auto_updating_evo[.]gj[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

auto_updating_evo.gj.rar
Size

17.9MB
MD5

2aa2b9bb3e11ca7de56a25eeadd1dd8c
SHA1

3ea92fe89cbcb69d839a4c558d25b07deda6a07a
SHA256

f889880bcc6b4b82f9fc9f10751e5707ea2e25030075aa33411af69520271f88
SHA512

55ec0f077876de8333f4148969f1c5554d440fc058785ee57b7edb2d93966b6ef866b6476b1d76814d42b9716cd96c1a72b89c148fadb7890dcd199e0a972c82
SSDEEP

393216:6qDb3fn31I74TAD9yX5n9sHCk82/NBCbp99KRsoYaoxQQ7s:6qDLn31e4K9a5WR1nWp3LaWbs

Score

3^/10

Malware Config

Signatures

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/tools/openssl/openssl.exe
unpack001/fortnite-external-evo.gj-master/x64/Debug/evo.gj.exe
unpack001/fortnite-external-evo.gj-master/x64/Release/evo.gj.exe
unpack001/fortnite-external-evo.gj-master/x64/Release/kdmapper.exe

Files

auto_updating_evo.gj.rar
.rar
fortnite-external-evo.gj-master/.gitattributes
fortnite-external-evo.gj-master/.gitignore
fortnite-external-evo.gj-master/README.md
fortnite-external-evo.gj-master/evo.gj.sln
fortnite-external-evo.gj-master/evo.gj/cheat/aimbot/aimbot.cpp
fortnite-external-evo.gj-master/evo.gj/cheat/aimbot/aimbot.h
fortnite-external-evo.gj-master/evo.gj/cheat/driver/driver.cpp
fortnite-external-evo.gj-master/evo.gj/cheat/driver/driver.h
fortnite-external-evo.gj-master/evo.gj/cheat/driver/driverdefs.h
fortnite-external-evo.gj-master/evo.gj/cheat/esp/esp.cpp
fortnite-external-evo.gj-master/evo.gj/cheat/esp/esp.h
fortnite-external-evo.gj-master/evo.gj/cheat/sdk/offsets.hpp
fortnite-external-evo.gj-master/evo.gj/cheat/sdk/sdk.cpp
fortnite-external-evo.gj-master/evo.gj/cheat/sdk/sdk.h
fortnite-external-evo.gj-master/evo.gj/evo.gj.vcxproj
.xml
fortnite-external-evo.gj-master/evo.gj/evo.gj.vcxproj.filters
fortnite-external-evo.gj-master/evo.gj/evo.gj.vcxproj.user
fortnite-external-evo.gj-master/evo.gj/main.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imconfig.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_demo.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_draw.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_impl_dx9.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_impl_dx9.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_impl_win32.cpp
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_impl_win32.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_internal.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imgui_widgets.cpp
.vbs
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imstb_rectpack.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imstb_textedit.h
fortnite-external-evo.gj-master/evo.gj/render/ImGui/imstb_truetype.h
fortnite-external-evo.gj-master/evo.gj/render/render.cpp
fortnite-external-evo.gj-master/evo.gj/render/render.h
fortnite-external-evo.gj-master/evo.gj/util/DSAPI.cpp
fortnite-external-evo.gj-master/evo.gj/util/DSAPI.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/BUILD_INFO
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/CONTROL
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/curl.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/curlver.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/easy.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/mprintf.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/multi.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/stdcheaders.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/system.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/typecheck-gcc.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/include/curl/urlapi.h
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/lib/libcurl.lib
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/lib/pkgconfig/libcurl.pc
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/CURLConfig.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/CURLConfigVersion.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/CURLTargets-debug.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/CURLTargets-release.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/CURLTargets.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/copyright
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/vcpkg-cmake-wrapper.cmake
fortnite-external-evo.gj-master/evo.gj/util/libs/curl/share/curl/vcpkg_abi_info.txt
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/LICENSE.md
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/README.md
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/compress.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/config.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/decompress.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/utils.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/gzip/version.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/adl_serializer.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/byte_container_with_subtype.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/conversions/from_json.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/conversions/to_chars.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/conversions/to_json.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/exceptions.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/hash.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/binary_reader.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/input_adapters.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/json_sax.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/lexer.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/parser.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/input/position_t.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/internal_iterator.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/iter_impl.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/iteration_proxy.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/iterator_traits.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/json_reverse_iterator.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/iterators/primitive_iterator.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/json_pointer.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/json_ref.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/macro_scope.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/macro_unscope.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/meta/cpp_future.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/meta/detected.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/meta/is_sax.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/meta/type_traits.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/meta/void_t.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/output/binary_writer.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/output/output_adapters.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/output/serializer.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/detail/value_t.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/json.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/json_fwd.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/ordered_map.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/thirdparty/hedley/hedley.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/include/nlohmann/thirdparty/hedley/hedley_undef.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/json/meson.build
fortnite-external-evo.gj-master/evo.gj/util/libs/json/single_include/nlohmann/json.hpp
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/BUILD_INFO
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/CONTROL
