C:\Users\echol\source\repos\PS22PS4-GUI\PS22PS4-GUI\obj\Release\PS22PS4_GUI.pdb
Overview
overview
7Static
static
7PS22PS4-GUI.exe
windows7-x64
1PS22PS4-GUI.exe
windows10-2004-x64
1bin/dlls/D...re.dll
windows7-x64
1bin/dlls/D...re.dll
windows10-2004-x64
1bin/dlls/D...60.dll
windows7-x64
1bin/dlls/D...60.dll
windows10-2004-x64
1bin/dlls/D...et.dll
windows7-x64
1bin/dlls/D...et.dll
windows10-2004-x64
1bin/dlls/D...ry.dll
windows7-x64
1bin/dlls/D...ry.dll
windows10-2004-x64
1bin/dlls/D...ms.dll
windows7-x64
1bin/dlls/D...ms.dll
windows10-2004-x64
1bin/dlls/H...ck.dll
windows7-x64
1bin/dlls/H...ck.dll
windows10-2004-x64
1bin/dlls/N...on.dll
windows7-x64
1bin/dlls/N...on.dll
windows10-2004-x64
1bin/dlls/l...et.dll
windows7-x64
1bin/dlls/l...et.dll
windows10-2004-x64
1bin/dlls/lzo.net.dll
windows7-x64
1bin/dlls/lzo.net.dll
windows10-2004-x64
1bin/dlls/n...rk.dll
windows7-x64
1bin/dlls/n...rk.dll
windows10-2004-x64
1bin/emulat...V2.pkg
macos-10.15-amd64
bin/tools/ext/di.exe
windows7-x64
1bin/tools/ext/di.exe
windows10-2004-x64
1bin/tools/...c9.dll
windows7-x64
1bin/tools/...c9.dll
windows10-2004-x64
3bin/tools/ext/sc.exe
windows7-x64
4bin/tools/ext/sc.exe
windows10-2004-x64
4bin/tools/gengp4.exe
windows7-x64
7bin/tools/gengp4.exe
windows10-2004-x64
7bin/tools/...ch.exe
windows7-x64
7Behavioral task
behavioral1
Sample
PS22PS4-GUI.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
PS22PS4-GUI.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
bin/dlls/DiscUtils.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
bin/dlls/DiscUtils.Core.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
bin/dlls/DiscUtils.Iso9660.dll
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
bin/dlls/DiscUtils.Iso9660.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
bin/dlls/DiscUtils.Net.dll
Resource
win7-20240508-en
Behavioral task
behavioral8
Sample
bin/dlls/DiscUtils.Net.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
bin/dlls/DiscUtils.Registry.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
bin/dlls/DiscUtils.Registry.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
bin/dlls/DiscUtils.Streams.dll
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
bin/dlls/DiscUtils.Streams.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
bin/dlls/HtmlAgilityPack.dll
Resource
win7-20240611-en
Behavioral task
behavioral14
Sample
bin/dlls/HtmlAgilityPack.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
bin/dlls/Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral16
Sample
bin/dlls/Newtonsoft.Json.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral17
Sample
bin/dlls/lzfse-net.dll
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
bin/dlls/lzfse-net.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
bin/dlls/lzo.net.dll
Resource
win7-20240611-en
Behavioral task
behavioral20
Sample
bin/dlls/lzo.net.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
bin/dlls/nunit.framework.dll
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
bin/dlls/nunit.framework.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
bin/emulators/JakV2.pkg
Resource
macos-20240611-en
Behavioral task
behavioral24
Sample
bin/tools/ext/di.exe
Resource
win7-20240220-en
Behavioral task
behavioral25
Sample
bin/tools/ext/di.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral26
Sample
bin/tools/ext/libatrac9.dll
Resource
win7-20240611-en
Behavioral task
behavioral27
Sample
bin/tools/ext/libatrac9.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral28
Sample
bin/tools/ext/sc.exe
Resource
win7-20240508-en
Behavioral task
behavioral29
Sample
bin/tools/ext/sc.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral30
Sample
bin/tools/gengp4.exe
Resource
win7-20240221-en
Behavioral task
behavioral31
Sample
bin/tools/gengp4.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral32
Sample
bin/tools/gengp4_patch.exe
Resource
win7-20240220-en
General
-
Target
PS22PS4-GUI.zip
-
Size
28.2MB
-
MD5
5d3c3826efe3cdd063397afaba55b4ed
-
SHA1
359c99e74e3fdb8721856b6c2f41703e3a9d38de
-
SHA256
86751484f8839d465a2dea02959ed424cda2733aa415b1eb714b28a02be39cd3
-
SHA512
4dffd8397237f1d45355704a9d457813733073715c0fd3c6fcb15c59bed593900f7e587a5e53836587fe8304fe52751fe307406eeff3cde6d14e3ff91c663303
-
SSDEEP
786432:d1z+2gu2CIOiXDWjRPyxOXzXKprYLuJOXYNzJPAKym:a2JiXDTOXzXKp8LuJpPIm
