X2 2021 2023 Official[.]zip

resource
unpack001/X2 2021 Official/GPPcScConnectionPlugin.dll
unpack001/X2 2021 Official/GlobalPlatform.dll
unpack001/X2 2021 Official/X2 2021.exe
unpack001/X2 2021 Official/X2 2023.exe
unpack001/X2 2021 Official/bins.dll
unpack001/X2 2021 Official/sqlite3.dll
unpack001/X2 2021 Official/zlib1.dll

X2 2021 2023 Official.zip

SHA256 09e3df6d0af19553c48a891bc78cfbf269f7ae13c9490abc975ce33f18699313
MD5 99a840453e609bbf175c3b694e04a19f
SHA1 4eda2014186b158710253e5a40ed8924f31fa406
SHA512 7ce0c499b7fed9ad7084c684300b38e3065bf47ac295115c8eaf24bf2f44cdc47f46f8b9be30ab8d239644e574b095f8601f8756d868076d63c6311a1c2da34c
SSDEEP 196608:lD7ZkLrDnSf8LmVYwcdBmvUb87DkeW/FfYFqaQe6OrslFux:FOrzE8LuYwL8bIkeW/FQqpqryFux
MD5 SHA1 SHA512 SSDEEP

X2 2021 Official/Bin.db

SHA256 7eb36b44697a52c3b987a62e0f9135e3b8c0e2a9224a6ab61bfcc3d1d4e26f1a
MD5 afd813046d7206ad230e0710ff162511
SHA1 282d1ebd765ddd1a46ac784540c2caca380c7a1c
SHA512 d844719be47b98a559dcf18732d6eb9af33a6c41e14d973133716f65e0ff187d78df076462c9f8567f3e35d37e720e3e8fba36f0cc515a1db015a6e0698292fa
SSDEEP 96:FS97AaSOEPyvpyvcRakB+z3aZOB2843U+I4mjuHRv843U+I4mjuHRs:67A3O96cRLgz3qH8p4mKHB8p4mKHK
MD5 SHA1 SHA512 SSDEEP

X2 2021 Official/GPPcScConnectionPlugin.dll

IMPHASH 51f482122a4539ad8067c7a3a24dcede
SHA256 789734bbab7b606e27fab43f4706250399108dba98e4428d1b95589db0a42ea2
MD5 d65463fc8a37261b6bf5afbc4139bdd5
SHA1 954076a2b56da1ff82eebe0c0c287110137f7cb1
SHA512 cd3673e1feb07dfc86a33d499cddf7f34368bcacbbe8207826b81f9a96d9ebc74e7455170e195ae316785b42dcc871f842dfa1d0949df9f77e8738b8906339b0
SSDEEP 192:udqzHW3G3Vxv3bV/4DaRWu1Fh8+5FseTqt1emjQjA11Tml3X+EqEvaKGZ:udqzHW3G3DvbV/4Daw27vtTqtQU1xm5D
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8828

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\2015PRJ\2015-03-16-smartCARD\JOB2\NEWJOB\WORK\GPPcScConnectionPlugin\Release\GPPcScConnectionPlugin.pdb

X2 2021 Official/GlobalPlatform.dll

IMPHASH ceff59b9ba519e82e18f92798bbffd55
SHA256 d516e641e63f4195c374ecedbee074c345af178d703fa0761c990141e056b992
MD5 4696b9fae32c96d487daa887d830261b
SHA1 e01f46ed39108d0fb7b57d7ec50fc688fbceb72b
SHA512 0b31bed9e8003ea915013d16561557d46e0ae6e7809d578e27f91dc346379cb47c3f2e50d815f3f49f8135eee5ca72693984eec428137eea2f77e581d1bfb7ac
SSDEEP 12288:tFmm3ESOWLzt9+5uxqUHudv3p6hUhJO4NdKVAZD53pqYK6oKs:Dx3ESM5uxqUHuJDhJO4n4AZ93pqYK6oJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

541209

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\2015PRJ\2015-03-16-smartCARD\JOB2\NEWJOB\WORK\GlobalPlatform-DLL\Release\GlobalPlatform.pdb

zlib1

inflateEnd inflate inflateInit2_ crc32

kernel32

GetLastError GetProcAddress LoadLibraryA FormatMessageA LocalFree WriteFile CloseHandle FreeLibrary GetModuleHandleA GetVersion GetFileType GetStdHandle MultiByteToWideChar GetTickCount QueryPerformanceCounter GetCurrentProcessId GlobalMemoryStatus FlushConsoleInputBuffer InterlockedExchange Sleep InterlockedCompareExchange TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCurrentThreadId GetSystemTimeAsFileTime

user32

MessageBoxA GetDesktopWindow GetProcessWindowStation GetUserObjectInformationW

advapi32

ReportEventA DeregisterEventSource RegisterEventSourceA

msvcr90

__clean_type_info_names_internal _unlock __dllonexit _lock _onexit _crt_debugger_hook _mbsnbcpy __iob_func fprintf free malloc _errno fopen fclose fputs fflush _snprintf vfprintf _localtime64 getenv _time64 realloc fread ferror fwrite ftell fseek memmove memset memcpy strchr strtoul sscanf wcsstr _vsnprintf _exit raise strncpy strerror _strnicmp isdigit isspace qsort strncmp _setmode _fileno feof fgets _wfopen _time32 strcmp isxdigit atoi tolower isupper _gmtime32 signal _getch sprintf strstr _encode_pointer _malloc_crt _encoded_null _decode_pointer _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _except_handler4_common

EMV_CPS11_derive_keys GP211_EMV_CPS11_derive_keys GP211_VISA1_derive_keys GP211_VISA2_derive_keys GP211_begin_R_MAC GP211_calculate_3des_DAP GP211_calculate_install_token GP211_calculate_load_file_data_block_hash GP211_calculate_load_token GP211_calculate_rsa_DAP GP211_delete_application GP211_delete_key GP211_end_R_MAC GP211_get_data GP211_get_data_iso7816_4 GP211_get_extradition_token_signature_data GP211_get_install_token_signature_data GP211_get_key_information_templates GP211_get_load_token_signature_data GP211_get_secure_channel_protocol_details GP211_get_sequence_counter GP211_get_status GP211_init_implicit_secure_channel GP211_install_for_extradition GP211_install_for_install GP211_install_for_install_and_make_selectable GP211_install_for_load GP211_install_for_make_selectable GP211_install_for_personalization GP211_load GP211_load_from_buffer GP211_mutual_authentication GP211_pin_change GP211_put_3des_key GP211_put_data GP211_put_delegated_management_keys GP211_put_rsa_key GP211_put_secure_channel_keys GP211_send_APDU GP211_set_status GP211_store_data GP211_validate_delete_receipt GP211_validate_install_receipt GP211_validate_load_receipt OP201_EMV_CPS11_derive_keys OP201_VISA1_derive_keys OP201_VISA2_derive_keys OP201_calculate_3des_DAP OP201_calculate_install_token OP201_calculate_load_file_DAP OP201_calculate_load_token OP201_calculate_rsa_DAP OP201_delete_application OP201_delete_key OP201_get_data OP201_get_install_token_signature_data OP201_get_key_information_templates OP201_get_load_token_signature_data OP201_get_status OP201_install_for_install OP201_install_for_install_and_make_selectable OP201_install_for_load OP201_install_for_make_selectable OP201_load OP201_load_from_buffer OP201_mutual_authentication OP201_pin_change OP201_put_3desKey OP201_put_data OP201_put_delegated_management_keys OP201_put_rsa_key OP201_put_secure_channel_keys OP201_send_APDU OP201_set_status OP201_validate_delete_receipt OP201_validate_install_receipt OP201_validate_load_receipt OPGP_cap_to_ijc OPGP_card_connect OPGP_card_disconnect OPGP_enable_trace_mode OPGP_establish_context OPGP_extract_cap_file OPGP_list_readers OPGP_log_End OPGP_log_Hex OPGP_log_Msg OPGP_log_Start OPGP_manage_channel OPGP_read_executable_load_file_parameters OPGP_read_executable_load_file_parameters_from_buffer OPGP_release_context OPGP_select_application OPGP_select_channel OPGP_send_APDU OPGP_stringify_error VISA1_derive_keys VISA2_derive_keys