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/__DECC_INCLUDE_EPILOGUE.H
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/__DECC_INCLUDE_PROLOGUE.H
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/aes.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/asn1.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/asn1_mac.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/asn1err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/asn1t.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/async.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/asyncerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/bio.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/bioerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/blowfish.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/bn.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/bnerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/buffer.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/buffererr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/camellia.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cast.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cmac.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cms.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cmserr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/comp.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/comperr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/conf.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/conf_api.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/conferr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/crypto.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cryptoerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ct.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/cterr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/des.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/dh.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/dherr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/dsa.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/dsaerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/dtls1.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/e_os2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ebcdic.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ec.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ecdh.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ecdsa.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ecerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/engine.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/engineerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/evp.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/evperr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/hmac.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/idea.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/kdf.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/kdferr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/lhash.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/md2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/md4.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/md5.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/mdc2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/modes.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/obj_mac.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/objects.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/objectserr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ocsp.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ocsperr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/opensslconf.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/opensslv.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ossl_typ.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pem.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pem2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pemerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pkcs12.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pkcs12err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pkcs7.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/pkcs7err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rand.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rand_drbg.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/randerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rc2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rc4.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rc5.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ripemd.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rsa.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/rsaerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/safestack.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/seed.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/sha.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/srp.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/srtp.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ssl.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ssl2.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ssl3.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/sslerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/stack.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/store.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/storeerr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/symhacks.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/tls1.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ts.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/tserr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/txt_db.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/ui.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/uierr.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/whrlpool.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/x509.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/x509_vfy.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/x509err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/x509v3.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/include/openssl/x509v3err.h
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/lib/libcrypto.lib
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/lib/libssl.lib
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/misc/CA.pl
.pl .sh linux
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/misc/tsget.pl
.pl .sh linux
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/share/openssl-windows/copyright
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/share/openssl-windows/usage
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/share/openssl-windows/vcpkg_abi_info.txt
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/tools/openssl/openssl.cnf
fortnite-external-evo.gj-master/evo.gj/util/libs/openssl/tools/openssl/openssl.exe
.exe windows:6 windows x64 arch:x64

732a96124b8861074c477bb0c135dc06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\risku\Downloads\vcpkg-master\buildtrees\openssl-windows\x64-windows-static-rel\apps\openssl.pdb

Imports

ws2_32

shutdown
__WSAFDIsSet
WSAGetLastError
socket
listen
connect
bind
accept
WSACleanup
WSAStartup
getsockname
ioctlsocket
getnameinfo
freeaddrinfo
getaddrinfo
ntohs
sendto
recvfrom
getsockopt
WSASetLastError
send
closesocket
recv
setsockopt
select

advapi32

CryptCreateHash
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
DeregisterEventSource
CryptDecrypt
CryptExportKey
CryptGetUserKey