Malware Config
Signatures
-
Processes:
resource yara_rule static1/unpack001/bin/tools/gengp4.exe upx static1/unpack001/bin/tools/gengp4_patch.exe upx -
Unsigned PE 21 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/PS22PS4-GUI.exe unpack001/bin/dlls/DiscUtils.Core.dll unpack001/bin/dlls/DiscUtils.Iso9660.dll unpack001/bin/dlls/DiscUtils.Net.dll unpack001/bin/dlls/DiscUtils.Registry.dll unpack001/bin/dlls/DiscUtils.Streams.dll unpack001/bin/dlls/HtmlAgilityPack.dll unpack001/bin/dlls/lzfse-net.dll unpack001/bin/dlls/lzo.net.dll unpack001/bin/dlls/nunit.framework.dll unpack001/bin/tools/ext/di.exe unpack001/bin/tools/ext/libatrac9.dll unpack001/bin/tools/ext/sc.exe unpack001/bin/tools/gengp4.exe unpack002/out.upx unpack001/bin/tools/gengp4_patch.exe unpack003/out.upx unpack001/bin/tools/libmbedcrypto.dll unpack001/bin/tools/orbis-pub-cmd.exe unpack001/bin/tools/replhex.dll unpack001/bin/tools/replhex.exe
Files
-
PS22PS4-GUI.zip.zip
-
PS22PS4-GUI.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
PS22PS4-GUI.exe.config
-
bin/covers/SLES-54945.jpg.jpg
-
bin/dlls/DiscUtils.Core.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\DiscUtils\DiscUtils\Library\DiscUtils.Core\obj\Release\net45\DiscUtils.Core.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 168KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/DiscUtils.Iso9660.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\DiscUtils\DiscUtils\Library\DiscUtils.Iso9660\obj\Release\net45\DiscUtils.Iso9660.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/DiscUtils.Net.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\DiscUtils\DiscUtils\Library\DiscUtils.Net\obj\Release\net45\DiscUtils.Net.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/DiscUtils.Registry.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\DiscUtils\DiscUtils\Library\DiscUtils.Registry\obj\Release\net45\DiscUtils.Registry.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/DiscUtils.Streams.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\DiscUtils\DiscUtils\Library\DiscUtils.Streams\obj\Release\net45\DiscUtils.Streams.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/HtmlAgilityPack.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Repos\HtmlAgilityPack\HtmlAgilityPack.Net45\obj\Release\HtmlAgilityPack.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 163KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/Newtonsoft.Json.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Code Sign
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20Certificate
IssuerCN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=USNot Before15-01-2021 00:00Not After14-01-2046 23:59SubjectCN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73Certificate
IssuerCN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=USNot Before15-07-2021 00:00Not After14-07-2031 23:59SubjectCN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29Certificate
IssuerCN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=USNot Before13-08-2021 00:00Not After29-10-2024 23:59SubjectSERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6eExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9bSigner
Actual PE Digest38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9bDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 681KB - Virtual size: 680KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/lzfse-net.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\1\s\src\lzfse-net\obj\Release\net45\lzfse-net.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/lzo.net.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\projects\lzo-net\src\obj\Release\net45\lzo.net.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/dlls/nunit.framework.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Src\NUnit\nunit\src\NUnitFramework\framework\obj\Release\net45\nunit.framework.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/emulators/JakV2.pkg
-
bin/info/SLES-54945.info
-
bin/tools/ext/di.exe.exe windows:4 windows x86 arch:x86
6a36e3f662ffc6acba12733a3a3221bc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fdopen
_fstat
_lseek
_read
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_flsbuf
_iob
_onexit
_setmode
abort
atexit
atoi
calloc
fclose
fflush
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
getwc
