AUTODESK_V2022_NLM_CRACK-XFORCE[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

AUTODESK_V2022_NLM_CRACK-XFORCE.7z
Size

14.8MB
MD5

3d75847a94f30ea00787ae292c6e166c
SHA1

a9b079fc33931a7495047d91cf634a2243ad2343
SHA256

2369ce60f33038029a30276e5ee240feea35e7373ce9b0933fe3f18931ab9639
SHA512

361ad52fe54baeb893e8fc9cb59c3b2b5a63eeb321b3a2476a4a5fa5838740330ef38a2959f2965324f475609c50fb165030302f87720012561f11aec6badd51
SSDEEP

393216:UOk05VbhwX4GAeRhLELpraFu2/tRWWDX6H0DKK2WF:UO5ThwoGAWV0chTQHKyWF

Score

1^/10

Malware Config

Signatures

Files

AUTODESK_V2022_NLM_CRACK-XFORCE.7z
.7z

Password: infected
AUTODESK_V2022_NLM_CRACK-XFORCE/file_id.diz
AUTODESK_V2022_NLM_CRACK-XFORCE/install.txt
AUTODESK_V2022_NLM_CRACK-XFORCE/nlm11.18.0.0_ipv4_ipv6_win64.msi
.msi
AUTODESK_V2022_NLM_CRACK-XFORCE/x-force.nfo
AUTODESK_V2022_NLM_CRACK-XFORCE/xf_adsk2022/AdskLicensingAgent.exe
.exe windows:6 windows x86 arch:x86

6dc87248d4741c58247fb958e004dd11

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

24/03/2020, 00:00

Not After

25/03/2021, 23:59

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

23/10/2020, 00:00

Not After

22/01/2032, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e5:5c:00:c6:37:f3:d5:2d:43:ac:da:31:0d:07:6b:ed:89:40:c3:d8:36:09:00:9b:41:6f:30:6b:54:09:f9:05
Signer

Actual PE Digest

e5:5c:00:c6:37:f3:d5:2d:43:ac:da:31:0d:07:6b:ed:89:40:c3:d8:36:09:00:9b:41:6f:30:6b:54:09:f9:05

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\jenkins\workspace\CLMv2_Build_clm-agent_develop\build\x32\Release\pdb\AdskLicensingAgent.pdb

Imports

qt5widgets_ad_5_12

?metaObject@QApplication@@UBEPBUQMetaObject@@XZ
?event@QApplication@@MAE_NPAVQEvent@@@Z
?qt_metacall@QApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??0QApplication@@QAE@AAHPAPADH@Z
?compressEvent@QApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
??1QApplication@@UAE@XZ
?qt_metacast@QApplication@@UAEPAXPBD@Z
?notify@QApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z

qt5gui_ad_5_12

?setQuitOnLastWindowClosed@QGuiApplication@@SAX_N@Z

qt5websockets_ad_5_12

?pong@QWebSocket@@QAEX_KABVQByteArray@@@Z
?textMessageReceived@QWebSocket@@QAEXABVQString@@@Z
??1QWebSocket@@UAE@XZ
??0QMaskGenerator@@QAE@PAVQObject@@@Z
?staticMetaObject@QWebSocket@@2UQMetaObject@@B
?disconnected@QWebSocket@@QAEXXZ
??0QWebSocket@@QAE@ABVQString@@W4Version@QWebSocketProtocol@@PAVQObject@@@Z
?errorString@QWebSocket@@QBE?AVQString@@XZ
?setMaskGenerator@QWebSocket@@QAEXPBVQMaskGenerator@@@Z
?sendTextMessage@QWebSocket@@QAE_JABVQString@@@Z
?close@QWebSocket@@QAEXW4CloseCode@QWebSocketProtocol@@ABVQString@@@Z
?open@QWebSocket@@QAEXABVQUrl@@@Z
?ping@QWebSocket@@QAEXABVQByteArray@@@Z
?connected@QWebSocket@@QAEXXZ
??1QMaskGenerator@@UAE@XZ

qt5network_ad_5_12

?staticMetaObject@QAbstractSocket@@2UQMetaObject@@B
?localHostName@QHostInfo@@SA?AVQString@@XZ

qt5xml_ad_5_12

??4QDomNode@@QAEAAV0@ABV0@@Z
??1QDomNode@@QAE@XZ
?hasChildNodes@QDomNode@@QBE_NXZ
?firstChild@QDomNode@@QBE?AV1@XZ
?nextSibling@QDomNode@@QBE?AV1@XZ
?isNull@QDomNode@@QBE_NXZ
?toElement@QDomNode@@QBE?AVQDomElement@@XZ
??0QDomDocument@@QAE@XZ
??1QDomDocument@@QAE@XZ
?documentElement@QDomDocument@@QBE?AVQDomElement@@XZ
?setContent@QDomDocument@@QAE_NPAVQIODevice@@PAVQString@@PAH2@Z
??0QDomElement@@QAE@XZ
?attribute@QDomElement@@QBE?AVQString@@ABV2@0@Z
?tagName@QDomElement@@QBE?AVQString@@XZ
??1QDomElement@@QAE@XZ
??0QDomNode@@QAE@XZ
?text@QDomElement@@QBE?AVQString@@XZ
??0QDomNode@@QAE@ABV0@@Z