crypt32

CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
CertOpenStore

user32

GetUserObjectInformationW
MessageBoxW
GetProcessWindowStation

bcrypt

BCryptGenRandom

kernel32

GetCurrentDirectoryW
GetFileSizeEx
GetFullPathNameW
GetFileAttributesExW
SetEndOfFile
GetNumberOfConsoleInputEvents
PeekConsoleInputA
HeapReAlloc
SetFileAttributesW
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetFilePointerEx
CreateFiber
FlushFileBuffers
SetStdHandle
CloseHandle
GetLastError
PeekNamedPipe
Sleep
ExitProcess
CreateThread
TerminateThread
GetStdHandle
DeleteFileW
GetFileAttributesW
ReadFile
WriteFile
GetProcessTimes
GetCurrentProcessId
OpenProcess
GetSystemTime
MoveFileW
SystemTimeToFileTime
MultiByteToWideChar
PeekConsoleInputW
GetCommandLineW
GetEnvironmentVariableW
FindFirstFileW
FindNextFileW
WideCharToMultiByte
GetConsoleOutputCP
SetConsoleOutputCP
SetLastError
GetFileType
GetModuleHandleW
GetProcAddress
FormatMessageW
SwitchToFiber
DeleteFiber
RtlUnwind
ConvertFiberToThread
ConvertThreadToFiber
RtlVirtualUnwind
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleExW
FindClose
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryA
LoadLibraryW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
LCMapStringW
RtlUnwindEx
LoadLibraryExW
RaiseException
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetConsoleCP
SetConsoleCtrlHandler
GetModuleFileNameW
GetCommandLineA
HeapAlloc
HeapFree
CompareStringW

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 749KB - Virtual size: 748KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fortnite-external-evo.gj-master/evo.gj/util/libs/zconf.h
fortnite-external-evo.gj-master/evo.gj/util/libs/zlib.h
fortnite-external-evo.gj-master/evo.gj/util/libs/zlib.lib
fortnite-external-evo.gj-master/evo.gj/util/util.cpp
fortnite-external-evo.gj-master/evo.gj/util/util.h
fortnite-external-evo.gj-master/evo.gj/x64/Release/DSAPI.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/aimbot.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/driver.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/esp.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.Build.CppClean.log
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.exe.recipe
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.iobj
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.ipdb
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.log
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/CL.command.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/CL.read.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/CL.write.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/Cl.items.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/evo.gj.lastbuildstate
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/link.command.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/link.read.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/evo.gj.tlog/link.write.1.tlog
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui_demo.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui_draw.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui_impl_dx9.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui_impl_win32.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/imgui_widgets.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/main.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/render.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/sdk.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/util.obj
fortnite-external-evo.gj-master/evo.gj/x64/Release/vc143.pdb
fortnite-external-evo.gj-master/x64/Debug/evo.gj.exe
.exe windows:6 windows x64 arch:x64

6f77d38701a8bba43fb053109f456506

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\mab82\OneDrive\Desktop\ud\evo.gj\x64\Debug\evo.gj.pdb

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
CreateThread
CloseHandle
GetLastError
SetLastError
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
WideCharToMultiByte
MultiByteToWideChar
RaiseException
GetStartupInfoW
GlobalLock
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
FreeLibrary
GlobalFree
GlobalUnlock
IsDebuggerPresent
GlobalAlloc

user32

CloseClipboard
LoadIconW
GetWindow
GetWindowThreadProcessId
EnumWindows
SetClipboardData
GetClipboardData
EmptyClipboard
GetActiveWindow
SetWindowLongW
GetWindowLongW
GetWindowRect
GetForegroundWindow
GetKeyState
GetCapture
SetCapture
ReleaseCapture
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
LoadCursorW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcA
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
MoveWindow
SetWindowPos
GetAsyncKeyState
GetSystemMetrics
GetDesktopWindow
OpenClipboard
UpdateWindow

msvcp140d

_Query_perf_counter
_Query_perf_frequency

d3d9

Direct3DCreate9Ex

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext

vcruntime140d

memchr
memcpy
memmove
memset
strstr
__vcrt_LoadLibraryExW
memcmp
strchr
wcsstr
__C_specific_handler
__current_exception
__current_exception_context
__C_specific_handler_noexcept
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