iswctype
localeconv
malloc
memchr
memcmp
memmove
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strtod
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Sections
.text Size: 489KB - Virtual size: 488KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 145KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
bin/tools/ext/libatrac9.dll.dll windows:5 windows x86 arch:x86
40557db7605402aa30b8b61f885521de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
msvcr90
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_encode_pointer
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_CIexp
_CIpow
_CIcos
_CIsin
_CIsqrt
memmove_s
floor
_CIlog
memcpy
malloc
memset
memcpy_s
calloc
__CppXcptFilter
free
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Exports
Exports
sceAt9DecDecode
sceAt9DecInit
sceAt9EncEncode
sceAt9EncFlush
sceAt9EncInit
sceAt9EncSetEncParam
sceAt9GetCodecInfo
sceAt9GetDefaultExtParam
sceAt9GetHandle
sceAt9GetInternalErrorInfo
sceAt9GetVersion
sceAt9ReleaseHandle
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/ext/sc.exe.exe windows:4 windows x86 arch:x86
a8a4e2919414a3700770d3d13b2a2914
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateSemaphoreA
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
_fdopen
_fstat
_lseek
_mkdir
_read
_stat
_write
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_filbuf
_flsbuf
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
fclose
fflush
fopen
fputc
fputs
fread
free
fseek
ftell
fwrite
getenv
getwc
iswctype
localeconv
malloc
memchr
memcmp
memmove
putwc
realloc
setlocale
setvbuf
signal
sprintf
strchr
strcmp
strcoll
strcpy
strerror
strftime
strtod
strxfrm
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcscoll
wcsftime
wcslen
wcsxfrm
Sections
.text Size: 760KB - Virtual size: 759KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
bin/tools/ext/trp_compare_default.css
-
bin/tools/gengp4.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 640KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 25KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/tools/gengp4_patch.exe.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
UPX0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 640KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
out.upx.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 25KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: - Virtual size: 72B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 192KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
bin/tools/libmbedcrypto.dll.dll windows:4 windows x86 arch:x86
95f02bed4e244ab70bd05f8080037571
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateThread
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
_errno
_iob
_vsnprintf
abort
calloc
fclose
fflush
fgets
fopen
fread
free
fseek
ftell
fwrite
malloc
memcmp
memcpy
memset
printf
putchar
puts
rand
strcmp
strlen
strstr
vfprintf
Exports
Exports
mbedtls_aes_cmac_prf_128
mbedtls_aes_crypt_cbc
mbedtls_aes_crypt_cfb128
mbedtls_aes_crypt_cfb8
mbedtls_aes_crypt_ctr
mbedtls_aes_crypt_ecb
mbedtls_aes_crypt_xex
mbedtls_aes_crypt_xts
mbedtls_aes_decrypt
mbedtls_aes_encrypt
mbedtls_aes_free
mbedtls_aes_init
mbedtls_aes_self_test
mbedtls_aes_setkey_dec
mbedtls_aes_setkey_enc
mbedtls_arc4_crypt
mbedtls_arc4_free
mbedtls_arc4_init
mbedtls_arc4_self_test
mbedtls_arc4_setup
mbedtls_asn1_find_named_data
mbedtls_asn1_free_named_data
mbedtls_asn1_free_named_data_list
mbedtls_asn1_get_alg
mbedtls_asn1_get_alg_null
mbedtls_asn1_get_bitstring
mbedtls_asn1_get_bitstring_null
mbedtls_asn1_get_bool
mbedtls_asn1_get_int
mbedtls_asn1_get_len
mbedtls_asn1_get_mpi
mbedtls_asn1_get_sequence_of
mbedtls_asn1_get_tag
mbedtls_asn1_store_named_data
mbedtls_asn1_write_algorithm_identifier
mbedtls_asn1_write_bitstring
mbedtls_asn1_write_bool
mbedtls_asn1_write_ia5_string
mbedtls_asn1_write_int
mbedtls_asn1_write_len
mbedtls_asn1_write_mpi
mbedtls_asn1_write_null
mbedtls_asn1_write_octet_string
mbedtls_asn1_write_oid
mbedtls_asn1_write_printable_string
mbedtls_asn1_write_raw_buffer
mbedtls_asn1_write_tag
mbedtls_base64_decode
mbedtls_base64_encode
mbedtls_base64_self_test
mbedtls_blowfish_crypt_cbc
mbedtls_blowfish_crypt_cfb64
mbedtls_blowfish_crypt_ctr
mbedtls_blowfish_crypt_ecb
mbedtls_blowfish_free
mbedtls_blowfish_init
mbedtls_blowfish_setkey
