FreeCA_1[.]0[.]0RC2-conda-Windows-x86_64-installer-1[.]zip

resource	yara_rule
static1/unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/cryptography/hazmat/bindings/_rust.pyd	embeds_openssl

resource
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/AuthFWSnapin.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/BingMaps.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Chakra.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_Salsa20.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_aes.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_aesni.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_cbc.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_cfb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ctr.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ecb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_eksblowfish.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ocb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ofb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_BLAKE2s.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_MD5.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA1.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA224.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA256.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA384.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA512.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_ghash_clmul.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_ghash_portable.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_keccak.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Protocol/_scrypt.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Util/_cpuid_c.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Util/_strxor.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_Salsa20.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_aes.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_aesni.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_cbc.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_cfb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ctr.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ecb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_eksblowfish.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ocb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ofb.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_BLAKE2s.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_MD5.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA1.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA224.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA256.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA384.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA512.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_ghash_clmul.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_ghash_portable.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_keccak.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Protocol/_scrypt.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Util/_cpuid_c.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Util/_strxor.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1.exe
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/InputService.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/NlsData0009.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/VBoxNine.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/VBoxSVGA.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.AI.MachineLearning.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.Data.Pdf.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_cffi_backend.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/cdp.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/charset_normalizer/md.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/charset_normalizer/md__mypyc.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/cryptography/hazmat/bindings/_rust.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/d3d12SDKLayers.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/dbgeng.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/ieframe.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/jscript9.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/mstscax.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/prm0009.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/pythoncom311.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/pywintypes311.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/common/windows/selenium-manager.exe
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/twinui.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/twinui.pcshell.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/win32crypt.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/wininet.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/DXCaptureReplay.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/VBoxGL.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/Windows.UI.Xaml.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/_cffi.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/backend_c.pyd
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/edgehtml.dll
unpack001/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/mshtml.dll

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1.zip

SHA256 5e6edc4ca5ca7c9d65541f41660a42b9e40f13d4d116b350bc751b42109081f2
MD5 728a780e400a1e9fbd82ff0c0283de22
SHA1 5d1c691df380a28e410156fc5d6719da9a31693b
SHA512 c5382e065306f3a2d5f6d97ab530ee53e4601f2a95104e0c83dad8fec5e27bcd8f04531a0d4f78b1360ab7d38ce7d8a3d8b9287c23973e1bf96e75cf900b8876
SSDEEP 3145728:jMrMyqgtymDCeGVLAo5lQjrWNxQlxFDfNfe/jgAjDyphhQE5Si9HfERdu7qwKC4r:jMQXg4mXMLArmx0xFDJen23LBHfEmGai
MD5 SHA1 SHA512 SSDEEP

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/AuthFWSnapin.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 5d90dab38b70f7aad01935597856f8105d44239f83e2f53c613c70316e2abf6e
MD5 54da2e8e0179bf4308ba61fcaf012f6c
SHA1 e5a335501dcdd7fe9c4921588bbcbd1e1f5d7930
SHA512 147cde42d4a4b2129edb7b584ffb739806d6778ab274e62fcdb1adf7302dc8a0fa01ca338f4dcfe5d5273e834e6941e60d48ae00b8214d93a8dc54256a35963e
SSDEEP 49152:Jufo8ZgAa6MGhoLY/m0L7bPZrmkvXyvAYj+FDZ6XGj1ISSDaH1RPtEEAGwTP4p/3:Y/PXbxzvXjYaFDZlXUxzvXWYaqDZW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5113794

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

AuthFWSnapin.pdb

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/BingMaps.dll

IMPHASH 6858de0d7f98c27c4ba700bc92b21099
SHA256 5b5350e578cbd0a8c56119684b7c1c99c212679b3d0c4ecd6ccee88c8ebce420
MD5 5b6513ff6c0a921c6c41b01cf79a63e8
SHA1 165b072b9dafaede7924a5ffe32fffff48a4b0f8
SHA512 2631ca0a08e6f9660a074b154d90e025bc2b5a8e7d370aa41552f31127e79c373e474418eecbb55930ed68f52265e2702a550fea9ef5cb5953779304f81549cd
SSDEEP 49152:TWT9duwn8Rg9IFZ1/pYSE92TigG1A0CxPehYgw2JAFfiMcx0CkpYTPRsNKZ6OY4+:bZg1Gx/gn0Otjh6L0ika4UwuD6LBCF
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

5323232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

BingMaps.pdb

msvcp_win

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??Bid@locale@std@@QEAA_KXZ ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?id@?$ctype@G@std@@2V0locale@2@A ?widen@?$ctype@G@std@@QEBAGD@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_K@Z ??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ ?_Incref@facet@locale@std@@UEAAXXZ ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Random_device@std@@YAIXZ ?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEBX@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?uncaught_exception@std@@YA_NXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?_Xruntime_error@std@@YAXPEBD@Z ?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z ?toupper@?$ctype@G@std@@QEBAGG@Z ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@HPEBD@Z ?_Xbad_alloc@std@@YAXXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__free_locale _o__gmtime64_s _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__msize _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__wcsicmp _o__wcsnicmp __intrinsic_setjmp _o__wstat64i32 _o__wtoi_l _o_acos _o_asin _o_atan _o_atan2 _o_atof _o_atoi _o_atol _o_ceil _o_cos _o_exp _o_exp2f _o_fclose _o_floor _o_fmod _o_fopen _o_fread _o_free _o_fseek _o_ftell _o_isdigit _o_islower _o_isspace _o_isupper _o_log _o_log2 _o_lroundf _o_malloc _o_modf _o_pow _o_powf _o_qsort _o_rand_s _o_realloc _o_round _o_roundf _o_sin _o_sinh _o_sqrt _o_strcpy_s _o_tan _o_terminate _o_tolower _o_toupper _o_towlower _o_towupper _o_wcstod _o_wcstol _o_wcstoll _o_wcstoul __C_specific_handler __CxxFrameHandler3 _CxxThrowException _o__aligned_malloc _o__aligned_free _o___stdio_common_vswscanf _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsscanf _o___stdio_common_vsprintf _o___stdio_common_vsnwprintf_s _o___stdio_common_vsnprintf_s _o__crt_atexit _o__create_locale _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o__configure_narrow_argv __std_type_info_compare __std_terminate __CxxFrameHandler4 _o__expand _o__cexit _o__execute_onexit_table strchr longjmp _o__errno _o__callnewh strrchr strstr __RTtypeid _o__dtest __RTDynamicCast memchr memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

strcmp strncmp memset strncpy

mapconfiguration

ConfigurationManager_GetLocaleMapConfiguration ConfigurationManager_Create

api-ms-win-core-psm-app-l1-1-0

PsmRegisterAppStateChangeNotification PsmUnregisterAppStateChangeNotification

api-ms-win-core-libraryloader-l1-2-0

LockResource GetModuleFileNameA GetModuleHandleExW DisableThreadLibraryCalls SizeofResource LoadLibraryExW LoadResource GetModuleHandleW GetProcAddress

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter GetLastError SetLastError UnhandledExceptionFilter RaiseException

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsConcatString WindowsDuplicateString WindowsCreateStringReference WindowsGetStringRawBuffer WindowsCreateString

api-ms-win-core-winrt-error-l1-1-0

RoFailFastWithErrorContext RoOriginateError RoTransformError GetRestrictedErrorInfo RoOriginateErrorW SetRestrictedErrorInfo

api-ms-win-core-com-l1-1-0

CoMarshalInterface CoTaskMemAlloc CoCreateInstance CoTaskMemFree CoCreateFreeThreadedMarshaler CoReleaseMarshalData CreateStreamOnHGlobal CoGetApartmentType

api-ms-win-core-synch-l1-1-0

ResetEvent CreateEventW WaitForMultipleObjectsEx WaitForSingleObject CreateSemaphoreExW WaitForSingleObjectEx SetEvent DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection CreateEventExW TryEnterCriticalSection ReleaseSRWLockExclusive ReleaseSemaphore ReleaseMutex OpenSemaphoreW CreateMutexExW AcquireSRWLockShared AcquireSRWLockExclusive InitializeCriticalSectionAndSpinCount ReleaseSRWLockShared InitializeSRWLock

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled RoGetMatchingRestrictedErrorInfo RoReportFailedDelegate

api-ms-win-core-synch-l1-2-0

WaitOnAddress InitOnceExecuteOnce WakeByAddressSingle

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess OpenProcessToken GetCurrentProcessId GetCurrentThreadId TerminateProcess

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess

api-ms-win-security-base-l1-1-0

GetTokenInformation

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime GetTimeZoneInformation FileTimeToSystemTime

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-path-l1-1-0

PathCchCanonicalize

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-localization-l1-2-0

FormatMessageW FormatMessageA GetLocaleInfoEx

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-file-l1-1-0

SetFileAttributesW DeleteFileW CreateDirectoryW GetFileAttributesExW ReadFile FindFirstFileW GetFileSizeEx FindNextFileW WriteFile RemoveDirectoryW FindClose

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-eventing-provider-l1-1-0

EventRegister EventWrite EventUnregister

api-ms-win-core-registry-l1-1-0

RegCloseKey RegGetValueW RegOpenKeyExW

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-core-psapi-l1-1-0

K32GetPerformanceInfo

api-ms-win-core-kernel32-legacy-l1-1-0

BindIoCompletionCallback

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-downlevel-shlwapi-l2-1-0

SHCreateMemStream

d2d1

ord1

d3d11

D3D11CreateDevice

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory2 DXGIGetDebugInterface1 CreateDXGIFactory1

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream

ztrace_maps

ZTraceReportPropagationNoThis ZTraceReportPropagation ZTraceReportOrigination ZTraceClose ZTraceInit ZTraceReportOriginationNoThis ZTraceReportIgnore ZTraceHelper ZTraceReportIgnoreNoThis

api-ms-win-crt-math-l1-1-0

ceilf sinf fmodf truncf cosf modff floorf sqrtf

api-ms-win-crt-time-l1-1-0

_time64

moshostclient

MosHostClose MosHostOpen MosGetDataAsyncOperation MosDeleteDataAsyncOperation

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Chakra.dll

IMPHASH 030d2619f8d790584f3cd394844e9359
SHA256 5a074a970a2ef716f54f088f4bd8a98408ab1a2858806eb1059caf3fb0a605a4
MD5 fd8c5c74f3ee27fef74d69bb2ff92077
SHA1 7cc355b497d1352871402e4b77244e3ffc9e4c2c
SHA512 981f0e3fee9686c686d75951ab7a0c4e347ed431806b6cd573021a50e5eae95b613c9abfb952894ba962fa46119347f68ef5026cfd4066b33a0a58710137116f
SSDEEP 196608:6ASfD63PBgbJ6RZEJnsq6ZkYhuIgdAnpJgNGqieMn3XTcZAGiyGMoX28I24jKsII:KD6ZgbJ4ZEJnsq6ZkVIgdAnN1n3XTcZ9
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

2767296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

chakra.pdb

msvcrt

wcsncpy_s _i64tow_s vswprintf_s _wcstoui64 wprintf fclose fwprintf_s fflush _flushall fwprintf _itow_s _wsplitpath_s _wcsnicmp wcsrchr _wfsopen fprintf abort _aligned_free _aligned_malloc _beginthreadex _tzset _snwprintf_s modf qsort _vscwprintf towupper _wcslwr_s isalpha isdigit memcpy acos asin atan atan2 cos exp log rand_s tan _XcptFilter _amsg_exit _initterm ?terminate@@YAXXZ _lock _unlock __dllonexit _onexit ??1type_info@@UEAA@XZ _clearfp __iob_func strncmp wcsncat_s wcstoul tolower ceil ceilf floor floorf sqrt sqrtf _wcsdup _ltow_s _ultow_s wcscpy_s realloc wcscat_s _vsnwprintf_s qsort_s memmove_s _vsnprintf_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ memcpy_s _vsnwprintf _wcsicmp malloc wcschr free swprintf_s _purecall __C_specific_handler tanh __CxxFrameHandler3 strcmp sinh pow memset memmove memcmp _statusfp _controlfp_s _ui64tow_s wcsncmp strnlen wcstok_s sin wcsstr _CxxThrowException _hypot _setjmp cosh fmod log10 wcscmp

api-ms-win-core-atoms-l1-1-0

AddAtomW DeleteAtom FindAtomW

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapFree HeapAlloc HeapUnlock HeapLock HeapCreate HeapDestroy

api-ms-win-eventing-provider-l1-1-0

EventRegister EventActivityIdControl EventUnregister EventSetInformation EventWriteTransfer

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx AcquireSRWLockExclusive ReleaseSRWLockExclusive ReleaseMutex ReleaseSRWLockShared InitializeCriticalSectionEx ReleaseSemaphore CreateSemaphoreExW TryEnterCriticalSection InitializeCriticalSectionAndSpinCount CreateMutexExW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection AcquireSRWLockShared OpenSemaphoreW ResetEvent SetEvent CreateEventW WaitForMultipleObjectsEx WaitForSingleObject

api-ms-win-core-libraryloader-l1-1-0

SizeofResource LoadResource FreeLibrary LockResource GetProcAddress GetModuleFileNameW FindResourceExW LoadLibraryExW GetModuleHandleExW GetModuleFileNameA FreeLibraryAndExitThread GetModuleHandleW

api-ms-win-core-processenvironment-l1-1-0

GetStdHandle GetEnvironmentVariableW

api-ms-win-core-processthreads-l1-1-0

GetProcessId ResumeThread TlsFree SetThreadStackGuarantee TlsGetValue SwitchToThread TlsSetValue TerminateProcess GetCurrentThread GetCurrentProcess GetCurrentThreadId GetProcessTimes TlsAlloc SuspendThread SetThreadPriority GetCurrentProcessId

api-ms-win-core-registry-l1-1-0

RegCloseKey RegGetValueW RegOpenKeyExW RegCreateKeyExW RegQueryValueExW RegDeleteKeyExW RegSetValueExW

api-ms-win-core-errorhandling-l1-1-0

RaiseException SetLastError GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime GlobalMemoryStatusEx GetSystemTimeAdjustment GetTickCount64 GetSystemTimeAsFileTime GetTickCount GetLogicalProcessorInformation GetSystemInfo GetSystemDirectoryW

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx GetUserDefaultLCID FormatMessageW GetUserDefaultLocaleName

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-memory-l1-1-0

VirtualProtect VirtualQuery CreateFileMappingW VirtualProtectEx VirtualFree VirtualAlloc

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpLogicalW StrTrimW StrCmpICW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathIsFileSpecW PathFindFileNameW PathIsUNCW PathFileExistsW PathRemoveFileSpecW PathIsLFNFileSpecW PathGetDriveNumberW

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-console-l2-1-0

GetConsoleScreenBufferInfo SetConsoleTextAttribute

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask GetSystemTimePreciseAsFileTime

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo K32GetModuleInformation

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW GetFileVersionInfoExW VerQueryValueW

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList QueryDepthSList InterlockedPopEntrySList InterlockedPushEntrySList InitializeSListHead

api-ms-win-core-memory-l1-1-1

GetWriteWatch ResetWriteWatch

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlCaptureStackBackTrace RtlCaptureContext RtlLookupFunctionEntry RtlDeleteFunctionTable RtlAddFunctionTable

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-kernel32-legacy-l1-1-0

RaiseFailFastException

api-ms-win-core-processthreads-l1-1-1

FlushInstructionCache GetProcessMitigationPolicy GetThreadContext

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformationForYear TzSpecificLocalTimeToSystemTime SystemTimeToTzSpecificLocalTime GetTimeZoneInformation

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

api-ms-win-core-processtopology-obsolete-l1-1-0

GetProcessIoCounters

api-ms-win-core-realtime-l1-1-0

QueryThreadCycleTime

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

rpcrt4

CStdStubBuffer_IsIIDSupported RpcBindingBind RpcExceptionFilter NdrClientCall3 RpcServerUseProtseqW CStdStubBuffer_Invoke IUnknown_AddRef_Proxy CStdStubBuffer_DebugServerQueryInterface NdrOleFree CStdStubBuffer_AddRef IUnknown_Release_Proxy NdrDllUnregisterProxy CStdStubBuffer_CountRefs CStdStubBuffer_QueryInterface NdrOleAllocate CStdStubBuffer_DebugServerRelease NdrDllRegisterProxy NdrDllGetClassObject CStdStubBuffer_Disconnect IUnknown_QueryInterface_Proxy RpcBindingCreateW NdrDllCanUnloadNow CStdStubBuffer_Connect RpcServerRegisterIf3 NdrCStdStubBuffer_Release RpcBindingFree NdrServerCallNdr64 I_RpcBindingInqLocalClientPID RpcServerUnregisterIf RpcMgmtStopServerListening RpcServerListen RpcBindingVectorFree RpcEpRegisterW RpcServerInqBindings

api-ms-win-core-memory-l1-1-5

MapViewOfFileNuma2 UnmapViewOfFile2 VirtualUnlockEx

api-ms-win-core-memory-l1-1-3

SetProcessValidCallTargets

api-ms-win-core-path-l1-1-0

PathCchAppend PathCchCombine

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsCreateString WindowsGetStringRawBuffer

icuuc

u_hasBinaryProperty unorm2_isNormalized u_strlen unorm2_normalize unorm2_getInstance u_charType u_strToLower u_strToUpper uloc_addLikelySubtags uenum_close uenum_unext uloc_getBaseName uloc_getName uloc_toUnicodeLocaleType uloc_forLanguageTag uloc_toLanguageTag uloc_getAvailable uloc_countAvailable uenum_count uenum_next

icuin

uplrules_close unum_parseDouble uplrules_select uplrules_getKeywords unum_close uplrules_openForType ucal_getDefaultTimeZone ucal_getCanonicalTimeZoneID ucal_openTimeZoneIDEnumeration udatpg_open udatpg_getBestPatternWithOptions ucal_setGregorianChange udat_getCalendar ufieldpositer_close udat_formatForFields udat_format ufieldpositer_next ufieldpositer_open unum_formatDoubleForFields unum_formatDouble ucol_close ucol_strcoll ucol_setAttribute ucol_setStrength unum_setTextAttribute unum_open unum_setAttribute unumsys_getName unumsys_open ucal_getKeywordValuesForLocale ucol_getAttribute ucol_open ucol_getKeywordValuesForLocale udat_countAvailable udat_getAvailable unum_countAvailable unum_getAvailable ucol_countAvailable ucol_getAvailable ulocdata_getCLDRVersion udatpg_close unumsys_close unum_getAttribute udat_close udat_open

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-string-l1-1-0

MultiByteToWideChar CompareStringEx

api-ms-win-core-string-l2-1-0

CharUpperBuffW CharLowerW CharLowerBuffW

api-ms-win-core-localization-l2-1-0

GetNumberFormatEx

bcrypt

BCryptGenRandom

CreateChakraEngine DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer DumpDiagInfo JsAddRef JsBoolToBoolean JsBooleanToBool JsCallFunction JsCollectGarbage JsConstructObject JsConvertValueToBoolean JsConvertValueToNumber JsConvertValueToObject JsConvertValueToString JsCreateArray JsCreateArrayBuffer JsCreateContext JsCreateDataView JsCreateError JsCreateExternalArrayBuffer JsCreateExternalObject JsCreateFunction JsCreateNamedFunction JsCreateObject JsCreateRangeError JsCreateReferenceError JsCreateRuntime JsCreateSymbol JsCreateSyntaxError JsCreateThreadService JsCreateTypeError JsCreateTypedArray JsCreateURIError JsDefineProperty JsDeleteIndexedProperty JsDeleteProperty JsDisableRuntimeExecution JsDiscardBackgroundParse JsDisposeRuntime JsDoubleToNumber JsEnableRuntimeExecution JsEnumerateHeap JsEquals JsGetAndClearException JsGetArrayBufferStorage JsGetContextData JsGetContextOfObject JsGetCurrentContext JsGetDataViewStorage JsGetExtensionAllowed JsGetExternalData JsGetFalseValue JsGetGlobalObject JsGetIndexedPropertiesExternalData JsGetIndexedProperty JsGetNullValue JsGetOwnPropertyDescriptor JsGetOwnPropertyNames JsGetOwnPropertySymbols JsGetProperty JsGetPropertyIdFromName JsGetPropertyIdFromSymbol JsGetPropertyIdType JsGetPropertyNameFromId JsGetPrototype JsGetRuntime JsGetRuntimeMemoryLimit JsGetRuntimeMemoryUsage JsGetStringLength JsGetSymbolFromPropertyId JsGetTrueValue JsGetTypedArrayInfo JsGetTypedArrayStorage JsGetUndefinedValue JsGetValueType JsHasException JsHasExternalData JsHasIndexedPropertiesExternalData JsHasIndexedProperty JsHasProperty JsIdle JsInitializeJITServer JsInspectableToObject JsInstanceOf JsIntToNumber JsIsEnumeratingHeap JsIsRuntimeExecutionDisabled JsNumberToDouble JsNumberToInt JsObjectToInspectable JsParseScript JsParseScriptWithAttributes JsParseSerializedScript JsParseSerializedScriptWithCallback JsPointerToString JsPreventExtension JsProjectWinRTNamespace JsQueueBackgroundParse JsRelease JsRunScript JsRunSerializedScript JsRunSerializedScriptWithCallback JsSerializeScript JsSetContextData JsSetCurrentContext JsSetException JsSetExternalData JsSetIndexedPropertiesToExternalData JsSetIndexedProperty JsSetObjectBeforeCollectCallback JsSetProjectionEnqueueCallback JsSetPromiseContinuationCallback JsSetProperty JsSetPrototype JsSetRuntimeBeforeCollectCallback JsSetRuntimeMemoryAllocationCallback JsSetRuntimeMemoryLimit JsStartDebugging JsStartProfiling JsStopProfiling JsStrictEquals JsStringToPointer JsValueToVariant JsVarAddRef JsVarRelease JsVarToExtension JsVarToScriptDirect JsVariantToValue MemProtectHeapAddRootSection MemProtectHeapCollect MemProtectHeapCreate MemProtectHeapDestroy MemProtectHeapDisableCollection MemProtectHeapIsValidObject MemProtectHeapMemSize MemProtectHeapNotifyCurrentThreadDetach MemProtectHeapProtectCurrentThread MemProtectHeapRemoveRootSection MemProtectHeapReportHeapSize MemProtectHeapRootAlloc MemProtectHeapRootAllocLeaf MemProtectHeapRootRealloc MemProtectHeapRootReallocLeaf MemProtectHeapSynchronizeWithCollector MemProtectHeapUnprotectCurrentThread MemProtectHeapUnrootAndZero RecyclerNativeHeapAddExternalMemoryUsage RecyclerNativeHeapAllocLeaf RecyclerNativeHeapAllocLeafFinalized RecyclerNativeHeapAllocTraced RecyclerNativeHeapAllocTracedFinalized RecyclerNativeHeapCollectGarbageInThread RecyclerNativeHeapCreateWeakReference RecyclerNativeHeapGetRealAddressFromInterior RecyclerNativeHeapGetStrongReference RecyclerNativeHeapHasWeakReferenceCleanupOccurred RecyclerNativeHeapRootAddRef RecyclerNativeHeapRootRelease

Name

.text

Size

5.4MB

Virtual Size

5.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

74KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

340KB

Virtual Size

340KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mrdata

Size

512B

Virtual Size

1B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1000B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

84KB

Virtual Size

83KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_Salsa20.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 15257e96d1ca8480b8cb98f4c79b6e365fe38a1ba9638fc8c9ab7ffea79c4762
MD5 371776a7e26baeb3f75c93a8364c9ae0
SHA1 bf60b2177171ba1c6b4351e6178529d4b082bda9
SHA512 c23548fbcd1713c4d8348917ff2ab623c404fb0e9566ab93d147c62e06f51e63bdaa347f2d203fe4f046ce49943b38e3e9fa1433f6455c97379f2bc641ae7ce9
SSDEEP 96:JF3TgNlF/1Nt5aSd4+1ijg0NLfFNJSCqsstXHTeH5ht47qMbxbfDqbwYH/kcX6gT:WF/1nb2mhQtkXHTeZ87VDqrMcqgYvEp
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_aes.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 9524d1dadcd2f2b0190c1b8ede8e5199706f3d6c19d3fb005809ed4febf3e8b5
MD5 f751792df10cdeed391d361e82daf596
SHA1 3440738af3c88a4255506b55a673398838b4ceac
SHA512 6159f245418ab7ad897b02f1aadf1079608e533b9c75006efaf24717917eaa159846ee5dfc0e85c6cff8810319efecba80c1d51d1f115f00ec1aff253e312c00
SSDEEP 384:Dz2P+7nYpPMedFDlDchrVX1mEVmT9ZgkoD/PKDkGuF0U390QOo8VdbKBWmuCLg46:DzeqWB7YJlmLJ3oD/S4j990th9VCsC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_aesni.pyd

IMPHASH bc234f2877830bc99ce39286541d6ef1
SHA256 1f4288a098da3aac2add54e83c8c9f2041ec895263f20576417a92e1e5b421c1
MD5 bbea5ffae18bf0b5679d5c5bcd762d5a
SHA1 d7c2721795113370377a1c60e5cef393473f0cc5
SHA512 0932ec5e69696d6dd559c30c19fc5a481befa38539013b9541d84499f2b6834a2ffe64a1008a1724e456ff15dda6268b7b0ad8ba14918e2333567277b3716cc4
SSDEEP 192:wJBjJHEkEPYi3Xd+dc26E4++yuqAyXW9wifD4jqccqgwYUMvEW:ikRwi3wO26Ef+yuIm9PfD7wgwYUMvE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_cbc.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 11dd1b49f70db23617e84e08e709d4a9c86759d911a24ebddfb91c414cc7f375
MD5 20708935fdd89b3eddeea27d4d0ea52a
SHA1 85a9fe2c7c5d97fd02b47327e431d88a1dc865f7
SHA512 f28c31b425dc38b5e9ad87b95e8071997e4a6f444608e57867016178cd0ca3e9f73a4b7f2a0a704e45f75b7dcff54490510c6bf8461f3261f676e9294506d09b
SSDEEP 192:0F/1nb2mhQtkr+juOxKbDbnHcqgYvEkrK:u2f6iuOsbDtgYvEmK
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_cfb.pyd

IMPHASH b7b86a79048044d07db6b7de63b7c90e
SHA256 faa41385d0db8d4ee2ee74ee540bc879cf2e884bee87655ff3c89c8c517eed45
MD5 43bbe5d04460bd5847000804234321a6
SHA1 3cae8c4982bbd73af26eb8c6413671425828dbb7
SHA512 dbc60f1d11d63bebbab3c742fb827efbde6dff3c563ae1703892d5643d5906751db3815b97cbfb7da5fcd306017e4a1cdcc0cdd0e61adf20e0816f9c88fe2c9b
SSDEEP 192:NRgPX8lvI+KnwSDTPUDEhKWPXcqgzQkvEd:2og9rUD9mpgzQkvE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ctr.pyd

IMPHASH bc234f2877830bc99ce39286541d6ef1
SHA256 61c7a532e108f67874ef2e17244358df19158f6142680f5b21032ba4889ac5d8
MD5 c6b20332b4814799e643badffd8df2cd
SHA1 e7da1c1f09f6ec9a84af0ab0616afea55a58e984
SHA512 d50c7f67d2dfb268ad4cf18e16159604b6e8a50ea4f0c9137e26619fd7835faad323b5f6a2b8e3ec1c023e0678bcbe5d0f867cd711c5cd405bd207212228b2b4
SSDEEP 192:j0J1gSHxKkwv0i8XSi3Sm57NEEE/qexUEtDrdkrRcqgUF6+6vEX:jM01si8XSi3SACqe7tDeDgUUjvE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ecb.pyd

IMPHASH 760d82578721a074ac240db77368fcb0
SHA256 3e0d07bbf93e0748b42b1c2550f48f0d81597486038c22548224584ae178a543
MD5 fee13d4fb947835dbb62aca7eaff44ef
SHA1 7cc088ab68f90c563d1fe22d5e3c3f9e414efc04
SHA512 dea92f935bc710df6866e89cc6eb5b53fc7adf0f14f3d381b89d7869590a1b0b1f98f347664f7a19c6078e7aa3eb0f773ffcb711cc4275d0ecd54030d6cf5cb2
SSDEEP 96:R0qVVdJvbrqTu6ZdpvY0IluLfcC75JiCKs89EpmFWLOXDwo2Pj15XkcX6gbW6z:DVddiT7pgTctEEI4qXDo11kcqgbW6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_eksblowfish.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 605c86145b3018a5e751c6d61fd0f85cf4a9ebf2ad1f3009a4e68cf9f1a63e49
MD5 76f88d89643b0e622263af676a65a8b4
SHA1 93a365060e98890e06d5c2d61efbad12f5d02e06
SHA512 979b97aac01633c46c048010fa886ebb09cfdb5520e415f698616987ae850fd342a4210a8dc0fac1e059599f253565862892171403f5e4f83754d02d2ef3f366
SSDEEP 384:IUv5cRUtPQtjLJiKMjNrDF6pJgLa0Mp8Q90gYP2lXCM:BKR8I+K0lDFQgLa17zU
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ocb.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 4aa5e9ce7a76b301766d3ecbb06d2e42c2f09d0743605a91bf83069fefe3a4de
MD5 d48bffa1af800f6969cfb356d3f75aa6
SHA1 2a0d8968d74ebc879a17045efe86c7fb5c54aee6
SHA512 30d14ad8c68b043cc49eafb460b69e83a15900cb68b4e0cbb379ff5ba260194965ef300eb715308e7211a743ff07fa7f8779e174368dcaa7f704e43068cc4858
SSDEEP 384:7PHNP3Mj7Be/yB/6sB3yxcb+IMcOYqQViCBD8bg6Vf4A:hPcnB8KSsB34cb+bcOYpMCBDX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Cipher/_raw_ofb.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 c9f4c5ffcdd4f8814f8c07ce532a164ab699ae8cde737df02d6ecd7b5dd52dbd
MD5 4d9182783ef19411ebd9f1f864a2ef2f
SHA1 ddc9f878b88e7b51b5f68a3f99a0857e362b0361
SHA512 8f983984f0594c2cac447e9d75b86d6ec08ed1c789958afa835b0d1239fd4d7ebe16408d080e7fce17c379954609a93fc730b11be6f4a024e7d13d042b27f185
SSDEEP 192:0F/1nb2mhQtkgU7L9D037tfcqgYvEJPb:u2f6L9DSJxgYvEJj
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_BLAKE2s.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 fc296145ae46a11c472f99c5be317e77c840c2430fbb955ce3f913408a046284
MD5 9d28433ea8ffbfe0c2870feda025f519
SHA1 4cc5cf74114d67934d346bb39ca76f01f7acc3e2
SHA512 66b4d00100d4143ea72a3f603fb193afa6fd4efb5a74d0d17a206b5ef825e4cc5af175f5fb5c40c022bde676ba7a83087cb95c9f57e701ca4e7f0a2fce76e599
SSDEEP 192:hF/1nb2mhQt7fSOp/CJPvADQHKtxSOvbcqgEvcM+:N2fNKOZWPIDnxVlgEvL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_MD5.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 4fc70cb9280e414855da2c7e0573096404031987c24cf60822854eaa3757c593
MD5 34ebb5d4a90b5a39c5e1d87f61ae96cb
SHA1 25ee80cc1e647209f658aeba5841f11f86f23c4e
SHA512 82e27044fd53a7309abaeca06c077a43eb075adf1ef0898609f3d9f42396e0a1fa4ffd5a64d944705bbc1b1ebb8c2055d8a420807693cc5b70e88ab292df81b7
SSDEEP 192:hZ9WXA7M93g8U7soSchhiLdjM5J6ECTGmDZkRsP0rcqgjPrvE:8Q0gH7zSccA5J6ECTGmDua89gjPrvE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA1.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 a927548abea335e6bcb4a9ee0a949749c9e4aa8f8aad481cf63e3ac99b25a725
MD5 ab0bcb36419ea87d827e770a080364f6
SHA1 6d398f48338fb017aacd00ae188606eb9e99e830
SHA512 3580fb949acee709836c36688457908c43860e68a36d3410f3fa9e17c6a66c1cdd7c081102468e4e92e5f42a0a802470e8f4d376daa4ed7126818538e0bd0bc4
SSDEEP 384:qPHNP3MjevhSY/8EBbVxcJ0ihTLdFDuPHgj+kf4D:sPcKvr/jUJ0sbDGAj+t
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA224.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 25771e53cfecb5462c0d4f05f7cae6a513a6843db2d798d6937e39ba4b260765
MD5 c8fe3ff9c116db211361fbb3ea092d33
SHA1 180253462dd59c5132fbccc8428dea1980720d26
SHA512 16826bf93c8fa33e0b5a2b088fb8852a2460e0a02d699922a39d8eb2a086e981b5aca2b085f7a7da21906017c81f4d196b425978a10f44402c5db44b2bf4d00a
SSDEEP 384:y1jwGPJHLvzcY1EEerju9LcTZ6RO3RouLKtcyDNOcwgjxo:QjwyJUYToZwOLuzDNB1j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA256.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 3dbcb4d0070be355e0406e6b6c3e4ce58647f06e8650e1ab056e1d538b52b3d3
MD5 a442ea85e6f9627501d947be3c48a9dd
SHA1 d2dec6e1be3b221e8d4910546ad84fe7c88a524d
SHA512 850a00c7069ffdba1efe1324405da747d7bd3ba5d4e724d08a2450b5a5f15a69a0d3eaf67cef943f624d52a4e2159a9f7bdaeafdc6c689eacea9987414250f3b
SSDEEP 384:51jwGPJHLxzcY1EEerju9LcTZ6RO3RouLKtcyDNIegjxo:rjwyJOYToZwOLuzDNI7j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA384.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 c181f30332f87feecbf930538e5bdbca09089a2833e8a088c3b9f3304b864968
MD5 59ba0e05be85f48688316ee4936421ea
SHA1 1198893f5916e42143c0b0f85872338e4be2da06
SHA512 d772042d35248d25db70324476021fb4303ef8a0f61c66e7ded490735a1cc367c2a05d7a4b11a2a68d7c34427971f96ff7658d880e946c31c17008b769e3b12f
SSDEEP 384:xFDL3RqE3MjjQ95UnLa+1WT1aA7qHofg5JptfISH2mDDXfgjVx2:jDLh98jjRe+1WT1aAeIfMzxH2mDDIj
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_SHA512.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 55defcd528207d4006d54b656fd4798977bd1aae6103d4d082a11e0eb6900b08
MD5 8194d160fb215498a59f850dc5c9964c
SHA1 d255e8ccbce663ee5cfd3e1c35548d93bfbbfcc0
SHA512 969eeaa754519a58c352c24841852cf0e66c8a1adba9a50f6f659dc48c3000627503ddfb7522da2da48c301e439892de9188bf94eeaf1ae211742e48204c5e42
SSDEEP 384:tFYLXRqEnMgj969GUnLa+1WT1aA7qHofg5JptfIS320DXwElrgjhig:PYLB9Mgj0e+1WT1aAeIfMzx320DXD+j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_ghash_clmul.pyd

IMPHASH 5ce92e7d1c0a7d3c28338120fb91aa68
SHA256 e5b6e58d6da8db36b0673539f0c65c80b071a925d2246c42c54e9fcdd8ca08e3
MD5 c89becc2becd40934fe78fcc0d74d941
SHA1 d04680df546e2d8a86f60f022544db181f409c50
SHA512 715b3f69933841baadc1c30d616db34e6959fd9257d65e31c39cd08c53afa5653b0e87b41dcc3c5e73e57387a1e7e72c0a668578bd42d5561f4105055f02993c
SSDEEP 192:DzFRF/1nb2mhQtk4axusjfkgZhoYDQgRjcqgQvEty:DzFd2f64axnTTz5D1gQvEty
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_ghash_portable.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 8f3d92de840abb5a46015a8ff618ff411c73009cbaa448ac268a5c619cf84721
MD5 c4cc05d3132fdfb05089f42364fc74d2
SHA1 da7a1ae5d93839577bbd25952a1672c831bc4f29
SHA512 c597c70b7af8e77beeebf10c32b34c37f25c741991581d67cf22e0778f262e463c0f64aa37f92fbc4415fe675673f3f92544e109e5032e488f185f1cfbc839fe
SSDEEP 192:AF/1nb2mhQtks0iiNqdF4mtPjD02A5APYcqgYvEL2x:62f6fFA/4GjDFcgYvEL2x
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Hash/_keccak.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 a428372185b72c90be61ac45224133c4af6ae6682c590b9a3968a757c0abd6b4
MD5 1e201df4b4c8a8cd9da1514c6c21d1c4
SHA1 3dc8a9c20313af189a3ffa51a2eaa1599586e1b2
SHA512 19232771d4ee3011938ba2a52fa8c32e00402055038b5edf3ddb4c8691fa7ae751a1dc16766d777a41981b7c27b14e9c1ad6ebda7ffe1b390205d0110546ee29
SSDEEP 192:XTRgffnRaNfBj9xih1LPK73jm6AXiN4rSRIh42gDhgvrjcqgCieT3WQ:XafgNpj9cHW3jqXeBRamDOZgCieT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Protocol/_scrypt.pyd

IMPHASH 4ad07fe3afee3f621a47d59bc3c712f3
SHA256 b1bab0e04ac60d1e7917621b03a8c72d1ed1f0251334e9fa12a8a1ac1f516529
MD5 ba46602b59fcf8b01abb135f1534d618
SHA1 eff5608e05639a17b08dca5f9317e138bef347b5
SHA512 a5e2771623da697d8ea2e3212fbdde4e19b4a12982a689d42b351b244efba7efa158e2ed1a2b5bc426a6f143e7db810ba5542017ab09b5912b3ecc091f705c6e
SSDEEP 192:nkCfXASTMeAk4OepIXcADp/X6RcqgO5vE:ZJMcPepIXcAD563gO5vE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Util/_cpuid_c.pyd

IMPHASH 760d82578721a074ac240db77368fcb0
SHA256 0828cad4d742d97888d3dfce59e82369317847651bba0f166023cb8aca790b2b
MD5 4d9c33ae53b38a9494b6fbfa3491149e
SHA1 1a069e277b7e90a3ab0dcdee1fe244632c9c3be4
SHA512 bdfbf29198a0c7ed69204bf9e9b6174ebb9e3bee297dd1eb8eb9ea6d7caf1cc5e076f7b44893e58ccf3d0958f5e3bdee12bd090714beb5889836ee6f12f0f49e
SSDEEP 96:MJVVdJvbrqTu6ZdpvY0IluLfcC75JiCKs89EVAElIijKDQGrbMZYJWJcX6gbW6s:CVddiT7pgTctEEaEDKDlMCWJcqgbW6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Crypto/Util/_strxor.pyd

IMPHASH 760d82578721a074ac240db77368fcb0
SHA256 70d90ddf87a9608699be6bbedf89ad469632fd0adc20a69da07618596d443639
MD5 8f4313755f65509357e281744941bd36
SHA1 2aaf3f89e56ec6731b2a5fa40a2fe69b751eafc0
SHA512 fed2b1007e31d73f18605fb164fee5b46034155ab5bb7fe9b255241cfa75ff0e39749200eb47a9ab1380d9f36f51afba45490979ab7d112f4d673a0c67899ef4
SSDEEP 96:6ZVVdJvbrqTu6ZdpvY0IluLfcC75JiCKs89EMz3DHWMoG4BcX6gbW6O:IVddiT7pgTctEEO3DLoHcqgbW6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_Salsa20.pyd

IMPHASH aa61680649e24aea64d1e237a0bc833c
SHA256 c5a4ac8202a0211163938b6306e3a678cc461ed8e283f4c4601748d2e50783a3
MD5 2ce3043d6fbd62bcbe6948a1e6a789f0
SHA1 7a5e9bc5a96bd2ec677927fb014073e7cdb70f3b
SHA512 8fca5216d65c66640541b31e21a7eb18f510c5c0d3420bff5581337875a6f68dd808f35d61a759a26aad9ae4f50aa1580e8d90e016d9acdc5aa2d04cfaad4377
SSDEEP 192:4t/1nCuqaL0kt7AznuRmceS4lDhhAlcqgcLg:F/k1ACln4lDkgcLg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_aes.pyd

IMPHASH aa61680649e24aea64d1e237a0bc833c
SHA256 2dcac73ea3240a008d115bac0ea4d7c65c8162676ab30bcaf7527c22b98b4929
MD5 e306365bdc8d15b2f477e5af252d0b59
SHA1 e6461fd5079050d129cd47cd4f6afa7b632c4314
SHA512 1b63a9adcf6a37f601b8e1bd6206ec369a618c81f1c3477301053219db1ddecc27b5aeb9e7ad7490c7e987ba196884d66e85bb5b7f4dad43bfff891310e11945
SSDEEP 384:m/UlZA5PUEllvxL/7v/iKBt5ByU0xGitqzSEkxGG7+tpKHb/LZ7fr52EkifcMxmP:RlcR7JriEbwDaS4j990th9VgBV
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_aesni.pyd

IMPHASH bc234f2877830bc99ce39286541d6ef1
SHA256 483758336267f8842f5432bb83300ea0fcb49c4e0b29962cbd7f27b1c3dfc56a
MD5 973f11de023c9337f35f9bb55c6154a6
SHA1 c02ff64d9fc5b8b8590488bbe9658593fc90ca47
SHA512 8658ade868c9d942660361a60c5b4068238b418857bbbd4b1712de5a146300f435960a75c411e1737e590020644309c92a2dcfda69a2d6162a4135244a282871
SSDEEP 192:QJBj5fq/Rk0kPLhOZ3UucCWuSKPEkA2bDMJXx03cqg5YUMLgs:Sk1kTMZEjCWNaA2D4x0g5YUMLg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_cbc.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 bb9898057572f17131bb63d513c19901e29d2e29215f7a93d6d84fa537475f0b
MD5 8d17946e6b1936061203afe20cddb5b0
SHA1 589dac4d2864fdc0219b0de3973b2ee0023cd5ea
SHA512 3354942781e4d36b84d83ab6959707d29f6e25d3614b15a228d63d084f6f2a280bfc9153f24ea0fef489fa7043e21eb67e4b6d3ad7d073fde37f6206462f5931
SSDEEP 192:EF/1n7Guqaj0ktfEJwX1fYwCOD03lncqg0Gd6l:+GXkJEm1feODaDg0Gd6
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_cfb.pyd

IMPHASH b7b86a79048044d07db6b7de63b7c90e
SHA256 917fa3438b61cc207d73bd72cda6c42cd08656a2187fd9ca2860c67c12677238
MD5 606e85b094ae6752e1099a176aa20f09
SHA1 35e9355ce75b57111d3793502636d5fcd78d34a4
SHA512 19de7b6c567e997825f2f08773c45a3562bc3980248de31738395cafa0306707a82f912a8b9b1dba440162443e1554e87ef5586776189b763576d9a7aca9e587
SSDEEP 192:kZlRgfeqfz0RP767fB4A84D+VD6eDcqgzbkLgmf:jwRj67p84Dm6eVgzbkLgmf
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ctr.pyd

IMPHASH bc234f2877830bc99ce39286541d6ef1
SHA256 bcbe37f565b91a127e40634db8e7e1b8b1ce3e1344f3fa082496b93d75435b80
MD5 f3cfd044825e9c08ce37a8034e2ed786
SHA1 51637c5678aedf528adef8036c53513495fcbb44
SHA512 fd9f8ae46a438138c31408ebf9129dd507a8fd6dc24f24eae2b2dd8bd90e8b78afb0aef82a314ca5566d4d1bb7d166642dd2e7d7ea8e484c0261f623b2c1c15b
SSDEEP 192:vrtJ1gifqQGRk0IP73AdXdmEEEEEm9uhiFEQayDsVMcqgnF6+6Lg:vrdU1ID3AdXd49urQPDbgnUjLg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ecb.pyd

IMPHASH 696e6885693213066fbed29df7b8da01
SHA256 5a43e3809403668ed6c6f17a71828eb8cd0dcb64afc09b815a4b9f05c3661714
MD5 4db0ac98329ae64cec9c28570af52968
SHA1 8f7d327c1049c27b0df6bc6c2017cc302ba99a10
SHA512 515e0b972a644620c27b3c074aee62b8ba5aa679b0e1c936f616c5537a83c7ca762b7a6c7acc3279ab235d1d344db9423cdc1abf7c72775d4bbfb2cb24cbf6b9
SSDEEP 192:Bddz2KTnThIz0qfteRY4zp+DUPLui8p1cqgHCWt:t2E9RqfCXp+DUjuRpLgiWt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_eksblowfish.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 8425c2e412045da204419b41d80d6538636f13fd187f7f8a259f29f5380a2536
MD5 257e449799177d7f43eb1b8ed6180c1c
SHA1 e023424ccbdce4ef3cc5d0a723fe2d2e02363cab
SHA512 944070bd07edb03bc8ec599d26d3b182f27a71da2db1c79ca01914f5637ae1bb9c47e0f2d56c8fc1433e325c1baf903e330be123c0cb36e6f355ff5db649d9fa
SSDEEP 384:0UX0JfbRwUtPMbNv37t6K5jwbDEpJgLa0Mp8mJCkgJrAm:KNbRw8EbxwKBwbD+gLa1ch
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ocb.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 eb1085a28631fe3c8b3350b19dddc5c2eaf9b2cbf1c578fdfbf6b72fdf0b909c
MD5 ed75912a048ca3c2e0fe8e7307559347
SHA1 bb0998846468a91a5fb6d9725439c2f62e02cc21
SHA512 c04f62f57e0395ec731180f6ce9568a35c00be51ae172f2f6eee4d9d6726f5bdc41a55e8043d596e9724ccee00f861f349e3f787fc3c1b5adb47f8c194a23fb1
SSDEEP 384:XPHoDUntQjNB+/yw/pogeXOvXoTezczOo3p9iJgD93iNgnVbwhA:iUOhBcDRogeXOfoTezcio3pUJgD93i+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Cipher/_raw_ofb.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 01eb2117f0223f0447cd16b5ec79baf3430871da8ef461404ba13592d2e8a89c
MD5 dae7f4dd6792fb84c91bd45d44ed6c96
SHA1 a88eb81d4d72adc4c7f7402338f9d5760957efc3
SHA512 66e98ae82073abb24e9053203f41cebb4ac30a461fe2a62baa1190970e1be7567f495914e017ec94b6b911bab721e63a7ff2d1d85e29d5824ab3d9bc9fb9fce4
SSDEEP 96:ra+F/1NtJ9t4udqaj01rlALnNNJSS2sP+YEdMN+F9FdKaWDCLk+VOmWbucX6gRCk:dF/1n7Guqaj0ktfEON+bMDClJcqg0Gd
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_BLAKE2s.pyd

IMPHASH 200e5a8a397640442ee9fed8ad5a7ecb
SHA256 4e76a0be3e295571172cf1d06dbcc48f715357bb496d8567d9376667326fa5ef
MD5 1dee6707a941e02202a47c58408ed538
SHA1 511387a5a611119ba81377931da5a8da5c429b78
SHA512 f29063d04151c9df75ca2c138fba5f9e4da551f0fdfa7a8a83390df0dcde064038ba87eec4c852a87d80cef0dc38306aed1121d06a6b337e4cc722e4057c432a
SSDEEP 192:yF/1n7Guqaj0ktrESsrUW+SBjsK5tcQmEreDLmf1AoxkVcqgOvgXQ:IGXkFE/UW575tA2eDy1Ao2rgOvgX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_MD5.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 88e5a5508c7f672d130c2bad89a892670967a8df9b07dc479c37e00d3a23f8ff
MD5 0d56f87eed6685569c363cd7b482ff0e
SHA1 10ec6ea5d10cb98312b463e681c71a69cb529b11
SHA512 ca8c6b60377706d4bbf6ffd1aeab7bce36350cc92e9e1eef0f7c1096a435745cb96e2518cc99dd03859ca2377b434a6d443054c30a7e563e0b6dae8e7470cbad
SSDEEP 384:XfwogDHER1wuiDSyoGTgDcOviNgEPrLg:vgDHELwuiDScTgDBi+EP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA1.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 4810a6392848b3ff20d67a531a26daaf2e1f2fe37cf61c0245d24cb0fa00177d
MD5 2efa942a436ca17562fb49bb66acdcc4
SHA1 50b2841914e9a1237ac29c7a681f0951c03d59a4
SHA512 bad96c34d318b975330f720b422c758ddc91ae6ab34b873f9a68f060f52552939654ac7a78d49ea787d7f182e293c604f772bea9e027d0159a43c9f06957d392
SSDEEP 384:DPHoDUntQj0sKhDOJ+0QPSfu6rofDciZzgE+kbwb:mUOYsKNO466DcoUE+
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA224.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 30eb7e9cb9ecc84a424864e20b01eba47ecb7e8597a83244c35798a1ab75f2e3
MD5 5cb71342e09faa10f9c4b55e56746deb
SHA1 e1f5f0225ce90f3fac8a3bc7898a18f145a15317
SHA512 5e5a154fb41e969021974889b1d5b5d657464d9b3c94aaba6f3df74424934da9d02786b242a6781257bf148198ce352b1851e46612bbd4c112b6677db874bd08
SSDEEP 384:VJWo4IRCGHX1KXqHGcvYHp5RYcARQOj4MSTjqgPmJD1O2gkxEv:VcIRnHX1P/YtswvaD1Qk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA256.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 ebee833d40ed09abccff1f415b4a4cb1ec6f8d84431067980b09a36450edb9f8
MD5 15e2c2434668d1648d9147156b0a44c6
SHA1 bea635adfd889381cc324d2612606e409518261d
SHA512 197818202b07f97dc370f456a1f59a5210c8af7e8221d6e0bbf8a96e8190668dd29d353bffb0f833fc622b8f797558708446cdde7a062ecd8c66d67b87262445
SSDEEP 384:mJWo4IRCGHXfKXqHGcvYHp5RYcARQOj4MSTjqgPmJD1IgkxEv:mcIRnHXfP/YtswvaD1tk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA384.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 dd8b11d83208286ec46a4698ee57aa354bfa2b6eebdd97245d49007304439884
MD5 bef2c0dd6dfb0c99f49681520fac9c29
SHA1 a97fd9eba05c3d5b14839a1befc34c72d407fd2d
SHA512 d5c1ce51a6aa8455987ed5fc7b6511b373569d71eb14662c1e452d5279d44fab3aece9ca763b41c34ca350f4c4e18f8378ea513091b348bd745490233c60338b
SSDEEP 768:C839Cc4itui0gel9soFdkO66MlPGXmXcyYDTHks:Zs4u/FZ6nPxMLDzk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_SHA512.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 cf97616bf0cb1eeec2906fe47cf219332ee697c43a2f2e4d0e67da40360c1ade
MD5 d6d6e9c22ed2a06562d4d6d4a43f7fe7
SHA1 773f848975f6aba43618d65ec518fa9b62cd4dc1
SHA512 b4c1f45a74b966ff1e047b0b0e429204cda6e033b0923bcaf78959ae2974d71f6c6b25e598a4770c30eae46738c90c3c455759ef63ce1867dc0229a167dd7256
SSDEEP 768:4cX9Nf4ttui0gel9soFdkO66MlPGXmXc/vDTxvk:338u/FZ6nPxM3D9k
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_ghash_clmul.pyd

IMPHASH ab74a2bf9363a0b2c0e2c99368de0ee2
SHA256 84e5f449d863e2801c93c84648ab18c078fe52d75ce4309632afc295081ab5e8
MD5 26798493d96b2b2cb9601c0708595b84
SHA1 cec50f2d5d38e3410f1ffe1546a08be35847b198
SHA512 3f8f3bb54cd0755cccd4cf6e8ed29c2d0f1c10baeb6a0e58d6db51f5a5a442d653114eb2ac8ee78833e26f71275602f0b3b0e06c333b22bb45c1d2e7a70f278c
SSDEEP 192:dUWt/1nCuqaL0kt7TsEx2fiTgDFqGF0T7cqgkLgJ:c/k1Ts64DDVyBgkLg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_ghash_portable.pyd

IMPHASH aa61680649e24aea64d1e237a0bc833c
SHA256 1eb72bd49457080ce1432eb28e85134d7bd4344bccd9357839acbbfa9236b868
MD5 bea27cb11a8529d6ad11373531e5222f
SHA1 74b61da8fd39f03136b4fad7faa7e5a1ea7c1116
SHA512 49fec85d5853ddb352abc93be6cab3c42f2a3dbcdf32a90fe7fff6e5bf378514c594328c7845f892508c8301f8224f7a6a26f44458a6a9ebc59d99b7ccef8f4b
SSDEEP 192:gt/1nCuqaL0ktPH0T7fwtF4zDD2rGacqgRGd:N/kpU3Yv4zDLqgRGd
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Hash/_keccak.pyd

IMPHASH 2d71f25096805592caf0d27ca08982e5
SHA256 fcb30e2a27edd1410a6d7d2de29dc194e70a5dc4f54b705e6bba9e6e7af411dd
MD5 7f4afb84a7f42103e1ad2fb97f01b924
SHA1 19a74e979422911557f4e1a04ed8d1e64840b5cd
SHA512 ef50b41d44fbc886ca27a1fb70eb9f7c7bff2c659a90c893e1930c6525b39e1e40045176a57745eabc2e4503f353e65cc5d9c1899f25e5793ea26e353356ad5a
SSDEEP 384:FfRKTN+HLjRskTdf4WazSTkwjEvuY2bylHDIYIgovg:YcHfRl5pauoSjy5DIE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Protocol/_scrypt.pyd

IMPHASH 2faf5762b903731d3d0416e651da0c56
SHA256 671aad8b7fae31e076df50c947cd198369eea6379e6fa1b058596e528f5da561
MD5 308c6e862a3554f1b5587d003f4b1bbf
SHA1 800955d3a24065766e5825c8324b7f48cd02f073
SHA512 35b27a6320a8046f7e7bc42b9af8414b076f5334467576a0e83c6d7992ec3675f73cf0fc72ae6da402ff70dd16fcc0c29287ab27ad04bb346d5229d62deb54a5
SSDEEP 192:rcsC3eqv6b0q3OQ3rHu5bc64OhDXI/p3cqgONLg:rmHq3jHuY64OhDGJgONLg
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Util/_cpuid_c.pyd

IMPHASH 696e6885693213066fbed29df7b8da01
SHA256 bd597e5853a3f2cad1d4e5743170a66383be18d215f8f83be2a473736ee28718
MD5 690fc8d8423ee69c662f11cd6406cef1
SHA1 a0b78af3bc976c8aafa1fe80ef71f22d4bf7080b
SHA512 b08dd641aef8c663174c4ad436915ffc4c4afb70b8a9719f535f1f99b7b29240a0c8951e19f3348c010dad3000b6b5173b1def077ec6d96bb8a3d3e9be339a40
SSDEEP 96:f0QRpBddzAvzrqTOy/ThIz014mlxuLnkC75JiSBhsPeSztllIDeqf4AZaRcX6gnO:5ddz2KTnThIz0qfteRIDxRWcqgnCWt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Cryptodome/Util/_strxor.pyd

IMPHASH 696e6885693213066fbed29df7b8da01
SHA256 42af8d99fc975720585d25d767fc825d4922c088b6c2b13ee2de23e439523610
MD5 174b652c8e6c40c36c8ab06a20a34c01
SHA1 f3cb9321100dce3a8d79b0fc517cc58e05d26e41
SHA512 9f0c444069e477a043c85f606bf1a3fb695773dbc16d1124a4b2d771ea0385b797552031433cb625d7dc9c8d490eb0ef8fa2c13aa628ebba58df6a0530913f32
SSDEEP 96:fyipBddzAvzrqTOy/ThIz014mlxuLnkC75JiSBhsPeSzteXuDeZqYNIfcX6gHCWx:Hddz2KTnThIz0qfteR5DewYkcqgHCWt
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1.exe

IMPHASH 9b3930e49313d837a4b6de92755478cd
SHA256 6c5f832f15e5d66550db02742f3c577c8eceaba5e930de2de1d7cdab6bd54633
MD5 0025186a5f70ccf42f95d76a52337882
SHA1 1000ca9e414264dd09b1e9f5a13029e2e418ead0
SHA512 479b45f5ef22251d592e1e878d4e88ac280923e15fd5aedc1f75202f528b082ff7abd0205590f11e54bedbc7650371dd25b754f4c0a854df2afd7c08c94645cf
SSDEEP 786432:ptMiaVCQZpSs+Gfho1kUp6gQgOmgpTzi:P6VCQZpIJpf4
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

27274864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

python311

PyExc_KeyboardInterrupt PyByteArray_FromObject PyFrozenSet_Type PyExc_ModuleNotFoundError PyExc_ConnectionResetError PySlice_Type PySet_Type PyExc_BrokenPipeError PyComplex_Type PyExc_FileExistsError PyExc_ConnectionRefusedError PyExc_MemoryError PyUnicode_AsUTF8 PyLong_AsLong PyList_Size PyList_SetSlice PyDict_DelItemString PyStatus_Exception PyWideStringList_Append PyConfig_SetString PyConfig_SetArgv Py_SetProgramName Py_InitializeFromConfig Py_ExitStatusException PySys_SetArgv _PyWarnings_Init _PyRuntime_Initialize _PyConfig_InitCompatConfig Py_DebugFlag Py_VerboseFlag Py_InteractiveFlag Py_InspectFlag Py_OptimizeFlag Py_NoSiteFlag Py_BytesWarningFlag Py_FrozenFlag Py_IgnoreEnvironmentFlag Py_DontWriteBytecodeFlag Py_NoUserSiteDirectory Py_UTF8Mode PyImport_FrozenModules PyMem_Malloc PyMem_Realloc PyMem_GetAllocator PyObject_GetBuffer PyBuffer_Release PyType_Ready PyObject_Str PyObject_RichCompare PyObject_RichCompareBool PyObject_SetAttrString PyObject_GetAttr PyObject_SelfIter PyObject_GenericSetAttr PyObject_IsTrue PyCallable_Check PyObject_ClearWeakRefs _Py_Dealloc _PyObject_LookupAttr PyObject_Realloc PyObject_Free PyObject_InitVar _PyObject_New _PyObject_GC_Resize _PyObject_GC_NewVar PyObject_GC_Del PyByteArray_FromStringAndSize PyBytes_FromString PyBytes_AsString _PyBytes_Resize PyUnicode_FromStringAndSize PyUnicode_FromEncodedObject PyUnicode_FromFormat PyUnicode_InternInPlace PyUnicode_FromWideChar PyUnicode_AsWideCharString PyUnicode_FromOrdinal PyUnicode_DecodeUTF8 PyUnicode_Concat PyUnicode_FindChar PyUnicode_RichCompare PyUnicode_Format PyUnicode_New _PyUnicode_Ready PyLong_AsLongAndOverflow PyLong_FromString PyLong_FromUnicodeObject _PyLong_New _PyLong_Copy PyFloat_FromString PyFloat_FromDouble PyComplex_FromDoubles PyFilter_Type PyTuple_Pack _PyTuple_MaybeUntrack PyList_New PyList_Append PyList_Sort PyDict_New PyDict_GetItem PyDict_GetItemString PyDict_SetItemString _PyDict_MaybeUntrack _PySet_NextEntry PyCMethod_New PyModule_NewObject PyModule_GetName PyModule_GetFilenameObject PyModule_GetDef PyCode_NewWithPosOnlyArgs PyCode_Addr2Line _PyGen_FetchStopIterationValue PyErr_WarnEx _PyWeakref_ClearRef PyErr_ExceptionMatches PyException_SetCause PyErr_BadArgument PyErr_NoMemory PyOS_snprintf _PyErr_FormatFromCause _PyErr_WriteUnraisableMsg PyArg_ParseTuple PyArg_ParseTupleAndKeywords PyArg_UnpackTuple Py_BuildValue PyModule_ExecDef PyModule_FromDefAndSpec2 _PyArg_NoKeywords PyErr_Print Py_CompileStringExFlags PyEval_EvalCodeEx PyEval_GetFuncName PyEval_RestoreThread _PyEval_EvalFrameDefault PySys_WriteStderr PyImport_ExecCodeModule PyImport_ExecCodeModuleEx PyImport_GetModuleDict PyImport_ImportModule PyImport_ImportFrozenModule _PyImport_FixupExtensionObject PyObject_Call PyObject_CallObject PyObject_CallFunction PyObject_CallFunctionObjArgs PyObject_CallMethodObjArgs PyObject_GetIter PyIter_Next PyIter_Send PyNumber_Add PyNumber_Subtract PyNumber_FloorDivide PyNumber_Float PyNumber_InPlaceAdd PyNumber_InPlaceLshift PyNumber_InPlaceOr PyNumber_ToBase PySequence_List PySequence_InPlaceConcat PyMapping_Check PyObject_LengthHint PyMarshal_ReadObjectFromString _PyErr_ChainStackItem _PyErr_NormalizeException _PyByteArray_empty_string PyDictKeys_Type PyDictValues_Type PyDictItems_Type PyModuleDef_Type PyFunction_Type PyMethod_Type PyCode_Type PyFrame_Type PyTraceBack_Type PyEllipsis_Type PyGen_Type PyCoro_Type PyAsyncGen_Type _PyAsyncGenWrappedValue_Type Py_GenericAliasType _PyWeakref_RefType _PyWeakref_ProxyType _PyWeakref_CallableProxyType PyExc_UnboundLocalError PyExc_ImportWarning _Py_PackageContext PyExc_EOFError PyExc_IOError PyFloat_Type PyMap_Type PyExc_EnvironmentError PyExc_UnicodeDecodeError PyExc_UnicodeError PyExc_NameError PyFrozenSet_New PyReversed_Type PySet_Contains PySet_Add PyBool_Type _Py_EllipsisObject PyNumber_Invert PyObject_Dir _Py_NotImplementedStruct PyExc_TimeoutError PyExc_FileNotFoundError PyExc_BlockingIOError PyExc_NotImplementedError PyExc_LookupError PyExc_StopAsyncIteration PyExc_BaseExceptionGroup PyProperty_Type PyObject_DelItem PyLong_FromVoidPtr PyObject_SetAttr PyExc_SystemExit PyExc_BaseException PyEnum_Type PyDict_Type PyTuple_Type PySet_New PyDict_Update PyUnicode_Join _PyObject_FunctionStr PyExc_UnicodeEncodeError PyExc_Exception PyObject_Repr PyRange_Type PyLong_Type PyDict_DelItem PyExc_ZeroDivisionError PyExc_RuntimeError PyExc_ImportError PyBytes_Type PyByteArray_Type PyExc_GeneratorExit PyObject_GetItem PyMemoryView_Type PySequence_Tuple PyDict_MergeFromSeq2 PyDict_Merge PyNumber_Negative PyZip_Type PyExc_OverflowError PyExc_AssertionError PyExc_StopIteration PySeqIter_Type PyObject_IsSubclass PySequence_Check PyEval_AcquireThread PyEval_SaveThread Py_MakePendingCalls Py_Exit PyErr_WriteUnraisable PyExc_IndexError PyList_Type PyObject_SetItem PyLong_FromSsize_t PyNumber_Long _PyDict_NewPresized _PyRuntime PyExc_ValueError PyExc_KeyError PyExc_OSError PyModule_Type PyUnicode_Type PySequence_Contains PyNumber_AsSsize_t PyErr_PrintEx PyException_SetContext PyException_GetContext Py_GenericAlias PyModule_GetDict PyDict_SetItem PyObject_GetAttrString PyType_IsSubtype PyExc_TypeError PyExc_SystemError PyExc_AttributeError PyCFunction_Type _Py_NoneStruct PyBaseObject_Type PyType_Type PyObject_IsInstance PyErr_Format _PyType_Lookup _Py_TrueStruct _Py_FalseStruct PySys_SetObject PySys_GetObject PyStructSequence_New PyStructSequence_InitType PyCapsule_New PyLong_FromLong PyUnicode_Find PyUnicode_GetLength PyUnicode_Substring PyUnicode_FromString PyTuple_New

kernel32

WriteConsoleW HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetProcessHeap GetStringTypeW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose MultiByteToWideChar GetFileType LCMapStringW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetStdHandle SetConsoleCtrlHandler GetCommandLineW GetCommandLineA GetModuleHandleExW ExitProcess RtlPcToFileHeader RaiseException EncodePointer FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection SetLastError RtlUnwindEx IsDebuggerPresent GetModuleHandleW GetStartupInfoW InitializeSListHead GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte FindResourceA FormatMessageA LockResource LoadResource LoadLibraryExW GetModuleFileNameW GetSystemTimeAsFileTime GetCurrentProcessId SetErrorMode GetLastError WriteFile GetShortPathNameW CreateFileW SetEnvironmentVariableW GetEnvironmentVariableW SetDllDirectoryW SetStdHandle CreateFileMappingA LoadLibraryA GetProcAddress GetModuleHandleA GetModuleFileNameA UnmapViewOfFile MapViewOfFile GetVersionExA GetCurrentProcess CloseHandle CheckRemoteDebuggerPresent CreateFileA

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/InputService.dll

IMPHASH 92d8918b5f6522717fe0857018970f33
SHA256 9da8598ad74c2ba888df9a8b07aee40b472a444325cbb98cd37c3840c254f44e
MD5 851084a9e6c8be9f91483d85241172ed
SHA1 6d959b753e4c600405ea2229d68747e340773a19
SHA512 b515a3f5a09b5ff313c062676eb74eaebb4f29ab53bfdffdd2806365da3332fa59b1e5bca35ee1b919f80b6969cfcbff8fbcc12e5a624db210646bec8652299b
SSDEEP 49152:0KGGQona9QxUDlt1Lg6eTlKinUx+jrTpmLfpwXt0/vvy5FC9bthzoDUJ054dIeq0:8oeieqVQKUYHG
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

523312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

InputService.pdb

msvcrt

wcsrchr towupper _wcsicmp wcsncpy_s _strlwr_s wcscpy_s wcstok_s wcstombs_s ??1bad_cast@@UEAA@XZ ??0bad_cast@@QEAA@PEBD@Z ??0bad_cast@@QEAA@AEBV0@@Z realloc iswupper strcspn localeconv sqrtf iswpunct strchr _wcsnicmp sprintf_s fflush fclose fputwc iswcntrl ungetwc iswdigit fgetc __mb_cur_max fgetwc fwrite _errno wcschr fgetpos setvbuf ungetc fsetpos _fseeki64 wcsncmp isspace swscanf_s iswascii tolower wcsnlen wcstol iswprint swprintf_s isalnum islower toupper wcscat_s calloc iswgraph _ultow_s time qsort qsort_s _wtoi ldexp fputc _free_locale _wtof_l iswalnum setlocale __uncaught_exception __pctype_func isupper ___lc_handle_func ___lc_codepage_func memcmp ___mb_cur_max_func _ismbblead memset fseek _wfsopen __iob_func memchr _wcsdup ??8type_info@@QEBAHAEBV0@@Z __crtCompareStringW __crtCompareStringA __crtLCMapStringW __crtLCMapStringA abort _Getdays _Getmonths _W_Getdays _W_Getmonths _W_Gettnames _Wcsftime _Gettnames _Strftime isdigit ldiv wcsstr wcstoul logf floorf iswspace atan2 atan ??1type_info@@UEAA@XZ _onexit __dllonexit _unlock _lock ?terminate@@YAXXZ __C_specific_handler _initterm free _wcsnicmp_l wcspbrk swscanf _amsg_exit _XcptFilter memmove memcpy _CxxThrowException ?what@exception@@UEBAPEBDXZ ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBQEBD@Z wcsncat_s _beginthreadex ??3@YAXPEAX@Z _callnewh malloc memmove_s strrchr _wcslwr_s towlower rand_s _wsetlocale ___lc_collate_cp_func _create_locale _vsnprintf_s strcpy_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ _purecall memcpy_s _vsnwprintf ??_V@YAXPEAX@Z __CxxFrameHandler3 iswalpha wcscmp

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW LoadLibraryExW LoadStringW GetModuleFileNameA FreeLibrary GetModuleHandleExW FindStringOrdinal GetModuleFileNameW GetProcAddress

api-ms-win-core-com-l1-1-0

CoIncrementMTAUsage StringFromCLSID CoInitializeEx StringFromGUID2 CoCreateGuid IIDFromString CoTaskMemAlloc CLSIDFromString CoWaitForMultipleHandles CoUninitialize CoCreateInstance CoGetApartmentType CoCreateFreeThreadedMarshaler CoTaskMemFree CoGetMalloc PropVariantClear CoRevokeClassObject CoTaskMemRealloc CoDecrementMTAUsage CoRegisterClassObject CoInitializeSecurity

api-ms-win-core-synch-l1-2-0

InitOnceComplete SleepConditionVariableSRW InitOnceBeginInitialize WakeAllConditionVariable Sleep

api-ms-win-core-synch-l1-1-0

CreateSemaphoreExW InitializeCriticalSectionEx InitializeSRWLock WaitForSingleObject ReleaseMutex CreateEventW ReleaseSRWLockExclusive SetEvent LeaveCriticalSection OpenEventW AcquireSRWLockExclusive WaitForSingleObjectEx OpenSemaphoreW ReleaseSRWLockShared CreateEventExW InitializeCriticalSection SleepEx CreateMutexExW AcquireSRWLockShared DeleteCriticalSection EnterCriticalSection ReleaseSemaphore ResetEvent

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapFree HeapCreate HeapReAlloc HeapDestroy HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError GetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException

api-ms-win-eventing-provider-l1-1-0

EventUnregister EventRegister EventSetInformation EventProviderEnabled EventActivityIdControl EventWriteTransfer EventWrite

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWaitCallbacks SetThreadpoolWait CloseThreadpoolTimer CreateThreadpoolWait CloseThreadpoolWait SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CreateThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess GetCurrentProcessId ResumeThread GetThreadId SetThreadPriority TerminateProcess OpenThreadToken GetCurrentThreadId GetProcessIdOfThread ProcessIdToSessionId GetCurrentThread CreateThread OpenThread OpenProcessToken

api-ms-win-core-localization-l1-2-0

GetACP GetLocaleInfoW FormatMessageW GetLocaleInfoEx LCMapStringW GetLocaleInfoA

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-service-core-l1-1-0

SetServiceStatus RegisterServiceCtrlHandlerExW

oleaut32

SysStringLen VariantClear VariantInit VarBstrCmp SysAllocStringLen SysFreeString SysAllocString SysAllocStringByteLen SysStringByteLen

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetWindowsDirectoryW GetSystemDirectoryW GetSystemTime GetSystemWindowsDirectoryW GetSystemTimeAsFileTime GetTickCount GetVersionExW GetTickCount64

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

textinputmethodformatter

??1TextInputMethodFormatter@@QEAA@XZ ??0TextInputMethodFormatter@@QEAA@XZ ?Uninitialize@TextInputMethodFormatter@@UEAAJXZ ?GetTVKRImpl@TextInputMethodFormatter@@UEAAJPEAPEAUITextVirtualizationKeyRouting@@@Z ?SetTVKRTarget@TextInputMethodFormatter@@UEAAJPEAUITextVirtualizationKeyRouting@@@Z ?Initialize@TextInputMethodFormatter@@QEAAJPEAUIMessagePort@@W4VirtualizationEnvironment@@PEAUIVirtualizedTextDataSender@@U_GUID@@@Z

coreuicomponents

CoreUIServerCreate CoreUIClientCreate CoreUIFactoryCreate

coremessaging

CoreUICallReceive CoreUICallCreateEndpointHost CoreUICallSend CoreUIOpenExisting MsgBlobCreateStack CoreUICreate MsgBlobCreateShared MsgRelease MsgBufferShare MsgStringCreateShared

ntdll

NtQueryInformationProcess DbgPrintEx RtlGetDeviceFamilyInfoEnum NtQueryWnfStateData RtlPublishWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion VerSetConditionMask RtlQueryWnfStateData RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfStateChangeNotification RtlCapabilityCheck RtlInitUnicodeString RtlIsMultiSessionSku

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW RegEnumValueW RegOpenCurrentUser RegDeleteTreeW RegQueryValueExW RegGetValueW RegCloseKey RegOpenKeyExW RegSetValueExW RegDeleteValueW RegEnumKeyExW RegCreateKeyExW RegNotifyChangeKeyValue

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW GetPersistedRegistryValueW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar GetStringTypeExW GetStringTypeW CompareStringOrdinal WideCharToMultiByte

api-ms-win-core-file-l1-1-0

CompareFileTime CreateDirectoryW SetFilePointerEx WriteFile UnlockFile LockFile GetFullPathNameW SetFileTime ReadFile GetFileSizeEx GetDriveTypeW FindFirstFileExW GetFileAttributesW GetFileSize FindClose FindNextFileW CreateFileW SetEndOfFile

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-security-base-l1-1-0

CopySid EqualSid GetSidSubAuthority CheckTokenMembership GetLengthSid IsValidSid CreateWellKnownSid InitializeSid GetTokenInformation RevertToSelf IsWellKnownSid

api-ms-win-security-isolatedcontainer-l1-1-1

IsProcessInWDAGContainer

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-psapi-l1-1-0

K32GetModuleBaseNameW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileW WTSGetActiveConsoleSessionId

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindNextComponentW PathIsPrefixW PathFindFileNameW PathCombineW PathIsUNCW PathGetDriveNumberW PathAppendW PathFileExistsW PathIsFileSpecW

api-ms-win-core-heap-l2-1-0

LocalReAlloc LocalFree LocalAlloc

api-ms-win-rtcore-ntuser-window-l1-1-0

GetWindowTextW GetForegroundWindow GetWindowThreadProcessId

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertSidToStringSidW

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsGetStringRawBuffer WindowsCreateString WindowsCreateStringReference

api-ms-win-core-winrt-l1-1-0

RoInitialize RoActivateInstance RoUninitialize RoGetActivationFactory

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW RegSetKeyValueW

api-ms-win-core-memory-l1-1-0

OpenFileMappingW MapViewOfFile UnmapViewOfFile CreateFileMappingW

api-ms-win-core-normalization-l1-1-0

NormalizeString

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled RoReportFailedDelegate RoGetMatchingRestrictedErrorInfo

api-ms-win-core-winrt-error-l1-1-0

RoTransformError RoOriginateError SetRestrictedErrorInfo

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-url-l1-1-0

UrlEscapeW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-util-l1-1-0

DecodePointer Beep EncodePointer

profapi

ord104

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrRChrW StrStrIW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory

api-ms-win-core-registry-l2-1-0

RegDeleteKeyW

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-string-l2-1-0

CharLowerBuffW CharUpperW CharUpperBuffW

Name

.text

Size

3.2MB

Virtual Size

3.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

71KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

162KB

Virtual Size

161KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

464B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

58KB

Virtual Size

58KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/NlsData0009.dll

IMPHASH 39e5b123f43265233e81e846a7b09d58
SHA256 e2ba45e3f94646c7dc503fdd5d950fd23b4cbe155539ca539a992887d497d31f
MD5 ba7de46b50df15fb264871e45af24a3a
SHA1 b22e49008e24b5f9237089ccf43785a543666c46
SHA512 4625bea97f9b84e11dab244e58c6a3e027bf3ad8d5a74c5e36c006aeb8f3cee9953556c0c7eeed599abfc9894ebc9ebeb9714432c047bc6bdb3e7a6578a33a73
SSDEEP 49152:BO1jSlNC2DNNNNNNodAuw7kqdTecWYnC1:BOlSlY2NNNNNNodSoyTz
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

1791248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

NlsData0009.pdb

msvcrt

_amsg_exit memcpy _CxxThrowException ?what@exception@@UEBAPEBDXZ ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBQEBD@Z _initterm wcsncpy_s __CxxFrameHandler3 wcsncat_s _lock wcschr strncmp _fileno _unlock _isatty realloc malloc free _XcptFilter __dllonexit ??0exception@@QEAA@AEBV0@@Z __C_specific_handler _onexit ??1type_info@@UEAA@XZ memmove ?terminate@@YAXXZ __iob_func ?_set_se_translator@@YAP6AXIPEAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z _resetstkoflw _wsplitpath_s ftell fclose fseek _wfopen fread ??1exception@@UEAA@XZ _purecall logf _vsnwprintf swscanf_s expf log memset

api-ms-win-core-libraryloader-l1-2-0

LoadResource FreeLibrary GetModuleFileNameW LockResource DisableThreadLibraryCalls GetProcAddress SizeofResource

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId GetCurrentThreadId TerminateProcess GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter SetLastError UnhandledExceptionFilter GetLastError

api-ms-win-core-synch-l1-1-0

DeleteCriticalSection EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection

api-ms-win-core-file-l1-1-0

GetFileSize WriteFile CreateFileW FlushFileBuffers SetFilePointer

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile CreateFileMappingW MapViewOfFile

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime GetSystemTimeAsFileTime GetTickCount

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Name

.text

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/OneCoreUAPCommonProxyStub.dll

IMPHASH a0e6432c968858dd0420d3fbd27830ae
SHA256 8539c2f939324acbc411571c2fcb84c29e6591ad8b0c684c2cce9a77c663a47d
MD5 5b497ac7d1cf305309ca8e741ba33f7f
SHA1 9c2ddb65e25f246090a514d481bfb0e850337925
SHA512 6cdf5a594e10419be495be83883b2dabf283aadd1e187e4133b198d6d449144c6f0e0404fbb8e852b0f92b5617b535d8477d6ea4c10c61ab25e6763865aa7483
SSDEEP 24576:b4e64o3kU9lHtVDCMstGOqy9rnkPHN00Ygc33DeyqAn277jqFjcf:nykU9lHtYMstgy9oPHS09c3ySM8wf
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

7c:39:d1:44:d4:1b:fb:02:8c:b1:9d:9a:27:b2:c6:1f:c7:db:db:7c:a1:57:30:51:14:85:33:9a:aa:b0:1e:57

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

92432

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

OneCoreUAPCommonProxyStub.pdb

msvcrt

_amsg_exit free _initterm malloc __C_specific_handler memcmp _XcptFilter memcpy

rpcrt4

CStdStubBuffer_Connect NdrStubCall3 IUnknown_QueryInterface_Proxy CStdStubBuffer_Disconnect CStdStubBuffer_DebugServerRelease NdrGetUserMarshalInfo RpcRaiseException NdrClientCall3 NdrOleAllocate CStdStubBuffer_QueryInterface CStdStubBuffer_CountRefs NdrCStdStubBuffer2_Release IUnknown_Release_Proxy NdrDllGetClassObject NdrDllCanUnloadNow NdrCStdStubBuffer_Release CStdStubBuffer_AddRef NdrOleFree CStdStubBuffer_DebugServerQueryInterface IUnknown_AddRef_Proxy NdrStubForwardingFunction CStdStubBuffer_Invoke CStdStubBuffer_IsIIDSupported

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId GetCurrentThreadId TerminateProcess GetCurrentProcess