fclose
powf
isprint
exit
_CrtDbgReport
_CrtDbgReportW
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_seh_filter_exe
_set_app_type
__setusermatherr
_get_initial_narrow_environment
_initterm
ceilf
_exit
_set_fmode
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
atof
strcpy_s
strcat_s
__stdio_common_vsprintf_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
_wfopen
__acrt_iob_func
_wassert
strncpy
strlen
strcmp
acosf
rand
sqrtf
sinf
cosf
strncmp
strcpy
toupper
fmodf
fabs
qsort
malloc
free
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
ftell
fflush
pow
_free_dbg
floorf
_initterm_e
fread
atan2f
fseek

Sections

.textbss
Size: - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 850KB - Virtual size: 850KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 224KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fortnite-external-evo.gj-master/x64/Debug/evo.gj.pdb
fortnite-external-evo.gj-master/x64/Release/driver.sys
.sys windows:10 windows x64 arch:x64

ccea250b1319c1952e5d98024ffbc5c3

Code Sign

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7d
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2021, 00:00

Not After

07/03/2024, 23:59

Subject

SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7d
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

11/02/2021, 00:00

Not After

07/03/2024, 23:59

Subject

SERIALNUMBER=5128862,CN=Discord Inc.,OU=Select or enter,O=Discord Inc.,L=San Francisco,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

29/03/2022, 00:00

Not After

14/03/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

39:5a:a2:2e:3c:53:0e:f2:a2:14:5d:8e:f2:7f:18:2c:2b:e3:99:1d:75:f3:04:17:9b:a9:34:22:13:86:f7:c8
Signer

Actual PE Digest

39:5a:a2:2e:3c:53:0e:f2:a2:14:5d:8e:f2:7f:18:2c:2b:e3:99:1d:75:f3:04:17:9b:a9:34:22:13:86:f7:c8

Digest Algorithm

sha256

PE Digest Matches

false

57:97:ea:68:25:b5:a6:0c:42:a7:b0:22:f1:d4:d6:ce:5f:dd:c5:bc
Signer

Actual PE Digest

57:97:ea:68:25:b5:a6:0c:42:a7:b0:22:f1:d4:d6:ce:5f:dd:c5:bc

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\asin\Desktop\project\driver\x64\Release\driver.pdb

Imports

ntoskrnl.exe

RtlInitUnicodeString
RtlGetVersion
MmUnmapIoSpace
MmMapIoSpaceEx
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoGetCurrentProcess
ObfDereferenceObject
MmCopyMemory
PsLookupProcessByProcessId
MmCopyVirtualMemory
IoCreateDriver
PsGetProcessSectionBaseAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fortnite-external-evo.gj-master/x64/Release/evo.gj.exe
.exe windows:6 windows x64 arch:x64

3613488f203956ead080659c7441248f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\gg\Downloads\fortnite-external-evo.gj-master\fortnite-external-evo.gj-master\x64\Release\evo.gj.pdb

Imports

kernel32

SystemTimeToFileTime
GetEnvironmentVariableW
WideCharToMultiByte
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SwitchToFiber
DeleteFiber
CreateFiber
FindClose
FindFirstFileW
FindNextFileW
MultiByteToWideChar
GetModuleHandleExW
FormatMessageW
GetFileSizeEx
GetModuleHandleW
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlVirtualUnwind
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryW
ReadFile
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
WaitForSingleObjectEx
VerifyVersionInfoA
LoadLibraryA
GetSystemTime
CreateFileA
WaitForMultipleObjects
FormatMessageA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
VerSetConditionMask
SleepEx
Sleep
PeekNamedPipe
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DeleteCriticalSection
InitializeCriticalSectionEx
DeviceIoControl
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetLastError
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
lstrcmpiW
CloseHandle
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
CreateFileW
WriteFile