X2 2021 Official/X2 2021.exe

IMPHASH d2eee834a4a96b94f8295740ae76cc8a
SHA256 fef1cad271e2f8aed0e557561577fe6f1ecdb4fbf16a810755d5a90c8f05cf02
MD5 066adbdf1d01db495d494aca5f72e41f
SHA1 6f98d9c4a0ae85023d4f77a50ed2fd4771e3a19f
SHA512 d3d8eb6c38d88781a4a1917cfc68ca012fd8484dd04e785a496516307769f41001d6488b0461fc020a3a4115283ebe6d8b059f2b8d4b82ff309d7e24eb1f19fe
SSDEEP 24576:cPkGgW8ugdGJYDLoL/vddOUmB5I4LjbrMChWVeTsAe+ZWWj80pYWoTIbjpCeT:/wxH1ah4UTtVZWWj8MTbjpl
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1056951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\dev\_current\smart card reader\NoProtect_bk\Src\X1\Release\X1.pdb

sqlite3

sqlite3_finalize sqlite3_column_double sqlite3_column_int sqlite3_column_text sqlite3_column_type sqlite3_column_count sqlite3_step sqlite3_exec sqlite3_changes sqlite3_prepare sqlite3_close sqlite3_open

globalplatform

OP201_get_status GP211_put_delegated_management_keys OP201_send_APDU GP211_send_APDU OPGP_enable_trace_mode OP201_put_delegated_management_keys GP211_put_secure_channel_keys GP211_VISA1_derive_keys GP211_VISA2_derive_keys GP211_EMV_CPS11_derive_keys OP201_put_secure_channel_keys OP201_VISA1_derive_keys OP201_VISA2_derive_keys OP201_EMV_CPS11_derive_keys OPGP_card_disconnect GP211_install_for_install_and_make_selectable OPGP_establish_context OP201_install_for_install_and_make_selectable GP211_install_for_load OP201_install_for_load OPGP_read_executable_load_file_parameters GP211_delete_key OP201_delete_key GP211_delete_application OP201_delete_application GP211_load OP201_load GP211_get_data OP201_get_data OPGP_select_application GP211_mutual_authentication GP211_get_secure_channel_protocol_details OP201_mutual_authentication OPGP_card_connect OPGP_list_readers OPGP_release_context GP211_get_status

mfc90

ord4434 ord9945 ord7746 ord12597 ord12145 ord13116 ord10284 ord10437 ord9952 ord13174 ord12384 ord1108 ord1137 ord6615 ord4431 ord2591 ord4113 ord6557 ord6787 ord5167 ord339 ord1145 ord2243 ord6584 ord3506 ord4029 ord4952 ord899 ord4477 ord5776 ord3141 ord5753 ord1555 ord6793 ord5520 ord663 ord6329 ord2590 ord1692 ord790 ord3654 ord3273 ord686 ord436 ord3579 ord5761 ord6802 ord2084 ord5852 ord6784 ord324 ord404 ord2458 ord2523 ord1568 ord6815 ord5528 ord780 ord579 ord3390 ord2209 ord664 ord405 ord305 ord3213 ord1611 ord5878 ord1607 ord1334 ord1321 ord1654 ord4502 ord6255 ord2904 ord6257 ord2899 ord2360 ord1938 ord615 ord3487 ord4640 ord1670 ord2277 ord4496 ord1604 ord2103 ord781 ord580 ord266 ord265 ord5615 ord4617 ord5152 ord5309 ord4993 ord2208 ord1810 ord1809 ord1678 ord3344 ord6388 ord1496 ord4650 ord5636 ord4668 ord3987 ord639 ord374 ord3783 ord2082 ord4223 ord2481 ord4481 ord4506 ord4507 ord4392 ord6153 ord4409 ord6154 ord1603 ord945 ord310 ord1339 ord1358 ord6527 ord6079 ord6170 ord6166 ord744 ord524 ord2069 ord4030 ord3534 ord2106 ord1183 ord3528 ord777 ord595 ord4667 ord4895 ord4334 ord2886 ord4057 ord4067 ord4066 ord3277 ord2759 ord2888 ord2769 ord3135 ord2961 ord4714 ord3107 ord2978 ord2766 ord5633 ord1728 ord2047 ord1792 ord2139 ord5608 ord1446 ord2368 ord2375 ord2625 ord2607 ord2605 ord2623 ord2635 ord2612 ord2628 ord2633 ord2616 ord2618 ord2620 ord2614 ord2630 ord2610 ord969 ord965 ord967 ord963 ord958 ord5666 ord5668 ord6446 ord1729 ord4688 ord5139 ord3732 ord5647 ord4589 ord6780 ord5497 ord6783 ord4159 ord6781 ord4733 ord1276 ord2206 ord6018 ord4165 ord1046 ord5533 ord6721 ord1644 ord4199 ord2087 ord3209 ord5657 ord5659 ord8432 ord4333 ord4981 ord5663 ord5646 ord6001 ord3110 ord2074 ord5585 ord4646 ord1497 ord4331 ord1752 ord1755 ord6391 ord3346 ord1720 ord2283 ord3920 ord300 ord2539 ord311 ord307 ord6791 ord1280 ord1247 ord5750 ord1219 ord820 ord1069 ord3856 ord817 ord1254 ord1258 ord316 ord3621 ord554 ord1252 ord1039 ord5869 ord601 ord798 ord758 ord800 ord4890 ord9252 ord6462 ord1098 ord4197 ord7312 ord6494 ord3218 ord6356 ord5389 ord3671 ord6782 ord4160 ord7118 ord5813 ord2251