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetTickCount

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-com-midlproxystub-l1-1-0

NdrProxyForwardingFunction18 ObjectStublessClient4 NdrProxyForwardingFunction17 NdrProxyForwardingFunction8 CStdAsyncStubBuffer_AddRef ObjectStublessClient5 CStdAsyncStubBuffer_Connect CStdAsyncStubBuffer_Disconnect CStdAsyncStubBuffer_Release ObjectStublessClient30 NdrProxyForwardingFunction16 NdrProxyForwardingFunction19 CStdStubBuffer2_CountRefs NdrProxyForwardingFunction14 NdrProxyForwardingFunction11 ObjectStublessClient3 CStdStubBuffer2_Disconnect ObjectStublessClient7 NdrProxyForwardingFunction13 CStdStubBuffer2_QueryInterface NdrProxyForwardingFunction10 NdrProxyForwardingFunction9 NdrProxyForwardingFunction4 NdrProxyForwardingFunction5 ObjectStublessClient6 ObjectStublessClient8 NdrProxyForwardingFunction12 NdrProxyForwardingFunction7 ObjectStublessClient31 NdrProxyForwardingFunction15 NdrProxyForwardingFunction6 NdrProxyForwardingFunction3 NdrProxyForwardingFunction21 NdrProxyForwardingFunction20 CStdAsyncStubBuffer_QueryInterface CStdStubBuffer2_Connect CStdAsyncStubBuffer_Invoke ObjectStublessClient11 ObjectStublessClient9 ObjectStublessClient10 ObjectStublessClient12 ObjectStublessClient14 ObjectStublessClient15 ObjectStublessClient13 ObjectStublessClient17 ObjectStublessClient16 ObjectStublessClient18 ObjectStublessClient20 ObjectStublessClient19 ObjectStublessClient21 ObjectStublessClient22 ObjectStublessClient27 ObjectStublessClient28 ObjectStublessClient23 ObjectStublessClient26 ObjectStublessClient29 ObjectStublessClient24 ObjectStublessClient25

api-ms-win-core-marshal-l1-1-0

HICON_UserFree64 HBITMAP_UserMarshal64 HMENU_UserFree64 HGLOBAL_UserSize HMENU_UserMarshal64 HACCEL_UserFree HBITMAP_UserFree HGLOBAL_UserUnmarshal64 HMONITOR_UserFree HMENU_UserSize HGLOBAL_UserMarshal HBITMAP_UserUnmarshal64 HMENU_UserSize64 HWND_UserUnmarshal HWND_UserFree HWND_UserFree64 HWND_UserSize64 HWND_UserSize HWND_UserMarshal HWND_UserMarshal64 HWND_UserUnmarshal64 HGLOBAL_UserFree64 HMONITOR_UserMarshal HACCEL_UserSize64 HACCEL_UserFree64 HMENU_UserUnmarshal64 HMENU_UserMarshal HICON_UserUnmarshal HGLOBAL_UserUnmarshal HMONITOR_UserFree64 HGLOBAL_UserSize64 HMENU_UserUnmarshal HACCEL_UserUnmarshal64 HMONITOR_UserSize HBITMAP_UserSize HGLOBAL_UserMarshal64 HMONITOR_UserMarshal64 HMENU_UserFree HICON_UserMarshal64 HICON_UserMarshal HACCEL_UserUnmarshal HMONITOR_UserUnmarshal64 HACCEL_UserMarshal HACCEL_UserSize HBITMAP_UserFree64 HICON_UserUnmarshal64 HACCEL_UserMarshal64 HBITMAP_UserMarshal HBITMAP_UserSize64 HICON_UserFree HBITMAP_UserUnmarshal HICON_UserSize64 HICON_UserSize HMONITOR_UserUnmarshal HGLOBAL_UserFree HMONITOR_UserSize64

api-ms-win-core-com-l1-1-0

CoTaskMemFree CoTaskMemRealloc

combase

ord140

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Name

.text

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

6.9MB

Virtual Size

6.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

756KB

Virtual Size

755KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/StartTileData.dll

IMPHASH dc04b594b6adc9aed281d7e5ad85c7ca
SHA256 d2be865cb52194330a3eb4cc164508eccb7de439a620169ecda997cf4cf0c2e0
MD5 ab179d07187b105844669e1d09cd55f6
SHA1 8ea0044c28510b576688ee9e9e24f2e3634d1c05
SHA512 dff48a33b2e557aa616dc181447af71bd0b3054fe26a4380faec34053026833a88a33af0626a38cadc88a2a1f0e15a4ade4e56138d4bee0de3b75f4e5ff3fc4f
SSDEEP 49152:otrfqkBxH6Y7yX0asY7EcEWQ020yL96ewAft+nzTnNCfTpS9hrNUJ0NLGICMKkRr:4Bn7JT6SwJrEuhrayGwEt+
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

b3:3d:69:05:5d:21:a6:f5:96:61:56:81:17:df:18:99:93:41:62:2f:72:33:ea:d4:e6:bf:cb:8f:68:fd:3c:ef

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

1199504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

StartTileData.pdb

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__itow_s _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__set_errno _o__ui64tow_s _o__wcsicmp _o__wcstoi64 _o__wcstoui64 _o__wtoi memmove _o_bsearch_s _o_calloc _o_ceil _o_free _o_iswspace _o_llroundl _o_lround _o_malloc _o_pow _o_rand_s _o_realloc _o_roundf _o_roundl _o_terminate _o_towupper _o_wcscat_s _o_wcscpy_s _o_wcsncpy_s _o_wcstok_s _o_wcstol _o_wcstoul _o_wcstoull __C_specific_handler _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__get_errno _o__execute_onexit_table _o__errno _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__callnewh _CxxThrowException __CxxFrameHandler3 wcschr wcsstr strchr __std_type_info_compare wcsrchr _o___stdio_common_vswscanf _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy __std_terminate __CxxFrameHandler4 memcmp memcpy

api-ms-win-crt-string-l1-1-0

memset wcscspn wcsncmp wcsspn

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls FreeLibrary GetProcAddress FindStringOrdinal LoadStringW GetModuleFileNameA GetModuleHandleW GetModuleHandleExW GetModuleFileNameW

api-ms-win-core-synch-l1-1-0

ResetEvent ReleaseMutex OpenSemaphoreW CreateSemaphoreExW CreateEventW ReleaseSemaphore CreateMutexExW CreateEventExW WaitForSingleObjectEx InitializeCriticalSectionEx DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent InitializeCriticalSectionAndSpinCount ReleaseSRWLockShared AcquireSRWLockShared ReleaseSRWLockExclusive AcquireSRWLockExclusive WaitForSingleObject InitializeSRWLock WaitForMultipleObjectsEx

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapAlloc HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetLastError RaiseException SetUnhandledExceptionFilter UnhandledExceptionFilter GetLastError

api-ms-win-core-processthreads-l1-1-0

TerminateProcess CreateThread GetCurrentProcessId GetCurrentProcess OpenProcessToken GetCurrentThreadId ProcessIdToSessionId GetProcessId SetThreadToken GetCurrentThread OpenThreadToken

api-ms-win-core-localization-l1-2-0

GetGeoInfoW GetUserGeoID GetUserDefaultLCID FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak OutputDebugStringW IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError RoFailFastWithErrorContext SetRestrictedErrorInfo RoTransformError RoOriginateErrorW GetRestrictedErrorInfo

oleaut32

SafeArrayGetDim VariantInit VariantChangeType VariantClear SysStringLen SysAllocString SysFreeString

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventActivityIdControl EventRegister EventUnregister EventSetInformation

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer TrySubmitThreadpoolCallback WaitForThreadpoolTimerCallbacks CreateThreadpoolTimer SetThreadpoolTimer

api-ms-win-core-string-l1-1-0

MultiByteToWideChar CompareStringOrdinal

api-ms-win-core-winrt-string-l1-1-0

WindowsDuplicateString WindowsCreateStringReference WindowsCreateString WindowsGetStringLen WindowsStringHasEmbeddedNull WindowsIsStringEmpty WindowsCompareStringOrdinal WindowsDeleteString WindowsGetStringRawBuffer WindowsPromoteStringBuffer WindowsDeleteStringBuffer WindowsPreallocateStringBuffer WindowsConcatString

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-synch-l1-2-0

InitOnceComplete InitOnceExecuteOnce InitOnceBeginInitialize

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-1

OpenProcess IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64 GetSystemInfo GetSystemTime GetTickCount GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList InterlockedFlushSList

api-ms-win-core-com-l1-1-0

CoUninitialize CoGetMalloc CoEnableCallCancellation CoCancelCall CoCreateGuid PropVariantClear CoInitializeEx CoDisableCallCancellation StringFromGUID2 IIDFromString CoMarshalInterThreadInterfaceInStream CoTaskMemAlloc CoGetInterfaceAndReleaseStream CoCreateFreeThreadedMarshaler CoTaskMemFree CoTaskMemRealloc CoIncrementMTAUsage CoWaitForMultipleHandles CoGetApartmentType CoReleaseMarshalData CreateStreamOnHGlobal CoGetCallContext CoMarshalInterface CoDecrementMTAUsage CoCreateInstance CoRevertToSelf CoGetObjectContext CoGetClassObject

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoInitialize RoGetActivationFactory RoActivateInstance

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindFileNameW PathIsFileSpecW PathGetDriveNumberW PathUnExpandEnvStringsW PathFindExtensionW PathStripPathW PathIsRelativeW SHExpandEnvironmentStringsW PathIsUNCW PathFileExistsW

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled RoOriginateLanguageException RoGetMatchingRestrictedErrorInfo RoReportFailedDelegate

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask SHTaskPoolAllowThreadReuse SHTaskPoolGetUniqueContext

api-ms-win-security-base-l1-1-0

GetTokenInformation RevertToSelf GetAce DuplicateTokenEx ImpersonateLoggedOnUser IsWellKnownSid EqualSid

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalFree

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW

api-ms-win-core-file-l1-1-0

CreateFileW GetFileAttributesW GetFileSize GetFileAttributesExW ReadFile SetEndOfFile SetFilePointer SetFileInformationByHandle FileTimeToLocalFileTime RemoveDirectoryW GetFileSizeEx CreateDirectoryW CompareFileTime FindClose FindNextFileW FindFirstFileW GetDiskFreeSpaceExW WriteFile DeleteFileW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileW

api-ms-win-core-registry-l1-1-0

RegDisablePredefinedCacheEx RegGetValueW RegCloseKey RegQueryInfoKeyW RegQueryValueExW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumKeyExW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrStrIW StrCmpICW

api-ms-win-core-path-l1-1-0

PathCchFindExtension PathCchCombine PathAllocCombine PathCchRemoveFileSpec PathCchAppend PathCchRemoveExtension

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

userenv

GetDefaultUserProfileDirectoryW

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

ntdll

RtlAddAccessAllowedAce RtlSetDaclSecurityDescriptor NtSetSecurityObject NtQueryInformationToken RtlIsMultiSessionSku RtlGetDeviceFamilyInfoEnum RtlGetAce RtlInitUnicodeString RtlCreateAcl RtlAllocateHeap RtlFreeHeap RtlCompareUnicodeString RtlLengthSid RtlQueryInformationAcl RtlGetDaclSecurityDescriptor RtlCreateSecurityDescriptor NtQuerySecurityObject RtlGetCurrentServiceSessionId NtQueryWnfStateData RtlIsMultiUsersInSessionSku RtlPublishWnfStateData NtSetInformationFile RtlUnsubscribeWnfNotificationWaitForCompletion RtlSubscribeWnfStateChangeNotification RtlNtStatusToDosErrorNoTeb RtlAddAce

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask GetProductInfo

rpcrt4

UuidCreate

api-ms-win-core-threadpool-legacy-l1-1-0

DeleteTimerQueueTimer CreateTimerQueueTimer

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-shell-shdirectory-l1-1-0

ord292

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-shcore-path-l1-1-0

ord170

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW K32QueryWorkingSetEx

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory VirtualUnlock

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx

api-ms-win-core-memory-l1-1-0

MapViewOfFile UnmapViewOfFile FlushViewOfFile CreateFileMappingW

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabledForPackage

api-ms-win-security-capability-l1-1-0

CapabilityCheck

sspicli

GetUserNameExW

api-ms-win-shcore-unicodeansi-l1-1-0

SHAnsiToUnicode

api-ms-win-shcore-comhelpers-l1-1-0

IUnknown_SetSite

api-ms-win-core-localization-l1-2-3

GetUserDefaultGeoName

api-ms-win-eventing-controller-l1-1-0

StartTraceW ControlTraceW EnableTraceEx2

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-core-url-l1-1-0

PathIsURLW ParseURLW

api-ms-win-core-normalization-l1-1-0

GetStringScripts

api-ms-win-appmodel-state-l1-2-0

GetStateFolder OpenStateExplicit CloseState

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName SHBindToParent ILFindLastID ILClone SHParseDisplayName SHCreateItemFromIDList SHGetIDListFromObject

api-ms-win-storage-exports-internal-l1-1-0

SHGetSpecialFolderLocation

api-ms-win-shlwapi-winrt-storage-l1-1-1

SHSendMessageBroadcastW ord316 StrRetToStrW

coremessaging

CoreUICreate

api-ms-win-storage-exports-external-l1-1-0

STORAGE_ClearDestinationsForAllApps

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

msvcp_win

?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Xout_of_range@std@@YAXPEBD@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z _Cnd_wait ?_Throw_C_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_XGetLastError@std@@YAXXZ ?__ExceptionPtrToBool@@YA_NPEBX@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ _Cnd_broadcast _Mtx_destroy_in_situ _Cnd_destroy_in_situ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ??0task_continuation_context@Concurrency@@AEAA@XZ ?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ _Cnd_init_in_situ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?is@?$ctype@G@std@@QEBA_NFG@Z ??1_Locinfo@std@@QEAA@XZ ??1_Lockit@std@@QEAA@XZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0_Locinfo@std@@QEAA@PEBD@Z ??0_Lockit@std@@QEAA@H@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ??Bid@locale@std@@QEAA_KXZ _Wcsxfrm _Wcscoll ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?tolower@?$ctype@G@std@@QEBAGG@Z ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?widen@?$ctype@G@std@@QEBAGD@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?classic@locale@std@@SAAEBV12@XZ ?id@?$numpunct@D@std@@2V0locale@2@A ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ ?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?_Xbad_function_call@std@@YAXXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?swap@?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z ?swap@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ?uncaught_exception@std@@YA_NXZ ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?id@?$collate@G@std@@2V0locale@2@A ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?id@?$ctype@G@std@@2V0locale@2@A ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ _Mtx_init_in_situ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

bcp47langs

GetUserLanguages

combase

ord148 ord168 ord154 ord147

shcore

ord200 ord191 ord190 SHUnicodeToAnsi IUnknown_QueryService ord123 ord213 ord270 SHStrDupA

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-crt-math-l1-1-0

ceilf

Name

.text

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

265KB

Virtual Size

264KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

864B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

53KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/VBoxNine.dll

IMPHASH dab63dda4a313df64eff1beff571ba34
SHA256 c936ed000fefe28113985d4e0b4b97921ea5eb26593307b515a9a66ebdfdf7c6
MD5 2b788fd850fee16632907d20cc382797
SHA1 caba9df93efdf6d669520ed833b19c0aa9d9c4d1
SHA512 f17cdf69b9e72310b8f4823f1975297870020e0e8e7a3ca794280c660d463e5c58f96662559ac276261c2a1bf1576527053a4594290bd9650597b168d9d3f193
SSDEEP 98304:BTIqU6ZLgFkiGQjNt1EH0EywBQiMcDqQcoKnSOy2fGa:BYFkiLL1EH0EywBQi95coKnpL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

22160

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\tinderbox\add\out\win.amd64\release\obj\VBoxNine\VBoxNine.pdb

kernel32

DeleteCriticalSection HeapAlloc HeapReAlloc HeapFree GetProcessHeap GetCurrentProcessId GetStdHandle GetLastError GetConsoleMode GetEnvironmentVariableW SetLastError SetErrorMode GetModuleHandleW GetProcAddress GetModuleFileNameW GetModuleHandleA WideCharToMultiByte GetACP CreateFileW FlushFileBuffers GetFileSize SetEndOfFile SetFileAttributesW SetFilePointer WriteFile CloseHandle DuplicateHandle DeviceIoControl GetCurrentProcess TerminateProcess GetCommandLineW OutputDebugStringA RaiseException WaitForSingleObject CreateThread GetCurrentThread GetCurrentThreadId ExitThread LeaveCriticalSection TlsGetValue TlsSetValue GetThreadTimes Sleep GetSystemTime GetVersion GetTickCount SystemTimeToFileTime TlsFree SetThreadPriority GetCurrentDirectoryW GetFullPathNameW GetFileAttributesW MoveFileExW RtlUnwindEx GetSystemDirectoryW FreeLibrary LoadLibraryExW VirtualAlloc VirtualFree InitOnceExecuteOnce InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime GetEnvironmentVariableA IsDebuggerPresent GetSystemInfo GetConsoleWindow GetCommandLineA SetThreadAffinityMask EnterCriticalSection TlsAlloc InitializeCriticalSection GetProcessTimes

user32

EnumDisplayDevicesA

gdi32

CreateDCA DeleteDC

ntdll

NtQueryDirectoryFile NtQueryDirectoryObject NtWaitForSingleObject NtCreateEvent NtResetEvent NtQueryInformationFile NtOpenDirectoryObject NtOpenProcess NtQueryInformationProcess RtlFreeUnicodeString NtCreateFile NtClose NtSetInformationFile NtSetEvent NtQueryVolumeInformationFile

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/VBoxSVGA.dll

IMPHASH f121bc2cf6f2173bdd88c771b0d4240e
SHA256 d23339132929dabdba2910308c8d32c8f70fe661f738d1f25742d825db2e202d
MD5 cef572964e1135cf3f597b95903203f4
SHA1 ea2e11dd848aeff9917081eba499f27c1a8452ad
SHA512 d4f7f354a8a4406523f5c727b20dd5ea58d9ac316b8b9267b60584220ae8cf13ae0a4c07be05f0cd041e56cb5a8075aefaa861e44fdee50f6ecaec0c0589dd7d
SSDEEP 49152:B2/5VZajoqe6ZjGR5olDM90nPPzu4Zq4c/6J/Nq5mFVs9aXbDuFDr1xwbjYjYYZZ:Wxqe6ZKR5olo4qcuFDr1xeNJrnAj
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

20336

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\tinderbox\add\out\win.amd64\release\obj\VBoxSVGA\VBoxSVGA.pdb

kernel32

GetProcessHeap GetStdHandle GetLastError GetConsoleMode GetEnvironmentVariableW SetLastError GetCurrentProcessId WideCharToMultiByte GetACP CreateFileW FlushFileBuffers GetFileSize SetEndOfFile SetFileAttributesW SetFilePointer WriteFile CloseHandle DuplicateHandle DeviceIoControl GetCurrentProcess TerminateProcess SetErrorMode GetModuleHandleW GetProcAddress GetModuleFileNameW GetModuleHandleA RaiseException GetCurrentThread GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue Sleep GetCurrentDirectoryW HeapFree GetFileAttributesW MoveFileExW GetCommandLineW OutputDebugStringA GetSystemTime GetVersion GetTickCount SystemTimeToFileTime TlsFree RtlUnwindEx GetSystemDirectoryW FreeLibrary LoadLibraryExW VirtualAlloc VirtualFree GetEnvironmentVariableA IsDebuggerPresent GetSystemInfo GetConsoleWindow InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitOnceExecuteOnce InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime SetThreadAffinityMask HeapReAlloc GetFullPathNameW HeapAlloc GetCommandLineA

user32

EnumDisplayDevicesA

gdi32

CreateDCA DeleteDC

ntdll

NtSetInformationFile NtWaitForSingleObject NtCreateEvent NtSetEvent NtOpenDirectoryObject NtQueryVolumeInformationFile NtQueryDirectoryObject NtResetEvent RtlFreeUnicodeString NtOpenProcess NtQueryInformationProcess NtClose NtQueryInformationFile NtQueryDirectoryFile NtCreateFile

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.AI.MachineLearning.dll

IMPHASH 372d113682de847d64474ef61656edc6
SHA256 8b003352d78268a56773b5ae0ec487501fbfcb4f6bfd241c63ed7cb1c670a739
MD5 7aacd5cec1998e1a45a332387ad14abf
SHA1 721f24e73765ef9e314df343287bb8aee72dbfed
SHA512 b877726af6792253a55feb05fa94465207f725e1f0b3e3d7a12fac8e04523cdf0f308829f8fd2ad33e069033f81f11bc0468836060e608d2237375dc69fe3ebc
SSDEEP 49152:rH5MUSFCO4bBI9EZ7+aIci7KFJtwyb5tI/p7FSgxcSQoyYFm8ISay+68p+PlIwua:FGCHhFJq/p7FSgxcSQoZsn0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

3716512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

windows.ai.machinelearning.pdb

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress GetModuleFileNameA LoadLibraryExA GetModuleHandleExW FreeLibrary DisableThreadLibraryCalls GetModuleHandleW

api-ms-win-core-synch-l1-2-0

Sleep InitOnceBeginInitialize InitOnceComplete SleepConditionVariableSRW InitOnceExecuteOnce WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable

api-ms-win-core-synch-l1-1-0

ReleaseSRWLockExclusive AcquireSRWLockExclusive ResetEvent ReleaseSemaphore InitializeCriticalSectionAndSpinCount ReleaseSRWLockShared CreateEventW AcquireSRWLockShared WaitForSingleObject InitializeCriticalSectionEx ReleaseMutex InitializeSRWLock CreateSemaphoreExW InitializeCriticalSection EnterCriticalSection TryAcquireSRWLockExclusive WaitForSingleObjectEx DeleteCriticalSection OpenSemaphoreW CreateMutexExW LeaveCriticalSection SetEvent

api-ms-win-core-heap-l1-1-0

HeapFree GetProcessHeap HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetUnhandledExceptionFilter RaiseException GetLastError SetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId GetCurrentThreadId GetProcessTimes GetCurrentProcess TerminateProcess GetExitCodeThread

api-ms-win-eventing-provider-l1-1-0

EventSetInformation EventWriteTransfer EventRegister EventUnregister

api-ms-win-core-processthreads-l1-1-1

OpenProcess IsProcessorFeaturePresent

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx GetCPInfo LCMapStringEx FormatMessageW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringA DebugBreak OutputDebugStringW

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64 GetLogicalProcessorInformation GetSystemTimeAsFileTime GetSystemInfo

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsCreateString WindowsDuplicateString WindowsCreateStringReference WindowsGetStringLen WindowsPromoteStringBuffer WindowsStringHasEmbeddedNull WindowsPreallocateStringBuffer WindowsDeleteStringBuffer WindowsIsStringEmpty WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringEx GetStringTypeW MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-com-l1-1-0

CoCreateFreeThreadedMarshaler CoIncrementMTAUsage CoTaskMemAlloc CoCreateGuid CoTaskMemFree

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError RoOriginateErrorW RoTransformError SetRestrictedErrorInfo GetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-memory-l1-1-0

VirtualQuery VirtualAlloc VirtualProtect VirtualFree

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA LoadLibraryW

api-ms-win-crt-string-l1-1-0

strcmp _wcsdup isalpha isdigit isupper islower _towlower_l _towupper_l __strncnt wcsnlen _stricmp _wcsicmp strcspn memset isspace iswspace tolower

api-ms-win-crt-runtime-l1-1-0

_set_errno abort _invalid_parameter_noinfo _beginthreadex strerror_s fesetround _initterm_e _initterm terminate _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _errno _invalid_parameter_noinfo_noreturn _get_errno

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf __stdio_common_vsprintf_s ungetc setvbuf fsetpos fread fputc _wsopen_s _get_stream_buffer_pointers __stdio_common_vsnprintf_s __acrt_iob_func _fsopen fflush _wfsopen _fseeki64 fgetpos __stdio_common_vfprintf __stdio_common_vsprintf _read fgetc _close _sopen_s fclose fwrite

api-ms-win-crt-heap-l1-1-0

_malloc_base _realloc_base _aligned_malloc _calloc_base free calloc _free_base malloc _callnewh _aligned_free

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func ___lc_collate_cp_func ___mb_cur_max_func _create_locale _lock_locales _unlock_locales localeconv setlocale _free_locale ___lc_codepage_func __pctype_func

api-ms-win-crt-math-l1-1-0

powf sinf pow sinhf sqrt logf acoshf ceil atanf sqrtf atanhf ldexp tanf asinf acosf tanhf coshf exp expf floorf log2 tanh roundf fmod fmodf asinhf nearbyintf log fmaxf cosf _fdtest log2f _dtest ceilf frexp

api-ms-win-crt-time-l1-1-0

wcsftime _Wcsftime _W_Getmonths _mktime64 _localtime64_s _gmtime64_s _difftime64 _W_Getdays _Getdays _Strftime _Getmonths _Gettnames _W_Gettnames

api-ms-win-crt-convert-l1-1-0

_strtoi64 strtoll strtoul strtof strtoull strtol strtod

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-private-l1-1-0

strchr __std_type_info_destroy_list __processing_throw __AdjustPointer __current_exception __uncaught_exception strstr __RTtypeid __std_type_info_name __std_type_info_compare __std_terminate memchr _purecall __std_exception_copy __std_exception_destroy __CxxFrameHandler3 _CxxThrowException memcpy memmove memcmp __C_specific_handler

ext-ms-win-dxcore-l1-1-0

DXCoreCreateAdapterFactory

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlPcToFileHeader RtlCaptureContext RtlVirtualUnwind

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo GetSystemTimePreciseAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-file-l1-1-0

CreateFileW SetFilePointerEx ReadFile GetFileSizeEx

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWork WaitForThreadpoolWorkCallbacks SubmitThreadpoolWork CloseThreadpoolWork TrySubmitThreadpoolCallback

oleaut32

SysFreeString SysStringLen

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-com-l1-1-1

RoGetAgileReference

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

132KB

Virtual Size

156KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

136KB

Virtual Size

135KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.Data.Pdf.dll

IMPHASH e9a2028f23215ae4d9747d3a0b68e686
SHA256 0adf06c8cfc599654b352509fd4ca203e60261142f58cdb882958ea5154c4d85
MD5 1840d09941b37d7693bb78d21d0dd8df
SHA1 87ced0f3e5b990483029249e87a7443d7fb15d93
SHA512 b63feb51edb9cb3ceaa8a73ea057a286e0f72804d5438fa5cf737916a0aafbb02c09cbc173a4758c3f14e5954d7af0660e3b788962b7065095537c24b8837cec
SSDEEP 49152:GP514Yhq1jY2u+Q8/wS2/WoS1JNfX7y+RKVN+fMfRN7To6XiFoHOWwOl0+sj+Oji:HseVwuAT1yVi0byb
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

946288

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Windows.Data.Pdf.pdb

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e

api-ms-win-crt-private-l1-1-0

_o__itoa_s _o__mktime64 _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__set_errno _o__stricmp _o__ui64toa_s _o__ultoa_s _o__wcsicmp memmove _o__wtof _o__wtoi _o_acos _o_bsearch _o_cos _o_exit _o_floor _o_fmod _o_free _o_isalpha _o_isdigit _o_isspace _o_iswupper _o_isxdigit _o_ldexp _o_log10 _o_log2 _o_malloc _o_memcpy_s _o_pow _o_powf _o_qsort _o_rand_s _o_realloc _o_sin _o_strtod _o_strtof _o_strtol _o_terminate _o_towlower _o_wcstoul __C_specific_handler __CxxFrameHandler3 _CxxThrowException _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__hypotf __std_type_info_compare _o__fcvt_s _o__execute_onexit_table _o__errno _o__dtest _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__callnewh _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsprintf_s _o___stdio_common_vsnprintf_s _o___stdio_common_vfwprintf _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o___acrt_iob_func __std_terminate __CxxFrameHandler4 memchr memcmp memcpy strchr

api-ms-win-crt-string-l1-1-0

strnlen strncmp wcsncmp wcscmp wcsnlen memset

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream CreateStreamOverRandomAccessStream

api-ms-win-shcore-obsolete-l1-1-0

SHStrDupW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolGetUniqueContext SHTaskPoolQueueTask SHTaskPoolAllowThreadReuse

api-ms-win-shcore-stream-l1-1-0

SHCreateMemStream

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress SizeofResource DisableThreadLibraryCalls LoadResource LockResource LoadLibraryExW LoadStringW GetModuleFileNameA GetModuleHandleW GetModuleHandleExW FreeLibrary

api-ms-win-core-heap-l1-1-0

HeapAlloc GetProcessHeap HeapFree

api-ms-win-core-com-l1-1-0

CoWaitForMultipleHandles StringFromGUID2 CoCreateInstanceFromApp CoCreateInstance CoTaskMemRealloc CoCreateGuid CoMarshalInterface PropVariantClear CreateStreamOnHGlobal CoTaskMemFree CoGetApartmentType CoCreateFreeThreadedMarshaler PropVariantCopy CoReleaseMarshalData CoGetInterfaceAndReleaseStream CoTaskMemAlloc CoMarshalInterThreadInterfaceInStream

api-ms-win-core-processthreads-l1-1-0

OpenProcessToken GetCurrentProcess TerminateProcess GetCurrentProcessId GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FindNLSStringEx FormatMessageW

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo SetRestrictedErrorInfo RoOriginateErrorW RoOriginateError RoFailFastWithErrorContext RoTransformError

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore AcquireSRWLockShared CreateEventW TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock CreateSemaphoreExW ReleaseMutex CreateMutexExW ResetEvent InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx DeleteCriticalSection SetEvent ReleaseSRWLockShared EnterCriticalSection LeaveCriticalSection CreateEventExW OpenSemaphoreW WaitForSingleObject WaitForMultipleObjectsEx WaitForSingleObjectEx

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW WakeConditionVariable InitOnceBeginInitialize InitOnceExecuteOnce InitOnceInitialize InitOnceComplete InitializeConditionVariable

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventUnregister EventSetInformation EventActivityIdControl EventRegister

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-winrt-string-l1-1-0

WindowsPromoteStringBuffer WindowsPreallocateStringBuffer WindowsDuplicateString WindowsIsStringEmpty WindowsStringHasEmbeddedNull WindowsCompareStringOrdinal WindowsGetStringRawBuffer WindowsCreateString WindowsDeleteString HSTRING_UserSize WindowsDeleteStringBuffer HSTRING_UserMarshal WindowsCreateStringReference HSTRING_UserUnmarshal64 HSTRING_UserUnmarshal HSTRING_UserMarshal64 HSTRING_UserFree HSTRING_UserSize64 HSTRING_UserFree64

rpcrt4

CStdStubBuffer_DebugServerRelease NdrOleFree NdrCStdStubBuffer_Release NdrOleAllocate NdrCStdStubBuffer2_Release CStdStubBuffer_Connect CStdStubBuffer_AddRef IUnknown_Release_Proxy NdrStubForwardingFunction CStdStubBuffer_IsIIDSupported CStdStubBuffer_Invoke IUnknown_QueryInterface_Proxy IUnknown_AddRef_Proxy CStdStubBuffer_DebugServerQueryInterface CStdStubBuffer_Disconnect CStdStubBuffer_QueryInterface NdrDllCanUnloadNow CStdStubBuffer_CountRefs NdrDllGetClassObject NdrStubCall3

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient17 ObjectStublessClient26 ObjectStublessClient28 ObjectStublessClient27 ObjectStublessClient9 CStdStubBuffer2_Connect ObjectStublessClient8 ObjectStublessClient6 ObjectStublessClient10 NdrProxyForwardingFunction5 NdrProxyForwardingFunction4 ObjectStublessClient24 ObjectStublessClient19 ObjectStublessClient3 ObjectStublessClient13 ObjectStublessClient7 ObjectStublessClient21 NdrProxyForwardingFunction3 CStdStubBuffer2_Disconnect ObjectStublessClient23 ObjectStublessClient25 CStdStubBuffer2_CountRefs ObjectStublessClient15 ObjectStublessClient20 ObjectStublessClient18 ObjectStublessClient22 ObjectStublessClient16 ObjectStublessClient11 ObjectStublessClient12 ObjectStublessClient14 CStdStubBuffer2_QueryInterface

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlCaptureContext RtlVirtualUnwind

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter GetLastError RaiseException SetUnhandledExceptionFilter SetLastError

api-ms-win-core-processthreads-l1-1-1

OpenProcess IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetTickCount64 GetTickCount

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer CloseThreadpoolTimer

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoGetActivationFactory

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-string-l1-1-0

GetStringTypeExW MultiByteToWideChar WideCharToMultiByte CompareStringOrdinal

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-core-winrt-error-l1-1-1

IsErrorPropagationEnabled RoReportFailedDelegate RoGetMatchingRestrictedErrorInfo

api-ms-win-security-base-l1-1-0

GetTokenInformation

oleaut32

VariantInit SysAllocString VariantClear SafeArrayGetUBound SafeArrayGetLBound SafeArrayDestroy SafeArrayCopy SafeArrayCreateVector SafeArrayPutElement SafeArrayRedim SafeArrayAccessData SysFreeString SysAllocStringLen

api-ms-win-core-url-l1-1-0

UrlIsW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathIsUNCW

d2d1

ord13 ord2 ord1 ord4 ord5

d3d11

D3D11CreateDevice

dwrite

DWriteCreateFactory

ntdll

RtlGetDeviceFamilyInfoEnum NtQueryInformationProcess

propsys

InitPropVariantFromFileTime ord436

api-ms-win-core-winrt-robuffer-l1-1-0

RoGetBufferMarshaler

msvcp_win

_Wcsxfrm _Wcscoll ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?is@?$ctype@G@std@@QEBA_NFG@Z ?id@?$ctype@G@std@@2V0locale@2@A ?id@?$collate@G@std@@2V0locale@2@A ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z ?tolower@?$ctype@G@std@@QEBAGG@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setf@ios_base@std@@QEAAHH@Z ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ??Bios_base@std@@QEBA_NXZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ?widen@?$ctype@G@std@@QEBAGD@Z ??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z ??1facet@locale@std@@MEAA@XZ ??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?flags@ios_base@std@@QEBAHXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?width@ios_base@std@@QEAA_J_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setf@ios_base@std@@QEAAHHH@Z ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Xlength_error@std@@YAXPEBD@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?width@ios_base@std@@QEBA_JXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xbad_alloc@std@@YAXXZ ??0_Lockit@std@@QEAA@H@Z ??0_Locinfo@std@@QEAA@PEBD@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??1_Lockit@std@@QEAA@XZ ??1_Locinfo@std@@QEAA@XZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?id@?$ctype@D@std@@2V0locale@2@A ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??7ios_base@std@@QEBA_NXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?is@?$ctype@D@std@@QEBA_NFD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z _Strxfrm _Strcoll ?id@?$collate@D@std@@2V0locale@2@A ?tolower@?$ctype@D@std@@QEBADD@Z ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?eof@ios_base@std@@QEBA_NXZ ?bad@ios_base@std@@QEBA_NXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?uncaught_exception@std@@YA_NXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??0facet@locale@std@@IEAA@_K@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?fail@ios_base@std@@QEBA_NXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?good@ios_base@std@@QEBA_NXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ

api-ms-win-crt-math-l1-1-0

_finite atan2f atanf ceilf cosf floorf fmodf log10f logf sinf sqrtf _isnan

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

cabinet

ord45 ord43 ord40

api-ms-win-core-normalization-l1-1-0

IsNormalizedString NormalizeString

dxgi

CreateDXGIFactory1

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

39KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

226KB

Virtual Size

226KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

79KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.Media.Protection.PlayReady.dll

IMPHASH b8533af352ab90323acc17429607d7cb
SHA256 3cc6724d105e94bb0fb5971cc07ab2967dde2290ecebf4e0d4a910c80732ba7a
MD5 5e1d4b2597acc737a63a8380e949405f
SHA1 7ab10eb8934433e23def236dd5a43398c561e736
SHA512 4db03b95bcae7f3e3fb1cf7fcde417a244b9595cef02a35551009d88cc3d9690523ef444424e80de58932f6c02703ccccc8d292f2dba81c04a369c958e88b08d
SSDEEP 196608:tBfn+lIArR8UFTQ6kB/DBwCF56aRPJH9AtNyUQDnpy24rYC:vnJQ8UFfKBw7GabyUQDnpy24rYC
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

fa:88:01:df:8c:42:cc:e0:dc:4a:51:8d:bf:81:7d:94:a5:34:09:28:c6:da:1d:54:05:81:86:b1:54:53:42:61

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

972896

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Windows.Media.Protection.PlayReady.pdb

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle GetTraceEnableFlags RegisterTraceGuidsW GetTraceEnableLevel TraceMessage UnregisterTraceGuids

api-ms-win-core-localization-l1-2-0

LCMapStringW GetCPInfo GetOEMCP GetACP FormatMessageW IsValidCodePage

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread GetCurrentProcess CreateThread ExitProcess TlsFree SetThreadStackGuarantee GetStartupInfoW GetCurrentThreadId TlsSetValue GetExitCodeProcess TlsAlloc TerminateProcess InitializeProcThreadAttributeList CreateProcessW UpdateProcThreadAttribute TlsGetValue GetCurrentProcessId

api-ms-win-core-heap-l1-1-0

HeapFree HeapAlloc HeapDestroy GetProcessHeap HeapSetInformation HeapReAlloc HeapSize HeapCreate

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW LoadLibraryExW GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibraryAndExitThread GetModuleFileNameA FreeLibrary GetModuleHandleW GetModuleHandleExW DisableThreadLibraryCalls

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW DebugBreak OutputDebugStringA

api-ms-win-core-errorhandling-l1-1-0

RaiseException GetLastError SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection ReleaseMutex ReleaseSemaphore CreateSemaphoreExW ReleaseSRWLockShared OpenSemaphoreW InitializeSRWLock AcquireSRWLockShared EnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection SetEvent ResetEvent WaitForSingleObject InitializeCriticalSectionEx WaitForSingleObjectEx CreateEventExW ReleaseSRWLockExclusive AcquireSRWLockExclusive CreateEventW DeleteCriticalSection CreateMutexExW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolTimer CloseThreadpoolTimer CreateThreadpoolTimer WaitForThreadpoolTimerCallbacks

api-ms-win-core-winrt-string-l1-1-0

WindowsCompareStringOrdinal WindowsGetStringRawBuffer HSTRING_UserFree HSTRING_UserMarshal64 WindowsDeleteString WindowsStringHasEmbeddedNull WindowsCreateString WindowsGetStringLen HSTRING_UserSize HSTRING_UserUnmarshal64 HSTRING_UserMarshal HSTRING_UserFree64 WindowsCreateStringReference HSTRING_UserUnmarshal WindowsIsStringEmpty HSTRING_UserSize64

api-ms-win-core-featurestaging-l1-1-0

UnsubscribeFeatureStateChangeNotification GetFeatureEnabledState SubscribeFeatureStateChangeNotification RecordFeatureUsage

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo RoTransformError RoOriginateError RoOriginateErrorW GetRestrictedErrorInfo

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce SleepConditionVariableSRW WakeAllConditionVariable Sleep

api-ms-win-eventing-provider-l1-1-0

EventRegister EventUnregister EventWriteTransfer EventSetInformation

api-ms-win-core-com-l1-1-0

CoCreateGuid CoInitializeEx CreateStreamOnHGlobal CoCreateInstance PropVariantClear CoWaitForMultipleHandles CoGetApartmentType PropVariantCopy CoTaskMemAlloc CoUninitialize CoTaskMemFree CoMarshalInterface CoUnmarshalInterface CoGetMarshalSizeMax CoCreateFreeThreadedMarshaler

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoActivateInstance RoGetActivationFactory RoInitialize

api-ms-win-core-memory-l1-1-0

UnmapViewOfFile MapViewOfFile VirtualQuery VirtualProtect VirtualQueryEx VirtualFree MapViewOfFileEx CreateFileMappingW VirtualAlloc

ntdll

NtQuerySystemInformation VerSetConditionMask

api-ms-win-core-rtlsupport-l1-1-0

RtlDeleteFunctionTable RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlAddFunctionTable RtlPcToFileHeader RtlUnwindEx

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy

api-ms-win-core-string-l1-1-0

MultiByteToWideChar WideCharToMultiByte GetStringTypeW

api-ms-win-core-processenvironment-l1-1-0

SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetStdHandle

oleaut32

BSTR_UserUnmarshal64 LPSAFEARRAY_UserFree LPSAFEARRAY_UserUnmarshal SysAllocString BSTR_UserMarshal64 SysAllocStringLen LPSAFEARRAY_UserFree64 LPSAFEARRAY_UserMarshal64 BSTR_UserFree LPSAFEARRAY_UserSize64 BSTR_UserSize LPSAFEARRAY_UserSize SysFreeString BSTR_UserUnmarshal LPSAFEARRAY_UserUnmarshal64 BSTR_UserMarshal SysStringLen BSTR_UserSize64 BSTR_UserFree64 LPSAFEARRAY_UserMarshal

api-ms-win-core-fibers-l1-1-0

FlsGetValue FlsFree FlsAlloc FlsSetValue

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64 GetLocalTime GetTickCount GetVersionExW GetSystemInfo GetSystemTimeAsFileTime

api-ms-win-core-file-l1-1-0

WriteFile ReadFile SetFilePointer FileTimeToLocalFileTime CreateFileW GetFileType GetFileSize GetDiskFreeSpaceW FlushFileBuffers LockFileEx DeleteFileW SetFileAttributesW GetFileAttributesW UnlockFileEx SetEndOfFile CreateDirectoryW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-console-l1-1-0

WriteConsoleW GetConsoleCP GetConsoleMode

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

propsys

PSCreateMemoryPropertyStore

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

api-ms-win-core-registry-l1-1-0

RegCloseKey RegDeleteValueW RegQueryValueExW RegSetValueExW RegOpenKeyExW

api-ms-win-security-sddl-l1-1-0

ConvertSecurityDescriptorToStringSecurityDescriptorW

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW VerQueryValueW GetFileVersionInfoExW

api-ms-win-core-file-l2-1-0

MoveFileExW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-kernel32-legacy-l1-1-0

GlobalMemoryStatus

mfplat

MFCreateMediaExtensionActivate MFPutWorkItem MFCreateAsyncResult MFPutWorkItemEx MFCopyImage MFCreateTrackedSample MFCreateCollection MFPutWorkItemEx2 MFIsContentProtectionDeviceSupported MFCreateAttributes MFPutWaitingWorkItem MFCreateEventQueue MFGetSystemTime MFCreateContentProtectionDevice MFCreateContentDecryptorContext MFCreateMediaEvent MFScheduleWorkItemEx MFLockWorkQueue MFUnlockWorkQueue MFUnwrapMediaType MFStartup MFShutdown MFInvokeCallback

rpcrt4

CStdStubBuffer_DebugServerRelease NdrDllGetClassObject IUnknown_QueryInterface_Proxy NdrDllCanUnloadNow NdrCStdStubBuffer_Release IUnknown_Release_Proxy NdrStubCall3 CStdStubBuffer_Invoke CStdStubBuffer_AddRef CStdStubBuffer_IsIIDSupported NdrCStdStubBuffer2_Release NdrOleFree NdrStubForwardingFunction CStdStubBuffer_Connect CStdStubBuffer_Disconnect CStdStubBuffer_QueryInterface CStdStubBuffer_CountRefs CStdStubBuffer_DebugServerQueryInterface IUnknown_AddRef_Proxy NdrOleAllocate

api-ms-win-core-com-midlproxystub-l1-1-0

ObjectStublessClient7 NdrProxyForwardingFunction9 ObjectStublessClient14 ObjectStublessClient4 ObjectStublessClient18 ObjectStublessClient9 ObjectStublessClient12 ObjectStublessClient11 CStdStubBuffer2_CountRefs ObjectStublessClient8 ObjectStublessClient16 NdrProxyForwardingFunction8 NdrProxyForwardingFunction6 ObjectStublessClient3 CStdStubBuffer2_Disconnect CStdStubBuffer2_QueryInterface NdrProxyForwardingFunction4 NdrProxyForwardingFunction5 ObjectStublessClient15 CStdStubBuffer2_Connect ObjectStublessClient6 ObjectStublessClient17 ObjectStublessClient10 ObjectStublessClient13 NdrProxyForwardingFunction3 NdrProxyForwardingFunction7 ObjectStublessClient19 ObjectStublessClient5

userenv

GetAppContainerRegistryLocation

api-ms-win-dx-d3dkmt-l1-1-0

GdiEntry13

api-ms-win-security-provider-l1-1-0

GetSecurityInfo

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc GlobalFree

api-ms-win-core-wow64-l1-1-0

Wow64RevertWow64FsRedirection IsWow64Process Wow64DisableWow64FsRedirection

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageId GetCurrentApplicationUserModelId GetCurrentPackageFamilyName

rtworkq

RtwqSetLongRunning

Name

.text

Size

6.8MB

Virtual Size

6.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

57KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

512B

Virtual Size

268B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

?g_Encry

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

30KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

145KB

Virtual Size

144KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

144B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Windows.StateRepository.dll

IMPHASH ea1b7bcae41239e54d525702fc6207c6
SHA256 629e7e99576592446bbb98e153786a60040f4f6ec90aebbfb2c4b83bbce2713c
MD5 ce54597e91739750a8dcb0c96068fd71
SHA1 3773f8f0210120ef49c62a274acdcf204b9ba2a5
SHA512 d890a0186e363b917144f74d5858d762f46dd708818c8674668b39aa91eb682bbe75f675788d1bd1036df8137283e67e53b782ccdb30b04f4ac687a2fb09041c
SSDEEP 49152:OtVPuaeiy6SKykAKiqwS8CQMePaqSy/U6ePzHFCCfT1igXWUB77mk2iZ3qV4OtWF:Iw6XtBaAC5IJy+nPHgU
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

28:25:ff:59:c3:e4:1b:8b:68:6a:c9:49:13:e7:49:90:9f:5f:62:69:d8:ff:1d:bb:2c:3b:4f:dc:23:b3:78:b6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

373392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Windows.StateRepository.pdb

msvcrt

realloc _purecall memmove_s _ui64tow_s _XcptFilter _amsg_exit malloc _initterm __C_specific_handler wcschr _unlock __dllonexit _onexit __CxxFrameHandler3 memset _vsnwprintf toupper memmove _callnewh wcsrchr _vsnprintf _lock _stricmp memcmp memcpy free memcpy_s strcmp

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary LoadLibraryExW GetProcAddress GetModuleFileNameA GetModuleHandleW GetModuleHandleExW

api-ms-win-core-synch-l1-1-0

CreateMutexExW AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared WaitForSingleObject InitializeCriticalSectionEx ReleaseSemaphore ReleaseSRWLockExclusive DeleteCriticalSection CreateSemaphoreExW CreateEventW WaitForSingleObjectEx OpenSemaphoreW EnterCriticalSection LeaveCriticalSection SetEvent InitializeSRWLock ReleaseMutex

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapFree HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetLastError SetUnhandledExceptionFilter RaiseException GetLastError UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId TerminateProcess GetProcessId OpenProcessToken GetCurrentProcessId GetCurrentThread OpenThreadToken ProcessIdToSessionId SetThreadToken GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-eventing-provider-l1-1-0

EventUnregister EventRegister EventSetInformation EventActivityIdControl EventProviderEnabled EventWriteTransfer

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-service-core-l1-1-0

RegisterServiceCtrlHandlerExW SetServiceStatus

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-synch-l1-2-0

InitOnceComplete InitOnceExecuteOnce InitOnceBeginInitialize Sleep

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer

ntdll

RtlLookupElementGenericTableAvl RtlDowncaseUnicodeString RtlInsertElementGenericTableAvl RtlAcquireSRWLockExclusive RtlReleaseSRWLockExclusive RtlAcquireSRWLockShared RtlReleaseSRWLockShared RtlCompareUnicodeString RtlFreeUnicodeString RtlInitUnicodeString RtlConvertSidToUnicodeString RtlCopySid NtQueryInformationToken RtlExpandEnvironmentStrings NtSetInformationThread NtQueryInformationThread NtQueryInformationProcess RtlNtStatusToDosErrorNoTeb NtQueryInformationFile RtlIsMultiUsersInSessionSku RtlDeleteCriticalSection RtlInitializeCriticalSection RtlLeaveCriticalSection RtlEnterCriticalSection RtlAllocateHeap RtlFreeHeap NtAccessCheck RtlLengthSid RtlEqualSid RtlValidSid RtlDetermineDosPathNameType_U RtlGetDeviceFamilyInfoEnum RtlInitializeGenericTableAvl

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalFree

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertSidToStringSidW ConvertStringSidToSidW

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetTickCount GetLocalTime

combase

ord66 ord68 ord69 ord67

staterepository.core

sqlite3_vfs_unregister sqlite3_vfs_register sqlite3_vfs_find sqlite3_expanded_sql sqlite3_snprintf sqlite3_profile sqlite3_trace sqlite3_config sqlite3_status sqlite3_step sqlite3_reset sqlite3_finalize sqlite3_sql sqlite3_column_type sqlite3_column_blob sqlite3_column_text16 sqlite3_column_bytes sqlite3_column_text sqlite3_column_int64 sqlite3_column_int sqlite3_bind_blob sqlite3_bind_text16 sqlite3_bind_int64 sqlite3_bind_int sqlite3_bind_null sqlite3_clear_bindings sqlite3_db_handle sqlite3_exec sqlite3_stmt_busy sqlite3_prepare_v2 sqlite3_result_text16 sqlite3_value_int64 sqlite3_free sqlite3_result_blob sqlite3_malloc sqlite3_value_bytes sqlite3_value_blob sqlite3_value_int sqlite3_value_text16 sqlite3_value_type sqlite3_result_int sqlite3_result_int64 sqlite3_result_error_code sqlite3_result_error16 sqlite3_result_error_nomem sqlite3_user_data sqlite3_create_function_v2 sqlite3_errcode sqlite3_next_stmt sqlite3_db_status sqlite3_busy_timeout sqlite3_db_filename sqlite3_last_insert_rowid sqlite3_changes sqlite3_wal_checkpoint_v2 sqlite3_wal_autocheckpoint sqlite3_db_config sqlite3_get_autocommit sqlite3_extended_result_codes sqlite3_file_control sqlite3_extended_errcode sqlite3_open_v2 sqlite3_log sqlite3_errmsg sqlite3_close sqlite3_enable_shared_cache sqlite3_shutdown sqlite3_initialize

api-ms-win-appmodel-runtime-internal-l1-1-3

CouldMultiUserAppsBehaviorBePossibleForPackage

api-ms-win-appmodel-runtime-internal-l1-1-1

GetPackageFullNameFromToken

api-ms-win-security-base-l1-1-0

CopySid GetLengthSid EqualSid GetTokenInformation IsValidSid CreateWellKnownSid

api-ms-win-core-string-l1-1-0

MultiByteToWideChar WideCharToMultiByte CompareStringOrdinal

api-ms-win-security-accesshlpr-l1-1-0

FreeTransientObjectSecurityDescriptor BuildSecurityDescriptorForSharingAccess

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-file-l1-1-0

GetFileAttributesW WriteFile CreateFileW DeleteFileW

api-ms-win-core-file-l2-1-0

MoveFileExW GetFileInformationByHandleEx

api-ms-win-core-registry-l1-1-0

RegDeleteTreeW RegCloseKey RegEnumKeyExW RegCreateKeyExW RegDeleteValueW RegOpenKeyExW RegQueryValueExW RegQueryInfoKeyW RegSetValueExW

api-ms-win-security-lsalookup-l1-1-0

LsaLookupGetDomainInfo LsaLookupOpenLocalPolicy LsaLookupFreeMemory LsaLookupClose

api-ms-win-core-psapi-l1-1-0

QueryFullProcessImageNameW

api-ms-win-security-lsalookup-l2-1-0

LookupAccountSidW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-windowserrorreporting-l1-1-1

WerRegisterCustomMetadata

api-ms-win-core-path-l1-1-0

PathCchCombine

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentApplicationUserModelId GetCurrentPackageFamilyName GetCurrentPackageFullName

api-ms-win-appmodel-runtime-l1-1-1

GetApplicationUserModelIdFromToken

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.2MB

Virtual Size

2.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

154KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

488B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

40KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_asyncio.pyd

IMPHASH 9d434eba59ce931bdee5b38eec4b196b
SHA256 6306be660d87ffb2271dd5d783ee32e735a792556e0b5bd672dc0b1c206fdadc
MD5 cee78dc603d57cb2117e03b2c0813d84
SHA1 095c98ca409e364b8755dc9cfd12e6791bf6e2b8
SHA512 7258560aa557e3e211bb9580add604b5191c769594e17800b2793239df45225a82ce440a6b9dcf3f2228ed84712912affe9bf0b70b16498489832df2dee33e7e
SSDEEP 1536:k2icaMc907zrzE6+gTKnEzhIVOnZC7SyMx6:k2icrc4HE6+gTOEzhIVOn0j
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

34:92:f7:32:be:2a:9f:03:4c:11:99:bb:b9:b8:66:27:c3:0e:0f:81:ee:9e:fc:c3:ff:1f:ec:e2:1e:9d:b4:30

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

6496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_asyncio.pdb

python311

PyIter_Send PyExc_ValueError PyErr_Format PyModule_AddType _Py_FalseStruct PyCoro_Type PyType_IsSubtype PyErr_Restore _Py_Dealloc PyObject_Free PyErr_ExceptionMatches _PyUnicode_FromId PyModule_AddObject PyObject_GC_Del PyErr_Fetch PyObject_CallFunctionObjArgs PyObject_ClearWeakRefs PyObject_Vectorcall PyUnicode_FromFormat PySet_New PyList_New PyModule_Create2 _PyObject_GetAttrId PyType_Ready PyObject_GetAttrString PyList_Append PyObject_RichCompareBool PyException_SetTraceback _PyDict_GetItemIdWithError Py_BuildValue PyUnicode_Type PyObject_CallMethod _PyArg_UnpackKeywords _PyDict_GetItem_KnownHash PyObject_VectorcallMethod PyObject_IsInstance PyExc_StopIteration PyContext_CopyCurrent PyCMethod_New _PyGen_SetStopIterationValue _PyRuntime PyObject_GC_Track _PyType_Name _Py_NewReference _PyObject_New PyExc_TypeError PyObject_IsTrue PyObject_Str _PyLong_AsInt PyGen_Type _PyThreadState_GetDict _Py_TrueStruct _PyObject_GC_New PyTraceBack_Type _Py_IsFinalizing PyThreadState_GetID _PyDict_DelItem_KnownHash PyUnicode_FromString PyObject_CallNoArgs PyObject_Hash PyObject_GC_UnTrack PyLong_FromLong PyExc_RuntimeError _PyGen_FetchStopIterationValue PyList_SetSlice PyErr_WriteUnraisable _PyObject_LookupAttrId PyErr_SetString PyExc_SystemExit _PyObject_CallMethodIdObjArgs PyExc_AttributeError PySet_Add PyTuple_New _Py_NoneStruct PyExc_KeyboardInterrupt PyUnicode_FromFormatV PySet_Contains PyObject_CallFinalizerFromDealloc _PyDict_SetItemId _PyErr_ChainExceptions PyObject_GenericGetAttr PyLong_FromSsize_t PyErr_Occurred PyObject_SelfIter PyErr_NormalizeException PyImport_ImportModule _PyErr_BadInternalCall _PyDict_SetItem_KnownHash _PyArg_CheckPositional PyType_GenericNew _PyObject_SetAttrId PyErr_GivenExceptionMatches PyObject_CallOneArg PyErr_SetObject PyException_GetTraceback PyDict_New Py_GenericAlias

vcruntime140

__std_type_info_destroy_list __C_specific_handler memset memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _initterm

kernel32

IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_bz2.pyd

IMPHASH d0a62ab71a2b2ca69c6aba1f0a37fcdd
SHA256 403e76fe18515a5ea3227cf5f919aa2f32ac3233853c9fb71627f2251c554d09
MD5 28ede9ce9484f078ac4e52592a8704c7
SHA1 bcf8d6fe9f42a68563b6ce964bdc615c119992d0
SHA512 8c372f9f6c4d27f7ca9028c6034c17deb6e98cfef690733465c1b44bd212f363625d9c768f8e0bd4c781ddde34ee4316256203ed18fa709d120f56df3cca108b
SSDEEP 1536:7/Uez7qlMjca6uPZLPYMPHn3m8bhztpIVCVC7SyhJDxhy:4ezGC4TM/3RbhhpIVCVCXpy
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

85:29:d0:ab:ea:b4:02:6b:ea:f3:cb:e7:7e:89:6c:d7:bd:96:35:28:39:3a:0d:b0:30:60:9c:35:cc:2c:1b:ca

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

42476

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_bz2.pdb

python311

_PyLong_AsInt PyModule_GetState PyExc_SystemError PyMem_Realloc PyType_FromModuleAndSpec PyBytes_FromStringAndSize PyModuleDef_Init PyExc_OSError PyErr_NoMemory PyMem_Free PyThread_free_lock PyList_Append PyExc_EOFError _PyNumber_Index PyObject_GetBuffer PyMem_RawFree PyBuffer_Release PyThread_release_lock PyEval_RestoreThread PyMem_Malloc _Py_Dealloc PyList_New PyModule_AddType PyErr_Format PyExc_ValueError _PyArg_UnpackKeywords PyErr_SetString _PyArg_BadArgument PyThread_acquire_lock _PyArg_NoPositional PyMem_RawMalloc PyThread_allocate_lock PyExc_MemoryError PyErr_SetNone PyBuffer_IsContiguous PyExc_RuntimeError PyEval_SaveThread PyErr_Occurred _PyArg_CheckPositional PyLong_AsSsize_t _PyArg_NoKeywords PyType_GenericNew

vcruntime140

memmove memcpy __std_type_info_destroy_list __C_specific_handler memset

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _seh_filter_dll _initterm_e _initialize_narrow_environment _initialize_onexit_table exit _execute_onexit_table _cexit _initterm

api-ms-win-crt-heap-l1-1-0

free malloc

kernel32

GetCurrentProcessId RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId RtlCaptureContext QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_cffi_backend.pyd

IMPHASH 7b0664ceca43c5b99d901ced2b4d998c
SHA256 9aee90cf7980c8ff694bb3ffe06c71f87eb6a613033f73e3174a732648d39980
MD5 739d352bd982ed3957d376a9237c9248
SHA1 961cf42f0c1bb9d29d2f1985f68250de9d83894d
SHA512 585a5143519ed9b38bb53f912cea60c87f7ce8ba159a1011cf666f390c2e3cc149e0ac601b008e039a0a78eaf876d7a3f64fff612f5de04c822c6e214bc2efde
SSDEEP 3072:87aw5iwiVHprp0+/aSdXUONX9dAXS7qkSTLkKh23/qZl:87kBVHplaSdRj4LkSTLLhW/q
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

107680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python311

PyErr_ExceptionMatches PyThread_release_lock PyComplex_AsCComplex PyCapsule_GetPointer PyModule_AddObject _PyArg_ParseTuple_SizeT PyObject_GC_Del PyErr_Fetch PyObject_CallFunctionObjArgs PyLong_AsLong PyObject_ClearWeakRefs PyObject_Init PyUnicode_AsUTF8 PyUnicode_AsWideCharString PyUnicode_FromFormat PyObject_GetBuffer PyList_New PyModule_Create2 PyImport_AddModule PyType_Ready PyObject_GetAttrString PyErr_NewException _PyObject_CallMethod_SizeT PyErr_Clear PyList_Append PyObject_RichCompareBool PyTuple_Size PyThreadState_GetDict PyCapsule_New PyObject_GenericSetAttr _Py_HashPointer PyDict_SetItem PyDict_New _PyLong_Sign PyUnicode_Type PyThread_free_lock PyObject_IsInstance PyMem_Free PyLong_FromVoidPtr PyType_GenericAlloc PyObject_AsFileDescriptor PyUnicode_AsWideChar PyCMethod_New PyList_Type PyErr_NoMemory PyModule_GetDict PyDict_GetItem PyDict_Clear PyLong_AsVoidPtr PyUnicode_DecodeLatin1 PyUnicode_FromKindAndData PyIndex_Check PyObject_GC_Track PyBytes_FromStringAndSize _Py_NotImplementedStruct PyExc_NotImplementedError PyGILState_Ensure PyDict_DelItem PyNumber_Long PyNumber_AsSsize_t _PyObject_New PyExc_TypeError PyThreadState_Clear PyDict_Copy PyObject_Str PyTuple_Pack _PyByteArray_empty_string PyModule_Type PyCallable_Check PyMem_Malloc PyExc_IndexError PyExc_ImportError _Py_TrueStruct PyExc_SystemError _PyObject_GC_New _PyObject_GC_NewVar PyUnicode_GetLength _Py_FatalErrorFunc Py_FileSystemDefaultEncoding PyDict_Keys PyUnicode_FromString PyGILState_GetThisThreadState PyComplex_FromCComplex PyBuffer_Release PyObject_Call PyObject_Repr PyByteArray_Type PyType_Type PyThreadState_Delete PyEval_RestoreThread PyUnicode_FromStringAndSize Py_FatalError PyTuple_GetItem _Py_Dealloc PyExc_OverflowError PyErr_Restore PyType_IsSubtype PyErr_SetFromErrno PyFloat_Type _Py_FalseStruct PyTuple_Type PyBool_Type PyObject_RichCompare PyLong_AsUnsignedLongLongMask PyErr_Format _PyArg_ParseTupleAndKeywords_SizeT PyDict_Next PyLong_FromUnsignedLong PyUnicode_InternInPlace PyExc_ValueError PyObject_GetIter PyErr_WriteUnraisable PyExc_ZeroDivisionError PyErr_SetString PyUnicode_FromWideChar PyUnicode_New PyTuple_GetSlice PyExc_AttributeError PyBuffer_FillInfo PyFloat_FromDouble PyUnicode_AsUCS4 PyExc_WindowsError PyThread_acquire_lock PyLong_FromLongLong PyExc_UserWarning PyDict_Size PyDict_SetItemString PyTuple_New PyLong_AsLongLong _Py_NoneStruct PyGILState_Release PyRun_StringFlags PyLong_AsUnsignedLongLong PyFloat_AsDouble PySys_GetObject PyThread_allocate_lock PyLong_FromUnsignedLongLong PyExc_MemoryError _PyErr_WriteUnraisableMsg PyErr_SetNone PyBuffer_IsContiguous PyObject_Hash PyObject_GC_UnTrack PySlice_Unpack PyLong_FromLong PyObject_SetAttrString PyExc_RuntimeError _PyThreadState_UncheckedGet PyList_SetSlice PyEval_SaveThread PyObject_GenericGetAttr PyLong_FromSsize_t PyErr_Occurred PyObject_SelfIter PyErr_NormalizeException PyImport_ImportModule PySlice_Type PyExc_KeyError PyLong_AsSsize_t PyErr_WarnEx PyModule_AddIntConstant PyObject_Malloc _PyObject_CallFunction_SizeT _Py_BuildValue_SizeT PyBool_FromLong PyErr_SetObject PyObject_Free PySlice_AdjustIndices PyThreadState_Get PyCFunction_Type PyUnicode_InternFromString PyExc_OSError PyInterpreterState_GetDict

user32

MessageBoxW

kernel32

TlsGetValue IsDebuggerPresent InitializeSListHead TlsSetValue SetLastError VirtualAlloc LoadLibraryExA Sleep FormatMessageW GetLastError TlsAlloc CloseHandle GetSystemInfo CreateThread GetProcAddress LocalFree FreeLibrary GetCurrentThreadId LoadLibraryExW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

vcruntime140

memcmp memcpy memchr memset __std_type_info_destroy_list __C_specific_handler memmove

api-ms-win-crt-heap-l1-1-0

malloc free calloc

api-ms-win-crt-stdio-l1-1-0

setbuf __stdio_common_vsprintf __stdio_common_vfprintf _dup _close __acrt_iob_func fclose

api-ms-win-crt-convert-l1-1-0

_strtoui64

api-ms-win-crt-string-l1-1-0

_strdup isspace strncmp strcmp

api-ms-win-crt-runtime-l1-1-0

_cexit _errno _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_onexit_table _initialize_narrow_environment _execute_onexit_table

api-ms-win-crt-math-l1-1-0

_fdopen

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_ctypes.pyd

IMPHASH e716aa549ea6dfb7b233942c7f07ff87
SHA256 e28d4e46e5d10b5fdcf0292f91e8fd767e33473116247cd5d577e4554d7a4c0c
MD5 22c4892caf560a3ee28cf7f210711f9e
SHA1 b30520fadd882b667ecef3b4e5c05dc92e08b95a
SHA512 edb86b3694fff0b05318decf7fc42c20c348c1523892cce7b89cc9c5ab62925261d4dd72d9f46c9b2bda5ac1e6b53060b8701318b064a286e84f817813960b19
SSDEEP 3072:aS7u5LnIxdP3fPHW+QfLIrAYKpemW9IVLPjo:aSw+3FQfLIrIemW3
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

26:74:ee:5f:e3:27:e0:c8:8e:13:b7:54:37:18:51:b6:12:6d:25:65:02:01:3c:d6:78:38:62:89:3d:8b:a8:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

23664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_ctypes.pdb

libffi-8

ffi_type_sint8 ffi_type_uint8 ffi_type_float ffi_type_uint64 ffi_type_uint32 ffi_type_double ffi_type_uint16 ffi_type_sint32 ffi_call ffi_type_sint64 ffi_type_void ffi_prep_cif ffi_prep_closure ffi_type_sint16 ffi_type_pointer

ole32

ProgIDFromCLSID

oleaut32

SysStringLen SysFreeString GetErrorInfo SysAllocStringLen

kernel32

GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetSystemInfo VirtualAlloc RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent LoadLibraryExW FreeLibrary LocalFree QueryPerformanceCounter FormatMessageW DisableThreadLibraryCalls GetProcAddress SetLastError GetLastError

python311

_PyObject_LookupAttrId PyExc_ValueError _Py_CheckRecursiveCall PyDict_Next PyErr_Format PyDict_Type PyModule_AddType PyType_IsSubtype PyExc_OverflowError _Py_Dealloc PyLong_AsUnsignedLongMask PyTuple_GetItem PySequence_GetSlice PyDescr_NewGetSet PyErr_ExceptionMatches _PyUnicode_FromId PyModule_AddObjectRef PySequence_SetItem _PyArg_ParseTuple_SizeT PyObject_CallFunctionObjArgs PyUnicode_AsUTF8 PyUnicode_FromFormat PyObject_GetBuffer PySys_Audit PyList_New PyModule_Create2 PyType_Ready PyObject_GetAttrString PyErr_NewException PyErr_Clear _PyDict_GetItemIdWithError PyObject_GenericSetAttr PyDict_SetItem PyDict_New _PyLong_Sign PyObject_VectorcallMethod PyObject_IsInstance PyMem_Free PyLong_FromVoidPtr PyUnicode_AsWideChar PyErr_NoMemory _PyRuntime PyLong_AsVoidPtr PyObject_CallObject PyIndex_Check PyBytes_FromStringAndSize PyDict_DelItem PyNumber_AsSsize_t _PyObject_MakeTpCall PyUnicode_New _PyWeakref_ProxyType PyExc_TypeError PyTuple_Pack PyCallable_Check PyMem_Malloc PyExc_IndexError PyArg_UnpackTuple PyUnicode_FromString PyBuffer_Release PyType_Type PySequence_Tuple PyEval_RestoreThread PyUnicode_FromStringAndSize PyErr_WarnEx PyExc_RuntimeWarning PyOS_vsnprintf PyImport_ImportModule PyObject_GC_UnTrack PySys_GetObject PyGILState_Release PyErr_WriteUnraisable Py_Initialize PyObject_GC_Del PyLong_AsLong PyObject_Vectorcall Py_IsInitialized PyFile_WriteString PyObject_GC_Track PyGILState_Ensure _PyObject_GC_NewVar PyErr_Print PyMem_Calloc PyErr_SetObject PyObject_CallOneArg PyLong_AsUnsignedLong PyErr_SetString PyCapsule_IsValid PyBytes_AsString PyErr_NormalizeException PyUnicode_AppendAndDel Py_BuildValue PyErr_SetFromWindowsErr PyUnicode_FromFormatV PyFloat_FromDouble PyObject_CallFunction PyTuple_Type PyObject_Free PyCapsule_GetPointer PyErr_Fetch PyUnicode_AsWideCharString _PyObject_GetAttrId PyThreadState_GetDict PyCapsule_New PyUnicode_Type _PyTraceback_Add _PyUnicode_IsPrintable PyExc_OSError _PyObject_New PyMem_Realloc PyObject_Str PyExc_FileNotFoundError PyObject_Call PyArg_ParseTuple PyBool_FromLong PyLong_FromUnsignedLongLong PyFloat_AsDouble PyLong_FromLongLong PyLong_FromUnsignedLong PyLong_AsUnsignedLongLongMask PyFloat_Unpack4 PyFloat_Pack4 PyObject_IsTrue PyFloat_Pack8 PyByteArray_Type PyFloat_Unpack8 PyObject_GetAttr PySequence_Fast PyTuple_Size _PyDict_SizeOf _PyLong_AsInt _Py_CheckFunctionResult PyTuple_GetSlice PyExc_AttributeError PyMemoryView_FromObject PyDict_SetItemString PyTuple_New _PyDict_ContainsId _Py_NoneStruct PyDict_Contains PyDict_GetItemWithError _PyDict_SetItemId _PyErr_WriteUnraisableMsg PyBuffer_IsContiguous PyUnicode_Concat PySlice_Unpack PyLong_FromLong PyObject_SetAttrString PyExc_RuntimeError PyEval_SaveThread PyUnicode_AsUTF8AndSize _PyWeakref_CallableProxyType _PyUnicode_EqualToASCIIString PyLong_FromSsize_t PyWeakref_NewProxy PyErr_Occurred PyDict_Update PySequence_GetItem PySlice_Type PyLong_AsSsize_t _PyArg_NoKeywords PyType_GenericNew _PyObject_SetAttrId _PyObject_CallFunction_SizeT _Py_BuildValue_SizeT PyExc_Exception PySlice_AdjustIndices PyDescr_NewClassMethod PyUnicode_InternFromString PyObject_SetAttr PySequence_Size Py_GenericAlias PyType_GetName PyUnicode_FromWideChar PyObject_IsSubclass

vcruntime140

memcmp __std_type_info_destroy_list __C_specific_handler strchr memcpy memset memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_errno _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table _cexit

api-ms-win-crt-string-l1-1-0

iswctype

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_decimal.pyd

IMPHASH c8876e9e8ae3bb7e4abb8348fe33f03e
SHA256 6cd52b65e11839f417b212ba5a39f182b0151a711ebc7629dc260b532391db72
MD5 baaa9067639597e63b55794a757ddeff
SHA1 e8dd6b03ebef0b0a709e6cccff0e9f33c5142304
SHA512 7995c3b818764ad88db82148ea0ce560a0bbe9594ca333671b4c5e5c949f5932210edbd63d4a0e0dc2daf24737b99318e3d5daaee32a5478399a6aa1b9ee3719
SSDEEP 6144:cjz3B48pj9aOtoQdpJOsoTiSi9qWM53pLW1Atp6tQh7:i94uj9afQVrom0bUQh7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d1:fc:ea:c1:b1:f2:cc:1d:64:69:5d:c2:f3:50:d3:96:dd:c7:4c:de:e6:2f:48:12:c3:21:a5:8c:cc:6c:f0:eb

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

132668

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_decimal.pdb

python311

PyList_GetItem _PyUnicode_IsWhitespace PyObject_CallMethod PyObject_IsInstance PyMem_Free PyErr_NoMemory PyObject_CallObject PyComplex_Type _Py_NotImplementedStruct PyUnicode_Compare PyArg_ParseTupleAndKeywords _PyObject_New PyExc_TypeError PyMem_Realloc PyModule_AddStringConstant PyUnicode_AsUTF8String PyTuple_Pack PyObject_HashNotImplemented _PyUnicode_Ready PyMem_Malloc PyList_AsTuple _Py_TrueStruct PyDict_New _PyLong_GCD PyUnicode_CompareWithASCIIString PyType_Type PyArg_ParseTuple PyContextVar_New PyFloat_FromString PyExc_ArithmeticError PyErr_Format PyLong_FromUnsignedLong PyExc_ValueError PyContextVar_Set PyObject_CallFunction PyExc_ZeroDivisionError PyErr_SetString PyUnicode_FromWideChar PyList_Size PyDict_SetItem _Py_HashPointer PyObject_GenericSetAttr _PyLong_New PyTuple_Size PyList_Append PyErr_Clear PyErr_NewException PyUnicode_New PyExc_AttributeError PyObject_GetAttrString PyType_Ready PyModule_Create2 _PyUnicode_ToDecimalDigit PyFloat_FromDouble PyDict_Size PyDict_SetItemString PyList_New PyUnicode_FromFormat PyLong_AsLong PyObject_CallFunctionObjArgs PyModule_AddObject PyComplex_AsCComplex PyModule_AddObjectRef PyObject_Free _Py_Dealloc PyExc_OverflowError PyType_IsSubtype PyLong_Type PyTuple_New PyFloat_Type _Py_FalseStruct PyUnicode_FromString PyTuple_Type _Py_NoneStruct PyFloat_AsDouble PyComplex_FromDoubles PyDict_GetItemWithError Py_BuildValue PyContextVar_Get PyLong_FromLong PyExc_RuntimeError PyUnicode_AsUTF8AndSize PyObject_GenericGetAttr PyUnicode_DecodeUTF8 PyLong_FromSsize_t PyErr_Occurred PyImport_ImportModule PyExc_KeyError PyLong_AsSsize_t _Py_ascii_whitespace PyType_GenericNew PyModule_AddIntConstant PyBool_FromLong PyErr_SetObject PyUnicode_InternFromString PyObject_IsTrue PyBaseObject_Type

vcruntime140

strchr memmove memcpy __C_specific_handler __std_type_info_destroy_list memset

api-ms-win-crt-convert-l1-1-0

strtoll mbstowcs

api-ms-win-crt-math-l1-1-0

log10 copysign ceil _dclass

api-ms-win-crt-stdio-l1-1-0

fputc __acrt_iob_func __stdio_common_vfprintf __stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

abort _initterm_e _cexit _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm _errno

api-ms-win-crt-string-l1-1-0

tolower isupper isdigit

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-heap-l1-1-0

malloc calloc realloc free

kernel32

RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess RtlCaptureContext

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_hashlib.pyd

IMPHASH 02e7e9437b7e711286b4b21f873e174b
SHA256 21d59958e2ad1b944c4811a71e88de08c05c5ca07945192ab93da5065fac8926
MD5 c888ecc8298c36d498ff8919cebdb4e6
SHA1 f904e1832b9d9614fa1b8f23853b3e8c878d649d
SHA512 7161065608f34d6de32f2c70b7485c4ee38cd3a41ef68a1beacee78e4c5b525d0c1347f148862cf59abd9a4ad0026c2c2939736f4fc4c93e6393b3b53aa7c377
SSDEEP 1536:jfKlbLgy209/MkZy6n23JZlnvy7OjZophIVOIi7SyMrxZR1:7Khgy+XZla7OjSphIVOIiKR1
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d3:86:77:13:97:92:ae:f5:22:16:b9:c7:91:26:f9:bc:0d:9c:33:ba:92:03:25:ce:87:2b:6c:16:69:de:99:a9

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

16448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_hashlib.pdb

libcrypto-3

EVP_MD_do_all_provided EVP_MD_CTX_free EVP_DigestInit_ex EVP_MD_CTX_get0_md ERR_func_error_string HMAC EVP_DigestUpdate EVP_MD_CTX_md HMAC_Update HMAC_CTX_new EVP_MD_CTX_copy EVP_PBE_scrypt OBJ_nid2ln ERR_clear_error ERR_peek_last_error HMAC_Init_ex HMAC_CTX_free EVP_MD_get_block_size OBJ_nid2sn EVP_MD_fetch EVP_MD_free HMAC_Final ERR_reason_error_string ERR_lib_error_string EVP_DigestFinalXOF EVP_MD_get_flags EVP_DigestFinal EVP_MD_CTX_new PKCS5_PBKDF2_HMAC EVP_MD_get_type HMAC_CTX_get_md EVP_default_properties_is_fips_enabled EVP_MD_up_ref EVP_MD_get_size HMAC_CTX_copy CRYPTO_memcmp

python311

PyErr_NewException PyType_FromSpecWithBases PyDict_SetItem PyDict_New PyThread_free_lock PyMem_Free PyFrozenSet_New PyErr_NoMemory PyModuleDef_Init _Py_hashtable_set PyBytes_FromStringAndSize PyType_FromSpec _PyObject_New PyExc_TypeError PyObject_IsTrue _PyUnicode_Ready PyMem_Malloc PyModule_GetState PyUnicode_FromString _Py_strhex PyBuffer_Release _Py_hashtable_get PyEval_RestoreThread _Py_hashtable_new_full PyObject_GetAttrString PyObject_GetBuffer PyUnicode_FromFormat PyUnicode_AsUTF8 PyLong_AsLong PyModule_AddObject PyModule_AddObjectRef PyThread_release_lock PyObject_Free _Py_Dealloc PyExc_OverflowError PyModule_AddType PyErr_Format _Py_hashtable_destroy PyExc_ValueError _PyArg_UnpackKeywords PyErr_SetString PyDictProxy_New _PyArg_BadArgument PySet_Add PyThread_acquire_lock _Py_NoneStruct PyModule_GetDef PyThread_allocate_lock _Py_HashBytes PyDict_GetItemWithError PyBuffer_IsContiguous PyLong_FromLong PyEval_SaveThread PyUnicode_AsUTF8AndSize PyErr_Occurred _PyArg_CheckPositional PyLong_AsSsize_t PyLong_AsUnsignedLong _PyNumber_Index PyBool_FromLong PyExc_BufferError PyErr_FormatV _PyArg_Parse_SizeT PyObject_CheckBuffer

vcruntime140

memcpy __std_type_info_destroy_list memset __C_specific_handler

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table _cexit

kernel32

IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_lzma.pyd

IMPHASH c39c7a021b2adfc11bb34f105f70355e
SHA256 ad0440ca6998e18f5cc917d088af3fea2c0ff0febce2b5e2b6c0f1370f6e87b1
MD5 d386b7c4dcf589e026abfc7196cf1c4c
SHA1 c07ce47ce0e69d233c5bdd0bcac507057d04b2d4
SHA512 78d79e2379761b054df1f9fd8c5b7de5c16b99af2d2de16a3d0ac5cb3f0bd522257579a49e91218b972a273db4981f046609fdcf2f31cf074724d544dac7d6c8
SSDEEP 3072:cNltLBrdV/REWa/g7Lznf49mNoiUMApqlpIVZ1SXW:cNltPpREgAYOicMI
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d6:e2:8c:0b:18:36:fa:8b:a8:0e:fd:2c:74:1a:13:d7:1c:e0:67:8f:16:15:b7:7b:f0:11:4a:0b:c7:12:bc:cf

