sus.zip
- SHA256 d8f8ef643d68039ea91a48532f004dcf4aa05146fd1894b298cab4c7f0477f1b
Static task
static1
Behavioral task
behavioral1
Sample
client32.exe
Resource
win7-20240611-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
client32.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target sus.zip
- Size 3.0MB
- Sample240621-thjcpsxbkc
- SHA256 d8f8ef643d68039ea91a48532f004dcf4aa05146fd1894b298cab4c7f0477f1b
- MD5 f2a03711d2c641a611574fa7e0850d71
- SHA1 b4a66f287a51a1531ea732dda54c7c673d8d1a75
- SHA512 c16116df56adca253bb8c055706e34c56045806439959be914b4024f77a280be35e923584722e7836b14bef39d47822cc57eb427de907f0610493bcc30d9524c
- SSDEEP 98304:D1JFXa/hRFY89YYc9jh23redpmQRbU6nJsjfD:RJSxYoY59V0redpmQRbdnJGD
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
sus.zip.zip 3.0MB
-
HTCTL32.DLL.dll 320KB
-
NSM.LIC195B
-
NSM.ini6KB
-
PCICHEK.DLL.dll 18KB
-
PCICL32.DLL.dll 3.6MB
-
TCCTL32.DLL.dll 387KB
-
client32.exe.exe 101KB
-
client32.ini671B
-
install/24.4.4.1168.manifest223B
-
install/brand_config8KB
-
install/clidmgr.exe.exe 147KB
-
install/install_state.json1KB
-
install/manifest.json170B
-
install/partner-package.cab.cab 807KB
-
partner_config341B
-
resources/configs/all_zip.zip 606KB
-
ETAGS7KB
-
ad_blocker13KB
-
ad_hide6KB
-
alissenger768B
-
api_allowed_hosts9KB
-
api_pool864B
-
apps_promo_common944B
-
autofill_custom_data_types2KB
-
autofill_heuristic151KB
-
autofill_js_heuristic19KB
-
banks_urls56KB
-
cardman4KB
-
cardsec17KB
-
check_whitelist2KB
-
choose_tab_design_settings1KB
-
chua_list640B
-
collections_blacklist2KB
-
collections_button_position4KB
-
content_settings976B
-
custom_root_certs2KB
-
deep_links_catcher912B
-
dnscrypt-resolvers6KB
-
extensions576B
-
feature_toggles1KB
-
force_component_update640B
-
forced_update608B
-
geop1008B
-
gpu_configs_overrides5KB
-
group_policy576B
-
hips1KB
-
hosts_allowed_to_play_energy_inefficient_media608B
-
hosts_map960B
-
iframe_isolation1KB
-
ignore_lists768B
-
image_buttons_config4KB
-
important_urls16KB
-
inline_verified_servers1KB
-
inside_rules736B
-
known_antivirus2KB
-
lookup768B
-
mining_whitelist656B
-
minwhite2KB
-
network_requests896B
-
no_spoof1KB
-
notifications_permission1KB
-
ntp_promo_messengers_adaptive944B
-
ondemand_features4KB
-
oow_video7KB
-
p2c-phone-schemes576B
-
page_translator1KB
-
passman20KB
-
plugin_version_overrides704B
-
poppin1KB
-
preconnect_urls_config800B
-
prefs_override23KB
-
princ2KB
-
productivity12KB
-
qr_code_detection688B
-
registry9KB
-
rescuetool832B
-
rewrite_list2KB
-
rt_monitoring1KB
-
safe_content28KB
-
saferules3KB
-
saferules_v24KB
-
script_check720B
-
search_on_site6KB
-
service_urls656B
-
shock_domains18KB
-
site_summarization21KB
-
smartback2KB
-
sovetnik624B
-
spa896B
-
split_cache_config1KB
-
stat_bl576B
-
tls_gost7KB
-
togglecalipso1KB
-
translate_blacklist1KB
-
translator1KB
-
trusted_extensions3KB
-
turboapps12KB
-
ua_change9KB
-
url_symbols784B
-
video_translation672B
-
videocodec_install1024B
-
voiceable_sites1KB
-
webstore1KB
-
welcome_experiment896B
-
white_dock704B
-
whitelist_apps880B
-
whitelist_cert_roots576B
-
wlpconf1KB
-
ya_push768B
-
yandex_cards_config2KB
-
ynotif1KB
-
youtube_ad_stats1KB
-
ytp752B
-
ytrust960B
-
resources/tablo618KB
-
install/preloaded_data.pb8KB
-
msvcr100.dll.dll 755KB
-
nskbfltr.inf328B
-
nsm_vpro.ini46B
-
pcicapi.dll.dll 32KB
-
remcmdstub.exe.exe 62KB
HTCTL32.DLL
- IMPHASH 6ba08298dd09ea8e41ab7285d3183bba
- SHA256 3c072532bf7674d0c5154d4d22a9d9c0173530c0d00f69911cdbc2552175d899
- MD5 c94005d2dcd2a54e40510344e0bb9435
- SHA1 55b4a1620c5d0113811242c20bd9870a1e31d542
- SHA512 2e6f673864a54b1dcad9532ef9b18a9c45c0844f1f53e699fade2f41e43fa5cbc9b8e45e6f37b95f84cf6935a96fba2950ee3e0e9542809fd288fefba34ddd6a
- SSDEEP 6144:Hib5YbsXPKXd6ppGpwpbGf30IVFpSzyaHx3/4aY5dUilQpAf84lH0JYBAnM1OKB:Hib5YbsXioEgULFpSzya9/lY5SilQCfR
- MD5 SHA1 SHA512 SSDEEP
Digest
49:9a:ad:c7:dc:6b:64:28:d9:9b:28:3b:14:85:83:63:08:60:5c:14:e0:60:b3:f1:ce:19:61:68:8b:29:63:f5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
55:a2:2c:85:ec:8b:5f:16:52:a8:7d:e3:fd:3a:49:f5:1f:08:59:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
154342
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\nsmsrc\nsm\1210\1210f\ctl32\release\htctl32.pdb
wsock32
getpeername
ntohs
socket
setsockopt
bind
htons
WSASetBlockingHook
WSAUnhookBlockingHook
send
gethostname
getsockname
connect
__WSAFDIsSet
WSASetLastError
ioctlsocket
gethostbyname
shutdown
recv
closesocket
WSACancelBlockingCall
inet_ntoa
select
WSAGetLastError
WSAStartup
WSACleanup
inet_addr
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
kernel32
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetLocaleInfoW
LoadLibraryW
SetConsoleCtrlHandler
FatalAppExitA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
ReadFile
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDBCSLeadByte
CompareStringA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
OutputDebugStringA
LoadLibraryA
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
Sleep
LeaveCriticalSection
EnterCriticalSection
SetLastError
WritePrivateProfileStringA
CloseHandle
FlushFileBuffers
SetFilePointer
GetFileSize
GetPrivateProfileIntA
CreateFileA
SetStdHandle
WriteFile
GetLocalTime
GetDateFormatA
CopyFileA
InterlockedExchange
SetEvent
GetVersionExA
InterlockedDecrement
GetTickCount
SystemTimeToFileTime
GetSystemTime
OpenProcess
GetCurrentProcessId
GetCurrentThreadId
InterlockedIncrement
GetTempPathA
ReleaseMutex
WaitForSingleObject
TerminateThread
lstrlenA
CreateMutexA
SetThreadPriority
CreateThread
CreateEventA
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetVersion
GlobalFree
LCMapStringW
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
IsProcessorFeaturePresent
HeapDestroy
HeapCreate
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
WriteConsoleW
SetEndOfFile
GetProcessHeap
GetLastError
PulseEvent
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapReAlloc
EncodePointer
DecodePointer
GetCommandLineA
GetModuleHandleW
GetStdHandle
user32
PostThreadMessageA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
KillTimer
PeekMessageA
PostQuitMessage
GetDesktopWindow
MessageBoxA
wvsprintfA
wsprintfA
advapi32
GetTokenInformation
LogonUserA
ImpersonateLoggedOnUser
RevertToSelf
GetUserNameA
OpenProcessToken
ctl_adddomain
ctl_addoperator
ctl_bridgename
ctl_broadcast
ctl_broadcastdata
ctl_call
ctl_callremote
ctl_clearpin
ctl_clientpinrequest
ctl_clientstatus
ctl_close
ctl_closeremote
ctl_connected
ctl_controlpinrequest
ctl_controlsendpin
ctl_escape
ctl_findslaves
ctl_findslaves2
ctl_findslavesex
ctl_getconnectivityinfo
ctl_getfailedreason
ctl_getfileinfo
ctl_getlocalipaddressinuse
ctl_getsession
ctl_hangup
ctl_helpreq
ctl_installed
ctl_licenseinfo
ctl_maxpacket
ctl_messageacknowledged
ctl_messagereceived
ctl_myaddr
ctl_netname
ctl_networks
ctl_nsessions
ctl_open
ctl_openremote
ctl_pause
ctl_pingnet
ctl_pittmanfunc
ctl_publishservice
ctl_publishserviceex
ctl_putfile
ctl_putfilelink
ctl_remotename
ctl_removedomain
ctl_removeoperator
ctl_send
ctl_sendif
ctl_sendto
ctl_subset
ctl_userstatus
ctl_version
Name
.text
Size
249KB
Virtual Size
249KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=155, id=1, productName=Unmarked objects,
count=53, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=122, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
NSM.LIC
- SHA256 dc6a52ad6d637eb407cc060e98dfeedcca1167e7f62688fb1c18580dd1d05747
- MD5 e9609072de9c29dc1963be208948ba44
- SHA1 03bbe27d0d1ba651ff43363587d3d6d2e170060f
- SHA512 f0e26aa63b0c7f1b31074b9d6eef88d0cfbc467f86b12205cb539a45b0352e77ce2f99f29baeab58960a197714e72289744143ba17975699d058fe75d978dfd0
- MD5 SHA1 SHA512
NSM.ini
- SHA256 60fe386112ad51f40a1ee9e1b15eca802ced174d7055341c491dee06780b3f92
- MD5 88b1dab8f4fd1ae879685995c90bd902
- SHA1 3d23fb4036dc17fa4bee27e3e2a56ff49beed59d
- SHA512 4ea2c20991189fe1d6d5c700603c038406303cca594577ddcbc16ab9a7915cb4d4aa9e53093747db164f068a7ba0f568424bc8cb7682f1a3fb17e4c9ec01f047
- SSDEEP 96:B6pfGAtXOdwpEKyhuSY92fihuUhENXh8o3IFhucOi49VLO9kNVnkOeafhuK7cwo4:BnwpwYFuy6/njroYbe3j1vlS
- MD5 SHA1 SHA512 SSDEEP
PCICHEK.DLL
- IMPHASH 1233e02b30a7c416ba5aa017ff2ba312
- SHA256 956b9fa960f913cce3137089c601f3c64cc24c54614b02bba62abb9610a985dd
- MD5 104b30fef04433a2d2fd1d5f99f179fe
- SHA1 ecb08e224a2f2772d1e53675bedc4b2c50485a41
- SHA512 5efcaa8c58813c3a0a6026cd7f3b34ad4fb043fd2d458db2e914429be2b819f1ac74e2d35e4439601cf0cb50fcdcafdcf868da328eaaeec15b0a4a6b8b2c218f
- SSDEEP 192:dogL7bo2t6n76RRHirmH/L7jtd3hfwjKd3hfwB7bjuZRvI:dogL7bo2YrmRTAKT0iTI
- MD5 SHA1 SHA512 SSDEEP
Digest
70:19:fe:86:36:c1:40:67:6b:d7:25:97:c0:51:e5:67:eb:67:bc:13:2b:d0:4d:e9:c0:a6:86:94:94:24:fd:ab
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
31:07:46:8f:ed:21:e6:3d:07:54:56:b3:a3:48:b0:a4:21:17:45:d8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
4256
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\nsmsrc\nsm\1210\1210f\ctl32\Full\pcichek.pdb
kernel32
GetVersionExA
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
user32
LoadStringA
MessageBoxA
wsprintfA
msvcr100
_except_handler4_common
_crt_debugger_hook
memset
CheckLicenseString
IsILS
IsJPIK
Name
.text
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
946B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
490B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=152, version=20115,
count=1, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=99, id=1, productName=Unmarked objects,
count=10, id=174, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
PCICL32.DLL
- IMPHASH 3e09384870fa6c1a29cc37553985fcc6
- SHA256 38684adb2183bf320eb308a96cdbde8d1d56740166c3e2596161f42a40fa32d5
- MD5 d3d39180e85700f72aaae25e40c125ff
- SHA1 f3404ef6322f5c6e7862b507d05b8f4b7f1c7d15
- SHA512 471ac150e93a182d135e5483d6b1492f08a49f5ccab420732b87210f2188be1577ceaaee4ce162a7acceff5c17cdd08dc51b1904228275f6bbde18022ec79d2f
- SSDEEP 49152:0KJKmPEYIPqxYdoF4OSvxmX3+m7OTqupa7HclSpTAyFMJa:0KJ/zIPq7F4fmXO8u6kS+y/
- MD5 SHA1 SHA512 SSDEEP
Digest
39:f1:c3:8f:1a:d9:c2:ff:24:db:8c:82:7e:b1:d7:d8:ae:74:a1:1b:4d:42:a8:c3:5c:7f:74:30:be:67:e4:4d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
5b:48:76:9b:35:e3:29:03:10:0e:18:24:5a:d4:72:ec:84:25:12:32
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
1484237
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\nsmsrc\nsm\1210\1210f\client32\Release\PCICL32.pdb
secur32
GetUserNameExA
shfolder
SHGetFolderPathA
pcichek
IsILS
IsJPIK
CheckLicenseString
pcicapi
CapiClose
CapiOpen
CapiListen
CapiHangup
mpr
WNetAddConnection2A
WNetCancelConnection2A
WNetGetConnectionA
comctl32
ImageList_Draw
ImageList_LoadImageA
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetImageCount
ord17
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetIcon
ImageList_Create
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
winmm
waveOutClose
waveOutReset
waveInClose
waveInUnprepareHeader
waveInReset
waveInStop
waveOutUnprepareHeader
waveInPrepareHeader
waveOutSetVolume
waveOutOpen
waveInStart
waveInOpen
waveOutWrite
waveOutPrepareHeader
timeGetTime
timeEndPeriod
timeBeginPeriod
PlaySoundA
waveInAddBuffer
wsock32
inet_addr
send
setsockopt
bind
listen
accept
htons
socket
connect
getpeername
gethostbyname
recv
shutdown
closesocket
WSACleanup
WSAStartup
WSAGetLastError
gethostname
htonl
ioctlsocket
kernel32
HeapFree
HeapAlloc
GetProcessHeap
IsBadReadPtr
SizeofResource
CreateDirectoryA
RemoveDirectoryA
MoveFileA
MulDiv
GetDiskFreeSpaceA
GetCurrentDirectoryA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetVolumeInformationA
FileTimeToDosDateTime
FileTimeToLocalFileTime
OpenEventA
FindResourceA
OutputDebugStringA
SetCurrentDirectoryA
LocalAlloc
GetTimeFormatW
GetDateFormatW
RaiseException
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
lstrlenW
lstrlenA
lstrcmpiA
FlushInstructionCache
lstrcmpA
FindResourceExA
TerminateThread
ReleaseMutex
WaitForSingleObjectEx
GlobalReAlloc
CreateNamedPipeA
ConnectNamedPipe
SetProcessShutdownParameters
SetConsoleCtrlHandler
IsDBCSLeadByteEx
DisconnectNamedPipe
WriteProfileStringA
DefineDosDeviceA
QueryDosDeviceA
TryEnterCriticalSection
ResumeThread
VirtualQueryEx
GetThreadContext
ReadProcessMemory
PulseEvent
CreateRemoteThread
SetThreadContext
PostQueuedCompletionStatus
CreateIoCompletionPort
GetQueuedCompletionStatus
Beep
GetSystemDefaultLangID
GetSystemInfo
SuspendThread
OpenThread
GetProcessVersion
GlobalGetAtomNameA
RtlUnwind
DecodePointer
EncodePointer
InterlockedCompareExchange
LoadResource
LockResource
VirtualProtectEx
WriteProcessMemory
GetExitCodeThread
CompareStringA
SetFilePointer
GetProfileStringA
GetOEMCP
GetShortPathNameA
TerminateProcess
SystemTimeToFileTime
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CreatePipe
DuplicateHandle
SetHandleInformation
FormatMessageA
LocalFree
SetNamedPipeHandleState
GetPriorityClass
WinExec
SearchPathA
IsValidCodePage
SetSystemTime
_lopen
_lclose
DeleteFileA
SetFileAttributesA
GetSystemDirectoryA
GetDateFormatA
GetTimeFormatA
GlobalSize
SetUnhandledExceptionFilter
OpenMutexA
CreateMutexA
SetErrorMode
GetACP
SetPriorityClass
GetFileAttributesA
