EEA[.]EES[.]v11[.]1[.]2039[.]2[.]exe

resource
EEA.EES.v11.1.2039.2.exe
unpack002/[ProductDir]/Drivers/eamonm/eamonm.sys
unpack002/[ProductDir]/Drivers/edevmon/edevmon.sys
unpack002/[ProductDir]/Drivers/edevmonm/edevmonm.sys
unpack002/[ProductDir]/Drivers/ehdrv/ehdrv.sys
unpack002/[ProductDir]/Drivers/ekbdflt/ekbdflt.sys
unpack002/[ProductDir]/Drivers/epfw/epfw.sys
unpack002/[ProductDir]/Drivers/epfwlwf/EpfwLwf.sys
unpack002/[ProductDir]/Drivers/epfwwfp/EpfwWfp.sys
unpack002/[ProductDir]/concrt140.dll
unpack002/[ProductDir]/eamsi.dll
unpack002/[ProductDir]/ecmd.exe
unpack002/[ProductDir]/ecmds.exe
unpack002/[ProductDir]/ekrn.exe
unpack002/[ProductDir]/msvcp140.dll
unpack002/[ProductDir]/msvcp140_1.dll
unpack002/[ProductDir]/msvcp140_2.dll
unpack002/[ProductDir]/msvcp140_atomic_wait.dll
unpack002/[ProductDir]/msvcp140_codecvt_ids.dll
unpack002/[ProductDir]/vcruntime140.dll
unpack002/[ProductDir]/vcruntime140_threads.dll
unpack002/[ProductDir]/x86/eamsi.dll
unpack002/x64/[ProductDir]/Drivers/eamonm/eamonm.sys
unpack002/x64/[ProductDir]/Drivers/edevmon/edevmon.sys
unpack002/x64/[ProductDir]/Drivers/edevmonm/edevmonm.sys
unpack002/x64/[ProductDir]/Drivers/ehdrv/ehdrv.sys
unpack002/x64/[ProductDir]/Drivers/ekbdflt/ekbdflt.sys
unpack002/x64/[ProductDir]/Drivers/epfw/epfw.sys
unpack002/x64/[ProductDir]/Drivers/epfwlwf/EpfwLwf.sys
unpack002/x64/[ProductDir]/Drivers/epfwwfp/EpfwWfp.sys
unpack002/x64/[ProductDir]/eamsi.dll
unpack002/x64/[ProductDir]/ecmd.exe
unpack002/x64/[ProductDir]/ecmds.exe
unpack002/x64/[ProductDir]/ekrn.exe
unpack001/$PLUGINSDIR/LangDLL.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsis7z.dll

EEA.EES.v11.1.2039.2.exe

.exe windows:4 windows x86 arch:x86

f4639a0b3116c2cfc71144b88a929cfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumValueW

RegEnumKeyW

RegQueryValueExW

RegSetValueExW

RegCloseKey

RegDeleteValueW

RegDeleteKeyW

AdjustTokenPrivileges

LookupPrivilegeValueW

OpenProcessToken

RegOpenKeyExW

RegCreateKeyExW

shell32

SHGetPathFromIDListW

SHBrowseForFolderW

SHGetFileInfoW

SHFileOperationW

ShellExecuteExW

ole32

CoCreateInstance

OleUninitialize

OleInitialize

IIDFromString

CoTaskMemFree

comctl32

ImageList_Destroy

ord17

ImageList_AddMasked

ImageList_Create

user32

MessageBoxIndirectW

GetDlgItemTextW

SetDlgItemTextW

CreatePopupMenu

AppendMenuW

TrackPopupMenu

OpenClipboard

EmptyClipboard

SetClipboardData

CloseClipboard

IsWindowVisible

CallWindowProcW

GetMessagePos

CheckDlgButton

LoadCursorW

SetCursor

GetSysColor

SetWindowPos

GetWindowLongW

IsWindowEnabled

SetClassLongW

GetSystemMenu

EnableMenuItem

GetWindowRect

ScreenToClient

EndDialog

RegisterClassW

SystemParametersInfoW

CharPrevW

GetClassInfoW

DialogBoxParamW

CharNextW

ExitWindowsEx

DestroyWindow

CreateDialogParamW

SetTimer

SetWindowTextW

PostQuitMessage

SetForegroundWindow

ShowWindow

wsprintfW

SendMessageTimeoutW

FindWindowExW

IsWindow

GetDlgItem

SetWindowLongW

LoadImageW

GetDC

ReleaseDC

EnableWindow

InvalidateRect

SendMessageW

DefWindowProcW

BeginPaint

GetClientRect

FillRect

DrawTextW

EndPaint

CharNextA

wsprintfA

DispatchMessageW

CreateWindowExW

PeekMessageW

GetSystemMetrics

gdi32

GetDeviceCaps

SetBkColor

SelectObject

DeleteObject

CreateBrushIndirect

CreateFontIndirectW

SetBkMode

SetTextColor

kernel32

lstrcmpiA

CreateFileW

GetTempFileNameW

RemoveDirectoryW

CreateProcessW

CreateDirectoryW

GetLastError

CreateThread

GlobalLock

GlobalUnlock

GetDiskFreeSpaceW

WideCharToMultiByte

lstrcpynW

lstrlenW

SetErrorMode

GetVersionExW

GetCommandLineW

GetTempPathW

GetWindowsDirectoryW

WriteFile

CopyFileW

ExitProcess

GetCurrentProcess

GetModuleFileNameW

GetFileSize

GetTickCount

Sleep

SetFileAttributesW

GetFileAttributesW

SetCurrentDirectoryW

MoveFileW

GetFullPathNameW

GetShortPathNameW

SearchPathW

CompareFileTime

SetFileTime

CloseHandle

lstrcmpiW

lstrcmpW

ExpandEnvironmentStringsW

GlobalFree

GlobalAlloc

GetModuleHandleW

LoadLibraryExW

FreeLibrary

WritePrivateProfileStringW

GetPrivateProfileStringW

lstrlenA

MultiByteToWideChar

ReadFile

SetFilePointer

FindClose

FindNextFileW

FindFirstFileW

DeleteFileW

MulDiv

lstrcpyA

MoveFileExW

lstrcatW

GetSystemDirectoryW

GetProcAddress

GetModuleHandleA

GetExitCodeProcess

WaitForSingleObject

SetEnvironmentVariableW

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

$PLUGINSDIR/EEA.EES.v11.1.2039.2.pkg

.7z

APPDATADIR/EHttpSrv.xml

.xml

APPDATADIR/License/license.lf

APPDATADIR/Updfiles/em000_32_l0_.dll.nup

APPDATADIR/Updfiles/em000_64_l0_.dll.nup

APPDATADIR/Updfiles/em000k_32_l0_.dll.nup

APPDATADIR/Updfiles/em000k_64_l0_.dll.nup

APPDATADIR/Updfiles/em006_32_l0_.dll.nup

APPDATADIR/Updfiles/em006_32_l1_.dll.nup

APPDATADIR/Updfiles/em006_32_l2_.dll.nup

APPDATADIR/Updfiles/em006_64_l0_.dll.nup

APPDATADIR/Updfiles/em006_64_l1_.dll.nup

APPDATADIR/Updfiles/em006_64_l2_.dll.nup

APPDATADIR/Updfiles/em017_32_l0_.dll.nup

APPDATADIR/Updfiles/em017_32_l1_.dll.nup

APPDATADIR/Updfiles/em017_64_l0_.dll.nup

APPDATADIR/Updfiles/em017_64_l1_.dll.nup

APPDATADIR/Updfiles/em024_32_l0_.dll.nup

APPDATADIR/Updfiles/em024_32_l1_.dll.nup

APPDATADIR/Updfiles/em024_32_l2_.dll.nup

APPDATADIR/Updfiles/em024_64_l0_.dll.nup

APPDATADIR/Updfiles/em024_64_l1_.dll.nup

APPDATADIR/Updfiles/em024_64_l2_.dll.nup

APPDATADIR/Updfiles/em039_32_l0_.dll.nup

APPDATADIR/Updfiles/em039_32_l1_.dll.nup

APPDATADIR/Updfiles/em039_32_l2_.dll.nup

APPDATADIR/Updfiles/em039_64_l0_.dll.nup

APPDATADIR/Updfiles/em039_64_l1_.dll.nup

APPDATADIR/Updfiles/em039_64_l2_.dll.nup

APPDATADIR/Updfiles/em045_32_l0_.dll.nup

APPDATADIR/Updfiles/em045_64_l0_.dll.nup

[ProductDir]/DMON.dll

.dll regsvr32 windows:6 windows x86 arch:x86

5ecc0cb65dd787ea32e655d3365a97e8

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

f0:59:d1:bc:e5:0d:67:83:16:26:55:4b:9c:94:ff:d2:ac:1c:39:ce:37:cd:cd:97:7f:d0:cc:b6:fc:69:60:1b
Signer

Actual PE Digest

f0:59:d1:bc:e5:0d:67:83:16:26:55:4b:9c:94:ff:d2:ac:1c:39:ce:37:cd:cd:97:7f:d0:cc:b6:fc:69:60:1b

Digest Algorithm

sha256

PE Digest Matches

true

f0:59:d1:bc:e5:0d:67:83:16:26:55:4b:9c:94:ff:d2:ac:1c:39:ce:37:cd:cd:97:7f:d0:cc:b6:fc:69:60:1b
Signer

Actual PE Digest

f0:59:d1:bc:e5:0d:67:83:16:26:55:4b:9c:94:ff:d2:ac:1c:39:ce:37:cd:cd:97:7f:d0:cc:b6:fc:69:60:1b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

DMON.pdb

Imports

kernel32

GlobalAlloc

GlobalLock

WaitForSingleObject

ReadFile

WriteFile

FlushFileBuffers

MapViewOfFile

UnmapViewOfFile

ReleaseMutex

OpenMutexW

OpenFileMappingW

GetTempFileNameW

GetLocaleInfoW

GetTimeZoneInformation

WideCharToMultiByte

GetConsoleMode

GetConsoleOutputCP

SetStdHandle

GetStringTypeW

GetProcessHeap

SetEnvironmentVariableW

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

GetTempPathW

RaiseException

SetThreadLocale

GetThreadLocale

GetModuleFileNameW

LoadLibraryExW

GetLastError

FindResourceW

LoadResource

SizeofResource

MultiByteToWideChar

lstrcmpiW

GetModuleHandleW

GetProcAddress

FreeLibrary

GetCurrentThread

GetCurrentProcess

InitializeCriticalSection

LeaveCriticalSection

EnterCriticalSection

LocalFree

GetFileSize

FindFirstFileW

Sleep

DeleteFileW

GetFileAttributesW

GetSystemTimeAsFileTime

CreateDirectoryW

FindClose

FindNextFileW

FindFirstFileExW

GetCurrentProcessId

GetCommandLineA

GetCPInfo

GetOEMCP

GetACP

IsValidCodePage

HeapSize

GetFileType

GetStdHandle

HeapReAlloc

EnumSystemLocalesW

GetUserDefaultLCID

IsValidLocale

LCMapStringW

CompareStringW

GetTimeFormatW

GetDateFormatW

SetLastError

DeleteCriticalSection

LoadLibraryW

HeapFree

HeapAlloc

OutputDebugStringW

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

GetStartupInfoW

QueryPerformanceCounter

GetCurrentThreadId

InitializeSListHead

RtlUnwind

InterlockedFlushSList

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

ExitProcess

WriteConsoleW

user32

CharNextW

advapi32

RegDeleteKeyW

EnableTrace

RegDeleteValueW

RegEnumKeyExW

RegQueryInfoKeyW

OpenProcessToken

OpenThreadToken

FreeSid

EqualSid

AllocateAndInitializeSid

GetTokenInformation

shell32

ShellExecuteExW

ole32

CoTaskMemAlloc

StringFromGUID2

CreateILockBytesOnHGlobal

StgCreateDocfileOnILockBytes

CoTaskMemRealloc

CoTaskMemFree

oleaut32

SysFreeString

SysStringLen

RegisterTypeLi

LoadTypeLi

SysAllocString

UnRegisterTypeLi

VarUI4FromStr

Exports

DllCanUnloadNow

DllGetClassObject

DllRegisterServer

DllUnregisterServer

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/eamonm/eamonm.cat

[ProductDir]/Drivers/eamonm/eamonm.inf

[ProductDir]/Drivers/eamonm/eamonm.sys

.sys windows:10 windows x86 arch:x86

53948a8641db8dfeffbc375388db3a56

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

eamonm.pdb

Imports

ntoskrnl.exe

wcsstr

_wcsnicmp

InterlockedPopEntrySList

InterlockedPushEntrySList

RtlAppendUnicodeToString

RtlAppendUnicodeStringToString

RtlVolumeDeviceToDosName

IoCreateDevice

IoCreateSymbolicLink

IoDeleteDevice

IoDeleteSymbolicLink

_stricmp

_wcsicmp

ZwOpenKey

ZwQueryValueKey

ExInitializeResourceLite

ExDeleteResourceLite

KeEnterCriticalRegion

ExAcquireResourceSharedLite

ExAcquireResourceExclusiveLite

ExReleaseResourceLite

KeLeaveCriticalRegion

KeInitializeSemaphore

IoCsqInitialize

IoCsqInsertIrp

KeWaitForMultipleObjects

IoCsqRemoveNextIrp

KeReleaseSemaphore

IofCompleteRequest

KeSetEvent

KeResetEvent

PsProcessType

PsThreadType

ZwQueryInformationThread

PsGetThreadFreezeCount

KeInitializeMutex

KeReleaseMutex

PsCreateSystemThread

PsTerminateSystemThread

RtlLookupElementGenericTableAvl

RtlDeleteElementGenericTableAvl

RtlGetElementGenericTableAvl

RtlInsertElementGenericTableAvl

RtlNumberGenericTableElementsAvl

RtlInitializeGenericTableAvl

RtlUpcaseUnicodeChar

ProbeForRead

ProbeForWrite

PsLookupThreadByThreadId

IoThreadToProcess

RtlCompareMemory

IoQueryFileInformation

ZwFsControlFile

IoGetStackLimits

IoFileObjectType

IoGetAttachedDeviceReference

IoBuildDeviceIoControlRequest

KeQueryPriorityThread

PsGetCurrentThreadId

IoGetTopLevelIrp

KeReadStateEvent

ZwDuplicateObject

RtlEqualUnicodeString

RtlPrefixUnicodeString

RtlInt64ToUnicodeString

SeUnlockSubjectContext

SeLockSubjectContext

ObReferenceObjectByPointer

SeTokenObjectType

ZwDuplicateToken

RtlQueryRegistryValues

RtlStringFromGUID

RtlFreeUnicodeString

IoWMIRegistrationControl

IoGetRequestorProcess

IoGetRequestorProcessId

RtlCreateAcl

RtlAddAccessAllowedAce

SeExports

RtlCreateSecurityDescriptor

RtlSetOwnerSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

NtSetSecurityObject

KeBugCheckEx

memmove

RtlUnwind

SeQueryInformationToken

PsLookupProcessByProcessId

ObOpenObjectByPointer

PsInitialSystemProcess

ObfReferenceObject

IoGetCurrentProcess

KeGetCurrentThread

PsGetVersion

ZwQueryInformationProcess

RtlCopyUnicodeString

ObQueryNameString

ZwQuerySymbolicLinkObject

ZwOpenSymbolicLinkObject

wcschr

KeUnstackDetachProcess

KeStackAttachProcess

ZwDeviceIoControlFile

ExGetPreviousMode

KeQuerySystemTime

ObfDereferenceObject

IofCallDriver

KeInitializeEvent

ObReferenceObjectByHandle

ZwQueryInformationFile

KeDelayExecutionThread

ZwCreateFile

wcsncmp

ZwSetInformationFile

KeWaitForSingleObject

wcsrchr

RtlInitUnicodeString

ZwOpenFile

ZwClose

PsGetCurrentProcessId

ExFreePoolWithTag

ExAllocatePoolWithTag

PsIsThreadTerminating

MmGetSystemRoutineAddress

memcpy

memset

hal

KfReleaseSpinLock

KfAcquireSpinLock

KeGetCurrentIrql

KeQueryPerformanceCounter

fltmgr.sys

FltSetVolumeContext

FltGetVolumeContext

FltGetVolumeProperties

FltSetStreamHandleContext

FltSupportsStreamHandleContexts

FltDeleteStreamHandleContext

FltGetStreamHandleContext

FltSetStreamContext

FltGetStreamContext

FltAllocateContext

FltAllocateDeferredIoWorkItem

FltFreeDeferredIoWorkItem

FltQueueDeferredIoWorkItem

FltCompletePendedPostOperation

FltGetVolumeInstanceFromName

FltGetDiskDeviceObject

FltUnregisterFilter

FltStartFiltering

FltRegisterFilter

FltQueryVolumeInformation

FltReleaseContext

FltReferenceContext

FltGetVolumeFromFileObject

FltIsDirectory

FltFsControlFile

FltQueryInformationFile

FltObjectReference

FltGetDestinationFileNameInformation

FltGetFileNameInformation

FltGetRoutineAddress

FltSetEcpListIntoCallbackData

FltIsEcpAcknowledged

FltFreeExtraCreateParameter

FltCancelFileOpen

FltReissueSynchronousIo

FltSetCallbackDataDirty

FltGetRequestorProcessId

FltGetRequestorProcess

FltDeviceIoControlFile

FltGetVolumeFromName

FltParseFileNameInformation

FltCancellableWaitForMultipleObjects

FltGetFilterFromInstance

FltObjectDereference

FltGetVolumeFromInstance

FltGetVolumeName

FltClose

FltCreateFile

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/edevmon/edevmon.cat

[ProductDir]/Drivers/edevmon/edevmon.inf

[ProductDir]/Drivers/edevmon/edevmon.sys

.sys windows:10 windows x86 arch:x86

c2198a07ec5dcfccb67c0338378ccd7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