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

79344

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_lzma.pdb

python311

PyDict_SetItem PyDict_New PyErr_NewExceptionWithDoc PyThread_free_lock PyMem_Free PyErr_NoMemory PyModuleDef_Init PyBytes_FromStringAndSize PyErr_SetString PyType_FromModuleAndSpec PyMem_Realloc PyMapping_Check _PyLong_AsInt PyModule_GetState PyExc_SystemError PyMem_RawFree PyBuffer_Release PyEval_RestoreThread _PyArg_BadArgument PyThread_acquire_lock PyLong_FromLongLong PyTuple_New _Py_NoneStruct PyMem_RawMalloc PyType_GetModuleState PyMapping_GetItemString PyList_Append PyErr_Clear PyExc_EOFError PyList_New PyObject_GetBuffer PyModule_AddObject PyThread_release_lock PyErr_ExceptionMatches _Py_Dealloc PyExc_OverflowError PyModule_AddType PyErr_Format _PyArg_ParseTupleAndKeywords_SizeT PyExc_ValueError PyMem_Malloc _PyArg_UnpackKeywords PyLong_AsUnsignedLongLong PyThread_allocate_lock PyLong_FromUnsignedLongLong PyExc_MemoryError PyErr_SetNone PyBuffer_IsContiguous PyEval_SaveThread PyErr_Occurred PySequence_GetItem PyExc_KeyError _PyArg_CheckPositional PyLong_AsSsize_t PyType_GenericNew PyModule_AddIntConstant _PyNumber_Index PyBool_FromLong PyUnicode_InternFromString PyMem_Calloc PyExc_TypeError PySequence_Size

vcruntime140

memmove memset __std_type_info_destroy_list __C_specific_handler memcpy memcmp

api-ms-win-crt-heap-l1-1-0

calloc malloc free

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _initialize_onexit_table _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _cexit _initialize_narrow_environment

kernel32

GetCurrentProcessId RtlLookupFunctionEntry IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId RtlCaptureContext QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_multiprocessing.pyd

IMPHASH ad5e2bc3f4742dadfaf9e74afc91a9f0
SHA256 edfa9ee414f41448f8ffabb79f3bb8db5c25e1cfd28facf88eb5fe2d1e1d7551
MD5 622a0e73779c88fc430b69caf4a39789
SHA1 f6536137e4e2cd8ec181f09b7dba5e2e4d03b392
SHA512 fd8d6db53b630821845dfe22b09c4335565f848a421af271797efe272baaa1ef887d735d4d5cd7d1258f2dd8f523327a67c071f7d16fc1bf53aca39bae41dff2
SSDEEP 768:n7I6Rwcl5w5zu8TdywGnJjRIVWtTk5YiSyvE+OAMxkEO:7Ikl5kzu8TdywGJjRIVWtTu7Sy18xK
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

83:e5:4c:ee:8b:8d:33:dd:68:01:86:70:75:70:0c:fd:61:08:fc:dd:a1:68:7f:59:eb:1b:21:c6:cb:f2:40:fa

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5168

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_multiprocessing.pdb

ws2_32

recv send closesocket WSAGetLastError

kernel32

DisableThreadLibraryCalls RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetLastError ReleaseSemaphore WaitForMultipleObjectsEx GetCurrentThreadId GetLastError WaitForSingleObjectEx CloseHandle ResetEvent CreateSemaphoreA SetUnhandledExceptionFilter IsDebuggerPresent InitializeSListHead GetCurrentProcess GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess RtlCaptureContext

python311

_PyLong_AsInt _Py_TrueStruct PyExc_AssertionError _PyOS_IsMainThread PyMem_Malloc PyThread_get_thread_ident PyModuleDef_Init _PyArg_ParseStack_SizeT PyExc_OSError PyErr_NoMemory PyDict_New _PyOS_SigintEvent PyMem_Free PyBuffer_Release PyErr_SetExcFromWindowsErr PyErr_SetFromErrno _Py_FalseStruct _PyArg_UnpackKeywords PyFloat_AsDouble PyErr_SetFromWindowsErr PyErr_Occurred _PyArg_CheckPositional PyBool_FromLong PyEval_RestoreThread PyBytes_FromStringAndSize _PyBytes_Resize PyModule_AddObject _Py_Dealloc PyModule_AddType PyErr_Format PyExc_ValueError PyErr_SetString _PyArg_BadArgument PyDict_SetItemString _Py_NoneStruct PyLong_FromLong PyExc_RuntimeError PyEval_SaveThread PyUnicode_AsUTF8AndSize _PyArg_Parse_SizeT PyExc_OverflowError

vcruntime140

__std_type_info_destroy_list memcpy memset __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm _errno _initterm_e

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_overlapped.pyd

IMPHASH 48664681fdde7330197ca0b81cd0888e
SHA256 ce48969ebebdc620f4313eba2a6b6cda568b663c09d5478fa93826d401abe674
MD5 d3be208dc5388225162b6f88ff1d4386
SHA1 8effdb606b6771d5fdf83145de0f289e8ad83b69
SHA512 9e1c3b37e51616687eecf1f7b945003f6eb4291d8794fea5545b4a84c636007eb781c18f6436039df02a902223ac73efac9b2e44ddc8594db62feb9997475da3
SSDEEP 768:R1FMCcP4W9vqJKRJs2lNXSkCirb1IVXtW5YiSyvw5AMxkEfEk:R1FMaJKWkCg1IVXts7Sy4hxjEk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

a3:55:9c:a7:13:7b:c3:03:1d:f6:18:5d:5e:f6:ea:e2:34:37:b7:84:ec:dd:ec:4f:c7:3c:4c:ba:80:09:a9:db

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

6400

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_overlapped.pdb

ws2_32

closesocket WSASend ntohl WSAIoctl WSASendTo WSAConnect socket ntohs WSAStringToAddressW WSARecv WSARecvFrom inet_ntop htons bind WSAGetLastError

kernel32

ResetEvent GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId ReadFile SetLastError WriteFile RegisterWaitForSingleObject UnregisterWait GetQueuedCompletionStatus CreateFileW PostQueuedCompletionStatus CreateEventW FormatMessageW GetLastError SetEvent CloseHandle CancelIoEx GetOverlappedResult UnregisterWaitEx LocalFree CreateEventA CreateIoCompletionPort ConnectNamedPipe GetCurrentThreadId

python311

PyErr_SetExcFromWindowsErr PyBuffer_Release PyArg_ParseTuple _PyArg_ParseTupleAndKeywordsFast PyEval_RestoreThread _Py_TrueStruct PyArg_Parse _Py_Dealloc PyErr_SetFromErrno _Py_FalseStruct PyTuple_Type PyModule_AddType PyMem_RawFree PyType_FromModuleAndSpec PyObject_Free _PyObject_New PyBytes_FromStringAndSize PyModuleDef_Init _PyArg_ParseStack PyExc_ConnectionRefusedError PyExc_OSError PyLong_FromVoidPtr PyUnicode_FromFormat _PyBytes_Resize _PyUnicode_WideCharString_Opt_Converter PyUnicode_FromString PyModule_GetState PyErr_Format PyLong_FromUnsignedLong PyExc_ValueError PyErr_WriteUnraisable PyErr_SetString _PyArg_BadArgument PyTuple_New _Py_NoneStruct PyMem_RawMalloc Py_BuildValue _PyUnicode_AsUnicode PyExc_RuntimeError PyEval_SaveThread PyImport_ImportModule PyExc_ConnectionAbortedError PyBool_FromLong PyModule_AddObject

vcruntime140

__std_type_info_destroy_list memset memcpy __C_specific_handler

api-ms-win-crt-string-l1-1-0

iswctype

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm _initterm_e

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_queue.pyd

IMPHASH d39104d594ed5774205f94197c63bfbc
SHA256 06c36ec0749d041e6957c3cd7d2d510628b6abe28cee8c9728412d9ce196a8a2
MD5 50842ce7fcb1950b672d8a31c892a5d1
SHA1 d84c69fa2110b860da71785d1dbe868bd1a8320f
SHA512 c1e686c112b55ab0a5e639399bd6c1d7adfe6aedc847f07c708bee9f6f2876a1d8f41ede9d5e5a88ac8a9fbb9f1029a93a83d1126619874e33d09c5a5e45a50d
SSDEEP 768:P0+yFg6rXtUmxU99IVQUT5YiSyvyxAMxkE44:c+wRXiWU99IVQUd7Sy+xE4
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

94:e6:00:41:1a:10:91:ab:ba:c2:45:b1:6b:ad:f4:db:75:2a:97:78:57:18:de:b8:30:c3:78:33:78:20:8f:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5296

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_queue.pdb

python311

PyThread_release_lock Py_GenericAlias _Py_Dealloc _PyDeadline_Init PyModule_AddType PyExc_ValueError _PyArg_UnpackKeywords PyThread_acquire_lock_timed PyObject_IsTrue PyType_FromModuleAndSpec PyExc_TypeError _PyDeadline_Get PyModule_AddObjectRef PyType_GetModuleByDef PyModuleDef_Init PyThread_free_lock PyErr_NewExceptionWithDoc PyList_Append PyList_New PyObject_ClearWeakRefs PyExc_OverflowError PyErr_SetString PyType_GetModule _PyArg_NoPositional _Py_NoneStruct PyThread_allocate_lock PyExc_MemoryError PyErr_SetNone PyObject_GC_UnTrack PyList_SetSlice PyEval_SaveThread PyLong_FromSsize_t PyErr_Occurred _PyArg_NoKeywords PyBool_FromLong _PyTime_FromSecondsObject Py_MakePendingCalls _PyTime_AsMicroseconds PyEval_RestoreThread

vcruntime140

memset __std_type_info_destroy_list __C_specific_handler memcpy

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _initialize_narrow_environment

kernel32

QueryPerformanceCounter IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId RtlCaptureContext IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_socket.pyd

IMPHASH 332065e5d19d708832b034da27e5571a
SHA256 301c47c4016dac27811f04f4d7232f24852ef7675e9a4500f0601703ed8f06af
MD5 2c0ec225e35a0377ac1d0777631bffe4
SHA1 7e5d81a06ff8317af52284aedccac6ebace5c390
SHA512 aea9d34d9e93622b01e702defd437d397f0e7642bc5f9829754d59860b345bbde2dd6d7fe21cc1d0397ff0a9db4ecfe7c38b649d33c5c6f0ead233cb201a73e0
SSDEEP 1536:YJlhpHrTT9r3ujE9/s+S+pzpCoiTFVf7p9IVLwg7SyLxU:Y7hpL13ujE9/sT+pz4oYFVTp9IVLwgo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64 polyglot

Digest

3d:29:37:be:75:1c:15:72:90:9d:31:9c:2d:f6:ab:ec:01:f3:21:80:2b:70:30:73:8f:e8:74:a5:46:7f:09:29

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

9664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_socket.pdb

ws2_32

accept WSACleanup setsockopt WSAIoctl closesocket gethostbyname select ntohl WSADuplicateSocketW shutdown listen WSASetLastError WSASocketW inet_pton getaddrinfo WSAStartup getpeername getnameinfo inet_addr getsockname gethostbyaddr getprotobyname getservbyport send socket ntohs connect inet_ntoa getservbyname recvfrom recv getsockopt htonl inet_ntop htons ioctlsocket sendto freeaddrinfo bind WSAGetLastError

iphlpapi

ConvertInterfaceLuidToNameW GetIfTable2Ex if_nametoindex if_indextoname FreeMibTable

kernel32

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent SetHandleInformation VerifyVersionInfoA VerifyVersionInfoW GetCurrentProcessId VerSetConditionMask GetLastError GetComputerNameExW

python311

_PyTime_FromSeconds PyModule_GetDict PyObject_Free PyErr_ExceptionMatches PyModule_AddObjectRef PyCapsule_GetPointer PyModule_AddObject _PyArg_ParseTuple_SizeT PyErr_Fetch PyLong_AsLong _PyBytes_Resize PyUnicode_AsUTF8 PyUnicode_FromFormat PySys_Audit PyList_New PyModule_Create2 PyErr_NewException _PyDict_Pop PyErr_Clear PyList_Append PyTuple_Size PyUnicode_FSConverter PyCapsule_New PyBytes_Size PyObject_CallFinalizerFromDealloc PyMem_Free PyType_GenericAlloc PyErr_NoMemory PyExc_OSError PyErr_CheckSignals PyBytes_FromStringAndSize PyByteArray_Size _PyDeadline_Get PyExc_TypeError PyTuple_Pack _PyUnicode_Ready PyMem_Malloc _PyTime_AsTimeval_clamp _PyLong_AsInt PyExc_ImportError _Py_TrueStruct PyUnicode_FromString PyErr_SetExcFromWindowsErr _PyDeadline_Init PyBuffer_Release PyByteArray_Type Py_AtExit PyType_Type _PyTime_AsTimeval PyEval_RestoreThread PyErr_ResourceWarning _Py_Dealloc PyErr_Restore PyType_IsSubtype PyErr_SetFromErrno PyLong_Type _PyTime_AsSecondsDouble _Py_FalseStruct PyModule_AddStringConstant PyErr_Format _PyArg_ParseTupleAndKeywords_SizeT PyLong_FromUnsignedLong PyExc_ValueError _PyArg_UnpackKeywords PyErr_WriteUnraisable PyErr_SetString PyUnicode_FromWideChar PyByteArray_AsString PyUnicode_New PyFloat_FromDouble PyExc_TimeoutError PyLong_FromLongLong PyLong_AsLongLong _Py_NoneStruct PyUnicode_DecodeMBCS PyErr_SetFromWindowsErr PyLong_FromLong PyEval_SaveThread PyObject_GenericGetAttr PyLong_FromSsize_t PyExc_Warning PyErr_Occurred PyBytes_AsString PyModule_AddIntConstant PyLong_AsUnsignedLong _Py_BuildValue_SizeT PyUnicode_DecodeFSDefault _PyTime_AsMilliseconds PyErr_SetObject _PyTime_FromSecondsObject PyOS_snprintf PyUnicode_AsEncodedString PyExc_OverflowError

vcruntime140

memcpy memset __std_type_info_destroy_list __C_specific_handler strchr

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _seh_filter_dll _initterm_e _initterm _configure_narrow_argv _errno _cexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf __stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strcmp

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_sqlite3.pyd

IMPHASH 6c7847858d251cc23656628bf2649d1b
SHA256 55344349f9199aedad1737a0311cbe2c3a4bf9494b76982520bacad90f463c1b
MD5 a70731ae2ca44b7292623ae8b0281549
SHA1 9e086c0753bb43e2876c33c4872e71808932a744
SHA512 8334104df9837d32946965290bbc46ba0a0ada17bd2d03fc63380979f5fc86b26be245636718b4304dfd0d85a5b3f7170614f148e5c965cc5adf59d34465f7f1
SSDEEP 3072:vvtiqaiN2oSNMAwwi3CLl147ZvV9NdrRvdO5yFAuaUVMJF8MYRnchIVOQ1B:HJaiN2oSNVDD5FJFr2
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

6a:a4:30:02:60:ca:bd:78:a8:88:07:31:dc:55:37:54:0b:b4:79:17:e2:29:16:26:1a:c3:26:c3:9a:fa:dc:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

45968

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_sqlite3.pdb

python311

_Py_Dealloc PyModule_GetDict PyErr_ExceptionMatches PyObject_CheckBuffer _PyArg_ParseTuple_SizeT PyErr_Fetch PyObject_Vectorcall PyObject_GetBuffer PySys_Audit PyList_New PyErr_Clear PyList_Append PyUnicode_FSConverter PyList_GetItem PyUnicode_Type PyObject_VectorcallMethod PyMem_Free PyLong_AsLongAndOverflow PyErr_NoMemory PyObject_CallObject PyObject_GC_Track PyBytes_FromStringAndSize PyGILState_Ensure PyThread_get_thread_ident PyType_GetModuleByDef PyExc_TypeError PyType_FromModuleAndSpec PyObject_IsTrue _PyUnicode_Ready PyCallable_Check PyMem_Malloc _PyLong_AsInt PyObject_CallMethodObjArgs _Py_TrueStruct PyModule_GetState _PyObject_GC_New PyUnicode_FromString PyBuffer_Release PyObject_CallNoArgs PyEval_RestoreThread PyUnicode_FromStringAndSize PySequence_Size PyOS_snprintf PyErr_SetObject PySequence_GetItem PyObject_SelfIter PyIter_Next PyObject_GetIter PyLong_FromLongLong PyTuple_Type PyLong_Type PyExc_UnicodeDecodeError _PyErr_FormatFromCause PyObject_ClearWeakRefs PyBytes_Type PyUnicode_Decode PySequence_Check PyErr_Restore PyList_Type PyObject_GetItem PyTuple_Pack PyExc_LookupError PyErr_Print PyByteArray_Type PyIter_Check Py_BuildValue _PyObject_LookupAttr PyModule_AddObjectRef PyDict_SetItem PyDict_New PyExc_Exception PyModule_AddIntConstant PyModule_AddType PyModule_AddStringConstant PyObject_GetAttrString PyErr_NewException PyModuleDef_Init PyExc_ImportError PyUnicode_CompareWithASCIIString PyBool_FromLong PySlice_Type PyObject_Hash PyObject_RichCompare PyTuple_GetItem _Py_ctype_tolower PyObject_RichCompareBool PyTuple_Size _Py_NotImplementedStruct PyNumber_AsSsize_t PyExc_IndexError PyObject_SetAttrString PyLong_AsLongLongAndOverflow PySlice_AdjustIndices PySlice_Unpack PyLong_FromUnsignedLong PyLong_AsLong PyIndex_Check PyType_GetModule PyTuple_New _Py_NoneStruct PyGILState_Release PyFloat_AsDouble PyObject_GetAttr PyDict_GetItemWithError PyExc_MemoryError PyBuffer_IsContiguous PyObject_GC_UnTrack PyLong_FromLong _PyErr_ChainExceptions PyEval_SaveThread PyUnicode_AsUTF8AndSize PyErr_Occurred PyImport_ImportModule _PyArg_CheckPositional _PyArg_NoKeywords PyExc_OverflowError PyFloat_Type PyType_IsSubtype _Py_FalseStruct PyErr_Format PyExc_ValueError _PyArg_UnpackKeywords PyErr_WriteUnraisable PyErr_SetString PyList_Size _PyArg_BadArgument PyExc_AttributeError PyWeakref_GetObject PyBuffer_FillInfo PyByteArray_FromStringAndSize PyFloat_FromDouble _PyObject_CallFunction_SizeT _Py_BuildValue_SizeT PyObject_CallOneArg PyWeakref_NewRef PyDict_Type PyUnicode_InternFromString

sqlite3

sqlite3_enable_load_extension sqlite3_backup_pagecount sqlite3_blob_open sqlite3_step sqlite3_create_window_function sqlite3_serialize sqlite3_value_blob sqlite3_backup_step sqlite3_malloc64 sqlite3_value_double sqlite3_trace_v2 sqlite3_result_error_toobig sqlite3_libversion_number sqlite3_bind_double sqlite3_column_text sqlite3_last_insert_rowid sqlite3_changes sqlite3_bind_blob sqlite3_column_count sqlite3_column_type sqlite3_bind_text sqlite3_stmt_readonly sqlite3_column_decltype sqlite3_value_bytes sqlite3_exec sqlite3_column_int64 sqlite3_bind_null sqlite3_column_bytes sqlite3_column_name sqlite3_column_blob sqlite3_bind_parameter_count sqlite3_column_double sqlite3_bind_int64 sqlite3_reset sqlite3_bind_parameter_name sqlite3_shutdown sqlite3_enable_shared_cache sqlite3_initialize sqlite3_complete sqlite3_libversion sqlite3_threadsafe sqlite3_extended_errcode sqlite3_errmsg sqlite3_blob_close sqlite3_blob_write sqlite3_blob_read sqlite3_blob_bytes sqlite3_data_count sqlite3_errcode sqlite3_progress_handler sqlite3_load_extension sqlite3_close_v2 sqlite3_create_collation_v2 sqlite3_get_autocommit sqlite3_errstr sqlite3_limit sqlite3_expanded_sql sqlite3_result_error_nomem sqlite3_value_int64 sqlite3_value_type sqlite3_result_text sqlite3_sleep sqlite3_context_db_handle sqlite3_result_null sqlite3_close sqlite3_prepare_v2 sqlite3_stricmp sqlite3_backup_finish sqlite3_open_v2 sqlite3_value_text sqlite3_db_handle sqlite3_result_double sqlite3_result_int64 sqlite3_busy_timeout sqlite3_user_data sqlite3_total_changes sqlite3_finalize sqlite3_result_error sqlite3_free sqlite3_backup_init sqlite3_interrupt sqlite3_deserialize sqlite3_backup_remaining sqlite3_create_function_v2 sqlite3_set_authorizer sqlite3_aggregate_context sqlite3_result_blob

vcruntime140

__std_type_info_destroy_list memcpy memset __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

_initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table _cexit _initterm

api-ms-win-crt-string-l1-1-0

_strnicmp

kernel32

TerminateProcess IsDebuggerPresent InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess GetSystemTimeAsFileTime IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId DisableThreadLibraryCalls

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_ssl.pyd

IMPHASH 320b5938e789045797776388b51c1253
SHA256 4727b60962efacfd742dca21341a884160cf9fcf499b9afa3d9fdbcc93fb75d0
MD5 66e78727c2da15fd2aac56571cd57147
SHA1 e93c9a5e61db000dee0d921f55f8507539d2df3d
SHA512 a6881f9f5827aceb51957aaed4c53b69fcf836f60b9fc66eeb2ed84aed08437a9f0b35ea038d4b1e3c539e350d9d343f8a6782b017b10a2a5157649abbca9f9a
SSDEEP 3072:pjIQQSFBfL+SiSVWuXa6XzfBJ9d41Olh59YL48PMrN/WgAlNcLpIVC72a:CSFNL3LJa6Xzj4BLcLP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

22:63:f0:93:be:29:56:79:49:0e:38:dd:12:46:a7:8e:4d:05:b3:e9:63:3d:9f:e4:57:a8:c0:a4:1f:2c:58:6f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

11116

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_ssl.pdb

ws2_32

select WSAGetLastError

crypt32

CertFreeCRLContext CertOpenStore CertCloseStore CertAddStoreToCollection CertEnumCRLsInStore CertGetEnhancedKeyUsage CertFreeCertificateContext CertEnumCertificatesInStore

libcrypto-3

X509_VERIFY_PARAM_set_hostflags X509_STORE_add_cert X509_get0_notAfter DH_free ERR_get_error BIO_read BIO_printf X509_get_default_cert_file_env X509_VERIFY_PARAM_set1_ip OBJ_obj2nid X509_get_default_cert_dir_env X509_get_issuer_name RAND_status i2t_ASN1_OBJECT X509_get0_notBefore PEM_write_bio_X509_AUX ASN1_STRING_to_UTF8 ERR_reason_error_string PEM_write_bio_X509 BIO_ctrl X509_VERIFY_PARAM_set_flags i2d_X509 BIO_new OBJ_nid2sn i2a_ASN1_INTEGER OBJ_txt2obj GENERAL_NAME_free X509_NAME_get_entry ERR_peek_last_error ASN1_OBJECT_free BIO_up_ref OpenSSL_version_num X509_NAME_ENTRY_get_data a2i_IPADDRESS BIO_clear_flags i2d_X509_bio X509_VERIFY_PARAM_set1_host PEM_read_bio_X509 OBJ_obj2txt COMP_get_type BIO_s_mem BIO_free_all BIO_s_file BIO_ctrl_pending CRYPTO_free X509_get_version OPENSSL_sk_value X509_verify_cert_error_string X509_OBJECT_get0_X509 AUTHORITY_INFO_ACCESS_free X509_NAME_ENTRY_set OPENSSL_sk_find X509_VERIFY_PARAM_clear_flags RAND_bytes GENERAL_NAME_print BIO_new_fp BIO_write BIO_free ASN1_STRING_get0_data CRL_DIST_POINTS_free X509_NAME_ENTRY_get_object BIO_puts BIO_gets X509_up_ref OPENSSL_sk_pop_free OBJ_nid2obj X509_NAME_print_ex d2i_X509_bio X509_subject_name_hash OpenSSL_version ASN1_STRING_type X509_get_serialNumber X509_get_default_cert_dir X509_get_default_cert_file RAND_add OBJ_nid2ln ERR_clear_error X509_free BIO_new_mem_buf PEM_read_DHparams ASN1_STRING_length X509_get_ext_d2i X509_OBJECT_get_type ASN1_OCTET_STRING_free X509_cmp X509_STORE_get0_objects X509_VERIFY_PARAM_get_flags ASN1_TIME_print OBJ_sn2nid X509_check_ca BIO_set_flags X509_NAME_entry_count OPENSSL_sk_num X509_get_subject_name

libssl-3

d2i_SSL_SESSION SSL_CIPHER_get_auth_nid SSL_pending SSL_CTX_get0_param SSL_SESSION_get_time SSL_set_verify SSL_CIPHER_get_version SSL_CTX_get_verify_mode SSL_CTX_set_cipher_list SSL_set_post_handshake_auth SSL_set_accept_state SSL_CTX_load_verify_locations SSL_CTX_set_num_tickets SSL_CTX_use_certificate_chain_file SSL_CIPHER_get_name SSL_get_peer_finished SSL_get1_peer_certificate SSL_get0_param SSL_CTX_get_default_passwd_cb_userdata SSL_CTX_check_private_key SSL_set_SSL_CTX SSL_session_reused SSL_shutdown SSL_read_ex SSL_get_current_cipher SSL_get_verify_mode SSL_is_init_finished SSL_CTX_set_session_id_context SSL_CTX_set_msg_callback SSL_SESSION_get_ticket_lifetime_hint TLS_server_method SSL_CTX_set_verify SSL_get_error SSL_CTX_get_num_tickets SSL_set_connect_state SSL_get1_session SSL_get_peer_cert_chain TLSv1_1_method SSL_CIPHER_get_bits SSL_CTX_get_security_level SSL_set_bio SSL_CTX_get_verify_callback SSL_SESSION_has_ticket SSL_SESSION_get_timeout SSL_ctrl SSL_CTX_set_default_passwd_cb_userdata TLSv1_2_method SSL_CIPHER_get_cipher_nid SSL_CTX_callback_ctrl TLS_client_method SSL_get_verify_result SSL_CTX_get_options SSL_CTX_set_post_handshake_auth SSL_CIPHER_description SSL_set_read_ahead SSL_write_ex SSL_select_next_proto SSL_CTX_new SSL_set_fd SSL_CTX_use_PrivateKey_file SSL_get_verify_callback SSL_CIPHER_get_digest_nid SSL_get_finished SSL_set_ex_data SSL_get_ex_data SSL_get0_verified_chain SSL_get0_alpn_selected SSL_CTX_clear_options SSL_get_version SSL_CTX_ctrl SSL_CTX_set_keylog_callback SSL_CTX_free SSL_new SSL_CTX_set_alpn_protos SSL_CTX_set_default_verify_paths SSL_CTX_set_alpn_select_cb SSL_CTX_set_options SSL_set_session SSL_SESSION_free SSL_CTX_get_cert_store SSL_get_session SSL_free SSL_get_current_compression TLS_method SSL_verify_client_post_handshake SSL_CTX_set_default_passwd_cb TLSv1_method SSL_get_servername SSL_SESSION_get_id SSL_CIPHER_is_aead SSL_CTX_get_default_passwd_cb SSL_get_wbio SSL_CIPHER_get_id i2d_SSL_SESSION SSL_get_shutdown SSL_get_client_ciphers SSL_get_rbio SSL_set_msg_callback SSL_do_handshake SSL_get_SSL_CTX SSL_get_ciphers SSL_CIPHER_get_kx_nid

kernel32

RtlCaptureContext GetLastError RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess

python311

PyErr_ExceptionMatches PyThread_release_lock PyModule_AddObjectRef PyModule_AddObject PyObject_CheckBuffer _PyArg_ParseTuple_SizeT PyObject_GC_Del PyErr_Fetch PyObject_CallFunctionObjArgs PyLong_AsLong _PyBytes_Resize PyUnicode_FromFormat PyObject_GetBuffer PyErr_BadArgument PySet_New PyList_New PyType_FromSpecWithBases PyList_Append PyUnicode_Decode PyUnicode_FSConverter PyType_GetModuleState PyDict_SetItem PyDict_New PyErr_NewExceptionWithDoc PyMem_Free _PyModule_Add PyFrozenSet_New PyCapsule_Import PyErr_NoMemory PyErr_SetFromErrnoWithFilenameObject PyExc_OSError PyObject_CallObject PyErr_CheckSignals PyModuleDef_Init PyObject_GC_Track PyBytes_FromStringAndSize _Py_NotImplementedStruct PyGILState_Ensure PyType_GetModuleByDef PyUnicode_FromEncodedObject _PyDeadline_Get PyExc_TypeError PyType_FromModuleAndSpec PyObject_IsTrue PyObject_Str PyUnicode_AsUTF8String PyTuple_Pack _PyByteArray_empty_string PyCallable_Check PyMem_Malloc PyList_AsTuple _PyTime_AsTimeval_clamp PyExc_UnicodeEncodeError _PyLong_AsInt _Py_TrueStruct PyModule_GetState _PyObject_GC_New PyList_SetItem _Py_fopen_obj PyUnicode_FromString PyLong_FromSize_t _PyDeadline_Init PyBuffer_Release PyObject_CallNoArgs PyByteArray_Type PyEval_RestoreThread PyUnicode_FromStringAndSize _Py_Dealloc PyExc_OverflowError PyType_IsSubtype PyErr_SetFromErrno PyFloat_Type _Py_FalseStruct PyModule_AddStringConstant PyModule_AddType PyErr_Format PyLong_FromUnsignedLong PyExc_ValueError _PyArg_UnpackKeywords PyErr_WarnFormat PyUnicode_AsASCIIString PyErr_WriteUnraisable PyErr_SetString PyList_Size _PyArg_BadArgument PyExc_AttributeError PySet_Add PyWeakref_GetObject PyBuffer_FillInfo PyExc_TimeoutError PyThread_acquire_lock PyDict_SetItemString PyType_GetModule _PyArg_NoPositional PyTuple_New _Py_NoneStruct PyGILState_Release PyBytes_FromString PyFloat_AsDouble PyErr_SetFromWindowsErr PyDict_GetItemWithError PyExc_MemoryError PyBuffer_IsContiguous PyObject_GC_UnTrack PyLong_FromLong PyExc_RuntimeError _PyErr_ChainExceptions PyEval_SaveThread PyUnicode_AsUTF8AndSize PyUnicode_DecodeUTF8 PyErr_Occurred PyBytes_AsString _PyErr_BadInternalCall PyExc_DeprecationWarning _PyArg_CheckPositional _PyArg_NoKeywords PyExc_RuntimeWarning PyErr_WarnEx PyModule_AddIntConstant _PyObject_CallFunction_SizeT PyList_Insert _Py_BuildValue_SizeT PyUnicode_DecodeFSDefault PyBool_FromLong PyErr_SetObject PyWeakref_NewRef PyUnicode_InternFromString PyObject_SetAttr PySequence_List _PyArg_Parse_SizeT PyThread_allocate_lock

vcruntime140

strchr memcpy memcmp memset __C_specific_handler __std_type_info_destroy_list

api-ms-win-crt-stdio-l1-1-0

_close _setmode __stdio_common_vfprintf fseek fgets clearerr fflush __acrt_iob_func fopen ferror ftell __stdio_common_vsprintf _open fclose _fileno fwrite _lseek feof fread _write _read

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _initialize_onexit_table _cexit _errno _execute_onexit_table

api-ms-win-crt-string-l1-1-0

strcmp

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/_uuid.pyd

IMPHASH 368b62645c11988f8173cf8bdd0fea25
SHA256 fc09e40e569f472dd4ba2ea93da48220a6b0387ec62bb0f41f13ef8fab215413
MD5 3a09b6db7e4d6ff0f74c292649e4ba96
SHA1 1a515f98946a4dccc50579cbcedf959017f3a23c
SHA512 8d5ea9f7eee3d75f0673cc7821a94c50f753299128f3d623e7a9c262788c91c267827c859c5d46314a42310c27699af5cdfc6f7821dd38bf03c0b35873d9730f
SSDEEP 384:lCfwFpEWjfivQpIVZwobHQIYiSy1pCQFjzuAM+o/8E9VF0NySoJ:4qpEI4QpIVZwg5YiSyvgAMxkE7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

2f:fc:25:26:60:59:97:f3:da:67:e1:b6:2e:96:b3:e4:6c:f9:2a:4f:c8:86:aa:33:b6:ca:93:7f:1b:75:68:d6

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\_uuid.pdb

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/cdp.dll

IMPHASH c7385eecd78b8e8427ef963ec0938f13
SHA256 aa3b871aa87489b809385e1af781c75bf4954690ecc41933edcf4f803eb4252b
MD5 f2407fc646748716184a1bc37b07e855
SHA1 86aa4fd1659a97f5d609ada6eb0f7437435014f0
SHA512 58964eaa8955f6e2e3d3599ae938abf6f443f49cf813235a55a8e395b941e6835968c91ddc933134d19119c5ab374f4b031a9165884fb158083f09b04e4a670a
SSDEEP 49152:hoS+InlQj5QtjtmQ39XiWR7AmZAH6nPyU9rhBDcJWQL+g3dQTiyWKE2L3KfkCePW:7fjtVCgHsdruKEE/7O2Qer
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

315392

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cdp.pdb

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__localtime64_s _o__mkgmtime64 _o__mktime64 _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__set_errno _o__stricmp _o__strnicmp _o__strtoui64 _o__wcsicmp _o_atoi memmove _o_free _o_iswspace _o_malloc _o_modf _o_pow _o_rand _o_realloc _o_strcpy_s _o_strftime _o_strncpy_s _o_strtol _o_strtoul _o_terminate _o_tolower _o_toupper _o_wcstoul __C_specific_handler _o___std_type_info_destroy_list _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__gmtime64_s strstr _o___std_exception_destroy _o___std_exception_copy _o__get_errno _o__execute_onexit_table _o__errno _o__dtest _o__difftime64 __CxxFrameHandler4 __std_terminate __std_type_info_compare strchr wcschr __CxxFrameHandler3 _CxxThrowException _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__callnewh _o__beginthreadex _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsscanf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnprintf_s memchr memcmp memcpy

api-ms-win-crt-string-l1-1-0

strpbrk strncmp wcsncmp memset

combase

ord4 ord12 ord6 ord14 ord17 ord2 CStdStubBuffer_DebugServerQueryInterface ord10 ord13 ord11 CStdStubBuffer_Invoke ord154 ord5 ord7 ord8 CStdStubBuffer_CountRefs NdrCStdStubBuffer_Release CStdStubBuffer_AddRef ord24 ord16 ord9 CStdStubBuffer_QueryInterface CStdStubBuffer_DebugServerRelease ord15 CStdStubBuffer_Disconnect CStdStubBuffer_IsIIDSupported CStdStubBuffer_Connect ord3 CStdStubBuffer2_CountRefs ord21 ord26 ord27 ord19 ord22 CStdStubBuffer2_Disconnect CStdStubBuffer2_QueryInterface ord23 CStdStubBuffer2_Connect NdrCStdStubBuffer2_Release ord32 ord20 ord25 ord34 ord33 ord18

ntdll

RtlNtStatusToDosError NtOpenSemaphore RtlIsMultiUsersInSessionSku RtlGetDeviceFamilyInfoEnum NtCreateWnfStateName RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlSidDominates RtlInitUnicodeString NtCreateSemaphore RtlGetTokenNamedObjectPath RtlFreeUnicodeString RtlPublishWnfStateData NtOpenMutant NtQueryWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion RtlSubscribeWnfStateChangeNotification NtDeleteWnfStateName

rpcrt4

IUnknown_AddRef_Proxy NdrOleFree UuidFromStringW RpcServerInqCallAttributesW IUnknown_Release_Proxy NdrOleAllocate NdrClientCall3 IUnknown_QueryInterface_Proxy NdrStubCall3 NdrDllCanUnloadNow NdrDllGetClassObject NdrDllRegisterProxy NdrDllUnregisterProxy NdrStubForwardingFunction

api-ms-win-core-libraryloader-l1-2-0

LockResource FreeLibrary FindStringOrdinal LoadResource DisableThreadLibraryCalls GetModuleHandleW GetModuleHandleA GetProcAddress GetModuleFileNameA GetModuleHandleExW FindResourceExW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread OpenThreadToken GetCurrentProcessId TerminateProcess GetCurrentProcess OpenProcessToken GetCurrentThreadId SetThreadToken

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime GetSystemTime GetTickCount GetComputerNameExW GetSystemTimeAsFileTime GetTickCount64 GetVersionExW

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-errorhandling-l1-1-0

GetLastError SetLastError UnhandledExceptionFilter RaiseException SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

shcore

SHCreateMemStream IStream_Read IStream_Size IStream_ReadStr IStream_Reset IStream_WriteStr IStream_Write ord190

msvcp_win

_Thrd_sleep ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ?setf@ios_base@std@@QEAAHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setf@ios_base@std@@QEAAHHH@Z ?_Xinvalid_argument@std@@YAXPEBD@Z _Thrd_detach _Cnd_wait _Cnd_do_broadcast_at_thread_exit _Cnd_broadcast _Thrd_hardware_concurrency ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ?tolower@?$ctype@D@std@@QEBADD@Z ?is@?$ctype@D@std@@QEBA_NFD@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?id@?$collate@D@std@@2V0locale@2@A ??Bid@locale@std@@QEAA_KXZ ?id@?$ctype@D@std@@2V0locale@2@A ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??0_Locinfo@std@@QEAA@PEBD@Z ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??1_Lockit@std@@QEAA@XZ ??1_Locinfo@std@@QEAA@XZ _Mtx_trylock ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Incref@facet@locale@std@@UEAAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ _Strcoll _Thrd_id _Thrd_join ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z _Unlock_shared_ptr_spin_lock _Lock_shared_ptr_spin_lock ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?_Syserror_map@std@@YAPEBDH@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Xbad_alloc@std@@YAXXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xbad_function_call@std@@YAXXZ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Random_device@std@@YAIXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Throw_C_error@std@@YAXH@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ _Cnd_register_at_thread_exit ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ _Mtx_lock ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z _Mtx_init_in_situ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??7ios_base@std@@QEBA_NXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ ??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z ?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z ?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z ?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z _Mtx_destroy_in_situ ?good@ios_base@std@@QEBA_NXZ _Mtx_unlock ?_Xout_of_range@std@@YAXPEBD@Z _Cnd_signal _Query_perf_counter _Query_perf_frequency _Cnd_timedwait ?_Xlength_error@std@@YAXPEBD@Z ?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z _Cnd_unregister_at_thread_exit _Thrd_yield ?uncaught_exception@std@@YA_NXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?flags@ios_base@std@@QEBAHXZ ?width@ios_base@std@@QEBA_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ _Cnd_init_in_situ _Cnd_destroy_in_situ _Xtime_get_ticks _Mtx_current_owns ?_Throw_Cpp_error@std@@YAXH@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z _Strxfrm

api-ms-win-crt-time-l1-1-0

clock _time64

umpdc

Pdcv2ActivationClientUnregister Pdcv2ActivationClientRegister Pdcv2ActivationClientActivate Pdcv2ActivationClientDeactivate

api-ms-win-core-winrt-string-l1-1-0

HSTRING_UserUnmarshal64 HSTRING_UserUnmarshal HSTRING_UserMarshal64 HSTRING_UserFree HSTRING_UserSize64 HSTRING_UserFree64 HSTRING_UserMarshal HSTRING_UserSize WindowsCreateString WindowsCreateStringReference WindowsDeleteString WindowsGetStringRawBuffer

api-ms-win-core-string-l1-1-0

CompareStringOrdinal

api-ms-win-core-winrt-error-l1-1-1

RoGetMatchingRestrictedErrorInfo

api-ms-win-core-localization-l1-2-0

FormatMessageW GetLocaleInfoEx GetSystemPreferredUILanguages

api-ms-win-core-com-l1-1-0

CoSetProxyBlanket CLSIDFromString CoCreateInstance StringFromCLSID CoTaskMemAlloc CoTaskMemFree CoWaitForMultipleHandles CoCreateFreeThreadedMarshaler CoTaskMemRealloc CoSwitchCallContext CoImpersonateClient CoRevertToSelf PropVariantClear

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoInitialize RoGetActivationFactory RoUninitialize RoActivateInstance

api-ms-win-core-synch-l1-1-0

EnterCriticalSection InitializeCriticalSection LeaveCriticalSection InitializeCriticalSectionEx CreateSemaphoreExW CreateEventExW SetEvent ReleaseSemaphore AcquireSRWLockExclusive WaitForSingleObject TryAcquireSRWLockExclusive ReleaseSRWLockExclusive CreateMutexW OpenMutexW InitializeSRWLock ResetEvent InitializeCriticalSectionAndSpinCount CreateMutexExW WaitForSingleObjectEx OpenSemaphoreW ReleaseSRWLockShared ReleaseMutex DeleteCriticalSection AcquireSRWLockShared CreateEventW

api-ms-win-core-heap-l1-1-0

HeapAlloc HeapFree GetProcessHeap

api-ms-win-core-threadpool-l1-2-0

FreeLibraryWhenCallbackReturns SetThreadpoolTimer SetThreadpoolThreadMaximum CloseThreadpoolWait SubmitThreadpoolWork CreateThreadpoolWait WaitForThreadpoolWaitCallbacks SetThreadpoolWait CreateThreadpoolTimer CloseThreadpoolWork CreateThreadpool CreateThreadpoolWork WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer WaitForThreadpoolWorkCallbacks CloseThreadpool SetThreadpoolThreadMinimum

api-ms-win-core-registry-l1-1-0

RegSetValueExW RegCloseKey RegGetValueW RegEnumKeyExA RegNotifyChangeKeyValue RegOpenKeyExA RegCreateKeyExW RegQueryInfoKeyA RegGetValueA RegCreateKeyExA

api-ms-win-eventing-provider-l1-1-0

EventSetInformation EventWriteTransfer EventUnregister EventRegister EventProviderEnabled

api-ms-win-appmodel-runtime-l1-1-0

GetCurrentPackageInfo

api-ms-win-appmodel-runtime-l1-1-1

GetPackageFamilyNameFromToken GetApplicationUserModelIdFromToken

api-ms-win-core-sysinfo-l2-1-0

GetUserNameW

api-ms-win-security-base-l1-1-0

GetTokenInformation ImpersonateLoggedOnUser RevertToSelf GetLengthSid CreateWellKnownSid CopySid

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize InitOnceComplete Sleep

api-ms-win-core-file-l1-1-0

FindFirstFileW DeleteFileW GetFullPathNameW FindNextFileW SetFilePointerEx RemoveDirectoryW ReadFile CreateDirectoryW GetFileSizeEx WriteFile SetFilePointer SetEndOfFile GetFileAttributesW FindClose CreateDirectoryA FlushFileBuffers CreateFileW

api-ms-win-core-file-l1-2-0

CreateFile2

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-security-sddl-l1-1-0

ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalFree

api-ms-win-core-file-l2-1-0

MoveFileExW GetFileInformationByHandleEx

api-ms-win-core-path-l1-1-0

PathAllocCombine PathCchSkipRoot

api-ms-win-core-com-l1-1-1

RoGetAgileReference

crypt32

CertOpenStore CertCreateCertificateContext CryptProtectData CryptUnprotectData CertGetCertificateContextProperty CertGetNameStringW CertDeleteCertificateFromStore CertCreateSelfSignCertificate CertFreeCertificateContext CertAddCertificateContextToStore CertSaveStore CertDuplicateCertificateContext CertCloseStore CertFindCertificateInStore CertStrToNameW

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus GetQueuedCompletionStatus CancelIoEx CreateIoCompletionPort DeviceIoControl

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-devices-query-l1-1-0

DevCloseObjectQuery DevCreateObjectQuery

propsys

PSPropertyBag_WriteStr PSCreateMemoryPropertyStore PSPropertyBag_WriteUnknown

api-ms-win-core-heap-obsolete-l1-1-0

LocalSize

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

kernelbase

BaseFormatObjectAttributes

dsreg

DsrGetJoinInfo DsrFreeJoinInfo

api-ms-win-security-capability-l1-1-0

CapabilityCheck RpcClientCapabilityCheck

api-ms-win-crt-math-l1-1-0

ceilf

CDPAccountFromWebAccount CDPAcquireNetworkingInternal CDPCreateAFSRegistrationClientInternal CDPCreateAFSUserSettingsInternal CDPCreateAccountInternalForUser CDPCreateAccountInternalWithStableUserId CDPCreateAccountProviderInternal CDPCreateActivity CDPCreateActivityAsset CDPCreateActivityInternal CDPCreateActivityStoreInfoInternal CDPCreateActivityStoreInfoWatcher CDPCreateActivityStoreInfoWatcherForUser CDPCreateActivityStoreInfoWatcherInternal CDPCreateActivityStoreReader CDPCreateActivityStoreReaderForUser CDPCreateActivityStoreReaderInternal CDPCreateAllDevicesQuery CDPCreateAllDevicesQueryForUser CDPCreateAnonymousAccount CDPCreateAnonymousAccountInternal CDPCreateAppControlClient CDPCreateAppControlClientInternal CDPCreateAppId CDPCreateAppRegistrationManager CDPCreateAppRegistrationManagerForUser CDPCreateAppRegistrationManagerInternal CDPCreateAzureActiveDirectoryAccount CDPCreateBeaconControl CDPCreateBeaconControlInternal CDPCreateBinaryClient CDPCreateBinaryClientInternal CDPCreateBinaryHost CDPCreateBinaryHostInternal CDPCreateBinaryHostWithSettings CDPCreateCallbackNotifierInternal CDPCreateCloudNotification CDPCreateComObjectInternal CDPCreateCrossPlatformAppId CDPCreateCrossPlatformAppIdFromAppId CDPCreateCurrentCrossPlatformAppId CDPCreateDedupedDevice CDPCreateDedupedDeviceQuery CDPCreateDedupedDeviceQueryForUser CDPCreateDedupedDeviceQueryInternal CDPCreateDedupedDeviceQueryParameters CDPCreateDeviceInternal CDPCreateDeviceQuery CDPCreateDeviceQueryForSessionInternal CDPCreateDeviceQueryForUser CDPCreateDeviceQueryInternal CDPCreateDeviceQueryWithIdentity CDPCreateDirectNotificationHost CDPCreateEmptyAccountSettings CDPCreateEnvironmentManagerInternal CDPCreateHttpRequestInternal CDPCreateMessagingHost CDPCreateMessagingHostInternal CDPCreateMicrosoftAccount CDPCreateOrGetDdsRegistrationUserObjectInternal CDPCreatePlatformSettingsInternal CDPCreateRemoteUserInternal CDPCreateResource CDPCreateResourceCollection CDPCreateSettingsInteropInternal CDPCreateTask CDPCreateTaskInternal CDPCreateTelemetryTask CDPCreateTelemetryTaskInternal CDPCreateTestActivityAsset CDPCreateUserInternal CDPCreateUserNotificationClientInternal CDPCreateUserServiceNotificationClient CDPCreateUserServiceNotificationClientForUser CDPCreateUuid CDPFixAccounts CDPGetAFCInitializer CDPGetAccountProviderInternal CDPGetAccountsNeedAttention CDPGetAccountsSettings CDPGetActivityStore CDPGetActivityStoreForAccount CDPGetActivityStoreForAccountInternal CDPGetActivityStoreForStoreInfo CDPGetActivityStoreForStoreInfoAndUser CDPGetActivityStoreForStoreInfoInternal CDPGetActivityStoreForUser CDPGetActivityStoreInternal CDPGetCloudNotificationProviderInternal CDPGetCoreInitializer CDPGetDeviceCache CDPGetDeviceCacheInternal CDPGetHost CDPGetLogger CDPGetNearShareAuthorizationPolicyOfInteractiveUser CDPGetRelayInitializer CDPGetResourceHandler CDPGetResourceManager CDPGetSDKAuthorizationPolicyOfInteractiveUser CDPGetSGSocket CDPGetSystemAppId CDPGetUserActivitySettings CDPGetUserActivitySettingsForUser CDPGetUserActivitySettingsInternal CDPGetUserCollectionInternal CDPInitialize CDPInitializeForService CDPInitializeSGPowerOnPacket CDPInitializeUserService CDPInitializeUserServicePhase2 CDPIsEnabled CDPPreShutdown CDPRegisterActivityConflictResolverInternal CDPReleaseNetworkingInternal CDPResume CDPSetAccountProviderInternal CDPSetAppControlHostCallback CDPSetExtendedLocalDeviceStatus CDPSetResourceConfigProvider CDPSetServicePid CDPShutdown CDPShutdownBluetooth CDPStartCCSPolling CDPStopCCSPolling CDPSuspend CDPUninitializeUserService CDPWriteAccountSettings DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer GetProxyDllInfo

Name

.text

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

49KB

Virtual Size

57KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

191KB

Virtual Size

190KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/certifi/cacert.pem

SHA256 94edeb66e91774fcae93a05650914e29096259a5c7e871a1f65d461ab5201b47
MD5 50ea156b773e8803f6c1fe712f746cba
SHA1 2c68212e96605210eddf740291862bdf59398aef
SHA512 01ed2e7177a99e6cb3fbef815321b6fa036ad14a3f93499f2cb5b0dae5b713fd2e6955aa05f6bda11d80e9e0275040005e5b7d616959b28efc62abb43a3238f0
SSDEEP 6144:QW1x/M8fRR1jplkXURrVADwYCuCigT/QRSRqNb7d8iu5Nahx:QWb/TRJLWURrI5RWavdF08/
MD5 SHA1 SHA512 SSDEEP

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/charset_normalizer/md.pyd

IMPHASH f8c0f377107b03e523f21dcf227dcf24
SHA256 790a11aa270523c2efa6021ce4f994c3c5a67e8eaaaf02074d5308420b68bd94
MD5 723ec2e1404ae1047c3ef860b9840c29
SHA1 8fc869b92863fb6d2758019dd01edbef2a9a100a
SHA512 2e323ae5b816adde7aaa14398f1fdb3efe15a19df3735a604a7db6cadc22b753046eab242e0f1fbcd3310a8fbb59ff49865827d242baf21f44fd994c3ac9a878
SSDEEP 96:KG+p72HzA5iJGhU2Y0hQMsQJCUCLsZEA4elh3XQMtCFliHUWQcX6g8cim1qeSju1:A2HzzU2bRYoeLHkcqgvimoe
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/charset_normalizer/md__mypyc.pyd

IMPHASH feb2f48749cb30e4f1a2a48b5a94a37c
SHA256 3d9893aa79efd13d81fcd614e9ef5fb6aad90569beeded5112de5ed5ac3cf753
MD5 9ea8098d31adb0f9d928759bdca39819
SHA1 e309c85c1c8e6ce049eea1f39bee654b9f98d7c5
SHA512 86af770f61c94dfbf074bcc4b11932bba2511caa83c223780112bda4ffb7986270dc2649d4d3ea78614dbce6f7468c8983a34966fc3f2de53055ac6b5059a707
SSDEEP 1536:OzgMw0g+m/+rxC9Jtd960WsCyqPD1/bZMlDML48Be9zGTVmZRJIRbvB:OsTH+VC9Jtd9VdCr7fMp/8yGTVmzmZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

77360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python311

PyTuple_New PyLong_FromString PySequence_Contains PyFloat_FromDouble PySet_Add PyExc_AttributeError PyTuple_GetSlice PyUnicode_New PyUnicode_Split PyNumber_Multiply PyErr_SetString PyExc_ZeroDivisionError _PyObject_LookupAttrId PyNumber_Add _PyTrash_end PyUnicode_InternInPlace PyDict_Next PyErr_Format PyDict_Type PyObject_RichCompare PyBool_Type PyTuple_Type _Py_FalseStruct PyFloat_Type PyUnicode_Append PyType_IsSubtype PyNumber_Subtract PyErr_Restore PyExc_OverflowError _Py_Dealloc _PyTrash_cond PyModule_GetDict PyErr_ExceptionMatches PyErr_Fetch PyObject_Vectorcall PyObject_Not PyUnicode_FromFormat PyList_New PyModule_Create2 _PyObject_GetAttrId PySlice_New PyType_Ready PyObject_GetAttrString PyErr_Clear PyList_Append _Py_NoneStruct PyCapsule_New PySet_Type PyObject_VectorcallDict PyDict_SetItem PyDict_New PyUnicode_Type PyObject_VectorcallMethod PyObject_IsInstance PyType_GenericAlloc PyFrozenSet_New PyObject_GetItem PyBytes_FromStringAndSize PyImport_Import _PyType_CalculateMetaclass PyUnicode_Compare PyExc_TypeError PyObject_IsTrue PyObject_Str PyTuple_Pack _PyUnicode_Ready PyList_AsTuple PyExc_IndexError _Py_TrueStruct _PyTrash_begin PyExc_SystemError _PyUnicode_FastCopyCharacters PyObject_SetItem _PyDict_GetItemStringWithError PyNumber_TrueDivide PyErr_SetImportError PyUnicode_FromString _PyUnicode_EQ PyObject_CallNoArgs PyUnicode_CompareWithASCIIString PyType_Type PyUnicode_Substring PyUnicode_FromStringAndSize PyFloat_AsDouble PyObject_GetAttr PySet_Contains PyComplex_FromDoubles PyDict_GetItemWithError PyUnicode_Concat PyObject_GC_UnTrack PyObject_SetAttrString _PyObject_FastCall PyList_SetSlice _PyErr_ChainExceptions PyTraceBack_Here PyNumber_Remainder _PyUnicode_EqualToASCIIString PySuper_Type PyLong_FromSsize_t PyErr_Occurred PyImport_ImportModuleLevelObject PyExc_KeyError PyFrame_New PyCode_NewEmpty PyErr_SetObject PyThreadState_Get PyObject_SetAttr PyBaseObject_Type PyObject_RichCompareBool PyModule_GetFilenameObject

kernel32

QueryPerformanceCounter RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent

vcruntime140

memcpy strchr __C_specific_handler __std_type_info_destroy_list memset

api-ms-win-crt-runtime-l1-1-0

_cexit abort _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table

api-ms-win-crt-stdio-l1-1-0

fflush __stdio_common_vfprintf __acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcmp

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/cryptography/hazmat/bindings/_rust.pyd

IMPHASH 6689c65e302c055ac21ed5ce07588089
SHA256 5f20d6cec04685075781996a9f54a78dc44ab8e39eb5a2bcf3234e36bef4b190
MD5 81ad4f91bb10900e3e2e8eaf917f42c9
SHA1 840f7aef02cda6672f0e3fc7a8d57f213ddd1dc6
SHA512 11cd299d6812cdf6f0a74ba86eb44e9904ce4106167ebd6e0b81f60a5fcd04236cef5cff81e51ed391f5156430663056393dc07353c4a70a88024194768ffe9d
SSDEEP 49152:Hvisa2OcIo0UYN1YA2sBCT7I0XIU6iOGtlqNVwASO0AIjoI+b0vjemXSKSDhxlT3:Pi/2PTYDBCT7NY+gTNxY7GbdJ295x
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Embeds OpenSSL

Embeds OpenSSL, may be used to circumvent TLS interception.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5813684

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

cryptography_rust.pdb

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WakeByAddressSingle WaitOnAddress

python3

PyObject_GetIter PySet_Add PyFrozenSet_New PyObject_DelItem PyObject_SetItem PyObject_GetItem PyObject_Call PyNumber_Power PyObject_IsTrue PyObject_RichCompare PyObject_SetAttr PyObject_GetAttr PyExc_AttributeError PyObject_Str PyLong_AsUnsignedLongLong PyLong_AsLongLong PyLong_AsLong PyNumber_Index PyUnicode_InternInPlace PySequence_Contains PyType_GenericAlloc Py_GetVersion PyDict_Size PyDict_SetItem PyDict_GetItemWithError PyGILState_Ensure PyErr_GivenExceptionMatches PyGILState_Release PyList_GetItem PyByteArray_Type PyByteArray_Size PyByteArray_AsString PyBytes_Size PyUnicode_AsUTF8String PyBool_Type PyException_SetCause PyException_GetCause PyErr_SetObject PyErr_Fetch PyErr_SetString PyErr_Restore PyErr_NormalizeException PyException_GetTraceback PyUnicode_FromStringAndSize PyDict_New PyObject_CallMethod PyImport_ImportModule PyEval_RestoreThread PyEval_SaveThread PyArg_UnpackTuple PyFloat_AsDouble PyLong_FromVoidPtr PyLong_FromUnsignedLong PyLong_FromLong PyErr_Occurred PyObject_Free PyObject_Malloc _Py_Dealloc PySlice_Type PyExc_IndexError PyExc_RuntimeError PyExc_OverflowError PyTuple_SetItem PyTuple_New PyList_SetItem PyList_New PySequence_Size PyDict_Next PyType_GetSlot PyBytes_AsString PyBytes_FromStringAndSize PyExc_Exception PyExc_MemoryError PyImport_Import PyLong_FromLongLong PyLong_Type PyIter_Next PyList_Append PyExc_UnicodeDecodeError PyObject_GC_UnTrack PyErr_WriteUnraisable PyType_IsSubtype PyBaseObject_Type PySequence_Check PyExc_NotImplementedError PyExc_SystemError PyExc_TypeError PyObject_IsInstance PyType_GetFlags _Py_TrueStruct _Py_FalseStruct _Py_NotImplementedStruct PyLong_FromUnsignedLongLong _Py_NoneStruct Py_DecRef PyExc_ValueError PyNumber_Multiply PyNumber_And PyException_SetTraceback PyErr_PrintEx PyErr_NewExceptionWithDoc PyErr_WarnEx PyErr_Print PyObject_Repr PyObject_Size PyObject_Hash PyModule_GetNameObject PySlice_Unpack PySlice_AdjustIndices PyUnicode_AsEncodedString PyTuple_Size PyTuple_GetItem PyObject_GenericSetDict PyType_FromSpec PyExc_ImportError PyExc_BaseException PyModule_Create2 PyCMethod_New PyObject_SetAttrString PyLong_FromSsize_t Py_IncRef PyList_Size Py_IsInitialized

user32

GetUserObjectInformationW MessageBoxW GetProcessWindowStation

crypt32

CertOpenSystemStoreW CertGetCertificateContextProperty CertFreeCertificateContext CertDuplicateCertificateContext CertFindCertificateInStore CertEnumCertificatesInStore CertCloseStore CertOpenStore

ws2_32

setsockopt sendto recvfrom getpeername send recv WSAStartup closesocket getsockopt getsockname ioctlsocket WSAGetLastError WSASetLastError getservbyname getservbyport gethostbyname gethostbyaddr ntohs inet_ntoa inet_addr htons htonl connect socket shutdown select WSACleanup

advapi32

CryptDecrypt CryptDestroyHash CryptSignHashW CryptEnumProvidersW CryptGenRandom CryptCreateHash CryptExportKey CryptGetUserKey CryptGetProvParam CryptSetHashParam CryptDestroyKey CryptReleaseContext CryptAcquireContextW ReportEventW RegisterEventSourceW DeregisterEventSource

kernel32

CreateMutexA WaitForSingleObjectEx WriteConsoleW FormatMessageW HeapAlloc GetProcessHeap ReleaseMutex lstrlenW HeapReAlloc HeapFree TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter GetCurrentDirectoryW RtlLookupFunctionEntry UnhandledExceptionFilter QueryPerformanceCounter ReadConsoleW ReadConsoleA SetConsoleMode GetConsoleMode LoadLibraryW ConvertThreadToFiberEx ConvertFiberToThread CreateSemaphoreA GetExitCodeThread WaitForSingleObject ReleaseSemaphore DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle FindNextFileW FindFirstFileW FindClose SystemTimeToFileTime GetSystemTime GetACP GetSystemTimeAsFileTime GetCurrentProcessId WideCharToMultiByte CreateFiberEx DeleteFiber SwitchToFiber GetEnvironmentVariableW VirtualFree TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentThreadId AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock MultiByteToWideChar GetModuleHandleW WriteFile GetFileType GetStdHandle RtlVirtualUnwind SetLastError FormatMessageA LoadLibraryA GetProcAddress FreeLibrary GetSystemDirectoryA GetLastError GetModuleHandleExW RtlCaptureContext IsProcessorFeaturePresent DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent

ntdll

RtlNtStatusToDosError NtWriteFile

vcruntime140

strchr strrchr memset memmove __CxxFrameHandler3 __std_type_info_destroy_list __C_specific_handler _CxxThrowException strstr wcsstr memchr memcmp memcpy

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm _cexit signal _beginthreadex _errno _exit raise strerror_s _initterm_e _wassert

api-ms-win-crt-string-l1-1-0

isdigit strncpy strncpy_s strcpy_s strcmp tolower strncmp strlen strspn strcspn strcat_s isspace

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

calloc free malloc realloc

api-ms-win-crt-time-l1-1-0

_time64 _gmtime64_s

api-ms-win-crt-stdio-l1-1-0

fflush __acrt_iob_func __stdio_common_vfprintf _wfopen __stdio_common_vswprintf fopen __stdio_common_vsscanf fgets ferror fread __stdio_common_vsprintf fputs fseek ftell fwrite setvbuf __stdio_common_vsprintf_s fclose _fileno _setmode feof

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoul

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-environment-l1-1-0

getenv

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/d2d1.dll

IMPHASH 27f7fb547267b1f94c425d9bbaae8b06
SHA256 1f57c326f2dda4799b9e09cca380ecd8676de0c963bc35732197d73af4480033
MD5 7c9cbe371bd9d7027901fe48bbf577e5
SHA1 34dcb0e771ec0c712684ef5515e8001b1d30e740
SHA512 5d5c012eca9000d34f8c6d787c24f1679a565a473a3d028d3fa70e851a046073c905a83216a40b72adfd7840314ccbd36f3808471fb91bad7ea6a1338608112e
SSDEEP 49152:PK7N10C3E6LCcva8u+GUOrjpJRn3CkEBW3emVk4Ell0PpV94ixzFVcaLz3wVLm2/:cox9rvJsi772kAwPe+/UC9ohHaJeA5IB
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

3b:c1:c4:9a:54:56:45:7a:07:41:1c:8b:e4:40:3c:90:cc:03:aa:12:29:f9:ca:c8:4e:7b:df:01:65:ae:97:6e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

890592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d2d1.pdb

msvcrt

?terminate@@YAXXZ ??1type_info@@UEAA@XZ _aligned_realloc _aligned_free ??0exception@@QEAA@AEBQEBD@Z ??0exception@@QEAA@AEBQEBDH@Z ??1exception@@UEAA@XZ ?what@exception@@UEBAPEBDXZ ??0exception@@QEAA@AEBV0@@Z tolower wcstod iswalpha iswspace _wcsicmp wcsncmp _isnan _vsnprintf sqrt sqrtf strcmp _CxxThrowException _aligned_malloc time strstr _itow_s _snprintf_s swscanf_s modff wcschr memcpy memmove tanf _onexit __dllonexit _unlock _lock __CxxFrameHandler3 __C_specific_handler _initterm _amsg_exit _XcptFilter realloc wcstol memmove_s memcpy_s sinf sin powf memset memcmp logf log fmodf floorf floor expf _vsnwprintf _finite _purecall _callnewh malloc _wcsnicmp free cosf cos ceilf ceil atan2f atan acosf wcscmp

api-ms-win-eventing-provider-l1-1-0

EventUnregister EventRegister EventSetInformation EventWriteTransfer

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress LoadLibraryExW GetModuleFileNameA GetModuleHandleW GetModuleHandleExW DisableThreadLibraryCalls GetModuleFileNameW FindResourceExW LockResource FreeLibrary LoadResource SizeofResource

api-ms-win-core-synch-l1-1-0

InitializeCriticalSectionEx ReleaseSemaphore WaitForSingleObject LeaveCriticalSection CreateMutexExW CreateSemaphoreExW InitializeCriticalSectionAndSpinCount AcquireSRWLockShared SetEvent ReleaseMutex ResetEvent OpenSemaphoreW DeleteCriticalSection EnterCriticalSection ReleaseSRWLockShared ReleaseSRWLockExclusive CreateEventW AcquireSRWLockExclusive WaitForSingleObjectEx

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-registry-l1-1-0

RegEnumKeyExW RegGetValueW RegQueryValueExW RegOpenKeyExW RegCloseKey

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter SetLastError GetLastError

api-ms-win-core-heap-l1-1-0

HeapAlloc HeapFree GetProcessHeap

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CreateThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess TerminateProcess GetCurrentProcessId GetCurrentThreadId

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent OutputDebugStringA

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetTickCount64 GetTickCount GetSystemInfo GetVersionExW GetSystemDirectoryW

api-ms-win-core-synch-l1-2-0

Sleep WakeAllConditionVariable SleepConditionVariableSRW

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

ntdll

RtlSetBit RtlAreBitsSet RtlInitializeBitMap EtwEventUnregister EtwEventRegister EtwEventSetInformation vDbgPrintEx RtlHashUnicodeString WinSqmAddToStream WinSqmAddToAverageDWORD WinSqmIncrementDWORD WinSqmIsOptedIn WinSqmAddToStreamEx DbgPrintEx DbgPrint EtwEventWriteTransfer RtlClearBits

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalReAlloc GlobalHandle GlobalSize GlobalLock

api-ms-win-core-heap-l2-1-0

GlobalFree GlobalAlloc

api-ms-win-core-file-l1-1-0

ReadFile GetFileSize CreateFileW

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-windowserrorreporting-l1-1-0

WerRegisterMemoryBlock

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-memory-l1-1-0

MapViewOfFile CreateFileMappingW UnmapViewOfFile

Name

.text

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

RT_CODE

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.7MB

Virtual Size

2.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

146KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

68KB

Virtual Size

67KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/d3d10warp.dll

IMPHASH 113eae7f46ac04ade26e10c730a6e454
SHA256 6d35cf4c17afc7a2f4218cd30344fe40df95339b211cc483bef909a31c0ef192
MD5 7e0fbebe0a960d5eb4516bd79d055e3e
SHA1 686b250c192126c6c2d33517f15c27cca76e4de9
SHA512 a8c22cc2277375f9918200e12c9a5a60c4ed0f5389a62eba67d5991da966a0e596c855d164746a8c9f5ab2bcf3692d345b3290de92d2e284cbe52280e4921e3f
SSDEEP 98304:gM1u/083+1WjeF8X8ZJ0t7EboCNlLsaONHoGz0wCxmhYMjfN0jfEsB:gMUcTwCxmhYMjfN0jffB
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Digest

15:67:38:eb:2a:b2:a9:db:67:bc:8a:30:fd:2b:35:83:51:33:31:9e:9c:75:95:15:02:95:9e:13:bb:36:59:00

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

5893616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3d10warp.pdb

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__localtime64 _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__splitpath_s _o__stricmp __intrinsic_setjmp _o_abort _o_acos _o_asin _o_atan _o_atan2 _o_atoi _o_calloc _o_ceil _o_cos _o_cosh _o_exp _o_exp2 _o_fabs _o_floor _o_fmod _o_free _o_isalnum _o_isalpha _o_isdigit _o_isprint _o_log _o_log10 _o_log2 _o_malloc _o_mbstowcs_s _o_modf _o_pow _o_powf _o_qsort _o_qsort_s _o_sin _o_sinh _o_sqrt _o_strcpy_s _o_tan _o_tanh _o_terminate _o_toupper _o_wcscat_s _o_wcscpy_s memchr _o__fpclass _o__get_osfhandle _o__execute_onexit_table _o__errno _o__crt_atexit _o__configure_narrow_argv __CxxFrameHandler3 wcsrchr longjmp _CxxThrowException _o__cexit _o__callnewh _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy __std_terminate __C_specific_handler __CxxFrameHandler4 memcmp memcpy memmove

api-ms-win-crt-string-l1-1-0

memset strncmp

ntdll

RtlAddGrowableFunctionTable EtwEventRegister RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext EtwEventUnregister EtwEventWrite RtlCreateServiceSid RtlInitUnicodeString RtlCaptureStackBackTrace RtlDeleteGrowableFunctionTable

api-ms-win-core-synch-l1-1-0

OpenSemaphoreW ReleaseSRWLockExclusive WaitForSingleObjectEx AcquireSRWLockExclusive CreateSemaphoreExW ReleaseSemaphore ReleaseSRWLockShared CreateEventW InitializeCriticalSectionEx WaitForMultipleObjectsEx WaitForSingleObject InitializeCriticalSectionAndSpinCount CreateMutexExW ReleaseMutex AcquireSRWLockShared DeleteCriticalSection SetEvent InitializeCriticalSection LeaveCriticalSection EnterCriticalSection CreateEventA ResetEvent

api-ms-win-core-libraryloader-l1-2-0

GetProcAddress DisableThreadLibraryCalls FreeLibrary GetModuleFileNameA LoadLibraryExW GetModuleHandleW GetModuleHandleExW GetModuleFileNameW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-processthreads-l1-1-0

CreateProcessA GetCurrentProcess TerminateProcess OpenProcessToken ExitThread DeleteProcThreadAttributeList TlsGetValue TlsFree OpenThreadToken InitializeProcThreadAttributeList UpdateProcThreadAttribute SwitchToThread GetCurrentThreadId GetCurrentProcessId CreateThread GetProcessTimes GetProcessId GetCurrentThread ExitProcess TlsAlloc GetThreadPriority

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo GetSystemDirectoryA GetTickCount GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList InterlockedPushEntrySList InitializeSListHead InterlockedPopEntrySList

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-errorhandling-l1-1-0

RaiseException SetUnhandledExceptionFilter SetLastError GetLastError UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetProcessMitigationPolicy FlushInstructionCache OpenProcess

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-processenvironment-l1-1-0

GetStdHandle

api-ms-win-core-memory-l1-1-0

VirtualProtect CreateFileMappingW MapViewOfFile VirtualFree VirtualFreeEx VirtualAllocEx VirtualAlloc VirtualQueryEx ReadProcessMemory VirtualProtectEx WriteProcessMemory UnmapViewOfFile VirtualQuery

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-console-l2-1-0

SetConsoleTextAttribute GetConsoleScreenBufferInfo

api-ms-win-core-console-l1-1-0

GetConsoleMode

msvcp_win

?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?uncaught_exception@std@@YA_NXZ _Xtime_get_ticks ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAHH@Z ?_Winerror_message@std@@YAKKPEADK@Z

api-ms-win-crt-math-l1-1-0

fminf fmaxf ceilf floorf sqrtf _finite

api-ms-win-core-registry-l1-1-0

RegOpenKeyExA RegQueryValueExA RegQueryValueExW RegOpenKeyExW RegCloseKey

api-ms-win-core-heap-l1-1-0

HeapFree GetProcessHeap HeapAlloc

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer CloseThreadpoolWork CloseThreadpool SetThreadpoolThreadMinimum CloseThreadpoolTimer SetThreadpoolThreadMaximum SetThreadpoolTimer CreateThreadpool CreateThreadpoolWork WaitForThreadpoolTimerCallbacks SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks

api-ms-win-core-localization-l1-2-0

FormatMessageW

api-ms-win-core-systemtopology-l1-1-0

GetNumaHighestNodeNumber

rpcrt4

RpcAsyncInitializeHandle RpcBindingBind RpcAsyncGetCallStatus RpcExceptionFilter RpcBindingCreateW RpcBindingUnbind RpcServerListen RpcEpRegisterA RpcServerRegisterIf3 RpcServerUseProtseqEpW RpcBindingVectorFree RpcServerUnregisterIf RpcEpUnregister RpcServerInqBindings RpcMgmtWaitServerListen RpcMgmtStopServerListening RpcAsyncAbortCall RpcAsyncCompleteCall RpcServerTestCancel RpcBindingFree RpcRevertToSelf RpcImpersonateClient RpcServerInqCallAttributesA NdrAsyncServerCall NdrServerCallAll Ndr64AsyncServerCallAll NdrServerCall2 NdrClientCall3 Ndr64AsyncClientCall RpcAsyncCancelCall

api-ms-win-core-wow64-l1-1-1

IsWow64Process2 GetSystemWow64Directory2A

api-ms-win-core-psapi-ansi-l1-1-0

K32GetModuleFileNameExA

api-ms-win-security-base-l1-1-0

GetLengthSid InitializeAcl GetTokenInformation AddAccessAllowedAce

api-ms-win-security-sddl-ansi-l1-1-0

ConvertSidToStringSidA ConvertStringSidToSidA

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc

api-ms-win-security-sddl-l1-1-0

ConvertStringSidToSidW ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-core-com-l1-1-0

CoCreateGuid

api-ms-win-core-file-l1-1-0

WriteFile CreateFileW ReadFile

api-ms-win-core-io-l1-1-0

GetOverlappedResult CancelIoEx

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe WaitNamedPipeW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-eventing-provider-l1-1-0

EventRegister EventSetInformation EventProviderEnabled EventWriteTransfer EventUnregister

api-ms-win-core-xstate-l2-1-0

GetEnabledXStateFeatures

api-ms-win-core-processthreads-l1-1-2

GetThreadInformation SetThreadInformation

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-memory-l1-1-3

SetProcessValidCallTargets

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

Name

.text

Size

5.8MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

847KB

Virtual Size

847KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

13KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

153KB

Virtual Size

152KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

1024B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/d3d12SDKLayers.dll

IMPHASH 9061731fc0874bef39d695fa5695b3b8
SHA256 f094f28f3cf137fbc1748ce79117d5e2d0d49cbaaa5fbe097a02d0a89bd82848
MD5 a4a2a8fd47a931715509b04d3d7f245d
SHA1 6e277811e9e19e892d3870569483802d27cb8367
SHA512 9f0f4268a46e49f563c3eeeea572a945142f198494c8c4a1c72baaa09efacd1c14aae7222dac1f7ec7e3ef6ec5acfb9be0912913a7a7fb8bbfa4c0a3813a2e06
SSDEEP 49152:rTC9vm3j6wb10xN/3RZ7H1qDl1WX3s7kP8NwHi4Q4EC1nn5b7zxUnMzQJC2VYPqD:xb10Cg6CTz
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

2353504

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d3d12SDKLayers.pdb

dxgidebug

DXGIGetDebugInterface

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW FreeLibrary GetModuleFileNameA GetModuleHandleW GetModuleHandleExW GetProcAddress LoadLibraryExA GetModuleHandleA

api-ms-win-core-synch-l1-1-0

ReleaseSemaphore LeaveCriticalSection OpenSemaphoreW AcquireSRWLockExclusive ReleaseSRWLockShared InitializeCriticalSectionAndSpinCount CreateMutexExW ReleaseSRWLockExclusive DeleteCriticalSection ReleaseMutex TryAcquireSRWLockExclusive InitializeSRWLock InitializeCriticalSection CreateEventW InitializeCriticalSectionEx ResetEvent SetEvent CreateMutexA WaitForSingleObject WaitForSingleObjectEx CreateSemaphoreExW CreateEventA AcquireSRWLockShared EnterCriticalSection

api-ms-win-core-heap-l1-1-0

HeapFree GetProcessHeap HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter GetLastError RaiseException SetLastError

api-ms-win-core-threadpool-l1-2-0

CloseThreadpool WaitForThreadpoolWorkCallbacks CloseThreadpoolCleanupGroup CloseThreadpoolCleanupGroupMembers SubmitThreadpoolWork CreateThreadpoolWork CreateThreadpoolCleanupGroup CreateThreadpoolTimer SetThreadpoolTimer CreateThreadpool SetThreadpoolThreadMaximum CloseThreadpoolTimer CloseThreadpoolWork WaitForThreadpoolTimerCallbacks SetThreadpoolThreadMinimum

api-ms-win-core-processthreads-l1-1-0

TlsGetValue TlsFree TlsAlloc CreateThread GetProcessTimes GetCurrentProcess TlsSetValue GetCurrentThreadId GetCurrentProcessId TerminateProcess

api-ms-win-core-localization-l1-2-0

GetLocaleInfoEx FormatMessageW LCMapStringW LCMapStringEx GetCPInfo

api-ms-win-core-debug-l1-1-0

OutputDebugStringA IsDebuggerPresent DebugBreak OutputDebugStringW

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-sysinfo-l1-1-0

GetVersionExA GetSystemInfo GetSystemTimeAsFileTime

api-ms-win-core-com-l1-1-0

CoCreateInstance CoGetMalloc CoTaskMemFree

api-ms-win-core-errorhandling-l1-1-1

RemoveVectoredExceptionHandler

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc

d3d12

D3D12CoreGetLayeredDeviceSize D3D12CoreCreateLayeredDevice D3D12CoreRegisterLayers D3D12CreateVersionedRootSignatureDeserializer

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-eventing-provider-l1-1-0

EventSetInformation EventWriteTransfer EventRegister EventUnregister

api-ms-win-core-registry-l1-1-0

RegCloseKey RegOpenKeyExW RegQueryValueExA RegQueryValueExW RegEnumKeyExA RegOpenKeyExA

api-ms-win-core-memory-l1-1-0

MapViewOfFile VirtualQuery VirtualAlloc UnmapViewOfFile CreateFileMappingW MapViewOfFileEx VirtualFree FlushViewOfFile

ntdll

NtQuerySection

api-ms-win-core-file-l1-1-0

SetFilePointer SetFilePointerEx GetFileType CreateFileW SetEndOfFile GetFullPathNameW DeleteFileW CreateFileA WriteFile GetFileAttributesW SetFileAttributesW ReadFile GetFileSize

api-ms-win-core-string-l1-1-0

CompareStringEx GetStringTypeW MultiByteToWideChar WideCharToMultiByte

win32u

NtNotifyPresentToCompositionSurface

api-ms-win-crt-string-l1-1-0

strcmp memset __strncnt wcsncmp wcsnlen strnlen strcspn strncmp

api-ms-win-crt-math-l1-1-0

_isnan ceilf

api-ms-win-crt-locale-l1-1-0

_unlock_locales _lock_locales

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__callnewh _o__calloc_base _o__cexit _o__chsize_s _o__close _o__configure_narrow_argv _o__crt_atexit _o__errno _o__execute_onexit_table _o__filelengthi64 _o__fpclass _o__free_base _o__get_osfhandle _o__Getdays _o__Getmonths _o__Gettnames _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__lseeki64 _o__malloc_base _o__mbscmp _o__memicmp memchr _o__open_osfhandle _o__purecall _o__read _o__realloc_base _o__recalloc _o__register_onexit_function _o__seh_filter_dll _o__Strftime _o__stricmp _o__W_Getdays _o__W_Getmonths _o__W_Gettnames _o__wcsdup _o__Wcsftime _o__wcsicmp _o__wcsnicmp _o__wfsopen _o__wfullpath _o__wgetenv _o__wmakepath_s _o__write _o__wsopen_s _o__wsplitpath_s _o__wtoi _o_abort _o_acos _o_asin _o_atan _o_atan2 _o_atoi _o_bsearch _o_calloc _o_ceil _o_cos _o_cosh _o_exp _o_exp2 _o_fabs _o_fclose _o_floor _o_fmod _o_fread _o_free _o_frexp _o_fseek _o_ftell _o_isalnum _o_isalpha _o_isdigit _o_islower _o_isprint _o_isspace _o_isupper _o_ldexp _o_localeconv _o_log _o_log10 _o_log2 _o_malloc _o_mbsrtowcs _o_mbstowcs _o_modf _o_pow _o_powf _o_qsort _o_rand _o_setlocale _o_sin _o_sinh _o_sqrt _o_strcat_s _o_strcpy_s _o_strncpy_s _o_strtod _o_strtof _o_tan _o_tanh _o_terminate _o_tolower _o_towlower _o_wcscat_s _o_wcscpy_s _o_wcsncat_s _o_wcsncpy_s _o_wcstombs_s _o_wcstoul __uncaught_exception _CxxThrowException _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsscanf _o___stdio_common_vsprintf_s __unDName _o___stdio_common_vsprintf _o___stdio_common_vsnwprintf_s _o___stdio_common_vsnprintf_s memcmp wcschr strrchr _o___std_type_info_name _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o___pctype_func wcsrchr _o____mb_cur_max_func _o____lc_locale_name_func _o____lc_collate_cp_func _o____lc_codepage_func wcsstr strstr __C_specific_handler __CxxFrameHandler3 memmove memcpy strchr

rpcrt4

UuidCreate

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW GetStdHandle

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-console-l2-1-0

SetConsoleTextAttribute GetConsoleScreenBufferInfo

api-ms-win-core-console-l1-1-0

GetConsoleMode

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-crt-time-l1-1-0

_time64

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/dbgeng.dll

IMPHASH 2278b6b64d869b295d1cf97b8afc695d
SHA256 33408b1f7f5c4325960040e2b643f444311d200add17bf4b7fc072a50f93f6f3
MD5 b891e48a0f00856bc269e5e22e5dafc2
SHA1 2c672b77c157e5e16e39f837f19bc4cf57464ab1
SHA512 273529fab33cacd7df86ecabf74b666648e92ac9bb8d1f2d2b0bd46f3b3c6d2eb3636e839119f524faaad104027029028c0a4fb40ac709d140a846fa2f230823
SSDEEP 49152:ChbOwLAg9jV9WCYqepYJlSXvSetEy1DxyX2uZ1i9IA02BSG3KI874zBRBZmsIHYB:ChbOwgCAtvDkzaKj7KZWbD/eIK+
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

