency@@QAE@H@Z

  ??0_Runtime_object@details@Concurrency@@QAE@XZ

  ??0_Timevec@std@@QAE@ABV01@@Z

  ??0_Timevec@std@@QAE@PAX@Z

  ??0_UShinit@std@@QAE@XZ

  ??0_Winit@std@@QAE@XZ

  ??0agent@Concurrency@@QAE@AAVScheduleGroup@1@@Z

  ??0agent@Concurrency@@QAE@AAVScheduler@1@@Z

  ??0agent@Concurrency@@QAE@XZ

  ??0codecvt_base@std@@QAE@I@Z

  ??0ctype_base@std@@QAE@I@Z

  ??0facet@locale@std@@IAE@I@Z

  ??0id@locale@std@@QAE@I@Z

  ??0ios_base@std@@IAE@XZ

  ??0ios_base@std@@QAE@ABV01@@Z

  ??0time_base@std@@QAE@I@Z

  ??1?$_Yarn@D@std@@QAE@XZ

  ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

  ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ

  ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

  ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

  ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ

  ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

  ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

  ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UAE@XZ

  ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

  ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

  ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UAE@XZ

  ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

  ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

  ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UAE@XZ

  ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ

  ??1?$codecvt@DDH@std@@MAE@XZ

  ??1?$codecvt@GDH@std@@MAE@XZ

  ??1?$codecvt@_WDH@std@@MAE@XZ

  ??1?$ctype@D@std@@MAE@XZ

  ??1?$ctype@G@std@@MAE@XZ

  ??1?$ctype@_W@std@@MAE@XZ

  ??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

  ??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

  ??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

  ??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

  ??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

  ??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

  ??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

  ??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

  ??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

  ??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MAE@XZ

  ??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MAE@XZ

  ??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MAE@XZ

  ??1Init@ios_base@std@@QAE@XZ

  ??1_Concurrent_queue_base_v4@details@Concurrency@@MAE@XZ

  ??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAE@XZ

  ??1_Concurrent_vector_base_v4@details@Concurrency@@IAE@XZ

  ??1_Container_base12@std@@QAE@XZ

  ??1_Init_locks@std@@QAE@XZ

  ??1_Locimp@locale@std@@MAE@XZ

  ??1_Locinfo@std@@QAE@XZ

  ??1_Lockit@std@@QAE@XZ

  ??1_Mutex@std@@QAE@XZ

  ??1_Timevec@std@@QAE@XZ

  ??1_UShinit@std@@QAE@XZ

  ??1_Winit@std@@QAE@XZ

  ??1agent@Concurrency@@UAE@XZ

  ??1codecvt_base@std@@UAE@XZ

  ??1ctype_base@std@@UAE@XZ

  ??1facet@locale@std@@UAE@XZ

  ??1ios_base@std@@UAE@XZ

  ??1time_base@std@@UAE@XZ

  ??4?$_Iosb@H@std@@QAEAAV01@ABV01@@Z

  ??4?$_Yarn@D@std@@QAEAAV01@ABV01@@Z

  ??4?$_Yarn@D@std@@QAEAAV01@PBD@Z

  ??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@$$QAV01@@Z

  ??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEAAV01@ABV01@@Z

  ??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEAAV01@ABV01@@Z

  ??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEAAV01@ABV01@@Z

  ??4?$numeric_limits@C@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@D@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@E@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@F@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@G@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@H@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@I@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@J@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@K@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@M@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@N@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@_J@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@_K@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@_N@std@@QAEAAV01@ABV01@@Z

  ??4?$numeric_limits@_W@std@@QAEAAV01@ABV01@@Z

  ??4Init@ios_base@std@@QAEAAV012@ABV012@@Z

  ??4_Container_base0@std@@QAEAAU01@ABU01@@Z

  ??4_Container_base12@std@@QAEAAU01@ABU01@@Z

  ??4_Init_locks@std@@QAEAAV01@ABV01@@Z

  ??4_Num_base@std@@QAEAAU01@ABU01@@Z

  ??4_Num_float_base@std@@QAEAAU01@ABU01@@Z

  ??4_Num_int_base@std@@QAEAAU01@ABU01@@Z

  ??4_Timevec@std@@QAEAAV01@ABV01@@Z

  ??4_UShinit@std@@QAEAAV01@ABV01@@Z

  ??4_Winit@std@@QAEAAV01@ABV01@@Z

  ??4ios_base@std@@QAEAAV01@ABV01@@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAO@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_J@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_K@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AA_N@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAF@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAG@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAI@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAK@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAM@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAN@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAO@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAPAX@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_J@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_K@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AA_N@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAF@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAG@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAH@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAI@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAJ@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAK@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAM@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAN@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAO@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AAPAX@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_J@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_K@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@AA_N@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@F@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@O@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@DU?$char_traits@D@std@@@1@AAV21@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@F@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@J@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@M@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@O@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@GU?$char_traits@G@std@@@1@AAV21@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@PBX@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_J@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_K@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@F@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@G@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@H@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@J@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@M@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@N@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@O@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AAV21@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_J@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_K@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@_N@Z

  ??7ios_base@std@@QBE_NXZ

  ??Bid@locale@std@@QAEIXZ

  ??Bios_base@std@@QBEPAXXZ

  ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$codecvt@DDH@std@@6B@

  ??_7?$codecvt@GDH@std@@6B@

  ??_7?$codecvt@_WDH@std@@6B@

  ??_7?$ctype@D@std@@6B@

  ??_7?$ctype@G@std@@6B@

  ??_7?$ctype@_W@std@@6B@

  ??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7_Locimp@locale@std@@6B@

  ??_7codecvt_base@std@@6B@

  ??_7ctype_base@std@@6B@

  ??_7ios_base@std@@6B@

  ??_7time_base@std@@6B@

  ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@

  ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@

  ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@

  ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@

  ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@

  ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@

  ??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@

  ??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@

  ??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@

  ??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@

  ??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@

  ??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@

  ??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEXXZ

  ??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ

  ??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

  ??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEXXZ

  ??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

  ??_F?$codecvt@DDH@std@@QAEXXZ

  ??_F?$codecvt@GDH@std@@QAEXXZ

  ??_F?$codecvt@_WDH@std@@QAEXXZ

  ??_F?$ctype@D@std@@QAEXXZ

  ??_F?$ctype@G@std@@QAEXXZ

  ??_F?$ctype@_W@std@@QAEXXZ

  ??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

  ??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

  ??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

  ??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

  ??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

  ??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

  ??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

  ??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

  ??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

  ??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAEXXZ

  ??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ

  ??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QAEXXZ

  ??_F_Locimp@locale@std@@QAEXXZ

  ??_F_Locinfo@std@@QAEXXZ

  ??_F_Timevec@std@@QAEXXZ

  ??_Fcodecvt_base@std@@QAEXXZ

  ??_Fctype_base@std@@QAEXXZ

  ??_Ffacet@locale@std@@QAEXXZ

  ??_Fid@locale@std@@QAEXXZ

  ??_Ftime_base@std@@QAEXXZ

  ?NFS_Allocate@details@Concurrency@@YAPAXIIPAX@Z

  ?NFS_Free@details@Concurrency@@YAXPAX@Z

  ?NFS_GetLineSize@details@Concurrency@@YAIXZ

  ?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z

  ?_Addfac@_Locimp@locale@std@@AAEXPAVfacet@23@I@Z

  ?_Addstd@ios_base@std@@SAXPAV12@@Z

  ?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXXZ

  ?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IAEXABV123@@Z

  ?_Atexit@@YAXP6AXXZ@Z

  ?_BADOFF@std@@3_JB

  ?_C_str@?$_Yarn@D@std@@QBEPBDXZ

  ?_Callfns@ios_base@std@@AAEXW4event@12@@Z

  ?_Clocptr@_Locimp@locale@std@@0PAV123@A

  ?_Decref@facet@locale@std@@QAEPAV123@XZ

  ?_Donarrow@?$ctype@G@std@@IBEDGD@Z

  ?_Donarrow@?$ctype@_W@std@@IBED_WD@Z

  ?_Dowiden@?$ctype@G@std@@IBEGD@Z

  ?_Dowiden@?$ctype@_W@std@@IBE_WD@Z

  ?_Empty@?$_Yarn@D@std@@QBE_NXZ

  ?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADDH@Z

  ?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADDH@Z

  ?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADDH@Z

  ?_Findarr@ios_base@std@@AAEAAU_Iosarray@12@H@Z

  ?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

  ?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z

  ?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z

  ?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AAVios_base@2@DPBDIIII@Z

  ?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AAVios_base@2@GPBDIIII@Z

  ?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AAVios_base@2@_WPBDIIII@Z

  ?_GetCombinableSize@details@Concurrency@@YAIXZ

  ?_GetCurrentThreadId@details@Concurrency@@YAKXZ

  ?_Getcat@?$codecvt@DDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$codecvt@GDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$codecvt@_WDH@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$ctype@G@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

  ?_Getcat@facet@locale@std@@SAIPAPBV123@PBV23@@Z

  ?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ

  ?_Getctype@_Locinfo@std@@QBE?AU_Ctypevec@@XZ

  ?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ

  ?_Getdateorder@_Locinfo@std@@QBEHXZ

  ?_Getdays@_Locinfo@std@@QBEPBDXZ

  ?_Getfalse@_Locinfo@std@@QBEPBDXZ

  ?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AAVios_base@2@PAH@Z

  ?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

  ?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

  ?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IBE?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD@Z

  ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ

  ?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HABVlocale@2@@Z

  ?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HABVlocale@2@@Z

  ?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHPADAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HABVlocale@2@@Z

  ?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAAH@Z

  ?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAAH@Z

  ?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAHAAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAAH@Z

  ?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ

  ?_Getmonths@_Locinfo@std@@QBEPBDXZ

  ?_Getname@_Locinfo@std@@QBEPBDXZ

  ?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ

  ?_Getptr@_Timevec@std@@QBEPAXXZ

  ?_Gettnames@_Locinfo@std@@QBE?AV_Timevec@2@XZ

  ?_Gettrue@_Locinfo@std@@QBEPBDXZ

  ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBE_JXZ

  ?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBE_JXZ

  ?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IBE_JXZ

  ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

  ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

  ?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

  ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

  ?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

  ?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

  ?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ

  ?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IAEPAGXZ

  ?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ

  ?_Hexdig@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAHDDDD@Z

  ?_Hexdig@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAHGGGG@Z

  ?_Hexdig@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAH_W000@Z

  ?_Id_cnt@id@locale@std@@0HA

  ?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@ABAPADPADPBDH@Z

  ?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@ABAPADPADPBDH@Z

  ?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@ABAPADPADPBDH@Z

  ?_Incref@facet@locale@std@@QAEXXZ

  Sections

  .text

  Size: 371KB - Virtual size: 371KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 11KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 21KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/msvcr100.dll

  .dll windows:5 windows x86 arch:x86

  5271d5ce8b44dd47bc92563e27585466

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:b2:9b:00:00:00:00:00:15

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  21/02/2011, 20:53

  Not After

  21/05/2012, 20:53

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:06:94:2d:00:00:00:00:00:09

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:02

  Not After

  25/07/2013, 19:12

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  8d:91:f0:a3:ff:41:70:8c:67:d0:ba:79:6d:52:da:88:0c:59:23:cc

  Signer

  Actual PE Digest

  8d:91:f0:a3:ff:41:70:8c:67:d0:ba:79:6d:52:da:88:0c:59:23:cc

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msvcr100.i386.pdb

  Imports

  kernel32

  EncodePointer

  DecodePointer

  RaiseException

  GetModuleFileNameA

  GetModuleFileNameW

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  WriteFile

  GetStdHandle

  GetCurrentThreadId

  TlsGetValue

  GetCommandLineW

  GetCommandLineA

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  CloseHandle

  GetLastError

  ResumeThread

  CreateThread

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  InterlockedDecrement

  GetCurrentThread

  FindNextFileA

  FindFirstFileExA

  FindClose

  FindNextFileW

  FindFirstFileExW

  GetLogicalDrives

  GetDiskFreeSpaceA

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  SetErrorMode

  Sleep

  Beep

  GetFileAttributesA

  SetFileAttributesA

  SetEnvironmentVariableA

  GetCurrentDirectoryA

  SetCurrentDirectoryA

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  GetFullPathNameA

  GetDriveTypeW

  GetCurrentProcessId

  CreateDirectoryA

  MoveFileA

  RemoveDirectoryA

  GetDriveTypeA

  DeleteFileA

  GetFileAttributesW

  SetEnvironmentVariableW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  MoveFileW

  RemoveDirectoryW

  DeleteFileW

  GetExitCodeProcess

  WaitForSingleObject

  CreateProcessA

  LoadLibraryA

  FreeLibrary

  CreateProcessW

  ReadFile

  DuplicateHandle

  GetCurrentProcess

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  GetLocalTime

  WideCharToMultiByte

  SetFileTime

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  SetLocalTime

  InterlockedPopEntrySList

  InterlockedFlushSList

  QueryDepthSList

  InterlockedPushEntrySList

  CreateTimerQueue

  CreateTimerQueueTimer

  DeleteTimerQueueTimer

  SetEvent

  CreateEventW

  SwitchToThread

  SignalObjectAndWait

  TryEnterCriticalSection

  GetTickCount

  VirtualFree

  GetVersionExW

  SetThreadPriority

  VirtualAlloc

  GetSystemInfo

  GetProcessAffinityMask

  VirtualProtect

  SetThreadAffinityMask

  InitializeSListHead

  ReleaseSemaphore

  CreateSemaphoreW

  WaitForMultipleObjects

  GetThreadPriority

  LoadLibraryW

  SleepEx

  OutputDebugStringW

  FreeLibraryAndExitThread

  GetModuleHandleA

  GetThreadTimes

  DebugBreak

  MultiByteToWideChar

  GetStringTypeW

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  GetTimeFormatA

  GetDateFormatA

  GetTimeFormatW

  GetDateFormatW

  RtlUnwind

  HeapAlloc

  HeapFree

  HeapCreate

  HeapDestroy

  HeapQueryInformation

  HeapReAlloc

  HeapSize

  HeapValidate

  HeapCompact

  HeapWalk

  VirtualQuery

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetFileInformationByHandle

  PeekNamedPipe

  CreateFileA

  CreateFileW

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  CreatePipe

  SetStdHandle

  ReadConsoleInputA

  SetConsoleMode

  PeekConsoleInputA

  GetNumberOfConsoleInputEvents

  ReadConsoleInputW

  WriteConsoleW

  ReadConsoleW

  SetEndOfFile

  GetProcessHeap

  InterlockedExchange

  LockFile

  UnlockFile

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  TerminateProcess

  SetConsoleCtrlHandler

  GetLocaleInfoW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  LCMapStringW

  CompareStringW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsProcessorFeaturePresent

  Exports

  Exports

  $I10_OUTPUT

  ??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z

  ??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z

  ??0SchedulerPolicy@Concurrency@@QAA@IZZ

  ??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z

  ??0SchedulerPolicy@Concurrency@@QAE@XZ

  ??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_ReaderWriterLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantLock@details@Concurrency@@QAE@XZ

  ??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z

  ??0_SpinLock@details@Concurrency@@QAE@ACJ@Z

  ??0_TaskCollection@details@Concurrency@@QAE@XZ

  ??0_Timer@details@Concurrency@@IAE@I_N@Z

  ??0__non_rtti_object@std@@QAE@ABV01@@Z

  ??0__non_rtti_object@std@@QAE@PBD@Z

  ??0bad_cast@std@@AAE@PBQBD@Z

  ??0bad_cast@std@@QAE@ABV01@@Z

  ??0bad_cast@std@@QAE@PBD@Z

  ??0bad_target@Concurrency@@QAE@PBD@Z

  ??0bad_target@Concurrency@@QAE@XZ

  ??0bad_typeid@std@@QAE@ABV01@@Z

  ??0bad_typeid@std@@QAE@PBD@Z

  ??0context_self_unblock@Concurrency@@QAE@PBD@Z

  ??0context_self_unblock@Concurrency@@QAE@XZ

  ??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z

  ??0context_unblock_unbalanced@Concurrency@@QAE@XZ

  ??0critical_section@Concurrency@@QAE@XZ

  ??0default_scheduler_exists@Concurrency@@QAE@PBD@Z

  ??0default_scheduler_exists@Concurrency@@QAE@XZ

  ??0event@Concurrency@@QAE@XZ

  ??0exception@std@@QAE@ABQBD@Z

  ??0exception@std@@QAE@ABQBDH@Z

  ??0exception@std@@QAE@ABV01@@Z

  ??0exception@std@@QAE@XZ

  ??0improper_lock@Concurrency@@QAE@PBD@Z

  ??0improper_lock@Concurrency@@QAE@XZ

  ??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_attach@Concurrency@@QAE@XZ

  ??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_detach@Concurrency@@QAE@XZ

  ??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z

  ??0improper_scheduler_reference@Concurrency@@QAE@XZ

  ??0invalid_link_target@Concurrency@@QAE@PBD@Z

  ??0invalid_link_target@Concurrency@@QAE@XZ

  ??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z

  ??0invalid_multiple_scheduling@Concurrency@@QAE@XZ

  ??0invalid_operation@Concurrency@@QAE@PBD@Z

  ??0invalid_operation@Concurrency@@QAE@XZ

  ??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z

  ??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ

  ??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z

  ??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ

  ??0message_not_found@Concurrency@@QAE@PBD@Z

  ??0message_not_found@Concurrency@@QAE@XZ

  ??0missing_wait@Concurrency@@QAE@PBD@Z

  ??0missing_wait@Concurrency@@QAE@XZ

  ??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z

  ??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ

  ??0operation_timed_out@Concurrency@@QAE@PBD@Z

  ??0operation_timed_out@Concurrency@@QAE@XZ

  ??0reader_writer_lock@Concurrency@@QAE@XZ

  ??0scheduler_not_attached@Concurrency@@QAE@PBD@Z

  ??0scheduler_not_attached@Concurrency@@QAE@XZ

  ??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z

  ??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z

  ??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z

  ??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

  ??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z

  ??0task_canceled@details@Concurrency@@QAE@PBD@Z

  ??0task_canceled@details@Concurrency@@QAE@XZ

  ??0unsupported_os@Concurrency@@QAE@PBD@Z

  ??0unsupported_os@Concurrency@@QAE@XZ

  ??1SchedulerPolicy@Concurrency@@QAE@XZ

  ??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ

  ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ

  ??1_SpinLock@details@Concurrency@@QAE@XZ

  ??1_TaskCollection@details@Concurrency@@QAE@XZ

  ??1_Timer@details@Concurrency@@IAE@XZ

  ??1__non_rtti_object@std@@UAE@XZ

  ??1bad_cast@std@@UAE@XZ

  ??1bad_typeid@std@@UAE@XZ

  ??1critical_section@Concurrency@@QAE@XZ

  ??1event@Concurrency@@QAE@XZ

  ??1exception@std@@UAE@XZ

  ??1reader_writer_lock@Concurrency@@QAE@XZ

  ??1scoped_lock@critical_section@Concurrency@@QAE@XZ

  ??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ

  ??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ

  ??1type_info@@UAE@XZ

  ??2@YAPAXI@Z

  ??2@YAPAXIHPBDH@Z

  ??3@YAXPAX@Z

  ??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z

  ??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z

  ??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z

  ??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z

  ??4bad_cast@std@@QAEAAV01@ABV01@@Z

  ??4bad_typeid@std@@QAEAAV01@ABV01@@Z

  ??4exception@std@@QAEAAV01@ABV01@@Z

  ??8type_info@@QBE_NABV0@@Z

  ??9type_info@@QBE_NABV0@@Z

  ??_7__non_rtti_object@std@@6B@

  ??_7bad_cast@std@@6B@

  ??_7bad_typeid@std@@6B@

  ??_7exception@@6B@

  ??_7exception@std@@6B@

  ??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ

  ??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ

  ??_Fbad_cast@std@@QAEXXZ

  ??_Fbad_typeid@std@@QAEXXZ

  ??_U@YAPAXI@Z

  ??_U@YAPAXIHPBDH@Z

  ??_V@YAXPAX@Z

  ?Alloc@Concurrency@@YAPAXI@Z

  ?Block@Context@Concurrency@@SAXXZ

  ?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

  ?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z

  ?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ

  ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ

  ?CurrentContext@Context@Concurrency@@SAPAV12@XZ

  ?Detach@CurrentScheduler@Concurrency@@SAXXZ

  ?DisableTracing@Concurrency@@YAJXZ

  ?EnableTracing@Concurrency@@YAJXZ

  ?Free@Concurrency@@YAXPAX@Z

  ?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ

  ?GetExecutionContextId@Concurrency@@YAIXZ

  ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

  ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ

  ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ

  ?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z

  ?GetProcessorCount@Concurrency@@YAIXZ

  ?GetProcessorNodeCount@Concurrency@@YAIXZ

  ?GetSchedulerId@Concurrency@@YAIXZ

  ?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ

  ?Id@Context@Concurrency@@SAIXZ

  ?Id@CurrentScheduler@Concurrency@@SAIXZ

  ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

  ?Log2@details@Concurrency@@YAKI@Z

  ?Oversubscribe@Context@Concurrency@@SAX_N@Z

  ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z

  ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ

  ?ScheduleGroupId@Context@Concurrency@@SAIXZ

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z

  ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z

  ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z

  ?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z

  ?VirtualProcessorId@Context@Concurrency@@SAIXZ

  ?Yield@Context@Concurrency@@SAXXZ

  ?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ

  ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

  ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ

  ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z

  ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ

  ?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ

  ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ

  ?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z

  ?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z

  ?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ

  ?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ

  ?_Copy_str@exception@std@@AAEXPBD@Z

  ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

  ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

  ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ

  ?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ

  ?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z

  ?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z

  ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ

  ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ

  ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ

  ?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ

  ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ

  ?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ

  ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ

  ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

  ?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z

  ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

  ?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z

  ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z

  ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z

  ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ

  ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ

  ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ

  ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ

  ?_SpinYield@Context@Concurrency@@SAXXZ

  ?_Start@_Timer@details@Concurrency@@IAEXXZ

  ?_Stop@_Timer@details@Concurrency@@IAEXXZ

  ?_Tidy@exception@std@@AAEXXZ

  ?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z

  ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ

  ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ

  ?_Type_info_dtor@type_info@@CAXPAV1@@Z

  ?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z

  ?_UnderlyingYield@details@Concurrency@@YAXXZ

  ?_ValidateExecute@@YAHP6GHXZ@Z

  ?_ValidateRead@@YAHPBXI@Z

  ?_ValidateWrite@@YAHPAXI@Z

  ?_Value@_SpinCount@details@Concurrency@@SAIXZ

  ?__ExceptionPtrAssign@@YAXPAXPBX@Z

  ?__ExceptionPtrCompare@@YA_NPBX0@Z

  ?__ExceptionPtrCopy@@YAXPAXPBX@Z

  ?__ExceptionPtrCopyException@@YAXPAXPBX1@Z

  ?__ExceptionPtrCreate@@YAXPAX@Z

  ?__ExceptionPtrCurrentException@@YAXPAX@Z

  ?__ExceptionPtrDestroy@@YAXPAX@Z

  ?__ExceptionPtrRethrow@@YAXPBX@Z

  ?_inconsistency@@YAXXZ

  ?_invalid_parameter@@YAXPBG00II@Z

  ?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z

  ?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z

  ?_open@@YAHPBDHH@Z

  ?_query_new_handler@@YAP6AHI@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AHI@ZH@Z

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?_sopen@@YAHPBDHHH@Z

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  ?_wopen@@YAHPB_WHH@Z

  ?_wsopen@@YAHPB_WHHH@Z

  ?before@type_info@@QBEHABV1@@Z

  ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ

  ?lock@critical_section@Concurrency@@QAEXXZ

  ?lock@reader_writer_lock@Concurrency@@QAEXXZ

  ?lock_read@reader_writer_lock@Concurrency@@QAEXXZ

  ?name@type_info@@QBEPBDPAU__type_info_node@@@Z

  ?native_handle@critical_section@Concurrency@@QAEAAV12@XZ

  ?raw_name@type_info@@QBEPBDXZ

  ?reset@event@Concurrency@@QAEXXZ

  ?set@event@Concurrency@@QAEXXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_terminate@@YAP6AXXZH@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZH@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?swprintf@@YAHPAGIPBGZZ

  ?swprintf@@YAHPA_WIPB_WZZ

  ?terminate@@YAXXZ

  ?try_lock@critical_section@Concurrency@@QAE_NXZ

  ?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ

  ?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ

  ?unexpected@@YAXXZ

  ?unlock@critical_section@Concurrency@@QAEXXZ

  ?unlock@reader_writer_lock@Concurrency@@QAEXXZ

  ?vswprintf@@YAHPA_WIPB_WPAD@Z

  ?wait@Concurrency@@YAXI@Z

  ?wait@event@Concurrency@@QAEII@Z

  ?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z

  ?what@exception@std@@UBEPBDXZ

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _CRT_RTC_INIT

  _CRT_RTC_INITW

  _CreateFrameInfo

  _CxxThrowException

  _EH_prolog

  _FindAndUnlinkFrame

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _IsExceptionObjectToBeDestroyed

  _NLG_Dispatch2

  _NLG_Return

  _NLG_Return2

  _Strftime

  _XcptFilter

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __CppXcptFilter

  __CxxCallUnwindDelDtor

  __CxxCallUnwindDtor

  __CxxCallUnwindStdDelDtor

  __CxxCallUnwindVecDtor

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  __STRINGTOLD_L

  __TypeMatch

  ___fls_getvalue@4

  ___fls_setvalue@8

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __clean_type_info_names_internal

  __control87_2

  __create_locale

  __crtCompareStringA

  __crtCompareStringW

  __crtLCMapStringA

  __crtLCMapStringW

  __daylight

  __dllonexit

  __doserrno

  __dstbias

  __fpecode

  __free_locale

  __get_current_locale

  __get_flsindex

  __get_tlsindex

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __lconv

  __lconv_init

  __libm_sse2_acos

  __libm_sse2_acosf

  __libm_sse2_asin

  __libm_sse2_asinf

  __libm_sse2_atan

  __libm_sse2_atan2

  __libm_sse2_atanf

  __libm_sse2_cos

  __libm_sse2_cosf

  __libm_sse2_exp

  __libm_sse2_expf

  __libm_sse2_log

  __libm_sse2_log10

  __libm_sse2_log10f

  __libm_sse2_logf

  __libm_sse2_pow

  __libm_sse2_powf

  __libm_sse2_sin

  __libm_sse2_sinf

  __libm_sse2_tan

  __libm_sse2_tanf

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __report_gsfailure

  __set_app_type

  __set_flsgetvalue

  __setlc_active

  __setusermatherr

  __strncnt

  __swprintf_l

  __sys_errlist

  __sys_nerr

  __threadhandle

  __threadid

  __timezone

  __toascii

  __tzname

  __unDName

  __unDNameEx

  __unDNameHelper

  __uncaught_exception

  __unguarded_readlc_active

  __vswprintf_l

  __wargv

  __wcserror

  __wcserror_s

  __wcsncnt

  __wgetmainargs

  __winitenv

  _abnormal_termination

  _abs64

  _access

  _access_s

  _acmdln

  _aligned_free

  _aligned_malloc

  _aligned_msize

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_offset_recalloc

  _aligned_realloc

  _aligned_recalloc

  _amsg_exit

  _assert

  _atodbl

  _atodbl_l

  _atof_l

  _atoflt

  _atoflt_l

  _atoi64

  _atoi64_l

  _atoi_l

  _atol_l

  _atoldbl

  _atoldbl_l

  _beep

  _beginthread

  _beginthreadex

  _byteswap_uint64

  _byteswap_ulong

  _byteswap_ushort

  _c_exit

  _cabs

  _callnewh

  _calloc_crt

  _cexit

  _cgets

  _cgets_s

  _cgetws

  _cgetws_s

  _chdir

  _chdrive

  _chgsign

  _chkesp

  _chmod

  _chsize

  _chsize_s

  _clearfp

  _close

  _commit

  _commode

  _configthreadlocale

  _control87

  _controlfp

  _controlfp_s

  _copysign

  _cprintf

  _cprintf_l

  _cprintf_p

  Sections

  .text

  Size: 709KB - Virtual size: 708KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 19KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  c:\Users\Julio\Documents\Visual Studio 2012\CrunchyrollGen021-TR-Stop1\CrunchyrollGen021-TR-Stop1\obj\Debug\Netflix Checker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 384KB - Virtual size: 383KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 363KB - Virtual size: 362KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Microsoft.VC100.CRT/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Netflix Checker v0.2.1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 186KB - Virtual size: 186KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 13-09-25/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 13-14-28/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 13-42-40/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 13-42-40/Good_Hits.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-00-57/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-00-57/Good_Hits.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-24-03/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-29-12/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-47-16/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 14-47-16/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-01-51/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-01-51/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-12-57/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-12-57/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-17-20/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-17-20/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-27-30/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-27-30/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-41-08/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 15-41-08/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 16-26-01/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 16-26-01/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 18-18-52/+Games.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 01-11-19 18-18-52/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 31-10-19 23-49-04/Bad.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Results/Result 31-10-19 23-49-04/Good_Hits.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Netflix Checker v0.2.1/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/Guna.UI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db

  Certificate

  Issuer

  CN=Sobatdata Root CA

  Not Before

  23/10/2019, 05:22

  Not After

  22/10/2025, 17:00

  Subject

  CN=Sobatdata Software

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22/10/2014, 00:00

  Not After

  22/10/2024, 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2021, 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  fd:c7:11:ac:06:af:3c:b3:90:a8:99:02:20:3d:6b:dc:7b:d8:16:f0

  Signer

  Actual PE Digest

  fd:c7:11:ac:06:af:3c:b3:90:a8:99:02:20:3d:6b:dc:7b:d8:16:f0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI\Guna.UI\bin\Release\build\.net 4.0\Guna.UI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 869KB - Virtual size: 868KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/Netflix Checker v1 by Sh4lltear.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 424KB - Virtual size: 424KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/DiscordRPC.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\discord-rpc-csharp\DiscordRPC\obj\Release\DiscordRPC.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 75KB - Virtual size: 74KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 916B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Guna.UI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db

  Certificate

  Issuer

  CN=Sobatdata Root CA

  Not Before

  23/10/2019, 05:22

  Not After

  22/10/2025, 17:00

  Subject

  CN=Sobatdata Software

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22/10/2014, 00:00

  Not After

  22/10/2024, 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2021, 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  fd:c7:11:ac:06:af:3c:b3:90:a8:99:02:20:3d:6b:dc:7b:d8:16:f0

  Signer

  Actual PE Digest

  fd:c7:11:ac:06:af:3c:b3:90:a8:99:02:20:3d:6b:dc:7b:d8:16:f0

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI\Guna.UI\bin\Release\build\.net 4.0\Guna.UI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 869KB - Virtual size: 868KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Netflix Checker v1 by Sh4lltear32.dll

  .dll windows:5 windows x86 arch:x86

  55f7dfaa5fbadfb4911ad11b60c65135

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\MyProjects\svn\ILProtector\trunk\ILProtector\Output2010\Win32\Release\Protect32.pdb

  Imports

  kernel32

  MapViewOfFile

  UnmapViewOfFile

  CreateFileW

  GetFileSizeEx

  GetLastError

  SetLastError

  CreateFileMappingW

  CloseHandle

  Sleep

  QueueUserWorkItem

  DeleteCriticalSection

  LoadLibraryW

  GetProcAddress

  InterlockedCompareExchange

  InterlockedDecrement

  GetModuleFileNameW

  QueryPerformanceCounter

  EnterCriticalSection

  LeaveCriticalSection

  GetModuleHandleW

  InitializeCriticalSection

  LocalFree

  FlushFileBuffers

  SetStdHandle

  WriteConsoleW

  SetFilePointer

  GetStringTypeW

  InterlockedIncrement

  EncodePointer

  DecodePointer

  HeapFree

  HeapAlloc

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCommandLineA

  RaiseException

  RtlUnwind

  WideCharToMultiByte

  LCMapStringW

  GetCPInfo

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  IsProcessorFeaturePresent

  HeapSize

  ExitProcess

  WriteFile

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetConsoleCP

  GetConsoleMode

  HeapCreate

  HeapDestroy

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetTickCount

  GetCurrentProcessId

  HeapReAlloc

  advapi32

  CryptReleaseContext

  CryptAcquireContextA

  CryptGenRandom

  oleaut32

  SafeArrayDestroy

  SysFreeString

  SysAllocString

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayGetElement

  VariantInit

  VariantCopy

  VariantClear

  SafeArrayGetLBound

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  winmm

  timeGetTime

  mscoree

  CorBindToRuntimeEx

  Exports

  Exports

  P0

  Sections

  .text

  Size: 465KB - Virtual size: 464KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 90KB - Virtual size: 90KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 38KB - Virtual size: 50KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 67KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Netflix Checker v1 by Sh4lltear64.dll

  .dll windows:5 windows x64 arch:x64

  43c22e6f8eae03d27951cac470151b24

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  c:\MyProjects\svn\ILProtector\trunk\ILProtector\Output2010\x64\Release\Protect64.pdb

  Imports

  kernel32

  MapViewOfFile

  UnmapViewOfFile

  CreateFileW

  GetFileSizeEx

  GetLastError

  SetLastError

  CreateFileMappingW

  CloseHandle

  Sleep

  DeleteCriticalSection

  GetModuleHandleW

  LoadLibraryW

  GetProcAddress

  GetModuleFileNameW

  QueryPerformanceCounter

  EnterCriticalSection

  LeaveCriticalSection

  QueueUserWorkItem

  InitializeCriticalSection

  LocalFree

  FlushFileBuffers

  SetStdHandle

  WriteConsoleW

  SetFilePointer

  GetStringTypeW

  EncodePointer

  DecodePointer

  HeapFree

  HeapAlloc

  MultiByteToWideChar

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  FlsSetValue

  GetCommandLineA

  RaiseException

  RtlPcToFileHeader

  RtlLookupFunctionEntry

  RtlUnwindEx

  WideCharToMultiByte

  LCMapStringW

  GetCPInfo

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  HeapSize

  ExitProcess

  WriteFile

  GetStdHandle

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetConsoleCP

  GetConsoleMode

  HeapSetInformation

  GetVersion

  HeapCreate

  HeapDestroy

  GetACP

  GetOEMCP

  IsValidCodePage

  FlsGetValue

  FlsFree

  FlsAlloc

  GetModuleFileNameA

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  GetTickCount

  GetCurrentProcessId

  HeapReAlloc

  advapi32

  CryptReleaseContext

  CryptAcquireContextA

  CryptGenRandom

  oleaut32

  SafeArrayDestroy

  SysFreeString

  SysAllocString

  SafeArrayPutElement

  SafeArrayGetUBound

  SafeArrayGetElement

  VariantInit

  VariantCopy

  VariantClear

  SafeArrayGetLBound

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayCreateVector

  winmm

  timeGetTime

  mscoree

  CorBindToRuntimeEx

  Exports

  Exports

  P0

  Sections

  .text

  Size: 482KB - Virtual size: 482KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 143KB - Virtual size: 142KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 42KB - Virtual size: 56KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  data

  Size: 16KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 436B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/Sh4lltear.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 728KB - Virtual size: 727KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 202KB - Virtual size: 202KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/wscadminui.exe

  .exe windows:10 windows x86 arch:x86

  3d14ff3aed50fb9c7612f737f4a41021

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  wscadminui.pdb

  Imports

  msvcrt

  _controlfp

  __setusermatherr

  _initterm

  _except_handler4_common

  ?terminate@@YAXXZ

  __p__fmode

  _cexit

  _exit

  exit

  __set_app_type

  __wgetmainargs

  _amsg_exit

  __p__commode

  _XcptFilter

  _wcsicmp

  wscapi

  wscLaunchAdminMakeDefaultUI

  kernel32

  GetCurrentProcess

  UnhandledExceptionFilter

  GetTickCount

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  GetModuleHandleW

  SetUnhandledExceptionFilter

  Sleep

  TerminateProcess

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .imrsiv

  Size: - Virtual size: 4B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 880B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 854B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 304B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/sysdll/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Netflix Checker v1 by Sh4lltear/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Developper\Contacts\Downloads\Desktop\xNet-master\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/Leaf.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Git\CSharp\Libs\Leaf.Net\obj\Release\Leaf.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 132KB - Virtual size: 131KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/NordVpn.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/README.txt
• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/Leaf.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Git\CSharp\Libs\Leaf.Net\obj\Release\Leaf.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 132KB - Virtual size: 131KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVPN Checker by Monacoa - [xRisky]/WebDriver/VPN.exe

  .exe windows:5 windows x86 arch:x86

  bf5a4aa99e5b160f8521cadd6bfe73b8

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  Imports

  kernel32

  RaiseException

  GetLastError

  MultiByteToWideChar

  lstrlenA

  InterlockedDecrement

  GetProcAddress

  LoadLibraryA

  FreeResource

  SizeofResource

  LockResource

  LoadResource

  FindResourceA

  GetModuleHandleA

  Module32Next

  CloseHandle

  Module32First

  CreateToolhelp32Snapshot

  GetCurrentProcessId

  SetEndOfFile

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  LCMapStringA

  GetLocaleInfoA

  HeapFree

  GetProcessHeap

  HeapAlloc

  GetCommandLineA

  HeapCreate

  VirtualFree

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  VirtualAlloc

  HeapReAlloc

  HeapSize

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetModuleHandleW

  Sleep

  ExitProcess

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  WideCharToMultiByte

  GetConsoleCP

  GetConsoleMode

  ReadFile

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  InterlockedIncrement

  SetLastError

  GetCurrentThreadId

  FlushFileBuffers

  SetFilePointer

  SetHandleCount

  GetFileType

  GetStartupInfoA

  RtlUnwind

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetTickCount

  GetSystemTimeAsFileTime

  InitializeCriticalSectionAndSpinCount

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  SetStdHandle

  CreateFileA

  ole32

  OleInitialize

  oleaut32

  SafeArrayCreate

  SafeArrayAccessData

  SafeArrayUnaccessData

  SafeArrayDestroy

  SafeArrayCreateVector

  VariantClear

  VariantInit

  SysFreeString

  SysAllocString

  Sections

  .text

  Size: 102KB - Virtual size: 101KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 27KB - Virtual size: 27KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 171KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/NordVpn Checker Account By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/X-KILLER Serv.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 551KB - Virtual size: 551KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 37KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/bin/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/NordVpn Checker Account By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/CompiledGatheD.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  k(|"|

  Size: 373KB - Virtual size: 372KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 147KB - Virtual size: 146KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 295KB - Virtual size: 295KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/D3DCompiler_38.dll

  .dll windows:6 windows x86 arch:x86

  876f2e4dfac14ab805dcdb2d1452c596

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:0f:78:4d:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  23/08/2007, 00:23

  Not After

  23/02/2009, 00:33

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Signer

  Actual PE Digest

  1f:a5:ae:28:8d:5e:a5:f6:cf:1e:ae:47:92:d3:4d:c6:24:28:c8:e7

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D3DCompiler_38.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _unlock

  __dllonexit

  _lock

  _onexit

  isspace

  _amsg_exit

  _initterm

  _XcptFilter

  _CxxThrowException

  memset

  memcpy

  _strdup

  isxdigit

  atof

  modf

  isalnum

  _isnan

  ceil

  _finite

  _clearfp

  _controlfp

  strrchr

  strncmp

  _fpclass

  _strnicmp

  _purecall

  setlocale

  _stricmp

  toupper

  isdigit

  isalpha

  tolower

  atoi

  qsort

  memmove

  getenv

  malloc

  free

  sscanf

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  strchr

  _vsnprintf

  __CxxFrameHandler

  strstr

  floor

  _CIfmod

  _CItanh

  _CItan

  _CIsinh

  _CIsin

  _CIlog

  _CIpow

  _CIexp

  _CIsqrt

  _CIcosh

  _CIcos

  _CIatan2

  _CIatan

  _CIasin

  _CIacos

  gdi32

  DeleteObject

  kernel32

  GetCurrentProcess

  TerminateProcess

  GetSystemTimeAsFileTime

  GetCurrentProcessId

  GetCurrentThreadId

  GetTickCount

  QueryPerformanceCounter

  RtlUnwind

  UnmapViewOfFile

  CloseHandle

  FreeLibrary

  DeleteCriticalSection

  InitializeCriticalSection

  UnhandledExceptionFilter

  GetFullPathNameA

  OutputDebugStringA

  MultiByteToWideChar

  GetModuleHandleA

  LoadLibraryA

  lstrcmpiA

  TlsFree

  TlsAlloc

  InterlockedExchange

  Sleep

  TlsSetValue

  InterlockedCompareExchange

  TlsGetValue

  GetVersion

  GetSystemInfo

  GetProcAddress

  VirtualAlloc

  DisableThreadLibraryCalls

  VirtualFree

  SetUnhandledExceptionFilter

  Exports

  Exports

  D3DCompileFromMemory

  D3DDisassembleCode

  D3DDisassembleEffect

  D3DGetCodeDebugInfo

  D3DGetInputAndOutputSignatureBlob

  D3DGetInputSignatureBlob

  D3DGetOutputSignatureBlob

  D3DPreprocessFromMemory

  D3DReflectCode

  D3DReturnFailure1

  DebugSetMute

  Sections

  .text

  Size: 1.4MB - Virtual size: 1.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 960B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/bootcfg.exe

  .exe windows:10 windows x86 arch:x86

  1326f3c4127b0b966c0872341e0a5a17

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  bootcfg.pdb

  Imports

  msvcrt

  _memicmp

  fflush

  __iob_func

  fclose

  wcstok

  _wchmod

  _errno

  wcstod

  _except_handler4_common

  _controlfp

  ?terminate@@YAXXZ

  _initterm

  __setusermatherr

  __p__fmode

  _cexit

  _exit

  exit

  wcstol

  wcstoul

  _fileno

  __set_app_type

  __wgetmainargs

  _amsg_exit

  _get_osfhandle

  fprintf

  __p__commode

  _XcptFilter

  wcsncpy_s

  wcsrchr

  _ltow

  wcsstr

  _wfopen

  _itow

  _vsnwprintf

  wcschr

  memset

  api-ms-win-core-registry-l1-1-0

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  api-ms-win-core-privateprofile-l1-1-0

  GetPrivateProfileStringW

  GetPrivateProfileSectionW

  WritePrivateProfileStringW

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-registry-l2-1-0

  RegConnectRegistryW

  api-ms-win-core-shlwapi-obsolete-l1-1-0

  StrChrIW

  StrStrW

  StrCmpNW

  StrChrW

  StrRChrW

  StrStrIW

  api-ms-win-core-file-l1-1-0

  SetFileAttributesW

  GetFileAttributesW

  ReadFile

  CreateFileW

  GetFileType

  GetFileSize

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  HeapReAlloc

  HeapValidate

  GetProcessHeap

  HeapSetInformation

  HeapSize

  api-ms-win-core-privateprofile-l1-1-1

  WritePrivateProfileSectionW

  api-ms-win-core-string-l2-1-0

  CharLowerW

  CharUpperW

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  GetCurrentProcess

  TerminateProcess

  ExitProcess

  GetCurrentThreadId

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameW

  GetModuleHandleW

  LoadStringW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  GetComputerNameExW

  mpr

  WNetCancelConnection2W

  WNetGetLastErrorW

  WNetAddConnection2W

  netapi32

  NetServerGetInfo

  NetApiBufferFree

  ws2_32

  WSAGetLastError

  GetAddrInfoW

  GetNameInfoW

  FreeAddrInfoW

  WSAStartup

  WSACleanup

  api-ms-win-core-datetime-l1-1-0

  GetTimeFormatW

  api-ms-win-core-string-obsolete-l1-1-0

  lstrlenW

  lstrlenA

  api-ms-win-core-localization-l1-2-0

  SetThreadUILanguage

  GetThreadLocale

  FormatMessageW

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-sysinfo-l1-2-0

  VerSetConditionMask

  ntdll

  RtlVerifyVersionInfo

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  CompareStringW

  MultiByteToWideChar

  api-ms-win-core-console-l1-1-0

  SetConsoleMode

  ReadConsoleW

  GetConsoleOutputCP

  GetConsoleMode

  WriteConsoleW

  api-ms-win-core-processenvironment-l1-1-0

  GetStdHandle

  api-ms-win-core-localization-obsolete-l1-2-0

  CompareStringA

  api-ms-win-core-timezone-l1-1-0

  FileTimeToSystemTime

  api-ms-win-security-base-l1-1-0

  AllocateAndInitializeSid

  CheckTokenMembership

  FreeSid

  sspicli

  GetUserNameExW

  api-ms-win-core-version-l1-1-0

  GetFileVersionInfoExW

  GetFileVersionInfoSizeExW

  VerQueryValueW

  Sections

  .text

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/mfc70enu.dll

  .dll windows:4 windows x86 arch:x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 48KB - Virtual size: 45KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/msstdfmt.dll

  .dll regsvr32 windows:4 windows x86 arch:x86

  05d82c1b35d3ca52ca25a3997ff97720

  
  

  Code Sign

  33:00:00:00:2b:39:32:48:c1:b2:c9:48:f3:00:00:00:00:00:2b

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/09/2012, 21:12

  Not After

  04/12/2013, 21:12

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:C0F4-3086-DEF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:00:b0:11:af:0a:8b:d0:3b:9f:dd:00:01:00:00:00:b0

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  24/01/2013, 22:33

  Not After

  24/04/2014, 22:33

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  18:00:49:7b:95:e1:fa:ac:d8:2c:46:92:c6:d8:45:3a:c2:dd:56:b1

  Signer

  Actual PE Digest

  18:00:49:7b:95:e1:fa:ac:d8:2c:46:92:c6:d8:45:3a:c2:dd:56:b1

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_DLL

  Imports

  kernel32

  DeleteCriticalSection

  DisableThreadLibraryCalls

  InitializeCriticalSection

  GetVersion

  GetProcAddress

  GetFileAttributesA

  GetModuleFileNameA

  InterlockedIncrement

  InterlockedDecrement

  FreeLibrary

  LoadLibraryA

  GetLastError

  LockResource

  LoadResource

  FindResourceA

  GetModuleHandleA

  lstrcmpW

  CompareStringW

  MultiByteToWideChar

  GetLocaleInfoW

  IsDBCSLeadByte

  EnterCriticalSection

  EnumSystemLocalesA

  LeaveCriticalSection

  EnumDateFormatsA

  CompareStringA

  EnumTimeFormatsA

  lstrlenA

  lstrcmpA

  lstrlenW

  WideCharToMultiByte

  lstrcmpiA

  GetSystemTime

  GetLocaleInfoA

  HeapReAlloc

  HeapFree

  GetThreadLocale

  GetProcessHeap

  GetWindowsDirectoryA

  HeapAlloc

  user32

  CallWindowProcA

  PtInRect

  GetFocus

  ReleaseCapture

  SetCapture

  GetCapture

  InvalidateRect

  ScrollWindowEx

  EnableWindow

  GetDlgItem

  SetWindowRgn

  SendMessageA

  SetDlgItemTextA

  ShowWindow

  SetParent

  SetWindowLongA

  CharNextA

  GetDC

  ReleaseDC

  wsprintfA

  UnregisterClassA

  DestroyWindow

  GetSystemMetrics

  IntersectRect

  EqualRect

  OffsetRect

  ClientToScreen

  IsWindow

  GetActiveWindow

  MoveWindow

  SetFocus

  BeginPaint

  GetClientRect

  EndPaint

  GetWindowRect

  DefWindowProcA

  RegisterClassA

  CreateWindowExA

  wsprintfW

  CreateDialogIndirectParamA

  GetParent

  GetWindowLongA

  GetKeyState

  IsChild

  IsWindowEnabled

  GetNextDlgTabItem

  GetWindow

  IsDialogMessageA

  WinHelpA

  SendDlgItemMessageA

  SetWindowPos

  GetDlgItemTextA

  IsDlgButtonChecked

  GetDlgItemInt

  MessageBoxA

  LoadStringA

  SetDlgItemInt

  IsWindowVisible

  ole32

  CoCreateInstance

  CreateStreamOnHGlobal

  CoTaskMemFree

  CoTaskMemAlloc

  CreateOleAdviseHolder

  advapi32

  RegDeleteValueA

  RegCloseKey

  RegSetValueExA

  RegCreateKeyExA

  RegOpenKeyExA

  RegDeleteKeyA

  RegEnumKeyExA

  RegQueryValueExA

  oleaut32

  CreateErrorInfo

  SetErrorInfo

  LoadRegTypeLi

  LoadTypeLibEx

  UnRegisterTypeLi

  LoadTypeLi

  RegisterTypeLi

  SystemTimeToVariantTime

  OleLoadPicture

  SafeArrayGetDim

  SafeArrayGetLBound

  SafeArrayGetUBound

  SafeArrayCreateVector

  SafeArrayAccessData

  SafeArrayUnaccessData

  SafeArrayDestroy

  VariantChangeType

  VariantChangeTypeEx

  SysReAllocStringLen

  SysAllocStringLen

  VariantInit

  VariantCopy

  SysAllocString

  SysStringLen

  SysFreeString

  VariantClear

  OleCreatePropertyFrame

  gdi32

  GetDeviceCaps

  CreateRectRgnIndirect

  GetViewportExtEx

  GetWindowExtEx

  LPtoDP

  DeleteDC

  SetMapMode

  SetViewportExtEx

  SetWindowExtEx

  SetViewportOrgEx

  SetWindowOrgEx

  CreateDCA

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 76KB - Virtual size: 74KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 8KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 16KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/scrnsave.scr

  .exe windows:10 windows x86 arch:x86

  4d46e014c69a115f410e9bab963e857f

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  scrnsave.pdb

  Imports

  advapi32

  EventUnregister

  EventSetInformation

  EventRegister

  EventWriteTransfer

  EventActivityIdControl

  kernel32

  GetModuleFileNameA

  InitOnceBeginInitialize

  CreateSemaphoreExW

  HeapFree

  SetLastError

  ReleaseSemaphore

  GetModuleHandleExW

  WaitForSingleObject

  GetCurrentThreadId

  ReleaseMutex

  FormatMessageW

  GetLastError

  GetModuleHandleW

  OutputDebugStringW

  InitOnceComplete

  AcquireSRWLockExclusive

  WaitForSingleObjectEx

  OpenSemaphoreW

  CloseHandle

  GetCommandLineW

  GetProcAddress

  CreateMutexExW

  GetCurrentProcessId

  GetProcessHeap

  DebugBreak

  IsDebuggerPresent

  HeapSetInformation

  GetVersionExW

  ReleaseSRWLockExclusive

  lstrlenW

  HeapAlloc

  gdi32

  GetClipBox

  GetStockObject

  user32

  PostQuitMessage

  SetCursor

  LoadCursorW

  TranslateMessage

  IsRectEmpty

  RegisterClassW

  DispatchMessageW

  ReleaseDC

  LoadStringW

  GetSystemMetrics

  CreateWindowExW

  GetDC

  PostMessageW

  DefWindowProcW

  GetMessageW

  GetActiveWindow

  GetCursorPos

  msvcrt

  _amsg_exit

  __getmainargs

  __set_app_type

  exit

  _exit

  _cexit

  __p__fmode

  __setusermatherr

  __p__commode

  __CxxFrameHandler3

  _lock

  _unlock

  __dllonexit

  _onexit

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _controlfp

  _except_handler4_common

  _XcptFilter

  _CxxThrowException

  _callnewh

  ?what@exception@@UBEPBDXZ

  ??1exception@@UAE@XZ

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  malloc

  free

  memcpy_s

  _vsnwprintf

  _initterm

  wcschr

  _wtoi

  memset

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  TerminateProcess

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  comctl32

  ord344

  Sections

  .text

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/wtsapi32.dll

  .dll windows:10 windows x86 arch:x86

  05de2f62058708c9549030bb966baf5c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Signer

  Actual PE Digest

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  wtsapi32.pdb

  Imports

  msvcrt

  memcpy

  free

  _except_handler4_common

  _initterm

  malloc

  memcpy_s

  _amsg_exit

  _XcptFilter

  _wcsupr

  swscanf

  memset

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  SetLastError

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetCurrentThreadId

  OpenThreadToken

  OpenProcessToken

  GetCurrentProcessId

  GetCurrentThread

  TerminateProcess

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  LocalReAlloc

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-file-l1-1-0

  ReadFile

  WriteFile

  api-ms-win-core-io-l1-1-1

  CancelIo

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObject

  api-ms-win-core-io-l1-1-0

  GetOverlappedResult

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExW

  RegCloseKey

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  ntdll

  RtlNtStatusToDosError

  RtlMultiByteToUnicodeN

  RtlUnicodeToMultiByteSize

  RtlUnicodeToMultiByteN

  RtlAdjustPrivilege

  NtDeviceIoControlFile

  NtWaitForSingleObject

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  IsInteractiveUserSession

  QueryActiveSession

  QueryUserToken

  RegisterUsertokenForNoWinlogon

  WTSCloseServer

  WTSConnectSessionA

  WTSConnectSessionW

  WTSCreateListenerA

  WTSCreateListenerW

  WTSDisconnectSession

  WTSEnableChildSessions

  WTSEnumerateListenersA

  WTSEnumerateListenersW

  WTSEnumerateProcessesA

  WTSEnumerateProcessesExA

  WTSEnumerateProcessesExW

  WTSEnumerateProcessesW

  WTSEnumerateServersA

  WTSEnumerateServersW

  WTSEnumerateSessionsA

  WTSEnumerateSessionsExA

  WTSEnumerateSessionsExW

  WTSEnumerateSessionsW

  WTSFreeMemory

  WTSFreeMemoryExA

  WTSFreeMemoryExW

  WTSGetChildSessionId

  WTSGetListenerSecurityA

  WTSGetListenerSecurityW

  WTSIsChildSessionsEnabled

  WTSLogoffSession

  WTSOpenServerA

  WTSOpenServerExA

  WTSOpenServerExW

  WTSOpenServerW

  WTSQueryListenerConfigA

  WTSQueryListenerConfigW

  WTSQuerySessionInformationA

  WTSQuerySessionInformationW

  WTSQueryUserConfigA

  WTSQueryUserConfigW

  WTSQueryUserToken

  WTSRegisterSessionNotification

  WTSRegisterSessionNotificationEx

  WTSSendMessageA

  WTSSendMessageW

  WTSSetListenerSecurityA

  WTSSetListenerSecurityW

  WTSSetRenderHint

  WTSSetSessionInformationA

  WTSSetSessionInformationW

  WTSSetUserConfigA

  WTSSetUserConfigW

  WTSShutdownSystem

  WTSStartRemoteControlSessionA

  WTSStartRemoteControlSessionW

  WTSStopRemoteControlSession

  WTSTerminateProcess

  WTSUnRegisterSessionNotification

  WTSUnRegisterSessionNotificationEx

  WTSVirtualChannelClose

  WTSVirtualChannelOpen

  WTSVirtualChannelOpenEx

  WTSVirtualChannelPurgeInput

  WTSVirtualChannelPurgeOutput

  WTSVirtualChannelQuery

  WTSVirtualChannelRead

  WTSVirtualChannelWrite

  WTSWaitSystemEvent

  Sections

  .text

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 872B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Origin Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 204KB - Virtual size: 204KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Origin Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/Origin Games Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Origin Games Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Origin Games Checker/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Origin Games Checker/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/bin/libeay32.dll