edevmon.pdb

Imports

ntoskrnl.exe

PsGetCurrentProcessId

ZwClose

ZwOpenFile

RtlInitUnicodeString

KeWaitForSingleObject

ZwCreateFile

ObReferenceObjectByHandle

KeInitializeEvent

IofCallDriver

ObfDereferenceObject

KeQuerySystemTime

ExGetPreviousMode

ZwDeviceIoControlFile

_wcsnicmp

wcschr

ObQueryNameString

ZwQueryInformationProcess

PsGetVersion

KeGetCurrentThread

IoGetCurrentProcess

ObfReferenceObject

PsInitialSystemProcess

PsLookupProcessByProcessId

ObOpenObjectByPointer

SeQueryInformationToken

towlower

towupper

ZwOpenThreadToken

ZwOpenProcessToken

InterlockedPopEntrySList

InterlockedPushEntrySList

RtlAppendUnicodeToString

RtlAppendUnicodeStringToString

RtlVolumeDeviceToDosName

IoCreateDevice

IoCreateSymbolicLink

IoDeleteDevice

IoDeleteSymbolicLink

ExInitializeResourceLite

ExDeleteResourceLite

KeEnterCriticalRegion

ExAcquireResourceSharedLite

ExAcquireResourceExclusiveLite

ExReleaseResourceLite

KeLeaveCriticalRegion

KeInitializeSemaphore

IoCsqInitialize

KeWaitForMultipleObjects

IoCsqRemoveNextIrp

KeReleaseSemaphore

IofCompleteRequest

KeSetEvent

KeResetEvent

PsProcessType

_stricmp

_wcsicmp

ZwOpenKey

ZwQueryValueKey

ZwSetValueKey

PsThreadType

ZwQueryInformationThread

PsGetThreadFreezeCount

PsIsThreadTerminating

RtlValidSid

RtlLengthSid

_purecall

KeReleaseMutex

MmMapLockedPagesSpecifyCache

ZwDuplicateObject

ZwDuplicateToken

ProbeForRead

ProbeForWrite

PsLookupThreadByThreadId

IoThreadToProcess

ExInitializePagedLookasideList

ExDeletePagedLookasideList

RtlSubAuthorityCountSid

_snwprintf_s

RtlSubAuthoritySid

SeCaptureSubjectContext

SeLockSubjectContext

SeReleaseSubjectContext

SeUnlockSubjectContext

SeTokenIsAdmin

RtlCopySid

RtlEqualSid

IoGetDeviceProperty

PsIsSystemThread

PsGetCurrentThreadId

IoGetDevicePropertyData

IoOpenDeviceRegistryKey

RtlGUIDFromString

IoAcquireRemoveLockEx

IoReleaseRemoveLockEx

KeInitializeMutex

RtlStringFromGUID

RtlQueryRegistryValues

RtlFreeUnicodeString

IoWMIRegistrationControl

PsSetLoadImageNotifyRoutine

PsSetCreateProcessNotifyRoutine

IoGetAttachedDeviceReference

IoInitializeRemoveLockEx

IoAttachDeviceToDeviceStackSafe

IoReleaseRemoveLockAndWaitEx

IoDetachDevice

RtlEqualUnicodeString

IoFileObjectType

IoEnumerateDeviceObjectList

IoGetDeviceInterfaces

IoRegisterDeviceInterface

IoSetDeviceInterfaceState

IoBuildDeviceIoControlRequest

InitSafeBootMode

IoAllocateMdl

IoFreeMdl

MmProbeAndLockPages

MmUnlockPages

MmUnmapLockedPages

IoGetRequestorProcess

IoGetRequestorProcessId

RtlCreateAcl

RtlAddAccessAllowedAce

SeExports

RtlCreateSecurityDescriptor

RtlSetOwnerSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

NtSetSecurityObject

KeBugCheckEx

_allmul

RtlUnwind

ExAllocatePoolWithTag

ExFreePoolWithTag

IoCsqInsertIrp

MmGetSystemRoutineAddress

ZwSetSecurityObject

IoDeviceObjectType

RtlGetDaclSecurityDescriptor

RtlGetGroupSecurityDescriptor

RtlGetOwnerSecurityDescriptor

RtlGetSaclSecurityDescriptor

SeCaptureSecurityDescriptor

_snwprintf

RtlLengthSecurityDescriptor

RtlAbsoluteToSelfRelativeSD

IoIsWdmVersionAvailable

memcpy

memset

ZwCreateKey

memmove

hal

KfAcquireSpinLock

KeGetCurrentIrql

KfReleaseSpinLock

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/edevmonm/edevmonm.cat

[ProductDir]/Drivers/edevmonm/edevmonm.inf

[ProductDir]/Drivers/edevmonm/edevmonm.sys

.sys windows:10 windows x86 arch:x86

37ed69b04de096f94fd36b25e686b0cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

edevmonm.pdb

Imports

ntoskrnl.exe

wcschr

ObfDereferenceObject

PsGetVersion

ZwOpenThreadToken

ZwOpenProcessToken

InterlockedPopEntrySList

InterlockedPushEntrySList

ObReferenceObjectByHandle

KeWaitForSingleObject

KeInitializeEvent

IoCreateDevice

IoCreateSymbolicLink

IoDeleteDevice

IoDeleteSymbolicLink

_stricmp

_wcsicmp

ZwOpenKey

ZwQueryValueKey

ZwSetValueKey

ExInitializeResourceLite

ExDeleteResourceLite

KeEnterCriticalRegion

ExAcquireResourceSharedLite

ExAcquireResourceExclusiveLite

ExReleaseResourceLite

KeLeaveCriticalRegion

KeInitializeSemaphore

IoCsqInitialize

IoCsqInsertIrp

KeWaitForMultipleObjects

IoCsqRemoveNextIrp

KeReleaseSemaphore

IofCompleteRequest

KeSetEvent

KeResetEvent

PsProcessType

PsThreadType

ZwQueryInformationThread

PsGetThreadFreezeCount

PsIsThreadTerminating

PsGetCurrentThreadId

IoGetRequestorProcess

IoGetRequestorProcessId

ZwOpenSymbolicLinkObject

ZwQuerySymbolicLinkObject

RtlCreateAcl

RtlAddAccessAllowedAce

RtlCreateSecurityDescriptor

RtlSetOwnerSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

NtSetSecurityObject

DbgPrint

KeGetCurrentThread

RtlValidSid

RtlLengthSid

KeQuerySystemTime

_purecall

KeReleaseMutex

MmMapLockedPagesSpecifyCache

ZwDuplicateObject

ZwDuplicateToken

ProbeForRead

ProbeForWrite

PsLookupThreadByThreadId

IoThreadToProcess

ExInitializePagedLookasideList

ExDeletePagedLookasideList

ObQueryNameString

RtlSubAuthorityCountSid

_snwprintf_s

RtlSubAuthoritySid

SeCaptureSubjectContext

SeLockSubjectContext

SeReleaseSubjectContext

SeUnlockSubjectContext

SeTokenIsAdmin

RtlCopySid

RtlEqualSid

IoGetDeviceProperty

PsIsSystemThread

IoGetDevicePropertyData

IoOpenDeviceRegistryKey

RtlGUIDFromString

KeInitializeMutex

RtlQueryRegistryValues

RtlStringFromGUID

RtlFreeUnicodeString

IoWMIRegistrationControl

ExFreePool

IoBuildDeviceIoControlRequest

IofCallDriver

IoGetAttachedDeviceReference

_swprintf

IoBuildSynchronousFsdRequest

IoGetDeviceObjectPointer

RtlCopyUnicodeString

KeBugCheckEx

_allmul

RtlUnwind

towupper

_wcsnicmp

towlower

SeQueryInformationToken

ZwQueryInformationProcess

ObOpenObjectByPointer

PsLookupProcessByProcessId

PsInitialSystemProcess

ObfReferenceObject

IoGetCurrentProcess

PsGetCurrentProcessId

ExFreePoolWithTag

ExAllocatePoolWithTag

ZwClose

ZwDeviceIoControlFile

ZwOpenFile

RtlInitUnicodeString

ExGetPreviousMode

SeExports

MmGetSystemRoutineAddress

ZwSetSecurityObject

IoDeviceObjectType

RtlGetDaclSecurityDescriptor

RtlGetGroupSecurityDescriptor

RtlGetOwnerSecurityDescriptor

RtlGetSaclSecurityDescriptor

SeCaptureSecurityDescriptor

_snwprintf

RtlLengthSecurityDescriptor

RtlAbsoluteToSelfRelativeSD

IoIsWdmVersionAvailable

memcpy

memset

ZwCreateKey

memmove

hal

KfAcquireSpinLock

KeGetCurrentIrql

KfReleaseSpinLock

fltmgr.sys

FltGetRoutineAddress

FltGetFileNameInformation

FltSetVolumeContext

FltAllocateContext

FltGetFileSystemType

FltGetDeviceObject

FltGetDiskDeviceObject

FltGetVolumeInstanceFromName

FltStartFiltering

FltRegisterFilter

FltDeleteVolumeContext

FltUnregisterFilter

FltReleaseContext

FltGetVolumeContext

FltGetRequestorProcessId

FltGetRequestorProcess

FltDeviceIoControlFile

FltGetVolumeFromName

FltParseFileNameInformation

FltGetFilterFromInstance

FltObjectDereference

FltGetVolumeFromInstance

FltGetVolumeName

FltClose

FltCreateFile

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/eelam/eelam.cat

[ProductDir]/Drivers/eelam/eelam.inf

[ProductDir]/Drivers/eelam/eelam.sys

.sys windows:10 windows x86 arch:x86

Code Sign

33:00:00:04:45:1c:57:99:61:a7:a9:78:10:00:00:00:00:04:45
Certificate

Issuer

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

02-09-2021 18:26

Not After

01-09-2022 18:26

Subject

CN=Microsoft Windows Early Launch Anti-malware Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0c:52:4c:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

06-07-2010 20:40

Not After

06-07-2025 20:50

Subject

CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

ba:28:a7:0e:52:8d:6f:62:7c:b6:9b:65:b6:e0:df:f7:78:42:09:52:14:f5:be:1b:c5:20:9b:82:12:1b:43:ac
Signer

Actual PE Digest

ba:28:a7:0e:52:8d:6f:62:7c:b6:9b:65:b6:e0:df:f7:78:42:09:52:14:f5:be:1b:c5:20:9b:82:12:1b:43:ac

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

eelam.pdb

Sections

.text
Size: 512B - Virtual size: 19B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 294B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/ehdrv/ehdrv.cat

[ProductDir]/Drivers/ehdrv/ehdrv.inf

[ProductDir]/Drivers/ehdrv/ehdrv.sys

.sys windows:10 windows x86 arch:x86

105082788702a400d2f7015fc6400aa8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

Ehdrv.pdb

Imports

ntoskrnl.exe

RtlInitAnsiString

RtlAnsiStringToUnicodeString

MmGetSystemRoutineAddress

RtlFreeUnicodeString

_strnicmp

RtlCompareUnicodeString

RtlInitUnicodeString

ZwSetSystemInformation

IoFreeWorkItem

IoAllocateWorkItem

IoQueueWorkItem

ZwQuerySystemInformation

PsGetCurrentProcessId

ZwClose

ZwOpenFile

ZwQueryDirectoryFile

wcsrchr

KeWaitForSingleObject

ZwSetInformationFile

wcsncmp

ExAllocatePoolWithTag

ZwCreateFile

KeDelayExecutionThread

ExFreePoolWithTag

ZwReadFile

ZwWriteFile

ZwQueryInformationFile

ObReferenceObjectByHandle

IoGetRelatedDeviceObject

KeInitializeEvent

IoBuildSynchronousFsdRequest

IofCallDriver

ObfDereferenceObject

KeInitializeMutex

KeReleaseMutex

isspace

isdigit

isupper

MmSystemRangeStart

MmHighestUserAddress

KeStackAttachProcess

KeUnstackDetachProcess

ZwOpenSymbolicLinkObject

ZwQuerySymbolicLinkObject

ObQueryNameString

RtlCopyUnicodeString

ZwOpenProcess

ZwQueryInformationProcess

PsGetVersion

RtlCreateAcl

RtlAddAccessAllowedAce

RtlCreateSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

ObOpenObjectByPointer

ZwSetSecurityObject

RtlAppendUnicodeStringToString

ZwOpenKey

ZwQueryValueKey

_vsnprintf

_vsnwprintf

strstr

mbstowcs

toupper

RtlAppendUnicodeToString

RtlVolumeDeviceToDosName

IoDeleteSymbolicLink

IoDeleteDevice

ExGetPreviousMode

IofCompleteRequest

ProbeForRead

ProbeForWrite

InitSafeBootMode

IoCreateDevice

IoCreateSymbolicLink

IoGetCurrentProcess

KdDebuggerEnabled

KdDebuggerNotPresent

MmIsAddressValid

IoAllocateMdl

MmProbeAndLockPages

MmUnlockPages

IoFreeMdl

KeSetEvent

KeClearEvent

_purecall

qsort

KeBugCheckEx

memmove

RtlUnwind

wcschr

SeExports

_alldiv

_allmul

_allrem

_allshl

_allshr

_aulldiv

_aulldvrm

_aullshr

memcpy

memset

hal

KfAcquireSpinLock

KeGetCurrentIrql

KfReleaseSpinLock

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/ekbdflt/ekbdflt.cat

[ProductDir]/Drivers/ekbdflt/ekbdflt.inf

[ProductDir]/Drivers/ekbdflt/ekbdflt.sys

.sys windows:10 windows x86 arch:x86

ee7d71b779461a246ec8fdfa9057c22d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

EKbdFlt.pdb

Imports

ntoskrnl.exe

ExGetPreviousMode

RtlInitUnicodeString

ZwOpenFile

ZwDeviceIoControlFile

ZwClose

KeGetCurrentThread

PsGetCurrentThreadId

MmGetSystemRoutineAddress

RtlGetVersion

IoCreateSymbolicLink

IoDeleteDevice

IoCreateDevice

IoAttachDeviceToDeviceStack

IofCompleteRequest

IofCallDriver

IoEnumerateDeviceObjectList

PoStartNextPowerIrp

PoCallDriver

KeInitializeEvent

KeWaitForSingleObject

IoDetachDevice

KeSetEvent

ObfDereferenceObject

IoBuildDeviceIoControlRequest

RtlFreeUnicodeString

ZwSetSecurityObject

IoDeviceObjectType

ObOpenObjectByPointer

RtlGetDaclSecurityDescriptor

RtlGetGroupSecurityDescriptor

RtlGetOwnerSecurityDescriptor

RtlGetSaclSecurityDescriptor

ExFreePoolWithTag

SeCaptureSecurityDescriptor

_snwprintf

RtlLengthSecurityDescriptor

SeExports

RtlCreateSecurityDescriptor

_wcsnicmp

ExAllocatePoolWithTag

wcschr

RtlAbsoluteToSelfRelativeSD

RtlAddAccessAllowedAce

RtlLengthSid

IoIsWdmVersionAvailable

RtlSetDaclSecurityDescriptor

memcpy

memset

ZwOpenKey

ZwSetValueKey

ZwQueryValueKey

ZwCreateKey

KeBugCheckEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/epfw/epfw.cat

[ProductDir]/Drivers/epfw/epfw.inf

[ProductDir]/Drivers/epfw/epfw.sys

.sys windows:10 windows x86 arch:x86

a9ce1e93d8dc7c18df86b568b57473d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

epfw.pdb

Imports

ndis.sys

NdisGetRoutineAddress

ntoskrnl.exe

ZwClose

ExAllocatePoolWithTag

ExFreePoolWithTag

RtlCreateAcl

RtlAddAccessAllowedAce

SeExports

RtlCreateSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

ObOpenObjectByPointer

ZwSetSecurityObject

IoFreeWorkItem

IoAllocateWorkItem

IoQueueWorkItemEx

KeDelayExecutionThread

RtlStringFromGUID

MmGetSystemRoutineAddress

RtlQueryRegistryValues

RtlFreeUnicodeString

IoWMIRegistrationControl

PsGetCurrentProcessId

ObReferenceObjectByHandle

ExEventObjectType

IofCompleteRequest

PsSetCreateProcessNotifyRoutine

PsRemoveCreateThreadNotifyRoutine

IoDeleteSymbolicLink

IoDeleteDevice

PsGetVersion

IoCreateDevice

IoCreateSymbolicLink

PsSetCreateThreadNotifyRoutine

IoQueueWorkItem

ObfDereferenceObject

KeSetEvent

ExInitializeNPagedLookasideList

ExDeleteNPagedLookasideList

KeTickCount

KeQueryTimeIncrement

wcsncmp

_strnicmp

RtlCompareUnicodeString

RtlInitAnsiString

RtlAnsiStringToUnicodeString

KeWaitForSingleObject

ZwSetInformationFile

ZwCreateFile

ZwReadFile

ZwWriteFile

ZwQueryInformationFile

IoGetRelatedDeviceObject

KeInitializeEvent

IoBuildSynchronousFsdRequest

IofCallDriver

KeQuerySystemTime

MmSystemRangeStart

ZwOpenFile

KeStackAttachProcess

KeUnstackDetachProcess

ZwOpenProcess

ZwQueryInformationProcess

ProbeForRead

ProbeForWrite

IoGetDeviceObjectPointer

ObfReferenceObject

IoBuildDeviceIoControlRequest

wcschr

ZwQueryDirectoryFile

ZwOpenSymbolicLinkObject

ZwQuerySymbolicLinkObject

wcsrchr

ObQueryNameString

RtlCopyUnicodeString

RtlAppendUnicodeStringToString

ZwOpenKey

ZwQueryValueKey

InterlockedPopEntrySList

InterlockedPushEntrySList

RtlAppendUnicodeToString

RtlVolumeDeviceToDosName

KeBugCheckEx

memmove

RtlUnwind

RtlInitUnicodeString

ExGetPreviousMode

ZwDeviceIoControlFile

MmHighestUserAddress

_alldiv

_allmul

memcpy

memset

hal

KfReleaseSpinLock

KfAcquireSpinLock

KeGetCurrentIrql

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 164B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/epfwlwf/EpfwLwf.cat