user32

DestroyWindow
GetWindow
GetSystemMetrics
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
SetWindowPos
ShowWindow
GetAsyncKeyState
DispatchMessageW
PeekMessageW
GetForegroundWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
GetWindowRect
LoadIconW
SetWindowLongW
GetDesktopWindow
RegisterClassExA
UpdateWindow
GetKeyState
ScreenToClient
GetActiveWindow
ClientToScreen
LoadCursorW
SetCursor
GetClientRect
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
TranslateMessage
mouse_event
SetClipboardData
GetClipboardData

advapi32

ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
CryptAcquireContextW
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptSignHashW
CryptEnumProvidersW

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
_Query_perf_counter
_Query_perf_frequency
?_Xbad_function_call@std@@YAXXZ
?good@ios_base@std@@QEBA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z

d3d9

Direct3DCreate9Ex

dwmapi

DwmExtendFrameIntoClientArea

wldap32

ord22
ord26
ord46
ord41
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord50
ord143
ord27
ord211
ord60
ord45

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

bcrypt

BCryptGenRandom

vcruntime140_1

__CxxFrameHandler4

vcruntime140

wcsstr
memcpy
memset
strrchr
memmove
memcmp
memchr
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
strchr

api-ms-win-crt-runtime-l1-1-0

strerror
_errno
__sys_nerr
exit
system
signal
strerror_s
_exit
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
raise
__p___argc
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_set_app_type
_seh_filter_exe
terminate
_cexit
_crt_atexit
_beginthreadex

api-ms-win-crt-stdio-l1-1-0

fwrite
ftell
__stdio_common_vfprintf
_set_fmode
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vswprintf
fseek
fread
fclose
fflush
__stdio_common_vsscanf
setbuf
clearerr
_setmode
_fileno
ferror
feof
_wfopen
_open
puts
_close
_write
fputs
_lseeki64
setvbuf
_read
__p__commode
fopen
fgets
fputc
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcmp
tolower
isspace
strcspn
strpbrk
isupper
_stricmp
isprint
_strnicmp
strncmp
strspn
strncpy
_strdup

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

calloc
realloc
_callnewh
malloc
_set_new_mode
free

api-ms-win-crt-convert-l1-1-0

atof
strtod
strtol
atoi
strtoll
strtoull
strtoul

api-ms-win-crt-locale-l1-1-0

localeconv
_configthreadlocale

api-ms-win-crt-time-l1-1-0

_gmtime64_s
_time64
_gmtime64

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32
_fstat64
_stat64i32
_stat64
_access

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

floorf
_dclass
__setusermatherr
ceilf
powf
sinf
sqrt
atan2
cosf
sqrtf
pow
asin
tanf
fmodf

crypt32

CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

ws2_32

getsockopt
WSAGetLastError
inet_pton
getsockname
getpeername
htons
__WSAFDIsSet
select
connect
bind
ntohs
ioctlsocket
setsockopt
WSAIoctl
WSASetLastError
getnameinfo
shutdown
gethostname
sendto
recvfrom
ntohl
freeaddrinfo
WSAStartup
getaddrinfo
WSACleanup
accept
closesocket
listen
htonl
socket
send
recv

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 694KB - Virtual size: 694KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
fortnite-external-evo.gj-master/x64/Release/evo.gj.pdb
fortnite-external-evo.gj-master/x64/Release/imgui.ini
fortnite-external-evo.gj-master/x64/Release/kdmapper.exe
.exe windows:6 windows x64 arch:x64

d82bf8ddd2e00bd8d00474103b0c2224

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\mab82\Downloads\kdmapper-master ds\kdmapper-master\x64\Release\kdmapper.pdb