  .dll windows:4 windows x86 arch:x86

  9a8fb143a010f07506356c42d6154f05

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  wsock32

  recvfrom

  sendto

  bind

  listen

  accept

  ntohl

  inet_ntoa

  WSACancelBlockingCall

  WSACleanup

  WSAStartup

  gethostbyname

  getsockopt

  getservbyname

  ntohs

  htons

  htonl

  socket

  setsockopt

  connect

  send

  WSASetLastError

  recv

  WSAGetLastError

  shutdown

  closesocket

  gdi32

  CreateCompatibleDC

  GetDeviceCaps

  CreateCompatibleBitmap

  SelectObject

  GetObjectA

  BitBlt

  GetBitmapBits

  DeleteObject

  DeleteDC

  CreateDCA

  advapi32

  ReportEventA

  DeregisterEventSource

  RegisterEventSourceA

  user32

  MessageBoxA

  GetDesktopWindow

  GetProcessWindowStation

  GetUserObjectInformationW

  msvcr71

  _write

  _fileno

  _stat

  _chmod

  _getch

  strstr

  _read

  sprintf

  wcsstr

  _vsnprintf

  vfprintf

  _iob

  abort

  free

  realloc

  malloc

  memchr

  time

  localtime

  gmtime

  strncpy

  _errno

  memmove

  isxdigit

  isdigit

  fprintf

  _getpid

  fputs

  fclose

  fread

  fwrite

  fflush

  fopen

  _setmode

  ftell

  fseek

  fgets

  atoi

  perror

  qsort

  strcmp

  getenv

  strerror

  strchr

  isalnum

  isspace

  strncmp

  strtoul

  strrchr

  tolower

  isupper

  sscanf

  exit

  strtol

  signal

  printf

  _initterm

  _adjust_fdiv

  __CppXcptFilter

  _except_handler3

  __dllonexit

  _onexit

  kernel32

  SetLastError

  LoadLibraryA

  FreeLibrary

  FindClose

  GetProcAddress

  GetTickCount

  GetThreadTimes

  GetCurrentThread

  ExitProcess

  GetFileType

  GetVersion

  QueryPerformanceCounter

  GetCurrentProcessId

  GlobalMemoryStatus

  CloseHandle

  GetVersionExA

  FlushConsoleInputBuffer

  GetModuleHandleA

  GetCurrentThreadId

  FindNextFileA

  GetLastError

  FindFirstFileA

  GetStdHandle

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_cfbr_encrypt_block

  AES_ctr128_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  ASN1_ANY_it

  ASN1_BIT_STRING_asn1_meth

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_HEADER_free

  ASN1_HEADER_new

  ASN1_IA5STRING_asn1_meth

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_to_BN

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SEQUENCE_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_cmp

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_encode

  ASN1_STRING_free

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_check

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_to_generalizedtime

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_set

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_sign

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_pack_string

  ASN1_parse

  ASN1_parse_dump

  ASN1_primitive_free

  ASN1_primitive_new

  ASN1_put_eoc

  ASN1_put_object

  ASN1_seq_pack

  ASN1_seq_unpack

  ASN1_sign

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_template_d2i

  ASN1_template_free

  ASN1_template_i2d

  ASN1_template_new

  ASN1_unpack_string

  ASN1_verify

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_accept

  BIO_callback_ctrl

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_ex_data

  BIO_get_ex_new_index

  BIO_get_host_ip

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_gethostbyname

  BIO_gets

  BIO_indent

  BIO_int_ctrl

  BIO_new

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_mem

  BIO_s_null

  BIO_s_socket

  BIO_set

  BIO_set_cipher

  BIO_set_ex_data

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_cleanup

  BIO_sock_error

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_get_thread_id

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_new

  BN_BLINDING_set_flags

  BN_BLINDING_set_thread_id

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_init

  BN_CTX_new

  BN_CTX_start

  BN_GENCB_call

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  BN_GF2m_mod_exp_arr

  BN_GF2m_mod_inv

  BN_GF2m_mod_inv_arr

  BN_GF2m_mod_mul

  BN_GF2m_mod_mul_arr

  BN_GF2m_mod_solve_quad

  BN_GF2m_mod_solve_quad_arr

  BN_GF2m_mod_sqr

  BN_GF2m_mod_sqr_arr

  BN_GF2m_mod_sqrt

  BN_GF2m_mod_sqrt_arr

  BN_GF2m_poly2arr

  BN_MONT_CTX_copy

  BN_MONT_CTX_free

  BN_MONT_CTX_init

  BN_MONT_CTX_new

  BN_MONT_CTX_set

  BN_MONT_CTX_set_locked

  BN_RECP_CTX_free

  BN_RECP_CTX_init

  BN_RECP_CTX_new

  BN_RECP_CTX_set

  BN_add

  BN_add_word

  BN_bin2bn

  BN_bn2bin

  BN_bn2dec

  BN_bn2hex

  BN_bn2mpi

  BN_bntest_rand

  BN_clear

  BN_clear_bit

  BN_clear_free

  BN_cmp

  BN_copy

  BN_dec2bn

  BN_div

  BN_div_recp

  BN_div_word

  BN_dup

  BN_exp

  BN_free

  BN_from_montgomery

  BN_gcd

  BN_generate_prime

  BN_generate_prime_ex

  BN_get0_nist_prime_192

  BN_get0_nist_prime_224

  BN_get0_nist_prime_256

  BN_get0_nist_prime_384

  BN_get0_nist_prime_521

  BN_get_params

  BN_get_word

  BN_hex2bn

  BN_init

  BN_is_bit_set

  BN_is_prime

  BN_is_prime_ex

  BN_is_prime_fasttest

  BN_is_prime_fasttest_ex

  BN_kronecker

  BN_lshift

  BN_lshift1

  BN_mask_bits

  BN_mod_add

  BN_mod_add_quick

  BN_mod_exp

  BN_mod_exp2_mont

  BN_mod_exp_mont

  BN_mod_exp_mont_consttime

  BN_mod_exp_mont_word

  BN_mod_exp_recp

  BN_mod_exp_simple

  BN_mod_inverse

  BN_mod_lshift

  BN_mod_lshift1

  BN_mod_lshift1_quick

  BN_mod_lshift_quick

  BN_mod_mul

  BN_mod_mul_montgomery

  BN_mod_mul_reciprocal

  BN_mod_sqr

  BN_mod_sqrt

  BN_mod_sub

  BN_mod_sub_quick

  BN_mod_word

  BN_mpi2bn

  BN_mul

  BN_mul_word

  BN_new

  BN_nist_mod_192

  BN_nist_mod_224

  BN_nist_mod_256

  BN_nist_mod_384

  BN_nist_mod_521

  BN_nnmod

  BN_num_bits

  BN_num_bits_word

  BN_options

  BN_print

  BN_print_fp

  BN_pseudo_rand

  BN_pseudo_rand_range

  BN_rand

  BN_rand_range

  BN_reciprocal

  BN_rshift

  BN_rshift1

  BN_set_bit

  BN_set_negative

  BN_set_params

  BN_set_word

  BN_sqr

  BN_sub

  BN_sub_word

  BN_swap

  BN_to_ASN1_ENUMERATED

  BN_to_ASN1_INTEGER

  BN_uadd

  BN_ucmp

  BN_usub

  BN_value_one

  BUF_MEM_free

  BUF_MEM_grow

  BUF_MEM_grow_clean

  BUF_MEM_new

  BUF_memdup

  BUF_strdup

  BUF_strlcat

  BUF_strlcpy

  BUF_strndup

  CAST_cbc_encrypt

  CAST_cfb64_encrypt

  CAST_decrypt

  CAST_ecb_encrypt

  CAST_encrypt

  CAST_ofb64_encrypt

  CAST_set_key

  CBIGNUM_it

  CERTIFICATEPOLICIES_free

  CERTIFICATEPOLICIES_it

  CERTIFICATEPOLICIES_new

  COMP_CTX_free

  COMP_CTX_new

  COMP_compress_block

  COMP_expand_block

  COMP_rle

  COMP_zlib

  CONF_dump_bio

  CONF_dump_fp

  CONF_free

  CONF_get1_default_config_file

  CONF_get_number

  CONF_get_section

  CONF_get_string

  CONF_imodule_get_flags

  CONF_imodule_get_module

  CONF_imodule_get_name

  CONF_imodule_get_usr_data

  CONF_imodule_get_value

  CONF_imodule_set_flags

  CONF_imodule_set_usr_data

  CONF_load

  CONF_load_bio

  CONF_load_fp

  CONF_module_add

  CONF_module_get_usr_data

  CONF_module_set_usr_data

  CONF_modules_finish

  CONF_modules_free

  CONF_modules_load

  CONF_modules_load_file

  Sections

  .text

  Size: 628KB - Virtual size: 626KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 248KB - Virtual size: 247KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 60KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 44KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/bin/msvcr71.dll

  .dll windows:4 windows x86 arch:x86

  7acc8c379c768a1ecd81ec502ff5f33e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msvcr71.pdb

  Imports

  kernel32

  GetModuleFileNameA

  GetModuleFileNameW

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  TerminateProcess

  GetCurrentProcess

  WriteFile

  GetStdHandle

  GetCurrentThreadId

  GetCommandLineA

  GetVersionExA

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  CloseHandle

  GetLastError

  ResumeThread

  CreateThread

  TlsAlloc

  SetLastError

  GetCurrentThread

  TlsFree

  TlsSetValue

  TlsGetValue

  FindNextFileA

  FindFirstFileA

  FindClose

  FindNextFileW

  FindFirstFileW

  HeapAlloc

  HeapFree

  GetEnvironmentVariableA

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  IsBadWritePtr

  SetHandleCount

  GetFileType

  GetStartupInfoA

  GetACP

  GetOEMCP

  GetCPInfo

  LoadLibraryA

  MultiByteToWideChar

  GetCommandLineW

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  InitializeCriticalSection

  RtlUnwind

  UnhandledExceptionFilter

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  SetConsoleCtrlHandler

  InterlockedExchange

  VirtualQuery

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsValidCodePage

  GetLocaleInfoW

  GetTimeFormatA

  GetDateFormatA

  GetTimeZoneInformation

  HeapSize

  VirtualProtect

  GetSystemInfo

  FlushFileBuffers

  SetFilePointer

  SetStdHandle

  CompareStringA

  CompareStringW

  Sleep

  Beep

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDiskFreeSpaceA

  GetLogicalDrives

  SetErrorMode

  GetFileAttributesA

  GetCurrentDirectoryA

  SetCurrentDirectoryA

  SetFileAttributesA

  GetFullPathNameA

  GetDriveTypeA

  CreateDirectoryA

  RemoveDirectoryA

  DeleteFileA

  GetFileAttributesW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  DeleteFileW

  MoveFileW

  RemoveDirectoryW

  GetDriveTypeW

  MoveFileA

  RaiseException

  IsBadReadPtr

  SetUnhandledExceptionFilter

  IsBadCodePtr

  GetExitCodeProcess

  WaitForSingleObject

  FreeLibrary

  CreateProcessA

  CreateProcessW

  HeapValidate

  HeapCompact

  HeapWalk

  ReadConsoleA

  SetConsoleMode

  GetConsoleMode

  IsDBCSLeadByteEx

  GetConsoleCP

  ReadConsoleW

  SetEndOfFile

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  DuplicateHandle

  GetFileInformationByHandle

  PeekNamedPipe

  ReadConsoleInputA

  PeekConsoleInputA

  GetNumberOfConsoleInputEvents

  ReadConsoleInputW

  LockFile

  UnlockFile

  CreateFileA

  CreatePipe

  ReadFile

  CreateFileW

  SetFileTime

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  GetLocalTime

  SetLocalTime

  Exports

  Exports

  $I10_OUTPUT

  ??0__non_rtti_object@@QAE@ABV0@@Z

  ??0__non_rtti_object@@QAE@PBD@Z

  ??0bad_cast@@AAE@PBQBD@Z

  ??0bad_cast@@QAE@ABQBD@Z

  ??0bad_cast@@QAE@ABV0@@Z

  ??0bad_cast@@QAE@PBD@Z

  ??0bad_typeid@@QAE@ABV0@@Z

  ??0bad_typeid@@QAE@PBD@Z

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1__non_rtti_object@@UAE@XZ

  ??1bad_cast@@UAE@XZ

  ??1bad_typeid@@UAE@XZ

  ??1exception@@UAE@XZ

  ??1type_info@@UAE@XZ

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??4__non_rtti_object@@QAEAAV0@ABV0@@Z

  ??4bad_cast@@QAEAAV0@ABV0@@Z

  ??4bad_typeid@@QAEAAV0@ABV0@@Z

  ??4exception@@QAEAAV0@ABV0@@Z

  ??8type_info@@QBEHABV0@@Z

  ??9type_info@@QBEHABV0@@Z

  ??_7__non_rtti_object@@6B@

  ??_7bad_cast@@6B@

  ??_7bad_typeid@@6B@

  ??_7exception@@6B@

  ??_Fbad_cast@@QAEXXZ

  ??_Fbad_typeid@@QAEXXZ

  ??_U@YAPAXI@Z

  ??_V@YAXPAX@Z

  ?_query_new_handler@@YAP6AHI@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?before@type_info@@QBEHABV1@@Z

  ?name@type_info@@QBEPBDXZ

  ?raw_name@type_info@@QBEPBDXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?swprintf@@YAHPAGIPBGZZ

  ?swprintf@@YAHPA_WIPB_WZZ

  ?terminate@@YAXXZ

  ?unexpected@@YAXXZ

  ?vswprintf@@YAHPAGIPBGPAD@Z

  ?vswprintf@@YAHPA_WIPB_WPAD@Z

  ?what@exception@@UBEPBDXZ

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _CRT_RTC_INIT

  _CxxThrowException

  _EH_prolog

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _Strftime

  _XcptFilter

  __CppXcptFilter

  __CxxCallUnwindDtor

  __CxxCallUnwindVecDtor

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __buffer_overrun

  __crtCompareStringA

  __crtCompareStringW

  __crtGetLocaleInfoW

  __crtGetStringTypeW

  __crtLCMapStringA

  __crtLCMapStringW

  __dllonexit

  __doserrno

  __fpecode

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __lc_clike

  __lc_codepage

  __lc_collate_cp

  __lc_handle

  __lconv_init

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__amblksiz

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fileinfo

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__osver

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__winmajor

  __p__winminor

  __p__winver

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __security_error_handler

  __set_app_type

  __set_buffer_overrun_handler

  __setlc_active

  __setusermatherr

  __threadhandle

  __threadid

  __toascii

  __unDName

  __unDNameEx

  __uncaught_exception

  __unguarded_readlc_active

  __wargv

  __wcserror

  __wgetmainargs

  __winitenv

  _abnormal_termination

  _access

  _acmdln

  _adj_fdiv_m16i

  _adj_fdiv_m32

  _adj_fdiv_m32i

  _adj_fdiv_m64

  _adj_fdiv_r

  _adj_fdivr_m16i

  _adj_fdivr_m32

  _adj_fdivr_m32i

  _adj_fdivr_m64

  _adj_fpatan

  _adj_fprem

  _adj_fprem1

  _adj_fptan

  _adjust_fdiv

  _aexit_rtn

  _aligned_free

  _aligned_malloc

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_realloc

  _amsg_exit

  _assert

  _atodbl

  _atoi64

  _atoldbl

  _beep

  _beginthread

  _beginthreadex

  _c_exit

  _cabs

  _callnewh

  _cexit

  _cgets

  _cgetws

  _chdir

  _chdrive

  _chgsign

  _chkesp

  _chmod

  _chsize

  _clearfp

  _close

  _commit

  _commode

  _control87

  _controlfp

  _copysign

  _cprintf

  _cputs

  _cputws

  _creat

  _cscanf

  _ctime64

  _cwait

  _cwprintf

  _cwscanf

  _daylight

  _dstbias

  _dup

  _dup2

  _ecvt

  _endthread

  _endthreadex

  _environ

  _eof

  _errno

  _except_handler2

  _except_handler3

  _execl

  _execle

  _execlp

  _execlpe

  _execv

  _execve

  _execvp

  _execvpe

  _exit

  _expand

  _fcloseall

  _fcvt

  _fdopen

  _fgetchar

  _fgetwchar

  _filbuf

  _fileinfo

  _filelength

  _filelengthi64

  _fileno

  _findclose

  _findfirst

  _findfirst64

  _findfirsti64

  _findnext

  _findnext64

  _findnexti64

  _finite

  _flsbuf

  _flushall

  _fmode

  _fpclass

  _fpieee_flt

  _fpreset

  _fputchar

  _fputwchar

  _fsopen

  _fstat

  _fstat64

  _fstati64

  _ftime

  _ftime64

  _ftol

  _fullpath

  _futime

  _futime64

  _gcvt

  _get_heap_handle

  _get_osfhandle

  _get_sbh_threshold

  _getch

  _getche

  _getcwd

  _getdcwd

  _getdiskfree

  _getdllprocaddr

  _getdrive

  _getdrives

  _getmaxstdio

  _getmbcp

  _getpid

  _getsystime

  _getw

  _getwch

  _getwche

  _getws

  _global_unwind2

  _gmtime64

  _heapadd

  _heapchk

  _heapmin

  _heapset

  _heapused

  _heapwalk

  _hypot

  _i64toa

  _i64tow

  _initterm

  _inp

  _inpd

  _inpw

  _iob

  _isatty

  _isctype

  _ismbbalnum

  _ismbbalpha

  _ismbbgraph

  _ismbbkalnum

  _ismbbkana

  _ismbbkprint

  _ismbbkpunct

  _ismbblead

  _ismbbprint

  _ismbbpunct

  _ismbbtrail

  _ismbcalnum

  _ismbcalpha

  _ismbcdigit

  _ismbcgraph

  _ismbchira

  _ismbckata

  _ismbcl0

  _ismbcl1

  _ismbcl2

  _ismbclegal

  _ismbclower

  _ismbcprint

  _ismbcpunct

  _ismbcspace

  _ismbcsymbol

  _ismbcupper

  _ismbslead

  _ismbstrail

  _isnan

  _itoa

  _itow

  _j0

  _j1

  _jn

  _kbhit

  _lfind

  _loaddll

  _local_unwind2

  _localtime64

  _lock

  _locking

  _logb

  _longjmpex

  _lrotl

  _lrotr

  _lsearch

  _lseek

  _lseeki64

  _ltoa

  _ltow

  _makepath

  _mbbtombc

  _mbbtype

  _mbcasemap

  _mbccpy

  _mbcjistojms

  _mbcjmstojis

  _mbclen

  _mbctohira

  _mbctokata

  _mbctolower

  _mbctombb

  _mbctoupper

  _mbctype

  _mbsbtype

  _mbscat

  _mbschr

  _mbscmp

  _mbscoll

  _mbscpy

  _mbscspn

  _mbsdec

  _mbsdup

  _mbsicmp

  _mbsicoll

  _mbsinc

  _mbslen

  _mbslwr

  _mbsnbcat

  _mbsnbcmp

  _mbsnbcnt

  _mbsnbcoll

  _mbsnbcpy

  _mbsnbicmp

  _mbsnbicoll

  _mbsnbset

  _mbsncat

  _mbsnccnt

  _mbsncmp

  _mbsncoll

  _mbsncpy

  _mbsnextc

  _mbsnicmp

  _mbsnicoll

  _mbsninc

  _mbsnset

  _mbspbrk

  _mbsrchr

  _mbsrev

  _mbsset

  _mbsspn

  _mbsspnp

  _mbsstr

  _mbstok

  _mbstrlen

  _mbsupr

  _memccpy

  _memicmp

  _mkdir

  _mktemp

  _mktime64

  _msize

  _nextafter

  _onexit

  _open

  _open_osfhandle

  _osplatform

  _osver

  _outp

  _outpd

  _outpw

  _pclose

  _pctype

  _pgmptr

  _pipe

  _popen

  _purecall

  _putch

  _putenv

  _putw

  _putwch

  _putws

  _pwctype

  _read

  _resetstkoflw

  _rmdir

  _rmtmp

  _rotl

  _rotr

  _safe_fdiv

  _safe_fdivr

  _safe_fprem

  _safe_fprem1

  _scalb

  _scprintf

  _scwprintf

  _searchenv

  _seh_longjmp_unwind

  _set_SSE2_enable

  _set_error_mode

  _set_purecall_handler

  _set_sbh_threshold

  _set_security_error_handler

  _seterrormode

  _setjmp

  _setjmp3

  _setmaxstdio

  _setmbcp

  _setmode

  _setsystime

  _sleep

  _snprintf

  _snscanf

  _snwprintf

  _snwscanf

  _sopen

  _spawnl

  _spawnle

  _spawnlp

  _spawnlpe

  _spawnv

  _spawnve

  _spawnvp

  Sections

  .text

  Size: 228KB - Virtual size: 226KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 68KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 24KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/bin/ssleay32.dll

  .dll windows:4 windows x86 arch:x86

  ec3469e6569d715ba5e5e1375e9767e9

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  libeay32

  ord1654

  ord903

  ord252

  ord2206

  ord857

  ord176

  ord641

  ord2821

  ord281

  ord290

  ord654

  ord181

  ord188

  ord269

  ord3109

  ord2630

  ord910

  ord2411

  ord754

  ord490

  ord222

  ord167

  ord168

  ord169

  ord85

  ord52

  ord2201

  ord289

  ord493

  ord911

  ord464

  ord3245

  ord354

  ord2936

  ord3244

  ord323

  ord3067

  ord2894

  ord961

  ord89

  ord109

  ord202

  ord3239

  ord866

  ord110

  ord3422

  ord2929

  ord3644

  ord3570

  ord2578

  ord111

  ord3010

  ord3480

  ord2924

  ord3459

  ord3512

  ord3608

  ord3575

  ord3663

  ord123

  ord201

  ord118

  ord3666

  ord219

  ord498

  ord285

  ord635

  ord912

  ord909

  ord3724

  ord313

  ord495

  ord120

  ord151

  ord3178

  ord3695

  ord3550

  ord3418

  ord203

  ord128

  ord31

  ord830

  ord727

  ord2760

  ord282

  ord572

  ord3719

  ord216

  ord206

  ord497

  ord3682

  ord2877

  ord3711

  ord205

  ord486

  ord484

  ord763

  ord577

  ord907

  ord87

  ord481

  ord3729

  ord333

  ord2915

  ord256

  ord1096

  ord1097

  ord2589

  ord1145

  ord1144

  ord1081

  ord2292

  ord622

  ord627

  ord657

  ord653

  ord1653

  ord2784

  ord965

  ord964

  ord2572

  ord2747

  ord3704

  ord3758

  ord3767

  ord3647

  ord3766

  ord3365

  ord3460

  ord3454

  ord3754

  ord3394

  ord187

  ord897

  ord3414

  ord3495

  ord67

  ord65

  ord53

  ord78

  ord98

  ord3559

  ord3399

  ord636

  ord914

  ord626

  ord890

  ord1004

  ord3527

  ord364

  ord1010

  ord2051

  ord58

  ord66

  ord630

  ord628

  ord1041

  ord1007

  ord1005

  ord1027

  ord3378

  ord3437

  ord316

  ord629

  ord892

  ord74

  ord248

  ord1655

  ord575

  ord1025

  ord246

  ord1100

  ord679

  ord2524

  ord3595

  ord1023

  ord3505

  ord401

  ord93

  ord3396

  ord3657

  ord887

  ord889

  ord891

  ord315

  ord1147

  ord189

  ord314

  ord956

  ord280

  ord2181

  ord399

  ord748

  ord279

  ord283

  ord400

  ord751

  ord750

  ord774

  ord3205

  ord37

  ord35

  ord824

  ord822

  ord8

  ord1091

  ord3700

  ord3623

  ord32

  ord718

  ord7

  ord716

  ord703

  ord680

  ord86

  ord88

  ord1101

  ord293

  ord322

  ord2996

  ord3155

  ord2927

  ord325

  ord329

  ord318

  ord304

  ord292

  ord299

  ord955

  ord2252

  ord91

  ord247

  ord904

  ord901

  ord623

  ord905

  msvcr71

  _iob

  _errno

  free

  _initterm

  malloc

  _adjust_fdiv

  __CppXcptFilter

  _except_handler3

  __dllonexit

  _onexit

  strncmp

  memmove

  time

  fprintf

  kernel32

  GetLastError

  DisableThreadLibraryCalls

  SetLastError

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLSv1_client_method

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  SSL_CIPHER_description

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_name

  SSL_CIPHER_get_version

  SSL_COMP_add_compression_method

  SSL_COMP_get_compression_methods

  SSL_COMP_get_name

  SSL_CTX_add_client_CA

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_ctrl

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get_cert_store

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_ex_data

  SSL_CTX_get_ex_new_index

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sessions

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_msg_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_session_id_context

  SSL_CTX_set_ssl_version

  SSL_CTX_set_timeout

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_tmp_ecdh_callback

  SSL_CTX_set_tmp_rsa_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_SESSION_cmp

  SSL_SESSION_free

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_ex_new_index

  SSL_SESSION_get_id

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_hash

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_accept

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_callback_ctrl

  SSL_check_private_key

  SSL_clear

  SSL_connect

  SSL_copy_session_id

  SSL_ctrl

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_free

  SSL_get1_session

  SSL_get_SSL_CTX

  SSL_get_certificate

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_timeout

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_ex_new_index

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_privatekey

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_rfd

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shutdown

  SSL_get_ssl_method

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_library_init

  SSL_load_client_CA_file

  SSL_load_error_strings

  SSL_new

  SSL_peek

  SSL_pending

  SSL_read

  SSL_renegotiate

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_set_accept_state

  SSL_set_bio

  SSL_set_cipher_list

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_info_callback

  SSL_set_msg_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_rfd

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_shutdown

  SSL_set_ssl_method

  SSL_set_tmp_dh_callback

  SSL_set_tmp_ecdh_callback

  SSL_set_tmp_rsa_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_state

  SSL_state_string

  SSL_state_string_long

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_file

  SSL_version

  SSL_want

  SSL_write

  SSLv23_client_method

  SSLv23_method

  SSLv23_server_method

  SSLv2_client_method

  SSLv2_method

  SSLv2_server_method

  SSLv3_client_method

  SSLv3_method

  SSLv3_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  ssl2_ciphers

  ssl3_ciphers

  Sections

  .text

  Size: 132KB - Virtual size: 129KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 29KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/bin/sysdll.exe

  .exe windows:5 windows x86 arch:x86

  44551127c4361d5acc4b49d9b9355811

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Imports

  oleaut32

  SysFreeString

  SysReAllocStringLen

  SysAllocStringLen

  GetErrorInfo

  SysFreeString

  SafeArrayPtrOfIndex

  SafeArrayGetUBound

  SafeArrayGetLBound

  SafeArrayCreate

  VariantChangeType

  VariantCopy

  VariantClear

  VariantInit

  advapi32

  RegQueryValueExW

  RegOpenKeyExW

  RegCloseKey

  RegUnLoadKeyW

  RegSetValueExW

  RegSaveKeyW

  RegRestoreKeyW

  RegReplaceKeyW

  RegQueryValueExW

  RegQueryInfoKeyW

  RegOpenKeyExW

  RegLoadKeyW

  RegFlushKey

  RegEnumValueW

  RegEnumKeyExW

  RegDeleteValueW

  RegDeleteKeyW

  RegCreateKeyExW

  RegConnectRegistryW

  RegCloseKey

  user32

  LoadStringW

  MessageBoxA

  CharNextW

  CreateWindowExW

  WindowFromPoint

  WindowFromDC

  WaitMessage

  UpdateWindow

  UnregisterClassW

  UnhookWindowsHookEx

  TranslateMessage

  TranslateMDISysAccel

  TrackPopupMenu

  SystemParametersInfoW

  ShowWindow

  ShowScrollBar

  ShowOwnedPopups

  SetWindowRgn

  SetWindowsHookExW

  SetWindowTextW

  SetWindowPos

  SetWindowPlacement

  SetWindowLongW

  SetTimer

  SetScrollRange

  SetScrollPos

  SetScrollInfo

  SetRect

  SetPropW

  SetParent

  SetMenuItemInfoW

  SetMenu

  SetForegroundWindow

  SetFocus

  SetCursorPos

  SetCursor

  SetClipboardData

  SetClassLongW

  SetCapture

  SetActiveWindow

  SendMessageA

  SendMessageW

  ScrollWindow

  ScreenToClient

  RemovePropW

  RemoveMenu

  ReleaseDC

  ReleaseCapture

  RegisterWindowMessageW

  RegisterClipboardFormatW

  RegisterClassW

  RedrawWindow

  PtInRect

  PostQuitMessage

  PostMessageW

  PeekMessageA

  PeekMessageW

  OpenClipboard

  OffsetRect

  MsgWaitForMultipleObjectsEx

  MsgWaitForMultipleObjects

  MoveWindow

  MessageBoxIndirectW

  MessageBoxA

  MessageBoxW

  MessageBeep

  MapWindowPoints

  MapVirtualKeyW

  LoadStringW

  LoadKeyboardLayoutW

  LoadIconW

  LoadCursorW

  LoadBitmapW

  KillTimer

  IsZoomed

  IsWindowVisible

  IsWindowUnicode

  IsWindowEnabled

  IsWindow

  IsRectEmpty

  IsIconic

  IsDialogMessageA

  IsDialogMessageW

  IsChild

  InvalidateRect

  IntersectRect

  InsertMenuItemW

  InsertMenuW

  InflateRect

  GetWindowThreadProcessId

  GetWindowTextLengthW

  GetWindowTextW

  GetWindowRect

  GetWindowPlacement

  GetWindowLongW

  GetWindowDC

  GetTopWindow

  GetSystemMetrics

  GetSystemMenu

  GetSysColorBrush

  GetSysColor

  GetSubMenu

  GetScrollRange

  GetScrollPos

  GetScrollInfo

  GetPropW

  GetParent

  GetWindow

  GetMessagePos

  GetMessageExtraInfo

  GetMenuStringW

  GetMenuState

  GetMenuItemRect

  GetMenuItemInfoW

  GetMenuItemID

  GetMenuItemCount

  GetMenu

  GetLastActivePopup

  GetKeyboardState

  GetKeyboardLayoutNameW

  GetKeyboardLayoutList

  GetKeyboardLayout

  GetKeyState

  GetKeyNameTextW

  GetIconInfo

  GetForegroundWindow

  GetFocus

  GetDlgItem

  GetDlgCtrlID

  GetDesktopWindow

  GetDCEx

  GetDC

  GetCursorPos

  GetCursor

  GetClipboardData

  GetClientRect

  GetClassNameW

  GetClassLongW

  GetClassInfoW

  GetCapture

  GetActiveWindow

  FrameRect

  FindWindowExW

  FindWindowW

  FillRect

  EnumWindows

  EnumThreadWindows

  EnumChildWindows

  EndPaint

  EnableWindow

  EnableScrollBar

  EnableMenuItem

  EmptyClipboard

  DrawTextExW

  DrawTextW

  DrawMenuBar

  DrawIconEx

  DrawIcon

  DrawFrameControl

  DrawFocusRect

  DrawEdge

  DispatchMessageA

  DispatchMessageW

  DestroyWindow

  DestroyMenu

  DestroyIcon

  DestroyCursor

  DeleteMenu

  DefWindowProcW

  DefMDIChildProcW

  DefFrameProcW

  CreatePopupMenu

  CreateMenu

  CreateIconIndirect

  CreateIcon

  CreateAcceleratorTableW

  CopyRect

  CopyImage

  CopyIcon

  CloseClipboard

  ClientToScreen

  ChildWindowFromPoint

  CheckMenuItem

  CharUpperBuffW

  CharUpperW

  CharNextW

  CharLowerBuffW

  CharLowerW

  CallWindowProcW

  CallNextHookEx

  BeginPaint

  AdjustWindowRectEx

  ActivateKeyboardLayout

  kernel32

  lstrcmpiA

  LoadLibraryA

  LocalFree

  LocalAlloc

  GetACP

  Sleep

  VirtualFree

  VirtualAlloc

  GetSystemInfo

  GetTickCount

  QueryPerformanceCounter

  GetVersion

  GetCurrentThreadId

  VirtualQuery

  WideCharToMultiByte

  MultiByteToWideChar

  lstrlenW

  lstrcpynW

  LoadLibraryExW

  IsValidLocale

  GetSystemDefaultUILanguage

  GetStartupInfoA

  GetProcAddress

  GetModuleHandleW

  GetModuleFileNameW

  GetUserDefaultUILanguage

  GetLocaleInfoW

  GetLastError

  GetCommandLineW

  FreeLibrary

  FindFirstFileW

  FindClose

  ExitProcess

  ExitThread

  CreateThread

  CompareStringW

  WriteFile

  UnhandledExceptionFilter

  SetFilePointer

  SetEndOfFile

  RtlUnwind

  ReadFile

  RaiseException

  GetStdHandle

  GetFileSize

  GetFileType

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  CreateFileW

  CloseHandle

  TlsSetValue

  TlsGetValue

  LocalAlloc

  GetModuleHandleW

  lstrcpyW

  lstrcmpW

  WriteProcessMemory

  WriteFile

  WideCharToMultiByte

  WaitForSingleObject

  WaitForMultipleObjectsEx

  VirtualQueryEx

  VirtualQuery

  VirtualFreeEx

  VirtualFree

  VirtualAllocEx

  VirtualAlloc

  TryEnterCriticalSection

  SwitchToThread

  SuspendThread

  Sleep

  SizeofResource

  SignalObjectAndWait

  SetThreadPriority

  SetThreadLocale

  SetLastError

  SetFilePointer

  SetEvent

  SetErrorMode

  SetEndOfFile

  ResumeThread

  ResetEvent

  ReadProcessMemory

  ReadFile

  RaiseException

  QueryPerformanceFrequency

  QueryPerformanceCounter

  IsDebuggerPresent

  OpenProcess

  MultiByteToWideChar

  MulDiv

  LockResource

  LoadResource

  LoadLibraryW

  LeaveCriticalSection

  InitializeCriticalSection

  GlobalUnlock

  GlobalLock

  GlobalFree

  GlobalFindAtomW

  GlobalDeleteAtom

  GlobalAlloc

  GlobalAddAtomW

  GetVersionExW

  GetVersion

  GetTickCount

  GetThreadPriority

  GetThreadLocale

  GetSystemInfo

  GetStdHandle

  GetProcAddress

  GetModuleHandleW

  GetModuleFileNameW

  GetLocaleInfoW

  GetLocalTime

  GetLastError

  GetFullPathNameW

  GetFileAttributesW

  GetExitCodeThread

  GetDiskFreeSpaceW

  GetDateFormatW

  GetCurrentThreadId

  GetCurrentThread

  GetCurrentProcessId

  GetCurrentProcess

  GetCPInfo

  FreeResource

  InterlockedExchangeAdd

  InterlockedExchange

  InterlockedCompareExchange

  FreeLibrary

  FormatMessageW

  FindResourceW

  FindNextFileW

  FindFirstFileW

  FindClose

  FileTimeToLocalFileTime

  FileTimeToDosDateTime

  EnumCalendarInfoW

  EnterCriticalSection

  DeleteFileW

  DeleteCriticalSection

  CreateThread

  CreateFileW

  CreateEventW

  CreateDirectoryW

  CompareStringW

  CloseHandle

  Sleep

  msimg32

  AlphaBlend

  gdi32

  UnrealizeObject

  StretchDIBits

  StretchBlt

  StartPage

  StartDocW

  SetWindowOrgEx

  SetWinMetaFileBits

  SetViewportOrgEx

  SetTextColor

  SetStretchBltMode

  SetROP2

  SetPixelV

  SetPixel

  SetEnhMetaFileBits

  SetDIBits

  SetDIBColorTable

  SetBrushOrgEx

  SetBkMode

  SetBkColor

  SetAbortProc

  SelectPalette

  SelectObject

  SaveDC

  RoundRect

  RestoreDC

  ResizePalette

  Rectangle

  RectVisible

  RealizePalette

  Polyline

  Polygon

  PolyBezierTo

  PolyBezier

  PlayEnhMetaFile

  Pie

  PatBlt

  MoveToEx

  MaskBlt

  LineTo

  IntersectClipRect

  GetWindowOrgEx

  GetWinMetaFileBits

  GetViewportOrgEx

  GetTextMetricsW

  GetTextExtentPointW

  GetTextExtentPoint32W

  GetSystemPaletteEntries

  GetStockObject

  GetRgnBox

  GetPixel

  GetPaletteEntries

  GetObjectW

  GetNearestPaletteIndex

  GetEnhMetaFilePaletteEntries

  GetEnhMetaFileHeader

  GetEnhMetaFileDescriptionW

  GetEnhMetaFileBits

  GetDeviceCaps

  GetDIBits

  GetDIBColorTable

  GetDCOrgEx

  GetCurrentPositionEx

  GetClipBox

  GetBrushOrgEx

  GetBitmapDimensionEx

  GetBitmapBits

  GdiFlush

  FrameRgn

  ExtTextOutW

  ExtFloodFill

  ExcludeClipRect

  EnumFontsW

  EnumFontFamiliesExW

  EndPage

  EndDoc

  Ellipse

  DeleteObject

  DeleteEnhMetaFile

  DeleteDC

  CreateSolidBrush

  CreateRectRgn

  CreatePenIndirect

  CreatePen

  CreatePalette

  CreateICW

  CreateHalftonePalette

  CreateFontIndirectW

  CreateDIBitmap

  CreateDIBSection

  CreateDCW

  CreateCompatibleDC

  CreateCompatibleBitmap

  CreateBrushIndirect

  CreateBitmap

  CopyEnhMetaFileW

  CombineRgn

  Chord

  BitBlt

  Arc

  AbortDoc

  version

  VerQueryValueW

  GetFileVersionInfoSizeW

  GetFileVersionInfoW

  ole32

  OleUninitialize

  OleInitialize

  CoTaskMemFree

  CoTaskMemAlloc

  CoCreateInstance

  CoUninitialize

  CoInitialize

  IsEqualGUID

  CLSIDFromString

  comctl32

  InitializeFlatSB

  FlatSB_SetScrollProp

  FlatSB_SetScrollPos

  FlatSB_SetScrollInfo

  FlatSB_GetScrollPos

  FlatSB_GetScrollInfo

  _TrackMouseEvent

  ImageList_GetImageInfo

  ImageList_SetIconSize

  ImageList_GetIconSize

  ImageList_Write

  ImageList_Read

  ImageList_GetDragImage

  ImageList_DragShowNolock

  ImageList_DragMove

  ImageList_DragLeave

  ImageList_DragEnter

  ImageList_EndDrag

  ImageList_BeginDrag

  ImageList_Copy

  ImageList_LoadImageW

  ImageList_GetIcon

  ImageList_Remove

  ImageList_DrawEx

  ImageList_Replace

  ImageList_Draw

  ImageList_SetOverlayImage

  ImageList_GetBkColor

  ImageList_SetBkColor

  ImageList_ReplaceIcon

  ImageList_Add

  ImageList_SetImageCount

  ImageList_GetImageCount

  ImageList_Destroy

  ImageList_Create

  InitCommonControls

  shell32

  ShellExecuteExW

  ShellExecuteW

  ExtractIconW

  SHGetSpecialFolderLocation

  SHGetMalloc

  SHGetDesktopFolder

  comdlg32

  GetOpenFileNameW

  winspool.drv

  OpenPrinterW

  EnumPrintersW

  DocumentPropertiesW

  ClosePrinter

  GetDefaultPrinterW

  Sections

  .text

  Size: 2.2MB - Virtual size: 2.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itext

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 43KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 25KB

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 1024B - Virtual size: 934B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: - Virtual size: 72B

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 147KB - Virtual size: 146KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 187KB - Virtual size: 187KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/libeay32.dll

  .dll windows:4 windows x86 arch:x86

  9a8fb143a010f07506356c42d6154f05

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  wsock32

  recvfrom

  sendto

  bind

  listen

  accept

  ntohl

  inet_ntoa

  WSACancelBlockingCall

  WSACleanup

  WSAStartup

  gethostbyname

  getsockopt

  getservbyname

  ntohs

  htons

  htonl

  socket

  setsockopt

  connect

  send

  WSASetLastError

  recv

  WSAGetLastError

  shutdown

  closesocket

  gdi32

  CreateCompatibleDC

  GetDeviceCaps

  CreateCompatibleBitmap

  SelectObject

  GetObjectA

  BitBlt

  GetBitmapBits

  DeleteObject

  DeleteDC

  CreateDCA

  advapi32

  ReportEventA

  DeregisterEventSource

  RegisterEventSourceA

  user32

  MessageBoxA

  GetDesktopWindow

  GetProcessWindowStation

  GetUserObjectInformationW

  msvcr71

  _write

  _fileno

  _stat

  _chmod

  _getch

  strstr

  _read

  sprintf

  wcsstr

  _vsnprintf

  vfprintf

  _iob

  abort

  free

  realloc

  malloc

  memchr

  time

  localtime

  gmtime

  strncpy

  _errno

  memmove

  isxdigit

  isdigit

  fprintf

  _getpid

  fputs

  fclose

  fread

  fwrite

  fflush

  fopen

  _setmode

  ftell

  fseek

  fgets

  atoi

  perror

  qsort

  strcmp

  getenv

  strerror

  strchr

  isalnum

  isspace

  strncmp

  strtoul

  strrchr

  tolower

  isupper

  sscanf

  exit

  strtol

  signal

  printf

  _initterm

  _adjust_fdiv

  __CppXcptFilter

  _except_handler3

  __dllonexit

  _onexit

  kernel32

  SetLastError

  LoadLibraryA

  FreeLibrary

  FindClose

  GetProcAddress

  GetTickCount

  GetThreadTimes

  GetCurrentThread

  ExitProcess

  GetFileType

  GetVersion

  QueryPerformanceCounter

  GetCurrentProcessId

  GlobalMemoryStatus

  CloseHandle

  GetVersionExA

  FlushConsoleInputBuffer

  GetModuleHandleA

  GetCurrentThreadId

  FindNextFileA

  GetLastError

  FindFirstFileA

  GetStdHandle

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_cfbr_encrypt_block

  AES_ctr128_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  ASN1_ANY_it

  ASN1_BIT_STRING_asn1_meth

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_HEADER_free

  ASN1_HEADER_new

  ASN1_IA5STRING_asn1_meth

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_to_BN

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SEQUENCE_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_cmp

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_encode

  ASN1_STRING_free

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_check

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_to_generalizedtime

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_set

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_sign

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_pack_string

  ASN1_parse

  ASN1_parse_dump

  ASN1_primitive_free

  ASN1_primitive_new

  ASN1_put_eoc

  ASN1_put_object

  ASN1_seq_pack

  ASN1_seq_unpack

  ASN1_sign

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_template_d2i

  ASN1_template_free

  ASN1_template_i2d

  ASN1_template_new

  ASN1_unpack_string

  ASN1_verify

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_accept

  BIO_callback_ctrl

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_ex_data

  BIO_get_ex_new_index

  BIO_get_host_ip

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_gethostbyname

  BIO_gets

  BIO_indent

  BIO_int_ctrl

  BIO_new

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_mem

  BIO_s_null

  BIO_s_socket

  BIO_set

  BIO_set_cipher

  BIO_set_ex_data

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_cleanup

  BIO_sock_error

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_get_thread_id

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_new

  BN_BLINDING_set_flags

  BN_BLINDING_set_thread_id

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_init

  BN_CTX_new

  BN_CTX_start

  BN_GENCB_call

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  BN_GF2m_mod_exp_arr

  BN_GF2m_mod_inv

  BN_GF2m_mod_inv_arr

  BN_GF2m_mod_mul

  BN_GF2m_mod_mul_arr

  BN_GF2m_mod_solve_quad

  BN_GF2m_mod_solve_quad_arr

  BN_GF2m_mod_sqr

  BN_GF2m_mod_sqr_arr

  BN_GF2m_mod_sqrt

  BN_GF2m_mod_sqrt_arr

  BN_GF2m_poly2arr

  BN_MONT_CTX_copy

  BN_MONT_CTX_free

  BN_MONT_CTX_init

  BN_MONT_CTX_new

  BN_MONT_CTX_set

  BN_MONT_CTX_set_locked

  BN_RECP_CTX_free

  BN_RECP_CTX_init

  BN_RECP_CTX_new

  BN_RECP_CTX_set

  BN_add

  BN_add_word

  BN_bin2bn

  BN_bn2bin

  BN_bn2dec

  BN_bn2hex

  BN_bn2mpi

  BN_bntest_rand

  BN_clear

  BN_clear_bit

  BN_clear_free

  BN_cmp

  BN_copy

  BN_dec2bn

  BN_div

  BN_div_recp

  BN_div_word

  BN_dup

  BN_exp

  BN_free

  BN_from_montgomery

  BN_gcd

  BN_generate_prime

  BN_generate_prime_ex

  BN_get0_nist_prime_192

  BN_get0_nist_prime_224

  BN_get0_nist_prime_256

  BN_get0_nist_prime_384

  BN_get0_nist_prime_521

  BN_get_params

  BN_get_word

  BN_hex2bn

  BN_init

  BN_is_bit_set

  BN_is_prime

  BN_is_prime_ex

  BN_is_prime_fasttest

  BN_is_prime_fasttest_ex

  BN_kronecker

  BN_lshift

  BN_lshift1

  BN_mask_bits

  BN_mod_add

  BN_mod_add_quick

  BN_mod_exp

  BN_mod_exp2_mont

  BN_mod_exp_mont

  BN_mod_exp_mont_consttime

  BN_mod_exp_mont_word

  BN_mod_exp_recp

  BN_mod_exp_simple

  BN_mod_inverse

  BN_mod_lshift

  BN_mod_lshift1

  BN_mod_lshift1_quick

  BN_mod_lshift_quick

  BN_mod_mul

  BN_mod_mul_montgomery

  BN_mod_mul_reciprocal

  BN_mod_sqr

  BN_mod_sqrt

  BN_mod_sub

  BN_mod_sub_quick

  BN_mod_word

  BN_mpi2bn

  BN_mul

  BN_mul_word

  BN_new

  BN_nist_mod_192

  BN_nist_mod_224

  BN_nist_mod_256

  BN_nist_mod_384

  BN_nist_mod_521

  BN_nnmod

  BN_num_bits

  BN_num_bits_word

  BN_options

  BN_print

  BN_print_fp

  BN_pseudo_rand

  BN_pseudo_rand_range

  BN_rand

  BN_rand_range

  BN_reciprocal

  BN_rshift

  BN_rshift1

  BN_set_bit

  BN_set_negative

  BN_set_params

  BN_set_word

  BN_sqr

  BN_sub

  BN_sub_word

  BN_swap

  BN_to_ASN1_ENUMERATED

  BN_to_ASN1_INTEGER

  BN_uadd

  BN_ucmp

  BN_usub

  BN_value_one

  BUF_MEM_free

  BUF_MEM_grow

  BUF_MEM_grow_clean

  BUF_MEM_new

  BUF_memdup

  BUF_strdup

  BUF_strlcat

  BUF_strlcpy

  BUF_strndup

  CAST_cbc_encrypt

  CAST_cfb64_encrypt

  CAST_decrypt

  CAST_ecb_encrypt

  CAST_encrypt

  CAST_ofb64_encrypt

  CAST_set_key

  CBIGNUM_it

  CERTIFICATEPOLICIES_free

  CERTIFICATEPOLICIES_it

  CERTIFICATEPOLICIES_new

  COMP_CTX_free

  COMP_CTX_new

  COMP_compress_block

  COMP_expand_block

  COMP_rle

  COMP_zlib

  CONF_dump_bio

  CONF_dump_fp

  CONF_free

  CONF_get1_default_config_file

  CONF_get_number

  CONF_get_section

  CONF_get_string

  CONF_imodule_get_flags

  CONF_imodule_get_module

  CONF_imodule_get_name

  CONF_imodule_get_usr_data

  CONF_imodule_get_value

  CONF_imodule_set_flags

  CONF_imodule_set_usr_data

  CONF_load

  CONF_load_bio

  CONF_load_fp

  CONF_module_add

  CONF_module_get_usr_data

  CONF_module_set_usr_data

  CONF_modules_finish

  CONF_modules_free

  CONF_modules_load

  CONF_modules_load_file

  Sections

  .text

  Size: 628KB - Virtual size: 626KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 248KB - Virtual size: 247KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 60KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 44KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/msvcr71.dll

  .dll windows:4 windows x86 arch:x86

  7acc8c379c768a1ecd81ec502ff5f33e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msvcr71.pdb

  Imports

  kernel32

  GetModuleFileNameA

  GetModuleFileNameW

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  TerminateProcess

  GetCurrentProcess

  WriteFile

  GetStdHandle

  GetCurrentThreadId

  GetCommandLineA

  GetVersionExA

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  CloseHandle

  GetLastError

  ResumeThread

  CreateThread

  TlsAlloc

  SetLastError

  GetCurrentThread

  TlsFree

  TlsSetValue

  TlsGetValue

  FindNextFileA

  FindFirstFileA

  FindClose

  FindNextFileW

  FindFirstFileW

  HeapAlloc

  HeapFree

  GetEnvironmentVariableA

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  IsBadWritePtr

  SetHandleCount

  GetFileType

  GetStartupInfoA

  GetACP

  GetOEMCP

  GetCPInfo

  LoadLibraryA

  MultiByteToWideChar

  GetCommandLineW

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  InitializeCriticalSection

  RtlUnwind

  UnhandledExceptionFilter

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  SetConsoleCtrlHandler

  InterlockedExchange

  VirtualQuery

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsValidCodePage

  GetLocaleInfoW

  GetTimeFormatA

  GetDateFormatA

  GetTimeZoneInformation

  HeapSize

  VirtualProtect

  GetSystemInfo

  FlushFileBuffers

  SetFilePointer

  SetStdHandle

  CompareStringA

  CompareStringW

  Sleep

  Beep

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDiskFreeSpaceA

  GetLogicalDrives

  SetErrorMode

  GetFileAttributesA

  GetCurrentDirectoryA

  SetCurrentDirectoryA

  SetFileAttributesA

  GetFullPathNameA

  GetDriveTypeA

  CreateDirectoryA

  RemoveDirectoryA

  DeleteFileA

  GetFileAttributesW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  DeleteFileW

  MoveFileW

  RemoveDirectoryW

  GetDriveTypeW

  MoveFileA

  RaiseException

  IsBadReadPtr

  SetUnhandledExceptionFilter

  IsBadCodePtr

  GetExitCodeProcess

  WaitForSingleObject

  FreeLibrary

  CreateProcessA

  CreateProcessW

  HeapValidate

  HeapCompact

  HeapWalk

  ReadConsoleA

  SetConsoleMode

  GetConsoleMode

  IsDBCSLeadByteEx

  GetConsoleCP

  ReadConsoleW

  SetEndOfFile

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  DuplicateHandle

  GetFileInformationByHandle

  PeekNamedPipe

  ReadConsoleInputA

  PeekConsoleInputA

  GetNumberOfConsoleInputEvents

  ReadConsoleInputW

  LockFile

  UnlockFile

  CreateFileA

  CreatePipe

  ReadFile

  CreateFileW

  SetFileTime

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  GetLocalTime

  SetLocalTime

  Exports

  Exports

  $I10_OUTPUT

  ??0__non_rtti_object@@QAE@ABV0@@Z

  ??0__non_rtti_object@@QAE@PBD@Z

  ??0bad_cast@@AAE@PBQBD@Z

  ??0bad_cast@@QAE@ABQBD@Z

  ??0bad_cast@@QAE@ABV0@@Z

  ??0bad_cast@@QAE@PBD@Z

  ??0bad_typeid@@QAE@ABV0@@Z

  ??0bad_typeid@@QAE@PBD@Z

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1__non_rtti_object@@UAE@XZ

  ??1bad_cast@@UAE@XZ

  ??1bad_typeid@@UAE@XZ

  ??1exception@@UAE@XZ

  ??1type_info@@UAE@XZ

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??4__non_rtti_object@@QAEAAV0@ABV0@@Z

  ??4bad_cast@@QAEAAV0@ABV0@@Z

  ??4bad_typeid@@QAEAAV0@ABV0@@Z

  ??4exception@@QAEAAV0@ABV0@@Z

  ??8type_info@@QBEHABV0@@Z

  ??9type_info@@QBEHABV0@@Z

  ??_7__non_rtti_object@@6B@

  ??_7bad_cast@@6B@

  ??_7bad_typeid@@6B@

  ??_7exception@@6B@

  ??_Fbad_cast@@QAEXXZ

  ??_Fbad_typeid@@QAEXXZ

  ??_U@YAPAXI@Z

  ??_V@YAXPAX@Z

  ?_query_new_handler@@YAP6AHI@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?before@type_info@@QBEHABV1@@Z

  ?name@type_info@@QBEPBDXZ

  ?raw_name@type_info@@QBEPBDXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?swprintf@@YAHPAGIPBGZZ

