General

Malware Config

Signatures

Files

• 750c447d6e3c7d74ccab736a0082ef437b1cd2000d761d3aff2b73227457b29c

  .exe windows:4 windows x86 arch:x86

  ced282d9b261d1462772017fe2f6972b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegCreateKeyExA

  RegEnumKeyA

  RegQueryValueExA

  RegSetValueExA

  RegCloseKey

  RegDeleteValueA

  RegDeleteKeyA

  AdjustTokenPrivileges

  LookupPrivilegeValueA

  OpenProcessToken

  SetFileSecurityA

  RegOpenKeyExA

  RegEnumValueA

  shell32

  SHGetFileInfoA

  SHFileOperationA

  SHGetPathFromIDListA

  ShellExecuteExA

  SHGetSpecialFolderLocation

  SHBrowseForFolderA

  ole32

  IIDFromString

  OleInitialize

  OleUninitialize

  CoCreateInstance

  CoTaskMemFree

  comctl32

  ord17

  ImageList_Create

  ImageList_Destroy

  ImageList_AddMasked

  user32

  SetClipboardData

  CharPrevA

  CallWindowProcA

  PeekMessageA

  DispatchMessageA

  MessageBoxIndirectA

  GetDlgItemTextA

  SetDlgItemTextA

  GetSystemMetrics

  CreatePopupMenu

  AppendMenuA

  TrackPopupMenu

  FillRect

  EmptyClipboard

  LoadCursorA

  GetMessagePos

  CheckDlgButton

  GetSysColor

  SetCursor

  GetWindowLongA

  SetClassLongA

  SetWindowPos

  IsWindowEnabled

  GetWindowRect

  GetSystemMenu

  EnableMenuItem

  RegisterClassA

  ScreenToClient

  EndDialog

  GetClassInfoA

  SystemParametersInfoA

  CreateWindowExA

  ExitWindowsEx

  DialogBoxParamA

  CharNextA

  SetTimer

  DestroyWindow

  CreateDialogParamA

  SetForegroundWindow

  SetWindowTextA

  PostQuitMessage

  SendMessageTimeoutA

  ShowWindow

  wsprintfA

  GetDlgItem

  FindWindowExA

  IsWindow

  GetDC

  SetWindowLongA

  LoadImageA

  InvalidateRect

  ReleaseDC

  EnableWindow

  BeginPaint

  SendMessageA

  DefWindowProcA

  DrawTextA

  GetClientRect

  EndPaint

  IsWindowVisible

  CloseClipboard

  OpenClipboard

  gdi32

  SetBkMode

  SetBkColor

  GetDeviceCaps

  CreateFontIndirectA

  CreateBrushIndirect

  DeleteObject

  SetTextColor

  SelectObject

  kernel32

  GetExitCodeProcess

  WaitForSingleObject

  GetProcAddress

  GetSystemDirectoryA

  WideCharToMultiByte

  MoveFileExA

  ReadFile

  GetTempFileNameA

  WriteFile

  RemoveDirectoryA

  CreateProcessA

  CreateFileA

  GetLastError

  CreateThread

  CreateDirectoryA

  GlobalUnlock

  GetDiskFreeSpaceA

  GlobalLock

  SetErrorMode

  GetVersion

  lstrcpynA

  GetCommandLineA

  GetTempPathA

  lstrlenA

  SetEnvironmentVariableA

  ExitProcess

  GetWindowsDirectoryA

  GetCurrentProcess

  GetModuleFileNameA

  CopyFileA

  GetTickCount

  Sleep

  GetFileSize

  GetFileAttributesA

  SetCurrentDirectoryA

  SetFileAttributesA

  GetFullPathNameA

  GetShortPathNameA

  MoveFileA

  CompareFileTime

  SetFileTime

  SearchPathA

  lstrcmpiA

  lstrcmpA

  CloseHandle

  GlobalFree

  GlobalAlloc

  ExpandEnvironmentStringsA

  LoadLibraryExA

  FreeLibrary

  lstrcpyA

  lstrcatA

  FindClose

  MultiByteToWideChar

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  SetFilePointer

  GetModuleHandleA

  FindNextFileA

  FindFirstFileA

  DeleteFileA

  MulDiv

  Sections

  .text

  Size: 25KB - Virtual size: 25KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1KB - Virtual size: 149KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .ndata

  Size: - Virtual size: 32KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 171KB - Virtual size: 170KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

• Assets/Square70x70Logo.png

  .png
• Assets/ac150x150Logo.png

  .png
• Assets/ac70x70Logo.png

  .png
• Assets/aimp150x150Logo.png

  .png
• Assets/ate150x150Logo.png

  .png
• Assets/ate70x70Logo.png

  .png
• AudioManagementConsole.exe

  .exe windows:6 windows x86 arch:x86

  b00c267fb24a9dcfbab1955c328d9e0c

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  PDB Paths

  D:\winx64-packages\vc15\release\Release_TS\Release_TS\Releas.pdb

  Imports

  kernel32

  ExitProcess

  GetProcAddress

  GetWindowsDirectoryW

  LoadLibraryA

  GetModuleFileNameA

  GetExitCodeThread

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  GetStartupInfoW

  GetModuleHandleW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  MultiByteToWideChar