[ProductDir]/Drivers/epfwlwf/EpfwLwf.inf

[ProductDir]/Drivers/epfwlwf/EpfwLwf.sys

.sys windows:10 windows x86 arch:x86

9df8508a56d0dbb0b91d0434e5440877

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

EpfwLwf.pdb

Imports

ndis.sys

NdisDeregisterDeviceEx

NdisGetRoutineAddress

NdisAllocateMemoryWithTagPriority

NdisFreeMemory

NdisGetVersion

NdisFSetAttributes

NdisFreeNetBufferListPool

NdisFreeNetBufferPool

NdisFOidRequest

NdisSetEvent

NdisFCancelSendNetBufferLists

NdisFSendNetBufferListsComplete

NdisFSendNetBufferLists

NdisFReturnNetBufferLists

NdisFIndicateReceiveNetBufferLists

NdisAllocateCloneOidRequest

NdisFreeCloneOidRequest

NdisFOidRequestComplete

NdisFDeregisterFilterDriver

NdisFDevicePnPEventNotify

NdisFNetPnPEvent

NdisFIndicateStatus

NdisFPauseComplete

NdisGeneratePartialCancelId

NdisGetDataBuffer

NdisAllocateCloneNetBufferList

NdisFreeCloneNetBufferList

NdisAllocateMdl

NdisAllocateNetBuffer

NdisAllocateNetBufferList

NdisFreeNetBuffer

NdisFreeMdl

NdisCopyReceiveNetBufferListInfo

NdisFreeNetBufferList

NdisAllocateNetBufferPool

NdisAllocateNetBufferListPool

NdisGetDeviceReservedExtension

NdisRegisterDeviceEx

NdisFCancelOidRequest

NdisFRegisterFilterDriver

ntoskrnl.exe

SeExports

RtlCreateSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

ObOpenObjectByPointer

ZwSetSecurityObject

ZwClose

ObfDereferenceObject

PsGetVersion

InterlockedPopEntrySList

InterlockedPushEntrySList

RtlStringFromGUID

RtlInitUnicodeString

MmGetSystemRoutineAddress

RtlCreateAcl

RtlFreeUnicodeString

IoWMIRegistrationControl

IofCompleteRequest

ExInitializeNPagedLookasideList

ExDeleteNPagedLookasideList

KeDelayExecutionThread

ExfInterlockedInsertTailList

ExfInterlockedInsertHeadList

ObReferenceObjectByHandle

ExEventObjectType

ExfInterlockedRemoveHeadList

MmMapLockedPagesSpecifyCache

ProbeForRead

ProbeForWrite

KeInitializeEvent

KeSetEvent

KeWaitForSingleObject

IoGetDeviceObjectPointer

ObfReferenceObject

IoBuildDeviceIoControlRequest

IofCallDriver

IoFreeWorkItem

IoAllocateWorkItem

IoQueueWorkItem

KeBugCheckEx

memcpy

RtlUnwind

ExFreePoolWithTag

ExAllocatePoolWithTag

RtlAddAccessAllowedAce

RtlQueryRegistryValues

memset

hal

KfReleaseSpinLock

KeGetCurrentIrql

KfAcquireSpinLock

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/epfwwfp/EpfwWfp.inf

[ProductDir]/Drivers/epfwwfp/EpfwWfp.sys

.sys windows:10 windows x86 arch:x86

be12f446243056832e2db491388a1080

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

EpfwWfp.pdb

Imports

ndis.sys

NdisRetreatNetBufferDataStart

NdisGetDataBuffer

NdisFreeGenericObject

NdisGetRoutineAddress

NdisAdvanceNetBufferListDataStart

NdisRetreatNetBufferListDataStart

NdisFreeNetBufferListPool

NdisAllocateNetBufferListPool

NdisAdvanceNetBufferDataStart

NdisAllocateGenericObject

ntoskrnl.exe

RtlCopyUnicodeString

RtlCreateAcl

RtlAddAccessAllowedAce

SeExports

RtlCreateSecurityDescriptor

RtlSetDaclSecurityDescriptor

RtlValidSecurityDescriptor

ObOpenObjectByPointer

ZwSetSecurityObject

RtlAppendUnicodeStringToString

ZwOpenKey

ZwQueryValueKey

_strnicmp

PsGetVersion

InterlockedPopEntrySList

InterlockedPushEntrySList

RtlVolumeDeviceToDosName

IoGetDeviceObjectPointer

ObfReferenceObject

IoBuildDeviceIoControlRequest

IoUninitializeWorkItem

IoSizeofWorkItem

IoInitializeWorkItem

IoQueueWorkItemEx

KeResetEvent

KeSetEvent

VerSetConditionMask

RtlVerifyVersionInfo

IoFreeWorkItem

IoAllocateWorkItem

IoQueueWorkItem

KeExpandKernelStackAndCalloutEx

KeSetTimer

KeInitializeTimer

KeInitializeDpc

KeCancelTimer

KeFlushQueuedDpcs

ExInitializeNPagedLookasideList

ExDeleteNPagedLookasideList

ExEventObjectType

IoFreeMdl

KeInsertQueueDpc

IoAllocateMdl

MmBuildMdlForNonPagedPool

RtlStringFromGUID

MmGetSystemRoutineAddress

RtlQueryRegistryValues

RtlFreeUnicodeString

IoWMIRegistrationControl

MmProbeAndLockPages

MmMapLockedPagesSpecifyCache

MmUnlockPages

IofCompleteRequest

PsSetCreateProcessNotifyRoutine

ExUnregisterCallback

IoDeleteDevice

IoDeleteSymbolicLink

ExCreateCallback

ExRegisterCallback

InitSafeBootMode

IoCreateDevice

IoCreateSymbolicLink

KeBugCheckEx

memcpy

RtlUnwind

ProbeForWrite

ProbeForRead

KeQuerySystemTime

ObfDereferenceObject

IofCallDriver

KeInitializeEvent

ObReferenceObjectByHandle

ExFreePoolWithTag

KeDelayExecutionThread

ZwCreateFile

ExAllocatePoolWithTag

KeWaitForSingleObject

ZwQuerySystemInformation

ZwClose

ZwDeviceIoControlFile

ZwOpenFile

RtlInitUnicodeString

ExGetPreviousMode

RtlAppendUnicodeToString

_alldiv

_allmul

_aulldiv

memset

hal

KfReleaseSpinLock

KfAcquireSpinLock

KeGetCurrentIrql

fwpkclnt.sys

FwpmBfeStateGet0

FwpsInjectTransportSendAsync0

FwpsCopyStreamDataToBuffer0

FwpsCloneStreamData0

FwpsStreamInjectAsync0

FwpsDiscardClonedStreamData0

FwpsFlowRemoveContext0

FwpsFlowAssociateContext0

FwpmBfeStateSubscribeChanges0

FwpsCalloutRegister0

FwpmLayerEnum0

FwpmLayerDestroyEnumHandle0

FwpmLayerCreateEnumHandle0

FwpmFilterSetSecurityInfoByKey0

FwpmFilterGetSecurityInfoByKey0

FwpmFreeMemory0

FwpmFilterEnum0

FwpmFilterDestroyEnumHandle0

FwpmFilterCreateEnumHandle0

FwpmProviderDeleteByKey0

FwpmSubLayerDeleteByKey0

FwpmCalloutDeleteByKey0

FwpmFilterDeleteByKey0

FwpmProviderGetByKey0

FwpmSubLayerGetByKey0

FwpmCalloutGetByKey0

FwpmProviderAdd0

FwpsPendOperation0

FwpsCompleteOperation0

FwpmBfeStateUnsubscribeChanges0

FwpsCalloutUnregisterById0

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

INIT
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/Drivers/epfwwfp/epfwwfp.cat