GetTempFileNameA
CopyFileA
FileTimeToSystemTime
GetComputerNameA
ExitProcess
GetModuleHandleA
GetExitCodeProcess
GetCurrentProcess
LoadLibraryExA
ExitThread
GetDriveTypeA
GetWindowsDirectoryA
IsDBCSLeadByte
GetLocalTime
GetFileSize
GlobalAlloc
GlobalLock
ReadFile
GlobalUnlock
GlobalFree
GetSystemPowerStatus
ExpandEnvironmentStringsA
FindFirstFileA
FindNextFileA
FindClose
GetUserDefaultUILanguage
GetUserDefaultLangID
GetModuleFileNameA
GetCurrentProcessId
CreateProcessA
DeleteCriticalSection
InitializeCriticalSection
GetVersion
CreateThread
SetThreadPriority
InterlockedIncrement
WaitForMultipleObjects
GetOverlappedResult
ResetEvent
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
GetLastError
DeviceIoControl
InterlockedExchange
SetLastError
GetProcAddress
FreeLibrary
LoadLibraryA
CreateFileA
GetTempPathA
WriteFile
GetCurrentThreadId
CreateEventA
WaitForSingleObject
SetEvent
GlobalDeleteAtom
Sleep
GlobalAddAtomA
OpenProcess
GetVersionExA
GetTickCount
CloseHandle
HeapReAlloc
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetModuleHandleW
VirtualQuery
GetConsoleMode
GetCommandLineA
LCMapStringW
GetCPInfo
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameW
HeapSize
GetLocaleInfoW
SetHandleCount
GetFileType
GetStartupInfoW
GetConsoleCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
GetTimeZoneInformation
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
FlushFileBuffers
LoadLibraryW
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetEndOfFile
InterlockedPushEntrySList
VirtualFree
InterlockedPopEntrySList
MultiByteToWideChar
user32
CreateCursor
HideCaret
OemToCharBuffA
ScrollWindow
SetScrollPos
SetScrollRange
ClipCursor
DrawIconEx
RemoveMenu
SetActiveWindow
AdjustWindowRectEx
TrackPopupMenuEx
SetMenuDefaultItem
InsertMenuItemA
EndMenu
LoadStringW
SetMenuInfo
GetMenuInfo
GetScrollInfo
SetScrollInfo
TileWindows
GetScrollRange
GetWindowRgn
GetAsyncKeyState
EnumThreadWindows
EnumDisplaySettingsA
CreateDesktopA
PostMessageW
OpenInputDesktop
GetMenuItemRect
mouse_event
MapVirtualKeyA
CharLowerBuffA
ShowCursor
SwitchDesktop
AttachThreadInput
GetCursor
CreateDialogIndirectParamA
DialogBoxIndirectParamA
DialogBoxParamA
SetClassLongA
MapDialogRect
CreateAcceleratorTableA
DestroyAcceleratorTable
RedrawWindow
InvalidateRgn
CharNextA
LoadAcceleratorsA
ScreenToClient
ModifyMenuA
CreateMenu
MoveWindow
SetCursorPos
DrawTextW
IsDialogMessageA
UnionRect
DrawFocusRect
wsprintfW
EndDialog
OpenWindowStationA
GetProcessWindowStation
SetProcessWindowStation
CloseWindowStation
MsgWaitForMultipleObjects
GetUserObjectSecurity
SetUserObjectSecurity
MessageBoxIndirectA
WinHelpA
UnhookWindowsHookEx
SetWindowsHookExA
CreateDialogParamA
GetLastActivePopup
CallNextHookEx
GetUpdateRect
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyCursor
GetActiveWindow
IsZoomed
CreatePopupMenu
AppendMenuA
CopyRect
EqualRect
LoadStringA
ClientToScreen
DeferWindowPos
IsChild
GetWindowPlacement
TranslateAcceleratorA
SetRectEmpty
SetMenu
SetWindowPlacement
GetForegroundWindow
CharUpperBuffA
WindowFromPoint
WaitForInputIdle
GetUserObjectInformationA
GetCursorPos
CheckDlgButton
SetForegroundWindow
EnumChildWindows
RegisterClipboardFormatA
CountClipboardFormats
EnumClipboardFormats
GetClipboardData
IsClipboardFormatAvailable
GetClipboardFormatNameA
RegisterWindowMessageA
DestroyIcon
CharUpperA
ExitWindowsEx
GetDesktopWindow
MessageBoxA
keybd_event
GetThreadDesktop
SetThreadDesktop
wvsprintfA
CreateCaret
ShowCaret
UnregisterClassA
SetTimer
KillTimer
SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
PostMessageA
ShowWindow
DefWindowProcA
CallWindowProcA
PostThreadMessageA
GetQueueStatus
GetDlgItem
GetDlgCtrlID
GetDC
ReleaseDC
InvalidateRect
DestroyCaret
GetKeyState
PeekMessageA
SetCaretPos
DrawMenuBar
GetSystemMenu
OpenClipboard
EmptyClipboard
SetClipboardData
MessageBeep
CloseClipboard
FindWindowExA
DeleteMenu
GetWindowTextLengthA
GetFocus
GetClassInfoExA
DestroyWindow
DefDlgProcA
RegisterClassExA
IsDlgButtonChecked
GetDlgItemTextA
IsIconic
GetMenu
SystemParametersInfoA
IntersectRect
GetCursorInfo
GetIconInfo
IsWindowVisible
GetWindow
SendMessageTimeoutA
GetClassLongA
CopyIcon
CopyImage
LoadImageA
OpenDesktopA
EnumDesktopWindows
CloseDesktop
EnumWindows
GetClassNameA
GetClassInfoA
LoadIconA
RegisterClassA
BringWindowToTop
GetMessageA
TranslateMessage
DispatchMessageA
SetPropA
GetPropA
RemovePropA
GetCapture
SetCapture
ReleaseCapture
CreateWindowExA
BeginPaint
EndPaint
wsprintfA
PostQuitMessage
GetMenuItemID
CheckMenuItem
EnableMenuItem
GetMenuItemInfoA
SetMenuItemInfoA
PtInRect
GetWindowDC
LoadMenuA
GetSubMenu
GetMenuItemCount
DestroyMenu
InflateRect
GetSystemMetrics
FindWindowA
GetWindowThreadProcessId
IsWindow
SetFocus
SetWindowPos
GetParent
GetWindowTextA
SetWindowTextA
GetWindowLongA
MapWindowPoints
GetClientRect
DrawTextA
OffsetRect
IsWindowEnabled
SetRect
GetWindowRect
FillRect
LoadBitmapA
GetSysColor
SetCursor
LoadCursorA
UpdateWindow
EnableWindow
SetWindowLongA
gdi32
EndPage
StartPage
ExtEscape
ExtTextOutA
AddFontResourceA
RemoveFontResourceA
SelectPalette
RealizePalette
EqualRgn
CreatePalette
CreateBrushIndirect
GetDCOrgEx
SetBrushOrgEx
PatBlt
CreatePatternBrush
GetTextMetricsA
StretchBlt
GetSystemPaletteEntries
GetNearestPaletteIndex
GetBkMode
CreateFontIndirectW
SetBitmapBits
UnrealizeObject
SetDIBits
SetTextCharacterExtra
SetRectRgn
CreatePenIndirect
GetClipRgn
GetWindowOrgEx
IntersectClipRect
Arc
Chord
Pie
Polyline
RoundRect
SetPolyFillMode
CreateDIBitmap
SetTextJustification
SetBkMode
SetTextColor
CreateCompatibleDC
CreateCompatibleBitmap
GetDIBits
CreateDIBSection
GdiFlush
GetRegionData
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
PtInRegion
SelectObject
GetObjectA
BitBlt
DeleteDC
RectVisible
SetWindowOrgEx
DeleteObject
GetPaletteEntries
GetTextColor
GetBkColor
GetTextExtentPoint32A
GetMapMode
SetMapMode
GetStretchBltMode
SetStretchBltMode
GetBitmapBits
BeginPath
TextOutA
EndPath
PathToRegion
GetRgnBox
OffsetRgn
FillRgn
FrameRgn
CreateBitmap
CreateDCA
SelectClipRgn
LineDDA
Polygon
CreateFontIndirectA
CreateHatchBrush
GetDeviceCaps
SetBkColor
ExtFloodFill
GetPixel
SetPixel
SetPixelV
Ellipse
Rectangle
SetROP2
MoveToEx
LineTo
GetStockObject
CreatePen
CreateSolidBrush
GetTextExtentPointA
RectInRegion
winspool.drv
EnumPrinterDriversA
DeletePrinter
AddPrinterA
EnumPrintersA
ord201
ord202
EnumJobsA
SetJobA
AbortPrinter
StartPagePrinter
WritePrinter
StartDocPrinterA
OpenPrinterA
ClosePrinter
EndPagePrinter
EndDocPrinter
GetPrinterA
comdlg32
PageSetupDlgA
GetOpenFileNameA
GetSaveFileNameA
ChooseFontA
advapi32
EnumServicesStatusA
RegisterServiceCtrlHandlerA
RegisterEventSourceA
ReportEventA
DeregisterEventSource
RegCreateKeyA
SetTokenInformation
SetServiceStatus
StartServiceCtrlDispatcherA
LogonUserA
ControlService
StartServiceA
RegQueryInfoKeyW
CryptGetProvParam
CryptReleaseContext
AllocateLocallyUniqueId
FreeSid
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
LookupPrivilegeValueA
AdjustTokenPrivileges
QueryServiceConfigA
CreateProcessAsUserA
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetAclInformation
InitializeAcl
GetAce
AddAce
AddAccessAllowedAce
IsValidSid
GetLengthSid
CopySid
RegQueryInfoKeyA
RegDeleteKeyA
RegEnumKeyExA
RegEnumValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegFlushKey
RegOpenKeyExA
RegCloseKey
OpenSCManagerA
OpenServiceA
QueryServiceStatus
CloseServiceHandle
GetUserNameA
LookupPrivilegeNameA
RegQueryValueExA
GetTokenInformation
LookupAccountSidA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
AllocateAndInitializeSid
EqualSid
RevertToSelf
OpenProcessToken
ImpersonateLoggedOnUser
GetUserNameW
shell32
ExtractIconExA
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetMalloc
SHGetDesktopFolder
SHGetPathFromIDListA
FindExecutableA
ExtractIconA
Shell_NotifyIconA
ShellExecuteA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
StringFromGUID2
ReleaseStgMedium
OleDuplicateData
CreateDataAdviseHolder
CoTaskMemFree
CLSIDFromProgID
OleInitialize
OleUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
OleLockRunning
CoInitializeSecurity
CoInitializeEx
OleCreateStaticFromData
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSetContainedObject
IIDFromString
CLSIDFromString
CoGetClassObject
oleaut32
SysStringByteLen
OleLoadPicture
SysFreeString
SysAllocString
VariantClear
VariantInit
VariantChangeType
SysStringLen
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
OleCreatePictureIndirect
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayCreate
VariantCopy
oleacc
AccessibleObjectFromWindow
netapi32
NetUserEnum
NetApiBufferFree
wininet
InternetCrackUrlA
_GetRawWMIStringW@16
_GetWMIStringW@16
_IsAcerA@8
_NSMClient32@8
_NSMFindClass@12
br_close
br_open
br_poll
br_status
Name
.text
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
312KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
47KB
Virtual Size
73KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
21B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.hhshare
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=152, version=20115,
count=42, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=8, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=15, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=853, id=1, productName=Unmarked objects,
count=254, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=211, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
TCCTL32.DLL
- IMPHASH 2c4d798bb87ec57193b7625c4259da43
- SHA256 2b92ea2a7d2be8d64c84ea71614d0007c12d6075756313d61ddc40e4c4dd910e
- MD5 2c88d947a5794cf995d2f465f1cb9d10
- SHA1 c0ff9ea43771d712fe1878dbb6b9d7a201759389
- SHA512 e55679ff66ded375a422a35d0f92b3ac825674894ae210dbef3642e4fc232c73114077e84eae45c6e99a60ef4811f4a900b680c3bf69214959fa152a3dfbe542
- SSDEEP 12288:HqArkLoM/5iec2yxvUh3ho2LDnOQQ1k3+h9APjbom/n6:ekuK2XOjksobom/n6
- MD5 SHA1 SHA512 SSDEEP
Digest
a3:3f:41:12:a2:5c:25:dd:c6:a7:1a:1b:c7:28:0d:33:9b:79:75:b3:2b:2d:fd:bb:9b:37:a4:83:e9:a3:46:17
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
0f:54:fc:aa:4d:b0:4d:d4:93:19:dd:0b:92:d9:85:18:59:22:b6:56
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
187175
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\nsmsrc\nsm\1210\1210f\ctl32\release\tcctl32.pdb
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
kernel32
GetLastError
WriteFile
ReadFile
Sleep
ClearCommError
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
InterlockedDecrement
GetModuleFileNameA
DeleteCriticalSection
CloseHandle
TerminateThread
SetEvent
CreateEventA
GetTickCount
SetThreadPriority
CreateThread
SetCommTimeouts
InitializeCriticalSection
GetCommState
IsDBCSLeadByte
CompareStringA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
OutputDebugStringA
OpenProcess
GetCurrentProcessId
GetVersionExA
GetLocalTime
GetOverlappedResult
GetCurrentThreadId
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
LocalAlloc
LocalFree
PulseEvent
InterlockedExchange
GetExitCodeThread
ResetEvent
GetVersion
SetLastError
EscapeCommFunction
GetCommModemStatus
CreateDirectoryA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
lstrlenW
lstrlenA
CreateFileW
GetProcessHeap
SetEndOfFile
WriteConsoleW
CreateFileA
FlushFileBuffers
SetStdHandle
LoadLibraryW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
WaitForSingleObject
GetStringTypeW
FatalAppExitA
GetUserDefaultLCID
GetTempPathA
SetConsoleCtrlHandler
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleMode
GetConsoleCP
GetLocaleInfoW
HeapSize
SetFilePointer
GetStartupInfoW
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
HeapDestroy
HeapAlloc
HeapFree
RtlUnwind
HeapReAlloc
RaiseException
EncodePointer
DecodePointer
GetCommandLineA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThread
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
HeapCreate
user32
CharLowerA
PostThreadMessageA
PostMessageA
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
MessageBoxA
KillTimer
PeekMessageA
PostQuitMessage
wsprintfA
wvsprintfA
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
GetUserNameA
oleaut32
SysAllocStringLen
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnaccessData
VariantChangeType
VariantClear
SysStringByteLen
CreateErrorInfo
GetErrorInfo
SysAllocString
SetErrorInfo
SysFreeString
VariantInit
?RemoteNotify@@YAXP6GHHPAXPATCTL_CALLBACK@@@Z0@Z
ctl_bridgename
ctl_broadcastdata
ctl_call
ctl_callremote
ctl_close
ctl_closeremote
ctl_connected
ctl_escape
ctl_findslaves
ctl_findslavesex
ctl_getcodepage
ctl_getlocalipaddressinuse
ctl_getsession
ctl_hangup
ctl_helpreq
ctl_installed
ctl_maxpacket
ctl_myaddr
ctl_netname
ctl_networks
ctl_nsessions
ctl_open
ctl_openremote
ctl_pause
ctl_pingnet
ctl_remotename
ctl_send
ctl_sendex
ctl_sendif
ctl_sendname
ctl_sendto
ctl_subset
ctl_version
Name
.text
Size
305KB
Virtual Size
305KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
6KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=171, productName=VS2010 build 30319, version=30319,
count=24, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=149, id=1, productName=Unmarked objects,