  WideCharToMultiByte

  GetLastError

  FreeLibrary

  LoadLibraryExA

  LocalFree

  FormatMessageA

  WerRegisterFile

  RtlUnwind

  RaiseException

  SetLastError

  EncodePointer

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSectionAndSpinCount

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  CloseHandle

  CreateThread

  ExitThread

  FreeLibraryAndExitThread

  GetModuleHandleExW

  ReadFile

  GetModuleFileNameW

  GetStdHandle

  WriteFile

  DeleteFileW

  FindClose

  FindFirstFileExW

  FindNextFileW

  SystemTimeToTzSpecificLocalTime

  FileTimeToSystemTime

  CreateFileW

  GetDriveTypeW

  GetFileInformationByHandle

  GetFileType

  PeekNamedPipe

  QueryPerformanceFrequency

  HeapAlloc

  HeapFree

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  SetFilePointerEx

  GetConsoleMode

  ReadConsoleW

  HeapReAlloc

  GetFileSizeEx

  GetConsoleOutputCP

  DecodePointer

  FlushFileBuffers

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCPInfo

  GetCommandLineA

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  GetProcessHeap

  SetStdHandle

  GetStringTypeW

  GetCurrentDirectoryW

  GetFullPathNameW

  SetEndOfFile

  GetTimeZoneInformation

  HeapSize

  WriteConsoleW

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  GetNativeSystemInfo

  InitializeSRWLock

  ReleaseSRWLockExclusive

  AcquireSRWLockExclusive

  InitializeCriticalSectionEx

  TryEnterCriticalSection

  InitializeConditionVariable

  WakeConditionVariable

  WakeAllConditionVariable

  SleepConditionVariableCS

  SleepConditionVariableSRW

  LCMapStringEx

  user32

  PostMessageW

  InflateRect

  GetDC

  FillRect

  SendMessageW

  EndDialog

  GetWindowLongW

  SetDlgItemTextW

  MessageBoxA

  LoadIconW

  SetWindowLongW

  GetClientRect

  GetDlgItem

  DialogBoxParamW

  ReleaseDC

  GetActiveWindow

  gdi32

  GetStockObject

  CreatePen

  Rectangle

  DeleteObject

  CreateSolidBrush

  SelectObject

  Sections

  .text

  Size: 1.7MB - Virtual size: 1.7MB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 499KB - Virtual size: 499KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 30KB - Virtual size: 370KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  _RDATA

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 282KB - Virtual size: 281KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 71KB - Virtual size: 71KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• Microsoft.Expression.Interactions.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04-09-2012 21:42

  Not After

  04-03-2013 21:42

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:02:8e:42:00:00:00:00:00:1f

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  09-01-2012 22:25

  Not After

  09-04-2013 22:25

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31-08-2010 22:19

  Not After

  31-08-2020 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03-04-2007 12:53

  Not After

  03-04-2021 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07-07-2012 00:14

  Not After

  07-10-2013 00:14

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  50:e6:9b:90:8e:b8:ac:42:e2:33:a7:be:c2:dd:36:4c:4e:f3:47:ff:23:a3:a8:14:ab:86:26:4d:c7:9a:cc:58

  Signer

  Actual PE Digest

  50:e6:9b:90:8e:b8:ac:42:e2:33:a7:be:c2:dd:36:4c:4e:f3:47:ff:23:a3:a8:14:ab:86:26:4d:c7:9a:cc:58

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  14:00:ff:d9:69:50:8f:1a:80:80:da:f6:0f:44:9f:a1:b8:14:c5:d3

  Signer

  Actual PE Digest

  14:00:ff:d9:69:50:8f:1a:80:80:da:f6:0f:44:9f:a1:b8:14:c5:d3

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\Microsoft.Expression.Interactions\Microsoft.Expression.Interactions.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 87KB - Virtual size: 87KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• PocoInitializer.dll

  .dll windows:6 windows x86 arch:x86

  fd8096cc863e71d74e08a116f71d6fca

  
  

  Code Sign

  7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b

  Certificate

  Issuer

  CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

  Not Before

  21-12-2012 00:00

  Not After

  30-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50

  Certificate

  Issuer

  CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

  Not Before

  18-10-2012 00:00

  Not After

  29-12-2020 23:59

  Subject

  CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  14:78:1b:c8:62:e8:dc:50:3a:55:93:46:f5:dc:c5:18

  Certificate

  Issuer

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Not Before

  28-07-2015 00:00

  Not After

  26-07-2018 23:59

  Subject

  CN=NVIDIA Corporation,O=NVIDIA Corporation,L=SANTA CLARA,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  08-02-2010 00:00

  Not After

  07-02-2020 23:59

  Subject

  CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  7b:c1:5a:f2:13:67:d0:75:8b:ed:dc:ca:11:86:42:de

  Certificate

  Issuer

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Not Before

  13-07-2015 00:00

  Not After

  13-07-2018 23:59

  Subject

  CN=NVIDIA Corporation,OU=IT MIIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageDigitalSignature

  3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a

  Certificate

  Issuer

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Not Before

  10-12-2013 00:00

  Not After

  09-12-2023 23:59

  Subject

  CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

  Extended Key Usages

  ExtKeyUsageClientAuth

  ExtKeyUsageCodeSigning

  Key Usages

  KeyUsageCertSign

  KeyUsageCRLSign

  61:19:93:e4:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  22-02-2011 19:25

  Not After

  22-02-2021 19:35

  Subject

  CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  32:58:e8:ee:54:af:5c:27

  Certificate

  Issuer

  CN=Starfield Services Root Certificate Authority,OU=http://certificates.starfieldtech.com/repository/,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Not Before

  13-12-2016 07:00

  Not After

  13-12-2021 07:00

  Subject

  CN=Starfield Services Timestamp Authority - G1,O=Starfield Technologies\, Inc.,L=Scottsdale,ST=Arizona,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageContentCommitment

  43:19:7b:7d:7e:5d:77:b6:d4:68:c3:4d:0f:b9:ee:17:ef:9b:45:f3:19:3b:cc:5d:55:99:90:3f:ad:ae:87:82

  Signer

  Actual PE Digest

  43:19:7b:7d:7e:5d:77:b6:d4:68:c3:4d:0f:b9:ee:17:ef:9b:45:f3:19:3b:cc:5d:55:99:90:3f:ad:ae:87:82

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  24:22:58:02:22:c7:aa:53:ba:af:e2:6a:35:93:ce:e3:3f:f9:ff:06

  Signer

  Actual PE Digest

  24:22:58:02:22:c7:aa:53:ba:af:e2:6a:35:93:ce:e3:3f:f9:ff:06

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  C:\dvs\p4\build\sw\gcomp\dev\src\NvContainer\_out\x86\release\pocoInit\PocoInitializer.pdb

  Imports

  crypt32

  CertEnumCertificatesInStore

  CertFindCertificateInStore

  CertFreeCertificateContext

  CertOpenSystemStoreW

  CertCloseStore

  poco

  ??1FastMutex@Poco@@QAE@XZ

  ??0FastMutex@Poco@@QAE@XZ

  ?displayText@Exception@Poco@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

  ?lock@FastMutex@Poco@@QAEXXZ

  ??0AtomicCounter@Poco@@QAE@XZ

  ??0AtomicCounter@Poco@@QAE@H@Z

  ??1AtomicCounter@Poco@@QAE@XZ

  ?release@RefCountedObject@Poco@@QBEXXZ

  ??1Context@Net@Poco@@UAE@XZ

  ??0CertificateHandlerFactory@Net@Poco@@QAE@XZ

  ??1InvalidCertificateHandler@Net@Poco@@UAE@XZ

  ??0InvalidCertificateHandler@Net@Poco@@QAE@_N@Z

  ?digest@DigestEngine@Crypto@Poco@@UAEABV?$vector@EV?$allocator@E@std@@@std@@XZ

  ??1DigestEngine@Crypto@Poco@@UAE@XZ

  ??0DigestEngine@Crypto@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

  ?digestToHex@DigestEngine@Poco@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$vector@EV?$allocator@E@std@@@4@@Z

  ?update@DigestEngine@Poco@@QAEXPBXI@Z

  ??1X509Certificate@Net@Poco@@QAE@XZ

  ??0X509Certificate@Net@Poco@@QAE@PAUx509_st@@@Z

  ?issuedBy@X509Certificate@Crypto@Poco@@QBE_NABV123@@Z

  ??1NotFoundException@Poco@@UAE@XZ

  ??1Exception@Poco@@UAE@XZ

  ?createClientSession@HTTPSessionInstantiator@Net@Poco@@UAEPAVHTTPClientSession@23@ABVURI@3@@Z

  ?createClientSession@HTTPSSessionInstantiator@Net@Poco@@UAEPAVHTTPClientSession@23@ABVURI@3@@Z

  ?idImpl@ProcessImpl@Poco@@SAIXZ

  ?append@Path@Poco@@QAEAAV12@ABV12@@Z

  ?toString@Path@Poco@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

  ??1Path@Poco@@QAE@XZ

  ??0Path@Poco@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

  ?convert@UnicodeConverter@Poco@@SAXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z

  ?getString@WinRegistryKey@Util@Poco@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV45@@Z

  ??1WinRegistryKey@Util@Poco@@QAE@XZ

  ??0WinRegistryKey@Util@Poco@@QAE@PAUHKEY__@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NK@Z

  ??1HTTPSSessionInstantiator@Net@Poco@@UAE@XZ

  ??0HTTPSSessionInstantiator@Net@Poco@@QAE@XZ

  ??1HTTPSessionInstantiator@Net@Poco@@UAE@XZ

  ??0HTTPSessionInstantiator@Net@Poco@@QAE@XZ

  ?format@Poco@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV23@ABVAny@1@@Z

  ?defaultFactory@HTTPSessionFactory@Net@Poco@@SAAAV123@XZ

  ?unregisterProtocol@HTTPSessionFactory@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

  ?registerProtocol@HTTPSessionFactory@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVHTTPSessionInstantiator@23@@Z

  ?initializeClient@SSLManager@Net@Poco@@QAEXV?$SharedPtr@VPrivateKeyPassphraseHandler@Net@Poco@@VReferenceCounter@3@V?$ReleasePolicy@VPrivateKeyPassphraseHandler@Net@Poco@@@3@@3@V?$SharedPtr@VInvalidCertificateHandler@Net@Poco@@VReferenceCounter@3@V?$ReleasePolicy@VInvalidCertificateHandler@Net@Poco@@@3@@3@V?$AutoPtr@VContext@Net@Poco@@@3@@Z

  ?instance@SSLManager@Net@Poco@@SAAAV123@XZ

  ?removeFactory@CertificateHandlerFactoryMgr@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

  ?setFactory@CertificateHandlerFactoryMgr@Net@Poco@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVCertificateHandlerFactory@23@@Z

  ??0Context@Net@Poco@@QAE@W4Usage@012@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4VerificationMode@012@H_N1@Z

  ?uninitializeSSL@Net@Poco@@YAXXZ

  ?initializeSSL@Net@Poco@@YAXXZ

  ?uninitializeNetwork@Net@Poco@@YAXXZ

  ?initializeNetwork@Net@Poco@@YAXXZ

  ?unexpected@Bugcheck@Poco@@SAXPBDH@Z

  pocoNetworkInitializer

  ??1CertificateHandlerFactory@Net@Poco@@UAE@XZ

  libeay32

  ord653

  ord78

  ord66

  ord52

  ord95

  ord2442

  ord2117

  ord566

  ord578

  ord579

  ord654

  ord754

  ord281

  ord181

  kernel32

  GetSystemTimeAsFileTime

  QueryPerformanceCounter

  IsProcessorFeaturePresent

  IsDebuggerPresent

  DecodePointer

  EncodePointer

  MoveFileW

  GetSystemTime

  ProcessIdToSessionId

  GetCurrentThreadId

  GetCurrentProcessId

  OutputDebugStringA

  DeleteFileW

  GetLastError

  LeaveCriticalSection

  DisableThreadLibraryCalls

  msvcp120

  ?_Syserror_map@std@@YAPBDH@Z

  ?_Xout_of_range@std@@YAXPBD@Z

  ?_Xlength_error@std@@YAXPBD@Z

  ?_Winerror_map@std@@YAPBDH@Z

  ?_Xbad_alloc@std@@YAXXZ

  msvcr120

  _wfsopen

  _vsnprintf_s

  _snprintf_s

  printf

  fputs

  fflush

  fclose

  __iob_func

  _vswprintf_c_l

  memcpy

  __CxxFrameHandler3

  _CxxThrowException

  _hypot

  memmove

  ??3@YAXPAX@Z

  ??2@YAPAXI@Z

  memset

  _lock

  _unlock

  _calloc_crt

  __dllonexit

  _onexit

  ??1type_info@@UAE@XZ

  __CppXcptFilter

  _purecall

  _amsg_exit

  free

  _malloc_crt

  _initterm

  _initterm_e

  _except_handler4_common

  __clean_type_info_names_internal

  _crt_debugger_hook

  __crtUnhandledException

  __crtTerminateProcess

  ?terminate@@YAXXZ

  _splitpath_s

  Exports

  Exports

  InitializePoco

  UninitializePoco

  Sections

  .text

  Size: 30KB - Virtual size: 30KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 13KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• README.txt
• System.Windows.Interactivity.dll

  .dll windows:4 windows x86 arch:x86

  dae02f32a21e03ce65412f6e56942daa

  
  

  Code Sign

  33:00:00:00:9d:1e:8d:27:ae:b8:f3:d8:38:00:01:00:00:00:9d

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  04-09-2012 21:42

  Not After

  04-03-2013 21:42

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:02:8e:42:00:00:00:00:00:1f

  Certificate

  Issuer

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  09-01-2012 22:25

  Not After

  09-04-2013 22:25

  Subject

  CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  61:33:26:1a:00:00:00:00:00:31

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  31-08-2010 22:19

  Not After

  31-08-2020 22:29

  Subject

  CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  61:16:68:34:00:00:00:00:00:1c

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

  Not Before

  03-04-2007 12:53

  Not After

  03-04-2021 13:03

  Subject

  CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageTimeStamping

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  33:00:00:00:08:e2:79:fa:0d:25:58:45:ea:00:00:00:00:00:08

  Certificate

  Issuer

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  07-07-2012 00:14

  Not After

  07-10-2013 00:14

  Subject

  CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Extended Key Usages

  ExtKeyUsageCodeSigning

  61:0e:90:d2:00:00:00:00:00:03

  Certificate

  Issuer

  CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Not Before

  08-07-2011 20:59

  Not After

  08-07-2026 21:09

  Subject

  CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

  Key Usages

  KeyUsageDigitalSignature

  KeyUsageCertSign

  KeyUsageCRLSign

  3e:ee:d8:f6:58:e3:82:0a:29:a6:0d:4d:da:4f:ed:6b:c4:34:50:1b:a8:8c:42:82:1a:79:91:a0:3a:90:87:f2

  Signer

  Actual PE Digest

  3e:ee:d8:f6:58:e3:82:0a:29:a6:0d:4d:da:4f:ed:6b:c4:34:50:1b:a8:8c:42:82:1a:79:91:a0:3a:90:87:f2