  ?swprintf@@YAHPA_WIPB_WZZ

  ?terminate@@YAXXZ

  ?unexpected@@YAXXZ

  ?vswprintf@@YAHPAGIPBGPAD@Z

  ?vswprintf@@YAHPA_WIPB_WPAD@Z

  ?what@exception@@UBEPBDXZ

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _CRT_RTC_INIT

  _CxxThrowException

  _EH_prolog

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _Strftime

  _XcptFilter

  __CppXcptFilter

  __CxxCallUnwindDtor

  __CxxCallUnwindVecDtor

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __buffer_overrun

  __crtCompareStringA

  __crtCompareStringW

  __crtGetLocaleInfoW

  __crtGetStringTypeW

  __crtLCMapStringA

  __crtLCMapStringW

  __dllonexit

  __doserrno

  __fpecode

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __lc_clike

  __lc_codepage

  __lc_collate_cp

  __lc_handle

  __lconv_init

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__amblksiz

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fileinfo

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__osver

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__winmajor

  __p__winminor

  __p__winver

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __security_error_handler

  __set_app_type

  __set_buffer_overrun_handler

  __setlc_active

  __setusermatherr

  __threadhandle

  __threadid

  __toascii

  __unDName

  __unDNameEx

  __uncaught_exception

  __unguarded_readlc_active

  __wargv

  __wcserror

  __wgetmainargs

  __winitenv

  _abnormal_termination

  _access

  _acmdln

  _adj_fdiv_m16i

  _adj_fdiv_m32

  _adj_fdiv_m32i

  _adj_fdiv_m64

  _adj_fdiv_r

  _adj_fdivr_m16i

  _adj_fdivr_m32

  _adj_fdivr_m32i

  _adj_fdivr_m64

  _adj_fpatan

  _adj_fprem

  _adj_fprem1

  _adj_fptan

  _adjust_fdiv

  _aexit_rtn

  _aligned_free

  _aligned_malloc

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_realloc

  _amsg_exit

  _assert

  _atodbl

  _atoi64

  _atoldbl

  _beep

  _beginthread

  _beginthreadex

  _c_exit

  _cabs

  _callnewh

  _cexit

  _cgets

  _cgetws

  _chdir

  _chdrive

  _chgsign

  _chkesp

  _chmod

  _chsize

  _clearfp

  _close

  _commit

  _commode

  _control87

  _controlfp

  _copysign

  _cprintf

  _cputs

  _cputws

  _creat

  _cscanf

  _ctime64

  _cwait

  _cwprintf

  _cwscanf

  _daylight

  _dstbias

  _dup

  _dup2

  _ecvt

  _endthread

  _endthreadex

  _environ

  _eof

  _errno

  _except_handler2

  _except_handler3

  _execl

  _execle

  _execlp

  _execlpe

  _execv

  _execve

  _execvp

  _execvpe

  _exit

  _expand

  _fcloseall

  _fcvt

  _fdopen

  _fgetchar

  _fgetwchar

  _filbuf

  _fileinfo

  _filelength

  _filelengthi64

  _fileno

  _findclose

  _findfirst

  _findfirst64

  _findfirsti64

  _findnext

  _findnext64

  _findnexti64

  _finite

  _flsbuf

  _flushall

  _fmode

  _fpclass

  _fpieee_flt

  _fpreset

  _fputchar

  _fputwchar

  _fsopen

  _fstat

  _fstat64

  _fstati64

  _ftime

  _ftime64

  _ftol

  _fullpath

  _futime

  _futime64

  _gcvt

  _get_heap_handle

  _get_osfhandle

  _get_sbh_threshold

  _getch

  _getche

  _getcwd

  _getdcwd

  _getdiskfree

  _getdllprocaddr

  _getdrive

  _getdrives

  _getmaxstdio

  _getmbcp

  _getpid

  _getsystime

  _getw

  _getwch

  _getwche

  _getws

  _global_unwind2

  _gmtime64

  _heapadd

  _heapchk

  _heapmin

  _heapset

  _heapused

  _heapwalk

  _hypot

  _i64toa

  _i64tow

  _initterm

  _inp

  _inpd

  _inpw

  _iob

  _isatty

  _isctype

  _ismbbalnum

  _ismbbalpha

  _ismbbgraph

  _ismbbkalnum

  _ismbbkana

  _ismbbkprint

  _ismbbkpunct

  _ismbblead

  _ismbbprint

  _ismbbpunct

  _ismbbtrail

  _ismbcalnum

  _ismbcalpha

  _ismbcdigit

  _ismbcgraph

  _ismbchira

  _ismbckata

  _ismbcl0

  _ismbcl1

  _ismbcl2

  _ismbclegal

  _ismbclower

  _ismbcprint

  _ismbcpunct

  _ismbcspace

  _ismbcsymbol

  _ismbcupper

  _ismbslead

  _ismbstrail

  _isnan

  _itoa

  _itow

  _j0

  _j1

  _jn

  _kbhit

  _lfind

  _loaddll

  _local_unwind2

  _localtime64

  _lock

  _locking

  _logb

  _longjmpex

  _lrotl

  _lrotr

  _lsearch

  _lseek

  _lseeki64

  _ltoa

  _ltow

  _makepath

  _mbbtombc

  _mbbtype

  _mbcasemap

  _mbccpy

  _mbcjistojms

  _mbcjmstojis

  _mbclen

  _mbctohira

  _mbctokata

  _mbctolower

  _mbctombb

  _mbctoupper

  _mbctype

  _mbsbtype

  _mbscat

  _mbschr

  _mbscmp

  _mbscoll

  _mbscpy

  _mbscspn

  _mbsdec

  _mbsdup

  _mbsicmp

  _mbsicoll

  _mbsinc

  _mbslen

  _mbslwr

  _mbsnbcat

  _mbsnbcmp

  _mbsnbcnt

  _mbsnbcoll

  _mbsnbcpy

  _mbsnbicmp

  _mbsnbicoll

  _mbsnbset

  _mbsncat

  _mbsnccnt

  _mbsncmp

  _mbsncoll

  _mbsncpy

  _mbsnextc

  _mbsnicmp

  _mbsnicoll

  _mbsninc

  _mbsnset

  _mbspbrk

  _mbsrchr

  _mbsrev

  _mbsset

  _mbsspn

  _mbsspnp

  _mbsstr

  _mbstok

  _mbstrlen

  _mbsupr

  _memccpy

  _memicmp

  _mkdir

  _mktemp

  _mktime64

  _msize

  _nextafter

  _onexit

  _open

  _open_osfhandle

  _osplatform

  _osver

  _outp

  _outpd

  _outpw

  _pclose

  _pctype

  _pgmptr

  _pipe

  _popen

  _purecall

  _putch

  _putenv

  _putw

  _putwch

  _putws

  _pwctype

  _read

  _resetstkoflw

  _rmdir

  _rmtmp

  _rotl

  _rotr

  _safe_fdiv

  _safe_fdivr

  _safe_fprem

  _safe_fprem1

  _scalb

  _scprintf

  _scwprintf

  _searchenv

  _seh_longjmp_unwind

  _set_SSE2_enable

  _set_error_mode

  _set_purecall_handler

  _set_sbh_threshold

  _set_security_error_handler

  _seterrormode

  _setjmp

  _setjmp3

  _setmaxstdio

  _setmbcp

  _setmode

  _setsystime

  _sleep

  _snprintf

  _snscanf

  _snwprintf

  _snwscanf

  _sopen

  _spawnl

  _spawnle

  _spawnlp

  _spawnlpe

  _spawnv

  _spawnve

  _spawnvp

  Sections

  .text

  Size: 228KB - Virtual size: 226KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 68KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 24KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Origin Games Checker/ssleay32.dll

  .dll windows:4 windows x86 arch:x86

  ec3469e6569d715ba5e5e1375e9767e9

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  libeay32

  ord1654

  ord903

  ord252

  ord2206

  ord857

  ord176

  ord641

  ord2821

  ord281

  ord290

  ord654

  ord181

  ord188

  ord269

  ord3109

  ord2630

  ord910

  ord2411

  ord754

  ord490

  ord222

  ord167

  ord168

  ord169

  ord85

  ord52

  ord2201

  ord289

  ord493

  ord911

  ord464

  ord3245

  ord354

  ord2936

  ord3244

  ord323

  ord3067

  ord2894

  ord961

  ord89

  ord109

  ord202

  ord3239

  ord866

  ord110

  ord3422

  ord2929

  ord3644

  ord3570

  ord2578

  ord111

  ord3010

  ord3480

  ord2924

  ord3459

  ord3512

  ord3608

  ord3575

  ord3663

  ord123

  ord201

  ord118

  ord3666

  ord219

  ord498

  ord285

  ord635

  ord912

  ord909

  ord3724

  ord313

  ord495

  ord120

  ord151

  ord3178

  ord3695

  ord3550

  ord3418

  ord203

  ord128

  ord31

  ord830

  ord727

  ord2760

  ord282

  ord572

  ord3719

  ord216

  ord206

  ord497

  ord3682

  ord2877

  ord3711

  ord205

  ord486

  ord484

  ord763

  ord577

  ord907

  ord87

  ord481

  ord3729

  ord333

  ord2915

  ord256

  ord1096

  ord1097

  ord2589

  ord1145

  ord1144

  ord1081

  ord2292

  ord622

  ord627

  ord657

  ord653

  ord1653

  ord2784

  ord965

  ord964

  ord2572

  ord2747

  ord3704

  ord3758

  ord3767

  ord3647

  ord3766

  ord3365

  ord3460

  ord3454

  ord3754

  ord3394

  ord187

  ord897

  ord3414

  ord3495

  ord67

  ord65

  ord53

  ord78

  ord98

  ord3559

  ord3399

  ord636

  ord914

  ord626

  ord890

  ord1004

  ord3527

  ord364

  ord1010

  ord2051

  ord58

  ord66

  ord630

  ord628

  ord1041

  ord1007

  ord1005

  ord1027

  ord3378

  ord3437

  ord316

  ord629

  ord892

  ord74

  ord248

  ord1655

  ord575

  ord1025

  ord246

  ord1100

  ord679

  ord2524

  ord3595

  ord1023

  ord3505

  ord401

  ord93

  ord3396

  ord3657

  ord887

  ord889

  ord891

  ord315

  ord1147

  ord189

  ord314

  ord956

  ord280

  ord2181

  ord399

  ord748

  ord279

  ord283

  ord400

  ord751

  ord750

  ord774

  ord3205

  ord37

  ord35

  ord824

  ord822

  ord8

  ord1091

  ord3700

  ord3623

  ord32

  ord718

  ord7

  ord716

  ord703

  ord680

  ord86

  ord88

  ord1101

  ord293

  ord322

  ord2996

  ord3155

  ord2927

  ord325

  ord329

  ord318

  ord304

  ord292

  ord299

  ord955

  ord2252

  ord91

  ord247

  ord904

  ord901

  ord623

  ord905

  msvcr71

  _iob

  _errno

  free

  _initterm

  malloc

  _adjust_fdiv

  __CppXcptFilter

  _except_handler3

  __dllonexit

  _onexit

  strncmp

  memmove

  time

  fprintf

  kernel32

  GetLastError

  DisableThreadLibraryCalls

  SetLastError

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLSv1_client_method

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  SSL_CIPHER_description

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_name

  SSL_CIPHER_get_version

  SSL_COMP_add_compression_method

  SSL_COMP_get_compression_methods

  SSL_COMP_get_name

  SSL_CTX_add_client_CA

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_ctrl

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get_cert_store

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_ex_data

  SSL_CTX_get_ex_new_index

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sessions

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_msg_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_session_id_context

  SSL_CTX_set_ssl_version

  SSL_CTX_set_timeout

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_tmp_ecdh_callback

  SSL_CTX_set_tmp_rsa_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_SESSION_cmp

  SSL_SESSION_free

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_ex_new_index

  SSL_SESSION_get_id

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_hash

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_accept

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_callback_ctrl

  SSL_check_private_key

  SSL_clear

  SSL_connect

  SSL_copy_session_id

  SSL_ctrl

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_free

  SSL_get1_session

  SSL_get_SSL_CTX

  SSL_get_certificate

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_timeout

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_ex_new_index

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_privatekey

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_rfd

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shutdown

  SSL_get_ssl_method

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_library_init

  SSL_load_client_CA_file

  SSL_load_error_strings

  SSL_new

  SSL_peek

  SSL_pending

  SSL_read

  SSL_renegotiate

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_set_accept_state

  SSL_set_bio

  SSL_set_cipher_list

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_info_callback

  SSL_set_msg_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_rfd

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_shutdown

  SSL_set_ssl_method

  SSL_set_tmp_dh_callback

  SSL_set_tmp_ecdh_callback

  SSL_set_tmp_rsa_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_state

  SSL_state_string

  SSL_state_string_long

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_file

  SSL_version

  SSL_want

  SSL_write

  SSLv23_client_method

  SSLv23_method

  SSLv23_server_method

  SSLv2_client_method

  SSLv2_method

  SSLv2_server_method

  SSLv3_client_method

  SSLv3_method

  SSLv3_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  ssl2_ciphers

  ssl3_ciphers

  Sections

  .text

  Size: 132KB - Virtual size: 129KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 32KB - Virtual size: 29KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 8KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/DATA/xpti.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 15KB - Virtual size: 14KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PORNHUB BRUTER CHECKER 2022/PORNHUB BRUTER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 167KB - Virtual size: 166KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework.Design\obj\Debug\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework.Fonts\obj\Debug\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework\obj\Debug\MetroFramework.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 347KB - Virtual size: 346KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/PSN REGCHECKER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 225KB - Virtual size: 224KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/PSN REGCHECKER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework.Design\obj\Debug\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework.Fonts\obj\Debug\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  E:\Systems Development\DMA\winforms-modernui\MetroFramework\obj\Debug\MetroFramework.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 347KB - Virtual size: 346KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/core.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Users\GameRocs\Documents\Visual Studio 2015\Projects\WpfApplication1\Результаты(14.23.52)\obj\x86\Release\PSN REGCHECKER FOR PS-HACK.RU.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 302KB - Virtual size: 301KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 67KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/log/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PSN REGCHECKER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/Paypal Checker by HT.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 147KB - Virtual size: 147KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Development\Releases\Json\Working\Newtonsoft.Json\Working-Signed\Src\Newtonsoft.Json\obj\Release\net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 644KB - Virtual size: 644KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paypal Checker By Hixerx Team/dbgcore/ht2.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: - Virtual size: 91KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .vmp0

  Size: - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .vmp1

  Size: 231KB - Virtual size: 230KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/LiteDB.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Git\LiteDB\LiteDB\obj\Release\net40\LiteDB.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 345KB - Virtual size: 344KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 976B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/Microsoft.S.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\Microsoft.Scripting\obj\Release\net45\Microsoft.Scripting.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 135KB - Virtual size: 135KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/Paysafecard.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/d3dx9_27.dll

  .dll windows:5 windows x86 arch:x86

  d06f52a9822d76dba49362ab81699462

  
  

  Code Sign

  47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  04/12/2003, 00:00

  Not After

  03/12/2013, 23:59

  Subject

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

  Certificate

  Issuer

  CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

  Not Before

  04/12/2003, 00:00

  Not After

  03/12/2008, 23:59

  Subject

  CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  23/05/2002, 08:00

  Not After

  25/09/2011, 08:00

  Subject

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageContentCommitment

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:87:58:00:03:00:00:00:5a

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  05/01/2005, 23:20

  Not After

  05/04/2006, 23:30

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  4f:7a:47:69:ba:da:cc:9c:ed:e1:c3:86:31:7e:91:1e:73:82:de:7e

  Signer

  Actual PE Digest

  4f:7a:47:69:ba:da:cc:9c:ed:e1:c3:86:31:7e:91:1e:73:82:de:7e

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx9_27.pdb

  Imports

  msvcrt

  _except_handler3

  ?terminate@@YAXXZ

  _adjust_fdiv

  _initterm

  srand

  _tempnam

  exit

  atol

  _ultoa

  wcstombs

  rand

  isxdigit

  atof

  _CIcosh

  _CIexp

  _CIsinh

  _CItanh

  _fpclass

  strchr

  _isnan

  isalnum

  isalpha

  toupper

  tolower

  atoi

  floor

  _strtime

  _strdate

  sscanf

  isspace

  isdigit

  _setjmp3

  longjmp

  ldexp

  frexp

  _clearfp

  wcslen

  calloc

  realloc

  malloc

  _CIsqrt

  setlocale

  _strdup

  free

  ceil

  _controlfp

  _vsnprintf

  _CIasin

  __CxxFrameHandler

  _finite

  _CIacos

  memmove

  qsort

  _CIfmod

  _purecall

  _stricmp

  modf

  iswspace

  iswalpha

  iswdigit

  iswpunct

  _CIpow

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  gdi32

  TranslateCharsetInfo

  ExtTextOutW

  GetCurrentObject

  ExtTextOutA

  SetMapMode

  SetTextAlign

  GetOutlineTextMetricsA

  GetGlyphOutlineW

  MoveToEx

  CreateCompatibleDC

  CreateFontIndirectW

  CreateFontIndirectA

  GetFontLanguageInfo

  GetTextMetricsW

  SetBkMode

  SetBkColor

  SetTextColor

  GetCharacterPlacementW

  GetCharacterPlacementA

  SelectObject

  DeleteObject

  DeleteDC

  CreateDIBSection

  GetGlyphOutlineA

  GetTextMetricsA

  GetObjectW

  GetObjectA

  kernel32

  SetFilePointer

  DeleteFileW

  GetFileSize

  CreateFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  FindResourceA

  LoadResource

  LockResource

  SizeofResource

  FreeResource

  CompareStringA

  CreateFileW

  GetFullPathNameA

  LeaveCriticalSection

  MoveFileA

  InterlockedCompareExchange

  Sleep

  InitializeCriticalSection

  InterlockedExchange

  EnterCriticalSection

  lstrcmpiA

  IsDBCSLeadByte

  WriteFile

  GetTempPathA

  GetTempFileNameA

  CreateFileA

  ReadFile

  CloseHandle

  DeleteFileA

  InterlockedDecrement

  InterlockedIncrement

  IsProcessorFeaturePresent

  GetSystemInfo

  VirtualAlloc

  MoveFileW

  GetTempFileNameW

  GlobalMemoryStatus

  FreeLibrary

  SetEndOfFile

  ExpandEnvironmentStringsA

  IsBadWritePtr

  IsBadReadPtr

  IsBadCodePtr

  GetLastError

  CreateMutexA

  WaitForSingleObject

  ReleaseMutex

  HeapAlloc

  GetProcessHeap

  HeapFree

  QueryPerformanceCounter

  GetTickCount

  FindResourceW

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  DeleteCriticalSection

  DisableThreadLibraryCalls

  GetVersionExA

  LoadLibraryA

  GetProcAddress

  GetModuleHandleA

  OutputDebugStringA

  MultiByteToWideChar

  WideCharToMultiByte

  GetACP

  VirtualFree

  advapi32

  RegCloseKey

  RegOpenKeyA

  RegQueryValueExA

  Exports

  Exports

  D3DXAssembleShader

  D3DXAssembleShaderFromFileA

  D3DXAssembleShaderFromFileW

  D3DXAssembleShaderFromResourceA

  D3DXAssembleShaderFromResourceW

  D3DXBoxBoundProbe

  D3DXCheckCubeTextureRequirements

  D3DXCheckTextureRequirements

  D3DXCheckVersion

  D3DXCheckVolumeTextureRequirements

  D3DXCleanMesh

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXCompileShader

  D3DXCompileShaderFromFileA

  D3DXCompileShaderFromFileW

  D3DXCompileShaderFromResourceA

  D3DXCompileShaderFromResourceW

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXComputeIMTFromPerTexelSignal

  D3DXComputeIMTFromPerVertexSignal

  D3DXComputeIMTFromSignal

  D3DXComputeIMTFromTexture

  D3DXComputeNormalMap

  D3DXComputeNormals

  D3DXComputeTangent

  D3DXComputeTangentFrame

  D3DXComputeTangentFrameEx

  D3DXConcatenateMeshes

  D3DXConvertMeshSubsetToSingleStrip

  D3DXConvertMeshSubsetToStrips

  D3DXCpuOptimizations

  D3DXCreateAnimationController

  D3DXCreateBox

  D3DXCreateBuffer

  D3DXCreateCompressedAnimationSet

  D3DXCreateCubeTexture

  D3DXCreateCubeTextureFromFileA

  D3DXCreateCubeTextureFromFileExA

  D3DXCreateCubeTextureFromFileExW

  D3DXCreateCubeTextureFromFileInMemory

  D3DXCreateCubeTextureFromFileInMemoryEx

  D3DXCreateCubeTextureFromFileW

  D3DXCreateCubeTextureFromResourceA

  D3DXCreateCubeTextureFromResourceExA

  D3DXCreateCubeTextureFromResourceExW

  D3DXCreateCubeTextureFromResourceW

  D3DXCreateCylinder

  D3DXCreateEffect

  D3DXCreateEffectCompiler

  D3DXCreateEffectCompilerFromFileA

  D3DXCreateEffectCompilerFromFileW

  D3DXCreateEffectCompilerFromResourceA

  D3DXCreateEffectCompilerFromResourceW

  D3DXCreateEffectEx

  D3DXCreateEffectFromFileA

  D3DXCreateEffectFromFileExA

  D3DXCreateEffectFromFileExW

  D3DXCreateEffectFromFileW

  D3DXCreateEffectFromResourceA

  D3DXCreateEffectFromResourceExA

  D3DXCreateEffectFromResourceExW

  D3DXCreateEffectFromResourceW

  D3DXCreateEffectPool

  D3DXCreateFontA

  D3DXCreateFontIndirectA

  D3DXCreateFontIndirectW

  D3DXCreateFontW

  D3DXCreateFragmentLinker

  D3DXCreateKeyframedAnimationSet

  D3DXCreateLine

  D3DXCreateMatrixStack

  D3DXCreateMesh

  D3DXCreateMeshFVF

  D3DXCreateNPatchMesh

  D3DXCreatePMeshFromStream

  D3DXCreatePRTBuffer

  D3DXCreatePRTBufferTex

  D3DXCreatePRTCompBuffer

  D3DXCreatePRTEngine

  D3DXCreatePatchMesh

  D3DXCreatePolygon

  D3DXCreateRenderToEnvMap

  D3DXCreateRenderToSurface

  D3DXCreateSPMesh

  D3DXCreateSkinInfo

  D3DXCreateSkinInfoFVF

  D3DXCreateSkinInfoFromBlendedMesh

  D3DXCreateSphere

  D3DXCreateSprite

  D3DXCreateTeapot

  D3DXCreateTextA

  D3DXCreateTextW

  D3DXCreateTexture

  D3DXCreateTextureFromFileA

  D3DXCreateTextureFromFileExA

  D3DXCreateTextureFromFileExW

  D3DXCreateTextureFromFileInMemory

  D3DXCreateTextureFromFileInMemoryEx

  D3DXCreateTextureFromFileW

  D3DXCreateTextureFromResourceA

  D3DXCreateTextureFromResourceExA

  D3DXCreateTextureFromResourceExW

  D3DXCreateTextureFromResourceW

  D3DXCreateTextureGutterHelper

  D3DXCreateTextureShader

  D3DXCreateTorus

  D3DXCreateVolumeTexture

  D3DXCreateVolumeTextureFromFileA

  D3DXCreateVolumeTextureFromFileExA

  D3DXCreateVolumeTextureFromFileExW

  D3DXCreateVolumeTextureFromFileInMemory

  D3DXCreateVolumeTextureFromFileInMemoryEx

  D3DXCreateVolumeTextureFromFileW

  D3DXCreateVolumeTextureFromResourceA

  D3DXCreateVolumeTextureFromResourceExA

  D3DXCreateVolumeTextureFromResourceExW

  D3DXCreateVolumeTextureFromResourceW

  D3DXDebugMute

  D3DXDeclaratorFromFVF

  D3DXDisassembleEffect

  D3DXDisassembleShader

  D3DXFVFFromDeclarator

  D3DXFileCreate

  D3DXFillCubeTexture

  D3DXFillCubeTextureTX

  D3DXFillTexture

  D3DXFillTextureTX

  D3DXFillVolumeTexture

  D3DXFillVolumeTextureTX

  D3DXFilterTexture

  D3DXFindShaderComment

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFrameAppendChild

  D3DXFrameCalculateBoundingSphere

  D3DXFrameDestroy

  D3DXFrameFind

  D3DXFrameNumNamedMatrices

  D3DXFrameRegisterNamedMatrices

  D3DXFresnelTerm

  D3DXGatherFragments

  D3DXGatherFragmentsFromFileA

  D3DXGatherFragmentsFromFileW

  D3DXGatherFragmentsFromResourceA

  D3DXGatherFragmentsFromResourceW

  D3DXGenerateOutputDecl

  D3DXGeneratePMesh

  D3DXGetDeclLength

  D3DXGetDeclVertexSize

  D3DXGetDriverLevel

  D3DXGetFVFVertexSize

  D3DXGetImageInfoFromFileA

  D3DXGetImageInfoFromFileInMemory

  D3DXGetImageInfoFromFileW

  D3DXGetImageInfoFromResourceA

  D3DXGetImageInfoFromResourceW

  D3DXGetPixelShaderProfile

  D3DXGetShaderConstantTable

  D3DXGetShaderInputSemantics

  D3DXGetShaderOutputSemantics

  D3DXGetShaderSamplers

  D3DXGetShaderSize

  D3DXGetShaderVersion

  D3DXGetTargetDescByName

  D3DXGetTargetDescByVersion

  D3DXGetVertexShaderProfile

  D3DXIntersect

  D3DXIntersectSubset

  D3DXIntersectTri

  D3DXLoadMeshFromXA

  D3DXLoadMeshFromXInMemory

  D3DXLoadMeshFromXResource

  D3DXLoadMeshFromXW

  D3DXLoadMeshFromXof

  D3DXLoadMeshHierarchyFromXA

  D3DXLoadMeshHierarchyFromXInMemory

  D3DXLoadMeshHierarchyFromXW

  D3DXLoadPRTBufferFromFileA

  D3DXLoadPRTBufferFromFileW

  D3DXLoadPRTCompBufferFromFileA

  D3DXLoadPRTCompBufferFromFileW

  D3DXLoadPatchMeshFromXof

  D3DXLoadSkinMeshFromXof

  D3DXLoadSurfaceFromFileA

  D3DXLoadSurfaceFromFileInMemory

  D3DXLoadSurfaceFromFileW

  D3DXLoadSurfaceFromMemory

  D3DXLoadSurfaceFromResourceA

  D3DXLoadSurfaceFromResourceW

  D3DXLoadSurfaceFromSurface

  D3DXLoadVolumeFromFileA

  D3DXLoadVolumeFromFileInMemory

  D3DXLoadVolumeFromFileW

  D3DXLoadVolumeFromMemory

  D3DXLoadVolumeFromResourceA

  D3DXLoadVolumeFromResourceW

  D3DXLoadVolumeFromVolume

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXOptimizeFaces

  D3DXOptimizeVertices

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXRectPatchSize

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHPRTCompSplitMeshSC

  D3DXSHPRTCompSuperCluster

  D3DXSHProjectCubeMap

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSaveMeshHierarchyToFileA

  D3DXSaveMeshHierarchyToFileW

  D3DXSaveMeshToXA

  D3DXSaveMeshToXW

  D3DXSavePRTBufferToFileA

  D3DXSavePRTBufferToFileW

  D3DXSavePRTCompBufferToFileA

  D3DXSavePRTCompBufferToFileW

  D3DXSaveSurfaceToFileA

  D3DXSaveSurfaceToFileInMemory

  D3DXSaveSurfaceToFileW

  D3DXSaveTextureToFileA

  D3DXSaveTextureToFileInMemory

  D3DXSaveTextureToFileW

  D3DXSaveVolumeToFileA

  D3DXSaveVolumeToFileInMemory

  D3DXSaveVolumeToFileW

  D3DXSimplifyMesh

  D3DXSphereBoundProbe

  D3DXSplitMesh

  D3DXTessellateNPatches

  D3DXTessellateRectPatch

  D3DXTessellateTriPatch

  D3DXTriPatchSize

  D3DXUVAtlasCreate

  D3DXUVAtlasPack

  D3DXUVAtlasPartition

  D3DXValidMesh

  D3DXValidPatchMesh

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  D3DXWeldVertices

  Sections

  .text

  Size: 2.0MB - Virtual size: 2.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 98KB - Virtual size: 194KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 63KB - Virtual size: 62KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/x64/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/x64/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/x64/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/x64/psInterface.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 525KB - Virtual size: 525KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  nf1F9J55

  Size: 47KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/x64/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Paysafecard Checker By RubiconT/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/BruteEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  )WDQ]ak

  Size: 841KB - Virtual size: 841KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 203KB - Virtual size: 203KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/PlaystationChecker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 177KB - Virtual size: 176KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/settings/BruteEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  )WDQ]ak

  Size: 841KB - Virtual size: 841KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 203KB - Virtual size: 203KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 904B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/settings/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/settings/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/settings/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PlaystationChecker V2 - Cracked By PC-RET/settings/bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 2.6MB - Virtual size: 2.6MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 177KB - Virtual size: 176KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/Sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\Logan\Downloads\Compressed\WindowsApp1 - Copy\obj\Debug\Netflix EA.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 69KB - Virtual size: 69KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 27KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/msvcp100.dll

  .dll windows:5 windows x64 arch:x64

  9a218d1ec03f40eca74839863a511cb7

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:b2:9b:00:00:00:00:00:15

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  21/02/2011, 20:53

  Not After

  21/05/2012, 20:53

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:a2:30:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:01

  Not After

  25/07/2013, 19:11

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  92:34:2c:56:39:e5:50:df:32:66:01:c5:d4:13:51:61:e2:9b:d9:69

  Signer

  Actual PE Digest

  92:34:2c:56:39:e5:50:df:32:66:01:c5:d4:13:51:61:e2:9b:d9:69

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  msvcp100.amd64.pdb

  Imports

  msvcr100

  abort

  fputc

  fputs

  __iob_func

  rand_s

  memmove

  fgetc

  ungetc

  _lock_file

  _unlock_file

  fflush

  setvbuf

  memcpy_s

  fwrite

  fgetpos

  _fseeki64

  fsetpos

  fclose

  _fsopen

  _wfsopen

  fseek

  ldexp

  wcslen

  memchr

  memmove_s

  sprintf_s

  _Strftime

  strcspn

  setlocale

  _realloc_crt

  strcmp

  _malloc_crt

  ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z

  _purecall

  strerror

  fgetwc

  fputwc

  ungetwc

  __uncaught_exception

  towlower

  towupper

  _create_locale

  _ui64toa_s

  _free_locale

  __pctype_func

  _errno

  ___mb_cur_max_l_func

  ___lc_codepage_func

  ___lc_handle_func

  __crtCompareStringA

  memcmp

  logf

  __crtLCMapStringA

  ??0operation_timed_out@Concurrency@@QEAA@XZ

  ?Alloc@Concurrency@@YAPEAX_K@Z

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0@Z

  ?Yield@Context@Concurrency@@SAXXZ

  ??1critical_section@Concurrency@@QEAA@XZ

  ??0invalid_link_target@Concurrency@@QEAA@PEBD@Z

  ??0message_not_found@Concurrency@@QEAA@XZ

  ??0bad_target@Concurrency@@QEAA@XZ

  ??0invalid_operation@Concurrency@@QEAA@PEBD@Z

  ?set@event@Concurrency@@QEAAXXZ

  ?wait@event@Concurrency@@QEAA_KI@Z

  ??1event@Concurrency@@QEAA@XZ

  ??0event@Concurrency@@QEAA@XZ

  ?Free@Concurrency@@YAXPEAX@Z

  ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

  ??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

  ??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ?_UnderlyingYield@details@Concurrency@@YAXXZ

  ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ

  ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

  ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

  ??1_SpinLock@details@Concurrency@@QEAA@XZ

  ??0_SpinLock@details@Concurrency@@QEAA@AECJ@Z

  ?Log2@details@Concurrency@@YAK_K@Z

  isupper

  _calloc_crt

  islower

  __crtLCMapStringW

  isspace

  tolower

  strtod

  __crtCompareStringW

  ?terminate@@YAXXZ

  __C_specific_handler

  _unlock

  __dllonexit

  _lock

  _onexit

  _initterm

  _initterm_e

  _encoded_null

  _amsg_exit

  __CppXcptFilter

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  __crt_debugger_hook

  __clean_type_info_names_internal

  log

  ??0bad_cast@std@@QEAA@AEBV01@@Z

  ??1bad_cast@std@@UEAA@XZ

  ??0bad_cast@std@@QEAA@PEBD@Z

  _Getmonths

  _Getdays

  malloc

  __CxxFrameHandler3

  ??2@YAPEAX_K@Z

  ___mb_cur_max_func

  memcpy

  strlen

  ??_V@YAXPEAX@Z

  _Gettnames

  localeconv

  free

  ??0exception@std@@QEAA@AEBQEBD@Z

  ?what@exception@std@@UEBAPEBDXZ

  ??0exception@std@@QEAA@AEBQEBDH@Z

  memset

  ??3@YAXPEAX@Z

  ??0exception@std@@QEAA@AEBV01@@Z

  _CxxThrowException

  ??1exception@std@@UEAA@XZ

  ___lc_collate_cp_func

  ??0exception@std@@QEAA@XZ

  kernel32

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  Sleep

  GetStringTypeW

  GetLocaleInfoW

  GetCurrentThreadId

  WideCharToMultiByte

  MultiByteToWideChar

  DecodePointer

  EncodePointer

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  GetSystemTimeAsFileTime

  Exports

  Exports

  ??0?$_Yarn@D@std@@QEAA@AEBV01@@Z

  ??0?$_Yarn@D@std@@QEAA@PEBD@Z

  ??0?$_Yarn@D@std@@QEAA@XZ

  ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ

  ??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ

  ??0?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

  ??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

  ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

  ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

  ??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

  ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z

  ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@$$QEAV01@@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z

  ??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@AEBV01@@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@AEBV01@@Z

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@AEBV01@@Z

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@W4_Uninitialized@1@@Z

  ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ

  ??0?$codecvt@DDH@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$codecvt@DDH@std@@QEAA@_K@Z

  ??0?$codecvt@GDH@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$codecvt@GDH@std@@QEAA@_K@Z

  ??0?$codecvt@_WDH@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$codecvt@_WDH@std@@QEAA@_K@Z

  ??0?$ctype@D@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$ctype@D@std@@QEAA@PEBF_N_K@Z

  ??0?$ctype@G@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$ctype@G@std@@QEAA@_K@Z

  ??0?$ctype@_W@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$ctype@_W@std@@QEAA@_K@Z

  ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

  ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

  ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

  ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

  ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

  ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAA@PEBD_K@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z

  ??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z

  ??0Init@ios_base@std@@QEAA@XZ

  ??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z

  ??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z

  ??0_Container_base12@std@@QEAA@AEBU01@@Z

  ??0_Container_base12@std@@QEAA@XZ

  ??0_Init_locks@std@@QEAA@XZ

  ??0_Locimp@locale@std@@AEAA@AEBV012@@Z

  ??0_Locimp@locale@std@@AEAA@_N@Z

  ??0_Locinfo@std@@QEAA@HPEBD@Z

  ??0_Locinfo@std@@QEAA@PEBD@Z

  ??0_Lockit@std@@QEAA@H@Z

  ??0_Lockit@std@@QEAA@XZ

  ??0_Mutex@std@@QEAA@W4_Uninitialized@1@@Z

  ??0_Mutex@std@@QEAA@XZ

  ??0_Runtime_object@details@Concurrency@@QEAA@H@Z

  ??0_Runtime_object@details@Concurrency@@QEAA@XZ

  ??0_Timevec@std@@QEAA@AEBV01@@Z

  ??0_Timevec@std@@QEAA@PEAX@Z

  ??0_UShinit@std@@QEAA@XZ

  ??0_Winit@std@@QEAA@XZ

  ??0agent@Concurrency@@QEAA@AEAVScheduleGroup@1@@Z

  ??0agent@Concurrency@@QEAA@AEAVScheduler@1@@Z

  ??0agent@Concurrency@@QEAA@XZ

  ??0codecvt_base@std@@QEAA@_K@Z

  ??0ctype_base@std@@QEAA@_K@Z

  ??0facet@locale@std@@IEAA@_K@Z

  ??0id@locale@std@@QEAA@_K@Z

  ??0ios_base@std@@IEAA@XZ

  ??0ios_base@std@@QEAA@AEBV01@@Z

  ??0time_base@std@@QEAA@_K@Z

  ??1?$_Yarn@D@std@@QEAA@XZ

  ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ

  ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ

  ??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

  ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

  ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ

  ??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

  ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

  ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ

  ??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

  ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ

  ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ

  ??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

  ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ

  ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ

  ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ

  ??1?$codecvt@DDH@std@@MEAA@XZ

  ??1?$codecvt@GDH@std@@MEAA@XZ

  ??1?$codecvt@_WDH@std@@MEAA@XZ

  ??1?$ctype@D@std@@MEAA@XZ

  ??1?$ctype@G@std@@MEAA@XZ

  ??1?$ctype@_W@std@@MEAA@XZ

  ??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

  ??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

  ??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

  ??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

  ??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

  ??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

  ??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

  ??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

  ??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

  ??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ

  ??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ

  ??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ

  ??1Init@ios_base@std@@QEAA@XZ

  ??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ

  ??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ

  ??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ

  ??1_Container_base12@std@@QEAA@XZ

  ??1_Init_locks@std@@QEAA@XZ

  ??1_Locimp@locale@std@@MEAA@XZ

  ??1_Locinfo@std@@QEAA@XZ

  ??1_Lockit@std@@QEAA@XZ

  ??1_Mutex@std@@QEAA@XZ

  ??1_Timevec@std@@QEAA@XZ

  ??1_UShinit@std@@QEAA@XZ

  ??1_Winit@std@@QEAA@XZ

  ??1agent@Concurrency@@UEAA@XZ

  ??1codecvt_base@std@@UEAA@XZ

  ??1ctype_base@std@@UEAA@XZ

  ??1facet@locale@std@@UEAA@XZ

  ??1ios_base@std@@UEAA@XZ

  ??1time_base@std@@UEAA@XZ

  ??4?$_Iosb@H@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$_Yarn@D@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z

  ??4?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@$$QEAV01@@Z

  ??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAAEAV01@AEBV01@@Z

  ??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAAEAV01@AEBV01@@Z

  ??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@C@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@D@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@E@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@F@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@G@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@H@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@I@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@J@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@K@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@M@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@N@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@O@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@_J@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@_K@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@_N@std@@QEAAAEAV01@AEBV01@@Z

  ??4?$numeric_limits@_W@std@@QEAAAEAV01@AEBV01@@Z

  ??4Init@ios_base@std@@QEAAAEAV012@AEBV012@@Z

  ??4_Container_base0@std@@QEAAAEAU01@AEBU01@@Z

  ??4_Container_base12@std@@QEAAAEAU01@AEBU01@@Z

  ??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z

  ??4_Num_base@std@@QEAAAEAU01@AEBU01@@Z

  ??4_Num_float_base@std@@QEAAAEAU01@AEBU01@@Z

  ??4_Num_int_base@std@@QEAAAEAU01@AEBU01@@Z

  ??4_Timevec@std@@QEAAAEAV01@AEBV01@@Z

  ??4_UShinit@std@@QEAAAEAV01@AEBV01@@Z

  ??4_Winit@std@@QEAAAEAV01@AEBV01@@Z

  ??4ios_base@std@@QEAAAEAV01@AEBV01@@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAPEAX@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAF@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAG@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAJ@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAK@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAO@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAPEAX@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_J@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_K@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_N@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAF@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAG@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAJ@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAK@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAO@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAPEAX@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@F@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@G@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@M@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@O@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEBX@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_J@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z

  ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@O@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z

  ??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z

  ??7ios_base@std@@QEBA_NXZ

  ??Bid@locale@std@@QEAA_KXZ

  ??Bios_base@std@@QEBAPEAXXZ

  ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@

  ??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@

  ??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@

  ??_7?$codecvt@DDH@std@@6B@

  ??_7?$codecvt@GDH@std@@6B@

  ??_7?$codecvt@_WDH@std@@6B@

  ??_7?$ctype@D@std@@6B@

  ??_7?$ctype@G@std@@6B@

  ??_7?$ctype@_W@std@@6B@

  ??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@

  ??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@

  ??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@

  ??_7_Locimp@locale@std@@6B@

  ??_7codecvt_base@std@@6B@

  ??_7ctype_base@std@@6B@

  ??_7ios_base@std@@6B@

  ??_7time_base@std@@6B@

  ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@

  ??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@

  ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@

  ??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@

  ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@

  ??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@

  ??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@

  ??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@

  ??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@

  ??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@

  ??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@

  ??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@

  ??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAAXXZ

  ??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

  ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAXXZ

  ??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

  ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ

  ??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ

  ??_F?$codecvt@DDH@std@@QEAAXXZ

  ??_F?$codecvt@GDH@std@@QEAAXXZ

  ??_F?$codecvt@_WDH@std@@QEAAXXZ

  ??_F?$ctype@D@std@@QEAAXXZ

  ??_F?$ctype@G@std@@QEAAXXZ

  ??_F?$ctype@_W@std@@QEAAXXZ

  ??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

  ??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

  ??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

  ??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

  ??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

  ??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ

  ??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ

  ??_F_Locimp@locale@std@@QEAAXXZ

  ??_F_Locinfo@std@@QEAAXXZ

  ??_F_Timevec@std@@QEAAXXZ

  ??_Fcodecvt_base@std@@QEAAXXZ

  ??_Fctype_base@std@@QEAAXXZ

  ??_Ffacet@locale@std@@QEAAXXZ

  ??_Fid@locale@std@@QEAAXXZ

  ??_Ftime_base@std@@QEAAXXZ

  ?NFS_Allocate@details@Concurrency@@YAPEAX_K0PEAX@Z

  ?NFS_Free@details@Concurrency@@YAXPEAX@Z

  ?NFS_GetLineSize@details@Concurrency@@YA_KXZ

  ?_Addcats@_Locinfo@std@@QEAAAEAV12@HPEBD@Z

  ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z

  ?_Addstd@ios_base@std@@SAXPEAV12@@Z

  ?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ

  ?_Assign@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXAEBV123@@Z

  ?_Atexit@@YAXP6AXXZ@Z

  ?_BADOFF@std@@3_JB

  ?_C_str@?$_Yarn@D@std@@QEBAPEBDXZ

  ?_Callfns@ios_base@std@@AEAAXW4event@12@@Z

  ?_Clocptr@_Locimp@locale@std@@0PEAV123@EA

  ?_Decref@facet@locale@std@@QEAAPEAV123@XZ

  ?_Donarrow@?$ctype@G@std@@IEBADGD@Z

  ?_Donarrow@?$ctype@_W@std@@IEBAD_WD@Z

  ?_Dowiden@?$ctype@G@std@@IEBAGD@Z

  ?_Dowiden@?$ctype@_W@std@@IEBA_WD@Z

  ?_Empty@?$_Yarn@D@std@@QEBA_NXZ

  ?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADDH@Z

  ?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADDH@Z

  ?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADDH@Z

  ?_Findarr@ios_base@std@@AEAAAEAU_Iosarray@12@H@Z

  ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z

  ?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z

  ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

  ?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBD_K333@Z

  ?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBD_K333@Z

  ?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBD_K444@Z

  ?_GetCombinableSize@details@Concurrency@@YA_KXZ

  ?_GetCurrentThreadId@details@Concurrency@@YAKXZ

  ?_Getcat@?$codecvt@DDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$codecvt@GDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$codecvt@_WDH@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

  ?_Getcat@facet@locale@std@@SA_KPEAPEBV123@PEBV23@@Z

  ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ

  ?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ

  ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ

  ?_Getdateorder@_Locinfo@std@@QEBAHXZ

  ?_Getdays@_Locinfo@std@@QEBAPEBDXZ

  ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ

  ?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z

  ?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

  ?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

  ?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z

  ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

  ?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HAEBVlocale@2@@Z

  ?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HAEBVlocale@2@@Z

  ?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HAEBVlocale@2@@Z

  ?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAEAH@Z

  ?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAEAH@Z

  ?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAEAH@Z

  ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ

  ?_Getmonths@_Locinfo@std@@QEBAPEBDXZ

  ?_Getname@_Locinfo@std@@QEBAPEBDXZ

  ?_Getpfirst@_Container_base12@std@@QEBAPEAPEAU_Iterator_base12@2@XZ

  ?_Getptr@_Timevec@std@@QEBAPEAXXZ

  ?_Gettnames@_Locinfo@std@@QEBA?AV_Timevec@2@XZ

  ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ

  ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ

  ?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBA_JXZ

  ?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBA_JXZ

  ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

  ?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

  ?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

  ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

  ?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

  ?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

  ?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ

  ?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ

  ?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ

  ?_Hexdig@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHDDDD@Z

  ?_Hexdig@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHGGGG@Z

  ?_Hexdig@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAH_W000@Z

  ?_Id_cnt@id@locale@std@@0HA

  ?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

  ?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

  ?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z

  ?_Incref@facet@locale@std@@QEAAXXZ

  Sections

  .text

  Size: 311KB - Virtual size: 310KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 241KB - Virtual size: 240KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 14KB - Virtual size: 19KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/msvcr100.dll

  .dll windows:5 windows x64 arch:x64

  1208bcdc77cffee6a6813646321cfc79

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:b2:9b:00:00:00:00:00:15

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  21/02/2011, 20:53

  Not After

  21/05/2012, 20:53

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:a2:30:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:01

  Not After

  25/07/2013, 19:11

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  fe:39:c1:02:a5:3b:5c:2e:c1:cb:af:ab:d1:a0:8f:8a:dc:93:b5:ff

  Signer

  Actual PE Digest

  fe:39:c1:02:a5:3b:5c:2e:c1:cb:af:ab:d1:a0:8f:8a:dc:93:b5:ff

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  msvcr100.amd64.pdb

  Imports

  kernel32

  EncodePointer

  DecodePointer

  RaiseException

  RtlPcToFileHeader

  GetModuleFileNameA

  GetModuleFileNameW

  GetModuleHandleW

  GetProcAddress

  ExitProcess

  WriteFile

  GetStdHandle

  GetCurrentThreadId

  FlsSetValue

  FlsGetValue

  GetCommandLineW

  GetCommandLineA

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  CloseHandle

  GetLastError

  ResumeThread

  CreateThread

  FlsFree

  SetLastError

  GetCurrentThread

  FlsAlloc

  FindNextFileA

  FindFirstFileExA

  FindClose

  FindNextFileW

  FindFirstFileExW

  GetLogicalDrives

  GetDiskFreeSpaceA

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  SetErrorMode

  Sleep

  Beep

  GetFileAttributesA

  SetFileAttributesA

  SetEnvironmentVariableA

  GetCurrentDirectoryA

  SetCurrentDirectoryA

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  GetFullPathNameA

  GetDriveTypeW

  GetCurrentProcessId

  CreateDirectoryA

  MoveFileA

  RemoveDirectoryA

  GetDriveTypeA

  DeleteFileA

  GetFileAttributesW

  SetEnvironmentVariableW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  MoveFileW

  RemoveDirectoryW

  DeleteFileW

  GetExitCodeProcess

  WaitForSingleObject

  CreateProcessA

  LoadLibraryA

  FreeLibrary

  CreateProcessW

  ReadFile

  DuplicateHandle

  GetCurrentProcess

  GetSystemTimeAsFileTime

  GetTimeZoneInformation

  GetLocalTime

  WideCharToMultiByte

  SetFileTime

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  SetLocalTime

  TlsGetValue

  TlsSetValue

  InterlockedPopEntrySList

  InterlockedFlushSList

  QueryDepthSList

  InterlockedPushEntrySList

  CreateTimerQueue

  CreateTimerQueueTimer

  DeleteTimerQueueTimer

  SetEvent

  CreateEventW

  SwitchToThread

  SignalObjectAndWait

  TryEnterCriticalSection

  GetTickCount

  VirtualFree

  GetVersionExW

  SetThreadPriority

  VirtualAlloc

  GetLogicalProcessorInformation

  GetSystemInfo

  GetProcessAffinityMask

  VirtualProtect

  SetThreadAffinityMask

  InitializeSListHead

  ReleaseSemaphore

  CreateSemaphoreW

  WaitForMultipleObjects

  TlsAlloc

  TlsFree

  GetThreadPriority

  LoadLibraryW

  SleepEx

  OutputDebugStringW

  FreeLibraryAndExitThread

  GetModuleHandleA

  GetThreadTimes

  DebugBreak

  MultiByteToWideChar

  GetStringTypeW

  GetCPInfo

  GetACP

  GetOEMCP

  IsValidCodePage

  GetDateFormatA

  GetTimeFormatA

  GetDateFormatW

  GetTimeFormatW

  RtlLookupFunctionEntry

  RtlUnwindEx

  HeapAlloc

  HeapFree

  HeapSetInformation

  GetVersion

  HeapCreate

  HeapDestroy

  HeapQueryInformation

  HeapReAlloc

  HeapSize

  HeapValidate

  HeapCompact

  HeapWalk

  SetThreadStackGuarantee

  VirtualQuery

  SetHandleCount

  GetFileType

  GetStartupInfoW

  GetFileInformationByHandle

  PeekNamedPipe

  CreateFileA

  CreateFileW

  SetFilePointer

  GetConsoleCP

  GetConsoleMode

  FlushFileBuffers

  CreatePipe

  SetStdHandle

  ReadConsoleInputA

  SetConsoleMode

  PeekConsoleInputA

  GetNumberOfConsoleInputEvents

  ReadConsoleInputW

  WriteConsoleW

  ReadConsoleW

  SetEndOfFile

  GetProcessHeap

  LockFile

  UnlockFile

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  RtlVirtualUnwind

  RtlCaptureContext

  TerminateProcess

  SetConsoleCtrlHandler

  GetLocaleInfoW

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  LCMapStringW

  CompareStringW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  Exports

  Exports

  $I10_OUTPUT

  ??0?$_SpinWait@$00@details@Concurrency@@QEAA@P6AXXZ@Z

  ??0?$_SpinWait@$0A@@details@Concurrency@@QEAA@P6AXXZ@Z

  ??0SchedulerPolicy@Concurrency@@QEAA@AEBV01@@Z

  ??0SchedulerPolicy@Concurrency@@QEAA@XZ

  ??0SchedulerPolicy@Concurrency@@QEAA@_KZZ

  ??0_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ

  ??0_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??0_ReaderWriterLock@details@Concurrency@@QEAA@XZ