count=135, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=59, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
client32.exe
- IMPHASH 78ed70ebeb178ed1bae5921d2ed514bc
- SHA256 18df68d1581c11130c139fa52abb74dfd098a9af698a250645d6a4a65efcbf2d
- MD5 c4f1b50e3111d29774f7525039ff7086
- SHA1 57539c95cba0986ec8df0fcdea433e7c71b724c6
- SHA512 005db65cedaaccc85525fb3cdab090054bb0bb9cc8c37f8210ec060f490c64945a682b5dd5d00a68ac2b8c58894b6e7d938acaa1130c1cc5667e206d38b942c5
- SSDEEP 768:q78j0+RH6e6XhBBxUcnRWIDDDDDDDDDDDDDDDDADDDDDDDDDDDDDDDDDDDDDDXDU:qwpHLiLniepfxP91/bQxnu
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=NetSupport Ltd,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=NetSupport,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
7d:2d:0c:a0:6f:4d:88:04:2d:cb:64:48:2b:c9:c0:64
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2011 - Aug 20, 2014
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Minor OS version
1
Major OS version
5
Entry point
4128
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
E:\nsmsrc\nsm\1200\1200\client32\Release\client32.pdb
pcicl32
_NSMClient32@8
kernel32
GetCommandLineA
ExitProcess
GetModuleHandleA
GetStartupInfoA
Name
.text
Size
512B
Virtual Size
176B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
342B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=1, productName=Unmarked objects,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
client32.ini
- SHA256 5106da0bdacd10e4c0f8c10afdba89ce72b8678b5549e7ce4f224b69267e774d
- MD5 8f5ada97c32cf8802640350080a35f95
- SHA1 248af4eb242fe0bc91db157666c66124b14f5def
- SHA512 5db3c4581ca9b237acaa49381abe6b95e25e5b91f42dfe7a1ae29a1a2d78ec887581fa08138fda96e45e4aa8f5711b3e40d659eebdfa5892ab66bacd1b16433a
- MD5 SHA1 SHA512
install/24.4.4.1168.manifest
- SHA256 570e26e2e0c74a1550af9d91b0ab11c2ac65eef172c9ae62626a6b7a20f6ce99
- MD5 2bc6a1bed7998c7257d29529a30abef8
- SHA1 d2d61a45e9283f2fd6f491d06f683f391af4319b
- SHA512 caf0c628974b5caf2b3f819ff741bfd9b13d16049106f90c3f4e2d701c1816a4b5b456b9d596656e09c95d276dcc117719109e0aded1e23b214e25954d7a8b45
- MD5 SHA1 SHA512
install/brand_config
- SHA256 73f84c4a68861ab073639275ff5b8378d2da04267c266677f73091da7e8d3e1c
- MD5 71a26ab12ce31092acc888291cfa1a12
- SHA1 0a9d81905cabd0dd0cb9bbd64fa4c07b30dc2f1e
- SHA512 bf995e8ed7c23b588108921b614a03931c1eaf0773599d0c14a78b2285710a121f391def9fcf61ce24d61db37f0f8518f4713fbb7ba6af25c09cafad1596483b
- SSDEEP 96:Qr63FEiE1M8Tt4yhcSqfHSw9UjtSNQnvuniIBdorZnlTzs1U4f1aaL3Jluzs1U4N:QWVEiE1Jt9hyLNQSkT/yu/55h4Ra2Gy
- MD5 SHA1 SHA512 SSDEEP
install/clidmgr.exe
- IMPHASH 994d1bcde44281f4376792fc9383ef1b
- SHA256 33919f6b6975431c22a06c41c32e5f7092860958c68e453eaff9781bb6ab274a
- MD5 86b97526f262ecf87ed7ecd6c7eb4218
- SHA1 d009c56e5fdadb73975c253a14616098dc8d243d
- SHA512 dcfa8730ff4da19ecdf72507f36fac86f47c6133a13499605de9a70e8533da1984ff7f5800dc9a597c27b4649f237203f5400e344e22d3b3eb98e2d63f34f20f
- SSDEEP 3072:oxDcaUS2mMpRUISOKJQSYyQhmlrPueM9U0:mgrSC0DOSYFAu7
- MD5 SHA1 SHA512 SSDEEP
Digest
7f:6f:90:ab:74:37:6f:04:4e:d5:22:16:2d:d2:af:da:ce:08:f9:aa:2a:11:50:18:a7:47:f3:35:23:fe:05:98
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=YANDEX LLC,OU=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
Chains
Jan 11, 2016
CN=YANDEX LLC,OU=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
PE Signature issue
Digest
12:8f:33:57:42:23:60:3c:de:38:6f:79:03:89:86:8b:e1:88:42:92
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
Chains
Jan 11, 2016
Subject
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:35:5c
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 13, 2011 - Apr 13, 2019
Subject
CN=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
Serial Number
11:21:0f:f6:46:2b:63:d5:5a:fb:aa:81:f9:c7:34:a7:aa:94
Issuer
CN=GlobalSign CodeSigning CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 25, 2015 - Sep 25, 2017
Subject
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:2f:4e:e1:52:d7
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 13, 2011 - Jan 28, 2028
Subject
CN=GlobalSign TSA for MS Authenticode - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:06:a0:81:d3:3f:d8:7a:e5:82:4c:c1:6b:52:09:4e:03
Issuer
CN=GlobalSign Timestamping CA - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 3, 2015 - Mar 3, 2026
Subject
CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:37:e8
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 2, 2011 - Aug 2, 2019
Subject
CN=YANDEX LLC,OU=YANDEX LLC,O=YANDEX LLC,L=Moscow,ST=Moscow,C=RU,1.2.840.113549.1.9.1=#0c12706b694079616e6465782d7465616d2e7275
Serial Number
11:21:b9:06:4e:5f:57:13:dc:c7:34:91:3c:8d:e9:3b:98:fc
Issuer
CN=GlobalSign CodeSigning CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Nov 10, 2015 - Nov 10, 2017
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 2, 2011 - Mar 29, 2029
Subject
CN=GlobalSign TSA for MS Authenticode advanced - G2,O=GMO GlobalSign Pte Ltd,C=SG
Serial Number
11:21:b8:73:88:5d:33:62:f8:bc:64:1c:81:12:48:72:24:87
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 3, 2015 - Mar 3, 2026
Minor OS version
1
Major OS version
5
Entry point
35330
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\BuildAgent\work\48c11171c3ae5512\projects\clidmgr\Exe\clidmgr.pdb
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
secur32
LsaGetLogonSessionData
LsaEnumerateLogonSessions
kernel32
CreateFileW
SetFileAttributesW
DeleteFileW
FindFirstFileW
LocalFree
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
GetFullPathNameW
CreateDirectoryW
CompareStringW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
GetCurrentProcessId
GetModuleFileNameA
GetFileAttributesW
GetCurrentProcess
OutputDebugStringW
ProcessIdToSessionId
ExpandEnvironmentStringsW
lstrlenW
lstrlenA
CloseHandle
FindClose
SetFilePointerEx
RaiseException
SetFilePointer
ReadFile
WriteFile
GetFileSizeEx
Sleep
GetLastError
GetModuleFileNameW
GetCommandLineA
GetConsoleMode
GetConsoleCP
EnterCriticalSection
LeaveCriticalSection
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
RtlUnwind
SetStdHandle
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
FlushFileBuffers
user32
wsprintfW
advapi32
RegDeleteKeyW
ConvertSidToStringSidW
LsaNtStatusToWinError
LookupAccountNameW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
shell32
SHGetFolderPathW
Name
.text
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=44, id=225, version=20806,
count=21, id=223, version=20806,
count=148, id=224, version=20806,
count=9, id=224, productName=VS2013 UPD4 build 31101, version=31101,
count=180, id=1, productName=Unmarked objects,
count=23, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=10, id=225, productName=VS2013 UPD4 build 31101, version=31101,
count=17, id=229, version=21005,
count=1, id=219, productName=VS2013 build 21005, version=21005,
count=1, id=151,
count=1, id=222, productName=VS2013 build 21005, version=21005,
install/install_state.json
- SHA256 9fc2b15d6983aa169846d72dcceea59824cba852fd9e295dd8fcadf0e9eb2292
- MD5 ee98e8f0fc597e544430d6a60b74a23d
- SHA1 6f40ecdc3157c76a6559b313c5218713a8d09035
- SHA512 0408a460be8997b12e9805fefbdccef78259f5d12b49950ce811b4999de46be86286195561e28f4deefa0705cad0fab3d82b0f40e8562335e8aff39516537438
- MD5 SHA1 SHA512
install/manifest.json
- SHA256 333654272a482dc66a15d07c778cdfed72e74f6fa50342f00995e26f5dc7678f
- MD5 cba80ee11de525535bf2068ac23107b0
- SHA1 479c817e5b4ae2e49e1e950359f072dd8a8d227f
- SHA512 5acdfd8874e3506c65446f5b5022879b74d5faa4d05af36c9835a35e542bab21d81af0f334403f9f3597b12c20c52e2de9377ed7b22466dea3d7ece47810d5f8
- MD5 SHA1 SHA512
install/partner-package.cab
- SHA256 b132f4785853d215924baaf67b534b288144dc1fd058241301a599c07537cd40
- MD5 d1d2230d7ba1836ebf23f9c3ac440517
- SHA1 d4c9bfa910b9464659136450f83552e60dc47e7c
- SHA512 ad299fc1a3e41a73bde7f771dc98e0a8eedcc957b58927ba65fd76b777dba59265bd24a50a7bdc3c1ca88f374afd3cdf49d32f44c9f301390771c4d7a881c4bf
- SSDEEP 24576:r3O5CbVjuxZ0x+AJojz+GUAc7mTcmJF6Ov5BUjiQ06P:rGuUix+AJojzpUAcChJEOv5UiC
- MD5 SHA1 SHA512 SSDEEP
partner_config
- SHA256 82e288090168abe15419015317fd38f56c1136e7481f66656d84e0a2d861d4d6
- MD5 977bc7b2384ef1b3e78df8fbc3eeb16b
- SHA1 7ee6110ca253005d738929b7ba0cc54ed2ed0a2e
- SHA512 4d154832ef3ac05abb1499a5bc8235d72f64cdaa3e6870206a6363c1d85d821604ae8a96850c2c8bd540d479b8dd5f3ce032472ed96bbf7eddb168ea3d2d1cf6
- MD5 SHA1 SHA512
resources/configs/all_zip
- SHA256 c02f8cb15ee9645a69d23a3232fb78e02ff25e29ecb0d1044e2a7e8afb3018c2
- MD5 6d4ae04da5fa47ce707f3c60d7b8ded5
- SHA1 a8790bf67c4915abe83bfb95becba3460be6f86a
- SHA512 63c54cf11dd7e7bef34888a3d2fd2fb7f201493f3295b3dccc5ad01c3e5c079aab4f1489c3c2446dc0a09c73c3c8aa9016b43bd4a56f50a5e9d82ee7bb4b27e5
- SSDEEP 12288:FlsgNS3lzxey+GgU3qorkuZdWDYADFTFHqAZsvuoETsP:/sgk3f+GgUrXdWtFFqvuNTsP
- MD5 SHA1 SHA512 SSDEEP
ETAGS
- SHA256 41558523f695266820b977aa73e550fc6e55d30172297aeaa4c06d2c8280d7a8
- MD5 4e111a79a9f6894cedc867dac3fb626f
- SHA1 6cdffb6e4ca1e39ac2ffd97134de85d27ef63794
- SHA512 3634f81ae151dc62fa936ebb34289311195895c04937a67f7f721f54dd15ef362814ee3c5296a238a14a7a2104b577d55694ec067a263a50730f87b647975d74
- SSDEEP 192:2VwzXssuM5l+f0iRtAwUmVo5xz6z4bL9TM47jKJbywD8wbPRyWoz:HuukfxtAhmoz24bLxPqQwrTcz
- MD5 SHA1 SHA512 SSDEEP
ad_blocker
- SHA256 59f3aca1577f3ad83098a1c3657aa7f17c32a1d476353dbaf2931b676cdf0b71
- MD5 cd2f09f1423a2fd4b2c299805230833c
- SHA1 e20379e0a945c1f4d13cabfb7f3630fc3235ddd1
- SHA512 19c6337909b77533c0ba3cc3684facfad9b0a47faaa7c2f4659b9e84abf20581c7245e31d4169edcc7abb840cf98901c6eab20cbe6306b25ba118cee29cd96fe
- SSDEEP 384:HKd2oMv8MqNeAS3295fAjThMj8LOxhYmPHhdbIOWtd7QLZ2K:HqIvFAd9AXgjBo0LZ2K
- MD5 SHA1 SHA512 SSDEEP
ad_hide
- SHA256 a833dc540f8a42567b78fb1ce389c4cdb6eec2b21f627b3c0b7f49fe5529b9c4
- MD5 4fedb3419a3843de23b9286ad49df307
- SHA1 02bd17ceaff42cbc766e418a374eaf2636e7ff30
- SHA512 736c8d658f653bd18a69cabaeb20269f6dc5f755f2cfa1960ec66d7c792652b92784189580f3f636d9e4bdc9f048d8640a503f1f87ae2e87ffb7175d89f71860
- SSDEEP 192:FWXZ1RS8u0AExs1K8ukWPk0HNlpZNsn6JA:aZ1RyDPumM3Nk
- MD5 SHA1 SHA512 SSDEEP
alissenger
- SHA256 e8b727bb6428320ee250b655f7bf2520b68db72e0e58f851357796d229b9351e
- MD5 7fcc39fabdb812ea3911c8cb5df06924
- SHA1 ef7929ff4aa732082ec1175ba0c4bc512c21d6e4
- SHA512 316162e1b24e7def0bb9760fce8f070b7cca85fd1891dd75ae8d32977d55ca98476947b6ba3c57c9ab7ebc0d68397fd1dd1a4b81c4b107b4ce6e04d301fe55cf
- MD5 SHA1 SHA512
api_allowed_hosts
- SHA256 e37e1d8fed21ad782ef7cdad3c5480b59309531213e60e3fce457e0268e251e6
- MD5 f4ba9522d0f85b24dd119536a5025f42
- SHA1 c0c96927d55db1e379dc098e055f153498d54d79
- SHA512 653fd8d1399580fe14f643345c0179baf937f2dc803e9329706b4b9585d85f2b82fb0fc8168b5b126150ea34dbb02de3cc387fe5af10cb3d1375b6d79e4f08ea
- SSDEEP 192:d0VTxBmD5bWxb58UHR6yChg6rq1gv6892WKLEcUNDpN7WJCS:d0VF+UbfHR6P262+urQCMS
- MD5 SHA1 SHA512 SSDEEP
api_pool
- SHA256 6a3a2ea13844f8c6e49f06c0488ffbff2b2eaaa6653f2561987a34f2f10058d7
- MD5 8b9f5963e83b145760b7909619a7ed88
- SHA1 0275624d7ca95303355f9b2b904d2a9fb7f3f839
- SHA512 05ba61b7bca89cbc968c40100b89dd08ed7b3a3122262ceab0d90177517c9a5b766ec01d108f3aa879042407a5c99b12792e83c5a8fd8ca25ceeb3f3d65275a4
- MD5 SHA1 SHA512
apps_promo_common
- SHA256 d4432f5649adfb7ecc82ef1c2ca244dd63178c47f02349e9be07660231c101b1
- MD5 54524d143a46e6742a0501ba6e1356a2
- SHA1 a5cd7092b010562006a079aaddcba41a283f55aa
- SHA512 9352716bc52614ea15c093cae3a3c57ef79d2cb21c0486b38554652f8f1f2ad659cdaa25db7013d7f0a250ce2f8f4b82995faacdfb8121fdfd8c69cba9749283
- MD5 SHA1 SHA512
autofill_custom_data_types
- SHA256 a31a55e296564ad1d3c84b2c6d01901f5a2ef395a8ae9d87e910a4af8384c1af
- MD5 f23af76dfc4a8a2eb5fc6641e5d816fc
- SHA1 cfabecdcdbeb3e9e97fbf13df7845c92b39d5fa6
- SHA512 533ff4065f26eb4da3098286f9582a4a1b18f9795d51e49afb16db70782efa0ad65d5ce006050b2a0926b38422352603043c3c9cd96f3cb75be2e04d114afd6c
- MD5 SHA1 SHA512
autofill_heuristic
- SHA256 4ea0073329a9e67e11405c777d917a5632a9d873635e1cada9ff52bcf19d9b05
- MD5 cc55f3b25ebf1c822fedb9baa2d0813b
- SHA1 e188ecd512750129b9b7e2a165a5918d7f3dc09a
- SHA512 52cbcf5484802cdbc5b1951ebc912217d3f7695b78e1a03ec5d75574a8ba9b0b355c842ca586dbd34b384651338c4a53d0887ae09cd5e2dc48f29183b3a52bfb
- SSDEEP 3072:rijbWD20RC3lrSFcYzOceOZLPy1SayxDWUlsRtmB+Fzu3Vdbr:IWDbElWDFTZLKc6Af
- MD5 SHA1 SHA512 SSDEEP
autofill_js_heuristic
- SHA256 424ecfa7a8ef512d8d16104984eca54250223e6d5d4105d14de630346157685b
- MD5 ff8983013706f347358fe8edb7685451
- SHA1 db5bb295215b83990b43387dc8e144325f9599c9
- SHA512 1f5cce001dcacf8bbb8474e414202b087b28420293d900546e96dca51120a0c7f0bb226185ebf20fc002f561b906b64868ec00196b39708b6e6061f15ea43453
- SSDEEP 384:XyLo4ONtfNiMNnepgkA9ehDgYcLXiKVpgt1edQ/4gXc+6b960PeNEAb3Ycg:Xw+fnyvYzVpglVM+o9601w+
- MD5 SHA1 SHA512 SSDEEP
banks_urls
- SHA256 767091fadd13bcfef84371e0c3b9489fbf00b228468231044b0f5c5520ce42bc
- MD5 8225880988685635e8fddffb90c5c433
- SHA1 c3311e4d6ddbddce7d443516ece8738a3e785303
- SHA512 80e8e7f8e4051912d563f67ae991fc4215b26fa799f2496318477d33beb956ce55772762fc1cdc1b3fa68b4ad634ea2528b41711c9ee6a7913fd02ff8827b98b
- SSDEEP 1536:u1KJsf2LuJo5U9fKdw2Kgg6KqEQm7qLTInUvmmH1TLMqR:mey+0KG2GPh9q+SVU2
- MD5 SHA1 SHA512 SSDEEP
cardman