  Digest Algorithm

  sha256

  PE Digest Matches

  true

  12:e5:b0:a2:ba:03:46:7f:56:92:05:89:ed:0e:65:b2:33:e9:07:1f

  Signer

  Actual PE Digest

  12:e5:b0:a2:ba:03:46:7f:56:92:05:89:ed:0e:65:b2:33:e9:07:1f

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_NO_SEH

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d:\ExprUpdate2\Blend\SDK\BlendWPFSDK\Build\Intermediate\Release\Libraries\System.Windows.Interactivity\System.Windows.Interactivity.pdb

  Imports

  mscoree

  _CorDllMain

  Sections

  .text

  Size: 36KB - Virtual size: 36KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 512B - Virtual size: 12B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• bass.dll

  .dll windows:4 windows x86 arch:x86

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Exports

  Exports

  BASS_Apply3D

  BASS_ChannelBytes2Seconds

  BASS_ChannelFlags

  BASS_ChannelGet3DAttributes

  BASS_ChannelGet3DPosition

  BASS_ChannelGetAttribute

  BASS_ChannelGetAttributeEx

  BASS_ChannelGetData

  BASS_ChannelGetDevice

  BASS_ChannelGetInfo

  BASS_ChannelGetLength

  BASS_ChannelGetLevel

  BASS_ChannelGetLevelEx

  BASS_ChannelGetPosition

  BASS_ChannelGetTags

  BASS_ChannelIsActive

  BASS_ChannelIsSliding

  BASS_ChannelLock

  BASS_ChannelPause

  BASS_ChannelPlay

  BASS_ChannelRemoveDSP

  BASS_ChannelRemoveFX

  BASS_ChannelRemoveLink

  BASS_ChannelRemoveSync

  BASS_ChannelSeconds2Bytes

  BASS_ChannelSet3DAttributes

  BASS_ChannelSet3DPosition

  BASS_ChannelSetAttribute

  BASS_ChannelSetAttributeEx

  BASS_ChannelSetDSP

  BASS_ChannelSetDevice

  BASS_ChannelSetFX

  BASS_ChannelSetLink

  BASS_ChannelSetPosition

  BASS_ChannelSetSync

  BASS_ChannelSlideAttribute

  BASS_ChannelStop

  BASS_ChannelUpdate

  BASS_ErrorGetCode

  BASS_FXGetParameters

  BASS_FXReset

  BASS_FXSetParameters

  BASS_FXSetPriority

  BASS_Free

  BASS_Get3DFactors

  BASS_Get3DPosition

  BASS_GetCPU

  BASS_GetConfig

  BASS_GetConfigPtr

  BASS_GetDSoundObject

  BASS_GetDevice

  BASS_GetDeviceInfo

  BASS_GetEAXParameters

  BASS_GetInfo

  BASS_GetVersion

  BASS_GetVolume

  BASS_Init

  BASS_IsStarted

  BASS_MusicFree

  BASS_MusicLoad

  BASS_Pause

  BASS_PluginEnable

  BASS_PluginFree

  BASS_PluginGetInfo

  BASS_PluginLoad

  BASS_RecordFree

  BASS_RecordGetDevice

  BASS_RecordGetDeviceInfo

  BASS_RecordGetInfo

  BASS_RecordGetInput

  BASS_RecordGetInputName

  BASS_RecordInit

  BASS_RecordSetDevice

  BASS_RecordSetInput

  BASS_RecordStart

  BASS_SampleCreate

  BASS_SampleFree

  BASS_SampleGetChannel

  BASS_SampleGetChannels

  BASS_SampleGetData

  BASS_SampleGetInfo

  BASS_SampleLoad

  BASS_SampleSetData

  BASS_SampleSetInfo

  BASS_SampleStop

  BASS_Set3DFactors

  BASS_Set3DPosition

  BASS_SetConfig

  BASS_SetConfigPtr

  BASS_SetDevice

  BASS_SetEAXParameters

  BASS_SetVolume

  BASS_Start

  BASS_Stop

  BASS_StreamCreate

  BASS_StreamCreateFile

  BASS_StreamCreateFileUser

  BASS_StreamCreateURL

  BASS_StreamFree

  BASS_StreamGetFilePosition

  BASS_StreamPutData

  BASS_StreamPutFileData

  BASS_Update

  _

  Sections

  Size: 121KB - Virtual size: 332KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: - Virtual size: 8KB