wintrust

WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
WinVerifyTrust

imagehlp

MapFileAndCheckSumW

crypt32

CertGetNameStringW

qt5core_ad_5_12

??6QDebug@@QAEAAV0@K@Z
??6QDebug@@QAEAAV0@_J@Z
??6QDebug@@QAEAAV0@PBD@Z
??6QDebug@@QAEAAV0@ABVQString@@@Z
?setLibraryPaths@QCoreApplication@@SAXABVQStringList@@@Z
??0QPluginLoader@@QAE@ABVQString@@PAVQObject@@@Z
??1QPluginLoader@@UAE@XZ
?instance@QPluginLoader@@QAEPAVQObject@@XZ
?errorString@QPluginLoader@@QBE?AVQString@@XZ
?start@QElapsedTimer@@QAEXXZ
?elapsed@QElapsedTimer@@QBE_JXZ
?hasExpired@QElapsedTimer@@QBE_N_J@Z
?isDebugEnabled@QLoggingCategory@@QBE_NXZ
?isInfoEnabled@QLoggingCategory@@QBE_NXZ
?isCriticalEnabled@QLoggingCategory@@QBE_NXZ
?event@QObject@@UAE_NPAVQEvent@@@Z
?shared_null@QHashData@@2U1@B
?warning@QMessageLogger@@QBE?AVQDebug@@XZ
??0QChar@@QAE@D@Z
?isNull@QChar@@QBE_NXZ
?mid@QString@@QBE?AV1@HH@Z
?replace@QString@@QAEAAV1@HHABV1@@Z
?utf16@QString@@QBEPBGXZ
??0QString@@QAE@ABVQByteArray@@@Z
??BQCharRef@@QBE?AVQChar@@XZ
?exists@QFile@@QBE_NXZ
?isReadable@QFileInfo@@QBE_NXZ
?isFile@QFileInfo@@QBE_NXZ
?filePath@QDir@@QBE?AVQString@@ABV2@@Z
?cd@QDir@@QAE_NABVQString@@@Z
?exists@QDir@@QBE_NABVQString@@@Z
?home@QDir@@SA?AV1@XZ
?temp@QDir@@SA?AV1@XZ
??0QUrl@@QAE@XZ
??0QUrl@@QAE@ABVQString@@W4ParsingMode@0@@Z
??1QProcessEnvironment@@QAE@XZ
?contains@QProcessEnvironment@@QBE_NABVQString@@@Z
?value@QProcessEnvironment@@QBE?AVQString@@ABV2@0@Z
?systemEnvironment@QProcessEnvironment@@SA?AV1@XZ
??6QDebug@@QAEAAV0@_N@Z
??6QDebug@@QAEAAV0@ABVQByteArray@@@Z
?isWarningEnabled@QLoggingCategory@@QBE_NXZ
?applicationDirPath@QCoreApplication@@SA?AVQString@@XZ
?type@QJsonValue@@QBE?AW4Type@1@XZ
?toString@QJsonValue@@QBE?AVQString@@XZ
?value@QJsonObject@@QBE?AVQJsonValue@@ABVQString@@@Z
??0QByteArray@@QAE@XZ
??0QByteArray@@QAE@PBDH@Z
??0QByteArray@@QAE@ABV0@@Z
??0QByteArray@@QAE@$$QAV0@@Z
??4QByteArray@@QAEAAV0@$$QAV0@@Z
?toStdString@QByteArray@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?arg@QString@@QBE?AV1@HHHVQChar@@@Z
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?disconnectImpl@QObject@@CA_NPBV1@PAPAX01PBUQMetaObject@@@Z
??0QTimer@@QAE@PAVQObject@@@Z
??1QTimer@@UAE@XZ
?start@QTimer@@QAEXH@Z
?timeout@QTimer@@QAEXUQPrivateSignal@1@@Z
?freeNodeAndRebalance@QMapDataBase@@QAEXPAUQMapNodeBase@@@Z
?recalcMostLeftNode@QMapDataBase@@QAEXXZ
?createNode@QMapDataBase@@QAEPAUQMapNodeBase@@HHPAU2@_N@Z
?freeTree@QMapDataBase@@QAEXPAUQMapNodeBase@@H@Z
?createData@QMapDataBase@@SAPAU1@XZ
?freeData@QMapDataBase@@SAXPAU1@@Z
??6QDebug@@QAEAAV0@H@Z
??6QDebug@@QAEAAV0@J@Z
?applicationPid@QCoreApplication@@SA_JXZ
?connect@QObject@@SA?AVConnection@QMetaObject@@PBV1@PBD01W4ConnectionType@Qt@@@Z
??1QUrl@@QAE@XZ
??6@YA?AVQDebug@@V0@ABVQUrl@@@Z
?staticMetaObject@QTimer@@2UQMetaObject@@B
?shared_null@QMapDataBase@@2U1@B
?staticMetaObject@QObject@@2UQMetaObject@@B
?normalizedType@QMetaObject@@SA?AVQByteArray@@PBD@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
?registerNormalizedType@QMetaType@@SAHABVQByteArray@@P6AXPAX@ZP6APAX1PBX@ZHV?$QFlags@W4TypeFlag@QMetaType@@@@PBUQMetaObject@@@Z
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
?qt_metacast@QObject@@UAEPAXPBD@Z
?qt_metacall@QObject@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??4QString@@QAEAAV0@ABV0@@Z
?arg@QString@@QBE?AV1@ABV1@0000000@Z
?replace@QString@@QAEAAV1@ABV1@0W4CaseSensitivity@Qt@@@Z
?toWCharArray@QString@@QBEHPA_W@Z
?number@QString@@SA?AV1@KH@Z
?number@QString@@SA?AV1@_JH@Z
?realloc@QListData@@QAEXH@Z
??6QTextStream@@QAEAAV0@D@Z
??6QDebug@@QAEAAV0@D@Z
?canonicalPath@QDir@@QBE?AVQString@@XZ
?toNativeSeparators@QDir@@SA?AVQString@@ABV2@@Z
?startDetached@QProcess@@SA_NABVQString@@ABVQStringList@@0PA_J@Z
??0QLoggingCategory@@QAE@PBD@Z
??1QLoggingCategory@@QAE@XZ
?stop@QTimer@@QAEXXZ
??0QVariant@@QAE@XZ
??1QVariant@@QAE@XZ
??0QVariant@@QAE@_J@Z
?userType@QVariant@@QBEHXZ
?constData@QVariant@@QBEPBXXZ
?convert@QVariant@@QBE_NHPAX@Z
??0QSettings@@QAE@W4Format@0@W4Scope@0@ABVQString@@2PAVQObject@@@Z
??1QSettings@@UAE@XZ
?sync@QSettings@@QAEXXZ
?beginGroup@QSettings@@QAEXABVQString@@@Z
?endGroup@QSettings@@QAEXXZ
?setValue@QSettings@@QAEXABVQString@@ABVQVariant@@@Z
?value@QSettings@@QBE?AVQVariant@@ABVQString@@ABV2@@Z
?event@QSettings@@MAE_NPAVQEvent@@@Z
?metaObject@QSettings@@UBEPBUQMetaObject@@XZ
?qt_metacall@QSettings@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QSettings@@UAEPAXPBD@Z
?qsrand@@YAXI@Z
?qrand@@YAHXZ
?currentMSecsSinceEpoch@QDateTime@@SA_JXZ
?toUtf8@QString@@QGBE?AVQByteArray@@XZ
?fromWCharArray@QString@@SA?AV1@PB_WH@Z
?readAll@QIODevice@@QAE?AVQByteArray@@XZ
?cdUp@QDir@@QAE_NXZ
?fromJson@QJsonDocument@@SA?AV1@ABVQByteArray@@PAUQJsonParseError@@@Z
?qBadAlloc@@YAXXZ
?allocate@QArrayData@@SAPAU1@IIIV?$QFlags@W4AllocationOption@QArrayData@@@@@Z
?deallocate@QArrayData@@SAXPAU1@II@Z
?sharedNull@QArrayData@@SAPAU1@XZ
??0QString@@QAE@VQChar@@@Z
?toLower@QString@@QGBE?AV1@XZ
?toUpper@QString@@QHAE?AV1@XZ
?split@QString@@QBE?AVQStringList@@ABV1@W4SplitBehavior@1@W4CaseSensitivity@Qt@@@Z
??8@YA_NABVQString@@0@Z
?constBegin@QString@@QBEPBVQChar@@XZ
?constEnd@QString@@QBEPBVQChar@@XZ
?toStdWString@QString@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?at@QListData@@QBEPAPAXH@Z
?moveToThread@QObject@@QAEXPAVQThread@@@Z
?setQObjectShared@ExternalRefCountData@QtSharedPointer@@QAEXPBVQObject@@_N@Z
?toArray@QJsonValue@@QBE?AVQJsonArray@@XZ
?toObject@QJsonValue@@QBE?AVQJsonObject@@XZ
?toObject@QJsonValueRef@@QBE?AVQJsonObject@@XZ
??0QJsonDocument@@QAE@XZ
??4QJsonDocument@@QAEAAV0@$$QAV0@@Z
?isObject@QJsonDocument@@QBE_NXZ
??0QJsonObject@@QAE@ABV0@@Z