mbedtls_camellia_crypt_cbc
mbedtls_camellia_crypt_cfb128
mbedtls_camellia_crypt_ctr
mbedtls_camellia_crypt_ecb
mbedtls_camellia_free
mbedtls_camellia_init
mbedtls_camellia_self_test
mbedtls_camellia_setkey_dec
mbedtls_camellia_setkey_enc
mbedtls_ccm_auth_decrypt
mbedtls_ccm_encrypt_and_tag
mbedtls_ccm_free
mbedtls_ccm_init
mbedtls_ccm_self_test
mbedtls_ccm_setkey
mbedtls_cipher_auth_decrypt
mbedtls_cipher_auth_encrypt
mbedtls_cipher_check_tag
mbedtls_cipher_cmac
mbedtls_cipher_cmac_finish
mbedtls_cipher_cmac_reset
mbedtls_cipher_cmac_starts
mbedtls_cipher_cmac_update
mbedtls_cipher_crypt
mbedtls_cipher_definitions
mbedtls_cipher_finish
mbedtls_cipher_free
mbedtls_cipher_info_from_string
mbedtls_cipher_info_from_type
mbedtls_cipher_info_from_values
mbedtls_cipher_init
mbedtls_cipher_list
mbedtls_cipher_reset
mbedtls_cipher_set_iv
mbedtls_cipher_set_padding_mode
mbedtls_cipher_setkey
mbedtls_cipher_setup
mbedtls_cipher_supported
mbedtls_cipher_update
mbedtls_cipher_update_ad
mbedtls_cipher_write_tag
mbedtls_cmac_self_test
mbedtls_ctr_drbg_free
mbedtls_ctr_drbg_init
mbedtls_ctr_drbg_random
mbedtls_ctr_drbg_random_with_add
mbedtls_ctr_drbg_reseed
mbedtls_ctr_drbg_seed
mbedtls_ctr_drbg_seed_entropy_len
mbedtls_ctr_drbg_self_test
mbedtls_ctr_drbg_set_entropy_len
mbedtls_ctr_drbg_set_prediction_resistance
mbedtls_ctr_drbg_set_reseed_interval
mbedtls_ctr_drbg_update
mbedtls_ctr_drbg_update_seed_file
mbedtls_ctr_drbg_write_seed_file
mbedtls_des3_crypt_cbc
mbedtls_des3_crypt_ecb
mbedtls_des3_free
mbedtls_des3_init
mbedtls_des3_set2key_dec
mbedtls_des3_set2key_enc
mbedtls_des3_set3key_dec
mbedtls_des3_set3key_enc
mbedtls_des_crypt_cbc
mbedtls_des_crypt_ecb
mbedtls_des_free
mbedtls_des_init
mbedtls_des_key_check_key_parity
mbedtls_des_key_check_weak
mbedtls_des_key_set_parity
mbedtls_des_self_test
mbedtls_des_setkey
mbedtls_des_setkey_dec
mbedtls_des_setkey_enc
mbedtls_dhm_calc_secret
mbedtls_dhm_free
mbedtls_dhm_init
mbedtls_dhm_make_params
mbedtls_dhm_make_public
mbedtls_dhm_parse_dhm
mbedtls_dhm_parse_dhmfile
mbedtls_dhm_read_params
mbedtls_dhm_read_public
mbedtls_dhm_self_test
mbedtls_ecdh_calc_secret
mbedtls_ecdh_compute_shared
mbedtls_ecdh_free
mbedtls_ecdh_gen_public
mbedtls_ecdh_get_params
mbedtls_ecdh_init
mbedtls_ecdh_make_params
mbedtls_ecdh_make_public
mbedtls_ecdh_read_params
mbedtls_ecdh_read_public
mbedtls_ecdsa_free
mbedtls_ecdsa_from_keypair
mbedtls_ecdsa_genkey
mbedtls_ecdsa_info
mbedtls_ecdsa_init
mbedtls_ecdsa_read_signature
mbedtls_ecdsa_sign
mbedtls_ecdsa_sign_det
mbedtls_ecdsa_verify
mbedtls_ecdsa_write_signature
mbedtls_ecdsa_write_signature_det
mbedtls_eckey_info
mbedtls_eckeydh_info
mbedtls_ecp_check_privkey
mbedtls_ecp_check_pub_priv
mbedtls_ecp_check_pubkey
mbedtls_ecp_copy
mbedtls_ecp_curve_info_from_grp_id
mbedtls_ecp_curve_info_from_name
mbedtls_ecp_curve_info_from_tls_id
mbedtls_ecp_curve_list
mbedtls_ecp_gen_key
mbedtls_ecp_gen_keypair
mbedtls_ecp_gen_keypair_base
mbedtls_ecp_group_copy
mbedtls_ecp_group_free
mbedtls_ecp_group_init
mbedtls_ecp_group_load
mbedtls_ecp_grp_id_list
mbedtls_ecp_is_zero
mbedtls_ecp_keypair_free
mbedtls_ecp_keypair_init
mbedtls_ecp_mul
mbedtls_ecp_muladd
mbedtls_ecp_point_cmp
mbedtls_ecp_point_free
mbedtls_ecp_point_init
mbedtls_ecp_point_read_binary
mbedtls_ecp_point_read_string
mbedtls_ecp_point_write_binary
mbedtls_ecp_self_test
mbedtls_ecp_set_zero
mbedtls_ecp_tls_read_group
mbedtls_ecp_tls_read_point
mbedtls_ecp_tls_write_group
mbedtls_ecp_tls_write_point
mbedtls_entropy_add_source
mbedtls_entropy_free
mbedtls_entropy_func
mbedtls_entropy_gather
mbedtls_entropy_init
mbedtls_entropy_self_test
mbedtls_entropy_update_manual
mbedtls_entropy_update_seed_file
mbedtls_entropy_write_seed_file
mbedtls_gcm_auth_decrypt
mbedtls_gcm_crypt_and_tag
mbedtls_gcm_finish
mbedtls_gcm_free
mbedtls_gcm_init
mbedtls_gcm_self_test
mbedtls_gcm_setkey
mbedtls_gcm_starts
mbedtls_gcm_update
mbedtls_gf128mul_x_ble
mbedtls_hardclock_poll
mbedtls_hmac_drbg_free
mbedtls_hmac_drbg_init
mbedtls_hmac_drbg_random
mbedtls_hmac_drbg_random_with_add
mbedtls_hmac_drbg_reseed
mbedtls_hmac_drbg_seed
mbedtls_hmac_drbg_seed_buf
mbedtls_hmac_drbg_self_test
mbedtls_hmac_drbg_set_entropy_len
mbedtls_hmac_drbg_set_prediction_resistance
mbedtls_hmac_drbg_set_reseed_interval
mbedtls_hmac_drbg_update
mbedtls_hmac_drbg_update_seed_file
mbedtls_hmac_drbg_write_seed_file