[ProductDir]/EsetContextMenu.msix

.appx

AppxBlockMap.xml

.xml

AppxManifest.xml

AppxSignature.p7x

Assets/Square150x150Logo.scale-100.png

.png

Assets/Square150x150Logo.scale-125.png

.png

Assets/Square150x150Logo.scale-150.png

.png

Assets/Square150x150Logo.scale-200.png

.png

Assets/Square150x150Logo.scale-400.png

.png

Assets/Square44x44Logo.scale-100.png

.png

Assets/Square44x44Logo.scale-125.png

.png

Assets/Square44x44Logo.scale-150.png

.png

Assets/Square44x44Logo.scale-200.png

.png

Assets/Square44x44Logo.scale-400.png

.png

Assets/Square44x44Logo.targetsize-16.png

.png

Assets/Square44x44Logo.targetsize-24.png

.png

Assets/Square44x44Logo.targetsize-256.png

.png

Assets/Square44x44Logo.targetsize-32.png

.png

Assets/Square44x44Logo.targetsize-48.png

.png

Assets/storelogo.scale-100.png

.png

Assets/storelogo.scale-125.png

.png

Assets/storelogo.scale-150.png

.png

Assets/storelogo.scale-200.png

.png

Assets/storelogo.scale-400.png

.png

[Content_Types].xml

.xml

[ProductDir]/Help/help.cab

.cab

1026/blank.png

.png

1026/cicon9.png

.png

1026/default_gw.png

.png

1026/example.svg

1026/header_logo.png

.png

1026/hmcontent.html

1026/hmprojectstyles.css

1026/idh_wizard_activation_type.html

.js

1026/ielte8.css

1026/images.css

1026/important.svg

1026/index.html

.js

1026/infected_computer_by_malware.html

.js

1026/internet-explorer.css

1026/layout.css

1026/layout_mobile.css

1026/minus_small.png

.png

1026/no_internet_connection.html

.js

1026/no_internet_connection_malware.html

.js

1026/note.svg

1026/ping1.png

.png

1026/ping2.png

.png

1026/plus_small.png

.png

1026/print.css

1026/r_copyright.png

.png

1026/warning.svg

1027/blank.png

.png

1027/cicon9.png

.png

1027/default_gw.png

.png

1027/example.svg

1027/header_logo.png

.png

1027/hmcontent.html

1027/hmprojectstyles.css

1027/idh_wizard_activation_type.html

.js

1027/ielte8.css

1027/images.css

1027/important.svg

1027/index.html

.js

1027/infected_computer_by_malware.html

.js

1027/internet-explorer.css

1027/layout.css

1027/layout_mobile.css

1027/minus_small.png

.png

1027/no_internet_connection.html

.js

1027/no_internet_connection_malware.html

.js

1027/note.svg

1027/ping1.png

.png

1027/ping2.png

.png

1027/plus_small.png

.png

1027/print.css

1027/r_copyright.png

.png

1027/warning.svg

1028/blank.png

.png

1028/cicon9.png

.png

1028/default_gw.png

.png

1028/example.svg

1028/header_logo.png

.png

1028/hmcontent.html

1028/hmprojectstyles.css

1028/idh_wizard_activation_type.html

.js

1028/ielte8.css

1028/images.css

1028/important.svg

1028/index.html

.js

1028/infected_computer_by_malware.html

.js

1028/internet-explorer.css

1028/layout.css

1028/layout_mobile.css

1028/minus_small.png

.png

1028/no_internet_connection.html

.js

1028/no_internet_connection_malware.html

.js

1028/note.svg

1028/ping1.png

.png

1028/ping2.png

.png

1028/plus_small.png

.png

1028/print.css

1028/r_copyright.png

.png

1028/warning.svg

1029/blank.png

.png

1029/cicon9.png

.png

1029/default_gw.png

.png

1029/example.svg

1029/header_logo.png

.png

1029/hmcontent.html

1029/hmprojectstyles.css

1029/idh_wizard_activation_type.html

.js

1029/ielte8.css

1029/images.css

1029/important.svg

1029/index.html

.js

1029/infected_computer_by_malware.html

.js

1029/internet-explorer.css

1029/layout.css

1029/layout_mobile.css

1029/minus_small.png

.png

1029/no_internet_connection.html

.js

1029/no_internet_connection_malware.html

.js

1029/note.svg

1029/ping1.png

.png

1029/ping2.png

.png

1029/plus_small.png

.png

1029/print.css

1029/r_copyright.png

.png

1029/warning.svg

1030/blank.png

.png

1030/cicon9.png

.png

1030/default_gw.png

.png

1030/example.svg

1030/header_logo.png

.png

1030/hmcontent.html

1030/hmprojectstyles.css

1030/idh_wizard_activation_type.html

.js

1030/ielte8.css

1030/images.css

1030/important.svg

1030/index.html

.js

1030/infected_computer_by_malware.html

.js

1030/internet-explorer.css

1030/layout.css

1030/layout_mobile.css

1030/minus_small.png

.png

1030/no_internet_connection.html

.js

1030/no_internet_connection_malware.html

.js

1030/note.svg

1030/ping1.png

.png

1030/ping2.png

.png

1030/plus_small.png

.png

1030/print.css

1030/r_copyright.png

.png

1030/warning.svg

1031/blank.png

.png

1031/cicon9.png

.png

1031/default_gw.png

.png

1031/example.svg

1031/header_logo.png

.png

1031/hmcontent.html

1031/hmprojectstyles.css

1031/idh_wizard_activation_type.html

.js

1031/ielte8.css

1031/images.css

1031/important.svg

1031/index.html

.js

1031/infected_computer_by_malware.html

.js

1031/internet-explorer.css

1031/layout.css

1031/layout_mobile.css

1031/minus_small.png

.png

1031/no_internet_connection.html

.js

1031/no_internet_connection_malware.html

.js

1031/note.svg

1031/ping1.png

.png

1031/ping2.png

.png

1031/plus_small.png

.png

1031/print.css

1031/r_copyright.png

.png

1031/warning.svg

1032/blank.png

.png

1032/cicon9.png

.png

1032/default_gw.png

.png

1032/example.svg

1032/header_logo.png

.png

1032/hmcontent.html

1032/hmprojectstyles.css

1032/idh_wizard_activation_type.html

.js

1032/ielte8.css

1032/images.css

1032/important.svg

1032/index.html

.js

1032/infected_computer_by_malware.html

.js

1032/internet-explorer.css

1032/layout.css

1032/layout_mobile.css

1032/minus_small.png

.png

1032/no_internet_connection.html

.js

1032/no_internet_connection_malware.html

.js

1032/note.svg

1032/ping1.png

.png

1032/ping2.png

.png

1032/plus_small.png

.png

1032/print.css

1032/r_copyright.png

.png

1032/warning.svg

1033/blank.png

.png

1033/cicon9.png

.png

1033/default_gw.png

.png

1033/example.svg

1033/header_logo.png

.png

1033/hmcontent.html

1033/hmprojectstyles.css

1033/idh_wizard_activation_type.html

.js

1033/ielte8.css

1033/images.css

1033/important.svg

1033/index.html

.js

1033/infected_computer_by_malware.html

.js

1033/internet-explorer.css

1033/layout.css

1033/layout_mobile.css

1033/minus_small.png

.png

1033/no_internet_connection.html

.js

1033/no_internet_connection_malware.html

.js

1033/note.svg

1033/ping1.png

.png

1033/ping2.png

.png

1033/plus_small.png

.png

1033/print.css

1033/r_copyright.png

.png

1033/warning.svg

1035/blank.png

.png

1035/cicon9.png

.png

1035/default_gw.png

.png

1035/example.svg

1035/header_logo.png

.png

1035/hmcontent.html

1035/hmprojectstyles.css

1035/idh_wizard_activation_type.html

.js

1035/ielte8.css

1035/images.css

1035/important.svg

1035/index.html

.js

1035/infected_computer_by_malware.html

.js

1035/internet-explorer.css

1035/layout.css

1035/layout_mobile.css

1035/minus_small.png

.png

1035/no_internet_connection.html

.js

1035/no_internet_connection_malware.html

.js

1035/note.svg

1035/ping1.png

.png

1035/ping2.png

.png

1035/plus_small.png

.png

1035/print.css

1035/r_copyright.png

.png

1035/warning.svg

1036/blank.png

.png

1036/cicon9.png

.png

1036/default_gw.png

.png

1036/example.svg

1036/header_logo.png

.png

1036/hmcontent.html

1036/hmprojectstyles.css

1036/idh_wizard_activation_type.html

.js

1036/ielte8.css

1036/images.css

1036/important.svg

1036/index.html

.js

1036/infected_computer_by_malware.html

.js

1036/internet-explorer.css

1036/layout.css

1036/layout_mobile.css

1036/minus_small.png

.png

1036/no_internet_connection.html

.js

1036/no_internet_connection_malware.html

.js

1036/note.svg

1036/ping1.png

.png

1036/ping2.png

.png

1036/plus_small.png

.png

1036/print.css

1036/r_copyright.png

.png

1036/warning.svg

1037/blank.png

.png

1037/cicon9.png

.png

1037/default_gw.png

.png

1037/example.svg

1037/header_logo.png

.png

1037/hmcontent.html

1037/hmprojectstyles.css

1037/idh_wizard_activation_type.html

.js

1037/ielte8.css

1037/images.css

1037/important.svg

1037/index.html

.js

1037/infected_computer_by_malware.html

.js

1037/internet-explorer.css

1037/layout.css

1037/layout_mobile.css

1037/minus_small.png

.png

1037/no_internet_connection.html

.js

1037/no_internet_connection_malware.html

.js

1037/note.svg

1037/ping1.png

.png

1037/ping2.png

.png

1037/plus_small.png

.png

1037/print.css

1037/r_copyright.png

.png

1037/rtl.css

1037/rtl_mobile.css

1037/warning.svg

1038/blank.png

.png

1038/cicon9.png

.png

1038/default_gw.png

.png

1038/example.svg

1038/header_logo.png

.png

1038/hmcontent.html

1038/hmprojectstyles.css

1038/idh_wizard_activation_type.html

.js

1038/ielte8.css

1038/images.css

1038/important.svg

1038/index.html

.js

1038/infected_computer_by_malware.html

.js

1038/internet-explorer.css

1038/layout.css

1038/layout_mobile.css

1038/minus_small.png

.png

1038/no_internet_connection.html

.js

1038/no_internet_connection_malware.html

.js

1038/note.svg

1038/ping1.png

.png

1038/ping2.png

.png

1038/plus_small.png

.png

1038/print.css

1038/r_copyright.png

.png

1038/warning.svg

1040/blank.png

.png

1040/cicon9.png

.png

1040/default_gw.png

.png

1040/example.svg

1040/header_logo.png

.png

1040/hmcontent.html

1040/hmprojectstyles.css

1040/idh_wizard_activation_type.html

.js

1040/ielte8.css

1040/images.css

1040/important.svg

1040/index.html

.js

1040/infected_computer_by_malware.html

.js

1040/internet-explorer.css

1040/layout.css

1040/layout_mobile.css

1040/minus_small.png

.png

1040/no_internet_connection.html

.js

1040/no_internet_connection_malware.html

.js

1040/note.svg

1040/ping1.png

.png

1040/ping2.png

.png

1040/plus_small.png

.png

1040/print.css

1040/r_copyright.png

.png

1040/warning.svg

1041/blank.png

.png

1041/cicon9.png

.png

1041/default_gw.png

.png

1041/example.svg

1041/header_logo.png

.png

1041/hmcontent.html

1041/hmprojectstyles.css

1041/idh_wizard_activation_type.html

.js

1041/ielte8.css

1041/images.css

1041/important.svg

1041/index.html

.js

1041/infected_computer_by_malware.html

.js

1041/internet-explorer.css

1041/layout.css

1041/layout_mobile.css

1041/minus_small.png

.png

1041/no_internet_connection.html

.js

1041/no_internet_connection_malware.html

.js

1041/note.svg

1041/ping1.png

.png

1041/ping2.png

.png

1041/plus_small.png

.png

1041/print.css

1041/r_copyright.png

.png

1041/warning.svg

1042/blank.png

.png

1042/cicon9.png

.png

1042/default_gw.png

.png

1042/example.svg

1042/header_logo.png

.png

1042/hmcontent.html

1042/hmprojectstyles.css

1042/idh_wizard_activation_type.html

.js

1042/ielte8.css

1042/images.css

1042/important.svg

1042/index.html

.js

1042/infected_computer_by_malware.html

.js

1042/internet-explorer.css

1042/layout.css

1042/layout_mobile.css

1042/minus_small.png

.png

1042/no_internet_connection.html

.js

1042/no_internet_connection_malware.html

.js

1042/note.svg

1042/ping1.png

.png

1042/ping2.png

.png

1042/plus_small.png

.png

1042/print.css

1042/r_copyright.png

.png

1042/warning.svg

1043/blank.png

.png

1043/cicon9.png

.png

1043/default_gw.png

.png

1043/example.svg

1043/header_logo.png

.png

1043/hmcontent.html

1043/hmprojectstyles.css

1043/idh_wizard_activation_type.html

.js

1043/ielte8.css

1043/images.css

1043/important.svg

1043/index.html

.js

1043/infected_computer_by_malware.html

.js

1043/internet-explorer.css

1043/layout.css

1043/layout_mobile.css

1043/minus_small.png

.png

1043/no_internet_connection.html

.js

1043/no_internet_connection_malware.html

.js

1043/note.svg

1043/ping1.png

.png

1043/ping2.png

.png

1043/plus_small.png

.png

1043/print.css

1043/r_copyright.png

.png

1043/warning.svg

1044/blank.png

.png

1044/cicon9.png

.png

1044/default_gw.png

.png

1044/example.svg

1044/header_logo.png

.png

1044/hmcontent.html

1044/hmprojectstyles.css

1044/idh_wizard_activation_type.html

.js

1044/ielte8.css

1044/images.css

1044/important.svg

1044/index.html

.js

1044/infected_computer_by_malware.html

.js

1044/internet-explorer.css

1044/layout.css

1044/layout_mobile.css

1044/minus_small.png

.png

1044/no_internet_connection.html

.js

1044/no_internet_connection_malware.html

.js

1044/note.svg

1044/ping1.png

.png

1044/ping2.png

.png

1044/plus_small.png

.png

1044/print.css

1044/r_copyright.png

.png

1044/warning.svg

1045/blank.png

.png

1045/cicon9.png

.png

1045/default_gw.png

.png

1045/example.svg

1045/header_logo.png

.png

1045/hmcontent.html

1045/hmprojectstyles.css

1045/idh_wizard_activation_type.html

.js

1045/ielte8.css

1045/images.css

1045/important.svg

1045/index.html

.js

1045/infected_computer_by_malware.html

.js

1045/internet-explorer.css

1045/layout.css

1045/layout_mobile.css

1045/minus_small.png

.png

1045/no_internet_connection.html

.js

1045/no_internet_connection_malware.html

.js

1045/note.svg

1045/ping1.png

.png

1045/ping2.png

.png

1045/plus_small.png

.png

1045/print.css

1045/r_copyright.png

.png

1045/warning.svg

1046/blank.png

.png

1046/cicon9.png

.png

1046/default_gw.png

.png

1046/example.svg

1046/header_logo.png

.png

1046/hmcontent.html

1046/hmprojectstyles.css

1046/idh_wizard_activation_type.html

.js

1046/ielte8.css

1046/images.css

1046/important.svg

1046/index.html

.js

1046/infected_computer_by_malware.html

.js

1046/internet-explorer.css

1046/layout.css

1046/layout_mobile.css

1046/minus_small.png

.png

1046/no_internet_connection.html

.js

1046/no_internet_connection_malware.html

.js

1046/note.svg

1046/ping1.png

.png

1046/ping2.png

.png

1046/plus_small.png

.png

1046/print.css

1046/r_copyright.png

.png

1046/warning.svg

1048/blank.png

.png

1048/cicon9.png

.png

1048/default_gw.png

.png

1048/example.svg

1048/header_logo.png

.png

1048/hmcontent.html

1048/hmprojectstyles.css

1048/idh_wizard_activation_type.html

.js

1048/ielte8.css

1048/images.css

1048/important.svg

1048/index.html

.js

1048/infected_computer_by_malware.html

.js

1048/internet-explorer.css

1048/layout.css

1048/layout_mobile.css

1048/minus_small.png

.png

1048/no_internet_connection.html

.js

1048/no_internet_connection_malware.html

.js

1048/note.svg

1048/ping1.png

.png

1048/ping2.png

.png

1048/plus_small.png

.png

1048/print.css

1048/r_copyright.png

.png

1048/warning.svg

1049/blank.png

.png

1049/cicon9.png

.png

1049/default_gw.png

.png

1049/example.svg

1049/header_logo.png

.png

1049/hmcontent.html

1049/hmprojectstyles.css

1049/idh_wizard_activation_type.html

.js

1049/ielte8.css

1049/images.css

1049/important.svg

1049/index.html

.js

1049/infected_computer_by_malware.html

.js

1049/internet-explorer.css

1049/layout.css

1049/layout_mobile.css

1049/minus_small.png

.png

1049/no_internet_connection.html

.js

1049/no_internet_connection_malware.html

.js

1049/note.svg

1049/ping1.png

.png

1049/ping2.png

.png

1049/plus_small.png

.png

1049/print.css

1049/r_copyright.png

.png

1049/warning.svg

1050/blank.png

.png

1050/cicon9.png

.png

1050/default_gw.png

.png

1050/example.svg

1050/header_logo.png

.png

1050/hmcontent.html

1050/hmprojectstyles.css

1050/idh_wizard_activation_type.html

.js

1050/ielte8.css

1050/images.css

1050/important.svg

1050/index.html

.js

1050/infected_computer_by_malware.html

.js

1050/internet-explorer.css

1050/layout.css

1050/layout_mobile.css

1050/minus_small.png

.png

1050/no_internet_connection.html

.js

1050/no_internet_connection_malware.html

.js

1050/note.svg

1050/ping1.png

.png

1050/ping2.png

.png

1050/plus_small.png

.png

1050/print.css

1050/r_copyright.png

.png

1050/warning.svg

1051/blank.png

.png

1051/cicon9.png

.png

1051/default_gw.png

.png

1051/example.svg

1051/header_logo.png

.png

1051/hmcontent.html

1051/hmprojectstyles.css

1051/idh_wizard_activation_type.html

.js

1051/ielte8.css

1051/images.css

1051/important.svg

1051/index.html

.js

1051/infected_computer_by_malware.html

.js

1051/internet-explorer.css

1051/layout.css

1051/layout_mobile.css

1051/minus_small.png

.png

1051/no_internet_connection.html

.js

1051/no_internet_connection_malware.html

.js

1051/note.svg

1051/ping1.png

.png

1051/ping2.png

.png

1051/plus_small.png

.png

1051/print.css

1051/r_copyright.png

.png

1051/warning.svg

1053/blank.png

.png

1053/cicon9.png

.png

1053/default_gw.png

.png

1053/example.svg

1053/header_logo.png

.png

1053/hmcontent.html

1053/hmprojectstyles.css

1053/idh_wizard_activation_type.html

.js

1053/ielte8.css

1053/images.css

1053/important.svg

1053/index.html

.js

1053/infected_computer_by_malware.html

.js

1053/internet-explorer.css

1053/layout.css

1053/layout_mobile.css

1053/minus_small.png

.png

1053/no_internet_connection.html

.js

1053/no_internet_connection_malware.html

.js

1053/note.svg

1053/ping1.png

.png

1053/ping2.png

.png

1053/plus_small.png

.png

1053/print.css

1053/r_copyright.png

.png

1053/warning.svg

1054/blank.png

.png

1054/cicon9.png

.png

1054/default_gw.png

.png

1054/example.svg

1054/header_logo.png

.png

1054/hmcontent.html

1054/hmprojectstyles.css

1054/idh_wizard_activation_type.html

.js

1054/ielte8.css

1054/images.css

1054/important.svg

1054/index.html

.js

1054/infected_computer_by_malware.html

.js

1054/internet-explorer.css

1054/layout.css

1054/layout_mobile.css

1054/minus_small.png

.png

1054/no_internet_connection.html

.js

1054/no_internet_connection_malware.html

.js

1054/note.svg

1054/ping1.png

.png

1054/ping2.png

.png

1054/plus_small.png

.png

1054/print.css

1054/r_copyright.png

.png

1054/warning.svg

1055/blank.png

.png

1055/cicon9.png

.png

1055/default_gw.png

.png

1055/example.svg

1055/header_logo.png

.png

1055/hmcontent.html

1055/hmprojectstyles.css

1055/idh_wizard_activation_type.html

.js

1055/ielte8.css

1055/images.css

1055/important.svg

1055/index.html

.js

1055/infected_computer_by_malware.html

.js

1055/internet-explorer.css

1055/layout.css

1055/layout_mobile.css

1055/minus_small.png

.png

1055/no_internet_connection.html

.js

1055/no_internet_connection_malware.html

.js

1055/note.svg

1055/ping1.png

.png

1055/ping2.png

.png

1055/plus_small.png

.png

1055/print.css

1055/r_copyright.png

.png

1055/warning.svg

1057/blank.png

.png

1057/cicon9.png

.png

1057/default_gw.png

.png

1057/example.svg

1057/header_logo.png

.png

1057/hmcontent.html

1057/hmprojectstyles.css

1057/idh_wizard_activation_type.html

.js

1057/ielte8.css

1057/images.css

1057/important.svg

1057/index.html

.js

1057/infected_computer_by_malware.html

.js

1057/internet-explorer.css

1057/layout.css

1057/layout_mobile.css

1057/minus_small.png

.png

1057/no_internet_connection.html

.js

1057/no_internet_connection_malware.html

.js

1057/note.svg

1057/ping1.png

.png

1057/ping2.png

.png

1057/plus_small.png

.png

1057/print.css

1057/r_copyright.png

.png

1057/warning.svg

1058/blank.png

.png

1058/cicon9.png

.png

1058/default_gw.png

.png

1058/example.svg

1058/header_logo.png

.png

1058/hmcontent.html

1058/hmprojectstyles.css

1058/idh_wizard_activation_type.html

.js

1058/ielte8.css

1058/images.css

1058/important.svg

1058/index.html

.js

1058/infected_computer_by_malware.html

.js

1058/internet-explorer.css

1058/layout.css

1058/layout_mobile.css

1058/minus_small.png

.png

1058/no_internet_connection.html

.js

1058/no_internet_connection_malware.html

.js

1058/note.svg

1058/ping1.png

.png

1058/ping2.png

.png

1058/plus_small.png

.png

1058/print.css

1058/r_copyright.png

.png

1058/warning.svg

1060/blank.png

.png

1060/cicon9.png

.png

1060/default_gw.png

.png

1060/example.svg

1060/header_logo.png

.png

1060/hmcontent.html

1060/hmprojectstyles.css

1060/idh_wizard_activation_type.html

.js

1060/ielte8.css

1060/images.css

1060/important.svg

1060/index.html

.js

1060/infected_computer_by_malware.html

.js

1060/internet-explorer.css

1060/layout.css

1060/layout_mobile.css

1060/minus_small.png