502912

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dbgeng.pdb

api-ms-win-crt-string-l1-1-0

toupper strpbrk strnlen isalpha wmemmove_s wmemcpy_s _stricmp wcsnlen _memicmp iswupper iswalnum _wcsupr wcsncpy_s memmove_s _strlwr_s memcpy_s _wcsupr_s iswdigit strcpy_s strncmp iswalpha wcsncmp strcmp _wcslwr _strlwr iswprint isdigit strncat_s strncpy_s _wcsicmp towlower towupper wcscpy_s wcscat_s isalnum isspace _wcsdup _wcsnicmp iswspace isprint iswxdigit _strnicmp wcscmp

api-ms-win-crt-heap-l1-1-0

_free_base _calloc_base malloc calloc _malloc_base free realloc _callnewh

api-ms-win-crt-environment-l1-1-0

_wgetenv getenv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s fclose _wfopen ftell fgetws feof fgets __stdio_common_vswscanf __stdio_common_vsprintf_s __stdio_common_vswprintf_s fseek __stdio_common_vswprintf __stdio_common_vsscanf __stdio_common_vsprintf __acrt_iob_func __stdio_common_vsnprintf_s __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn _cexit abort _initterm _initterm_e _crt_atexit _invalid_parameter_noinfo _execute_onexit_table __doserrno _errno terminate _seh_filter_dll _set_errno _configure_narrow_argv _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _set_invalid_parameter_handler

api-ms-win-crt-time-l1-1-0

_ctime64 _wctime64 _time64

api-ms-win-crt-convert-l1-1-0

_ui64tow_s _strtoui64 wcstol wcstod atoi _wtoi _wcstoui64 wcstoul _itow_s _ultow_s atol _wtol wcstoull

api-ms-win-crt-locale-l1-1-0

_unlock_locales ___lc_collate_cp_func setlocale _lock_locales _wsetlocale ___mb_cur_max_func __pctype_func ___lc_locale_name_func ___lc_codepage_func

api-ms-win-crt-utility-l1-1-0

qsort ldiv

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-math-l1-1-0

frexp pow log ceilf ldexp

api-ms-win-core-errorhandling-l1-1-0

SetErrorMode GetLastError SetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter RaiseException

api-ms-win-core-string-l1-1-0

CompareStringEx CompareStringW GetStringTypeW MultiByteToWideChar WideCharToMultiByte CompareStringOrdinal

api-ms-win-core-processenvironment-l1-1-0

SetEnvironmentVariableA GetCommandLineW SetEnvironmentVariableW ExpandEnvironmentStringsW SearchPathW GetEnvironmentVariableW GetCurrentDirectoryW

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW OutputDebugStringA DebugBreak

rpcrt4

UuidCreate

api-ms-win-core-synch-l1-1-0

CreateEventA InitializeCriticalSection CreateEventW WaitForSingleObjectEx LeaveCriticalSection EnterCriticalSection OpenSemaphoreW ResetEvent CreateMutexW ReleaseSemaphore SetEvent InitializeCriticalSectionAndSpinCount CreateSemaphoreExW CreateMutexExW SleepEx WaitForSingleObject WaitForMultipleObjectsEx InitializeCriticalSectionEx CreateEventExW ReleaseMutex ReleaseSRWLockExclusive OpenProcess DeleteCriticalSection ReleaseSRWLockShared AcquireSRWLockShared AcquireSRWLockExclusive

api-ms-win-core-processthreads-l1-1-0

GetExitCodeThread GetThreadId ResumeThread GetCurrentProcessId GetCurrentThread CreateProcessW ExitThread CreateThread TerminateProcess GetExitCodeProcess GetCurrentProcess GetProcessTimes GetCurrentThreadId CreateRemoteThread OpenProcessToken GetThreadPriority QueueUserAPC GetPriorityClass SuspendThread

api-ms-win-core-sysinfo-l1-1-0

GetTickCount SystemTimeToTzSpecificLocalTime GetComputerNameExW SystemTimeToFileTime GetVersionExW GetSystemInfo GetTimeZoneInformation GetSystemDirectoryW GetSystemTimeAsFileTime GetLocalTime GetVersionExA

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-misc-l1-1-0

LocalAlloc LocalFree Sleep IsWow64Process FormatMessageW lstrcmpiW

api-ms-win-core-heap-l1-1-0

HeapAlloc HeapCreate GetProcessHeap HeapFree HeapReAlloc HeapDestroy

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary LoadLibraryExA LockResource LoadResource GetModuleHandleExW SizeofResource GetModuleFileNameA GetModuleFileNameW GetModuleHandleW GetProcAddress LoadLibraryExW DisableThreadLibraryCalls

api-ms-win-core-memory-l1-1-0

ReadProcessMemory VirtualQueryEx UnmapViewOfFile VirtualFree VirtualProtectEx VirtualQuery VirtualProtect CreateFileMappingW VirtualFreeEx MapViewOfFile VirtualAllocEx VirtualAlloc WriteProcessMemory

api-ms-win-core-localregistry-l1-1-0

RegCreateKeyExW RegOpenKeyExW RegOpenKeyExA RegGetValueW RegQueryValueExA RegCloseKey RegEnumValueW RegDeleteValueW RegQueryValueExW

api-ms-win-core-file-l1-1-0

FindFirstFileA SetFilePointer FileTimeToLocalFileTime WriteFile GetFileTime GetFullPathNameW QueryDosDeviceW GetLogicalDriveStringsW CreateFileW GetFinalPathNameByHandleW DeleteFileW GetFileSize GetFileAttributesW DeleteFileA SetFilePointerEx GetFileSizeEx GetTempFileNameW ReadFile CreateDirectoryW FindNextFileW GetDriveTypeW CreateFileA FindFirstFileW FindClose FileTimeToSystemTime

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-localization-l1-1-0

LCMapStringEx LCMapStringW

api-ms-win-core-io-l1-1-0

DeviceIoControl GetOverlappedResult

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx RtlVirtualUnwind RtlPcToFileHeader RtlCaptureContext RtlLookupFunctionEntry

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsSetValue FlsFree FlsGetValue FlsAlloc

dbgmodel

CreateDataModelManager

bcrypt

BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptCreateHash BCryptOpenAlgorithmProvider

dbghelp

SymEnumTypesW SymSetScopeFromIndex SymSetScopeFromInlineContext SymEnumTypesByNameW SymEnumSymbolsExW SymEnumSymbolsForAddrW ord1103 ord1116 SymNextW SymPrevW ord1119 StackWalkEx SymCompareInlineTrace ord1102 SymEnumLinesW SymGetSourceFileFromTokenW SymMatchFileNameW SetSymLoadError SymCleanup SymFromInlineContextW SymGetUnwindInfo SymRegisterCallbackW64 SymInitializeW RemoveInvalidModuleList ImageDirectoryEntryToDataEx SymFreeDiaString dbghelp FindExecutableImageExW SymFindFileInPathW ImageNtHeader SymGetTypeInfoEx SymGetDiaSession SymSetDiaSession SymUnloadModule64 GetTimestampForLoadedLibrary SymMatchStringA SymGetTypeFromNameW DbgHelpCreateUserDump SymAddSymbol SymLoadModuleExW SymFromNameW SymGetOptions SymLoadModule64 SymGetTypeInfo SymDeleteSymbolW SymFromIndexW SetCheckUserInterruptShared ReportSymbolLoadSummary SymGetHomeDirectoryW SymSetSearchPathW SymAllocDiaString SymFromAddrW SymGetExtendedOption SymAddSymbolW ImageRvaToVa SymFunctionTableAccess64 SymFromTokenW SymRegisterCallback64 SymGetFileLineOffsets64 SymEnumSymbolsW SymGetLineFromNameW64 SymAddrIncludeInlineTrace SymQueryInlineTrace ImagehlpApiVersionEx SymSetExtendedOption SymSetOptions SymSearchW SymGetModuleInfoW64 SymGetSourceFileChecksumW SymGetSourceFileTokenW SymGetSourceVarFromTokenW SymMatchStringW SymRegisterFunctionEntryCallback64

ntdll

RtlFindNextForwardRunClear RtlNumberOfSetBits RtlCopyContext RtlSetBits NtQueryVirtualMemory NtQuerySystemInformation NtGetNextThread RtlInitializeBitMap RtlAreBitsClear RtlNtStatusToDosError RtlReleasePrivilege RtlAcquirePrivilege DbgPrintEx RtlTryAcquirePebLock RtlReleasePebLock NtDeviceIoControlFile NtClose RtlRunOnceExecuteOnce NtFreeVirtualMemory NtAllocateVirtualMemory NtCreateFile RtlUTF8ToUnicodeN NtCreateEvent RtlCompareMemory NtSetTimerResolution RtlGetVersion RtlGetNtProductType NtSetEvent NtResetEvent

xmllite

CreateXmlReaderInputWithEncodingName CreateXmlWriter CreateXmlWriterOutputWithEncodingName CreateXmlReader

oleaut32

VariantCopy VariantChangeType VarBstrFromI4 SysAllocStringLen VariantClear SysFreeString VariantInit SysAllocString SysStringLen

api-ms-win-crt-process-l1-1-0

_spawnlp

api-ms-win-core-threadpool-l1-1-0

CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-security-base-l1-1-0

AdjustTokenPrivileges AllocateAndInitializeSid AddAccessDeniedAce SetSecurityDescriptorDacl InitializeSecurityDescriptor InitializeAcl GetLengthSid AddAccessAllowedAce FreeSid CheckTokenMembership

Name

.text

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.1MB

Virtual Size

2.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

232KB

Virtual Size

460KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

161KB

Virtual Size

160KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

472B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mrdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

36KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

87KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/ieframe.dll

IMPHASH 4f265693e6b5446ec0664362b4d74d3e
SHA256 05857a885a1160b32a2f43bd03fa979a56ef9d3349b80980d5ec517e2d739f54
MD5 5011d67b2cea61d694030ba01772fde3
SHA1 0b82f0cbfac43e33c5d5e97d55ad51541599da70
SHA512 fc7fec85b6d35d7d32d531be873cd737da9d9aea1cb0f998319c18bbe7f51f93e7e8523ef8164ea4b4f7a0f89371ddee0b0323feea790a6cba8da317e9843196
SSDEEP 98304:5nt3O8YACiAYkha+AkRinAPuZ4IFVNqIu3Vt2282Z6Z9OtTA:5tRYAkha+Ak4APV8VsIuFty9OtTA
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

1200320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

ieframe.pdb

shlwapi

ord158 StrRetToStrW StrCmpNA PathGetArgsW StrStrA ord596 SHRegCreateUSKeyW SHRegWriteUSValueW PathMakeSystemFolderW UrlIsNoHistoryW ord433 ColorHLSToRGB ColorRGBToHLS ord225 PathMakePrettyW PathIsContentTypeW GetMenuPosFromID PathCompactPathExW PathCompactPathW StrFromTimeIntervalW StrFormatKBSizeW StrRetToBSTR StrRetToBufW AssocQueryStringByKeyW StrFormatByteSizeW AssocGetPerceivedType UrlCanonicalizeA AssocCreate AssocIsDangerous ord168 ord172 PathIsDirectoryW PathIsNetworkPathW AssocQueryKeyW AssocQueryStringW ord354 PathUndecorateW ord388 ord157 SHCreateShellPalette

msvcrt

sprintf_s rand_s wcsncpy_s _vsnwprintf_s strnlen fgets _wfopen fclose isalpha ??1type_info@@UEAA@XZ ?terminate@@YAXXZ _onexit __dllonexit _unlock _vsnprintf _wcsnicmp __C_specific_handler memcpy_s bsearch_s strtol _vsnwprintf acosf ceil ceilf cosf expf floor floorf memcmp memset powf sin sinf sqrt sqrtf strcmp _ui64tow_s iswalnum _snwscanf_s _lock _initterm _amsg_exit _XcptFilter memmove memcpy _CxxThrowException ?what@exception@@UEBAPEBDXZ ??0exception@@QEAA@AEBQEBDH@Z ??0exception@@QEAA@AEBQEBD@Z bsearch _vsnprintf_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ wcstol _wcslwr strrchr wcscspn __CxxFrameHandler3 _stricmp atoi isxdigit towlower qsort _wtol _wtof _wmakepath_s _wsplitpath_s _ultow_s swscanf_s iswxdigit _difftime64 _time64 _i64tow_s wcstoul isalnum isdigit srand rand _wcstoui64 strchr strncpy_s realloc iswdigit iswascii iswalpha wcspbrk wcscat_s wcscpy_s wcsrchr malloc strstr _wcsicmp wcstok_s _isnan _wcsdup wcscmp toupper wcsncmp iswspace _itow_s _wtoi wcschr wcsstr wcsnlen free memmove_s _errno

kernel32

QueueUserWorkItem GetModuleHandleExA LoadLibraryA GetThreadPriority IsDBCSLeadByte CompareFileTime GetCurrentProcess DuplicateHandle SetEvent MoveFileExW CreateFileW OpenProcess OpenThread CreateToolhelp32Snapshot Process32FirstW Process32NextW Thread32First Thread32Next Sleep CreateProcessW UnmapViewOfFile OpenEventW DeleteFileW RemoveDirectoryW CreateDirectoryW GetFileAttributesExW FindFirstFileW GlobalAlloc GlobalFree GetShortPathNameW GetLongPathNameW GlobalLock GlobalUnlock GetSystemDirectoryA lstrcmpiA AcquireSRWLockShared ReleaseSRWLockShared SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolTimer GetFullPathNameW GlobalSize GetSystemDirectoryW CreateMutexW WideCharToMultiByte MultiByteToWideChar CopyFileW GetTempPathW GetTempFileNameW GetFileSize ReadFile GetPackagesByPackageFamily SystemTimeToFileTime GetSystemDefaultLCID GetVersionExW GetProductInfo LocalReAlloc GetSystemTimeAsFileTime InitializeCriticalSection CompareStringOrdinal GetWindowsDirectoryW ExpandEnvironmentStringsW FindFirstStreamW FindNextStreamW FindClose OpenMutexW CreateEventW ResetEvent WriteFile CreateThread CompareStringW GetSystemInfo GetSystemDefaultLocaleName GetUserDefaultLocaleName MulDiv GlobalReAlloc GetUserDefaultLCID SetCurrentDirectoryW RegisterApplicationRestart RaiseException InitializeSRWLock GetTickCount64 TryEnterCriticalSection WaitForMultipleObjectsEx InitializeCriticalSectionAndSpinCount QueryFullProcessImageNameW GetExitCodeThread FindFirstFileExW FindNextFileW GetProcessIdOfThread SetThreadPriority SetFileTime GetFinalPathNameByHandleW ReOpenFile GetFileAttributesW GetPrivateProfileIntW CreateEventExW GetSystemTime HeapDestroy VirtualProtect VirtualAlloc VirtualQuery GetLocalTime FileTimeToSystemTime FileTimeToLocalFileTime GetDateFormatW IsWow64Process GetSystemWow64DirectoryA LocalSize CreateMutexA SetThreadExecutionState GetFileSizeEx TerminateThread TlsGetValue GetComputerNameW GetProcessId WaitForMultipleObjects CreateFileMappingW MapViewOfFile GetTimeFormatW HeapReAlloc MoveFileW SetFileAttributesW GetThreadUILanguage EncodePointer WerRegisterCustomMetadata SetUnhandledExceptionFilter SetProcessShutdownParameters GetExitCodeProcess TlsSetValue HeapSetInformation CreateThreadpoolWork SubmitThreadpoolWork CloseThreadpoolWork lstrcmpiW lstrcmpW QueryPerformanceFrequency QueryPerformanceCounter FindResourceW LoadResource LockResource SizeofResource CreateSemaphoreW VerSetConditionMask VerifyVersionInfoW GetStringScripts CreateWaitableTimerW SetWaitableTimerEx CancelWaitableTimer LocaleNameToLCID GetSystemPreferredUILanguages ResolveLocaleName GetUserDefaultLangID GetSystemDefaultLangID SetEnvironmentVariableW ResumeThread TerminateProcess CheckRemoteDebuggerPresent GetGeoInfoW GetUserGeoID lstrlenW lstrlenA GetFileInformationByHandle SetWaitableTimer WaitForThreadpoolWorkCallbacks GetAtomNameW InitOnceBeginInitialize InitOnceComplete RtlCaptureStackBackTrace GetThreadLocale GetDriveTypeW EnumUILanguagesW SystemTimeToTzSpecificLocalTime GetDateFormatEx GetTimeFormatEx SetFilePointer FindNLSStringEx GetNumberFormatEx CreateEventA RtlCaptureContext GetNativeSystemInfo GetVersionExA OpenFileMappingW GetCommandLineW WritePrivateProfileStringW GetSystemWow64DirectoryW GetLocaleInfoW CreateTimerQueueTimer DeleteTimerQueueTimer GetPrivateProfileStringW LoadLibraryW LoadLibraryExA VirtualFree FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter WakeAllConditionVariable SleepConditionVariableSRW GetCurrentThread FlushViewOfFile FlushFileBuffers SetEndOfFile LCMapStringW GetDiskFreeSpaceExW CompareStringEx InterlockedFlushSList QueryDepthSList UnregisterWaitEx RegisterWaitForSingleObject InitializeSListHead UnlockFile LockFile SetFileInformationByHandle GetUserPreferredUILanguages K32EnumProcessModules CreateProcessA WinExec K32EnumProcesses Wow64RevertWow64FsRedirection K32GetModuleFileNameExW Wow64DisableWow64FsRedirection GetLogicalDriveStringsW QueryDosDeviceW GetLocaleInfoEx GetCurrentDirectoryW FreeResource GetTimeZoneInformationForYear TzSpecificLocalTimeToSystemTime VirtualQueryEx SetThreadPreferredUILanguages GetThreadPreferredUILanguages FreeLibraryAndExitThread GetVersion FindAtomW DeleteAtom AddAtomW SetProcessWorkingSetSizeEx FindResourceExW SearchPathW CopyFile2 WritePrivateProfileSectionW CreateFile2 GetUserDefaultUILanguage GlobalDeleteAtom GlobalAddAtomW GetTickCount ReleaseActCtx DeactivateActCtx ActivateActCtx CreateActCtxW GetModuleFileNameW LocalAlloc LocalFree DecodePointer AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceExecuteOnce IsDebuggerPresent DebugBreak TlsFree FreeLibrary GetModuleHandleW GetProcessHeap GetCurrentProcessId DeleteCriticalSection CreateMutexExW HeapAlloc CloseHandle OpenSemaphoreW TlsAlloc WaitForSingleObjectEx DisableThreadLibraryCalls OutputDebugStringW GetLastError FormatMessageW GetACP ReleaseMutex GetCurrentThreadId WaitForSingleObject InitializeCriticalSectionEx LeaveCriticalSection GetModuleHandleExW ReleaseSemaphore EnterCriticalSection SetLastError HeapFree CreateSemaphoreExW GetModuleFileNameA LoadLibraryExW GetProcAddress LocalFileTimeToFileTime GetStringTypeW SetErrorMode GetEnvironmentVariableW PackageNameAndPublisherIdFromFamilyName GetFileTime

api-ms-win-downlevel-advapi32-l1-1-0

GetSidSubAuthority GetSidSubAuthorityCount GetSidIdentifierAuthority GetSecurityDescriptorDacl RegDeleteTreeW TraceEvent EventProviderEnabled EventRegister EventWriteEx RegCloseKey MakeAbsoluteSD RegCreateKeyExW RegOpenKeyExW OpenThreadToken RegOpenCurrentUser RegSetValueExW RegDeleteValueW GetAclInformation RegQueryValueExW InitializeAcl RegGetValueW AddAce DeleteAce RegEnumValueA RegEnumValueW OpenProcessToken EventWriteTransfer EventUnregister RegEnumKeyExW RegQueryValueExA RegSetValueExA RegCreateKeyExA RegQueryInfoKeyW RegOpenKeyExA GetTokenInformation IsValidSid EventWrite CheckTokenMembership CreateProcessAsUserW GetLengthSid GetSecurityDescriptorSacl GetAce CopySid GetKernelObjectSecurity AddAccessAllowedAceEx

api-ms-win-downlevel-user32-l1-1-0

CharLowerW CharUpperW CharNextW CharPrevW LoadStringA LoadStringW CharUpperA CharLowerBuffW IsCharAlphaNumericW

api-ms-win-downlevel-shlwapi-l1-1-0

UrlCombineA StrCmpNIA PathFindFileNameA StrCmpNIW PathIsRootW PathIsUNCServerShareW PathIsUNCServerW PathIsFileSpecW PathIsRelativeW UrlApplySchemeW StrPBrkW PathFindNextComponentW SHRegEnumUSKeyW SHLoadIndirectString SHRegQueryUSValueW StrCmpW StrStrIW PathUnquoteSpacesW StrCmpIW PathRemoveFileSpecA PathRemoveFileSpecW StrChrNW PathFindExtensionW StrStrIA StrSpnW ParseURLW UrlCreateFromPathW PathSearchAndQualifyW PathParseIconLocationW PathFileExistsW UrlGetPartW PathIsPrefixW PathRemoveBackslashW UrlIsW UrlCombineW StrTrimA StrCmpCW PathRemoveBlanksW PathStripPathW StrChrW HashData PathQuoteSpacesW StrCmpNICA PathFindExtensionA IsInternetESCEnabled PathStripToRootW StrDupW StrCmpLogicalW PathRemoveExtensionW StrTrimW StrCmpNW StrRStrIW StrStrW StrChrIW StrToIntW PathIsURLW UrlGetLocationW UrlEscapeW PathCreateFromUrlAlloc SHRegGetBoolUSValueW SHRegOpenUSKeyW SHRegDeleteUSValueW SHRegCloseUSKey UrlCanonicalizeW PathFindFileNameW StrDupA QISearch PathCreateFromUrlW UrlUnescapeW PathGetDriveNumberW GetAcceptLanguagesW StrRChrW StrCmpNCW StrToIntExW StrToInt64ExW StrCmpNICW SHRegSetUSValueW StrCmpCA UrlUnescapeA SHRegGetUSValueW PathIsUNCW SHRegOpenUSKeyA

api-ms-win-downlevel-shell32-l1-1-0

GetCurrentProcessExplicitAppUserModelID CommandLineToArgvW SetCurrentProcessExplicitAppUserModelID

api-ms-win-downlevel-version-l1-1-0

GetFileVersionInfoExW VerQueryValueW GetFileVersionInfoSizeExW

api-ms-win-downlevel-normaliz-l1-1-0

IdnToAscii

ntdll

RtlUnicodeStringToAnsiString RtlFreeAnsiString NtQuerySystemInformation RtlPublishWnfStateData NtClose NtQueryLicenseValue RtlIpv4AddressToStringExW RtlIpv4StringToAddressExW RtlIpv6StringToAddressExW RtlIpv6AddressToStringExW

advapi32

EventSetInformation IsTextUnicode SetNamedSecurityInfoW GetNamedSecurityInfoW RegQueryValueW CryptDestroyHash CryptGetHashParam CryptHashData CryptCreateHash RegSetKeyValueW RegOpenKeyW CryptGenRandom RegCreateKeyA RegDeleteKeyW CryptAcquireContextW CryptReleaseContext RegEnumKeyW RegDeleteKeyA CryptSetHashParam CryptVerifySignatureW CryptDestroyKey CryptEncrypt CryptGetKeyParam CryptDeriveKey CryptSetKeyParam GetSecurityInfo SetSecurityInfo

gdi32

CreateSolidBrush CreatePen CreateDIBSection CreateRectRgn CreateFontW LineTo MoveToEx Rectangle CreatePalette CreateFontIndirectA GetObjectA GetRgnBox OffsetRgn ExtCreateRegion GetRegionData RectVisible GetDCBrushColor GetDIBits GetBrushOrgEx DeleteEnhMetaFile GetPixel SetPixel GdiTransparentBlt GdiGradientFill PlayEnhMetaFile SetStretchBltMode GdiAlphaBlend GetCurrentObject GetClipRgn CreateHalftonePalette CreatePolygonRgn ExcludeClipRect GetTextAlign SetTextAlign GetTextExtentPointW SetViewportExtEx CombineRgn SetRectRgn EqualRgn PtInRegion CreateRoundRectRgn StretchBlt GdiFlush SetLayout GetClipBox SetDCPenColor SetDCBrushColor GetTextColor GetBkMode GetTextExtentExPointW ExtTextOutW CreateBitmap OffsetWindowOrgEx SelectClipRgn GetLayout CreatePatternBrush CreateDIBPatternBrushPt StretchDIBits GetBkColor SetBrushOrgEx PatBlt DeleteObject SelectObject GetTextExtentPoint32W GetObjectW GetDeviceCaps SetBkColor CreateFontIndirectW GetTextMetricsW SetTextColor SetBkMode TextOutW DeleteDC RestoreDC SetViewportOrgEx SetWindowOrgEx SetMapMode SaveDC LPtoDP CreateDCW IntersectClipRect CreateDCA CreateEnhMetaFileA CloseEnhMetaFile CreateMetaFileW SetWindowExtEx CloseMetaFile CreateRectRgnIndirect GetStockObject CreateCompatibleDC CreateCompatibleBitmap BitBlt GetPaletteEntries SetPaletteEntries SelectPalette RealizePalette

user32

CallNextHookEx GetFocus SetWindowsHookExW InsertMenuW SetMenuDefaultItem GetClassNameW GetPropW SetDlgItemTextW ShowWindow SetFocus GetWindowRect SetWindowTextW GetClientRect GetWindowInfo AdjustWindowRect SetWindowPos GetComboBoxInfo MonitorFromWindow GetMonitorInfoW GetDlgItemTextW SetPropW RemovePropW SetThreadDpiAwarenessContext GetDesktopWindow RegisterWindowMessageA RegisterClassExW ClientToScreen MoveWindow GetKeyState TranslateMessage DispatchMessageW WaitMessage GetAsyncKeyState IsDialogMessageW MapWindowPoints DestroyIcon CheckDlgButton CopyIcon InvalidateRect LoadMenuW SetMenuItemInfoW TrackPopupMenu GetDlgCtrlID SetTimer SetWindowLongW GetShellWindow SetForegroundWindow GetLastActivePopup MonitorFromRect OffsetRect IntersectRect InsertMenuItemW GetMessagePos TrackPopupMenuEx AppendMenuW SetRectEmpty IsRectEmpty CheckRadioButton GetSysColor DrawIconEx DeleteMenu GetMenuItemID WinHelpW PeekMessageW MsgWaitForMultipleObjectsEx PostQuitMessage GetMessageTime AttachThreadInput GetWindow EndPaint BeginPaint DestroyAcceleratorTable GetMessageW TranslateAcceleratorW CopyAcceleratorTableW GetWindowTextW MessageBeep KillTimer LoadAcceleratorsW GetCursorPos CreateMenu CheckMenuRadioItem UnionRect PtInRect CallWindowProcW EqualRect SetWindowRgn ScreenToClient GetDoubleClickTime GetCapture DrawTextW SetClipboardViewer ChangeClipboardChain WindowFromPoint GetClassInfoExW wsprintfW FillRect GetWindowTextLengthW GetSystemMenu IsIconic FlashWindowEx GetClipboardFormatNameW LockSetForegroundWindow DdeCreateDataHandle DdeQueryStringW DdeGetData GetForegroundWindow DdeConnect DdeClientTransaction DdeDisconnect DdeCreateStringHandleW DdeFreeStringHandle DdeFreeDataHandle DdeInitializeW DdeUninitialize DdeNameService SetCursorPos SetCapture ReleaseCapture EnumWindows GetActiveWindow IsHungAppWindow GetWindowLongPtrA GetWindowDC GetSysColorBrush InflateRect DrawFocusRect TrackMouseEvent SendInput SetRect UnhookWindowsHookEx SetProcessDpiAwarenessContext CopyImage ShowOwnedPopups PostThreadMessageW GetWindowPlacement MonitorFromPoint CopyRect GetTitleBarInfo IsZoomed EnumThreadWindows GetKeyboardState SetKeyboardState PrintWindow InSendMessage GetMenuState GetQueueStatus RedrawWindow WaitForInputIdle ChildWindowFromPointEx NotifyWinEvent GetMessageExtraInfo LoadBitmapW SystemParametersInfoA GetDialogBaseUnits GetScrollInfo SetScrollInfo ShowScrollBar SetScrollPos GetLastInputInfo SetWindowPlacement ReplyMessage AnimateWindow SetActiveWindow ChangeWindowMessageFilterEx GetClassWord EnumDesktopWindows EnumDisplayMonitors OpenClipboard GetClipboardData CloseClipboard GetKeyboardLayout GetDpiForWindow GetDpiForSystem SystemParametersInfoForDpi GetSystemMetricsForDpi FindWindowW wvsprintfW VkKeyScanExW DrawEdge GetClipCursor GetNextDlgTabItem GetMenuStringW AdjustWindowRectEx GetUpdateRect ValidateRect BeginDeferWindowPos DeferWindowPos EndDeferWindowPos UpdateLayeredWindow SetClipboardData DrawTextExW ShowCaret HideCaret GetCaretBlinkTime EndMenu ScrollWindowEx UpdateWindow SetLayeredWindowAttributes GetRawInputData DrawFrameControl RegisterRawInputDevices GetCursor SendNotifyMessageW SetMenu ChildWindowFromPoint VkKeyScanW GetMenuItemRect GetTopWindow GetDlgItemInt SetDlgItemInt EnumDisplaySettingsW EmptyClipboard CharPrevA CharNextA GetSubMenu GetMenuItemCount GetMenuItemInfoW EnumChildWindows PostMessageW GetParent DestroyMenu SendMessageW ReleaseDC GetDC GetSystemMetrics UnregisterClassW SendDlgItemMessageW LoadIconW RegisterWindowMessageW LoadImageW GetWindowLongW IsWindow FindWindowExW SendMessageTimeoutW IsWindowEnabled GetWindowThreadProcessId RegisterClipboardFormatW IsWindowVisible AllowSetForegroundWindow EnableWindow GetAncestor SetWindowLongA GetWindowLongA SendMessageA SetParent SystemParametersInfoW FindWindowA CreateWindowExW DefWindowProcW GetMenuDefaultItem CreatePopupMenu LoadCursorW SetCursor IsChild MsgWaitForMultipleObjects DialogBoxParamW MessageBoxW IsDlgButtonChecked GetWindowLongPtrW SetWindowLongPtrW EndDialog GetDlgItem RegisterClassW GetClassInfoW CheckMenuItem CreateDialogParamW MessageBoxIndirectW MapVirtualKeyW GetKeyNameTextW FrameRect GetIconInfo LoadCursorFromFileW CreateIconIndirect IsProcessDPIAware UnregisterPowerSettingNotification RegisterPowerSettingNotification GetClassLongW GetWindowRgnBox SubtractRect CreateCaret DestroyCaret SetCaretPos GetPropA SetPropA RemovePropA DestroyWindow EnableMenuItem GetGUIThreadInfo RemoveMenu

ole32

StgOpenStorageOnILockBytes CreateILockBytesOnHGlobal OleSave StgCreateDocfileOnILockBytes CoInitialize CreateBindCtx ReleaseStgMedium CoAllowSetForegroundWindow OleRegGetUserType MkParseDisplayName OleGetClipboard OleInitialize DoDragDrop OleUninitialize OleDraw StgCreateDocfile OleCreateFromData OleRun OleRegGetMiscStatus CreateOleAdviseHolder OleRegEnumVerbs WriteClassStm OleSaveToStream OleLoadFromStream CreateDataAdviseHolder RevokeDragDrop RegisterDragDrop GetRunningObjectTable OleSetClipboard CoFileTimeNow OleFlushClipboard ReadClassStm HBITMAP_UserSize HBITMAP_UserMarshal HBITMAP_UserUnmarshal OleSetContainedObject RoGetAgileReference CoGetObject PropVariantCopy CoTaskMemRealloc

oleaut32

VarBstrCmp VariantTimeToSystemTime SysAllocString LoadTypeLi SystemTimeToVariantTime VariantInit SafeArrayRedim SafeArrayCopy OleCreatePropertyFrame SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetDim OleCreatePropertyFrameIndirect SafeArrayPutElement SafeArrayGetVartype SysAllocStringByteLen VariantChangeType LoadRegTypeLi SafeArrayCreateVector SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayGetUBound SafeArrayAccessData VariantCopyInd VariantCopy SysReAllocStringLen SysStringByteLen SysStringLen SafeArrayDestroy SysAllocStringLen VariantClear SysReAllocString SysFreeString

shell32

DuplicateIcon SHSetLocalizedName SHGetFolderPathAndSubDirW SHPathPrepareForWriteW SHCreateItemFromParsingName ord43 ExtractIconExW ord17 ord18 SHBindToObject SHOpenFolderAndSelectItems ord19 ord190 ord98 SHGetPathFromIDListW SHGetDesktopFolder SHParseDisplayName ord75 ord6 ord162 ord74 ord171 SHChangeNotify SHGetSpecialFolderPathW ShellExecuteExW SHCreateItemInKnownFolder ord85 SHAppBarMessage ord2 ord4 ShellAboutW SHGetKnownFolderIDList ord644 SHGetKnownFolderItem ord129 SHCreateItemWithParent ord727 ord71 SHGetSpecialFolderLocation SHCreateItemFromIDList ord23 ord22 ord24 ord153 ord67 ord68 ord193 SHCreateShellItemArrayFromDataObject ShellExecuteW ord73 ord174 ord196 ord195 ExtractIconW ord62 DragQueryFileW SHCreateDirectoryExW ord59 ord152 SHGetInstanceExplorer SHCreateShellItemArrayFromIDLists ord155 SHGetKnownFolderPath SHBindToParent ord88 SHGetFolderPathW ord680 ord846 ord165 SHCreateDefaultExtractIcon ord83 ord747 SHGetFolderLocation ord27 ord134 ord16 ord136 Shell_GetCachedImageIndexW SHGetFileInfoW ord77 SHBrowseForFolderW ord645 ShellExecuteA ord25 SHFileOperationW Shell_NotifyIconA Shell_NotifyIconW SHGetFolderPathA ord100 ord176 ord21 ord132 ord147 ord102 ord164 SHOpenWithDialog SHBindToFolderIDListParent

iertutil

ord683 ord36 ord174 ord72 ord62 ord231 ord157 ord50 ord311 ord312 ord314 ord175 ord230 ord201 ord205 ord97 ord88 ord86 ord700 ord73 ord137 ord93 ord209 ord87 ord685 ord39 ord608 ord609 ord466 ord82 ord660 ord202 ord66 ord60 ord203 ord204 ord206 IntlPercentEncodeNormalize ord163 ord16 ord57 ord99 ord37 ord686 ord55 ResetIDNLanguageData ord764 ord775 ord124 ord80 ord77 ord682 ord71 ord170 ord681 ord78 ord90 ord56 ord54 ord820 ord98 ord65 ord601 ord45 ord35 ord397 ord134 ord34 ord301 ord687 ord795 GetIUriPriv ord794 CreateUriWithFragment ord139 ord40 ord96 ord76 CreateIUriBuilder ord679 ord91 ord89 ord302 ord28 ord17 ord24 ord100 ord49 ord59 ord155 ord67 ord916 ord150 ord701 ord95 ord70 ord61 ord64 ord68 ord63 ord140 ord153 ord20 ord151 ord793 ord398 ord166 ord792 ord790 ord58 ord138 ord32 ord172 ord594 ord597 ord654 ord282 ord663 ord84 ord690 ord656 ord281 ord675 ord661 ord665 ord651 ord655 ord657 ord30 ord44 ord304 ord303 ord42 CreateUri ord81 ord74 ord79 ord85 ord796 ord688 ord232 ord791 ord652 ord662 ord668 ord300 ord799 ord46 ord41 ord33 ord684 ord658 ord672 ord677 ord653 ord669 ord678 ord670 ord650

rpcrt4

RpcServerInqBindingHandle I_RpcBindingInqLocalClientPID UuidCreateSequential UuidEqual

netapi32

NetApiBufferFree NetGetJoinInformation

version

GetFileVersionInfoW GetFileVersionInfoSizeW

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

kernelbase

GetEffectivePackageStatusForUser ChrCmpIW GetSystemDefaultUILanguage OpenGlobalizationUserSettingsKey lstrcmpA LCIDToLocaleName GetStagedPackageOrigin

userenv

GetProfileType

winhttp

WinHttpGetIEProxyConfigForCurrentUser

Name

.text

Size

5.8MB

Virtual Size

5.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

19KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

311KB

Virtual Size

311KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

ExtTel

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/jscript9.dll

IMPHASH 069b9b3149c7a82e43cb53a3a54f50ea
SHA256 5fbc03089dddc201bf75ad639be7d467a38c2abffa0841bc287c45999abb7535
MD5 e1c62ba63f9f10ca35cf2c123c24ee6f
SHA1 a21c42c858d752257b1acb31f2ea685f580daeb0
SHA512 ebc2fe429f4ca7b98d623b5cf91badfcf9610809496530b735cf6eefa591e3a747a843ac1c2c99dd8d5b6d64abeec6dd96d240a75c3e8d31a2f8a5eb5dfac04c
SSDEEP 98304:Kgu/6cKlPshG6QyoHWxswq2iQpZGJWucSdgK0Ofr7YKi:Kgu/5KlPshG6x8Wxswq2iQpZGJWuXdgp
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

1356784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

jscript9.pdb

ntdll

RtlCaptureContext

msvcrt

memcmp qsort isdigit isalpha _wcslwr_s _wasctime_s _vscwprintf qsort_s modf _tzset _ui64tow_s _itow_s _snwprintf_s _beginthreadex fwprintf _flushall fflush fwprintf_s atan rand srand wcstok_s wcsrchr _wfsopen _wsplitpath_s acos wcstoul _stricmp vswprintf_s _i64tow_s _wcsicmp _localtime64_s swprintf_s _ltow wcscat_s _vsnwprintf_s _ltow_s _ultow_s _controlfp_s __C_specific_handler _wcsnicmp wcsncmp wcsncpy_s realloc _wcsdup wcschr free malloc wcscpy_s memmove_s _vsnprintf_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ atan2 wcsstr asin cos exp log sin tan strncmp wcsncat_s iswalpha _callnewh _XcptFilter _amsg_exit _initterm ?terminate@@YAXXZ _lock _unlock __dllonexit _onexit ??1type_info@@UEAA@XZ sqrt wcscmp _purecall memcpy_s _vsnwprintf __iob_func bsearch _CxxThrowException memmove memset tolower __CxxFrameHandler3 sqrtf fclose ceil floor fmod memcpy pow

api-ms-win-downlevel-advapi32-l1-1-0

RegDeleteKeyExW RegSetValueExW EventRegister RegCreateKeyExW RegOpenKeyExW EventWriteTransfer EventUnregister RegQueryValueExW RegGetValueW EventWrite RegCloseKey

api-ms-win-downlevel-shlwapi-l1-1-0

PathGetDriveNumberW PathIsUNCW PathIsLFNFileSpecW PathIsFileSpecW PathFindFileNameW StrTrimW PathFileExistsW StrCmpLogicalW PathRemoveFileSpecW StrCmpICW

api-ms-win-downlevel-version-l1-1-0

GetFileVersionInfoSizeExW GetFileVersionInfoExW VerQueryValueW

kernel32

ResumeThread LoadLibraryExA GetCurrentProcessId MapViewOfFile CreateFileMappingW UnmapViewOfFile CreateFileW GetUserDefaultUILanguage GetSystemDefaultUILanguage SearchPathW SleepConditionVariableSRW WakeAllConditionVariable SetUnhandledExceptionFilter LocalFree LocalAlloc MultiByteToWideChar FlushInstructionCache ResetEvent SetThreadStackGuarantee GetSystemTimeAdjustment QueryPerformanceFrequency CompareStringEx GetUserDefaultLocaleName ResolveLocaleName QueryThreadCycleTime GetProcessIoCounters Sleep GetNumberFormatW GetTimeFormatW GetDateFormatW GetSystemTime LCMapStringW CompareStringW RtlVirtualUnwind RtlLookupFunctionEntry GetTimeZoneInformation GetStringTypeW SizeofResource LockResource LoadResource FindResourceExW UnhandledExceptionFilter TerminateProcess RtlAddFunctionTable RtlDeleteFunctionTable InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead VirtualAlloc VirtualFree GlobalMemoryStatusEx ResetWriteWatch FreeLibraryAndExitThread SetThreadPriority WaitForMultipleObjectsEx GetWriteWatch GetCurrentThread GetThreadContext SetEvent CreateEventW SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime GetTimeZoneInformationForYear SetConsoleTextAttribute GetConsoleScreenBufferInfo GetStdHandle GetVersionExW GetSystemInfo EncodeSystemPointer QueryPerformanceCounter WerGetFlags VirtualProtect WerSetFlags LoadLibraryExW GetSystemDirectoryW RaiseException IsValidCodePage GetLocaleInfoW IsValidLocale VirtualQuery GetEnvironmentVariableW GetACP GetUserDefaultLCID TlsSetValue TlsGetValue TlsFree TlsAlloc GetSystemTimeAsFileTime RaiseFailFastException DeleteAtom TryEnterCriticalSection FreeLibrary AddAtomW FindAtomW InitializeCriticalSectionAndSpinCount GetTickCount InitializeCriticalSection GetModuleFileNameW GetCurrentProcess K32GetModuleInformation IsDebuggerPresent DebugBreak GetModuleHandleW GetProcessHeap DeleteCriticalSection AcquireSRWLockShared CreateMutexExW GetProcAddress HeapAlloc CreateThreadpoolTimer ReleaseSRWLockShared GetModuleFileNameA CreateSemaphoreExW HeapFree SetLastError EnterCriticalSection ReleaseSemaphore GetModuleHandleExW LeaveCriticalSection InitializeCriticalSectionEx WaitForThreadpoolTimerCallbacks WaitForSingleObject GetCurrentThreadId ReleaseMutex FormatMessageW GetLastError ReleaseSRWLockExclusive OutputDebugStringW CloseThreadpoolTimer AcquireSRWLockExclusive WaitForSingleObjectEx OpenSemaphoreW CloseHandle SetThreadpoolTimer DelayLoadFailureHook

bcrypt

BCryptGenRandom

rpcrt4

CStdStubBuffer_QueryInterface CStdStubBuffer_Invoke IUnknown_AddRef_Proxy CStdStubBuffer_DebugServerQueryInterface NdrOleFree CStdStubBuffer_IsIIDSupported CStdStubBuffer_AddRef IUnknown_Release_Proxy NdrDllUnregisterProxy CStdStubBuffer_CountRefs NdrDllCanUnloadNow CStdStubBuffer_Connect NdrCStdStubBuffer_Release CStdStubBuffer_Disconnect NdrDllGetClassObject IUnknown_QueryInterface_Proxy NdrOleAllocate CStdStubBuffer_DebugServerRelease NdrDllRegisterProxy

advapi32

CryptReleaseContext

DllCanUnloadNow DllGetClassObject DllRegisterServer DllUnregisterServer JsAddRef JsBoolToBoolean JsBooleanToBool JsCallFunction JsCollectGarbage JsConstructObject JsConvertValueToBoolean JsConvertValueToNumber JsConvertValueToObject JsConvertValueToString JsCreateArray JsCreateContext JsCreateError JsCreateExternalObject JsCreateExternalType JsCreateFunction JsCreateObject JsCreateRangeError JsCreateReferenceError JsCreateRuntime JsCreateSyntaxError JsCreateTypeError JsCreateTypedExternalObject JsCreateURIError JsDefineProperty JsDeleteIndexedProperty JsDeleteProperty JsDisableRuntimeExecution JsDisposeRuntime JsDoubleToNumber JsEnableRuntimeExecution JsEnumerateHeap JsEquals JsGetAndClearException JsGetCurrentContext JsGetDefaultTypeDescription JsGetExtensionAllowed JsGetExternalData JsGetExternalType JsGetFalseValue JsGetGlobalObject JsGetIndexedProperty JsGetNullValue JsGetOwnPropertyDescriptor JsGetOwnPropertyNames JsGetProperty JsGetPropertyIdFromName JsGetPropertyNameFromId JsGetPrototype JsGetRuntime JsGetRuntimeMemoryLimit JsGetRuntimeMemoryUsage JsGetStringLength JsGetTrueValue JsGetUndefinedValue JsGetValueType JsHasException JsHasExternalData JsHasIndexedProperty JsHasProperty JsIdle JsIntToNumber JsIsEnumeratingHeap JsIsRuntimeExecutionDisabled JsNumberToDouble JsParseScript JsParseSerializedScript JsPointerToString JsPreventExtension JsRelease JsRunScript JsRunSerializedScript JsSerializeScript JsSetCurrentContext JsSetException JsSetExternalData JsSetIndexedProperty JsSetProperty JsSetPrototype JsSetRuntimeBeforeCollectCallback JsSetRuntimeMemoryAllocationCallback JsSetRuntimeMemoryLimit JsStartDebugging JsStartProfiling JsStopProfiling JsStrictEquals JsStringToPointer JsValueToVariant JsVarAddRef JsVarRelease JsVarToExtension JsVarToScriptDirect JsVariantToValue

Name

.text

Size

3.3MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

926KB

Virtual Size

926KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

61KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

236KB

Virtual Size

235KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

400B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

88KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/libcrypto-3.dll

IMPHASH 40bce6a23883072a66c68006f08e105c
SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
MD5 51e8a5281c2092e45d8c97fbdbf39560
SHA1 c499c810ed83aaadce3b267807e593ec6b121211
SHA512 98b91719b0975cb38d3b3c7b6f820d184ef1b64d38ad8515be0b8b07730e2272376b9e51631fe9efd9b8a1709fea214cf3f77b34eeb9fd282eb09e395120e7cb
SSDEEP 98304:S3+FRtLtlVriXpshX179Cahd4tC9P1+1CPwDvt3uFlDCi:ASRtLtvd99Cahd4tC9w1CPwDvt3uFlDz
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

bc:7c:99:67:59:f2:74:bd:41:24:d2:50:42:5e:1a:f5:5a:0d:61:1b:72:a3:e5:32:85:16:e3:77:f9:5b:64:3f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Sep 27, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

4726

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\libcrypto-3.pdb

ws2_32

WSACleanup WSAStartup select getsockopt getsockname bind WSAGetLastError WSASetLastError getservbyname getservbyport gethostbyname htonl gethostbyaddr ntohs inet_ntoa inet_addr htons closesocket connect listen setsockopt socket shutdown recv send recvfrom sendto accept ioctlsocket

advapi32

RegisterEventSourceW DeregisterEventSource ReportEventW

user32

GetUserObjectInformationW MessageBoxW GetProcessWindowStation

bcrypt

BCryptGenRandom

kernel32

IsProcessorFeaturePresent SetUnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetModuleHandleA TerminateProcess GetCurrentProcess ReadConsoleW ReadConsoleA IsDebuggerPresent GetConsoleMode TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentThreadId AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock FindNextFileW FindFirstFileW GetStartupInfoW InitializeSListHead SetConsoleMode UnhandledExceptionFilter FindClose VirtualLock VirtualFree VirtualProtect VirtualAlloc GetSystemInfo RtlVirtualUnwind ConvertFiberToThread ConvertThreadToFiberEx SwitchToFiber DeleteFiber CreateFiberEx GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryA FormatMessageA Sleep GetSystemTime SystemTimeToFileTime GetLastError SetLastError CloseHandle LoadLibraryW GetEnvironmentVariableW GetStdHandle GetFileType WriteFile GetModuleHandleW MultiByteToWideChar WideCharToMultiByte GetACP GetModuleHandleExW

vcruntime140

__std_type_info_destroy_list __C_specific_handler wcsstr memchr strstr strchr memmove strrchr memcmp memset memcpy __current_exception_context __current_exception

api-ms-win-crt-stdio-l1-1-0

ftell fseek __stdio_common_vsprintf __stdio_common_vfprintf __stdio_common_vsscanf fread __stdio_common_vswprintf _fileno fgets setvbuf _wfopen fopen ferror feof fclose fputs clearerr setbuf __acrt_iob_func __stdio_common_vsprintf_s fflush fwrite _setmode

api-ms-win-crt-convert-l1-1-0

strtol atoi strtoul

api-ms-win-crt-string-l1-1-0

tolower strspn strcspn strncmp isspace _strdup strncpy_s strcat_s strcpy_s isdigit strncpy strcmp

api-ms-win-crt-time-l1-1-0

_gmtime64_s _time64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc realloc calloc free

api-ms-win-crt-runtime-l1-1-0

_crt_at_quick_exit perror _initialize_onexit_table _initterm strerror_s _initialize_narrow_environment terminate signal raise _exit _configure_narrow_argv _execute_onexit_table _crt_atexit _errno _cexit _register_onexit_function _initterm_e _seh_filter_dll