??4QJsonObject@@QAEAAV0@$$QAV0@@Z
?isEmpty@QJsonObject@@QBE_NXZ
??0QJsonArray@@QAE@XZ
??1QJsonArray@@QAE@XZ
??4QJsonArray@@QAEAAV0@$$QAV0@@Z
?size@QJsonArray@@QBEHXZ
?isEmpty@QJsonArray@@QBE_NXZ
?at@QJsonArray@@QBE?AVQJsonValue@@H@Z
?removeAt@QJsonArray@@QAEXH@Z
?begin@QJsonArray@@QAE?AViterator@1@XZ
?end@QJsonArray@@QAE?AViterator@1@XZ
?exists@QFile@@SA_NABVQString@@@Z
??0QThread@@QAE@PAVQObject@@@Z
??1QThread@@UAE@XZ
?start@QThread@@QAEXW4Priority@1@@Z
?quit@QThread@@QAEXXZ
?wait@QThread@@QAE_NK@Z
?started@QThread@@QAEXUQPrivateSignal@1@@Z
?event@QThread@@UAE_NPAVQEvent@@@Z
?metaObject@QThread@@UBEPBUQMetaObject@@XZ
?qt_metacall@QThread@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacast@QThread@@UAEPAXPBD@Z
?run@QThread@@MAEXXZ
?staticMetaObject@QThread@@2UQMetaObject@@B
?toBase64@QByteArray@@QBE?AV1@XZ
?fromRawData@QByteArray@@SA?AV1@PBDH@Z
?fromBase64@QByteArray@@SA?AV1@ABV1@@Z
?fromUtf8@QString@@SA?AV1@ABVQByteArray@@@Z
?toUtf8@QString@@QHAE?AVQByteArray@@XZ
?readAll@QTextStream@@QAE?AVQString@@XZ
??0QByteArray@@QAE@HD@Z
?at@QByteArray@@QBEDH@Z
?lastIndexOf@QByteArray@@QBEHDH@Z
?left@QByteArray@@QBE?AV1@H@Z
?right@QByteArray@@QBE?AV1@H@Z
?mid@QByteArray@@QBE?AV1@HH@Z
?truncate@QByteArray@@QAEXH@Z
?prepend@QByteArray@@QAEAAV1@D@Z
?append@QByteArray@@QAEAAV1@ABV1@@Z
?insert@QByteArray@@QAEAAV1@HD@Z
?remove@QByteArray@@QAEAAV1@HH@Z
?replace@QByteArray@@QAEAAV1@HHABV1@@Z
?begin@QByteArray@@QAEPADXZ
?begin@QByteArray@@QBEPBDXZ
?isNull@QByteArray@@QBE_NXZ
?number@QString@@SA?AV1@HH@Z
??0QObject@@QAE@PAV0@@Z
?nextNode@QHashData@@SAPAUNode@1@PAU21@@Z
?rehash@QHashData@@QAEXH@Z
?detach_helper@QHashData@@QAEPAU1@P6AXPAUNode@1@PAX@ZP6AX0@ZHH@Z
?allocateNode@QHashData@@QAEPAXH@Z
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
??8QString@@QBE_NPBD@Z
??0QString@@QAE@PBD@Z
?arg@QString@@QBE?AV1@ABV1@0@Z
?arg@QString@@QBE?AV1@ABV1@HVQChar@@@Z
??0QChar@@QAE@UQLatin1Char@@@Z
?critical@QMessageLogger@@QBE?AVQDebug@@XZ
?info@QMessageLogger@@QBE?AVQDebug@@XZ
?debug@QMessageLogger@@QBE?AVQDebug@@XZ
??0QMessageLogger@@QAE@PBDH00@Z
?showHelp@QCommandLineParser@@QAEXH@Z
?value@QCommandLineParser@@QBE?AVQString@@ABVQCommandLineOption@@@Z
?isSet@QCommandLineParser@@QBE_NABVQCommandLineOption@@@Z
?process@QCommandLineParser@@QAEXABVQStringList@@@Z
?setApplicationDescription@QCommandLineParser@@QAEXABVQString@@@Z
?addOption@QCommandLineParser@@QAE_NABVQCommandLineOption@@@Z
??0QCommandLineParser@@QAE@XZ
??1QCommandLineOption@@QAE@XZ
??0QCommandLineOption@@QAE@ABVQStringList@@ABVQString@@11@Z
?translate@QCoreApplication@@SA?AVQString@@PBD00H@Z
??4QDir@@QAEAAV0@ABV0@@Z
??0QDir@@QAE@ABVQString@@@Z
??0QDir@@QAE@ABV0@@Z
?isEmpty@QListData@@QBE_NXZ
?size@QListData@@QBEHXZ
?append@QListData@@QAEPAPAXABU1@@Z
?detach@QListData@@QAEPAUData@1@H@Z
??4QString@@QAEAAV0@ABVQByteArray@@@Z
??4QString@@QAEAAV0@PBD@Z
?toInt@QString@@QBEHPA_NH@Z
?append@QString@@QAEAAV1@ABV1@@Z
??0QString@@QAE@VQLatin1String@@@Z
??1QByteArray@@QAE@XZ
?qgetenv@@YA?AVQByteArray@@PBD@Z
?staticMetaObject@QCoreApplication@@2UQMetaObject@@B
?shared_null@QListData@@2UData@1@B
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?qt_metacast@QCoreApplication@@UAEPAXPBD@Z
?qt_metacall@QCoreApplication@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?notify@QCoreApplication@@UAE_NPAVQObject@@PAVQEvent@@@Z
?metaObject@QCoreApplication@@UBEPBUQMetaObject@@XZ
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QCoreApplication@@MAE_NPAVQEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?compressEvent@QCoreApplication@@MAE_NPAVQEvent@@PAVQObject@@PAVQPostEventList@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?object@QJsonDocument@@QBE?AVQJsonObject@@XZ
??1QJsonDocument@@QAE@XZ
?setFilterRules@QLoggingCategory@@SAXABVQString@@@Z
??1QCommandLineParser@@QAE@XZ
?contains@QJsonObject@@QBE_NABVQString@@@Z
??AQJsonObject@@QAE?AVQJsonValueRef@@ABVQString@@@Z
??1QJsonObject@@QAE@XZ
?toValue@QJsonValueRef@@ABE?AVQJsonValue@@XZ
?toString@QJsonValueRef@@QBE?AVQString@@XZ
?toBool@QJsonValue@@QBE_N_N@Z
??1QJsonValue@@QAE@XZ
?endl@@YAAAVQTextStream@@AAV1@@Z
??6QTextStream@@QAEAAV0@PBD@Z
??6QTextStream@@QAEAAV0@ABVQString@@@Z
??1QTextStream@@UAE@XZ
??0QTextStream@@QAE@PAU_iobuf@@V?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??0QTextStream@@QAE@PAVQIODevice@@@Z
?absolutePath@QDir@@QBE?AVQString@@XZ
??4QDir@@QAEAAV0@ABVQString@@@Z
??1QDir@@QAE@XZ
?isDir@QFileInfo@@QBE_NXZ
?isWritable@QFileInfo@@QBE_NXZ
??1QFileInfo@@QAE@XZ
??0QFileInfo@@QAE@ABVQString@@@Z
?open@QFile@@UAE_NV?$QFlags@W4OpenModeFlag@QIODevice@@@@@Z
??1QFile@@UAE@XZ
??0QFile@@QAE@ABVQString@@@Z
?free_helper@QHashData@@QAEXP6AXPAUNode@1@@Z@Z
?aboutToQuit@QCoreApplication@@QAEXUQPrivateSignal@1@@Z
?quit@QCoreApplication@@SAXXZ
?exec@QCoreApplication@@SAHXZ
??1QCoreApplication@@UAE@XZ
??0QCoreApplication@@QAE@AAHPAPADH@Z
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
??1QObject@@UAE@XZ
?end@QListData@@QBEPAPAXXZ
?begin@QListData@@QBEPAPAXXZ
?append@QListData@@QAEPAPAXXZ
?dispose@QListData@@SAXPAUData@1@@Z
?dispose@QListData@@QAEXXZ
?detach_grow@QListData@@QAEPAUData@1@PAHH@Z
??1Connection@QMetaObject@@QAE@XZ
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
?fromUtf8@QString@@SA?AV1@PBDH@Z
??4QString@@QAEAAV0@$$QAV0@@Z
??1QString@@QAE@XZ
??0QString@@QAE@ABV0@@Z
??0QString@@QAE@XZ
?qFormatLogMessage@@YA?AVQString@@W4QtMsgType@@ABVQMessageLogContext@@ABV1@@Z
?qSetMessagePattern@@YAXABVQString@@@Z
?qInstallMessageHandler@@YAP6AXW4QtMsgType@@ABVQMessageLogContext@@ABVQString@@@ZP6AX012@Z@Z
?qEnvironmentVariableIsEmpty@@YA_NPBD@Z
??1QDebug@@QAE@XZ
??4QUrl@@QAEAAV0@$$QAV0@@Z