mbedtls_internal_aes_decrypt
mbedtls_internal_aes_encrypt
mbedtls_md
mbedtls_md5
mbedtls_md5_clone
mbedtls_md5_finish
mbedtls_md5_free
mbedtls_md5_info
mbedtls_md5_init
mbedtls_md5_process
mbedtls_md5_self_test
mbedtls_md5_starts
mbedtls_md5_update
mbedtls_md_clone
mbedtls_md_file
mbedtls_md_finish
mbedtls_md_free
mbedtls_md_get_name
mbedtls_md_get_size
mbedtls_md_get_type
mbedtls_md_hmac
mbedtls_md_hmac_finish
mbedtls_md_hmac_reset
mbedtls_md_hmac_starts
mbedtls_md_hmac_update
mbedtls_md_info_from_string
mbedtls_md_info_from_type
mbedtls_md_init
mbedtls_md_init_ctx
mbedtls_md_list
mbedtls_md_process
mbedtls_md_setup
mbedtls_md_starts
mbedtls_md_update
mbedtls_mpi_add_abs
mbedtls_mpi_add_int
mbedtls_mpi_add_mpi
mbedtls_mpi_bitlen
mbedtls_mpi_cmp_abs
mbedtls_mpi_cmp_int
mbedtls_mpi_cmp_mpi
mbedtls_mpi_copy
mbedtls_mpi_div_int
mbedtls_mpi_div_mpi
mbedtls_mpi_exp_mod
mbedtls_mpi_fill_random
mbedtls_mpi_free
mbedtls_mpi_gcd
mbedtls_mpi_gen_prime
mbedtls_mpi_get_bit
mbedtls_mpi_grow
mbedtls_mpi_init
mbedtls_mpi_inv_mod
mbedtls_mpi_is_prime
mbedtls_mpi_lsb
mbedtls_mpi_lset
mbedtls_mpi_mod_int
mbedtls_mpi_mod_mpi
mbedtls_mpi_mul_int
mbedtls_mpi_mul_mpi
mbedtls_mpi_read_binary
mbedtls_mpi_read_file
mbedtls_mpi_read_string
mbedtls_mpi_safe_cond_assign
mbedtls_mpi_safe_cond_swap
mbedtls_mpi_self_test
mbedtls_mpi_set_bit
mbedtls_mpi_shift_l
mbedtls_mpi_shift_r
mbedtls_mpi_shrink
mbedtls_mpi_size
mbedtls_mpi_sub_abs
mbedtls_mpi_sub_int
mbedtls_mpi_sub_mpi
mbedtls_mpi_swap
mbedtls_mpi_write_binary
mbedtls_mpi_write_file
mbedtls_mpi_write_string
mbedtls_oid_get_attr_short_name
mbedtls_oid_get_cipher_alg
mbedtls_oid_get_ec_grp
mbedtls_oid_get_extended_key_usage
mbedtls_oid_get_md_alg
mbedtls_oid_get_numeric_string
mbedtls_oid_get_oid_by_ec_grp
mbedtls_oid_get_oid_by_md
mbedtls_oid_get_oid_by_pk_alg
mbedtls_oid_get_oid_by_sig_alg
mbedtls_oid_get_pk_alg
mbedtls_oid_get_pkcs12_pbe_alg
mbedtls_oid_get_sig_alg
mbedtls_oid_get_sig_alg_desc
mbedtls_oid_get_x509_ext_type
mbedtls_padlock_has_support
mbedtls_padlock_xcryptcbc
mbedtls_padlock_xcryptecb
mbedtls_pem_free
mbedtls_pem_init
mbedtls_pem_read_buffer
mbedtls_pem_write_buffer
mbedtls_pk_can_do
mbedtls_pk_check_pair
mbedtls_pk_debug
mbedtls_pk_decrypt
mbedtls_pk_encrypt
mbedtls_pk_free
mbedtls_pk_get_bitlen
mbedtls_pk_get_name
mbedtls_pk_get_type
mbedtls_pk_info_from_type
mbedtls_pk_init
mbedtls_pk_load_file
mbedtls_pk_parse_key
mbedtls_pk_parse_keyfile
mbedtls_pk_parse_public_key
mbedtls_pk_parse_public_keyfile
mbedtls_pk_parse_subpubkey
mbedtls_pk_setup
mbedtls_pk_setup_rsa_alt
mbedtls_pk_sign
mbedtls_pk_verify
mbedtls_pk_verify_ext
mbedtls_pk_write_key_der
mbedtls_pk_write_key_pem
mbedtls_pk_write_pubkey
mbedtls_pk_write_pubkey_der
mbedtls_pk_write_pubkey_pem
mbedtls_pkcs12_derivation
mbedtls_pkcs12_pbe
mbedtls_pkcs12_pbe_sha1_rc4_128
mbedtls_pkcs5_pbes2
mbedtls_pkcs5_pbkdf2_hmac
mbedtls_pkcs5_self_test
mbedtls_platform_entropy_poll
mbedtls_platform_set_snprintf
mbedtls_platform_setup
mbedtls_platform_teardown
mbedtls_platform_win32_snprintf
mbedtls_ripemd160
mbedtls_ripemd160_clone
mbedtls_ripemd160_finish
mbedtls_ripemd160_free
mbedtls_ripemd160_info
mbedtls_ripemd160_init
mbedtls_ripemd160_process
mbedtls_ripemd160_self_test
mbedtls_ripemd160_starts
mbedtls_ripemd160_update
mbedtls_rsa_alt_info
mbedtls_rsa_check_privkey
mbedtls_rsa_check_pub_priv
mbedtls_rsa_check_pubkey
mbedtls_rsa_copy
mbedtls_rsa_free
mbedtls_rsa_gen_key
mbedtls_rsa_info
mbedtls_rsa_init
mbedtls_rsa_pkcs1_decrypt
mbedtls_rsa_pkcs1_encrypt
mbedtls_rsa_pkcs1_sign
mbedtls_rsa_pkcs1_verify
mbedtls_rsa_private
mbedtls_rsa_public
mbedtls_rsa_rsaes_oaep_decrypt
mbedtls_rsa_rsaes_oaep_encrypt
mbedtls_rsa_rsaes_pkcs1_v15_decrypt
mbedtls_rsa_rsaes_pkcs1_v15_encrypt
mbedtls_rsa_rsassa_pkcs1_v15_sign
mbedtls_rsa_rsassa_pkcs1_v15_verify
mbedtls_rsa_rsassa_pss_sign
mbedtls_rsa_rsassa_pss_verify
mbedtls_rsa_rsassa_pss_verify_ext
mbedtls_rsa_self_test
mbedtls_rsa_set_padding
mbedtls_set_alarm
mbedtls_sha1
mbedtls_sha1_clone
mbedtls_sha1_finish
mbedtls_sha1_free
mbedtls_sha1_info
mbedtls_sha1_init
mbedtls_sha1_process
mbedtls_sha1_self_test
mbedtls_sha1_starts
mbedtls_sha1_update
mbedtls_sha224_info
mbedtls_sha256
mbedtls_sha256_clone
mbedtls_sha256_finish
mbedtls_sha256_free
mbedtls_sha256_info
mbedtls_sha256_init
mbedtls_sha256_process