api-ms-win-crt-filesystem-l1-1-0

_fstat64i32 _chmod _stat64i32

api-ms-win-crt-environment-l1-1-0

getenv

ACCESS_DESCRIPTION_free ACCESS_DESCRIPTION_it ACCESS_DESCRIPTION_new ADMISSIONS_free ADMISSIONS_get0_admissionAuthority ADMISSIONS_get0_namingAuthority ADMISSIONS_get0_professionInfos ADMISSIONS_it ADMISSIONS_new ADMISSIONS_set0_admissionAuthority ADMISSIONS_set0_namingAuthority ADMISSIONS_set0_professionInfos ADMISSION_SYNTAX_free ADMISSION_SYNTAX_get0_admissionAuthority ADMISSION_SYNTAX_get0_contentsOfAdmissions ADMISSION_SYNTAX_it ADMISSION_SYNTAX_new ADMISSION_SYNTAX_set0_admissionAuthority ADMISSION_SYNTAX_set0_contentsOfAdmissions AES_bi_ige_encrypt AES_cbc_encrypt AES_cfb128_encrypt AES_cfb1_encrypt AES_cfb8_encrypt AES_decrypt AES_ecb_encrypt AES_encrypt AES_ige_encrypt AES_ofb128_encrypt AES_options AES_set_decrypt_key AES_set_encrypt_key AES_unwrap_key AES_wrap_key ASIdOrRange_free ASIdOrRange_it ASIdOrRange_new ASIdentifierChoice_free ASIdentifierChoice_it ASIdentifierChoice_new ASIdentifiers_free ASIdentifiers_it ASIdentifiers_new ASN1_ANY_it ASN1_BIT_STRING_check ASN1_BIT_STRING_free ASN1_BIT_STRING_get_bit ASN1_BIT_STRING_it ASN1_BIT_STRING_name_print ASN1_BIT_STRING_new ASN1_BIT_STRING_num_asc ASN1_BIT_STRING_set ASN1_BIT_STRING_set_asc ASN1_BIT_STRING_set_bit ASN1_BMPSTRING_free ASN1_BMPSTRING_it ASN1_BMPSTRING_new ASN1_BOOLEAN_it ASN1_ENUMERATED_free ASN1_ENUMERATED_get ASN1_ENUMERATED_get_int64 ASN1_ENUMERATED_it ASN1_ENUMERATED_new ASN1_ENUMERATED_set ASN1_ENUMERATED_set_int64 ASN1_ENUMERATED_to_BN ASN1_FBOOLEAN_it ASN1_GENERALIZEDTIME_adj ASN1_GENERALIZEDTIME_check ASN1_GENERALIZEDTIME_dup ASN1_GENERALIZEDTIME_free ASN1_GENERALIZEDTIME_it ASN1_GENERALIZEDTIME_new ASN1_GENERALIZEDTIME_print ASN1_GENERALIZEDTIME_set ASN1_GENERALIZEDTIME_set_string ASN1_GENERALSTRING_free ASN1_GENERALSTRING_it ASN1_GENERALSTRING_new ASN1_IA5STRING_free ASN1_IA5STRING_it ASN1_IA5STRING_new ASN1_INTEGER_cmp ASN1_INTEGER_dup ASN1_INTEGER_free ASN1_INTEGER_get ASN1_INTEGER_get_int64 ASN1_INTEGER_get_uint64 ASN1_INTEGER_it ASN1_INTEGER_new ASN1_INTEGER_set ASN1_INTEGER_set_int64 ASN1_INTEGER_set_uint64 ASN1_INTEGER_to_BN ASN1_ITEM_get ASN1_ITEM_lookup ASN1_NULL_free ASN1_NULL_it ASN1_NULL_new ASN1_OBJECT_create ASN1_OBJECT_free ASN1_OBJECT_it ASN1_OBJECT_new ASN1_OCTET_STRING_NDEF_it ASN1_OCTET_STRING_cmp ASN1_OCTET_STRING_dup ASN1_OCTET_STRING_free ASN1_OCTET_STRING_it ASN1_OCTET_STRING_new ASN1_OCTET_STRING_set ASN1_PCTX_free ASN1_PCTX_get_cert_flags ASN1_PCTX_get_flags ASN1_PCTX_get_nm_flags ASN1_PCTX_get_oid_flags ASN1_PCTX_get_str_flags ASN1_PCTX_new ASN1_PCTX_set_cert_flags ASN1_PCTX_set_flags ASN1_PCTX_set_nm_flags ASN1_PCTX_set_oid_flags ASN1_PCTX_set_str_flags ASN1_PRINTABLESTRING_free ASN1_PRINTABLESTRING_it ASN1_PRINTABLESTRING_new ASN1_PRINTABLE_free ASN1_PRINTABLE_it ASN1_PRINTABLE_new ASN1_PRINTABLE_type ASN1_SCTX_free ASN1_SCTX_get_app_data ASN1_SCTX_get_flags ASN1_SCTX_get_item ASN1_SCTX_get_template ASN1_SCTX_new ASN1_SCTX_set_app_data ASN1_SEQUENCE_ANY_it ASN1_SEQUENCE_it ASN1_SET_ANY_it ASN1_STRING_TABLE_add ASN1_STRING_TABLE_cleanup ASN1_STRING_TABLE_get ASN1_STRING_clear_free ASN1_STRING_cmp ASN1_STRING_copy ASN1_STRING_data ASN1_STRING_dup ASN1_STRING_free ASN1_STRING_get0_data ASN1_STRING_get_default_mask ASN1_STRING_length ASN1_STRING_length_set ASN1_STRING_new ASN1_STRING_print ASN1_STRING_print_ex ASN1_STRING_print_ex_fp ASN1_STRING_set ASN1_STRING_set0 ASN1_STRING_set_by_NID ASN1_STRING_set_default_mask ASN1_STRING_set_default_mask_asc ASN1_STRING_to_UTF8 ASN1_STRING_type ASN1_STRING_type_new ASN1_T61STRING_free ASN1_T61STRING_it ASN1_T61STRING_new ASN1_TBOOLEAN_it ASN1_TIME_adj ASN1_TIME_check ASN1_TIME_cmp_time_t ASN1_TIME_compare ASN1_TIME_diff ASN1_TIME_dup ASN1_TIME_free ASN1_TIME_it ASN1_TIME_new ASN1_TIME_normalize ASN1_TIME_print ASN1_TIME_print_ex ASN1_TIME_set ASN1_TIME_set_string ASN1_TIME_set_string_X509 ASN1_TIME_to_generalizedtime ASN1_TIME_to_tm ASN1_TYPE_cmp ASN1_TYPE_free ASN1_TYPE_get ASN1_TYPE_get_int_octetstring ASN1_TYPE_get_octetstring ASN1_TYPE_new ASN1_TYPE_pack_sequence ASN1_TYPE_set ASN1_TYPE_set1 ASN1_TYPE_set_int_octetstring ASN1_TYPE_set_octetstring ASN1_TYPE_unpack_sequence ASN1_UNIVERSALSTRING_free ASN1_UNIVERSALSTRING_it ASN1_UNIVERSALSTRING_new ASN1_UNIVERSALSTRING_to_string ASN1_UTCTIME_adj ASN1_UTCTIME_check ASN1_UTCTIME_cmp_time_t ASN1_UTCTIME_dup ASN1_UTCTIME_free ASN1_UTCTIME_it ASN1_UTCTIME_new ASN1_UTCTIME_print ASN1_UTCTIME_set ASN1_UTCTIME_set_string ASN1_UTF8STRING_free ASN1_UTF8STRING_it ASN1_UTF8STRING_new ASN1_VISIBLESTRING_free ASN1_VISIBLESTRING_it ASN1_VISIBLESTRING_new ASN1_add_oid_module ASN1_add_stable_module ASN1_bn_print ASN1_buf_print ASN1_check_infinite_end ASN1_const_check_infinite_end ASN1_d2i_bio ASN1_d2i_fp ASN1_digest ASN1_dup ASN1_generate_nconf ASN1_generate_v3 ASN1_get_object ASN1_i2d_bio ASN1_i2d_fp ASN1_item_d2i ASN1_item_d2i_bio ASN1_item_d2i_bio_ex ASN1_item_d2i_ex ASN1_item_d2i_fp ASN1_item_d2i_fp_ex ASN1_item_digest ASN1_item_dup ASN1_item_ex_d2i ASN1_item_ex_free ASN1_item_ex_i2d ASN1_item_ex_new ASN1_item_free ASN1_item_i2d ASN1_item_i2d_bio ASN1_item_i2d_fp ASN1_item_i2d_mem_bio ASN1_item_ndef_i2d ASN1_item_new ASN1_item_new_ex ASN1_item_pack ASN1_item_print ASN1_item_sign ASN1_item_sign_ctx ASN1_item_sign_ex ASN1_item_unpack ASN1_item_verify ASN1_item_verify_ctx ASN1_item_verify_ex ASN1_mbstring_copy ASN1_mbstring_ncopy ASN1_object_size ASN1_parse ASN1_parse_dump ASN1_put_eoc ASN1_put_object ASN1_sign ASN1_str2mask ASN1_tag2bit ASN1_tag2str ASN1_verify ASRange_free ASRange_it ASRange_new ASYNC_WAIT_CTX_clear_fd ASYNC_WAIT_CTX_free ASYNC_WAIT_CTX_get_all_fds ASYNC_WAIT_CTX_get_callback ASYNC_WAIT_CTX_get_changed_fds ASYNC_WAIT_CTX_get_fd ASYNC_WAIT_CTX_get_status ASYNC_WAIT_CTX_new ASYNC_WAIT_CTX_set_callback ASYNC_WAIT_CTX_set_status ASYNC_WAIT_CTX_set_wait_fd ASYNC_block_pause ASYNC_cleanup_thread ASYNC_get_current_job ASYNC_get_wait_ctx ASYNC_init_thread ASYNC_is_capable ASYNC_pause_job ASYNC_start_job ASYNC_unblock_pause AUTHORITY_INFO_ACCESS_free AUTHORITY_INFO_ACCESS_it AUTHORITY_INFO_ACCESS_new AUTHORITY_KEYID_free AUTHORITY_KEYID_it AUTHORITY_KEYID_new BASIC_CONSTRAINTS_free BASIC_CONSTRAINTS_it BASIC_CONSTRAINTS_new BF_cbc_encrypt BF_cfb64_encrypt BF_decrypt BF_ecb_encrypt BF_encrypt BF_ofb64_encrypt BF_options BF_set_key BIGNUM_it BIO_ADDRINFO_address BIO_ADDRINFO_family BIO_ADDRINFO_free BIO_ADDRINFO_next BIO_ADDRINFO_protocol BIO_ADDRINFO_socktype BIO_ADDR_clear BIO_ADDR_family BIO_ADDR_free BIO_ADDR_hostname_string BIO_ADDR_new BIO_ADDR_path_string BIO_ADDR_rawaddress BIO_ADDR_rawmake BIO_ADDR_rawport BIO_ADDR_service_string BIO_accept BIO_accept_ex BIO_asn1_get_prefix BIO_asn1_get_suffix BIO_asn1_set_prefix BIO_asn1_set_suffix BIO_bind BIO_callback_ctrl BIO_clear_flags BIO_closesocket BIO_connect BIO_copy_next_retry BIO_ctrl BIO_ctrl_get_read_request BIO_ctrl_get_write_guarantee BIO_ctrl_pending BIO_ctrl_reset_read_request BIO_ctrl_wpending BIO_debug_callback BIO_debug_callback_ex BIO_dgram_non_fatal_error BIO_do_connect_retry BIO_dump BIO_dump_cb BIO_dump_fp BIO_dump_indent BIO_dump_indent_cb BIO_dump_indent_fp BIO_dup_chain BIO_f_asn1 BIO_f_base64 BIO_f_buffer BIO_f_cipher BIO_f_linebuffer BIO_f_md BIO_f_nbio_test BIO_f_null BIO_f_prefix BIO_f_readbuffer BIO_f_reliable BIO_fd_non_fatal_error BIO_fd_should_retry BIO_find_type BIO_free BIO_free_all BIO_get_accept_socket BIO_get_callback BIO_get_callback_arg BIO_get_callback_ex BIO_get_data BIO_get_ex_data BIO_get_host_ip BIO_get_init BIO_get_line BIO_get_new_index BIO_get_port BIO_get_retry_BIO BIO_get_retry_reason BIO_get_shutdown BIO_gethostbyname BIO_gets BIO_hex_string BIO_indent BIO_int_ctrl BIO_listen BIO_lookup BIO_lookup_ex BIO_meth_free BIO_meth_get_callback_ctrl BIO_meth_get_create BIO_meth_get_ctrl BIO_meth_get_destroy BIO_meth_get_gets BIO_meth_get_puts BIO_meth_get_read BIO_meth_get_read_ex BIO_meth_get_write BIO_meth_get_write_ex BIO_meth_new BIO_meth_set_callback_ctrl BIO_meth_set_create BIO_meth_set_ctrl BIO_meth_set_destroy BIO_meth_set_gets BIO_meth_set_puts BIO_meth_set_read BIO_meth_set_read_ex BIO_meth_set_write BIO_meth_set_write_ex BIO_method_name BIO_method_type BIO_new BIO_new_CMS BIO_new_NDEF BIO_new_PKCS7 BIO_new_accept BIO_new_bio_pair BIO_new_connect BIO_new_dgram BIO_new_ex BIO_new_fd BIO_new_file BIO_new_fp BIO_new_from_core_bio BIO_new_mem_buf BIO_new_socket BIO_next BIO_nread BIO_nread0 BIO_number_read BIO_number_written BIO_nwrite BIO_nwrite0 BIO_parse_hostserv BIO_pop BIO_printf BIO_ptr_ctrl BIO_push BIO_puts BIO_read BIO_read_ex BIO_s_accept BIO_s_bio BIO_s_connect BIO_s_core BIO_s_datagram BIO_s_fd BIO_s_file BIO_s_log BIO_s_mem BIO_s_null BIO_s_secmem BIO_s_socket BIO_set_callback BIO_set_callback_arg BIO_set_callback_ex BIO_set_cipher BIO_set_data BIO_set_ex_data BIO_set_flags BIO_set_init BIO_set_next BIO_set_retry_reason BIO_set_shutdown BIO_set_tcp_ndelay BIO_snprintf BIO_sock_error BIO_sock_info BIO_sock_init BIO_sock_non_fatal_error BIO_sock_should_retry BIO_socket BIO_socket_ioctl BIO_socket_nbio BIO_socket_wait BIO_test_flags BIO_up_ref BIO_vfree BIO_vprintf BIO_vsnprintf BIO_wait BIO_write BIO_write_ex BN_BLINDING_convert BN_BLINDING_convert_ex BN_BLINDING_create_param BN_BLINDING_free BN_BLINDING_get_flags BN_BLINDING_invert BN_BLINDING_invert_ex BN_BLINDING_is_current_thread BN_BLINDING_lock BN_BLINDING_new BN_BLINDING_set_current_thread BN_BLINDING_set_flags BN_BLINDING_unlock BN_BLINDING_update BN_CTX_end BN_CTX_free BN_CTX_get BN_CTX_new BN_CTX_new_ex BN_CTX_secure_new BN_CTX_secure_new_ex BN_CTX_start BN_GENCB_call BN_GENCB_free BN_GENCB_get_arg BN_GENCB_new BN_GENCB_set BN_GENCB_set_old BN_GF2m_add BN_GF2m_arr2poly BN_GF2m_mod BN_GF2m_mod_arr BN_GF2m_mod_div BN_GF2m_mod_div_arr BN_GF2m_mod_exp BN_GF2m_mod_exp_arr BN_GF2m_mod_inv BN_GF2m_mod_inv_arr BN_GF2m_mod_mul BN_GF2m_mod_mul_arr BN_GF2m_mod_solve_quad BN_GF2m_mod_solve_quad_arr BN_GF2m_mod_sqr BN_GF2m_mod_sqr_arr BN_GF2m_mod_sqrt BN_GF2m_mod_sqrt_arr BN_GF2m_poly2arr BN_MONT_CTX_copy BN_MONT_CTX_free BN_MONT_CTX_new BN_MONT_CTX_set BN_MONT_CTX_set_locked BN_RECP_CTX_free BN_RECP_CTX_new BN_RECP_CTX_set BN_X931_derive_prime_ex BN_X931_generate_Xpq BN_X931_generate_prime_ex BN_abs_is_word BN_add BN_add_word BN_asc2bn BN_bin2bn BN_bn2bin BN_bn2binpad BN_bn2dec BN_bn2hex BN_bn2lebinpad BN_bn2mpi BN_bn2nativepad BN_bntest_rand BN_check_prime BN_clear BN_clear_bit BN_clear_free BN_cmp BN_consttime_swap BN_copy BN_dec2bn BN_div BN_div_recp BN_div_word BN_dup BN_exp BN_free BN_from_montgomery BN_gcd BN_generate_dsa_nonce BN_generate_prime BN_generate_prime_ex BN_generate_prime_ex2 BN_get0_nist_prime_192 BN_get0_nist_prime_224 BN_get0_nist_prime_256 BN_get0_nist_prime_384 BN_get0_nist_prime_521 BN_get_flags BN_get_params BN_get_rfc2409_prime_1024 BN_get_rfc2409_prime_768 BN_get_rfc3526_prime_1536 BN_get_rfc3526_prime_2048 BN_get_rfc3526_prime_3072 BN_get_rfc3526_prime_4096 BN_get_rfc3526_prime_6144 BN_get_rfc3526_prime_8192 BN_get_word BN_hex2bn BN_is_bit_set BN_is_negative BN_is_odd BN_is_one BN_is_prime BN_is_prime_ex BN_is_prime_fasttest BN_is_prime_fasttest_ex BN_is_word BN_is_zero BN_kronecker BN_lebin2bn BN_lshift BN_lshift1 BN_mask_bits BN_mod_add BN_mod_add_quick BN_mod_exp BN_mod_exp2_mont BN_mod_exp_mont BN_mod_exp_mont_consttime BN_mod_exp_mont_consttime_x2 BN_mod_exp_mont_word BN_mod_exp_recp BN_mod_exp_simple BN_mod_inverse BN_mod_lshift BN_mod_lshift1 BN_mod_lshift1_quick BN_mod_lshift_quick BN_mod_mul BN_mod_mul_montgomery BN_mod_mul_reciprocal BN_mod_sqr BN_mod_sqrt BN_mod_sub BN_mod_sub_quick BN_mod_word BN_mpi2bn BN_mul BN_mul_word BN_native2bn BN_new BN_nist_mod_192 BN_nist_mod_224 BN_nist_mod_256 BN_nist_mod_384 BN_nist_mod_521 BN_nist_mod_func BN_nnmod BN_num_bits BN_num_bits_word BN_options BN_print BN_print_fp BN_priv_rand BN_priv_rand_ex BN_priv_rand_range BN_priv_rand_range_ex BN_pseudo_rand BN_pseudo_rand_range BN_rand BN_rand_ex BN_rand_range BN_rand_range_ex BN_reciprocal BN_rshift BN_rshift1 BN_secure_new BN_security_bits BN_set_bit BN_set_flags BN_set_negative BN_set_params BN_set_word BN_sqr BN_sub BN_sub_word BN_swap BN_to_ASN1_ENUMERATED BN_to_ASN1_INTEGER BN_to_montgomery BN_uadd BN_ucmp BN_usub BN_value_one BN_with_flags BN_zero_ex BUF_MEM_free BUF_MEM_grow BUF_MEM_grow_clean BUF_MEM_new BUF_MEM_new_ex BUF_reverse CAST_cbc_encrypt CAST_cfb64_encrypt CAST_decrypt CAST_ecb_encrypt CAST_encrypt CAST_ofb64_encrypt CAST_set_key CBIGNUM_it CERTIFICATEPOLICIES_free CERTIFICATEPOLICIES_it CERTIFICATEPOLICIES_new CMAC_CTX_cleanup CMAC_CTX_copy CMAC_CTX_free CMAC_CTX_get0_cipher_ctx CMAC_CTX_new CMAC_Final CMAC_Init CMAC_Update CMAC_resume CMS_AuthEnvelopedData_create CMS_AuthEnvelopedData_create_ex CMS_ContentInfo_free CMS_ContentInfo_it CMS_ContentInfo_new CMS_ContentInfo_new_ex CMS_ContentInfo_print_ctx CMS_EncryptedData_decrypt CMS_EncryptedData_encrypt CMS_EncryptedData_encrypt_ex CMS_EncryptedData_set1_key CMS_EnvelopedData_create CMS_EnvelopedData_create_ex CMS_ReceiptRequest_create0 CMS_ReceiptRequest_create0_ex CMS_ReceiptRequest_free CMS_ReceiptRequest_get0_values CMS_ReceiptRequest_it CMS_ReceiptRequest_new CMS_RecipientEncryptedKey_cert_cmp CMS_RecipientEncryptedKey_get0_id CMS_RecipientInfo_decrypt CMS_RecipientInfo_encrypt CMS_RecipientInfo_get0_pkey_ctx CMS_RecipientInfo_kari_decrypt CMS_RecipientInfo_kari_get0_alg CMS_RecipientInfo_kari_get0_ctx CMS_RecipientInfo_kari_get0_orig_id CMS_RecipientInfo_kari_get0_reks CMS_RecipientInfo_kari_orig_id_cmp CMS_RecipientInfo_kari_set0_pkey CMS_RecipientInfo_kari_set0_pkey_and_peer CMS_RecipientInfo_kekri_get0_id CMS_RecipientInfo_kekri_id_cmp CMS_RecipientInfo_ktri_cert_cmp CMS_RecipientInfo_ktri_get0_algs CMS_RecipientInfo_ktri_get0_signer_id CMS_RecipientInfo_set0_key CMS_RecipientInfo_set0_password CMS_RecipientInfo_set0_pkey CMS_RecipientInfo_type CMS_SharedInfo_encode CMS_SignedData_init CMS_SignerInfo_cert_cmp CMS_SignerInfo_get0_algs CMS_SignerInfo_get0_md_ctx CMS_SignerInfo_get0_pkey_ctx CMS_SignerInfo_get0_signature CMS_SignerInfo_get0_signer_id CMS_SignerInfo_set1_signer_cert CMS_SignerInfo_sign CMS_SignerInfo_verify CMS_SignerInfo_verify_content CMS_add0_CertificateChoices CMS_add0_RevocationInfoChoice CMS_add0_cert CMS_add0_crl CMS_add0_recipient_key CMS_add0_recipient_password CMS_add1_ReceiptRequest CMS_add1_cert CMS_add1_crl CMS_add1_recipient CMS_add1_recipient_cert CMS_add1_signer CMS_add_simple_smimecap CMS_add_smimecap CMS_add_standard_smimecap CMS_compress CMS_data CMS_dataFinal CMS_dataInit CMS_data_create CMS_data_create_ex CMS_decrypt CMS_decrypt_set1_key CMS_decrypt_set1_password CMS_decrypt_set1_pkey CMS_decrypt_set1_pkey_and_peer CMS_digest_create CMS_digest_create_ex CMS_digest_verify CMS_encrypt CMS_encrypt_ex CMS_final CMS_get0_RecipientInfos CMS_get0_SignerInfos CMS_get0_content CMS_get0_eContentType CMS_get0_signers CMS_get0_type CMS_get1_ReceiptRequest CMS_get1_certs CMS_get1_crls CMS_is_detached CMS_set1_eContentType CMS_set1_signers_certs CMS_set_detached CMS_sign CMS_sign_ex CMS_sign_receipt CMS_signed_add1_attr CMS_signed_add1_attr_by_NID CMS_signed_add1_attr_by_OBJ CMS_signed_add1_attr_by_txt CMS_signed_delete_attr CMS_signed_get0_data_by_OBJ CMS_signed_get_attr CMS_signed_get_attr_by_NID CMS_signed_get_attr_by_OBJ CMS_signed_get_attr_count CMS_stream CMS_uncompress CMS_unsigned_add1_attr CMS_unsigned_add1_attr_by_NID CMS_unsigned_add1_attr_by_OBJ CMS_unsigned_add1_attr_by_txt CMS_unsigned_delete_attr CMS_unsigned_get0_data_by_OBJ CMS_unsigned_get_attr CMS_unsigned_get_attr_by_NID CMS_unsigned_get_attr_by_OBJ CMS_unsigned_get_attr_count CMS_verify CMS_verify_receipt COMP_CTX_free COMP_CTX_get_method COMP_CTX_get_type COMP_CTX_new COMP_compress_block COMP_expand_block COMP_get_name COMP_get_type COMP_zlib CONF_dump_bio CONF_dump_fp CONF_free CONF_get1_default_config_file CONF_get_number CONF_get_section CONF_get_string CONF_imodule_get_flags CONF_imodule_get_module CONF_imodule_get_name CONF_imodule_get_usr_data CONF_imodule_get_value CONF_imodule_set_flags CONF_imodule_set_usr_data CONF_load CONF_load_bio CONF_load_fp CONF_module_add CONF_module_get_usr_data CONF_module_set_usr_data CONF_modules_finish CONF_modules_load CONF_modules_load_file CONF_modules_load_file_ex CONF_modules_unload CONF_parse_list CONF_set_default_method CONF_set_nconf CRL_DIST_POINTS_free CRL_DIST_POINTS_it CRL_DIST_POINTS_new CRYPTO_128_unwrap CRYPTO_128_unwrap_pad CRYPTO_128_wrap CRYPTO_128_wrap_pad CRYPTO_THREAD_cleanup_local CRYPTO_THREAD_compare_id CRYPTO_THREAD_get_current_id CRYPTO_THREAD_get_local CRYPTO_THREAD_init_local CRYPTO_THREAD_lock_free CRYPTO_THREAD_lock_new CRYPTO_THREAD_read_lock CRYPTO_THREAD_run_once CRYPTO_THREAD_set_local CRYPTO_THREAD_unlock CRYPTO_THREAD_write_lock CRYPTO_alloc_ex_data CRYPTO_atomic_add CRYPTO_atomic_load CRYPTO_atomic_or CRYPTO_cbc128_decrypt CRYPTO_cbc128_encrypt CRYPTO_ccm128_aad CRYPTO_ccm128_decrypt CRYPTO_ccm128_decrypt_ccm64 CRYPTO_ccm128_encrypt CRYPTO_ccm128_encrypt_ccm64 CRYPTO_ccm128_init CRYPTO_ccm128_setiv CRYPTO_ccm128_tag CRYPTO_cfb128_1_encrypt CRYPTO_cfb128_8_encrypt CRYPTO_cfb128_encrypt CRYPTO_clear_free CRYPTO_clear_realloc CRYPTO_ctr128_encrypt CRYPTO_ctr128_encrypt_ctr32 CRYPTO_cts128_decrypt CRYPTO_cts128_decrypt_block CRYPTO_cts128_encrypt CRYPTO_cts128_encrypt_block CRYPTO_dup_ex_data CRYPTO_free CRYPTO_free_ex_data CRYPTO_free_ex_index CRYPTO_gcm128_aad CRYPTO_gcm128_decrypt CRYPTO_gcm128_decrypt_ctr32 CRYPTO_gcm128_encrypt CRYPTO_gcm128_encrypt_ctr32 CRYPTO_gcm128_finish CRYPTO_gcm128_init CRYPTO_gcm128_new CRYPTO_gcm128_release CRYPTO_gcm128_setiv CRYPTO_gcm128_tag CRYPTO_get_ex_data CRYPTO_get_ex_new_index CRYPTO_get_mem_functions CRYPTO_malloc CRYPTO_memcmp CRYPTO_memdup CRYPTO_new_ex_data CRYPTO_nistcts128_decrypt CRYPTO_nistcts128_decrypt_block CRYPTO_nistcts128_encrypt CRYPTO_nistcts128_encrypt_block CRYPTO_ocb128_aad CRYPTO_ocb128_cleanup CRYPTO_ocb128_copy_ctx CRYPTO_ocb128_decrypt CRYPTO_ocb128_encrypt CRYPTO_ocb128_finish CRYPTO_ocb128_init CRYPTO_ocb128_new CRYPTO_ocb128_setiv CRYPTO_ocb128_tag CRYPTO_ofb128_encrypt CRYPTO_realloc CRYPTO_secure_actual_size CRYPTO_secure_allocated CRYPTO_secure_clear_free CRYPTO_secure_free CRYPTO_secure_malloc CRYPTO_secure_malloc_done CRYPTO_secure_malloc_init CRYPTO_secure_malloc_initialized CRYPTO_secure_used CRYPTO_secure_zalloc CRYPTO_set_ex_data CRYPTO_set_mem_functions CRYPTO_strdup CRYPTO_strndup CRYPTO_xts128_encrypt CRYPTO_zalloc CTLOG_STORE_free CTLOG_STORE_get0_log_by_id CTLOG_STORE_load_default_file CTLOG_STORE_load_file CTLOG_STORE_new CTLOG_STORE_new_ex CTLOG_free CTLOG_get0_log_id CTLOG_get0_name CTLOG_get0_public_key CTLOG_new CTLOG_new_ex CTLOG_new_from_base64 CTLOG_new_from_base64_ex CT_POLICY_EVAL_CTX_free CT_POLICY_EVAL_CTX_get0_cert CT_POLICY_EVAL_CTX_get0_issuer CT_POLICY_EVAL_CTX_get0_log_store CT_POLICY_EVAL_CTX_get_time CT_POLICY_EVAL_CTX_new CT_POLICY_EVAL_CTX_new_ex CT_POLICY_EVAL_CTX_set1_cert CT_POLICY_EVAL_CTX_set1_issuer CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE CT_POLICY_EVAL_CTX_set_time Camellia_cbc_encrypt Camellia_cfb128_encrypt Camellia_cfb1_encrypt Camellia_cfb8_encrypt Camellia_ctr128_encrypt Camellia_decrypt Camellia_ecb_encrypt Camellia_encrypt Camellia_ofb128_encrypt Camellia_set_key DES_cbc_cksum DES_cbc_encrypt DES_cfb64_encrypt DES_cfb_encrypt DES_check_key_parity DES_crypt DES_decrypt3 DES_ecb3_encrypt DES_ecb_encrypt DES_ede3_cbc_encrypt DES_ede3_cfb64_encrypt DES_ede3_cfb_encrypt DES_ede3_ofb64_encrypt DES_encrypt1 DES_encrypt2 DES_encrypt3 DES_fcrypt DES_is_weak_key DES_key_sched DES_ncbc_encrypt DES_ofb64_encrypt DES_ofb_encrypt DES_options DES_pcbc_encrypt DES_quad_cksum DES_random_key DES_set_key DES_set_key_checked DES_set_key_unchecked DES_set_odd_parity DES_string_to_2keys DES_string_to_key DES_xcbc_encrypt DH_KDF_X9_42 DH_OpenSSL DH_bits DH_check DH_check_ex DH_check_params DH_check_params_ex DH_check_pub_key DH_check_pub_key_ex DH_clear_flags DH_compute_key DH_compute_key_padded DH_free DH_generate_key DH_generate_parameters DH_generate_parameters_ex DH_get0_engine DH_get0_g DH_get0_key DH_get0_p DH_get0_pqg DH_get0_priv_key DH_get0_pub_key DH_get0_q DH_get_1024_160 DH_get_2048_224 DH_get_2048_256 DH_get_default_method DH_get_ex_data DH_get_length DH_get_nid DH_meth_dup DH_meth_free DH_meth_get0_app_data DH_meth_get0_name DH_meth_get_bn_mod_exp DH_meth_get_compute_key DH_meth_get_finish DH_meth_get_flags DH_meth_get_generate_key DH_meth_get_generate_params DH_meth_get_init DH_meth_new DH_meth_set0_app_data DH_meth_set1_name DH_meth_set_bn_mod_exp DH_meth_set_compute_key DH_meth_set_finish DH_meth_set_flags DH_meth_set_generate_key DH_meth_set_generate_params DH_meth_set_init DH_new DH_new_by_nid DH_new_method DH_security_bits DH_set0_key DH_set0_pqg DH_set_default_method DH_set_ex_data DH_set_flags DH_set_length DH_set_method DH_size DH_test_flags DH_up_ref DHparams_dup DHparams_it DHparams_print DHparams_print_fp DIRECTORYSTRING_free DIRECTORYSTRING_it DIRECTORYSTRING_new DISPLAYTEXT_free DISPLAYTEXT_it DISPLAYTEXT_new DIST_POINT_NAME_free DIST_POINT_NAME_it DIST_POINT_NAME_new DIST_POINT_free DIST_POINT_it DIST_POINT_new DIST_POINT_set_dpname DSA_OpenSSL DSA_SIG_free DSA_SIG_get0 DSA_SIG_new DSA_SIG_set0 DSA_bits DSA_clear_flags DSA_do_sign DSA_do_verify DSA_dup_DH DSA_free DSA_generate_key DSA_generate_parameters DSA_generate_parameters_ex DSA_get0_engine DSA_get0_g DSA_get0_key DSA_get0_p DSA_get0_pqg DSA_get0_priv_key DSA_get0_pub_key DSA_get0_q DSA_get_default_method DSA_get_ex_data DSA_get_method DSA_meth_dup DSA_meth_free DSA_meth_get0_app_data DSA_meth_get0_name DSA_meth_get_bn_mod_exp DSA_meth_get_finish DSA_meth_get_flags DSA_meth_get_init DSA_meth_get_keygen DSA_meth_get_mod_exp DSA_meth_get_paramgen DSA_meth_get_sign DSA_meth_get_sign_setup DSA_meth_get_verify DSA_meth_new DSA_meth_set0_app_data DSA_meth_set1_name DSA_meth_set_bn_mod_exp DSA_meth_set_finish DSA_meth_set_flags DSA_meth_set_init DSA_meth_set_keygen DSA_meth_set_mod_exp DSA_meth_set_paramgen DSA_meth_set_sign DSA_meth_set_sign_setup DSA_meth_set_verify DSA_new DSA_new_method DSA_print DSA_print_fp DSA_security_bits DSA_set0_key DSA_set0_pqg DSA_set_default_method DSA_set_ex_data DSA_set_flags DSA_set_method DSA_sign DSA_sign_setup DSA_size DSA_test_flags DSA_up_ref DSA_verify DSAparams_dup DSAparams_print DSAparams_print_fp DSO_METHOD_openssl DSO_bind_func DSO_convert_filename DSO_ctrl DSO_dsobyaddr DSO_flags DSO_free DSO_get_filename DSO_global_lookup DSO_load DSO_merge DSO_new DSO_pathbyaddr DSO_set_filename DSO_up_ref ECDH_KDF_X9_62 ECDH_compute_key ECDSA_SIG_free ECDSA_SIG_get0 ECDSA_SIG_get0_r ECDSA_SIG_get0_s ECDSA_SIG_new ECDSA_SIG_set0 ECDSA_do_sign ECDSA_do_sign_ex ECDSA_do_verify ECDSA_sign ECDSA_sign_ex ECDSA_sign_setup ECDSA_size ECDSA_verify ECPARAMETERS_free ECPARAMETERS_it ECPARAMETERS_new ECPKPARAMETERS_free ECPKPARAMETERS_it ECPKPARAMETERS_new ECPKParameters_print ECPKParameters_print_fp ECParameters_print ECParameters_print_fp EC_GF2m_simple_method EC_GFp_mont_method EC_GFp_nist_method EC_GFp_simple_method EC_GROUP_check EC_GROUP_check_discriminant EC_GROUP_check_named_curve EC_GROUP_clear_free EC_GROUP_cmp EC_GROUP_copy EC_GROUP_dup EC_GROUP_free EC_GROUP_get0_cofactor EC_GROUP_get0_field EC_GROUP_get0_generator EC_GROUP_get0_order EC_GROUP_get0_seed EC_GROUP_get_asn1_flag EC_GROUP_get_basis_type EC_GROUP_get_cofactor EC_GROUP_get_curve EC_GROUP_get_curve_GF2m EC_GROUP_get_curve_GFp EC_GROUP_get_curve_name EC_GROUP_get_degree EC_GROUP_get_ecparameters EC_GROUP_get_ecpkparameters EC_GROUP_get_field_type EC_GROUP_get_mont_data EC_GROUP_get_order EC_GROUP_get_pentanomial_basis EC_GROUP_get_point_conversion_form EC_GROUP_get_seed_len EC_GROUP_get_trinomial_basis EC_GROUP_have_precompute_mult EC_GROUP_method_of EC_GROUP_new EC_GROUP_new_by_curve_name EC_GROUP_new_by_curve_name_ex EC_GROUP_new_curve_GF2m EC_GROUP_new_curve_GFp EC_GROUP_new_from_ecparameters EC_GROUP_new_from_ecpkparameters EC_GROUP_new_from_params EC_GROUP_order_bits EC_GROUP_precompute_mult EC_GROUP_set_asn1_flag EC_GROUP_set_curve EC_GROUP_set_curve_GF2m EC_GROUP_set_curve_GFp EC_GROUP_set_curve_name EC_GROUP_set_generator EC_GROUP_set_point_conversion_form EC_GROUP_set_seed EC_KEY_METHOD_free EC_KEY_METHOD_get_compute_key EC_KEY_METHOD_get_init EC_KEY_METHOD_get_keygen EC_KEY_METHOD_get_sign EC_KEY_METHOD_get_verify EC_KEY_METHOD_new EC_KEY_METHOD_set_compute_key EC_KEY_METHOD_set_init EC_KEY_METHOD_set_keygen EC_KEY_METHOD_set_sign EC_KEY_METHOD_set_verify EC_KEY_OpenSSL EC_KEY_can_sign EC_KEY_check_key EC_KEY_clear_flags EC_KEY_copy EC_KEY_decoded_from_explicit_params EC_KEY_dup EC_KEY_free EC_KEY_generate_key EC_KEY_get0_engine EC_KEY_get0_group EC_KEY_get0_private_key EC_KEY_get0_public_key EC_KEY_get_conv_form EC_KEY_get_default_method EC_KEY_get_enc_flags EC_KEY_get_ex_data EC_KEY_get_flags EC_KEY_get_method EC_KEY_key2buf EC_KEY_new EC_KEY_new_by_curve_name EC_KEY_new_by_curve_name_ex EC_KEY_new_ex EC_KEY_new_method EC_KEY_oct2key EC_KEY_oct2priv EC_KEY_precompute_mult EC_KEY_print EC_KEY_print_fp EC_KEY_priv2buf EC_KEY_priv2oct EC_KEY_set_asn1_flag EC_KEY_set_conv_form EC_KEY_set_default_method EC_KEY_set_enc_flags EC_KEY_set_ex_data EC_KEY_set_flags EC_KEY_set_group EC_KEY_set_method EC_KEY_set_private_key EC_KEY_set_public_key EC_KEY_set_public_key_affine_coordinates EC_KEY_up_ref EC_METHOD_get_field_type EC_POINT_add EC_POINT_bn2point EC_POINT_clear_free EC_POINT_cmp EC_POINT_copy EC_POINT_dbl EC_POINT_dup EC_POINT_free EC_POINT_get_Jprojective_coordinates_GFp EC_POINT_get_affine_coordinates EC_POINT_get_affine_coordinates_GF2m EC_POINT_get_affine_coordinates_GFp EC_POINT_hex2point EC_POINT_invert EC_POINT_is_at_infinity EC_POINT_is_on_curve EC_POINT_make_affine EC_POINT_method_of EC_POINT_mul EC_POINT_new EC_POINT_oct2point EC_POINT_point2bn EC_POINT_point2buf EC_POINT_point2hex EC_POINT_point2oct EC_POINT_set_Jprojective_coordinates_GFp EC_POINT_set_affine_coordinates EC_POINT_set_affine_coordinates_GF2m EC_POINT_set_affine_coordinates_GFp EC_POINT_set_compressed_coordinates EC_POINT_set_compressed_coordinates_GF2m EC_POINT_set_compressed_coordinates_GFp EC_POINT_set_to_infinity EC_POINTs_make_affine EC_POINTs_mul EC_curve_nid2nist EC_curve_nist2nid EC_get_builtin_curves EDIPARTYNAME_free EDIPARTYNAME_it EDIPARTYNAME_new ENGINE_add ENGINE_add_conf_module ENGINE_by_id ENGINE_cmd_is_executable ENGINE_ctrl ENGINE_ctrl_cmd ENGINE_ctrl_cmd_string ENGINE_finish ENGINE_free ENGINE_get_DH ENGINE_get_DSA ENGINE_get_EC ENGINE_get_RAND ENGINE_get_RSA ENGINE_get_cipher ENGINE_get_cipher_engine ENGINE_get_ciphers ENGINE_get_cmd_defns ENGINE_get_ctrl_function ENGINE_get_default_DH ENGINE_get_default_DSA ENGINE_get_default_EC ENGINE_get_default_RAND ENGINE_get_default_RSA ENGINE_get_destroy_function ENGINE_get_digest ENGINE_get_digest_engine ENGINE_get_digests ENGINE_get_ex_data ENGINE_get_finish_function ENGINE_get_first ENGINE_get_flags ENGINE_get_id ENGINE_get_init_function ENGINE_get_last ENGINE_get_load_privkey_function ENGINE_get_load_pubkey_function ENGINE_get_name ENGINE_get_next ENGINE_get_pkey_asn1_meth ENGINE_get_pkey_asn1_meth_engine ENGINE_get_pkey_asn1_meth_str ENGINE_get_pkey_asn1_meths ENGINE_get_pkey_meth ENGINE_get_pkey_meth_engine ENGINE_get_pkey_meths ENGINE_get_prev ENGINE_get_ssl_client_cert_function ENGINE_get_static_state ENGINE_get_table_flags ENGINE_init ENGINE_load_builtin_engines ENGINE_load_private_key ENGINE_load_public_key ENGINE_load_ssl_client_cert ENGINE_new ENGINE_pkey_asn1_find_str ENGINE_register_DH ENGINE_register_DSA ENGINE_register_EC ENGINE_register_RAND ENGINE_register_RSA ENGINE_register_all_DH ENGINE_register_all_DSA ENGINE_register_all_EC ENGINE_register_all_RAND ENGINE_register_all_RSA ENGINE_register_all_ciphers ENGINE_register_all_complete ENGINE_register_all_digests ENGINE_register_all_pkey_asn1_meths ENGINE_register_all_pkey_meths ENGINE_register_ciphers ENGINE_register_complete ENGINE_register_digests ENGINE_register_pkey_asn1_meths ENGINE_register_pkey_meths ENGINE_remove ENGINE_set_DH ENGINE_set_DSA ENGINE_set_EC ENGINE_set_RAND ENGINE_set_RSA ENGINE_set_ciphers ENGINE_set_cmd_defns ENGINE_set_ctrl_function ENGINE_set_default ENGINE_set_default_DH ENGINE_set_default_DSA ENGINE_set_default_EC ENGINE_set_default_RAND ENGINE_set_default_RSA ENGINE_set_default_ciphers ENGINE_set_default_digests ENGINE_set_default_pkey_asn1_meths ENGINE_set_default_pkey_meths ENGINE_set_default_string ENGINE_set_destroy_function ENGINE_set_digests ENGINE_set_ex_data ENGINE_set_finish_function ENGINE_set_flags ENGINE_set_id ENGINE_set_init_function ENGINE_set_load_privkey_function ENGINE_set_load_pubkey_function ENGINE_set_load_ssl_client_cert_function ENGINE_set_name ENGINE_set_pkey_asn1_meths ENGINE_set_pkey_meths ENGINE_set_table_flags ENGINE_unregister_DH ENGINE_unregister_DSA ENGINE_unregister_EC ENGINE_unregister_RAND ENGINE_unregister_RSA ENGINE_unregister_ciphers ENGINE_unregister_digests ENGINE_unregister_pkey_asn1_meths ENGINE_unregister_pkey_meths ENGINE_up_ref ERR_add_error_data ERR_add_error_mem_bio ERR_add_error_txt ERR_add_error_vdata ERR_clear_error ERR_clear_last_mark ERR_error_string ERR_error_string_n ERR_func_error_string ERR_get_error ERR_get_error_all ERR_get_error_line ERR_get_error_line_data ERR_get_next_error_library ERR_get_state ERR_lib_error_string ERR_load_ASN1_strings ERR_load_ASYNC_strings ERR_load_BIO_strings ERR_load_BN_strings ERR_load_BUF_strings ERR_load_CMS_strings ERR_load_COMP_strings ERR_load_CONF_strings ERR_load_CRYPTO_strings ERR_load_CT_strings ERR_load_DH_strings ERR_load_DSA_strings ERR_load_EC_strings ERR_load_ENGINE_strings ERR_load_ERR_strings ERR_load_EVP_strings ERR_load_KDF_strings ERR_load_OBJ_strings ERR_load_OCSP_strings ERR_load_OSSL_STORE_strings ERR_load_PEM_strings ERR_load_PKCS12_strings ERR_load_PKCS7_strings ERR_load_RAND_strings ERR_load_RSA_strings ERR_load_TS_strings ERR_load_UI_strings ERR_load_X509V3_strings ERR_load_X509_strings ERR_load_strings ERR_load_strings_const ERR_new ERR_peek_error ERR_peek_error_all ERR_peek_error_data ERR_peek_error_func ERR_peek_error_line ERR_peek_error_line_data ERR_peek_last_error ERR_peek_last_error_all ERR_peek_last_error_data ERR_peek_last_error_func ERR_peek_last_error_line ERR_peek_last_error_line_data ERR_pop_to_mark ERR_print_errors ERR_print_errors_cb ERR_print_errors_fp ERR_reason_error_string ERR_remove_state ERR_remove_thread_state ERR_set_debug ERR_set_error ERR_set_error_data ERR_set_mark ERR_unload_strings ERR_vset_error ESS_CERT_ID_V2_dup ESS_CERT_ID_V2_free ESS_CERT_ID_V2_new ESS_CERT_ID_dup ESS_CERT_ID_free ESS_CERT_ID_new ESS_ISSUER_SERIAL_dup ESS_ISSUER_SERIAL_free ESS_ISSUER_SERIAL_new ESS_SIGNING_CERT_V2_dup ESS_SIGNING_CERT_V2_free ESS_SIGNING_CERT_V2_it ESS_SIGNING_CERT_V2_new ESS_SIGNING_CERT_dup ESS_SIGNING_CERT_free ESS_SIGNING_CERT_it ESS_SIGNING_CERT_new EVP_ASYM_CIPHER_do_all_provided EVP_ASYM_CIPHER_fetch EVP_ASYM_CIPHER_free EVP_ASYM_CIPHER_get0_description EVP_ASYM_CIPHER_get0_name EVP_ASYM_CIPHER_get0_provider EVP_ASYM_CIPHER_gettable_ctx_params EVP_ASYM_CIPHER_is_a EVP_ASYM_CIPHER_names_do_all EVP_ASYM_CIPHER_settable_ctx_params EVP_ASYM_CIPHER_up_ref EVP_BytesToKey EVP_CIPHER_CTX_buf_noconst EVP_CIPHER_CTX_cipher EVP_CIPHER_CTX_clear_flags EVP_CIPHER_CTX_copy EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_free EVP_CIPHER_CTX_get0_cipher EVP_CIPHER_CTX_get1_cipher EVP_CIPHER_CTX_get_app_data EVP_CIPHER_CTX_get_block_size EVP_CIPHER_CTX_get_cipher_data EVP_CIPHER_CTX_get_iv_length EVP_CIPHER_CTX_get_key_length EVP_CIPHER_CTX_get_nid EVP_CIPHER_CTX_get_num EVP_CIPHER_CTX_get_original_iv EVP_CIPHER_CTX_get_params EVP_CIPHER_CTX_get_tag_length EVP_CIPHER_CTX_get_updated_iv EVP_CIPHER_CTX_gettable_params EVP_CIPHER_CTX_is_encrypting EVP_CIPHER_CTX_iv EVP_CIPHER_CTX_iv_noconst EVP_CIPHER_CTX_new EVP_CIPHER_CTX_original_iv EVP_CIPHER_CTX_rand_key EVP_CIPHER_CTX_reset EVP_CIPHER_CTX_set_app_data EVP_CIPHER_CTX_set_cipher_data EVP_CIPHER_CTX_set_flags EVP_CIPHER_CTX_set_key_length EVP_CIPHER_CTX_set_num EVP_CIPHER_CTX_set_padding EVP_CIPHER_CTX_set_params EVP_CIPHER_CTX_settable_params EVP_CIPHER_CTX_test_flags EVP_CIPHER_asn1_to_param EVP_CIPHER_do_all EVP_CIPHER_do_all_provided EVP_CIPHER_do_all_sorted EVP_CIPHER_fetch EVP_CIPHER_free EVP_CIPHER_get0_description EVP_CIPHER_get0_name EVP_CIPHER_get0_provider EVP_CIPHER_get_asn1_iv EVP_CIPHER_get_block_size EVP_CIPHER_get_flags EVP_CIPHER_get_iv_length EVP_CIPHER_get_key_length EVP_CIPHER_get_mode EVP_CIPHER_get_nid EVP_CIPHER_get_params EVP_CIPHER_get_type EVP_CIPHER_gettable_ctx_params EVP_CIPHER_gettable_params EVP_CIPHER_impl_ctx_size EVP_CIPHER_is_a EVP_CIPHER_meth_dup EVP_CIPHER_meth_free EVP_CIPHER_meth_get_cleanup EVP_CIPHER_meth_get_ctrl EVP_CIPHER_meth_get_do_cipher EVP_CIPHER_meth_get_get_asn1_params EVP_CIPHER_meth_get_init EVP_CIPHER_meth_get_set_asn1_params EVP_CIPHER_meth_new EVP_CIPHER_meth_set_cleanup EVP_CIPHER_meth_set_ctrl EVP_CIPHER_meth_set_do_cipher EVP_CIPHER_meth_set_flags EVP_CIPHER_meth_set_get_asn1_params EVP_CIPHER_meth_set_impl_ctx_size EVP_CIPHER_meth_set_init EVP_CIPHER_meth_set_iv_length EVP_CIPHER_meth_set_set_asn1_params EVP_CIPHER_names_do_all EVP_CIPHER_param_to_asn1 EVP_CIPHER_set_asn1_iv EVP_CIPHER_settable_ctx_params EVP_CIPHER_up_ref EVP_Cipher EVP_CipherFinal EVP_CipherFinal_ex EVP_CipherInit EVP_CipherInit_ex EVP_CipherInit_ex2 EVP_CipherUpdate EVP_DecodeBlock EVP_DecodeFinal EVP_DecodeInit EVP_DecodeUpdate EVP_DecryptFinal EVP_DecryptFinal_ex EVP_DecryptInit EVP_DecryptInit_ex EVP_DecryptInit_ex2 EVP_DecryptUpdate EVP_Digest EVP_DigestFinal EVP_DigestFinalXOF EVP_DigestFinal_ex EVP_DigestInit EVP_DigestInit_ex EVP_DigestInit_ex2 EVP_DigestSign EVP_DigestSignFinal EVP_DigestSignInit EVP_DigestSignInit_ex EVP_DigestSignUpdate EVP_DigestUpdate EVP_DigestVerify EVP_DigestVerifyFinal EVP_DigestVerifyInit EVP_DigestVerifyInit_ex EVP_DigestVerifyUpdate EVP_ENCODE_CTX_copy EVP_ENCODE_CTX_free EVP_ENCODE_CTX_new EVP_ENCODE_CTX_num EVP_EncodeBlock EVP_EncodeFinal EVP_EncodeInit EVP_EncodeUpdate EVP_EncryptFinal EVP_EncryptFinal_ex EVP_EncryptInit EVP_EncryptInit_ex EVP_EncryptInit_ex2 EVP_EncryptUpdate EVP_KDF_CTX_dup EVP_KDF_CTX_free EVP_KDF_CTX_get_kdf_size EVP_KDF_CTX_get_params EVP_KDF_CTX_gettable_params EVP_KDF_CTX_kdf EVP_KDF_CTX_new EVP_KDF_CTX_reset EVP_KDF_CTX_set_params EVP_KDF_CTX_settable_params EVP_KDF_derive EVP_KDF_do_all_provided EVP_KDF_fetch EVP_KDF_free EVP_KDF_get0_description EVP_KDF_get0_name EVP_KDF_get0_provider EVP_KDF_get_params EVP_KDF_gettable_ctx_params EVP_KDF_gettable_params EVP_KDF_is_a EVP_KDF_names_do_all EVP_KDF_settable_ctx_params EVP_KDF_up_ref EVP_KEM_do_all_provided EVP_KEM_fetch EVP_KEM_free EVP_KEM_get0_description EVP_KEM_get0_name EVP_KEM_get0_provider EVP_KEM_gettable_ctx_params EVP_KEM_is_a EVP_KEM_names_do_all EVP_KEM_settable_ctx_params EVP_KEM_up_ref EVP_KEYEXCH_do_all_provided EVP_KEYEXCH_fetch EVP_KEYEXCH_free EVP_KEYEXCH_get0_description EVP_KEYEXCH_get0_name EVP_KEYEXCH_get0_provider EVP_KEYEXCH_gettable_ctx_params EVP_KEYEXCH_is_a EVP_KEYEXCH_names_do_all EVP_KEYEXCH_settable_ctx_params EVP_KEYEXCH_up_ref EVP_KEYMGMT_do_all_provided EVP_KEYMGMT_fetch EVP_KEYMGMT_free EVP_KEYMGMT_gen_settable_params EVP_KEYMGMT_get0_description EVP_KEYMGMT_get0_name EVP_KEYMGMT_get0_provider EVP_KEYMGMT_gettable_params EVP_KEYMGMT_is_a EVP_KEYMGMT_names_do_all EVP_KEYMGMT_settable_params EVP_KEYMGMT_up_ref EVP_MAC_CTX_dup EVP_MAC_CTX_free EVP_MAC_CTX_get0_mac EVP_MAC_CTX_get_block_size EVP_MAC_CTX_get_mac_size EVP_MAC_CTX_get_params EVP_MAC_CTX_gettable_params EVP_MAC_CTX_new EVP_MAC_CTX_set_params EVP_MAC_CTX_settable_params EVP_MAC_do_all_provided EVP_MAC_fetch EVP_MAC_final EVP_MAC_finalXOF EVP_MAC_free EVP_MAC_get0_description EVP_MAC_get0_name EVP_MAC_get0_provider EVP_MAC_get_params EVP_MAC_gettable_ctx_params EVP_MAC_gettable_params EVP_MAC_init EVP_MAC_is_a EVP_MAC_names_do_all EVP_MAC_settable_ctx_params EVP_MAC_up_ref EVP_MAC_update EVP_MD_CTX_clear_flags EVP_MD_CTX_copy EVP_MD_CTX_copy_ex EVP_MD_CTX_ctrl EVP_MD_CTX_free EVP_MD_CTX_get0_md EVP_MD_CTX_get0_md_data EVP_MD_CTX_get1_md EVP_MD_CTX_get_params EVP_MD_CTX_get_pkey_ctx EVP_MD_CTX_gettable_params EVP_MD_CTX_md EVP_MD_CTX_new EVP_MD_CTX_reset EVP_MD_CTX_set_flags EVP_MD_CTX_set_params EVP_MD_CTX_set_pkey_ctx EVP_MD_CTX_set_update_fn EVP_MD_CTX_settable_params EVP_MD_CTX_test_flags EVP_MD_CTX_update_fn EVP_MD_do_all EVP_MD_do_all_provided EVP_MD_do_all_sorted EVP_MD_fetch EVP_MD_free EVP_MD_get0_description EVP_MD_get0_name EVP_MD_get0_provider EVP_MD_get_block_size EVP_MD_get_flags EVP_MD_get_params EVP_MD_get_pkey_type EVP_MD_get_size EVP_MD_get_type EVP_MD_gettable_ctx_params EVP_MD_gettable_params EVP_MD_is_a EVP_MD_meth_dup EVP_MD_meth_free EVP_MD_meth_get_app_datasize EVP_MD_meth_get_cleanup EVP_MD_meth_get_copy EVP_MD_meth_get_ctrl EVP_MD_meth_get_final EVP_MD_meth_get_flags EVP_MD_meth_get_init EVP_MD_meth_get_input_blocksize EVP_MD_meth_get_result_size EVP_MD_meth_get_update EVP_MD_meth_new EVP_MD_meth_set_app_datasize EVP_MD_meth_set_cleanup EVP_MD_meth_set_copy EVP_MD_meth_set_ctrl EVP_MD_meth_set_final EVP_MD_meth_set_flags EVP_MD_meth_set_init EVP_MD_meth_set_input_blocksize EVP_MD_meth_set_result_size EVP_MD_meth_set_update EVP_MD_names_do_all EVP_MD_settable_ctx_params EVP_MD_up_ref EVP_OpenFinal EVP_OpenInit EVP_PBE_CipherInit EVP_PBE_CipherInit_ex EVP_PBE_alg_add EVP_PBE_alg_add_type EVP_PBE_cleanup EVP_PBE_find EVP_PBE_find_ex EVP_PBE_get EVP_PBE_scrypt EVP_PBE_scrypt_ex EVP_PKCS82PKEY EVP_PKCS82PKEY_ex EVP_PKEY2PKCS8 EVP_PKEY_CTX_add1_hkdf_info EVP_PKEY_CTX_add1_tls1_prf_seed EVP_PKEY_CTX_ctrl EVP_PKEY_CTX_ctrl_str EVP_PKEY_CTX_ctrl_uint64 EVP_PKEY_CTX_dup EVP_PKEY_CTX_free EVP_PKEY_CTX_get0_dh_kdf_oid EVP_PKEY_CTX_get0_dh_kdf_ukm EVP_PKEY_CTX_get0_ecdh_kdf_ukm EVP_PKEY_CTX_get0_libctx EVP_PKEY_CTX_get0_peerkey EVP_PKEY_CTX_get0_pkey EVP_PKEY_CTX_get0_propq EVP_PKEY_CTX_get0_provider EVP_PKEY_CTX_get0_rsa_oaep_label EVP_PKEY_CTX_get1_id EVP_PKEY_CTX_get1_id_len EVP_PKEY_CTX_get_app_data EVP_PKEY_CTX_get_cb EVP_PKEY_CTX_get_data EVP_PKEY_CTX_get_dh_kdf_md EVP_PKEY_CTX_get_dh_kdf_outlen EVP_PKEY_CTX_get_dh_kdf_type EVP_PKEY_CTX_get_ecdh_cofactor_mode EVP_PKEY_CTX_get_ecdh_kdf_md EVP_PKEY_CTX_get_ecdh_kdf_outlen EVP_PKEY_CTX_get_ecdh_kdf_type EVP_PKEY_CTX_get_group_name EVP_PKEY_CTX_get_keygen_info EVP_PKEY_CTX_get_operation EVP_PKEY_CTX_get_params EVP_PKEY_CTX_get_rsa_mgf1_md EVP_PKEY_CTX_get_rsa_mgf1_md_name EVP_PKEY_CTX_get_rsa_oaep_md EVP_PKEY_CTX_get_rsa_oaep_md_name EVP_PKEY_CTX_get_rsa_padding EVP_PKEY_CTX_get_rsa_pss_saltlen EVP_PKEY_CTX_get_signature_md EVP_PKEY_CTX_gettable_params EVP_PKEY_CTX_hex2ctrl EVP_PKEY_CTX_is_a EVP_PKEY_CTX_md EVP_PKEY_CTX_new EVP_PKEY_CTX_new_from_name EVP_PKEY_CTX_new_from_pkey EVP_PKEY_CTX_new_id EVP_PKEY_CTX_set0_dh_kdf_oid EVP_PKEY_CTX_set0_dh_kdf_ukm EVP_PKEY_CTX_set0_ecdh_kdf_ukm EVP_PKEY_CTX_set0_keygen_info EVP_PKEY_CTX_set0_rsa_oaep_label EVP_PKEY_CTX_set1_hkdf_key EVP_PKEY_CTX_set1_hkdf_salt EVP_PKEY_CTX_set1_id EVP_PKEY_CTX_set1_pbe_pass EVP_PKEY_CTX_set1_rsa_keygen_pubexp EVP_PKEY_CTX_set1_scrypt_salt EVP_PKEY_CTX_set1_tls1_prf_secret EVP_PKEY_CTX_set_app_data EVP_PKEY_CTX_set_cb EVP_PKEY_CTX_set_data EVP_PKEY_CTX_set_dh_kdf_md EVP_PKEY_CTX_set_dh_kdf_outlen EVP_PKEY_CTX_set_dh_kdf_type EVP_PKEY_CTX_set_dh_nid EVP_PKEY_CTX_set_dh_pad EVP_PKEY_CTX_set_dh_paramgen_generator EVP_PKEY_CTX_set_dh_paramgen_gindex EVP_PKEY_CTX_set_dh_paramgen_prime_len EVP_PKEY_CTX_set_dh_paramgen_seed EVP_PKEY_CTX_set_dh_paramgen_subprime_len EVP_PKEY_CTX_set_dh_paramgen_type EVP_PKEY_CTX_set_dh_rfc5114 EVP_PKEY_CTX_set_dhx_rfc5114 EVP_PKEY_CTX_set_dsa_paramgen_bits EVP_PKEY_CTX_set_dsa_paramgen_gindex EVP_PKEY_CTX_set_dsa_paramgen_md EVP_PKEY_CTX_set_dsa_paramgen_md_props EVP_PKEY_CTX_set_dsa_paramgen_q_bits EVP_PKEY_CTX_set_dsa_paramgen_seed EVP_PKEY_CTX_set_dsa_paramgen_type EVP_PKEY_CTX_set_ec_param_enc EVP_PKEY_CTX_set_ec_paramgen_curve_nid EVP_PKEY_CTX_set_ecdh_cofactor_mode EVP_PKEY_CTX_set_ecdh_kdf_md EVP_PKEY_CTX_set_ecdh_kdf_outlen EVP_PKEY_CTX_set_ecdh_kdf_type EVP_PKEY_CTX_set_group_name EVP_PKEY_CTX_set_hkdf_md EVP_PKEY_CTX_set_hkdf_mode EVP_PKEY_CTX_set_kem_op EVP_PKEY_CTX_set_mac_key EVP_PKEY_CTX_set_params EVP_PKEY_CTX_set_rsa_keygen_bits EVP_PKEY_CTX_set_rsa_keygen_primes EVP_PKEY_CTX_set_rsa_keygen_pubexp EVP_PKEY_CTX_set_rsa_mgf1_md EVP_PKEY_CTX_set_rsa_mgf1_md_name EVP_PKEY_CTX_set_rsa_oaep_md EVP_PKEY_CTX_set_rsa_oaep_md_name EVP_PKEY_CTX_set_rsa_padding EVP_PKEY_CTX_set_rsa_pss_keygen_md EVP_PKEY_CTX_set_rsa_pss_keygen_md_name EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md_name EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen EVP_PKEY_CTX_set_rsa_pss_saltlen EVP_PKEY_CTX_set_scrypt_N EVP_PKEY_CTX_set_scrypt_maxmem_bytes EVP_PKEY_CTX_set_scrypt_p EVP_PKEY_CTX_set_scrypt_r EVP_PKEY_CTX_set_signature_md EVP_PKEY_CTX_set_tls1_prf_md EVP_PKEY_CTX_settable_params EVP_PKEY_CTX_str2ctrl EVP_PKEY_Q_keygen EVP_PKEY_add1_attr EVP_PKEY_add1_attr_by_NID EVP_PKEY_add1_attr_by_OBJ EVP_PKEY_add1_attr_by_txt EVP_PKEY_asn1_add0 EVP_PKEY_asn1_add_alias EVP_PKEY_asn1_copy EVP_PKEY_asn1_find EVP_PKEY_asn1_find_str EVP_PKEY_asn1_free EVP_PKEY_asn1_get0 EVP_PKEY_asn1_get0_info EVP_PKEY_asn1_get_count EVP_PKEY_asn1_new EVP_PKEY_asn1_set_check EVP_PKEY_asn1_set_ctrl EVP_PKEY_asn1_set_free EVP_PKEY_asn1_set_get_priv_key EVP_PKEY_asn1_set_get_pub_key EVP_PKEY_asn1_set_item EVP_PKEY_asn1_set_param EVP_PKEY_asn1_set_param_check EVP_PKEY_asn1_set_private EVP_PKEY_asn1_set_public EVP_PKEY_asn1_set_public_check EVP_PKEY_asn1_set_security_bits EVP_PKEY_asn1_set_set_priv_key EVP_PKEY_asn1_set_set_pub_key EVP_PKEY_asn1_set_siginf EVP_PKEY_assign EVP_PKEY_can_sign EVP_PKEY_check EVP_PKEY_cmp EVP_PKEY_cmp_parameters EVP_PKEY_copy_parameters EVP_PKEY_decapsulate EVP_PKEY_decapsulate_init EVP_PKEY_decrypt EVP_PKEY_decrypt_init EVP_PKEY_decrypt_init_ex EVP_PKEY_decrypt_old EVP_PKEY_delete_attr EVP_PKEY_derive EVP_PKEY_derive_init EVP_PKEY_derive_init_ex EVP_PKEY_derive_set_peer EVP_PKEY_derive_set_peer_ex EVP_PKEY_digestsign_supports_digest EVP_PKEY_dup EVP_PKEY_encapsulate EVP_PKEY_encapsulate_init EVP_PKEY_encrypt EVP_PKEY_encrypt_init EVP_PKEY_encrypt_init_ex EVP_PKEY_encrypt_old EVP_PKEY_eq EVP_PKEY_export EVP_PKEY_free EVP_PKEY_fromdata EVP_PKEY_fromdata_init EVP_PKEY_fromdata_settable EVP_PKEY_generate EVP_PKEY_get0 EVP_PKEY_get0_DH EVP_PKEY_get0_DSA EVP_PKEY_get0_EC_KEY EVP_PKEY_get0_RSA EVP_PKEY_get0_asn1 EVP_PKEY_get0_description EVP_PKEY_get0_engine EVP_PKEY_get0_hmac EVP_PKEY_get0_poly1305 EVP_PKEY_get0_provider EVP_PKEY_get0_siphash EVP_PKEY_get0_type_name EVP_PKEY_get1_DH EVP_PKEY_get1_DSA EVP_PKEY_get1_EC_KEY EVP_PKEY_get1_RSA EVP_PKEY_get1_encoded_public_key EVP_PKEY_get_attr EVP_PKEY_get_attr_by_NID EVP_PKEY_get_attr_by_OBJ EVP_PKEY_get_attr_count EVP_PKEY_get_base_id EVP_PKEY_get_bits EVP_PKEY_get_bn_param EVP_PKEY_get_default_digest_name EVP_PKEY_get_default_digest_nid EVP_PKEY_get_ec_point_conv_form EVP_PKEY_get_ex_data EVP_PKEY_get_field_type EVP_PKEY_get_group_name EVP_PKEY_get_id EVP_PKEY_get_int_param EVP_PKEY_get_octet_string_param EVP_PKEY_get_params EVP_PKEY_get_raw_private_key EVP_PKEY_get_raw_public_key EVP_PKEY_get_security_bits EVP_PKEY_get_size EVP_PKEY_get_size_t_param EVP_PKEY_get_utf8_string_param EVP_PKEY_gettable_params EVP_PKEY_is_a EVP_PKEY_keygen EVP_PKEY_keygen_init EVP_PKEY_meth_add0 EVP_PKEY_meth_copy EVP_PKEY_meth_find EVP_PKEY_meth_free EVP_PKEY_meth_get0 EVP_PKEY_meth_get0_info EVP_PKEY_meth_get_check EVP_PKEY_meth_get_cleanup EVP_PKEY_meth_get_copy EVP_PKEY_meth_get_count EVP_PKEY_meth_get_ctrl EVP_PKEY_meth_get_decrypt EVP_PKEY_meth_get_derive EVP_PKEY_meth_get_digest_custom EVP_PKEY_meth_get_digestsign EVP_PKEY_meth_get_digestverify EVP_PKEY_meth_get_encrypt EVP_PKEY_meth_get_init EVP_PKEY_meth_get_keygen EVP_PKEY_meth_get_param_check EVP_PKEY_meth_get_paramgen EVP_PKEY_meth_get_public_check EVP_PKEY_meth_get_sign EVP_PKEY_meth_get_signctx EVP_PKEY_meth_get_verify EVP_PKEY_meth_get_verify_recover EVP_PKEY_meth_get_verifyctx EVP_PKEY_meth_new EVP_PKEY_meth_remove EVP_PKEY_meth_set_check EVP_PKEY_meth_set_cleanup EVP_PKEY_meth_set_copy EVP_PKEY_meth_set_ctrl EVP_PKEY_meth_set_decrypt EVP_PKEY_meth_set_derive EVP_PKEY_meth_set_digest_custom EVP_PKEY_meth_set_digestsign EVP_PKEY_meth_set_digestverify EVP_PKEY_meth_set_encrypt EVP_PKEY_meth_set_init EVP_PKEY_meth_set_keygen EVP_PKEY_meth_set_param_check EVP_PKEY_meth_set_paramgen EVP_PKEY_meth_set_public_check EVP_PKEY_meth_set_sign EVP_PKEY_meth_set_signctx EVP_PKEY_meth_set_verify EVP_PKEY_meth_set_verify_recover EVP_PKEY_meth_set_verifyctx EVP_PKEY_missing_parameters EVP_PKEY_new EVP_PKEY_new_CMAC_key EVP_PKEY_new_mac_key EVP_PKEY_new_raw_private_key EVP_PKEY_new_raw_private_key_ex EVP_PKEY_new_raw_public_key EVP_PKEY_new_raw_public_key_ex EVP_PKEY_pairwise_check EVP_PKEY_param_check EVP_PKEY_param_check_quick EVP_PKEY_parameters_eq EVP_PKEY_paramgen EVP_PKEY_paramgen_init EVP_PKEY_print_params EVP_PKEY_print_params_fp EVP_PKEY_print_private EVP_PKEY_print_private_fp EVP_PKEY_print_public EVP_PKEY_print_public_fp EVP_PKEY_private_check EVP_PKEY_public_check EVP_PKEY_public_check_quick EVP_PKEY_save_parameters EVP_PKEY_set1_DH EVP_PKEY_set1_DSA EVP_PKEY_set1_EC_KEY EVP_PKEY_set1_RSA EVP_PKEY_set1_encoded_public_key EVP_PKEY_set1_engine EVP_PKEY_set_bn_param EVP_PKEY_set_ex_data EVP_PKEY_set_int_param EVP_PKEY_set_octet_string_param EVP_PKEY_set_params EVP_PKEY_set_size_t_param EVP_PKEY_set_type EVP_PKEY_set_type_by_keymgmt EVP_PKEY_set_type_str EVP_PKEY_set_utf8_string_param EVP_PKEY_settable_params EVP_PKEY_sign EVP_PKEY_sign_init EVP_PKEY_sign_init_ex EVP_PKEY_todata EVP_PKEY_type EVP_PKEY_type_names_do_all EVP_PKEY_up_ref EVP_PKEY_verify EVP_PKEY_verify_init EVP_PKEY_verify_init_ex EVP_PKEY_verify_recover EVP_PKEY_verify_recover_init EVP_PKEY_verify_recover_init_ex EVP_Q_digest EVP_Q_mac EVP_RAND_CTX_free EVP_RAND_CTX_get0_rand EVP_RAND_CTX_get_params EVP_RAND_CTX_gettable_params EVP_RAND_CTX_new EVP_RAND_CTX_set_params EVP_RAND_CTX_settable_params EVP_RAND_do_all_provided EVP_RAND_enable_locking EVP_RAND_fetch EVP_RAND_free EVP_RAND_generate EVP_RAND_get0_description EVP_RAND_get0_name EVP_RAND_get0_provider EVP_RAND_get_params EVP_RAND_get_state EVP_RAND_get_strength EVP_RAND_gettable_ctx_params EVP_RAND_gettable_params EVP_RAND_instantiate EVP_RAND_is_a EVP_RAND_names_do_all EVP_RAND_nonce EVP_RAND_reseed EVP_RAND_settable_ctx_params EVP_RAND_uninstantiate EVP_RAND_up_ref EVP_RAND_verify_zeroization EVP_SIGNATURE_do_all_provided EVP_SIGNATURE_fetch EVP_SIGNATURE_free EVP_SIGNATURE_get0_description EVP_SIGNATURE_get0_name EVP_SIGNATURE_get0_provider EVP_SIGNATURE_gettable_ctx_params EVP_SIGNATURE_is_a EVP_SIGNATURE_names_do_all EVP_SIGNATURE_settable_ctx_params EVP_SIGNATURE_up_ref EVP_SealFinal EVP_SealInit EVP_SignFinal EVP_SignFinal_ex EVP_VerifyFinal EVP_VerifyFinal_ex EVP_add_alg_module EVP_add_cipher EVP_add_digest EVP_aes_128_cbc EVP_aes_128_cbc_hmac_sha1 EVP_aes_128_cbc_hmac_sha256 EVP_aes_128_ccm EVP_aes_128_cfb1 EVP_aes_128_cfb128 EVP_aes_128_cfb8 EVP_aes_128_ctr EVP_aes_128_ecb EVP_aes_128_gcm EVP_aes_128_ocb EVP_aes_128_ofb EVP_aes_128_wrap EVP_aes_128_wrap_pad EVP_aes_128_xts EVP_aes_192_cbc EVP_aes_192_ccm EVP_aes_192_cfb1 EVP_aes_192_cfb128 EVP_aes_192_cfb8 EVP_aes_192_ctr EVP_aes_192_ecb EVP_aes_192_gcm EVP_aes_192_ocb EVP_aes_192_ofb EVP_aes_192_wrap EVP_aes_192_wrap_pad EVP_aes_256_cbc EVP_aes_256_cbc_hmac_sha1 EVP_aes_256_cbc_hmac_sha256 EVP_aes_256_ccm EVP_aes_256_cfb1 EVP_aes_256_cfb128 EVP_aes_256_cfb8 EVP_aes_256_ctr EVP_aes_256_ecb EVP_aes_256_gcm EVP_aes_256_ocb EVP_aes_256_ofb EVP_aes_256_wrap EVP_aes_256_wrap_pad EVP_aes_256_xts EVP_aria_128_cbc EVP_aria_128_ccm EVP_aria_128_cfb1 EVP_aria_128_cfb128 EVP_aria_128_cfb8 EVP_aria_128_ctr EVP_aria_128_ecb EVP_aria_128_gcm EVP_aria_128_ofb EVP_aria_192_cbc EVP_aria_192_ccm EVP_aria_192_cfb1 EVP_aria_192_cfb128 EVP_aria_192_cfb8 EVP_aria_192_ctr EVP_aria_192_ecb EVP_aria_192_gcm EVP_aria_192_ofb EVP_aria_256_cbc EVP_aria_256_ccm EVP_aria_256_cfb1 EVP_aria_256_cfb128 EVP_aria_256_cfb8 EVP_aria_256_ctr EVP_aria_256_ecb EVP_aria_256_gcm EVP_aria_256_ofb EVP_bf_cbc EVP_bf_cfb64 EVP_bf_ecb EVP_bf_ofb EVP_blake2b512 EVP_blake2s256 EVP_camellia_128_cbc EVP_camellia_128_cfb1 EVP_camellia_128_cfb128 EVP_camellia_128_cfb8 EVP_camellia_128_ctr EVP_camellia_128_ecb EVP_camellia_128_ofb EVP_camellia_192_cbc EVP_camellia_192_cfb1 EVP_camellia_192_cfb128 EVP_camellia_192_cfb8 EVP_camellia_192_ctr EVP_camellia_192_ecb EVP_camellia_192_ofb EVP_camellia_256_cbc EVP_camellia_256_cfb1 EVP_camellia_256_cfb128 EVP_camellia_256_cfb8 EVP_camellia_256_ctr EVP_camellia_256_ecb EVP_camellia_256_ofb EVP_cast5_cbc EVP_cast5_cfb64 EVP_cast5_ecb EVP_cast5_ofb EVP_chacha20 EVP_chacha20_poly1305 EVP_default_properties_enable_fips EVP_default_properties_is_fips_enabled EVP_des_cbc EVP_des_cfb1 EVP_des_cfb64 EVP_des_cfb8 EVP_des_ecb EVP_des_ede EVP_des_ede3 EVP_des_ede3_cbc EVP_des_ede3_cfb1 EVP_des_ede3_cfb64 EVP_des_ede3_cfb8 EVP_des_ede3_ecb EVP_des_ede3_ofb EVP_des_ede3_wrap EVP_des_ede_cbc EVP_des_ede_cfb64 EVP_des_ede_ecb EVP_des_ede_ofb EVP_des_ofb EVP_desx_cbc EVP_enc_null EVP_get_cipherbyname EVP_get_digestbyname EVP_get_pw_prompt EVP_idea_cbc EVP_idea_cfb64 EVP_idea_ecb EVP_idea_ofb EVP_md4 EVP_md5 EVP_md5_sha1 EVP_md_null EVP_mdc2 EVP_rc2_40_cbc EVP_rc2_64_cbc EVP_rc2_cbc EVP_rc2_cfb64 EVP_rc2_ecb EVP_rc2_ofb EVP_rc4 EVP_rc4_40 EVP_rc4_hmac_md5 EVP_read_pw_string EVP_read_pw_string_min EVP_ripemd160 EVP_seed_cbc EVP_seed_cfb128 EVP_seed_ecb EVP_seed_ofb EVP_set_default_properties EVP_set_pw_prompt EVP_sha1 EVP_sha224 EVP_sha256 EVP_sha384 EVP_sha3_224 EVP_sha3_256 EVP_sha3_384 EVP_sha3_512 EVP_sha512 EVP_sha512_224 EVP_sha512_256 EVP_shake128 EVP_shake256 EVP_sm3 EVP_sm4_cbc EVP_sm4_cfb128 EVP_sm4_ctr EVP_sm4_ecb EVP_sm4_ofb EVP_whirlpool EXTENDED_KEY_USAGE_free EXTENDED_KEY_USAGE_it EXTENDED_KEY_USAGE_new GENERAL_NAMES_free GENERAL_NAMES_it GENERAL_NAMES_new GENERAL_NAME_cmp GENERAL_NAME_dup GENERAL_NAME_free GENERAL_NAME_get0_otherName GENERAL_NAME_get0_value GENERAL_NAME_it GENERAL_NAME_new GENERAL_NAME_print GENERAL_NAME_set0_othername GENERAL_NAME_set0_value GENERAL_SUBTREE_free GENERAL_SUBTREE_it GENERAL_SUBTREE_new HMAC HMAC_CTX_copy HMAC_CTX_free HMAC_CTX_get_md HMAC_CTX_new HMAC_CTX_reset HMAC_CTX_set_flags HMAC_Final HMAC_Init HMAC_Init_ex HMAC_Update HMAC_size IDEA_cbc_encrypt IDEA_cfb64_encrypt IDEA_ecb_encrypt IDEA_encrypt IDEA_ofb64_encrypt IDEA_options IDEA_set_decrypt_key IDEA_set_encrypt_key INT32_it INT64_it IPAddressChoice_free IPAddressChoice_it IPAddressChoice_new IPAddressFamily_free IPAddressFamily_it IPAddressFamily_new IPAddressOrRange_free IPAddressOrRange_it IPAddressOrRange_new IPAddressRange_free IPAddressRange_it IPAddressRange_new ISSUER_SIGN_TOOL_free ISSUER_SIGN_TOOL_it ISSUER_SIGN_TOOL_new ISSUING_DIST_POINT_free ISSUING_DIST_POINT_it ISSUING_DIST_POINT_new LONG_it MD4 MD4_Final MD4_Init MD4_Transform MD4_Update MD5 MD5_Final MD5_Init MD5_Transform MD5_Update MDC2 MDC2_Final MDC2_Init MDC2_Update NAME_CONSTRAINTS_check NAME_CONSTRAINTS_check_CN NAME_CONSTRAINTS_free NAME_CONSTRAINTS_it NAME_CONSTRAINTS_new NAMING_AUTHORITY_free NAMING_AUTHORITY_get0_authorityId NAMING_AUTHORITY_get0_authorityText NAMING_AUTHORITY_get0_authorityURL NAMING_AUTHORITY_it NAMING_AUTHORITY_new NAMING_AUTHORITY_set0_authorityId NAMING_AUTHORITY_set0_authorityText NAMING_AUTHORITY_set0_authorityURL NCONF_WIN32 NCONF_default NCONF_dump_bio NCONF_dump_fp NCONF_free NCONF_free_data NCONF_get0_libctx NCONF_get_number_e NCONF_get_section NCONF_get_section_names NCONF_get_string NCONF_load NCONF_load_bio NCONF_load_fp NCONF_new NCONF_new_ex NETSCAPE_CERT_SEQUENCE_free NETSCAPE_CERT_SEQUENCE_it NETSCAPE_CERT_SEQUENCE_new NETSCAPE_SPKAC_free NETSCAPE_SPKAC_it NETSCAPE_SPKAC_new NETSCAPE_SPKI_b64_decode NETSCAPE_SPKI_b64_encode NETSCAPE_SPKI_free NETSCAPE_SPKI_get_pubkey NETSCAPE_SPKI_it NETSCAPE_SPKI_new NETSCAPE_SPKI_print NETSCAPE_SPKI_set_pubkey NETSCAPE_SPKI_sign NETSCAPE_SPKI_verify NOTICEREF_free NOTICEREF_it NOTICEREF_new OBJ_NAME_add OBJ_NAME_cleanup OBJ_NAME_do_all OBJ_NAME_do_all_sorted OBJ_NAME_get OBJ_NAME_init OBJ_NAME_new_index OBJ_NAME_remove OBJ_add_object OBJ_add_sigid OBJ_bsearch_ OBJ_bsearch_ex_ OBJ_cmp OBJ_create OBJ_create_objects OBJ_dup OBJ_find_sigid_algs OBJ_find_sigid_by_algs OBJ_get0_data OBJ_length OBJ_ln2nid OBJ_new_nid OBJ_nid2ln OBJ_nid2obj OBJ_nid2sn OBJ_obj2nid OBJ_obj2txt OBJ_sigid_free OBJ_sn2nid OBJ_txt2nid OBJ_txt2obj OCSP_BASICRESP_add1_ext_i2d OCSP_BASICRESP_add_ext OCSP_BASICRESP_delete_ext OCSP_BASICRESP_free OCSP_BASICRESP_get1_ext_d2i OCSP_BASICRESP_get_ext OCSP_BASICRESP_get_ext_by_NID OCSP_BASICRESP_get_ext_by_OBJ OCSP_BASICRESP_get_ext_by_critical OCSP_BASICRESP_get_ext_count OCSP_BASICRESP_it OCSP_BASICRESP_new OCSP_CERTID_dup OCSP_CERTID_free OCSP_CERTID_it OCSP_CERTID_new OCSP_CERTSTATUS_free OCSP_CERTSTATUS_it OCSP_CERTSTATUS_new OCSP_CRLID_free OCSP_CRLID_it OCSP_CRLID_new OCSP_ONEREQ_add1_ext_i2d OCSP_ONEREQ_add_ext OCSP_ONEREQ_delete_ext OCSP_ONEREQ_free OCSP_ONEREQ_get1_ext_d2i OCSP_ONEREQ_get_ext OCSP_ONEREQ_get_ext_by_NID OCSP_ONEREQ_get_ext_by_OBJ OCSP_ONEREQ_get_ext_by_critical OCSP_ONEREQ_get_ext_count OCSP_ONEREQ_it OCSP_ONEREQ_new OCSP_REQINFO_free OCSP_REQINFO_it OCSP_REQINFO_new OCSP_REQUEST_add1_ext_i2d OCSP_REQUEST_add_ext OCSP_REQUEST_delete_ext OCSP_REQUEST_free OCSP_REQUEST_get1_ext_d2i OCSP_REQUEST_get_ext OCSP_REQUEST_get_ext_by_NID OCSP_REQUEST_get_ext_by_OBJ OCSP_REQUEST_get_ext_by_critical OCSP_REQUEST_get_ext_count OCSP_REQUEST_it OCSP_REQUEST_new OCSP_REQUEST_print OCSP_RESPBYTES_free OCSP_RESPBYTES_it OCSP_RESPBYTES_new OCSP_RESPDATA_free OCSP_RESPDATA_it OCSP_RESPDATA_new OCSP_RESPID_free OCSP_RESPID_it OCSP_RESPID_match OCSP_RESPID_match_ex OCSP_RESPID_new OCSP_RESPID_set_by_key OCSP_RESPID_set_by_key_ex OCSP_RESPID_set_by_name OCSP_RESPONSE_free OCSP_RESPONSE_it OCSP_RESPONSE_new OCSP_RESPONSE_print OCSP_REVOKEDINFO_free OCSP_REVOKEDINFO_it OCSP_REVOKEDINFO_new OCSP_SERVICELOC_free OCSP_SERVICELOC_it OCSP_SERVICELOC_new OCSP_SIGNATURE_free OCSP_SIGNATURE_it OCSP_SIGNATURE_new OCSP_SINGLERESP_add1_ext_i2d OCSP_SINGLERESP_add_ext OCSP_SINGLERESP_delete_ext OCSP_SINGLERESP_free OCSP_SINGLERESP_get0_id OCSP_SINGLERESP_get1_ext_d2i OCSP_SINGLERESP_get_ext OCSP_SINGLERESP_get_ext_by_NID OCSP_SINGLERESP_get_ext_by_OBJ OCSP_SINGLERESP_get_ext_by_critical OCSP_SINGLERESP_get_ext_count OCSP_SINGLERESP_it OCSP_SINGLERESP_new OCSP_accept_responses_new OCSP_archive_cutoff_new OCSP_basic_add1_cert OCSP_basic_add1_nonce OCSP_basic_add1_status OCSP_basic_sign OCSP_basic_sign_ctx OCSP_basic_verify OCSP_cert_id_new OCSP_cert_status_str OCSP_cert_to_id OCSP_check_nonce OCSP_check_validity OCSP_copy_nonce OCSP_crlID_new OCSP_crl_reason_str OCSP_id_cmp OCSP_id_get0_info OCSP_id_issuer_cmp OCSP_onereq_get0_id OCSP_request_add0_id OCSP_request_add1_cert OCSP_request_add1_nonce OCSP_request_is_signed OCSP_request_onereq_count OCSP_request_onereq_get0 OCSP_request_set1_name OCSP_request_sign OCSP_request_verify OCSP_resp_count OCSP_resp_find OCSP_resp_find_status OCSP_resp_get0 OCSP_resp_get0_certs OCSP_resp_get0_id OCSP_resp_get0_produced_at OCSP_resp_get0_respdata OCSP_resp_get0_signature OCSP_resp_get0_signer OCSP_resp_get0_tbs_sigalg OCSP_resp_get1_id OCSP_response_create OCSP_response_get1_basic OCSP_response_status OCSP_response_status_str OCSP_sendreq_bio OCSP_sendreq_new OCSP_single_get0_status OCSP_url_svcloc_new OPENSSL_DIR_end OPENSSL_DIR_read OPENSSL_INIT_free OPENSSL_INIT_new OPENSSL_INIT_set_config_appname OPENSSL_INIT_set_config_file_flags OPENSSL_INIT_set_config_filename OPENSSL_LH_delete OPENSSL_LH_doall OPENSSL_LH_doall_arg OPENSSL_LH_error OPENSSL_LH_flush OPENSSL_LH_free OPENSSL_LH_get_down_load OPENSSL_LH_insert OPENSSL_LH_new OPENSSL_LH_node_stats OPENSSL_LH_node_stats_bio OPENSSL_LH_node_usage_stats OPENSSL_LH_node_usage_stats_bio OPENSSL_LH_num_items OPENSSL_LH_retrieve OPENSSL_LH_set_down_load OPENSSL_LH_stats OPENSSL_LH_stats_bio OPENSSL_LH_strhash OPENSSL_asc2uni OPENSSL_atexit OPENSSL_buf2hexstr OPENSSL_buf2hexstr_ex OPENSSL_cleanse OPENSSL_cleanup OPENSSL_config OPENSSL_die OPENSSL_gmtime OPENSSL_gmtime_adj OPENSSL_gmtime_diff OPENSSL_hexchar2int OPENSSL_hexstr2buf OPENSSL_hexstr2buf_ex OPENSSL_info OPENSSL_init OPENSSL_init_crypto OPENSSL_isservice OPENSSL_issetugid OPENSSL_load_builtin_modules OPENSSL_sk_deep_copy OPENSSL_sk_delete OPENSSL_sk_delete_ptr OPENSSL_sk_dup OPENSSL_sk_find OPENSSL_sk_find_all OPENSSL_sk_find_ex OPENSSL_sk_free OPENSSL_sk_insert OPENSSL_sk_is_sorted OPENSSL_sk_new OPENSSL_sk_new_null OPENSSL_sk_new_reserve OPENSSL_sk_num OPENSSL_sk_pop OPENSSL_sk_pop_free OPENSSL_sk_push OPENSSL_sk_reserve OPENSSL_sk_set OPENSSL_sk_set_cmp_func OPENSSL_sk_shift OPENSSL_sk_sort OPENSSL_sk_unshift OPENSSL_sk_value OPENSSL_sk_zero OPENSSL_strcasecmp OPENSSL_strlcat OPENSSL_strlcpy OPENSSL_strncasecmp OPENSSL_strnlen OPENSSL_thread_stop OPENSSL_thread_stop_ex OPENSSL_uni2asc OPENSSL_uni2utf8 OPENSSL_utf82uni OPENSSL_version_build_metadata OPENSSL_version_major OPENSSL_version_minor OPENSSL_version_patch OPENSSL_version_pre_release OSSL_CMP_CTX_build_cert_chain OSSL_CMP_CTX_free OSSL_CMP_CTX_get0_newCert OSSL_CMP_CTX_get0_newPkey OSSL_CMP_CTX_get0_statusString OSSL_CMP_CTX_get0_trustedStore OSSL_CMP_CTX_get0_untrusted OSSL_CMP_CTX_get1_caPubs OSSL_CMP_CTX_get1_extraCertsIn OSSL_CMP_CTX_get1_newChain OSSL_CMP_CTX_get_certConf_cb_arg OSSL_CMP_CTX_get_failInfoCode OSSL_CMP_CTX_get_http_cb_arg OSSL_CMP_CTX_get_option OSSL_CMP_CTX_get_status OSSL_CMP_CTX_get_transfer_cb_arg OSSL_CMP_CTX_new OSSL_CMP_CTX_print_errors OSSL_CMP_CTX_push0_geninfo_ITAV OSSL_CMP_CTX_push0_genm_ITAV OSSL_CMP_CTX_push0_policy OSSL_CMP_CTX_push1_subjectAltName OSSL_CMP_CTX_reinit OSSL_CMP_CTX_reqExtensions_have_SAN OSSL_CMP_CTX_reset_geninfo_ITAVs OSSL_CMP_CTX_server_perform OSSL_CMP_CTX_set0_newPkey OSSL_CMP_CTX_set0_reqExtensions OSSL_CMP_CTX_set0_trustedStore OSSL_CMP_CTX_set1_cert OSSL_CMP_CTX_set1_expected_sender OSSL_CMP_CTX_set1_extraCertsOut OSSL_CMP_CTX_set1_issuer OSSL_CMP_CTX_set1_no_proxy OSSL_CMP_CTX_set1_oldCert OSSL_CMP_CTX_set1_p10CSR OSSL_CMP_CTX_set1_pkey OSSL_CMP_CTX_set1_proxy OSSL_CMP_CTX_set1_recipient OSSL_CMP_CTX_set1_referenceValue OSSL_CMP_CTX_set1_secretValue OSSL_CMP_CTX_set1_senderNonce OSSL_CMP_CTX_set1_server OSSL_CMP_CTX_set1_serverPath OSSL_CMP_CTX_set1_srvCert OSSL_CMP_CTX_set1_subjectName OSSL_CMP_CTX_set1_transactionID OSSL_CMP_CTX_set1_untrusted OSSL_CMP_CTX_set_certConf_cb OSSL_CMP_CTX_set_certConf_cb_arg OSSL_CMP_CTX_set_http_cb OSSL_CMP_CTX_set_http_cb_arg OSSL_CMP_CTX_set_log_cb OSSL_CMP_CTX_set_option OSSL_CMP_CTX_set_serverPort OSSL_CMP_CTX_set_transfer_cb OSSL_CMP_CTX_set_transfer_cb_arg OSSL_CMP_CTX_setup_CRM OSSL_CMP_CTX_snprint_PKIStatus OSSL_CMP_HDR_get0_recipNonce OSSL_CMP_HDR_get0_transactionID OSSL_CMP_ITAV_create OSSL_CMP_ITAV_dup OSSL_CMP_ITAV_free OSSL_CMP_ITAV_get0_type OSSL_CMP_ITAV_get0_value OSSL_CMP_ITAV_push0_stack_item OSSL_CMP_ITAV_set0 OSSL_CMP_MSG_dup OSSL_CMP_MSG_free OSSL_CMP_MSG_get0_header OSSL_CMP_MSG_get_bodytype OSSL_CMP_MSG_http_perform OSSL_CMP_MSG_it OSSL_CMP_MSG_read OSSL_CMP_MSG_update_recipNonce OSSL_CMP_MSG_update_transactionID OSSL_CMP_MSG_write OSSL_CMP_PKIHEADER_free OSSL_CMP_PKIHEADER_it OSSL_CMP_PKIHEADER_new OSSL_CMP_PKISI_dup OSSL_CMP_PKISI_free OSSL_CMP_PKISI_it OSSL_CMP_PKISI_new OSSL_CMP_PKISTATUS_it OSSL_CMP_SRV_CTX_free OSSL_CMP_SRV_CTX_get0_cmp_ctx OSSL_CMP_SRV_CTX_get0_custom_ctx OSSL_CMP_SRV_CTX_init OSSL_CMP_SRV_CTX_new OSSL_CMP_SRV_CTX_set_accept_raverified OSSL_CMP_SRV_CTX_set_accept_unprotected OSSL_CMP_SRV_CTX_set_grant_implicit_confirm OSSL_CMP_SRV_CTX_set_send_unprotected_errors OSSL_CMP_SRV_process_request OSSL_CMP_STATUSINFO_new OSSL_CMP_certConf_cb OSSL_CMP_exec_GENM_ses OSSL_CMP_exec_RR_ses OSSL_CMP_exec_certreq OSSL_CMP_log_close OSSL_CMP_log_open OSSL_CMP_print_errors_cb OSSL_CMP_print_to_bio OSSL_CMP_snprint_PKIStatusInfo OSSL_CMP_try_certreq OSSL_CMP_validate_cert_path OSSL_CMP_validate_msg OSSL_CRMF_CERTID_dup OSSL_CRMF_CERTID_free OSSL_CRMF_CERTID_gen OSSL_CRMF_CERTID_get0_issuer OSSL_CRMF_CERTID_get0_serialNumber OSSL_CRMF_CERTID_it OSSL_CRMF_CERTID_new OSSL_CRMF_CERTTEMPLATE_fill OSSL_CRMF_CERTTEMPLATE_free OSSL_CRMF_CERTTEMPLATE_get0_extensions OSSL_CRMF_CERTTEMPLATE_get0_issuer OSSL_CRMF_CERTTEMPLATE_get0_serialNumber OSSL_CRMF_CERTTEMPLATE_get0_subject OSSL_CRMF_CERTTEMPLATE_it OSSL_CRMF_CERTTEMPLATE_new OSSL_CRMF_ENCRYPTEDVALUE_free OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert OSSL_CRMF_ENCRYPTEDVALUE_it OSSL_CRMF_ENCRYPTEDVALUE_new OSSL_CRMF_MSGS_free OSSL_CRMF_MSGS_it OSSL_CRMF_MSGS_new OSSL_CRMF_MSGS_verify_popo OSSL_CRMF_MSG_PKIPublicationInfo_push0_SinglePubInfo OSSL_CRMF_MSG_create_popo OSSL_CRMF_MSG_dup OSSL_CRMF_MSG_free OSSL_CRMF_MSG_get0_regCtrl_authenticator OSSL_CRMF_MSG_get0_regCtrl_oldCertID OSSL_CRMF_MSG_get0_regCtrl_pkiPublicationInfo OSSL_CRMF_MSG_get0_regCtrl_protocolEncrKey OSSL_CRMF_MSG_get0_regCtrl_regToken OSSL_CRMF_MSG_get0_regInfo_certReq OSSL_CRMF_MSG_get0_regInfo_utf8Pairs OSSL_CRMF_MSG_get0_tmpl OSSL_CRMF_MSG_get_certReqId OSSL_CRMF_MSG_it OSSL_CRMF_MSG_new OSSL_CRMF_MSG_push0_extension OSSL_CRMF_MSG_set0_SinglePubInfo OSSL_CRMF_MSG_set0_extensions OSSL_CRMF_MSG_set0_validity OSSL_CRMF_MSG_set1_regCtrl_authenticator OSSL_CRMF_MSG_set1_regCtrl_oldCertID OSSL_CRMF_MSG_set1_regCtrl_pkiPublicationInfo OSSL_CRMF_MSG_set1_regCtrl_protocolEncrKey OSSL_CRMF_MSG_set1_regCtrl_regToken OSSL_CRMF_MSG_set1_regInfo_certReq OSSL_CRMF_MSG_set1_regInfo_utf8Pairs OSSL_CRMF_MSG_set_PKIPublicationInfo_action OSSL_CRMF_MSG_set_certReqId OSSL_CRMF_PBMPARAMETER_free OSSL_CRMF_PBMPARAMETER_it OSSL_CRMF_PBMPARAMETER_new OSSL_CRMF_PKIPUBLICATIONINFO_free OSSL_CRMF_PKIPUBLICATIONINFO_it OSSL_CRMF_PKIPUBLICATIONINFO_new OSSL_CRMF_SINGLEPUBINFO_free OSSL_CRMF_SINGLEPUBINFO_it OSSL_CRMF_SINGLEPUBINFO_new OSSL_CRMF_pbm_new OSSL_CRMF_pbmp_new OSSL_DECODER_CTX_add_decoder OSSL_DECODER_CTX_add_extra OSSL_DECODER_CTX_free OSSL_DECODER_CTX_get_cleanup OSSL_DECODER_CTX_get_construct OSSL_DECODER_CTX_get_construct_data OSSL_DECODER_CTX_get_num_decoders OSSL_DECODER_CTX_new OSSL_DECODER_CTX_new_for_pkey OSSL_DECODER_CTX_set_cleanup OSSL_DECODER_CTX_set_construct OSSL_DECODER_CTX_set_construct_data OSSL_DECODER_CTX_set_input_structure OSSL_DECODER_CTX_set_input_type OSSL_DECODER_CTX_set_params OSSL_DECODER_CTX_set_passphrase OSSL_DECODER_CTX_set_passphrase_cb OSSL_DECODER_CTX_set_passphrase_ui OSSL_DECODER_CTX_set_pem_password_cb OSSL_DECODER_CTX_set_selection OSSL_DECODER_INSTANCE_get_decoder OSSL_DECODER_INSTANCE_get_decoder_ctx OSSL_DECODER_INSTANCE_get_input_structure OSSL_DECODER_INSTANCE_get_input_type OSSL_DECODER_do_all_provided OSSL_DECODER_export OSSL_DECODER_fetch OSSL_DECODER_free OSSL_DECODER_from_bio OSSL_DECODER_from_data OSSL_DECODER_from_fp OSSL_DECODER_get0_description OSSL_DECODER_get0_name OSSL_DECODER_get0_properties OSSL_DECODER_get0_provider OSSL_DECODER_get_params OSSL_DECODER_gettable_params OSSL_DECODER_is_a OSSL_DECODER_names_do_all OSSL_DECODER_settable_ctx_params OSSL_DECODER_up_ref OSSL_EC_curve_nid2name OSSL_ENCODER_CTX_add_encoder OSSL_ENCODER_CTX_add_extra OSSL_ENCODER_CTX_free OSSL_ENCODER_CTX_get_num_encoders OSSL_ENCODER_CTX_new OSSL_ENCODER_CTX_new_for_pkey OSSL_ENCODER_CTX_set_cipher OSSL_ENCODER_CTX_set_cleanup OSSL_ENCODER_CTX_set_construct OSSL_ENCODER_CTX_set_construct_data OSSL_ENCODER_CTX_set_output_structure OSSL_ENCODER_CTX_set_output_type OSSL_ENCODER_CTX_set_params OSSL_ENCODER_CTX_set_passphrase OSSL_ENCODER_CTX_set_passphrase_cb OSSL_ENCODER_CTX_set_passphrase_ui OSSL_ENCODER_CTX_set_pem_password_cb OSSL_ENCODER_CTX_set_selection OSSL_ENCODER_INSTANCE_get_encoder OSSL_ENCODER_INSTANCE_get_encoder_ctx OSSL_ENCODER_INSTANCE_get_output_structure OSSL_ENCODER_INSTANCE_get_output_type OSSL_ENCODER_do_all_provided OSSL_ENCODER_fetch OSSL_ENCODER_free OSSL_ENCODER_get0_description OSSL_ENCODER_get0_name OSSL_ENCODER_get0_properties OSSL_ENCODER_get0_provider OSSL_ENCODER_get_params OSSL_ENCODER_gettable_params OSSL_ENCODER_is_a OSSL_ENCODER_names_do_all OSSL_ENCODER_settable_ctx_params OSSL_ENCODER_to_bio OSSL_ENCODER_to_data OSSL_ENCODER_to_fp OSSL_ENCODER_up_ref OSSL_ESS_check_signing_certs OSSL_ESS_signing_cert_new_init OSSL_ESS_signing_cert_v2_new_init OSSL_HTTP_REQ_CTX_add1_header OSSL_HTTP_REQ_CTX_exchange OSSL_HTTP_REQ_CTX_free OSSL_HTTP_REQ_CTX_get0_mem_bio OSSL_HTTP_REQ_CTX_get_resp_len OSSL_HTTP_REQ_CTX_nbio OSSL_HTTP_REQ_CTX_nbio_d2i OSSL_HTTP_REQ_CTX_new OSSL_HTTP_REQ_CTX_set1_req OSSL_HTTP_REQ_CTX_set_expected OSSL_HTTP_REQ_CTX_set_max_response_length OSSL_HTTP_REQ_CTX_set_request_line OSSL_HTTP_adapt_proxy OSSL_HTTP_close OSSL_HTTP_exchange OSSL_HTTP_get OSSL_HTTP_is_alive OSSL_HTTP_open OSSL_HTTP_parse_url OSSL_HTTP_proxy_connect OSSL_HTTP_set1_request OSSL_HTTP_transfer OSSL_LIB_CTX_free OSSL_LIB_CTX_get0_global_default OSSL_LIB_CTX_load_config OSSL_LIB_CTX_new OSSL_LIB_CTX_new_child OSSL_LIB_CTX_new_from_dispatch OSSL_LIB_CTX_set0_default OSSL_PARAM_BLD_free OSSL_PARAM_BLD_new OSSL_PARAM_BLD_push_BN OSSL_PARAM_BLD_push_BN_pad OSSL_PARAM_BLD_push_double OSSL_PARAM_BLD_push_int OSSL_PARAM_BLD_push_int32 OSSL_PARAM_BLD_push_int64 OSSL_PARAM_BLD_push_long OSSL_PARAM_BLD_push_octet_ptr OSSL_PARAM_BLD_push_octet_string OSSL_PARAM_BLD_push_size_t OSSL_PARAM_BLD_push_time_t OSSL_PARAM_BLD_push_uint OSSL_PARAM_BLD_push_uint32 OSSL_PARAM_BLD_push_uint64 OSSL_PARAM_BLD_push_ulong OSSL_PARAM_BLD_push_utf8_ptr OSSL_PARAM_BLD_push_utf8_string OSSL_PARAM_BLD_to_param OSSL_PARAM_allocate_from_text OSSL_PARAM_construct_BN OSSL_PARAM_construct_double OSSL_PARAM_construct_end OSSL_PARAM_construct_int OSSL_PARAM_construct_int32 OSSL_PARAM_construct_int64 OSSL_PARAM_construct_long OSSL_PARAM_construct_octet_ptr OSSL_PARAM_construct_octet_string OSSL_PARAM_construct_size_t OSSL_PARAM_construct_time_t OSSL_PARAM_construct_uint OSSL_PARAM_construct_uint32 OSSL_PARAM_construct_uint64 OSSL_PARAM_construct_ulong OSSL_PARAM_construct_utf8_ptr OSSL_PARAM_construct_utf8_string OSSL_PARAM_dup OSSL_PARAM_free OSSL_PARAM_get_BN OSSL_PARAM_get_double OSSL_PARAM_get_int OSSL_PARAM_get_int32 OSSL_PARAM_get_int64 OSSL_PARAM_get_long OSSL_PARAM_get_octet_ptr OSSL_PARAM_get_octet_string OSSL_PARAM_get_octet_string_ptr OSSL_PARAM_get_size_t OSSL_PARAM_get_time_t OSSL_PARAM_get_uint OSSL_PARAM_get_uint32 OSSL_PARAM_get_uint64 OSSL_PARAM_get_ulong OSSL_PARAM_get_utf8_ptr OSSL_PARAM_get_utf8_string OSSL_PARAM_get_utf8_string_ptr OSSL_PARAM_locate OSSL_PARAM_locate_const OSSL_PARAM_merge OSSL_PARAM_modified OSSL_PARAM_set_BN OSSL_PARAM_set_all_unmodified OSSL_PARAM_set_double OSSL_PARAM_set_int OSSL_PARAM_set_int32 OSSL_PARAM_set_int64 OSSL_PARAM_set_long OSSL_PARAM_set_octet_ptr OSSL_PARAM_set_octet_string OSSL_PARAM_set_size_t OSSL_PARAM_set_time_t OSSL_PARAM_set_uint OSSL_PARAM_set_uint32 OSSL_PARAM_set_uint64 OSSL_PARAM_set_ulong OSSL_PARAM_set_utf8_ptr OSSL_PARAM_set_utf8_string OSSL_PROVIDER_add_builtin OSSL_PROVIDER_available OSSL_PROVIDER_do_all OSSL_PROVIDER_get0_dispatch OSSL_PROVIDER_get0_name OSSL_PROVIDER_get0_provider_ctx OSSL_PROVIDER_get_capabilities OSSL_PROVIDER_get_params OSSL_PROVIDER_gettable_params OSSL_PROVIDER_load OSSL_PROVIDER_query_operation OSSL_PROVIDER_self_test OSSL_PROVIDER_set_default_search_path OSSL_PROVIDER_try_load OSSL_PROVIDER_unload OSSL_PROVIDER_unquery_operation OSSL_SELF_TEST_free OSSL_SELF_TEST_get_callback OSSL_SELF_TEST_new OSSL_SELF_TEST_onbegin OSSL_SELF_TEST_oncorrupt_byte OSSL_SELF_TEST_onend OSSL_SELF_TEST_set_callback OSSL_STORE_INFO_free OSSL_STORE_INFO_get0_CERT OSSL_STORE_INFO_get0_CRL OSSL_STORE_INFO_get0_NAME OSSL_STORE_INFO_get0_NAME_description OSSL_STORE_INFO_get0_PARAMS OSSL_STORE_INFO_get0_PKEY OSSL_STORE_INFO_get0_PUBKEY OSSL_STORE_INFO_get0_data OSSL_STORE_INFO_get1_CERT OSSL_STORE_INFO_get1_CRL OSSL_STORE_INFO_get1_NAME OSSL_STORE_INFO_get1_NAME_description OSSL_STORE_INFO_get1_PARAMS OSSL_STORE_INFO_get1_PKEY OSSL_STORE_INFO_get1_PUBKEY OSSL_STORE_INFO_get_type OSSL_STORE_INFO_new OSSL_STORE_INFO_new_CERT OSSL_STORE_INFO_new_CRL OSSL_STORE_INFO_new_NAME OSSL_STORE_INFO_new_PARAMS OSSL_STORE_INFO_new_PKEY OSSL_STORE_INFO_new_PUBKEY OSSL_STORE_INFO_set0_NAME_description OSSL_STORE_INFO_type_string OSSL_STORE_LOADER_do_all_provided OSSL_STORE_LOADER_fetch OSSL_STORE_LOADER_free OSSL_STORE_LOADER_get0_description OSSL_STORE_LOADER_get0_engine OSSL_STORE_LOADER_get0_properties OSSL_STORE_LOADER_get0_provider OSSL_STORE_LOADER_get0_scheme OSSL_STORE_LOADER_is_a OSSL_STORE_LOADER_names_do_all OSSL_STORE_LOADER_new OSSL_STORE_LOADER_set_attach OSSL_STORE_LOADER_set_close OSSL_STORE_LOADER_set_ctrl OSSL_STORE_LOADER_set_eof OSSL_STORE_LOADER_set_error OSSL_STORE_LOADER_set_expect OSSL_STORE_LOADER_set_find OSSL_STORE_LOADER_set_load OSSL_STORE_LOADER_set_open OSSL_STORE_LOADER_set_open_ex OSSL_STORE_LOADER_up_ref OSSL_STORE_SEARCH_by_alias OSSL_STORE_SEARCH_by_issuer_serial OSSL_STORE_SEARCH_by_key_fingerprint OSSL_STORE_SEARCH_by_name OSSL_STORE_SEARCH_free OSSL_STORE_SEARCH_get0_bytes OSSL_STORE_SEARCH_get0_digest OSSL_STORE_SEARCH_get0_name OSSL_STORE_SEARCH_get0_serial OSSL_STORE_SEARCH_get0_string OSSL_STORE_SEARCH_get_type OSSL_STORE_attach OSSL_STORE_close OSSL_STORE_ctrl OSSL_STORE_do_all_loaders OSSL_STORE_eof OSSL_STORE_error OSSL_STORE_expect OSSL_STORE_find OSSL_STORE_load OSSL_STORE_open OSSL_STORE_open_ex OSSL_STORE_register_loader OSSL_STORE_supports_search OSSL_STORE_unregister_loader OSSL_STORE_vctrl OSSL_parse_url OSSL_trace_begin OSSL_trace_enabled OSSL_trace_end OSSL_trace_get_category_name OSSL_trace_get_category_num OSSL_trace_set_callback OSSL_trace_set_channel OSSL_trace_set_prefix OSSL_trace_set_suffix OTHERNAME_cmp OTHERNAME_free OTHERNAME_it OTHERNAME_new OpenSSL_version OpenSSL_version_num PBE2PARAM_free PBE2PARAM_it PBE2PARAM_new PBEPARAM_free PBEPARAM_it PBEPARAM_new PBKDF2PARAM_free PBKDF2PARAM_it PBKDF2PARAM_new PEM_ASN1_read PEM_ASN1_read_bio PEM_ASN1_write PEM_ASN1_write_bio PEM_SignFinal PEM_SignInit PEM_SignUpdate PEM_X509_INFO_read PEM_X509_INFO_read_bio PEM_X509_INFO_read_bio_ex PEM_X509_INFO_read_ex PEM_X509_INFO_write_bio PEM_bytes_read_bio PEM_bytes_read_bio_secmem PEM_def_callback PEM_dek_info PEM_do_header PEM_get_EVP_CIPHER_INFO PEM_proc_type PEM_read PEM_read_CMS PEM_read_DHparams PEM_read_DSAPrivateKey PEM_read_DSA_PUBKEY PEM_read_DSAparams PEM_read_ECPKParameters PEM_read_ECPrivateKey PEM_read_EC_PUBKEY PEM_read_NETSCAPE_CERT_SEQUENCE PEM_read_PKCS7 PEM_read_PKCS8 PEM_read_PKCS8_PRIV_KEY_INFO PEM_read_PUBKEY PEM_read_PUBKEY_ex PEM_read_PrivateKey PEM_read_PrivateKey_ex PEM_read_RSAPrivateKey PEM_read_RSAPublicKey PEM_read_RSA_PUBKEY PEM_read_X509 PEM_read_X509_AUX PEM_read_X509_CRL PEM_read_X509_PUBKEY PEM_read_X509_REQ PEM_read_bio PEM_read_bio_CMS PEM_read_bio_DHparams PEM_read_bio_DSAPrivateKey PEM_read_bio_DSA_PUBKEY PEM_read_bio_DSAparams PEM_read_bio_ECPKParameters PEM_read_bio_ECPrivateKey PEM_read_bio_EC_PUBKEY PEM_read_bio_NETSCAPE_CERT_SEQUENCE PEM_read_bio_PKCS7 PEM_read_bio_PKCS8 PEM_read_bio_PKCS8_PRIV_KEY_INFO PEM_read_bio_PUBKEY PEM_read_bio_PUBKEY_ex PEM_read_bio_Parameters PEM_read_bio_Parameters_ex PEM_read_bio_PrivateKey PEM_read_bio_PrivateKey_ex PEM_read_bio_RSAPrivateKey PEM_read_bio_RSAPublicKey PEM_read_bio_RSA_PUBKEY PEM_read_bio_X509 PEM_read_bio_X509_AUX PEM_read_bio_X509_CRL PEM_read_bio_X509_PUBKEY PEM_read_bio_X509_REQ PEM_read_bio_ex PEM_write PEM_write_CMS PEM_write_DHparams PEM_write_DHxparams PEM_write_DSAPrivateKey PEM_write_DSA_PUBKEY PEM_write_DSAparams PEM_write_ECPKParameters PEM_write_ECPrivateKey PEM_write_EC_PUBKEY PEM_write_NETSCAPE_CERT_SEQUENCE PEM_write_PKCS7 PEM_write_PKCS8 PEM_write_PKCS8PrivateKey PEM_write_PKCS8PrivateKey_nid PEM_write_PKCS8_PRIV_KEY_INFO PEM_write_PUBKEY PEM_write_PUBKEY_ex PEM_write_PrivateKey PEM_write_PrivateKey_ex PEM_write_RSAPrivateKey PEM_write_RSAPublicKey PEM_write_RSA_PUBKEY PEM_write_X509 PEM_write_X509_AUX PEM_write_X509_CRL PEM_write_X509_PUBKEY PEM_write_X509_REQ PEM_write_X509_REQ_NEW PEM_write_bio PEM_write_bio_ASN1_stream PEM_write_bio_CMS PEM_write_bio_CMS_stream PEM_write_bio_DHparams PEM_write_bio_DHxparams PEM_write_bio_DSAPrivateKey PEM_write_bio_DSA_PUBKEY PEM_write_bio_DSAparams PEM_write_bio_ECPKParameters PEM_write_bio_ECPrivateKey PEM_write_bio_EC_PUBKEY PEM_write_bio_NETSCAPE_CERT_SEQUENCE PEM_write_bio_PKCS7 PEM_write_bio_PKCS7_stream PEM_write_bio_PKCS8 PEM_write_bio_PKCS8PrivateKey PEM_write_bio_PKCS8PrivateKey_nid PEM_write_bio_PKCS8_PRIV_KEY_INFO PEM_write_bio_PUBKEY PEM_write_bio_PUBKEY_ex PEM_write_bio_Parameters PEM_write_bio_PrivateKey PEM_write_bio_PrivateKey_ex PEM_write_bio_PrivateKey_traditional PEM_write_bio_RSAPrivateKey PEM_write_bio_RSAPublicKey PEM_write_bio_RSA_PUBKEY PEM_write_bio_X509 PEM_write_bio_X509_AUX PEM_write_bio_X509_CRL PEM_write_bio_X509_PUBKEY PEM_write_bio_X509_REQ PEM_write_bio_X509_REQ_NEW PKCS12_AUTHSAFES_it PKCS12_BAGS_free PKCS12_BAGS_it PKCS12_BAGS_new PKCS12_MAC_DATA_free PKCS12_MAC_DATA_it PKCS12_MAC_DATA_new PKCS12_PBE_add PKCS12_PBE_keyivgen PKCS12_PBE_keyivgen_ex PKCS12_SAFEBAGS_it PKCS12_SAFEBAG_create0_p8inf PKCS12_SAFEBAG_create0_pkcs8 PKCS12_SAFEBAG_create_cert PKCS12_SAFEBAG_create_crl PKCS12_SAFEBAG_create_pkcs8_encrypt PKCS12_SAFEBAG_create_pkcs8_encrypt_ex PKCS12_SAFEBAG_create_secret PKCS12_SAFEBAG_free PKCS12_SAFEBAG_get0_attr PKCS12_SAFEBAG_get0_attrs PKCS12_SAFEBAG_get0_bag_obj PKCS12_SAFEBAG_get0_bag_type PKCS12_SAFEBAG_get0_p8inf PKCS12_SAFEBAG_get0_pkcs8 PKCS12_SAFEBAG_get0_safes PKCS12_SAFEBAG_get0_type PKCS12_SAFEBAG_get1_cert PKCS12_SAFEBAG_get1_crl PKCS12_SAFEBAG_get_bag_nid PKCS12_SAFEBAG_get_nid PKCS12_SAFEBAG_it PKCS12_SAFEBAG_new PKCS12_add1_attr_by_NID PKCS12_add1_attr_by_txt PKCS12_add_CSPName_asc PKCS12_add_cert PKCS12_add_friendlyname_asc PKCS12_add_friendlyname_uni PKCS12_add_friendlyname_utf8 PKCS12_add_key PKCS12_add_key_ex PKCS12_add_localkeyid PKCS12_add_safe PKCS12_add_safe_ex PKCS12_add_safes PKCS12_add_safes_ex PKCS12_add_secret PKCS12_create PKCS12_create_ex PKCS12_decrypt_skey PKCS12_decrypt_skey_ex PKCS12_free PKCS12_gen_mac PKCS12_get0_mac PKCS12_get_attr PKCS12_get_attr_gen PKCS12_get_friendlyname PKCS12_init PKCS12_init_ex PKCS12_it PKCS12_item_decrypt_d2i PKCS12_item_decrypt_d2i_ex PKCS12_item_i2d_encrypt PKCS12_item_i2d_encrypt_ex PKCS12_item_pack_safebag PKCS12_key_gen_asc PKCS12_key_gen_asc_ex PKCS12_key_gen_uni PKCS12_key_gen_uni_ex PKCS12_key_gen_utf8 PKCS12_key_gen_utf8_ex PKCS12_mac_present PKCS12_new PKCS12_newpass PKCS12_pack_authsafes PKCS12_pack_p7data PKCS12_pack_p7encdata PKCS12_pack_p7encdata_ex PKCS12_parse PKCS12_pbe_crypt PKCS12_pbe_crypt_ex PKCS12_set_mac PKCS12_setup_mac PKCS12_unpack_authsafes PKCS12_unpack_p7data PKCS12_unpack_p7encdata PKCS12_verify_mac PKCS1_MGF1 PKCS5_PBE_add PKCS5_PBE_keyivgen PKCS5_PBE_keyivgen_ex PKCS5_PBKDF2_HMAC PKCS5_PBKDF2_HMAC_SHA1 PKCS5_pbe2_set PKCS5_pbe2_set_iv PKCS5_pbe2_set_iv_ex PKCS5_pbe2_set_scrypt PKCS5_pbe_set PKCS5_pbe_set0_algor PKCS5_pbe_set0_algor_ex PKCS5_pbe_set_ex PKCS5_pbkdf2_set PKCS5_pbkdf2_set_ex PKCS5_v2_PBE_keyivgen PKCS5_v2_PBE_keyivgen_ex PKCS5_v2_scrypt_keyivgen PKCS5_v2_scrypt_keyivgen_ex PKCS7_ATTR_SIGN_it PKCS7_ATTR_VERIFY_it PKCS7_DIGEST_free PKCS7_DIGEST_it PKCS7_DIGEST_new PKCS7_ENCRYPT_free PKCS7_ENCRYPT_it PKCS7_ENCRYPT_new PKCS7_ENC_CONTENT_free PKCS7_ENC_CONTENT_it PKCS7_ENC_CONTENT_new PKCS7_ENVELOPE_free PKCS7_ENVELOPE_it PKCS7_ENVELOPE_new PKCS7_ISSUER_AND_SERIAL_digest PKCS7_ISSUER_AND_SERIAL_free PKCS7_ISSUER_AND_SERIAL_it PKCS7_ISSUER_AND_SERIAL_new PKCS7_RECIP_INFO_free PKCS7_RECIP_INFO_get0_alg PKCS7_RECIP_INFO_it PKCS7_RECIP_INFO_new PKCS7_RECIP_INFO_set PKCS7_SIGNED_free PKCS7_SIGNED_it PKCS7_SIGNED_new PKCS7_SIGNER_INFO_free PKCS7_SIGNER_INFO_get0_algs PKCS7_SIGNER_INFO_it PKCS7_SIGNER_INFO_new PKCS7_SIGNER_INFO_set PKCS7_SIGNER_INFO_sign PKCS7_SIGN_ENVELOPE_free PKCS7_SIGN_ENVELOPE_it PKCS7_SIGN_ENVELOPE_new PKCS7_add0_attrib_signing_time PKCS7_add1_attrib_digest PKCS7_add_attrib_content_type PKCS7_add_attrib_smimecap PKCS7_add_attribute PKCS7_add_certificate PKCS7_add_crl PKCS7_add_recipient PKCS7_add_recipient_info PKCS7_add_signature PKCS7_add_signed_attribute PKCS7_add_signer PKCS7_cert_from_signer_info PKCS7_content_new PKCS7_ctrl PKCS7_dataDecode PKCS7_dataFinal PKCS7_dataInit PKCS7_dataVerify PKCS7_decrypt PKCS7_digest_from_attributes PKCS7_dup PKCS7_encrypt PKCS7_encrypt_ex PKCS7_final PKCS7_free PKCS7_get0_signers PKCS7_get_attribute PKCS7_get_issuer_and_serial PKCS7_get_octet_string PKCS7_get_signed_attribute PKCS7_get_signer_info PKCS7_get_smimecap PKCS7_it PKCS7_new PKCS7_new_ex PKCS7_print_ctx PKCS7_set0_type_other PKCS7_set_attributes PKCS7_set_cipher PKCS7_set_content PKCS7_set_digest PKCS7_set_signed_attributes PKCS7_set_type PKCS7_sign PKCS7_sign_add_signer PKCS7_sign_ex PKCS7_signatureVerify PKCS7_simple_smimecap PKCS7_stream PKCS7_to_TS_TST_INFO PKCS7_type_is_other PKCS7_verify PKCS8_PRIV_KEY_INFO_free PKCS8_PRIV_KEY_INFO_it PKCS8_PRIV_KEY_INFO_new PKCS8_add_keyusage PKCS8_decrypt PKCS8_decrypt_ex PKCS8_encrypt PKCS8_encrypt_ex PKCS8_get_attr PKCS8_pkey_add1_attr PKCS8_pkey_add1_attr_by_NID PKCS8_pkey_add1_attr_by_OBJ PKCS8_pkey_get0 PKCS8_pkey_get0_attrs PKCS8_pkey_set0 PKCS8_set0_pbe PKCS8_set0_pbe_ex PKEY_USAGE_PERIOD_free PKEY_USAGE_PERIOD_it PKEY_USAGE_PERIOD_new POLICYINFO_free POLICYINFO_it POLICYINFO_new POLICYQUALINFO_free POLICYQUALINFO_it POLICYQUALINFO_new POLICY_CONSTRAINTS_free POLICY_CONSTRAINTS_it POLICY_CONSTRAINTS_new POLICY_MAPPINGS_it POLICY_MAPPING_free POLICY_MAPPING_it POLICY_MAPPING_new PROFESSION_INFO_free PROFESSION_INFO_get0_addProfessionInfo PROFESSION_INFO_get0_namingAuthority PROFESSION_INFO_get0_professionItems PROFESSION_INFO_get0_professionOIDs PROFESSION_INFO_get0_registrationNumber PROFESSION_INFO_it PROFESSION_INFO_new PROFESSION_INFO_set0_addProfessionInfo PROFESSION_INFO_set0_namingAuthority PROFESSION_INFO_set0_professionItems PROFESSION_INFO_set0_professionOIDs PROFESSION_INFO_set0_registrationNumber PROXY_CERT_INFO_EXTENSION_free PROXY_CERT_INFO_EXTENSION_it PROXY_CERT_INFO_EXTENSION_new PROXY_POLICY_free PROXY_POLICY_it PROXY_POLICY_new RAND_OpenSSL RAND_add RAND_bytes RAND_bytes_ex RAND_event RAND_file_name RAND_get0_primary RAND_get0_private RAND_get0_public RAND_get_rand_method RAND_keep_random_devices_open RAND_load_file RAND_poll RAND_priv_bytes RAND_priv_bytes_ex RAND_pseudo_bytes RAND_screen RAND_seed RAND_set_DRBG_type RAND_set_rand_engine RAND_set_rand_method RAND_set_seed_source_type RAND_status RAND_write_file RC2_cbc_encrypt RC2_cfb64_encrypt RC2_decrypt RC2_ecb_encrypt RC2_encrypt RC2_ofb64_encrypt RC2_set_key RC4 RC4_options RC4_set_key RIPEMD160 RIPEMD160_Final RIPEMD160_Init RIPEMD160_Transform RIPEMD160_Update RSAPrivateKey_dup RSAPrivateKey_it RSAPublicKey_dup RSAPublicKey_it RSA_OAEP_PARAMS_free RSA_OAEP_PARAMS_it RSA_OAEP_PARAMS_new RSA_PKCS1_OpenSSL RSA_PSS_PARAMS_dup RSA_PSS_PARAMS_free RSA_PSS_PARAMS_it RSA_PSS_PARAMS_new RSA_X931_derive_ex RSA_X931_generate_key_ex RSA_X931_hash_id RSA_bits RSA_blinding_off RSA_blinding_on RSA_check_key RSA_check_key_ex RSA_clear_flags RSA_flags RSA_free RSA_generate_key RSA_generate_key_ex RSA_generate_multi_prime_key RSA_get0_crt_params RSA_get0_d RSA_get0_dmp1 RSA_get0_dmq1 RSA_get0_e RSA_get0_engine RSA_get0_factors RSA_get0_iqmp RSA_get0_key RSA_get0_multi_prime_crt_params RSA_get0_multi_prime_factors RSA_get0_n RSA_get0_p RSA_get0_pss_params RSA_get0_q RSA_get_default_method RSA_get_ex_data RSA_get_method RSA_get_multi_prime_extra_count RSA_get_version RSA_meth_dup RSA_meth_free RSA_meth_get0_app_data RSA_meth_get0_name RSA_meth_get_bn_mod_exp RSA_meth_get_finish RSA_meth_get_flags RSA_meth_get_init RSA_meth_get_keygen RSA_meth_get_mod_exp RSA_meth_get_multi_prime_keygen RSA_meth_get_priv_dec RSA_meth_get_priv_enc RSA_meth_get_pub_dec RSA_meth_get_pub_enc RSA_meth_get_sign RSA_meth_get_verify RSA_meth_new RSA_meth_set0_app_data RSA_meth_set1_name RSA_meth_set_bn_mod_exp RSA_meth_set_finish RSA_meth_set_flags RSA_meth_set_init RSA_meth_set_keygen RSA_meth_set_mod_exp RSA_meth_set_multi_prime_keygen RSA_meth_set_priv_dec RSA_meth_set_priv_enc RSA_meth_set_pub_dec RSA_meth_set_pub_enc RSA_meth_set_sign RSA_meth_set_verify RSA_new RSA_new_method RSA_null_method RSA_padding_add_PKCS1_OAEP RSA_padding_add_PKCS1_OAEP_mgf1 RSA_padding_add_PKCS1_PSS RSA_padding_add_PKCS1_PSS_mgf1 RSA_padding_add_PKCS1_type_1 RSA_padding_add_PKCS1_type_2 RSA_padding_add_X931 RSA_padding_add_none RSA_padding_check_PKCS1_OAEP RSA_padding_check_PKCS1_OAEP_mgf1 RSA_padding_check_PKCS1_type_1 RSA_padding_check_PKCS1_type_2 RSA_padding_check_X931 RSA_padding_check_none RSA_pkey_ctx_ctrl RSA_print RSA_print_fp RSA_private_decrypt RSA_private_encrypt RSA_public_decrypt RSA_public_encrypt RSA_security_bits RSA_set0_crt_params RSA_set0_factors RSA_set0_key RSA_set0_multi_prime_params RSA_set_default_method RSA_set_ex_data RSA_set_flags RSA_set_method RSA_setup_blinding RSA_sign RSA_sign_ASN1_OCTET_STRING RSA_size RSA_test_flags RSA_up_ref RSA_verify RSA_verify_ASN1_OCTET_STRING RSA_verify_PKCS1_PSS RSA_verify_PKCS1_PSS_mgf1 SCRYPT_PARAMS_free SCRYPT_PARAMS_it SCRYPT_PARAMS_new SCT_LIST_free SCT_LIST_print SCT_LIST_validate SCT_free SCT_get0_extensions SCT_get0_log_id SCT_get0_signature SCT_get_log_entry_type SCT_get_signature_nid SCT_get_source SCT_get_timestamp SCT_get_validation_status SCT_get_version SCT_new SCT_new_from_base64 SCT_print SCT_set0_extensions SCT_set0_log_id SCT_set0_signature SCT_set1_extensions SCT_set1_log_id SCT_set1_signature SCT_set_log_entry_type SCT_set_signature_nid SCT_set_source SCT_set_timestamp SCT_set_version SCT_validate SCT_validation_status_string SEED_cbc_encrypt SEED_cfb128_encrypt SEED_decrypt SEED_ecb_encrypt SEED_encrypt SEED_ofb128_encrypt SEED_set_key SHA1 SHA1_Final SHA1_Init SHA1_Transform SHA1_Update SHA224 SHA224_Final SHA224_Init SHA224_Update SHA256 SHA256_Final SHA256_Init SHA256_Transform SHA256_Update SHA384 SHA384_Final SHA384_Init SHA384_Update SHA512 SHA512_Final SHA512_Init SHA512_Transform SHA512_Update SMIME_crlf_copy SMIME_read_ASN1 SMIME_read_ASN1_ex SMIME_read_CMS SMIME_read_CMS_ex SMIME_read_PKCS7 SMIME_read_PKCS7_ex SMIME_text SMIME_write_ASN1 SMIME_write_ASN1_ex SMIME_write_CMS SMIME_write_PKCS7 SRP_Calc_A SRP_Calc_B SRP_Calc_B_ex SRP_Calc_client_key SRP_Calc_client_key_ex SRP_Calc_server_key SRP_Calc_u SRP_Calc_u_ex SRP_Calc_x SRP_Calc_x_ex SRP_VBASE_add0_user SRP_VBASE_free SRP_VBASE_get1_by_user SRP_VBASE_get_by_user SRP_VBASE_init SRP_VBASE_new SRP_Verify_A_mod_N SRP_Verify_B_mod_N SRP_check_known_gN_param SRP_create_verifier SRP_create_verifier_BN SRP_create_verifier_BN_ex SRP_create_verifier_ex SRP_get_default_gN SRP_user_pwd_free SRP_user_pwd_new SRP_user_pwd_set0_sv SRP_user_pwd_set1_ids SRP_user_pwd_set_gN SXNETID_free SXNETID_it SXNETID_new SXNET_add_id_INTEGER SXNET_add_id_asc SXNET_add_id_ulong SXNET_free SXNET_get_id_INTEGER SXNET_get_id_asc SXNET_get_id_ulong SXNET_it SXNET_new TLS_FEATURE_free TLS_FEATURE_new TS_ACCURACY_dup TS_ACCURACY_free TS_ACCURACY_get_micros TS_ACCURACY_get_millis TS_ACCURACY_get_seconds TS_ACCURACY_new TS_ACCURACY_set_micros TS_ACCURACY_set_millis TS_ACCURACY_set_seconds TS_ASN1_INTEGER_print_bio TS_CONF_get_tsa_section TS_CONF_load_cert TS_CONF_load_certs TS_CONF_load_key TS_CONF_set_accuracy TS_CONF_set_certs TS_CONF_set_clock_precision_digits TS_CONF_set_crypto_device TS_CONF_set_def_policy TS_CONF_set_default_engine TS_CONF_set_digests TS_CONF_set_ess_cert_id_chain TS_CONF_set_ess_cert_id_digest TS_CONF_set_ordering TS_CONF_set_policies TS_CONF_set_serial TS_CONF_set_signer_cert TS_CONF_set_signer_digest TS_CONF_set_signer_key TS_CONF_set_tsa_name TS_MSG_IMPRINT_dup TS_MSG_IMPRINT_free TS_MSG_IMPRINT_get_algo TS_MSG_IMPRINT_get_msg TS_MSG_IMPRINT_new TS_MSG_IMPRINT_print_bio TS_MSG_IMPRINT_set_algo TS_MSG_IMPRINT_set_msg TS_OBJ_print_bio TS_REQ_add_ext TS_REQ_delete_ext TS_REQ_dup TS_REQ_ext_free TS_REQ_free TS_REQ_get_cert_req TS_REQ_get_ext TS_REQ_get_ext_by_NID TS_REQ_get_ext_by_OBJ TS_REQ_get_ext_by_critical TS_REQ_get_ext_count TS_REQ_get_ext_d2i TS_REQ_get_exts TS_REQ_get_msg_imprint TS_REQ_get_nonce TS_REQ_get_policy_id TS_REQ_get_version TS_REQ_new TS_REQ_print_bio TS_REQ_set_cert_req TS_REQ_set_msg_imprint TS_REQ_set_nonce TS_REQ_set_policy_id TS_REQ_set_version TS_REQ_to_TS_VERIFY_CTX TS_RESP_CTX_add_failure_info TS_RESP_CTX_add_flags TS_RESP_CTX_add_md TS_RESP_CTX_add_policy TS_RESP_CTX_free TS_RESP_CTX_get_request TS_RESP_CTX_get_tst_info TS_RESP_CTX_new TS_RESP_CTX_new_ex TS_RESP_CTX_set_accuracy TS_RESP_CTX_set_certs TS_RESP_CTX_set_clock_precision_digits TS_RESP_CTX_set_def_policy TS_RESP_CTX_set_ess_cert_id_digest TS_RESP_CTX_set_extension_cb TS_RESP_CTX_set_serial_cb TS_RESP_CTX_set_signer_cert TS_RESP_CTX_set_signer_digest TS_RESP_CTX_set_signer_key TS_RESP_CTX_set_status_info TS_RESP_CTX_set_status_info_cond TS_RESP_CTX_set_time_cb TS_RESP_create_response TS_RESP_dup TS_RESP_free TS_RESP_get_status_info TS_RESP_get_token TS_RESP_get_tst_info TS_RESP_new TS_RESP_print_bio TS_RESP_set_status_info TS_RESP_set_tst_info TS_RESP_verify_response TS_RESP_verify_signature TS_RESP_verify_token TS_STATUS_INFO_dup TS_STATUS_INFO_free TS_STATUS_INFO_get0_failure_info TS_STATUS_INFO_get0_status TS_STATUS_INFO_get0_text TS_STATUS_INFO_new TS_STATUS_INFO_print_bio TS_STATUS_INFO_set_status TS_TST_INFO_add_ext TS_TST_INFO_delete_ext TS_TST_INFO_dup TS_TST_INFO_ext_free TS_TST_INFO_free TS_TST_INFO_get_accuracy TS_TST_INFO_get_ext TS_TST_INFO_get_ext_by_NID TS_TST_INFO_get_ext_by_OBJ TS_TST_INFO_get_ext_by_critical TS_TST_INFO_get_ext_count TS_TST_INFO_get_ext_d2i TS_TST_INFO_get_exts TS_TST_INFO_get_msg_imprint TS_TST_INFO_get_nonce TS_TST_INFO_get_ordering TS_TST_INFO_get_policy_id TS_TST_INFO_get_serial TS_TST_INFO_get_time TS_TST_INFO_get_tsa TS_TST_INFO_get_version TS_TST_INFO_new TS_TST_INFO_print_bio TS_TST_INFO_set_accuracy TS_TST_INFO_set_msg_imprint TS_TST_INFO_set_nonce TS_TST_INFO_set_ordering TS_TST_INFO_set_policy_id TS_TST_INFO_set_serial TS_TST_INFO_set_time TS_TST_INFO_set_tsa TS_TST_INFO_set_version TS_VERIFY_CTX_add_flags TS_VERIFY_CTX_cleanup TS_VERIFY_CTX_free TS_VERIFY_CTX_init TS_VERIFY_CTX_new TS_VERIFY_CTX_set_certs TS_VERIFY_CTX_set_data TS_VERIFY_CTX_set_flags TS_VERIFY_CTX_set_imprint TS_VERIFY_CTX_set_store TS_X509_ALGOR_print_bio TS_ext_print_bio TXT_DB_create_index TXT_DB_free TXT_DB_get_by_index TXT_DB_insert TXT_DB_read TXT_DB_write UINT32_it UINT64_it UI_OpenSSL UI_UTIL_read_pw UI_UTIL_read_pw_string UI_UTIL_wrap_read_pem_callback UI_add_error_string UI_add_info_string UI_add_input_boolean UI_add_input_string UI_add_user_data UI_add_verify_string UI_construct_prompt UI_create_method UI_ctrl UI_destroy_method UI_dup_error_string UI_dup_info_string UI_dup_input_boolean UI_dup_input_string UI_dup_user_data UI_dup_verify_string UI_free UI_get0_action_string UI_get0_output_string UI_get0_result UI_get0_result_string UI_get0_test_string UI_get0_user_data UI_get_default_method UI_get_ex_data UI_get_input_flags UI_get_method UI_get_result_length UI_get_result_maxsize UI_get_result_minsize UI_get_result_string_length UI_get_string_type UI_method_get_closer UI_method_get_data_destructor UI_method_get_data_duplicator UI_method_get_ex_data UI_method_get_flusher UI_method_get_opener UI_method_get_prompt_constructor UI_method_get_reader UI_method_get_writer UI_method_set_closer UI_method_set_data_duplicator UI_method_set_ex_data UI_method_set_flusher UI_method_set_opener UI_method_set_prompt_constructor UI_method_set_reader UI_method_set_writer UI_new UI_new_method UI_null UI_process UI_set_default_method UI_set_ex_data UI_set_method UI_set_result UI_set_result_ex USERNOTICE_free USERNOTICE_it USERNOTICE_new UTF8_getc UTF8_putc WHIRLPOOL WHIRLPOOL_BitUpdate WHIRLPOOL_Final WHIRLPOOL_Init WHIRLPOOL_Update X509V3_EXT_CRL_add_conf X509V3_EXT_CRL_add_nconf X509V3_EXT_REQ_add_conf X509V3_EXT_REQ_add_nconf X509V3_EXT_add X509V3_EXT_add_alias X509V3_EXT_add_conf X509V3_EXT_add_list X509V3_EXT_add_nconf X509V3_EXT_add_nconf_sk X509V3_EXT_cleanup X509V3_EXT_conf X509V3_EXT_conf_nid X509V3_EXT_d2i X509V3_EXT_get X509V3_EXT_get_nid X509V3_EXT_i2d X509V3_EXT_nconf X509V3_EXT_nconf_nid X509V3_EXT_print X509V3_EXT_print_fp X509V3_EXT_val_prn X509V3_NAME_from_section X509V3_add1_i2d X509V3_add_standard_extensions X509V3_add_value X509V3_add_value_bool X509V3_add_value_bool_nf X509V3_add_value_int X509V3_add_value_uchar X509V3_conf_free X509V3_extensions_print X509V3_get_d2i X509V3_get_section X509V3_get_string X509V3_get_value_bool X509V3_get_value_int X509V3_parse_list X509V3_section_free X509V3_set_conf_lhash X509V3_set_ctx X509V3_set_issuer_pkey X509V3_set_nconf X509V3_string_free X509_ALGORS_it X509_ALGOR_cmp X509_ALGOR_copy X509_ALGOR_dup X509_ALGOR_free X509_ALGOR_get0 X509_ALGOR_it X509_ALGOR_new X509_ALGOR_set0 X509_ALGOR_set_md X509_ATTRIBUTE_count X509_ATTRIBUTE_create X509_ATTRIBUTE_create_by_NID X509_ATTRIBUTE_create_by_OBJ X509_ATTRIBUTE_create_by_txt X509_ATTRIBUTE_dup X509_ATTRIBUTE_free X509_ATTRIBUTE_get0_data X509_ATTRIBUTE_get0_object X509_ATTRIBUTE_get0_type X509_ATTRIBUTE_it X509_ATTRIBUTE_new X509_ATTRIBUTE_set1_data X509_ATTRIBUTE_set1_object X509_CERT_AUX_free X509_CERT_AUX_it X509_CERT_AUX_new X509_CINF_free X509_CINF_it X509_CINF_new X509_CRL_INFO_free X509_CRL_INFO_it X509_CRL_INFO_new X509_CRL_METHOD_free X509_CRL_METHOD_new X509_CRL_add0_revoked X509_CRL_add1_ext_i2d X509_CRL_add_ext X509_CRL_check_suiteb X509_CRL_cmp X509_CRL_delete_ext X509_CRL_diff X509_CRL_digest X509_CRL_dup X509_CRL_free X509_CRL_get0_by_cert X509_CRL_get0_by_serial X509_CRL_get0_extensions X509_CRL_get0_lastUpdate X509_CRL_get0_nextUpdate X509_CRL_get0_signature X509_CRL_get_REVOKED X509_CRL_get_ext X509_CRL_get_ext_by_NID X509_CRL_get_ext_by_OBJ X509_CRL_get_ext_by_critical X509_CRL_get_ext_count X509_CRL_get_ext_d2i X509_CRL_get_issuer X509_CRL_get_lastUpdate X509_CRL_get_meth_data X509_CRL_get_nextUpdate X509_CRL_get_signature_nid X509_CRL_get_version X509_CRL_it X509_CRL_load_http X509_CRL_match X509_CRL_new X509_CRL_new_ex X509_CRL_print X509_CRL_print_ex X509_CRL_print_fp X509_CRL_set1_lastUpdate X509_CRL_set1_nextUpdate X509_CRL_set_default_method X509_CRL_set_issuer_name X509_CRL_set_meth_data X509_CRL_set_version X509_CRL_sign X509_CRL_sign_ctx X509_CRL_sort X509_CRL_up_ref X509_CRL_verify X509_EXTENSIONS_it X509_EXTENSION_create_by_NID X509_EXTENSION_create_by_OBJ X509_EXTENSION_dup X509_EXTENSION_free X509_EXTENSION_get_critical X509_EXTENSION_get_data X509_EXTENSION_get_object X509_EXTENSION_it X509_EXTENSION_new X509_EXTENSION_set_critical X509_EXTENSION_set_data X509_EXTENSION_set_object X509_INFO_free X509_INFO_new X509_LOOKUP_by_alias X509_LOOKUP_by_fingerprint X509_LOOKUP_by_issuer_serial X509_LOOKUP_by_subject X509_LOOKUP_by_subject_ex X509_LOOKUP_ctrl X509_LOOKUP_ctrl_ex X509_LOOKUP_file X509_LOOKUP_free X509_LOOKUP_get_method_data X509_LOOKUP_get_store X509_LOOKUP_hash_dir X509_LOOKUP_init X509_LOOKUP_meth_free X509_LOOKUP_meth_get_ctrl X509_LOOKUP_meth_get_free X509_LOOKUP_meth_get_get_by_alias X509_LOOKUP_meth_get_get_by_fingerprint X509_LOOKUP_meth_get_get_by_issuer_serial X509_LOOKUP_meth_get_get_by_subject X509_LOOKUP_meth_get_init X509_LOOKUP_meth_get_new_item X509_LOOKUP_meth_get_shutdown X509_LOOKUP_meth_new X509_LOOKUP_meth_set_ctrl X509_LOOKUP_meth_set_free X509_LOOKUP_meth_set_get_by_alias X509_LOOKUP_meth_set_get_by_fingerprint X509_LOOKUP_meth_set_get_by_issuer_serial X509_LOOKUP_meth_set_get_by_subject X509_LOOKUP_meth_set_init X509_LOOKUP_meth_set_new_item X509_LOOKUP_meth_set_shutdown X509_LOOKUP_new X509_LOOKUP_set_method_data X509_LOOKUP_shutdown X509_LOOKUP_store X509_NAME_ENTRY_create_by_NID X509_NAME_ENTRY_create_by_OBJ X509_NAME_ENTRY_create_by_txt X509_NAME_ENTRY_dup X509_NAME_ENTRY_free X509_NAME_ENTRY_get_data X509_NAME_ENTRY_get_object X509_NAME_ENTRY_it X509_NAME_ENTRY_new X509_NAME_ENTRY_set X509_NAME_ENTRY_set_data X509_NAME_ENTRY_set_object X509_NAME_add_entry X509_NAME_add_entry_by_NID X509_NAME_add_entry_by_OBJ X509_NAME_add_entry_by_txt X509_NAME_cmp X509_NAME_delete_entry X509_NAME_digest X509_NAME_dup X509_NAME_entry_count X509_NAME_free X509_NAME_get0_der X509_NAME_get_entry X509_NAME_get_index_by_NID X509_NAME_get_index_by_OBJ X509_NAME_get_text_by_NID X509_NAME_get_text_by_OBJ X509_NAME_hash_ex X509_NAME_hash_old X509_NAME_it X509_NAME_new X509_NAME_oneline X509_NAME_print X509_NAME_print_ex X509_NAME_print_ex_fp X509_NAME_set X509_OBJECT_free X509_OBJECT_get0_X509 X509_OBJECT_get0_X509_CRL X509_OBJECT_get_type X509_OBJECT_idx_by_subject X509_OBJECT_new X509_OBJECT_retrieve_by_subject X509_OBJECT_retrieve_match X509_OBJECT_set1_X509 X509_OBJECT_set1_X509_CRL X509_OBJECT_up_ref_count X509_PKEY_free X509_PKEY_new X509_POLICY_NODE_print X509_PUBKEY_dup X509_PUBKEY_eq X509_PUBKEY_free X509_PUBKEY_get X509_PUBKEY_get0 X509_PUBKEY_get0_param X509_PUBKEY_it X509_PUBKEY_new X509_PUBKEY_new_ex X509_PUBKEY_set X509_PUBKEY_set0_param X509_PURPOSE_add X509_PURPOSE_cleanup X509_PURPOSE_get0 X509_PURPOSE_get0_name X509_PURPOSE_get0_sname X509_PURPOSE_get_by_id X509_PURPOSE_get_by_sname X509_PURPOSE_get_count X509_PURPOSE_get_id X509_PURPOSE_get_trust X509_PURPOSE_set X509_REQ_INFO_free X509_REQ_INFO_it X509_REQ_INFO_new X509_REQ_add1_attr X509_REQ_add1_attr_by_NID X509_REQ_add1_attr_by_OBJ X509_REQ_add1_attr_by_txt X509_REQ_add_extensions X509_REQ_add_extensions_nid X509_REQ_check_private_key X509_REQ_delete_attr X509_REQ_digest X509_REQ_dup X509_REQ_extension_nid X509_REQ_free X509_REQ_get0_distinguishing_id X509_REQ_get0_pubkey X509_REQ_get0_signature X509_REQ_get1_email X509_REQ_get_X509_PUBKEY X509_REQ_get_attr X509_REQ_get_attr_by_NID X509_REQ_get_attr_by_OBJ X509_REQ_get_attr_count X509_REQ_get_extension_nids X509_REQ_get_extensions X509_REQ_get_pubkey X509_REQ_get_signature_nid X509_REQ_get_subject_name X509_REQ_get_version X509_REQ_it X509_REQ_new X509_REQ_new_ex X509_REQ_print X509_REQ_print_ex X509_REQ_print_fp X509_REQ_set0_distinguishing_id X509_REQ_set0_signature X509_REQ_set1_signature_algo X509_REQ_set_extension_nids X509_REQ_set_pubkey X509_REQ_set_subject_name X509_REQ_set_version X509_REQ_sign X509_REQ_sign_ctx X509_REQ_to_X509 X509_REQ_verify X509_REQ_verify_ex X509_REVOKED_add1_ext_i2d X509_REVOKED_add_ext X509_REVOKED_delete_ext X509_REVOKED_dup X509_REVOKED_free X509_REVOKED_get0_extensions X509_REVOKED_get0_revocationDate X509_REVOKED_get0_serialNumber X509_REVOKED_get_ext X509_REVOKED_get_ext_by_NID X509_REVOKED_get_ext_by_OBJ X509_REVOKED_get_ext_by_critical X509_REVOKED_get_ext_count X509_REVOKED_get_ext_d2i X509_REVOKED_it X509_REVOKED_new X509_REVOKED_set_revocationDate X509_REVOKED_set_serialNumber X509_SIG_INFO_get X509_SIG_INFO_set X509_SIG_free X509_SIG_get0 X509_SIG_getm X509_SIG_it X509_SIG_new X509_STORE_CTX_cleanup X509_STORE_CTX_free X509_STORE_CTX_get0_cert X509_STORE_CTX_get0_chain X509_STORE_CTX_get0_current_crl X509_STORE_CTX_get0_current_issuer X509_STORE_CTX_get0_param X509_STORE_CTX_get0_parent_ctx X509_STORE_CTX_get0_policy_tree X509_STORE_CTX_get0_store X509_STORE_CTX_get0_untrusted X509_STORE_CTX_get1_certs X509_STORE_CTX_get1_chain X509_STORE_CTX_get1_crls X509_STORE_CTX_get1_issuer X509_STORE_CTX_get_by_subject X509_STORE_CTX_get_cert_crl X509_STORE_CTX_get_check_crl X509_STORE_CTX_get_check_issued X509_STORE_CTX_get_check_policy X509_STORE_CTX_get_check_revocation X509_STORE_CTX_get_cleanup X509_STORE_CTX_get_current_cert X509_STORE_CTX_get_error X509_STORE_CTX_get_error_depth X509_STORE_CTX_get_ex_data X509_STORE_CTX_get_explicit_policy X509_STORE_CTX_get_get_crl X509_STORE_CTX_get_get_issuer X509_STORE_CTX_get_lookup_certs X509_STORE_CTX_get_lookup_crls X509_STORE_CTX_get_num_untrusted X509_STORE_CTX_get_obj_by_subject X509_STORE_CTX_get_verify X509_STORE_CTX_get_verify_cb X509_STORE_CTX_init X509_STORE_CTX_new X509_STORE_CTX_new_ex X509_STORE_CTX_print_verify_cb X509_STORE_CTX_purpose_inherit X509_STORE_CTX_set0_crls X509_STORE_CTX_set0_dane X509_STORE_CTX_set0_param X509_STORE_CTX_set0_trusted_stack X509_STORE_CTX_set0_untrusted X509_STORE_CTX_set0_verified_chain X509_STORE_CTX_set_cert X509_STORE_CTX_set_current_cert X509_STORE_CTX_set_default X509_STORE_CTX_set_depth X509_STORE_CTX_set_error X509_STORE_CTX_set_error_depth X509_STORE_CTX_set_ex_data X509_STORE_CTX_set_flags X509_STORE_CTX_set_purpose X509_STORE_CTX_set_time X509_STORE_CTX_set_trust X509_STORE_CTX_set_verify X509_STORE_CTX_set_verify_cb X509_STORE_CTX_verify X509_STORE_add_cert X509_STORE_add_crl X509_STORE_add_lookup X509_STORE_free X509_STORE_get0_objects X509_STORE_get0_param X509_STORE_get1_all_certs X509_STORE_get_cert_crl X509_STORE_get_check_crl X509_STORE_get_check_issued X509_STORE_get_check_policy X509_STORE_get_check_revocation X509_STORE_get_cleanup X509_STORE_get_ex_data X509_STORE_get_get_crl X509_STORE_get_get_issuer X509_STORE_get_lookup_certs X509_STORE_get_lookup_crls X509_STORE_get_verify X509_STORE_get_verify_cb X509_STORE_load_file X509_STORE_load_file_ex X509_STORE_load_locations X509_STORE_load_locations_ex X509_STORE_load_path X509_STORE_load_store X509_STORE_load_store_ex X509_STORE_lock X509_STORE_new X509_STORE_set1_param X509_STORE_set_cert_crl X509_STORE_set_check_crl X509_STORE_set_check_issued X509_STORE_set_check_policy X509_STORE_set_check_revocation X509_STORE_set_cleanup X509_STORE_set_default_paths X509_STORE_set_default_paths_ex X509_STORE_set_depth X509_STORE_set_ex_data X509_STORE_set_flags X509_STORE_set_get_crl X509_STORE_set_get_issuer X509_STORE_set_lookup_certs X509_STORE_set_lookup_crls X509_STORE_set_purpose X509_STORE_set_trust X509_STORE_set_verify X509_STORE_set_verify_cb X509_STORE_unlock X509_STORE_up_ref X509_TRUST_add X509_TRUST_cleanup X509_TRUST_get0 X509_TRUST_get0_name X509_TRUST_get_by_id X509_TRUST_get_count X509_TRUST_get_flags X509_TRUST_get_trust X509_TRUST_set X509_TRUST_set_default X509_VAL_free X509_VAL_it X509_VAL_new X509_VERIFY_PARAM_add0_policy X509_VERIFY_PARAM_add0_table X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_clear_flags X509_VERIFY_PARAM_free X509_VERIFY_PARAM_get0 X509_VERIFY_PARAM_get0_email X509_VERIFY_PARAM_get0_host X509_VERIFY_PARAM_get0_name X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get1_ip_asc X509_VERIFY_PARAM_get_auth_level X509_VERIFY_PARAM_get_count X509_VERIFY_PARAM_get_depth X509_VERIFY_PARAM_get_flags X509_VERIFY_PARAM_get_hostflags X509_VERIFY_PARAM_get_inh_flags X509_VERIFY_PARAM_get_time X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_lookup X509_VERIFY_PARAM_move_peername X509_VERIFY_PARAM_new X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set1_email X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_set1_ip X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_set1_name X509_VERIFY_PARAM_set1_policies X509_VERIFY_PARAM_set_auth_level X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set_flags X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_set_inh_flags X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_time X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_table_cleanup X509_add1_ext_i2d X509_add1_reject_object X509_add1_trust_object X509_add_cert X509_add_certs X509_add_ext X509_alias_get0 X509_alias_set1 X509_aux_print X509_build_chain X509_certificate_type X509_chain_check_suiteb X509_chain_up_ref X509_check_akid X509_check_ca X509_check_email X509_check_host X509_check_ip X509_check_ip_asc X509_check_issued X509_check_private_key X509_check_purpose X509_check_trust X509_cmp X509_cmp_current_time X509_cmp_time X509_cmp_timeframe X509_delete_ext X509_digest X509_digest_sig X509_dup X509_email_free X509_find_by_issuer_and_serial X509_find_by_subject X509_free X509_get0_authority_issuer X509_get0_authority_key_id X509_get0_authority_serial X509_get0_distinguishing_id X509_get0_extensions X509_get0_notAfter X509_get0_notBefore X509_get0_pubkey X509_get0_pubkey_bitstr X509_get0_reject_objects X509_get0_serialNumber X509_get0_signature X509_get0_subject_key_id X509_get0_tbs_sigalg X509_get0_trust_objects X509_get0_uids X509_get1_email X509_get1_ocsp X509_get_X509_PUBKEY X509_get_default_cert_area X509_get_default_cert_dir X509_get_default_cert_dir_env X509_get_default_cert_file X509_get_default_cert_file_env X509_get_default_private_dir X509_get_ex_data X509_get_ext X509_get_ext_by_NID X509_get_ext_by_OBJ X509_get_ext_by_critical X509_get_ext_count X509_get_ext_d2i X509_get_extended_key_usage X509_get_extension_flags X509_get_issuer_name X509_get_key_usage X509_get_pathlen X509_get_proxy_pathlen X509_get_pubkey X509_get_pubkey_parameters X509_get_serialNumber X509_get_signature_info X509_get_signature_nid X509_get_signature_type X509_get_subject_name X509_get_version X509_getm_notAfter X509_getm_notBefore X509_gmtime_adj X509_issuer_and_serial_cmp X509_issuer_and_serial_hash X509_issuer_name_cmp X509_issuer_name_hash X509_issuer_name_hash_old X509_it X509_keyid_get0 X509_keyid_set1 X509_load_cert_crl_file X509_load_cert_crl_file_ex X509_load_cert_file X509_load_cert_file_ex X509_load_crl_file X509_load_http X509_new X509_new_ex X509_ocspid_print X509_policy_check X509_policy_level_get0_node X509_policy_level_node_count X509_policy_node_get0_parent X509_policy_node_get0_policy X509_policy_node_get0_qualifiers X509_policy_tree_free X509_policy_tree_get0_level X509_policy_tree_get0_policies X509_policy_tree_get0_user_policies X509_policy_tree_level_count X509_print X509_print_ex X509_print_ex_fp X509_print_fp X509_pubkey_digest X509_reject_clear X509_self_signed X509_set0_distinguishing_id X509_set1_notAfter X509_set1_notBefore X509_set_ex_data X509_set_issuer_name X509_set_proxy_flag X509_set_proxy_pathlen X509_set_pubkey X509_set_serialNumber X509_set_subject_name X509_set_version X509_sign X509_sign_ctx X509_signature_dump X509_signature_print X509_subject_name_cmp X509_subject_name_hash X509_subject_name_hash_old X509_supported_extension X509_time_adj X509_time_adj_ex X509_to_X509_REQ X509_trust_clear X509_trusted X509_up_ref X509_verify X509_verify_cert X509_verify_cert_error_string X509at_add1_attr X509at_add1_attr_by_NID X509at_add1_attr_by_OBJ X509at_add1_attr_by_txt X509at_delete_attr X509at_get0_data_by_OBJ X509at_get_attr X509at_get_attr_by_NID X509at_get_attr_by_OBJ X509at_get_attr_count X509v3_add_ext X509v3_addr_add_inherit X509v3_addr_add_prefix X509v3_addr_add_range X509v3_addr_canonize X509v3_addr_get_afi X509v3_addr_get_range X509v3_addr_inherits X509v3_addr_is_canonical X509v3_addr_subset X509v3_addr_validate_path X509v3_addr_validate_resource_set X509v3_asid_add_id_or_range X509v3_asid_add_inherit X509v3_asid_canonize X509v3_asid_inherits X509v3_asid_is_canonical X509v3_asid_subset X509v3_asid_validate_path X509v3_asid_validate_resource_set X509v3_delete_ext X509v3_get_ext X509v3_get_ext_by_NID X509v3_get_ext_by_OBJ X509v3_get_ext_by_critical X509v3_get_ext_count ZINT32_it ZINT64_it ZLONG_it ZUINT32_it ZUINT64_it a2d_ASN1_OBJECT a2i_ASN1_ENUMERATED a2i_ASN1_INTEGER a2i_ASN1_STRING a2i_GENERAL_NAME a2i_IPADDRESS a2i_IPADDRESS_NC asn1_d2i_read_bio b2i_PVK_bio b2i_PVK_bio_ex b2i_PrivateKey b2i_PrivateKey_bio b2i_PublicKey b2i_PublicKey_bio conf_ssl_get conf_ssl_get_cmd conf_ssl_name_find d2i_ACCESS_DESCRIPTION d2i_ADMISSIONS d2i_ADMISSION_SYNTAX d2i_ASIdOrRange d2i_ASIdentifierChoice d2i_ASIdentifiers d2i_ASN1_BIT_STRING d2i_ASN1_BMPSTRING d2i_ASN1_ENUMERATED d2i_ASN1_GENERALIZEDTIME d2i_ASN1_GENERALSTRING d2i_ASN1_IA5STRING d2i_ASN1_INTEGER d2i_ASN1_NULL d2i_ASN1_OBJECT d2i_ASN1_OCTET_STRING d2i_ASN1_PRINTABLE d2i_ASN1_PRINTABLESTRING d2i_ASN1_SEQUENCE_ANY d2i_ASN1_SET_ANY d2i_ASN1_T61STRING d2i_ASN1_TIME d2i_ASN1_TYPE d2i_ASN1_UINTEGER d2i_ASN1_UNIVERSALSTRING d2i_ASN1_UTCTIME d2i_ASN1_UTF8STRING d2i_ASN1_VISIBLESTRING d2i_ASRange d2i_AUTHORITY_INFO_ACCESS d2i_AUTHORITY_KEYID d2i_AutoPrivateKey d2i_AutoPrivateKey_ex d2i_BASIC_CONSTRAINTS d2i_CERTIFICATEPOLICIES d2i_CMS_ContentInfo d2i_CMS_ReceiptRequest d2i_CMS_bio d2i_CRL_DIST_POINTS d2i_DHparams d2i_DHxparams d2i_DIRECTORYSTRING d2i_DISPLAYTEXT d2i_DIST_POINT d2i_DIST_POINT_NAME d2i_DSAPrivateKey d2i_DSAPrivateKey_bio d2i_DSAPrivateKey_fp d2i_DSAPublicKey d2i_DSA_PUBKEY d2i_DSA_PUBKEY_bio d2i_DSA_PUBKEY_fp d2i_DSA_SIG d2i_DSAparams d2i_ECDSA_SIG d2i_ECPKParameters d2i_ECParameters d2i_ECPrivateKey d2i_ECPrivateKey_bio d2i_ECPrivateKey_fp d2i_EC_PUBKEY d2i_EC_PUBKEY_bio d2i_EC_PUBKEY_fp d2i_EDIPARTYNAME d2i_ESS_CERT_ID d2i_ESS_CERT_ID_V2 d2i_ESS_ISSUER_SERIAL d2i_ESS_SIGNING_CERT d2i_ESS_SIGNING_CERT_V2 d2i_EXTENDED_KEY_USAGE d2i_GENERAL_NAME d2i_GENERAL_NAMES d2i_IPAddressChoice d2i_IPAddressFamily d2i_IPAddressOrRange d2i_IPAddressRange d2i_ISSUER_SIGN_TOOL d2i_ISSUING_DIST_POINT d2i_KeyParams d2i_KeyParams_bio d2i_NAMING_AUTHORITY d2i_NETSCAPE_CERT_SEQUENCE d2i_NETSCAPE_SPKAC d2i_NETSCAPE_SPKI d2i_NOTICEREF d2i_OCSP_BASICRESP d2i_OCSP_CERTID d2i_OCSP_CERTSTATUS d2i_OCSP_CRLID d2i_OCSP_ONEREQ d2i_OCSP_REQINFO d2i_OCSP_REQUEST d2i_OCSP_RESPBYTES d2i_OCSP_RESPDATA d2i_OCSP_RESPID d2i_OCSP_RESPONSE d2i_OCSP_REVOKEDINFO d2i_OCSP_SERVICELOC d2i_OCSP_SIGNATURE d2i_OCSP_SINGLERESP d2i_OSSL_CMP_MSG d2i_OSSL_CMP_MSG_bio d2i_OSSL_CMP_PKIHEADER d2i_OSSL_CMP_PKISI d2i_OSSL_CRMF_CERTID d2i_OSSL_CRMF_CERTTEMPLATE d2i_OSSL_CRMF_ENCRYPTEDVALUE d2i_OSSL_CRMF_MSG d2i_OSSL_CRMF_MSGS d2i_OSSL_CRMF_PBMPARAMETER d2i_OSSL_CRMF_PKIPUBLICATIONINFO d2i_OSSL_CRMF_SINGLEPUBINFO d2i_OTHERNAME d2i_PBE2PARAM d2i_PBEPARAM d2i_PBKDF2PARAM d2i_PKCS12 d2i_PKCS12_BAGS d2i_PKCS12_MAC_DATA d2i_PKCS12_SAFEBAG d2i_PKCS12_bio d2i_PKCS12_fp d2i_PKCS7 d2i_PKCS7_DIGEST d2i_PKCS7_ENCRYPT d2i_PKCS7_ENC_CONTENT d2i_PKCS7_ENVELOPE d2i_PKCS7_ISSUER_AND_SERIAL d2i_PKCS7_RECIP_INFO d2i_PKCS7_SIGNED d2i_PKCS7_SIGNER_INFO d2i_PKCS7_SIGN_ENVELOPE d2i_PKCS7_bio d2i_PKCS7_fp d2i_PKCS8PrivateKey_bio d2i_PKCS8PrivateKey_fp d2i_PKCS8_PRIV_KEY_INFO d2i_PKCS8_PRIV_KEY_INFO_bio d2i_PKCS8_PRIV_KEY_INFO_fp d2i_PKCS8_bio d2i_PKCS8_fp d2i_PKEY_USAGE_PERIOD d2i_POLICYINFO d2i_POLICYQUALINFO d2i_PROFESSION_INFO d2i_PROXY_CERT_INFO_EXTENSION d2i_PROXY_POLICY d2i_PUBKEY d2i_PUBKEY_bio d2i_PUBKEY_ex d2i_PUBKEY_fp d2i_PrivateKey d2i_PrivateKey_bio d2i_PrivateKey_ex d2i_PrivateKey_ex_bio d2i_PrivateKey_ex_fp d2i_PrivateKey_fp d2i_PublicKey d2i_RSAPrivateKey d2i_RSAPrivateKey_bio d2i_RSAPrivateKey_fp d2i_RSAPublicKey d2i_RSAPublicKey_bio d2i_RSAPublicKey_fp d2i_RSA_OAEP_PARAMS d2i_RSA_PSS_PARAMS d2i_RSA_PUBKEY d2i_RSA_PUBKEY_bio d2i_RSA_PUBKEY_fp d2i_SCRYPT_PARAMS d2i_SCT_LIST d2i_SXNET d2i_SXNETID d2i_TS_ACCURACY d2i_TS_MSG_IMPRINT d2i_TS_MSG_IMPRINT_bio d2i_TS_MSG_IMPRINT_fp d2i_TS_REQ d2i_TS_REQ_bio d2i_TS_REQ_fp d2i_TS_RESP d2i_TS_RESP_bio d2i_TS_RESP_fp d2i_TS_STATUS_INFO d2i_TS_TST_INFO d2i_TS_TST_INFO_bio d2i_TS_TST_INFO_fp d2i_USERNOTICE d2i_X509 d2i_X509_ALGOR d2i_X509_ALGORS d2i_X509_ATTRIBUTE d2i_X509_AUX d2i_X509_CERT_AUX d2i_X509_CINF d2i_X509_CRL d2i_X509_CRL_INFO d2i_X509_CRL_bio d2i_X509_CRL_fp d2i_X509_EXTENSION d2i_X509_EXTENSIONS d2i_X509_NAME d2i_X509_NAME_ENTRY d2i_X509_PUBKEY d2i_X509_PUBKEY_bio d2i_X509_PUBKEY_fp d2i_X509_REQ d2i_X509_REQ_INFO d2i_X509_REQ_bio d2i_X509_REQ_fp d2i_X509_REVOKED d2i_X509_SIG d2i_X509_VAL d2i_X509_bio d2i_X509_fp err_free_strings_int i2a_ACCESS_DESCRIPTION i2a_ASN1_ENUMERATED i2a_ASN1_INTEGER i2a_ASN1_OBJECT i2a_ASN1_STRING i2b_PVK_bio i2b_PVK_bio_ex i2b_PrivateKey_bio i2b_PublicKey_bio i2d_ACCESS_DESCRIPTION i2d_ADMISSIONS i2d_ADMISSION_SYNTAX i2d_ASIdOrRange i2d_ASIdentifierChoice i2d_ASIdentifiers i2d_ASN1_BIT_STRING i2d_ASN1_BMPSTRING i2d_ASN1_ENUMERATED i2d_ASN1_GENERALIZEDTIME i2d_ASN1_GENERALSTRING i2d_ASN1_IA5STRING i2d_ASN1_INTEGER i2d_ASN1_NULL i2d_ASN1_OBJECT i2d_ASN1_OCTET_STRING i2d_ASN1_PRINTABLE i2d_ASN1_PRINTABLESTRING i2d_ASN1_SEQUENCE_ANY i2d_ASN1_SET_ANY i2d_ASN1_T61STRING i2d_ASN1_TIME i2d_ASN1_TYPE i2d_ASN1_UNIVERSALSTRING i2d_ASN1_UTCTIME i2d_ASN1_UTF8STRING i2d_ASN1_VISIBLESTRING i2d_ASN1_bio_stream i2d_ASRange i2d_AUTHORITY_INFO_ACCESS i2d_AUTHORITY_KEYID i2d_BASIC_CONSTRAINTS i2d_CERTIFICATEPOLICIES i2d_CMS_ContentInfo i2d_CMS_ReceiptRequest i2d_CMS_bio i2d_CMS_bio_stream i2d_CRL_DIST_POINTS i2d_DHparams i2d_DHxparams i2d_DIRECTORYSTRING i2d_DISPLAYTEXT i2d_DIST_POINT i2d_DIST_POINT_NAME i2d_DSAPrivateKey i2d_DSAPrivateKey_bio i2d_DSAPrivateKey_fp i2d_DSAPublicKey i2d_DSA_PUBKEY i2d_DSA_PUBKEY_bio i2d_DSA_PUBKEY_fp i2d_DSA_SIG i2d_DSAparams i2d_ECDSA_SIG i2d_ECPKParameters i2d_ECParameters i2d_ECPrivateKey i2d_ECPrivateKey_bio i2d_ECPrivateKey_fp i2d_EC_PUBKEY i2d_EC_PUBKEY_bio i2d_EC_PUBKEY_fp i2d_EDIPARTYNAME i2d_ESS_CERT_ID i2d_ESS_CERT_ID_V2 i2d_ESS_ISSUER_SERIAL i2d_ESS_SIGNING_CERT i2d_ESS_SIGNING_CERT_V2 i2d_EXTENDED_KEY_USAGE i2d_GENERAL_NAME i2d_GENERAL_NAMES i2d_IPAddressChoice i2d_IPAddressFamily i2d_IPAddressOrRange i2d_IPAddressRange i2d_ISSUER_SIGN_TOOL i2d_ISSUING_DIST_POINT i2d_KeyParams i2d_KeyParams_bio i2d_NAMING_AUTHORITY i2d_NETSCAPE_CERT_SEQUENCE i2d_NETSCAPE_SPKAC i2d_NETSCAPE_SPKI i2d_NOTICEREF i2d_OCSP_BASICRESP i2d_OCSP_CERTID i2d_OCSP_CERTSTATUS i2d_OCSP_CRLID i2d_OCSP_ONEREQ i2d_OCSP_REQINFO i2d_OCSP_REQUEST i2d_OCSP_RESPBYTES i2d_OCSP_RESPDATA i2d_OCSP_RESPID i2d_OCSP_RESPONSE i2d_OCSP_REVOKEDINFO i2d_OCSP_SERVICELOC i2d_OCSP_SIGNATURE i2d_OCSP_SINGLERESP i2d_OSSL_CMP_MSG i2d_OSSL_CMP_MSG_bio i2d_OSSL_CMP_PKIHEADER i2d_OSSL_CMP_PKISI i2d_OSSL_CRMF_CERTID i2d_OSSL_CRMF_CERTTEMPLATE i2d_OSSL_CRMF_ENCRYPTEDVALUE i2d_OSSL_CRMF_MSG i2d_OSSL_CRMF_MSGS i2d_OSSL_CRMF_PBMPARAMETER i2d_OSSL_CRMF_PKIPUBLICATIONINFO i2d_OSSL_CRMF_SINGLEPUBINFO i2d_OTHERNAME i2d_PBE2PARAM i2d_PBEPARAM i2d_PBKDF2PARAM i2d_PKCS12 i2d_PKCS12_BAGS i2d_PKCS12_MAC_DATA i2d_PKCS12_SAFEBAG i2d_PKCS12_bio i2d_PKCS12_fp i2d_PKCS7 i2d_PKCS7_DIGEST i2d_PKCS7_ENCRYPT i2d_PKCS7_ENC_CONTENT i2d_PKCS7_ENVELOPE i2d_PKCS7_ISSUER_AND_SERIAL i2d_PKCS7_NDEF i2d_PKCS7_RECIP_INFO i2d_PKCS7_SIGNED i2d_PKCS7_SIGNER_INFO i2d_PKCS7_SIGN_ENVELOPE i2d_PKCS7_bio i2d_PKCS7_bio_stream i2d_PKCS7_fp i2d_PKCS8PrivateKeyInfo_bio i2d_PKCS8PrivateKeyInfo_fp i2d_PKCS8PrivateKey_bio i2d_PKCS8PrivateKey_fp i2d_PKCS8PrivateKey_nid_bio i2d_PKCS8PrivateKey_nid_fp i2d_PKCS8_PRIV_KEY_INFO i2d_PKCS8_PRIV_KEY_INFO_bio i2d_PKCS8_PRIV_KEY_INFO_fp i2d_PKCS8_bio i2d_PKCS8_fp i2d_PKEY_USAGE_PERIOD i2d_POLICYINFO i2d_POLICYQUALINFO i2d_PROFESSION_INFO i2d_PROXY_CERT_INFO_EXTENSION i2d_PROXY_POLICY i2d_PUBKEY i2d_PUBKEY_bio i2d_PUBKEY_fp i2d_PrivateKey i2d_PrivateKey_bio i2d_PrivateKey_fp i2d_PublicKey i2d_RSAPrivateKey i2d_RSAPrivateKey_bio i2d_RSAPrivateKey_fp i2d_RSAPublicKey i2d_RSAPublicKey_bio i2d_RSAPublicKey_fp i2d_RSA_OAEP_PARAMS i2d_RSA_PSS_PARAMS i2d_RSA_PUBKEY i2d_RSA_PUBKEY_bio i2d_RSA_PUBKEY_fp i2d_SCRYPT_PARAMS i2d_SCT_LIST i2d_SXNET i2d_SXNETID i2d_TS_ACCURACY i2d_TS_MSG_IMPRINT i2d_TS_MSG_IMPRINT_bio i2d_TS_MSG_IMPRINT_fp i2d_TS_REQ i2d_TS_REQ_bio i2d_TS_REQ_fp i2d_TS_RESP i2d_TS_RESP_bio i2d_TS_RESP_fp i2d_TS_STATUS_INFO i2d_TS_TST_INFO i2d_TS_TST_INFO_bio i2d_TS_TST_INFO_fp i2d_USERNOTICE i2d_X509 i2d_X509_ALGOR i2d_X509_ALGORS i2d_X509_ATTRIBUTE i2d_X509_AUX i2d_X509_CERT_AUX i2d_X509_CINF i2d_X509_CRL i2d_X509_CRL_INFO i2d_X509_CRL_bio i2d_X509_CRL_fp i2d_X509_EXTENSION i2d_X509_EXTENSIONS i2d_X509_NAME i2d_X509_NAME_ENTRY i2d_X509_PUBKEY i2d_X509_PUBKEY_bio i2d_X509_PUBKEY_fp i2d_X509_REQ i2d_X509_REQ_INFO i2d_X509_REQ_bio i2d_X509_REQ_fp i2d_X509_REVOKED i2d_X509_SIG i2d_X509_VAL i2d_X509_bio i2d_X509_fp i2d_re_X509_CRL_tbs i2d_re_X509_REQ_tbs i2d_re_X509_tbs i2o_ECPublicKey i2o_SCT i2o_SCT_LIST i2s_ASN1_ENUMERATED i2s_ASN1_ENUMERATED_TABLE i2s_ASN1_IA5STRING i2s_ASN1_INTEGER i2s_ASN1_OCTET_STRING i2s_ASN1_UTF8STRING i2t_ASN1_OBJECT i2v_ASN1_BIT_STRING i2v_GENERAL_NAME i2v_GENERAL_NAMES o2i_ECPublicKey o2i_SCT o2i_SCT_LIST s2i_ASN1_IA5STRING s2i_ASN1_INTEGER s2i_ASN1_OCTET_STRING s2i_ASN1_UTF8STRING v2i_ASN1_BIT_STRING v2i_GENERAL_NAME v2i_GENERAL_NAMES v2i_GENERAL_NAME_ex