  ??0_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

  ??0_ReentrantLock@details@Concurrency@@QEAA@XZ

  ??0_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

  ??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@AEAV123@@Z

  ??0_SpinLock@details@Concurrency@@QEAA@AECJ@Z

  ??0_TaskCollection@details@Concurrency@@QEAA@XZ

  ??0_Timer@details@Concurrency@@IEAA@I_N@Z

  ??0__non_rtti_object@std@@QEAA@AEBV01@@Z

  ??0__non_rtti_object@std@@QEAA@PEBD@Z

  ??0bad_cast@std@@AEAA@PEBQEBD@Z

  ??0bad_cast@std@@QEAA@AEBV01@@Z

  ??0bad_cast@std@@QEAA@PEBD@Z

  ??0bad_target@Concurrency@@QEAA@PEBD@Z

  ??0bad_target@Concurrency@@QEAA@XZ

  ??0bad_typeid@std@@QEAA@AEBV01@@Z

  ??0bad_typeid@std@@QEAA@PEBD@Z

  ??0context_self_unblock@Concurrency@@QEAA@PEBD@Z

  ??0context_self_unblock@Concurrency@@QEAA@XZ

  ??0context_unblock_unbalanced@Concurrency@@QEAA@PEBD@Z

  ??0context_unblock_unbalanced@Concurrency@@QEAA@XZ

  ??0critical_section@Concurrency@@QEAA@XZ

  ??0default_scheduler_exists@Concurrency@@QEAA@PEBD@Z

  ??0default_scheduler_exists@Concurrency@@QEAA@XZ

  ??0event@Concurrency@@QEAA@XZ

  ??0exception@std@@QEAA@AEBQEBD@Z

  ??0exception@std@@QEAA@AEBQEBDH@Z

  ??0exception@std@@QEAA@AEBV01@@Z

  ??0exception@std@@QEAA@XZ

  ??0improper_lock@Concurrency@@QEAA@PEBD@Z

  ??0improper_lock@Concurrency@@QEAA@XZ

  ??0improper_scheduler_attach@Concurrency@@QEAA@PEBD@Z

  ??0improper_scheduler_attach@Concurrency@@QEAA@XZ

  ??0improper_scheduler_detach@Concurrency@@QEAA@PEBD@Z

  ??0improper_scheduler_detach@Concurrency@@QEAA@XZ

  ??0improper_scheduler_reference@Concurrency@@QEAA@PEBD@Z

  ??0improper_scheduler_reference@Concurrency@@QEAA@XZ

  ??0invalid_link_target@Concurrency@@QEAA@PEBD@Z

  ??0invalid_link_target@Concurrency@@QEAA@XZ

  ??0invalid_multiple_scheduling@Concurrency@@QEAA@PEBD@Z

  ??0invalid_multiple_scheduling@Concurrency@@QEAA@XZ

  ??0invalid_operation@Concurrency@@QEAA@PEBD@Z

  ??0invalid_operation@Concurrency@@QEAA@XZ

  ??0invalid_oversubscribe_operation@Concurrency@@QEAA@PEBD@Z

  ??0invalid_oversubscribe_operation@Concurrency@@QEAA@XZ

  ??0invalid_scheduler_policy_key@Concurrency@@QEAA@PEBD@Z

  ??0invalid_scheduler_policy_key@Concurrency@@QEAA@XZ

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@PEBD@Z

  ??0invalid_scheduler_policy_thread_specification@Concurrency@@QEAA@XZ

  ??0invalid_scheduler_policy_value@Concurrency@@QEAA@PEBD@Z

  ??0invalid_scheduler_policy_value@Concurrency@@QEAA@XZ

  ??0message_not_found@Concurrency@@QEAA@PEBD@Z

  ??0message_not_found@Concurrency@@QEAA@XZ

  ??0missing_wait@Concurrency@@QEAA@PEBD@Z

  ??0missing_wait@Concurrency@@QEAA@XZ

  ??0nested_scheduler_missing_detach@Concurrency@@QEAA@PEBD@Z

  ??0nested_scheduler_missing_detach@Concurrency@@QEAA@XZ

  ??0operation_timed_out@Concurrency@@QEAA@PEBD@Z

  ??0operation_timed_out@Concurrency@@QEAA@XZ

  ??0reader_writer_lock@Concurrency@@QEAA@XZ

  ??0scheduler_not_attached@Concurrency@@QEAA@PEBD@Z

  ??0scheduler_not_attached@Concurrency@@QEAA@XZ

  ??0scheduler_resource_allocation_error@Concurrency@@QEAA@J@Z

  ??0scheduler_resource_allocation_error@Concurrency@@QEAA@PEBDJ@Z

  ??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z

  ??0scoped_lock@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z

  ??0scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@AEAV12@@Z

  ??0task_canceled@details@Concurrency@@QEAA@PEBD@Z

  ??0task_canceled@details@Concurrency@@QEAA@XZ

  ??0unsupported_os@Concurrency@@QEAA@PEBD@Z

  ??0unsupported_os@Concurrency@@QEAA@XZ

  ??1SchedulerPolicy@Concurrency@@QEAA@XZ

  ??1_NonReentrantBlockingLock@details@Concurrency@@QEAA@XZ

  ??1_ReentrantBlockingLock@details@Concurrency@@QEAA@XZ

  ??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QEAA@XZ

  ??1_SpinLock@details@Concurrency@@QEAA@XZ

  ??1_TaskCollection@details@Concurrency@@QEAA@XZ

  ??1_Timer@details@Concurrency@@IEAA@XZ

  ??1__non_rtti_object@std@@UEAA@XZ

  ??1bad_cast@std@@UEAA@XZ

  ??1bad_typeid@std@@UEAA@XZ

  ??1critical_section@Concurrency@@QEAA@XZ

  ??1event@Concurrency@@QEAA@XZ

  ??1exception@std@@UEAA@XZ

  ??1reader_writer_lock@Concurrency@@QEAA@XZ

  ??1scoped_lock@critical_section@Concurrency@@QEAA@XZ

  ??1scoped_lock@reader_writer_lock@Concurrency@@QEAA@XZ

  ??1scoped_lock_read@reader_writer_lock@Concurrency@@QEAA@XZ

  ??1type_info@@UEAA@XZ

  ??2@YAPEAX_K@Z

  ??2@YAPEAX_KHPEBDH@Z

  ??3@YAXPEAX@Z

  ??4?$_SpinWait@$00@details@Concurrency@@QEAAAEAV012@AEBV012@@Z

  ??4?$_SpinWait@$0A@@details@Concurrency@@QEAAAEAV012@AEBV012@@Z

  ??4SchedulerPolicy@Concurrency@@QEAAAEAV01@AEBV01@@Z

  ??4__non_rtti_object@std@@QEAAAEAV01@AEBV01@@Z

  ??4bad_cast@std@@QEAAAEAV01@AEBV01@@Z

  ??4bad_typeid@std@@QEAAAEAV01@AEBV01@@Z

  ??4exception@std@@QEAAAEAV01@AEBV01@@Z

  ??8type_info@@QEBA_NAEBV0@@Z

  ??9type_info@@QEBA_NAEBV0@@Z

  ??_7__non_rtti_object@std@@6B@

  ??_7bad_cast@std@@6B@

  ??_7bad_typeid@std@@6B@

  ??_7exception@@6B@

  ??_7exception@std@@6B@

  ??_F?$_SpinWait@$00@details@Concurrency@@QEAAXXZ

  ??_F?$_SpinWait@$0A@@details@Concurrency@@QEAAXXZ

  ??_Fbad_cast@std@@QEAAXXZ

  ??_Fbad_typeid@std@@QEAAXXZ

  ??_U@YAPEAX_K@Z

  ??_U@YAPEAX_KHPEBDH@Z

  ??_V@YAXPEAX@Z

  ?Alloc@Concurrency@@YAPEAX_K@Z

  ?Block@Context@Concurrency@@SAXXZ

  ?Create@CurrentScheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z

  ?Create@Scheduler@Concurrency@@SAPEAV12@AEBVSchedulerPolicy@2@@Z

  ?CreateResourceManager@Concurrency@@YAPEAUIResourceManager@1@XZ

  ?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPEAVScheduleGroup@2@XZ

  ?CurrentContext@Context@Concurrency@@SAPEAV12@XZ

  ?Detach@CurrentScheduler@Concurrency@@SAXXZ

  ?DisableTracing@Concurrency@@YAJXZ

  ?EnableTracing@Concurrency@@YAJXZ

  ?Free@Concurrency@@YAXPEAX@Z

  ?Get@CurrentScheduler@Concurrency@@SAPEAVScheduler@2@XZ

  ?GetExecutionContextId@Concurrency@@YAIXZ

  ?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ

  ?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ

  ?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ

  ?GetPolicyValue@SchedulerPolicy@Concurrency@@QEBAIW4PolicyElementKey@2@@Z

  ?GetProcessorCount@Concurrency@@YAIXZ

  ?GetProcessorNodeCount@Concurrency@@YAIXZ

  ?GetSchedulerId@Concurrency@@YAIXZ

  ?GetSharedTimerQueue@details@Concurrency@@YAPEAXXZ

  ?Id@Context@Concurrency@@SAIXZ

  ?Id@CurrentScheduler@Concurrency@@SAIXZ

  ?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ

  ?Log2@details@Concurrency@@YAK_K@Z

  ?Oversubscribe@Context@Concurrency@@SAX_N@Z

  ?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPEAX@Z

  ?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ

  ?ScheduleGroupId@Context@Concurrency@@SAIXZ

  ?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPEAX@Z0@Z

  ?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QEAAXII@Z

  ?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXAEBVSchedulerPolicy@2@@Z

  ?SetPolicyValue@SchedulerPolicy@Concurrency@@QEAAIW4PolicyElementKey@2@I@Z

  ?VirtualProcessorId@Context@Concurrency@@SAIXZ

  ?Yield@Context@Concurrency@@SAXXZ

  ?_Abort@_StructuredTaskCollection@details@Concurrency@@AEAAXXZ

  ?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ

  ?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z

  ?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

  ?_Acquire@_ReentrantLock@details@Concurrency@@QEAAXXZ

  ?_Acquire@_ReentrantPPLLock@details@Concurrency@@QEAAXPEAX@Z

  ?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

  ?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

  ?_Cancel@_StructuredTaskCollection@details@Concurrency@@QEAAXXZ

  ?_Cancel@_TaskCollection@details@Concurrency@@QEAAXXZ

  ?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IEAAXXZ

  ?_ConcRT_Assert@details@Concurrency@@YAXPEBD0H@Z

  ?_ConcRT_CoreAssert@details@Concurrency@@YAXPEBD0H@Z

  ?_ConcRT_DumpMessage@details@Concurrency@@YAXPEB_WZZ

  ?_ConcRT_Trace@details@Concurrency@@YAXHPEB_WZZ

  ?_Copy_str@exception@std@@AEAAXPEBD@Z

  ?_DoYield@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ

  ?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ

  ?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QEAA_NXZ

  ?_IsCanceling@_TaskCollection@details@Concurrency@@QEAA_NXZ

  ?_Name_base@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z

  ?_Name_base_internal@type_info@@CAPEBDPEBV1@PEAU__type_info_node@@@Z

  ?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IEAAKXZ

  ?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IEAAKXZ

  ?_Release@_NonReentrantBlockingLock@details@Concurrency@@QEAAXXZ

  ?_Release@_NonReentrantPPLLock@details@Concurrency@@QEAAXXZ

  ?_Release@_ReentrantBlockingLock@details@Concurrency@@QEAAXXZ

  ?_Release@_ReentrantLock@details@Concurrency@@QEAAXXZ

  ?_Release@_ReentrantPPLLock@details@Concurrency@@QEAAXXZ

  ?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

  ?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QEAAXXZ

  ?_Reset@?$_SpinWait@$00@details@Concurrency@@IEAAXXZ

  ?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IEAAXXZ

  ?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z

  ?_RunAndWait@_TaskCollection@details@Concurrency@@QEAA?AW4_TaskCollectionStatus@23@PEAV_UnrealizedChore@23@@Z

  ?_Schedule@_StructuredTaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z

  ?_Schedule@_TaskCollection@details@Concurrency@@QEAAXPEAV_UnrealizedChore@23@@Z

  ?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QEAAXI@Z

  ?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QEAAXI@Z

  ?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IEAA_NXZ

  ?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IEAA_NXZ

  ?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QEAA_NXZ

  ?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QEAA_NXZ

  ?_SpinYield@Context@Concurrency@@SAXXZ

  ?_Start@_Timer@details@Concurrency@@IEAAXXZ

  ?_Stop@_Timer@details@Concurrency@@IEAAXXZ

  ?_Tidy@exception@std@@AEAAXXZ

  ?_Trace_ppl_function@Concurrency@@YAXAEBU_GUID@@EW4ConcRT_EventType@1@@Z

  ?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QEAA_NXZ

  ?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QEAA_NXZ

  ?_TryAcquire@_ReentrantLock@details@Concurrency@@QEAA_NXZ

  ?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QEAA_NXZ

  ?_Type_info_dtor@type_info@@CAXPEAV1@@Z

  ?_Type_info_dtor_internal@type_info@@CAXPEAV1@@Z

  ?_UnderlyingYield@details@Concurrency@@YAXXZ

  ?_ValidateExecute@@YAHP6A_JXZ@Z

  ?_ValidateRead@@YAHPEBXI@Z

  ?_ValidateWrite@@YAHPEAXI@Z

  ?_Value@_SpinCount@details@Concurrency@@SAIXZ

  ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z

  ?__ExceptionPtrCompare@@YA_NPEBX0@Z

  ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z

  ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z

  ?__ExceptionPtrCreate@@YAXPEAX@Z

  ?__ExceptionPtrCurrentException@@YAXPEAX@Z

  ?__ExceptionPtrDestroy@@YAXPEAX@Z

  ?__ExceptionPtrRethrow@@YAXPEBX@Z

  ?_inconsistency@@YAXXZ

  ?_invalid_parameter@@YAXPEBG00I_K@Z

  ?_is_exception_typeof@@YAHAEBVtype_info@@PEAU_EXCEPTION_POINTERS@@@Z

  ?_name_internal_method@type_info@@QEBAPEBDPEAU__type_info_node@@@Z

  ?_open@@YAHPEBDHH@Z

  ?_query_new_handler@@YAP6AH_K@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AH_K@ZH@Z

  ?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZH@Z

  ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?_sopen@@YAHPEBDHHH@Z

  ?_type_info_dtor_internal_method@type_info@@QEAAXXZ

  ?_wopen@@YAHPEB_WHH@Z

  ?_wsopen@@YAHPEB_WHHH@Z

  ?before@type_info@@QEBAHAEBV1@@Z

  ?get_error_code@scheduler_resource_allocation_error@Concurrency@@QEBAJXZ

  ?lock@critical_section@Concurrency@@QEAAXXZ

  ?lock@reader_writer_lock@Concurrency@@QEAAXXZ

  ?lock_read@reader_writer_lock@Concurrency@@QEAAXXZ

  ?name@type_info@@QEBAPEBDPEAU__type_info_node@@@Z

  ?native_handle@critical_section@Concurrency@@QEAAAEAV12@XZ

  ?raw_name@type_info@@QEBAPEBDXZ

  ?reset@event@Concurrency@@QEAAXXZ

  ?set@event@Concurrency@@QEAAXXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_terminate@@YAP6AXXZH@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZH@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?terminate@@YAXXZ

  ?try_lock@critical_section@Concurrency@@QEAA_NXZ

  ?try_lock@reader_writer_lock@Concurrency@@QEAA_NXZ

  ?try_lock_read@reader_writer_lock@Concurrency@@QEAA_NXZ

  ?unexpected@@YAXXZ

  ?unlock@critical_section@Concurrency@@QEAAXXZ

  ?unlock@reader_writer_lock@Concurrency@@QEAAXXZ

  ?wait@Concurrency@@YAXI@Z

  ?wait@event@Concurrency@@QEAA_KI@Z

  ?wait_for_multiple@event@Concurrency@@SA_KPEAPEAV12@_K_NI@Z

  ?what@exception@std@@UEBAPEBDXZ

  _CRT_RTC_INIT

  _CRT_RTC_INITW

  _CreateFrameInfo

  _CxxThrowException

  _FindAndUnlinkFrame

  _GetImageBase

  _GetThrowImageBase

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _IsExceptionObjectToBeDestroyed

  _SetImageBase

  _SetThrowImageBase

  _Strftime

  _XcptFilter

  __AdjustPointer

  __BuildCatchObject

  __BuildCatchObjectHelper

  __C_specific_handler

  __CppXcptFilter

  __CxxCallUnwindDelDtor

  __CxxCallUnwindDtor

  __CxxCallUnwindStdDelDtor

  __CxxCallUnwindVecDtor

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxFrameHandler2

  __CxxFrameHandler3

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __FrameUnwindFilter

  __NLG_Dispatch2

  __NLG_Return2

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  __STRINGTOLD_L

  __TypeMatch

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  ___mb_cur_max_l_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __clean_type_info_names_internal

  __create_locale

  __crtCompareStringA

  __crtCompareStringW

  __crtLCMapStringA

  __crtLCMapStringW

  __crt_debugger_hook

  __daylight

  __dllonexit

  __doserrno

  __dstbias

  __fls_getvalue

  __fls_setvalue

  __fpecode

  __free_locale

  __get_current_locale

  __get_flsindex

  __get_tlsindex

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __iswcsym

  __iswcsymf

  __lconv

  __lconv_init

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __report_gsfailure

  __set_app_type

  __set_flsgetvalue

  __setlc_active

  __setusermatherr

  __strncnt

  __swprintf_l

  __sys_errlist

  __sys_nerr

  __threadhandle

  __threadid

  __timezone

  __toascii

  __tzname

  __unDName

  __unDNameEx

  __unDNameHelper

  __uncaught_exception

  __unguarded_readlc_active

  __vswprintf_l

  __wargv

  __wcserror

  __wcserror_s

  __wcsncnt

  __wgetmainargs

  __winitenv

  _abs64

  _access

  _access_s

  _acmdln

  _aligned_free

  _aligned_malloc

  _aligned_msize

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_offset_recalloc

  _aligned_realloc

  _aligned_recalloc

  _amsg_exit

  _assert

  _atodbl

  _atodbl_l

  _atof_l

  _atoflt

  _atoflt_l

  _atoi64

  _atoi64_l

  _atoi_l

  _atol_l

  _atoldbl

  _atoldbl_l

  _beep

  _beginthread

  _beginthreadex

  _byteswap_uint64

  _byteswap_ulong

  _byteswap_ushort

  _c_exit

  _cabs

  _callnewh

  _calloc_crt

  _cexit

  _cgets

  _cgets_s

  _cgetws

  _cgetws_s

  _chdir

  _chdrive

  _chgsign

  _chgsignf

  _chmod

  _chsize

  _chsize_s

  _clearfp

  _close

  _commit

  _commode

  _configthreadlocale

  _control87

  _controlfp

  _controlfp_s

  _copysign

  _copysignf

  _cprintf

  _cprintf_l

  _cprintf_p

  _cprintf_p_l

  _cprintf_s

  _cprintf_s_l

  _cputs

  _cputws

  _creat

  _create_locale

  _cscanf

  _cscanf_l

  _cscanf_s

  _cscanf_s_l

  _ctime32

  _ctime32_s

  _ctime64

  _ctime64_s

  _cwait

  _cwprintf

  _cwprintf_l

  _cwprintf_p

  _cwprintf_p_l

  _cwprintf_s

  _cwprintf_s_l

  _cwscanf

  _cwscanf_l

  _cwscanf_s

  _cwscanf_s_l

  _daylight

  _difftime32

  _difftime64

  _dosmaperr

  _dstbias

  _dup

  _dup2

  _dupenv_s

  _ecvt

  _ecvt_s

  _encoded_null

  _endthread

  Sections

  .text

  Size: 574KB - Virtual size: 573KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 131KB - Virtual size: 130KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 25KB - Virtual size: 24KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  _CONST

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  text

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  data

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Microsoft.VC100.CRT/sys.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/PornHub Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 188KB - Virtual size: 188KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/PornHub Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/PornHub Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/PornHub Checker/sys.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/Psn Checker V0.1 By Scoroio.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/v01bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  _[?

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 3.2MB - Virtual size: 3.2MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 180KB - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .dark

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/procs/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Psn Checker V0.1 By Scoroio/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/AxInterop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 203KB - Virtual size: 202KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 720B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/Interop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 350KB - Virtual size: 350KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RDP Cracker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/AxInterop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 203KB - Virtual size: 202KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 720B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/Interop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 350KB - Virtual size: 350KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/RLSettings/lib.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 237KB - Virtual size: 236KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP Cracker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/RDP Cracker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/AxInterop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 53KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 720B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/Interop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 105KB - Virtual size: 105KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/AxInterop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 53KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 720B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/Interop.MSTSCLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 105KB - Virtual size: 105KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/Readme.txt
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/RLSettings/bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Documents and Settings\Administrator\my documents\visual studio 2010\Projects\xTSCrackWinSrv\xTSCrackWinSrv\obj\x86\Release\xTSCrackWinSrv.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 246KB - Virtual size: 246KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 131KB - Virtual size: 131KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/Readme.txt
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/RDP xtscrack Cracker 0.9/xTSCrack.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 424KB - Virtual size: 424KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/CPFilters.dll

  .dll regsvr32 windows:10 windows x64 arch:x64

  7afea2ed1708d746b6cb468206853322

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  CPFilters.pdb

  Imports

  msvcrt

  _wtol

  tolower

  _CxxThrowException

  wcschr

  _amsg_exit

  _initterm

  ?terminate@@YAXXZ

  _lock

  _unlock

  __dllonexit

  __CxxFrameHandler3

  _onexit

  _wcsnicmp

  realloc

  _XcptFilter

  ??1type_info@@UEAA@XZ

  memcpy

  memset

  memcmp

  _wcsicmp

  memmove

  sscanf_s

  wcsncmp

  isupper

  wcsstr

  swscanf

  _beginthreadex

  _endthread

  swprintf_s

  iswxdigit

  swscanf_s

  srand

  wcsncpy_s

  strnlen

  strcat_s

  wcstoul

  wcscat_s

  strncpy_s

  wcsnlen

  _time32

  time

  rand

  ??0exception@@QEAA@XZ

  _vsnwprintf_s

  _callnewh

  malloc

  free

  __C_specific_handler

  _vsnwprintf

  memmove_s

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@AEBQEBD@Z

  ??1exception@@UEAA@XZ

  ?what@exception@@UEBAPEBDXZ

  _purecall

  memcpy_s

  wcspbrk

  wcscmp

  ntdll

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  RtlGetPersistedStateLocation

  RtlCaptureContext

  advapi32

  RegDeleteKeyW

  CryptAcquireContextA

  TraceMessage

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptDestroyHash

  CryptGetHashParam

  CryptReleaseContext

  CryptGenRandom

  RegEnumKeyExW

  RegCloseKey

  RegCreateKeyExW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  crypt32

  CertGetCertificateChain

  CertFreeCertificateChain

  CertGetNameStringW

  CertVerifyCertificateChainPolicy

  kernel32

  DebugBreak

  LocalAlloc

  GlobalAlloc

  GlobalFree

  GetVersion

  GetEnvironmentStringsW

  GlobalMemoryStatusEx

  GetProcessHeap

  HeapAlloc

  FreeEnvironmentStringsW

  DeviceIoControl

  GetDiskFreeSpaceW

  HeapFree

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  OutputDebugStringA

  SleepConditionVariableSRW

  WakeAllConditionVariable

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  QueryPerformanceCounter

  GetSystemTime

  GetGeoInfoA

  IsDebuggerPresent

  RaiseException

  WriteFile

  ReadFile

  lstrlenW

  SetFilePointer

  GlobalLock

  GetFileSize

  GlobalUnlock

  CompareStringW

  lstrlenA

  FreeEnvironmentStringsA

  TerminateProcess

  ExpandEnvironmentStringsW

  WaitForMultipleObjects

  WaitForSingleObject

  LoadLibraryW

  GetProcAddress

  FreeLibrary

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DecodeSystemPointer

  Sleep

  OutputDebugStringW

  EncodeSystemPointer

  DeleteCriticalSection

  GetCurrentProcessId

  VirtualProtect

  GetCurrentProcess

  GetModuleFileNameW

  ResumeThread

  GetLastError

  RaiseFailFastException

  GetCurrentThread

  CloseHandle

  GetModuleHandleW

  LoadLibraryExW

  DisableThreadLibraryCalls

  GetVersionExW

  GetModuleFileNameA

  MultiByteToWideChar

  lstrcmpW

  CreateEventW

  ResetEvent

  GetCurrentThreadId

  SetEvent

  CreateThread

  GetTickCount

  SetThreadPriority

  lstrcmpiW

  CompareFileTime

  GetSystemTimeAsFileTime

  WideCharToMultiByte

  GetLocalTime

  SystemTimeToFileTime

  GetSystemFirmwareTable

  LocalFree

  GetTickCount64

  GetModuleHandleExW

  CreateFileW

  ole32

  CoFileTimeNow

  PropVariantClear

  CLSIDFromString

  PropVariantCopy

  CoTaskMemAlloc

  CoUninitialize

  CoFreeUnusedLibraries

  CoInitializeEx

  StringFromGUID2

  CoCreateInstance

  CoCreateGuid

  CoTaskMemFree

  oleaut32

  SafeArrayGetUBound

  SafeArrayDestroy

  VariantCopy

  VariantChangeType

  SafeArrayGetLBound

  SafeArrayUnaccessData

  SafeArrayAccessData

  SysStringLen

  SysAllocStringLen

  SysAllocString

  SysFreeString

  VariantClear

  VariantInit

  SafeArrayCreate

  SysStringByteLen

  slc

  SLGetWindowsInformationDWORD

  winmm

  timeGetTime

  wintrust

  CryptCATCatalogInfoFromContext

  WinVerifyTrust

  WTHelperProvDataFromStateData

  mfplat

  MFCreateCollection

  ws2_32

  htonl

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  UpdatePlayready

  Sections

  .text

  Size: 637KB - Virtual size: 636KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 186KB - Virtual size: 185KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/Reddit Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 213KB - Virtual size: 212KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/ctypes.jsm

  .js
• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/CPFilters.dll

  .dll regsvr32 windows:10 windows x64 arch:x64

  7afea2ed1708d746b6cb468206853322

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  CPFilters.pdb

  Imports

  msvcrt

  _wtol

  tolower

  _CxxThrowException

  wcschr

  _amsg_exit

  _initterm

  ?terminate@@YAXXZ

  _lock

  _unlock

  __dllonexit

  __CxxFrameHandler3

  _onexit

  _wcsnicmp

  realloc

  _XcptFilter

  ??1type_info@@UEAA@XZ

  memcpy

  memset

  memcmp

  _wcsicmp

  memmove

  sscanf_s

  wcsncmp

  isupper

  wcsstr

  swscanf

  _beginthreadex

  _endthread

  swprintf_s

  iswxdigit

  swscanf_s

  srand

  wcsncpy_s

  strnlen

  strcat_s

  wcstoul

  wcscat_s

  strncpy_s

  wcsnlen

  _time32

  time

  rand

  ??0exception@@QEAA@XZ

  _vsnwprintf_s

  _callnewh

  malloc

  free

  __C_specific_handler

  _vsnwprintf

  memmove_s

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@AEBQEBD@Z

  ??1exception@@UEAA@XZ

  ?what@exception@@UEBAPEBDXZ

  _purecall

  memcpy_s

  wcspbrk

  wcscmp

  ntdll

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  RtlGetPersistedStateLocation

  RtlCaptureContext

  advapi32

  RegDeleteKeyW

  CryptAcquireContextA

  TraceMessage

  CryptAcquireContextW

  CryptCreateHash

  CryptHashData

  CryptDestroyHash

  CryptGetHashParam

  CryptReleaseContext

  CryptGenRandom

  RegEnumKeyExW

  RegCloseKey

  RegCreateKeyExW

  RegSetValueExW

  RegOpenKeyExW

  RegQueryValueExW

  crypt32

  CertGetCertificateChain

  CertFreeCertificateChain

  CertGetNameStringW

  CertVerifyCertificateChainPolicy

  kernel32

  DebugBreak

  LocalAlloc

  GlobalAlloc

  GlobalFree

  GetVersion

  GetEnvironmentStringsW

  GlobalMemoryStatusEx

  GetProcessHeap

  HeapAlloc

  FreeEnvironmentStringsW

  DeviceIoControl

  GetDiskFreeSpaceW

  HeapFree

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  OutputDebugStringA

  SleepConditionVariableSRW

  WakeAllConditionVariable

  AcquireSRWLockExclusive

  ReleaseSRWLockExclusive

  QueryPerformanceCounter

  GetSystemTime

  GetGeoInfoA

  IsDebuggerPresent

  RaiseException

  WriteFile

  ReadFile

  lstrlenW

  SetFilePointer

  GlobalLock

  GetFileSize

  GlobalUnlock

  CompareStringW

  lstrlenA

  FreeEnvironmentStringsA

  TerminateProcess

  ExpandEnvironmentStringsW

  WaitForMultipleObjects

  WaitForSingleObject

  LoadLibraryW

  GetProcAddress

  FreeLibrary

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DecodeSystemPointer

  Sleep

  OutputDebugStringW

  EncodeSystemPointer

  DeleteCriticalSection

  GetCurrentProcessId

  VirtualProtect

  GetCurrentProcess

  GetModuleFileNameW

  ResumeThread

  GetLastError

  RaiseFailFastException

  GetCurrentThread

  CloseHandle

  GetModuleHandleW

  LoadLibraryExW

  DisableThreadLibraryCalls

  GetVersionExW

  GetModuleFileNameA

  MultiByteToWideChar

  lstrcmpW

  CreateEventW

  ResetEvent

  GetCurrentThreadId

  SetEvent

  CreateThread

  GetTickCount

  SetThreadPriority

  lstrcmpiW

  CompareFileTime

  GetSystemTimeAsFileTime

  WideCharToMultiByte

  GetLocalTime

  SystemTimeToFileTime

  GetSystemFirmwareTable

  LocalFree

  GetTickCount64

  GetModuleHandleExW

  CreateFileW

  ole32

  CoFileTimeNow

  PropVariantClear

  CLSIDFromString

  PropVariantCopy

  CoTaskMemAlloc

  CoUninitialize

  CoFreeUnusedLibraries

  CoInitializeEx

  StringFromGUID2

  CoCreateInstance

  CoCreateGuid

  CoTaskMemFree

  oleaut32

  SafeArrayGetUBound

  SafeArrayDestroy

  VariantCopy

  VariantChangeType

  SafeArrayGetLBound

  SafeArrayUnaccessData

  SafeArrayAccessData

  SysStringLen

  SysAllocStringLen

  SysAllocString

  SysFreeString

  VariantClear

  VariantInit

  SafeArrayCreate

  SysStringByteLen

  slc

  SLGetWindowsInformationDWORD

  winmm

  timeGetTime

  wintrust

  CryptCATCatalogInfoFromContext

  WinVerifyTrust

  WTHelperProvDataFromStateData

  mfplat

  MFCreateCollection

  ws2_32

  htonl

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  UpdatePlayready

  Sections

  .text

  Size: 637KB - Virtual size: 636KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 186KB - Virtual size: 185KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 5KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/ctypes.jsm

  .js
• Checkers PACK/Checkers PACK/Reddit Checker/d3d9/dbgcore.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/NcaSvc.dll

  .dll windows:10 windows x64 arch:x64

  be040105def20e0c8f67a8a06bf21b12

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  NcaSvc.pdb

  Imports

  msvcrt

  malloc

  memset

  _wcsnicmp

  free

  _amsg_exit

  _XcptFilter

  _vsnprintf_s

  wcschr

  _wcsicmp

  _vsnwprintf

  strchr

  __C_specific_handler

  memcpy

  _initterm

  wcscmp

  api-ms-win-eventing-classicprovider-l1-1-0

  GetTraceEnableLevel

  UnregisterTraceGuids

  GetTraceLoggerHandle

  RegisterTraceGuidsW

  TraceMessage

  GetTraceEnableFlags

  api-ms-win-core-synch-l1-1-0

  AcquireSRWLockExclusive

  SetEvent

  LeaveCriticalSection

  EnterCriticalSection

  AcquireSRWLockShared

  InitializeCriticalSectionAndSpinCount

  ReleaseSRWLockExclusive

  WaitForSingleObjectEx

  CreateEventW

  ReleaseSRWLockShared

  SetWaitableTimer

  DeleteCriticalSection

  WaitForSingleObject

  ResetEvent

  InitializeSRWLock

  api-ms-win-core-synch-l1-2-1

  WaitForMultipleObjects

  CreateWaitableTimerW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolWork

  SubmitThreadpoolWork

  LeaveCriticalSectionWhenCallbackReturns

  CreateThreadpoolTimer

  SetThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CreateThreadpoolWait

  SetThreadpoolWait

  WaitForThreadpoolWaitCallbacks

  CloseThreadpoolWait

  CloseThreadpoolWork

  CloseThreadpoolTimer

  api-ms-win-eventing-provider-l1-1-0

  EventSetInformation

  EventRegister

  EventWriteTransfer

  EventUnregister

  api-ms-win-service-core-l1-1-0

  RegisterServiceCtrlHandlerExW

  SetServiceStatus

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-processthreads-l1-1-0

  CreateProcessAsUserW

  QueueUserAPC

  CreateProcessW

  TerminateProcess

  GetCurrentProcessId

  ResumeThread

  GetCurrentProcess

  GetCurrentThreadId

  SetThreadToken

  OpenProcessToken

  GetCurrentThread

  OpenThreadToken

  CreateThread

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  LoadStringW

  oleaut32

  SysFreeString

  VariantInit

  SysAllocString

  VariantClear

  api-ms-win-core-com-l1-1-0

  CoInitializeEx

  CoSetProxyBlanket

  CoUninitialize

  CoCreateInstance

  ws2_32

  GetAddrInfoW

  WSACleanup

  InetPtonW

  WSAStartup

  FreeAddrInfoW

  iphlpapi

  IcmpCloseHandle

  Icmp6SendEcho2

  NotifyIpInterfaceChange

  Icmp6CreateFile

  FreeMibTable

  CreateSortedAddressPairs

  CancelMibChangeNotify2

  GetAdaptersAddresses

  NotifyUnicastIpAddressChange

  NotifyRouteChange2

  api-ms-win-security-sddl-l1-1-0

  ConvertStringSidToSidW

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetLengthSid

  RevertToSelf

  EqualSid

  GetTokenInformation

  CopySid

  CheckTokenMembership

  AccessCheck

  rpcrt4

  RpcServerInqBindings

  RpcServerRegisterIfEx

  RpcEpUnregister

  RpcStringFreeW

  RpcServerRegisterAuthInfoW

  RpcServerInqDefaultPrincNameW

  Ndr64AsyncServerCallAll

  NdrServerCallAll

  NdrAsyncServerCall

  NdrServerCall2

  RpcBindingVectorFree

  RpcServerUnregisterIfEx

  I_RpcBindingIsClientLocal

  RpcBindingToStringBindingW

  RpcStringBindingParseW

  RpcBindingInqAuthClientW

  UuidEqual

  RpcEpRegisterW

  RpcServerUseProtseqW

  RpcAsyncCompleteCall

  RpcAsyncAbortCall

  RpcImpersonateClient

  RpcRevertToSelf

  api-ms-win-core-file-l1-1-0

  WriteFile

  ReadFile

  CreateFileW

  GetTempFileNameW

  GetLongPathNameW

  SetFilePointer

  api-ms-win-core-file-l1-2-0

  GetTempPathW

  userenv

  DestroyEnvironmentBlock

  CreateEnvironmentBlock

  RegisterGPNotification

  UnregisterGPNotification

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenSCManagerW

  OpenServiceW

  api-ms-win-service-management-l2-1-0

  NotifyServiceStatusChangeW

  api-ms-win-core-synch-l1-2-0

  InitializeConditionVariable

  Sleep

  SleepConditionVariableSRW

  WakeAllConditionVariable

  WakeConditionVariable

  SleepConditionVariableCS

  api-ms-win-core-rtlsupport-l1-1-0

  RtlLookupFunctionEntry

  RtlCaptureContext

  RtlVirtualUnwind

  RtlCompareMemory

  winhttp

  WinHttpCrackUrl

  WinHttpOpenRequest

  WinHttpConnect

  WinHttpOpen

  WinHttpSendRequest

  WinHttpSetStatusCallback

  WinHttpCloseHandle

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  GetComputerNameExW

  GetTickCount64

  GetSystemTime

  dnsapi

  DnsFreePolicyConfig

  DnsGetPolicyTableInfo

  sspicli

  FreeContextBuffer

  GetUserNameExW

  DeleteSecurityContext

  InitializeSecurityContextW

  QuerySecurityPackageInfoW

  FreeCredentialsHandle

  AcquireCredentialsHandleW

  RevertSecurityContext

  ImpersonateSecurityContext

  AcceptSecurityContext

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-registry-l1-1-0

  RegOpenKeyExW

  RegCreateKeyExW

  RegEnumValueW

  RegCloseKey

  RegNotifyChangeKeyValue

  RegDeleteValueW

  RegQueryInfoKeyW

  RegSetValueExW

  RegQueryValueExW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapFree

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  bcrypt

  BCryptGetFipsAlgorithmMode

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-shlwapi-legacy-l1-1-0

  PathCanonicalizeW

  ntdll

  EtwTraceMessage

  RtlIpv6AddressToStringW

  WinSqmIsOptedIn

  WinSqmSetDWORD

  umpdc

  PdcNotificationClientUnregister

  PdcNotificationClientRegister

  api-ms-win-security-lsalookup-l1-1-0

  LookupAccountSidLocalW

  httpprxp

  ProxyHelperProviderConnectToServer

  ProxyHelperProviderRegisterForEventNotification

  ProxyHelperProviderUnregisterEventNotification

  ProxyHelperProviderDisconnectFromServer

  kernel32

  GetComputerNameW

  CreateJobObjectW

  RegisterWaitForSingleObject

  UnregisterWaitEx

  TerminateJobObject

  UnregisterWait

  AssignProcessToJobObject

  fwpuclnt

  FwpmNetEventSubscribe4

  FwpmNetEventUnsubscribe0

  FwpmEngineClose0

  FwpmEngineOpen0

  firewallapi

  FWChangeNotificationDestroy

  FWChangeNotificationCreate

  Exports

  Exports

  ServiceMain

  SvchostPushServiceGlobals

  Sections

  .text

  Size: 113KB - Virtual size: 113KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 596B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/NetUtil.jsm

  .js
• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/NcaSvc.dll

  .dll windows:10 windows x64 arch:x64

  be040105def20e0c8f67a8a06bf21b12

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  NcaSvc.pdb

  Imports

  msvcrt

  malloc

  memset

  _wcsnicmp

  free

  _amsg_exit

  _XcptFilter

  _vsnprintf_s

  wcschr

  _wcsicmp

  _vsnwprintf

  strchr

  __C_specific_handler

  memcpy

  _initterm

  wcscmp

  api-ms-win-eventing-classicprovider-l1-1-0

  GetTraceEnableLevel

  UnregisterTraceGuids

  GetTraceLoggerHandle

  RegisterTraceGuidsW

  TraceMessage

  GetTraceEnableFlags

  api-ms-win-core-synch-l1-1-0

  AcquireSRWLockExclusive

  SetEvent

  LeaveCriticalSection

  EnterCriticalSection

  AcquireSRWLockShared

  InitializeCriticalSectionAndSpinCount

  ReleaseSRWLockExclusive

  WaitForSingleObjectEx

  CreateEventW

  ReleaseSRWLockShared

  SetWaitableTimer

  DeleteCriticalSection

  WaitForSingleObject

  ResetEvent

  InitializeSRWLock

  api-ms-win-core-synch-l1-2-1

  WaitForMultipleObjects

  CreateWaitableTimerW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolWork

  SubmitThreadpoolWork

  LeaveCriticalSectionWhenCallbackReturns

  CreateThreadpoolTimer

  SetThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CreateThreadpoolWait

  SetThreadpoolWait

  WaitForThreadpoolWaitCallbacks

  CloseThreadpoolWait

  CloseThreadpoolWork

  CloseThreadpoolTimer

  api-ms-win-eventing-provider-l1-1-0

  EventSetInformation

  EventRegister

  EventWriteTransfer

  EventUnregister

  api-ms-win-service-core-l1-1-0

  RegisterServiceCtrlHandlerExW

  SetServiceStatus

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  api-ms-win-core-processthreads-l1-1-0

  CreateProcessAsUserW

  QueueUserAPC

  CreateProcessW

  TerminateProcess

  GetCurrentProcessId

  ResumeThread

  GetCurrentProcess

  GetCurrentThreadId

  SetThreadToken

  OpenProcessToken

  GetCurrentThread

  OpenThreadToken

  CreateThread

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  LoadStringW

  oleaut32

  SysFreeString

  VariantInit

  SysAllocString

  VariantClear

  api-ms-win-core-com-l1-1-0

  CoInitializeEx

  CoSetProxyBlanket

  CoUninitialize

  CoCreateInstance

  ws2_32

  GetAddrInfoW

  WSACleanup

  InetPtonW

  WSAStartup

  FreeAddrInfoW

  iphlpapi

  IcmpCloseHandle

  Icmp6SendEcho2

  NotifyIpInterfaceChange

  Icmp6CreateFile

  FreeMibTable

  CreateSortedAddressPairs

  CancelMibChangeNotify2

  GetAdaptersAddresses

  NotifyUnicastIpAddressChange

  NotifyRouteChange2

  api-ms-win-security-sddl-l1-1-0

  ConvertStringSidToSidW

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetLengthSid

  RevertToSelf

  EqualSid

  GetTokenInformation

  CopySid

  CheckTokenMembership

  AccessCheck

  rpcrt4

  RpcServerInqBindings

  RpcServerRegisterIfEx

  RpcEpUnregister

  RpcStringFreeW

  RpcServerRegisterAuthInfoW

  RpcServerInqDefaultPrincNameW

  Ndr64AsyncServerCallAll

  NdrServerCallAll

  NdrAsyncServerCall

  NdrServerCall2

  RpcBindingVectorFree

  RpcServerUnregisterIfEx

  I_RpcBindingIsClientLocal

  RpcBindingToStringBindingW

  RpcStringBindingParseW

  RpcBindingInqAuthClientW

  UuidEqual

  RpcEpRegisterW

  RpcServerUseProtseqW

  RpcAsyncCompleteCall

  RpcAsyncAbortCall

  RpcImpersonateClient

  RpcRevertToSelf

  api-ms-win-core-file-l1-1-0

  WriteFile

  ReadFile

  CreateFileW

  GetTempFileNameW

  GetLongPathNameW

  SetFilePointer

  api-ms-win-core-file-l1-2-0

  GetTempPathW

  userenv

  DestroyEnvironmentBlock

  CreateEnvironmentBlock

  RegisterGPNotification

  UnregisterGPNotification

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenSCManagerW

  OpenServiceW

  api-ms-win-service-management-l2-1-0

  NotifyServiceStatusChangeW

  api-ms-win-core-synch-l1-2-0

  InitializeConditionVariable

  Sleep

  SleepConditionVariableSRW

  WakeAllConditionVariable

  WakeConditionVariable

  SleepConditionVariableCS

  api-ms-win-core-rtlsupport-l1-1-0

  RtlLookupFunctionEntry

  RtlCaptureContext

  RtlVirtualUnwind

  RtlCompareMemory

  winhttp

  WinHttpCrackUrl

  WinHttpOpenRequest

  WinHttpConnect

  WinHttpOpen

  WinHttpSendRequest

  WinHttpSetStatusCallback

  WinHttpCloseHandle

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  GetComputerNameExW

  GetTickCount64

  GetSystemTime

  dnsapi

  DnsFreePolicyConfig

  DnsGetPolicyTableInfo

  sspicli

  FreeContextBuffer

  GetUserNameExW

  DeleteSecurityContext

  InitializeSecurityContextW

  QuerySecurityPackageInfoW

  FreeCredentialsHandle

  AcquireCredentialsHandleW

  RevertSecurityContext

  ImpersonateSecurityContext

  AcceptSecurityContext

  api-ms-win-core-processenvironment-l1-1-0

  ExpandEnvironmentStringsW

  api-ms-win-core-registry-l1-1-0

  RegOpenKeyExW

  RegCreateKeyExW

  RegEnumValueW

  RegCloseKey

  RegNotifyChangeKeyValue

  RegDeleteValueW

  RegQueryInfoKeyW

  RegSetValueExW

  RegQueryValueExW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapAlloc

  HeapFree

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  bcrypt

  BCryptGetFipsAlgorithmMode

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-shlwapi-legacy-l1-1-0

  PathCanonicalizeW

  ntdll

  EtwTraceMessage

  RtlIpv6AddressToStringW

  WinSqmIsOptedIn

  WinSqmSetDWORD

  umpdc

  PdcNotificationClientUnregister

  PdcNotificationClientRegister

  api-ms-win-security-lsalookup-l1-1-0

  LookupAccountSidLocalW

  httpprxp

  ProxyHelperProviderConnectToServer

  ProxyHelperProviderRegisterForEventNotification

  ProxyHelperProviderUnregisterEventNotification

  ProxyHelperProviderDisconnectFromServer

  kernel32

  GetComputerNameW

  CreateJobObjectW

  RegisterWaitForSingleObject

  UnregisterWaitEx

  TerminateJobObject

  UnregisterWait

  AssignProcessToJobObject

  fwpuclnt

  FwpmNetEventSubscribe4

  FwpmNetEventUnsubscribe0

  FwpmEngineClose0

  FwpmEngineOpen0

  firewallapi

  FWChangeNotificationDestroy

  FWChangeNotificationCreate

  Exports

  Exports

  ServiceMain

  SvchostPushServiceGlobals

  Sections

  .text

  Size: 113KB - Virtual size: 113KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 596B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/NetUtil.jsm

  .js
• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/newdev/npnul32.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\R3born\Desktop\Yeni klasör (5)\skinwallet.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 27KB - Virtual size: 27KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SKINWALLET CHECKER BY SHANX/skinwallet.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 183KB - Virtual size: 183KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/Shoppy.gg + Mail access v 2.0.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 175KB - Virtual size: 175KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/email.txt
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/lib.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Users\pro\Documents\SharpDevelop Projects\SSGC\SSGC\obj\Debug\SSGC.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/pass.txt
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Shoopy.gg Checker/email.txt
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/pass.txt
• Checkers PACK/Checkers PACK/Shoopy.gg Checker/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/Results/ZippyUploader(11-4-2020 9-31-50 p. m.).txt
• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/Spotify Account Checker By Amir v0.1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/MetroFramework.Design.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Design\obj\Release\MetroFramework.Design.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/MetroFramework.Fonts.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  e:\Development\Desktop\Github\winforms-modernui\MetroFramework.Fonts\obj\Release\MetroFramework.Fonts.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 654KB - Virtual size: 653KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/MetroFramework.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 342KB - Virtual size: 342KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/sysShell.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 572KB - Virtual size: 571KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 363KB - Virtual size: 363KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/binSpotify/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Account Checker By Amir v0.1.exe/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/Spotify Brute Checker By ACTEAM.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/WPFToolkit.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:cf:3e:00:00:00:00:00:0f

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/12/2009, 22:40

  Not After

  07/03/2011, 22:40

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:06:94:2d:00:00:00:00:00:09

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:02

  Not After

  25/07/2013, 19:12

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

  Signer

  Actual PE Digest

  78:ad:59:01:6e:90:b6:bb:0e:e2:71:c2:d6:d0:1b:d7:70:a4:ac:e8

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\dd\WPF_1\src\wpf\src\ControlsPack\WPFToolkit\obj\Release\WPFToolkit.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 448KB - Virtual size: 448KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/WebDriver/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/WebDriver/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/WebDriver/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/WebDriver/nvml.exe

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  .CODE

  Size: 97KB - Virtual size: 3.9MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 4KB

  .cdata

  Size: 151KB - Virtual size: 152KB

  IMAGE_SCN_MEM_READ

  .idata

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .didata

  Size: 423KB - Virtual size: 424KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pep-ul

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1.2MB - Virtual size: 1.2MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Brute Checker By ACTEAM/forms.css
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/CloudflareSolverRe.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe\obj\Release\netstandard1.1\CloudflareSolverRe.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 117KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Results/01-23-2020 22.12/Premium for Students + Hulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Results/01-23-2020 22.12/Premium for Students.txt
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Results/01-23-2020 22.12/Spotify Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/SpotHear.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/CloudflareSolverRe.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ryuzaki\Documents\Visual Studio 2017\Projects\CloudflareSolverRe\src\CloudflareSolverRe\obj\Release\netstandard1.1\CloudflareSolverRe.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 72KB - Virtual size: 72KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 117KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker - SpotHear/x86/bin.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Read Me.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-10/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-10/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-10/SpotifyPremiumDuo.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-16/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-16/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-16/SpotifyPremiumDuo.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-24/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-24/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 17-33/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 20-17/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 20-17/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 20-17/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/28-09-2019 20-17/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 00-58/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 00-58/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 00-58/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 00-58/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-19/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-19/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-19/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-19/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-21/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-21/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-21/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Results/29-09-2019 11-21/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Spotify Checker By DJR - Cracked by FullMoonSword.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 172KB - Virtual size: 172KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 127KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Read Me.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-10/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-10/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-10/SpotifyPremiumDuo.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-16/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-16/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-16/SpotifyPremiumDuo.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-24/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-24/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 17-33/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 20-17/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 20-17/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 20-17/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/28-09-2019 20-17/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 00-58/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 00-58/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 00-58/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 00-58/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-19/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-19/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-19/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-19/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-21/FamilyMembers.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-21/Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-21/SpotifyPremiumWithHulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/Results/29-09-2019 11-21/Student.txt
• Checkers PACK/Checkers PACK/Spotify Checker By DJR - Cracked by FullMoonSword/bin/core.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 24KB - Virtual size: 24KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/BR.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/CA.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/DE.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/NL.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/PH.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/TR.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Family Owners/US.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Premium for Family.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Premium for Students + Hulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Premium for Students.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Spotify Premium with Hulu.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Results/07-08-2019 16.02/Spotify Premium.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Spotify.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 124KB - Virtual size: 123KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/SceSetupLog.etl
• Checkers PACK/Checkers PACK/Spotify Checker by Asaka/logs/sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\mcfre\Desktop\Projets\Spotify\obj\Release\Spotify.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 18KB - Virtual size: 18KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Data/Bunifu_UI_v1.5.3.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 234KB - Virtual size: 233KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Data/SpotifyServer.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\Trippy\source\repos\Spotify Checker by KniX\Netflix Checker by KniX\obj\Debug\Spotify Checker by KniX.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 349KB - Virtual size: 348KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 271KB - Virtual size: 270KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Spotify Checker by KniX.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 164KB - Virtual size: 164KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Checker by KniX/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Checker by KniX/mfc100cht.dll

  .dll windows:5 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Signer

  Actual PE Digest

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Checker by KniX/sppwmi.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  cd57137afebd26cd3722e5087dfae48e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  sppwmi.pdb

  Imports

  msvcrt

  memmove

  _except_handler4_common

  _onexit

  __dllonexit

  _unlock

  _lock

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  _wcsicmp

  _purecall

  memcpy

  memcmp

  towupper

  _vsnwprintf

  memset

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  GetProcessHeap

  HeapFree

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  GetModuleFileNameW

  GetModuleHandleExW

  GetProcAddress

  api-ms-win-core-heap-l2-1-0

  LocalAlloc

  LocalFree

  rpcrt4

  UuidFromStringW

  I_RpcMapWin32Status

  RpcStringFreeW

  UuidToStringW

  oleaut32

  SysAllocStringLen

  LoadTypeLi

  SafeArrayGetUBound

  SafeArrayGetLBound

  SysStringLen

  SafeArrayCreate

  SafeArrayGetDim

  RegisterTypeLi

  SysFreeString

  VariantClear

  VariantInit

  SafeArrayGetElement

  SafeArrayUnaccessData

  UnRegisterTypeLi

  SafeArrayAccessData

  SafeArrayCreateVector

  SysAllocString

  SafeArrayDestroy

  api-ms-win-core-registry-l1-1-0

  RegQueryInfoKeyW

  RegCloseKey

  RegDeleteValueW

  RegOpenKeyExW

  RegQueryValueExW

  RegSetKeySecurity

  RegSetValueExW

  RegCreateKeyExW

  api-ms-win-core-errorhandling-l1-1-0

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  RaiseException

  SetLastError

  api-ms-win-core-wow64-l1-1-0

  IsWow64Process

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  api-ms-win-core-string-l1-1-0

  CompareStringW

  WideCharToMultiByte

  crypt32

  CertNameToStrW

  CertFreeCertificateContext

  CertGetCertificateContextProperty

  CertDuplicateCertificateContext

  api-ms-win-core-timezone-l1-1-0

  FileTimeToSystemTime

  api-ms-win-core-util-l1-1-0

  DecodePointer

  EncodePointer

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-synch-l1-1-0

  CreateEventW

  WaitForSingleObject

  ReleaseSemaphore

  LeaveCriticalSection

  EnterCriticalSection

  DeleteCriticalSection

  SetEvent

  InitializeCriticalSectionAndSpinCount

  api-ms-win-core-synch-l1-2-1

  CreateSemaphoreW

  api-ms-win-core-memory-l1-1-0

  VirtualQuery

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-com-l1-1-0

  CoImpersonateClient

  CoRevertToSelf

  CoCreateInstance

  CoGetClassObject

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  slc

  SLReArmWindows

  SLConsumeRight

  SLDepositOfflineConfirmationId

  SLDepositOfflineConfirmationIdEx

  SLUninstallProofOfPurchase

  SLGenerateOfflineInstallationId

  SLGetPKeyInformation

  SLGetProductSkuInformation

  SLInstallLicense

  SLGetApplicationInformation

  SLGetLicensingStatusInformation

  SLGetSLIDList

  SLConsumeWindowsRight

  SLGetLicenseInformation

  SLGetPolicyInformation

  SLClose

  SLOpen

  SLUninstallLicense

  SLGetServiceInformation

  SLInstallProofOfPurchase

  SLGenerateOfflineInstallationIdEx

  sppc

  SLIsGenuineLocalEx

  SLReArm

  sppcext

  SLSignTokenActivationChallenge

  SLInstallPackage

  SLActivateProduct

  SLFreeTokenActivationGrants

  SLGetTokenActivationCertificates

  SLGenerateTokenActivationChallenge

  SLFreeTokenActivationCertificates

  SLDepositTokenActivationResponse

  SLGetTokenActivationGrants

  advapi32

  RegDeleteKeyW

  RegEnumKeyW

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 87KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 505KB - Virtual size: 505KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/RestSharp.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\restsharp\RestSharp\obj\Release\net452\RestSharp.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 175KB - Virtual size: 174KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/SpotifySpectrumX.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 172KB - Virtual size: 171KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/VisualPlus.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 739KB - Virtual size: 738KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Net45\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 505KB - Virtual size: 505KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/RestSharp.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\restsharp\RestSharp\obj\Release\net452\RestSharp.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 175KB - Virtual size: 174KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 944B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/VisualPlus.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 739KB - Virtual size: 738KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 68KB - Virtual size: 68KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Spotify Spectrum Cracker/library/procs.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 225KB - Virtual size: 225KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 32KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/SteamApi.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  Steam API Cracker.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 502B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 38KB - Virtual size: 38KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/d3dx10_43.dll

  .dll windows:6 windows x86 arch:x86

  fa0e64147431993f5a3e8765dd918c86

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:cf:3e:00:00:00:00:00:0f

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/12/2009, 22:40

  Not After

  07/03/2011, 22:40

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:a2:30:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:01

  Not After

  25/07/2013, 19:11

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  49:86:2e:c6:9e:a9:72:be:48:95:50:bc:21:cc:dd:54:ea:b6:b5:59

  Signer

  Actual PE Digest

  49:86:2e:c6:9e:a9:72:be:48:95:50:bc:21:cc:dd:54:ea:b6:b5:59

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_43.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _amsg_exit

  free

  _initterm

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  _vsnwprintf

  __CxxFrameHandler

  gdi32

  GetCharacterPlacementW

  GetCharacterPlacementA

  SetTextColor

  DeleteDC

  DeleteObject

  SelectObject

  CreateDIBSection

  GetGlyphOutlineA

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetBkColor

  kernel32

  IsProcessorFeaturePresent

  WideCharToMultiByte

  CreateFileW

  GetFileSizeEx

  ReadFile

  MultiByteToWideChar

  GetFullPathNameW

  GetLastError

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  CreateFileA

  WaitForMultipleObjects

  ReleaseSemaphore

  ReleaseMutex

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  LoadLibraryA

  LeaveCriticalSection

  EnterCriticalSection

  GetProcAddress

  DisableThreadLibraryCalls

  InitializeCriticalSection

  DeleteCriticalSection

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetVersion

  WriteFile

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  DebugBreak

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateDevice

  D3DX10CreateDeviceAndSwapChain

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10FilterTexture

  D3DX10GetFeatureLevel1

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 416KB - Virtual size: 415KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/mrt_map.dll

  .dll windows:6 windows x86 arch:x86

  6d7002eab78631023367ba18dab69813

  
  

  Code Sign

  33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  17/11/2016, 22:09

  Not After

  17/02/2018, 22:09

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b3:7a:77:a0:8d:24:de:a5:81:fd:48:2d:e1:e4:86:15:fe:d1:4b:56:d7:bf:f3:e0:20:87:f4:bc:d7:c0:04:1a

  Signer

  Actual PE Digest

  b3:7a:77:a0:8d:24:de:a5:81:fd:48:2d:e1:e4:86:15:fe:d1:4b:56:d7:bf:f3:e0:20:87:f4:bc:d7:c0:04:1a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  c9:82:89:eb:28:97:3b:42:8e:e9:fb:e4:47:40:ae:d1:42:11:61:65

  Signer

  Actual PE Digest

  c9:82:89:eb:28:97:3b:42:8e:e9:fb:e4:47:40:ae:d1:42:11:61:65

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  mrt_map.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  _amsg_exit

  _XcptFilter

  __CxxFrameHandler3

  malloc

  free

  memcmp

  api-ms-win-core-interlocked-l1-2-0

  InterlockedIncrement

  InterlockedDecrement

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-errorhandling-l1-1-1

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-1

  GetCurrentProcess

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-2-0

  GetTickCount

  GetSystemTimeAsFileTime

  Exports

  Exports

  CLRDataCreateInstance

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 856B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 1004B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 552B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/steamApi.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/sxstrace.exe

  .exe windows:10 windows x86 arch:x86

  e5f700cf708ed01f967809eb3e520c38

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  sxstrace.pdb

  Imports

  advapi32

  ControlTraceW

  EnableTraceEx

  CloseTrace

  ProcessTrace

  StartTraceW

  OpenTraceW

  kernel32

  GetConsoleOutputCP

  GetStdHandle

  WriteFile

  RaiseException

  HeapSetInformation

  GetModuleHandleW

  WideCharToMultiByte

  SetThreadPreferredUILanguages

  SetConsoleCtrlHandler

  lstrlenW

  GetUserDefaultLangID

  CreateFileW

  FormatMessageW

  GetLastError

  CloseHandle

  QueryPerformanceCounter

  TerminateProcess

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  Sleep

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount

  GetCurrentProcessId

  msvcrt

  ??0exception@@QAE@ABV0@@Z

  getchar

  wcsrchr

  _CxxThrowException

  _XcptFilter

  __p__commode

  _amsg_exit

  __wgetmainargs

  __set_app_type

  exit

  _exit

  _cexit

  __p__fmode

  memmove_s

  _initterm

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _controlfp

  _except_handler4_common

  memcpy

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@XZ

  ??1exception@@UAE@XZ

  _wcsnicmp

  __setusermatherr

  ?what@exception@@UBEPBDXZ

  _wcsicmp

  memcpy_s

  _vsnwprintf

  __CxxFrameHandler3

  printf

  wcsstr

  memset

  ntdll

  RtlAllocateHeap

  RtlFreeHeap

  user32

  LoadStringW

  Sections

  .text

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 42KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/wtsapi32.dll