mbedtls_sha256_self_test
mbedtls_sha256_starts
mbedtls_sha256_update
mbedtls_sha384_info
mbedtls_sha512
mbedtls_sha512_clone
mbedtls_sha512_finish
mbedtls_sha512_free
mbedtls_sha512_info
mbedtls_sha512_init
mbedtls_sha512_process
mbedtls_sha512_self_test
mbedtls_sha512_starts
mbedtls_sha512_update
mbedtls_snprintf
mbedtls_strerror
mbedtls_timing_alarmed
mbedtls_timing_get_delay
mbedtls_timing_get_timer
mbedtls_timing_hardclock
mbedtls_timing_self_test
mbedtls_timing_set_delay
mbedtls_version_check_feature
mbedtls_version_get_number
mbedtls_version_get_string
mbedtls_version_get_string_full
mbedtls_xtea_crypt_cbc
mbedtls_xtea_crypt_ecb
mbedtls_xtea_free
mbedtls_xtea_init
mbedtls_xtea_self_test
mbedtls_xtea_setup
Sections
.text Size: 188KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
/4 Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 9KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/14 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/29 Size: 310KB - Virtual size: 309KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/41 Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/55 Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/67 Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/78 Size: 255KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
/89 Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/magick.exe.exe windows:6 windows x64 arch:x64
e36aef61183a663a8d2496a5a5b18077
Code Sign
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate
IssuerCN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GBNot Before25-05-2021 00:00Not After31-12-2028 23:59SubjectCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate
IssuerCN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GBNot Before22-03-2021 00:00Not After21-03-2036 23:59SubjectCN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
e4:24:b6:4c:66:e5:e9:e4:77:56:08:ac:4c:4a:41:3dCertificate
IssuerCN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GBNot Before27-10-2022 00:00Not After27-10-2023 23:59SubjectCN=ImageMagick Studio LLC,O=ImageMagick Studio LLC,ST=Pennsylvania,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before21-09-2022 00:00Not After21-11-2033 23:59SubjectCN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
d2:6c:31:95:3f:2c:9c:03:ca:6b:62:a9:e7:7e:4d:99:45:3f:cf:4a:d1:a0:00:93:00:86:8b:c3:6c:29:b2:baSigner
Actual PE Digestd2:6c:31:95:3f:2c:9c:03:ca:6b:62:a9:e7:7e:4d:99:45:3f:cf:4a:d1:a0:00:93:00:86:8b:c3:6c:29:b2:baDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ws2_32
htons
ntohs
WSASetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
ntohl
WSAGetLastError
ioctlsocket
htonl
WSASetLastError
getservbyport
gethostbyname
gethostbyaddr
inet_ntoa
inet_addr
inet_ntop
inet_pton
getservbyname
freeaddrinfo
getaddrinfo
socket
setsockopt
send
recv
listen
connect
closesocket
bind
accept
WSACleanup
WSACloseEvent
WSAStartup
gdiplus
GdipGetImageVerticalResolution
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipDrawImageRectI
GdipLoadImageFromFile
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGraphicsClear
GdipGetImageHorizontalResolution
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
urlmon
URLDownloadToFileA
kernel32
GetStartupInfoA
FindResourceA
SystemTimeToFileTime
SetConsoleCtrlHandler
SetConsoleOutputCP
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
LoadLibraryA
GetLogicalDrives
CreateThread
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
SetEnvironmentVariableA
CreateFileW
SetFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlUnwind
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetFileType
GetConsoleMode
ReadConsoleW
SetFilePointerEx
WriteFile
GetConsoleOutputCP
GetFileAttributesExW
GetDriveTypeW
GetFullPathNameW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
GetTimeZoneInformation
FlushFileBuffers
DeleteFileW
MoveFileExW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
GetTempPathW
CreateFileMappingA
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetCurrentThread
GetCPInfo
GetStringTypeW
IsValidCodePage
GetACP
LoadResource
GetFileSizeEx
HeapReAlloc
HeapSize
GetCurrentDirectoryW
CreateDirectoryW
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
WriteConsoleW
LoadLibraryExW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
FreeResource
FreeLibrary
UnmapViewOfFile