msvcr90

memmove_s _setmode _open _close _unlink _write _read _controlfp_s _invoke_watson _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit _decode_pointer _onexit _lock _encode_pointer __dllonexit _unlock frexp modf strtok vfprintf isalpha vsprintf tmpnam _lseek abort strrchr isupper tmpfile strstr perror fgetc isspace _errno _getcwd strchr putc isdigit _stricmp _mktime64 _gmtime64 getenv __iob_func memcmp atan2 fabs sqrt log exp bsearch fprintf pow memmove strcpy strlen isprint _CIlog ceil rand qsort _CIexp ldiv _CIsin _CIfmod _CIcos realloc strncmp longjmp __CxxLongjmpUnwind _setjmp3 _swab _CxxThrowException _CIpow _strnicmp calloc strncpy _CIsqrt floor fopen __CxxFrameHandler3 fscanf fgets fputc feof fflush ftell fseek fwrite fread fclose _purecall memcpy memset memcpy_s _mbsncmp exit printf _mbscmp _snprintf _mbstok sscanf _mbsnbcpy _invalid_parameter_noinfo atoi sprintf ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??1exception@std@@UAE@XZ ??0exception@std@@QAE@XZ _itoa strtol atof malloc free _setmbcp

kernel32

SizeofResource LoadResource LockResource GetCurrentDirectoryA FindResourceA GetTickCount WideCharToMultiByte MultiByteToWideChar GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange lstrlenA ExitProcess ResumeThread WaitForSingleObject CloseHandle GlobalFree GlobalAlloc

user32

GetClientRect SendMessageA LoadIconA GetDlgItem GetSysColor GetDC ReleaseDC GetMenuItemID GetSubMenu GetMenuItemCount GetMenu DrawIcon GetSystemMetrics IsIconic AppendMenuA GetSystemMenu InvalidateRect CopyRect GetWindowPlacement EnableWindow

gdi32

SelectObject DeleteObject DeleteDC CreateDIBSection ExtTextOutA CreateCompatibleDC GetDIBits RealizePalette RestoreDC BitBlt SetDIBitsToDevice StretchDIBits SetStretchBltMode ExtSelectClipRgn CreateRectRgnIndirect GetClipBox SaveDC SetBkColor CreateCompatibleBitmap SetWinMetaFileBits GetDeviceCaps DeleteEnhMetaFile GetEnhMetaFileHeader SetEnhMetaFileBits PlayEnhMetaFile SelectPalette CreatePalette GetEnhMetaFilePaletteEntries CreateFontA

comctl32

InitCommonControlsEx

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

ws2_32

htonl ntohl ntohs htons

png_access_version_number png_benign_error png_build_grayscale_palette png_calloc png_chunk_benign_error png_chunk_error png_chunk_warning png_convert_from_struct_tm png_convert_from_time_t png_convert_to_rfc1123 png_create_info_struct png_create_read_struct png_create_read_struct_2 png_create_write_struct png_create_write_struct_2 png_data_freer png_destroy_info_struct png_destroy_read_struct png_destroy_write_struct png_error png_free png_free_data png_free_default png_get_IHDR png_get_PLTE png_get_bKGD png_get_bit_depth png_get_cHRM png_get_cHRM_fixed png_get_channels png_get_chunk_cache_max png_get_chunk_malloc_max png_get_color_type png_get_compression_buffer_size png_get_compression_type png_get_copyright png_get_error_ptr png_get_filter_type png_get_gAMA png_get_gAMA_fixed png_get_hIST png_get_header_ver png_get_header_version png_get_iCCP png_get_image_height png_get_image_width png_get_int_32 png_get_interlace_type png_get_io_chunk_name png_get_io_ptr png_get_io_state png_get_libpng_ver png_get_mem_ptr png_get_oFFs png_get_pCAL png_get_pHYs png_get_pHYs_dpi png_get_pixel_aspect_ratio png_get_pixel_aspect_ratio_fixed png_get_pixels_per_inch png_get_pixels_per_meter png_get_rgb_to_gray_status png_get_rowbytes png_get_rows png_get_sBIT png_get_sCAL png_get_sCAL_fixed png_get_sCAL_s png_get_sPLT png_get_sRGB png_get_signature png_get_tIME png_get_tRNS png_get_text png_get_uint_16 png_get_uint_31 png_get_uint_32 png_get_unknown_chunks png_get_user_chunk_ptr png_get_user_height_max png_get_user_transform_ptr png_get_user_width_max png_get_valid png_get_x_offset_inches png_get_x_offset_inches_fixed png_get_x_offset_microns png_get_x_offset_pixels png_get_x_pixels_per_inch png_get_x_pixels_per_meter png_get_y_offset_inches png_get_y_offset_inches_fixed png_get_y_offset_microns png_get_y_offset_pixels png_get_y_pixels_per_inch png_get_y_pixels_per_meter png_handle_as_unknown png_info_init_3 png_init_io png_longjmp png_malloc png_malloc_default png_malloc_warn png_permit_mng_features png_read_end png_read_image png_read_info png_read_png png_read_row png_read_rows png_read_update_info png_reset_zstream png_save_int_32 png_save_uint_16 png_save_uint_32 png_set_IHDR png_set_PLTE png_set_add_alpha png_set_bKGD png_set_background png_set_background_fixed png_set_benign_errors png_set_bgr png_set_cHRM png_set_cHRM_fixed png_set_chunk_cache_max png_set_chunk_malloc_max png_set_compression_buffer_size png_set_compression_level png_set_compression_mem_level png_set_compression_method png_set_compression_strategy png_set_compression_window_bits png_set_crc_action png_set_error_fn png_set_expand png_set_expand_gray_1_2_4_to_8 png_set_filler png_set_filter png_set_filter_heuristics png_set_filter_heuristics_fixed png_set_flush png_set_gAMA png_set_gAMA_fixed png_set_gamma png_set_gamma_fixed png_set_gray_to_rgb png_set_hIST png_set_iCCP png_set_interlace_handling png_set_invalid png_set_invert_alpha png_set_invert_mono png_set_keep_unknown_chunks png_set_longjmp_fn png_set_mem_fn png_set_oFFs png_set_pCAL png_set_pHYs png_set_packing png_set_packswap png_set_palette_to_rgb png_set_quantize png_set_read_fn png_set_read_status_fn png_set_read_user_chunk_fn png_set_read_user_transform_fn png_set_rgb_to_gray png_set_rgb_to_gray_fixed png_set_rows png_set_sBIT png_set_sCAL png_set_sCAL_fixed png_set_sCAL_s png_set_sPLT png_set_sRGB png_set_sRGB_gAMA_and_cHRM png_set_shift png_set_sig_bytes png_set_strip_16 png_set_strip_alpha png_set_swap png_set_swap_alpha png_set_tIME png_set_tRNS png_set_tRNS_to_alpha png_set_text png_set_unknown_chunk_location png_set_unknown_chunks png_set_user_limits png_set_user_transform_info png_set_write_fn png_set_write_status_fn png_set_write_user_transform_fn png_sig_cmp png_start_read_image png_warning png_write_chunk png_write_chunk_data png_write_chunk_end png_write_chunk_start png_write_end png_write_flush png_write_image png_write_info png_write_info_before_PLTE png_write_png png_write_row png_write_rows png_write_sig