  .dll windows:10 windows x86 arch:x86

  05de2f62058708c9549030bb966baf5c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Signer

  Actual PE Digest

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  wtsapi32.pdb

  Imports

  msvcrt

  memcpy

  free

  _except_handler4_common

  _initterm

  malloc

  memcpy_s

  _amsg_exit

  _XcptFilter

  _wcsupr

  swscanf

  memset

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  SetLastError

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetCurrentThreadId

  OpenThreadToken

  OpenProcessToken

  GetCurrentProcessId

  GetCurrentThread

  TerminateProcess

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  LocalReAlloc

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-file-l1-1-0

  ReadFile

  WriteFile

  api-ms-win-core-io-l1-1-1

  CancelIo

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObject

  api-ms-win-core-io-l1-1-0

  GetOverlappedResult

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExW

  RegCloseKey

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  ntdll

  RtlNtStatusToDosError

  RtlMultiByteToUnicodeN

  RtlUnicodeToMultiByteSize

  RtlUnicodeToMultiByteN

  RtlAdjustPrivilege

  NtDeviceIoControlFile

  NtWaitForSingleObject

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  IsInteractiveUserSession

  QueryActiveSession

  QueryUserToken

  RegisterUsertokenForNoWinlogon

  WTSCloseServer

  WTSConnectSessionA

  WTSConnectSessionW

  WTSCreateListenerA

  WTSCreateListenerW

  WTSDisconnectSession

  WTSEnableChildSessions

  WTSEnumerateListenersA

  WTSEnumerateListenersW

  WTSEnumerateProcessesA

  WTSEnumerateProcessesExA

  WTSEnumerateProcessesExW

  WTSEnumerateProcessesW

  WTSEnumerateServersA

  WTSEnumerateServersW

  WTSEnumerateSessionsA

  WTSEnumerateSessionsExA

  WTSEnumerateSessionsExW

  WTSEnumerateSessionsW

  WTSFreeMemory

  WTSFreeMemoryExA

  WTSFreeMemoryExW

  WTSGetChildSessionId

  WTSGetListenerSecurityA

  WTSGetListenerSecurityW

  WTSIsChildSessionsEnabled

  WTSLogoffSession

  WTSOpenServerA

  WTSOpenServerExA

  WTSOpenServerExW

  WTSOpenServerW

  WTSQueryListenerConfigA

  WTSQueryListenerConfigW

  WTSQuerySessionInformationA

  WTSQuerySessionInformationW

  WTSQueryUserConfigA

  WTSQueryUserConfigW

  WTSQueryUserToken

  WTSRegisterSessionNotification

  WTSRegisterSessionNotificationEx

  WTSSendMessageA

  WTSSendMessageW

  WTSSetListenerSecurityA

  WTSSetListenerSecurityW

  WTSSetRenderHint

  WTSSetSessionInformationA

  WTSSetSessionInformationW

  WTSSetUserConfigA

  WTSSetUserConfigW

  WTSShutdownSystem

  WTSStartRemoteControlSessionA

  WTSStartRemoteControlSessionW

  WTSStopRemoteControlSession

  WTSTerminateProcess

  WTSUnRegisterSessionNotification

  WTSUnRegisterSessionNotificationEx

  WTSVirtualChannelClose

  WTSVirtualChannelOpen

  WTSVirtualChannelOpenEx

  WTSVirtualChannelPurgeInput

  WTSVirtualChannelPurgeOutput

  WTSVirtualChannelQuery

  WTSVirtualChannelRead

  WTSVirtualChannelWrite

  WTSWaitSystemEvent

  Sections

  .text

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 872B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Steam API Cracker Coded by MR.ViPER - v3.0.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 192KB - Virtual size: 192KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Steam Checker by Mr.ViPER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/d3dx10_43.dll

  .dll windows:6 windows x86 arch:x86

  fa0e64147431993f5a3e8765dd918c86

  
  

  Code Sign

  2e:ab:11:dc:50:ff:5c:9d:cb:c0

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  22/08/2007, 22:31

  Not After

  25/08/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:01:cf:3e:00:00:00:00:00:0f

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/12/2009, 22:40

  Not After

  07/03/2011, 22:40

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:05:a2:30:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  25/07/2008, 19:01

  Not After

  25/07/2013, 19:11

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:85D3-305C-5BCF,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  49:86:2e:c6:9e:a9:72:be:48:95:50:bc:21:cc:dd:54:ea:b6:b5:59

  Signer

  Actual PE Digest

  49:86:2e:c6:9e:a9:72:be:48:95:50:bc:21:cc:dd:54:ea:b6:b5:59

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_43.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _amsg_exit

  free

  _initterm

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  _vsnwprintf

  __CxxFrameHandler

  gdi32

  GetCharacterPlacementW

  GetCharacterPlacementA

  SetTextColor

  DeleteDC

  DeleteObject

  SelectObject

  CreateDIBSection

  GetGlyphOutlineA

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetBkColor

  kernel32

  IsProcessorFeaturePresent

  WideCharToMultiByte

  CreateFileW

  GetFileSizeEx

  ReadFile

  MultiByteToWideChar

  GetFullPathNameW

  GetLastError

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  CreateFileA

  WaitForMultipleObjects

  ReleaseSemaphore

  ReleaseMutex

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  LoadLibraryA

  LeaveCriticalSection

  EnterCriticalSection

  GetProcAddress

  DisableThreadLibraryCalls

  InitializeCriticalSection

  DeleteCriticalSection

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetVersion

  WriteFile

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  DebugBreak

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateDevice

  D3DX10CreateDeviceAndSwapChain

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10FilterTexture

  D3DX10GetFeatureLevel1

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 416KB - Virtual size: 415KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 14KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/mrt_map.dll

  .dll windows:6 windows x86 arch:x86

  6d7002eab78631023367ba18dab69813

  
  

  Code Sign

  33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:8e:87:91:a4:57:1a:5f:ca:3e:00:00:00:00:00:8e

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  17/11/2016, 22:09

  Not After

  17/02/2018, 22:09

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  b3:7a:77:a0:8d:24:de:a5:81:fd:48:2d:e1:e4:86:15:fe:d1:4b:56:d7:bf:f3:e0:20:87:f4:bc:d7:c0:04:1a

  Signer

  Actual PE Digest

  b3:7a:77:a0:8d:24:de:a5:81:fd:48:2d:e1:e4:86:15:fe:d1:4b:56:d7:bf:f3:e0:20:87:f4:bc:d7:c0:04:1a

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  c9:82:89:eb:28:97:3b:42:8e:e9:fb:e4:47:40:ae:d1:42:11:61:65

  Signer

  Actual PE Digest

  c9:82:89:eb:28:97:3b:42:8e:e9:fb:e4:47:40:ae:d1:42:11:61:65

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  mrt_map.pdb

  Imports

  msvcrt

  _except_handler4_common

  _initterm

  _amsg_exit

  _XcptFilter

  __CxxFrameHandler3

  malloc

  free

  memcmp

  api-ms-win-core-interlocked-l1-2-0

  InterlockedIncrement

  InterlockedDecrement

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-errorhandling-l1-1-1

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-1

  GetCurrentProcess

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-2-0

  GetTickCount

  GetSystemTimeAsFileTime

  Exports

  Exports

  CLRDataCreateInstance

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 856B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 1004B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 552B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/steamApi.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/sxstrace.exe

  .exe windows:10 windows x86 arch:x86

  e5f700cf708ed01f967809eb3e520c38

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  sxstrace.pdb

  Imports

  advapi32

  ControlTraceW

  EnableTraceEx

  CloseTrace

  ProcessTrace

  StartTraceW

  OpenTraceW

  kernel32

  GetConsoleOutputCP

  GetStdHandle

  WriteFile

  RaiseException

  HeapSetInformation

  GetModuleHandleW

  WideCharToMultiByte

  SetThreadPreferredUILanguages

  SetConsoleCtrlHandler

  lstrlenW

  GetUserDefaultLangID

  CreateFileW

  FormatMessageW

  GetLastError

  CloseHandle

  QueryPerformanceCounter

  TerminateProcess

  GetCurrentProcess

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  Sleep

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  GetTickCount

  GetCurrentProcessId

  msvcrt

  ??0exception@@QAE@ABV0@@Z

  getchar

  wcsrchr

  _CxxThrowException

  _XcptFilter

  __p__commode

  _amsg_exit

  __wgetmainargs

  __set_app_type

  exit

  _exit

  _cexit

  __p__fmode

  memmove_s

  _initterm

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _controlfp

  _except_handler4_common

  memcpy

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@XZ

  ??1exception@@UAE@XZ

  _wcsnicmp

  __setusermatherr

  ?what@exception@@UBEPBDXZ

  _wcsicmp

  memcpy_s

  _vsnwprintf

  __CxxFrameHandler3

  printf

  wcsstr

  memset

  ntdll

  RtlAllocateHeap

  RtlFreeHeap

  user32

  LoadStringW

  Sections

  .text

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 42KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/sysAcc.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  9)bJ:4f#

  Size: 434KB - Virtual size: 433KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 147KB - Virtual size: 146KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/wtsapi32.dll

  .dll windows:10 windows x86 arch:x86

  05de2f62058708c9549030bb966baf5c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Signer

  Actual PE Digest

  3c:23:87:9c:a1:cc:5f:3a:77:f6:b4:92:53:d3:ca:89:0d:a3:c0:42:62:47:2a:09:8f:ab:d1:f1:f4:7f:55:13

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  wtsapi32.pdb

  Imports

  msvcrt

  memcpy

  free

  _except_handler4_common

  _initterm

  malloc

  memcpy_s

  _amsg_exit

  _XcptFilter

  _wcsupr

  swscanf

  memset

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  SetLastError

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetCurrentThreadId

  OpenThreadToken

  OpenProcessToken

  GetCurrentProcessId

  GetCurrentThread

  TerminateProcess

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  LocalReAlloc

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-string-l1-1-0

  WideCharToMultiByte

  api-ms-win-core-file-l1-1-0

  ReadFile

  WriteFile

  api-ms-win-core-io-l1-1-1

  CancelIo

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObject

  api-ms-win-core-io-l1-1-0

  GetOverlappedResult

  api-ms-win-core-registry-l1-1-0

  RegQueryValueExW

  RegSetValueExW

  RegOpenKeyExW

  RegCloseKey

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  ntdll

  RtlNtStatusToDosError

  RtlMultiByteToUnicodeN

  RtlUnicodeToMultiByteSize

  RtlUnicodeToMultiByteN

  RtlAdjustPrivilege

  NtDeviceIoControlFile

  NtWaitForSingleObject

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  IsInteractiveUserSession

  QueryActiveSession

  QueryUserToken

  RegisterUsertokenForNoWinlogon

  WTSCloseServer

  WTSConnectSessionA

  WTSConnectSessionW

  WTSCreateListenerA

  WTSCreateListenerW

  WTSDisconnectSession

  WTSEnableChildSessions

  WTSEnumerateListenersA

  WTSEnumerateListenersW

  WTSEnumerateProcessesA

  WTSEnumerateProcessesExA

  WTSEnumerateProcessesExW

  WTSEnumerateProcessesW

  WTSEnumerateServersA

  WTSEnumerateServersW

  WTSEnumerateSessionsA

  WTSEnumerateSessionsExA

  WTSEnumerateSessionsExW

  WTSEnumerateSessionsW

  WTSFreeMemory

  WTSFreeMemoryExA

  WTSFreeMemoryExW

  WTSGetChildSessionId

  WTSGetListenerSecurityA

  WTSGetListenerSecurityW

  WTSIsChildSessionsEnabled

  WTSLogoffSession

  WTSOpenServerA

  WTSOpenServerExA

  WTSOpenServerExW

  WTSOpenServerW

  WTSQueryListenerConfigA

  WTSQueryListenerConfigW

  WTSQuerySessionInformationA

  WTSQuerySessionInformationW

  WTSQueryUserConfigA

  WTSQueryUserConfigW

  WTSQueryUserToken

  WTSRegisterSessionNotification

  WTSRegisterSessionNotificationEx

  WTSSendMessageA

  WTSSendMessageW

  WTSSetListenerSecurityA

  WTSSetListenerSecurityW

  WTSSetRenderHint

  WTSSetSessionInformationA

  WTSSetSessionInformationW

  WTSSetUserConfigA

  WTSSetUserConfigW

  WTSShutdownSystem

  WTSStartRemoteControlSessionA

  WTSStartRemoteControlSessionW

  WTSStopRemoteControlSession

  WTSTerminateProcess

  WTSUnRegisterSessionNotification

  WTSUnRegisterSessionNotificationEx

  WTSVirtualChannelClose

  WTSVirtualChannelOpen

  WTSVirtualChannelOpenEx

  WTSVirtualChannelPurgeInput

  WTSVirtualChannelPurgeOutput

  WTSVirtualChannelQuery

  WTSVirtualChannelRead

  WTSVirtualChannelWrite

  WTSWaitSystemEvent

  Sections

  .text

  Size: 34KB - Virtual size: 34KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 872B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/Steam Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 184KB - Virtual size: 183KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Checker by X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/KoiVMHelper.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 161KB - Virtual size: 160KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/READ This !.txt
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/Steam Cracker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 185KB - Virtual size: 185KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/SteamEncryption.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  A:\projects\SteamEncryption\SteamEncryption\obj\Release\SteamEncryption.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/key.txt
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/KoiVMHelper.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 161KB - Virtual size: 160KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 110KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/READ This !.txt
• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/SteamEncryption.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  A:\projects\SteamEncryption\SteamEncryption\obj\Release\SteamEncryption.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 936B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/data.exe

  .exe windows:5 windows x86 arch:x86

  eb97e4fc5518ac300a92a11673825e0b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  wsock32

  WSACleanup

  socket

  inet_ntoa

  setsockopt

  ntohs

  recvfrom

  ioctlsocket

  htons

  WSAStartup

  __WSAFDIsSet

  select

  accept

  listen

  bind

  closesocket

  WSAGetLastError

  recv

  sendto

  send

  inet_addr

  gethostbyname

  gethostname

  connect

  version

  GetFileVersionInfoW

  GetFileVersionInfoSizeW

  VerQueryValueW

  winmm

  timeGetTime

  waveOutSetVolume

  mciSendStringW

  comctl32

  ImageList_ReplaceIcon

  ImageList_Destroy

  ImageList_Remove

  ImageList_SetDragCursorImage

  ImageList_BeginDrag

  ImageList_DragEnter

  ImageList_DragLeave

  ImageList_EndDrag

  ImageList_DragMove

  InitCommonControlsEx

  ImageList_Create

  mpr

  WNetUseConnectionW

  WNetCancelConnection2W

  WNetGetConnectionW

  WNetAddConnection2W

  wininet

  InternetQueryDataAvailable

  InternetCloseHandle

  InternetOpenW

  InternetSetOptionW

  InternetCrackUrlW

  HttpQueryInfoW

  InternetQueryOptionW

  HttpOpenRequestW

  HttpSendRequestW

  FtpOpenFileW

  FtpGetFileSize

  InternetOpenUrlW

  InternetReadFile

  InternetConnectW

  psapi

  GetProcessMemoryInfo

  iphlpapi

  IcmpCreateFile

  IcmpCloseHandle

  IcmpSendEcho

  userenv

  DestroyEnvironmentBlock

  UnloadUserProfile

  CreateEnvironmentBlock

  LoadUserProfileW

  uxtheme

  IsThemeActive

  kernel32

  DuplicateHandle

  CreateThread

  WaitForSingleObject

  HeapAlloc

  GetProcessHeap

  HeapFree

  Sleep

  GetCurrentThreadId

  MultiByteToWideChar

  MulDiv

  GetVersionExW

  IsWow64Process

  GetSystemInfo

  FreeLibrary

  LoadLibraryA

  GetProcAddress

  SetErrorMode

  GetModuleFileNameW

  WideCharToMultiByte

  lstrcpyW

  lstrlenW

  GetModuleHandleW

  QueryPerformanceCounter

  VirtualFreeEx

  OpenProcess

  VirtualAllocEx

  WriteProcessMemory

  ReadProcessMemory

  CreateFileW

  SetFilePointerEx

  SetEndOfFile

  ReadFile

  WriteFile

  FlushFileBuffers

  TerminateProcess

  CreateToolhelp32Snapshot

  Process32FirstW

  Process32NextW

  SetFileTime

  GetFileAttributesW

  FindFirstFileW

  SetCurrentDirectoryW

  GetLongPathNameW

  GetShortPathNameW

  DeleteFileW

  FindNextFileW

  CopyFileExW

  MoveFileW

  CreateDirectoryW

  RemoveDirectoryW

  SetSystemPowerState

  QueryPerformanceFrequency

  FindResourceW

  LoadResource

  LockResource

  SizeofResource

  EnumResourceNamesW

  OutputDebugStringW

  GetTempPathW

  GetTempFileNameW

  DeviceIoControl

  GetLocalTime

  CompareStringW

  GetCurrentProcess

  EnterCriticalSection

  LeaveCriticalSection

  GetStdHandle

  CreatePipe

  InterlockedExchange

  TerminateThread

  LoadLibraryExW

  FindResourceExW

  CopyFileW

  VirtualFree

  FormatMessageW

  GetExitCodeProcess

  GetPrivateProfileStringW

  WritePrivateProfileStringW

  GetPrivateProfileSectionW

  WritePrivateProfileSectionW

  GetPrivateProfileSectionNamesW

  FileTimeToLocalFileTime

  FileTimeToSystemTime

  SystemTimeToFileTime

  LocalFileTimeToFileTime

  GetDriveTypeW

  GetDiskFreeSpaceExW

  GetDiskFreeSpaceW

  GetVolumeInformationW

  SetVolumeLabelW

  CreateHardLinkW

  SetFileAttributesW

  CreateEventW

  SetEvent

  GetEnvironmentVariableW

  SetEnvironmentVariableW

  GlobalLock

  GlobalUnlock

  GlobalAlloc

  GetFileSize

  GlobalFree

  GlobalMemoryStatusEx

  Beep

  GetSystemDirectoryW

  HeapReAlloc

  HeapSize

  GetComputerNameW

  GetWindowsDirectoryW

  GetCurrentProcessId

  GetProcessIoCounters

  CreateProcessW

  GetProcessId

  SetPriorityClass

  LoadLibraryW

  VirtualAlloc

  IsDebuggerPresent

  GetCurrentDirectoryW

  lstrcmpiW

  DecodePointer

  GetLastError

  RaiseException

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  InterlockedDecrement

  InterlockedIncrement

  GetCurrentThread

  CloseHandle

  GetFullPathNameW

  EncodePointer

  ExitProcess

  GetModuleHandleExW

  ExitThread

  GetSystemTimeAsFileTime

  ResumeThread

  GetCommandLineW

  IsProcessorFeaturePresent

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  SetLastError

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  GetStartupInfoW

  GetStringTypeW

  SetStdHandle

  GetFileType

  GetConsoleCP

  GetConsoleMode

  RtlUnwind

  ReadConsoleW

  GetTimeZoneInformation

  GetDateFormatW

  GetTimeFormatW

  LCMapStringW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  WriteConsoleW

  FindClose

  SetEnvironmentVariableA

  user32

  AdjustWindowRectEx

  CopyImage

  SetWindowPos

  GetCursorInfo

  RegisterHotKey

  ClientToScreen

  GetKeyboardLayoutNameW

  IsCharAlphaW

  IsCharAlphaNumericW

  IsCharLowerW

  IsCharUpperW

  GetMenuStringW

  GetSubMenu

  GetCaretPos

  IsZoomed

  MonitorFromPoint

  GetMonitorInfoW

  SetWindowLongW

  SetLayeredWindowAttributes

  FlashWindow

  GetClassLongW

  TranslateAcceleratorW

  IsDialogMessageW

  GetSysColor

  InflateRect

  DrawFocusRect

  DrawTextW

  FrameRect

  DrawFrameControl

  FillRect

  PtInRect

  DestroyAcceleratorTable

  CreateAcceleratorTableW

  SetCursor

  GetWindowDC

  GetSystemMetrics

  GetActiveWindow

  CharNextW

  wsprintfW

  RedrawWindow

  DrawMenuBar

  DestroyMenu

  SetMenu

  GetWindowTextLengthW

  CreateMenu

  IsDlgButtonChecked

  DefDlgProcW

  CallWindowProcW

  ReleaseCapture

  SetCapture

  CreateIconFromResourceEx

  mouse_event

  ExitWindowsEx

  SetActiveWindow

  FindWindowExW

  EnumThreadWindows

  SetMenuDefaultItem

  InsertMenuItemW

  IsMenu

  TrackPopupMenuEx

  GetCursorPos

  DeleteMenu

  SetRect

  GetMenuItemID

  GetMenuItemCount

  SetMenuItemInfoW

  GetMenuItemInfoW

  SetForegroundWindow

  IsIconic

  FindWindowW

  MonitorFromRect

  keybd_event

  SendInput

  GetAsyncKeyState

  SetKeyboardState

  GetKeyboardState

  GetKeyState

  VkKeyScanW

  LoadStringW

  DialogBoxParamW

  MessageBeep

  EndDialog

  SendDlgItemMessageW

  GetDlgItem

  SetWindowTextW

  CopyRect

  ReleaseDC

  GetDC

  EndPaint

  BeginPaint

  GetClientRect

  GetMenu

  DestroyWindow

  EnumWindows

  GetDesktopWindow

  IsWindow

  IsWindowEnabled

  IsWindowVisible

  EnableWindow

  InvalidateRect

  GetWindowLongW

  GetWindowThreadProcessId

  AttachThreadInput

  GetFocus

  GetWindowTextW

  ScreenToClient

  SendMessageTimeoutW

  EnumChildWindows

  CharUpperBuffW

  GetParent

  GetDlgCtrlID

  SendMessageW

  MapVirtualKeyW

  PostMessageW

  GetWindowRect

  SetUserObjectSecurity

  CloseDesktop

  CloseWindowStation

  OpenDesktopW

  SetProcessWindowStation

  GetProcessWindowStation

  OpenWindowStationW

  GetUserObjectSecurity

  MessageBoxW

  DefWindowProcW

  SetClipboardData

  EmptyClipboard

  CountClipboardFormats

  CloseClipboard

  GetClipboardData

  IsClipboardFormatAvailable

  OpenClipboard

  BlockInput

  GetMessageW

  LockWindowUpdate

  DispatchMessageW

  TranslateMessage

  PeekMessageW

  UnregisterHotKey

  CheckMenuRadioItem

  CharLowerBuffW

  MoveWindow

  SetFocus

  PostQuitMessage

  KillTimer

  CreatePopupMenu

  RegisterWindowMessageW

  SetTimer

  ShowWindow

  CreateWindowExW

  RegisterClassExW

  LoadIconW

  LoadCursorW

  GetSysColorBrush

  GetForegroundWindow

  MessageBoxA

  DestroyIcon

  SystemParametersInfoW

  LoadImageW

  GetClassNameW

  gdi32

  StrokePath

  DeleteObject

  GetTextExtentPoint32W

  ExtCreatePen

  GetDeviceCaps

  EndPath

  SetPixel

  CloseFigure

  CreateCompatibleBitmap

  CreateCompatibleDC

  SelectObject

  StretchBlt

  GetDIBits

  LineTo

  AngleArc

  MoveToEx

  Ellipse

  DeleteDC

  GetPixel

  CreateDCW

  GetStockObject

  GetTextFaceW

  CreateFontW

  SetTextColor

  PolyDraw

  BeginPath

  Rectangle

  SetViewportOrgEx

  GetObjectW

  SetBkMode

  RoundRect

  SetBkColor

  CreatePen

  CreateSolidBrush

  StrokeAndFillPath

  comdlg32

  GetOpenFileNameW

  GetSaveFileNameW

  advapi32

  GetAce

  RegEnumValueW

  RegDeleteValueW

  RegDeleteKeyW

  RegEnumKeyExW

  RegSetValueExW

  RegOpenKeyExW

  RegCloseKey

  RegQueryValueExW

  RegConnectRegistryW

  InitializeSecurityDescriptor

  InitializeAcl

  AdjustTokenPrivileges

  OpenThreadToken

  OpenProcessToken

  LookupPrivilegeValueW

  DuplicateTokenEx

  CreateProcessAsUserW

  CreateProcessWithLogonW

  GetLengthSid

  CopySid

  LogonUserW

  AllocateAndInitializeSid

  CheckTokenMembership

  RegCreateKeyExW

  FreeSid

  GetTokenInformation

  GetSecurityDescriptorDacl

  GetAclInformation

  AddAce

  SetSecurityDescriptorDacl

  GetUserNameW

  InitiateSystemShutdownExW

  shell32

  DragQueryPoint

  ShellExecuteExW

  DragQueryFileW

  SHEmptyRecycleBinW

  SHGetPathFromIDListW

  SHBrowseForFolderW

  SHCreateShellItem

  SHGetDesktopFolder

  SHGetSpecialFolderLocation

  SHGetFolderPathW

  SHFileOperationW

  ExtractIconExW

  Shell_NotifyIconW

  ShellExecuteW

  DragFinish

  ole32

  CoTaskMemAlloc

  CoTaskMemFree

  CLSIDFromString

  ProgIDFromCLSID

  CLSIDFromProgID

  OleSetMenuDescriptor

  MkParseDisplayName

  OleSetContainedObject

  CoCreateInstance

  IIDFromString

  StringFromGUID2

  CreateStreamOnHGlobal

  OleInitialize

  OleUninitialize

  CoInitialize

  CoUninitialize

  GetRunningObjectTable

  CoGetInstanceFromFile

  CoGetObject

  CoSetProxyBlanket

  CoCreateInstanceEx

  CoInitializeSecurity

  oleaut32

  LoadTypeLibEx

  VariantCopyInd

  SysReAllocString

  SysFreeString

  SafeArrayDestroyDescriptor

  SafeArrayDestroyData

  SafeArrayUnaccessData

  SafeArrayAccessData

  SafeArrayAllocData

  SafeArrayAllocDescriptorEx

  SafeArrayCreateVector

  RegisterTypeLi

  CreateStdDispatch

  DispCallFunc

  VariantChangeType

  SysStringLen

  VariantTimeToSystemTime

  VarR8FromDec

  SafeArrayGetVartype

  VariantCopy

  VariantClear

  OleLoadPicture

  QueryPathOfRegTypeLi

  RegisterTypeLibForUser

  UnRegisterTypeLibForUser

  UnRegisterTypeLi

  CreateDispTypeInfo

  SysAllocString

  VariantInit

  Sections

  .text

  Size: 568KB - Virtual size: 567KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 191KB - Virtual size: 191KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 35KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 453KB - Virtual size: 453KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 28KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Cracker - [IP-REC]/sysdll/key.txt
• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/Result_ERROR.txt
• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/Steam Login Checked by LowSkiII.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 214KB - Virtual size: 213KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32.dll

  .dll windows:5 windows x86 arch:x86

  43b0fe249f8f5a5ce8ac2d967a025119

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\OpenSSL\Temp\openssl-1.0.2k-x32\out32dll\libeay32.pdb

  Imports

  ws2_32

  sendto

  recvfrom

  bind

  listen

  accept

  ntohl

  ioctlsocket

  WSACleanup

  WSAStartup

  gethostbyname

  getsockopt

  getservbyname

  ntohs

  htons

  htonl

  socket

  setsockopt

  connect

  send

  WSASetLastError

  recv

  WSAGetLastError

  shutdown

  closesocket

  gdi32

  CreateCompatibleBitmap

  GetObjectA

  GetDIBits

  DeleteObject

  GetDeviceCaps

  advapi32

  ReportEventA

  DeregisterEventSource

  RegisterEventSourceA

  user32

  GetDC

  ReleaseDC

  MessageBoxA

  GetProcessWindowStation

  GetUserObjectInformationW

  kernel32

  GetStringTypeW

  GetStringTypeA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetLocaleInfoA

  FreeEnvironmentStringsA

  LCMapStringW

  LCMapStringA

  GetProcessHeap

  SetEndOfFile

  GetCurrentDirectoryA

  CompareStringA

  CompareStringW

  HeapSize

  SetEnvironmentVariableA

  CreateFileW

  GetEnvironmentStrings

  WideCharToMultiByte

  GetFullPathNameA

  FlushFileBuffers

  RtlUnwind

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  GetCurrentThreadId

  GetLastError

  GetVersion

  WriteFile

  GetFileType

  GetStdHandle

  FindNextFileA

  FindFirstFileA

  FindClose

  FreeLibrary

  LoadLibraryA

  CloseHandle

  SetLastError

  MultiByteToWideChar

  SystemTimeToFileTime

  GetSystemTime

  GetTickCount

  QueryPerformanceCounter

  GetCurrentProcessId

  GlobalMemoryStatus

  FlushConsoleInputBuffer

  GetModuleHandleW

  Sleep

  SetConsoleCtrlHandler

  EnterCriticalSection

  LeaveCriticalSection

  HeapFree

  HeapReAlloc

  HeapAlloc

  GetSystemTimeAsFileTime

  ReadFile

  GetConsoleCP

  GetConsoleMode

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDriveTypeA

  SetFileAttributesA

  GetFileAttributesA

  CreateFileA

  ReadConsoleInputA

  SetConsoleMode

  GetCommandLineA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCPInfo

  InterlockedIncrement

  InterlockedDecrement

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  DeleteCriticalSection

  GetModuleFileNameA

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetStartupInfoA

  HeapCreate

  HeapDestroy

  VirtualFree

  VirtualAlloc

  GetTimeZoneInformation

  SetFilePointer

  SetStdHandle

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  AES_bi_ige_encrypt

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_ctr128_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ige_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  AES_unwrap_key

  AES_wrap_key

  ASN1_ANY_it

  ASN1_BIT_STRING_check

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_adj

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_to_BN

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PCTX_free

  ASN1_PCTX_get_cert_flags

  ASN1_PCTX_get_flags

  ASN1_PCTX_get_nm_flags

  ASN1_PCTX_get_oid_flags

  ASN1_PCTX_get_str_flags

  ASN1_PCTX_new

  ASN1_PCTX_set_cert_flags

  ASN1_PCTX_set_flags

  ASN1_PCTX_set_nm_flags

  ASN1_PCTX_set_oid_flags

  ASN1_PCTX_set_str_flags

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SEQUENCE_ANY_it

  ASN1_SEQUENCE_it

  ASN1_SET_ANY_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_clear_free

  ASN1_STRING_cmp

  ASN1_STRING_copy

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_free

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set0

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_adj

  ASN1_TIME_check

  ASN1_TIME_diff

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_set_string

  ASN1_TIME_to_generalizedtime

  ASN1_TYPE_cmp

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_set

  ASN1_TYPE_set1

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_adj

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_bn_print

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_print

  ASN1_item_sign

  ASN1_item_sign_ctx

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_pack_string

  ASN1_parse

  ASN1_parse_dump

  ASN1_primitive_free

  ASN1_primitive_new

  ASN1_put_eoc

  ASN1_put_object

  ASN1_seq_pack

  ASN1_seq_unpack

  ASN1_sign

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_template_d2i

  ASN1_template_free

  ASN1_template_i2d

  ASN1_template_new

  ASN1_unpack_string

  ASN1_verify

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_accept

  BIO_asn1_get_prefix

  BIO_asn1_get_suffix

  BIO_asn1_set_prefix

  BIO_asn1_set_suffix

  BIO_callback_ctrl

  BIO_clear_flags

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_asn1

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_callback

  BIO_get_callback_arg

  BIO_get_ex_data

  BIO_get_ex_new_index

  BIO_get_host_ip

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_gethostbyname

  BIO_gets

  BIO_hex_string

  BIO_indent

  BIO_int_ctrl

  BIO_method_name

  BIO_method_type

  BIO_new

  BIO_new_CMS

  BIO_new_NDEF

  BIO_new_PKCS7

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_mem

  BIO_s_null

  BIO_s_socket

  BIO_set

  BIO_set_callback

  BIO_set_callback_arg

  BIO_set_cipher

  BIO_set_ex_data

  BIO_set_flags

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_cleanup

  BIO_sock_error

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_test_flags

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_get_thread_id

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_new

  BN_BLINDING_set_flags

  BN_BLINDING_set_thread_id

  BN_BLINDING_thread_id

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_init

  BN_CTX_new

  BN_CTX_start

  BN_GENCB_call

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  BN_GF2m_mod_exp_arr

  BN_GF2m_mod_inv

  BN_GF2m_mod_inv_arr

  BN_GF2m_mod_mul

  BN_GF2m_mod_mul_arr

  BN_GF2m_mod_solve_quad

  BN_GF2m_mod_solve_quad_arr

  BN_GF2m_mod_sqr

  BN_GF2m_mod_sqr_arr

  BN_GF2m_mod_sqrt

  BN_GF2m_mod_sqrt_arr

  BN_GF2m_poly2arr

  BN_MONT_CTX_copy

  BN_MONT_CTX_free

  BN_MONT_CTX_init

  BN_MONT_CTX_new

  BN_MONT_CTX_set

  BN_MONT_CTX_set_locked

  BN_RECP_CTX_free

  BN_RECP_CTX_init

  BN_RECP_CTX_new

  BN_RECP_CTX_set

  BN_X931_derive_prime_ex

  BN_X931_generate_Xpq

  BN_X931_generate_prime_ex

  BN_add

  BN_add_word

  BN_asc2bn

  BN_bin2bn

  BN_bn2bin

  BN_bn2dec

  BN_bn2hex

  BN_bn2mpi

  BN_bntest_rand

  BN_clear

  BN_clear_bit

  BN_clear_free

  BN_cmp

  BN_consttime_swap

  BN_copy

  BN_dec2bn

  BN_div

  BN_div_recp

  BN_div_word

  BN_dup

  BN_exp

  BN_free

  BN_from_montgomery

  BN_gcd

  BN_generate_prime

  BN_generate_prime_ex

  BN_get0_nist_prime_192

  BN_get0_nist_prime_224

  BN_get0_nist_prime_256

  BN_get0_nist_prime_384

  BN_get0_nist_prime_521

  BN_get_params

  BN_get_word

  BN_hex2bn

  BN_init

  BN_is_bit_set

  BN_is_prime

  BN_is_prime_ex

  BN_is_prime_fasttest

  BN_is_prime_fasttest_ex

  BN_kronecker

  BN_lshift

  BN_lshift1

  BN_mask_bits

  BN_mod_add

  BN_mod_add_quick

  BN_mod_exp

  BN_mod_exp2_mont

  BN_mod_exp_mont

  BN_mod_exp_mont_consttime

  BN_mod_exp_mont_word

  BN_mod_exp_recp

  BN_mod_exp_simple

  BN_mod_inverse

  BN_mod_lshift

  BN_mod_lshift1

  BN_mod_lshift1_quick

  BN_mod_lshift_quick

  BN_mod_mul

  BN_mod_mul_montgomery

  BN_mod_mul_reciprocal

  BN_mod_sqr

  BN_mod_sqrt

  BN_mod_sub

  BN_mod_sub_quick

  BN_mod_word

  BN_mpi2bn

  BN_mul

  BN_mul_word

  BN_new

  BN_nist_mod_192

  BN_nist_mod_224

  BN_nist_mod_256

  BN_nist_mod_384

  BN_nist_mod_521

  BN_nnmod

  BN_num_bits

  BN_num_bits_word

  BN_options

  BN_print

  BN_print_fp

  BN_pseudo_rand

  BN_pseudo_rand_range

  BN_rand

  BN_rand_range

  BN_reciprocal

  BN_rshift

  BN_rshift1

  BN_set_bit

  BN_set_negative

  BN_set_params

  BN_set_word

  BN_sqr

  BN_sub

  BN_sub_word

  BN_swap

  BN_to_ASN1_ENUMERATED

  BN_to_ASN1_INTEGER

  BN_uadd

  BN_ucmp

  BN_usub

  BN_value_one

  Sections

  .text

  Size: 918KB - Virtual size: 917KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 342KB - Virtual size: 341KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 29KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/Result_ERROR.txt
• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/SLCv1.exe

  .exe windows:5 windows x86 arch:x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Sections

  UPX0

  Size: - Virtual size: 2.8MB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  UPX1

  Size: 1.6MB - Virtual size: 1.6MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 17KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/libeay32.dll

  .dll windows:5 windows x86 arch:x86

  43b0fe249f8f5a5ce8ac2d967a025119

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\OpenSSL\Temp\openssl-1.0.2k-x32\out32dll\libeay32.pdb

  Imports

  ws2_32

  sendto

  recvfrom

  bind

  listen

  accept

  ntohl

  ioctlsocket

  WSACleanup

  WSAStartup

  gethostbyname

  getsockopt

  getservbyname

  ntohs

  htons

  htonl

  socket

  setsockopt

  connect

  send

  WSASetLastError

  recv

  WSAGetLastError

  shutdown

  closesocket

  gdi32

  CreateCompatibleBitmap

  GetObjectA

  GetDIBits

  DeleteObject

  GetDeviceCaps

  advapi32

  ReportEventA

  DeregisterEventSource

  RegisterEventSourceA

  user32

  GetDC

  ReleaseDC

  MessageBoxA

  GetProcessWindowStation

  GetUserObjectInformationW

  kernel32

  GetStringTypeW

  GetStringTypeA

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  GetLocaleInfoA

  FreeEnvironmentStringsA

  LCMapStringW

  LCMapStringA

  GetProcessHeap

  SetEndOfFile

  GetCurrentDirectoryA

  CompareStringA

  CompareStringW

  HeapSize

  SetEnvironmentVariableA

  CreateFileW

  GetEnvironmentStrings

  WideCharToMultiByte

  GetFullPathNameA

  FlushFileBuffers

  RtlUnwind

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  GetCurrentThreadId

  GetLastError

  GetVersion

  WriteFile

  GetFileType

  GetStdHandle

  FindNextFileA

  FindFirstFileA

  FindClose

  FreeLibrary

  LoadLibraryA

  CloseHandle

  SetLastError

  MultiByteToWideChar

  SystemTimeToFileTime

  GetSystemTime

  GetTickCount

  QueryPerformanceCounter

  GetCurrentProcessId

  GlobalMemoryStatus

  FlushConsoleInputBuffer

  GetModuleHandleW

  Sleep

  SetConsoleCtrlHandler

  EnterCriticalSection

  LeaveCriticalSection

  HeapFree

  HeapReAlloc

  HeapAlloc

  GetSystemTimeAsFileTime

  ReadFile

  GetConsoleCP

  GetConsoleMode

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDriveTypeA

  SetFileAttributesA

  GetFileAttributesA

  CreateFileA

  ReadConsoleInputA

  SetConsoleMode

  GetCommandLineA

  TerminateProcess

  GetCurrentProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  IsDebuggerPresent

  GetCPInfo

  InterlockedIncrement

  InterlockedDecrement

  GetACP

  GetOEMCP

  IsValidCodePage

  TlsGetValue

  TlsAlloc

  TlsSetValue

  TlsFree

  DeleteCriticalSection

  GetModuleFileNameA

  InitializeCriticalSectionAndSpinCount

  SetHandleCount

  GetStartupInfoA

  HeapCreate

  HeapDestroy

  VirtualFree

  VirtualAlloc

  GetTimeZoneInformation

  SetFilePointer

  SetStdHandle

  Exports

  Exports

  ACCESS_DESCRIPTION_free

  ACCESS_DESCRIPTION_it

  ACCESS_DESCRIPTION_new

  AES_bi_ige_encrypt

  AES_cbc_encrypt

  AES_cfb128_encrypt

  AES_cfb1_encrypt

  AES_cfb8_encrypt

  AES_ctr128_encrypt

  AES_decrypt

  AES_ecb_encrypt

  AES_encrypt

  AES_ige_encrypt

  AES_ofb128_encrypt

  AES_options

  AES_set_decrypt_key

  AES_set_encrypt_key

  AES_unwrap_key

  AES_wrap_key

  ASN1_ANY_it

  ASN1_BIT_STRING_check

  ASN1_BIT_STRING_free

  ASN1_BIT_STRING_get_bit

  ASN1_BIT_STRING_it

  ASN1_BIT_STRING_name_print

  ASN1_BIT_STRING_new

  ASN1_BIT_STRING_num_asc

  ASN1_BIT_STRING_set

  ASN1_BIT_STRING_set_asc

  ASN1_BIT_STRING_set_bit

  ASN1_BMPSTRING_free

  ASN1_BMPSTRING_it

  ASN1_BMPSTRING_new

  ASN1_BOOLEAN_it

  ASN1_ENUMERATED_free

  ASN1_ENUMERATED_get

  ASN1_ENUMERATED_it

  ASN1_ENUMERATED_new

  ASN1_ENUMERATED_set

  ASN1_ENUMERATED_to_BN

  ASN1_FBOOLEAN_it

  ASN1_GENERALIZEDTIME_adj

  ASN1_GENERALIZEDTIME_check

  ASN1_GENERALIZEDTIME_free

  ASN1_GENERALIZEDTIME_it

  ASN1_GENERALIZEDTIME_new

  ASN1_GENERALIZEDTIME_print

  ASN1_GENERALIZEDTIME_set

  ASN1_GENERALIZEDTIME_set_string

  ASN1_GENERALSTRING_free

  ASN1_GENERALSTRING_it

  ASN1_GENERALSTRING_new

  ASN1_IA5STRING_free

  ASN1_IA5STRING_it

  ASN1_IA5STRING_new

  ASN1_INTEGER_cmp

  ASN1_INTEGER_dup

  ASN1_INTEGER_free

  ASN1_INTEGER_get

  ASN1_INTEGER_it

  ASN1_INTEGER_new

  ASN1_INTEGER_set

  ASN1_INTEGER_to_BN

  ASN1_NULL_free

  ASN1_NULL_it

  ASN1_NULL_new

  ASN1_OBJECT_create

  ASN1_OBJECT_free

  ASN1_OBJECT_it

  ASN1_OBJECT_new

  ASN1_OCTET_STRING_NDEF_it

  ASN1_OCTET_STRING_cmp

  ASN1_OCTET_STRING_dup

  ASN1_OCTET_STRING_free

  ASN1_OCTET_STRING_it

  ASN1_OCTET_STRING_new

  ASN1_OCTET_STRING_set

  ASN1_PCTX_free

  ASN1_PCTX_get_cert_flags

  ASN1_PCTX_get_flags

  ASN1_PCTX_get_nm_flags

  ASN1_PCTX_get_oid_flags

  ASN1_PCTX_get_str_flags

  ASN1_PCTX_new

  ASN1_PCTX_set_cert_flags

  ASN1_PCTX_set_flags

  ASN1_PCTX_set_nm_flags

  ASN1_PCTX_set_oid_flags

  ASN1_PCTX_set_str_flags

  ASN1_PRINTABLESTRING_free

  ASN1_PRINTABLESTRING_it

  ASN1_PRINTABLESTRING_new

  ASN1_PRINTABLE_free

  ASN1_PRINTABLE_it

  ASN1_PRINTABLE_new

  ASN1_PRINTABLE_type

  ASN1_SEQUENCE_ANY_it

  ASN1_SEQUENCE_it

  ASN1_SET_ANY_it

  ASN1_STRING_TABLE_add

  ASN1_STRING_TABLE_cleanup

  ASN1_STRING_TABLE_get

  ASN1_STRING_clear_free

  ASN1_STRING_cmp

  ASN1_STRING_copy

  ASN1_STRING_data

  ASN1_STRING_dup

  ASN1_STRING_free

  ASN1_STRING_get_default_mask

  ASN1_STRING_length

  ASN1_STRING_length_set

  ASN1_STRING_new

  ASN1_STRING_print

  ASN1_STRING_print_ex

  ASN1_STRING_print_ex_fp

  ASN1_STRING_set

  ASN1_STRING_set0

  ASN1_STRING_set_by_NID

  ASN1_STRING_set_default_mask

  ASN1_STRING_set_default_mask_asc

  ASN1_STRING_to_UTF8

  ASN1_STRING_type

  ASN1_STRING_type_new

  ASN1_T61STRING_free

  ASN1_T61STRING_it

  ASN1_T61STRING_new

  ASN1_TBOOLEAN_it

  ASN1_TIME_adj

  ASN1_TIME_check

  ASN1_TIME_diff

  ASN1_TIME_free

  ASN1_TIME_it

  ASN1_TIME_new

  ASN1_TIME_print

  ASN1_TIME_set

  ASN1_TIME_set_string

  ASN1_TIME_to_generalizedtime

  ASN1_TYPE_cmp

  ASN1_TYPE_free

  ASN1_TYPE_get

  ASN1_TYPE_get_int_octetstring

  ASN1_TYPE_get_octetstring

  ASN1_TYPE_new

  ASN1_TYPE_set

  ASN1_TYPE_set1

  ASN1_TYPE_set_int_octetstring

  ASN1_TYPE_set_octetstring

  ASN1_UNIVERSALSTRING_free

  ASN1_UNIVERSALSTRING_it

  ASN1_UNIVERSALSTRING_new

  ASN1_UNIVERSALSTRING_to_string

  ASN1_UTCTIME_adj

  ASN1_UTCTIME_check

  ASN1_UTCTIME_cmp_time_t

  ASN1_UTCTIME_free

  ASN1_UTCTIME_it

  ASN1_UTCTIME_new

  ASN1_UTCTIME_print

  ASN1_UTCTIME_set

  ASN1_UTCTIME_set_string

  ASN1_UTF8STRING_free

  ASN1_UTF8STRING_it

  ASN1_UTF8STRING_new

  ASN1_VISIBLESTRING_free

  ASN1_VISIBLESTRING_it

  ASN1_VISIBLESTRING_new

  ASN1_add_oid_module

  ASN1_bn_print

  ASN1_check_infinite_end

  ASN1_const_check_infinite_end

  ASN1_d2i_bio

  ASN1_d2i_fp

  ASN1_digest

  ASN1_dup

  ASN1_generate_nconf

  ASN1_generate_v3

  ASN1_get_object

  ASN1_i2d_bio

  ASN1_i2d_fp

  ASN1_item_d2i

  ASN1_item_d2i_bio

  ASN1_item_d2i_fp

  ASN1_item_digest

  ASN1_item_dup

  ASN1_item_ex_d2i

  ASN1_item_ex_free

  ASN1_item_ex_i2d

  ASN1_item_ex_new

  ASN1_item_free

  ASN1_item_i2d

  ASN1_item_i2d_bio

  ASN1_item_i2d_fp

  ASN1_item_ndef_i2d

  ASN1_item_new

  ASN1_item_pack

  ASN1_item_print

  ASN1_item_sign

  ASN1_item_sign_ctx

  ASN1_item_unpack

  ASN1_item_verify

  ASN1_mbstring_copy

  ASN1_mbstring_ncopy

  ASN1_object_size

  ASN1_pack_string

  ASN1_parse

  ASN1_parse_dump

  ASN1_primitive_free

  ASN1_primitive_new

  ASN1_put_eoc

  ASN1_put_object

  ASN1_seq_pack

  ASN1_seq_unpack

  ASN1_sign

  ASN1_tag2bit

  ASN1_tag2str

  ASN1_template_d2i

  ASN1_template_free

  ASN1_template_i2d

  ASN1_template_new

  ASN1_unpack_string

  ASN1_verify

  AUTHORITY_INFO_ACCESS_free

  AUTHORITY_INFO_ACCESS_it

  AUTHORITY_INFO_ACCESS_new

  AUTHORITY_KEYID_free

  AUTHORITY_KEYID_it

  AUTHORITY_KEYID_new

  BASIC_CONSTRAINTS_free

  BASIC_CONSTRAINTS_it

  BASIC_CONSTRAINTS_new

  BF_cbc_encrypt

  BF_cfb64_encrypt

  BF_decrypt

  BF_ecb_encrypt

  BF_encrypt

  BF_ofb64_encrypt

  BF_options

  BF_set_key

  BIGNUM_it

  BIO_accept

  BIO_asn1_get_prefix

  BIO_asn1_get_suffix

  BIO_asn1_set_prefix

  BIO_asn1_set_suffix

  BIO_callback_ctrl

  BIO_clear_flags

  BIO_copy_next_retry

  BIO_ctrl

  BIO_ctrl_get_read_request

  BIO_ctrl_get_write_guarantee

  BIO_ctrl_pending

  BIO_ctrl_reset_read_request

  BIO_ctrl_wpending

  BIO_debug_callback

  BIO_dgram_non_fatal_error

  BIO_dump

  BIO_dump_cb

  BIO_dump_fp

  BIO_dump_indent

  BIO_dump_indent_cb

  BIO_dump_indent_fp

  BIO_dup_chain

  BIO_f_asn1

  BIO_f_base64

  BIO_f_buffer

  BIO_f_cipher

  BIO_f_md

  BIO_f_nbio_test

  BIO_f_null

  BIO_f_reliable

  BIO_fd_non_fatal_error

  BIO_fd_should_retry

  BIO_find_type

  BIO_free

  BIO_free_all

  BIO_get_accept_socket

  BIO_get_callback

  BIO_get_callback_arg

  BIO_get_ex_data

  BIO_get_ex_new_index

  BIO_get_host_ip

  BIO_get_port

  BIO_get_retry_BIO

  BIO_get_retry_reason

  BIO_gethostbyname

  BIO_gets

  BIO_hex_string

  BIO_indent

  BIO_int_ctrl

  BIO_method_name

  BIO_method_type

  BIO_new

  BIO_new_CMS

  BIO_new_NDEF

  BIO_new_PKCS7

  BIO_new_accept

  BIO_new_bio_pair

  BIO_new_connect

  BIO_new_dgram

  BIO_new_fd

  BIO_new_file

  BIO_new_fp

  BIO_new_mem_buf

  BIO_new_socket

  BIO_next

  BIO_nread

  BIO_nread0

  BIO_number_read

  BIO_number_written

  BIO_nwrite

  BIO_nwrite0

  BIO_pop

  BIO_printf

  BIO_ptr_ctrl

  BIO_push

  BIO_puts

  BIO_read

  BIO_s_accept

  BIO_s_bio

  BIO_s_connect

  BIO_s_datagram

  BIO_s_fd

  BIO_s_file

  BIO_s_mem

  BIO_s_null

  BIO_s_socket

  BIO_set

  BIO_set_callback

  BIO_set_callback_arg

  BIO_set_cipher

  BIO_set_ex_data

  BIO_set_flags

  BIO_set_tcp_ndelay

  BIO_snprintf

  BIO_sock_cleanup

  BIO_sock_error

  BIO_sock_init

  BIO_sock_non_fatal_error

  BIO_sock_should_retry

  BIO_socket_ioctl

  BIO_socket_nbio

  BIO_test_flags

  BIO_vfree

  BIO_vprintf

  BIO_vsnprintf

  BIO_write

  BN_BLINDING_convert

  BN_BLINDING_convert_ex

  BN_BLINDING_create_param

  BN_BLINDING_free

  BN_BLINDING_get_flags

  BN_BLINDING_get_thread_id

  BN_BLINDING_invert

  BN_BLINDING_invert_ex

  BN_BLINDING_new

  BN_BLINDING_set_flags

  BN_BLINDING_set_thread_id

  BN_BLINDING_thread_id

  BN_BLINDING_update

  BN_CTX_end

  BN_CTX_free

  BN_CTX_get

  BN_CTX_init

  BN_CTX_new

  BN_CTX_start

  BN_GENCB_call

  BN_GF2m_add

  BN_GF2m_arr2poly

  BN_GF2m_mod

  BN_GF2m_mod_arr

  BN_GF2m_mod_div

  BN_GF2m_mod_div_arr

  BN_GF2m_mod_exp

  BN_GF2m_mod_exp_arr

  BN_GF2m_mod_inv

  BN_GF2m_mod_inv_arr

  BN_GF2m_mod_mul

  BN_GF2m_mod_mul_arr

  BN_GF2m_mod_solve_quad

  BN_GF2m_mod_solve_quad_arr

  BN_GF2m_mod_sqr

  BN_GF2m_mod_sqr_arr

  BN_GF2m_mod_sqrt

  BN_GF2m_mod_sqrt_arr

  BN_GF2m_poly2arr

  BN_MONT_CTX_copy

  BN_MONT_CTX_free

  BN_MONT_CTX_init

  BN_MONT_CTX_new

  BN_MONT_CTX_set

  BN_MONT_CTX_set_locked

  BN_RECP_CTX_free

  BN_RECP_CTX_init

  BN_RECP_CTX_new

  BN_RECP_CTX_set

  BN_X931_derive_prime_ex

  BN_X931_generate_Xpq

  BN_X931_generate_prime_ex

  BN_add

  BN_add_word

  BN_asc2bn

  BN_bin2bn

  BN_bn2bin

  BN_bn2dec

  BN_bn2hex

  BN_bn2mpi

  BN_bntest_rand

  BN_clear

  BN_clear_bit

  BN_clear_free

  BN_cmp

  BN_consttime_swap

  BN_copy

  BN_dec2bn

  BN_div

  BN_div_recp

  BN_div_word

  BN_dup

  BN_exp

  BN_free

  BN_from_montgomery

  BN_gcd

  BN_generate_prime

  BN_generate_prime_ex

  BN_get0_nist_prime_192

  BN_get0_nist_prime_224

  BN_get0_nist_prime_256

  BN_get0_nist_prime_384

  BN_get0_nist_prime_521

  BN_get_params

  BN_get_word

  BN_hex2bn

  BN_init

  BN_is_bit_set

  BN_is_prime

  BN_is_prime_ex

  BN_is_prime_fasttest

  BN_is_prime_fasttest_ex

  BN_kronecker

  BN_lshift

  BN_lshift1

  BN_mask_bits

  BN_mod_add

  BN_mod_add_quick

  BN_mod_exp

  BN_mod_exp2_mont

  BN_mod_exp_mont

  BN_mod_exp_mont_consttime

  BN_mod_exp_mont_word

  BN_mod_exp_recp

  BN_mod_exp_simple

  BN_mod_inverse

  BN_mod_lshift

  BN_mod_lshift1

  BN_mod_lshift1_quick

  BN_mod_lshift_quick

  BN_mod_mul

  BN_mod_mul_montgomery

  BN_mod_mul_reciprocal

  BN_mod_sqr

  BN_mod_sqrt

  BN_mod_sub

  BN_mod_sub_quick

  BN_mod_word

  BN_mpi2bn

  BN_mul

  BN_mul_word

  BN_new

  BN_nist_mod_192

  BN_nist_mod_224

  BN_nist_mod_256

  BN_nist_mod_384

  BN_nist_mod_521

  BN_nnmod

  BN_num_bits

  BN_num_bits_word

  BN_options

  BN_print

  BN_print_fp

  BN_pseudo_rand

  BN_pseudo_rand_range

  BN_rand

  BN_rand_range

  BN_reciprocal

  BN_rshift

  BN_rshift1

  BN_set_bit

  BN_set_negative

  BN_set_params

  BN_set_word

  BN_sqr

  BN_sub

  BN_sub_word

  BN_swap

  BN_to_ASN1_ENUMERATED

  BN_to_ASN1_INTEGER

  BN_uadd

  BN_ucmp

  BN_usub

  BN_value_one

  Sections

  .text

  Size: 918KB - Virtual size: 917KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 342KB - Virtual size: 341KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 29KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/libeay32.exe