kernel32

CloseHandle
RaiseException
SetUnhandledExceptionFilter
GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTime
FreeLibrary
GetProcAddress
LoadLibraryW
SystemTimeToFileTime
GetLocaleInfoEx
GetVolumeInformationW
CreateFileW
GetModuleFileNameW
QueryPerformanceCounter
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
Sleep
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
LocalFree

user32

SetProcessDPIAware

advapi32

RegOpenKeyExW
FreeSid
RegQueryValueExW
AllocateAndInitializeSid
RegCloseKey
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetEntriesInAclW

msvcp140

?uncaught_exceptions@std@@YAHXZ
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?_Incref@facet@locale@std@@UAEXXZ
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
??Bid@locale@std@@QAEIXZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
_Mtx_destroy_in_situ
_Strcoll
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
_Xtime_get_ticks
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xinvalid_argument@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
_Mtx_lock
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
_Mtx_init_in_situ
_Mtx_unlock
_Strxfrm
?_Throw_C_error@std@@YAXH@Z

secur32

GetUserNameExW

vcruntime140

memmove
strchr
memchr
memset
wcschr
__std_type_info_compare
__std_type_info_name
__RTDynamicCast
_except_handler4_common
__std_exception_destroy
__std_exception_copy
_purecall
__CxxFrameHandler3
memcpy
_CxxThrowException
__std_terminate

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vfprintf
__p__commode
__stdio_common_vsprintf
__acrt_iob_func
_set_fmode

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
_invalid_parameter_noinfo
terminate
_errno
_register_thread_local_exe_atexit_callback
signal
_c_exit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
__p___argv
_seh_filter_exe
_set_app_type
_set_abort_behavior
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
_cexit

api-ms-win-crt-utility-l1-1-0

ldiv

api-ms-win-crt-convert-l1-1-0

strtod
_strtoui64
_strtoi64
strtoul
strtol

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_aligned_malloc
_aligned_free
_callnewh
malloc
realloc

api-ms-win-crt-string-l1-1-0

isdigit
strcpy_s
wcscpy_s
isxdigit
strncmp

api-ms-win-crt-environment-l1-1-0

_putenv_s

api-ms-win-crt-math-l1-1-0

_isnan
_fpclass
_finite
__setusermatherr
_except1

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AUTODESK_V2022_NLM_CRACK-XFORCE/xf_adsk2022/AdskLicensingService.exe
.exe windows:6 windows x86 arch:x86

ca04e1e58d6a21ec254582373c84dfcb

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

24/03/2020, 00:00

Not After

25/03/2021, 23:59

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

9e:fc:dc:5d:3f:a0:01:99:3d:46:dc:b7:7b:ed:4f:98:72:6a:3f:b6:b6:ff:72:de:34:67:e7:12:7c:1d:f1:43
Signer

Actual PE Digest

9e:fc:dc:5d:3f:a0:01:99:3d:46:dc:b7:7b:ed:4f:98:72:6a:3f:b6:b6:ff:72:de:34:67:e7:12:7c:1d:f1:43

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetThreadPriority
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerA
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler

Sections

.text
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 373KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/4
Size: 512B - Virtual size: 281B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 864KB - Virtual size: 864KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/32
Size: 200KB - Virtual size: 200KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/46
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/63
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 34B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/99
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/112
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/124
Size: 277KB - Virtual size: 276KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
AUTODESK_V2022_NLM_CRACK-XFORCE/xf_adsk2022/adlmint.dll
.dll windows:6 windows x86 arch:x86

92cb329bb15652f0fe0a4e1293e0a29b

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

24/03/2020, 00:00

Not After

25/03/2021, 23:59

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

02/05/2019, 00:00

Not After

01/08/2030, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #1,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

bd:dc:11:bc:ec:85:98:89:a9:7a:28:42:cc:43:c7:65:e8:66:0b:97:52:53:a8:a4:2e:2f:7a:9a:08:94:55:3c
Signer

Actual PE Digest

bd:dc:11:bc:ec:85:98:89:a9:7a:28:42:cc:43:c7:65:e8:66:0b:97:52:53:a8:a4:2e:2f:7a:9a:08:94:55:3c

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\scljenkins-slv\workspace\Build-Job_ADLM_FY21-10.2-release@2\develop\global\src\build\win32\MSVS14\Release\Release\adlmint.pdb