Name

.text

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/libffi-8.dll

IMPHASH 3dc8b86d60f90a1851eee5f9dc191312
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

28:e0:f1:58:7c:1f:18:3e:64:76:e2:2b:70:a9:25:bf:ec:55:9c:6f:4b:32:d6:13:92:b3:26:65:9d:c4:0c:67

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Feb 9, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

19680

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/libssl-3.dll

IMPHASH d7b4c2840f7d9940b920a4860e6a80b5
SHA256 41ad1a04ca27a7959579e87fbbda87c93099616a64a0e66260c983381c5570d1
MD5 bfc834bb2310ddf01be9ad9cff7c2a41
SHA1 fb1d601b4fcb29ff1b13b0d2ed7119bd0472205c
SHA512 6af473c7c0997f2847ebe7cee8ef67cd682dee41720d4f268964330b449ba71398fda8954524f9a97cc4cdf9893b8bdc7a1cf40e9e45a73f4f35a37f31c6a9c3
SSDEEP 6144:7aO1lo7USZGjweMMHO4+xuVg7gCl2VdhMd1DdwMVn4TERUr3zgKpJJ/wknofFe9A:FkeMKOr97gCAE35gEGzLpwknofFe9XbE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

da:b2:a0:46:41:fa:33:ff:36:0b:83:13:53:2a:b9:36:ce:d0:63:50:93:e0:7f:b2:1c:b6:95:8b:19:73:e9:79

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Sep 27, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

4171

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\libssl-3.pdb

libcrypto-3

COMP_CTX_free BIO_s_mem OSSL_PARAM_construct_octet_string OSSL_PARAM_construct_end EVP_MD_get_type EVP_MD_get_size EVP_MD_CTX_get0_md EVP_CIPHER_get0_provider EVP_CIPHER_get_key_length EVP_CIPHER_get_iv_length EVP_MD_CTX_set_params EVP_MD_CTX_copy_ex EVP_DigestFinal_ex EVP_CipherInit_ex EVP_CIPHER_CTX_new EVP_CIPHER_CTX_reset OPENSSL_sk_num OPENSSL_sk_value OPENSSL_sk_new_reserve OPENSSL_sk_pop_free CRYPTO_memdup CRYPTO_strdup EVP_PKEY_CTX_set_dh_pad EVP_PKEY_is_a EVP_PKEY_up_ref EVP_PKEY_free EVP_PKEY_CTX_new_from_name EVP_PKEY_CTX_new_from_pkey EVP_PKEY_CTX_free EVP_PKEY_derive_init EVP_PKEY_derive_set_peer EVP_PKEY_derive EVP_PKEY_encapsulate_init EVP_PKEY_encapsulate EVP_PKEY_decapsulate_init EVP_PKEY_decapsulate EVP_PKEY_paramgen_init EVP_PKEY_paramgen EVP_PKEY_keygen_init EVP_PKEY_keygen EVP_PKEY_CTX_set_group_name X509_NAME_free X509_free RAND_bytes_ex X509_it INT32_it ZINT32_it UINT32_it ZUINT32_it ZINT64_it ZUINT64_it ASN1_OCTET_STRING_it CRYPTO_strndup ASN1_item_free ASN1_item_d2i ASN1_item_i2d OPENSSL_DIR_read OPENSSL_DIR_end OPENSSL_sk_shift OPENSSL_sk_pop OPENSSL_sk_set_cmp_func CRYPTO_THREAD_lock_new CRYPTO_THREAD_lock_free CRYPTO_get_ex_new_index CRYPTO_THREAD_run_once OSSL_LIB_CTX_set0_default BIO_s_file BIO_snprintf OBJ_nid2ln OBJ_nid2sn OPENSSL_LH_new OPENSSL_LH_free OPENSSL_LH_insert OPENSSL_LH_retrieve X509_verify_cert X509_STORE_new X509_STORE_free X509_STORE_up_ref X509_STORE_CTX_new_ex X509_STORE_CTX_free X509_STORE_CTX_init X509_STORE_CTX_set_verify_cb X509_STORE_add_cert X509_STORE_CTX_set_ex_data X509_STORE_CTX_get_error X509_STORE_CTX_get0_chain X509_STORE_CTX_get1_chain X509_STORE_CTX_set_flags X509_STORE_CTX_get0_param X509_STORE_CTX_set_default X509_STORE_CTX_set0_dane X509_VERIFY_PARAM_set1 X509_VERIFY_PARAM_set_auth_level X509_VERIFY_PARAM_move_peername X509_verify_cert_error_string X509_NAME_dup i2d_X509_NAME X509_new_ex X509_get_subject_name X509_up_ref X509_chain_up_ref X509_cmp X509_NAME_hash_ex PEM_read_bio_X509 OSSL_STORE_open OSSL_STORE_load OSSL_STORE_eof OSSL_STORE_error OSSL_STORE_close OSSL_STORE_INFO_get_type OSSL_STORE_INFO_get0_NAME OSSL_STORE_INFO_get0_CERT OSSL_STORE_INFO_free X509_get_extension_flags OPENSSL_sk_new OPENSSL_sk_delete OPENSSL_sk_unshift OPENSSL_sk_dup OPENSSL_sk_sort COMP_get_type COMP_get_name COMP_zlib EVP_CIPHER_get_block_size EVP_CIPHER_get_flags EVP_CIPHER_get_mode EVP_CIPHER_fetch EVP_get_cipherbyname EVP_get_digestbyname EVP_PKEY_asn1_find_str EVP_PKEY_asn1_get0_info EVP_SIGNATURE_free EVP_SIGNATURE_fetch EVP_KEYEXCH_free EVP_KEYEXCH_fetch CONF_parse_list ERR_set_mark ERR_pop_to_mark OPENSSL_strcasecmp OPENSSL_strncasecmp ERR_clear_last_mark X509_STORE_load_path X509_STORE_load_file_ex X509_STORE_load_store_ex OSSL_DECODER_CTX_free OSSL_DECODER_from_bio OSSL_DECODER_CTX_new_for_pkey ERR_reason_error_string ERR_load_strings_const OPENSSL_init_crypto OPENSSL_atexit OPENSSL_sk_insert CRYPTO_THREAD_read_lock CRYPTO_THREAD_write_lock CRYPTO_THREAD_unlock OPENSSL_strnlen CRYPTO_new_ex_data CRYPTO_dup_ex_data CRYPTO_free_ex_data CRYPTO_set_ex_data CRYPTO_get_ex_data CRYPTO_realloc CRYPTO_secure_zalloc CRYPTO_secure_free BUF_MEM_free COMP_CTX_get_method BIO_int_ctrl BIO_pop BIO_free_all BIO_s_socket ASN1_OCTET_STRING_free OPENSSL_LH_num_items ERR_peek_error OBJ_bsearch_ EVP_MD_get0_provider EVP_CIPHER_up_ref EVP_CIPHER_free EVP_MD_fetch EVP_MD_up_ref EVP_MD_free EVP_CIPHER_CTX_free EVP_PKEY_get_security_bits X509_STORE_add_lookup X509_LOOKUP_hash_dir X509_LOOKUP_file X509_LOOKUP_store X509_LOOKUP_ctrl X509_LOOKUP_ctrl_ex X509_STORE_set_default_paths_ex X509_VERIFY_PARAM_new X509_VERIFY_PARAM_free X509_VERIFY_PARAM_inherit X509_VERIFY_PARAM_set_purpose X509_VERIFY_PARAM_set_trust X509_VERIFY_PARAM_set_depth X509_VERIFY_PARAM_set1_host X509_VERIFY_PARAM_add1_host X509_VERIFY_PARAM_set_hostflags X509_VERIFY_PARAM_get0_peername X509_VERIFY_PARAM_get1_ip_asc X509_VERIFY_PARAM_set1_ip_asc X509_VERIFY_PARAM_get_depth d2i_PUBKEY X509_EXTENSION_free d2i_X509 X509_get0_pubkey X509_check_private_key X509_get_ext_d2i ASYNC_WAIT_CTX_new ASYNC_WAIT_CTX_free ASYNC_WAIT_CTX_get_all_fds ASYNC_WAIT_CTX_set_callback ASYNC_WAIT_CTX_get_status ASYNC_WAIT_CTX_get_changed_fds ASYNC_start_job SHA256_Transform CT_POLICY_EVAL_CTX_new_ex CT_POLICY_EVAL_CTX_free CT_POLICY_EVAL_CTX_set1_cert CT_POLICY_EVAL_CTX_set1_issuer CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE CT_POLICY_EVAL_CTX_set_time SCT_LIST_free SCT_set_source SCT_get_validation_status SCT_LIST_validate o2i_SCT_LIST CTLOG_STORE_new_ex CTLOG_STORE_free CTLOG_STORE_load_file CTLOG_STORE_load_default_file X509_get_key_usage a2i_IPADDRESS RAND_priv_bytes_ex OCSP_response_get1_basic OCSP_resp_count OCSP_resp_get0 OCSP_SINGLERESP_get1_ext_d2i OCSP_BASICRESP_free OCSP_RESPID_free OCSP_RESPONSE_free COMP_CTX_new conf_ssl_get conf_ssl_name_find conf_ssl_get_cmd ERR_peek_last_error EVP_PKEY_can_sign d2i_PrivateKey_ex EVP_PKEY_copy_parameters EVP_PKEY_missing_parameters EVP_PKEY_eq d2i_X509_bio d2i_PrivateKey_ex_bio X509_get_pubkey PEM_read_bio PEM_read_bio_X509_AUX PEM_read_bio_PrivateKey_ex RSA_free RSA_up_ref d2i_RSAPrivateKey EVP_PKEY_assign EVP_PKEY_new d2i_RSAPrivateKey_bio PEM_read_bio_RSAPrivateKey OPENSSL_LH_delete OPENSSL_LH_get_down_load OPENSSL_LH_set_down_load PEM_ASN1_read_bio PEM_ASN1_write_bio PEM_ASN1_read PEM_ASN1_write BIO_puts BIO_dump_indent BIO_printf OSSL_PARAM_construct_int OSSL_PARAM_construct_size_t OSSL_PARAM_construct_utf8_string EVP_MD_get0_name EVP_DigestSignInit_ex EVP_CIPHER_CTX_ctrl EVP_CIPHER_CTX_set_params EVP_PKEY_new_mac_key EVP_PKEY_new_raw_private_key_ex EVP_KDF_free EVP_KDF_fetch EVP_KDF_CTX_new EVP_KDF_CTX_free EVP_KDF_derive CRYPTO_memcmp BN_free BN_get_rfc2409_prime_1024 BN_get_rfc3526_prime_2048 BN_get_rfc3526_prime_3072 BN_get_rfc3526_prime_4096 BN_get_rfc3526_prime_8192 OBJ_txt2nid OBJ_ln2nid OBJ_sn2nid OSSL_PARAM_locate_const OSSL_PARAM_get_int OSSL_PARAM_get_uint OSSL_PARAM_free EVP_CIPHER_CTX_get_iv_length EVP_DecryptInit_ex EVP_DecryptUpdate EVP_DecryptFinal EVP_MAC_fetch EVP_MAC_free EVP_MAC_CTX_new EVP_MAC_CTX_free EVP_MAC_CTX_get_mac_size EVP_MAC_init EVP_MAC_update EVP_MAC_final EVP_PKEY_get_id EVP_PKEY_get_bits EVP_PKEY_get_size EVP_PKEY_set_type EVP_PKEY_digestsign_supports_digest EVP_PKEY_set1_encoded_public_key EVP_KEYMGMT_fetch EVP_KEYMGMT_free EVP_KEYMGMT_get0_provider EVP_PKEY_fromdata_init EVP_PKEY_fromdata EVP_PKEY_get_ec_point_conv_form EVP_PKEY_get_field_type EVP_PKEY_get_group_name X509_get_signature_info X509_get_signature_nid X509_get_issuer_name X509_chain_check_suiteb X509_NAME_cmp OSSL_PROVIDER_do_all OSSL_PROVIDER_get_capabilities OSSL_PARAM_BLD_new OSSL_PARAM_BLD_to_param OSSL_PARAM_BLD_free OSSL_PARAM_BLD_push_uint OSSL_PARAM_BLD_push_BN BIO_indent d2i_X509_NAME X509_NAME_print_ex X509_print_ex PEM_write_bio_X509 EVP_Q_mac EC_GROUP_get_curve_name EC_KEY_get0_group EVP_PKEY_set1_DH ENGINE_get_ssl_client_cert_function ENGINE_get_cipher ENGINE_get_digest ENGINE_init ENGINE_finish ENGINE_load_ssl_client_cert ENGINE_get_cipher_engine ENGINE_get_digest_engine HMAC_size HMAC_CTX_new HMAC_CTX_free HMAC_Init_ex HMAC_Update HMAC_Final BN_is_zero BN_num_bits BN_clear_free BN_copy BN_bin2bn BN_bn2bin BN_dup BN_ucmp SRP_create_verifier_BN_ex SRP_check_known_gN_param SRP_get_default_gN SRP_Calc_server_key SRP_Calc_B_ex SRP_Verify_A_mod_N SRP_Calc_u_ex SRP_Calc_x_ex SRP_Calc_A SRP_Calc_client_key_ex SRP_Verify_B_mod_N EVP_CIPHER_CTX_get0_cipher COMP_compress_block COMP_expand_block OSSL_PARAM_construct_octet_ptr EVP_MD_CTX_get_pkey_ctx EVP_CIPHER_CTX_get_block_size EVP_Cipher EVP_MD_CTX_ctrl EVP_MD_CTX_copy EVP_CipherUpdate EVP_DigestSignUpdate EVP_DigestSignFinal EVP_CIPHER_CTX_get_params EVP_PKEY_CTX_set_params EVP_CipherFinal_ex EVP_PKEY_get1_encoded_public_key i2d_X509_EXTENSIONS i2d_OCSP_RESPID EVP_DigestSign d2i_X509_EXTENSIONS d2i_OCSP_RESPID BUF_MEM_new BUF_MEM_grow_clean ERR_vset_error EVP_Digest EVP_DigestInit EVP_DigestVerify EVP_DigestVerifyInit_ex EVP_PKEY_CTX_ctrl EVP_PKEY_encrypt_init EVP_PKEY_encrypt EVP_PKEY_public_check EVP_PKEY_param_check_quick EVP_PKEY_CTX_set_rsa_padding EVP_PKEY_CTX_set_rsa_pss_saltlen BUF_reverse EVP_DigestVerifyUpdate EVP_DigestVerifyFinal i2d_X509 ASN1_ANY_it ASN1_TYPE_get ASN1_item_new OSSL_PARAM_construct_uint EVP_EncryptInit_ex EVP_EncryptUpdate EVP_EncryptFinal EVP_PKEY_decrypt_init EVP_PKEY_decrypt EVP_PKEY_get_bn_param SHA256_Init SHA224_Init SHA1_Transform SHA1_Init MD5_Transform MD5_Init EVP_DigestFinal EVP_DigestUpdate EVP_DigestInit_ex EVP_MD_CTX_free EVP_MD_CTX_new EVP_MD_is_a CRYPTO_malloc OPENSSL_sk_push OPENSSL_sk_find OPENSSL_sk_free OPENSSL_sk_new_null ERR_clear_error BIO_ADDR_clear BIO_ADDR_free BIO_ADDR_new BIO_read BIO_test_flags BIO_copy_next_retry BIO_f_buffer BIO_s_connect BIO_set_retry_reason BIO_get_retry_reason BIO_set_next BIO_next BIO_find_type BIO_push BIO_callback_ctrl BIO_ctrl BIO_write OPENSSL_cleanse CRYPTO_clear_free SHA512_Transform BIO_up_ref BIO_get_shutdown BIO_set_shutdown BIO_get_init BIO_set_init BIO_get_data BIO_set_data BIO_free BIO_new BIO_method_type BIO_clear_flags BIO_set_flags ERR_set_error ERR_set_debug ERR_new BUF_MEM_grow SHA512_Init d2i_OCSP_RESPONSE SHA384_Init CRYPTO_free ASYNC_get_current_job CRYPTO_zalloc

kernel32

DisableThreadLibraryCalls SetLastError GetSystemTime SystemTimeToFileTime GetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId InitializeSListHead GetCurrentThreadId GetSystemTimeAsFileTime GetModuleHandleW IsDebuggerPresent GetStartupInfoW

vcruntime140

__C_specific_handler memchr memmove __std_type_info_destroy_list __current_exception_context strchr memset memcpy strstr memcmp __current_exception