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  petite

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

• bzip2.dll

  .dll windows:4 windows x86 arch:x86

  806180d1f724afa61fa7e6fb64bcea11

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_DLL

  Imports

  kernel32

  AddAtomA

  FindAtomA

  GetAtomNameA

  msvcrt

  _fdopen

  _setmode

  __dllonexit

  __mb_cur_max

  _errno

  _iob

  _isctype

  _pctype

  abort

  exit

  fclose

  fflush

  fgetc

  fopen

  fprintf

  fputc

  fread

  free

  fwrite

  malloc

  strcat

  ungetc

  Exports

  Exports

  BZ2_blockSort

  BZ2_bsInitWrite

  BZ2_bzBuffToBuffCompress

  BZ2_bzBuffToBuffCompress@28

  BZ2_bzBuffToBuffDecompress

  BZ2_bzBuffToBuffDecompress@24

  BZ2_bzCompress

  BZ2_bzCompress@8

  BZ2_bzCompressEnd

  BZ2_bzCompressEnd@4

  BZ2_bzCompressInit

  BZ2_bzCompressInit@16

  BZ2_bzDecompress

  BZ2_bzDecompress@4

  BZ2_bzDecompressEnd

  BZ2_bzDecompressEnd@4

  BZ2_bzDecompressInit

  BZ2_bzDecompressInit@12

  BZ2_bzRead

  BZ2_bzRead@16

  BZ2_bzReadClose

  BZ2_bzReadClose@8

  BZ2_bzReadGetUnused

  BZ2_bzReadGetUnused@16

  BZ2_bzReadOpen

  BZ2_bzReadOpen@24

  BZ2_bzWrite

  BZ2_bzWrite@16

  BZ2_bzWriteClose

  BZ2_bzWriteClose64

  BZ2_bzWriteClose64@28

  BZ2_bzWriteClose@20

  BZ2_bzWriteOpen

  BZ2_bzWriteOpen@20

  BZ2_bz__AssertH__fail

  BZ2_bzclose

  BZ2_bzclose@4

  BZ2_bzdopen

  BZ2_bzdopen@8

  BZ2_bzerror

  BZ2_bzerror@8

  BZ2_bzflush

  BZ2_bzflush@4

  BZ2_bzlibVersion

  BZ2_bzlibVersion@0

  BZ2_bzopen

  BZ2_bzopen@8

  BZ2_bzread

  BZ2_bzread@12

  BZ2_bzwrite

  BZ2_bzwrite@12

  BZ2_compressBlock

  BZ2_crc32Table

  BZ2_decompress

  BZ2_hbAssignCodes

  BZ2_hbCreateDecodeTables

  BZ2_hbMakeCodeLengths

  BZ2_indexIntoF

  BZ2_rNums

  DllGetVersion

  Sections

  .text

  Size: 49KB - Virtual size: 48KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 144B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 1024B - Virtual size: 748B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 8KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 596B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• d3d10core.dll

  .dll windows:10 windows x86 arch:x86

  4ff34ff1c8a4acdb1c51b0e121559bf6

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_GUARD_CF

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  d3d10core.pdb

  Imports

  msvcrt

  __dllonexit

  _unlock

  malloc

  _lock

  _except_handler4_common

  _initterm

  _amsg_exit

  _XcptFilter

  free

  _onexit

  __CxxFrameHandler3

  ntdll

  EtwEventWriteTransfer

  EtwEventUnregister

  EtwEventRegister

  EtwEventSetInformation

  api-ms-win-core-libraryloader-l1-2-0

  GetModuleHandleA

  DisableThreadLibraryCalls

  GetProcAddress

  GetModuleFileNameW

  api-ms-win-core-errorhandling-l1-1-0

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetLastError

  RaiseException

  api-ms-win-security-base-l1-1-0

  AllocateLocallyUniqueId

  api-ms-win-core-synch-l1-1-0

  DeleteCriticalSection

  InitializeCriticalSection

  api-ms-win-core-profile-l1-1-0

  QueryPerformanceFrequency

  QueryPerformanceCounter

  api-ms-win-core-debug-l1-1-0

  DebugBreak

  api-ms-win-core-synch-l1-2-0

  Sleep

  api-ms-win-core-processthreads-l1-1-0

  GetCurrentProcess

  GetCurrentThreadId

  GetCurrentProcessId

  TerminateProcess

  api-ms-win-core-sysinfo-l1-1-0

  GetSystemTimeAsFileTime

  GetTickCount

  user32

  UnregisterClassA

  Exports

  Exports

  D3D10CoreCreateDevice

  D3D10CoreGetSupportedVersions

  D3D10CoreGetVersion

  D3D10CoreRegisterLayers

  D3DKMTCloseAdapter

  D3DKMTCreateAllocation

  D3DKMTCreateContext

  D3DKMTCreateDevice

  D3DKMTCreateSynchronizationObject

  D3DKMTDestroyAllocation

  D3DKMTDestroyContext

  D3DKMTDestroyDevice

  D3DKMTDestroySynchronizationObject

  D3DKMTEscape

  D3DKMTGetContextSchedulingPriority

  D3DKMTGetDeviceState

  D3DKMTGetDisplayModeList

  D3DKMTGetMultisampleMethodList

  D3DKMTGetRuntimeData

  D3DKMTGetSharedPrimaryHandle

  D3DKMTLock

  D3DKMTOpenAdapterFromHdc

  D3DKMTOpenResource

  D3DKMTPresent

  D3DKMTQueryAdapterInfo

  D3DKMTQueryAllocationResidency

  D3DKMTQueryResourceInfo

  D3DKMTRender

  D3DKMTSetAllocationPriority

  D3DKMTSetContextSchedulingPriority

  D3DKMTSetDisplayMode

  D3DKMTSetDisplayPrivateDriverFormat

  D3DKMTSetGammaRamp

  D3DKMTSetVidPnSourceOwner

  D3DKMTSignalSynchronizationObject

  D3DKMTUnlock

  D3DKMTWaitForSynchronizationObject

  D3DKMTWaitForVerticalBlankEvent

  OpenAdapter10

  OpenAdapter10_2

  Sections

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .idata

  Size: 2KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 19KB - Virtual size: 18KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 716B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• iconv.dll