MapViewOfFile
GetVersionExA
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GlobalMemoryStatusEx
CreateProcessA
GetExitCodeProcess
FormatMessageA
GetCurrentProcess
GetProcessTimes
WaitForSingleObject
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
CreatePipe
SetErrorMode
GetLastError
SetUnhandledExceptionFilter
SetHandleInformation
CloseHandle
SetEndOfFile
ReadFile
FindNextFileW
FindFirstFileW
FindClose
WideCharToMultiByte
Sleep
MultiByteToWideChar
GetShortPathNameW
LocalFree
SizeofResource
FlsAlloc
LockResource
GetDiskFreeSpaceExW
GetVolumeInformationW
GetVolumePathNameW
GetSystemDirectoryA
GetLongPathNameW
ReadDirectoryChangesW
GetDriveTypeA
SignalObjectAndWait
InitializeCriticalSection
ReleaseMutex
CreateMutexA
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
SetThreadPriority
GetThreadPriority
ResumeThread
GetEnvironmentVariableW
ExpandEnvironmentStringsW
GetFileInformationByHandleEx
SetConsoleMode
DebugBreak
GetSystemDirectoryW
GetWindowsDirectoryW
CreateEventA
GetVersion
LoadLibraryW
FormatMessageW
GetLocaleInfoA
GetThreadLocale
IsDBCSLeadByteEx
GetFileAttributesW
SetEvent
ResetEvent
ReadConsoleInputA
PeekConsoleInputA
DuplicateHandle
DeviceIoControl
WaitForSingleObjectEx
WaitForMultipleObjectsEx
CreateEventW
WaitForMultipleObjects
GetExitCodeThread
ReleaseSemaphore
CreateSemaphoreA
SetFileAttributesW
GetTickCount
GetFileTime
ExitThread
FreeLibraryAndExitThread
RemoveDirectoryW
GetNumberOfConsoleInputEvents
SwitchToThread
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
InitializeCriticalSectionEx
DecodePointer
LCMapStringEx
SleepConditionVariableCS
GetOEMCP
user32
SystemParametersInfoA
ReleaseDC
FillRect
PeekMessageA
GetDC
MsgWaitForMultipleObjectsEx
MessageBoxA
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
EnumDisplayDevicesA
PostMessageA
gdi32
SetGraphicsMode
RestoreDC
GetGlyphIndicesW
SetBkMode
GetOutlineTextMetricsA
SetMapMode
SetTextColor
SetTextAlign
GetTextMetricsA
SetWorldTransform
ModifyWorldTransform
ExtTextOutW
CreateCompatibleBitmap
CreateRectRgn
ExtCreateRegion
GetClipBox
GetFontUnicodeRanges
GetGlyphOutlineW
GetFontData
EnumFontFamiliesExW
GetGlyphOutlineA
GetCharWidth32A
SaveDC
CreateDCA
CreateDIBSection
SelectObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetClipRgn
GetGraphicsMode
IntersectClipRect
SelectClipRgn
ExtSelectClipRgn
GetWorldTransform
GdiFlush
CreateSolidBrush
StretchDIBits
CreateFontIndirectW
advapi32
DeregisterEventSource
ReportEventA
RegGetValueW
GetSecurityInfo
RegLoadMUIStringW
RegOpenKeyExW
GetUserNameW
RegCloseKey
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
CryptAcquireContextA
CryptReleaseContext
RegSetValueExW
RegNotifyChangeKeyValue
RegDeleteValueW
RegCreateKeyExW
LookupAccountSidW
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetFileSecurityW
RegEnumKeyExW
CryptGenRandom
RegEnumValueW
RegisterEventSourceA
bcrypt
BCryptDeriveKeyPBKDF2
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptGenRandom
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
BCryptSetProperty
shell32
SHGetFileInfoW
SHFileOperationW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
CoGetObjectContext
CoGetApartmentType
dnsapi
DnsFree
DnsQuery_A
iphlpapi
GetIpForwardTable2
NotifyRouteChange2
CancelMibChangeNotify2
Sections
.text Size: 14.3MB - Virtual size: 14.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 397KB - Virtual size: 804KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 517KB - Virtual size: 517KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/orbis-pub-cmd.exe.exe windows:5 windows x86 arch:x86
94e6bdca62437d968ae6e6ded61ddd89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
FlushConsoleInputBuffer
GlobalMemoryStatus
CopyFileA
SetLastError
GetFileType
GetVersion
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedExchange
TlsAlloc
ReleaseMutex
TlsSetValue
GetCurrentThread
InterlockedCompareExchange
InterlockedIncrement
TlsGetValue
CreateMutexW
GetVolumeNameForVolumeMountPointA
SetFilePointer
GetTempPathA
GetModuleFileNameA
DuplicateHandle
CreatePipe
GetStdHandle
GetExitCodeProcess
GetCurrentProcess
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetSystemTime
GetCurrentProcessId
GetCurrentThreadId
GetSystemInfo
CreateEventW
GetLocalTime
GetEnvironmentVariableA
CreateProcessA
SetEvent
WaitForSingleObject
GetFileSizeEx
ReadFile
WriteFile