- SHA256 7489e38e04ccc488226a35ed9c13ebab59908718567fb80938b2b0426f459ab3
- MD5 34ddca0060a4224c8940539afb377e67
- SHA1 72d1e9fde9607cf9e545bedf4ec08fd5f0c0632d
- SHA512 3bb643bc09ce0163140a3c9f6dc93dc11637443c915f891ebf18525e30b51b1e8f7c0ff4446056f5142e7be47c2511a3b9434f9ead7637ee7a242cc5b69742c0
- SSDEEP 96:Jf0bsOi0G0GViVo7ENz+64wYAijLLg2Wt6Y0bFY7MH1c:JfPOrGVzP67ijPlYOrVc
- MD5 SHA1 SHA512 SSDEEP
cardsec
- SHA256 2460126d7c101f9680c7337104a8d7d10daa349c3ceff623b67c6efe0ff1e323
- MD5 c524ee25a3aed288a229664fdf65273c
- SHA1 c42ea1117e0c5c1d1a51f7a5d93e39064c258b11
- SHA512 6a2de9ffb2d5164b1393cdd4af9d309a645d199a81b925c3673fe3cc2859d4837816cef95dd5ff3fa69b7044f7d15bd72ed8e3feb6976ef1d705a4290d02d126
- SSDEEP 384:q2ro0DzCHXS1DepjcC9+zVoBvx91TN8F6wbdfYferRVuSiPh:qWZD26eduzMbTNYbeeRVqPh
- MD5 SHA1 SHA512 SSDEEP
check_whitelist
- SHA256 8a3b51c71216e574768da88345e6b326bad4a8c2ec1f4547e27e96c5a92eb893
- MD5 b35455236bf22465373bcafa4b5be224
- SHA1 e8c1a3cc38ee30aaaf705385199798735e5da6eb
- SHA512 1a96d44af5306b044956fff7c408145e95a29befbaef7cb2697881256211aac82dc11ced2f30a8c70963c74669e227aa2ad8e88f8bca03327be2c1a5906f4f53
- MD5 SHA1 SHA512
choose_tab_design_settings
- SHA256 c4eef52e225c83887e3f9df99a9a6f33167a3f8f609eec96a1a715882c872a2f
- MD5 65441b244c9e0e409e2787aac5b14a3d
- SHA1 4d486ffb0dfd81c15f1292d2db9c061f859a9e71
- SHA512 18f41926a97869618c4e557e19fb31611340f1ae43fdfad39c365c281c6cca77d003fafdde99aeb1b1d844edf1c12a8e432f3f5adb463b1529bf6e47f4148ea2
- MD5 SHA1 SHA512
chua_list
- SHA256 96fe959e0bef3daacae1cbab701497f31ce3ca82a7a4f44f81a37e854105a476
- MD5 0c18b15b5cdfd94661da663ec4961c60
- SHA1 5b03e83a845f61038434e04355eb1ef8b05622dd
- SHA512 6307714c5fa9f8fd504a3d004ca9bc0ebcfa9c92d3e7141e2a2cc4eb725ef04ab69be631fdedd0975f221fb452060ada6d1163841be28e485c743ebaa8f75f25
- MD5 SHA1 SHA512
collections_blacklist
- SHA256 02126ca61a5fa3ab69424ebedd47245aeaf32d47dbb1411b88c6589d1fbd2fcb
- MD5 1b2153475e8ff1e853b26101f23264f4
- SHA1 b74ba501738cf10a5ad2d75cd5e8a2872f6516c2
- SHA512 d33821b016cb4f51b3e62f67d5f5be30cd4b2b79a96634b27f3d9ae0ca91fe1144d52281275d606ebf3c94189a7371e63aba20f6b8e2009878676620f5eaa46b
- MD5 SHA1 SHA512
collections_button_position
- SHA256 e26abdcb316fd92295c7c9f33811bbff79b383668f88dde474507f99d28b2c30
- MD5 eba4bc7539d7a7bb6e3daf6ffa034d2b
- SHA1 9c8c3348bad707b0ede77931e51146a9afc25959
- SHA512 668bffabf9b97761a72dbbf5980ae61693db419e4f95b6cd5393570bb07957c6e6f661516e50ec29861ff8e923ae28c90e104f76e60540a12a47d99d01bb3356
- SSDEEP 96:zUAUaQ91zULNJ6hEHg1NZgxs+M3ZuPM6EsMvzyZUaub/h6in/9:tDlKhEAzmncsPM6EsYL56M1
- MD5 SHA1 SHA512 SSDEEP
content_settings
- SHA256 7a3df77b816097a64010c0d4036bc60732dbae52ab2999554c811582b51ee0dd
- MD5 4377c60ad1012799a518a01e6f497cb7
- SHA1 67a6c9cab882773d25f7bfd07fd21ea62d32a63d
- SHA512 a0a9649059e065fed6ef23bbef2adef2e16a918259a7dfc4edac3e17c16d39bf41858de4885347779d794395b3ea43c3e7ae6271a2a13e444774784b14eceaf7
- MD5 SHA1 SHA512
custom_root_certs
- SHA256 3fe1548512db08dd6ab2dd9d36cce8c2fc7debabfffff532a669951f37270ed0
- MD5 07fabb31928c65d11551097a3abb2161
- SHA1 0bf6bf802fd12db3bcb30de73359d19cc12fe2fb
- SHA512 a63bb2022a0383b6c2ad78b32f3a2120d3a9d7b51c53a3c6c49aa522127d4f938dc59f7346b53e47b95bbf00d5965ae6c7e2e73b84cee900f37e3f6a1ba0439d
- MD5 SHA1 SHA512
deep_links_catcher
- SHA256 d71ce2ece91d67be71a09c5445715dcece3c11b4a86e4fdf6d933ae44f0c3c74
- MD5 f60febca9a79a1632555e0a4eb6bf0c7
- SHA1 afff2835daeb1cd0de7b3ec5a448c971962e84c7
- SHA512 8304bb6f3e1fb244145ed817899e2acfbb2621a5e14e6c498f930d15521d1aae919d26528fbb475866fd83990e191185a566092768dcdbe02e64a8d521a3bb38
- MD5 SHA1 SHA512
dnscrypt-resolvers
- SHA256 171bb300e85d1876ccc2edb94e1d4a15cc223b0eca307626cbe10e3d6531998a
- MD5 bd03362746786c1b6b40b80d343d2a06
- SHA1 8076d360e5892b0e9c67b4b8cd8d6c7c1ba00bdd
- SHA512 ff105085b9aec24cf4f4df34fb4e1e1ff800f7deba1cba7a871d8ce8373be326ea645c08459340e2a39d2f0fb6fe04b2f72fe0eac996ece66554613f5e71af8e
- SSDEEP 192:NcD4lEHREkGS+p5xEf/zfMvekTiaUdcmQRn:NK4nO+p5um5U5an
- MD5 SHA1 SHA512 SSDEEP
extensions
- SHA256 fa406387284af324acbb477112ad2ef7e184bf5db361d77fa13b311a24cfecee
- MD5 1156cb873e999db104b03865eb0182d1
- SHA1 750c4b06dc829a1a3e35620c40f6d7c161a2fd33
- SHA512 0e09b11a4a02cbcea25ec0854349bba80649f69344a97b8b0ebfa0290d408b37e8c47971d00cf08e2c8db9704a7ff70527ca5fd8e594f320f2ece087cbb32511
- MD5 SHA1 SHA512
feature_toggles
- SHA256 ecb801fb4c501e6c7bb24fb21de2f209a73bcd5d7f44bb12e87df32819f4fd66
- MD5 ae265fc773e0f84980ea1e138944c730
- SHA1 42df96009607f6631b051c1ca2d6dea8d4d1b0c8
- SHA512 c18fc28757eeafaa9795c2f1d01e465acdf0256a241982a7113aa58e9f58918db497a3c4bd474538fb29760a407bdc111b2af80e372c884393721564c41f19b7
- MD5 SHA1 SHA512
force_component_update
- SHA256 807e0002d3bfde1775b1128f74e6ae08a0a3febe1d538dedcb7e79c927db56f3
- MD5 37b8f38c4be5fdba5fa0487f6192d4cb
- SHA1 eca2e6108bd548395c7c56f0221819274fc7c216
- SHA512 fb7884f6bbbf965ddc2c41469dd763b7594aa24c1209fa6be925920714b8a0015f12c50032cb08131b75d93eac5c1cdb5ddd959e9ddca089a529fda5ece1bcb4
- MD5 SHA1 SHA512
forced_update
- SHA256 bcdb438c8de5fadd38580f5b07dc2c0e9e11916527c56eb7ee012a9b29838d93
- MD5 9e5293d3f212c7f95a2fb5c14d6eb806
- SHA1 ecbcb92a83b4f9e408fd788687dcbd757cf64ac6
- SHA512 a8c302e57d1e728935ae200216748d939f23ca72d1b77db4546cd26d1cecd1f2fbd0ae69199aa6276996078a303486895d5e9d25d7337f3cf8c138ea76d4c29a
- MD5 SHA1 SHA512
geop
- SHA256 2e0e83f23a6f85e79d32068675f6003a6b50abb5416e0f1faae1abf1e7bb0936
- MD5 4ea36877fbac126657a673f1158f0da8
- SHA1 70f9745ffb1ec4c5ece3bb1251a2891537735b5a
- SHA512 27ea5c11f3444f02248639ca7777136f9324aa858a7b2b443f2af42ad7995423d2aecad33d097faefe93d8920b1815e30025a31cffcec69eb0755564cef17261
- MD5 SHA1 SHA512
gpu_configs_overrides
- SHA256 916f7501cc08dfc5a186371a57b40ce87ab979a0d034a2d0624a23f562f039bf
- MD5 725284926ad883cef3bac7e932327850
- SHA1 ee6cc823013f32fd2c5061489620fea4971b7cd2
- SHA512 650fcc75925aac40c3495f5edd75c8e074f99314792c47e507af9a137fa35f56f1396dc2a7cac6b17f02c751f3be082aef724e373efba96fe11f0abccfa813cf
- SSDEEP 96:YIAkYoF03l9T443+uH95QryXOLNaLDvWNSLXg1Kt8fBuiLshp5E/PsBrqM2nuUOQ:YMYoF03787uIr6OLMHvWkgdfCp5EXIrw
- MD5 SHA1 SHA512 SSDEEP
group_policy
- SHA256 3d724858f547e7b5ef7e2f6fbdc904b49ca29f4484c3e59b7e5a2bb63e9c3182
- MD5 0b7d3677399aff1c7220548f31eaaec4
- SHA1 62491a66a0ff99e5310fa4fd355e08e31d27c4d3
- SHA512 b7d9c369d4e6867ffea732f694dcf8c65059777341228c0ce50b622ba634833232c736ff068a36e7cfd75b5c92002240cddaab3bc37d924eef77b8f89cfd4608
- MD5 SHA1 SHA512
hips
- SHA256 1b4033acceea963ba2c86b38c3302a339fbb66f6f399168ba0d0cbe6b8ac829b
- MD5 8956a0c8c5843f225b45f59007b45d1b
- SHA1 b885a234866c2042236a427e6296677ba1bf6560
- SHA512 fc7c8eb730a3f3c30be2fdd3c065728f9fb81f8215f7a9966dd078e87c92ead8eb1ef75f37252b3f4d0b618f379ff9fc5242f9cd41c484624118887bc072aae2
- MD5 SHA1 SHA512
hosts_allowed_to_play_energy_inefficient_media
- SHA256 49a73b156495d8a0e1288e0f6f7eda222bed3ec4ff23d63e3bcc9f0bea10abe2
- MD5 2e25655b97c5c34de8eb6bc01732b04e
- SHA1 3aa14af40caa0c36c963963c22295372b6743e9b
- SHA512 65cdc4da800fae00ba828bf59c15226566a9e78b168495e97e8e2949c494d8b0ed65edcd378a44417400811d6ff3b4f6ef54a1949fa8490ba0def532ad4deda7
- MD5 SHA1 SHA512
hosts_map
- SHA256 99c046a6a9ea533292ba4a8e16fde9ffdc8117da5f3113d79bd94d9487c75a1c
- MD5 5ce69a3e4a5062ede8a13890f508d94d
- SHA1 c2f7866abadbe6372fb5d25270fa4c3fff0638af
- SHA512 8d17f80e96d5f530826c6d6afde512a301bc88cf405058ba55512db4274360e4dc1a5b025a5e3a4130ec4e0821c6a32777a5c984ecb84311e84ae6c076ed427f
- MD5 SHA1 SHA512
iframe_isolation
- SHA256 2066a80786f816e106699d6016a40c30507b4b44965cc41fa353d0f587f82723
- MD5 ee36cf5f843a90a270adc32363d74a98
- SHA1 9f53f3e5216a675a60bfafbc3680b99a8cf1c961
- SHA512 022c08e4622bc856b594c17a6ba168e481043a1c109bb6de4df2c0ef415ccc746f411d3e396146c4318b5fac35a80766c8b9aacab094c7677eb90778c79998db
- MD5 SHA1 SHA512
ignore_lists
- SHA256 5b347f892060204990b412b0f1a59ddbb41d711af25e728c03695c51980ac78a
- MD5 5e479604b13ca6e20574134fccb56b47
- SHA1 35c24fd24ba487fb8ef9a21d04570306ed08f9d3
- SHA512 54c40df26fa7ae7127c9a23ef89e24b61258afcae470964d539919c6924a98a9e8ffa2096a2cfab99d86fafd2d629285f352aaf0d082679a4020784225c49483
- MD5 SHA1 SHA512
image_buttons_config
- SHA256 94004063989298c7951364d966147217772c1dba78bfacc6b13eebb7c8f5706e
- MD5 f51cfa018c9d9310c3dea7ffc239c6dd
- SHA1 6d0e2bf2bee589a067bf9b81beec4093e9c527f1
- SHA512 b62d150bfa30da1bc45e7f627c4935efcb6f71d709b4bef4a525301ead3b808f0100741884f6959e3ff329ee7a264141921e4d5b1ff220b4b99d1fda79ed8f53
- SSDEEP 96:ZOMPJ0BdTXNiFbnv0kOUSNtXl5RdaI9fA+9ERHzF8n0bQwL:xPYdzNitMkRSDPn7xAbRHBVbnL
- MD5 SHA1 SHA512 SSDEEP
important_urls
- SHA256 e74edbdadbf5824b3de9a43bced1ef45fd172fad4203baed8fca4617e3c26a40
- MD5 ef2c2d3428caf43a1a127a61cb58ce53
- SHA1 6c13297c3deb0589e6ae3b2a944b43a6e64df337
- SHA512 008c47d5bd6febbbf9ab48b53c932b04c48a9e1deda12a144998d50377171a4c4b6aa6b5852c4953f61afcf6ba406549280851805171a17f33100f84c4a84ab6
- SSDEEP 384:aQRbBh0kpeIG5+CvkG6DshWeGlI10nlqLg/AZZVDnnm:ambBmoedQCvjLti1np8Vbm
- MD5 SHA1 SHA512 SSDEEP
inline_verified_servers
- SHA256 f64f9c793e05a76e8f04f13cf3a4bf9a23da8806fb19c44d1771a467e3d09d1a
- MD5 10e2c00e6e623d1fa1099fdb6e645239
- SHA1 aad43f5fb83365d7797eb93b59f07e5171522e73
- SHA512 054eae0e0a7d27abcea3168a4f71c1febdd84fa23fad76e1594fc629f6ffbc58a185f0f6bcfeb18ebbdf8a073150e40ac2b537e9758578c59baafdf341d2b028
- MD5 SHA1 SHA512
inside_rules
- SHA256 4e3b51aeecbc0bf844a149b7504638da15ced06ab4c3abb9f7ffc38522ddfb8b
- MD5 39cb7642998111e5de5c77caacb92ee6
- SHA1 c22b9f4038ed5f49c2209696235de1a5333238e5
- SHA512 1b04457d11696f7018da0ae3457ce89e895fbc623d26689949ec3b411f98da5c74411218d4a279da1ac1e86133e0fcb7beb3b259b866daadd59e49493ad8d898
- MD5 SHA1 SHA512
known_antivirus
- SHA256 dcf533234ac2000c9d37055a2118998347323615430b763b6e47d9d619d4ca4f
- MD5 d6b3bbeb669f08fb02e571137a55e933
- SHA1 6974c7448e425ca8d5f9594f2916c9eddc7b942a
- SHA512 c5b854e9c3787015b9bff0a19b9edf18e738a003c0da1f8b2eb5b047c31b258de313e6e1d20cca83dcd34f2045b95603ff61ba0f2b9cf2ab28f0cdd91c9ddfda
- MD5 SHA1 SHA512
lookup
- SHA256 ff613683ffa89630d4e3281abb181f2561c0ff1e5e85fa8360ca9e005a8f0211
- MD5 92b166de56aff5578f2a49fe385957db
- SHA1 6e8105d3ab11ea6ed86fe92cb76bd310cef9f6db
- SHA512 baac7c63d8367da7de2b4e790eb4b888373310f1f87e054321369d9dd0c3b71f141cf62f3efbd379a45c2c59de457e0f922acfd3ac0b0c574f7ea0786cd79dd5
- MD5 SHA1 SHA512
mining_whitelist
- SHA256 beec0273eaeb8ec54f8c595a53dbf71fd2b40efe4a8f41da3a78c109ebb46594
- MD5 bdcab3ef435d8fe981da64b205a99514
- SHA1 36bd574a8ce1e55508d27b7c427b5c067c0017c5
- SHA512 b9855097fd7f82294b30a00f0673106d8ece8f33af7183fe98d0db51b5acc95bba04dc53174f9852140548f52f63e95097abf20c5ceca506fce6f5a4cf5da6f9
- MD5 SHA1 SHA512
minwhite
- SHA256 29c00e9314580890dbd4da87e7a45f059048967affe74bb775e5ea426b5f5285
- MD5 dfb5c9060b86861f4a0e524f7bd756cb
- SHA1 f992465f447f0328b95683715ab625814838ddbd
- SHA512 c160b3e9f413e18ec4f74a43296097e0ca054ec9c5b329c54233110c9bfa567ed5eae207ff91391fb4bb3a8b2a8ff2bbbcae74e1f6b94f5341203f8e83fc8139
- MD5 SHA1 SHA512
network_requests
- SHA256 a19b04c86bf7c25bfb3968eb3d5e9a0ea322e78c89bec0859a1543dc50d3bf5d
- MD5 3643d191d6b05fa87e007338d0ae1186
- SHA1 eeefa8d32665aba9987c62a81c4695adb29becfe
- SHA512 8db9962b09abf0911cede41e685dbc100de3fea41cc9fa0a9a10edbb8b2ec84cd3cecfa2c79d9fda62200e8b27cfbca74042e12f4380c943d9527361feb7773b
- MD5 SHA1 SHA512
no_spoof
- SHA256 b57e45c8a8607afbff9b6c619467f848272805e062a92b299828c0b13d69f7af
- MD5 40ad3e1de72cf4bdb4e75bf9777fa7b6
- SHA1 c5a8a41c79f8175deddc8788b3811798a02dbf49
- SHA512 6aa979bee7aa435e48d50fe7d98211f2842d967cdc3f78bbc235e423aaf8af869767c90ca4998159a19d34266768b2ad09c93712609af36e17cdba3f397342eb
- MD5 SHA1 SHA512
notifications_permission
- SHA256 a5f147b295da91782543b066a0f3cf51c9e611b669cd109a6f0017590b96d09d
- MD5 6842b72bc78eedc85293074c982417bd
- SHA1 a738c413332920b2db73969ff6bde1dd739bf7c5
- SHA512 0b1535cf275fc67889249111551b1272322ea785cba338e8dc07bfa920e3df4b8abfe424bb3a9153870ddc70f2476092bc88dd7a853fd65fcb70b768fb14015c
- MD5 SHA1 SHA512
ntp_promo_messengers_adaptive
- SHA256 ab068ca069e9d61b9c5d4ead521442cb46791ed60178527fbde3b091a8365f0d
- MD5 d9e5d2c498c747a968c2c8a0c0b557b5
- SHA1 680f7bd00aa508bcd9273ac993bb6ae3028c29ef
- SHA512 fef7f5124f01462d6a0e7346707f077f5e9afc6ad28403b600f46404fa4c144aec94328c0633894fff62489abed1ecaf6ac6f19dbbf9a886700d94893834b83c
- MD5 SHA1 SHA512
ondemand_features
- SHA256 fb511c5234ec6424d4914c42eadab92f5fef2bb5b3cf9caf9153b5bc75768db0
- MD5 bf97f9dd7d80f65d9441d63dac96892e
- SHA1 ab469c6c20bd92358f60f88684ee2d03eeebf520
- SHA512 93aa5159df88baf854112d7d9d3dcacb13abe598993bee023028d5645984489c9bf2af8ae28a9a2b6b3dea9641e5e2fc275aed41262ab3787baff7531bdf719c
- SSDEEP 96:Ggl/4RC/jN/f/xrnszXXeE/tz1RH0cZDYaxpqqJ7y3kjeTmi25n:iRAx/f/lMdHt0cZr2C7yUKv2x
- MD5 SHA1 SHA512 SSDEEP
oow_video
- SHA256 6641327c0f870e76d7867d6d43cffce9ff59532666e1c5edf48040648b4bb886
- MD5 f7104d98098feed186af8a7a99962de3
- SHA1 219754ae51d59f696eb391bfcb23f4a0662ad44b
- SHA512 817ac632be40f2af5f27dc3cb062307329cf846aa56bb49c88df3e48dd934cfb24da38d068ebc2fd418a95620f18a41a5ae9c16fb947cc1be680cdcc237b9138