  .dll windows:4 windows x86 arch:x86

  ef979f9470f9a918ffc1e8ec7bcf8daa

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_DLL

  Imports

  kernel32

  AddAtomA

  FindAtomA

  GetACP

  GetAtomNameA

  GetCPInfoExA

  GetLastError

  GetProcAddress

  IsDBCSLeadByteEx

  IsValidCodePage

  LoadLibraryA

  MultiByteToWideChar

  WideCharToMultiByte

  msvcrt

  __dllonexit

  _assert

  _errno

  _stricmp

  _strnicmp

  abort

  atoi

  calloc

  fflush

  free

  malloc

  memcpy

  memmove

  memset

  sprintf

  strlen

  strncmp

  strncpy

  Exports

  Exports

  _libiconv_version

  libiconv

  libiconv_close

  libiconv_open

  libiconv_set_relocation_prefix

  libiconvctl

  libiconvlist

  locale_charset

  Sections

  .text

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 3KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .bss

  Size: - Virtual size: 332B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 257B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 1024B - Virtual size: 860B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• libgthread-2.0-0.dll

  .dll windows:4 windows x86 arch:x86

  069594efb1852e30de2f8e5255e33d8a

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DEBUG_STRIPPED

  IMAGE_FILE_DLL

  Imports

  libglib-2.0-0

  g_assertion_message

  g_assertion_message_expr

  g_free

  g_get_current_time

  g_log

  g_malloc

  g_ptr_array_add

  g_ptr_array_free

  g_ptr_array_new

  g_ptr_array_remove

  g_ptr_array_remove_index

  g_ptr_array_set_size

  g_realloc

  g_return_if_fail_warning

  g_set_error

  g_thread_error_quark

  g_thread_functions_for_glib_use

  g_thread_gettime

  g_thread_init_glib

  g_thread_use_default_impl

  g_win32_error_message

  kernel32

  CloseHandle

  CreateEventA

  CreateMutexA

  DeleteCriticalSection

  DuplicateHandle

  EnterCriticalSection

  FreeLibrary

  GetCurrentProcess

  GetCurrentThread

  GetLastError

  GetModuleHandleA

  GetProcAddress

  GetSystemTimeAsFileTime

  InitializeCriticalSection

  IsDebuggerPresent

  LeaveCriticalSection

  LoadLibraryA

  ReleaseMutex

  SetEvent

  SetThreadPriority

  Sleep

  TlsAlloc

  TlsGetValue

  TlsSetValue

  VirtualProtect

  VirtualQuery

  WaitForSingleObject

  msvcrt

  __dllonexit

  _beginthreadex

  _endthreadex

  _errno

  _iob

  _winmajor

  abort

  calloc

  fflush

  free

  fwrite

  malloc

  memcpy

  sprintf

  vfprintf

  user32

  MessageBoxA

  Exports

  Exports

  g_thread_init

  g_thread_init_with_errorcheck_mutexes

  Sections

  .text

  Size: 9KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 512B - Virtual size: 104B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rdata

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .eh_fram

  Size: 512B - Virtual size: 4B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .bss

  Size: - Virtual size: 748B

  IMAGE_SCN_CNT_UNINITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .edata

  Size: 512B - Virtual size: 133B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .idata

  Size: 2KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .CRT

  Size: 512B - Virtual size: 24B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 32B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1024B - Virtual size: 992B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 1024B - Virtual size: 968B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• settings.ini
• wxwidgetsforms2.dll

  .dll windows:6 windows x86 arch:x86

  1918db39552ea442198ca827a4c7d0be

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  D:\vc14\php-snap-build\obj\win32\x64\vc14\obj\relea.pdb