X2 2021 Official/X2 2023.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 1824159e5e82f27b0280aeebbfef3a250feb042ce1c3889a375286652306ee0c
MD5 bda04573188c3d965039d728f00843fe
SHA1 8b3d7cf132b70f746a041e39e25a42213e5209ea
SHA512 ace7d9f93376983bcb67e2b12535ed4466996899eedc6a66c65e821671fde4e18cd4b6a3f6ea92e51696335c5d0d49d13c1722c8019a857bab900677156fb963
SSDEEP 49152:BLO9XHsGNg3ZxyYvPtLffgnAqo+oO698X/GvquT3Bb:Q/N8HLXtffEAqo+o6/GvP3B
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1699646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

X2 2021 Official/X2A.exp

SHA256 13a2deedc0fc750d4221332747dad7acb00ea0f02ad4c0361473fb3d82043bde
MD5 9658f4486df81e316b74ed4fd729aa44
SHA1 00d80790ee1878125e4af860a4065eb19324e9f5
SHA512 75414c247c671ba24f84ab9f7696f5d2313506c717e0b2678bd8d48da2ef84db5e31b1b407b1745fa9985cd4354ffcf3cc127c1fe728eba410c214dbca7361c7
SSDEEP 384:tYlSb221tQHJ4V4dz7Qdzph/HE+4iKf4OpLewnMTLSG:WsCJ4VukdDHe7ewMTeG
MD5 SHA1 SHA512 SSDEEP

X2 2021 Official/X2A.lib

SHA256 1600b8928cea94572789182e8a97f5bbf545dc1281b698f4ddcda8a98516070b
MD5 c96884a9fd7e6305a5f4972222aafd1a
SHA1 7421464c820a4f266497430959a6c7a90b64bf4a
SHA512 602d914caeb20fd4036ecfd32f5e51057bbbda3cfc16abbb9794c4524a6fea12af520dd26c03276f63851b8275d467c40b1a2447e9da0c4d3207156a6531ebd3
SSDEEP 384:+kGK8phCYQ1lhFNTX9WBUFwnMTLS6OtnL4P5/rlux4x2h:+kGK8mYYhFNTXsBswMTeTtnUP9lLEh
MD5 SHA1 SHA512 SSDEEP

X2 2021 Official/X2A.pdb

SHA256 c972c60aa8a1d500595312541efd544d378477428cd49f7ab2277460b7ea40bb
MD5 ee17c6d9c85a2e47e75ef25e3f574f5b
SHA1 d68c8efd824aa307170cd0b1ea806a9ff52bbdb2
SHA512 69ad02a25149654a1bb9e60de32ac252a2d3cb6f7866056e0137bb03a45d5bdf1afdd5c748fcc48d6f70ba93dbdfe2c97556d38f99df6bbeb3022578940d445a
SSDEEP 49152:+9awQE0nPazC1CMQg60647XZ1lD0fALKpLFuygh0D3ETvL80loR1EE9r6swpZB7d:KX3UoRmE9r6swt1b1jdR
MD5 SHA1 SHA512 SSDEEP

X2 2021 Official/bins.dll

IMPHASH eff288c73326a0f72de0d33711dd5d7d
SHA256 c0fd4a64f7e529f3b5e98b70c048e2a2009cba5ba03eb919eaef864000c416cc
MD5 7ab812d82b3baaf3cd337aa43e91acde
SHA1 cbb7f418139eada36eaa57d4f39dde11fc577108
SHA512 d40b019150ca06bf3eed54941f84675529db32d5654bc1ca69af838032552489d2d767372cf7bb18560bef297263a731e96bbaa9d0c9760f1b164f20200c5df7
SSDEEP 24576:0PkGgW8ugdGJYDLoL/vddOUmB5I4LjbrMChWVeTsAkYGipeT:XwxH1ah4UTtkYVw
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

1056951

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

g:\dev\_current\smart card reader\NoProtect_bk\Src\X1\Release\X1.pdb

sqlite3

sqlite3_finalize sqlite3_column_double sqlite3_column_int sqlite3_column_text sqlite3_column_type sqlite3_column_count sqlite3_step sqlite3_exec sqlite3_changes sqlite3_prepare sqlite3_close sqlite3_open

globalplatform

OP201_get_status GP211_put_delegated_management_keys OP201_send_APDU GP211_send_APDU OPGP_enable_trace_mode OP201_put_delegated_management_keys GP211_put_secure_channel_keys GP211_VISA1_derive_keys GP211_VISA2_derive_keys GP211_EMV_CPS11_derive_keys OP201_put_secure_channel_keys OP201_VISA1_derive_keys OP201_VISA2_derive_keys OP201_EMV_CPS11_derive_keys OPGP_card_disconnect GP211_install_for_install_and_make_selectable OPGP_establish_context OP201_install_for_install_and_make_selectable GP211_install_for_load OP201_install_for_load OPGP_read_executable_load_file_parameters GP211_delete_key OP201_delete_key GP211_delete_application OP201_delete_application GP211_load OP201_load GP211_get_data OP201_get_data OPGP_select_application GP211_mutual_authentication GP211_get_secure_channel_protocol_details OP201_mutual_authentication OPGP_card_connect OPGP_list_readers OPGP_release_context GP211_get_status

mfc90

ord4434 ord9945 ord7746 ord12597 ord12145 ord13116 ord10284 ord10437 ord9952 ord13174 ord12384 ord1108 ord1137 ord6615 ord4431 ord2591 ord4113 ord6557 ord6787 ord5167 ord339 ord1145 ord2243 ord6584 ord3506 ord4029 ord4952 ord899 ord4477 ord5776 ord3141 ord5753 ord1555 ord6793 ord5520 ord663 ord6329 ord2590 ord1692 ord790 ord3654 ord3273 ord686 ord436 ord3579 ord5761 ord6802 ord2084 ord5852 ord6784 ord324 ord404 ord2458 ord2523 ord1568 ord6815 ord5528 ord780 ord579 ord3390 ord2209 ord664 ord405 ord305 ord3213 ord1611 ord5878 ord1607 ord1334 ord1321 ord1654 ord4502 ord6255 ord2904 ord6257 ord2899 ord2360 ord1938 ord615 ord3487 ord4640 ord1670 ord2277 ord4496 ord1604 ord2103 ord781 ord580 ord266 ord265 ord5615 ord4617 ord5152 ord5309 ord4993 ord2208 ord1810 ord1809 ord1678 ord3344 ord6388 ord1496 ord4650 ord5636 ord4668 ord3987 ord639 ord374 ord3783 ord2082 ord4223 ord2481 ord4481 ord4506 ord4507 ord4392 ord6153 ord4409 ord6154 ord1603 ord945 ord310 ord1339 ord1358 ord6527 ord6079 ord6170 ord6166 ord744 ord524 ord2069 ord4030 ord3534 ord2106 ord1183 ord3528 ord777 ord595 ord4667 ord4895 ord4334 ord2886 ord4057 ord4067 ord4066 ord3277 ord2759 ord2888 ord2769 ord3135 ord2961 ord4714 ord3107 ord2978 ord2766 ord5633 ord1728 ord1791 ord1792 ord2139 ord5608 ord1446 ord2368 ord2375 ord2625 ord2607 ord2605 ord2623 ord2635 ord2612 ord2628 ord2633 ord2616 ord2618 ord2620 ord2614 ord2630 ord2610 ord969 ord965 ord967 ord963 ord958 ord5666 ord5668 ord6446 ord1729 ord4688 ord5139 ord3732 ord5647 ord4589 ord6780 ord5497 ord6783 ord4159 ord6781 ord4733 ord1276 ord2206 ord6018 ord4165 ord1046 ord5533 ord6721 ord1644 ord4199 ord2087 ord3209 ord5657 ord5659 ord8432 ord4333 ord4981 ord5663 ord5646 ord6001 ord3110 ord2074 ord5585 ord4646 ord1497 ord4331 ord1752 ord1755 ord6391 ord3346 ord1720 ord2283 ord3920 ord300 ord2539 ord311 ord307 ord6791 ord1280 ord1247 ord5750 ord1219 ord820 ord1069 ord3856 ord817 ord1254 ord1258 ord316 ord3621 ord554 ord1252 ord1039 ord5869 ord601 ord798 ord758 ord800 ord4890 ord9252 ord6462 ord1098 ord4197 ord7312 ord6494 ord3218 ord6356 ord5389 ord3671 ord6782 ord4160 ord7118 ord5813 ord2251