- SSDEEP 192:cJ2EF940ActyshfoVMBv/zEMbNJktv88/UUwwRhLTF4zmZt8+:c0E34xsNoiTEMItkMwuh1e+
- MD5 SHA1 SHA512 SSDEEP
p2c-phone-schemes
- SHA256 d87308f477bf7c9c0051fa4e95c30f8ca53cd90d2b5937f760845e2e6bef95f2
- MD5 978b49848e9bf139b6f13cc569882b78
- SHA1 1b4c0f653c6e353041bc82c771d78050b73f683f
- SHA512 62eb1b551cd8b504a39cf63dcf7ffa641d007e81eec985eee661070a3870c41757f756bc5d4d10dd1f18786dea9fd61b2f1659bf6624939d043f9694a3084f43
- MD5 SHA1 SHA512
page_translator
- SHA256 31f7e52c7cfae9f0aee2b2bca5b4e439a414465eee3ac26d6a75af0bb5494f9a
- MD5 6c791b201c48002b4b49a2d3795905a9
- SHA1 a6eb466be9a6fe13b695621af9558829aba6f699
- SHA512 c68bd0567961fd7754dde51553dcd8abe33fd15ea90ba8d56a81fa19cd17fc8576b2ef1a11bfab1132a6d8b1c65096897be4a2577f3deb1169e1ab53af36329d
- MD5 SHA1 SHA512
passman
- SHA256 3de1c1cf310195dc752a76e2bed9791a83c0466417513692c2e6993beec72585
- MD5 22850cbb3df2efafc022a87ce6bce755
- SHA1 8f0fb893b9ee73897bcf00396dbb64989f0fc6ba
- SHA512 039e01bbbd5d18d4e68249b4d940368f699870d3a3f7ce456fb3ac73818f8f5271d5964f4825c1467f1ee6de306815575f5b11e8d8402a1bc377b5c760b89c61
- SSDEEP 384:eKEbujhWnYSB+6z1esgWF0evh/09JOW5qdE4ytEUckEbbs:iu10NNXh/0/OW349U
- MD5 SHA1 SHA512 SSDEEP
plugin_version_overrides
- SHA256 5163db5e8c9ef05f2ef7f42e65d2d8a95d1e574bb1b684bd8a27a5db2ef439e9
- MD5 48f41236fe039f6fb1bdcb451126a6c1
- SHA1 ce0b2066d1f40c621dc6253c9ba18f51f9896ad4
- SHA512 efbe5ee0cc3e747bc3f639969196ba8d6320418976851a6b00e7f58863cbe7f4964ec955caa2f035d3fdf58512b26c0e2223b523a26a660817e6a6f455536a30
- MD5 SHA1 SHA512
poppin
- SHA256 292b3a62aa4f8bc4ec96f04fd199a8b263f53a3b54225bddc11725eaaae52123
- MD5 50ece0b21e53b1a3e760e781a7f810f5
- SHA1 caf08a3abea8c121a4267ad52b3240196ec6a6a6
- SHA512 b0e43d93a8c3600a0bfc07e91f02795b88e11daa5edd30e0bab0f1df8748c9fef7041316503b6fc329bff364314289e09970d9ee7b9ab3c4680f3b78eca7e539
- MD5 SHA1 SHA512
preconnect_urls_config
- SHA256 6a932e15ebae4e35fb7cd9e4a91cf3d191306e6fdb378375b8a2d7fab5f43639
- MD5 6121782edb8237ce862c527e75abfeaf
- SHA1 1e1a6fccfc48037e9ddbf9da216aea401690f8c3
- SHA512 e218ef50741516be7da02d2288ef2071d10b2fc44a2e260c6185937b4d24524f743c1e04e276bbd8a2f80d7df6bc3b27579c22159c193423f5f2601f02b08e37
- MD5 SHA1 SHA512
prefs_override
- SHA256 dc10adbc5e5f0c6f5fed9e437546facf4ce2293c2240820f2041c82748537e9b
- MD5 a503180faa436fb2d1fafa47f7e2cf5b
- SHA1 742c226d2410ef476d12428b005267eca5f35a7e
- SHA512 8e40205726c7f1bcd189fe00cb47abe5c38382195743f68cc73e03f259aca39821c171de62d06590d7f5c7f16257200384c611793da68ac5fd5311c0540f15bf
- SSDEEP 384:DUR0D6qob7FERMIE2SSl/3QsOqG1pOqZzOPVW7yHsKLMspzYnKiBHSNIX4ZI4eT5:DCq2oMG/3Qx1vsPVpHsuMiknPByN64Z+
- MD5 SHA1 SHA512 SSDEEP
princ
- SHA256 5015b2e1f51e35e54243b48ef91ee5bb5386d352bdbf16fe1d12fd1d3a8649cb
- MD5 b6ff4663aec225f2461f40658363f216
- SHA1 a89a26b3edbcd11d173da5a128be4e50ac644431
- SHA512 3752a4e8aa8088bd057facab1ac69949d1239095d8a1a86fdb2d84d41746c41fea7eff0298861886f9e54b9352e74219dbf8e5de2b71ea4a219ed6d2b1a81389
- MD5 SHA1 SHA512
productivity
- SHA256 f07620219be361ad4374e40199329a94cabf2f3496b1654de422e33b10eb2abe
- MD5 92c9927ddefb15401d13073f59ce5599
- SHA1 a67dd4438946f8bb73cdeb6e5d648cb6fb02863e
- SHA512 93a859279410fb61efc01a16b1d52402d4cb7919af62217a92571e6d3ac50bdde96558b471fac79118222ee6f51b115581342f30952d691d181eee88745dea30
- SSDEEP 192:jqBz1hdW20325QGKj5hbhswEfCY6PanOQsXv6DS9byJI9zekRNmsvMAVaO0eTYVc:cz1r0MQ7jnqK3POOQ4iyyJ2NmsTVaO3P
- MD5 SHA1 SHA512 SSDEEP
qr_code_detection
- SHA256 c74aefe8892510a230196f9b343f8893a36af669344eae12ef4c4355508707b8
- MD5 19cd6aa05d0a571929dd41db213204f9
- SHA1 17b155669ac23345c2ba99fc064b8ed45ae5c862
- SHA512 ee26999f22e57a434bee95473ac85df69f8cb3423e38ac5fd0b6fa5932290d772cd9a242a9143165afe8077644d2a99c38fb381334d0ae7b73e2e5ac79e2444e
- MD5 SHA1 SHA512
registry
- SHA256 8adb110dfb8ddaba07781026f5508b33a76abb47e815edf550967e08f876c125
- MD5 fe76929737ed8a56978be24c1a5b9e25
- SHA1 892df021e5636fc103f5d5e45c677edf2c2cedf9
- SHA512 3f1d26f4dc1149bd2eb231e1cd18b4c1474809ee1353cfa5bc96d7282b626ee5758fd54c52e73873b316325eba8ab2a03d14777a562c12b816744e33b47a3dad
- SSDEEP 192:v/81gmc6bA0NDhDyiHepDKMR+p6Vg1YmH7a2SVn45K/cGvTikACvS:UgN6bhNxyieA2qLap1/kGvTz+
- MD5 SHA1 SHA512 SSDEEP
rescuetool
- SHA256 accec40d2fabbd9005b364dc5b642b6ef762af5a132feb4302db56e9815e15e7
- MD5 3cf1321508ec55e82a8272eaf74d6519
- SHA1 baba093f2a0415c52207727d96c064a47ed68e20
- SHA512 893bad2a447c91a254000b35ae03db163092d4100474cb663790ca357185840de1ed1e159190b1652fc03e7540e142e906aa59e0d10db2e7b08975059d30d3c4
- MD5 SHA1 SHA512
rewrite_list
- SHA256 e2cf310f292d44e7b802ab8583b71904d058d6626d0bbc2906ed6f239e8bf317
- MD5 d66b433853d666b16941e935cdf51eab
- SHA1 1c2aba21956f5035f7cdbbec3fbbc455eaa8424d
- SHA512 a437969a7e6948614994da728cf697b4d0eade159182f1b73fb2d42b50c7c8419d11478ed54c94c99a337d091c94654305083cb3951bdecc1fc3fefd7bfa3704
- MD5 SHA1 SHA512
rt_monitoring
- SHA256 d7b4b9c4936517187c058e2ff7737a1c3c25a1f58ce416ab188ea776b7901219
- MD5 dc8aa569a8c464e4508920de053700cf
- SHA1 076da3aba0ece18903fbb0aff4906b89c275123b
- SHA512 65a20620a1f4813dc3d0370ea35f543e64a19a33f2abab6519ab63ec6c9ba8005650d78f42f0d48dcb8c96994fcc2ec8d5a76af0f39a768b3b395752bf1d4633
- MD5 SHA1 SHA512
safe_content
- SHA256 aae097f7d8839ce528654b93db84932652e2d6c78526a54b1b33f9b94be8dba6
- MD5 d14c241077ce128ea79ea18b0fa3f36d
- SHA1 aea97f6501665dd38ebc6567edd5efa165393fd1
- SHA512 66fc93da4a08b987b21b8f7102053946cbaddb6e8bd8d653418106439edc1e632e22a47421f95ffdc7535f8944f327eeffb989a421f9e8022d497fe2b1b59fdc
- SSDEEP 768:RTWtUlHXuzHgRUJAg8Vj6c6OxNTr1sxbLO:BgUwzH2SAgKdxNAbLO
- MD5 SHA1 SHA512 SSDEEP
saferules
- SHA256 450ee7254575dde31172e8e96e91ac7c10a41749d46f5e5ec2afb76cc3ffdf24
- MD5 40f81e74fe657b3d6e9e507cb42deec5
- SHA1 a0ffb90d81caf8c4a0f6c118b9b079fe84a0c12a
- SHA512 9a1d80f08f25174c1b7f0f6c817f97c33ec138f5ebc41b25e7ab5cc1d62efe1a3fb268eb33af94e673be1a2ac13bacac17b20f466858c081b7b9cd3d405e16db
- MD5 SHA1 SHA512
saferules_v2
- SHA256 b3485a17d41a7eb0ac7a49ab60e2096433d33d3630fe726a7c230bead98f8767
- MD5 f0d027f9b4f0997a9279bb2b52821fe1
- SHA1 d4d3786746b1c29aa0c66cc0341ab5c8137fe4ea
- SHA512 89d042471bbfa76ecea20fae76c374522acc024351fee5ddc5c6beb9e2794d40646c565e730e20805e12c50708d03a9db21c22653c4347de3070ad5d230e8b7f
- SSDEEP 96:eq4LzIKj0DPvYoYY4x7OtZlmiOL6u//IFPRLBbhtd+2QohPupr:eqbc0jwoj0Jz//IFP1btUXMupr
- MD5 SHA1 SHA512 SSDEEP
script_check
- SHA256 4ac288b893cfa7c9176f7257a59443fed10eafbe8d5ea68e02ca8ac454ce2380
- MD5 674b29d37eb334ed853e2fc67844c128
- SHA1 6479422d24576d570ac46d5697cec592ac778520
- SHA512 af1e13bc3e689c18cc70b3dd0504ecffa7efa14618a533b7c7017df2148caf48ada3e67f5162bf681c545fe3177e6df534bb34bb08d80148f55109ad5c3c9843
- MD5 SHA1 SHA512
search_on_site
- SHA256 c435d51b553cadd98a2e4ca413e391704482e754331de30bb93d6b3ef892eb76
- MD5 1918019cd53126c61e45d2e25bb27ae3
- SHA1 d334436146b0a6f1e51c7a3389a414cbab7e07c2
- SHA512 0d600a7d5b9e2f4074779cc9014c35d0a6e5b4a7023c7c8d04e22c958d9fcb20b403367bfec23af38e07b3ec334262e2ae8fe0bd361ca0015e29952706aee688
- SSDEEP 96:byYzi9csYLJBETTj0kHK5jdUqrwKbvPcVKY64EZQGcvX+OA1rac/oE9CzVP6GQFO:dzi9cBETX0bjhdPkr6mOOMmzVP6GIuyM
- MD5 SHA1 SHA512 SSDEEP
service_urls
- SHA256 959564b42cfb58b54f9031981676038a409adf83c9940106a382a75356b8de08
- MD5 f9896c43172164d663233bb73ad634d7
- SHA1 8e5d37fe8628c4345530d2e3b0af091a0a5c73f7
- SHA512 e99b085bae896bd370deffaaf3142d637798bd7083fc0e92481775d3e673fb6cd2372154f80c9f9e0f55e686ab1ed933d5910a28d84cffaadde012208eb7234b
- MD5 SHA1 SHA512
shock_domains
- SHA256 d90da0ef2c524977bd7c24d8dce3bf5440390549e9c6159f1fc8b2a98f843774
- MD5 2ebdfacba1bc1bcd63427cdf21d31528
- SHA1 571610176b48cfcaceb885b85e1d587fbed7d037
- SHA512 4dace64c6d3032a110ed0d318c7649ec817094b10b98f38aad6b21061bde3067794a590b999b84b23195b5bf113ba76349c3bc6f38b5c6c253a94038f063a4f5
- SSDEEP 384:lUpPgOiPp8uyJnVjGQek5YlXxubeANCbxpoBWsDf8a/RE/FbV3:lCgOiBzyNxG9kYhuez4IE8a/RE5
- MD5 SHA1 SHA512 SSDEEP
site_summarization
- SHA256 2a4f3b3c7dc63228b012b8092696b6060ae0f4e59db0c8926f04a685ce7ca191
- MD5 11ad67de4f46cdb6ee7ee08169eb9051
- SHA1 b722362aa01fd55ddc5964b08692a14f9814acfc
- SHA512 070f0698669dcb084f2b56ee46e12083fc2315ec80cdc261bc3d4ee83bc968097ce420ac67d55561f1bb62cc469c307f1d6099107bf9c53be35dab0111d12a51
- SSDEEP 384:CS4c66MNxv9MeOPGL35E+Df5wS1y1noWy9RdZPxUioEzcY1SkpqswRko:PUtNxv9aSLVwy0oVrdZPxUNY8kpqswRp
- MD5 SHA1 SHA512 SSDEEP
smartback
- SHA256 6a917999e47feca0edb3967f76b3610d7c8407698a9a2cdfabc69af9455b400e
- MD5 41848022c7e4e7b5490b1496d25a58be
- SHA1 9111e27818f79c8ad6e00eeaebd6734731b33cc6
- SHA512 a2f9f7c0ed1d970565d1b4ee095ef77b5f1e3aeee0e6721861b6e000b20964e9ebf672954668e3532329ae49258964a10a975e6e12d08745cc841d38360b1846
- MD5 SHA1 SHA512
sovetnik
- SHA256 86643a150dd63ed78c9c98773e40d467780398baff1fff3f5b2668de6ca54511
- MD5 22c0976fc265178155104c5f4786f0b9
- SHA1 79612ca59f397b558b6aeb4fbeb5bf88c37071c7
- SHA512 94a11bdc317c096537bad1382081c65c467410453e9255f05f3d4010cb5c5c62a17323f78eb877df2b20255e48299e5818929cf0e62d04d38d6f1fd5f0c25371
- MD5 SHA1 SHA512
spa
- SHA256 a35d69934a2d54d6a8f4c84d2485e3a453c0d30bd92a77f01b9a7af8e0b08967
- MD5 eb937b00fe494afc1eaf25ccbf4daffd
- SHA1 f7218c266d6c62f9d7133e9c064f0f367dd49478
- SHA512 0bc9a19fcc35c0c9ce421fdb4db538e24a3994f910ee553a955f0aa9fb1ca2b44717bbc3afa416023f66ea709fadc53ad0342f58a85a16900c49586d210c8417
- MD5 SHA1 SHA512
split_cache_config
- SHA256 2ba75ed7b3179de2cd38e5a3f74008384f258e08be76ba24d96163e5c2a376d1
- MD5 03eb387732c06125ab348a0d9bebb251
- SHA1 43403e79ed79eebfd3a09235f55c0b0f0af8da88
- SHA512 72eddef2320ce7a8ae4eb3e1c991e2fa1318dd5c3a19435c3deb9ad4b781e16cc2ec8cb6fca1e08bd4ba8c517584346af2269ed856e2b921f9f573bc37a5e564
- MD5 SHA1 SHA512
stat_bl
- SHA256 dd4385dfd8a5310514a425045b03416703203faf6eb2f3447150ad4ccd607756
- MD5 df0328b09a648c9188d61c327b264ca3
- SHA1 d54296a64c9e812999586704a29b46a0eb59445f
- SHA512 6f53b382910a5c6bacaa8a8e1b89d0319ed21aea8b38b53436a73d628b451a8276b31b9e52fa9509cb40561b54889e11b21d4642a4c13b22ecfa8b8165f76f02
- MD5 SHA1 SHA512
tls_gost
- SHA256 bceba064ef4785ede4247602838373f7ab89f020e27bc0d1b758afe27addf4e9
- MD5 5dd8be57ca1f7493f39fd3225810a989
- SHA1 b782434fc5cc068ad9fe6ad7782e243906244aee
- SHA512 3c1616f8176930e97dbb463fe948db16d197488e04375b42c7b0ba4c1fcc22df4574cc1eed0608799bddaef0d1ae60891933be4a1071a6fe1343aa301a97a0f3
- SSDEEP 192:G37v408hixYrEAWCxl+j72YDEL5jVIt0MPr1Vjl5c28gzg1HWq0R5Y7L325BqG9y:mj20q3D+XNAljVIH1BcfgK2q0T0EHc
- MD5 SHA1 SHA512 SSDEEP
togglecalipso
- SHA256 edbf4d147b6d1f5d27e747f16651062572e8fde0652756f97e442b69893457c4
- MD5 dfeaff81b91de96f02dd3644e2a3a753
- SHA1 271fb9b6356582f3e35eff42e734971b4c29f801
- SHA512 487be09fea9df3362de6c1762b8c543ca0d13d1f9bfe0527525f8aabb138c1593bb42adcae58f34960f9bcdffa82d452de82bfa7d1b69c2358a8f8c0c279daa9
- MD5 SHA1 SHA512
translate_blacklist
- SHA256 8737d7992407343afb9d1c8327327cc415254ea903c8ada3411768f0e3aa28ea
- MD5 90998627e2a783dec408e362ce0ef7a4
- SHA1 ae6599b2f5d1b9727555879aedd47c1eb433ef8b
- SHA512 78dcaf33444457b9b6ab3e240e44b109ac3365bfdb111fedf825a16e8fbd025ada180126e4227b81e21dbf0e32081b8148ece947a6153abd35fac74c15d952b2
- MD5 SHA1 SHA512
translator
- SHA256 e71a723847f0a21ed9bdc8654958d79ce69c7afbf35e18bf7c40aaadef30b65b
- MD5 8e245ffd902a35ec7a4fb0ff7b7ccb17
- SHA1 5b79ade5e7369b11f31caf10170b8edd9f152e82
- SHA512 16e9d274612fa2e25ee5bdf2ca757338ab44b48b79d21df1f75ebcfe4c6da79e39053ce3f789018032a4f5bedb9e7a1769984261b810a4ec8def17a786d4d5de
- MD5 SHA1 SHA512
trusted_extensions
- SHA256 b1ae15b2454a09759e0644879b416764aa455d30eaff0707e494661f9c2e304b
- MD5 75e7ff5bc1771f9a9ca68826a00f0841
- SHA1 aeabcf25d287449654ffc832ae46293813c545bb
- SHA512 80395a922552ed3b678fc91b29ef2d692d72634a03424d482502d68a94530a95cd62e6be56903aec8108f1960e914db3d2964cce97ca449a5ef0ea07518b2734
- MD5 SHA1 SHA512
turboapps
- SHA256 40e778c554389c5233219479145d906c6b68243fe21e4074ab678d4024b97793
- MD5 ceab9c9259a5e4ff7d7ba7ff4f207c37
- SHA1 7e53b8a5e0cca91bc0e05e4f942e32ef2a34341a
- SHA512 dabbb7771dbbacc626722f5e5aaefa7d075f2bd34fe6d8a8493cdec85f8eed573e09218b85c8555ab1188d6d514483308df4f09087a11357e0eff97e8fce126b
- SSDEEP 192:tHzmGQB6XPKoHXUhbR8yB+gHK/X9gCQyuVj/66RKxRz5F0zM51cQfQwb:tABIx30R9B+h6CQy8wDFL55Nb
- MD5 SHA1 SHA512 SSDEEP
ua_change
- SHA256 790b17df6a1a52dc3458aa4e2ed2e5d96f518aa9557d76a029f18b9854bd78e1
- MD5 ec0e95b8a1b5216529ed3fba495ca5da
- SHA1 c43600a7e6430da53fecfc33360bb3c966781c73
- SHA512 4f9a659169d6d302957cd9aa0ca49e641fd8c8b0f0e90b8dcc728139fbf83c6ed45e405e16ccfcc800449ba4ff711f87149364da1b2ce3e4212a7011d389f5f4
- SSDEEP 192:oyeTgpdk/sDXdNjwcECd3n3Oj0g96BYE8NbiUsVat2H+sPQ2s:oyesk0jdNrG0g96BY7iUEaW+yo
- MD5 SHA1 SHA512 SSDEEP
url_symbols
- SHA256 54156af35855fc7df2e41eefd98a1b8bea4ddc428f88083fd1e20cde799f2ec2
- MD5 15b3b25cbb709fcb2491303a00d0c30d
- SHA1 dec620fdecf4a1647c20f9f16afbbe9d4ea4f8f8
- SHA512 36ca42dde520ff71e8bda0f4859776ee71beb67f3d72889aeadb3e9306fc0092620d8daa6db206f89ef797585412421c3f7b365470fafec10b92792174e49d10
- MD5 SHA1 SHA512
video_translation
- SHA256 0ad6a3f9be83a542e063949672a4307528da4000c15586cf300e17d9862f28ef
- MD5 d406b260abf0a507ef1ced4fe1b04ec5