Imports

userenv

GetProfilesDirectoryA

comctl32

ord17

comdlg32

GetOpenFileNameA

netapi32

Netbios

wsock32

WSACleanup
getsockname
htonl
select
WSAStartup
getsockopt
inet_addr
setsockopt
inet_ntoa
send
recv
closesocket
ioctlsocket
WSAGetLastError
__WSAFDIsSet
getpeername
connect
socket

ole32

CoInitializeEx
CoTaskMemFree
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString
VariantClear
VariantInit
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound

shell32

SHGetFolderPathW
ord680
CommandLineToArgvW

ws2_32

getaddrinfo
getnameinfo
freeaddrinfo

dhcpcsvc

DhcpRequestParams

secur32

GetUserNameExW

kernel32

CreateProcessW
GetExitCodeProcess
GetComputerNameW
GetVersionExW
DisconnectNamedPipe
CreatePipe
WaitForMultipleObjects
GetStdHandle
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateThread
WaitNamedPipeW
CreateNamedPipeW
FlushFileBuffers
CreateFileW
CreateEventW
WaitForSingleObjectEx
GetLastError
GetModuleFileNameW
GetModuleHandleExW
LoadLibraryW
FreeEnvironmentStringsA
lstrlenA
GetEnvironmentStrings
GetVersionExA
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersion
CloseHandle
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetWindowsDirectoryA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineW
GetEnvironmentVariableA
GetEnvironmentVariableW
SetErrorMode
SetHandleInformation
GetLocalTime
GetTimeZoneInformation
FormatMessageA
Sleep
ResetEvent
SetEvent
CreateEventA
GetTickCount
FindClose
FindNextFileA
FindFirstFileA
GetSystemWindowsDirectoryA
GetVolumeInformationA
GetDriveTypeA
VirtualAlloc
VirtualFree
GetProcessTimes
GetCurrentProcess
FindFirstFileW
FindNextFileW
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcessId
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryExA
SetNamedPipeHandleState
WaitNamedPipeA
CreateFileA
SleepEx
WriteFile
ReadFile
DeviceIoControl
GetSystemTimeAsFileTime
GetModuleHandleW
GetLocaleInfoW
GetUserDefaultLCID
EnumSystemLocalesW
GlobalFree
GetFileAttributesW
CreateMutexW
OpenProcess
CreateThread

user32

MessageBoxA
GetSystemMetrics
KillTimer
GetActiveWindow
PeekMessageW
DispatchMessageW
TranslateMessage
EnableWindow
GetWindowRect
GetDlgItem
SendMessageA
MessageBeep
GetWindowLongA
SetDlgItemTextA
GetDlgItemTextW
GetDlgItemTextA
EndDialog
GetParent
GetFocus
SetFocus
SetWindowTextA
ShowWindow
MoveWindow
ScreenToClient
GetClientRect
wsprintfA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
AllowSetForegroundWindow
SetTimer

advapi32

SetNamedSecurityInfoW
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
StartServiceA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
RegQueryInfoKeyA
RegEnumKeyExA
GetUserNameA
RegSetValueExW
RegSetValueExA
RegQueryValueExW
GetUserNameW

msvcp140

?eof@ios_base@std@@QBE_NXZ
??7ios_base@std@@QBE_NXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBGHH@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?uncaught_exception@std@@YA_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_BADOFF@std@@3_JB
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?good@ios_base@std@@QBE_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

shlwapi

PathAppendW
PathRemoveBackslashW
PathRemoveFileSpecW
PathFileExistsW

vcruntime140

__std_type_info_destroy_list
__std_type_info_name
__std_type_info_compare
__std_exception_destroy
__std_exception_copy
wcsstr
memchr
memcmp
strstr
_except_handler4_common
strchr
__RTDynamicCast
__RTCastToVoid
memset
memcpy
_CxxThrowException
memmove
__CxxFrameHandler3
__std_terminate
_purecall
strrchr
__vcrt_InitializeCriticalSectionEx

api-ms-win-crt-runtime-l1-1-0

_getpid
_invalid_parameter_noinfo_noreturn
perror
exit
_initterm_e
_exit
_initterm
__sys_nerr
_beginthread
_endthread
_wassert
_errno
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
__sys_errlist

api-ms-win-crt-string-l1-1-0

tolower
_strdup
wcspbrk
strlen
isalnum
isalpha
iscntrl
_stricmp
strcat_s
strtok
strcpy_s
wcsnlen
isdigit
strcmp
strncmp
strncpy_s
isgraph
wcscmp
isspace
strcpy
islower
strncpy
strspn
strcspn
strcat
_strnicmp
isprint
ispunct
isupper
isxdigit
toupper
strpbrk

api-ms-win-crt-heap-l1-1-0

_callnewh
free
calloc
_aligned_free
_aligned_malloc
realloc
malloc

api-ms-win-crt-environment-l1-1-0

getenv
_wgetenv_s
_putenv
_wgetenv
getenv_s
_wgetcwd
_wputenv_s

api-ms-win-crt-convert-l1-1-0

atof
_strtoi64
strtol
_strtoui64
strtoul
wcstombs_s
strtod
atoi

api-ms-win-crt-time-l1-1-0

_time64
_mktime64
clock
_localtime64

api-ms-win-crt-stdio-l1-1-0

ferror
fopen_s
fputs
fputws
setvbuf
fwrite
_fseeki64
fsetpos
fputc
fgetpos
_get_stream_buffer_pointers
__stdio_common_vfprintf
__stdio_common_vsscanf
__acrt_iob_func
_getcwd
ftell
_open
fread
getchar
_close
_wopen
_wfreopen
freopen
fopen
fgetc
fgets
ungetc
__stdio_common_vsprintf_s
fflush
_wfopen
fseek
clearerr
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
fclose

api-ms-win-crt-utility-l1-1-0

qsort
abs
srand
bsearch
rand_s
rand

api-ms-win-crt-filesystem-l1-1-0

_findclose
_stat64i32
_findnext64i32
_findfirst64i32
_lock_file
_wmkdir
_access
_unlink
_wunlink
_wremove
_wstat64i32
rename
_wrename
_waccess
remove
_unlock_file