  Imports

  kernel32

  FormatMessageW

  FreeLibrary

  QueryPerformanceCounter

  QueryPerformanceFrequency

  CloseHandle

  WaitForSingleObjectEx

  Sleep

  GetCurrentThreadId

  WideCharToMultiByte

  MultiByteToWideChar

  GetStringTypeW

  InitializeCriticalSectionEx

  GetSystemTimeAsFileTime

  EncodePointer

  DecodePointer

  LCMapStringEx

  GetCPInfo

  InitializeCriticalSectionAndSpinCount

  SetEvent

  ResetEvent

  CreateEventW

  GetModuleHandleW

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  GetCurrentProcessId

  InitializeSListHead

  IsDebuggerPresent

  GetStartupInfoW

  RtlUnwind

  RaiseException

  InterlockedFlushSList

  SetLastError

  TlsAlloc

  TlsGetValue

  TlsSetValue

  TlsFree

  LoadLibraryExW

  ExitProcess

  GetModuleHandleExW

  ReadFile

  GetModuleFileNameW

  SetFilePointerEx

  GetConsoleMode

  ReadConsoleW

  GetStdHandle

  GetFileType

  HeapAlloc

  HeapFree

  CompareStringW

  LCMapStringW

  GetLocaleInfoW

  IsValidLocale

  GetUserDefaultLCID

  EnumSystemLocalesW

  WriteFile

  GetConsoleOutputCP

  GetFileSizeEx

  HeapReAlloc

  FlushFileBuffers

  FindClose

  FindFirstFileExW

  FindNextFileW

  IsValidCodePage

  GetACP

  GetOEMCP

  GetCommandLineA

  GetCommandLineW

  GetEnvironmentStringsW

  FreeEnvironmentStringsW

  SetEnvironmentVariableW

  GetProcessHeap

  SetStdHandle

  CreateFileW

  HeapSize

  SetEndOfFile

  WriteConsoleW

  GetLastError

  GetProcAddress

  DeleteCriticalSection

  LeaveCriticalSection

  EnterCriticalSection

  InitializeCriticalSection

  GetVersion

  DisableThreadLibraryCalls

  GetModuleHandleA

  IsProcessorFeaturePresent

  VirtualAlloc

  user32

  DestroyWindow

  CreateWindowExA

  GetDC

  ReleaseDC

  EnumDisplaySettingsW

  ShowWindow

  gdi32

  SwapBuffers

  SetPixelFormat

  GetPixelFormat

  ChoosePixelFormat

  DescribePixelFormat

  opengl32

  wglDeleteContext

  wglCreateContext

  glIsEnabled

  glGetString

  glGetError

  glVertexPointer

  glTexCoordPointer

  glEnableClientState

  glDrawArrays

  glDisableClientState

  glColorPointer

  glViewport

  wglGetProcAddress

  glEnable

  glDisable

  glBlendFunc

  glTexSubImage2D

  glGenTextures

  glDeleteTextures

  glBindTexture

  glTexParameteri

  glTexImage2D

  glMatrixMode

  glLoadMatrixf

  glLoadIdentity

  glGetTexImage

  glGetIntegerv

  glFlush

  wglShareLists

  wglMakeCurrent

  Exports

  Exports

  Function001

  Sections

  .text

  Size: 776KB - Virtual size: 775KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1.1MB - Virtual size: 1.1MB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 8KB - Virtual size: 13KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 84KB - Virtual size: 83KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 22KB - Virtual size: 22KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

• xmlparse.dll

  .dll windows:4 windows x86 arch:x86

  571734b439e3ba90f7a6df2e74cafdb4

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  Imports

  xmltok

  XmlInitUnknownEncoding

  XmlSizeOfUnknownEncoding

  XmlInitUnknownEncodingNS

  XmlUtf8Encode

  XmlParseXmlDeclNS

  XmlParseXmlDecl

  XmlGetUtf8InternalEncodingNS

  XmlPrologStateInitExternalEntity

  XmlInitEncodingNS

  XmlGetUtf8InternalEncoding

  XmlPrologStateInit

  XmlInitEncoding

  kernel32

  RtlUnwind

  GetStringTypeW

  LCMapStringW

  LCMapStringA

  GetStringTypeA

  GetOEMCP

  GetACP

  MultiByteToWideChar

  LoadLibraryA

  GetProcAddress

  HeapAlloc

  HeapFree

  HeapReAlloc

  GetCommandLineA

  GetVersion

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  ExitProcess

  TerminateProcess

  GetCurrentProcess

  GetStartupInfoA

  GetCPInfo

  WriteFile

  GetStdHandle

  GetModuleFileNameA

  SetHandleCount

  GetFileType

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  WideCharToMultiByte

  GetEnvironmentStrings

  GetEnvironmentStringsW

  DisableThreadLibraryCalls

  Exports

  Exports

  XML_DefaultCurrent

  XML_ErrorString

  XML_ExternalEntityParserCreate

  XML_GetBase

  XML_GetBuffer

  XML_GetCurrentByteCount

  XML_GetCurrentByteIndex

  XML_GetCurrentColumnNumber

  XML_GetCurrentLineNumber

  XML_GetErrorCode

  XML_GetIdAttributeIndex

  XML_GetSpecifiedAttributeCount

  XML_Parse

  XML_ParseBuffer

  XML_ParserCreate

  XML_ParserCreateNS

  XML_ParserFree

  XML_SetBase

  XML_SetCdataSectionHandler

  XML_SetCharacterDataHandler

  XML_SetCommentHandler

  XML_SetDefaultHandler

  XML_SetDefaultHandlerExpand

  XML_SetDoctypeDeclHandler

  XML_SetElementHandler

  XML_SetEncoding

  XML_SetExternalEntityRefHandler

  XML_SetExternalEntityRefHandlerArg

  XML_SetExternalParsedEntityDeclHandler

  XML_SetInternalParsedEntityDeclHandler

  XML_SetNamespaceDeclHandler

  XML_SetNotStandaloneHandler

  XML_SetNotationDeclHandler

  XML_SetParamEntityParsing

  XML_SetProcessingInstructionHandler

  XML_SetUnknownEncodingHandler

  XML_SetUnparsedEntityDeclHandler

  XML_SetUserData

  XML_UseParserAsHandlerArg

  Sections

  .text

  Size: 36KB - Virtual size: 33KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .reloc

  Size: 4KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