- SHA1 6583aea69a058f20395d987b2862a0c5666f5c40
- SHA512 b8f3f6db4ac43bb25df55a42b2a67232105f1880f6ffa2df8ca8c0475384893b0fd5f20d4e104de5c0f4b9c2919579ebae9512040788eec5442d1d1e7765a67a
- MD5 SHA1 SHA512
videocodec_install
- SHA256 c72d7ec9b3bd9e50f97417e34207e624c07deeb0f91f3644f4578f83b16a927f
- MD5 fb7e3023666688ad09ed349bfd79cf51
- SHA1 4e3accb064eca9592649e043b1f5b332bb010433
- SHA512 0c142fdccd67b2b457cafd41bcb6c086ae488722c47561103ba744a11eba99db594856f92489f6ac6c914b02788ff1470978f85a426c465b95a3a09cf2e90bdb
- MD5 SHA1 SHA512
voiceable_sites
- SHA256 3c0a428b064bb462db28f51180d19b21bcb694e8da0dbf1e8c60768cc47f8a2e
- MD5 668162ff762e2cb43a06bd8ecb8a5677
- SHA1 64f363962dad9eca1571d6a97e38b0467c0de4a9
- SHA512 2deda682150a1f9f4be8db79bd9292aab4d7fa20ee154674e24b0844342cbc08c1d95804c4cf86c21768bfe7d85a2473028ab3240b326aa05a498a8eb1b1275c
- MD5 SHA1 SHA512
webstore
- SHA256 4b69337910ac808c225e3d4919613e6dfc405207f089cf265e2395f238d19ab6
- MD5 8828494ba644a40db8adc610911219ac
- SHA1 a9c6d2056a026669f01c5e4c6019e84700d80983
- SHA512 ce0050c13ee87b028a6114af9e319ba602d462dc7a69e9545050644e620be366c5e79e8f15f220aca2825bc11c428986a8dba9a08628b9cad07725fd701752ba
- MD5 SHA1 SHA512
welcome_experiment
- SHA256 216701604f218ec11ee47eb5be90ffc8cdac764ca52925c5cf5771f108b3b912
- MD5 c28811f2d51f78f693013a18bae19400
- SHA1 a7ba81c64429d275335514912650ebb402a8adab
- SHA512 e56bf599bb8f7571b82bd9b27e11cde17acb7da9740f0982edb1a2617f2a1e6aef5c64ee05b393ba4b58610fac3566f9af556b077bfdfb5428bc7d7d26a2134b
- MD5 SHA1 SHA512
white_dock
- SHA256 e50a3062f48b6467d89709013209c2b42cfff7a6323da72b95606b33f301196c
- MD5 d44fcb91a7ae0c077ce1a4c026628d26
- SHA1 7bcf0d56e9fdcb3b1dd942eea00f0c53a12ee894
- SHA512 071f7ad5067ec45a16e4eda4e5cc9e2b8079478dd326c189e23bcdbc36bd37b737548569ecfe759a6a0e1995fb944acada0ca798953b25196e80cf9e61c4a8ae
- MD5 SHA1 SHA512
whitelist_apps
- SHA256 bb7563548bf95cee4f905722b22ae07f361748958094c3a2b92fa49879b0ba3b
- MD5 b25aebcf5506b4c8cf439c46b32c7ab9
- SHA1 30360cd54fd47d0e139695170901bc489e42d2bb
- SHA512 4472b9daa3428deea8e0f14e3c5eea39d8c2d25e85e82c6827667fa83c56ac2999cfc7c6e4ee379fc48f9e13c7281ef55df56b3ccd5770267d5601522e3d42e3
- MD5 SHA1 SHA512
whitelist_cert_roots
- SHA256 8b53dd266ebf35db8da53e26135a8f8a8c471139a0b79ea37c54282ddf594950
- MD5 bf9864372574dd2be22feb72513193e0
- SHA1 48bc5563a81402aa8fbb66ebbd068e2fbc00a918
- SHA512 089b3b9d9efb1e0f46be5e9c4f36560049b32554b89919cde5ff5d786c2f49db3fbc6eff293d589a6ce6f50a9b6cae4bc91bcda51334da081da5c9ed202b4e58
- MD5 SHA1 SHA512
wlpconf
- SHA256 6482bad64dda8bd9f467f84cc1f0aa2502764e73afd785676d6b48c7a57eff25
- MD5 d00baea69a3dbcc77c4e88b974b782d4
- SHA1 b3644071a3a662c069464ff863ff6942d7b0cd3e
- SHA512 f4f1a77c139d673f26afdcdf55f16e33b99c4094969bd7038181fda13d773785bdcee5a0bbe561bf0dc61231155dd81007faa15d24580e5b0590dab8027b5ce4
- MD5 SHA1 SHA512
ya_push
- SHA256 b0a6509a809b686dc7ce6e7f64c3689d3306fa2d1f0e197674caf3fac52d79d9
- MD5 8f8b998eced37e6d0767767d61e023b5
- SHA1 b62646a66c0c9fed6182d78b00f137eb38b4719e
- SHA512 7177f9945cce412d95499dc0c6801681ff576c99308805302006731bd02504885a0fa5de7b1e533b52ccc346f32284d169313f82efa9dbee20973d4203a1f335
- MD5 SHA1 SHA512
yandex_cards_config
- SHA256 8d231bbf081e47fb810b2314013d53146cb80c5c6453f54adc82383a096b0a65
- MD5 17fdce140b93158aeebc0ed1d07ead9d
- SHA1 769af63a09e533497a871150f7b623b98903e8ff
- SHA512 35eb5ddab36028dea50298067aaf676746e05daa790951cae3bf16cd462bf63c5e30ff99893e7cb7eddbebf481c467dd13531e66822f2b781b512197ae88869a
- MD5 SHA1 SHA512
ynotif
- SHA256 9d1d37ffa30be03b4773e112f3b97b8265e9d84369df04b6d12de0320c251263
- MD5 c3d1a7cb080995ea61931034a2d6262a
- SHA1 e8a1a6d1c5652ae640470b44eeb426d133302e4f
- SHA512 22d5dd20b28925bfb1830af7fc0b669761aee780b4c55760fa03549a666857a92227cea55cd134c0a70150d3369ff123d3090361cde5afcefb88d806c1787f5e
- MD5 SHA1 SHA512
youtube_ad_stats
- SHA256 523076917f06636188ac6f983fb9566acc54dfe4d1603a2d6845f70296b15ad5
- MD5 85367efff09528ebbf3e4b09b7e1b0dc
- SHA1 409766a3d453ffe84f9278b2d165e5fea37b0c04
- SHA512 e1369204a4b4152f22c138b2e4014ddad5d02242e937efa6901ce73c9ed0ecd630846cf1d2178b676ed8314c6bd489a7c0f7bc3ea6816d45ef3d18594aefb017
- MD5 SHA1 SHA512
ytp
- SHA256 7087585a7b7bd1cb1350616da011c5bac4109d79f62aa2e2742edc187793cb1a
- MD5 f12f7fcbacc0f0497fba2ff75b320f79
- SHA1 cd5cceaac4756cdcd04ce07c599cfc77fc22fe63
- SHA512 7f45a2ebeecf887dc64669c2533d7d0e795871e537f3800cbd3bce930d9cb567e601431e9c8fe7a734e19fada35a8009a18c35431080847de184e2d3977eeac4
- MD5 SHA1 SHA512
ytrust
- SHA256 09c192249e18e0651afa34f0ec8c142ff8265557c6457f51e376fdec838cd20f
- MD5 35515d8ac1a8775780ca4d410aa789b2
- SHA1 2d5cdf5e14818cea4923bcfd7df54c68e5142d9a
- SHA512 3554f8098b7c535bc59fab077230e8f478c11c31b4546ed0b63947062d39ea4029dacce9954189d88982905e59edf3a2cb70d7ca6108fabe6808fc2d8e74aeb9
- MD5 SHA1 SHA512
resources/tablo
- SHA256 f330378a339e5fe51e54af531b8a53b01c47b4448196c85a166034e44ead625f
- MD5 bb60da7176a0286e561af09fa0512635
- SHA1 54f8a5d7042b2350848a31bc7f7179d1deb66b6c
- SHA512 ba51700283f6f50de6da0c1585cca1558600e7cc0eb11ce6ee7a21aab7f1c088f7f589dbdeda5e477548c10b86fcdb821d307f3c8bf512f962eecd6ac0436211
- SSDEEP 6144:kTMa7gcL0lYz4De/OxvNSIyDu6NRm85bU9uyd1ZjZuZEP0iycyryHYzFE3yUdK:kTMa7gIOxvNs6gI4tyd7VkEP0zNes
- MD5 SHA1 SHA512 SSDEEP
install/preloaded_data.pb
- SHA256 c352da21a972a669694c7178deadc41c9be440bd92bdac827fe96b79caac007e
- MD5 649c99af46addf93fdd5a214fb56e738
- SHA1 322376c0cebf89d49f86337d6832441befd7c76f
- SHA512 01fae333dd9480c6e638b151f84afa6a6d3c0f2e9ae0af1dc9c54795ecaa6bfb348ca80f792c0bbb9527a3b1d7b5a701ab637b12a61279e6764173b9c8ff8247
- SSDEEP 192:sinu4QlEV/xIZKJmj99zRbxJKsO01dKxFJ:sinu4Qlm5ICmj99zRbxEvJxFJ
- MD5 SHA1 SHA512 SSDEEP
msvcr100.dll
- IMPHASH 5271d5ce8b44dd47bc92563e27585466
- SHA256 8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18
- MD5 0e37fbfa79d349d672456923ec5fbbe3
- SHA1 4e880fc7625ccf8d9ca799d5b94ce2b1e7597335
- SHA512 2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630
- SSDEEP 12288:nMmCy3nAgPAxN9ueqix/HEmxsvGrif8ZSy+rdQw2QRAtd74/vmYK6H3BVoe3z:MmCy3KxW3ixPEmxsvGrm8Z6r+JQPzV7z
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
8d:91:f0:a3:ff:41:70:8c:67:d0:ba:79:6d:52:da:88:0c:59:23:cc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 11, 2011
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
2e:ab:11:dc:50:ff:5c:9d:cb:c0
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2007 - Aug 25, 2012
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:01:b2:9b:00:00:00:00:00:15
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 21, 2011 - May 21, 2012
Subject
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Issuer
CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 16, 2006 - Sep 15, 2019
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:06:94:2d:00:00:00:00:00:09
Issuer
CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2008 - Jul 25, 2013
Minor OS version
1
Major OS version
5
Entry point
73212
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
msvcr100.i386.pdb
kernel32
EncodePointer
DecodePointer
RaiseException
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetCurrentThreadId
TlsGetValue
GetCommandLineW
GetCommandLineA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetCurrentThread
FindNextFileA
FindFirstFileExA
FindClose
FindNextFileW
FindFirstFileExW
GetLogicalDrives
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetErrorMode
Sleep
Beep
GetFileAttributesA
SetFileAttributesA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
GetCurrentProcessId
CreateDirectoryA
MoveFileA
RemoveDirectoryA
GetDriveTypeA
DeleteFileA
GetFileAttributesW
SetEnvironmentVariableW
SetFileAttributesW
GetFullPathNameW
CreateDirectoryW
MoveFileW
RemoveDirectoryW
DeleteFileW
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
LoadLibraryA
FreeLibrary
CreateProcessW
ReadFile
DuplicateHandle
GetCurrentProcess
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetLocalTime
WideCharToMultiByte
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
SetLocalTime
InterlockedPopEntrySList
InterlockedFlushSList
QueryDepthSList
InterlockedPushEntrySList
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueTimer
SetEvent
CreateEventW
SwitchToThread
SignalObjectAndWait
TryEnterCriticalSection
GetTickCount
VirtualFree
GetVersionExW
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetProcessAffinityMask
VirtualProtect
SetThreadAffinityMask
InitializeSListHead
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
GetThreadPriority
LoadLibraryW
SleepEx
OutputDebugStringW
FreeLibraryAndExitThread
GetModuleHandleA
GetThreadTimes
DebugBreak
MultiByteToWideChar
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetTimeFormatA
GetDateFormatA
GetTimeFormatW
GetDateFormatW
RtlUnwind
HeapAlloc
HeapFree
HeapCreate
HeapDestroy
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapCompact
HeapWalk
VirtualQuery
SetHandleCount
GetFileType
GetStartupInfoW
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
CreateFileW
SetFilePointer
GetConsoleCP
GetConsoleMode
FlushFileBuffers
CreatePipe
SetStdHandle
ReadConsoleInputA
SetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
ReadConsoleInputW
WriteConsoleW
ReadConsoleW
SetEndOfFile
GetProcessHeap
InterlockedExchange
LockFile
UnlockFile
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetConsoleCtrlHandler
GetLocaleInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
LCMapStringW
CompareStringW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsProcessorFeaturePresent
$I10_OUTPUT
??0?$_SpinWait@$00@details@Concurrency@@QAE@P6AXXZ@Z
??0?$_SpinWait@$0A@@details@Concurrency@@QAE@P6AXXZ@Z
??0SchedulerPolicy@Concurrency@@QAA@IZZ
??0SchedulerPolicy@Concurrency@@QAE@ABV01@@Z
??0SchedulerPolicy@Concurrency@@QAE@XZ
??0_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_ReaderWriterLock@details@Concurrency@@QAE@XZ
??0_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??0_ReentrantLock@details@Concurrency@@QAE@XZ
??0_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??0_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@AAV123@@Z
??0_SpinLock@details@Concurrency@@QAE@ACJ@Z
??0_TaskCollection@details@Concurrency@@QAE@XZ
??0_Timer@details@Concurrency@@IAE@I_N@Z
??0__non_rtti_object@std@@QAE@ABV01@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0bad_cast@std@@AAE@PBQBD@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@PBD@Z
??0bad_target@Concurrency@@QAE@XZ
??0bad_typeid@std@@QAE@ABV01@@Z
??0bad_typeid@std@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@PBD@Z
??0context_self_unblock@Concurrency@@QAE@XZ
??0context_unblock_unbalanced@Concurrency@@QAE@PBD@Z
??0context_unblock_unbalanced@Concurrency@@QAE@XZ
??0critical_section@Concurrency@@QAE@XZ
??0default_scheduler_exists@Concurrency@@QAE@PBD@Z
??0default_scheduler_exists@Concurrency@@QAE@XZ
??0event@Concurrency@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABQBDH@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??0improper_lock@Concurrency@@QAE@PBD@Z
??0improper_lock@Concurrency@@QAE@XZ
??0improper_scheduler_attach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_attach@Concurrency@@QAE@XZ
??0improper_scheduler_detach@Concurrency@@QAE@PBD@Z
??0improper_scheduler_detach@Concurrency@@QAE@XZ
??0improper_scheduler_reference@Concurrency@@QAE@PBD@Z
??0improper_scheduler_reference@Concurrency@@QAE@XZ
??0invalid_link_target@Concurrency@@QAE@PBD@Z
??0invalid_link_target@Concurrency@@QAE@XZ
??0invalid_multiple_scheduling@Concurrency@@QAE@PBD@Z
??0invalid_multiple_scheduling@Concurrency@@QAE@XZ
??0invalid_operation@Concurrency@@QAE@PBD@Z
??0invalid_operation@Concurrency@@QAE@XZ
??0invalid_oversubscribe_operation@Concurrency@@QAE@PBD@Z
??0invalid_oversubscribe_operation@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_key@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_key@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_thread_specification@Concurrency@@QAE@XZ
??0invalid_scheduler_policy_value@Concurrency@@QAE@PBD@Z
??0invalid_scheduler_policy_value@Concurrency@@QAE@XZ
??0message_not_found@Concurrency@@QAE@PBD@Z
??0message_not_found@Concurrency@@QAE@XZ
??0missing_wait@Concurrency@@QAE@PBD@Z
??0missing_wait@Concurrency@@QAE@XZ
??0nested_scheduler_missing_detach@Concurrency@@QAE@PBD@Z
??0nested_scheduler_missing_detach@Concurrency@@QAE@XZ
??0operation_timed_out@Concurrency@@QAE@PBD@Z
??0operation_timed_out@Concurrency@@QAE@XZ
??0reader_writer_lock@Concurrency@@QAE@XZ
??0scheduler_not_attached@Concurrency@@QAE@PBD@Z
??0scheduler_not_attached@Concurrency@@QAE@XZ
??0scheduler_resource_allocation_error@Concurrency@@QAE@J@Z
??0scheduler_resource_allocation_error@Concurrency@@QAE@PBDJ@Z
??0scoped_lock@critical_section@Concurrency@@QAE@AAV12@@Z
??0scoped_lock@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0scoped_lock_read@reader_writer_lock@Concurrency@@QAE@AAV12@@Z
??0task_canceled@details@Concurrency@@QAE@PBD@Z
??0task_canceled@details@Concurrency@@QAE@XZ
??0unsupported_os@Concurrency@@QAE@PBD@Z
??0unsupported_os@Concurrency@@QAE@XZ
??1SchedulerPolicy@Concurrency@@QAE@XZ