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

??0?$CAdlmUtilSingleton@VAdlmLogger@@@@IAE@XZ
??0AdlmDebugLog@@QAE@ABV0@@Z
??0AdlmDebugLog@@QAE@W4VendorID@Adlm@@VTStr@@@Z
??0AdlmDebugLog@@QAE@XZ
??0AdlmDebugLogger@@QAE@XZ
??0AdlmDelimitedFile@@QAE@VTStr@@@Z
??0AdlmErrorBase@@QAE@ABV0@@Z
??0AdlmErrorBase@@QAE@W4VendorID@Adlm@@HABVTStr@@H11@Z
??0AdlmErrorTable@@QAE@ABV0@@Z
??0AdlmErrorTable@@QAE@ABVTStr@@@Z
??0AdlmLoggable@@IAE@ABVTStr@@@Z
??0AdlmLoggable@@QAE@ABV0@@Z
??0AdlmLogger@@QAE@ABVTStr@@@Z
??0AdlmLogger@@QAE@XZ
??0AdlmLogger@@QAE@_N@Z
??0AdlmPerfLog@@QAE@ABV0@@Z
??0AdlmPerfLog@@QAE@W4VendorID@Adlm@@ABUAdlmPerfLogData@@@Z
??0AdlmPerfLogger@@QAE@XZ
??0CAdlmUtilCleanup@@QAE@ABV0@@Z
??1?$CAdlmUtilSingleton@VAdlmLogger@@@@UAE@XZ
??1AdlmDebugLog@@UAE@XZ
??1AdlmDebugLogger@@UAE@XZ
??1AdlmDelimitedFile@@QAE@XZ
??1AdlmErrorBase@@UAE@XZ
??1AdlmErrorTable@@QAE@XZ
??1AdlmLoggable@@MAE@XZ
??1AdlmLogger@@UAE@XZ
??1AdlmPerfLog@@UAE@XZ
??1AdlmPerfLogger@@UAE@XZ
??4AdlmDebugLog@@QAEAAV0@ABV0@@Z
??4AdlmErrorBase@@QAEAAV0@ABV0@@Z
??4AdlmErrorTable@@QAEAAV0@ABV0@@Z
??4AdlmLoggable@@QAEAAV0@ABV0@@Z
??4AdlmPerfLog@@QAEAAV0@ABV0@@Z
??4CAdlmUtilCleanup@@QAEAAV0@ABV0@@Z
??_7?$CAdlmUtilSingleton@VAdlmLogger@@@@6B@
??_7AdlmDebugLog@@6B@
??_7AdlmDebugLogger@@6B@
??_7AdlmErrorBase@@6B@
??_7AdlmLoggable@@6B@
??_7AdlmLogger@@6B@
??_7AdlmPerfLog@@6B@
??_7AdlmPerfLogger@@6B@
??_7CAdlmUtilCleanup@@6B@
??_FAdlmErrorTable@@QAEXXZ
?ADLM_DEBUG_MODE@AdlmDebugLogger@@2QBDB
?ADLM_PERF_LOG@AdlmPerfLogger@@2QBDB
?COMPUTER_NAME@AdlmLoggable@@1QBDB
?GetErrorDescription@AdlmErrorTable@@QAE?AVTStr@@HH@Z
?GetVendorErrorDescription@AdlmErrorTable@@IAE?AVTStr@@PAVTiXmlNode@adlmTinyXml@@H@Z
?GetVendorName@AdlmErrorTable@@QAE?AVTStr@@H@Z
?Load@AdlmErrorTable@@QAE_NXZ
?OS@AdlmLoggable@@1QBDB
?REASON@AdlmLoggable@@1QBDB
?REASON_FATAL_ERROR@AdlmErrorBase@@2QBDB
?SetPathName@AdlmErrorTable@@QAEXABVTStr@@@Z
?THROWN_FILE@AdlmErrorBase@@2QBDB
?THROWN_LINE@AdlmErrorBase@@2QBDB
?VENDOR_ERROR@AdlmErrorBase@@2QBDB
?VENDOR_ID@AdlmErrorBase@@2QBDB
?addDescription@AdlmErrorBase@@IBE?AVTStr@@ABV2@0@Z
?append@AdlmDelimitedFile@@IAE_NABVTStr@@00@Z
?append@AdlmDelimitedFile@@IAE_NABVTStr@@AAV?$list@U?$pair@VTStr@@V1@@std@@V?$allocator@U?$pair@VTStr@@V1@@std@@@2@@std@@@Z
?append@AdlmDelimitedFile@@QAE_NAAV?$list@U?$pair@VTStr@@V1@@std@@V?$allocator@U?$pair@VTStr@@V1@@std@@@2@@std@@_N@Z
?append@AdlmDelimitedFile@@QAE_NABVTStr@@0_N@Z
?checkIfDebugLogIsEnabled@AdlmDebugLogger@@QAEXXZ
?checkIfPerfLogIsEnabled@AdlmPerfLogger@@QAEXXZ
?cleanup@?$CAdlmUtilSingleton@VAdlmLogger@@@@UAEXPAX@Z
?clear@AdlmDebugLog@@MAEXXZ
?clear@AdlmErrorBase@@MAEXXZ
?clear@AdlmLoggable@@MAEXXZ
?clear@AdlmPerfLog@@UAEXXZ
?clearContents@AdlmDelimitedFile@@QAEXXZ
?close@AdlmDelimitedFile@@QAEXXZ
?close@AdlmLogger@@SAXXZ
?dumpErrorInfo@AdlmErrorBase@@MBEXPAVAdlmLogger@@@Z
?dumpGeneralInfo@AdlmErrorBase@@MBEXPAVAdlmLogger@@@Z
?dumpHeaderInfo@AdlmLoggable@@MBEXPAVAdlmLogger@@@Z
?dumpSystemInfo@AdlmLoggable@@MBEXPAVAdlmLogger@@@Z
?dumpTechSupport@AdlmDebugLog@@UBEXPAVAdlmLogger@@@Z
?dumpTechSupport@AdlmErrorBase@@UBEXPAVAdlmLogger@@@Z
?dumpTechSupport@AdlmPerfLog@@UBEXPAVAdlmLogger@@@Z
?dumpVendorVersionInfo@AdlmErrorBase@@MBEXPAVAdlmLogger@@@Z
?errorTable@AdlmLogger@@QAEAAVAdlmErrorTable@@XZ
?formatDate@AdlmDelimitedFile@@IAE?AVTStr@@HHH@Z
?formatKey@AdlmDelimitedFile@@IBE?AVTStr@@ABV2@00@Z
?formatSection@AdlmDelimitedFile@@IBE?AVTStr@@ABV2@000@Z
?formatTime@AdlmDelimitedFile@@IAE?AVTStr@@HHH@Z
?formatTimeWMilliSecs@AdlmDelimitedFile@@IAE?AVTStr@@HHHH@Z
?getComponentID@AdlmDebugLog@@QBE?AW4VendorID@Adlm@@XZ
?getCurrentSection@AdlmDelimitedFile@@QBE?AVTStr@@ABV2@@Z
?getDebugLogInfo@AdlmDebugLog@@QBE?AVTStr@@XZ
?getFilename@AdlmDelimitedFile@@QBE?AVTStr@@XZ
?getHeader@AdlmLogger@@QBE?AVTStr@@XZ
?getLogFileName@AdlmLogger@@QBE?AVTStr@@XZ
?getReason@AdlmLoggable@@UBE?AVTStr@@XZ
?getThrownFile@AdlmErrorBase@@QBE?AVTStr@@XZ
?getThrownLine@AdlmErrorBase@@QBEHXZ
?getVendorID@AdlmErrorBase@@QBE?AW4VendorID@Adlm@@XZ
?getVendorIDStr@AdlmErrorBase@@QBE?AVTStr@@XZ
?getVendorStatusID@AdlmErrorBase@@QBEHXZ
?getVendorStatusIDStr@AdlmErrorBase@@QBE?AVTStr@@XZ
?getVendorStatusStr@AdlmErrorBase@@UBE?AVTStr@@XZ