msvcr90

memmove_s _setmode _open _close _unlink _write _read _controlfp_s _invoke_watson _except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _configthreadlocale _initterm_e _initterm _acmdln _ismbblead _XcptFilter _exit _cexit __getmainargs _amsg_exit _decode_pointer _onexit _lock _encode_pointer __dllonexit _unlock frexp modf strtok vfprintf isalpha vsprintf tmpnam _lseek abort strrchr isupper tmpfile strstr perror fgetc isspace _errno _getcwd strchr putc isdigit _stricmp _mktime64 _gmtime64 getenv __iob_func memcmp atan2 fabs sqrt log exp bsearch fprintf pow memmove strcpy strlen isprint _CIlog ceil rand qsort _CIexp ldiv _CIsin _CIfmod _CIcos realloc strncmp longjmp __CxxLongjmpUnwind _setjmp3 _swab _CxxThrowException _CIpow _strnicmp calloc strncpy _CIsqrt floor fopen __CxxFrameHandler3 fscanf fgets fputc feof fflush ftell fseek fwrite fread fclose _purecall memcpy memset memcpy_s _mbsncmp exit printf _mbscmp _snprintf _mbstok sscanf _mbsnbcpy _invalid_parameter_noinfo atoi sprintf ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABV01@@Z ??1exception@std@@UAE@XZ ??0exception@std@@QAE@XZ _itoa strtol atof malloc free _setmbcp

kernel32

SizeofResource LoadResource LockResource GetCurrentDirectoryA FindResourceA GetTickCount WideCharToMultiByte MultiByteToWideChar GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoA InterlockedCompareExchange Sleep InterlockedExchange lstrlenA ExitProcess ResumeThread WaitForSingleObject CloseHandle GlobalFree GlobalAlloc

user32

GetClientRect SendMessageA LoadIconA GetDlgItem GetSysColor GetDC ReleaseDC GetMenuItemID GetSubMenu GetMenuItemCount GetMenu DrawIcon GetSystemMetrics IsIconic AppendMenuA GetSystemMenu InvalidateRect CopyRect GetWindowPlacement EnableWindow

gdi32

SelectObject DeleteObject DeleteDC CreateDIBSection ExtTextOutA CreateCompatibleDC GetDIBits RealizePalette RestoreDC BitBlt SetDIBitsToDevice StretchDIBits SetStretchBltMode ExtSelectClipRgn CreateRectRgnIndirect GetClipBox SaveDC SetBkColor CreateCompatibleBitmap SetWinMetaFileBits GetDeviceCaps DeleteEnhMetaFile GetEnhMetaFileHeader SetEnhMetaFileBits PlayEnhMetaFile SelectPalette CreatePalette GetEnhMetaFilePaletteEntries CreateFontA

comctl32

InitCommonControlsEx

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z

ws2_32

htonl ntohl ntohs htons

png_access_version_number png_benign_error png_build_grayscale_palette png_calloc png_chunk_benign_error png_chunk_error png_chunk_warning png_convert_from_struct_tm png_convert_from_time_t png_convert_to_rfc1123 png_create_info_struct png_create_read_struct png_create_read_struct_2 png_create_write_struct png_create_write_struct_2 png_data_freer png_destroy_info_struct png_destroy_read_struct png_destroy_write_struct png_error png_free png_free_data png_free_default png_get_IHDR png_get_PLTE png_get_bKGD png_get_bit_depth png_get_cHRM png_get_cHRM_fixed png_get_channels png_get_chunk_cache_max png_get_chunk_malloc_max png_get_color_type png_get_compression_buffer_size png_get_compression_type png_get_copyright png_get_error_ptr png_get_filter_type png_get_gAMA png_get_gAMA_fixed png_get_hIST png_get_header_ver png_get_header_version png_get_iCCP png_get_image_height png_get_image_width png_get_int_32 png_get_interlace_type png_get_io_chunk_name png_get_io_ptr png_get_io_state png_get_libpng_ver png_get_mem_ptr png_get_oFFs png_get_pCAL png_get_pHYs png_get_pHYs_dpi png_get_pixel_aspect_ratio png_get_pixel_aspect_ratio_fixed png_get_pixels_per_inch png_get_pixels_per_meter png_get_rgb_to_gray_status png_get_rowbytes png_get_rows png_get_sBIT png_get_sCAL png_get_sCAL_fixed png_get_sCAL_s png_get_sPLT png_get_sRGB png_get_signature png_get_tIME png_get_tRNS png_get_text png_get_uint_16 png_get_uint_31 png_get_uint_32 png_get_unknown_chunks png_get_user_chunk_ptr png_get_user_height_max png_get_user_transform_ptr png_get_user_width_max png_get_valid png_get_x_offset_inches png_get_x_offset_inches_fixed png_get_x_offset_microns png_get_x_offset_pixels png_get_x_pixels_per_inch png_get_x_pixels_per_meter png_get_y_offset_inches png_get_y_offset_inches_fixed png_get_y_offset_microns png_get_y_offset_pixels png_get_y_pixels_per_inch png_get_y_pixels_per_meter png_handle_as_unknown png_info_init_3 png_init_io png_longjmp png_malloc png_malloc_default png_malloc_warn png_permit_mng_features png_read_end png_read_image png_read_info png_read_png png_read_row png_read_rows png_read_update_info png_reset_zstream png_save_int_32 png_save_uint_16 png_save_uint_32 png_set_IHDR png_set_PLTE png_set_add_alpha png_set_bKGD png_set_background png_set_background_fixed png_set_benign_errors png_set_bgr png_set_cHRM png_set_cHRM_fixed png_set_chunk_cache_max png_set_chunk_malloc_max png_set_compression_buffer_size png_set_compression_level png_set_compression_mem_level png_set_compression_method png_set_compression_strategy png_set_compression_window_bits png_set_crc_action png_set_error_fn png_set_expand png_set_expand_gray_1_2_4_to_8 png_set_filler png_set_filter png_set_filter_heuristics png_set_filter_heuristics_fixed png_set_flush png_set_gAMA png_set_gAMA_fixed png_set_gamma png_set_gamma_fixed png_set_gray_to_rgb png_set_hIST png_set_iCCP png_set_interlace_handling png_set_invalid png_set_invert_alpha png_set_invert_mono png_set_keep_unknown_chunks png_set_longjmp_fn png_set_mem_fn png_set_oFFs png_set_pCAL png_set_pHYs png_set_packing png_set_packswap png_set_palette_to_rgb png_set_quantize png_set_read_fn png_set_read_status_fn png_set_read_user_chunk_fn png_set_read_user_transform_fn png_set_rgb_to_gray png_set_rgb_to_gray_fixed png_set_rows png_set_sBIT png_set_sCAL png_set_sCAL_fixed png_set_sCAL_s png_set_sPLT png_set_sRGB png_set_sRGB_gAMA_and_cHRM png_set_shift png_set_sig_bytes png_set_strip_16 png_set_strip_alpha png_set_swap png_set_swap_alpha png_set_tIME png_set_tRNS png_set_tRNS_to_alpha png_set_text png_set_unknown_chunk_location png_set_unknown_chunks png_set_user_limits png_set_user_transform_info png_set_write_fn png_set_write_status_fn png_set_write_user_transform_fn png_sig_cmp png_start_read_image png_warning png_write_chunk png_write_chunk_data png_write_chunk_end png_write_chunk_start png_write_end png_write_flush png_write_image png_write_info png_write_info_before_PLTE png_write_png png_write_row png_write_rows png_write_sig