Imports

kernel32

GetCurrentThreadId
GetModuleHandleA
GetLastError
CloseHandle
CreateFileW
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
SetUnhandledExceptionFilter
GetTempPathW
FormatMessageA
GetLocaleInfoEx
InitializeCriticalSectionEx
VirtualAlloc
DeviceIoControl
VirtualFree
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WideCharToMultiByte
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
LocalFree

advapi32

RegCloseKey
RegDeleteKeyW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW

msvcp140

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z

ntdll

NtQuerySystemInformation
RtlInitUnicodeString

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception
__C_specific_handler
memmove
_CxxThrowException
__std_exception_copy
__std_exception_destroy
memcmp
__current_exception_context
__std_terminate
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

fsetpos
ungetc
__p__commode
fflush
fread
_fseeki64
setvbuf
fgetpos
fwrite
fclose
_set_fmode
fgetc
fputc
_get_stream_buffer_pointers

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
_set_new_mode

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_wremove
_unlock_file

api-ms-win-crt-string-l1-1-0

_wcsicmp
_stricmp

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-runtime-l1-1-0

_get_initial_wide_environment
_initialize_wide_environment
_configure_wide_argv
_initterm
_initterm_e
_set_app_type
_seh_filter_exe
_c_exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_exit
_cexit
terminate
exit
__p___argc
_invalid_parameter_noinfo_noreturn
__p___wargv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

732a96124b8861074c477bb0c135dc06

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

advapi32

crypt32

user32

bcrypt

kernel32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 749KB - Virtual size: 748KB

.data Size: 55KB - Virtual size: 79KB

.pdata Size: 90KB - Virtual size: 89KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 1024B - Virtual size: 960B

.reloc Size: 33KB - Virtual size: 33KB

6f77d38701a8bba43fb053109f456506

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140d

d3d9

dwmapi

imm32

vcruntime140d

vcruntime140_1d

ucrtbased

Sections

.textbss Size: - Virtual size: 403KB

.text Size: 850KB - Virtual size: 850KB

.rdata Size: 224KB - Virtual size: 223KB

.data Size: 22KB - Virtual size: 51KB

.pdata Size: 31KB - Virtual size: 30KB

.idata Size: 9KB - Virtual size: 8KB

.msvcjmc Size: 2KB - Virtual size: 1KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 373B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

ccea250b1319c1952e5d98024ffbc5c3

Code Sign

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7dCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7dCertificate

Extended Key Usages

Key Usages

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5cCertificate

Extended Key Usages

Key Usages

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9dCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

39:5a:a2:2e:3c:53:0e:f2:a2:14:5d:8e:f2:7f:18:2c:2b:e3:99:1d:75:f3:04:17:9b:a9:34:22:13:86:f7:c8Signer

57:97:ea:68:25:b5:a6:0c:42:a7:b0:22:f1:d4:d6:ce:5f:dd:c5:bcSigner

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 749KB - Virtual size: 748KB

.data
Size: 55KB - Virtual size: 79KB

.pdata
Size: 90KB - Virtual size: 89KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 33KB - Virtual size: 33KB

.textbss
Size: - Virtual size: 403KB

.text
Size: 850KB - Virtual size: 850KB

.rdata
Size: 224KB - Virtual size: 223KB

.data
Size: 22KB - Virtual size: 51KB

.pdata
Size: 31KB - Virtual size: 30KB

.idata
Size: 9KB - Virtual size: 8KB

.msvcjmc
Size: 2KB - Virtual size: 1KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 373B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7d
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0b:52:66:11:34:d0:1e:61:3c:34:04:03:3a:87:b7:7d
Certificate

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

39:5a:a2:2e:3c:53:0e:f2:a2:14:5d:8e:f2:7f:18:2c:2b:e3:99:1d:75:f3:04:17:9b:a9:34:22:13:86:f7:c8
Signer

57:97:ea:68:25:b5:a6:0c:42:a7:b0:22:f1:d4:d6:ce:5f:dd:c5:bc
Signer

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 112B

.pdata
Size: 512B - Virtual size: 264B

INIT
Size: 1024B - Virtual size: 538B

.reloc
Size: 512B - Virtual size: 36B

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 694KB - Virtual size: 694KB

.data
Size: 22KB - Virtual size: 41KB

.pdata
Size: 89KB - Virtual size: 89KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 25KB - Virtual size: 24KB