?getVendorVersion@AdlmErrorBase@@QBE?AVTStr@@XZ
?indexOf@TStr@@QBEHABV1@J_N@Z
?indexOf@TStr@@QBEHDJ_N@Z
?indexOf@TStr@@QBEHPBDJ_N@Z
?initDebugLogFilePath@AdlmDebugLogger@@QAEXXZ
?initPerfLogFilePath@AdlmPerfLogger@@QAEXXZ
?initSynchronizeObject@AdlmLogger@@AAE_NXZ
?instance@?$CAdlmUtilSingleton@VAdlmLogger@@@@SAPAVAdlmLogger@@XZ
?instance@AdlmLogger@@SAPAV1@XZ
?instance_i@?$CAdlmUtilSingleton@VAdlmLogger@@@@KAAAPAV1@XZ
?instance_m@AdlmLogger@@SAPAV1@XZ
?isCurrentSectionSet@AdlmDelimitedFile@@QBE_NXZ
?isDebugLogEnabled@AdlmDebugLogger@@QBE_NXZ
?isPerfLogEnabled@AdlmPerfLogger@@QBE_NXZ
?kTab@AdlmDelimitedFile@@1PBDB
?loadErrorTable@AdlmLogger@@IAE_NXZ
?log@AdlmDebugLogger@@UAEXABVAdlmLoggable@@@Z
?log@AdlmDebugLogger@@UAEXQAVAdlmLoggable@@@Z
?log@AdlmLogger@@UAEXABVAdlmLoggable@@@Z
?log@AdlmLogger@@UAEXQAVAdlmLoggable@@@Z
?log@AdlmPerfLogger@@UAEXABVAdlmLoggable@@@Z
?log@AdlmPerfLogger@@UAEXQAVAdlmLoggable@@@Z
?logFile@AdlmLogger@@QAEAAVAdlmDelimitedFile@@XZ
?mInstance@AdlmLogger@@0V?$auto_ptr@VAdlmLogger@@@std@@A
?msHostName@AdlmLoggable@@1VTStr@@A
?msPlatformOS@AdlmLoggable@@1VTStr@@A
?open@AdlmDelimitedFile@@QAE_N_N@Z
?refresh@AdlmDelimitedFile@@QAEXXZ
?setComponentID@AdlmDebugLog@@QAEXW4VendorID@Adlm@@@Z
?setComponentIDStr@AdlmDebugLog@@IAEXXZ
?setDebugLogInfo@AdlmDebugLog@@QAEXABVTStr@@@Z
?setFilename@AdlmDelimitedFile@@QAEXABVTStr@@@Z
?setLogFileName@AdlmLogger@@QAEXABVTStr@@@Z
?setReason@AdlmLoggable@@UAEXABVTStr@@@Z
?setSystemInformation@AdlmLoggable@@IAEXXZ
?setThrownFile@AdlmErrorBase@@QAEXABVTStr@@@Z
?setThrownLine@AdlmErrorBase@@QAEXH@Z
?setVendorID@AdlmErrorBase@@QAEXW4VendorID@Adlm@@@Z
?setVendorStatusID@AdlmErrorBase@@QAEXH@Z
?setVendorVersion@AdlmErrorBase@@QAEXABVTStr@@@Z
?singleton_@?$CAdlmUtilSingleton@VAdlmLogger@@@@1PAV1@A
?startLogging@AdlmLogger@@QAEXXZ
?startLoggingWMilliSecs@AdlmLogger@@QAEXXZ
?updateCurrentSection@AdlmDelimitedFile@@QAEX_N@Z
?write@AdlmDelimitedFile@@QAE_NAAV?$list@U?$pair@VTStr@@V1@@std@@V?$allocator@U?$pair@VTStr@@V1@@std@@@2@@std@@@Z
?write@AdlmDelimitedFile@@QAE_NABVTStr@@0@Z
?write@AdlmDelimitedFile@@QAE_NABVTStr@@H@Z
?writeDebugLog@AdlmDelimitedFile@@QAE_NAAV?$list@VTStr@@V?$allocator@VTStr@@@std@@@std@@ABVTStr@@@Z
CecongiGapUcefOberryde
PiterseSetHoslOcorride
SocanseSetYsorObeqside
TycendoSerNostOvarhaso
addnlalldevetdafoillkecos
adlgnennhefewaspquorcilbb
adrrgotdnoserproructynlin
adrvlotoplelirryn
adsplycallerettikitsiendo
aiowcwercopwvlgwepxmnbekx
aknghedrlegotdequulctiren
ampmgathepoffongsedhad
anchhallleditintommbyrmew
anlmgichacule
antmbigofronhechooc
argrgonglolivucedeyrthyet
arskninolsonherpreducritf
asmbxafuoiwxzneqiiofkqlllqoqp
aspphtork
atlllieldicupe
avldricindenithemsertesho
avldwanthisenappquirlulen
avlmbandricobdeleurtheren
dqlkfoylkggkaykesrxww
ecknslaysep
edrnsinedrimodesurirtr
edsthathbocgose
empmBenEmronDit
enddlicandefivrah
eslllifdlanetrikseattedva
euwmvmkwkkqozxafwpje
evcrrathletomparndiysburi
h23hwej342hnrn54645
iclmbavddenantethacourt
iddmbsoct
idghhasstusottrieledpinin
idldnedsposetprodeshintos
idlmhaldgerelimogeirtboar
idlmtandletetacptuitsalmb
idmpherinsemhechid
idndrodprenytorfowwbartew
idnmhasdrompose
idnmpealpunale
idrmpicengeistrous
ildmparserearnungar
insthessuondtrils
inthtecandittofrloruchasp
intmsatsikeillumpid
itlmsicdwedyscroaretpodit
ivzsceillithosmatoon
jkndsandrenlose
matocetnysrpatdne
medtiteadnmhbbasdluoten
midfmsfslds6fdf4jn2eq
odlmdacclesitippquitcallb
odngsetonplrofersesevthca
odrmbecensiatynergsmodine
odscliletsendecteathersea
odsmhanghegatincofmbomped
odtmpofrlerersetryigtervo
ofllligitserhachout
ogdpwo0909rsyertrgu4
oilkjweckljaweacoijasidom
okhmbanwwisetapcbuatvislr
ondmreceldecroate
onlmrardnegitretryceynt
ontmlacinsigithergirnano
oslllicovtelheckwsanys
osthlikimsitittumsirtefne
owlvbasiprmdiuligdasthais
poqpwersklkxwzokwppqmvkez
powpoersweobdfkzlewvkeewwqk
qwrpbleznbmcvkoepqwvkwqp
utlmmeblilerempiorysfarmi
uwerlklbkeoszmndhjewuwyslka
werjiocaioellkjbaxklaglez
widkkwelsiwooquvjshayrytiepqsk
wobpplgjshwyugibzvncmeje
woiulkqkikxnsjwotjelwoqwkw
wwdeparsyertrgu4d5po
ycllgetheromergien
yddmhondromedcdinnincerva
ydlllicyndidonete
ydlmhothratethriemelpedit
ydlwinolealony
ydnchanthamersulriontofve
ydsknecansuishatrividnese
ydstryntlepalwyrtdaidvivo