.png

1060/no_internet_connection.html

.js

1060/no_internet_connection_malware.html

.js

1060/note.svg

1060/ping1.png

.png

1060/ping2.png

.png

1060/plus_small.png

.png

1060/print.css

1060/r_copyright.png

.png

1060/warning.svg

1061/blank.png

.png

1061/cicon9.png

.png

1061/default_gw.png

.png

1061/example.svg

1061/header_logo.png

.png

1061/hmcontent.html

1061/hmprojectstyles.css

1061/idh_wizard_activation_type.html

.js

1061/ielte8.css

1061/images.css

1061/important.svg

1061/index.html

.js

1061/infected_computer_by_malware.html

.js

1061/internet-explorer.css

1061/layout.css

1061/layout_mobile.css

1061/minus_small.png

.png

1061/no_internet_connection.html

.js

1061/no_internet_connection_malware.html

.js

1061/note.svg

1061/ping1.png

.png

1061/ping2.png

.png

1061/plus_small.png

.png

1061/print.css

1061/r_copyright.png

.png

1061/warning.svg

1063/blank.png

.png

1063/cicon9.png

.png

1063/default_gw.png

.png

1063/example.svg

1063/header_logo.png

.png

1063/hmcontent.html

1063/hmprojectstyles.css

1063/idh_wizard_activation_type.html

.js

1063/ielte8.css

1063/images.css

1063/important.svg

1063/index.html

.js

1063/infected_computer_by_malware.html

.js

1063/internet-explorer.css

1063/layout.css

1063/layout_mobile.css

1063/minus_small.png

.png

1063/no_internet_connection.html

.js

1063/no_internet_connection_malware.html

.js

1063/note.svg

1063/ping1.png

.png

1063/ping2.png

.png

1063/plus_small.png

.png

1063/print.css

1063/r_copyright.png

.png

1063/warning.svg

1066/blank.png

.png

1066/cicon9.png

.png

1066/default_gw.png

.png

1066/example.svg

1066/header_logo.png

.png

1066/hmcontent.html

1066/hmprojectstyles.css

1066/idh_wizard_activation_type.html

.js

1066/ielte8.css

1066/images.css

1066/important.svg

1066/index.html

.js

1066/infected_computer_by_malware.html

.js

1066/internet-explorer.css

1066/layout.css

1066/layout_mobile.css

1066/minus_small.png

.png

1066/no_internet_connection.html

.js

1066/no_internet_connection_malware.html

.js

1066/note.svg

1066/ping1.png

.png

1066/ping2.png

.png

1066/plus_small.png

.png

1066/print.css

1066/r_copyright.png

.png

1066/warning.svg

1087/blank.png

.png

1087/cicon9.png

.png

1087/default_gw.png

.png

1087/example.svg

1087/header_logo.png

.png

1087/hmcontent.html

1087/hmprojectstyles.css

1087/idh_wizard_activation_type.html

.js

1087/ielte8.css

1087/images.css

1087/important.svg

1087/index.html

.js

1087/infected_computer_by_malware.html

.js

1087/internet-explorer.css

1087/layout.css

1087/layout_mobile.css

1087/minus_small.png

.png

1087/no_internet_connection.html

.js

1087/no_internet_connection_malware.html

.js

1087/note.svg

1087/ping1.png

.png

1087/ping2.png

.png

1087/plus_small.png

.png

1087/print.css

1087/r_copyright.png

.png

1087/warning.svg

13322/blank.png

.png

13322/cicon9.png

.png

13322/default_gw.png

.png

13322/example.svg

13322/header_logo.png

.png

13322/hmcontent.html

13322/hmprojectstyles.css

13322/idh_wizard_activation_type.html

.js

13322/ielte8.css

13322/images.css

13322/important.svg

13322/index.html

.js

13322/infected_computer_by_malware.html

.js

13322/internet-explorer.css

13322/layout.css

13322/layout_mobile.css

13322/minus_small.png

.png

13322/no_internet_connection.html

.js

13322/no_internet_connection_malware.html

.js

13322/note.svg

13322/ping1.png

.png

13322/ping2.png

.png

13322/plus_small.png

.png

13322/print.css

13322/r_copyright.png

.png

13322/warning.svg

2052/blank.png

.png

2052/cicon9.png

.png

2052/default_gw.png

.png

2052/example.svg

2052/header_logo.png

.png

2052/hmcontent.html

2052/hmprojectstyles.css

2052/idh_wizard_activation_type.html

.js

2052/ielte8.css

2052/images.css

2052/important.svg

2052/index.html

.js

2052/infected_computer_by_malware.html

.js

2052/internet-explorer.css

2052/layout.css

2052/layout_mobile.css

2052/minus_small.png

.png

2052/no_internet_connection.html

.js

2052/no_internet_connection_malware.html

.js

2052/note.svg

2052/ping1.png

.png

2052/ping2.png

.png

2052/plus_small.png

.png

2052/print.css

2052/r_copyright.png

.png

2052/warning.svg

2074/blank.png

.png

2074/cicon9.png

.png

2074/default_gw.png

.png

2074/example.svg

2074/header_logo.png

.png

2074/hmcontent.html

2074/hmprojectstyles.css

2074/idh_wizard_activation_type.html

.js

2074/ielte8.css

2074/images.css

2074/important.svg

2074/index.html

.js

2074/infected_computer_by_malware.html

.js

2074/internet-explorer.css

2074/layout.css

2074/layout_mobile.css

2074/minus_small.png

.png

2074/no_internet_connection.html

.js

2074/no_internet_connection_malware.html

.js

2074/note.svg

2074/ping1.png

.png

2074/ping2.png

.png

2074/plus_small.png

.png

2074/print.css

2074/r_copyright.png

.png

2074/warning.svg

3073/blank.png

.png

3073/cicon9.png

.png

3073/default_gw.png

.png

3073/example.svg

3073/header_logo.png

.png

3073/hmcontent.html

3073/hmprojectstyles.css

3073/idh_wizard_activation_type.html

.js

3073/ielte8.css

3073/images.css

3073/important.svg

3073/index.html

.js

3073/infected_computer_by_malware.html

.js

3073/internet-explorer.css

3073/layout.css

3073/layout_mobile.css

3073/minus_small.png

.png

3073/no_internet_connection.html

.js

3073/no_internet_connection_malware.html

.js

3073/note.svg

3073/ping1.png

.png

3073/ping2.png

.png

3073/plus_small.png

.png

3073/print.css

3073/r_copyright.png

.png

3073/rtl.css

3073/rtl_mobile.css

3073/warning.svg

3082/blank.png

.png

3082/cicon9.png

.png

3082/default_gw.png

.png

3082/example.svg

3082/header_logo.png

.png

3082/hmcontent.html

3082/hmprojectstyles.css

3082/idh_wizard_activation_type.html

.js

3082/ielte8.css

3082/images.css

3082/important.svg

3082/index.html

.js

3082/infected_computer_by_malware.html

.js

3082/internet-explorer.css

3082/layout.css

3082/layout_mobile.css

3082/minus_small.png

.png

3082/no_internet_connection.html

.js

3082/no_internet_connection_malware.html

.js

3082/note.svg

3082/ping1.png

.png

3082/ping2.png

.png

3082/plus_small.png

.png

3082/print.css

3082/r_copyright.png

.png

3082/warning.svg

3084/blank.png

.png

3084/cicon9.png

.png

3084/default_gw.png

.png

3084/example.svg

3084/header_logo.png

.png

3084/hmcontent.html

3084/hmprojectstyles.css

3084/idh_wizard_activation_type.html

.js

3084/ielte8.css

3084/images.css

3084/important.svg

3084/index.html

.js

3084/infected_computer_by_malware.html

.js

3084/internet-explorer.css

3084/layout.css

3084/layout_mobile.css

3084/minus_small.png

.png

3084/no_internet_connection.html

.js

3084/no_internet_connection_malware.html

.js

3084/note.svg

3084/ping1.png

.png

3084/ping2.png

.png

3084/plus_small.png

.png

3084/print.css

3084/r_copyright.png

.png

3084/warning.svg

[ProductDir]/HttpUpdaterPlugin.dll

.dll windows:6 windows x86 arch:x86

d930e455cddc866d3a911557c1c3d90f

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

15:a1:d3:08:60:bb:85:7e:b2:76:73:8a:6c:2a:49:6b:60:27:44:01:e7:1f:6c:81:bb:e4:8d:24:67:4c:ee:84
Signer

Actual PE Digest

15:a1:d3:08:60:bb:85:7e:b2:76:73:8a:6c:2a:49:6b:60:27:44:01:e7:1f:6c:81:bb:e4:8d:24:67:4c:ee:84

Digest Algorithm

sha256

PE Digest Matches

true

15:a1:d3:08:60:bb:85:7e:b2:76:73:8a:6c:2a:49:6b:60:27:44:01:e7:1f:6c:81:bb:e4:8d:24:67:4c:ee:84
Signer

Actual PE Digest

15:a1:d3:08:60:bb:85:7e:b2:76:73:8a:6c:2a:49:6b:60:27:44:01:e7:1f:6c:81:bb:e4:8d:24:67:4c:ee:84

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

HttpUpdaterPlugin.pdb

Imports

kernel32

InitializeCriticalSection

GetLastError

Sleep

WriteFile

SetFilePointer

GetFileSize

GetFileInformationByHandle

QueryPerformanceCounter

DeleteCriticalSection

EnterCriticalSection

LeaveCriticalSection

GetProcAddress

LoadLibraryW

SetUnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

IsProcessorFeaturePresent

GetCurrentProcessId

GetCurrentThreadId

GetSystemTimeAsFileTime

InitializeSListHead

UnhandledExceptionFilter

vcruntime140

memset

__std_type_info_destroy_list

__std_exception_copy

__std_exception_destroy

_CxxThrowException

memcpy

_except_handler4_common

strstr

__CxxFrameHandler3

memmove

wcsrchr

api-ms-win-crt-runtime-l1-1-0

_cexit

_register_onexit_function

_initialize_onexit_table

_initialize_narrow_environment

_configure_narrow_argv

_seh_filter_dll

_initterm

_initterm_e

_crt_atexit

_execute_onexit_table

api-ms-win-crt-string-l1-1-0

_strnicmp

wcsncpy_s

_stricmp

wcscat_s

strcpy_s

api-ms-win-crt-heap-l1-1-0

realloc

malloc

_callnewh

free

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

__stdio_common_vswprintf_s

__stdio_common_vsnprintf_s

__stdio_common_vsnwprintf_s

__stdio_common_vsscanf

api-ms-win-crt-convert-l1-1-0

_i64toa_s

api-ms-win-crt-time-l1-1-0

_gmtime64_s

_time64

_time32

asctime_s

Exports

HTTPPlgInit

HTTPPlgRecv

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/InstSuppEx.dll

.dll windows:6 windows x86 arch:x86

4c4a1318f35da1d9d024a9b21d75e3c4

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4b:0b:19:ac:b1:6b:6b:dd:4c:25:c8:ce:d8:d3:c6:53:0c:60:f8:e9:78:dd:49:b8:21:ec:22:c8:37:68:c5:c6
Signer

Actual PE Digest

4b:0b:19:ac:b1:6b:6b:dd:4c:25:c8:ce:d8:d3:c6:53:0c:60:f8:e9:78:dd:49:b8:21:ec:22:c8:37:68:c5:c6

Digest Algorithm

sha256

PE Digest Matches

true

4b:0b:19:ac:b1:6b:6b:dd:4c:25:c8:ce:d8:d3:c6:53:0c:60:f8:e9:78:dd:49:b8:21:ec:22:c8:37:68:c5:c6
Signer

Actual PE Digest

4b:0b:19:ac:b1:6b:6b:dd:4c:25:c8:ce:d8:d3:c6:53:0c:60:f8:e9:78:dd:49:b8:21:ec:22:c8:37:68:c5:c6

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

InstSuppEx.pdb

Imports

kernel32

ReleaseMutex

OpenMutexW

OpenFileMappingW

GetModuleFileNameW

LoadLibraryW

GetProcAddress

FreeLibrary

GetLocaleInfoW

GetTimeZoneInformation

LoadLibraryExW

WriteConsoleW

HeapSize

GetProcessHeap

SetEnvironmentVariableW

FreeEnvironmentStringsW

GetEnvironmentStringsW

GetCommandLineW

GetCommandLineA

GetOEMCP

GetACP

IsValidCodePage

SetStdHandle

GetConsoleOutputCP

GetConsoleMode

GetStdHandle

HeapReAlloc

EnumSystemLocalesW

GetUserDefaultLCID

IsValidLocale

GetSystemTimeAsFileTime

UnmapViewOfFile

MapViewOfFile

VerSetConditionMask

GetFileInformationByHandle

GetTempFileNameW

GetFileSize

ReadFile

FindFirstFileExW

FileTimeToSystemTime

GetCurrentThread

GetFileAttributesW

GetEnvironmentVariableW

CreateProcessW

ExpandEnvironmentStringsW

FlushFileBuffers

CopyFileW

LocalFree

GetCurrentProcess

WideCharToMultiByte

MultiByteToWideChar

WriteFile

GetModuleHandleW

GetCurrentProcessId

SetFileAttributesW

GetCurrentDirectoryW

GetTempPathW

RemoveDirectoryW

FindClose

FindNextFileW

MoveFileExW

DeleteFileW

FindFirstFileW

Sleep

GetTickCount

GetCurrentThreadId

GetExitCodeThread

GetLastError

SetLastError

WaitForSingleObject

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

LCMapStringW

CompareStringW

InitializeCriticalSection

QueryPerformanceCounter

VerifyVersionInfoW

HeapFree

HeapAlloc

FormatMessageA

GetLocaleInfoEx

GetFileAttributesExW

GetFullPathNameW

AreFileApisANSI

GetStringTypeW

GetCPInfo

UnhandledExceptionFilter

SetUnhandledExceptionFilter

TerminateProcess

IsProcessorFeaturePresent

GetStartupInfoW

InitializeSListHead

RtlUnwind

RaiseException

InterlockedFlushSList

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

GetFileType

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

ExitProcess

user32

TranslateMessage

PeekMessageW

advapi32

ControlService

QueryServiceStatus

OpenSCManagerW

QueryServiceConfigW

ChangeServiceConfigW

RegEnumValueW

EqualSid

GetTokenInformation

OpenThreadToken

RegDeleteKeyW

SetFileSecurityW

MakeAbsoluteSD

GetFileSecurityW

RegEnumKeyExW

WaitServiceState

SetSecurityDescriptorDacl

FreeSid

AllocateAndInitializeSid

OpenProcessToken

RegDeleteKeyExW

RegDeleteValueW

DeleteService

StartServiceW

shell32

ShellExecuteExW

setupapi

SetupDiGetActualSectionToInstallW

Exports

Magic001

Magic002

Magic003

Magic004

Sections

.text
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/NOTICE

[ProductDir]/ProtobufLite.dll

.dll windows:6 windows x86 arch:x86

c77b534964a35daedec8619337ca3e3b

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

34:b8:c3:0e:c8:9e:38:45:f9:18:56:9e:d4:9d:df:94:69:99:13:ae
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

52:5f:fa:e3:0c:19:2b:fe:ac:5b:d3:da:5d:d2:2c:1e:e9:04:4b:3c:f1:97:bb:8e:c7:b5:a1:a6:bb:44:2b:0f
Signer

Actual PE Digest

52:5f:fa:e3:0c:19:2b:fe:ac:5b:d3:da:5d:d2:2c:1e:e9:04:4b:3c:f1:97:bb:8e:c7:b5:a1:a6:bb:44:2b:0f

Digest Algorithm

sha256

PE Digest Matches

true

52:5f:fa:e3:0c:19:2b:fe:ac:5b:d3:da:5d:d2:2c:1e:e9:04:4b:3c:f1:97:bb:8e:c7:b5:a1:a6:bb:44:2b:0f
Signer

Actual PE Digest

52:5f:fa:e3:0c:19:2b:fe:ac:5b:d3:da:5d:d2:2c:1e:e9:04:4b:3c:f1:97:bb:8e:c7:b5:a1:a6:bb:44:2b:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

ProtobufLite.pdb

Imports

msvcp140

??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ

?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ

?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ

?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ

?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z

?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z

?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z

?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ

?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z

??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

?good@ios_base@std@@QBE_NXZ

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z

?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z

?fail@ios_base@std@@QBE_NXZ

?eof@ios_base@std@@QBE_NXZ

?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z

??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ

??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z

?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z

??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

?_Xbad_function_call@std@@YAXXZ

?_Xout_of_range@std@@YAXPBD@Z

?uncaught_exceptions@std@@YAHXZ

_Mtx_unlock

_Mtx_init_in_situ

_Mtx_lock

_Mtx_destroy_in_situ

?_Throw_Cpp_error@std@@YAXH@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

?_Xlength_error@std@@YAXPBD@Z

kernel32

InitializeSListHead

GetCurrentThreadId

GetCurrentProcessId

QueryPerformanceCounter

IsDebuggerPresent

IsProcessorFeaturePresent

TerminateProcess

GetCurrentProcess

SetUnhandledExceptionFilter

UnhandledExceptionFilter

SleepConditionVariableSRW

WakeAllConditionVariable

AcquireSRWLockExclusive

ReleaseSRWLockExclusive

InitOnceBeginInitialize

InitOnceComplete

WideCharToMultiByte

GetCurrentDirectoryW

GetLastError

MultiByteToWideChar

FindClose

FindNextFileW

SetLastError

FindFirstFileW

GetSystemTimeAsFileTime

vcruntime140

__CxxFrameHandler3

__std_exception_destroy

__std_exception_copy

__std_terminate

_purecall

strchr

__current_exception

__current_exception_context

_CxxThrowException

_except_handler4_common

memset

__std_type_info_destroy_list

memcpy

memchr

memmove

api-ms-win-crt-runtime-l1-1-0

_initterm

strerror

_invalid_parameter_noinfo_noreturn

abort

_initterm_e

_cexit

terminate

_seh_filter_dll

_configure_narrow_argv

_initialize_narrow_environment

_initialize_onexit_table

_register_onexit_function

_execute_onexit_table

_crt_atexit

_errno

api-ms-win-crt-filesystem-l1-1-0

_wstat64i32

_wmkdir

_waccess

_wchdir

api-ms-win-crt-stdio-l1-1-0

_dup

_wfopen

_dup2

_read

__stdio_common_vsprintf

_wsopen_dispatch

_setmode

_close

_write

api-ms-win-crt-string-l1-1-0

isalpha

iswalpha

strpbrk

api-ms-win-crt-heap-l1-1-0

free

malloc

_callnewh

api-ms-win-crt-convert-l1-1-0

strtod

strtoul

strtol

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

ceil

Exports

??$DoClear@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AAEXXZ

??$DoMergeFrom@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??$DoSwap@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AAEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0?$RepeatedField@H@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@H@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@H@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@H@protobuf@google@@QAE@XZ

??0?$RepeatedField@I@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@I@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@I@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@I@protobuf@google@@QAE@XZ

??0?$RepeatedField@M@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@M@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@M@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@M@protobuf@google@@QAE@XZ

??0?$RepeatedField@N@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@N@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@N@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@N@protobuf@google@@QAE@XZ

??0?$RepeatedField@_J@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@_J@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@_J@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@_J@protobuf@google@@QAE@XZ

??0?$RepeatedField@_K@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@_K@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@_K@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@_K@protobuf@google@@QAE@XZ

??0?$RepeatedField@_N@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedField@_N@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedField@_N@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedField@_N@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@H@internal@protobuf@google@@AAE@PAH@Z

??0?$RepeatedIterator@H@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@I@internal@protobuf@google@@AAE@PAI@Z

??0?$RepeatedIterator@I@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@M@internal@protobuf@google@@AAE@PAM@Z

??0?$RepeatedIterator@M@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@N@internal@protobuf@google@@AAE@PAN@Z

??0?$RepeatedIterator@N@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@_J@internal@protobuf@google@@AAE@PA_J@Z

??0?$RepeatedIterator@_J@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@_K@internal@protobuf@google@@AAE@PA_K@Z

??0?$RepeatedIterator@_K@internal@protobuf@google@@QAE@XZ

??0?$RepeatedIterator@_N@internal@protobuf@google@@AAE@PA_N@Z

??0?$RepeatedIterator@_N@internal@protobuf@google@@QAE@XZ

??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@$$QAV012@@Z

??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@ABV012@@Z

??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@PAVArena@12@@Z

??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@XZ

??0AlphaNum@strings@protobuf@google@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0AlphaNum@strings@protobuf@google@@QAE@H@Z

??0AlphaNum@strings@protobuf@google@@QAE@I@Z

??0AlphaNum@strings@protobuf@google@@QAE@J@Z

??0AlphaNum@strings@protobuf@google@@QAE@K@Z

??0AlphaNum@strings@protobuf@google@@QAE@M@Z

??0AlphaNum@strings@protobuf@google@@QAE@N@Z

??0AlphaNum@strings@protobuf@google@@QAE@PBD@Z

??0AlphaNum@strings@protobuf@google@@QAE@UHex@123@@Z

??0AlphaNum@strings@protobuf@google@@QAE@VStringPiece@stringpiece_internal@23@@Z

??0AlphaNum@strings@protobuf@google@@QAE@_J@Z

??0AlphaNum@strings@protobuf@google@@QAE@_K@Z

??0AnyMetadata@internal@protobuf@google@@QAE@PAUArenaStringPtr@123@0@Z

??0Arena@protobuf@google@@AAE@UMessageOwned@internal@12@@Z

??0Arena@protobuf@google@@QAE@ABUArenaOptions@12@@Z

??0Arena@protobuf@google@@QAE@PADI@Z

??0Arena@protobuf@google@@QAE@XZ

??0ArenaMetricsCollector@internal@protobuf@google@@QAE@ABV0123@@Z

??0ArenaMetricsCollector@internal@protobuf@google@@QAE@_N@Z

??0ArenaStringPtr@internal@protobuf@google@@QAE@PAV?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$07@123@UConstantInitialized@123@@Z