  .exe windows:4 windows x86 arch:x86

  5c015bd7e84af79e092e9447b444a0b6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  Imports

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  kernel32

  CloseHandle

  CreateMutexA

  CreateProcessA

  ExitProcess

  FindResourceExA

  FormatMessageA

  GetCommandLineA

  GetCurrentDirectoryA

  GetCurrentProcess

  GetEnvironmentVariableA

  GetExitCodeProcess

  GetLastError

  GetModuleFileNameA

  GetModuleHandleA

  GetProcAddress

  GetStartupInfoA

  GlobalMemoryStatusEx

  LoadResource

  LocalFree

  LockResource

  SetEnvironmentVariableA

  SetLastError

  SetUnhandledExceptionFilter

  WaitForSingleObject

  msvcrt

  __getmainargs

  __p__environ

  __p__fmode

  __set_app_type

  _cexit

  _chdir

  _close

  _findclose

  _findfirst

  _findnext

  _iob

  _itoa

  _onexit

  _open

  _read

  _setmode

  _stat

  atexit

  atoi

  fclose

  fopen

  fprintf

  fwrite

  memset

  printf

  signal

  strcat

  strchr

  strcmp

  strcpy

  strlen

  strncat

  strncpy

  strpbrk

  strrchr

  strstr

  strtok

  shell32

  ShellExecuteA

  user32

  CreateWindowExA

  DispatchMessageA

  EnumWindows

  FindWindowExA

  GetMessageA

  GetSystemMetrics

  GetWindowLongA

  GetWindowRect

  GetWindowTextA

  GetWindowThreadProcessId

  KillTimer

  LoadImageA

  MessageBoxA

  PostQuitMessage

  SendMessageA

  SetForegroundWindow

  SetTimer

  SetWindowPos

  ShowWindow

  TranslateMessage

  UpdateWindow

  Sections

  .text

  Size: 18KB - Virtual size: 17KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 224B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 35KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 363KB - Virtual size: 362KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/libeay32/ssleay32.dll

  .dll windows:5 windows x86 arch:x86

  a99c22bff9e005fc06f5cb9df55f1f6d

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\OpenSSL\Temp\openssl-1.0.2k-x32\out32dll\ssleay32.pdb

  Imports

  libeay32

  ord2572

  ord3315

  ord2894

  ord2927

  ord168

  ord2747

  ord961

  ord167

  ord169

  ord3844

  ord3837

  ord3896

  ord2201

  ord904

  ord176

  ord282

  ord572

  ord3165

  ord3489

  ord1071

  ord2925

  ord268

  ord316

  ord363

  ord2712

  ord4164

  ord493

  ord4262

  ord3719

  ord216

  ord333

  ord4125

  ord4470

  ord1010

  ord4046

  ord3682

  ord2877

  ord3711

  ord129

  ord124

  ord1000

  ord125

  ord150

  ord205

  ord486

  ord484

  ord577

  ord763

  ord907

  ord87

  ord3450

  ord2107

  ord2063

  ord283

  ord3418

  ord481

  ord323

  ord2915

  ord3836

  ord3873

  ord1096

  ord1097

  ord3244

  ord3874

  ord3816

  ord3888

  ord109

  ord2589

  ord78

  ord95

  ord3891

  ord89

  ord1145

  ord1144

  ord3906

  ord1081

  ord2292

  ord3823

  ord3846

  ord187

  ord3857

  ord267

  ord3675

  ord3737

  ord3633

  ord3631

  ord3664

  ord3479

  ord1011

  ord341

  ord1012

  ord503

  ord359

  ord365

  ord4684

  ord3192

  ord3388

  ord3528

  ord2568

  ord3312

  ord3922

  ord2898

  ord264

  ord266

  ord3067

  ord3313

  ord3314

  ord4210

  ord4701

  ord653

  ord4692

  ord3925

  ord541

  ord2702

  ord3124

  ord4372

  ord4144

  ord4174

  ord2400

  ord3782

  ord1202

  ord193

  ord3866

  ord3704

  ord3758

  ord3767

  ord3647

  ord3766

  ord3365

  ord4114

  ord3460

  ord3783

  ord3454

  ord3754

  ord3394

  ord897

  ord3414

  ord3495

  ord3610

  ord67

  ord65

  ord53

  ord3899

  ord3826

  ord3559

  ord3399

  ord636

  ord2257

  ord914

  ord2478

  ord626

  ord890

  ord1004

  ord3527

  ord4513

  ord364

  ord2051

  ord206

  ord497

  ord85

  ord58

  ord630

  ord628

  ord1041

  ord1007

  ord1005

  ord4331

  ord1027

  ord3437

  ord629

  ord892

  ord74

  ord248

  ord3378

  ord1655

  ord575

  ord1025

  ord246

  ord1100

  ord4693

  ord2135

  ord622

  ord679

  ord2524

  ord3505

  ord3595

  ord1023

  ord2451

  ord623

  ord657

  ord401

  ord93

  ord911

  ord3396

  ord3657

  ord857

  ord908

  ord680

  ord1016

  ord2204

  ord3205

  ord624

  ord128

  ord4045

  ord2475

  ord368

  ord367

  ord370

  ord369

  ord887

  ord889

  ord891

  ord4320

  ord4383

  ord315

  ord1671

  ord1147

  ord189

  ord314

  ord956

  ord280

  ord2181

  ord399

  ord748

  ord279

  ord400

  ord751

  ord750

  ord394

  ord774

  ord1959

  ord37

  ord35

  ord824

  ord822

  ord8

  ord1091

  ord3700

  ord3623

  ord718

  ord7

  ord716

  ord703

  ord2426

  ord86

  ord88

  ord3724

  ord313

  ord1101

  ord293

  ord3914

  ord3807

  ord3795

  ord4740

  ord4731

  ord4656

  ord4637

  ord4615

  ord4601

  ord2996

  ord3155

  ord959

  ord325

  ord329

  ord318

  ord304

  ord292

  ord299

  ord395

  ord955

  ord2252

  ord91

  ord247

  ord225

  ord4578

  ord4572

  ord4576

  ord4570

  ord4573

  ord4582

  ord4575

  ord4577

  ord4584

  ord4580

  ord4581

  ord276

  ord274

  ord964

  ord965

  ord256

  ord2784

  ord2411

  ord754

  ord910

  ord641

  ord912

  ord909

  ord635

  ord52

  ord290

  ord498

  ord219

  ord3666

  ord4474

  ord4369

  ord66

  ord464

  ord490

  ord222

  ord3245

  ord654

  ord967

  ord2128

  ord281

  ord118

  ord201

  ord123

  ord202

  ord3663

  ord3512

  ord3459

  ord2924

  ord3010

  ord2578

  ord3644

  ord2929

  ord3422

  ord3513

  ord170

  ord165

  ord4119

  ord4245

  ord4488

  ord32

  ord1070

  ord4233

  ord4430

  ord866

  ord2630

  ord2760

  ord4540

  ord203

  ord3353

  ord3729

  ord3480

  ord3608

  ord3550

  ord3575

  ord3570

  ord3695

  ord3178

  ord188

  ord111

  ord110

  ord151

  ord285

  ord3239

  ord120

  ord181

  ord3883

  ord3109

  ord269

  ord2936

  ord495

  ord2821

  ord289

  ord252

  ord1654

  ord1653

  ord905

  ord98

  ord903

  kernel32

  CreateFileA

  SetStdHandle

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  CloseHandle

  HeapSize

  SetFilePointer

  GetLocaleInfoA

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  MultiByteToWideChar

  LCMapStringA

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  LoadLibraryA

  VirtualAlloc

  HeapReAlloc

  HeapAlloc

  RtlUnwind

  InitializeCriticalSectionAndSpinCount

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  VirtualFree

  HeapDestroy

  HeapCreate

  GetEnvironmentStringsW

  WideCharToMultiByte

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  GetModuleFileNameA

  WriteFile

  InterlockedDecrement

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetModuleHandleA

  ExitProcess

  GetProcAddress

  GetModuleHandleW

  HeapFree

  Sleep

  DeleteCriticalSection

  GetStartupInfoA

  GetFileType

  GetStdHandle

  SetHandleCount

  IsDebuggerPresent

  GetCurrentProcess

  TerminateProcess

  GetCommandLineA

  GetCurrentThreadId

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  LeaveCriticalSection

  EnterCriticalSection

  GetSystemTimeAsFileTime

  GetLastError

  GetSystemTime

  SystemTimeToFileTime

  SetLastError

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLS_client_method

  DTLS_method

  DTLS_server_method

  DTLSv1_2_client_method

  DTLSv1_2_method

  DTLSv1_2_server_method

  DTLSv1_client_method

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  PEM_read_SSL_SESSION

  PEM_read_bio_SSL_SESSION

  PEM_write_SSL_SESSION

  PEM_write_bio_SSL_SESSION

  SRP_Calc_A_param

  SRP_generate_client_master_secret

  SRP_generate_server_master_secret

  SSL_CIPHER_description

  SSL_CIPHER_find

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_id

  SSL_CIPHER_get_name

  SSL_CIPHER_get_version

  SSL_COMP_add_compression_method

  SSL_COMP_free_compression_methods

  SSL_COMP_get_compression_methods

  SSL_COMP_get_name

  SSL_COMP_set0_compression_methods

  SSL_CONF_CTX_clear_flags

  SSL_CONF_CTX_finish

  SSL_CONF_CTX_free

  SSL_CONF_CTX_new

  SSL_CONF_CTX_set1_prefix

  SSL_CONF_CTX_set_flags

  SSL_CONF_CTX_set_ssl

  SSL_CONF_CTX_set_ssl_ctx

  SSL_CONF_cmd

  SSL_CONF_cmd_argv

  SSL_CONF_cmd_value_type

  SSL_CTX_SRP_CTX_free

  SSL_CTX_SRP_CTX_init

  SSL_CTX_add_client_CA

  SSL_CTX_add_client_custom_ext

  SSL_CTX_add_server_custom_ext

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_ctrl

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get0_certificate

  SSL_CTX_get0_param

  SSL_CTX_get0_privatekey

  SSL_CTX_get_cert_store

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_client_cert_cb

  SSL_CTX_get_ex_data

  SSL_CTX_get_ex_new_index

  SSL_CTX_get_info_callback

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_ssl_method

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sess_get_get_cb

  SSL_CTX_sess_get_new_cb

  SSL_CTX_sess_get_remove_cb

  SSL_CTX_sess_set_get_cb

  SSL_CTX_sess_set_new_cb

  SSL_CTX_sess_set_remove_cb

  SSL_CTX_sessions

  SSL_CTX_set1_param

  SSL_CTX_set_alpn_protos

  SSL_CTX_set_alpn_select_cb

  SSL_CTX_set_cert_cb

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_client_cert_cb

  SSL_CTX_set_client_cert_engine

  SSL_CTX_set_cookie_generate_cb

  SSL_CTX_set_cookie_verify_cb

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_info_callback

  SSL_CTX_set_msg_callback

  SSL_CTX_set_next_proto_select_cb

  SSL_CTX_set_next_protos_advertised_cb

  SSL_CTX_set_psk_client_callback

  SSL_CTX_set_psk_server_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_session_id_context

  SSL_CTX_set_srp_cb_arg

  SSL_CTX_set_srp_client_pwd_callback

  SSL_CTX_set_srp_password

  SSL_CTX_set_srp_strength

  SSL_CTX_set_srp_username

  SSL_CTX_set_srp_username_callback

  SSL_CTX_set_srp_verify_param_callback

  SSL_CTX_set_ssl_version

  SSL_CTX_set_timeout

  SSL_CTX_set_tlsext_use_srtp

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_tmp_ecdh_callback

  SSL_CTX_set_tmp_rsa_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_CTX_use_psk_identity_hint

  SSL_CTX_use_serverinfo

  SSL_CTX_use_serverinfo_file

  SSL_SESSION_free

  SSL_SESSION_get0_peer

  SSL_SESSION_get_compress_id

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_ex_new_index

  SSL_SESSION_get_id

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_set1_id_context

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_SRP_CTX_free

  SSL_SRP_CTX_init

  SSL_accept

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_cache_hit

  SSL_callback_ctrl

  SSL_certs_clear

  SSL_check_chain

  SSL_check_private_key

  SSL_clear

  SSL_connect

  SSL_copy_session_id

  SSL_ctrl

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_export_keying_material

  SSL_extension_supported

  SSL_free

  SSL_get0_alpn_selected

  SSL_get0_next_proto_negotiated

  SSL_get0_param

  SSL_get1_session

  SSL_get_SSL_CTX

  SSL_get_certificate

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_timeout

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_ex_new_index

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_privatekey

  SSL_get_psk_identity

  SSL_get_psk_identity_hint

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_rfd

  SSL_get_selected_srtp_profile

  SSL_get_servername

  SSL_get_servername_type

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shared_sigalgs

  SSL_get_shutdown

  SSL_get_sigalgs

  SSL_get_srp_N

  SSL_get_srp_g

  SSL_get_srp_userinfo

  SSL_get_srp_username

  SSL_get_srtp_profiles

  SSL_get_ssl_method

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_is_server

  SSL_library_init

  SSL_load_client_CA_file

  SSL_load_error_strings

  SSL_new

  SSL_peek

  SSL_pending

  SSL_read

  SSL_renegotiate

  SSL_renegotiate_abbreviated

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_select_next_proto

  SSL_set1_param

  SSL_set_SSL_CTX

  SSL_set_accept_state

  SSL_set_alpn_protos

  SSL_set_bio

  SSL_set_cert_cb

  SSL_set_cipher_list

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_debug

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_info_callback

  SSL_set_msg_callback

  SSL_set_psk_client_callback

  SSL_set_psk_server_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_rfd

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_session_secret_cb

  SSL_set_session_ticket_ext

  SSL_set_session_ticket_ext_cb

  SSL_set_shutdown

  SSL_set_srp_server_param

  SSL_set_srp_server_param_pw

  SSL_set_ssl_method

  SSL_set_state

  SSL_set_tlsext_use_srtp

  SSL_set_tmp_dh_callback

  SSL_set_tmp_ecdh_callback

  SSL_set_tmp_rsa_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_srp_server_param_with_username

  SSL_state

  SSL_state_string

  SSL_state_string_long

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_file

  SSL_use_psk_identity_hint

  SSL_version

  SSL_want

  SSL_write

  SSLv23_client_method

  SSLv23_method

  SSLv23_server_method

  SSLv2_client_method

  SSLv2_method

  SSLv2_server_method

  SSLv3_client_method

  SSLv3_method

  SSLv3_server_method

  TLSv1_1_client_method

  TLSv1_1_method

  TLSv1_1_server_method

  TLSv1_2_client_method

  TLSv1_2_method

  TLSv1_2_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  ssl3_ciphers

  Sections

  .text

  Size: 244KB - Virtual size: 243KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/sound.wav
• Checkers PACK/Checkers PACK/Steam Login Checked by LowSkiII/ssleay32.dll

  .dll windows:5 windows x86 arch:x86

  a99c22bff9e005fc06f5cb9df55f1f6d

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\OpenSSL\Temp\openssl-1.0.2k-x32\out32dll\ssleay32.pdb

  Imports

  libeay32

  ord2572

  ord3315

  ord2894

  ord2927

  ord168

  ord2747

  ord961

  ord167

  ord169

  ord3844

  ord3837

  ord3896

  ord2201

  ord904

  ord176

  ord282

  ord572

  ord3165

  ord3489

  ord1071

  ord2925

  ord268

  ord316

  ord363

  ord2712

  ord4164

  ord493

  ord4262

  ord3719

  ord216

  ord333

  ord4125

  ord4470

  ord1010

  ord4046

  ord3682

  ord2877

  ord3711

  ord129

  ord124

  ord1000

  ord125

  ord150

  ord205

  ord486

  ord484

  ord577

  ord763

  ord907

  ord87

  ord3450

  ord2107

  ord2063

  ord283

  ord3418

  ord481

  ord323

  ord2915

  ord3836

  ord3873

  ord1096

  ord1097

  ord3244

  ord3874

  ord3816

  ord3888

  ord109

  ord2589

  ord78

  ord95

  ord3891

  ord89

  ord1145

  ord1144

  ord3906

  ord1081

  ord2292

  ord3823

  ord3846

  ord187

  ord3857

  ord267

  ord3675

  ord3737

  ord3633

  ord3631

  ord3664

  ord3479

  ord1011

  ord341

  ord1012

  ord503

  ord359

  ord365

  ord4684

  ord3192

  ord3388

  ord3528

  ord2568

  ord3312

  ord3922

  ord2898

  ord264

  ord266

  ord3067

  ord3313

  ord3314

  ord4210

  ord4701

  ord653

  ord4692

  ord3925

  ord541

  ord2702

  ord3124

  ord4372

  ord4144

  ord4174

  ord2400

  ord3782

  ord1202

  ord193

  ord3866

  ord3704

  ord3758

  ord3767

  ord3647

  ord3766

  ord3365

  ord4114

  ord3460

  ord3783

  ord3454

  ord3754

  ord3394

  ord897

  ord3414

  ord3495

  ord3610

  ord67

  ord65

  ord53

  ord3899

  ord3826

  ord3559

  ord3399

  ord636

  ord2257

  ord914

  ord2478

  ord626

  ord890

  ord1004

  ord3527

  ord4513

  ord364

  ord2051

  ord206

  ord497

  ord85

  ord58

  ord630

  ord628

  ord1041

  ord1007

  ord1005

  ord4331

  ord1027

  ord3437

  ord629

  ord892

  ord74

  ord248

  ord3378

  ord1655

  ord575

  ord1025

  ord246

  ord1100

  ord4693

  ord2135

  ord622

  ord679

  ord2524

  ord3505

  ord3595

  ord1023

  ord2451

  ord623

  ord657

  ord401

  ord93

  ord911

  ord3396

  ord3657

  ord857

  ord908

  ord680

  ord1016

  ord2204

  ord3205

  ord624

  ord128

  ord4045

  ord2475

  ord368

  ord367

  ord370

  ord369

  ord887

  ord889

  ord891

  ord4320

  ord4383

  ord315

  ord1671

  ord1147

  ord189

  ord314

  ord956

  ord280

  ord2181

  ord399

  ord748

  ord279

  ord400

  ord751

  ord750

  ord394

  ord774

  ord1959

  ord37

  ord35

  ord824

  ord822

  ord8

  ord1091

  ord3700

  ord3623

  ord718

  ord7

  ord716

  ord703

  ord2426

  ord86

  ord88

  ord3724

  ord313

  ord1101

  ord293

  ord3914

  ord3807

  ord3795

  ord4740

  ord4731

  ord4656

  ord4637

  ord4615

  ord4601

  ord2996

  ord3155

  ord959

  ord325

  ord329

  ord318

  ord304

  ord292

  ord299

  ord395

  ord955

  ord2252

  ord91

  ord247

  ord225

  ord4578

  ord4572

  ord4576

  ord4570

  ord4573

  ord4582

  ord4575

  ord4577

  ord4584

  ord4580

  ord4581

  ord276

  ord274

  ord964

  ord965

  ord256

  ord2784

  ord2411

  ord754

  ord910

  ord641

  ord912

  ord909

  ord635

  ord52

  ord290

  ord498

  ord219

  ord3666

  ord4474

  ord4369

  ord66

  ord464

  ord490

  ord222

  ord3245

  ord654

  ord967

  ord2128

  ord281

  ord118

  ord201

  ord123

  ord202

  ord3663

  ord3512

  ord3459

  ord2924

  ord3010

  ord2578

  ord3644

  ord2929

  ord3422

  ord3513

  ord170

  ord165

  ord4119

  ord4245

  ord4488

  ord32

  ord1070

  ord4233

  ord4430

  ord866

  ord2630

  ord2760

  ord4540

  ord203

  ord3353

  ord3729

  ord3480

  ord3608

  ord3550

  ord3575

  ord3570

  ord3695

  ord3178

  ord188

  ord111

  ord110

  ord151

  ord285

  ord3239

  ord120

  ord181

  ord3883

  ord3109

  ord269

  ord2936

  ord495

  ord2821

  ord289

  ord252

  ord1654

  ord1653

  ord905

  ord98

  ord903

  kernel32

  CreateFileA

  SetStdHandle

  WriteConsoleW

  GetConsoleOutputCP

  WriteConsoleA

  CloseHandle

  HeapSize

  SetFilePointer

  GetLocaleInfoA

  GetStringTypeW

  GetStringTypeA

  LCMapStringW

  MultiByteToWideChar

  LCMapStringA

  FlushFileBuffers

  GetConsoleMode

  GetConsoleCP

  LoadLibraryA

  VirtualAlloc

  HeapReAlloc

  HeapAlloc

  RtlUnwind

  InitializeCriticalSectionAndSpinCount

  GetCurrentProcessId

  GetTickCount

  QueryPerformanceCounter

  VirtualFree

  HeapDestroy

  HeapCreate

  GetEnvironmentStringsW

  WideCharToMultiByte

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  FreeEnvironmentStringsA

  IsValidCodePage

  GetOEMCP

  GetACP

  GetCPInfo

  GetModuleFileNameA

  WriteFile

  InterlockedDecrement

  InterlockedIncrement

  TlsFree

  TlsSetValue

  TlsAlloc

  TlsGetValue

  GetModuleHandleA

  ExitProcess

  GetProcAddress

  GetModuleHandleW

  HeapFree

  Sleep

  DeleteCriticalSection

  GetStartupInfoA

  GetFileType

  GetStdHandle

  SetHandleCount

  IsDebuggerPresent

  GetCurrentProcess

  TerminateProcess

  GetCommandLineA

  GetCurrentThreadId

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  LeaveCriticalSection

  EnterCriticalSection

  GetSystemTimeAsFileTime

  GetLastError

  GetSystemTime

  SystemTimeToFileTime

  SetLastError

  Exports

  Exports

  BIO_f_ssl

  BIO_new_buffer_ssl_connect

  BIO_new_ssl

  BIO_new_ssl_connect

  BIO_ssl_copy_session_id

  BIO_ssl_shutdown

  DTLS_client_method

  DTLS_method

  DTLS_server_method

  DTLSv1_2_client_method

  DTLSv1_2_method

  DTLSv1_2_server_method

  DTLSv1_client_method

  DTLSv1_method

  DTLSv1_server_method

  ERR_load_SSL_strings

  PEM_read_SSL_SESSION

  PEM_read_bio_SSL_SESSION

  PEM_write_SSL_SESSION

  PEM_write_bio_SSL_SESSION

  SRP_Calc_A_param

  SRP_generate_client_master_secret

  SRP_generate_server_master_secret

  SSL_CIPHER_description

  SSL_CIPHER_find

  SSL_CIPHER_get_bits

  SSL_CIPHER_get_id

  SSL_CIPHER_get_name

  SSL_CIPHER_get_version

  SSL_COMP_add_compression_method

  SSL_COMP_free_compression_methods

  SSL_COMP_get_compression_methods

  SSL_COMP_get_name

  SSL_COMP_set0_compression_methods

  SSL_CONF_CTX_clear_flags

  SSL_CONF_CTX_finish

  SSL_CONF_CTX_free

  SSL_CONF_CTX_new

  SSL_CONF_CTX_set1_prefix

  SSL_CONF_CTX_set_flags

  SSL_CONF_CTX_set_ssl

  SSL_CONF_CTX_set_ssl_ctx

  SSL_CONF_cmd

  SSL_CONF_cmd_argv

  SSL_CONF_cmd_value_type

  SSL_CTX_SRP_CTX_free

  SSL_CTX_SRP_CTX_init

  SSL_CTX_add_client_CA

  SSL_CTX_add_client_custom_ext

  SSL_CTX_add_server_custom_ext

  SSL_CTX_add_session

  SSL_CTX_callback_ctrl

  SSL_CTX_check_private_key

  SSL_CTX_ctrl

  SSL_CTX_flush_sessions

  SSL_CTX_free

  SSL_CTX_get0_certificate

  SSL_CTX_get0_param

  SSL_CTX_get0_privatekey

  SSL_CTX_get_cert_store

  SSL_CTX_get_client_CA_list

  SSL_CTX_get_client_cert_cb

  SSL_CTX_get_ex_data

  SSL_CTX_get_ex_new_index

  SSL_CTX_get_info_callback

  SSL_CTX_get_quiet_shutdown

  SSL_CTX_get_ssl_method

  SSL_CTX_get_timeout

  SSL_CTX_get_verify_callback

  SSL_CTX_get_verify_depth

  SSL_CTX_get_verify_mode

  SSL_CTX_load_verify_locations

  SSL_CTX_new

  SSL_CTX_remove_session

  SSL_CTX_sess_get_get_cb

  SSL_CTX_sess_get_new_cb

  SSL_CTX_sess_get_remove_cb

  SSL_CTX_sess_set_get_cb

  SSL_CTX_sess_set_new_cb

  SSL_CTX_sess_set_remove_cb

  SSL_CTX_sessions

  SSL_CTX_set1_param

  SSL_CTX_set_alpn_protos

  SSL_CTX_set_alpn_select_cb

  SSL_CTX_set_cert_cb

  SSL_CTX_set_cert_store

  SSL_CTX_set_cert_verify_callback

  SSL_CTX_set_cipher_list

  SSL_CTX_set_client_CA_list

  SSL_CTX_set_client_cert_cb

  SSL_CTX_set_client_cert_engine

  SSL_CTX_set_cookie_generate_cb

  SSL_CTX_set_cookie_verify_cb

  SSL_CTX_set_default_passwd_cb

  SSL_CTX_set_default_passwd_cb_userdata

  SSL_CTX_set_default_verify_paths

  SSL_CTX_set_ex_data

  SSL_CTX_set_generate_session_id

  SSL_CTX_set_info_callback

  SSL_CTX_set_msg_callback

  SSL_CTX_set_next_proto_select_cb

  SSL_CTX_set_next_protos_advertised_cb

  SSL_CTX_set_psk_client_callback

  SSL_CTX_set_psk_server_callback

  SSL_CTX_set_purpose

  SSL_CTX_set_quiet_shutdown

  SSL_CTX_set_session_id_context

  SSL_CTX_set_srp_cb_arg

  SSL_CTX_set_srp_client_pwd_callback

  SSL_CTX_set_srp_password

  SSL_CTX_set_srp_strength

  SSL_CTX_set_srp_username

  SSL_CTX_set_srp_username_callback

  SSL_CTX_set_srp_verify_param_callback

  SSL_CTX_set_ssl_version

  SSL_CTX_set_timeout

  SSL_CTX_set_tlsext_use_srtp

  SSL_CTX_set_tmp_dh_callback

  SSL_CTX_set_tmp_ecdh_callback

  SSL_CTX_set_tmp_rsa_callback

  SSL_CTX_set_trust

  SSL_CTX_set_verify

  SSL_CTX_set_verify_depth

  SSL_CTX_use_PrivateKey

  SSL_CTX_use_PrivateKey_ASN1

  SSL_CTX_use_PrivateKey_file

  SSL_CTX_use_RSAPrivateKey

  SSL_CTX_use_RSAPrivateKey_ASN1

  SSL_CTX_use_RSAPrivateKey_file

  SSL_CTX_use_certificate

  SSL_CTX_use_certificate_ASN1

  SSL_CTX_use_certificate_chain_file

  SSL_CTX_use_certificate_file

  SSL_CTX_use_psk_identity_hint

  SSL_CTX_use_serverinfo

  SSL_CTX_use_serverinfo_file

  SSL_SESSION_free

  SSL_SESSION_get0_peer

  SSL_SESSION_get_compress_id

  SSL_SESSION_get_ex_data

  SSL_SESSION_get_ex_new_index

  SSL_SESSION_get_id

  SSL_SESSION_get_time

  SSL_SESSION_get_timeout

  SSL_SESSION_new

  SSL_SESSION_print

  SSL_SESSION_print_fp

  SSL_SESSION_set1_id_context

  SSL_SESSION_set_ex_data

  SSL_SESSION_set_time

  SSL_SESSION_set_timeout

  SSL_SRP_CTX_free

  SSL_SRP_CTX_init

  SSL_accept

  SSL_add_client_CA

  SSL_add_dir_cert_subjects_to_stack

  SSL_add_file_cert_subjects_to_stack

  SSL_alert_desc_string

  SSL_alert_desc_string_long

  SSL_alert_type_string

  SSL_alert_type_string_long

  SSL_cache_hit

  SSL_callback_ctrl

  SSL_certs_clear

  SSL_check_chain

  SSL_check_private_key

  SSL_clear

  SSL_connect

  SSL_copy_session_id

  SSL_ctrl

  SSL_do_handshake

  SSL_dup

  SSL_dup_CA_list

  SSL_export_keying_material

  SSL_extension_supported

  SSL_free

  SSL_get0_alpn_selected

  SSL_get0_next_proto_negotiated

  SSL_get0_param

  SSL_get1_session

  SSL_get_SSL_CTX

  SSL_get_certificate

  SSL_get_cipher_list

  SSL_get_ciphers

  SSL_get_client_CA_list

  SSL_get_current_cipher

  SSL_get_current_compression

  SSL_get_current_expansion

  SSL_get_default_timeout

  SSL_get_error

  SSL_get_ex_data

  SSL_get_ex_data_X509_STORE_CTX_idx

  SSL_get_ex_new_index

  SSL_get_fd

  SSL_get_finished

  SSL_get_info_callback

  SSL_get_peer_cert_chain

  SSL_get_peer_certificate

  SSL_get_peer_finished

  SSL_get_privatekey

  SSL_get_psk_identity

  SSL_get_psk_identity_hint

  SSL_get_quiet_shutdown

  SSL_get_rbio

  SSL_get_read_ahead

  SSL_get_rfd

  SSL_get_selected_srtp_profile

  SSL_get_servername

  SSL_get_servername_type

  SSL_get_session

  SSL_get_shared_ciphers

  SSL_get_shared_sigalgs

  SSL_get_shutdown

  SSL_get_sigalgs

  SSL_get_srp_N

  SSL_get_srp_g

  SSL_get_srp_userinfo

  SSL_get_srp_username

  SSL_get_srtp_profiles

  SSL_get_ssl_method

  SSL_get_verify_callback

  SSL_get_verify_depth

  SSL_get_verify_mode

  SSL_get_verify_result

  SSL_get_version

  SSL_get_wbio

  SSL_get_wfd

  SSL_has_matching_session_id

  SSL_is_server

  SSL_library_init

  SSL_load_client_CA_file

  SSL_load_error_strings

  SSL_new

  SSL_peek

  SSL_pending

  SSL_read

  SSL_renegotiate

  SSL_renegotiate_abbreviated

  SSL_renegotiate_pending

  SSL_rstate_string

  SSL_rstate_string_long

  SSL_select_next_proto

  SSL_set1_param

  SSL_set_SSL_CTX

  SSL_set_accept_state

  SSL_set_alpn_protos

  SSL_set_bio

  SSL_set_cert_cb

  SSL_set_cipher_list

  SSL_set_client_CA_list

  SSL_set_connect_state

  SSL_set_debug

  SSL_set_ex_data

  SSL_set_fd

  SSL_set_generate_session_id

  SSL_set_info_callback

  SSL_set_msg_callback

  SSL_set_psk_client_callback

  SSL_set_psk_server_callback

  SSL_set_purpose

  SSL_set_quiet_shutdown

  SSL_set_read_ahead

  SSL_set_rfd

  SSL_set_session

  SSL_set_session_id_context

  SSL_set_session_secret_cb

  SSL_set_session_ticket_ext

  SSL_set_session_ticket_ext_cb

  SSL_set_shutdown

  SSL_set_srp_server_param

  SSL_set_srp_server_param_pw

  SSL_set_ssl_method

  SSL_set_state

  SSL_set_tlsext_use_srtp

  SSL_set_tmp_dh_callback

  SSL_set_tmp_ecdh_callback

  SSL_set_tmp_rsa_callback

  SSL_set_trust

  SSL_set_verify

  SSL_set_verify_depth

  SSL_set_verify_result

  SSL_set_wfd

  SSL_shutdown

  SSL_srp_server_param_with_username

  SSL_state

  SSL_state_string

  SSL_state_string_long

  SSL_use_PrivateKey

  SSL_use_PrivateKey_ASN1

  SSL_use_PrivateKey_file

  SSL_use_RSAPrivateKey

  SSL_use_RSAPrivateKey_ASN1

  SSL_use_RSAPrivateKey_file

  SSL_use_certificate

  SSL_use_certificate_ASN1

  SSL_use_certificate_file

  SSL_use_psk_identity_hint

  SSL_version

  SSL_want

  SSL_write

  SSLv23_client_method

  SSLv23_method

  SSLv23_server_method

  SSLv2_client_method

  SSLv2_method

  SSLv2_server_method

  SSLv3_client_method

  SSLv3_method

  SSLv3_server_method

  TLSv1_1_client_method

  TLSv1_1_method

  TLSv1_1_server_method

  TLSv1_2_client_method

  TLSv1_2_method

  TLSv1_2_server_method

  TLSv1_client_method

  TLSv1_method

  TLSv1_server_method

  d2i_SSL_SESSION

  i2d_SSL_SESSION

  ssl3_ciphers

  Sections

  .text

  Size: 244KB - Virtual size: 243KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 54KB - Virtual size: 53KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 16KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 13KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 117KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/SteamBrute_ShaOnKrisTof.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/Tesseract.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Development\Active\Tesseract\src\Tesseract\obj\Release\net45\Tesseract.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 119KB - Virtual size: 119KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 117KB - Virtual size: 117KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/Tesseract.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Development\Active\Tesseract\src\Tesseract\obj\Release\net45\Tesseract.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 119KB - Virtual size: 119KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/SteamBrute_ShaOnKrisTof/procs/sysdll.exe

  .exe windows:4 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Sections

  NCu8o#y

  Size: 333KB - Virtual size: 332KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 172KB - Virtual size: 172KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .enigma1

  Size: 816KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .enigma2

  Size: 264KB - Virtual size: 264KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/System.Reactive.Windows.Forms.xml

  .xml
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/TOD TV.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 169KB - Virtual size: 169KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/TOD TV.exe.config
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/TOD TV.pdb
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/Leaf.xNet.xml

  .xml .js polyglot
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Reactive.Windows.Forms.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  04/06/2018, 00:00

  Not After

  08/06/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6c:cf:61:16:36:09:cb:fc:0e:bc:3e:82:50:5b:97:bf:92:9e:85:f8:24:6f:65:4a:e0:ed:92:b6:60:ca:a0:63

  Signer

  Actual PE Digest

  6c:cf:61:16:36:09:cb:fc:0e:bc:3e:82:50:5b:97:bf:92:9e:85:f8:24:6f:65:4a:e0:ed:92:b6:60:ca:a0:63

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  System.Reactive.Windows.Forms.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Reactive.Windows.Forms.xml

  .xml
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Reactive.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  05:68:a2:bc:0b:d1:2e:07:53:ac:e5:f4:d0:17:48:c0

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  04/06/2018, 00:00

  Not After

  08/06/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Reactive Extensions for .NET (.NET Foundation),O=Reactive Extensions for .NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  ad:b5:b1:de:06:96:b4:b5:c2:87:24:63:0b:20:7b:c2:52:f6:c9:c9:80:15:73:ac:e1:f1:11:d3:ff:f0:bb:f5

  Signer

  Actual PE Digest

  ad:b5:b1:de:06:96:b4:b5:c2:87:24:63:0b:20:7b:c2:52:f6:c9:c9:80:15:73:ac:e1:f1:11:d3:ff:f0:bb:f5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  System.Reactive.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.4MB - Virtual size: 1.4MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Reactive.xml

  .xml
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Runtime.CompilerServices.Unsafe.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/05/2019, 21:37

  Not After

  02/05/2020, 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  10:84:6c:5c:c9:e6:39:56:a6:5f:23:06:01:58:8b:e1:ae:37:c4:fe:71:62:f4:b5:f7:ae:87:52:ec:0c:f4:30

  Signer

  Actual PE Digest

  10:84:6c:5c:c9:e6:39:56:a6:5f:23:06:01:58:8b:e1:ae:37:c4:fe:71:62:f4:b5:f7:ae:87:52:ec:0c:f4:30

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Runtime.CompilerServices.Unsafe.xml
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Threading.Tasks.Extensions.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:01:52:9b:40:9f:50:56:99:75:88:00:00:00:00:01:52

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/05/2019, 21:37

  Not After

  02/05/2020, 21:37

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

  Signer

  Actual PE Digest

  da:fb:83:40:c8:c2:8e:cb:07:b8:6a:f1:de:5f:60:bf:04:02:39:30:51:4d:e3:8a:90:db:7a:5d:d3:4f:71:f0

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\A\_work\156\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Threading.Tasks.Extensions\netfx\System.Threading.Tasks.Extensions.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/System.Threading.Tasks.Extensions.xml
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/TOD TV.exe.config
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/TOD TV.pdb
• Checkers PACK/Checkers PACK/TOD TV Checker by 9LIMBO/nssdbm3/components.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\bessa\source\repos\TOD TV\TOD TV\obj\Debug\TOD TV.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 17KB - Virtual size: 17KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 108KB - Virtual size: 107KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/Binsoft.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 525KB - Virtual size: 524KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/SkinSoft/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/Tinydeal Checker Account By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 190KB - Virtual size: 190KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Tinydeal Checker Account By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/CheckerLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/auth.txt
• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Auth/sys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 488B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/CheckerLib.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 812B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/TwitterCheckerProtected.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 195KB - Virtual size: 195KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/TwitterCheckerProtected/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/TwitterCheckerProtected/auth.txt
• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/USA dominos pizza checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 169KB - Virtual size: 169KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/d3dx10_34.dll

  .dll windows:6 windows x86 arch:x86

  0008d86c47dcdd56b224627bb2f25287

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  04/04/2006, 17:44

  Not After

  26/04/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageContentCommitment

  KeyUsageCertSign

  KeyUsageCRLSign

  61:46:9e:cb:00:04:00:00:00:65

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/04/2006, 19:43

  Not After

  04/10/2007, 19:53

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Signer

  Actual PE Digest

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_34.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _adjust_fdiv

  _amsg_exit

  _initterm

  free

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  __CxxFrameHandler

  gdi32

  GetGlyphOutlineA

  SelectObject

  GetCharacterPlacementA

  GetCharacterPlacementW

  CreateDIBSection

  DeleteDC

  DeleteObject

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkColor

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetTextColor

  kernel32

  CreateFileA

  GetFileSizeEx

  ReadFile

  WideCharToMultiByte

  GetFullPathNameA

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  DebugBreak

  WaitForMultipleObjects

  ReleaseSemaphore

  MultiByteToWideChar

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  DeleteCriticalSection

  InitializeCriticalSection

  EnterCriticalSection

  LoadLibraryA

  LeaveCriticalSection

  GetVersion

  GetProcAddress

  DisableThreadLibraryCalls

  IsProcessorFeaturePresent

  CreateFileW

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  WriteFile

  GetLastError

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  ReleaseMutex

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10DisassembleEffect

  D3DX10DisassembleShader

  D3DX10FilterTexture

  D3DX10GetDriverLevel

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10ReflectShader

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 386KB - Virtual size: 386KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/ByteCodeGenerator.exe

  .exe windows:10 windows x86 arch:x86

  bc8c627d82f56569b4b2686ed2e1af03

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  ByteCodeGenerator.pdb

  Imports

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _c_exit

  _register_thread_local_exe_atexit_callback

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o__callnewh

  _o__cexit

  _o__configthreadlocale

  _o__configure_wide_argv

  _o__controlfp_s

  _o__crt_atexit

  _o__errno

  _o__exit

  _o__get_initial_wide_environment

  _o__initialize_onexit_table

  _o__initialize_wide_environment

  _o__invalid_parameter_noinfo

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_exe

  _o__set_app_type

  _o__set_fmode

  _o__set_new_mode

  memcpy

  _o_exit

  _o_free

  _o_malloc

  _o_memcpy_s

  _o_terminate

  __CxxFrameHandler3

  _except_handler4_common

  _CxxThrowException

  _o___stdio_common_vsnwprintf_s

  _o___stdio_common_vsnprintf_s

  _o___std_exception_destroy

  _o___std_exception_copy

  _o___p__commode

  _o___p___wargv

  _o___p___argc

  __std_terminate

  memcmp

  ntdll

  NtQuerySystemInformation

  RtlReportException

  RtlCompareUnicodeString

  RtlEnumerateGenericTableAvl

  NtQueryInformationThread

  RtlInsertElementGenericTableAvl

  RtlAcquireSRWLockShared

  RtlLookupElementGenericTableAvl

  RtlReleaseSRWLockShared

  RtlReleaseSRWLockExclusive

  RtlConvertSidToUnicodeString

  NtSetInformationThread

  RtlNumberGenericTableElementsAvl

  RtlInitUnicodeString

  RtlAcquireSRWLockExclusive

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlSubscribeWnfStateChangeNotification

  RtlFreeUnicodeString

  RtlInitializeGenericTableAvl

  RtlEnumerateGenericTableWithoutSplayingAvl

  RtlDeleteElementGenericTableAvl

  urlmon

  CoInternetParseIUri

  CreateUri

  api-ms-win-security-base-l1-1-0

  ImpersonateLoggedOnUser

  RevertToSelf

  GetTokenInformation

  rpcrt4

  RpcServerListen

  RpcServerUnregisterIf

  NdrServerCall2

  RpcServerRegisterIf3

  RpcEpRegisterW

  RpcMgmtStopServerListening

  RpcServerInqBindings

  RpcBindingVectorFree

  UuidFromStringW

  RpcObjectSetType

  RpcServerUseProtseqEpW

  api-ms-win-core-registry-l1-1-0

  RegGetValueW

  RegOpenKeyExW

  RegQueryValueExW

  RegCloseKey

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  OpenProcessToken

  GetCurrentProcessId

  GetCurrentProcess

  GetCurrentThread

  GetCurrentThreadId

  OpenThreadToken

  ExitProcess

  api-ms-win-security-sddl-l1-1-0

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  api-ms-win-core-com-l1-1-0

  CoTaskMemAlloc

  CoTaskMemFree

  CoCreateInstance

  CoUninitialize

  CoInitializeEx

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventWriteTransfer

  api-ms-win-eventing-classicprovider-l1-1-0

  GetTraceLoggerHandle

  UnregisterTraceGuids

  RegisterTraceGuidsW

  GetTraceEnableLevel

  GetTraceEnableFlags

  TraceMessage

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  UnhandledExceptionFilter

  GetLastError

  SetUnhandledExceptionFilter

  RaiseException

  api-ms-win-core-file-l1-1-0

  GetFileAttributesExW

  SetFilePointer

  WriteFile

  SetEndOfFile

  GetFileSizeEx

  CreateFileW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  DuplicateHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  api-ms-win-core-libraryloader-l1-2-0

  LoadLibraryExW

  GetModuleHandleExW

  FreeLibrary

  GetModuleFileNameA

  GetModuleHandleW

  GetProcAddress

  oleaut32

  SysFreeString

  api-ms-win-core-memory-l1-1-0

  MapViewOfFile

  CreateFileMappingW

  UnmapViewOfFile

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-synch-l1-1-0

  ReleaseMutex

  CreateSemaphoreExW

  WaitForSingleObjectEx

  OpenSemaphoreW

  ReleaseSemaphore

  WaitForSingleObject

  CreateMutexExW

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  GetProcessHeap

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  Sections

  .text

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/DXCore.dll

  .dll windows:10 windows x86 arch:x86

  e4a36d51169ef61eaa4a2e614360be1c

  
  

  Code Sign

  33:00:00:01:c4:22:b2:f7:9b:79:3d:ac:b2:00:00:00:00:01:c4

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  03/07/2018, 20:45

  Not After

  26/07/2019, 20:45

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Signer

  Actual PE Digest

  33:b5:79:7e:34:b4:3b:b4:0e:03:7d:ce:0e:29:cc:17:f4:9f:d6:cd:0c:83:1c:a2:ac:d6:aa:32:83:71:f7:b5

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  DXCore.pdb

  Imports

  msvcp_win

  ?_Throw_C_error@std@@YAXH@Z

  _Mtx_unlock

  _Mtx_lock

  _Mtx_init_in_situ

  _Mtx_destroy_in_situ

  ?_Xlength_error@std@@YAXPBD@Z

  api-ms-win-crt-runtime-l1-1-0

  _initterm_e

  _initterm

  api-ms-win-crt-string-l1-1-0

  memset

  api-ms-win-crt-private-l1-1-0

  _o___stdio_common_vsnprintf_s

  _o___stdio_common_vswprintf

  _o__callnewh

  _o__cexit

  _o__configure_narrow_argv

  _o__crt_atexit

  _o__errno

  _o__execute_onexit_table

  _o__initialize_narrow_environment

  _o__initialize_onexit_table

  _o__invalid_parameter_noinfo

  _o__invalid_parameter_noinfo_noreturn

  _o__purecall

  _o__register_onexit_function

  _o__seh_filter_dll

  memmove

  _o_free

  _o_malloc

  _o_toupper

  _o_wcscpy_s

  _o_wcsncpy_s

  _o_wcstombs_s

  _except_handler4_common

  _CxxThrowException

  _o___std_type_info_destroy_list

  _o___std_exception_destroy

  _o___std_exception_copy

  __std_terminate

  __CxxFrameHandler3

  memcmp

  memcpy

  ntdll

  RtlSubscribeWnfStateChangeNotification

  RtlFreeHeap

  RtlCaptureStackBackTrace

  RtlAllocateHeap

  RtlUnsubscribeWnfStateChangeNotification

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetModuleFileNameA

  GetModuleHandleExW

  GetProcAddress

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  WaitForSingleObjectEx

  AcquireSRWLockExclusive

  CreateMutexExW

  ReleaseSRWLockExclusive

  AcquireSRWLockShared

  DeleteCriticalSection

  ReleaseMutex

  WaitForSingleObject

  ReleaseSRWLockShared

  InitializeCriticalSectionEx

  LeaveCriticalSection

  OpenSemaphoreW

  ReleaseSemaphore

  EnterCriticalSection

  CreateSemaphoreExW

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  GetLastError

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  SetThreadpoolTimer

  CloseThreadpoolTimer

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcessId

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  OutputDebugStringW

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-devices-config-l1-1-1

  CM_MapCrToWin32Err

  CM_Unregister_Notification

  CM_Register_Notification

  api-ms-win-core-com-l1-1-0

  IIDFromString

  api-ms-win-core-psapi-l1-1-0

  K32GetModuleInformation

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  api-ms-win-core-processthreads-l1-1-1

  IsProcessorFeaturePresent

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-interlocked-l1-1-0

  InitializeSListHead

  win32u

  NtGdiDdDDISignalSynchronizationObject

  NtGdiDdDDISetVidPnSourceOwner

  NtGdiDdDDICreateSynchronizationObject

  NtGdiDdDDIOpenResource

  NtGdiDdDDICreateAllocation

  NtGdiDdDDIEnumAdapters2

  NtGdiDdDDIQueryAdapterInfo

  NtGdiDdDDIQueryVideoMemoryInfo

  NtGdiDdDDINetDispStartMiracastDisplayDevice

  NtGdiDdDDIWaitForSynchronizationObject

  NtGdiDdDDIChangeVideoMemoryReservation

  NtGdiDdDDICloseAdapter

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventWriteTransfer

  EventProviderEnabled

  EventUnregister

  EventSetInformation

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DXCoreCreateAdapterFactory

  Sections

  .text

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 8B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/System.Security.Cryptography.Primitives.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:b5:ac:7d:6d:87:6b:26:11:47:00:00:00:00:00:b5

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:B8EC-30A4-7144,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  28/10/2015, 20:31

  Not After

  28/01/2017, 20:31

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6e:9f:00:6b:8a:d0:7f:c5:6f:21:8b:48:80:5c:6b:f8:4a:ee:89:89:32:bd:35:75:74:3b:20:61:aa:38:47:8c

  Signer

  Actual PE Digest

  6e:9f:00:6b:8a:d0:7f:c5:6f:21:8b:48:80:5c:6b:f8:4a:ee:89:89:32:bd:35:75:74:3b:20:61:aa:38:47:8c

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  1d:74:b2:f1:29:c8:08:eb:99:2d:d5:f5:61:0d:48:4b:7e:c1:57:a3

  Signer

  Actual PE Digest

  1d:74:b2:f1:29:c8:08:eb:99:2d:d5:f5:61:0d:48:4b:7e:c1:57:a3

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.Security.Cryptography.Primitives/net46\System.Security.Cryptography.Primitives.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/Windows.System.UserDeviceAssociation.dll

  .dll windows:10 windows x86 arch:x86

  58d3184f6b40ff5d7f83f469452c70a7

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  Windows.System.UserDeviceAssociation.pdb

  Imports

  msvcrt

  free

  malloc

  _initterm

  _unlock

  __dllonexit

  _onexit

  ?terminate@@YAXXZ

  _except_handler4_common

  __CxxFrameHandler3

  memcmp

  ??1type_info@@UAE@XZ

  _callnewh

  memmove

  memcpy

  _CxxThrowException

  ?what@exception@@UBEPBDXZ

  ??0exception@@QAE@ABQBDH@Z

  _XcptFilter

  ??0exception@@QAE@ABQBD@Z

  _vsnprintf_s

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1exception@@UAE@XZ

  memcpy_s

  _purecall

  _vsnwprintf

  _amsg_exit

  ??3@YAXPAX@Z

  _lock

  memset

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDuplicateString

  WindowsDeleteString

  WindowsCompareStringOrdinal

  HSTRING_UserSize

  HSTRING_UserMarshal

  WindowsCreateStringReference

  WindowsIsStringEmpty

  HSTRING_UserFree

  WindowsGetStringRawBuffer

  HSTRING_UserUnmarshal

  WindowsCreateString

  WindowsStringHasEmbeddedNull

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-winrt-error-l1-1-0

  SetRestrictedErrorInfo

  RoOriginateError

  RoOriginateErrorW

  RoTransformError

  api-ms-win-core-synch-l1-1-0

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  AcquireSRWLockShared

  OpenSemaphoreW

  WaitForSingleObjectEx

  ReleaseMutex

  WaitForSingleObject

  InitializeCriticalSectionEx

  CreateEventW

  InitializeSRWLock

  CreateMutexExW

  LeaveCriticalSection

  DeleteCriticalSection

  ReleaseSemaphore

  AcquireSRWLockExclusive

  CreateSemaphoreExW

  api-ms-win-core-synch-l1-2-0

  Sleep

  WakeAllConditionVariable

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  TerminateProcess

  GetCurrentProcessId

  GetCurrentThreadId

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  SetLastError

  RaiseException

  GetLastError

  rpcrt4

  NdrOleFree

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  CStdStubBuffer_Connect

  CStdStubBuffer_IsIIDSupported

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrCStdStubBuffer_Release

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrStubCall2

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  NdrProxyForwardingFunction3

  ObjectStublessClient8

  ObjectStublessClient6

  ObjectStublessClient9

  NdrProxyForwardingFunction4

  ObjectStublessClient7

  CStdStubBuffer2_Disconnect

  ObjectStublessClient3

  CStdStubBuffer2_QueryInterface

  CStdStubBuffer2_CountRefs

  ObjectStublessClient10

  NdrProxyForwardingFunction5

  api-ms-win-core-debug-l1-1-0

  IsDebuggerPresent

  DebugBreak

  OutputDebugStringW

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  api-ms-win-core-com-l1-1-0

  CoCreateFreeThreadedMarshaler

  CoTaskMemAlloc

  api-ms-win-core-com-l1-1-1

  RoGetAgileReference

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-winrt-error-l1-1-1

  RoGetMatchingRestrictedErrorInfo

  IsErrorPropagationEnabled

  RoReportFailedDelegate

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  GetProcAddress

  GetModuleHandleExW

  GetModuleHandleW

  api-ms-win-core-heap-l1-1-0

  GetProcessHeap

  HeapFree

  HeapAlloc

  api-ms-win-appmodel-runtime-l1-1-0

  GetCurrentPackageFullName

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/Xceed.Wpf.AvalonDock.Themes.Metro.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\Dev\ExtendedWPFToolkit\Release\3.5.0\OpenSource\Generated\Src\Xceed.Wpf.AvalonDock.Themes.Metro\obj\Release\Xceed.Wpf.AvalonDock.Themes.Metro.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 75KB - Virtual size: 75KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/d3dx10_34.dll

  .dll windows:6 windows x86 arch:x86

  0008d86c47dcdd56b224627bb2f25287

  
  

  Code Sign

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  10/01/1997, 07:00

  Not After

  31/12/2020, 07:00

  Subject

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  61:47:52:ba:00:00:00:00:00:04

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:53

  Not After

  16/09/2011, 02:03

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:D8A9-CFCC-579C,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  61:49:7c:ed:00:00:00:00:00:05

  Certificate

  Issuer

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  16/09/2006, 01:55

  Not After

  16/09/2011, 02:05

  Subject

  CN=Microsoft Timestamping Service,OU=nCipher DSE ESN:10D8-5847-CBF8,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  16/09/2006, 01:04

  Not After

  15/09/2019, 07:00

  Subject

  CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  6a:0b:99:4f:c0:00:1d:ab:11:da:c4:02:a1:66:27:ba

  Certificate

  Issuer

  CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

  Not Before

  04/04/2006, 17:44

  Not After

  26/04/2012, 07:00

  Subject

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageContentCommitment

  KeyUsageCertSign

  KeyUsageCRLSign

  61:46:9e:cb:00:04:00:00:00:65

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,OU=Copyright (c) 2000 Microsoft Corp.,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04/04/2006, 19:43

  Not After

  04/10/2007, 19:53

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Signer

  Actual PE Digest

  66:ac:a6:e0:bb:fc:ad:8c:ff:fb:44:43:45:22:77:f1:82:78:be:78

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3dx10_34.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  _onexit