DeleteFileA
CloseHandle
GetDiskFreeSpaceExA
GetFileTime
FindNextFileA
DeviceIoControl
MoveFileA
FindClose
RemoveDirectoryA
GetLastError
FindFirstFileA
CreateDirectoryA
FileTimeToSystemTime
GetFileAttributesA
Sleep
SetFileTime
SetFilePointerEx
SystemTimeToFileTime
SetEndOfFile
GetFileSize
CreateFileA
GetFullPathNameA
GlobalFree
WideCharToMultiByte
LoadLibraryA
GetProcAddress
FreeLibrary
msvcr90
_CIlog10
floor
_CIsqrt
_CIatan2
_CIcos
_CIpow
_CIsin
_getch
_CxxThrowException
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
_vsnprintf
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__initenv
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
ceil
printf
getenv
sscanf
_endthread
_stat64i32
_wstat64i32
_wfopen
realloc
longjmp
abort
memchr
fprintf
calloc
atof
_snprintf
fseek
ftell
fwrite
ferror
_time64
srand
rand
fclose
fread
fopen
_fseeki64
feof
_ftelli64
malloc
free
strtoul
strrchr
strncpy
_beginthread
_errno
strchr
strtok_s
strstr
_strtoi64
_strtoui64
strncmp
memmove
strncat
strtod
vfprintf
signal
fputs
_gmtime64
fflush
__iob_func
vprintf
_stricmp
isupper
_getcwd
memcpy
memset
wcsstr
raise
atoi
isdigit
strcmp
qsort
isspace
_setmode
_fileno
fgets
isxdigit
sprintf
_strnicmp
tolower
??3@YAXPAX@Z
??2@YAPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_purecall
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
memmove_s
toupper
_setjmp3
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?at@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Xran@_String_base@std@@SAXXZ
?_Xlen@_String_base@std@@SAXXZ
?_Copy_s@?$char_traits@D@std@@SAPADPADIPBDI@Z
?compare@?$char_traits@D@std@@SAHPBD0I@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
winhttp
WinHttpGetProxyForUrl
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpCloseHandle
user32
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
advapi32
DeregisterEventSource
RegisterEventSourceA
ReportEventA
shell32
SHGetFolderPathA
ws2_32
htons
closesocket
socket
setsockopt
WSAGetLastError
connect
shutdown
recv
WSASetLastError
send
ntohs
getservbyname
getsockopt
gethostbyname
ioctlsocket
htonl
WSAStartup
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 692KB - Virtual size: 692KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/replhex.dll.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\echol\source\repos\replhex\replhex\obj\Release\net6.0\replhex.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/replhex.exe.exe windows:6 windows x64 arch:x64
6dbf27f4c70fe2c8ed3e0122ba75d641
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
D:\a\_work\1\s\artifacts\obj\win-x64.Release\corehost\apphost\standalone\apphost.pdb
Imports
kernel32
FindNextFileW
GetCurrentProcess
GetModuleHandleExW
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
MultiByteToWideChar
GetLastError
GetFileAttributesExW
GetFullPathNameW
GetProcAddress
DeleteCriticalSection
WideCharToMultiByte
IsWow64Process
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EnterCriticalSection
FindFirstFileExW
OutputDebugStringW
LoadLibraryA
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
GetStringTypeW
user32
MessageBoxW
shell32
ShellExecuteW
advapi32
RegOpenKeyExW
RegGetValueW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
api-ms-win-crt-runtime-l1-1-0
_exit
__p___argc
_initterm_e
_initterm
_get_initial_wide_environment
_invalid_parameter_noinfo_noreturn
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
__p___wargv
_seh_filter_exe
_register_onexit_function
_cexit
terminate
_errno
exit
abort
_crt_atexit
_c_exit
_register_thread_local_exe_atexit_callback
api-ms-win-crt-stdio-l1-1-0
setvbuf
fflush
_wfopen
__stdio_common_vswprintf
__stdio_common_vfwprintf
_set_fmode
__stdio_common_vsprintf_s
__acrt_iob_func
fputwc
fputws
__p__commode
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
free
malloc
calloc
api-ms-win-crt-string-l1-1-0
wcsnlen
strcpy_s
_wcsdup
strcspn
wcsncmp
toupper
api-ms-win-crt-convert-l1-1-0
_wtoi
wcstoul
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_locale_name_func
localeconv
_unlock_locales
_lock_locales
___mb_cur_max_func
_configthreadlocale
__pctype_func
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
frexp
__setusermatherr
api-ms-win-crt-time-l1-1-0
_gmtime64_s
_time64
wcsftime
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
bin/tools/replhex.runtimeconfig.json