??0ArrayByteSource@strings@protobuf@google@@QAE@VStringPiece@stringpiece_internal@23@@Z

??0ArrayInputStream@io@protobuf@google@@QAE@PBXHH@Z

??0ArrayOutputStream@io@protobuf@google@@QAE@PAXHH@Z

??0ByteSink@strings@protobuf@google@@QAE@XZ

??0ByteSource@strings@protobuf@google@@QAE@XZ

??0CachedSize@internal@protobuf@google@@QAE@XZ

??0CheckedArrayByteSink@strings@protobuf@google@@QAE@PADI@Z

??0Closure@protobuf@google@@QAE@XZ

??0CodedInputStream@io@protobuf@google@@QAE@PAVZeroCopyInputStream@123@@Z

??0CodedInputStream@io@protobuf@google@@QAE@PBEH@Z

??0CodedOutputStreamFieldSkipper@internal@protobuf@google@@QAE@ABV0123@@Z

??0CodedOutputStreamFieldSkipper@internal@protobuf@google@@QAE@PAVCodedOutputStream@io@23@@Z

??0ConcatenatingInputStream@io@protobuf@google@@QAE@QBQAVZeroCopyInputStream@123@H@Z

??0CopyingFileInputStream@FileInputStream@io@protobuf@google@@QAE@H@Z

??0CopyingFileOutputStream@FileOutputStream@io@protobuf@google@@QAE@H@Z

??0CopyingInputStream@io@protobuf@google@@QAE@ABV0123@@Z

??0CopyingInputStream@io@protobuf@google@@QAE@XZ

??0CopyingInputStreamAdaptor@io@protobuf@google@@QAE@PAVCopyingInputStream@123@H@Z

??0CopyingIstreamInputStream@IstreamInputStream@io@protobuf@google@@QAE@PAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z

??0CopyingOstreamOutputStream@OstreamOutputStream@io@protobuf@google@@QAE@PAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z

??0CopyingOutputStream@io@protobuf@google@@QAE@ABV0123@@Z

??0CopyingOutputStream@io@protobuf@google@@QAE@XZ

??0CopyingOutputStreamAdaptor@io@protobuf@google@@QAE@PAVCopyingOutputStream@123@H@Z

??0EpsCopyInputStream@internal@protobuf@google@@QAE@_N@Z

??0EpsCopyOutputStream@io@protobuf@google@@QAE@PAVZeroCopyOutputStream@123@_NPAPAE@Z

??0EpsCopyOutputStream@io@protobuf@google@@QAE@PAXHPAVZeroCopyOutputStream@123@_NPAPAE@Z

??0EpsCopyOutputStream@io@protobuf@google@@QAE@PAXH_N@Z

??0ExtensionSet@internal@protobuf@google@@QAE@PAVArena@23@@Z

??0ExtensionSet@internal@protobuf@google@@QAE@UArenaInitialized@123@PAVArena@23@@Z

??0ExtensionSet@internal@protobuf@google@@QAE@XZ

??0FieldSkipper@internal@protobuf@google@@QAE@ABV0123@@Z

??0FieldSkipper@internal@protobuf@google@@QAE@XZ

??0FileInputStream@io@protobuf@google@@QAE@HH@Z

??0FileOutputStream@io@protobuf@google@@QAE@HH@Z

??0FunctionClosure0@internal@protobuf@google@@QAE@P6AXXZ_N@Z

??0GeneratedExtensionFinder@internal@protobuf@google@@QAE@PBVMessageLite@23@@Z

??0GrowingArrayByteSink@strings@protobuf@google@@QAE@I@Z

??0ImplicitWeakMessage@internal@protobuf@google@@QAE@PAVArena@23@@Z

??0ImplicitWeakMessage@internal@protobuf@google@@QAE@UConstantInitialized@123@@Z

??0ImplicitWeakMessage@internal@protobuf@google@@QAE@XZ

??0InlinedStringField@internal@protobuf@google@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0InlinedStringField@internal@protobuf@google@@QAE@PAVArena@23@@Z

??0InlinedStringField@internal@protobuf@google@@QAE@PBV?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$00@123@_N@Z

??0InlinedStringField@internal@protobuf@google@@QAE@XZ

??0InternalMetadata@internal@protobuf@google@@QAE@PAVArena@23@_N@Z

??0InternalMetadata@internal@protobuf@google@@QAE@XZ

??0IstreamInputStream@io@protobuf@google@@QAE@PAV?$basic_istream@DU?$char_traits@D@std@@@std@@H@Z

??0LazyMessageExtension@ExtensionSet@internal@protobuf@google@@QAE@XZ

??0LazyString@internal@protobuf@google@@QAE@XZ

??0LimitByteSource@strings@protobuf@google@@QAE@PAVByteSource@123@I@Z

??0LimitingInputStream@io@protobuf@google@@QAE@PAVZeroCopyInputStream@123@_J@Z

??0LiteUnknownFieldSetter@internal@protobuf@google@@QAE@ABV0123@@Z

??0LiteUnknownFieldSetter@internal@protobuf@google@@QAE@PAVInternalMetadata@123@@Z

??0MessageLite@protobuf@google@@IAE@PAVArena@12@_N@Z

??0MessageLite@protobuf@google@@QAE@XZ

??0MutexLock@internal@protobuf@google@@QAE@PAVWrappedMutex@123@@Z

??0MutexLockMaybe@internal@protobuf@google@@QAE@PAVWrappedMutex@123@@Z

??0NullByteSink@strings@protobuf@google@@QAE@XZ

??0OstreamOutputStream@io@protobuf@google@@QAE@PAV?$basic_ostream@DU?$char_traits@D@std@@@std@@H@Z

??0RepeatedPrimitiveDefaults@internal@protobuf@google@@QAE@$$QAV0123@@Z

??0RepeatedPrimitiveDefaults@internal@protobuf@google@@QAE@ABV0123@@Z

??0RepeatedPrimitiveDefaults@internal@protobuf@google@@QAE@XZ

??0RepeatedPtrFieldBase@internal@protobuf@google@@IAE@PAVArena@23@@Z

??0RepeatedPtrFieldBase@internal@protobuf@google@@IAE@XZ

??0SerialArena@internal@protobuf@google@@AAE@PAUBlock@0123@PAXPAUThreadSafeArenaStats@123@@Z

??0Status@status_internal@util@protobuf@google@@QAE@ABV01234@@Z

??0Status@status_internal@util@protobuf@google@@QAE@W4StatusCode@1234@VStringPiece@stringpiece_internal@34@@Z

??0Status@status_internal@util@protobuf@google@@QAE@XZ

??0StringByteSink@strings@protobuf@google@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0StringOutputStream@io@protobuf@google@@QAE@PAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

??0StringPiece@stringpiece_internal@protobuf@google@@QAE@PBD@Z

??0StringPiece@stringpiece_internal@protobuf@google@@QAE@PBDI@Z

??0StringPiece@stringpiece_internal@protobuf@google@@QAE@V?$basic_string_view@DU?$char_traits@D@std@@@std@@@Z

??0StringPiece@stringpiece_internal@protobuf@google@@QAE@XZ

??0ThreadSafeArena@internal@protobuf@google@@QAE@PADI@Z

??0ThreadSafeArena@internal@protobuf@google@@QAE@PAXIABUAllocationPolicy@123@@Z

??0ThreadSafeArena@internal@protobuf@google@@QAE@UMessageOwned@123@@Z

??0ThreadSafeArena@internal@protobuf@google@@QAE@XZ

??0UncheckedArrayByteSink@strings@protobuf@google@@QAE@PAD@Z

??0WrappedMutex@internal@protobuf@google@@QAE@XZ

??0ZeroCopyInputStream@io@protobuf@google@@QAE@XZ

??0ZeroCopyOutputStream@io@protobuf@google@@QAE@XZ

??0uint128@protobuf@google@@QAE@ABUuint128_pod@12@@Z

??0uint128@protobuf@google@@QAE@H@Z

??0uint128@protobuf@google@@QAE@I@Z

??0uint128@protobuf@google@@QAE@XZ

??0uint128@protobuf@google@@QAE@_K0@Z

??0uint128@protobuf@google@@QAE@_K@Z

??1?$RepeatedField@H@protobuf@google@@QAE@XZ

??1?$RepeatedField@I@protobuf@google@@QAE@XZ

??1?$RepeatedField@M@protobuf@google@@QAE@XZ

??1?$RepeatedField@N@protobuf@google@@QAE@XZ

??1?$RepeatedField@_J@protobuf@google@@QAE@XZ

??1?$RepeatedField@_K@protobuf@google@@QAE@XZ

??1?$RepeatedField@_N@protobuf@google@@QAE@XZ

??1?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@XZ

??1Arena@protobuf@google@@QAE@XZ

??1ArrayByteSource@strings@protobuf@google@@UAE@XZ

??1ArrayInputStream@io@protobuf@google@@UAE@XZ

??1ArrayOutputStream@io@protobuf@google@@UAE@XZ

??1ByteSink@strings@protobuf@google@@UAE@XZ

??1ByteSource@strings@protobuf@google@@UAE@XZ

??1CheckedArrayByteSink@strings@protobuf@google@@UAE@XZ

??1Closure@protobuf@google@@UAE@XZ

??1CodedInputStream@io@protobuf@google@@QAE@XZ

??1CodedOutputStream@io@protobuf@google@@QAE@XZ

??1CodedOutputStreamFieldSkipper@internal@protobuf@google@@UAE@XZ

??1ConcatenatingInputStream@io@protobuf@google@@UAE@XZ

??1CopyingFileInputStream@FileInputStream@io@protobuf@google@@UAE@XZ

??1CopyingFileOutputStream@FileOutputStream@io@protobuf@google@@UAE@XZ

??1CopyingInputStream@io@protobuf@google@@UAE@XZ

??1CopyingInputStreamAdaptor@io@protobuf@google@@UAE@XZ

??1CopyingIstreamInputStream@IstreamInputStream@io@protobuf@google@@UAE@XZ

??1CopyingOstreamOutputStream@OstreamOutputStream@io@protobuf@google@@UAE@XZ

??1CopyingOutputStream@io@protobuf@google@@UAE@XZ

??1CopyingOutputStreamAdaptor@io@protobuf@google@@UAE@XZ

??1ExtensionSet@internal@protobuf@google@@QAE@XZ

??1FieldSkipper@internal@protobuf@google@@UAE@XZ

??1FileInputStream@io@protobuf@google@@UAE@XZ

??1FileOutputStream@io@protobuf@google@@UAE@XZ

??1FunctionClosure0@internal@protobuf@google@@UAE@XZ

??1GrowingArrayByteSink@strings@protobuf@google@@UAE@XZ

??1ImplicitWeakMessage@internal@protobuf@google@@UAE@XZ

??1InlinedStringField@internal@protobuf@google@@QAE@XZ

??1InternalMetadata@internal@protobuf@google@@QAE@XZ

??1IstreamInputStream@io@protobuf@google@@UAE@XZ

??1LazyMessageExtension@ExtensionSet@internal@protobuf@google@@UAE@XZ

??1LimitByteSource@strings@protobuf@google@@UAE@XZ

??1LimitingInputStream@io@protobuf@google@@UAE@XZ

??1LiteUnknownFieldSetter@internal@protobuf@google@@QAE@XZ

??1MessageLite@protobuf@google@@UAE@XZ

??1MutexLock@internal@protobuf@google@@QAE@XZ

??1MutexLockMaybe@internal@protobuf@google@@QAE@XZ

??1NullByteSink@strings@protobuf@google@@UAE@XZ

??1OstreamOutputStream@io@protobuf@google@@UAE@XZ

??1RepeatedPrimitiveDefaults@internal@protobuf@google@@QAE@XZ

??1RepeatedPtrFieldBase@internal@protobuf@google@@IAE@XZ

??1Status@status_internal@util@protobuf@google@@QAE@XZ

??1StringByteSink@strings@protobuf@google@@UAE@XZ

??1StringOutputStream@io@protobuf@google@@UAE@XZ

??1ThreadSafeArena@internal@protobuf@google@@QAE@XZ

??1UncheckedArrayByteSink@strings@protobuf@google@@UAE@XZ

??1WrappedMutex@internal@protobuf@google@@QAE@XZ

??1ZeroCopyInputStream@io@protobuf@google@@UAE@XZ

??1ZeroCopyOutputStream@io@protobuf@google@@UAE@XZ

??4?$RepeatedField@H@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@H@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@I@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@I@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@M@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@M@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@N@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@N@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@_J@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@_J@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@_K@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@_K@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedField@_N@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedField@_N@protobuf@google@@QAEAAV012@ABV012@@Z

??4?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEAAV012@ABV012@@Z

??4ArenaStringPtr@internal@protobuf@google@@QAEAAU0123@$$QAU0123@@Z

??4ArenaStringPtr@internal@protobuf@google@@QAEAAU0123@ABU0123@@Z

??4CodedOutputStreamFieldSkipper@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4CopyingInputStream@io@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4CopyingOutputStream@io@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4EpsCopyInputStream@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4EpsCopyInputStream@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4EpsCopyOutputStream@io@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4EpsCopyOutputStream@io@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4FieldSkipper@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4GeneratedExtensionFinder@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4GeneratedExtensionFinder@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4InlinedStringField@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4InternalMetadata@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4LiteUnknownFieldSetter@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4LogSilencer@protobuf@google@@QAEAAV012@ABV012@@Z

??4ParseContext@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4ParseContext@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4RepeatedPrimitiveDefaults@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4RepeatedPrimitiveDefaults@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4RepeatedStringTypeTraits@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4RepeatedStringTypeTraits@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4Status@status_internal@util@protobuf@google@@QAEAAV01234@ABV01234@@Z

??4StatusOrHelper@statusor_internal@util@protobuf@google@@QAEAAV01234@$$QAV01234@@Z

??4StatusOrHelper@statusor_internal@util@protobuf@google@@QAEAAV01234@ABV01234@@Z

??4StringPiece@stringpiece_internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4StringPiece@stringpiece_internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4StringTypeTraits@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4StringTypeTraits@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4TcParser@internal@protobuf@google@@QAEAAV0123@$$QAV0123@@Z

??4TcParser@internal@protobuf@google@@QAEAAV0123@ABV0123@@Z

??4uint128@protobuf@google@@QAEAAV012@$$QAV012@@Z

??4uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??6protobuf@google@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV23@ABVuint128@01@@Z

??6status_internal@util@protobuf@google@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV45@ABVStatus@0123@@Z

??8Status@status_internal@util@protobuf@google@@QBE_NABV01234@@Z

??9Status@status_internal@util@protobuf@google@@QBE_NABV01234@@Z

??A?$RepeatedField@H@protobuf@google@@QAEAAHH@Z

??A?$RepeatedField@H@protobuf@google@@QBEABHH@Z

??A?$RepeatedField@I@protobuf@google@@QAEAAIH@Z

??A?$RepeatedField@I@protobuf@google@@QBEABIH@Z

??A?$RepeatedField@M@protobuf@google@@QAEAAMH@Z

??A?$RepeatedField@M@protobuf@google@@QBEABMH@Z

??A?$RepeatedField@N@protobuf@google@@QAEAANH@Z

??A?$RepeatedField@N@protobuf@google@@QBEABNH@Z

??A?$RepeatedField@_J@protobuf@google@@QAEAA_JH@Z

??A?$RepeatedField@_J@protobuf@google@@QBEAB_JH@Z

??A?$RepeatedField@_K@protobuf@google@@QAEAA_KH@Z

??A?$RepeatedField@_K@protobuf@google@@QBEAB_KH@Z

??A?$RepeatedField@_N@protobuf@google@@QAEAA_NH@Z

??A?$RepeatedField@_N@protobuf@google@@QBEAB_NH@Z

??A?$RepeatedIterator@H@internal@protobuf@google@@QBEAAHH@Z

??A?$RepeatedIterator@I@internal@protobuf@google@@QBEAAIH@Z

??A?$RepeatedIterator@M@internal@protobuf@google@@QBEAAMH@Z

??A?$RepeatedIterator@N@internal@protobuf@google@@QBEAANH@Z

??A?$RepeatedIterator@_J@internal@protobuf@google@@QBEAA_JH@Z

??A?$RepeatedIterator@_K@internal@protobuf@google@@QBEAA_KH@Z

??A?$RepeatedIterator@_N@internal@protobuf@google@@QBEAA_NH@Z

??A?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z

??A?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z

??AStringPiece@stringpiece_internal@protobuf@google@@QBEDI@Z

??BStringPiece@stringpiece_internal@protobuf@google@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