X2 2021 Official/cardtemp.dat

SHA256 df3f619804a92fdb4057192dc43dd748ea778adc52bc498ce80524c014b81119
MD5 f1d3ff8443297732862df21dc4e57262
SHA1 9069ca78e7450a285173431b3e52c5c25299e473
SHA512 ec2d57691d9b2d40182ac565032054b7d784ba96b18bcb5be0bb4e70e3fb041eff582c8af66ee50256539f2181d7f9e53627c0189da7e75a4d5ef10ea93b20b3
MD5 SHA1 SHA512

X2 2021 Official/mac.dat

SHA256 9dc70002e82c78ee34c813597925c6cf8aa8d68b7e9ce5bcc70ea9bcab9dbf4a
MD5 3709e18b229e3db113bf5c7863c59db4
SHA1 bf9a55575d2426852ef2e9a71c23a85391ec4d8a
SHA512 2dd2a6fefb773d737470eae54639dd3440eb7bc10848489596d4b4a3e3d46eb0cbe7620ebb611311bf3375369afa12265c4383c90235915fa141a64f55ab408d
MD5 SHA1 SHA512

src/MacGyver/javacard/Applet.cap

SHA256 465fe0f3ea96782336b5e80cfa9368f5a6ead97f8cdf47f125ae1253a7e723ec
MD5 26ee42ebe16ae2128c11c1e9c4b040c3
SHA1 2e381bb94ebd27edbebad87204efbc2e32bb0bb5
SHA512 a3e3eb89d9c90c3c955afae5edb8d2ea3f48cb91643bdb1e7419ac9011d09b01e60e5dd0fa0e3eda93686f079d0331238f334fd82849e1a137038333e8dccbb3
MD5 SHA1 SHA512

src/MacGyver/javacard/Class.cap

SHA256 918791c1d137ac7932468ce1db56f23a70132cde61f0187b05086e01dfff023a
MD5 e04a16f21532c22e60ad9b8ccba81c17
SHA1 add2e3d6c04eec1860219c5b8ee29d93b38bce8e
SHA512 5653f9033464c3799b58f1e875c4d94421654af73fc7848d9cf44483e5099d375636dcfb303c88155ce403498c17630847aa1ca332907f6c6bf6da53cbd13403
MD5 SHA1 SHA512

src/MacGyver/javacard/ConstantPool.cap

SHA256 7f715383ee8d8524f9a7456c9eb36768dd5876f69d8cc6444917326d36ed385c
MD5 ecf342b1da7254701b7edd654b7ca4a4
SHA1 035feee8711e1b1469533a80492d89e3ba4b05ea
SHA512 7f92bfdff209b35d54025b14bd4da3439c020d0c85b0ed3bcca6a5d17bd5535f1fc11ac924c26db263e3b1e77822d3652e9bc5739d456ec8e654046b952d76af
MD5 SHA1 SHA512

src/MacGyver/javacard/Descriptor.cap

SHA256 feae77f6acfb383e83a2eea87a7417f3806833874dc6a640fe2e3cb5d79622c2
MD5 8e998ed874481cc782e38d8d5e232aa4
SHA1 7ce7b9d768e6155c763dcc6740c836c12bad9996
SHA512 43fd1ed6d77cf511c70ca6b6465932d2996368765bbcfa203b820c194b5432a132884a9a2b055165da13a2e453af7ea661ef12ec333e6f08a8f5972c27e7f57e
MD5 SHA1 SHA512

src/MacGyver/javacard/Directory.cap

SHA256 68731914b1a63b8185335660b95688f4be9a84e4c77417ca6d94f2652725f2d7
MD5 178e488e888513619f6cf65a7d71488a
SHA1 187608042b350b3faa88578ea4eb720063b69b6a
SHA512 2166a947d8559ce3a370ec4006633422e934d8c51e416353226f24a8cbd82673270258f310b705b7be3f77f3cacc393e620233a5ca98c3358ca5a60f0003b347
MD5 SHA1 SHA512

src/MacGyver/javacard/Header.cap

SHA256 5c780c64f538d792482d0b7355dbaceec9a1b8d294f5d37ece4f0c37ab55fcd0
MD5 faabfda1fcb46f4b88e10c035bf0cd02
SHA1 32c3cde5f7306a6cd90b5ac3ec520babb53ff969
SHA512 c8b8765b8d2261dcffa3f38a42362b8d37001815d1c5edc5b85ef4dda0bf77de4972f25c99fb004a77a8139f030b137395fe24752331d53886af7063bfd30c27
MD5 SHA1 SHA512

src/MacGyver/javacard/Import.cap

SHA256 20cb32cbf18db8c536b22f1904f0a6d99336dde9610fd8d67a53bb3056110c5f
MD5 c94bf06ea875135f6422b9c34a3b708c
SHA1 6eb3062ac5703b2f7531ed478eeee82d5e167f13
SHA512 2e971887ddc0c7a809801ca26d25d6eb6df652aebca5611b40c8d8dcb2925fa597b922f25de620795420175c34c33d5f9b50eab43a57a484b4a45484de2c4d99
MD5 SHA1 SHA512

src/MacGyver/javacard/Method.cap

SHA256 d7d1def3fff0d5ac262510f23b839ab017bf8757a88e4b08533d4b84f056c420
MD5 2428a629ab3417a26f6bbaff38a68382
SHA1 d6625f21a46e1fa01d8e2d9b4cba3384bc9a48ec
SHA512 307863223b92d6ef54220341f55e81113da40a47f5a5ec8fd2bdb4f1b59a537ab3f86133e3c95f56fa5bc8aa240f7d910debaa9048c17051181b5aac481761fb
MD5 SHA1 SHA512