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

terminate _initterm _initterm_e _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _crt_at_quick_exit _cexit _errno

api-ms-win-crt-filesystem-l1-1-0

_stat64i32

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

BIO_f_ssl BIO_new_buffer_ssl_connect BIO_new_ssl BIO_new_ssl_connect BIO_ssl_copy_session_id BIO_ssl_shutdown DTLS_client_method DTLS_get_data_mtu DTLS_method DTLS_server_method DTLS_set_timer_cb DTLSv1_2_client_method DTLSv1_2_method DTLSv1_2_server_method DTLSv1_client_method DTLSv1_listen DTLSv1_method DTLSv1_server_method ERR_load_SSL_strings OPENSSL_cipher_name OPENSSL_init_ssl OSSL_default_cipher_list OSSL_default_ciphersuites PEM_read_SSL_SESSION PEM_read_bio_SSL_SESSION PEM_write_SSL_SESSION PEM_write_bio_SSL_SESSION SRP_Calc_A_param SSL_CIPHER_description SSL_CIPHER_find SSL_CIPHER_get_auth_nid SSL_CIPHER_get_bits SSL_CIPHER_get_cipher_nid SSL_CIPHER_get_digest_nid SSL_CIPHER_get_handshake_digest SSL_CIPHER_get_id SSL_CIPHER_get_kx_nid SSL_CIPHER_get_name SSL_CIPHER_get_protocol_id SSL_CIPHER_get_version SSL_CIPHER_is_aead SSL_CIPHER_standard_name SSL_COMP_add_compression_method SSL_COMP_get0_name SSL_COMP_get_compression_methods SSL_COMP_get_id SSL_COMP_get_name SSL_COMP_set0_compression_methods SSL_CONF_CTX_clear_flags SSL_CONF_CTX_finish SSL_CONF_CTX_free SSL_CONF_CTX_new SSL_CONF_CTX_set1_prefix SSL_CONF_CTX_set_flags SSL_CONF_CTX_set_ssl SSL_CONF_CTX_set_ssl_ctx SSL_CONF_cmd SSL_CONF_cmd_argv SSL_CONF_cmd_value_type SSL_CTX_SRP_CTX_free SSL_CTX_SRP_CTX_init SSL_CTX_add1_to_CA_list SSL_CTX_add_client_CA SSL_CTX_add_client_custom_ext SSL_CTX_add_custom_ext SSL_CTX_add_server_custom_ext SSL_CTX_add_session SSL_CTX_callback_ctrl SSL_CTX_check_private_key SSL_CTX_clear_options SSL_CTX_config SSL_CTX_ct_is_enabled SSL_CTX_ctrl SSL_CTX_dane_clear_flags SSL_CTX_dane_enable SSL_CTX_dane_mtype_set SSL_CTX_dane_set_flags SSL_CTX_enable_ct SSL_CTX_flush_sessions SSL_CTX_free SSL_CTX_get0_CA_list SSL_CTX_get0_certificate SSL_CTX_get0_ctlog_store SSL_CTX_get0_param SSL_CTX_get0_privatekey SSL_CTX_get0_security_ex_data SSL_CTX_get_cert_store SSL_CTX_get_ciphers SSL_CTX_get_client_CA_list SSL_CTX_get_client_cert_cb SSL_CTX_get_default_passwd_cb SSL_CTX_get_default_passwd_cb_userdata SSL_CTX_get_ex_data SSL_CTX_get_info_callback SSL_CTX_get_keylog_callback SSL_CTX_get_max_early_data SSL_CTX_get_num_tickets SSL_CTX_get_options SSL_CTX_get_quiet_shutdown SSL_CTX_get_record_padding_callback_arg SSL_CTX_get_recv_max_early_data SSL_CTX_get_security_callback SSL_CTX_get_security_level SSL_CTX_get_ssl_method SSL_CTX_get_timeout SSL_CTX_get_verify_callback SSL_CTX_get_verify_depth SSL_CTX_get_verify_mode SSL_CTX_has_client_custom_ext SSL_CTX_load_verify_dir SSL_CTX_load_verify_file SSL_CTX_load_verify_locations SSL_CTX_load_verify_store SSL_CTX_new SSL_CTX_new_ex SSL_CTX_remove_session SSL_CTX_sess_get_get_cb SSL_CTX_sess_get_new_cb SSL_CTX_sess_get_remove_cb SSL_CTX_sess_set_get_cb SSL_CTX_sess_set_new_cb SSL_CTX_sess_set_remove_cb SSL_CTX_sessions SSL_CTX_set0_CA_list SSL_CTX_set0_ctlog_store SSL_CTX_set0_security_ex_data SSL_CTX_set0_tmp_dh_pkey SSL_CTX_set1_cert_store SSL_CTX_set1_param SSL_CTX_set_allow_early_data_cb SSL_CTX_set_alpn_protos SSL_CTX_set_alpn_select_cb SSL_CTX_set_async_callback SSL_CTX_set_async_callback_arg SSL_CTX_set_block_padding SSL_CTX_set_cert_cb SSL_CTX_set_cert_store SSL_CTX_set_cert_verify_callback SSL_CTX_set_cipher_list SSL_CTX_set_ciphersuites SSL_CTX_set_client_CA_list SSL_CTX_set_client_cert_cb SSL_CTX_set_client_cert_engine SSL_CTX_set_client_hello_cb SSL_CTX_set_cookie_generate_cb SSL_CTX_set_cookie_verify_cb SSL_CTX_set_ct_validation_callback SSL_CTX_set_ctlog_list_file SSL_CTX_set_default_ctlog_list_file SSL_CTX_set_default_passwd_cb SSL_CTX_set_default_passwd_cb_userdata SSL_CTX_set_default_read_buffer_len SSL_CTX_set_default_verify_dir SSL_CTX_set_default_verify_file SSL_CTX_set_default_verify_paths SSL_CTX_set_default_verify_store SSL_CTX_set_ex_data SSL_CTX_set_generate_session_id SSL_CTX_set_info_callback SSL_CTX_set_keylog_callback SSL_CTX_set_max_early_data SSL_CTX_set_msg_callback SSL_CTX_set_next_proto_select_cb SSL_CTX_set_next_protos_advertised_cb SSL_CTX_set_not_resumable_session_callback SSL_CTX_set_num_tickets SSL_CTX_set_options SSL_CTX_set_post_handshake_auth SSL_CTX_set_psk_client_callback SSL_CTX_set_psk_find_session_callback SSL_CTX_set_psk_server_callback SSL_CTX_set_psk_use_session_callback SSL_CTX_set_purpose SSL_CTX_set_quiet_shutdown SSL_CTX_set_record_padding_callback SSL_CTX_set_record_padding_callback_arg SSL_CTX_set_recv_max_early_data SSL_CTX_set_security_callback SSL_CTX_set_security_level SSL_CTX_set_session_id_context SSL_CTX_set_session_ticket_cb SSL_CTX_set_srp_cb_arg SSL_CTX_set_srp_client_pwd_callback SSL_CTX_set_srp_password SSL_CTX_set_srp_strength SSL_CTX_set_srp_username SSL_CTX_set_srp_username_callback SSL_CTX_set_srp_verify_param_callback SSL_CTX_set_ssl_version SSL_CTX_set_stateless_cookie_generate_cb SSL_CTX_set_stateless_cookie_verify_cb SSL_CTX_set_timeout SSL_CTX_set_tlsext_max_fragment_length SSL_CTX_set_tlsext_ticket_key_evp_cb SSL_CTX_set_tlsext_use_srtp SSL_CTX_set_tmp_dh_callback SSL_CTX_set_trust SSL_CTX_set_verify SSL_CTX_set_verify_depth SSL_CTX_up_ref SSL_CTX_use_PrivateKey SSL_CTX_use_PrivateKey_ASN1 SSL_CTX_use_PrivateKey_file SSL_CTX_use_RSAPrivateKey SSL_CTX_use_RSAPrivateKey_ASN1 SSL_CTX_use_RSAPrivateKey_file SSL_CTX_use_cert_and_key SSL_CTX_use_certificate SSL_CTX_use_certificate_ASN1 SSL_CTX_use_certificate_chain_file SSL_CTX_use_certificate_file SSL_CTX_use_psk_identity_hint SSL_CTX_use_serverinfo SSL_CTX_use_serverinfo_ex SSL_CTX_use_serverinfo_file SSL_SESSION_dup SSL_SESSION_free SSL_SESSION_get0_alpn_selected SSL_SESSION_get0_cipher SSL_SESSION_get0_hostname SSL_SESSION_get0_id_context SSL_SESSION_get0_peer SSL_SESSION_get0_ticket SSL_SESSION_get0_ticket_appdata SSL_SESSION_get_compress_id SSL_SESSION_get_ex_data SSL_SESSION_get_id SSL_SESSION_get_master_key SSL_SESSION_get_max_early_data SSL_SESSION_get_max_fragment_length SSL_SESSION_get_protocol_version SSL_SESSION_get_ticket_lifetime_hint SSL_SESSION_get_time SSL_SESSION_get_timeout SSL_SESSION_has_ticket SSL_SESSION_is_resumable SSL_SESSION_new SSL_SESSION_print SSL_SESSION_print_fp SSL_SESSION_print_keylog SSL_SESSION_set1_alpn_selected SSL_SESSION_set1_hostname SSL_SESSION_set1_id SSL_SESSION_set1_id_context SSL_SESSION_set1_master_key SSL_SESSION_set1_ticket_appdata SSL_SESSION_set_cipher SSL_SESSION_set_ex_data SSL_SESSION_set_max_early_data SSL_SESSION_set_protocol_version SSL_SESSION_set_time SSL_SESSION_set_timeout SSL_SESSION_up_ref SSL_SRP_CTX_free SSL_SRP_CTX_init SSL_accept SSL_add1_host SSL_add1_to_CA_list SSL_add_client_CA SSL_add_dir_cert_subjects_to_stack SSL_add_file_cert_subjects_to_stack SSL_add_ssl_module SSL_add_store_cert_subjects_to_stack SSL_alert_desc_string SSL_alert_desc_string_long SSL_alert_type_string SSL_alert_type_string_long SSL_alloc_buffers SSL_bytes_to_cipher_list SSL_callback_ctrl SSL_certs_clear SSL_check_chain SSL_check_private_key SSL_clear SSL_clear_options SSL_client_hello_get0_ciphers SSL_client_hello_get0_compression_methods SSL_client_hello_get0_ext SSL_client_hello_get0_legacy_version SSL_client_hello_get0_random SSL_client_hello_get0_session_id SSL_client_hello_get1_extensions_present SSL_client_hello_isv2 SSL_client_version SSL_config SSL_connect SSL_copy_session_id SSL_ct_is_enabled SSL_ctrl SSL_dane_clear_flags SSL_dane_enable SSL_dane_set_flags SSL_dane_tlsa_add SSL_do_handshake SSL_dup SSL_dup_CA_list SSL_enable_ct SSL_export_keying_material SSL_export_keying_material_early SSL_extension_supported SSL_free SSL_free_buffers SSL_get0_CA_list SSL_get0_alpn_selected SSL_get0_dane SSL_get0_dane_authority SSL_get0_dane_tlsa SSL_get0_next_proto_negotiated SSL_get0_param SSL_get0_peer_CA_list SSL_get0_peer_certificate SSL_get0_peer_scts SSL_get0_peername SSL_get0_security_ex_data SSL_get0_verified_chain SSL_get1_peer_certificate SSL_get1_session SSL_get1_supported_ciphers SSL_get_SSL_CTX SSL_get_all_async_fds SSL_get_async_status SSL_get_certificate SSL_get_changed_async_fds SSL_get_cipher_list SSL_get_ciphers SSL_get_client_CA_list SSL_get_client_ciphers SSL_get_client_random SSL_get_current_cipher SSL_get_current_compression SSL_get_current_expansion SSL_get_default_passwd_cb SSL_get_default_passwd_cb_userdata SSL_get_default_timeout SSL_get_early_data_status SSL_get_error SSL_get_ex_data SSL_get_ex_data_X509_STORE_CTX_idx SSL_get_fd SSL_get_finished SSL_get_info_callback SSL_get_key_update_type SSL_get_max_early_data SSL_get_num_tickets SSL_get_options SSL_get_peer_cert_chain SSL_get_peer_finished SSL_get_peer_signature_type_nid SSL_get_pending_cipher SSL_get_privatekey SSL_get_psk_identity SSL_get_psk_identity_hint SSL_get_quiet_shutdown SSL_get_rbio SSL_get_read_ahead SSL_get_record_padding_callback_arg SSL_get_recv_max_early_data SSL_get_rfd SSL_get_security_callback SSL_get_security_level SSL_get_selected_srtp_profile SSL_get_server_random SSL_get_servername SSL_get_servername_type SSL_get_session SSL_get_shared_ciphers SSL_get_shared_sigalgs SSL_get_shutdown SSL_get_sigalgs SSL_get_signature_type_nid SSL_get_srp_N SSL_get_srp_g SSL_get_srp_userinfo SSL_get_srp_username SSL_get_srtp_profiles SSL_get_ssl_method SSL_get_state SSL_get_verify_callback SSL_get_verify_depth SSL_get_verify_mode SSL_get_verify_result SSL_get_version SSL_get_wbio SSL_get_wfd SSL_group_to_name SSL_has_matching_session_id SSL_has_pending SSL_in_before SSL_in_init SSL_is_dtls SSL_is_init_finished SSL_is_server SSL_key_update SSL_load_client_CA_file SSL_load_client_CA_file_ex SSL_new SSL_new_session_ticket SSL_peek SSL_peek_ex SSL_pending SSL_read SSL_read_early_data SSL_read_ex SSL_renegotiate SSL_renegotiate_abbreviated SSL_renegotiate_pending SSL_rstate_string SSL_rstate_string_long SSL_select_next_proto SSL_sendfile SSL_session_reused SSL_set0_CA_list SSL_set0_rbio SSL_set0_security_ex_data SSL_set0_tmp_dh_pkey SSL_set0_wbio SSL_set1_host SSL_set1_param SSL_set_SSL_CTX SSL_set_accept_state SSL_set_allow_early_data_cb SSL_set_alpn_protos SSL_set_async_callback SSL_set_async_callback_arg SSL_set_bio SSL_set_block_padding SSL_set_cert_cb SSL_set_cipher_list SSL_set_ciphersuites SSL_set_client_CA_list SSL_set_connect_state SSL_set_ct_validation_callback SSL_set_debug SSL_set_default_passwd_cb SSL_set_default_passwd_cb_userdata SSL_set_default_read_buffer_len SSL_set_ex_data SSL_set_fd SSL_set_generate_session_id SSL_set_hostflags SSL_set_info_callback SSL_set_max_early_data SSL_set_msg_callback SSL_set_not_resumable_session_callback SSL_set_num_tickets SSL_set_options SSL_set_post_handshake_auth SSL_set_psk_client_callback SSL_set_psk_find_session_callback SSL_set_psk_server_callback SSL_set_psk_use_session_callback SSL_set_purpose SSL_set_quiet_shutdown SSL_set_read_ahead SSL_set_record_padding_callback SSL_set_record_padding_callback_arg SSL_set_recv_max_early_data SSL_set_rfd SSL_set_security_callback SSL_set_security_level SSL_set_session SSL_set_session_id_context SSL_set_session_secret_cb SSL_set_session_ticket_ext SSL_set_session_ticket_ext_cb SSL_set_shutdown SSL_set_srp_server_param SSL_set_srp_server_param_pw SSL_set_ssl_method SSL_set_tlsext_max_fragment_length SSL_set_tlsext_use_srtp SSL_set_tmp_dh_callback SSL_set_trust SSL_set_verify SSL_set_verify_depth SSL_set_verify_result SSL_set_wfd SSL_shutdown SSL_srp_server_param_with_username SSL_state_string SSL_state_string_long SSL_stateless SSL_trace SSL_up_ref SSL_use_PrivateKey SSL_use_PrivateKey_ASN1 SSL_use_PrivateKey_file SSL_use_RSAPrivateKey SSL_use_RSAPrivateKey_ASN1 SSL_use_RSAPrivateKey_file SSL_use_cert_and_key SSL_use_certificate SSL_use_certificate_ASN1 SSL_use_certificate_chain_file SSL_use_certificate_file SSL_use_psk_identity_hint SSL_verify_client_post_handshake SSL_version SSL_waiting_for_async SSL_want SSL_write SSL_write_early_data SSL_write_ex TLS_client_method TLS_method TLS_server_method TLSv1_1_client_method TLSv1_1_method TLSv1_1_server_method TLSv1_2_client_method TLSv1_2_method TLSv1_2_server_method TLSv1_client_method TLSv1_method TLSv1_server_method d2i_SSL_SESSION i2d_SSL_SESSION

Name

.text

Size

525KB

Virtual Size

525KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

158KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

18KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

25KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/mfc140.dll

IMPHASH 5ad16cfb4ee17d4a5d87e7b678351b8b
SHA256 cd12be6c0eb4761c4519f2d33b836d7783a06667356eaac5f207bc516ddd79ed
MD5 bc725006b9539618926b72a1329240c7
SHA1 557ecddb351924922eddb2c9aa1d5d45b65a0dff
SHA512 1de6fc2cc916c96767ab4e51d63e7bc969a5a128a44a0eefb9ee85132a5025db723363a358980c1ee59a623cad8a15e3918e3218f98e245207a20b9350c1d570
SSDEEP 49152:FtzTelBAIVeu47iK8TXhUoEfk5UgYVrlF2u8RwNykddTmPytrPkEcNw078nzm4ud:aBiG0ahyakNFLOAkGkzdnEVomFHKnPT
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

b3:3b:cc:ec:2d:c9:1e:aa:ec:dc:84:d4:4c:95:89:eb:62:65:f4:18:6e:3b:7d:7a:d9:94:0b:b1:0a:df:db:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

b3:3b:cc:ec:2d:c9:1e:aa:ec:dc:84:d4:4c:95:89:eb:62:65:f4:18:6e:3b:7d:7a:d9:94:0b:b1:0a:df:db:c2

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

2894192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\mfc140.amd64.pdb

advapi32

RegCloseKey RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegEnumValueA RegQueryValueExA RegDeleteKeyA RegDeleteValueA RegEnumKeyExA RegEnumKeyA RegQueryValueA RegSetValueA GetFileSecurityA SetFileSecurityA RegOpenKeyExW IsTextUnicode

kernel32

WideCharToMultiByte VirtualQuery GetSystemInfo ExpandEnvironmentStringsA RaiseException OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext QueryPerformanceCounter SizeofResource LockResource LoadResource FindResourceW GetLastError InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection DeleteCriticalSection MultiByteToWideChar SetLastError DeactivateActCtx LoadLibraryW GetProcAddress ActivateActCtx FindActCtxSectionStringW GetEnvironmentVariableA GetModuleFileNameW GetModuleHandleExW QueryActCtxW OutputDebugStringA lstrcpyA GlobalAlloc GlobalLock GlobalUnlock GetCurrentThreadId InitializeCriticalSection GetACP DeleteFileA GetModuleHandleA GetCPInfo GetOEMCP MulDiv VerSetConditionMask VerifyVersionInfoA FreeLibrary CloseHandle GetTempPathA CreateFileA SetFilePointer Sleep GetCurrentDirectoryA lstrcmpA GetSystemDirectoryW LoadLibraryExW DecodePointer EncodePointer GetModuleHandleW FindResourceA GlobalFree GetTickCount GetWindowsDirectoryA lstrcmpiA SetThreadPriority GetModuleFileNameA LocalAlloc LocalFree TlsAlloc TlsFree CreateActCtxW LoadLibraryA GlobalFlags GlobalFindAtomA GetSystemTime LocalUnlock LocalLock GlobalGetAtomNameA GetAtomNameA SuspendThread ResumeThread SetEvent CopyFileA GetTickCount64 WaitForMultipleObjects CreateEventA ReleaseMutex CreateMutexA ReleaseSemaphore CreateSemaphoreA WaitForSingleObject FormatMessageA SetFileAttributesA LocalFileTimeToFileTime GetFileAttributesExA GetFileSizeEx FindNextFileA SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameA GetStringTypeExA GetThreadLocale FindClose FindFirstFileA GetVolumeInformationA LoadLibraryExA MoveFileA SetEndOfFile UnlockFile LockFile FlushFileBuffers WriteFile ReadFile GetCurrentProcess DuplicateHandle GetProfileIntA SystemTimeToFileTime ReplaceFileA SetFileTime GetFileTime GetFullPathNameA GetDiskFreeSpaceA GetTempFileNameA VirtualProtect lstrcpyW lstrcmpW IsDBCSLeadByte GetUserDefaultLCID FindResourceExW WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA GlobalAddAtomA GetCurrentProcessId SetErrorMode GlobalDeleteAtom CompareStringA GetVersionExA GetCurrentThread GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW SearchPathA GlobalSize GlobalHandle GlobalReAlloc TlsGetValue LocalReAlloc TlsSetValue GetFileSize GetFileAttributesA GetEnvironmentVariableW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception wcsstr wcschr wcsrchr memcmp __C_specific_handler _purecall memmove memset memcpy __std_terminate __std_type_info_destroy_list _CxxThrowException

api-ms-win-crt-heap-l1-1-0

_expand _recalloc malloc free calloc realloc _msize

api-ms-win-crt-runtime-l1-1-0

_errno _invalid_parameter_noinfo abort _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _register_onexit_function _crt_atexit _cexit __p___argc __p___argv _beginthreadex _endthreadex _initterm_e _resetstkoflw terminate _initterm __doserrno _initialize_onexit_table _endthread _beginthread _execute_onexit_table

api-ms-win-crt-string-l1-1-0

iswspace wcspbrk _wcsrev _strdup _wcsicoll strncpy_s wcsncpy_s _wcsicmp wcscmp wmemcpy_s _strnicmp strcat_s wcscspn wcscoll _wcslwr_s wcsspn strlen toupper strnlen wcsnlen wcscat_s wcscpy_s wcslen strcpy_s _wcsupr_s

api-ms-win-crt-multibyte-l1-1-0

_mbsspn _mbscspn _mbsnbcmp _mbsdec _mbsnbicmp _mbspbrk _mbsicmp _mbsnbcpy_s _ismbblead _ismbcalpha _ismbcalnum _ismbcprint _mbctoupper _mbsicoll _mbsupr_s _mbctolower _mbslwr_s _mbsstr _mbsrev _ismbcspace _mbsinc _mbschr _ismbcdigit _mbsrchr _mbscoll _mbscmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s __stdio_common_vsnwprintf_s fclose __stdio_common_vsnprintf_s fflush ftell _get_osfhandle _fileno _open_osfhandle fread __stdio_common_vsprintf __stdio_common_vswprintf_s __stdio_common_vsscanf feof ferror clearerr_s fwrite fputs fgets fseek __stdio_common_vswprintf

api-ms-win-crt-utility-l1-1-0

ldiv rand_s labs abs

api-ms-win-crt-convert-l1-1-0

wcstombs_s strtod atol _ultoa_s atoi strtoul strtol _itoa_s _ltoa_s

api-ms-win-crt-math-l1-1-0

_fdopen ceil sqrt atan2 fabs floor exp cos sin

api-ms-win-crt-time-l1-1-0

_time64 _localtime64_s _mktime64 clock

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s _makepath_s _fullpath

user32

GetAsyncKeyState OpenClipboard EmptyClipboard SetClipboardData CloseClipboard DrawStateA GetCapture LoadAcceleratorsW TranslateAcceleratorA GetSystemMetrics RedrawWindow LoadMenuW GetSubMenu PostThreadMessageA GetClassInfoA DefWindowProcA GetWindow GetMenuItemCount GetMenuItemID IsIconic GetForegroundWindow DrawIcon GetMonitorInfoA MonitorFromPoint SystemParametersInfoA LoadCursorA ValidateRect SetLayeredWindowAttributes CallNextHookEx SetWindowsHookExA UnhookWindowsHookEx GetUpdateRect UnionRect SetWindowPos LockWindowUpdate GetKeyState BeginDeferWindowPos EndDeferWindowPos AppendMenuA CreatePopupMenu IntersectRect SetScrollPos EnableMenuItem GetNextDlgTabItem GetSystemMenu IsMenu IsZoomed ModifyMenuA DeleteMenu SetWindowRgn DestroyAcceleratorTable GetTopWindow DestroyWindow MonitorFromRect EnumDisplayMonitors GetSysColor GetClassLongPtrA IsClipboardFormatAvailable DestroyCursor CreateAcceleratorTableA CopyAcceleratorTableA GetKeyboardState ToAsciiEx MapVirtualKeyA CharUpperA LoadImageW LoadIconW SetWindowTextA GetMenuState CheckMenuItem SetFocus GetMenuItemInfoA DrawFrameControl SubtractRect GetLastActivePopup GetMessageA UpdateLayeredWindow EnableScrollBar GetScrollPos GetMenuDefaultItem SetMenuDefaultItem HideCaret InvertRect EnumChildWindows GetWindowTextA GetDoubleClickTime GetDC ReleaseDC GetWindowRgn FrameRect ShowScrollBar IsWindowEnabled InsertMenuA RegisterClipboardFormatA GetComboBoxInfo GetDesktopWindow DrawEdge PostQuitMessage UnregisterClassA ShowOwnedPopups GetWindowThreadProcessId MessageBoxA SetWindowLongA SetMenuItemBitmaps SetMenuItemInfoA GetMenuCheckMarkDimensions SetWindowLongPtrA CallWindowProcA SetActiveWindow CreateMenu MoveWindow InvalidateRgn TabbedTextOutA DrawTextA DrawTextExA GrayStringA GetWindowTextLengthA GetTabbedTextExtentW GetDlgItem CreateDialogIndirectParamA GetActiveWindow EndDialog GetPropA RemovePropA SetPropA MapDialogRect GetMessageTime GetMessagePos GetDialogBaseUnits GetDCEx RemoveMenu MsgWaitForMultipleObjectsEx CharNextA SetWindowContextHelpId IsDialogMessageA ClipCursor SendNotifyMessageA InSendMessage GetMenuStringA WindowFromDC SetScrollRange AdjustWindowRectEx GetTabbedTextExtentA CountClipboardFormats LoadBitmapA GetMenu SetMenu GetClassLongA GetClassInfoExA GetWindowLongPtrA CreateWindowExA SetWindowPlacement TrackPopupMenuEx RegisterClassA WinHelpA GetScrollRange SetScrollInfo GetScrollInfo ScrollWindow MonitorFromWindow BeginPaint EndPaint SendDlgItemMessageA LoadAcceleratorsA LoadMenuA UnpackDDElParam ReuseDDElParam InsertMenuItemA GetMenuBarInfo GetWindowDC DefFrameProcA TranslateMDISysAccel DrawMenuBar DefMDIChildProcA CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextA SetDlgItemInt SetDlgItemTextA IsDlgButtonChecked ScrollWindowEx RealChildWindowFromPoint CharToOemBuffA OemToCharBuffA IsWindow SetRect EnableWindow IsCharLowerA GetKeyNameTextA GetKeyboardLayout MapVirtualKeyExA WaitMessage DispatchMessageA TranslateMessage PeekMessageA SetForegroundWindow LoadCursorW GetFocus IsChild TrackPopupMenu LoadIconA GetNextDlgGroupItem DrawFocusRect SetCursor GetWindowLongA LoadImageA CopyImage GetIconInfo FillRect NotifyWinEvent CopyRect LoadBitmapW MapWindowPoints MessageBeep SetCursorPos WindowFromPoint ClientToScreen SetCapture ReleaseCapture CopyIcon BringWindowToTop RegisterWindowMessageA DestroyIcon GetClassNameA SetParent ShowWindow GetWindowPlacement IsRectEmpty GetDlgCtrlID PostMessageA DeferWindowPos EqualRect GetSysColorBrush SetClassLongPtrA GetParent DrawIconEx InflateRect OffsetRect PtInRect UpdateWindow SetTimer TrackMouseEvent ScreenToClient GetCursorPos IsWindowVisible GetClientRect KillTimer SetRectEmpty GetWindowRect SendMessageA CharUpperBuffA InvalidateRect DestroyMenu

gdi32

GetCharWidthA CreateFontA StretchDIBits RoundRect CreateEllipticRgn CreateHatchBrush ExtTextOutA Polyline SetDIBColorTable GetDIBits SelectPalette StretchBlt SetBkColor CreateBitmap EnumFontFamiliesExA CreateRoundRectRgn SetRectRgn FillRgn GetBoundsRect CombineRgn CreateRectRgn PatBlt DeleteDC GetCurrentObject EndDoc EndPage StartPage ExtFloodFill SetPaletteEntries CreateDIBitmap CreatePatternBrush CreatePen EnumFontFamiliesA GetTextCharsetInfo GetDeviceCaps CreateFontIndirectA GetBkColor SetPixel Ellipse CreateDIBSection OffsetRgn CreateRectRgnIndirect GetRgnBox BitBlt SetPixelV CreateCompatibleBitmap FrameRgn PtInRegion CreatePolygonRgn GetPixel GetSystemPaletteEntries GetNearestPaletteIndex RealizePalette CreatePalette GetPaletteEntries GetStockObject Rectangle Polygon GetTextColor GetObjectType DeleteObject SelectObject CreateCompatibleDC GetObjectA CreateSolidBrush GetTextExtentPoint32A GetTextMetricsA CreateMetaFileA CloseMetaFile DeleteMetaFile GetViewportOrgEx PtVisible RectVisible TextOutA Escape GetClipBox GetTextAlign GetCurrentPositionEx MoveToEx SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SaveDC RestoreDC GetROP2 GetBkMode GetPolyFillMode GetStretchBltMode GetNearestColor GetTextFaceA GetWindowExtEx GetViewportExtEx SetTextColor SetMapMode SetWindowExtEx ScaleWindowExtEx GetTextExtentPoint32W GetTextExtentPointA GetWindowOrgEx SetWindowOrgEx IntersectClipRect CreateDCA SetBrushOrgEx SetAbortProc StartDocA DPtoLP AbortDoc CopyMetaFileA UnrealizeObject SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform OffsetWindowOrgEx SelectClipRgn ExcludeClipRect OffsetClipRgn LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetLayout SetLayout ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo SelectClipPath GetClipRgn ExtSelectClipRgn PlayMetaFileRecord PlayMetaFile EnumMetaFile ExtCreatePen CreateDIBPatternBrushPt GetMapMode LPtoDP

ole32

OleIsCurrentClipboard CreateFileMoniker OleRun OleIsRunning OleQueryLinkFromData OleQueryCreateFromData OleSetMenuDescriptor CreateGenericComposite CreateItemMoniker WriteClassStm OleDraw OleRegGetMiscStatus OleGetIconOfClass OleRegEnumVerbs GetHGlobalFromILockBytes ReadClassStg OleLoad OleSave OleCreate OleCreateLinkToFile OleCreateFromFile CoDisconnectObject OleCreateLinkFromData OleCreateFromData OleSetClipboard CoRegisterMessageFilter OleSetContainedObject StringFromCLSID OleLockRunning StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID PropVariantCopy CoInitializeEx StringFromGUID2 CreateBindCtx OleRegGetUserType ReadFmtUserTypeStg OleLoadFromStream StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal ReadClassStm OleSaveToStream CreateOleAdviseHolder CoTreatAsClass SetConvertStg OleDestroyMenuDescriptor WriteFmtUserTypeStg OleCreateMenuDescriptor ReleaseStgMedium CreateDataAdviseHolder CreateDataCache OleDuplicateData WriteClassStg GetRunningObjectTable OleTranslateAccelerator CreateStreamOnHGlobal CoUninitialize CoInitialize PropVariantClear CoTaskMemAlloc CoCreateGuid CoTaskMemFree CoCreateInstance IsAccelerator OleUninitialize CoFreeUnusedLibraries OleInitialize CoRevokeClassObject OleGetClipboard CoRegisterClassObject StgCreateDocfile RegisterDragDrop CoLockObjectExternal DoDragDrop CoGetMalloc OleFlushClipboard StgOpenStorage OleCreateStaticFromData StgIsStorageFile RevokeDragDrop GetClassFile

oleaut32

SysAllocString SysStringLen SysFreeString VariantChangeType VariantClear VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate OleCreatePropertyFrame VarParseNumFromStr SafeArrayCreateVector VarBstrFromDec VarDecFromStr VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayAllocDescriptor SafeArrayAllocData SafeArrayCopy VarBstrFromCy VarCyFromStr SysReAllocStringLen SafeArrayRedim SafeArrayCreate SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SysStringByteLen SysAllocStringByteLen SafeArrayDestroy VariantCopy VarBstrCmp DispCallFunc VariantInit LoadRegTypeLi RegisterTypeLi LoadTypeLi OleLoadPicture OleCreatePictureIndirect OleCreateFontIndirect OleTranslateColor SysAllocStringLen

shlwapi

PathFindFileNameA PathRemoveExtensionA StrFormatKBSizeA PathIsUNCA PathStripToRootA UrlUnescapeA PathRemoveFileSpecW PathFindExtensionA

imm32

ImmGetContext ImmReleaseContext ImmGetOpenStatus

uxtheme

DrawThemeParentBackground GetWindowTheme DrawThemeBackground GetThemeColor OpenThemeData CloseThemeData GetCurrentThemeName GetThemeSysColor DrawThemeText IsThemeBackgroundPartiallyTransparent GetThemePartSize IsAppThemed

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

925KB

Virtual Size

925KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

51KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

142KB

Virtual Size

141KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

92KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/mfc140u.dll

IMPHASH 669b973e053b8ffe7b69f38f75ae707a
SHA256 6129df3ecb91c007de2c027c6a9d53a4d785627c414df94701fc30de68214f89
MD5 f1b012556c72b11af8ce1c38ae46af15
SHA1 33ce88e6c3308186a2788953c87917bd27ca211a
SHA512 d2d057913ab5156e1dd88b59fda79d3ab307de82892b745bebe11644b9cfb8232aa661c3bbfb1dad2a805a394ca1b8a92d613749d1a5ae40a2714d33b1845316
SSDEEP 49152:wtMH0D4qRJowCaGYGxuToV5PSRtucL4BxuBBxFvC/8wXoctOn6NGvkYYc1uSwIbn:1wZwitBnkYYWFLOAkGkzdnEVomFHKnPk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

fa:0d:8b:3c:25:7c:02:14:bf:b0:26:a5:b6:83:0d:e1:c7:c8:3d:94:95:cb:e5:e3:a0:e1:fd:27:19:b4:f2:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

fa:0d:8b:3c:25:7c:02:14:bf:b0:26:a5:b6:83:0d:e1:c7:c8:3d:94:95:cb:e5:e3:a0:e1:fd:27:19:b4:f2:82

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

2904320

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\mfc140u.amd64.pdb

advapi32

RegCloseKey RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegEnumValueW RegQueryValueExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegQueryValueW RegSetValueW GetFileSecurityW SetFileSecurityW IsTextUnicode RegQueryValueExA RegOpenKeyExA

kernel32

OutputDebugStringW InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsDebuggerPresent IsProcessorFeaturePresent ExpandEnvironmentStringsA SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext LockResource FormatMessageA RaiseException LoadLibraryExA GetSystemInfo TerminateProcess LoadResource FindResourceW GetLastError InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection DeleteCriticalSection SetLastError DeactivateActCtx LoadLibraryW GetProcAddress ActivateActCtx FindActCtxSectionStringW CreateActCtxW GetModuleFileNameW GetModuleHandleExW QueryActCtxW OutputDebugStringA MultiByteToWideChar lstrcpyW GlobalAlloc GlobalLock GlobalUnlock GetCurrentThreadId InitializeCriticalSection DeleteFileW GetModuleHandleW MulDiv VerSetConditionMask VerifyVersionInfoW FreeLibrary CloseHandle GetTempPathW CreateFileW SetFilePointer Sleep GetCurrentDirectoryW lstrcmpW GetSystemDirectoryW LoadLibraryExW DecodePointer EncodePointer GlobalFree GetTickCount GetWindowsDirectoryW lstrcmpiW SetThreadPriority LocalAlloc LocalFree TlsAlloc TlsFree GlobalHandle GlobalReAlloc TlsGetValue LocalReAlloc TlsSetValue GetFileSize GetFileAttributesW GlobalSize VirtualQuery GetEnvironmentVariableA GetEnvironmentVariableW GlobalFlags GlobalFindAtomW GetSystemTime LocalUnlock LocalLock GlobalGetAtomNameW GetAtomNameW SuspendThread ResumeThread SetEvent CopyFileW GetTickCount64 WaitForMultipleObjects CreateEventW ReleaseMutex CreateMutexW ReleaseSemaphore CreateSemaphoreW WaitForSingleObject FormatMessageW SetFileAttributesW LocalFileTimeToFileTime GetFileAttributesExW GetFileSizeEx FindNextFileW SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime FileTimeToSystemTime GetShortPathNameW GetStringTypeExW GetThreadLocale FindClose FindFirstFileW GetVolumeInformationW MoveFileW SetEndOfFile UnlockFile LockFile FlushFileBuffers WriteFile ReadFile GetCurrentProcess DuplicateHandle GetProfileIntW SystemTimeToFileTime ReplaceFileW SetFileTime GetFileTime GetFullPathNameW GetDiskFreeSpaceW GetTempFileNameW VirtualProtect lstrcpyA CompareStringW IsDBCSLeadByte GetUserDefaultLCID FindResourceExW SearchPathW GetLocaleInfoW GetUserDefaultUILanguage GetSystemDefaultUILanguage GetCurrentThread GetVersionExW WideCharToMultiByte WritePrivateProfileStringW lstrcmpA CompareStringA GlobalDeleteAtom SetErrorMode GetCurrentProcessId GlobalAddAtomW GetPrivateProfileIntW GetPrivateProfileStringW SizeofResource

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception memcmp wcsrchr __C_specific_handler wcsstr wcschr _purecall memmove memset memcpy __std_terminate __std_type_info_destroy_list _CxxThrowException

api-ms-win-crt-heap-l1-1-0

_recalloc realloc _msize free malloc _expand calloc

api-ms-win-crt-runtime-l1-1-0

_resetstkoflw _beginthreadex __p___argc _endthreadex _initterm_e _initterm terminate _beginthread _endthread __doserrno abort _invalid_parameter_noinfo _cexit _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _errno __p___wargv

api-ms-win-crt-string-l1-1-0

_wcsrev wcscoll strcpy_s wcslen _wcslwr_s toupper wcsnlen wmemcpy_s wcscmp iswspace _wcsupr_s _wcsicmp wcspbrk wcscspn wcsspn _wcsicoll wcsncmp wcscpy_s iswdigit iswalpha iswalnum iswprint towupper towlower wcscat_s _wcsdup strlen _strnicmp wcsncpy_s strnlen _wcsnicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf fseek __stdio_common_vswprintf_s __stdio_common_vswprintf fwrite clearerr_s ferror feof fread ftell _open_osfhandle _fileno _get_osfhandle __stdio_common_vswscanf fflush fclose __stdio_common_vsprintf_s __stdio_common_vsnwprintf_s fputws fgetws

api-ms-win-crt-utility-l1-1-0

abs rand_s ldiv labs

api-ms-win-crt-convert-l1-1-0

wcstoul _itow_s wcstol _wtoi _ltow_s _ultow_s _wtol wcstod

api-ms-win-crt-math-l1-1-0

exp ceil sqrt atan2 cos sin _fdopen floor fabs

api-ms-win-crt-time-l1-1-0

_mktime64 _localtime64_s clock _time64

api-ms-win-crt-filesystem-l1-1-0

_wmakepath_s _wsplitpath_s _wfullpath

api-ms-win-crt-multibyte-l1-1-0

_mbsupr_s _mbscspn _mbsicmp _mbsrchr _mbscmp _mbsstr _mbscoll _ismbcspace _mbspbrk _mbsspn _mbsicoll _mbsrev _mbslwr_s _mbsinc _mbschr

user32

GetSystemMetrics DestroyMenu LoadMenuW GetSubMenu PostThreadMessageW GetClassInfoW DefWindowProcW GetWindow GetMenuItemCount ScreenToClient IsIconic GetForegroundWindow DrawIcon GetMonitorInfoW MonitorFromPoint SystemParametersInfoW ValidateRect SetLayeredWindowAttributes CallNextHookEx SetWindowsHookExW UnhookWindowsHookEx GetUpdateRect UnionRect SetWindowPos LockWindowUpdate GetKeyState BeginDeferWindowPos EndDeferWindowPos AppendMenuW CreatePopupMenu IntersectRect SetScrollPos EnableMenuItem GetNextDlgTabItem GetSystemMenu IsMenu IsZoomed ModifyMenuW DeleteMenu SetWindowRgn DestroyAcceleratorTable GetTopWindow DestroyWindow MonitorFromRect EnumDisplayMonitors GetSysColor GetClassLongPtrW IsClipboardFormatAvailable DestroyCursor CreateAcceleratorTableW CopyAcceleratorTableW GetKeyboardState ToUnicodeEx MapVirtualKeyW CharUpperW SetWindowTextW GetMenuState CheckMenuItem SetFocus GetMenuItemInfoW DrawFrameControl SubtractRect GetLastActivePopup GetMessageW UpdateLayeredWindow EnableScrollBar GetScrollPos GetMenuDefaultItem SetMenuDefaultItem HideCaret InvertRect EnumChildWindows GetWindowTextW GetDoubleClickTime GetDC ReleaseDC GetWindowRgn FrameRect ShowScrollBar IsWindowEnabled InsertMenuW GetActiveWindow RegisterClipboardFormatW GetComboBoxInfo CharUpperBuffW DrawEdge PostQuitMessage UnregisterClassW ShowOwnedPopups GetWindowThreadProcessId MessageBoxW SetWindowLongW TranslateAcceleratorW SetMenuItemInfoW GetMenuCheckMarkDimensions SetWindowLongPtrW CallWindowProcW SetActiveWindow CreateMenu MoveWindow InvalidateRgn TabbedTextOutW DrawTextW DrawTextExW GrayStringW GetWindowTextLengthW GetTabbedTextExtentW GetDlgItem CreateDialogIndirectParamW EndDialog GetPropW RemovePropW SetPropW MapDialogRect GetMessageTime GetMessagePos GetDialogBaseUnits GetDCEx RemoveMenu MsgWaitForMultipleObjectsEx CharNextW SetWindowContextHelpId IsDialogMessageW ClipCursor SendNotifyMessageW InSendMessage GetMenuStringW WindowFromDC SetScrollRange AdjustWindowRectEx CountClipboardFormats GetMenu SetMenu GetClassInfoExW GetWindowLongPtrW CreateWindowExW SetWindowPlacement TrackPopupMenuEx RegisterClassW WinHelpW GetScrollRange SetScrollInfo GetScrollInfo ScrollWindow MonitorFromWindow BeginPaint EndPaint SendDlgItemMessageA UnpackDDElParam ReuseDDElParam InsertMenuItemW GetMenuBarInfo GetWindowDC DefFrameProcW TranslateMDISysAccel DrawMenuBar DefMDIChildProcW CheckDlgButton CheckRadioButton GetDlgItemInt GetDlgItemTextW SendDlgItemMessageW SetDlgItemInt SetDlgItemTextW IsDlgButtonChecked ScrollWindowEx RealChildWindowFromPoint CharToOemBuffA OemToCharBuffA GetCursorPos IsWindowVisible GetClientRect KillTimer SetRectEmpty GetWindowRect SendMessageW InvalidateRect IsWindow SetRect EnableWindow IsCharLowerW GetKeyNameTextW GetKeyboardLayout MapVirtualKeyExW LoadAcceleratorsW GetCapture DrawStateW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard GetAsyncKeyState GetDesktopWindow WaitMessage DispatchMessageW TranslateMessage PeekMessageW SetForegroundWindow LoadCursorW GetFocus IsChild TrackPopupMenu LoadIconW GetNextDlgGroupItem DrawFocusRect SetCursor GetWindowLongW LoadImageW CopyImage GetIconInfo FillRect NotifyWinEvent CopyRect LoadBitmapW MapWindowPoints MessageBeep SetCursorPos WindowFromPoint ClientToScreen SetCapture ReleaseCapture CopyIcon BringWindowToTop RegisterWindowMessageW DestroyIcon GetClassNameW SetParent ShowWindow GetWindowPlacement IsRectEmpty GetDlgCtrlID PostMessageW DeferWindowPos EqualRect GetSysColorBrush SetClassLongPtrW GetParent DrawIconEx InflateRect OffsetRect PtInRect UpdateWindow SetTimer SetMenuItemBitmaps TrackMouseEvent GetMenuItemID RedrawWindow

gdi32

RectVisible PtVisible GetViewportOrgEx DeleteMetaFile CloseMetaFile CreateMetaFileW LPtoDP GetCharWidthW CreateFontW StretchDIBits RoundRect CreateEllipticRgn CreateHatchBrush ExtTextOutW Polyline SetDIBColorTable GetDIBits SelectPalette StretchBlt SetBkColor CreateBitmap EnumFontFamiliesExW CreateRoundRectRgn SetRectRgn FillRgn GetBoundsRect CombineRgn CreateRectRgn PatBlt DeleteDC GetCurrentObject EndDoc EndPage StartPage ExtFloodFill SetPaletteEntries CreateDIBitmap CreatePatternBrush CreatePen EnumFontFamiliesW GetTextCharsetInfo GetDeviceCaps CreateFontIndirectW GetBkColor SetPixel Ellipse CreateDIBSection OffsetRgn CreateRectRgnIndirect GetRgnBox BitBlt SetPixelV CreateCompatibleBitmap FrameRgn PtInRegion CreatePolygonRgn GetPixel GetSystemPaletteEntries GetNearestPaletteIndex RealizePalette CreatePalette GetPaletteEntries Escape Rectangle Polygon GetTextColor GetObjectType DeleteObject SelectObject CreateCompatibleDC GetObjectW CreateSolidBrush GetTextExtentPoint32W GetTextMetricsW GetTextAlign GetClipBox GetCurrentPositionEx MoveToEx SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SaveDC RestoreDC GetROP2 GetBkMode GetPolyFillMode GetStretchBltMode GetNearestColor GetTextFaceW GetWindowExtEx GetViewportExtEx SetTextColor SetMapMode SetWindowExtEx ScaleWindowExtEx GetWindowOrgEx SetWindowOrgEx IntersectClipRect CreateDCW SetBrushOrgEx SetAbortProc StartDocW DPtoLP AbortDoc CopyMetaFileW UnrealizeObject SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetGraphicsMode SetWorldTransform ModifyWorldTransform OffsetWindowOrgEx SelectClipRgn ExcludeClipRect OffsetClipRgn LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags GetLayout SetLayout ArcTo SetArcDirection PolyDraw PolylineTo SetColorAdjustment PolyBezierTo SelectClipPath GetClipRgn ExtSelectClipRgn PlayMetaFileRecord PlayMetaFile EnumMetaFile ExtCreatePen CreateDIBPatternBrushPt GetMapMode TextOutW GetStockObject

ole32

CoTaskMemAlloc OleDraw OleRegGetMiscStatus CreateBindCtx CreateFileMoniker PropVariantClear OleRegEnumVerbs OleRun CoCreateGuid CoTaskMemFree CoDisconnectObject CoRegisterMessageFilter CoTreatAsClass SetConvertStg WriteFmtUserTypeStg OleDuplicateData WriteClassStg GetRunningObjectTable OleTranslateAccelerator OleFlushClipboard CoCreateInstance GetClassFile OleIsRunning OleQueryLinkFromData OleQueryCreateFromData OleSetMenuDescriptor CreateGenericComposite CoInitialize OleRegGetUserType CreateDataAdviseHolder OleUninitialize CoFreeUnusedLibraries OleInitialize OleGetClipboard WriteClassStm OleGetIconOfClass CoRevokeClassObject GetHGlobalFromILockBytes OleSetClipboard CreateDataCache CoRegisterClassObject ReadClassStg OleLoad RevokeDragDrop RegisterDragDrop CoLockObjectExternal DoDragDrop CoGetMalloc StgOpenStorage OleSave OleCreate OleCreateLinkToFile OleCreateFromFile OleCreateStaticFromData OleCreateLinkFromData OleCreateFromData OleSetContainedObject StringFromCLSID OleLockRunning StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID PropVariantCopy CoInitializeEx StringFromGUID2 ReadFmtUserTypeStg OleLoadFromStream StgIsStorageFile StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal ReadClassStm OleSaveToStream CreateOleAdviseHolder CoUninitialize ReleaseStgMedium CreateItemMoniker OleDestroyMenuDescriptor OleIsCurrentClipboard CreateStreamOnHGlobal OleCreateMenuDescriptor IsAccelerator StgCreateDocfile

oleaut32

SysAllocString SysStringLen SysFreeString VariantChangeType VariantClear VariantTimeToSystemTime SystemTimeToVariantTime VarBstrFromDate OleCreatePropertyFrame VarParseNumFromStr SafeArrayCreateVector VarBstrFromDec VarDecFromStr VarDateFromStr SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayUnlock SafeArrayLock SafeArrayPutElement SafeArrayPtrOfIndex SafeArrayGetElement SafeArrayAllocDescriptor SafeArrayAllocData SafeArrayCopy VarBstrFromCy VarCyFromStr SysReAllocStringLen SysAllocStringByteLen SafeArrayRedim SafeArrayCreate SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SysStringByteLen SafeArrayDestroy VariantCopy VarBstrCmp DispCallFunc VariantInit LoadRegTypeLi RegisterTypeLi LoadTypeLi OleLoadPicture OleCreatePictureIndirect OleCreateFontIndirect OleTranslateColor SysAllocStringLen

shlwapi

PathFindFileNameW PathRemoveExtensionW StrFormatKBSizeW PathIsUNCW PathStripToRootW UrlUnescapeW PathRemoveFileSpecW PathFindExtensionW

imm32

ImmGetOpenStatus ImmReleaseContext ImmGetContext

uxtheme

DrawThemeParentBackground GetWindowTheme DrawThemeBackground GetThemeColor OpenThemeData CloseThemeData GetCurrentThemeName GetThemeSysColor DrawThemeText IsThemeBackgroundPartiallyTransparent GetThemePartSize IsAppThemed

Name

.text

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

947KB

Virtual Size

947KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

52KB

Virtual Size

77KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

142KB

Virtual Size

142KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/mstscax.dll

IMPHASH ad5c6cdd3284530f6718d4b994a9106e
SHA256 2f94f5cef28a549fe6f1e986f010200c91621deb746b3d31eb8631e6d7713e53
MD5 7fc9f90f9e25e5362c4b36aeb17ae3e6
SHA1 fbee3bf947000cb621e11c10785123d6da6303f5
SHA512 0e0a360e3d42c294252ae8967bf461e40d9ddf064aaf6b1a664ceec8ead65ca936dff7fb775e76ca704244272184db46f0f8cca1877f85577240e8908f790b7f
SSDEEP 196608:4I0lBCD6MN6s0/66I42TAPBmj2rrbAxaXJH+gTYqxOqlJTGlJnBV2wsNyg3RRQQS:4I0lBCD6MN6l/66I42TAPBmj2rrbAxaG
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

773136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mstscax.pdb

msvcrt

_ultow wcsncat_s wcstoul wcsftime tolower _ltow printf isdigit towupper _itow_s isalpha memcpy memcmp memchr strnlen log10f log10 log floorf floor cos _waccess_s _wfopen vswprintf_s wcsnlen memcpy_s memmove_s swscanf_s _snprintf_s _strnicmp _strlwr_s srand time rand _vsnprintf wcschr wcstol iswdigit iswspace toupper wcstombs_s _wcsnicmp __CxxFrameHandler3 wcstok_s wcsrchr ??1exception@@UEAA@XZ ??0exception@@QEAA@XZ ??0exception@@QEAA@AEBV0@@Z _vsnprintf_s realloc _vscwprintf exp wcscat_s wcsncmp bsearch wcsstr vsprintf_s memmove memset pow sin sqrt _onexit __dllonexit _unlock _lock __C_specific_handler _initterm _amsg_exit towlower _XcptFilter free _callnewh swprintf_s _aligned_free _aligned_malloc gmtime _wfopen_s fclose fprintf fwrite _wtoi _itoa_s wcscspn sprintf_s _ltow_s _snwprintf_s _stricmp wcsncpy_s wcscpy_s _resetstkoflw calloc strtok_s _wtol strncmp iswalnum wcspbrk malloc _wcsicmp _vsnwprintf _wcslwr ?terminate@@YAXXZ _purecall ??1type_info@@UEAA@XZ _errno ceilf ceil atan2 __RTDynamicCast _CxxThrowException wcscmp

ntdll

RtlGetLastNtStatus RtlVerifyVersionInfo RtlFreeUnicodeString RtlAreBitsSet RtlClearBits RtlInitializeBitMap RtlFindClearBitsAndSet NtSetInformationFile RtlCaptureContext RtlStringFromGUID RtlNtStatusToDosError RtlInitString RtlLookupFunctionEntry RtlVirtualUnwind RtlAppendUnicodeToString NtReadFile NtWriteFile RtlEnumerateGenericTableWithoutSplaying RtlLookupElementGenericTable RtlDeleteElementGenericTable RtlInsertElementGenericTable RtlEnumerateGenericTable RtlInitializeGenericTable NtDeviceIoControlFile NtClose NtOpenSection

kernel32

VerifyVersionInfoW VerSetConditionMask TlsGetValue FlushFileBuffers CreateSemaphoreExW LeaveCriticalSection GetSystemDefaultLangID CreateMutexExW DeviceIoControl FindCloseChangeNotification QueryDosDeviceW FindFirstChangeNotificationW FindNextChangeNotification GetVolumeInformationW GetFileInformationByHandle GetFileAttributesExW CreateTimerQueueTimer DeleteTimerQueueTimer LocalAlloc LocalFree SystemTimeToFileTime GetSystemTime LoadLibraryExW SetFileTime LoadLibraryA GetACP ExpandEnvironmentStringsW RemoveDirectoryW MoveFileW LockFileEx GetVersionExW LockFile CompareStringW K32GetModuleFileNameExW UnlockFile GetDriveTypeW InitializeSListHead InterlockedFlushSList CreateDirectoryW EscapeCommFunction GetCommState PostQueuedCompletionStatus GlobalDeleteAtom SetCommState lstrcmpA GetVersion GetModuleHandleA GetModuleFileNameW CreateFileW DuplicateHandle DeleteFileW GetFileAttributesW SetFileAttributesW GlobalAddAtomW WriteFile ReadFile CreateMutexW GetDiskFreeSpaceW TransmitCommChar IsDBCSLeadByte WaitCommEvent TerminateThread LoadResource TryAcquireSRWLockExclusive GetCPInfo GlobalHandle GetCommandLineW GetTimeFormatW GetDateFormatW GetNumberFormatW GetVersionExA SetCommTimeouts GetCommTimeouts GlobalAlloc GlobalLock GlobalUnlock GetTempPathW InitOnceExecuteOnce CompareStringOrdinal SetupComm GlobalFree GetCommMask SetCommMask GetSystemFirmwareTable CreateEventW SetEvent ResetEvent CreateThread PurgeComm CreateEventExW CreateWaitableTimerW SetWaitableTimer QueryPerformanceFrequency WaitForMultipleObjectsEx CancelWaitableTimer GetComputerNameExW GetCommModemStatus ClearCommError TlsFree GetComputerNameA TlsAlloc SetErrorMode CancelIo BindIoCompletionCallback CreateThreadpoolTimer OpenSemaphoreW WaitForSingleObject DeleteCriticalSection InitializeCriticalSectionEx EnterCriticalSection WaitForSingleObjectEx CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer ReleaseMutex ReleaseSemaphore SetLastError ReleaseSRWLockShared AcquireSRWLockShared ReleaseSRWLockExclusive AcquireSRWLockExclusive OutputDebugStringW IsDebuggerPresent GetModuleHandleW DebugBreak GetModuleFileNameA GetModuleHandleExW HeapFree GetProcessHeap HeapAlloc FormatMessageW LoadLibraryW GetSystemDirectoryW GetCommProperties CreateFileMappingW CloseHandle GetCommConfig GetDefaultCommConfigW GetLastError SleepConditionVariableSRW WakeAllConditionVariable InterlockedPopEntrySList InterlockedPushEntrySList FlushInstructionCache DecodePointer EncodePointer VirtualAlloc VirtualFree LoadLibraryExA VirtualProtect DisableThreadLibraryCalls SizeofResource lstrcmpiW GetTimeZoneInformation GetLocalTime OpenThread SwitchToThread InitializeCriticalSection GetComputerNameW Beep TrySubmitThreadpoolCallback CloseThreadpool CloseThreadpoolCleanupGroup CloseThreadpoolCleanupGroupMembers CreateThreadpoolCleanupGroup SetThreadpoolThreadMaximum CreateThreadpool InitializeCriticalSectionAndSpinCount ProcessIdToSessionId FindFirstVolumeW FindNextVolumeW GetVolumePathNamesForVolumeNameW FindVolumeClose GetModuleHandleExA OpenProcess TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetTickCount GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter Sleep SleepConditionVariableCS InitializeConditionVariable WakeConditionVariable HeapSize HeapReAlloc HeapDestroy GetWindowsDirectoryW CreateIoCompletionPort GetQueuedCompletionStatus GetTempFileNameW CreateProcessW GetProcAddress FreeLibrary TlsSetValue GlobalSize SetFilePointer SetThreadpoolThreadMinimum SetThreadPriority GetOverlappedResult GetTickCount64 DisconnectNamedPipe CreateThreadpoolIo CancelThreadpoolIo StartThreadpoolIo CloseThreadpoolIo WaitForThreadpoolIoCallbacks QueueUserWorkItem CreateSemaphoreW FreeLibraryAndExitThread CreateWaitableTimerExW IsProcessorFeaturePresent WaitForMultipleObjects GetNativeSystemInfo CompareStringEx SearchPathW GetSystemDefaultUILanguage GetUserDefaultUILanguage GetLocaleInfoW UnmapViewOfFile MultiByteToWideChar FindResourceExW MapViewOfFile WideCharToMultiByte DeactivateActCtx ActivateActCtx FindActCtxSectionStringW CreateActCtxW QueryActCtxW OutputDebugStringA PowerCreateRequest PowerSetRequest PowerClearRequest NormalizeString MulDiv lstrcmpW RaiseException GetExitCodeThread SuspendThread ResumeThread VirtualQuery CloseThreadpoolWait WaitForThreadpoolWaitCallbacks SetThreadpoolWait InitializeSRWLock GetFileSize OpenEventW OpenMutexW OpenFileMappingW GetSystemInfo GetActiveProcessorCount GetProcessAffinityMask CreateThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork SetEndOfFile FindFirstFileW FindNextFileW FindClose GetFileSizeEx SetFilePointerEx

gdi32

OffsetWindowOrgEx GdiDrawStream GetDeviceCaps CreateRectRgn SetRectRgn CombineRgn DeleteObject OffsetRgn DPtoLP IntersectClipRect CreateRectRgnIndirect GetRgnBox ExtCreateRegion CreateSolidBrush GetRegionData CreateDIBPatternBrushPt RestoreDC SetViewportOrgEx SetWindowOrgEx SetMapMode SaveDC DeleteMetaFile CloseMetaFile SetWindowExtEx CreateMetaFileW PtInRegion CreateFontIndirectW GetDIBColorTable GetTextExtentPoint32W ExtTextOutW CreatePolygonRgn GdiFlush TextOutW GetMapMode GetTextExtentPointW GetClipRgn UpdateColors GetPixel LPtoDP DeleteDC CreateDCW GetSystemPaletteEntries SelectObject CreateDIBitmap CreateCompatibleDC SelectPalette SetStretchBltMode StretchBlt RealizePalette SelectClipRgn CreatePalette SetBrushOrgEx GetBrushOrgEx SetMetaFileBitsEx GetMetaFileBitsEx PlayMetaFile SetBkMode GetBkMode SetBkColor SetTextColor SetTextAlign GetPaletteEntries GetTextAlign GetClipBox GetNearestColor SetDIBColorTable GetNearestPaletteIndex SetPixel StretchDIBits BitBlt GetStockObject SetDCBrushColor PatBlt SetROP2 CreateBrushIndirect CreatePen SetBitmapBits CreateBitmap MoveToEx LineTo Rectangle SetPolyFillMode Ellipse Polygon FrameRgn FillRgn GetCurrentObject GetObjectW CreateDIBSection CreateCompatibleBitmap

advapi32

CredDeleteW IsTextUnicode RegisterTraceGuidsW GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle EventSetInformation CredUnprotectW CredProtectW RegEnumKeyW RegFlushKey CryptCreateHash CryptHashData CryptDestroyHash CryptGetHashParam CryptGenRandom CryptAcquireContextW RegQueryInfoKeyW EventUnregister EventRegister CopySid GetLengthSid OpenProcessToken EventWriteTransfer GetTokenInformation CryptReleaseContext CryptSetProvParam CredFree CredUnmarshalCredentialW GetUserNameA RegDeleteKeyW CredIsMarshaledCredentialW CredReadW CredWriteW CredGetSessionTypes RegNotifyChangeKeyValue RegOpenKeyExA RegQueryValueExA RegOpenKeyA RegEnumKeyExW RegDeleteValueW RegSetValueExW RegCreateKeyExW RegEnumValueW EventActivityIdControl CredReadDomainCredentialsW CredWriteDomainCredentialsW GetFileSecurityW GetSecurityDescriptorLength SetFileSecurityW CryptDestroyKey SystemFunction036 RegSetKeyValueW TraceEvent RegCloseKey RegGetValueW RegQueryValueExW RegOpenKeyExW TraceMessage UnregisterTraceGuids

user32

EnumWindows GetCaretBlinkTime SetWinEventHook UnhookWinEvent GetLastInputInfo UpdateLayeredWindow RedrawWindow GetIconInfo DrawIconEx SetForegroundWindow RegisterHotKey UnregisterHotKey RegisterDeviceNotificationW UnregisterDeviceNotification GetTopWindow OffsetRect TranslateMessage UnionRect EnumChildWindows EnumDisplayMonitors EnumDisplayDevicesW CopyIcon PostThreadMessageW MsgWaitForMultipleObjectsEx CharNextW IsChild CallWindowProcW DrawTextW SetWindowLongW EnumThreadWindows AllowSetForegroundWindow MonitorFromPoint UnregisterClassA CharLowerW GetClientRect GetWindowDC FillRect IntersectRect SetTimer LoadCursorW SetWindowPos ShowWindow KillTimer DestroyWindow UnregisterClassW GetClassInfoW RegisterClassW CreateWindowExW SetPropW GetKeyState SetParent MoveWindow GetKeyboardType ScreenToClient GetCapture GetSystemMetrics SetCursorPos ClientToScreen DeferWindowPos MapVirtualKeyW GetKeyboardState keybd_event GetCursorPos GetRawInputData GetAncestor GetKeyboardLayoutNameW TrackMouseEvent DefWindowProcW GetWindowLongPtrW SetWindowLongPtrW GetAsyncKeyState AttachThreadInput RegisterClassExW ReleaseCapture GetGUIThreadInfo BeginDeferWindowPos GetClassNameW GetActiveWindow FindWindowExW SendMessageTimeoutW SetCapture GetMessageExtraInfo MessageBeep GetWindowTextW MsgWaitForMultipleObjects GetWindowThreadProcessId SetWindowsHookExW SetCursor GetWindowLongW DispatchMessageW GetMessageW PostQuitMessage ValidateRect GetWindowTextLengthW CloseClipboard GetParent GetLastActivePopup RemovePropW SetClipboardData EmptyClipboard OpenClipboard EnableWindow UpdateWindow LoadIconW GetSystemMenu EnableMenuItem SetWindowPlacement CloseWindow GetWindowPlacement SystemParametersInfoA LockWindowUpdate GetSysColor SetScrollPos AdjustWindowRect ShowScrollBar SetScrollInfo GetCursorInfo CheckDlgButton EndDialog IsDlgButtonChecked SetDlgItemTextW GetDlgItem GetProcessDefaultLayout GetDlgCtrlID MonitorFromRect IsWindowEnabled SetLayeredWindowAttributes GetSubMenu TrackPopupMenuEx SetClassLongPtrW GetClassLongPtrW GetMenuItemInfoW SetMenuItemInfoW DestroyMenu DestroyIcon LoadImageW AnimateWindow GetClassInfoExW IsRectEmpty SendDlgItemMessageW GetNextDlgTabItem GetDlgItemTextW InflateRect GetSysColorBrush SetRectEmpty LoadStringW UnhookWindowsHookEx GetClipboardFormatNameW CharPrevA CharNextA LoadMenuW DialogBoxParamW CreateDialogParamW GetKeyboardLayoutNameA EqualRect MapWindowPoints IsWindow GetKeyboardLayout DisplayConfigGetDeviceInfo QueryDisplayConfig GetDisplayConfigBufferSizes SetWindowRgn SetActiveWindow IsIconic IsZoomed RegisterWindowMessageW GetWindow IsWindowVisible FindWindowW CreateCursor SendMessageW ReleaseDC GetDC InvalidateRect RegisterClipboardFormatW GetForegroundWindow GetFocus PostMessageW CallNextHookEx PtInRect BeginPaint EndPaint EnumDisplaySettingsW CopyRect SetRect GetMonitorInfoW IsClipboardFormatAvailable DefDlgProcW MonitorFromWindow RegisterRawInputDevices ShowCursor GetWindowRgn SetWindowTextW EndDeferWindowPos GetWindowRect FlashWindow SystemParametersInfoW CreateIconIndirect GetDesktopWindow DestroyCursor PeekMessageW SendInput FlashWindowEx SetFocus

iphlpapi

FreeMibTable CreateSortedAddressPairs ParseNetworkString

d2d1

ord1

dwrite

DWriteCreateFactory

rpcrt4

I_RpcExceptionFilter IUnknown_AddRef_Proxy UuidFromStringW NdrMesTypeEncode3 MesEncodeDynBufferHandleCreate UuidToStringW CStdStubBuffer_DebugServerQueryInterface MesDecodeBufferHandleCreate RpcStringFreeW NdrMesTypeDecode3 NdrMesTypeFree3 NdrCStdStubBuffer_Release CStdStubBuffer_Connect NdrDllCanUnloadNow CStdStubBuffer_IsIIDSupported IUnknown_QueryInterface_Proxy CStdStubBuffer_Invoke NdrOleFree CStdStubBuffer_AddRef IUnknown_Release_Proxy NdrDllUnregisterProxy CStdStubBuffer_CountRefs CStdStubBuffer_QueryInterface NdrOleAllocate CStdStubBuffer_DebugServerRelease NdrDllRegisterProxy NdrDllGetClassObject MesHandleFree CStdStubBuffer_Disconnect

msacm32

acmDriverEnum acmFormatTagDetailsW acmDriverOpen acmStreamOpen acmStreamClose acmFormatSuggest acmStreamUnprepareHeader acmStreamConvert acmStreamPrepareHeader acmStreamSize acmDriverClose

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute

setupapi

CM_Locate_DevNodeW CM_Get_Parent CM_Get_Device_ID_Size CM_Get_Device_IDW SetupDiGetClassDevsW SetupDiGetDeviceRegistryPropertyW SetupDiEnumDeviceInfo SetupDiOpenDeviceInterfaceW CM_Get_DevNode_Status SetupDiDestroyDeviceInfoList SetupDiGetDeviceInstanceIdW SetupDiOpenDevRegKey SetupDiGetDeviceInterfaceDetailW SetupDiEnumDeviceInterfaces SetupDiCreateDeviceInfoList SetupDiGetClassDevsExW SetupDiOpenClassRegKeyExW SetupDiOpenDeviceInfoW

secur32

EncryptMessage AcceptSecurityContext DeleteSecurityContext QueryContextAttributesW AcquireCredentialsHandleW SetContextAttributesW FreeCredentialsHandle DecryptMessage LsaFreeReturnBuffer InitializeSecurityContextW LsaDeregisterLogonProcess LsaConnectUntrusted LsaLookupAuthenticationPackage InitSecurityInterfaceW QuerySecurityPackageInfoW FreeContextBuffer GetUserNameExW LsaCallAuthenticationPackage

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

uxtheme

SetWindowTheme GetCurrentThemeName

dxgi

CreateDXGIFactory1

imm32

ImmAssociateContext ImmGetContext

ncrypt

NCryptFreeObject NCryptSignHash NCryptExportKey NCryptFinalizeKey NCryptCreatePersistedKey NCryptOpenStorageProvider NCryptSetProperty

netapi32

NetGetJoinInformation NetApiBufferFree

uiautomationcore

UiaReturnRawElementProvider

d3d11

D3D11CreateDevice

cfgmgr32

CM_Get_Child CM_MapCrToWin32Err CM_Get_Device_Interface_PropertyW CM_Get_DevNode_Registry_PropertyW CM_Get_Sibling

pdh

PdhCollectQueryData PdhRemoveCounter PdhGetFormattedCounterValue PdhAddEnglishCounterW PdhCloseQuery PdhOpenQueryW

bcrypt

BCryptCreateHash BCryptHashData BCryptImportKeyPair BCryptDestroyHash BCryptEncrypt BCryptDestroyKey BCryptOpenAlgorithmProvider BCryptGetProperty BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptImportKey BCryptFinishHash

api-ms-win-core-path-l1-1-0

PathCchCanonicalize

Name

.text

Size

5.9MB

Virtual Size

5.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

61KB

Virtual Size

106KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

181KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

51KB

Virtual Size

50KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/prm0009.dll

SHA256 8661b4e72de38df01673dca81ea1daa3988fa9d4d5c5fec33b162673c8ac44a2
MD5 ee84c818ee8488c2a17cba090db5c1fb
SHA1 0a7664e6fc6f52e609b9ccb2814ec3ce8422acb9
SHA512 7e61c0242a1679bc6d588d044d3d55e1e6f756940d51b21fd58f882374e77dbb49fb9942e682f695dbd38bc006530b3b029dc5696b686f908223ce57eda5b005
SSDEEP 49152:YACUDITOKnUTy6KLHhOHZYFag+jNHIGKKK:cnUT8nO6tZ
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/pyexpat.pyd

IMPHASH cfa32f0abc6ae85c4b2078212640c054
SHA256 5604f629523125904909547a97f3cdb5dbfe33b39878bad77534de0c3c034387
MD5 6527063f18e8d49d04e2cc216c2f0b27
SHA1 917c349c62689f9b782a314ce4b2311b6b826606
SHA512 67c87d11683a0f4e1bc4083ff05edee423155f829051c3fa66cc4f2cfb98cf7374b3a06eb37095e19f5f2a6c8da83f0c0e3f7eb964694992b525f81b1b00f423
SSDEEP 6144:JmRBHO1UpyGKEjQxmMLIQjmuMgk6k6k6k6k6k6jHlDX:JmRBHJS7Mgk6k6k6k6k6k6jFDX
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d9:52:d5:38:29:2a:69:c1:db:87:f2:34:3e:49:dc:09:2a:7f:c1:7c:c0:8d:5d:65:b7:17:2e:d5:c0:f0:30:a4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

64496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\pyexpat.pdb

kernel32

GetCurrentProcessId GetSystemTimeAsFileTime RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter RtlCaptureContext

python311

PyObject_GC_Track PyBytes_FromStringAndSize PyExc_TypeError PyType_FromModuleAndSpec PyObject_IsTrue _PyByteArray_empty_string PyObject_CallFunction PyMem_Malloc _PyLong_AsInt PyModule_GetState PyModuleDef_Init PyUnicode_FromString PyBuffer_Release PyObject_Call PyByteArray_Type PyUnicode_InternFromString PyErr_SetString _PyArg_BadArgument _Py_HashSecret PyDict_SetItemString PyTuple_New _Py_NoneStruct PyObject_Realloc PyErr_NoMemory PyMem_Free _PyTraceback_Add PyDict_New PyDict_SetItem PyCapsule_New PyType_GetModuleState PyUnicode_Decode PyList_Append PyModule_New PyErr_NewException PyList_New PyObject_GetBuffer PyUnicode_FromFormat PyLong_AsLong PyObject_GC_Del PyModule_AddObject _PyImport_SetModule PyModule_AddObjectRef PyDescr_NewGetSet PyObject_Free _Py_Dealloc PyType_IsSubtype PyModule_AddStringConstant PyErr_Format PyExc_ValueError _PyObject_GC_New _PyArg_UnpackKeywords _PyObject_LookupAttr PyDict_GetItemWithError Py_BuildValue PyObject_GC_UnTrack PyLong_FromLong PyObject_SetAttrString PyExc_RuntimeError PyUnicode_AsUTF8AndSize PyUnicode_DecodeUTF8 PyErr_Occurred PyModule_AddIntConstant PyObject_Malloc PyObject_CallOneArg PyBool_FromLong PyDict_SetDefault PyErr_SetObject _PyUnicode_Ready

vcruntime140

memcpy memcmp memset __std_type_info_destroy_list __C_specific_handler strrchr memmove

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

malloc realloc free

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _initialize_onexit_table _configure_narrow_argv _initterm_e _initterm _cexit _initialize_narrow_environment _errno _seh_filter_dll

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-environment-l1-1-0

getenv

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/python3.dll

SHA256 e45452efa356db874f2e5ff08c9cc0fe22528609e5d341f8fb67ba48885ab77d
MD5 d8ba00c1d9fcc7c0abbffb5c214da647
SHA1 5fa9d5700b42a83bfcc125d1c45e0111b9d62035
SHA512 df1b714494856f618a742791eefbf470b2eee07b51d983256e4386ea7d48da5c7b1e896f222ea55a748c9413203886cde3a65ef9e7ea069014fa626f81d79cd3
SSDEEP 768:lGw/EsYpkVgBaz57kcDA7QKFmpz7cnzH/ks/KF61xubwmB1Cf//yhC74JFmpktJa:r/5k8cnzeJd9IVL0v7SyJwx/
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

2b:da:74:40:cc:58:ad:30:ac:10:7b:e6:6d:f2:38:72:c1:ed:43:89:58:7d:fd:3c:5f:58:e1:12:87:d2:c3:58