??C?$RepeatedIterator@H@internal@protobuf@google@@QBEPAHXZ

??C?$RepeatedIterator@I@internal@protobuf@google@@QBEPAIXZ

??C?$RepeatedIterator@M@internal@protobuf@google@@QBEPAMXZ

??C?$RepeatedIterator@N@internal@protobuf@google@@QBEPANXZ

??C?$RepeatedIterator@_J@internal@protobuf@google@@QBEPA_JXZ

??C?$RepeatedIterator@_K@internal@protobuf@google@@QBEPA_KXZ

??C?$RepeatedIterator@_N@internal@protobuf@google@@QBEPA_NXZ

??D?$RepeatedIterator@H@internal@protobuf@google@@QBEAAHXZ

??D?$RepeatedIterator@I@internal@protobuf@google@@QBEAAIXZ

??D?$RepeatedIterator@M@internal@protobuf@google@@QBEAAMXZ

??D?$RepeatedIterator@N@internal@protobuf@google@@QBEAANXZ

??D?$RepeatedIterator@_J@internal@protobuf@google@@QBEAA_JXZ

??D?$RepeatedIterator@_K@internal@protobuf@google@@QBEAA_KXZ

??D?$RepeatedIterator@_N@internal@protobuf@google@@QBEAA_NXZ

??E?$RepeatedIterator@H@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@I@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@M@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@N@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@_J@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@_K@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@XZ

??E?$RepeatedIterator@_N@internal@protobuf@google@@QAE?AV0123@H@Z

??E?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@XZ

??Euint128@protobuf@google@@QAE?AV012@H@Z

??Euint128@protobuf@google@@QAEAAV012@XZ

??F?$RepeatedIterator@H@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@I@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@M@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@N@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@_J@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@_K@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@XZ

??F?$RepeatedIterator@_N@internal@protobuf@google@@QAE?AV0123@H@Z

??F?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@XZ

??Fuint128@protobuf@google@@QAE?AV012@H@Z

??Fuint128@protobuf@google@@QAEAAV012@XZ

??G?$RepeatedIterator@H@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@I@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@M@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@N@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@_J@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@_K@internal@protobuf@google@@QBE?AV0123@H@Z

??G?$RepeatedIterator@_N@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@H@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@I@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@M@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@N@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@_J@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@_K@internal@protobuf@google@@QBE?AV0123@H@Z

??H?$RepeatedIterator@_N@internal@protobuf@google@@QBE?AV0123@H@Z

??Xuint128@protobuf@google@@QAEAAV012@ABV012@@Z

??Y?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@H@Z

??Y?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@H@Z

??Yuint128@protobuf@google@@QAEAAV012@ABV012@@Z

??Z?$RepeatedIterator@H@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@I@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@M@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@N@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@_J@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@_K@internal@protobuf@google@@QAEAAV0123@H@Z

??Z?$RepeatedIterator@_N@internal@protobuf@google@@QAEAAV0123@H@Z

??Zuint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_0uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_1uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_2uint128@protobuf@google@@QAEAAV012@H@Z

??_3uint128@protobuf@google@@QAEAAV012@H@Z

??_4uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_5uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_6uint128@protobuf@google@@QAEAAV012@ABV012@@Z

??_7ArenaMetricsCollector@internal@protobuf@google@@6B@

??_7ArrayByteSource@strings@protobuf@google@@6B@

??_7ArrayInputStream@io@protobuf@google@@6B@

??_7ArrayOutputStream@io@protobuf@google@@6B@

??_7ByteSink@strings@protobuf@google@@6B@

??_7ByteSource@strings@protobuf@google@@6B@

??_7CheckedArrayByteSink@strings@protobuf@google@@6B@

??_7Closure@protobuf@google@@6B@

??_7CodedOutputStreamFieldSkipper@internal@protobuf@google@@6B@

??_7ConcatenatingInputStream@io@protobuf@google@@6B@

??_7CopyingFileInputStream@FileInputStream@io@protobuf@google@@6B@

??_7CopyingFileOutputStream@FileOutputStream@io@protobuf@google@@6B@

??_7CopyingInputStream@io@protobuf@google@@6B@

??_7CopyingInputStreamAdaptor@io@protobuf@google@@6B@

??_7CopyingIstreamInputStream@IstreamInputStream@io@protobuf@google@@6B@

??_7CopyingOstreamOutputStream@OstreamOutputStream@io@protobuf@google@@6B@

??_7CopyingOutputStream@io@protobuf@google@@6B@

??_7CopyingOutputStreamAdaptor@io@protobuf@google@@6B@

??_7FieldSkipper@internal@protobuf@google@@6B@

??_7FileInputStream@io@protobuf@google@@6B@

??_7FileOutputStream@io@protobuf@google@@6B@

??_7FunctionClosure0@internal@protobuf@google@@6B@

??_7GrowingArrayByteSink@strings@protobuf@google@@6B@

??_7ImplicitWeakMessage@internal@protobuf@google@@6B@

??_7IstreamInputStream@io@protobuf@google@@6B@

??_7LazyMessageExtension@ExtensionSet@internal@protobuf@google@@6B@

??_7LimitByteSource@strings@protobuf@google@@6B@

??_7LimitingInputStream@io@protobuf@google@@6B@

??_7MessageLite@protobuf@google@@6B@

??_7NullByteSink@strings@protobuf@google@@6B@

??_7OstreamOutputStream@io@protobuf@google@@6B@

??_7StringByteSink@strings@protobuf@google@@6B@

??_7StringOutputStream@io@protobuf@google@@6B@

??_7UncheckedArrayByteSink@strings@protobuf@google@@6B@

??_7ZeroCopyInputStream@io@protobuf@google@@6B@

??_7ZeroCopyOutputStream@io@protobuf@google@@6B@

?AbortedError@status_internal@util@protobuf@google@@YA?AVStatus@1234@VStringPiece@stringpiece_internal@34@@Z

?Add@?$RepeatedField@H@protobuf@google@@QAEPAHXZ

?Add@?$RepeatedField@H@protobuf@google@@QAEXABH@Z

?Add@?$RepeatedField@I@protobuf@google@@QAEPAIXZ

?Add@?$RepeatedField@I@protobuf@google@@QAEXABI@Z

?Add@?$RepeatedField@M@protobuf@google@@QAEPAMXZ

?Add@?$RepeatedField@M@protobuf@google@@QAEXABM@Z

?Add@?$RepeatedField@N@protobuf@google@@QAEPANXZ

?Add@?$RepeatedField@N@protobuf@google@@QAEXABN@Z

?Add@?$RepeatedField@_J@protobuf@google@@QAEPA_JXZ

?Add@?$RepeatedField@_J@protobuf@google@@QAEXAB_J@Z

?Add@?$RepeatedField@_K@protobuf@google@@QAEPA_KXZ

?Add@?$RepeatedField@_K@protobuf@google@@QAEXAB_K@Z

?Add@?$RepeatedField@_N@protobuf@google@@QAEPA_NXZ

?Add@?$RepeatedField@_N@protobuf@google@@QAEXAB_N@Z

?Add@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?Add@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEX$$QAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?Add@RepeatedStringTypeTraits@internal@protobuf@google@@SAPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HEPAVExtensionSet@234@@Z

?Add@RepeatedStringTypeTraits@internal@protobuf@google@@SAXHE_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVExtensionSet@234@@Z

?AddAllocated@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?AddAlreadyReserved@?$RepeatedField@H@protobuf@google@@QAEPAHXZ

?AddAlreadyReserved@?$RepeatedField@H@protobuf@google@@QAEXABH@Z

?AddAlreadyReserved@?$RepeatedField@I@protobuf@google@@QAEPAIXZ

?AddAlreadyReserved@?$RepeatedField@I@protobuf@google@@QAEXABI@Z

?AddAlreadyReserved@?$RepeatedField@M@protobuf@google@@QAEPAMXZ

?AddAlreadyReserved@?$RepeatedField@M@protobuf@google@@QAEXABM@Z

?AddAlreadyReserved@?$RepeatedField@N@protobuf@google@@QAEPANXZ

?AddAlreadyReserved@?$RepeatedField@N@protobuf@google@@QAEXABN@Z

?AddAlreadyReserved@?$RepeatedField@_J@protobuf@google@@QAEPA_JXZ

?AddAlreadyReserved@?$RepeatedField@_J@protobuf@google@@QAEXAB_J@Z

?AddAlreadyReserved@?$RepeatedField@_K@protobuf@google@@QAEPA_KXZ

?AddAlreadyReserved@?$RepeatedField@_K@protobuf@google@@QAEXAB_K@Z

?AddAlreadyReserved@?$RepeatedField@_N@protobuf@google@@QAEPA_NXZ

?AddAlreadyReserved@?$RepeatedField@_N@protobuf@google@@QAEXAB_N@Z

?AddBool@ExtensionSet@internal@protobuf@google@@QAEXHE_N0PBVFieldDescriptor@34@@Z

?AddCleanup@SerialArena@internal@protobuf@google@@QAEXPAXP6AX0@ZPBUAllocationPolicy@234@@Z

?AddCleanup@ThreadSafeArena@internal@protobuf@google@@QAEXPAXP6AX0@Z@Z

?AddCleared@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?AddDouble@ExtensionSet@internal@protobuf@google@@QAEXHE_NNPBVFieldDescriptor@34@@Z

?AddEnum@ExtensionSet@internal@protobuf@google@@QAEXHE_NHPBVFieldDescriptor@34@@Z

?AddFloat@ExtensionSet@internal@protobuf@google@@QAEXHE_NMPBVFieldDescriptor@34@@Z

?AddInt32@ExtensionSet@internal@protobuf@google@@QAEXHE_NHPBVFieldDescriptor@34@@Z

?AddInt64@ExtensionSet@internal@protobuf@google@@QAEXHE_N_JPBVFieldDescriptor@34@@Z

?AddMessage@ExtensionSet@internal@protobuf@google@@QAEPAVMessageLite@34@HEABV534@PBVFieldDescriptor@34@@Z

?AddNAlreadyReserved@?$RepeatedField@H@protobuf@google@@QAEPAHH@Z

?AddNAlreadyReserved@?$RepeatedField@I@protobuf@google@@QAEPAIH@Z

?AddNAlreadyReserved@?$RepeatedField@M@protobuf@google@@QAEPAMH@Z

?AddNAlreadyReserved@?$RepeatedField@N@protobuf@google@@QAEPANH@Z

?AddNAlreadyReserved@?$RepeatedField@_J@protobuf@google@@QAEPA_JH@Z

?AddNAlreadyReserved@?$RepeatedField@_K@protobuf@google@@QAEPA_KH@Z

?AddNAlreadyReserved@?$RepeatedField@_N@protobuf@google@@QAEPA_NH@Z

?AddOutOfLineHelper@RepeatedPtrFieldBase@internal@protobuf@google@@AAEPAXPAX@Z

?AddString@ExtensionSet@internal@protobuf@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@HEPBVFieldDescriptor@34@@Z

?AddString@ExtensionSet@internal@protobuf@google@@QAEXHEV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBVFieldDescriptor@34@@Z

?AddUInt32@ExtensionSet@internal@protobuf@google@@QAEXHE_NIPBVFieldDescriptor@34@@Z

?AddUInt64@ExtensionSet@internal@protobuf@google@@QAEXHE_N_KPBVFieldDescriptor@34@@Z

?AddWeak@RepeatedPtrFieldBase@internal@protobuf@google@@QAEPAVMessageLite@34@PBV534@@Z

?Advance@CodedInputStream@io@protobuf@google@@AAEXH@Z

?AliasingEnabled@EpsCopyInputStream@internal@protobuf@google@@QBE_NXZ

?AllocPolicy@ThreadSafeArena@internal@protobuf@google@@ABEPBUAllocationPolicy@234@XZ

?AllocateAligned@Arena@protobuf@google@@QAEPAXII@Z

?AllocateAlignedFallback@SerialArena@internal@protobuf@google@@AAEPAXIPBUAllocationPolicy@234@@Z

?AllocateAlignedFallback@ThreadSafeArena@internal@protobuf@google@@AAEPAXIPBVtype_info@@@Z

?AllocateAlignedNoHook@Arena@protobuf@google@@AAEPAXI@Z

?AllocateAlignedWithCleanup@Arena@protobuf@google@@AAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBVtype_info@@@Z

?AllocateAlignedWithCleanup@SerialArena@internal@protobuf@google@@QAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBUAllocationPolicy@234@@Z

?AllocateAlignedWithCleanup@ThreadSafeArena@internal@protobuf@google@@QAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBVtype_info@@@Z

?AllocateAlignedWithCleanupFallback@SerialArena@internal@protobuf@google@@AAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBUAllocationPolicy@234@@Z

?AllocateAlignedWithCleanupFallback@ThreadSafeArena@internal@protobuf@google@@AAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBVtype_info@@@Z

?AllocateAlignedWithHook@Arena@protobuf@google@@AAEPAXIIPBVtype_info@@@Z

?AllocateAlignedWithHook@Arena@protobuf@google@@AAEPAXIPBVtype_info@@@Z

?AllocateAlignedWithHookForArray@Arena@protobuf@google@@AAEPAXIIPBVtype_info@@@Z

?AllocateAlignedWithHookForArray@Arena@protobuf@google@@AAEPAXIPBVtype_info@@@Z

?AllocateBufferIfNeeded@CopyingInputStreamAdaptor@io@protobuf@google@@AAEXXZ

Sections

.text
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

[ProductDir]/SecurityProductInformation.ini

[ProductDir]/ShellExtLang.dll

.dll windows:6 windows x86 arch:x86

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

39:45:b7:bb:19:20:1e:2a:a5:95:b7:4f:39:7e:d0:b4:5d:20:1d:1a:82:ca:5d:b5:29:ce:c8:35:10:f4:8a:e5
Signer

Actual PE Digest

39:45:b7:bb:19:20:1e:2a:a5:95:b7:4f:39:7e:d0:b4:5d:20:1d:1a:82:ca:5d:b5:29:ce:c8:35:10:f4:8a:e5

Digest Algorithm

sha256

PE Digest Matches

true

39:45:b7:bb:19:20:1e:2a:a5:95:b7:4f:39:7e:d0:b4:5d:20:1d:1a:82:ca:5d:b5:29:ce:c8:35:10:f4:8a:e5
Signer

Actual PE Digest

39:45:b7:bb:19:20:1e:2a:a5:95:b7:4f:39:7e:d0:b4:5d:20:1d:1a:82:ca:5d:b5:29:ce:c8:35:10:f4:8a:e5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

shellExtLang.pdb

Sections

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

[ProductDir]/SysInspector.exe

.exe windows:6 windows x86 arch:x86

d1ebbdb0c96fd30b2a4869f752eefdd5

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

03:31:e2:bf:18:5b:7f:ec:ee:f4:39:27:12:a8:6d:5e
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16-08-2023 00:00

Not After

16-08-2026 23:59

Subject

SERIALNUMBER=31333532,CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302534b

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

61:1c:b2:8a:00:00:00:00:00:26
Certificate

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-04-2011 19:41

Not After

15-04-2021 19:51

Subject

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fa:9c:19:a9:f4:39:a7:aa:c6:bf:8d:46:c8:f8:b4:cd:6a:ca:1e
Certificate

Issuer

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

13-07-2023 00:00

Not After

15-07-2026 00:00

Subject

CN=ESET\, spol. s r.o.,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

7d:90:d1:7c:6b:36:ca:f6:8f:b9:b7:2f:65:68:b8:22:3d:30:2d:a8
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

17-07-2020 00:00

Not After

17-07-2030 00:00

Subject

CN=ESET Code Signing CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

3d:1f:d8:47:f9:7a:4d:60:55:54:9f:7c:d2:22:cf:46:53:9e:7b:34
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

15-07-2020 00:00

Not After

15-07-2045 00:00

Subject

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

01:1b:95:25:17:c8:de:e2:27:42:79:ec:df:05:5d:81:0b:2e:c3:fe
Certificate

Issuer

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

12-07-2023 00:00

Not After

16-07-2026 00:00

Subject

CN=ESET Timestamp,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

76:79:fc:14:55:72:11:3a:f7:92:d1:f4:af:3c:4e:3a:8a:8a:6e:38
Certificate

Issuer

CN=ESET Root Certificate Authority 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Not Before

16-07-2020 00:00

Not After

16-07-2030 00:00

Subject

CN=ESET Timestamping CA 2020,O=ESET\, spol. s r.o.,L=Bratislava,C=SK

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

80:58:6f:dc:5f:b5:31:c3:a9:29:0c:30:4e:1d:cd:5d:00:7b:ae:c7:7a:2d:e4:6a:52:e8:eb:9a:6e:a7:f4:df
Signer

Actual PE Digest

80:58:6f:dc:5f:b5:31:c3:a9:29:0c:30:4e:1d:cd:5d:00:7b:ae:c7:7a:2d:e4:6a:52:e8:eb:9a:6e:a7:f4:df

Digest Algorithm

sha256

PE Digest Matches

true

80:58:6f:dc:5f:b5:31:c3:a9:29:0c:30:4e:1d:cd:5d:00:7b:ae:c7:7a:2d:e4:6a:52:e8:eb:9a:6e:a7:f4:df
Signer

Actual PE Digest

80:58:6f:dc:5f:b5:31:c3:a9:29:0c:30:4e:1d:cd:5d:00:7b:ae:c7:7a:2d:e4:6a:52:e8:eb:9a:6e:a7:f4:df