??1_NonReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_ReentrantBlockingLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_NonReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_Scoped_lock@_ReentrantPPLLock@details@Concurrency@@QAE@XZ
??1_SpinLock@details@Concurrency@@QAE@XZ
??1_TaskCollection@details@Concurrency@@QAE@XZ
??1_Timer@details@Concurrency@@IAE@XZ
??1__non_rtti_object@std@@UAE@XZ
??1bad_cast@std@@UAE@XZ
??1bad_typeid@std@@UAE@XZ
??1critical_section@Concurrency@@QAE@XZ
??1event@Concurrency@@QAE@XZ
??1exception@std@@UAE@XZ
??1reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock@critical_section@Concurrency@@QAE@XZ
??1scoped_lock@reader_writer_lock@Concurrency@@QAE@XZ
??1scoped_lock_read@reader_writer_lock@Concurrency@@QAE@XZ
??1type_info@@UAE@XZ
??2@YAPAXI@Z
??2@YAPAXIHPBDH@Z
??3@YAXPAX@Z
??4?$_SpinWait@$00@details@Concurrency@@QAEAAV012@ABV012@@Z
??4?$_SpinWait@$0A@@details@Concurrency@@QAEAAV012@ABV012@@Z
??4SchedulerPolicy@Concurrency@@QAEAAV01@ABV01@@Z
??4__non_rtti_object@std@@QAEAAV01@ABV01@@Z
??4bad_cast@std@@QAEAAV01@ABV01@@Z
??4bad_typeid@std@@QAEAAV01@ABV01@@Z
??4exception@std@@QAEAAV01@ABV01@@Z
??8type_info@@QBE_NABV0@@Z
??9type_info@@QBE_NABV0@@Z
??_7__non_rtti_object@std@@6B@
??_7bad_cast@std@@6B@
??_7bad_typeid@std@@6B@
??_7exception@@6B@
??_7exception@std@@6B@
??_F?$_SpinWait@$00@details@Concurrency@@QAEXXZ
??_F?$_SpinWait@$0A@@details@Concurrency@@QAEXXZ
??_Fbad_cast@std@@QAEXXZ
??_Fbad_typeid@std@@QAEXXZ
??_U@YAPAXI@Z
??_U@YAPAXIHPBDH@Z
??_V@YAXPAX@Z
?Alloc@Concurrency@@YAPAXI@Z
?Block@Context@Concurrency@@SAXXZ
?Create@CurrentScheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?Create@Scheduler@Concurrency@@SAPAV12@ABVSchedulerPolicy@2@@Z
?CreateResourceManager@Concurrency@@YAPAUIResourceManager@1@XZ
?CreateScheduleGroup@CurrentScheduler@Concurrency@@SAPAVScheduleGroup@2@XZ
?CurrentContext@Context@Concurrency@@SAPAV12@XZ
?Detach@CurrentScheduler@Concurrency@@SAXXZ
?DisableTracing@Concurrency@@YAJXZ
?EnableTracing@Concurrency@@YAJXZ
?Free@Concurrency@@YAXPAX@Z
?Get@CurrentScheduler@Concurrency@@SAPAVScheduler@2@XZ
?GetExecutionContextId@Concurrency@@YAIXZ
?GetNumberOfVirtualProcessors@CurrentScheduler@Concurrency@@SAIXZ
?GetOSVersion@Concurrency@@YA?AW4OSVersion@IResourceManager@1@XZ
?GetPolicy@CurrentScheduler@Concurrency@@SA?AVSchedulerPolicy@2@XZ
?GetPolicyValue@SchedulerPolicy@Concurrency@@QBEIW4PolicyElementKey@2@@Z
?GetProcessorCount@Concurrency@@YAIXZ
?GetProcessorNodeCount@Concurrency@@YAIXZ
?GetSchedulerId@Concurrency@@YAIXZ
?GetSharedTimerQueue@details@Concurrency@@YAPAXXZ
?Id@Context@Concurrency@@SAIXZ
?Id@CurrentScheduler@Concurrency@@SAIXZ
?IsCurrentTaskCollectionCanceling@Context@Concurrency@@SA_NXZ
?Log2@details@Concurrency@@YAKI@Z
?Oversubscribe@Context@Concurrency@@SAX_N@Z
?RegisterShutdownEvent@CurrentScheduler@Concurrency@@SAXPAX@Z
?ResetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXXZ
?ScheduleGroupId@Context@Concurrency@@SAIXZ
?ScheduleTask@CurrentScheduler@Concurrency@@SAXP6AXPAX@Z0@Z
?SetConcurrencyLimits@SchedulerPolicy@Concurrency@@QAEXII@Z
?SetDefaultSchedulerPolicy@Scheduler@Concurrency@@SAXABVSchedulerPolicy@2@@Z
?SetPolicyValue@SchedulerPolicy@Concurrency@@QAEIW4PolicyElementKey@2@I@Z
?VirtualProcessorId@Context@Concurrency@@SAIXZ
?Yield@Context@Concurrency@@SAXXZ
?_Abort@_StructuredTaskCollection@details@Concurrency@@AAEXXZ
?_Acquire@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_NonReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_Acquire@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Acquire@_ReentrantPPLLock@details@Concurrency@@QAEXPAX@Z
?_AcquireRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_AcquireWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Cancel@_StructuredTaskCollection@details@Concurrency@@QAEXXZ
?_Cancel@_TaskCollection@details@Concurrency@@QAEXXZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_ConcRT_Assert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_CoreAssert@details@Concurrency@@YAXPBD0H@Z
?_ConcRT_DumpMessage@details@Concurrency@@YAXPB_WZZ
?_ConcRT_Trace@details@Concurrency@@YAXHPB_WZZ
?_Copy_str@exception@std@@AAEXPBD@Z
?_DoYield@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_DoYield@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_IsCanceling@_StructuredTaskCollection@details@Concurrency@@QAE_NXZ
?_IsCanceling@_TaskCollection@details@Concurrency@@QAE_NXZ
?_Name_base@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_Name_base_internal@type_info@@CAPBDPBV1@PAU__type_info_node@@@Z
?_NumberOfSpins@?$_SpinWait@$00@details@Concurrency@@IAEKXZ
?_NumberOfSpins@?$_SpinWait@$0A@@details@Concurrency@@IAEKXZ
?_Release@_NonReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_NonReentrantPPLLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantBlockingLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantLock@details@Concurrency@@QAEXXZ
?_Release@_ReentrantPPLLock@details@Concurrency@@QAEXXZ
?_ReleaseRead@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_ReleaseWrite@_ReaderWriterLock@details@Concurrency@@QAEXXZ
?_Reset@?$_SpinWait@$00@details@Concurrency@@IAEXXZ
?_Reset@?$_SpinWait@$0A@@details@Concurrency@@IAEXXZ
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_RunAndWait@_TaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_Schedule@_TaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?_SetSpinCount@?$_SpinWait@$00@details@Concurrency@@QAEXI@Z
?_SetSpinCount@?$_SpinWait@$0A@@details@Concurrency@@QAEXI@Z
?_ShouldSpinAgain@?$_SpinWait@$00@details@Concurrency@@IAE_NXZ
?_ShouldSpinAgain@?$_SpinWait@$0A@@details@Concurrency@@IAE_NXZ
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?_SpinOnce@?$_SpinWait@$0A@@details@Concurrency@@QAE_NXZ
?_SpinYield@Context@Concurrency@@SAXXZ
?_Start@_Timer@details@Concurrency@@IAEXXZ
?_Stop@_Timer@details@Concurrency@@IAEXXZ
?_Tidy@exception@std@@AAEXXZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_TryAcquire@_NonReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantBlockingLock@details@Concurrency@@QAE_NXZ
?_TryAcquire@_ReentrantLock@details@Concurrency@@QAE_NXZ
?_TryAcquireWrite@_ReaderWriterLock@details@Concurrency@@QAE_NXZ
?_Type_info_dtor@type_info@@CAXPAV1@@Z
?_Type_info_dtor_internal@type_info@@CAXPAV1@@Z
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_ValidateExecute@@YAHP6GHXZ@Z
?_ValidateRead@@YAHPBXI@Z
?_ValidateWrite@@YAHPAXI@Z
?_Value@_SpinCount@details@Concurrency@@SAIXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCompare@@YA_NPBX0@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
?_inconsistency@@YAXXZ
?_invalid_parameter@@YAXPBG00II@Z
?_is_exception_typeof@@YAHABVtype_info@@PAU_EXCEPTION_POINTERS@@@Z
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
?_open@@YAHPBDHH@Z
?_query_new_handler@@YAP6AHI@ZXZ
?_query_new_mode@@YAHXZ
?_set_new_handler@@YAP6AHI@ZH@Z
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZH@Z
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
?_sopen@@YAHPBDHHH@Z
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?_wopen@@YAHPB_WHH@Z
?_wsopen@@YAHPB_WHHH@Z
?before@type_info@@QBEHABV1@@Z
?get_error_code@scheduler_resource_allocation_error@Concurrency@@QBEJXZ
?lock@critical_section@Concurrency@@QAEXXZ
?lock@reader_writer_lock@Concurrency@@QAEXXZ
?lock_read@reader_writer_lock@Concurrency@@QAEXXZ
?name@type_info@@QBEPBDPAU__type_info_node@@@Z
?native_handle@critical_section@Concurrency@@QAEAAV12@XZ
?raw_name@type_info@@QBEPBDXZ
?reset@event@Concurrency@@QAEXXZ
?set@event@Concurrency@@QAEXXZ
?set_new_handler@@YAP6AXXZP6AXXZ@Z
?set_terminate@@YAP6AXXZH@Z
?set_terminate@@YAP6AXXZP6AXXZ@Z
?set_unexpected@@YAP6AXXZH@Z
?set_unexpected@@YAP6AXXZP6AXXZ@Z
?swprintf@@YAHPAGIPBGZZ
?swprintf@@YAHPA_WIPB_WZZ
?terminate@@YAXXZ
?try_lock@critical_section@Concurrency@@QAE_NXZ
?try_lock@reader_writer_lock@Concurrency@@QAE_NXZ
?try_lock_read@reader_writer_lock@Concurrency@@QAE_NXZ
?unexpected@@YAXXZ
?unlock@critical_section@Concurrency@@QAEXXZ
?unlock@reader_writer_lock@Concurrency@@QAEXXZ
?vswprintf@@YAHPA_WIPB_WPAD@Z
?wait@Concurrency@@YAXI@Z
?wait@event@Concurrency@@QAEII@Z
?wait_for_multiple@event@Concurrency@@SAIPAPAV12@I_NI@Z
?what@exception@std@@UBEPBDXZ
_CIacos
_CIasin
_CIatan
_CIatan2
_CIcos
_CIcosh
_CIexp
_CIfmod
_CIlog
_CIlog10
_CIpow
_CIsin
_CIsinh
_CIsqrt
_CItan
_CItanh
_CRT_RTC_INIT
_CRT_RTC_INITW
_CreateFrameInfo
_CxxThrowException
_EH_prolog
_FindAndUnlinkFrame
_Getdays
_Getmonths
_Gettnames
_HUGE
_IsExceptionObjectToBeDestroyed
_NLG_Dispatch2
_NLG_Return
_NLG_Return2
_Strftime
_XcptFilter
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__CppXcptFilter
__CxxCallUnwindDelDtor
__CxxCallUnwindDtor
__CxxCallUnwindStdDelDtor
__CxxCallUnwindVecDtor
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxLongjmpUnwind
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__STRINGTOLD
__STRINGTOLD_L
__TypeMatch
___fls_getvalue@4
___fls_setvalue@8
___lc_codepage_func
___lc_collate_cp_func
___lc_handle_func
___mb_cur_max_func
___mb_cur_max_l_func
___setlc_active_func
___unguarded_readlc_active_add_func
__argc
__argv
__badioinfo
__clean_type_info_names_internal
__control87_2
__create_locale
__crtCompareStringA
__crtCompareStringW
__crtLCMapStringA
__crtLCMapStringW
__daylight
__dllonexit
__doserrno
__dstbias
__fpecode
__free_locale
__get_current_locale
__get_flsindex
__get_tlsindex
__getmainargs
__initenv
__iob_func
__isascii
__iscsym
__iscsymf
__iswcsym
__iswcsymf
__lconv
__lconv_init
__libm_sse2_acos
__libm_sse2_acosf
__libm_sse2_asin
__libm_sse2_asinf
__libm_sse2_atan
__libm_sse2_atan2
__libm_sse2_atanf
__libm_sse2_cos
__libm_sse2_cosf
__libm_sse2_exp
__libm_sse2_expf
__libm_sse2_log
__libm_sse2_log10
__libm_sse2_log10f
__libm_sse2_logf
__libm_sse2_pow
__libm_sse2_powf
__libm_sse2_sin
__libm_sse2_sinf
__libm_sse2_tan
__libm_sse2_tanf
__mb_cur_max
__p___argc
__p___argv
__p___initenv
__p___mb_cur_max
__p___wargv
__p___winitenv
__p__acmdln
__p__commode
__p__daylight
__p__dstbias
__p__environ
__p__fmode
__p__iob
__p__mbcasemap
__p__mbctype
__p__pctype
__p__pgmptr
__p__pwctype
__p__timezone
__p__tzname
__p__wcmdln
__p__wenviron
__p__wpgmptr
__pctype_func
__pioinfo
__pwctype_func
__pxcptinfoptrs
__report_gsfailure
__set_app_type
__set_flsgetvalue
__setlc_active
__setusermatherr
__strncnt
__swprintf_l
__sys_errlist
__sys_nerr
__threadhandle
__threadid
__timezone
__toascii
__tzname
__unDName
__unDNameEx
__unDNameHelper
__uncaught_exception
__unguarded_readlc_active
__vswprintf_l
__wargv
__wcserror
__wcserror_s
__wcsncnt
__wgetmainargs
__winitenv
_abnormal_termination
_abs64
_access
_access_s
_acmdln
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_amsg_exit
_assert
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_beep
_beginthread
_beginthreadex
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_c_exit
_cabs
_callnewh
_calloc_crt
_cexit
_cgets
_cgets_s
_cgetws
_cgetws_s
_chdir
_chdrive
_chgsign
_chkesp
_chmod
_chsize
_chsize_s
_clearfp
_close
_commit
_commode
_configthreadlocale
_control87
_controlfp
_controlfp_s
_copysign
_cprintf
_cprintf_l
_cprintf_p
_cprintf_p_l
_cprintf_s
_cprintf_s_l
_cputs
_cputws
_creat
_create_locale
_crt_debugger_hook
_cscanf
_cscanf_l
_cscanf_s
_cscanf_s_l
_ctime32
_ctime32_s
_ctime64
_ctime64_s
_cwait
_cwprintf
_cwprintf_l
_cwprintf_p
_cwprintf_p_l
_cwprintf_s
_cwprintf_s_l
_cwscanf
_cwscanf_l
_cwscanf_s
_cwscanf_s_l
_daylight
_difftime32
_difftime64
_dosmaperr
_dstbias
_dup
_dup2
_dupenv_s
_ecvt
_ecvt_s
_encoded_null
_endthread
_endthreadex
_environ
_eof
_errno
_except_handler2
_except_handler3
_except_handler4_common
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_exit
_expand
_fclose_nolock
_fcloseall
_fcvt
_fcvt_s
_fdopen
_fflush_nolock
_fgetchar
_fgetwc_nolock
_fgetwchar
_filbuf
_filelength
_filelengthi64
_fileno
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_finite
_flsbuf
_flushall
_fmode
_fpclass
_fpieee_flt
_fpreset
_fprintf_l
_fprintf_p
_fprintf_p_l
_fprintf_s_l
_fputchar
_fputwc_nolock
_fputwchar
_fread_nolock
_fread_nolock_s
_free_locale
_freea
_freea_s
_freefls
_fscanf_l
_fscanf_s_l
_fseek_nolock
_fseeki64
_fseeki64_nolock
_fsopen
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_ftell_nolock
_ftelli64
_ftelli64_nolock
_ftime32
_ftime32_s
_ftime64
_ftime64_s
_ftol
_fullpath
_futime32
_futime64
_fwprintf_l
_fwprintf_p
_fwprintf_p_l
_fwprintf_s_l
_fwrite_nolock
_fwscanf_l
_fwscanf_s_l
_gcvt
_gcvt_s
_get_current_locale
_get_daylight
_get_doserrno
_get_dstbias
_get_errno
_get_fmode
_get_heap_handle
_get_invalid_parameter_handler
_get_osfhandle
_get_output_format
_get_pgmptr
_get_printf_count_output
_get_purecall_handler
_get_terminate
_get_timezone
_get_tzname
_get_unexpected
_get_wpgmptr
_getc_nolock
_getch
_getch_nolock
_getche
_getche_nolock
_getcwd
_getdcwd
_getdcwd_nolock
_getdiskfree
_getdllprocaddr
_getdrive
_getdrives
_getmaxstdio
_getmbcp
_getpid
_getptd
_getsystime
_getw
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_getws
_getws_s
_global_unwind2
_gmtime32
_gmtime32_s
_gmtime64
_gmtime64_s
_heapadd
_heapchk
_heapmin
_heapset
_heapused
_heapwalk
_hypot
_hypotf