  _lock

  __dllonexit

  _unlock

  ?terminate@@YAXXZ

  _adjust_fdiv

  _amsg_exit

  _initterm

  free

  malloc

  _XcptFilter

  tolower

  _stricmp

  _CxxThrowException

  _isnan

  floor

  _controlfp

  _purecall

  _CIatan

  _CIcos

  _CIasin

  _finite

  _CIsin

  _CIatan2

  _CIacos

  _CIsqrt

  iswspace

  iswalpha

  iswdigit

  iswpunct

  memmove

  qsort

  memset

  ??2@YAPAXI@Z

  memcpy

  ??3@YAXPAX@Z

  _vsnprintf

  __CxxFrameHandler

  gdi32

  GetGlyphOutlineA

  SelectObject

  GetCharacterPlacementA

  GetCharacterPlacementW

  CreateDIBSection

  DeleteDC

  DeleteObject

  GetTextMetricsA

  GetObjectW

  GetObjectA

  SetBkColor

  SetBkMode

  GetTextMetricsW

  GetFontLanguageInfo

  CreateFontIndirectA

  CreateFontIndirectW

  SetTextAlign

  SetMapMode

  CreateCompatibleDC

  ExtTextOutA

  MoveToEx

  ExtTextOutW

  TranslateCharsetInfo

  SetTextColor

  kernel32

  CreateFileA

  GetFileSizeEx

  ReadFile

  WideCharToMultiByte

  GetFullPathNameA

  GetModuleHandleA

  FreeLibrary

  GetCurrentProcess

  GetProcessAffinityMask

  CreateThread

  InterlockedIncrement

  Sleep

  WaitForSingleObject

  InterlockedDecrement

  DebugBreak

  WaitForMultipleObjects

  ReleaseSemaphore

  MultiByteToWideChar

  CloseHandle

  CreateSemaphoreA

  CreateMutexA

  DeleteCriticalSection

  InitializeCriticalSection

  EnterCriticalSection

  LoadLibraryA

  LeaveCriticalSection

  GetVersion

  GetProcAddress

  DisableThreadLibraryCalls

  IsProcessorFeaturePresent

  CreateFileW

  GetFileSize

  GetModuleFileNameA

  InterlockedExchange

  InterlockedCompareExchange

  OutputDebugStringA

  RtlUnwind

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  WriteFile

  GetLastError

  LockResource

  FindResourceW

  LoadResource

  SizeofResource

  FindResourceA

  ReleaseMutex

  advapi32

  RegCloseKey

  RegEnumKeyExA

  RegOpenKeyExA

  RegQueryValueExA

  ole32

  CreateStreamOnHGlobal

  Exports

  Exports

  D3DX10CheckVersion

  D3DX10CompileFromFileA

  D3DX10CompileFromFileW

  D3DX10CompileFromMemory

  D3DX10CompileFromResourceA

  D3DX10CompileFromResourceW

  D3DX10ComputeNormalMap

  D3DX10CreateAsyncCompilerProcessor

  D3DX10CreateAsyncEffectCreateProcessor

  D3DX10CreateAsyncEffectPoolCreateProcessor

  D3DX10CreateAsyncFileLoaderA

  D3DX10CreateAsyncFileLoaderW

  D3DX10CreateAsyncMemoryLoader

  D3DX10CreateAsyncResourceLoaderA

  D3DX10CreateAsyncResourceLoaderW

  D3DX10CreateAsyncShaderPreprocessProcessor

  D3DX10CreateAsyncShaderResourceViewProcessor

  D3DX10CreateAsyncTextureInfoProcessor

  D3DX10CreateAsyncTextureProcessor

  D3DX10CreateEffectFromFileA

  D3DX10CreateEffectFromFileW

  D3DX10CreateEffectFromMemory

  D3DX10CreateEffectFromResourceA

  D3DX10CreateEffectFromResourceW

  D3DX10CreateEffectPoolFromFileA

  D3DX10CreateEffectPoolFromFileW

  D3DX10CreateEffectPoolFromMemory

  D3DX10CreateEffectPoolFromResourceA

  D3DX10CreateEffectPoolFromResourceW

  D3DX10CreateFontA

  D3DX10CreateFontIndirectA

  D3DX10CreateFontIndirectW

  D3DX10CreateFontW

  D3DX10CreateMesh

  D3DX10CreateShaderResourceViewFromFileA

  D3DX10CreateShaderResourceViewFromFileW

  D3DX10CreateShaderResourceViewFromMemory

  D3DX10CreateShaderResourceViewFromResourceA

  D3DX10CreateShaderResourceViewFromResourceW

  D3DX10CreateSkinInfo

  D3DX10CreateSprite

  D3DX10CreateTextureFromFileA

  D3DX10CreateTextureFromFileW

  D3DX10CreateTextureFromMemory

  D3DX10CreateTextureFromResourceA

  D3DX10CreateTextureFromResourceW

  D3DX10CreateThreadPump

  D3DX10DisassembleEffect

  D3DX10DisassembleShader

  D3DX10FilterTexture

  D3DX10GetDriverLevel

  D3DX10GetImageInfoFromFileA

  D3DX10GetImageInfoFromFileW

  D3DX10GetImageInfoFromMemory

  D3DX10GetImageInfoFromResourceA

  D3DX10GetImageInfoFromResourceW

  D3DX10LoadTextureFromTexture

  D3DX10PreprocessShaderFromFileA

  D3DX10PreprocessShaderFromFileW

  D3DX10PreprocessShaderFromMemory

  D3DX10PreprocessShaderFromResourceA

  D3DX10PreprocessShaderFromResourceW

  D3DX10ReflectShader

  D3DX10SHProjectCubeMap

  D3DX10SaveTextureToFileA

  D3DX10SaveTextureToFileW

  D3DX10SaveTextureToMemory

  D3DX10UnsetAllDeviceObjects

  D3DXBoxBoundProbe

  D3DXColorAdjustContrast

  D3DXColorAdjustSaturation

  D3DXComputeBoundingBox

  D3DXComputeBoundingSphere

  D3DXCpuOptimizations

  D3DXCreateMatrixStack

  D3DXFloat16To32Array

  D3DXFloat32To16Array

  D3DXFresnelTerm

  D3DXIntersectTri

  D3DXMatrixAffineTransformation

  D3DXMatrixAffineTransformation2D

  D3DXMatrixDecompose

  D3DXMatrixDeterminant

  D3DXMatrixInverse

  D3DXMatrixLookAtLH

  D3DXMatrixLookAtRH

  D3DXMatrixMultiply

  D3DXMatrixMultiplyTranspose

  D3DXMatrixOrthoLH

  D3DXMatrixOrthoOffCenterLH

  D3DXMatrixOrthoOffCenterRH

  D3DXMatrixOrthoRH

  D3DXMatrixPerspectiveFovLH

  D3DXMatrixPerspectiveFovRH

  D3DXMatrixPerspectiveLH

  D3DXMatrixPerspectiveOffCenterLH

  D3DXMatrixPerspectiveOffCenterRH

  D3DXMatrixPerspectiveRH

  D3DXMatrixReflect

  D3DXMatrixRotationAxis

  D3DXMatrixRotationQuaternion

  D3DXMatrixRotationX

  D3DXMatrixRotationY

  D3DXMatrixRotationYawPitchRoll

  D3DXMatrixRotationZ

  D3DXMatrixScaling

  D3DXMatrixShadow

  D3DXMatrixTransformation

  D3DXMatrixTransformation2D

  D3DXMatrixTranslation

  D3DXMatrixTranspose

  D3DXPlaneFromPointNormal

  D3DXPlaneFromPoints

  D3DXPlaneIntersectLine

  D3DXPlaneNormalize

  D3DXPlaneTransform

  D3DXPlaneTransformArray

  D3DXQuaternionBaryCentric

  D3DXQuaternionExp

  D3DXQuaternionInverse

  D3DXQuaternionLn

  D3DXQuaternionMultiply

  D3DXQuaternionNormalize

  D3DXQuaternionRotationAxis

  D3DXQuaternionRotationMatrix

  D3DXQuaternionRotationYawPitchRoll

  D3DXQuaternionSlerp

  D3DXQuaternionSquad

  D3DXQuaternionSquadSetup

  D3DXQuaternionToAxisAngle

  D3DXSHAdd

  D3DXSHDot

  D3DXSHEvalConeLight

  D3DXSHEvalDirection

  D3DXSHEvalDirectionalLight

  D3DXSHEvalHemisphereLight

  D3DXSHEvalSphericalLight

  D3DXSHMultiply2

  D3DXSHMultiply3

  D3DXSHMultiply4

  D3DXSHMultiply5

  D3DXSHMultiply6

  D3DXSHRotate

  D3DXSHRotateZ

  D3DXSHScale

  D3DXSphereBoundProbe

  D3DXVec2BaryCentric

  D3DXVec2CatmullRom

  D3DXVec2Hermite

  D3DXVec2Normalize

  D3DXVec2Transform

  D3DXVec2TransformArray

  D3DXVec2TransformCoord

  D3DXVec2TransformCoordArray

  D3DXVec2TransformNormal

  D3DXVec2TransformNormalArray

  D3DXVec3BaryCentric

  D3DXVec3CatmullRom

  D3DXVec3Hermite

  D3DXVec3Normalize

  D3DXVec3Project

  D3DXVec3ProjectArray

  D3DXVec3Transform

  D3DXVec3TransformArray

  D3DXVec3TransformCoord

  D3DXVec3TransformCoordArray

  D3DXVec3TransformNormal

  D3DXVec3TransformNormalArray

  D3DXVec3Unproject

  D3DXVec3UnprojectArray

  D3DXVec4BaryCentric

  D3DXVec4CatmullRom

  D3DXVec4Cross

  D3DXVec4Hermite

  D3DXVec4Normalize

  D3DXVec4Transform

  D3DXVec4TransformArray

  Sections

  .text

  Size: 386KB - Virtual size: 386KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 21KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 928B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/dominos.exe

  .exe windows:4 windows x64 arch:x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  d:\dominos pizza\obj\Debug\USA dominos pizza checker.pdb

  Sections

  .text

  Size: 125KB - Virtual size: 124KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 44KB - Virtual size: 43KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/wscadminui.exe

  .exe windows:10 windows x86 arch:x86

  3d14ff3aed50fb9c7612f737f4a41021

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  wscadminui.pdb

  Imports

  msvcrt

  _controlfp

  __setusermatherr

  _initterm

  _except_handler4_common

  ?terminate@@YAXXZ

  __p__fmode

  _cexit

  _exit

  exit

  __set_app_type

  __wgetmainargs

  _amsg_exit

  __p__commode

  _XcptFilter

  _wcsicmp

  wscapi

  wscLaunchAdminMakeDefaultUI

  kernel32

  GetCurrentProcess

  UnhandledExceptionFilter

  GetTickCount

  GetSystemTimeAsFileTime

  GetCurrentThreadId

  GetCurrentProcessId

  QueryPerformanceCounter

  GetModuleHandleW

  SetUnhandledExceptionFilter

  Sleep

  TerminateProcess

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .imrsiv

  Size: - Virtual size: 4B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .data

  Size: 512B - Virtual size: 880B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 854B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 304B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/sysdll/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/USA dominos Checker by RubiconT/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\User\Documents\Visual Studio 2015\Projects\xNet\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 97KB - Virtual size: 97KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy Accounts Checker By X-SLAYER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 181KB - Virtual size: 180KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.0MB - Virtual size: 1.0MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/Udemy.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  8oz9ojo

  Size: 609KB - Virtual size: 609KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 40KB - Virtual size: 40KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 157KB - Virtual size: 157KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Udemy/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Udemy Accounts Checker By X-SLAYER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Iheb\Desktop\My Source Code\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 113KB - Virtual size: 112KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 490KB - Virtual size: 489KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Development\Releases\Json\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 490KB - Virtual size: 489KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/ScorpioSys.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  1: 8'O

  Size: 32KB - Virtual size: 31KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .text

  Size: 291KB - Virtual size: 291KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 196KB - Virtual size: 196KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/bin32/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Администратор\Desktop\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/uplay checker v2.0 by scorpio.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Uplay checker V2.0 By Scorpio/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Администратор\Desktop\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 108KB - Virtual size: 108KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1012B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/VYPR Vpn.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 248KB - Virtual size: 247KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/Vypr.txt
• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/CheckerBasics.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Svetlana\source\repos\CheckerBasics\CheckerBasics\obj\Release\CheckerBasics.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 920B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net462\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/Vypr.txt
• Checkers PACK/Checkers PACK/VYPRVPN CHECKER BY @Pratham09/pnpclean/msi.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 14KB - Virtual size: 13KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/IronPython.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython\obj\Release\net45\IronPython.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 996B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/VMBC.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 173KB - Virtual size: 173KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/mfc100cht.dll

  .dll windows:5 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Signer

  Actual PE Digest

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/IronPython.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  D:\a\1\s\Src\IronPython\obj\Release\net45\IronPython.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 996B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/SyncSettings.dll

  .dll windows:10 windows x86 arch:x86

  5ea28db14b8dd49d1d35cdb95af0bd2a

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  SyncSettings.pdb

  Imports

  msvcrt

  ??1type_info@@UAE@XZ

  ?terminate@@YAXXZ

  _initterm

  malloc

  free

  _amsg_exit

  _XcptFilter

  bsearch_s

  __dllonexit

  _except_handler4_common

  memcmp

  _unlock

  _callnewh

  _vsnprintf_s

  _CxxThrowException

  ??0exception@@QAE@ABV0@@Z

  memcpy

  _ftol2

  ??0exception@@QAE@XZ

  ??0exception@@QAE@ABQBD@Z

  _onexit

  _lock

  ??1exception@@UAE@XZ

  ??3@YAXPAX@Z

  memcpy_s

  ??0exception@@QAE@ABQBDH@Z

  wcschr

  _vsnwprintf

  memmove

  ?what@exception@@UBEPBDXZ

  ??_V@YAXPAX@Z

  __CxxFrameHandler3

  _purecall

  memmove_s

  realloc

  _set_errno

  _get_errno

  memset

  api-ms-win-shcore-thread-l1-1-0

  SHCreateThread

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  SHTaskPoolAllowThreadReuse

  shcore

  ord190

  ord131

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleFileNameA

  FreeLibrary

  LockResource

  GetModuleHandleW

  GetModuleHandleA

  GetModuleHandleExW

  LoadLibraryExW

  GetProcAddress

  LoadResource

  DisableThreadLibraryCalls

  GetModuleFileNameW

  FindResourceExW

  api-ms-win-core-synch-l1-1-0

  InitializeCriticalSectionEx

  CreateSemaphoreExW

  DeleteCriticalSection

  OpenSemaphoreW

  WaitForSingleObjectEx

  AcquireSRWLockShared

  ReleaseSRWLockShared

  CreateEventExW

  ReleaseMutex

  ReleaseSemaphore

  InitializeSRWLock

  CreateEventW

  AcquireSRWLockExclusive

  CreateMutexExW

  ResetEvent

  SetEvent

  EnterCriticalSection

  ReleaseSRWLockExclusive

  WaitForSingleObject

  LeaveCriticalSection

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-errorhandling-l1-1-0

  SetLastError

  SetUnhandledExceptionFilter

  GetLastError

  RaiseException

  UnhandledExceptionFilter

  api-ms-win-core-processthreads-l1-1-0

  OpenProcessToken

  GetCurrentThread

  GetCurrentProcess

  OpenThreadToken

  TerminateProcess

  GetCurrentThreadId

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-localization-l1-2-0

  FormatMessageW

  api-ms-win-core-debug-l1-1-0

  OutputDebugStringA

  OutputDebugStringW

  IsDebuggerPresent

  DebugBreak

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  rpcrt4

  CStdStubBuffer_IsIIDSupported

  NdrDllGetClassObject

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrOleFree

  CStdStubBuffer_Connect

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  NdrStubCall2

  CStdStubBuffer_CountRefs

  NdrStubForwardingFunction

  CStdStubBuffer_Invoke

  NdrCStdStubBuffer2_Release

  api-ms-win-core-winrt-string-l1-1-0

  HSTRING_UserSize

  HSTRING_UserFree

  HSTRING_UserUnmarshal

  WindowsGetStringRawBuffer

  HSTRING_UserMarshal

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateStringReference

  WindowsCreateString

  WindowsDuplicateString

  WindowsDeleteString

  api-ms-win-core-string-l1-1-0

  CompareStringOrdinal

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  RoOriginateErrorW

  GetRestrictedErrorInfo

  SetRestrictedErrorInfo

  RoOriginateError

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-synch-l1-2-0

  Sleep

  InitOnceComplete

  InitOnceBeginInitialize

  WakeAllConditionVariable

  InitOnceExecuteOnce

  SleepConditionVariableSRW

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetTickCount

  GetSystemTimeAsFileTime

  api-ms-win-core-com-midlproxystub-l1-1-0

  CStdStubBuffer2_Connect

  ObjectStublessClient7

  ObjectStublessClient3

  CStdStubBuffer2_CountRefs

  ObjectStublessClient6

  ObjectStublessClient8

  CStdStubBuffer2_Disconnect

  NdrProxyForwardingFunction3

  CStdStubBuffer2_QueryInterface

  NdrProxyForwardingFunction4

  ObjectStublessClient9

  NdrProxyForwardingFunction5

  api-ms-win-core-registry-l1-1-0

  RegSetValueExW

  RegCloseKey

  RegGetValueW

  RegCreateKeyExW

  api-ms-win-core-winrt-l1-1-0

  RoGetActivationFactory

  RoUninitialize

  RoInitialize

  api-ms-win-core-heap-l2-1-0

  LocalFree

  api-ms-win-core-winrt-error-l1-1-1

  RoReportFailedDelegate

  IsErrorPropagationEnabled

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-eventing-provider-l1-1-0

  EventUnregister

  EventRegister

  EventSetInformation

  EventWriteTransfer

  EventActivityIdControl

  api-ms-win-core-threadpool-l1-2-0

  SetThreadpoolTimer

  CreateThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  CloseThreadpoolTimer

  sspicli

  GetUserNameExW

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-base-l1-1-0

  DuplicateTokenEx

  GetTokenInformation

  ntdll

  NtQueryInformationToken

  RtlInitUnicodeString

  RtlAllocateHeap

  RtlFreeHeap

  RtlCompareUnicodeString

  RtlSubscribeWnfStateChangeNotification

  NtQueryWnfStateData

  RtlUnsubscribeWnfNotificationWaitForCompletion

  RtlNtStatusToDosErrorNoTeb

  api-ms-win-core-sysinfo-l1-2-0

  GetOsSafeBootMode

  api-ms-win-security-capability-l1-1-0

  CapabilityCheck

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  Exports

  Exports

  DllCanUnloadNow

  DllGetActivationFactory

  DllGetClassObject

  GetProxyDllInfo

  GetSetting

  Sections

  .text

  Size: 193KB - Virtual size: 193KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 8KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 92B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 15KB - Virtual size: 15KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/dataSync.exe

  .exe windows:4 windows x86 arch:x86

  
  

  Headers

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_BYTES_REVERSED_LO

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_BYTES_REVERSED_HI

  Sections

  UPX0

  Size: - Virtual size: 1.1MB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  UPX1

  Size: 925KB - Virtual size: 928KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 146KB - Virtual size: 148KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/Valid Email BruteChecker [1.1] - by thekorol/shell/mfc100cht.dll

  .dll windows:5 windows x86 arch:x86

  
  

  Code Sign

  33:00:00:00:c8:47:22:9d:a3:0d:ca:c0:58:00:00:00:00:00:c8

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:98FD-C61E-E641,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  18/08/2016, 20:17

  Not After

  02/11/2017, 20:17

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Signer

  Actual PE Digest

  12:d2:c0:c3:6a:55:48:a4:1b:0b:eb:ca:b3:f8:f9:7a:03:fe:51:cb

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Sections

  .rsrc

  Size: 29KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/CloudflareSolver.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\kamil\source\repos\CloudflareSolver\CloudflareSolver\obj\Release\netstandard2.0\CloudflareSolver.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 19KB - Virtual size: 19KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Hits.txt
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 109KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Results/ZippyUploader(11-4-2020 9-31-50 p. m.).txt
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Valorant.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 167KB - Virtual size: 166KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/Hits.txt
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net452\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 110KB - Virtual size: 109KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/bin/SoftValorant.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 291KB - Virtual size: 291KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 231KB - Virtual size: 231KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Valorant Checker by Xinax/dsregtask.dll

  .dll regsvr32 windows:10 windows x86 arch:x86

  f804479a556d0f3f714d711370175fbf

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  dsregtask.pdb

  Imports

  msvcrt

  __dllonexit

  _initterm

  _onexit

  _vsnwprintf

  _amsg_exit

  _except_handler4_common

  _XcptFilter

  _callnewh

  malloc

  free

  _wcsdup

  _lock

  _unlock

  memset

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  StringFromCLSID

  api-ms-win-core-synch-l1-1-0

  CreateEventExW

  SetEvent

  WaitForSingleObject

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleExW

  FreeLibrary

  FreeLibraryAndExitThread

  GetModuleFileNameW

  DisableThreadLibraryCalls

  api-ms-win-core-registry-l1-1-0

  RegCloseKey

  RegCreateKeyExW

  RegDeleteKeyExW

  RegSetValueExW

  RegOpenKeyExW

  api-ms-win-rtcore-ntuser-window-l1-1-0

  TranslateMessage

  DispatchMessageW

  PeekMessageW

  api-ms-win-core-processthreads-l1-1-0

  ResumeThread

  GetCurrentProcessId

  CreateThread

  TerminateProcess

  GetCurrentProcess

  GetCurrentThreadId

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  GetLastError

  UnhandledExceptionFilter

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjects

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  dsreg

  DsrBeginDeviceUpdate

  api-ms-win-core-heap-l1-1-0

  HeapFree

  GetProcessHeap

  HeapAlloc

  api-ms-win-core-string-l1-1-0

  CompareStringEx

  api-ms-win-eventing-provider-l1-1-0

  EventWriteTransfer

  EventRegister

  EventUnregister

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllRegisterServer

  DllUnregisterServer

  Sections

  .text

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 744B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 118KB - Virtual size: 118KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/WWE Checker BY PJ.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 167KB - Virtual size: 167KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/ctypes/Extreme.Net.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\scarf\source\repos\Extreme.Net\obj\Debug\Extreme.Net.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 118KB - Virtual size: 118KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/ctypes/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/ctypes/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/ctypes/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/ctypes/utils.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  C:\Users\Jack\Documents\Visual Studio 2012\Projects\WWE Checker BY PJ\WWE Checker BY PJ\obj\Debug\WWE Checker BY PJ.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 944KB - Virtual size: 943KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .sdata

  Size: 512B - Virtual size: 312B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 129KB - Virtual size: 128KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/debug.js

  .js
• Checkers PACK/Checkers PACK/WWE Checker BY PJ v0.3/msvcr71.dll

  .dll windows:4 windows x86 arch:x86

  7acc8c379c768a1ecd81ec502ff5f33e

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  msvcr71.pdb

  Imports

  kernel32

  GetModuleFileNameA

  GetModuleFileNameW

  ExitProcess

  GetProcAddress

  GetModuleHandleA

  TerminateProcess

  GetCurrentProcess

  WriteFile

  GetStdHandle

  GetCurrentThreadId

  GetCommandLineA

  GetVersionExA

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  ExitThread

  CloseHandle

  GetLastError

  ResumeThread

  CreateThread

  TlsAlloc

  SetLastError

  GetCurrentThread

  TlsFree

  TlsSetValue

  TlsGetValue

  FindNextFileA

  FindFirstFileA

  FindClose

  FindNextFileW

  FindFirstFileW

  HeapAlloc

  HeapFree

  GetEnvironmentVariableA

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  HeapReAlloc

  IsBadWritePtr

  SetHandleCount

  GetFileType

  GetStartupInfoA

  GetACP

  GetOEMCP

  GetCPInfo

  LoadLibraryA

  MultiByteToWideChar

  GetCommandLineW

  FreeEnvironmentStringsA

  GetEnvironmentStrings

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStringsW

  InitializeCriticalSection

  RtlUnwind

  UnhandledExceptionFilter

  LCMapStringA

  LCMapStringW

  GetStringTypeA

  GetStringTypeW

  SetConsoleCtrlHandler

  InterlockedExchange

  VirtualQuery

  QueryPerformanceCounter

  GetTickCount

  GetCurrentProcessId

  GetSystemTimeAsFileTime

  SetEnvironmentVariableA

  SetEnvironmentVariableW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  IsValidCodePage

  GetLocaleInfoW

  GetTimeFormatA

  GetDateFormatA

  GetTimeZoneInformation

  HeapSize

  VirtualProtect

  GetSystemInfo

  FlushFileBuffers

  SetFilePointer

  SetStdHandle

  CompareStringA

  CompareStringW

  Sleep

  Beep

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  GetDiskFreeSpaceA

  GetLogicalDrives

  SetErrorMode

  GetFileAttributesA

  GetCurrentDirectoryA

  SetCurrentDirectoryA

  SetFileAttributesA

  GetFullPathNameA

  GetDriveTypeA

  CreateDirectoryA

  RemoveDirectoryA

  DeleteFileA

  GetFileAttributesW

  GetCurrentDirectoryW

  SetCurrentDirectoryW

  SetFileAttributesW

  GetFullPathNameW

  CreateDirectoryW

  DeleteFileW

  MoveFileW

  RemoveDirectoryW

  GetDriveTypeW

  MoveFileA

  RaiseException

  IsBadReadPtr

  SetUnhandledExceptionFilter

  IsBadCodePtr

  GetExitCodeProcess

  WaitForSingleObject

  FreeLibrary

  CreateProcessA

  CreateProcessW

  HeapValidate

  HeapCompact

  HeapWalk

  ReadConsoleA

  SetConsoleMode

  GetConsoleMode

  IsDBCSLeadByteEx

  GetConsoleCP

  ReadConsoleW

  SetEndOfFile

  WriteConsoleA

  GetConsoleOutputCP

  WriteConsoleW

  DuplicateHandle

  GetFileInformationByHandle

  PeekNamedPipe

  ReadConsoleInputA

  PeekConsoleInputA

  GetNumberOfConsoleInputEvents

  ReadConsoleInputW

  LockFile

  UnlockFile

  CreateFileA

  CreatePipe

  ReadFile

  CreateFileW

  SetFileTime

  LocalFileTimeToFileTime

  SystemTimeToFileTime

  GetLocalTime

  SetLocalTime

  Exports

  Exports

  $I10_OUTPUT

  ??0__non_rtti_object@@QAE@ABV0@@Z

  ??0__non_rtti_object@@QAE@PBD@Z

  ??0bad_cast@@AAE@PBQBD@Z

  ??0bad_cast@@QAE@ABQBD@Z

  ??0bad_cast@@QAE@ABV0@@Z

  ??0bad_cast@@QAE@PBD@Z

  ??0bad_typeid@@QAE@ABV0@@Z

  ??0bad_typeid@@QAE@PBD@Z

  ??0exception@@QAE@ABQBD@Z

  ??0exception@@QAE@ABV0@@Z

  ??0exception@@QAE@XZ

  ??1__non_rtti_object@@UAE@XZ

  ??1bad_cast@@UAE@XZ

  ??1bad_typeid@@UAE@XZ

  ??1exception@@UAE@XZ

  ??1type_info@@UAE@XZ

  ??2@YAPAXI@Z

  ??3@YAXPAX@Z

  ??4__non_rtti_object@@QAEAAV0@ABV0@@Z

  ??4bad_cast@@QAEAAV0@ABV0@@Z

  ??4bad_typeid@@QAEAAV0@ABV0@@Z

  ??4exception@@QAEAAV0@ABV0@@Z

  ??8type_info@@QBEHABV0@@Z

  ??9type_info@@QBEHABV0@@Z

  ??_7__non_rtti_object@@6B@

  ??_7bad_cast@@6B@

  ??_7bad_typeid@@6B@

  ??_7exception@@6B@

  ??_Fbad_cast@@QAEXXZ

  ??_Fbad_typeid@@QAEXXZ

  ??_U@YAPAXI@Z

  ??_V@YAXPAX@Z

  ?_query_new_handler@@YAP6AHI@ZXZ

  ?_query_new_mode@@YAHXZ

  ?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z

  ?_set_new_mode@@YAHH@Z

  ?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z

  ?before@type_info@@QBEHABV1@@Z

  ?name@type_info@@QBEPBDXZ

  ?raw_name@type_info@@QBEPBDXZ

  ?set_new_handler@@YAP6AXXZP6AXXZ@Z

  ?set_terminate@@YAP6AXXZP6AXXZ@Z

  ?set_unexpected@@YAP6AXXZP6AXXZ@Z

  ?swprintf@@YAHPAGIPBGZZ

  ?swprintf@@YAHPA_WIPB_WZZ

  ?terminate@@YAXXZ

  ?unexpected@@YAXXZ

  ?vswprintf@@YAHPAGIPBGPAD@Z

  ?vswprintf@@YAHPA_WIPB_WPAD@Z

  ?what@exception@@UBEPBDXZ

  _CIacos

  _CIasin

  _CIatan

  _CIatan2

  _CIcos

  _CIcosh

  _CIexp

  _CIfmod

  _CIlog

  _CIlog10

  _CIpow

  _CIsin

  _CIsinh

  _CIsqrt

  _CItan

  _CItanh

  _CRT_RTC_INIT

  _CxxThrowException

  _EH_prolog

  _Getdays

  _Getmonths

  _Gettnames

  _HUGE

  _Strftime

  _XcptFilter

  __CppXcptFilter

  __CxxCallUnwindDtor

  __CxxCallUnwindVecDtor

  __CxxDetectRethrow

  __CxxExceptionFilter

  __CxxFrameHandler

  __CxxLongjmpUnwind

  __CxxQueryExceptionSize

  __CxxRegisterExceptionObject

  __CxxUnregisterExceptionObject

  __DestructExceptionObject

  __RTCastToVoid

  __RTDynamicCast

  __RTtypeid

  __STRINGTOLD

  ___lc_codepage_func

  ___lc_collate_cp_func

  ___lc_handle_func

  ___mb_cur_max_func

  ___setlc_active_func

  ___unguarded_readlc_active_add_func

  __argc

  __argv

  __badioinfo

  __buffer_overrun

  __crtCompareStringA

  __crtCompareStringW

  __crtGetLocaleInfoW

  __crtGetStringTypeW

  __crtLCMapStringA

  __crtLCMapStringW

  __dllonexit

  __doserrno

  __fpecode

  __getmainargs

  __initenv

  __iob_func

  __isascii

  __iscsym

  __iscsymf

  __lc_clike

  __lc_codepage

  __lc_collate_cp

  __lc_handle

  __lconv_init

  __mb_cur_max

  __p___argc

  __p___argv

  __p___initenv

  __p___mb_cur_max

  __p___wargv

  __p___winitenv

  __p__acmdln

  __p__amblksiz

  __p__commode

  __p__daylight

  __p__dstbias

  __p__environ

  __p__fileinfo

  __p__fmode

  __p__iob

  __p__mbcasemap

  __p__mbctype

  __p__osver

  __p__pctype

  __p__pgmptr

  __p__pwctype

  __p__timezone

  __p__tzname

  __p__wcmdln

  __p__wenviron

  __p__winmajor

  __p__winminor

  __p__winver

  __p__wpgmptr

  __pctype_func

  __pioinfo

  __pwctype_func

  __pxcptinfoptrs

  __security_error_handler

  __set_app_type

  __set_buffer_overrun_handler

  __setlc_active

  __setusermatherr

  __threadhandle

  __threadid

  __toascii

  __unDName

  __unDNameEx

  __uncaught_exception

  __unguarded_readlc_active

  __wargv

  __wcserror

  __wgetmainargs

  __winitenv

  _abnormal_termination

  _access

  _acmdln

  _adj_fdiv_m16i

  _adj_fdiv_m32

  _adj_fdiv_m32i

  _adj_fdiv_m64

  _adj_fdiv_r

  _adj_fdivr_m16i

  _adj_fdivr_m32

  _adj_fdivr_m32i

  _adj_fdivr_m64

  _adj_fpatan

  _adj_fprem

  _adj_fprem1

  _adj_fptan

  _adjust_fdiv

  _aexit_rtn

  _aligned_free

  _aligned_malloc

  _aligned_offset_malloc

  _aligned_offset_realloc

  _aligned_realloc

  _amsg_exit

  _assert

  _atodbl

  _atoi64

  _atoldbl

  _beep

  _beginthread

  _beginthreadex

  _c_exit

  _cabs

  _callnewh

  _cexit

  _cgets

  _cgetws

  _chdir

  _chdrive

  _chgsign

  _chkesp

  _chmod

  _chsize

  _clearfp

  _close

  _commit

  _commode

  _control87

  _controlfp

  _copysign

  _cprintf

  _cputs

  _cputws

  _creat

  _cscanf

  _ctime64

  _cwait

  _cwprintf

  _cwscanf

  _daylight

  _dstbias

  _dup

  _dup2

  _ecvt

  _endthread

  _endthreadex

  _environ

  _eof

  _errno

  _except_handler2

  _except_handler3

  _execl

  _execle

  _execlp

  _execlpe

  _execv

  _execve

  _execvp

  _execvpe

  _exit

  _expand

  _fcloseall

  _fcvt

  _fdopen

  _fgetchar

  _fgetwchar

  _filbuf

  _fileinfo

  _filelength

  _filelengthi64

  _fileno

  _findclose

  _findfirst

  _findfirst64

  _findfirsti64

  _findnext

  _findnext64

  _findnexti64

  _finite

  _flsbuf

  _flushall

  _fmode

  _fpclass

  _fpieee_flt

  _fpreset

  _fputchar

  _fputwchar

  _fsopen

  _fstat

  _fstat64

  _fstati64

  _ftime

  _ftime64

  _ftol

  _fullpath

  _futime

  _futime64

  _gcvt

  _get_heap_handle

  _get_osfhandle

  _get_sbh_threshold

  _getch

  _getche

  _getcwd

  _getdcwd

  _getdiskfree

  _getdllprocaddr

  _getdrive

  _getdrives

  _getmaxstdio

  _getmbcp

  _getpid

  _getsystime

  _getw

  _getwch

  _getwche

  _getws

  _global_unwind2

  _gmtime64

  _heapadd

  _heapchk

  _heapmin

  _heapset

  _heapused

  _heapwalk

  _hypot

  _i64toa

  _i64tow

  _initterm

  _inp

  _inpd

  _inpw

  _iob

  _isatty

  _isctype

  _ismbbalnum

  _ismbbalpha

  _ismbbgraph

  _ismbbkalnum

  _ismbbkana

  _ismbbkprint

  _ismbbkpunct

  _ismbblead

  _ismbbprint

  _ismbbpunct

  _ismbbtrail

  _ismbcalnum

  _ismbcalpha

  _ismbcdigit

  _ismbcgraph

  _ismbchira

  _ismbckata

  _ismbcl0

  _ismbcl1

  _ismbcl2

  _ismbclegal

  _ismbclower

  _ismbcprint

  _ismbcpunct

  _ismbcspace

  _ismbcsymbol

  _ismbcupper

  _ismbslead

  _ismbstrail

  _isnan

  _itoa

  _itow

  _j0

  _j1

  _jn

  _kbhit

  _lfind

  _loaddll

  _local_unwind2

  _localtime64

  _lock

  _locking

  _logb

  _longjmpex

  _lrotl

  _lrotr

  _lsearch

  _lseek

  _lseeki64

  _ltoa

  _ltow

  _makepath

  _mbbtombc

  _mbbtype

  _mbcasemap

  _mbccpy

  _mbcjistojms

  _mbcjmstojis

  _mbclen

  _mbctohira

  _mbctokata

  _mbctolower

  _mbctombb

  _mbctoupper

  _mbctype

  _mbsbtype

  _mbscat

  _mbschr

  _mbscmp

  _mbscoll

  _mbscpy

  _mbscspn

  _mbsdec

  _mbsdup

  _mbsicmp

  _mbsicoll

  _mbsinc

  _mbslen

  _mbslwr

  _mbsnbcat

  _mbsnbcmp

  _mbsnbcnt

  _mbsnbcoll

  _mbsnbcpy

  _mbsnbicmp

  _mbsnbicoll

  _mbsnbset

  _mbsncat

  _mbsnccnt

  _mbsncmp

  _mbsncoll

  _mbsncpy

  _mbsnextc

  _mbsnicmp

  _mbsnicoll

  _mbsninc

  _mbsnset

  _mbspbrk

  _mbsrchr

  _mbsrev

  _mbsset

  _mbsspn

  _mbsspnp

  _mbsstr

  _mbstok

  _mbstrlen

  _mbsupr

  _memccpy

  _memicmp

  _mkdir

  _mktemp

  _mktime64

  _msize

  _nextafter

  _onexit

  _open

  _open_osfhandle

  _osplatform

  _osver

  _outp

  _outpd

  _outpw

  _pclose

  _pctype

  _pgmptr

  _pipe

  _popen

  _purecall

  _putch

  _putenv

  _putw

  _putwch

  _putws

  _pwctype

  _read

  _resetstkoflw

  _rmdir

  _rmtmp

  _rotl

  _rotr

  _safe_fdiv

  _safe_fdivr

  _safe_fprem

  _safe_fprem1

  _scalb

  _scprintf

  _scwprintf

  _searchenv

  _seh_longjmp_unwind

  _set_SSE2_enable

  _set_error_mode

  _set_purecall_handler

  _set_sbh_threshold

  _set_security_error_handler

  _seterrormode

  _setjmp

  _setjmp3

  _setmaxstdio

  _setmbcp

  _setmode

  _setsystime

  _sleep

  _snprintf

  _snscanf

  _snwprintf

  _snwscanf

  _sopen

  _spawnl

  _spawnle

  _spawnlp

  _spawnlpe

  _spawnv

  _spawnve

  _spawnvp

  Sections

  .text

  Size: 228KB - Virtual size: 226KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 68KB - Virtual size: 64KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 24KB - Virtual size: 26KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 4KB - Virtual size: 952B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 10KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/SuperEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 138KB - Virtual size: 137KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/settings.ini
• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Data/zer0n.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 37KB - Virtual size: 36KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/SuperEngine.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 138KB - Virtual size: 137KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 900B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/Walmart Checker by Zer0n.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 177KB - Virtual size: 176KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Walmart Checker Zer0n/settings.ini
• Checkers PACK/Checkers PACK/Yahoo Checker by YB/Yahoo Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 205KB - Virtual size: 205KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker by YB/compreg.dat
• Checkers PACK/Checkers PACK/Yahoo Checker by YB/newdev/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker by YB/newdev/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Yahoo Checker by YB/newdev/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker by YB/newdev/fmea.exe

  .exe windows:4 windows x64 arch:x64

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Sections

  .text

  Size: 275KB - Virtual size: 274KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .enigma1

  Size: 4.0MB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .enigma2

  Size: 624KB - Virtual size: 624KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/Yahoo Checker by YB/vertdll.dll

  .dll windows:10 windows x64 arch:x64

  
  

  Code Sign

  33:00:00:02:29:e8:93:3c:c4:14:fa:f5:7c:00:00:00:00:02:29

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  27/03/2019, 19:21

  Not After

  27/03/2020, 19:21

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72

  Signer

  Actual PE Digest

  1f:85:c9:e0:e9:ae:0a:b2:47:6a:9d:d8:8a:9c:fe:8f:81:73:c9:11:97:32:22:71:86:7d:8f:a6:c6:19:18:72

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  vertdll.pdb

  Exports

  Exports

  AcquireSRWLockExclusive

  AcquireSRWLockShared

  CallEnclave

  CloseHandle

  CreateEventW

  DbgPrint

  DelayLoadFailureHook

  DeleteCriticalSection

  DeleteSynchronizationBarrier

  DeviceIoControl

  DisableThreadLibraryCalls

  EnclaveGetAttestationReport

  EnclaveGetEnclaveInformation

  EnclaveSealData

  EnclaveUnsealData

  EnclaveVerifyAttestationReport

  EnterCriticalSection

  EnterSynchronizationBarrier

  EtwEventRegister

  EtwEventUnregister

  EtwEventWrite

  EtwGetTraceEnableFlags

  EtwGetTraceEnableLevel

  EtwGetTraceLoggerHandle

  EtwRegisterTraceGuidsW

  EtwTraceMessage

  EtwUnregisterTraceGuids

  EventRegister

  EventSetInformation

  EventUnregister

  EventWriteTransfer

  ExpInterlockedPopEntrySListEnd

  ExpInterlockedPopEntrySListFault

  ExpInterlockedPopEntrySListResume

  FreeLibrary

  GetCurrentProcess

  GetCurrentThread

  GetCurrentThreadId

  GetEnabledXStateFeatures

  GetFipsModeFromIumKernelState

  GetLastError

  GetModuleFileNameW

  GetModuleHandleExW

  GetProcAddress

  GetProcessHeap

  GetProcessHeaps

  GetSeedFromIumKernelState

  GetSystemDirectoryW

  GetSystemInfo

  GetXStateFeaturesMask

  HeapAlloc

  HeapCompact

  HeapCreate

  HeapDestroy

  HeapFree

  HeapLock

  HeapReAlloc

  HeapSize

  HeapUnlock

  InitializeConditionVariable

  InitializeCriticalSection

  InitializeCriticalSectionAndSpinCount

  InitializeCriticalSectionEx

  InitializeSListHead

  InitializeSRWLock

  InitializeSynchronizationBarrier

  InterlockedFlushSList

  InterlockedPopEntrySList

  InterlockedPushEntrySList

  InterlockedPushListSList

  InterlockedPushListSListEx

  KiUserExceptionDispatcher

  LdrDisableThreadCalloutsForDll

  LdrResolveDelayLoadedAPI

  LeaveCriticalSection

  LoadLibraryExW

  LoadLibraryW

  LocateXStateFeature

  NtClose

  NtDeviceIoControlFile

  NtOpenFile

  NtOpenKey

  NtQueryInformationProcess

  NtQueryValueKey

  NtTerminateProcess

  OpenProcessToken

  OutputDebugStringW

  PrivilegeCheck

  QueryDepthSList

  QueryFullProcess

  QueryFullProcessImageNameW

  RaiseException

  RegCloseKey

  RegEnumKeyExW

  RegOpenKeyExW

  RegQueryInfoKeyW

  RegQueryValueExW

  RegisterWaitForSingleObjectEx

  ReleaseSRWLockExclusive

  ReleaseSRWLockShared

  ResolveDelayLoadedAPI

  RtlAcquireResourceExclusive

  RtlAcquireResourceShared

  RtlAllocateHeap

  RtlAssert

  RtlCallEnclaveReturn

  RtlCaptureContext

  RtlCompareUnicodeString

  RtlDeleteCriticalSection

  RtlDeleteResource

  RtlEnclaveCallDispatch

  RtlEnclaveCallDispatchReturn

  RtlEnterCriticalSection

  RtlFreeHeap

  RtlGetCurrentProcessorNumberEx

  RtlGetLastNtStatus

  RtlImageNtHeader

  RtlInitUnicodeString

  RtlInitializeCriticalSection

  RtlInitializeResource

  RtlLeaveCriticalSection

  RtlLookupFunctionEntry

  RtlNtStatusToDosError

  RtlPcToFileHeader

  RtlRaiseStatus

  RtlReleaseResource

  RtlReleaseResourceShared

  RtlTimeFieldsToTime

  RtlUnhandledExceptionFilter

  RtlUnwind

  RtlUnwindEx

  RtlVirtualUnwind

  SetCriticalSectionSpinCount

  SetLastError

  SetThreadStackGuarantee

  SetUnhandledExceptionFilter

  SleepConditionVariableCS

  SleepConditionVariableSRW

  TerminateEnclave

  TerminateProcess

  TlsAlloc

  TlsFree

  TlsGetValue

  TlsSetValue

  TryAcquireSRWLockExclusive

  TryAcquireSRWLockShared

  TryEnterCriticalSection

  UnregisterWaitEx

  VirtualAlloc

  VirtualFree

  VirtualProtect

  VirtualQuery

  WaitOnAddress

  WakeAllConditionVariable

  WakeByAddressAll

  WakeByAddressSingle

  WakeConditionVariable

  __C_specific_handler

  __chkstk

  _local_unwind

  _vsnwprintf

  _wcsicmp

  memcmp

  memcpy

  memmove

  memset

  qsort

  wcscmp

  wcscpy_s

  wcsncmp

  Sections

  .text

  Size: 105KB - Virtual size: 104KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 26KB - Virtual size: 25KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 2KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .00cfg

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .mrdata

  Size: 12KB - Virtual size: 12KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 60B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/Yahoo v1.1.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 164KB - Virtual size: 163KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo Checker v1.1/skci/ffmpeg.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 208KB - Virtual size: 208KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/RDXService.dll

  .dll windows:10 windows x64 arch:x64

  41fe2269dd6b4fc9e271773a5a81f94b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  RDXService.pdb

  Imports

  msvcrt

  memcmp

  __crtLCMapStringA

  __crtLCMapStringW

  memmove

  memcpy

  sprintf_s

  _wtof

  wcstok_s

  swprintf_s

  _set_errno

  _XcptFilter

  _amsg_exit

  ??1bad_cast@@UEAA@XZ

  _CxxThrowException

  _initterm

  _wcsdup

  _itow_s

  abort

  islower

  ?what@exception@@UEBAPEBDXZ

  _get_current_locale

  calloc

  isupper

  __pctype_func

  memset

  __C_specific_handler

  ?terminate@@YAXXZ

  _free_locale

  _get_errno

  _ismbblead

  ___lc_codepage_func

  ___lc_handle_func

  wcsstr

  _lock

  _unlock

  __dllonexit

  ___mb_cur_max_func

  ??0exception@@QEAA@AEBQEBDH@Z

  ??0exception@@QEAA@AEBQEBD@Z

  _callnewh

  malloc

  memmove_s

  _vsnprintf_s

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@XZ

  ??1exception@@UEAA@XZ

  _purecall

  ??3@YAXPEAX@Z

  _errno

  _onexit

  memcpy_s

  setlocale

  toupper

  wcschr

  wcsrchr

  ??0bad_cast@@QEAA@AEBV0@@Z

  _wcsnicmp

  ??1type_info@@UEAA@XZ

  ldiv

  _wcsicmp

  _vsnwprintf

  ??_V@YAXPEAX@Z

  realloc

  __CxxFrameHandler3

  strcspn

  localeconv

  ??0bad_cast@@QEAA@PEBD@Z

  free

  wcsncmp

  sqrtf

  propsys

  PSCreateMemoryPropertyStore

  PropVariantToBoolean

  VariantToStringAlloc

  VariantToInt32

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  api-ms-win-shcore-registry-l1-1-0

  SHSetValueW

  SHDeleteValueW

  api-ms-win-shcore-stream-l1-1-0

  IStream_Reset

  IStream_Write

  IStream_Size

  SHCreateStreamOnFileEx

  windows.storage

  ShellExecuteExW

  SHCreateItemFromParsingName

  SHGetNameFromIDList

  SHGetKnownFolderPath

  ILClone

  ord866

  shcore

  ord200

  rpcrt4

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrCStdStubBuffer_Release

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_IsIIDSupported

  CStdStubBuffer_Connect

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  CStdStubBuffer_Invoke

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  CoCreateInstance

  CoRegisterClassObject

  CoGetMalloc

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoReleaseServerProcess

  CoRevokeClassObject

  CoResumeClassObjects

  CoSetProxyBlanket

  CoAddRefServerProcess

  CLSIDFromString

  CoCreateFreeThreadedMarshaler

  CreateStreamOnHGlobal

  CoWaitForMultipleHandles

  CoGetApartmentType

  PropVariantClear

  CoInitializeSecurity

  CoUninitialize

  StringFromGUID2

  CoDisconnectObject

  CoInitializeEx

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetProcAddress

  LoadLibraryExW

  GetModuleHandleExW

  DisableThreadLibraryCalls

  LoadResource

  LockResource

  FindResourceExW

  FreeLibrary

  GetModuleFileNameA

  api-ms-win-core-synch-l1-2-0

  WakeAllConditionVariable

  SleepConditionVariableSRW

  InitOnceComplete

  InitOnceBeginInitialize

  Sleep

  api-ms-win-core-synch-l1-1-0

  ReleaseSRWLockExclusive

  CreateSemaphoreExW

  OpenSemaphoreW

  SetEvent

  CreateEventW

  OpenEventW

  ReleaseSemaphore

  CreateEventExW

  ReleaseSRWLockShared

  EnterCriticalSection

  WaitForSingleObjectEx

  WaitForSingleObject

  LeaveCriticalSection

  InitializeCriticalSectionEx

  ResetEvent

  DeleteCriticalSection

  CreateMutexExW

  ReleaseMutex

  AcquireSRWLockExclusive

  WaitForMultipleObjectsEx

  AcquireSRWLockShared

  InitializeSRWLock

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RaiseException

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDeleteString

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateString

  WindowsCreateStringReference

  WindowsGetStringRawBuffer

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventActivityIdControl

  EventWriteTransfer

  EventUnregister

  EventSetInformation

  EventProviderEnabled

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegQueryInfoKeyW

  RegGetValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCloseKey

  RegCreateKeyExW

  RegCopyTreeW

  RegOpenCurrentUser

  RegEnumKeyExW

  RegEnumValueW

  RegDeleteTreeW

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  CloseThreadpoolTimer

  SetThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  CreateProcessW

  ResumeThread

  OpenProcessToken

  GetCurrentThreadId

  OpenThreadToken

  GetCurrentThread

  GetCurrentProcess

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-winrt-l1-1-0

  RoRevokeActivationFactories

  RoGetActivationFactory

  RoRegisterActivationFactories

  RoActivateInstance

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  SetRestrictedErrorInfo

  RoOriginateErrorW

  RoOriginateError

  api-ms-win-core-localization-l1-2-0

  GetUserGeoID

  GetLocaleInfoW

  GetThreadUILanguage

  FormatMessageW

  GetGeoInfoW

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  OutputDebugStringW

  IsDebuggerPresent

  api-ms-win-core-handle-l1-1-0

  DuplicateHandle

  CloseHandle

  api-ms-win-core-url-l1-1-0

  ParseURLW

  api-ms-win-core-rtlsupport-l1-1-0

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTime

  GetSystemWindowsDirectoryW

  GetSystemTimeAsFileTime

  GetLocalTime

  GlobalMemoryStatusEx

  GetWindowsDirectoryW

  GetTickCount

  oleaut32

  SysAllocString

  VariantClear

  SysFreeString

  api-ms-win-core-timezone-l1-1-0

  SystemTimeToFileTime

  FileTimeToSystemTime

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-sysinfo-l1-2-1

  GetPhysicallyInstalledSystemMemory

  api-ms-win-core-file-l1-1-0

  CompareFileTime

  DeleteFileW

  FindClose

  CreateDirectoryW

  GetDriveTypeW

  FindNextFileW

  CreateFileW

  SetFileAttributesW

  RemoveDirectoryW

  ReadFile

  GetFileSizeEx

  SetFilePointerEx

  FindFirstFileW

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-path-l1-1-0

  PathCchAppend

  PathCchCombine

  api-ms-win-core-registry-l1-1-1

  RegDeleteKeyValueW

  RegSetKeyValueW

  api-ms-win-ntuser-sysparams-l1-1-0

  GetSystemMetrics

  api-ms-win-security-sddl-l1-1-0

  ConvertSidToStringSidW

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  ConvertStringSidToSidW

  api-ms-win-security-base-l1-1-0

  InitializeAcl

  AdjustTokenPrivileges

  GetLengthSid

  AddAce

  DeleteAce

  IsWellKnownSid

  RevertToSelf

  ImpersonateLoggedOnUser

  EqualSid

  GetAce

  GetAclInformation

  GetTokenInformation

  DestroyPrivateObjectSecurity

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-service-core-l1-1-0

  SetServiceStatus

  RegisterServiceCtrlHandlerExW

  api-ms-win-appmodel-runtime-l1-1-0

  PackageNameAndPublisherIdFromFamilyName

  PackageFamilyNameFromFullName

  GetPackagesByPackageFamily

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  WideCharToMultiByte

  CompareStringOrdinal

  GetStringTypeW

  xmllite

  CreateXmlWriter

  CreateXmlReader

  sspicli

  LsaEnumerateLogonSessions

  LsaGetLogonSessionData

  LsaFreeReturnBuffer

  api-ms-win-security-lsalookup-l2-1-0

  LookupPrivilegeValueW

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  StartServiceW

  api-ms-win-service-management-l2-1-0

  QueryServiceConfigW

  ChangeServiceConfigW

  api-ms-win-core-processenvironment-l1-1-0

  GetStdHandle

  ExpandEnvironmentStringsW

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient6

  ObjectStublessClient7

  ObjectStublessClient9

  ObjectStublessClient10

  ObjectStublessClient4

  ObjectStublessClient8

  ObjectStublessClient5

  ObjectStublessClient3

  api-ms-win-security-provider-l1-1-0

  SetSecurityInfo

  GetSecurityInfo

  api-ms-win-shell-namespace-l1-1-0

  SHParseDisplayName

  ILFree

  api-ms-win-core-registry-l2-1-0

  RegCreateKeyW

  api-ms-win-core-string-l2-1-0

  CharLowerBuffW

  api-ms-win-shlwapi-winrt-storage-l1-1-1

  ord24

  PathIsDirectoryEmptyW

  StrFormatByteSizeEx

  api-ms-win-core-shlwapi-obsolete-l1-1-0

  QISearch

  StrCmpW

  StrRChrW

  ntdll

  RtlGetDeviceFamilyInfoEnum

  RtlGetVersion

  api-ms-win-rtcore-ntuser-window-l1-1-0

  SetWindowLongPtrW

  RegisterClassExW

  DefWindowProcW

  GetWindowLongPtrW

  GetMessageW

  SetTimer

  DestroyWindow

  DispatchMessageW

  TranslateMessage

  PostQuitMessage

  KillTimer

  PeekMessageW

  UnregisterClassW

  CreateWindowExW

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjectsEx

  api-ms-win-appmodel-runtime-internal-l1-1-1

  GetPackageStatusForUser

  api-ms-win-core-shlwapi-legacy-l1-1-0

  PathFileExistsW

  PathRemoveFileSpecW

  PathStripPathW

  PathFindFileNameW

  PathRemoveBackslashW

  PathFindExtensionW

  api-ms-win-core-registryuserspecific-l1-1-0

  SHRegGetUSValueW

  api-ms-win-shell-changenotify-l1-1-0

  SHChangeNotify

  appxalluserstore

  GetAllPackagesToBeInstalledForUser

  DeleteAllPackagesFromMainPackageArray

  dmenrollengine

  EnrollEngineInitialize

  wlanapi

  WlanFreeMemory

  WlanGetProfile

  WlanCloseHandle

  WlanOpenHandle

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-shutdown-l1-1-0

  InitiateSystemShutdownExW

  api-ms-win-core-winrt-error-l1-1-1

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-core-kernel32-legacy-l1-1-0