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

PDB Paths

SysInspector.pdb

Imports

sciter-x

SciterRefreshElementArea

SciterGetElementHwnd

SciterSetTimer

SciterGetStyleAttribute

ValueIntData

SciterSetStyleAttribute

SciterDataReady

SciterSetAttributeByName

SciterEval

ValueFloatData

GraphinAPI

ValueFloatDataSet

ValueBinaryDataSet

ValueElementsCount

ValueNthElementValue

ValueSetValueToKey

SciterWindowAttachEventHandler

SciterGetFocusElement

SciterSelectParent

SciterGetElementText

SciterPostEvent

SciterCallScriptingFunction

SciterProcND

SciterSetMediaVars

SciterUpdateWindow

SciterSetMediaType

SciterLoadHtml

SciterGetMinHeight

SciterSetValue

SciterSetCallback

ValueInt64Data

SciterGetValue

SciterSetCapture

SciterReleaseCapture

SciterUpdateElement

SciterSetElementHtml

SciterSetElementText

SciterCallBehaviorMethod

ValueNthElementKey

ValueNthElementValueSet

ValueCompare

ValueInt64DataSet

SciterControlGetType

SciterSendEvent

SciterGetScrollInfo

SciterIsElementVisible

SciterSetScrollPos

SciterIsElementEnabled

SciterSetElementState

SciterCreateElement

SciterInsertElement

SciterDeleteElement

SciterHidePopup

SciterShowPopupAt

SciterGetElementState

SciterSetMasterCSS

ValueClear

SciterGetElementTextCB

SciterGetElementHtmlCB

SciterGetElementByUID

SciterGetElementUID

SciterGetElementType

SciterGetElementLocation

SciterSelectElements

SciterFindElement

SciterGetRootElement

SciterGetAttributeByName

SciterGetNthAttribute

SciterGetAttributeCount

SciterGetElementIndex

SciterGetParentElement

SciterGetNthChild

SciterGetChildrenCount

Sciter_UnuseElement

Sciter_UseElement

ValueGetValueOfKey

ValueToString

ValueFromString

ValueStringData

ValueStringDataSet

ValueIntDataSet

ValueCopy

ValueInit

protobuflite

?UInt64SizePlusOne@WireFormatLite@internal@protobuf@google@@SAI_K@Z

?BytesSize@WireFormatLite@internal@protobuf@google@@SAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?UInt32SizePlusOne@WireFormatLite@internal@protobuf@google@@SAII@Z

?VarintParseSlow32@internal@protobuf@google@@YA?AU?$pair@PBDI@std@@PBDI@Z

?WriteVarint64ToArray@CodedOutputStream@io@protobuf@google@@SAPAE_KPAE@Z

?WriteVarint32SignExtendedToArray@CodedOutputStream@io@protobuf@google@@SAPAEHPAE@Z

?EnumSize@WireFormatLite@internal@protobuf@google@@SAIH@Z

?Int64SizePlusOne@WireFormatLite@internal@protobuf@google@@SAI_J@Z

?AddOutOfLineHelper@RepeatedPtrFieldBase@internal@protobuf@google@@AAEPAXPAX@Z

?VarintParseSlow64@internal@protobuf@google@@YA?AU?$pair@PBD_K@std@@PBDI@Z

?GenericSwap@internal@protobuf@google@@YAXPAVMessageLite@23@0@Z

?ReadTagFallback@internal@protobuf@google@@YA?AU?$pair@PBDI@std@@PBDI@Z

?Set@ArenaStringPtr@internal@protobuf@google@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVArena@34@@Z

?Mutable@ArenaStringPtr@internal@protobuf@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAVArena@34@@Z

?Destroy@ArenaStringPtr@internal@protobuf@google@@QAEXXZ

?ClearToEmpty@ArenaStringPtr@internal@protobuf@google@@QAEXXZ

?DestroyProtos@RepeatedPtrFieldBase@internal@protobuf@google@@IAEXXZ

??$DoClear@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AAEXXZ

??$DoMergeFrom@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@InternalMetadata@internal@protobuf@google@@AAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?InlineGreedyStringParser@internal@protobuf@google@@YAPBDPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDPAVParseContext@123@@Z

?fixed_address_empty_string@internal@protobuf@google@@3V?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$07@123@A

?ParseMessage@ParseContext@internal@protobuf@google@@QAEPBDPAVMessageLite@34@PBD@Z

?ReadSizeAndPushLimitAndDepth@ParseContext@internal@protobuf@google@@AAEPBDPBDPAH@Z

?UnknownFieldParse@internal@protobuf@google@@YAPBDIPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBDPAVParseContext@123@@Z

?kGlobalEmptyTable@internal@protobuf@google@@3QBQAXB

?WriteStringOutline@EpsCopyOutputStream@io@protobuf@google@@AAEPAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z

?ReadVarint64@CodedInputStream@io@protobuf@google@@QAE_NPA_K@Z

?ReadVarintSizeAsInt@CodedInputStream@io@protobuf@google@@QAE_NPAH@Z

??0CodedInputStream@io@protobuf@google@@QAE@PBEH@Z

?PopLimit@CodedInputStream@io@protobuf@google@@QAEXH@Z

?PushLimit@CodedInputStream@io@protobuf@google@@QAEHH@Z

?ParseFromArray@MessageLite@protobuf@google@@QAE_NPBXH@Z

?SerializeWithCachedSizesToArray@MessageLite@protobuf@google@@QBEPAEPAE@Z

?SkipField@WireFormatLite@internal@protobuf@google@@SA_NPAVCodedInputStream@io@34@I@Z

??1CodedInputStream@io@protobuf@google@@QAE@XZ

?ReadTagFallback@CodedInputStream@io@protobuf@google@@AAEII@Z

?GetArenaForAllocation@MessageLite@protobuf@google@@IBEPAVArena@23@XZ

?Add@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?EnsureSpace@EpsCopyOutputStream@io@protobuf@google@@QAEPAEPAE@Z

?WriteRaw@EpsCopyOutputStream@io@protobuf@google@@QAEPAEPBXHPAE@Z

?WriteStringMaybeAliased@EpsCopyOutputStream@io@protobuf@google@@QAEPAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z

?WriteVarint32ToArray@CodedOutputStream@io@protobuf@google@@SAPAEIPAE@Z

?VarintSize32@CodedOutputStream@io@protobuf@google@@SAII@Z

?AllocateAlignedWithHookForArray@Arena@protobuf@google@@AAEPAXIIPBVtype_info@@@Z

?AllocateAlignedWithHook@Arena@protobuf@google@@AAEPAXIIPBVtype_info@@@Z

??0ArenaStringPtr@internal@protobuf@google@@QAE@PAV?$ExplicitlyConstructed@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@$07@123@UConstantInitialized@123@@Z

?InitDefault@ArenaStringPtr@internal@protobuf@google@@QAEXXZ

?GetEmptyStringAlreadyInited@internal@protobuf@google@@YAABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

??0MessageLite@protobuf@google@@QAE@XZ

?OnDemandRegisterArenaDtor@MessageLite@protobuf@google@@UAEXPAVArena@23@@Z

??0MessageLite@protobuf@google@@IAE@PAVArena@12@_N@Z

?GetOwningArena@MessageLite@protobuf@google@@IBEPAVArena@23@XZ

??1MessageLite@protobuf@google@@UAE@XZ

??1RepeatedPtrFieldBase@internal@protobuf@google@@IAE@XZ

?MergeFromInternal@RepeatedPtrFieldBase@internal@protobuf@google@@AAEXABV1234@P81234@AEXPAPAX1HH@Z@Z

?StringSize@WireFormatLite@internal@protobuf@google@@SAIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?LengthDelimitedSize@WireFormatLite@internal@protobuf@google@@SAII@Z

?Get@CachedSize@internal@protobuf@google@@QBEHXZ

?Set@CachedSize@internal@protobuf@google@@QAEXH@Z

?PopLimit@EpsCopyInputStream@internal@protobuf@google@@QAE_NH@Z

?ReadString@EpsCopyInputStream@internal@protobuf@google@@QAEPBDPBDHPAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z

?Done@ParseContext@internal@protobuf@google@@QAE_NPAPBD@Z

??0CachedSize@internal@protobuf@google@@QAE@XZ

?AllocateAlignedWithCleanup@Arena@protobuf@google@@AAE?AU?$pair@PAXPAUCleanupNode@SerialArena@internal@protobuf@google@@@std@@IPBVtype_info@@@Z

??0?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@PAVArena@12@@Z

??1?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAE@XZ

?size@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QBEHXZ

?Get@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z

?Clear@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXXZ

?MergeFrom@?$RepeatedPtrField@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@protobuf@google@@QAEXABV123@@Z

?WriteBytesMaybeAliased@EpsCopyOutputStream@io@protobuf@google@@QAEPAEIABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PAE@Z

?ReadSizeFallback@internal@protobuf@google@@YA?AU?$pair@PBDH@std@@PBDI@Z

?InitializationErrorString@MessageLite@protobuf@google@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

?VerifyUtf8String@WireFormatLite@internal@protobuf@google@@SA_NPBDHW4Operation@1234@0@Z

?InternalWriteMessage@WireFormatLite@internal@protobuf@google@@SAPAEHABVMessageLite@34@HPAEPAVEpsCopyOutputStream@io@34@@Z

?AddCleanup@ThreadSafeArena@internal@protobuf@google@@QAEXPAXP6AX0@Z@Z

?VerifyUTF8@internal@protobuf@google@@YA_NVStringPiece@stringpiece_internal@23@PBD@Z

kernel32

GetLocaleInfoEx

FormatMessageA

GetFileAttributesExW

OutputDebugStringW

GetStartupInfoW

InitializeSListHead

SetFileInformationByHandle

AreFileApisANSI

CreateSymbolicLinkW

SetUnhandledExceptionFilter

UnhandledExceptionFilter

SwitchToThread

QueryPerformanceCounter

lstrcmpW

FreeConsole

GetConsoleWindow

AttachConsole

GetCurrentDirectoryW

AllocConsole

CheckRemoteDebuggerPresent

TerminateProcess

GetUserDefaultLCID

GetExitCodeProcess

DisconnectNamedPipe

ConnectNamedPipe

CreateNamedPipeW

GetNumberFormatW

GlobalFree

GlobalUnlock

GlobalLock

GlobalAlloc

lstrcpyW

lstrcpynW

LoadLibraryExW

GetTimeZoneInformation

GetVersion

GetModuleHandleW

MulDiv

FindResourceExW

SizeofResource

LockResource

LoadResource

FindResourceW

MoveFileExW

TerminateThread

DuplicateHandle

SetThreadPriority

GetProcessTimes

SetCurrentDirectoryW

OpenProcess

Process32NextW

Process32FirstW

CreateToolhelp32Snapshot

GetSystemDirectoryW

GetEnvironmentVariableW

OpenMutexW

ReleaseMutex

GetLocaleInfoW

GetTickCount

GetModuleFileNameW

SystemTimeToFileTime

OpenFileMappingW

OpenEventW

GetCurrentThreadId

LeaveCriticalSection

TryEnterCriticalSection

EnterCriticalSection

InitializeCriticalSection

VirtualProtect

VirtualFree

VirtualAlloc

GetSystemTimeAsFileTime

UnmapViewOfFile

MapViewOfFile

HeapFree

HeapSize

GetLastError

HeapReAlloc

HeapAlloc

HeapDestroy

DeleteCriticalSection

GetProcessHeap

GetCurrentThread

GetCurrentProcess

VerSetConditionMask

VerifyVersionInfoW

LoadLibraryW

FreeLibrary

GetProcAddress

FindFirstFileW

FindClose

LocalFree

WideCharToMultiByte

MultiByteToWideChar

FileTimeToSystemTime

SystemTimeToTzSpecificLocalTime

GetDateFormatW

GetSystemTime

GetTimeFormatW

GetCurrentProcessId

SetLastError

Sleep

FlushFileBuffers

FindFirstFileExW

FindNextFileW

CreateDirectoryW

SetErrorMode

SetEvent

ResetEvent

WaitForSingleObject

WaitForMultipleObjects

ReadFile

WriteFile

SetEndOfFile

SetFilePointer

GetFileSize

DeleteFileW

MoveFileW

CopyFileW

GetTempPathW

GetTempFileNameW

GetFileAttributesW

SetFileAttributesW

GetFileInformationByHandle

SetFileTime

GetSystemInfo

IsProcessorFeaturePresent

user32

GetAsyncKeyState

MessageBoxW

CharUpperBuffW

CloseClipboard

SetClipboardData

EmptyClipboard

OpenClipboard

TranslateAcceleratorW

MsgWaitForMultipleObjectsEx

DestroyIcon

SetWindowPlacement

GetWindowPlacement

SetActiveWindow

MapWindowPoints

GetDesktopWindow

SetWindowContextHelpId

GetWindowContextHelpId

RegisterClassExW

LoadIconW

LoadAcceleratorsW

LoadStringW

UnionRect

OffsetRect

DrawFocusRect

GetSysColor

AdjustWindowRectEx

SetFocus

GetWindow

GetWindowTextW

GetWindowTextLengthW

GetKeyState

GetWindowLongW

MonitorFromWindow

CopyRect

SetWindowPos

SetPropW

SetWindowLongW

SetProcessDefaultLayout

GetClassInfoW

ShowWindow

IsWindowVisible

PtInRect

GetSystemMetrics

EnableWindow

PeekMessageW

NotifyWinEvent

GetProcessDefaultLayout

DrawTextW

IntersectRect

ReleaseDC

GetDC

keybd_event

GetKeyboardLayout

MapVirtualKeyExW

SetCursorPos

GetCursorPos

ScreenToClient

WindowFromPoint

GetWindowRect

GetClientRect

TranslateMessage

CreateWindowExA

IsWindow

UnregisterClassA

PostMessageA

RegisterClassExA

GetClassInfoExA

SendMessageTimeoutW

FindWindowA

PostQuitMessage

SetWindowLongA

GetWindowLongA

RegisterWindowMessageW

GetParent

GetActiveWindow

SendMessageW

IsIconic

SetForegroundWindow

TrackPopupMenuEx

DestroyMenu

InsertMenuItemW

GetSubMenu

AppendMenuW

CreateMenu

GetPropW

LoadCursorW

ws2_32

inet_addr

gethostbyname

WSAGetLastError

htons

getservbyname

htonl

inet_ntoa

ntohs

getservbyport

socket

closesocket

recv

send

getsockopt

setsockopt

ioctlsocket

connect

__WSAFDIsSet

select

gethostbyaddr

gdi32

GetDCPenColor

CreateFontIndirectW

LineTo

MoveToEx

GetTextMetricsW

GetStockObject

CreateDIBSection

SelectClipRgn

IntersectClipRect

GetClipRgn

CreateRectRgn

ExtTextOutW

GetTextAlign

GetTextColor

SetBkMode

SetBkColor

SetTextColor

GetWindowOrgEx

GetClipBox

SetTextAlign

RemoveFontMemResourceEx

AddFontMemResourceEx

GetDeviceCaps

GetBitmapBits

SetBitmapBits

CreateBitmap

GetCurrentObject

DeleteDC

DeleteObject

SetDIBits

GetDIBits

BitBlt

SelectObject

CreateCompatibleBitmap

CreateCompatibleDC

GetObjectW

SetDCPenColor

comdlg32

GetOpenFileNameW

GetSaveFileNameW

advapi32

LookupPrivilegeValueW

RegEnumKeyExW

RegQueryInfoKeyW

RegDeleteKeyExW

RevertToSelf

RegDeleteKeyW

OpenThreadToken

OpenProcessToken

GetTokenInformation

AllocateAndInitializeSid

EqualSid

SetThreadToken

IsValidSid

GetSidIdentifierAuthority

GetSidSubAuthorityCount

RegGetValueA

RegEnumKeyExA

RegDeleteValueW

RegEnumValueW

AdjustTokenPrivileges

GetSidSubAuthority

DuplicateTokenEx

FreeSid

shell32

ShellExecuteW

ShellExecuteExW

ole32

CoFreeUnusedLibraries

OleUninitialize

OleInitialize

oleaut32

SysFreeString

SysAllocString

SysAllocStringLen

VariantInit

msvcp140

?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A

?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A

_Cnd_timedwait

_Xtime_get_ticks

?getloc@ios_base@std@@QBE?AVlocale@2@XZ

??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ

??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z

?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ

?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ

??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z

?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ

?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QBE?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AAVios_base@2@AAHPAUtm@@PBD4@Z

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z

?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ

?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z

?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A

?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z

?sync_with_stdio@ios_base@std@@SA_N_N@Z

?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ

?__ExceptionPtrAssign@@YAXPAXPBX@Z

?_Xbad_function_call@std@@YAXXZ

?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ

?__ExceptionPtrToBool@@YA_NPBX@Z

?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z

?__ExceptionPtrCreate@@YAXPAX@Z

?__ExceptionPtrCurrentException@@YAXPAX@Z

?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ

??0task_continuation_context@Concurrency@@AAE@XZ

?__ExceptionPtrRethrow@@YAXPBX@Z

?_ReportUnobservedException@details@Concurrency@@YAXXZ

?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ

?__ExceptionPtrDestroy@@YAXPAX@Z

?__ExceptionPtrCopy@@YAXPAXPBX@Z

?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z

?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ

?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ

?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ

?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z

?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z

?_Xinvalid_argument@std@@YAXPBD@Z

_Cnd_unregister_at_thread_exit

_Cnd_register_at_thread_exit

_Cnd_wait

_Cnd_broadcast

_Cnd_destroy_in_situ

_Cnd_init_in_situ

_Mtx_unlock

_Mtx_lock

_Mtx_destroy_in_situ

_Mtx_init_in_situ

_Thrd_detach

_Query_perf_counter

_Query_perf_frequency

??1_Facet_base@std@@UAE@XZ

?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ

?id@?$collate@_W@std@@2V0locale@2@A

?id@?$ctype@_W@std@@2V0locale@2@A

?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z

?_Init@locale@std@@CAPAV_Locimp@12@_N@Z

??_7facet@locale@std@@6B@

_Wcsxfrm

_Wcscoll

??_7_Facet_base@std@@6B@

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@I@Z

??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ

??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z

?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z

?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z

?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ

?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ

?uncaught_exceptions@std@@YAHXZ

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@PBX@Z

??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