src/MacGyver/javacard/RefLocation.cap

SHA256 8f2e4a30e30cab4c45a2b6de9a0bf99a93f34cca1ec227fc7f5742b4368f1f7c
MD5 4114aa211cfffe16197787f8cd75fd92
SHA1 942a33fa11cd5e9c69b95ae8e8f8f8186157eab2
SHA512 dfb00780e6445af52962f1f1a44e8cbd06d4803db3cd1393084957707a1f3252c417dd2472fd2e0743b58d09cb0a957a8c6336ddd472d9857c458c0114cc5be4
MD5 SHA1 SHA512

src/MacGyver/javacard/StaticField.cap

SHA256 eff8a13a0ac0b9c875a045564b5fc5a0041f9db90bc3dad3488ff81713b834f2
MD5 72d66147fa090027cf9bd67bc4c16fbf
SHA1 d1c5974eb53d48347fdc21fa02a6f10b3c906750
SHA512 23a994389fce3871e150e195c6f1384467f1a9ccbf176d9a04e296d256739ae9ebeb9a241b4d710301c35ce3f3f16734d384806959affb58ad6802dfdea73bbe
MD5 SHA1 SHA512

X2 2021 Official/mac2.dat

SHA256 e82114e55c2eaec534ed78f59258aae46da1e343476bdc4ea236ca5fa1e4047a
MD5 cbf974e9db892e5105c2ad1d4013b1dd
SHA1 479af013b15356b40089a0e9e632536dae25a562
SHA512 db392596f02e80ff60291577eaa06461cf3afd1d047c8ef921cf3f7fe4b399dd3d6d87ba259a00c877d4a8d0a6ac081103b61c9e7a342e0c0d8e516de2127cb7
SSDEEP 384:zqURbN0nSpg4S6GWUXe1gXkHpY7vU+ViFUDiYOoizB:zq4OIP/7ukHpY7v/ViFgiYbit
MD5 SHA1 SHA512 SSDEEP

main/javacard/Applet.cap

SHA256 e382b4373e616111fd4373d23b3e69d0c772e723e31af9d8de387a9af0156c4b
MD5 b76a6a0bbdb2a96a341ca748e08bd14a
SHA1 5b9ec45322932b0110c6f02c76ec5fc54556c8cc
SHA512 ec3c9609ed4e76ec2e43bcce399989594cb890ea074be416a417e95bf96bb8fa9e33e4e0951a2931971e9e2be765c37f38bf9f47ff7470ccda1ebccda79dd5da
MD5 SHA1 SHA512

main/javacard/Class.cap

SHA256 03579e4edb194dc93193ba80530a14333fe8f506fca77af8fc6e8782e910aa0a
MD5 75224b661cb3864ef9c75893e2d38901
SHA1 ed6f1ef5bbe4dc6d78c52e73fea57b209c339c8c
SHA512 69b70ec1d0303ff6e176f6e23f8a99b1e909364f687dbb1afdace59ce12034ded2f263ce13774eab6480b36909e0b051c3c9e67310c1acaa0db1a5d19e79cf7b
MD5 SHA1 SHA512

main/javacard/ConstantPool.cap

SHA256 ad26a917ec530dae9b7c326f2cc70d5819b17ffc8f6a2519fb75ebf859839d65
MD5 4b30758328c5820daacbd50535093ec3
SHA1 8a19750e6835bf1f003baa8ee485ded90bd07611
SHA512 0c0d8fc5e6dd5f6879952b05a0832e08e12835574d70053f7530cebe9f2fcdcf647d4f2ffdea7b04848fda9118f4afe792d3bfd5b2fabba67b570d9fc2a4c3fc
MD5 SHA1 SHA512

main/javacard/Debug.cap

SHA256 835266a3df20a664485050c3f44356b6dee80ad22f53e3c9dce7c601fdab53e2
MD5 bb2769ed81f1a8168e10287135c90ab0
SHA1 a3d44ccf7c3a7812a08591a7534a6aa2af7773f0
SHA512 ace74a52f001eaf67d71ecc3a0fb874a7ff0c4912e9f05a992e7377b50c9d151eb09198cedd5633e709b09250e120a51bec52523b87fcc91777d0cac11693df9
SSDEEP 192:FlwuzYx2yeXe1eDv3PPfMHpEQxjIisvLIDCUUViFXHEl1iYOoU:pWUXe1gXkHpY7vU+ViFUDiYOoU
MD5 SHA1 SHA512 SSDEEP

main/javacard/Descriptor.cap

SHA256 338af72d6d0d083c787a2fd6b84f9a08f7ac8ae53f523abdeceadda74c6fe71e
MD5 6be31996302f1d5e4dd5d7122d9da06b
SHA1 e4fa5772939b661ff4d40e825663dd20fbd0ef9f
SHA512 96dfd5c97031a5150188273f54391ff9728992946577de75b75fc163749c93531965a283a5c07b47e2257e4b378e2c848d358c99dde46ab4093db4f2a7d5dd54
MD5 SHA1 SHA512

main/javacard/Directory.cap

SHA256 693a4c4a0f1425bcb52898b4158d2ff5225705bc4a5112782d35b912bdb39b8f
MD5 3eb2021618ad22bffc92b14bf303b930
SHA1 aec53d4f757eb26eb074205c03c0984f5915f6d3
SHA512 1e47d4553ed444ebaf02ba1b4d0daedbdac18ea78ce96a6c837e084f35aaab836729ecac25488bdfa399317f2b269f908c84bcc2b13279e72730b8da4aaa7234
MD5 SHA1 SHA512

main/javacard/Header.cap

SHA256 e543149dc46ba4416d27ecdcb3ce0180209808b0c52e1897b33dbee8fb722f88
MD5 572236c8725992c9633236613823aa57
SHA1 d99daec13b82496794af5ae687c96259a778f443
SHA512 2cdb2ab776f50a65da457454c9ce6b64167506615fd918e4c85dc60bd26d20b21ec2e371d6c2f82e7802e5b09990cf4ef6114cf3f480cbb700559bb27ae70671
MD5 SHA1 SHA512

main/javacard/Import.cap

SHA256 a879aa874be523a18c804bdad005245cd6c1dba8fee9c8de45b4a32dab8e7ca7
MD5 e612e192f72f149fcf48ddc59e6d21e7
SHA1 c0bbee57e175ee630c85737451216ac721040150
SHA512 9ab9c80f7b63b80f0e5a9d70f446622d042b57a4c0f5980485c9bfa503fe8ad2aca45b4f23ada78252adab45699b520843ccaaafbec570020f1714471e84487d
MD5 SHA1 SHA512