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_initptd
_initterm
_initterm_e
_inp
_inpd
_inpw
_invalid_parameter
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_invoke_watson
_iob
_isalnum_l
_isalpha_l
_isatty
_iscntrl_l
_isctype
_isctype_l
_isdigit_l
_isgraph_l
_isleadbyte_l
_islower_l
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_isnan
_isprint_l
_ispunct_l
_isspace_l
_isupper_l
_iswalnum_l
_iswalpha_l
_iswcntrl_l
_iswcsym_l
_iswcsymf_l
_iswctype_l
_iswdigit_l
_iswgraph_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_isxdigit_l
_itoa
_itoa_s
_itow
_itow_s
_j0
_j1
_jn
_kbhit
_lfind
_lfind_s
_loaddll
_local_unwind2
_local_unwind4
_localtime32
_localtime32_s
_localtime64
_localtime64_s
_lock
_lock_file
_locking
_logb
_longjmpex
_lrotl
_lrotr
_lsearch
_lsearch_s
_lseek
_lseeki64
_ltoa
_ltoa_s
_ltow
_ltow_s
_makepath
_makepath_s
_malloc_crt
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mbctype
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
_memccpy
_memicmp
_memicmp_l
_mkdir
_mkgmtime32
_mkgmtime64
_mktemp
_mktemp_s
_mktime32
_mktime64
_msize
_nextafter
_onexit
_open
_open_osfhandle
_outp
_outpd
_outpw
_pclose
_pctype
_pgmptr
_pipe
_popen
_printf_l
_printf_p
_printf_p_l
_printf_s_l
_purecall
_putch
_putch_nolock
_putenv
_putenv_s
_putw
_putwch
_putwch_nolock
_putws
_pwctype
_read
_realloc_crt
_recalloc
_recalloc_crt
_resetstkoflw
_rmdir
_rmtmp
_rotl
_rotl64
_rotr
_rotr64
_scalb
_scanf_l
_scanf_s_l
_scprintf
_scprintf_l
_scprintf_p
_scprintf_p_l
_scwprintf
_scwprintf_l
_scwprintf_p
_scwprintf_p_l
_searchenv
_searchenv_s
_seh_longjmp_unwind
_seh_longjmp_unwind4
_set_SSE2_enable
_set_abort_behavior
_set_controlfp
_set_doserrno
_set_errno
_set_error_mode
_set_fmode
_set_invalid_parameter_handler
_set_malloc_crt_max_wait
_set_output_format
_set_printf_count_output
_set_purecall_handler
_seterrormode
_setjmp
_setjmp3
_setmaxstdio
_setmbcp
_setmode
_setsystime
_sleep
_snprintf
_snprintf_c
_snprintf_c_l
_snprintf_l
_snprintf_s
_snprintf_s_l
_snscanf
_snscanf_l
_snscanf_s
_snscanf_s_l
_snwprintf
_snwprintf_l
_snwprintf_s
_snwprintf_s_l
_snwscanf
_snwscanf_l
_snwscanf_s
_snwscanf_s_l
_sopen
_sopen_s
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_splitpath
_splitpath_s
_sprintf_l
_sprintf_p
_sprintf_p_l
_sprintf_s_l
_sscanf_l
_sscanf_s_l
_stat32
_stat32i64
_stat64
_stat64i32
_statusfp
_statusfp2
_strcoll_l
_strdate
_strdate_s
_strdup
_strerror
_strerror_s
_strftime_l
_stricmp
_stricmp_l
_stricoll
_stricoll_l
_strlwr
_strlwr_l
_strlwr_s
_strlwr_s_l
_strncoll
_strncoll_l
_strnicmp
_strnicmp_l
_strnicoll
_strnicoll_l
_strnset
_strnset_s
_strrev
_strset
_strset_s
_strtime
_strtime_s
_strtod_l
_strtoi64
_strtoi64_l
_strtol_l
_strtoui64
_strtoui64_l
_strtoul_l
_strupr
_strupr_l
_strupr_s
_strupr_s_l
_strxfrm_l
_swab
_swprintf
_swprintf_c
_swprintf_c_l
_swprintf_p
_swprintf_p_l
_swprintf_s_l
_swscanf_l
_swscanf_s_l
_sys_errlist
_sys_nerr
_tell
_telli64
_tempnam
_time32
_time64
_timezone
_tolower
_tolower_l
_toupper
_toupper_l
_towlower_l
_towupper_l
_tzname
_tzset
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_umask
_umask_s
_ungetc_nolock
_ungetch
_ungetch_nolock
_ungetwc_nolock
_ungetwch
_ungetwch_nolock
_unlink
_unloaddll
_unlock
_unlock_file
_utime32
_utime64
_vcprintf
_vcprintf_l
_vcprintf_p
_vcprintf_p_l
_vcprintf_s
_vcprintf_s_l
_vcwprintf
_vcwprintf_l
_vcwprintf_p
_vcwprintf_p_l
_vcwprintf_s
_vcwprintf_s_l
_vfprintf_l
_vfprintf_p
_vfprintf_p_l
_vfprintf_s_l
_vfwprintf_l
_vfwprintf_p
_vfwprintf_p_l
_vfwprintf_s_l
_vprintf_l
_vprintf_p
_vprintf_p_l
_vprintf_s_l
_vscprintf
_vscprintf_l
_vscprintf_p
_vscprintf_p_l
_vscwprintf
_vscwprintf_l
_vscwprintf_p
_vscwprintf_p_l
_vsnprintf
_vsnprintf_c
_vsnprintf_c_l
_vsnprintf_l
_vsnprintf_s
_vsnprintf_s_l
_vsnwprintf
_vsnwprintf_l
_vsnwprintf_s
_vsnwprintf_s_l
_vsprintf_l
_vsprintf_p
_vsprintf_p_l
_vsprintf_s_l
_vswprintf
_vswprintf_c
_vswprintf_c_l
_vswprintf_l
_vswprintf_p
_vswprintf_p_l
_vswprintf_s_l
_vwprintf_l
_vwprintf_p
_vwprintf_p_l
_vwprintf_s_l
_waccess
_waccess_s
_wasctime
_wasctime_s
_wassert
_wchdir
_wchmod
_wcmdln
_wcreat
_wcscoll_l
_wcsdup
_wcserror
_wcserror_s
_wcsftime_l
_wcsicmp
_wcsicmp_l
_wcsicoll
_wcsicoll_l
_wcslwr
_wcslwr_l
_wcslwr_s
_wcslwr_s_l
_wcsncoll
_wcsncoll_l
_wcsnicmp
_wcsnicmp_l
_wcsnicoll
_wcsnicoll_l
_wcsnset
_wcsnset_s
_wcsrev
_wcsset
_wcsset_s
_wcstod_l
_wcstoi64
_wcstoi64_l
_wcstol_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcsupr
_wcsupr_l
_wcsupr_s
_wcsupr_s_l
_wcsxfrm_l
_wctime32
_wctime32_s
_wctime64
_wctime64_s
_wctomb_l
_wctomb_s_l
_wctype
_wdupenv_s
_wenviron
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wfdopen
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfopen
_wfopen_s
_wfreopen
_wfreopen_s
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetdcwd_nolock
_wgetenv
_wgetenv_s
_wmakepath
_wmakepath_s
_wmkdir
_wmktemp
_wmktemp_s
_wopen
_wperror
_wpgmptr
_wpopen
_wprintf_l
_wprintf_p
_wprintf_p_l
_wprintf_s_l
_wputenv
_wputenv_s
_wremove
_wrename
_write
_wrmdir
_wscanf_l
_wscanf_s_l
_wsearchenv
_wsearchenv_s
_wsetlocale
_wsopen
_wsopen_s
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wstrdate
_wstrdate_s
_wstrtime
_wstrtime_s
_wsystem
_wtempnam
_wtmpnam
_wtmpnam_s
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wunlink
_wutime32
_wutime64
_y0
_y1
_yn
abort
abs
acos
asctime
asctime_s
asin
atan
atan2
atexit
atof
atoi
atol
bsearch
bsearch_s
btowc
calloc
ceil
clearerr
clearerr_s
clock
cos
cosh
div
exit
exp
fabs
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fgetwc
fgetws
floor
fmod
fopen
fopen_s
fprintf
fprintf_s
fputc
fputs
fputwc
fputws
fread
fread_s
free
freopen
freopen_s
frexp
fscanf
fscanf_s
fseek
fsetpos
ftell
fwprintf
fwprintf_s
fwrite
fwscanf
fwscanf_s
getc
getchar
getenv
getenv_s
gets
gets_s
getwc
getwchar
is_wctype
isalnum
isalpha
iscntrl
isdigit
isgraph
isleadbyte
islower
isprint
ispunct
isspace
isupper
iswalnum
iswalpha
iswascii
iswcntrl
iswctype
iswdigit
iswgraph
iswlower
iswprint
iswpunct
iswspace
iswupper
iswxdigit
isxdigit
labs
ldexp
ldiv
llabs
lldiv
localeconv
log
log10
longjmp
malloc
mblen
mbrlen
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
memchr
memcmp
memcpy
memcpy_s
memmove
memmove_s
memset
modf
perror
pow
printf
printf_s
putc
putchar
puts
putwc
putwchar
qsort
qsort_s
raise
rand
rand_s
realloc
remove
rename
rewind
scanf
scanf_s
setbuf
setlocale
setvbuf
signal
sin
sinh
sprintf
sprintf_s
sqrt
srand
sscanf
sscanf_s
strcat
strcat_s
strchr
strcmp
strcoll
strcpy
strcpy_s
strcspn
strerror
strerror_s
strftime
strlen
strncat
strncat_s
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strrchr
strspn
strstr
strtod
strtok
strtok_s
strtol
strtoul
strxfrm
swprintf_s
swscanf
swscanf_s
system
tan
tanh
tmpfile
tmpfile_s
tmpnam
tmpnam_s
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
vfprintf_s
vfwprintf
vfwprintf_s
vprintf
vprintf_s
vsprintf
vsprintf_s
vswprintf_s
vwprintf
vwprintf_s
wcrtomb
wcrtomb_s
wcscat
wcscat_s
wcschr
wcscmp
wcscoll
wcscpy
wcscpy_s
wcscspn
wcsftime
wcslen
wcsncat
wcsncat_s
wcsncmp
wcsncpy
wcsncpy_s
wcsnlen
wcspbrk
wcsrchr
wcsrtombs
wcsrtombs_s
wcsspn
wcsstr
wcstod
wcstok
wcstok_s
wcstol
wcstombs
wcstombs_s
wcstoul
wcsxfrm
wctob
wctomb
wctomb_s
wmemcpy_s
wmemmove_s
wprintf
wprintf_s
wscanf
wscanf_s
Name
.text
Size
709KB
Virtual Size
708KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
19KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=3, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=179, id=1, productName=Unmarked objects,
count=490, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=85, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=52, id=175, version=40219,
count=184, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
nskbfltr.inf
- SHA256 d96856cd944a9f1587907cacef974c0248b7f4210f1689c1e6bcac5fed289368
- MD5 26e28c01461f7e65c402bdf09923d435
- SHA1 1d9b5cfcc30436112a7e31d5e4624f52e845c573
- SHA512 c30ec66fecb0a41e91a31804be3a8b6047fc3789306adc106c723b3e5b166127766670c7da38d77d3694d99a8cddb26bc266ee21dba60a148cdf4d6ee10d27d7
- MD5 SHA1 SHA512
nsm_vpro.ini
- SHA256 4bfa4c00414660ba44bddde5216a7f28aeccaa9e2d42df4bbff66db57c60522b
- MD5 3be27483fdcdbf9ebae93234785235e3
- SHA1 360b61fe19cdc1afb2b34d8c25d8b88a4c843a82
- SHA512 edbe8cf1cbc5fed80fedf963ade44e08052b19c064e8bca66fa0fe1b332141fbe175b8b727f8f56978d1584baaf27d331947c0b3593aaff5632756199dc470e5
- MD5 SHA1 SHA512
pcicapi.dll
- IMPHASH d78463f91aa83e9c39d2e594035ae4bb
- SHA256 2d6c6200508c0797e6542b195c999f3485c4ef76551aa3c65016587788ba1703
- MD5 34dfb87e4200d852d1fb45dc48f93cfc
- SHA1 35b4e73fb7c8d4c3fefb90b7e7dc19f3e653c641
- SHA512 f5bb4e700322cbaa5069244812a9b6ce6899ce15b4fd6384a3e8be421e409e4526b2f67fe210394cd47c4685861faf760eff9af77209100b82b2e0655581c9b2
- SSDEEP 768:JFvNhAyi5hHA448qZkSn+EgT8ToDXTVi0:JCyoHA448qSSzgIQb
- MD5 SHA1 SHA512 SSDEEP
Digest
3d:b6:09:02:28:e8:91:ba:e3:c0:b6:7b:de:e7:37:ed:39:79:47:84:74:cf:7c:5d:2d:36:3d:d8:2c:05:0b:fb
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
9c:33:79:f7:f1:bd:90:f4:a1:94:37:e4:f2:5a:58:25:b4:bb:94:cc
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
15542
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\nsmsrc\nsm\1210\1210\ctl32\Release\pcicapi.pdb
kernel32
GetProcAddress
GetModuleHandleA
OutputDebugStringA
LoadLibraryA
FreeLibrary
CloseHandle
OpenProcess
GetCurrentProcessId
CreateEventA
InterlockedIncrement
GetVersionExA
GetLocalTime
GetTempPathA
GetCurrentThreadId
GetTickCount
GetLastError
ExitProcess
SetLastError
DisableThreadLibraryCalls
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
SetEvent
InterlockedDecrement
WaitForSingleObject
DeleteCriticalSection
CreateThread
InitializeCriticalSection
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
Sleep
IsDBCSLeadByte
user32
GetMessageA
TranslateMessage
DispatchMessageA
SetTimer
MessageBoxA
KillTimer
PeekMessageA
PostQuitMessage
wvsprintfA
wsprintfA
advapi32
GetTokenInformation
OpenProcessToken
msvcr100
strncpy
_except_handler4_common
strrchr
isdigit
fclose
fopen
strncat
fputs
memset
memcpy
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
CapiClose
CapiConnected
CapiDial
CapiHangup
CapiListen
CapiNotify
CapiOpen
CapiOpen2
CapiRead
CapiSend
Name
.text
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=2, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=7, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=91, id=1, productName=Unmarked objects,
count=3, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=16, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=151,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
remcmdstub.exe
- IMPHASH 99c0cd957fc7334714fefa3daa61a6ea
- SHA256 fedd609a16c717db9bea3072bed41e79b564c4bc97f959208bfa52fb3c9fa814
- MD5 6fca49b85aa38ee016e39e14b9f9d6d9
- SHA1 b0d689c70e91d5600ccc2a4e533ff89bf4ca388b
- SHA512 f9c90029ff3dea84df853db63dace97d1c835a8cf7b6a6227a5b6db4abe25e9912dfed6967a88a128d11ab584663e099bf80c50dd879242432312961c0cfe622
- SSDEEP 1536:Tf6fvDuNcAjJMBUHYBlXU1wT2JFqy9BQhiK:D6f7cjJ4U4I1jFqy92hiK
- MD5 SHA1 SHA512 SSDEEP
Digest
ef:61:d3:a3:35:35:25:ab:43:9a:4d:ec:76:a3:86:24:8a:7c:88:7c:b4:33:c7:c9:13:32:88:a1:47:22:6b:2c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Digest
34:75:78:92:8b:99:18:cd:b0:19:b2:3d:03:63:f3:20:51:e8:a3:33
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Chains
Dec 7, 2016
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=COMODO SHA-1 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
16:88:f0:39:25:5e:63:8e:69:14:39:07:e6:33:0b
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=NetSupport Ltd,O=NetSupport Ltd,L=Peterborough,ST=Cambridgeshire,C=GB
Serial Number
2a:7c:96:b4:a7:61:a9:74:76:06:bd:10:56:00:3d:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 12, 2016 - Sep 21, 2017
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77
Issuer
CN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 31, 2015 - Jul 9, 2019
Minor OS version
1
Major OS version
5
Entry point
8628
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
LoadLibraryA
FreeLibrary
GetProcAddress
SetLastError
GetVersionExA
GetLastError
GetModuleFileNameA
WaitForSingleObject
Sleep
WriteFile
GetExitCodeProcess
GenerateConsoleCtrlEvent
WaitForMultipleObjects
CloseHandle
CreateProcessA
SetConsoleCtrlHandler
SetConsoleMode
GetConsoleMode
GetStdHandle
ExpandEnvironmentStringsA
SetStdHandle
WriteConsoleW
HeapSize
SetFilePointer
FlushFileBuffers
GetCommandLineA
HeapSetInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
GetModuleHandleW
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
IsProcessorFeaturePresent
ExitProcess
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeW
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryW
HeapReAlloc
GetConsoleCP
CreateFileW
user32
EnumWindows
GetClassNameA
SendMessageA
EnumThreadWindows
Name
.text
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=17, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=85, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=87, id=1, productName=Unmarked objects,
count=29, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,