Sections

.text
Size: 871KB - Virtual size: 871KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textidx
Size: 913KB - Virtual size: 913KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fnp_dir
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fnp_mar
Size: 512B - Virtual size: 1B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AUTODESK_V2022_NLM_CRACK-XFORCE/xf_adsk2022/adskflex.exe
.exe windows:6 windows x64 arch:x64

c882e01a79fc794051a89c026cc69cc6

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

24/03/2020, 00:00

Not After

25/03/2021, 23:59

Subject

CN=Autodesk\, Inc.,O=Autodesk\, Inc.,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

22/07/2014, 00:00

Not After

21/07/2024, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

96:b5:a4:ae:99:60:18:26:aa:be:4b:49:02:10:b3:75:79:d5:7e:6b:88:fa:e1:28:56:d5:72:55:b8:6c:7b:e8
Signer

Actual PE Digest

96:b5:a4:ae:99:60:18:26:aa:be:4b:49:02:10:b3:75:79:d5:7e:6b:88:fa:e1:28:56:d5:72:55:b8:6c:7b:e8

Digest Algorithm

sha256

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
CloseHandle
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
GetFileSizeEx
MultiByteToWideChar
SetLastError
GetCurrentThread
DeleteFileW
GetFileAttributesExW
FlushFileBuffers
GetTimeZoneInformation
WideCharToMultiByte
CreateDirectoryW
OutputDebugStringW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
CreateFileW
HeapSize
HeapReAlloc
SetEndOfFile
WriteConsoleW
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
EncodePointer
RtlPcToFileHeader
WriteFile
GetStdHandle
GetLastError
GetWindowsDirectoryA
ReleaseMutex
WaitForSingleObject
CreateMutexA
SetEvent
CreateEventA
SetConsoleTitleA
LocalFree
FormatMessageA
DeleteFileA
FindFirstFileA
ReleaseSemaphore
GetVersion
CreateSemaphoreA
OpenProcess
SetHandleInformation
SetErrorMode
GetEnvironmentVariableA
GetEnvironmentVariableW
GetVersionExA
Sleep
GetEnvironmentStrings
FreeEnvironmentStringsA
lstrlenA
ResetEvent
GetLocalTime
CreateFileA
SetNamedPipeHandleState
SleepEx
WaitNamedPipeA
FindNextFileA
GetSystemWindowsDirectoryA
FindFirstFileW
GetProcessTimes
GetTickCount
GetModuleHandleA
GetDriveTypeA
GetVolumeInformationA
DeviceIoControl
LoadLibraryExA
DuplicateHandle
WaitForMultipleObjects
SetThreadPriority
GetThreadPriority
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
GetSystemDirectoryA
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
SetFileTime
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
LockFileEx
UnlockFileEx
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
MoveFileExW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
ReadFile
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetModuleFileNameW
FreeLibrary

shlwapi

PathRemoveFileSpecA
PathRemoveBackslashW

user32

GetDlgItemTextW
SetFocus
GetFocus
SendMessageA
GetDlgItemTextA
SetDlgItemTextA
GetDlgItem
MessageBoxA
GetActiveWindow
wsprintfA
ShowWindow
EndDialog
MoveWindow
SetWindowTextA
GetSystemMetrics
CreateDialogIndirectParamA
DialogBoxIndirectParamA
GetParent
GetClientRect
GetWindowRect
GetWindowLongA
MessageBeep
ScreenToClient
EnableWindow

netapi32

Netbios

comdlg32

GetOpenFileNameA

comctl32

ord17

wsock32

getpeername
ioctlsocket
inet_addr
__WSAFDIsSet
closesocket
connect
WSACleanup
WSAStartup
getsockname
getsockopt
htonl
getprotobyname
WSAGetLastError
socket
setsockopt
send
select
recv
inet_ntoa

shell32

ord680

oleaut32

VariantClear
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
VariantInit
SysAllocStringLen
SafeArrayGetUBound
SafeArrayDestroy
SysFreeString
SysAllocString

ole32

CoCreateInstance
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoInitializeSecurity

ws2_32

getnameinfo
WSAPoll
getaddrinfo
inet_ntop
freeaddrinfo

psapi

GetProcessMemoryInfo

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
StartServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCloseKey
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
GetUserNameA
GetUserNameW
RegQueryValueExA
RegQueryValueExW
RegSetValueExA
RegSetValueExW
DeregisterEventSource
RegisterEventSourceA
ReportEventA
RegCreateKeyExA
CloseServiceHandle
OpenSCManagerA
OpenServiceA
QueryServiceStatus

dhcpcsvc

DhcpRequestParams

userenv

GetProfilesDirectoryA

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textidx
Size: 940KB - Virtual size: 939KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 333KB - Virtual size: 333KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
AUTODESK_V2022_NLM_CRACK-XFORCE/xf_adsk2022/lic.dat

Sharing

General

Malware Config

Signatures

Files

Password: infected

6dc87248d4741c58247fb958e004dd11

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3Certificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

e5:5c:00:c6:37:f3:d5:2d:43:ac:da:31:0d:07:6b:ed:89:40:c3:d8:36:09:00:9b:41:6f:30:6b:54:09:f9:05Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

qt5widgets_ad_5_12

qt5gui_ad_5_12

qt5websockets_ad_5_12

qt5network_ad_5_12

qt5xml_ad_5_12

wintrust

imagehlp

crypt32

qt5core_ad_5_12

kernel32

user32

advapi32

msvcp140

secur32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 247KB - Virtual size: 247KB

.data Size: 26KB - Virtual size: 38KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 80KB - Virtual size: 80KB

ca04e1e58d6a21ec254582373c84dfcb

Code Sign

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3Certificate

Extended Key Usages

Key Usages

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8Certificate

Extended Key Usages

Key Usages

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12Certificate

Extended Key Usages

Key Usages

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12Certificate

Extended Key Usages

Key Usages

9e:fc:dc:5d:3f:a0:01:99:3d:46:dc:b7:7b:ed:4f:98:72:6a:3f:b6:b6:ff:72:de:34:67:e7:12:7c:1d:f1:43Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 5.4MB - Virtual size: 5.4MB

.rdata Size: 6.6MB - Virtual size: 6.6MB

.data Size: 373KB - Virtual size: 477KB

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

8c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6b
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

e5:5c:00:c6:37:f3:d5:2d:43:ac:da:31:0d:07:6b:ed:89:40:c3:d8:36:09:00:9b:41:6f:30:6b:54:09:f9:05
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 247KB - Virtual size: 247KB

.data
Size: 26KB - Virtual size: 38KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 80KB - Virtual size: 80KB

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

9e:fc:dc:5d:3f:a0:01:99:3d:46:dc:b7:7b:ed:4f:98:72:6a:3f:b6:b6:ff:72:de:34:67:e7:12:7c:1d:f1:43
Signer

.text
Size: 5.4MB - Virtual size: 5.4MB

.rdata
Size: 6.6MB - Virtual size: 6.6MB

.data
Size: 373KB - Virtual size: 477KB

/4
Size: 512B - Virtual size: 281B

/19
Size: 864KB - Virtual size: 864KB

/32
Size: 200KB - Virtual size: 200KB

/46
Size: 34KB - Virtual size: 34KB

/63
Size: 104KB - Virtual size: 103KB

/80
Size: 512B - Virtual size: 34B

/99
Size: 1.4MB - Virtual size: 1.4MB

/112
Size: 939KB - Virtual size: 938KB

/124
Size: 277KB - Virtual size: 276KB

.idata
Size: 1024B - Virtual size: 990B

.symtab
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 244KB - Virtual size: 244KB

31:a1:97:cb:84:a4:8c:48:eb:ce:9d:a6:e4:5a:17:f3
Certificate

7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Certificate

3d:1a:35:72:30:15:82:63:30:d0:13:71:7e:82:41:08
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

bd:dc:11:bc:ec:85:98:89:a9:7a:28:42:cc:43:c7:65:e8:66:0b:97:52:53:a8:a4:2e:2f:7a:9a:08:94:55:3c
Signer

.text
Size: 871KB - Virtual size: 871KB

.textidx
Size: 913KB - Virtual size: 913KB

.rdata
Size: 169KB - Virtual size: 168KB

.data
Size: 111KB - Virtual size: 140KB

.gfids
Size: 512B - Virtual size: 76B

.tls
Size: 512B - Virtual size: 9B

.fnp_dir
Size: 512B - Virtual size: 100B

.fnp_mar
Size: 512B - Virtual size: 1B