main/javacard/Method.cap

SHA256 fdfcb40c9b940bca41ecabb65793f702f8beda9633f20baffc5e185241fbe295
MD5 4b8f053a07d7d8a5aac3d1a9d438010a
SHA1 7b4a22b5c4c6569824124dd807ce7a641613021b
SHA512 5426d2a399b4e0e588b0a64c4adcd2b0e8b532d868d0cda3ace9dd5f14fd9c9198fb945c8b88e8db97ff19fc4788ff1a8105b49c4e5f646fb9bd6ebdb2590814
MD5 SHA1 SHA512

main/javacard/RefLocation.cap

SHA256 ae431cc8fb7f8acb9687831d6214b4a5ace652ef1cf5688c684c484b56be66c6
MD5 41ff2d5194cda40f07467a0e6b2adbec
SHA1 4691aa0d87e002e160de545adcb2d01225f51383
SHA512 20980447ffebbed7d99e2f4d21320db9f39311c35e394acd6979fb15bacd43b787fab8c1d6a377ca3c6ab1ddb9b2159c3dfb48a8c055c9863aa5662bf9f7ed1a
MD5 SHA1 SHA512

main/javacard/StaticField.cap

SHA256 bb388bb2c7579e8cac9c010ba620263a21f0efea3f69ed2695cfbf82b3762ab2
MD5 6e7962ef02c372c1e11d16226e551360
SHA1 9827e0747f0ef140f60f5dca2ddd6625a5f51833
SHA512 9d5ae9098bf0de9fe6461d6c77dc01a25a6789048d986b5cd5620a0b2586a21b6a858382db88d898fbd06cbfd67979d60eb9e1e1c9c2a2bc67f9b605b79075fc
MD5 SHA1 SHA512

X2 2021 Official/sqlite3.dll

IMPHASH 12baaaec299bc9ff52d20c16e4d0e96a
SHA256 b645921e5d6ef89a1899d5cde3f3a54caec9280416290922c9d3638d3ecf49ab
MD5 2db34c7d07707168429b0b2633ff75c0
SHA1 0b29505703900208db71e8d8ae0e675fac2c4d57
SHA512 fda845b49ca94f7f2e6ca1b52819385adc46000b8cc7f7f58ca9811bbdb4e8afc3954a41a0050c4f5a44f82dc6d9c41dce38f12e81c254ce2088b139f7750d84
SSDEEP 12288:KdqTscFyl44oV1p7q5QyDYrUb+eGbOTV7KFnAzcR:KJl44Sz7iQbrPdOTJzcR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

AreFileApisANSI CloseHandle CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateMutexW DeleteCriticalSection DeleteFileA DeleteFileW EnterCriticalSection FlushFileBuffers FormatMessageA FormatMessageW FreeLibrary GetCurrentProcessId GetDiskFreeSpaceA GetDiskFreeSpaceW GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileSize GetFullPathNameA GetFullPathNameW GetLastError GetModuleHandleA GetProcAddress GetProcessHeap GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTempPathW GetTickCount GetVersionExA GetVersionExW HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InterlockedCompareExchange LeaveCriticalSection LoadLibraryA LoadLibraryW LocalFree LockFile LockFileEx MapViewOfFile MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter ReadFile SetEndOfFile SetFilePointer Sleep SystemTimeToFileTime TlsGetValue UnlockFile UnlockFileEx UnmapViewOfFile VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

__dllonexit _errno _iob _winmajor abort calloc fflush free fwrite localtime malloc memcmp memmove memset qsort realloc strcmp strncmp vfprintf

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_database_name sqlite3_column_database_name16 sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_origin_name sqlite3_column_origin_name16 sqlite3_column_table_name sqlite3_column_table_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_data_count sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_errstr sqlite3_exec sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_finalize sqlite3_free sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_initialize sqlite3_interrupt sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare_v2 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_value sqlite3_result_zeroblob sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_step sqlite3_stmt_busy sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_strglob sqlite3_stricmp sqlite3_strnicmp sqlite3_table_column_metadata sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_trace sqlite3_transfer_bindings sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_int sqlite3_value_int64 sqlite3_value_numeric_type sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_config sqlite3_vtab_on_conflict sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_mbcs_to_utf8 sqlite3_win32_set_directory sqlite3_win32_sleep sqlite3_win32_utf8_to_mbcs sqlite3_win32_write_debug

Name

.text

Size

434KB

Virtual Size

434KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

352B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

1024B

Virtual Size

968B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/35

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/51

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/63

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/77

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/89

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/102

Size

512B

Virtual Size

269B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/124

Size

512B

Virtual Size

432B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

X2 2021 Official/zlib1.dll

IMPHASH fd348b107c9a12537c4d666dc366ec5f
SHA256 42967a768f341d9ce5174eb38a4d63754c3c41739e7d88f4e39cd7354c1fac71
MD5 b8a9e91134e7c89440a0f95470d5e47b
SHA1 3cbcee30fc0a7e9807931bc0dafceb627042bfc9
SHA512 e8583ea94b9d1321889359317e367abc88e90e96d0d9243258244a527ffa2b13ab97d0787693ca328960ceb934ea11eefd14abafd640a654473c26e420d2ec54
SSDEEP 3072:Y15jVjUqf9CtXH/4UghkGTBfmJyqLEC9BRY:Yf81wpTB+Jyqb
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5184

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

900B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

X2 2021 2023 Official.zip

X2 2021 Official/Bin.db

X2 2021 Official/GPPcScConnectionPlugin.dll

globalplatform

winscard

msvcr90

kernel32

generic

X2 2021 Official/GlobalPlatform.dll

zlib1

kernel32

user32

advapi32

msvcr90

generic

X2 2021 Official/X2 2021.exe

sqlite3

globalplatform

mfc90

msvcr90

kernel32

user32

gdi32

comctl32

msvcp90

ws2_32

generic

X2 2021 Official/X2 2023.exe

mscoree

dotnet

X2 2021 Official/X2A.exp

X2 2021 Official/X2A.lib

X2 2021 Official/X2A.pdb

X2 2021 Official/bins.dll

sqlite3

globalplatform

mfc90

msvcr90

kernel32

user32

gdi32

comctl32

msvcp90

ws2_32

generic

X2 2021 Official/cardtemp.dat

X2 2021 Official/mac.dat

src/MacGyver/javacard/Applet.cap

src/MacGyver/javacard/Class.cap

src/MacGyver/javacard/ConstantPool.cap

src/MacGyver/javacard/Descriptor.cap

src/MacGyver/javacard/Directory.cap

src/MacGyver/javacard/Header.cap

src/MacGyver/javacard/Import.cap

src/MacGyver/javacard/Method.cap

src/MacGyver/javacard/RefLocation.cap

src/MacGyver/javacard/StaticField.cap

X2 2021 Official/mac2.dat

main/javacard/Applet.cap

main/javacard/Class.cap

main/javacard/ConstantPool.cap

main/javacard/Debug.cap

main/javacard/Descriptor.cap

main/javacard/Directory.cap

main/javacard/Header.cap

main/javacard/Import.cap

main/javacard/Method.cap

main/javacard/RefLocation.cap

main/javacard/StaticField.cap

X2 2021 Official/sqlite3.dll

kernel32

msvcrt

generic

X2 2021 Official/zlib1.dll

kernel32