  MoveFileW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-cryptoapi-l1-1-0

  CryptDestroyHash

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptAcquireContextW

  CryptReleaseContext

  api-ms-win-core-file-l2-1-2

  CopyFileW

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  GetProxyDllInfo

  OpenRDXDocumentW

  ServiceMain

  Sections

  .text

  Size: 488KB - Virtual size: 487KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 198KB - Virtual size: 197KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 288B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/Yahoo v1.1 [Crax.Pro].exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 170KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 86KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net45\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 127KB - Virtual size: 126KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/01/2021, 00:00

  Not After

  06/01/2031, 00:00

  Subject

  CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Signer

  Actual PE Digest

  2e:83:93:14:a9:06:f5:64:04:02:a1:dc:eb:a3:1a:a7:e9:21:c8:88:2c:dd:c2:3c:e4:c0:45:50:4c:ee:75:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 675KB - Virtual size: 675KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/RDXService.dll

  .dll windows:10 windows x64 arch:x64

  41fe2269dd6b4fc9e271773a5a81f94b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  RDXService.pdb

  Imports

  msvcrt

  memcmp

  __crtLCMapStringA

  __crtLCMapStringW

  memmove

  memcpy

  sprintf_s

  _wtof

  wcstok_s

  swprintf_s

  _set_errno

  _XcptFilter

  _amsg_exit

  ??1bad_cast@@UEAA@XZ

  _CxxThrowException

  _initterm

  _wcsdup

  _itow_s

  abort

  islower

  ?what@exception@@UEBAPEBDXZ

  _get_current_locale

  calloc

  isupper

  __pctype_func

  memset

  __C_specific_handler

  ?terminate@@YAXXZ

  _free_locale

  _get_errno

  _ismbblead

  ___lc_codepage_func

  ___lc_handle_func

  wcsstr

  _lock

  _unlock

  __dllonexit

  ___mb_cur_max_func

  ??0exception@@QEAA@AEBQEBDH@Z

  ??0exception@@QEAA@AEBQEBD@Z

  _callnewh

  malloc

  memmove_s

  _vsnprintf_s

  ??0exception@@QEAA@AEBV0@@Z

  ??0exception@@QEAA@XZ

  ??1exception@@UEAA@XZ

  _purecall

  ??3@YAXPEAX@Z

  _errno

  _onexit

  memcpy_s

  setlocale

  toupper

  wcschr

  wcsrchr

  ??0bad_cast@@QEAA@AEBV0@@Z

  _wcsnicmp

  ??1type_info@@UEAA@XZ

  ldiv

  _wcsicmp

  _vsnwprintf

  ??_V@YAXPEAX@Z

  realloc

  __CxxFrameHandler3

  strcspn

  localeconv

  ??0bad_cast@@QEAA@PEBD@Z

  free

  wcsncmp

  sqrtf

  propsys

  PSCreateMemoryPropertyStore

  PropVariantToBoolean

  VariantToStringAlloc

  VariantToInt32

  api-ms-win-shcore-taskpool-l1-1-0

  SHTaskPoolQueueTask

  api-ms-win-shcore-registry-l1-1-0

  SHSetValueW

  SHDeleteValueW

  api-ms-win-shcore-stream-l1-1-0

  IStream_Reset

  IStream_Write

  IStream_Size

  SHCreateStreamOnFileEx

  windows.storage

  ShellExecuteExW

  SHCreateItemFromParsingName

  SHGetNameFromIDList

  SHGetKnownFolderPath

  ILClone

  ord866

  shcore

  ord200

  rpcrt4

  NdrDllCanUnloadNow

  NdrDllGetClassObject

  NdrCStdStubBuffer_Release

  IUnknown_QueryInterface_Proxy

  CStdStubBuffer_Disconnect

  CStdStubBuffer_DebugServerRelease

  CStdStubBuffer_IsIIDSupported

  CStdStubBuffer_Connect

  NdrOleAllocate

  CStdStubBuffer_QueryInterface

  CStdStubBuffer_CountRefs

  IUnknown_Release_Proxy

  CStdStubBuffer_AddRef

  NdrOleFree

  CStdStubBuffer_DebugServerQueryInterface

  IUnknown_AddRef_Proxy

  CStdStubBuffer_Invoke

  api-ms-win-core-com-l1-1-0

  CoTaskMemFree

  CoCreateInstance

  CoRegisterClassObject

  CoGetMalloc

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoReleaseServerProcess

  CoRevokeClassObject

  CoResumeClassObjects

  CoSetProxyBlanket

  CoAddRefServerProcess

  CLSIDFromString

  CoCreateFreeThreadedMarshaler

  CreateStreamOnHGlobal

  CoWaitForMultipleHandles

  CoGetApartmentType

  PropVariantClear

  CoInitializeSecurity

  CoUninitialize

  StringFromGUID2

  CoDisconnectObject

  CoInitializeEx

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleW

  GetProcAddress

  LoadLibraryExW

  GetModuleHandleExW

  DisableThreadLibraryCalls

  LoadResource

  LockResource

  FindResourceExW

  FreeLibrary

  GetModuleFileNameA

  api-ms-win-core-synch-l1-2-0

  WakeAllConditionVariable

  SleepConditionVariableSRW

  InitOnceComplete

  InitOnceBeginInitialize

  Sleep

  api-ms-win-core-synch-l1-1-0

  ReleaseSRWLockExclusive

  CreateSemaphoreExW

  OpenSemaphoreW

  SetEvent

  CreateEventW

  OpenEventW

  ReleaseSemaphore

  CreateEventExW

  ReleaseSRWLockShared

  EnterCriticalSection

  WaitForSingleObjectEx

  WaitForSingleObject

  LeaveCriticalSection

  InitializeCriticalSectionEx

  ResetEvent

  DeleteCriticalSection

  CreateMutexExW

  ReleaseMutex

  AcquireSRWLockExclusive

  WaitForMultipleObjectsEx

  AcquireSRWLockShared

  InitializeSRWLock

  api-ms-win-core-heap-l1-1-0

  HeapAlloc

  HeapFree

  GetProcessHeap

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  SetLastError

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  RaiseException

  api-ms-win-core-winrt-string-l1-1-0

  WindowsDeleteString

  WindowsStringHasEmbeddedNull

  WindowsIsStringEmpty

  WindowsCreateString

  WindowsCreateStringReference

  WindowsGetStringRawBuffer

  api-ms-win-eventing-provider-l1-1-0

  EventRegister

  EventActivityIdControl

  EventWriteTransfer

  EventUnregister

  EventSetInformation

  EventProviderEnabled

  api-ms-win-core-registry-l1-1-0

  RegDeleteValueW

  RegQueryInfoKeyW

  RegGetValueW

  RegOpenKeyExW

  RegSetValueExW

  RegCloseKey

  RegCreateKeyExW

  RegCopyTreeW

  RegOpenCurrentUser

  RegEnumKeyExW

  RegEnumValueW

  RegDeleteTreeW

  api-ms-win-core-util-l1-1-0

  EncodePointer

  DecodePointer

  api-ms-win-core-threadpool-l1-2-0

  CreateThreadpoolTimer

  CloseThreadpoolTimer

  SetThreadpoolTimer

  WaitForThreadpoolTimerCallbacks

  api-ms-win-core-processthreads-l1-1-0

  TerminateProcess

  CreateProcessW

  ResumeThread

  OpenProcessToken

  GetCurrentThreadId

  OpenThreadToken

  GetCurrentThread

  GetCurrentProcess

  CreateThread

  GetCurrentProcessId

  api-ms-win-core-winrt-l1-1-0

  RoRevokeActivationFactories

  RoGetActivationFactory

  RoRegisterActivationFactories

  RoActivateInstance

  api-ms-win-core-winrt-error-l1-1-0

  RoTransformError

  SetRestrictedErrorInfo

  RoOriginateErrorW

  RoOriginateError

  api-ms-win-core-localization-l1-2-0

  GetUserGeoID

  GetLocaleInfoW

  GetThreadUILanguage

  FormatMessageW

  GetGeoInfoW

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  OutputDebugStringW

  IsDebuggerPresent

  api-ms-win-core-handle-l1-1-0

  DuplicateHandle

  CloseHandle

  api-ms-win-core-url-l1-1-0

  ParseURLW

  api-ms-win-core-rtlsupport-l1-1-0

  RtlVirtualUnwind

  RtlLookupFunctionEntry

  RtlCaptureContext

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceCounter

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTime

  GetSystemWindowsDirectoryW

  GetSystemTimeAsFileTime

  GetLocalTime

  GlobalMemoryStatusEx

  GetWindowsDirectoryW

  GetTickCount

  oleaut32

  SysAllocString

  VariantClear

  SysFreeString

  api-ms-win-core-timezone-l1-1-0

  SystemTimeToFileTime

  FileTimeToSystemTime

  api-ms-win-core-libraryloader-l1-2-1

  LoadLibraryW

  api-ms-win-core-sysinfo-l1-2-1

  GetPhysicallyInstalledSystemMemory

  api-ms-win-core-file-l1-1-0

  CompareFileTime

  DeleteFileW

  FindClose

  CreateDirectoryW

  GetDriveTypeW

  FindNextFileW

  CreateFileW

  SetFileAttributesW

  RemoveDirectoryW

  ReadFile

  GetFileSizeEx

  SetFilePointerEx

  FindFirstFileW

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-path-l1-1-0

  PathCchAppend

  PathCchCombine

  api-ms-win-core-registry-l1-1-1

  RegDeleteKeyValueW

  RegSetKeyValueW

  api-ms-win-ntuser-sysparams-l1-1-0

  GetSystemMetrics

  api-ms-win-security-sddl-l1-1-0

  ConvertSidToStringSidW

  ConvertStringSecurityDescriptorToSecurityDescriptorW

  ConvertStringSidToSidW

  api-ms-win-security-base-l1-1-0

  InitializeAcl

  AdjustTokenPrivileges

  GetLengthSid

  AddAce

  DeleteAce

  IsWellKnownSid

  RevertToSelf

  ImpersonateLoggedOnUser

  EqualSid

  GetAce

  GetAclInformation

  GetTokenInformation

  DestroyPrivateObjectSecurity

  api-ms-win-core-heap-l2-1-0

  LocalFree

  LocalAlloc

  api-ms-win-service-core-l1-1-0

  SetServiceStatus

  RegisterServiceCtrlHandlerExW

  api-ms-win-appmodel-runtime-l1-1-0

  PackageNameAndPublisherIdFromFamilyName

  PackageFamilyNameFromFullName

  GetPackagesByPackageFamily

  api-ms-win-core-string-l1-1-0

  MultiByteToWideChar

  WideCharToMultiByte

  CompareStringOrdinal

  GetStringTypeW

  xmllite

  CreateXmlWriter

  CreateXmlReader

  sspicli

  LsaEnumerateLogonSessions

  LsaGetLogonSessionData

  LsaFreeReturnBuffer

  api-ms-win-security-lsalookup-l2-1-0

  LookupPrivilegeValueW

  api-ms-win-service-management-l1-1-0

  CloseServiceHandle

  OpenServiceW

  OpenSCManagerW

  StartServiceW

  api-ms-win-service-management-l2-1-0

  QueryServiceConfigW

  ChangeServiceConfigW

  api-ms-win-core-processenvironment-l1-1-0

  GetStdHandle

  ExpandEnvironmentStringsW

  api-ms-win-core-com-midlproxystub-l1-1-0

  ObjectStublessClient6

  ObjectStublessClient7

  ObjectStublessClient9

  ObjectStublessClient10

  ObjectStublessClient4

  ObjectStublessClient8

  ObjectStublessClient5

  ObjectStublessClient3

  api-ms-win-security-provider-l1-1-0

  SetSecurityInfo

  GetSecurityInfo

  api-ms-win-shell-namespace-l1-1-0

  SHParseDisplayName

  ILFree

  api-ms-win-core-registry-l2-1-0

  RegCreateKeyW

  api-ms-win-core-string-l2-1-0

  CharLowerBuffW

  api-ms-win-shlwapi-winrt-storage-l1-1-1

  ord24

  PathIsDirectoryEmptyW

  StrFormatByteSizeEx

  api-ms-win-core-shlwapi-obsolete-l1-1-0

  QISearch

  StrCmpW

  StrRChrW

  ntdll

  RtlGetDeviceFamilyInfoEnum

  RtlGetVersion

  api-ms-win-rtcore-ntuser-window-l1-1-0

  SetWindowLongPtrW

  RegisterClassExW

  DefWindowProcW

  GetWindowLongPtrW

  GetMessageW

  SetTimer

  DestroyWindow

  DispatchMessageW

  TranslateMessage

  PostQuitMessage

  KillTimer

  PeekMessageW

  UnregisterClassW

  CreateWindowExW

  api-ms-win-rtcore-ntuser-synch-l1-1-0

  MsgWaitForMultipleObjectsEx

  api-ms-win-appmodel-runtime-internal-l1-1-1

  GetPackageStatusForUser

  api-ms-win-core-shlwapi-legacy-l1-1-0

  PathFileExistsW

  PathRemoveFileSpecW

  PathStripPathW

  PathFindFileNameW

  PathRemoveBackslashW

  PathFindExtensionW

  api-ms-win-core-registryuserspecific-l1-1-0

  SHRegGetUSValueW

  api-ms-win-shell-changenotify-l1-1-0

  SHChangeNotify

  appxalluserstore

  GetAllPackagesToBeInstalledForUser

  DeleteAllPackagesFromMainPackageArray

  dmenrollengine

  EnrollEngineInitialize

  wlanapi

  WlanFreeMemory

  WlanGetProfile

  WlanCloseHandle

  WlanOpenHandle

  api-ms-win-core-delayload-l1-1-1

  ResolveDelayLoadedAPI

  api-ms-win-core-delayload-l1-1-0

  DelayLoadFailureHook

  api-ms-win-core-shutdown-l1-1-0

  InitiateSystemShutdownExW

  api-ms-win-core-winrt-error-l1-1-1

  RoGetMatchingRestrictedErrorInfo

  api-ms-win-core-kernel32-legacy-l1-1-0

  MoveFileW

  api-ms-win-core-processthreads-l1-1-1

  OpenProcess

  api-ms-win-security-cryptoapi-l1-1-0

  CryptDestroyHash

  CryptCreateHash

  CryptHashData

  CryptGetHashParam

  CryptAcquireContextW

  CryptReleaseContext

  api-ms-win-core-file-l2-1-2

  CopyFileW

  api-ms-win-core-apiquery-l1-1-0

  ApiSetQueryApiSetPresence

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  GetProxyDllInfo

  OpenRDXDocumentW

  ServiceMain

  Sections

  .text

  Size: 488KB - Virtual size: 487KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 198KB - Virtual size: 197KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 6KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 22KB - Virtual size: 21KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .didat

  Size: 512B - Virtual size: 288B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 6KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/mfc100.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 208KB - Virtual size: 208KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/tcbloader.dll

  .dll windows:10 windows x64 arch:x64

  288f945a04bd6ccc346dcbca2ab60c08

  
  

  Code Sign

  33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/05/2019, 21:24

  Not After

  02/05/2020, 21:24

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70

  Signer

  Actual PE Digest

  bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  tcbloader.pdb

  Imports

  bootlib

  BlBdStop

  RtlAnsiStringToUnicodeString

  BlAppendUnicodeToString

  BlArchCpuId

  BlUtlGetAcpiTable

  RtlFreeUnicodeString

  RtlInitUnicodeString

  BlArchIsFiveLevelPagingActive

  RtlInitAnsiString

  strcat_s

  BlMmMapPhysicalAddress

  ArchBuildKernelGdt

  BlBdPatchIdt

  BlMmAllocatePages

  BlArchKernelSetup

  BlMmAllocatePhysicalPages

  BlMmFreePhysicalPages

  BlMmFreePages

  BlBdDebugTransitionsEnabled

  BlArchGetPerformanceCounter

  wcsnlen

  BlImgGetSigningPolicy

  BlImgIsUpgradedPlatform

  BlImgIsWinPE

  BlSiMeasureOsRevocationList

  BlImgGetWhqlEnforcementDateTime

  SbGetSizeOfKernelPolicyPackage

  SIPolicyIsSignedPolicyRequired

  SbArePolicyOptionsSet

  MinCrypL_HashMemory

  RtlFindExportedRoutineByName

  BlStatusPrint

  RtlGUIDFromString

  BlImgParseOsRevocationList

  BlGetBootDevice

  BlImgSetSysDevWhqlPolicy

  BlImgRegisterCodeIntegrityCatalogs

  BlDeviceClose

  RtlEqualUnicodeString

  SIPolicyInvalidateEAsOnRebootEnabled

  SbIsEnabled

  BlFileClose

  _wcsicmp

  MincryptSetWeakCryptoPolicy

  BlImgRegisterCodeIntegrityCatalogDirectory

  BlGetApplicationEntry

  BlImgSetRestrictedSigning

  BlMmAllocateHeap

  SbLoadFile

  BlFileReadAtOffsetEx

  BlpPdReleaseData

  BlFileOpen

  wcscpy_s

  wcscat_s

  BlLdrFreeDataTableEntry

  BlpPdQueryData

  qsort

  SIPolicyGetSerializedPoliciesSize

  BlSIPolicyCheckPolicyOnDevice

  BlLdrBuildImagePath

  BlTpmStatus

  BlImgSetSigningPolicy

  SIPolicyHashActiveCodeExecutionPolicies

  BlImgTrustCustomSignersForDrivers

  SIPolicyClearAllActivePolicy

  BlDeviceOpen

  RtlInitUnicodeStringEx

  BlGetBootOptionDevice

  SbFreeFileData

  BlLdrPreloadFile

  SIPolicyIsPolicyActive

  SIPolicyGetOptions

  SbIsTestRootTrusted

  BlSIPolicyLoadAndActivateTemporalPolicy

  BlImgQueryCodeIntegrityBootOptions

  BlImgIsWhqlEnabledBySetting

  BlMmFreeHeap

  BlDeviceCompare

  BlGetBootOptionBoolean

  BlSecureBootGetNonVolatilePrivateVariable

  BlImgIsWhqlDeveloperTestModeEnabled

  BlImgUnLoadImage

  SIPolicyGetPolicyHandle

  BlGetBootOptionString

  SbValidateSkuUnlockToken

  SIPolicySetTrialMode

  BlImgIsBootUpgradedPlatform

  SIPolicyUmciEnabled

  BlVsmGetSystemPolicy

  SIPolicyGetSerializedPolicies

  BlGetBootOptionInteger

  BlImgIsUpgradeInProgress

  BlBdDebuggerConnected

  SIPolicyDeletePersistentVariable

  BlImgIsWhqlDisabledBySetting

  BlFileGetInformation

  SbGetKernelPolicyPackage

  SbIsDebugPolicyActive

  SIPolicyGetPolicyInfoFromType

  BlArchGetCpuVendor

  BlMmAddEnclavePageRange

  BlArchIsCpuIdFunctionSupported

  _strupr

  BlLogDestroy

  BlBootOptionExists

  McGenEventWriteBoot

  BlMmMapPhysicalAddressEx

  BlMmQueryLargePageSize

  BlAppendBootOptionString

  BlLogDiagWrite

  BlTpmShutdown

  BlGetExecutionEnvironment

  BlMmGetMemoryMap

  _wcsupr

  BlBsdCloseLog

  BlRemoveBootOption

  BlLogEtwWriteTransfer

  BlImgLoadImageWithProgress2

  swprintf_s

  wcsstr

  BlMmUnmapVirtualAddress

  BlCopyBootOptions

  BlGetApplicationIdentifier

  BlMmAllocateVirtualPages

  BlLogInitialize

  BlImgFindSection

  strstr

  _wcsnicmp

  BlGetDeviceIdentifier

  BlStatusRegisterErrorHandler

  SbIsPolicyActive

  BlPdDestroyData

  BlImgGetPEImageSize

  BlSIPolicyDoesActivePolicyGrantPermission

  BlArchQueryIoPortAccessSupported

  BlUpdateBootOptions

  BlFveCheckPermission

  BlMmReleaseMemoryMap

  BlCopyWcharStringToString

  BlMmEnumerateAllocations

  BlMmTranslateVirtualAddress

  BlUtlGetAcpiTableOverrides

  SbDoesActivePolicyGrantPermission

  BlTimeQueryPerformanceCounter

  AhCreateLoadOptionsString

  BlSecureBootIgnoreSingleBootOption

  RtlImageDirectoryEntryToData

  BlCopyStringToUnicodeString

  BlLdrPreloadImage

  RtlPrefixUnicodeString

  BlLdrLoadImage

  BlCopyUnicodeStringToUnicodeString

  LdrInitSecurityCookie

  BlGetDevice

  BlVsmCheckSystemPolicy

  BlPdQueryDataAll

  SbIsTestSigningBlocked

  RtlAppendUnicodeToString

  BlObtainUnusedSlabPages

  BlFwGetAcpiMemoryMap

  BlAllocateSlabPages

  BlBdSetupDebuggingDevice

  DbgLoadImageSymbols

  BlUtlPopulateAcpiTableCache

  BlFwGetSystemTable

  SbIsEnabled2

  KdNetGetNetDataSize

  BlVsmKeysGetCurrentLKeyRefFromArray

  BlLdrUnloadImage

  _wcstoui64

  BlSvnGetApplicationSvn

  BlSvnGetChainStatus

  BlTcgFwSetAndLockMemoryOverwriteRequestControl

  SymCryptGcmEncryptPart

  SipaQueueConfigEntry

  rsa_encryption

  SymCryptGcmEncryptFinal

  SymCryptGcmDecryptFinal

  rsa_construction_fips186_3

  BlFileReadEx

  TpmApiCheckSecureNVIndex20

  SymCryptSha256Append

  SymCryptGcmInit

  rsa_export_sizes

  SymCryptGcmExpandKey

  rsa_decryption

  TpmApiUnsealEx

  BlPdSaveData

  BlSealSecretToCurrentPcrValues

  SymCryptGcmAuthPart

  TpmApiCreateSecureNVIndex20

  BlLogEtwWrite

  BlSymCryptGetAesBlockCipher

  SymCryptSha256Result

  SymCryptGcmDecryptPart

  rsa_export

  SymCryptSha256

  SymCryptSha256Init

  BlSiFlushCurrentMeasurements

  rsa_destruction

  TpmApiGetTpmVersion

  BlVsmKeysAddNewKeyToArray

  TpmApiSealPolicyAuthorized20

  TpmApiCreateSrk20

  BlSiPaRecordDrtmConfigEvent

  BlSiDrtmEnvironmentUnsafe

  BlFileLoad

  TpmApiDrtmGetSigningKeys

  BlCreateTpmSealedBlob

  BlValidateMemoryRange

  TpmApiIsCurrentStatePolicyAuthorized20

  BlVsmKeysValidateKeyPkgBuffer

  BlVsmKeysCreateKeyPkg

  BlVsmKeysFindKeyMapByType

  TpmApiUnsealPolicyAuthorized20

  BlDecryptSealedData

  BlVsmKeysExplodePkg

  OslGetDrtmSvn

  wcsncmp

  TpmApiGetKeyPublicProperty20

  TpmApiReadPublic20

  BlSiSetDrtmEnvironmentUnsafe

  BlLdrLoadDll

  BlSiHandleHypervisorLaunchEvent

  BlBdGetExtensionName

  BlBdLoadImageSymbols

  BlBdInitializeTransportExtension

  BlBdInitializeDeviceDescriptor

  BlBdReleaseDebuggingDevice

  wcsrchr

  BlArchDetectSmt

  BlSiEnvironmentReady

  BlEnNotifyEvent

  BlSiPaRecordConfigEvent

  SipaGetDataPointers

  SipapAppendEntry

  SymCryptSha1

  SipaQueueConfigEntryToQueue

  SipapCreateQueue

  BlSiEnterInsecureStateEx

  BlSiLeaveEnvironment

  BlUtlSetAcpiTableOverrides

  BlUtlCheckSum

  strcpy_s

  _stricmp

  BlTblSetEntry

  RtlCompareMemory

  RtlUnicodeStringToAnsiString

  BlPdFreeData

  BlBsdLogEntry

  BlResourceFindMessage

  BlStatusError

  SymCryptRngAesReseedSelftest

  BlTpmGetRandom

  SymCryptRdseedStatus

  SymCryptRngAesInstantiateSelftest

  SymCryptRdrandGet

  SymCryptSha512Result

  SymCryptSha512Append

  SymCryptRdrandStatus

  SymCryptSha512Init

  SymCryptHmacSha512Selftest

  SymCryptRngAesFips140_2Generate

  SymCryptRngAesFips140_2Uninstantiate

  SymCryptRdseedGet

  SymCryptSha512

  SymCryptRngAesGenerateSelftest

  SymCryptRngAesFips140_2Instantiate

  BlFwQueryEfiRuntimeVaRange

  EfiGetMemoryAttributesTable

  BlLogEtwRegister

  BlValidateWideStringMemory

  BlMmTranslateEfiMemoryType

  BlValidateListMemory

  BlValidatePhysicalMemoryRange

  BlValidateAnsiStringMemory

  BlArchSetSecrets

  BlImgVerifyFontIntegrity

  BlResourceGetLanguageMapping

  BlFileSetInformation

  BlResourceFindDataFromImage

  BlImgLoadPEImageWithPolicyValidatedHash

  BlImgLoadPEImageEx

  BlDisplayFreeOemBitmap

  BlDisplayGetOemBitmap

  BlDisplayInvalidateOemBitmap

  RtlCompareUnicodeString

  RtlAppendUnicodeStringToString

  RtlStringFromGUID

  sprintf_s

  RtlInitializeBitMap

  RtlSetBits

  SymCryptInit

  SymCryptMarvin32ExpandSeed

  RtlUpcaseUnicodeChar

  BlUtlValidateMemoryRange

  BlMmFreeVirtualPages

  BlMmUnmapVirtualAddressEx

  BlMmRemapVirtualAddress

  BlMmFlushTlb

  ArchGetGdtRegister

  BlVsmKeysGetCurrentLKeyRefFromPkg

  BlSecureBootSetVolatilePrivateVariable

  BlVsmKeysSupportedByPlatform

  SymCryptSp800_108

  BlVsmKeysReadAndUnsealLKeyPkg

  BlSymCryptGetHmacSha256Algorithm

  RtlCompareUnicodeStrings

  memset

  __GSHandlerCheck

  memcmp

  memcpy

  memmove

  wcscmp

  Exports

  Exports

  OslGenRandomBytes

  OslGetControlSubkeyCell

  OslGetExportRoutineInModule

  OslGetStringValue

  OslGetValue

  OslIsRunningInSecureKernel

  TcbLoadEntry

  TcbResumeEntry

  Sections

  .text

  Size: 153KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 364B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/module/utils.js

  .js
• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/tcbloader.dll

  .dll windows:10 windows x64 arch:x64

  288f945a04bd6ccc346dcbca2ab60c08

  
  

  Code Sign

  33:00:00:02:32:41:fb:59:99:6d:cc:4d:ff:00:00:00:00:02:32

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  02/05/2019, 21:24

  Not After

  02/05/2020, 21:24

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70

  Signer

  Actual PE Digest

  bf:38:cf:c6:12:75:f7:ff:f2:8b:8d:ae:d5:2e:34:21:8b:88:d7:b0:44:59:8c:89:53:f3:39:16:46:4b:b6:70

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  tcbloader.pdb

  Imports

  bootlib

  BlBdStop

  RtlAnsiStringToUnicodeString

  BlAppendUnicodeToString

  BlArchCpuId

  BlUtlGetAcpiTable

  RtlFreeUnicodeString

  RtlInitUnicodeString

  BlArchIsFiveLevelPagingActive

  RtlInitAnsiString

  strcat_s

  BlMmMapPhysicalAddress

  ArchBuildKernelGdt

  BlBdPatchIdt

  BlMmAllocatePages

  BlArchKernelSetup

  BlMmAllocatePhysicalPages

  BlMmFreePhysicalPages

  BlMmFreePages

  BlBdDebugTransitionsEnabled

  BlArchGetPerformanceCounter

  wcsnlen

  BlImgGetSigningPolicy

  BlImgIsUpgradedPlatform

  BlImgIsWinPE

  BlSiMeasureOsRevocationList

  BlImgGetWhqlEnforcementDateTime

  SbGetSizeOfKernelPolicyPackage

  SIPolicyIsSignedPolicyRequired

  SbArePolicyOptionsSet

  MinCrypL_HashMemory

  RtlFindExportedRoutineByName

  BlStatusPrint

  RtlGUIDFromString

  BlImgParseOsRevocationList

  BlGetBootDevice

  BlImgSetSysDevWhqlPolicy

  BlImgRegisterCodeIntegrityCatalogs

  BlDeviceClose

  RtlEqualUnicodeString

  SIPolicyInvalidateEAsOnRebootEnabled

  SbIsEnabled

  BlFileClose

  _wcsicmp

  MincryptSetWeakCryptoPolicy

  BlImgRegisterCodeIntegrityCatalogDirectory

  BlGetApplicationEntry

  BlImgSetRestrictedSigning

  BlMmAllocateHeap

  SbLoadFile

  BlFileReadAtOffsetEx

  BlpPdReleaseData

  BlFileOpen

  wcscpy_s

  wcscat_s

  BlLdrFreeDataTableEntry

  BlpPdQueryData

  qsort

  SIPolicyGetSerializedPoliciesSize

  BlSIPolicyCheckPolicyOnDevice

  BlLdrBuildImagePath

  BlTpmStatus

  BlImgSetSigningPolicy

  SIPolicyHashActiveCodeExecutionPolicies

  BlImgTrustCustomSignersForDrivers

  SIPolicyClearAllActivePolicy

  BlDeviceOpen

  RtlInitUnicodeStringEx

  BlGetBootOptionDevice

  SbFreeFileData

  BlLdrPreloadFile

  SIPolicyIsPolicyActive

  SIPolicyGetOptions

  SbIsTestRootTrusted

  BlSIPolicyLoadAndActivateTemporalPolicy

  BlImgQueryCodeIntegrityBootOptions

  BlImgIsWhqlEnabledBySetting

  BlMmFreeHeap

  BlDeviceCompare

  BlGetBootOptionBoolean

  BlSecureBootGetNonVolatilePrivateVariable

  BlImgIsWhqlDeveloperTestModeEnabled

  BlImgUnLoadImage

  SIPolicyGetPolicyHandle

  BlGetBootOptionString

  SbValidateSkuUnlockToken

  SIPolicySetTrialMode

  BlImgIsBootUpgradedPlatform

  SIPolicyUmciEnabled

  BlVsmGetSystemPolicy

  SIPolicyGetSerializedPolicies

  BlGetBootOptionInteger

  BlImgIsUpgradeInProgress

  BlBdDebuggerConnected

  SIPolicyDeletePersistentVariable

  BlImgIsWhqlDisabledBySetting

  BlFileGetInformation

  SbGetKernelPolicyPackage

  SbIsDebugPolicyActive

  SIPolicyGetPolicyInfoFromType

  BlArchGetCpuVendor

  BlMmAddEnclavePageRange

  BlArchIsCpuIdFunctionSupported

  _strupr

  BlLogDestroy

  BlBootOptionExists

  McGenEventWriteBoot

  BlMmMapPhysicalAddressEx

  BlMmQueryLargePageSize

  BlAppendBootOptionString

  BlLogDiagWrite

  BlTpmShutdown

  BlGetExecutionEnvironment

  BlMmGetMemoryMap

  _wcsupr

  BlBsdCloseLog

  BlRemoveBootOption

  BlLogEtwWriteTransfer

  BlImgLoadImageWithProgress2

  swprintf_s

  wcsstr

  BlMmUnmapVirtualAddress

  BlCopyBootOptions

  BlGetApplicationIdentifier

  BlMmAllocateVirtualPages

  BlLogInitialize

  BlImgFindSection

  strstr

  _wcsnicmp

  BlGetDeviceIdentifier

  BlStatusRegisterErrorHandler

  SbIsPolicyActive

  BlPdDestroyData

  BlImgGetPEImageSize

  BlSIPolicyDoesActivePolicyGrantPermission

  BlArchQueryIoPortAccessSupported

  BlUpdateBootOptions

  BlFveCheckPermission

  BlMmReleaseMemoryMap

  BlCopyWcharStringToString

  BlMmEnumerateAllocations

  BlMmTranslateVirtualAddress

  BlUtlGetAcpiTableOverrides

  SbDoesActivePolicyGrantPermission

  BlTimeQueryPerformanceCounter

  AhCreateLoadOptionsString

  BlSecureBootIgnoreSingleBootOption

  RtlImageDirectoryEntryToData

  BlCopyStringToUnicodeString

  BlLdrPreloadImage

  RtlPrefixUnicodeString

  BlLdrLoadImage

  BlCopyUnicodeStringToUnicodeString

  LdrInitSecurityCookie

  BlGetDevice

  BlVsmCheckSystemPolicy

  BlPdQueryDataAll

  SbIsTestSigningBlocked

  RtlAppendUnicodeToString

  BlObtainUnusedSlabPages

  BlFwGetAcpiMemoryMap

  BlAllocateSlabPages

  BlBdSetupDebuggingDevice

  DbgLoadImageSymbols

  BlUtlPopulateAcpiTableCache

  BlFwGetSystemTable

  SbIsEnabled2

  KdNetGetNetDataSize

  BlVsmKeysGetCurrentLKeyRefFromArray

  BlLdrUnloadImage

  _wcstoui64

  BlSvnGetApplicationSvn

  BlSvnGetChainStatus

  BlTcgFwSetAndLockMemoryOverwriteRequestControl

  SymCryptGcmEncryptPart

  SipaQueueConfigEntry

  rsa_encryption

  SymCryptGcmEncryptFinal

  SymCryptGcmDecryptFinal

  rsa_construction_fips186_3

  BlFileReadEx

  TpmApiCheckSecureNVIndex20

  SymCryptSha256Append

  SymCryptGcmInit

  rsa_export_sizes

  SymCryptGcmExpandKey

  rsa_decryption

  TpmApiUnsealEx

  BlPdSaveData

  BlSealSecretToCurrentPcrValues

  SymCryptGcmAuthPart

  TpmApiCreateSecureNVIndex20

  BlLogEtwWrite

  BlSymCryptGetAesBlockCipher

  SymCryptSha256Result

  SymCryptGcmDecryptPart

  rsa_export

  SymCryptSha256

  SymCryptSha256Init

  BlSiFlushCurrentMeasurements

  rsa_destruction

  TpmApiGetTpmVersion

  BlVsmKeysAddNewKeyToArray

  TpmApiSealPolicyAuthorized20

  TpmApiCreateSrk20

  BlSiPaRecordDrtmConfigEvent

  BlSiDrtmEnvironmentUnsafe

  BlFileLoad

  TpmApiDrtmGetSigningKeys

  BlCreateTpmSealedBlob

  BlValidateMemoryRange

  TpmApiIsCurrentStatePolicyAuthorized20

  BlVsmKeysValidateKeyPkgBuffer

  BlVsmKeysCreateKeyPkg

  BlVsmKeysFindKeyMapByType

  TpmApiUnsealPolicyAuthorized20

  BlDecryptSealedData

  BlVsmKeysExplodePkg

  OslGetDrtmSvn

  wcsncmp

  TpmApiGetKeyPublicProperty20

  TpmApiReadPublic20

  BlSiSetDrtmEnvironmentUnsafe

  BlLdrLoadDll

  BlSiHandleHypervisorLaunchEvent

  BlBdGetExtensionName

  BlBdLoadImageSymbols

  BlBdInitializeTransportExtension

  BlBdInitializeDeviceDescriptor

  BlBdReleaseDebuggingDevice

  wcsrchr

  BlArchDetectSmt

  BlSiEnvironmentReady

  BlEnNotifyEvent

  BlSiPaRecordConfigEvent

  SipaGetDataPointers

  SipapAppendEntry

  SymCryptSha1

  SipaQueueConfigEntryToQueue

  SipapCreateQueue

  BlSiEnterInsecureStateEx

  BlSiLeaveEnvironment

  BlUtlSetAcpiTableOverrides

  BlUtlCheckSum

  strcpy_s

  _stricmp

  BlTblSetEntry

  RtlCompareMemory

  RtlUnicodeStringToAnsiString

  BlPdFreeData

  BlBsdLogEntry

  BlResourceFindMessage

  BlStatusError

  SymCryptRngAesReseedSelftest

  BlTpmGetRandom

  SymCryptRdseedStatus

  SymCryptRngAesInstantiateSelftest

  SymCryptRdrandGet

  SymCryptSha512Result

  SymCryptSha512Append

  SymCryptRdrandStatus

  SymCryptSha512Init

  SymCryptHmacSha512Selftest

  SymCryptRngAesFips140_2Generate

  SymCryptRngAesFips140_2Uninstantiate

  SymCryptRdseedGet

  SymCryptSha512

  SymCryptRngAesGenerateSelftest

  SymCryptRngAesFips140_2Instantiate

  BlFwQueryEfiRuntimeVaRange

  EfiGetMemoryAttributesTable

  BlLogEtwRegister

  BlValidateWideStringMemory

  BlMmTranslateEfiMemoryType

  BlValidateListMemory

  BlValidatePhysicalMemoryRange

  BlValidateAnsiStringMemory

  BlArchSetSecrets

  BlImgVerifyFontIntegrity

  BlResourceGetLanguageMapping

  BlFileSetInformation

  BlResourceFindDataFromImage

  BlImgLoadPEImageWithPolicyValidatedHash

  BlImgLoadPEImageEx

  BlDisplayFreeOemBitmap

  BlDisplayGetOemBitmap

  BlDisplayInvalidateOemBitmap

  RtlCompareUnicodeString

  RtlAppendUnicodeStringToString

  RtlStringFromGUID

  sprintf_s

  RtlInitializeBitMap

  RtlSetBits

  SymCryptInit

  SymCryptMarvin32ExpandSeed

  RtlUpcaseUnicodeChar

  BlUtlValidateMemoryRange

  BlMmFreeVirtualPages

  BlMmUnmapVirtualAddressEx

  BlMmRemapVirtualAddress

  BlMmFlushTlb

  ArchGetGdtRegister

  BlVsmKeysGetCurrentLKeyRefFromPkg

  BlSecureBootSetVolatilePrivateVariable

  BlVsmKeysSupportedByPlatform

  SymCryptSp800_108

  BlVsmKeysReadAndUnsealLKeyPkg

  BlSymCryptGetHmacSha256Algorithm

  RtlCompareUnicodeStrings

  memset

  __GSHandlerCheck

  memcmp

  memcpy

  memmove

  wcscmp

  Exports

  Exports

  OslGenRandomBytes

  OslGetControlSubkeyCell

  OslGetExportRoutineInModule

  OslGetStringValue

  OslGetValue

  OslIsRunningInSecureKernel

  TcbLoadEntry

  TcbResumeEntry

  Sections

  .text

  Size: 153KB - Virtual size: 152KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1024B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 364B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/Yahoo v1.1 by Chiripas/utils.js

  .js
• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/DXcore.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 496KB - Virtual size: 495KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 59KB - Virtual size: 59KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/AccountSys/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/Ebay reg Checker Account By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 366KB - Virtual size: 365KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/ebay Checker Account By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/sysSoft.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 484KB - Virtual size: 484KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 44KB - Virtual size: 44KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/freebitco.in Checker Account By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 175KB - Virtual size: 174KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/freebitco.in Checker Account By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/Jint.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\jint\Jint\obj\Release\net451\Jint.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 242KB - Virtual size: 241KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 668B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/LICENSE
• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04/01/2017, 00:00

  Not After

  18/01/2028, 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Signer

  Actual PE Digest

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 649KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/ibVPN Brute Checker By MTSoftCrack V2.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/nsi.dll

  .dll windows:10 windows x86 arch:x86

  9f19b08ba92c5e2d2fffc1b3724649db

  
  

  Code Sign

  33:00:00:01:bb:34:d5:ee:69:78:e6:94:db:00:00:00:00:01:bb

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/06/2018, 18:57

  Not After

  29/05/2019, 18:57

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Signer

  Actual PE Digest

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  nsi.pdb

  Imports

  ntdll

  NtWaitForSingleObject

  RtlNtStatusToDosError

  NtDeviceIoControlFile

  memset

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  CreateEventA

  Exports

  Exports

  NsiAllocateAndGetPersistentDataWithMaskTable

  NsiAllocateAndGetTable

  NsiCancelChangeNotification

  NsiDeregisterChangeNotification

  NsiDeregisterChangeNotificationEx

  NsiEnumerateObjectsAllParameters

  NsiEnumerateObjectsAllParametersEx

  NsiEnumerateObjectsAllPersistentParametersWithMask

  NsiFreePersistentDataWithMaskTable

  NsiFreeTable

  NsiGetAllParameters

  NsiGetAllParametersEx

  NsiGetAllPersistentParametersWithMask

  NsiGetObjectSecurity

  NsiGetParameter

  NsiGetParameterEx

  NsiRegisterChangeNotification

  NsiRegisterChangeNotificationEx

  NsiRequestChangeNotification

  NsiRequestChangeNotificationEx

  NsiSetAllParameters

  NsiSetAllParametersEx

  NsiSetAllPersistentParametersWithMask

  NsiSetObjectSecurity

  NsiSetParameter

  NsiSetParameterEx

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 838B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/IVPN.exe

  .exe windows:4 windows x86 arch:x86

  baa93d47220682c04d92f7797d9224ce

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  lstrcpy

  comctl32

  InitCommonControls

  Sections

  Size: 449KB - Virtual size: 464KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 23KB - Virtual size: 36KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 512B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  Size: 512B - Virtual size: 2.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  ckfdwfev

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  vruxxdaw

  Size: 512B - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/Jint.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\jint\Jint\obj\Release\net451\Jint.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 242KB - Virtual size: 241KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 668B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/LICENSE
• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  04/01/2017, 00:00

  Not After

  18/01/2028, 00:00

  Subject

  CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Signer

  Actual PE Digest

  a7:cc:fe:41:40:99:65:07:53:c6:c7:f4:1c:e3:22:5f:f1:9e:7a:db:83:aa:c0:1c:bd:9b:44:a1:54:ff:58:a1

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 649KB - Virtual size: 649KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/ibVPN Brute Checker By MTSoft_ V2/shell/nsi.dll

  .dll windows:10 windows x86 arch:x86

  9f19b08ba92c5e2d2fffc1b3724649db

  
  

  Code Sign

  33:00:00:01:bb:34:d5:ee:69:78:e6:94:db:00:00:00:00:01:bb

  Certificate

  Issuer

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  06/06/2018, 18:57

  Not After

  29/05/2019, 18:57

  Subject

  CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:07:76:56:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  19/10/2011, 18:41

  Not After

  19/10/2026, 18:51

  Subject

  CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Signer

  Actual PE Digest

  da:67:7a:d1:ff:55:79:28:31:a7:01:25:ca:2c:32:d5:f1:e3:67:c5:65:ff:48:42:6b:d9:0e:c0:3f:11:33:d4

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  nsi.pdb

  Imports

  ntdll

  NtWaitForSingleObject

  RtlNtStatusToDosError

  NtDeviceIoControlFile

  memset

  api-ms-win-core-errorhandling-l1-1-0

  GetLastError

  api-ms-win-core-file-l1-1-0

  CreateFileW

  api-ms-win-core-handle-l1-1-0

  CloseHandle

  api-ms-win-core-heap-l1-1-0

  HeapFree

  HeapAlloc

  GetProcessHeap

  api-ms-win-core-io-l1-1-0

  DeviceIoControl

  api-ms-win-core-libraryloader-l1-2-0

  DisableThreadLibraryCalls

  api-ms-win-core-synch-l1-1-0

  CreateEventA

  Exports

  Exports

  NsiAllocateAndGetPersistentDataWithMaskTable

  NsiAllocateAndGetTable

  NsiCancelChangeNotification

  NsiDeregisterChangeNotification

  NsiDeregisterChangeNotificationEx

  NsiEnumerateObjectsAllParameters

  NsiEnumerateObjectsAllParametersEx

  NsiEnumerateObjectsAllPersistentParametersWithMask

  NsiFreePersistentDataWithMaskTable

  NsiFreeTable

  NsiGetAllParameters

  NsiGetAllParametersEx

  NsiGetAllPersistentParametersWithMask

  NsiGetObjectSecurity

  NsiGetParameter

  NsiGetParameterEx

  NsiRegisterChangeNotification

  NsiRegisterChangeNotificationEx

  NsiRequestChangeNotification

  NsiRequestChangeNotificationEx

  NsiSetAllParameters

  NsiSetAllParametersEx

  NsiSetAllPersistentParametersWithMask

  NsiSetObjectSecurity

  NsiSetParameter

  NsiSetParameterEx

  Sections

  .text

  Size: 7KB - Virtual size: 6KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 824B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 1024B - Virtual size: 838B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 1016B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 260B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/Colorful.Console.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\colorful-console\src\Colorful.Console\obj\Debug\net461\Colorful.Console.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 86KB - Virtual size: 85KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 980B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/kracking artists/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/Read ME.txt
• Checkers PACK/Checkers PACK/kracking artists/Data/System.Collections.Immutable.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:11

  Not After

  11/08/2018, 20:11

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:20

  Not After

  11/08/2018, 20:20

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3e:6a:78:e9:d4:27:08:fe:96:07:0a:5e:40:02:fe:24:72:b1:a0:6e:79:af:f5:75:65:a9:f9:c0:d9:db:ff:16

  Signer

  Actual PE Digest

  3e:6a:78:e9:d4:27:08:fe:96:07:0a:5e:40:02:fe:24:72:b1:a0:6e:79:af:f5:75:65:a9:f9:c0:d9:db:ff:16

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  73:90:24:98:5c:c9:b5:cc:e4:ff:d0:9e:73:a2:e6:f3:97:4f:9b:47

  Signer

  Actual PE Digest

  73:90:24:98:5c:c9:b5:cc:e4:ff:d0:9e:73:a2:e6:f3:97:4f:9b:47

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 118KB - Virtual size: 118KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/System.Threading.Tasks.Dataflow.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:11

  Not After

  11/08/2018, 20:11

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:20

  Not After

  11/08/2018, 20:20

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  78:67:e3:a6:21:55:cd:f6:84:a6:68:8c:9f:e5:34:f1:d1:f0:f9:90:a7:5b:12:72:9b:75:f9:ac:ea:0a:c7:10

  Signer

  Actual PE Digest

  78:67:e3:a6:21:55:cd:f6:84:a6:68:8c:9f:e5:34:f1:d1:f0:f9:90:a7:5b:12:72:9b:75:f9:ac:ea:0a:c7:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  de:09:12:40:ec:17:9f:6a:9c:41:0b:15:a6:58:a8:5b:17:29:a5:0d

  Signer

  Actual PE Digest

  de:09:12:40:ec:17:9f:6a:9c:41:0b:15:a6:58:a8:5b:17:29:a5:0d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  System.Threading.Tasks.Dataflow.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 151KB - Virtual size: 150KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/WThreads.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Deos\Desktop\WThreads\obj\Debug\WThreads.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Data/debug.log
• Checkers PACK/Checkers PACK/kracking artists/Data/kracking artists.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 52KB - Virtual size: 52KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Kracking Artist Fortnite Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 181KB - Virtual size: 180KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Leaf.xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\projects\leaf-xnet\Leaf.xNet\obj\Release\net472\Leaf.xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 128KB - Virtual size: 128KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Newtonsoft.Json.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2031, 00:00

  Subject

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  07:b0:41:8d:a5:1e:14:8c:33:1b:bc:de:b7:13:83:23

  Certificate

  Issuer

  CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  27/04/2018, 12:41

  Not After

  27/04/2028, 12:41

  Subject

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  0a:71:a1:b0:c2:96:f5:c7:90:65:47:0a:3c:20:53:7e

  Certificate

  Issuer

  CN=.NET Foundation Projects Code Signing CA,O=.NET Foundation,C=US

  Not Before

  25/10/2018, 00:00

  Not After

  29/10/2021, 12:00

  Subject

  SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=wa,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d

  Certificate

  Issuer

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  01/10/2019, 00:00

  Not After

  17/10/2030, 00:00

  Subject

  CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  07/01/2016, 12:00

  Not After

  07/01/2031, 12:00

  Subject

  CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Signer

  Actual PE Digest

  8c:10:56:8e:61:ed:4a:db:b2:78:fe:51:cd:63:62:ed:e4:18:e6:f9:b5:44:af:42:d1:80:41:52:2d:66:12:81

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  /_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 673KB - Virtual size: 673KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/Read ME.txt
• Checkers PACK/Checkers PACK/kracking artists/System.Collections.Immutable.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:c3:3b:b8:10:d6:ab:75:9c:84:00:00:00:00:00:c3

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:D236-37DA-9761,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:11

  Not After

  11/08/2018, 20:11

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:20

  Not After

  11/08/2018, 20:20

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3e:6a:78:e9:d4:27:08:fe:96:07:0a:5e:40:02:fe:24:72:b1:a0:6e:79:af:f5:75:65:a9:f9:c0:d9:db:ff:16

  Signer

  Actual PE Digest

  3e:6a:78:e9:d4:27:08:fe:96:07:0a:5e:40:02:fe:24:72:b1:a0:6e:79:af:f5:75:65:a9:f9:c0:d9:db:ff:16

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  73:90:24:98:5c:c9:b5:cc:e4:ff:d0:9e:73:a2:e6:f3:97:4f:9b:47

  Signer

  Actual PE Digest

  73:90:24:98:5c:c9:b5:cc:e4:ff:d0:9e:73:a2:e6:f3:97:4f:9b:47

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\A\_work\39\s\corefx\bin\obj\AnyOS.AnyCPU.Release\System.Collections.Immutable\netstandard\System.Collections.Immutable.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 160KB - Virtual size: 159KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 118KB - Virtual size: 118KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/System.Threading.Tasks.Dataflow.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:bc:0b:2e:1a:7b:8a:b1:c7:91:00:00:00:00:00:bc

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07/09/2016, 17:58

  Not After

  07/09/2018, 17:58

  Subject

  CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:12B4-2D5F-87D4,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:11

  Not After

  11/08/2018, 20:11

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31/08/2010, 22:19

  Not After

  31/08/2020, 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03/04/2007, 12:53

  Not After

  03/04/2021, 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  11/08/2017, 20:20

  Not After

  11/08/2018, 20:20

  Subject

  CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08/07/2011, 20:59

  Not After

  08/07/2026, 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  78:67:e3:a6:21:55:cd:f6:84:a6:68:8c:9f:e5:34:f1:d1:f0:f9:90:a7:5b:12:72:9b:75:f9:ac:ea:0a:c7:10

  Signer

  Actual PE Digest

  78:67:e3:a6:21:55:cd:f6:84:a6:68:8c:9f:e5:34:f1:d1:f0:f9:90:a7:5b:12:72:9b:75:f9:ac:ea:0a:c7:10

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  de:09:12:40:ec:17:9f:6a:9c:41:0b:15:a6:58:a8:5b:17:29:a5:0d

  Signer

  Actual PE Digest

  de:09:12:40:ec:17:9f:6a:9c:41:0b:15:a6:58:a8:5b:17:29:a5:0d

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  System.Threading.Tasks.Dataflow.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 151KB - Virtual size: 150KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/WThreads.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Deos\Desktop\WThreads\obj\Debug\WThreads.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 888B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/kracking artists/debug.log
• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Checker Account By X-KILLER.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 178KB - Virtual size: 177KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/ServXkiller.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 500KB - Virtual size: 500KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 152KB - Virtual size: 151KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Data/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/SkinSoft.VisualStyler - copia.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/SkinSoft.VisualStyler.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 961KB - Virtual size: 961KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Virus Total/desktop.ini
• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/Virus Total/scan.txt
• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/xNet - copia.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/runescape Checker Account By X-KILLER/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 114KB - Virtual size: 114KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/Guna.UI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db

  Certificate

  Issuer

  CN=Sobatdata Root CA

  Not Before

  23/10/2019, 05:22

  Not After

  22/10/2025, 17:00

  Subject

  CN=Sobatdata Software

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22/10/2014, 00:00

  Not After

  22/10/2024, 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2021, 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4

  Signer

  Actual PE Digest

  3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI\Guna.UI\bin\Release\build\.net 4.0\Guna.UI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/Guna.UI.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db

  Certificate

  Issuer

  CN=Sobatdata Root CA

  Not Before

  23/10/2019, 05:22

  Not After

  22/10/2025, 17:00

  Subject

  CN=Sobatdata Software

  03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66

  Certificate

  Issuer

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  22/10/2014, 00:00

  Not After

  22/10/2024, 00:00

  Subject

  CN=DigiCert Timestamp Responder,O=DigiCert,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b

  Certificate

  Issuer

  CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

  Not Before

  10/11/2006, 00:00

  Not After

  10/11/2021, 00:00

  Subject

  CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

  Extended Key Usages

  ExtKeyUsageServerAuth

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  ExtKeyUsageEmailProtection

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4

  Signer

  Actual PE Digest

  3f:f5:b3:24:9f:84:88:19:f3:b5:45:4a:64:72:1b:3d:3f:77:2d:b4

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\Ilham-PC\Documents\Visual Studio 2015\Projects\Guna.UI\Guna.UI\bin\Release\build\.net 4.0\Guna.UI.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/Ionic.Zip.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  c:\DotNetZip\Zip\obj\Debug\Ionic.Zip.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 478KB - Virtual size: 477KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/LICENCE.dat

  .zip
• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/Launcher.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 50KB - Virtual size: 50KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/ldm.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: - Virtual size: 249KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .vmp0

  Size: - Virtual size: 87KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .vmp1

  Size: 553KB - Virtual size: 553KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 179KB - Virtual size: 179KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/LIB/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\xNet-master\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 940B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/S4 Yahoo Checker.exe

  .exe windows:4 windows x86 arch:x86

  f34d5f2d4577ed6d9ceec516c1f5a744

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  PDB Paths

  C:\Users\thorson\Desktop\Launcher1\Launcher\Launcher\obj\Debug\LUNCHER CRACKING.pdb

  Imports

  mscoree

  _CorExeMain

  Sections

  .text

  Size: 11KB - Virtual size: 10KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 189KB - Virtual size: 189KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Checkers PACK/Checkers PACK/s4 Yahoo Checker/xNet.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  E:\xNet-master\obj\Release\xNet.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 99KB - Virtual size: 99KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 940B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