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\python3.pdb

PyAIter_Check PyArg_Parse PyArg_ParseTuple PyArg_ParseTupleAndKeywords PyArg_UnpackTuple PyArg_VaParse PyArg_VaParseTupleAndKeywords PyArg_ValidateKeywordArguments PyBaseObject_Type PyBool_FromLong PyBool_Type PyBuffer_FillContiguousStrides PyBuffer_FillInfo PyBuffer_FromContiguous PyBuffer_GetPointer PyBuffer_IsContiguous PyBuffer_Release PyBuffer_SizeFromFormat PyBuffer_ToContiguous PyByteArrayIter_Type PyByteArray_AsString PyByteArray_Concat PyByteArray_FromObject PyByteArray_FromStringAndSize PyByteArray_Resize PyByteArray_Size PyByteArray_Type PyBytesIter_Type PyBytes_AsString PyBytes_AsStringAndSize PyBytes_Concat PyBytes_ConcatAndDel PyBytes_DecodeEscape PyBytes_FromFormat PyBytes_FromFormatV PyBytes_FromObject PyBytes_FromString PyBytes_FromStringAndSize PyBytes_Repr PyBytes_Size PyBytes_Type PyCFunction_Call PyCFunction_GetFlags PyCFunction_GetFunction PyCFunction_GetSelf PyCFunction_New PyCFunction_NewEx PyCFunction_Type PyCMethod_New PyCallIter_New PyCallIter_Type PyCallable_Check PyCapsule_GetContext PyCapsule_GetDestructor PyCapsule_GetName PyCapsule_GetPointer PyCapsule_Import PyCapsule_IsValid PyCapsule_New PyCapsule_SetContext PyCapsule_SetDestructor PyCapsule_SetName PyCapsule_SetPointer PyCapsule_Type PyClassMethodDescr_Type PyCodec_BackslashReplaceErrors PyCodec_Decode PyCodec_Decoder PyCodec_Encode PyCodec_Encoder PyCodec_IgnoreErrors PyCodec_IncrementalDecoder PyCodec_IncrementalEncoder PyCodec_KnownEncoding PyCodec_LookupError PyCodec_NameReplaceErrors PyCodec_Register PyCodec_RegisterError PyCodec_ReplaceErrors PyCodec_StreamReader PyCodec_StreamWriter PyCodec_StrictErrors PyCodec_Unregister PyCodec_XMLCharRefReplaceErrors PyComplex_FromDoubles PyComplex_ImagAsDouble PyComplex_RealAsDouble PyComplex_Type PyDescr_NewClassMethod PyDescr_NewGetSet PyDescr_NewMember PyDescr_NewMethod PyDictItems_Type PyDictIterItem_Type PyDictIterKey_Type PyDictIterValue_Type PyDictKeys_Type PyDictProxy_New PyDictProxy_Type PyDictRevIterItem_Type PyDictRevIterKey_Type PyDictRevIterValue_Type PyDictValues_Type PyDict_Clear PyDict_Contains PyDict_Copy PyDict_DelItem PyDict_DelItemString PyDict_GetItem PyDict_GetItemString PyDict_GetItemWithError PyDict_Items PyDict_Keys PyDict_Merge PyDict_MergeFromSeq2 PyDict_New PyDict_Next PyDict_SetItem PyDict_SetItemString PyDict_Size PyDict_Type PyDict_Update PyDict_Values PyEllipsis_Type PyEnum_Type PyErr_BadArgument PyErr_BadInternalCall PyErr_CheckSignals PyErr_Clear PyErr_Display PyErr_ExceptionMatches PyErr_Fetch PyErr_Format PyErr_FormatV PyErr_GetExcInfo PyErr_GetHandledException PyErr_GivenExceptionMatches PyErr_NewException PyErr_NewExceptionWithDoc PyErr_NoMemory PyErr_NormalizeException PyErr_Occurred PyErr_Print PyErr_PrintEx PyErr_ProgramText PyErr_ResourceWarning PyErr_Restore PyErr_SetExcFromWindowsErr PyErr_SetExcFromWindowsErrWithFilename PyErr_SetExcFromWindowsErrWithFilenameObject PyErr_SetExcFromWindowsErrWithFilenameObjects PyErr_SetExcInfo PyErr_SetFromErrno PyErr_SetFromErrnoWithFilename PyErr_SetFromErrnoWithFilenameObject PyErr_SetFromErrnoWithFilenameObjects PyErr_SetFromWindowsErr PyErr_SetFromWindowsErrWithFilename PyErr_SetHandledException PyErr_SetImportError PyErr_SetImportErrorSubclass PyErr_SetInterrupt PyErr_SetInterruptEx PyErr_SetNone PyErr_SetObject PyErr_SetString PyErr_SyntaxLocation PyErr_SyntaxLocationEx PyErr_WarnEx PyErr_WarnExplicit PyErr_WarnFormat PyErr_WriteUnraisable PyEval_AcquireLock PyEval_AcquireThread PyEval_CallFunction PyEval_CallMethod PyEval_CallObjectWithKeywords PyEval_EvalCode PyEval_EvalCodeEx PyEval_EvalFrame PyEval_EvalFrameEx PyEval_GetBuiltins PyEval_GetFrame PyEval_GetFuncDesc PyEval_GetFuncName PyEval_GetGlobals PyEval_GetLocals PyEval_InitThreads PyEval_ReleaseLock PyEval_ReleaseThread PyEval_RestoreThread PyEval_SaveThread PyEval_ThreadsInitialized PyExc_ArithmeticError PyExc_AssertionError PyExc_AttributeError PyExc_BaseException PyExc_BaseExceptionGroup PyExc_BlockingIOError PyExc_BrokenPipeError PyExc_BufferError PyExc_BytesWarning PyExc_ChildProcessError PyExc_ConnectionAbortedError PyExc_ConnectionError PyExc_ConnectionRefusedError PyExc_ConnectionResetError PyExc_DeprecationWarning PyExc_EOFError PyExc_EncodingWarning PyExc_EnvironmentError PyExc_Exception PyExc_FileExistsError PyExc_FileNotFoundError PyExc_FloatingPointError PyExc_FutureWarning PyExc_GeneratorExit PyExc_IOError PyExc_ImportError PyExc_ImportWarning PyExc_IndentationError PyExc_IndexError PyExc_InterruptedError PyExc_IsADirectoryError PyExc_KeyError PyExc_KeyboardInterrupt PyExc_LookupError PyExc_MemoryError PyExc_ModuleNotFoundError PyExc_NameError PyExc_NotADirectoryError PyExc_NotImplementedError PyExc_OSError PyExc_OverflowError PyExc_PendingDeprecationWarning PyExc_PermissionError PyExc_ProcessLookupError PyExc_RecursionError PyExc_ReferenceError PyExc_ResourceWarning PyExc_RuntimeError PyExc_RuntimeWarning PyExc_StopAsyncIteration PyExc_StopIteration PyExc_SyntaxError PyExc_SyntaxWarning PyExc_SystemError PyExc_SystemExit PyExc_TabError PyExc_TimeoutError PyExc_TypeError PyExc_UnboundLocalError PyExc_UnicodeDecodeError PyExc_UnicodeEncodeError PyExc_UnicodeError PyExc_UnicodeTranslateError PyExc_UnicodeWarning PyExc_UserWarning PyExc_ValueError PyExc_Warning PyExc_WindowsError PyExc_ZeroDivisionError PyExceptionClass_Name PyException_GetCause PyException_GetContext PyException_GetTraceback PyException_SetCause PyException_SetContext PyException_SetTraceback PyFile_FromFd PyFile_GetLine PyFile_WriteObject PyFile_WriteString PyFilter_Type PyFloat_AsDouble PyFloat_FromDouble PyFloat_FromString PyFloat_GetInfo PyFloat_GetMax PyFloat_GetMin PyFloat_Type PyFrame_GetCode PyFrame_GetLineNumber PyFrozenSet_New PyFrozenSet_Type PyGC_Collect PyGC_Disable PyGC_Enable PyGC_IsEnabled PyGILState_Ensure PyGILState_GetThisThreadState PyGILState_Release PyGetSetDescr_Type PyImport_AddModule PyImport_AddModuleObject PyImport_AppendInittab PyImport_ExecCodeModule PyImport_ExecCodeModuleEx PyImport_ExecCodeModuleObject PyImport_ExecCodeModuleWithPathnames PyImport_GetImporter PyImport_GetMagicNumber PyImport_GetMagicTag PyImport_GetModule PyImport_GetModuleDict PyImport_Import PyImport_ImportFrozenModule PyImport_ImportFrozenModuleObject PyImport_ImportModule PyImport_ImportModuleLevel PyImport_ImportModuleLevelObject PyImport_ImportModuleNoBlock PyImport_ReloadModule PyIndex_Check PyInterpreterState_Clear PyInterpreterState_Delete PyInterpreterState_Get PyInterpreterState_GetDict PyInterpreterState_GetID PyInterpreterState_New PyIter_Check PyIter_Next PyIter_Send PyListIter_Type PyListRevIter_Type PyList_Append PyList_AsTuple PyList_GetItem PyList_GetSlice PyList_Insert PyList_New PyList_Reverse PyList_SetItem PyList_SetSlice PyList_Size PyList_Sort PyList_Type PyLongRangeIter_Type PyLong_AsDouble PyLong_AsLong PyLong_AsLongAndOverflow PyLong_AsLongLong PyLong_AsLongLongAndOverflow PyLong_AsSize_t PyLong_AsSsize_t PyLong_AsUnsignedLong PyLong_AsUnsignedLongLong PyLong_AsUnsignedLongLongMask PyLong_AsUnsignedLongMask PyLong_AsVoidPtr PyLong_FromDouble PyLong_FromLong PyLong_FromLongLong PyLong_FromSize_t PyLong_FromSsize_t PyLong_FromString PyLong_FromUnsignedLong PyLong_FromUnsignedLongLong PyLong_FromVoidPtr PyLong_GetInfo PyLong_Type PyMap_Type PyMapping_Check PyMapping_GetItemString PyMapping_HasKey PyMapping_HasKeyString PyMapping_Items PyMapping_Keys PyMapping_Length PyMapping_SetItemString PyMapping_Size PyMapping_Values PyMarshal_ReadObjectFromString PyMarshal_WriteObjectToString PyMem_Calloc PyMem_Free PyMem_Malloc PyMem_Realloc PyMemberDescr_Type PyMember_GetOne PyMember_SetOne PyMemoryView_FromBuffer PyMemoryView_FromMemory PyMemoryView_FromObject PyMemoryView_GetContiguous PyMemoryView_Type PyMethodDescr_Type PyModuleDef_Init PyModuleDef_Type PyModule_AddFunctions PyModule_AddIntConstant PyModule_AddObject PyModule_AddObjectRef PyModule_AddStringConstant PyModule_AddType PyModule_Create2 PyModule_ExecDef PyModule_FromDefAndSpec2 PyModule_GetDef PyModule_GetDict PyModule_GetFilename PyModule_GetFilenameObject PyModule_GetName PyModule_GetNameObject PyModule_GetState PyModule_New PyModule_NewObject PyModule_SetDocString PyModule_Type PyNumber_Absolute PyNumber_Add PyNumber_And PyNumber_AsSsize_t PyNumber_Check PyNumber_Divmod PyNumber_Float PyNumber_FloorDivide PyNumber_InPlaceAdd PyNumber_InPlaceAnd PyNumber_InPlaceFloorDivide PyNumber_InPlaceLshift PyNumber_InPlaceMatrixMultiply PyNumber_InPlaceMultiply PyNumber_InPlaceOr PyNumber_InPlacePower PyNumber_InPlaceRemainder PyNumber_InPlaceRshift PyNumber_InPlaceSubtract PyNumber_InPlaceTrueDivide PyNumber_InPlaceXor PyNumber_Index PyNumber_Invert PyNumber_Long PyNumber_Lshift PyNumber_MatrixMultiply PyNumber_Multiply PyNumber_Negative PyNumber_Or PyNumber_Positive PyNumber_Power PyNumber_Remainder PyNumber_Rshift PyNumber_Subtract PyNumber_ToBase PyNumber_TrueDivide PyNumber_Xor PyOS_CheckStack PyOS_FSPath PyOS_InputHook PyOS_InterruptOccurred PyOS_double_to_string PyOS_getsig PyOS_mystricmp PyOS_mystrnicmp PyOS_setsig PyOS_snprintf PyOS_string_to_double PyOS_strtol PyOS_strtoul PyOS_vsnprintf PyObject_ASCII PyObject_AsCharBuffer PyObject_AsFileDescriptor PyObject_AsReadBuffer PyObject_AsWriteBuffer PyObject_Bytes PyObject_Call PyObject_CallFunction PyObject_CallFunctionObjArgs PyObject_CallMethod PyObject_CallMethodObjArgs PyObject_CallNoArgs PyObject_CallObject PyObject_Calloc PyObject_CheckBuffer PyObject_CheckReadBuffer PyObject_ClearWeakRefs PyObject_CopyData PyObject_DelItem PyObject_DelItemString PyObject_Dir PyObject_Format PyObject_Free PyObject_GC_Del PyObject_GC_IsFinalized PyObject_GC_IsTracked PyObject_GC_Track PyObject_GC_UnTrack PyObject_GenericGetAttr PyObject_GenericGetDict PyObject_GenericSetAttr PyObject_GenericSetDict PyObject_GetAIter PyObject_GetAttr PyObject_GetAttrString PyObject_GetBuffer PyObject_GetItem PyObject_GetIter PyObject_HasAttr PyObject_HasAttrString PyObject_Hash PyObject_HashNotImplemented PyObject_Init PyObject_InitVar PyObject_IsInstance PyObject_IsSubclass PyObject_IsTrue PyObject_Length PyObject_Malloc PyObject_Not PyObject_Realloc PyObject_Repr PyObject_RichCompare PyObject_RichCompareBool PyObject_SelfIter PyObject_SetAttr PyObject_SetAttrString PyObject_SetItem PyObject_Size PyObject_Str PyObject_Type PyProperty_Type PyRangeIter_Type PyRange_Type PyReversed_Type PySeqIter_New PySeqIter_Type PySequence_Check PySequence_Concat PySequence_Contains PySequence_Count PySequence_DelItem PySequence_DelSlice PySequence_Fast PySequence_GetItem PySequence_GetSlice PySequence_In PySequence_InPlaceConcat PySequence_InPlaceRepeat PySequence_Index PySequence_Length PySequence_List PySequence_Repeat PySequence_SetItem PySequence_SetSlice PySequence_Size PySequence_Tuple PySetIter_Type PySet_Add PySet_Clear PySet_Contains PySet_Discard PySet_New PySet_Pop PySet_Size PySet_Type PySlice_AdjustIndices PySlice_GetIndices PySlice_GetIndicesEx PySlice_New PySlice_Type PySlice_Unpack PyState_AddModule PyState_FindModule PyState_RemoveModule PyStructSequence_GetItem PyStructSequence_New PyStructSequence_NewType PyStructSequence_SetItem PyStructSequence_UnnamedField PySuper_Type PySys_AddWarnOption PySys_AddWarnOptionUnicode PySys_AddXOption PySys_FormatStderr PySys_FormatStdout PySys_GetObject PySys_GetXOptions PySys_HasWarnOptions PySys_ResetWarnOptions PySys_SetArgv PySys_SetArgvEx PySys_SetObject PySys_SetPath PySys_WriteStderr PySys_WriteStdout PyThreadState_Clear PyThreadState_Delete PyThreadState_DeleteCurrent PyThreadState_Get PyThreadState_GetDict PyThreadState_GetFrame PyThreadState_GetID PyThreadState_GetInterpreter PyThreadState_New PyThreadState_SetAsyncExc PyThreadState_Swap PyThread_GetInfo PyThread_ReInitTLS PyThread_acquire_lock PyThread_acquire_lock_timed PyThread_allocate_lock PyThread_create_key PyThread_delete_key PyThread_delete_key_value PyThread_exit_thread PyThread_free_lock PyThread_get_key_value PyThread_get_stacksize PyThread_get_thread_ident PyThread_get_thread_native_id PyThread_init_thread PyThread_release_lock PyThread_set_key_value PyThread_set_stacksize PyThread_start_new_thread PyThread_tss_alloc PyThread_tss_create PyThread_tss_delete PyThread_tss_free PyThread_tss_get PyThread_tss_is_created PyThread_tss_set PyTraceBack_Here PyTraceBack_Print PyTraceBack_Type PyTupleIter_Type PyTuple_GetItem PyTuple_GetSlice PyTuple_New PyTuple_Pack PyTuple_SetItem PyTuple_Size PyTuple_Type PyType_ClearCache PyType_FromModuleAndSpec PyType_FromSpec PyType_FromSpecWithBases PyType_GenericAlloc PyType_GenericNew PyType_GetFlags PyType_GetModule PyType_GetModuleState PyType_GetName PyType_GetQualName PyType_GetSlot PyType_IsSubtype PyType_Modified PyType_Ready PyType_Type PyUnicodeDecodeError_Create PyUnicodeDecodeError_GetEncoding PyUnicodeDecodeError_GetEnd PyUnicodeDecodeError_GetObject PyUnicodeDecodeError_GetReason PyUnicodeDecodeError_GetStart PyUnicodeDecodeError_SetEnd PyUnicodeDecodeError_SetReason PyUnicodeDecodeError_SetStart PyUnicodeEncodeError_GetEncoding PyUnicodeEncodeError_GetEnd PyUnicodeEncodeError_GetObject PyUnicodeEncodeError_GetReason PyUnicodeEncodeError_GetStart PyUnicodeEncodeError_SetEnd PyUnicodeEncodeError_SetReason PyUnicodeEncodeError_SetStart PyUnicodeIter_Type PyUnicodeTranslateError_GetEnd PyUnicodeTranslateError_GetObject PyUnicodeTranslateError_GetReason PyUnicodeTranslateError_GetStart PyUnicodeTranslateError_SetEnd PyUnicodeTranslateError_SetReason PyUnicodeTranslateError_SetStart PyUnicode_Append PyUnicode_AppendAndDel PyUnicode_AsASCIIString PyUnicode_AsCharmapString PyUnicode_AsDecodedObject PyUnicode_AsDecodedUnicode PyUnicode_AsEncodedObject PyUnicode_AsEncodedString PyUnicode_AsEncodedUnicode PyUnicode_AsLatin1String PyUnicode_AsMBCSString PyUnicode_AsRawUnicodeEscapeString PyUnicode_AsUCS4 PyUnicode_AsUCS4Copy PyUnicode_AsUTF16String PyUnicode_AsUTF32String PyUnicode_AsUTF8AndSize PyUnicode_AsUTF8String PyUnicode_AsUnicodeEscapeString PyUnicode_AsWideChar PyUnicode_AsWideCharString PyUnicode_BuildEncodingMap PyUnicode_Compare PyUnicode_CompareWithASCIIString PyUnicode_Concat PyUnicode_Contains PyUnicode_Count PyUnicode_Decode PyUnicode_DecodeASCII PyUnicode_DecodeCharmap PyUnicode_DecodeCodePageStateful PyUnicode_DecodeFSDefault PyUnicode_DecodeFSDefaultAndSize PyUnicode_DecodeLatin1 PyUnicode_DecodeLocale PyUnicode_DecodeLocaleAndSize PyUnicode_DecodeMBCS PyUnicode_DecodeMBCSStateful PyUnicode_DecodeRawUnicodeEscape PyUnicode_DecodeUTF16 PyUnicode_DecodeUTF16Stateful PyUnicode_DecodeUTF32 PyUnicode_DecodeUTF32Stateful PyUnicode_DecodeUTF7 PyUnicode_DecodeUTF7Stateful PyUnicode_DecodeUTF8 PyUnicode_DecodeUTF8Stateful PyUnicode_DecodeUnicodeEscape PyUnicode_EncodeCodePage PyUnicode_EncodeFSDefault PyUnicode_EncodeLocale PyUnicode_FSConverter PyUnicode_FSDecoder PyUnicode_Find PyUnicode_FindChar PyUnicode_Format PyUnicode_FromEncodedObject PyUnicode_FromFormat PyUnicode_FromFormatV PyUnicode_FromObject PyUnicode_FromOrdinal PyUnicode_FromString PyUnicode_FromStringAndSize PyUnicode_FromWideChar PyUnicode_GetDefaultEncoding PyUnicode_GetLength PyUnicode_GetSize PyUnicode_InternFromString PyUnicode_InternImmortal PyUnicode_InternInPlace PyUnicode_IsIdentifier PyUnicode_Join PyUnicode_Partition PyUnicode_RPartition PyUnicode_RSplit PyUnicode_ReadChar PyUnicode_Replace PyUnicode_Resize PyUnicode_RichCompare PyUnicode_Split PyUnicode_Splitlines PyUnicode_Substring PyUnicode_Tailmatch PyUnicode_Translate PyUnicode_Type PyUnicode_WriteChar PyWeakref_GetObject PyWeakref_NewProxy PyWeakref_NewRef PyWrapperDescr_Type PyWrapper_New PyZip_Type Py_AddPendingCall Py_AtExit Py_BuildValue Py_BytesMain Py_CompileString Py_DecRef Py_DecodeLocale Py_EncodeLocale Py_EndInterpreter Py_EnterRecursiveCall Py_Exit Py_FatalError Py_FileSystemDefaultEncodeErrors Py_FileSystemDefaultEncoding Py_Finalize Py_FinalizeEx Py_GenericAlias Py_GenericAliasType Py_GetArgcArgv Py_GetBuildInfo Py_GetCompiler Py_GetCopyright Py_GetExecPrefix Py_GetPath Py_GetPlatform Py_GetPrefix Py_GetProgramFullPath Py_GetProgramName Py_GetPythonHome Py_GetRecursionLimit Py_GetVersion Py_HasFileSystemDefaultEncoding Py_IncRef Py_Initialize Py_InitializeEx Py_Is Py_IsFalse Py_IsInitialized Py_IsNone Py_IsTrue Py_LeaveRecursiveCall Py_Main Py_MakePendingCalls Py_NewInterpreter Py_NewRef Py_ReprEnter Py_ReprLeave Py_SetPath Py_SetProgramName Py_SetPythonHome Py_SetRecursionLimit Py_UTF8Mode Py_VaBuildValue Py_Version Py_XNewRef _PyArg_ParseTupleAndKeywords_SizeT _PyArg_ParseTuple_SizeT _PyArg_Parse_SizeT _PyArg_VaParseTupleAndKeywords_SizeT _PyArg_VaParse_SizeT _PyErr_BadInternalCall _PyObject_CallFunction_SizeT _PyObject_CallMethod_SizeT _PyObject_GC_New _PyObject_GC_NewVar _PyObject_GC_Resize _PyObject_New _PyObject_NewVar _PyState_AddModule _PyThreadState_Init _PyThreadState_Prealloc _PyWeakref_CallableProxyType _PyWeakref_ProxyType _PyWeakref_RefType _Py_BuildValue_SizeT _Py_CheckRecursiveCall _Py_Dealloc _Py_DecRef _Py_EllipsisObject _Py_FalseStruct _Py_IncRef _Py_NegativeRefcount _Py_NoneStruct _Py_NotImplementedStruct _Py_RefTotal _Py_SwappedOp _Py_TrueStruct _Py_VaBuildValue_SizeT

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/python311.dll

IMPHASH 5714829f48aacde8f83e3e5f0ead1f49
SHA256 53a969094231b9032abe4148939ce08a3a4e4b30b0459fc7d90c89f65e8dcd4a
MD5 65e381a0b1bc05f71c139b0c7a5b8eb2
SHA1 7c4a3adf21ebcee5405288fc81fc4be75019d472
SHA512 4db465ef927dfb019ab6faec3a3538b0c3a8693ea3c2148fd16163bf31c03c899dfdf350c31457edf64e671e3cc3e46851f32f0f84b267535bebc4768ef53d39
SSDEEP 98304:CdT9zf0+IXY3qd4biqm46oWHrMGYPtA81:CdT9zflIXgq/epGWAs
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

53:26:f5:50:75:77:8d:86:0a:87:cf:35:85:1d:ab:8a:6c:b2:b2:72:0d:29:bf:06:d4:2c:4d:60:cc:91:d4:c8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1654220

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\python311.pdb

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

ws2_32

getsockopt send WSAGetLastError

api-ms-win-core-path-l1-1-0

PathCchSkipRoot PathCchCombineEx PathCchFindExtension

bcrypt

BCryptGenRandom

advapi32

RegEnumKeyExW RegDeleteKeyExW RegQueryInfoKeyW RegDeleteKeyW RegQueryValueW RegFlushKey RegCreateKeyExW RegSaveKeyW RegSetValueExW RegLoadKeyW RegCreateKeyW RegConnectRegistryW RegDeleteValueW RegEnumValueW GetUserNameW RegQueryValueExW RegOpenKeyExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueA RegCloseKey RegSetValueW

kernel32

HeapAlloc GetProcessHeap IsDebuggerPresent InitializeSListHead GetCurrentProcessId IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TlsGetValue TlsFree GetCurrentThread GetModuleFileNameW CompareStringOrdinal GetFileAttributesW GetLocaleInfoA GetACP RemoveVectoredExceptionHandler SetErrorMode RaiseException AddVectoredExceptionHandler GetCurrentProcess SetEndOfFile UnmapViewOfFile DuplicateHandle GetLastError FlushViewOfFile CloseHandle GetSystemInfo SetFilePointerEx CreateFileMappingA GetFileSize OpenFileMappingA MapViewOfFile CreateDirectoryW GetFileInformationByHandleEx FindFirstFileW Process32First SetHandleInformation GetConsoleScreenBufferInfo SetLastError GetHandleInformation GetFullPathNameW FindNextFileW GetStdHandle DeviceIoControl TerminateProcess RemoveDirectoryW GetFinalPathNameByHandleW SetFileTime SetEnvironmentVariableW CreatePipe CreateHardLinkW FindClose GetVolumePathNameW CreateFileW OpenProcess SetFileAttributesW CreateToolhelp32Snapshot GetFileInformationByHandle GetFileAttributesExW GetDiskFreeSpaceExW DeleteFileW Process32Next LoadLibraryW GetActiveProcessorCount GetCurrentDirectoryW SetCurrentDirectoryW GetProcAddress MoveFileExW GetModuleHandleW CreateSymbolicLinkW GetSystemTimeAsFileTime GetFileType GetProcessTimes GenerateConsoleCtrlEvent SetEvent CreateEventA WaitForMultipleObjects WaitForSingleObject Sleep GetTimeZoneInformation TlsAlloc SetWaitableTimerEx ResetEvent GetThreadTimes CreateWaitableTimerExW MultiByteToWideChar GetConsoleMode ReadConsoleW WaitForSingleObjectEx WriteConsoleW GetNumberOfConsoleInputEvents WideCharToMultiByte GetStringTypeW ReadFile CancelIo SetNamedPipeHandleState WaitNamedPipeA CreateNamedPipeA WriteFile InitializeProcThreadAttributeList PeekNamedPipe OpenFileMappingW GetModuleHandleA GetVersion LCMapStringEx UpdateProcThreadAttribute CreateFileA DeleteProcThreadAttributeList GetOverlappedResult ExitProcess CreateProcessW CreateFileMappingW VirtualQuery ConnectNamedPipe GetExitCodeProcess VirtualFree VirtualAlloc ExpandEnvironmentStringsW GetErrorMode EnterCriticalSection ReleaseSemaphore LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection CreateSemaphoreA FormatMessageW FreeLibrary LoadLibraryExW LocalFree GetConsoleOutputCP GetConsoleCP OutputDebugStringW GetSystemTimeAdjustment GetTickCount64 QueryPerformanceFrequency QueryPerformanceCounter GetVersionExW TlsSetValue HeapFree GetCurrentThreadId

vcruntime140

memchr memcmp memmove memcpy wcschr wcsrchr strchr strrchr __C_specific_handler __std_type_info_destroy_list memset

api-ms-win-crt-stdio-l1-1-0

_open_osfhandle __stdio_common_vfprintf _wfopen setvbuf __stdio_common_vswprintf fclose __stdio_common_vsprintf _setmode rewind __acrt_iob_func _commit _locking _wopen _kbhit getc ungetc _lseeki64 ftell fflush feof fgets _get_osfhandle _chsize_s fputs _isatty _fileno _lseek _dup2 ferror _close fputc fwrite _open _read _dup _write fread clearerr puts

api-ms-win-crt-environment-l1-1-0

getenv _wputenv_s _wgetcwd _wgetenv __p__wenviron _wputenv

api-ms-win-crt-locale-l1-1-0

localeconv setlocale

api-ms-win-crt-string-l1-1-0

wcscmp wcsncmp strcmp wcsnlen wcsncpy_s strncmp isalnum wcscat_s tolower toupper strcspn wcscoll isxdigit wcstok_s wcsxfrm isdigit _stricmp strncpy _wcsicmp wcscpy_s

api-ms-win-crt-runtime-l1-1-0

_cexit __fpe_flt_rounds _getpid _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _set_abort_behavior signal _exit _initterm raise abort _initialize_onexit_table _beginthreadex __sys_errlist __sys_nerr _endthreadex _wsystem exit _errno strerror _execute_onexit_table _set_thread_local_invalid_parameter_handler

api-ms-win-crt-convert-l1-1-0

mbstowcs wcstol strtoul strtol wcstombs

api-ms-win-crt-math-l1-1-0

exp2 tanh erfc sqrt cbrt cosh erf pow log10 frexp fmod floor tan atan atan2 _fdclass _dclass nextafter exp fabs acosh log1p log acos expm1 _fdopen atanh asin copysign ldexp hypot asinh modf sin round sinh cos ceil

api-ms-win-crt-time-l1-1-0

__timezone _tzset strftime clock _time64 _mktime64 __daylight _gmtime64_s _localtime64_s

api-ms-win-crt-process-l1-1-0

_wexecv _wspawnv _wexecve _cwait _wspawnve

api-ms-win-crt-heap-l1-1-0

free malloc _heapmin realloc calloc

api-ms-win-crt-conio-l1-1-0

_putwch _ungetwch _getwche _getche _getch _ungetch _putch _getwch

api-ms-win-crt-filesystem-l1-1-0

_umask _wstat64i32

PyAIter_Check PyArg_Parse PyArg_ParseTuple PyArg_ParseTupleAndKeywords PyArg_UnpackTuple PyArg_VaParse PyArg_VaParseTupleAndKeywords PyArg_ValidateKeywordArguments PyAsyncGen_New PyAsyncGen_Type PyBaseObject_Type PyBool_FromLong PyBool_Type PyBuffer_FillContiguousStrides PyBuffer_FillInfo PyBuffer_FromContiguous PyBuffer_GetPointer PyBuffer_IsContiguous PyBuffer_Release PyBuffer_SizeFromFormat PyBuffer_ToContiguous PyByteArrayIter_Type PyByteArray_AsString PyByteArray_Concat PyByteArray_FromObject PyByteArray_FromStringAndSize PyByteArray_Resize PyByteArray_Size PyByteArray_Type PyBytesIter_Type PyBytes_AsString PyBytes_AsStringAndSize PyBytes_Concat PyBytes_ConcatAndDel PyBytes_DecodeEscape PyBytes_FromFormat PyBytes_FromFormatV PyBytes_FromObject PyBytes_FromString PyBytes_FromStringAndSize PyBytes_Repr PyBytes_Size PyBytes_Type PyCFunction_Call PyCFunction_GetFlags PyCFunction_GetFunction PyCFunction_GetSelf PyCFunction_New PyCFunction_NewEx PyCFunction_Type PyCMethod_New PyCMethod_Type PyCallIter_New PyCallIter_Type PyCallable_Check PyCapsule_GetContext PyCapsule_GetDestructor PyCapsule_GetName PyCapsule_GetPointer PyCapsule_Import PyCapsule_IsValid PyCapsule_New PyCapsule_SetContext PyCapsule_SetDestructor PyCapsule_SetName PyCapsule_SetPointer PyCapsule_Type PyCell_Get PyCell_New PyCell_Set PyCell_Type PyClassMethodDescr_Type PyClassMethod_New PyClassMethod_Type PyCode_Addr2Line PyCode_Addr2Location PyCode_GetCellvars PyCode_GetCode PyCode_GetFreevars PyCode_GetVarnames PyCode_New PyCode_NewEmpty PyCode_NewWithPosOnlyArgs PyCode_Optimize PyCode_Type PyCodec_BackslashReplaceErrors PyCodec_Decode PyCodec_Decoder PyCodec_Encode PyCodec_Encoder PyCodec_IgnoreErrors PyCodec_IncrementalDecoder PyCodec_IncrementalEncoder PyCodec_KnownEncoding PyCodec_LookupError PyCodec_NameReplaceErrors PyCodec_Register PyCodec_RegisterError PyCodec_ReplaceErrors PyCodec_StreamReader PyCodec_StreamWriter PyCodec_StrictErrors PyCodec_Unregister PyCodec_XMLCharRefReplaceErrors PyCompile_OpcodeStackEffect PyCompile_OpcodeStackEffectWithJump PyComplex_AsCComplex PyComplex_FromCComplex PyComplex_FromDoubles PyComplex_ImagAsDouble PyComplex_RealAsDouble PyComplex_Type PyConfig_Clear PyConfig_InitIsolatedConfig PyConfig_InitPythonConfig PyConfig_Read PyConfig_SetArgv PyConfig_SetBytesArgv PyConfig_SetBytesString PyConfig_SetString PyConfig_SetWideStringList PyContextToken_Type PyContextVar_Get PyContextVar_New PyContextVar_Reset PyContextVar_Set PyContextVar_Type PyContext_Copy PyContext_CopyCurrent PyContext_Enter PyContext_Exit PyContext_New PyContext_Type PyCoro_New PyCoro_Type PyDescr_IsData PyDescr_NewClassMethod PyDescr_NewGetSet PyDescr_NewMember PyDescr_NewMethod PyDescr_NewWrapper PyDictItems_Type PyDictIterItem_Type PyDictIterKey_Type PyDictIterValue_Type PyDictKeys_Type PyDictProxy_New PyDictProxy_Type PyDictRevIterItem_Type PyDictRevIterKey_Type PyDictRevIterValue_Type PyDictValues_Type PyDict_Clear PyDict_Contains PyDict_Copy PyDict_DelItem PyDict_DelItemString PyDict_GetItem PyDict_GetItemString PyDict_GetItemWithError PyDict_Items PyDict_Keys PyDict_Merge PyDict_MergeFromSeq2 PyDict_New PyDict_Next PyDict_SetDefault PyDict_SetItem PyDict_SetItemString PyDict_Size PyDict_Type PyDict_Update PyDict_Values PyEllipsis_Type PyEnum_Type PyErr_BadArgument PyErr_BadInternalCall PyErr_CheckSignals PyErr_Clear PyErr_Display PyErr_ExceptionMatches PyErr_Fetch PyErr_Format PyErr_FormatV PyErr_GetExcInfo PyErr_GetHandledException PyErr_GivenExceptionMatches PyErr_NewException PyErr_NewExceptionWithDoc PyErr_NoMemory PyErr_NormalizeException PyErr_Occurred PyErr_Print PyErr_PrintEx PyErr_ProgramText PyErr_ProgramTextObject PyErr_RangedSyntaxLocationObject PyErr_ResourceWarning PyErr_Restore PyErr_SetExcFromWindowsErr PyErr_SetExcFromWindowsErrWithFilename PyErr_SetExcFromWindowsErrWithFilenameObject PyErr_SetExcFromWindowsErrWithFilenameObjects PyErr_SetExcInfo PyErr_SetFromErrno PyErr_SetFromErrnoWithFilename PyErr_SetFromErrnoWithFilenameObject PyErr_SetFromErrnoWithFilenameObjects PyErr_SetFromWindowsErr PyErr_SetFromWindowsErrWithFilename PyErr_SetHandledException PyErr_SetImportError PyErr_SetImportErrorSubclass PyErr_SetInterrupt PyErr_SetInterruptEx PyErr_SetNone PyErr_SetObject PyErr_SetString PyErr_SyntaxLocation PyErr_SyntaxLocationEx PyErr_SyntaxLocationObject PyErr_WarnEx PyErr_WarnExplicit PyErr_WarnExplicitFormat PyErr_WarnExplicitObject PyErr_WarnFormat PyErr_WriteUnraisable PyEval_AcquireLock PyEval_AcquireThread PyEval_CallFunction PyEval_CallMethod PyEval_CallObjectWithKeywords PyEval_EvalCode PyEval_EvalCodeEx PyEval_EvalFrame PyEval_EvalFrameEx PyEval_GetBuiltins PyEval_GetFrame PyEval_GetFuncDesc PyEval_GetFuncName PyEval_GetGlobals PyEval_GetLocals PyEval_InitThreads PyEval_MergeCompilerFlags PyEval_ReleaseLock PyEval_ReleaseThread PyEval_RestoreThread PyEval_SaveThread PyEval_SetProfile PyEval_SetTrace PyEval_ThreadsInitialized PyExc_ArithmeticError PyExc_AssertionError PyExc_AttributeError PyExc_BaseException PyExc_BaseExceptionGroup PyExc_BlockingIOError PyExc_BrokenPipeError PyExc_BufferError PyExc_BytesWarning PyExc_ChildProcessError PyExc_ConnectionAbortedError PyExc_ConnectionError PyExc_ConnectionRefusedError PyExc_ConnectionResetError PyExc_DeprecationWarning PyExc_EOFError PyExc_EncodingWarning PyExc_EnvironmentError PyExc_Exception PyExc_FileExistsError PyExc_FileNotFoundError PyExc_FloatingPointError PyExc_FutureWarning PyExc_GeneratorExit PyExc_IOError PyExc_ImportError PyExc_ImportWarning PyExc_IndentationError PyExc_IndexError PyExc_InterruptedError PyExc_IsADirectoryError PyExc_KeyError PyExc_KeyboardInterrupt PyExc_LookupError PyExc_MemoryError PyExc_ModuleNotFoundError PyExc_NameError PyExc_NotADirectoryError PyExc_NotImplementedError PyExc_OSError PyExc_OverflowError PyExc_PendingDeprecationWarning PyExc_PermissionError PyExc_ProcessLookupError PyExc_RecursionError PyExc_ReferenceError PyExc_ResourceWarning PyExc_RuntimeError PyExc_RuntimeWarning PyExc_StopAsyncIteration PyExc_StopIteration PyExc_SyntaxError PyExc_SyntaxWarning PyExc_SystemError PyExc_SystemExit PyExc_TabError PyExc_TimeoutError PyExc_TypeError PyExc_UnboundLocalError PyExc_UnicodeDecodeError PyExc_UnicodeEncodeError PyExc_UnicodeError PyExc_UnicodeTranslateError PyExc_UnicodeWarning PyExc_UserWarning PyExc_ValueError PyExc_Warning PyExc_WindowsError PyExc_ZeroDivisionError PyExceptionClass_Name PyException_GetCause PyException_GetContext PyException_GetTraceback PyException_SetCause PyException_SetContext PyException_SetTraceback PyFile_FromFd PyFile_GetLine PyFile_NewStdPrinter PyFile_OpenCode PyFile_OpenCodeObject PyFile_SetOpenCodeHook PyFile_WriteObject PyFile_WriteString PyFilter_Type PyFloat_AsDouble PyFloat_FromDouble PyFloat_FromString PyFloat_GetInfo PyFloat_GetMax PyFloat_GetMin PyFloat_Pack2 PyFloat_Pack4 PyFloat_Pack8 PyFloat_Type PyFloat_Unpack2 PyFloat_Unpack4 PyFloat_Unpack8 PyFrame_FastToLocals PyFrame_FastToLocalsWithError PyFrame_GetBack PyFrame_GetBuiltins PyFrame_GetCode PyFrame_GetGenerator PyFrame_GetGlobals PyFrame_GetLasti PyFrame_GetLineNumber PyFrame_GetLocals PyFrame_LocalsToFast PyFrame_New PyFrame_Type PyFrozenSet_New PyFrozenSet_Type PyFunction_GetAnnotations PyFunction_GetClosure PyFunction_GetCode PyFunction_GetDefaults PyFunction_GetGlobals PyFunction_GetKwDefaults PyFunction_GetModule PyFunction_New PyFunction_NewWithQualName PyFunction_SetAnnotations PyFunction_SetClosure PyFunction_SetDefaults PyFunction_SetKwDefaults PyFunction_Type PyGC_Collect PyGC_Disable PyGC_Enable PyGC_IsEnabled PyGILState_Check PyGILState_Ensure PyGILState_GetThisThreadState PyGILState_Release PyGen_New PyGen_NewWithQualName PyGen_Type PyGetSetDescr_Type PyHash_GetFuncDef PyImport_AddModule PyImport_AddModuleObject PyImport_AppendInittab PyImport_ExecCodeModule PyImport_ExecCodeModuleEx PyImport_ExecCodeModuleObject PyImport_ExecCodeModuleWithPathnames PyImport_ExtendInittab PyImport_FrozenModules PyImport_GetImporter PyImport_GetMagicNumber PyImport_GetMagicTag PyImport_GetModule PyImport_GetModuleDict PyImport_Import PyImport_ImportFrozenModule PyImport_ImportFrozenModuleObject PyImport_ImportModule PyImport_ImportModuleLevel PyImport_ImportModuleLevelObject PyImport_ImportModuleNoBlock PyImport_Inittab PyImport_ReloadModule PyIndex_Check PyInstanceMethod_Function PyInstanceMethod_New PyInstanceMethod_Type PyInterpreterState_Clear PyInterpreterState_Delete PyInterpreterState_Get PyInterpreterState_GetDict PyInterpreterState_GetID PyInterpreterState_Head PyInterpreterState_Main PyInterpreterState_New PyInterpreterState_Next PyInterpreterState_ThreadHead PyIter_Check PyIter_Next PyIter_Send PyListIter_Type PyListRevIter_Type PyList_Append PyList_AsTuple PyList_GetItem PyList_GetSlice PyList_Insert PyList_New PyList_Reverse PyList_SetItem PyList_SetSlice PyList_Size PyList_Sort PyList_Type PyLongRangeIter_Type PyLong_AsDouble PyLong_AsLong PyLong_AsLongAndOverflow PyLong_AsLongLong PyLong_AsLongLongAndOverflow PyLong_AsSize_t PyLong_AsSsize_t PyLong_AsUnsignedLong PyLong_AsUnsignedLongLong PyLong_AsUnsignedLongLongMask PyLong_AsUnsignedLongMask PyLong_AsVoidPtr PyLong_FromDouble PyLong_FromLong PyLong_FromLongLong PyLong_FromSize_t PyLong_FromSsize_t PyLong_FromString PyLong_FromUnicodeObject PyLong_FromUnsignedLong PyLong_FromUnsignedLongLong PyLong_FromVoidPtr PyLong_GetInfo PyLong_Type PyMap_Type PyMapping_Check PyMapping_GetItemString PyMapping_HasKey PyMapping_HasKeyString PyMapping_Items PyMapping_Keys PyMapping_Length PyMapping_SetItemString PyMapping_Size PyMapping_Values PyMarshal_ReadLastObjectFromFile PyMarshal_ReadLongFromFile PyMarshal_ReadObjectFromFile PyMarshal_ReadObjectFromString PyMarshal_ReadShortFromFile PyMarshal_WriteLongToFile PyMarshal_WriteObjectToFile PyMarshal_WriteObjectToString PyMem_Calloc PyMem_Free PyMem_GetAllocator PyMem_Malloc PyMem_RawCalloc PyMem_RawFree PyMem_RawMalloc PyMem_RawRealloc PyMem_Realloc PyMem_SetAllocator PyMem_SetupDebugHooks PyMemberDescr_Type PyMember_GetOne PyMember_SetOne PyMemoryView_FromBuffer PyMemoryView_FromMemory PyMemoryView_FromObject PyMemoryView_GetContiguous PyMemoryView_Type PyMethodDescr_Type PyMethod_Function PyMethod_New PyMethod_Self PyMethod_Type PyModuleDef_Init PyModuleDef_Type PyModule_AddFunctions PyModule_AddIntConstant PyModule_AddObject PyModule_AddObjectRef PyModule_AddStringConstant PyModule_AddType PyModule_Create2 PyModule_ExecDef PyModule_FromDefAndSpec2 PyModule_GetDef PyModule_GetDict PyModule_GetFilename PyModule_GetFilenameObject PyModule_GetName PyModule_GetNameObject PyModule_GetState PyModule_New PyModule_NewObject PyModule_SetDocString PyModule_Type PyNumber_Absolute PyNumber_Add PyNumber_And PyNumber_AsSsize_t PyNumber_Check PyNumber_Divmod PyNumber_Float PyNumber_FloorDivide PyNumber_InPlaceAdd PyNumber_InPlaceAnd PyNumber_InPlaceFloorDivide PyNumber_InPlaceLshift PyNumber_InPlaceMatrixMultiply PyNumber_InPlaceMultiply PyNumber_InPlaceOr PyNumber_InPlacePower PyNumber_InPlaceRemainder PyNumber_InPlaceRshift PyNumber_InPlaceSubtract PyNumber_InPlaceTrueDivide PyNumber_InPlaceXor PyNumber_Index PyNumber_Invert PyNumber_Long PyNumber_Lshift PyNumber_MatrixMultiply PyNumber_Multiply PyNumber_Negative PyNumber_Or PyNumber_Positive PyNumber_Power PyNumber_Remainder PyNumber_Rshift PyNumber_Subtract PyNumber_ToBase PyNumber_TrueDivide PyNumber_Xor PyODictItems_Type PyODictIter_Type PyODictKeys_Type PyODictValues_Type PyODict_DelItem PyODict_New PyODict_SetItem PyODict_Type PyOS_AfterFork PyOS_FSPath PyOS_InputHook PyOS_InterruptOccurred PyOS_Readline PyOS_ReadlineFunctionPointer PyOS_double_to_string PyOS_getsig PyOS_mystricmp PyOS_mystrnicmp PyOS_setsig PyOS_snprintf PyOS_string_to_double PyOS_strtol PyOS_strtoul PyOS_vsnprintf PyObject_ASCII PyObject_AsCharBuffer PyObject_AsFileDescriptor PyObject_AsReadBuffer PyObject_AsWriteBuffer PyObject_Bytes PyObject_Call PyObject_CallFinalizer PyObject_CallFinalizerFromDealloc PyObject_CallFunction PyObject_CallFunctionObjArgs PyObject_CallMethod PyObject_CallMethodObjArgs PyObject_CallNoArgs PyObject_CallObject PyObject_CallOneArg PyObject_Calloc PyObject_CheckBuffer PyObject_CheckReadBuffer PyObject_ClearWeakRefs PyObject_CopyData PyObject_DelItem PyObject_DelItemString PyObject_Dir PyObject_Format PyObject_Free PyObject_GC_Del PyObject_GC_IsFinalized PyObject_GC_IsTracked PyObject_GC_Track PyObject_GC_UnTrack PyObject_GET_WEAKREFS_LISTPTR PyObject_GenericGetAttr PyObject_GenericGetDict PyObject_GenericSetAttr PyObject_GenericSetDict PyObject_GetAIter PyObject_GetArenaAllocator PyObject_GetAttr PyObject_GetAttrString PyObject_GetBuffer PyObject_GetItem PyObject_GetIter PyObject_HasAttr PyObject_HasAttrString PyObject_Hash PyObject_HashNotImplemented PyObject_IS_GC PyObject_Init PyObject_InitVar PyObject_IsInstance PyObject_IsSubclass PyObject_IsTrue PyObject_Length PyObject_LengthHint PyObject_Malloc PyObject_Not PyObject_Print PyObject_Realloc PyObject_Repr PyObject_RichCompare PyObject_RichCompareBool PyObject_SelfIter PyObject_SetArenaAllocator PyObject_SetAttr PyObject_SetAttrString PyObject_SetItem PyObject_Size PyObject_Str PyObject_Type PyObject_Vectorcall PyObject_VectorcallDict PyObject_VectorcallMethod PyPickleBuffer_FromObject PyPickleBuffer_GetBuffer PyPickleBuffer_Release PyPickleBuffer_Type PyPreConfig_InitIsolatedConfig PyPreConfig_InitPythonConfig PyProperty_Type PyRangeIter_Type PyRange_Type PyReversed_Type PyRun_AnyFile PyRun_AnyFileEx PyRun_AnyFileExFlags PyRun_AnyFileFlags PyRun_File PyRun_FileEx PyRun_FileExFlags PyRun_FileFlags PyRun_InteractiveLoop PyRun_InteractiveLoopFlags PyRun_InteractiveOne PyRun_InteractiveOneFlags PyRun_InteractiveOneObject PyRun_SimpleFile PyRun_SimpleFileEx PyRun_SimpleFileExFlags PyRun_SimpleString PyRun_SimpleStringFlags PyRun_String PyRun_StringFlags PySeqIter_New PySeqIter_Type PySequence_Check PySequence_Concat PySequence_Contains PySequence_Count PySequence_DelItem PySequence_DelSlice PySequence_Fast PySequence_GetItem PySequence_GetSlice PySequence_In PySequence_InPlaceConcat PySequence_InPlaceRepeat PySequence_Index PySequence_Length PySequence_List PySequence_Repeat PySequence_SetItem PySequence_SetSlice PySequence_Size PySequence_Tuple PySetIter_Type PySet_Add PySet_Clear PySet_Contains PySet_Discard PySet_New PySet_Pop PySet_Size PySet_Type PySlice_AdjustIndices PySlice_GetIndices PySlice_GetIndicesEx PySlice_New PySlice_Type PySlice_Unpack PyState_AddModule PyState_FindModule PyState_RemoveModule PyStaticMethod_New PyStaticMethod_Type PyStatus_Error PyStatus_Exception PyStatus_Exit PyStatus_IsError PyStatus_IsExit PyStatus_NoMemory PyStatus_Ok PyStdPrinter_Type PyStructSequence_GetItem PyStructSequence_InitType PyStructSequence_InitType2 PyStructSequence_New PyStructSequence_NewType PyStructSequence_SetItem PyStructSequence_UnnamedField PySuper_Type PySymtable_Lookup PySys_AddAuditHook PySys_AddWarnOption PySys_AddWarnOptionUnicode PySys_AddXOption PySys_Audit PySys_FormatStderr PySys_FormatStdout PySys_GetObject PySys_GetXOptions PySys_HasWarnOptions PySys_ResetWarnOptions PySys_SetArgv PySys_SetArgvEx PySys_SetObject PySys_SetPath PySys_WriteStderr PySys_WriteStdout PyThreadState_Clear PyThreadState_Delete PyThreadState_DeleteCurrent PyThreadState_EnterTracing PyThreadState_Get PyThreadState_GetDict PyThreadState_GetFrame PyThreadState_GetID PyThreadState_GetInterpreter PyThreadState_LeaveTracing PyThreadState_New PyThreadState_Next PyThreadState_SetAsyncExc PyThreadState_Swap PyThread_GetInfo PyThread_ReInitTLS PyThread_acquire_lock PyThread_acquire_lock_timed PyThread_allocate_lock PyThread_create_key PyThread_delete_key PyThread_delete_key_value PyThread_exit_thread PyThread_free_lock PyThread_get_key_value PyThread_get_stacksize PyThread_get_thread_ident PyThread_get_thread_native_id PyThread_init_thread PyThread_release_lock PyThread_set_key_value PyThread_set_stacksize PyThread_start_new_thread PyThread_tss_alloc PyThread_tss_create PyThread_tss_delete PyThread_tss_free PyThread_tss_get PyThread_tss_is_created PyThread_tss_set PyToken_OneChar PyToken_ThreeChars PyToken_TwoChars PyTraceBack_Here PyTraceBack_Print PyTraceBack_Type PyTraceMalloc_Track PyTraceMalloc_Untrack PyTupleIter_Type PyTuple_GetItem PyTuple_GetSlice PyTuple_New PyTuple_Pack PyTuple_SetItem PyTuple_Size PyTuple_Type PyType_ClearCache PyType_FromModuleAndSpec PyType_FromSpec PyType_FromSpecWithBases PyType_GenericAlloc PyType_GenericNew PyType_GetFlags PyType_GetModule PyType_GetModuleByDef PyType_GetModuleState PyType_GetName PyType_GetQualName PyType_GetSlot PyType_IsSubtype PyType_Modified PyType_Ready PyType_SUPPORTS_WEAKREFS PyType_Type PyUnicodeDecodeError_Create PyUnicodeDecodeError_GetEncoding PyUnicodeDecodeError_GetEnd PyUnicodeDecodeError_GetObject PyUnicodeDecodeError_GetReason PyUnicodeDecodeError_GetStart PyUnicodeDecodeError_SetEnd PyUnicodeDecodeError_SetReason PyUnicodeDecodeError_SetStart PyUnicodeEncodeError_GetEncoding PyUnicodeEncodeError_GetEnd PyUnicodeEncodeError_GetObject PyUnicodeEncodeError_GetReason PyUnicodeEncodeError_GetStart PyUnicodeEncodeError_SetEnd PyUnicodeEncodeError_SetReason PyUnicodeEncodeError_SetStart PyUnicodeIter_Type PyUnicodeTranslateError_GetEnd PyUnicodeTranslateError_GetObject PyUnicodeTranslateError_GetReason PyUnicodeTranslateError_GetStart PyUnicodeTranslateError_SetEnd PyUnicodeTranslateError_SetReason PyUnicodeTranslateError_SetStart PyUnicode_Append PyUnicode_AppendAndDel PyUnicode_AsASCIIString PyUnicode_AsCharmapString PyUnicode_AsDecodedObject PyUnicode_AsDecodedUnicode PyUnicode_AsEncodedObject PyUnicode_AsEncodedString PyUnicode_AsEncodedUnicode PyUnicode_AsLatin1String PyUnicode_AsMBCSString PyUnicode_AsRawUnicodeEscapeString PyUnicode_AsUCS4 PyUnicode_AsUCS4Copy PyUnicode_AsUTF16String PyUnicode_AsUTF32String PyUnicode_AsUTF8 PyUnicode_AsUTF8AndSize PyUnicode_AsUTF8String PyUnicode_AsUnicode PyUnicode_AsUnicodeAndSize PyUnicode_AsUnicodeEscapeString PyUnicode_AsWideChar PyUnicode_AsWideCharString PyUnicode_BuildEncodingMap PyUnicode_Compare PyUnicode_CompareWithASCIIString PyUnicode_Concat PyUnicode_Contains PyUnicode_CopyCharacters PyUnicode_Count PyUnicode_Decode PyUnicode_DecodeASCII PyUnicode_DecodeCharmap PyUnicode_DecodeCodePageStateful PyUnicode_DecodeFSDefault PyUnicode_DecodeFSDefaultAndSize PyUnicode_DecodeLatin1 PyUnicode_DecodeLocale PyUnicode_DecodeLocaleAndSize PyUnicode_DecodeMBCS PyUnicode_DecodeMBCSStateful PyUnicode_DecodeRawUnicodeEscape PyUnicode_DecodeUTF16 PyUnicode_DecodeUTF16Stateful PyUnicode_DecodeUTF32 PyUnicode_DecodeUTF32Stateful PyUnicode_DecodeUTF7 PyUnicode_DecodeUTF7Stateful PyUnicode_DecodeUTF8 PyUnicode_DecodeUTF8Stateful PyUnicode_DecodeUnicodeEscape PyUnicode_EncodeCodePage PyUnicode_EncodeFSDefault PyUnicode_EncodeLocale PyUnicode_FSConverter PyUnicode_FSDecoder PyUnicode_Fill PyUnicode_Find PyUnicode_FindChar PyUnicode_Format PyUnicode_FromEncodedObject PyUnicode_FromFormat PyUnicode_FromFormatV PyUnicode_FromKindAndData PyUnicode_FromObject PyUnicode_FromOrdinal PyUnicode_FromString PyUnicode_FromStringAndSize PyUnicode_FromUnicode PyUnicode_FromWideChar PyUnicode_GetDefaultEncoding PyUnicode_GetLength PyUnicode_GetSize PyUnicode_InternFromString PyUnicode_InternImmortal PyUnicode_InternInPlace PyUnicode_IsIdentifier PyUnicode_Join PyUnicode_New PyUnicode_Partition PyUnicode_RPartition PyUnicode_RSplit PyUnicode_ReadChar PyUnicode_Replace PyUnicode_Resize PyUnicode_RichCompare PyUnicode_Split PyUnicode_Splitlines PyUnicode_Substring PyUnicode_Tailmatch PyUnicode_Translate PyUnicode_Type PyUnicode_WriteChar PyVectorcall_Call PyVectorcall_Function PyWeakref_GetObject PyWeakref_NewProxy PyWeakref_NewRef PyWideStringList_Append PyWideStringList_Insert PyWrapperDescr_Type PyWrapper_New PyZip_Type Py_AddPendingCall Py_AtExit Py_BuildValue Py_BytesMain Py_BytesWarningFlag Py_CompileString Py_CompileStringExFlags Py_CompileStringFlags Py_CompileStringObject Py_DebugFlag Py_DecRef Py_DecodeLocale Py_DontWriteBytecodeFlag Py_EncodeLocale Py_EndInterpreter Py_EnterRecursiveCall Py_Exit Py_ExitStatusException Py_FatalError Py_FdIsInteractive Py_FileSystemDefaultEncodeErrors Py_FileSystemDefaultEncoding Py_Finalize Py_FinalizeEx Py_FrozenFlag Py_GETENV Py_GenericAlias Py_GenericAliasType Py_GetArgcArgv Py_GetBuildInfo Py_GetCompiler Py_GetCopyright Py_GetExecPrefix Py_GetPath Py_GetPlatform Py_GetPrefix Py_GetProgramFullPath Py_GetProgramName Py_GetPythonHome Py_GetRecursionLimit Py_GetVersion Py_HasFileSystemDefaultEncoding Py_HashRandomizationFlag Py_IgnoreEnvironmentFlag Py_IncRef Py_Initialize Py_InitializeEx Py_InitializeFromConfig Py_InspectFlag Py_InteractiveFlag Py_Is Py_IsFalse Py_IsInitialized Py_IsNone Py_IsTrue Py_IsolatedFlag Py_LeaveRecursiveCall Py_LegacyWindowsFSEncodingFlag Py_LegacyWindowsStdioFlag Py_Main Py_MakePendingCalls Py_NewInterpreter Py_NewRef Py_NoSiteFlag Py_NoUserSiteDirectory Py_OptimizeFlag Py_PreInitialize Py_PreInitializeFromArgs Py_PreInitializeFromBytesArgs Py_QuietFlag Py_ReprEnter Py_ReprLeave Py_RunMain Py_SetPath Py_SetProgramName Py_SetPythonHome Py_SetRecursionLimit Py_SetStandardStreamEncoding Py_UTF8Mode Py_UnbufferedStdioFlag Py_UniversalNewlineFgets Py_VaBuildValue Py_VerboseFlag Py_Version Py_XNewRef Py_hexdigits _PyAST_Compile _PyAccu_Accumulate _PyAccu_Destroy _PyAccu_Finish _PyAccu_FinishAsList _PyAccu_Init _PyArena_AddPyObject _PyArena_Free _PyArena_Malloc _PyArena_New _PyArg_BadArgument _PyArg_CheckPositional _PyArg_NoKeywords _PyArg_NoKwnames _PyArg_NoPositional _PyArg_ParseStack _PyArg_ParseStackAndKeywords _PyArg_ParseStackAndKeywords_SizeT _PyArg_ParseStack_SizeT _PyArg_ParseTupleAndKeywordsFast _PyArg_ParseTupleAndKeywordsFast_SizeT _PyArg_ParseTupleAndKeywords_SizeT _PyArg_ParseTuple_SizeT _PyArg_Parse_SizeT _PyArg_UnpackKeywords _PyArg_UnpackKeywordsWithVararg _PyArg_UnpackStack _PyArg_VaParseTupleAndKeywordsFast _PyArg_VaParseTupleAndKeywordsFast_SizeT _PyArg_VaParseTupleAndKeywords_SizeT _PyArg_VaParse_SizeT _PyArgv_AsWstrList _PyAsyncGenASend_Type _PyAsyncGenAThrow_Type _PyAsyncGenWrappedValue_Type _PyByteArray_empty_string _PyBytesIOBuffer_Type _PyBytesWriter_Alloc _PyBytesWriter_Dealloc _PyBytesWriter_Finish _PyBytesWriter_Init _PyBytesWriter_Prepare _PyBytesWriter_Resize _PyBytesWriter_WriteBytes _PyBytes_DecodeEscape _PyBytes_Find _PyBytes_FormatEx _PyBytes_FromHex _PyBytes_Join _PyBytes_Repeat _PyBytes_Resize _PyBytes_ReverseFind _PyCode_CheckLineNumber _PyCode_ConstantKey _PyCode_GetExtra _PyCode_New _PyCode_SetExtra _PyCode_Validate _PyCodecInfo_GetIncrementalDecoder _PyCodecInfo_GetIncrementalEncoder _PyCodec_DecodeText _PyCodec_EncodeText _PyCodec_Lookup _PyCodec_LookupTextEncoding _PyConfig_AsDict _PyConfig_FromDict _PyConfig_InitCompatConfig _PyContext_NewHamtForTests _PyCoroWrapper_Type _PyCrossInterpreterData_Lookup _PyCrossInterpreterData_NewObject _PyCrossInterpreterData_RegisterClass _PyCrossInterpreterData_Release _PyDeadline_Get _PyDeadline_Init _PyDebugAllocatorStats _PyDictView_Intersect _PyDictView_New _PyDict_CheckConsistency _PyDict_ContainsId _PyDict_Contains_KnownHash _PyDict_DebugMallocStats _PyDict_DelItemId _PyDict_DelItemIf _PyDict_DelItem_KnownHash _PyDict_GetItemIdWithError _PyDict_GetItemStringWithError _PyDict_GetItemWithError _PyDict_GetItem_KnownHash _PyDict_HasOnlyStringKeys _PyDict_MaybeUntrack _PyDict_MergeEx _PyDict_NewPresized _PyDict_Next _PyDict_Pop _PyDict_SetItemId _PyDict_SetItem_KnownHash _PyDict_SizeOf _PyErr_BadInternalCall _PyErr_ChainExceptions _PyErr_ChainStackItem _PyErr_CheckSignals _PyErr_CheckSignalsTstate _PyErr_Clear _PyErr_Display _PyErr_ExceptionMatches _PyErr_Fetch _PyErr_Format _PyErr_FormatFromCause _PyErr_FormatFromCauseTstate _PyErr_GetExcInfo _PyErr_GetHandledException _PyErr_GetTopmostException _PyErr_NoMemory _PyErr_NormalizeException _PyErr_Print _PyErr_ProgramDecodedTextObject _PyErr_Restore _PyErr_SetHandledException _PyErr_SetKeyError _PyErr_SetNone _PyErr_SetObject _PyErr_SetString _PyErr_StackItemToExcInfoTuple _PyErr_TrySetFromCause _PyErr_WriteUnraisableMsg _PyEval_AddPendingCall _PyEval_EvalFrameDefault _PyEval_GetBuiltin _PyEval_GetBuiltinId _PyEval_GetSwitchInterval _PyEval_RequestCodeExtraIndex _PyEval_SetProfile _PyEval_SetSwitchInterval _PyEval_SetTrace _PyEval_SignalAsyncExc _PyEval_SignalReceived _PyEval_SliceIndex _PyEval_SliceIndexNotNone _PyFloat_DebugMallocStats _PyFloat_FormatAdvancedWriter _PyFrame_IsEntryFrame _PyFunction_Vectorcall _PyGILState_GetInterpreterStateUnsafe _PyGen_FetchStopIterationValue _PyGen_Finalize _PyGen_SetStopIterationValue _PyImport_AcquireLock _PyImport_FixupBuiltin _PyImport_FixupExtensionObject _PyImport_FrozenBootstrap _PyImport_FrozenStdlib _PyImport_FrozenTest _PyImport_GetModuleAttr _PyImport_GetModuleAttrString _PyImport_GetModuleId _PyImport_IsInitialized _PyImport_ReleaseLock _PyImport_SetModule _PyImport_SetModuleString _PyInterpreterID_LookUp _PyInterpreterID_New _PyInterpreterID_Type _PyInterpreterState_Enable _PyInterpreterState_GetConfig _PyInterpreterState_GetConfigCopy _PyInterpreterState_GetEvalFrameFunc _PyInterpreterState_GetIDObject _PyInterpreterState_GetMainModule _PyInterpreterState_IDDecref _PyInterpreterState_IDIncref _PyInterpreterState_IDInitref _PyInterpreterState_LookUpID _PyInterpreterState_RequireIDRef _PyInterpreterState_RequiresIDRef _PyInterpreterState_SetConfig _PyInterpreterState_SetEvalFrameFunc _PyList_DebugMallocStats _PyList_Extend _PyLong_AsByteArray _PyLong_AsInt _PyLong_AsTime_t _PyLong_Copy _PyLong_DigitValue _PyLong_DivmodNear _PyLong_FileDescriptor_Converter _PyLong_Format _PyLong_FormatAdvancedWriter _PyLong_FormatBytesWriter _PyLong_FormatWriter _PyLong_Frexp _PyLong_FromByteArray _PyLong_FromBytes _PyLong_FromTime_t _PyLong_GCD _PyLong_Lshift _PyLong_New _PyLong_NumBits _PyLong_Rshift _PyLong_Sign _PyLong_Size_t_Converter _PyLong_UnsignedInt_Converter _PyLong_UnsignedLongLong_Converter _PyLong_UnsignedLong_Converter _PyLong_UnsignedShort_Converter _PyManagedBuffer_Type _PyMem_GetAllocatorName _PyMem_GetCurrentAllocatorName _PyMem_RawStrdup _PyMem_RawWcsdup _PyMem_SetDefaultAllocator _PyMem_SetupAllocators _PyMem_Strdup _PyMethodWrapper_Type _PyModuleSpec_IsInitializing _PyModule_Add _PyModule_Clear _PyModule_ClearDict _PyModule_CreateInitialized _PyNamespace_New _PyNamespace_Type _PyNone_Type _PyNotImplemented_Type _PyNumber_Index _PyOS_InterruptOccurred _PyOS_IsMainThread _PyOS_ReadlineTState _PyOS_SigintEvent _PyOS_URandom _PyOS_URandomNonblock _PyObject_AssertFailed _PyObject_Call _PyObject_CallFunction_SizeT _PyObject_CallMethod _PyObject_CallMethodId _PyObject_CallMethodIdObjArgs _PyObject_CallMethodId_SizeT _PyObject_CallMethod_SizeT _PyObject_Call_Prepend _PyObject_CheckConsistency _PyObject_CheckCrossInterpreterData _PyObject_DebugMallocStats _PyObject_DebugTypeStats _PyObject_Dump _PyObject_FastCall _PyObject_FastCallDictTstate _PyObject_FunctionStr _PyObject_GC_New _PyObject_GC_NewVar _PyObject_GC_Resize _PyObject_GenericGetAttrWithDict _PyObject_GenericSetAttrWithDict _PyObject_GetAttrId _PyObject_GetCrossInterpreterData _PyObject_GetDictPtr _PyObject_GetMethod _PyObject_GetState _PyObject_HasLen _PyObject_IsAbstract _PyObject_IsFreed _PyObject_LookupAttr _PyObject_LookupAttrId _PyObject_LookupSpecial _PyObject_LookupSpecialId _PyObject_MakeTpCall _PyObject_New _PyObject_NewVar _PyObject_NextNotImplemented _PyObject_RealIsInstance _PyObject_RealIsSubclass _PyObject_SetAttrId _PyParser_TokenNames _PyPathConfig_ClearGlobal _PyPreConfig_InitCompatConfig _PyRun_AnyFileObject _PyRun_InteractiveLoopObject _PyRun_SimpleFileObject _PyRuntime _PyRuntimeState_Fini _PyRuntimeState_Init _PyRuntime_Finalize _PyRuntime_Initialize _PySequence_BytesToCharpArray _PySequence_IterSearch _PySet_Dummy _PySet_NextEntry _PySet_Update _PySlice_FromIndices _PySlice_GetLongIndices _PyStack_AsDict _PyState_AddModule _PyStructSequence_InitType _PyStructSequence_NewType _PySys_GetAttr _PySys_GetSizeOf _PyThreadState_DeleteCurrent _PyThreadState_DeleteExcept _PyThreadState_GetDict _PyThreadState_Init _PyThreadState_Prealloc _PyThreadState_SetCurrent _PyThreadState_Swap _PyThreadState_UncheckedGet _PyThread_CurrentExceptions _PyThread_CurrentFrames _PyTime_Add _PyTime_As100Nanoseconds _PyTime_AsMicroseconds _PyTime_AsMilliseconds _PyTime_AsNanoseconds _PyTime_AsNanosecondsObject _PyTime_AsSecondsDouble _PyTime_AsTimeval _PyTime_AsTimevalTime_t _PyTime_AsTimeval_clamp _PyTime_FromMillisecondsObject _PyTime_FromNanoseconds _PyTime_FromNanosecondsObject _PyTime_FromSeconds _PyTime_FromSecondsObject _PyTime_GetMonotonicClock _PyTime_GetMonotonicClockWithInfo _PyTime_GetPerfCounter _PyTime_GetPerfCounterWithInfo _PyTime_GetSystemClock _PyTime_GetSystemClockWithInfo _PyTime_MulDiv _PyTime_ObjectToTime_t _PyTime_ObjectToTimespec _PyTime_ObjectToTimeval _PyTime_gmtime _PyTime_localtime _PyTraceBack_FromFrame _PyTraceBack_Print_Indented _PyTraceMalloc_GetTraceback _PyTraceback_Add _PyTrash_begin _PyTrash_cond _PyTrash_end _PyTuple_DebugMallocStats _PyTuple_MaybeUntrack _PyTuple_Resize _PyType_CalculateMetaclass _PyType_CheckConsistency _PyType_GetDocFromInternalDoc _PyType_GetTextSignatureFromInternalDoc _PyType_Lookup _PyType_LookupId _PyType_Name _PyUnicodeTranslateError_Create _PyUnicodeWriter_Dealloc _PyUnicodeWriter_Finish _PyUnicodeWriter_Init _PyUnicodeWriter_PrepareInternal _PyUnicodeWriter_PrepareKindInternal _PyUnicodeWriter_WriteASCIIString _PyUnicodeWriter_WriteChar _PyUnicodeWriter_WriteLatin1String _PyUnicodeWriter_WriteStr _PyUnicodeWriter_WriteSubstring _PyUnicode_AsASCIIString _PyUnicode_AsLatin1String _PyUnicode_AsUTF8String _PyUnicode_AsUnicode _PyUnicode_CheckConsistency _PyUnicode_Copy _PyUnicode_DecodeRawUnicodeEscapeStateful _PyUnicode_DecodeUnicodeEscapeInternal _PyUnicode_DecodeUnicodeEscapeStateful _PyUnicode_EQ _PyUnicode_EncodeCharmap _PyUnicode_EncodeUTF16 _PyUnicode_EncodeUTF32 _PyUnicode_EncodeUTF7 _PyUnicode_Equal _PyUnicode_EqualToASCIIId _PyUnicode_EqualToASCIIString _PyUnicode_FastCopyCharacters _PyUnicode_FastFill _PyUnicode_FindMaxChar _PyUnicode_FormatAdvancedWriter _PyUnicode_FormatLong _PyUnicode_FromASCII _PyUnicode_FromId _PyUnicode_InsertThousandsGrouping _PyUnicode_IsAlpha _PyUnicode_IsCaseIgnorable _PyUnicode_IsCased _PyUnicode_IsDecimalDigit _PyUnicode_IsDigit _PyUnicode_IsLinebreak _PyUnicode_IsLowercase _PyUnicode_IsNumeric _PyUnicode_IsPrintable _PyUnicode_IsTitlecase _PyUnicode_IsUppercase _PyUnicode_IsWhitespace _PyUnicode_IsXidContinue _PyUnicode_IsXidStart _PyUnicode_JoinArray _PyUnicode_Ready _PyUnicode_ScanIdentifier _PyUnicode_ToDecimalDigit _PyUnicode_ToDigit _PyUnicode_ToFoldedFull _PyUnicode_ToLowerFull _PyUnicode_ToLowercase _PyUnicode_ToNumeric _PyUnicode_ToTitleFull _PyUnicode_ToTitlecase _PyUnicode_ToUpperFull _PyUnicode_ToUppercase _PyUnicode_TransformDecimalAndSpaceToASCII _PyUnicode_WideCharString_Converter _PyUnicode_WideCharString_Opt_Converter _PyUnicode_XStrip _PyWarnings_Init _PyWeakref_CallableProxyType _PyWeakref_ClearRef _PyWeakref_GetWeakrefCount _PyWeakref_ProxyType _PyWeakref_RefType _PyWideStringList_AsList _PyWideStringList_Clear _PyWideStringList_Copy _PyWideStringList_Extend _PyWindowsConsoleIO_Type _Py_BreakPoint _Py_BuildValue_SizeT _Py_CheckFunctionResult _Py_CheckRecursiveCall _Py_ClearArgcArgv _Py_ClearStandardStreamEncoding _Py_CoerceLegacyLocale _Py_Dealloc _Py_DecRef _Py_DecodeLocaleEx _Py_DecodeUTF8Ex _Py_DecodeUTF8_surrogateescape _Py_DisplaySourceLine _Py_DumpASCII _Py_DumpDecimal _Py_DumpExtensionModules _Py_DumpHexadecimal _Py_DumpTraceback _Py_DumpTracebackThreads _Py_EllipsisObject _Py_EncodeLocaleEx _Py_EncodeLocaleRaw _Py_EncodeUTF8Ex _Py_FalseStruct _Py_FatalErrorFormat _Py_FatalErrorFunc _Py_FatalError_TstateNULL _Py_FatalRefcountErrorFunc _Py_FdIsInteractive _Py_FreeCharPArray _Py_GetAllocatedBlocks _Py_GetConfig _Py_GetConfigsAsDict _Py_GetEnv _Py_GetErrorHandler _Py_GetForceASCII _Py_GetLocaleEncoding _Py_GetLocaleEncodingObject _Py_GetLocaleconvNumeric _Py_Get_Getpath_CodeObject _Py_HandleSystemExit _Py_HasFileSystemDefaultEncodeErrors _Py_HashBytes _Py_HashDouble _Py_HashPointer _Py_HashPointerRaw _Py_HashSecret _Py_IncRef _Py_InitializeMain _Py_IsCoreInitialized _Py_IsFinalizing _Py_IsLocaleCoercionTarget _Py_LegacyLocaleDetected _Py_NewInterpreter _Py_NewReference _Py_NoneStruct _Py_NotImplementedStruct _Py_PackageContext _Py_PreInitializeFromConfig _Py_PreInitializeFromPyArgv _Py_ResetForceASCII _Py_RestoreSignals _Py_SetLocaleFromEnv _Py_SetProgramFullPath _Py_SourceAsString _Py_SwappedOp _Py_TrueStruct _Py_UTF8_Edit_Cost _Py_UnhandledKeyboardInterrupt _Py_UniversalNewlineFgetsWithSize _Py_VaBuildStack _Py_VaBuildStack_SizeT _Py_VaBuildValue_SizeT _Py_WriteIndent _Py_WriteIndentedMargin _Py_add_one_to_index_C _Py_add_one_to_index_F _Py_ascii_whitespace _Py_c_abs _Py_c_diff _Py_c_neg _Py_c_pow _Py_c_prod _Py_c_quot _Py_c_sum _Py_closerange _Py_convert_optional_to_ssize_t _Py_ctype_table _Py_ctype_tolower _Py_ctype_toupper _Py_device_encoding _Py_dg_dtoa _Py_dg_freedtoa _Py_dg_infinity _Py_dg_stdnan _Py_dg_strtod _Py_dup _Py_fopen_obj _Py_fstat _Py_fstat_noraise _Py_get_env_flag _Py_get_inheritable _Py_get_osfhandle _Py_get_osfhandle_noraise _Py_get_xoption _Py_gitidentifier _Py_gitversion _Py_hashtable_clear _Py_hashtable_compare_direct _Py_hashtable_destroy _Py_hashtable_foreach _Py_hashtable_get _Py_hashtable_hash_ptr _Py_hashtable_new _Py_hashtable_new_full _Py_hashtable_set _Py_hashtable_size _Py_hashtable_steal _Py_normpath _Py_open _Py_open_noraise _Py_open_osfhandle _Py_open_osfhandle_noraise _Py_parse_inf_or_nan _Py_read _Py_set_inheritable _Py_set_inheritable_async_safe _Py_stat _Py_str_to_int _Py_strhex _Py_strhex_bytes _Py_strhex_bytes_with_sep _Py_strhex_with_sep _Py_string_to_number_with_underscores _Py_tracemalloc_config _Py_wfopen _Py_wgetcwd _Py_write _Py_write_noraise

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.0MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

140KB

Virtual Size

139KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

PyRuntim

Size

163KB

Virtual Size

162KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

81KB

Virtual Size

80KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/pythoncom311.dll

IMPHASH 1b264cd576a6b6117b47db03980bc455
SHA256 0fe49ec1143a0efe168809c9d48fe3e857e2ac39b19db3fd8718c56a4056696b
MD5 f98264f2dacfc8e299391ed1180ab493
SHA1 849551b6d9142bf983e816fef4c05e639d2c1018
SHA512 6bb3dbd9f4d3e6b7bd294f3cb8b2ef4c29b9eff85c0cfd5e2d2465be909014a7b2ecd3dc06265b1b58196892bb04d3e6b0aa4b2ccbf3a716e0ff950eb28db11c
SSDEEP 12288:mjN+cC8C0nALOrc5qcse64RV7n04pd+1xeo:AN+cnCqrcEbefFno
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

363156

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\pywin32\build\temp.win-amd64-cpython-311\Release\pythoncom.pdb

oleaut32

VariantCopyInd SafeArrayGetElement SafeArrayPutElement SysStringLen SafeArrayCreate VariantChangeType LHashValOfNameSys UnRegisterTypeLi LoadRegTypeLi LoadTypeLi RegisterTypeLi QueryPathOfRegTypeLi RegisterActiveObject CreateTypeLi CreateTypeLib2 GetActiveObject RevokeActiveObject SafeArrayGetDim GetRecordInfoFromTypeInfo SafeArrayGetUBound SafeArrayGetLBound GetRecordInfoFromGuids SafeArrayGetRecordInfo SafeArrayUnaccessData SafeArrayAccessData VariantInit SysAllocString VariantClear SetErrorInfo CreateErrorInfo SysFreeString GetErrorInfo SafeArrayDestroy

ole32

CoInitialize RevokeDragDrop GetRunningObjectTable CoGetObject CoEnableCallCancellation ProgIDFromCLSID MkParseDisplayName CoRevokeClassObject OleFlushClipboard CreateItemMoniker CreateFileMoniker CoFreeUnusedLibraries CreatePointerMoniker CoGetInterfaceAndReleaseStream OleGetClipboard OleLoadFromStream CoMarshalInterThreadInterfaceInStream CoUnmarshalInterface RegisterDragDrop CoResumeClassObjects OleInitialize CoDisableCallCancellation CoReleaseMarshalData CoUninitialize OleIsCurrentClipboard CoRegisterClassObject OleSetClipboard StringFromGUID2 DoDragDrop CoMarshalInterface CoTaskMemFree OleLoad CoTreatAsClass CoCreateFreeThreadedMarshaler CoCreateInstance CreateBindCtx CoCreateGuid CoTaskMemAlloc GetClassFile OleSaveToStream StgOpenStorageOnILockBytes StgCreateDocfile StgOpenStorage ReadClassStg CreateStreamOnHGlobal WriteClassStm CreateILockBytesOnHGlobal WriteClassStg CoGetCallContext StgCreateDocfileOnILockBytes PropVariantClear StgIsStorageFile ReadClassStm ReleaseStgMedium

user32

TranslateMessage PeekMessageW DispatchMessageW PostThreadMessageW GetMessageW wsprintfW

python311

PyExc_NotImplementedError PyErr_WarnEx _Py_FalseStruct PyExc_PendingDeprecationWarning PyLong_AsUnsignedLongMask PyModule_Create2 PyErr_Format PyErr_NewException _Py_TrueStruct Py_FrozenFlag PyBytes_FromString PyMapping_HasKey PyDict_SetItem PyLong_FromVoidPtr PyRun_SimpleFileExFlags PySys_SetObject Py_Initialize Py_IsInitialized PyList_Append PySys_SetArgv PyUnicode_FromFormat PyObject_GenericSetAttr PyExc_IndexError _PyArg_Parse_SizeT PySequence_Tuple PyLong_FromUnsignedLong _PyBytes_Resize PyFloat_AsDouble PyLong_AsUnsignedLongLong PyFloat_FromDouble PyFloat_Type PyType_IsSubtype PyObject_IsTrue PyLong_AsUnsignedLong PyMem_Malloc PyLong_FromSsize_t PyObject_SetAttrString PyLong_FromUnsignedLongLong PyLong_FromLongLong PyExc_OverflowError PyMemoryView_Type PyLong_AsDouble _PyLong_Sign PyObject_HasAttrString PyObject_Str PyByteArray_Type PyNumber_Float _PyLong_NumBits PyEval_CallObjectWithKeywords PyCapsule_IsValid PyCapsule_GetPointer PyCapsule_New PyLong_Type PyBytes_FromStringAndSize PyDict_GetItemString PyErr_NoMemory PyObject_RichCompareBool PyList_New PyModule_GetDict PyUnicode_Concat PyUnicode_FromString _Py_NotImplementedStruct PyType_Ready PyUnicode_AsUTF8 PyErr_ExceptionMatches PyBool_FromLong PyObject_Size PyNumber_Check PyTuple_SetItem PySequence_Check PyTuple_Size PyTuple_GetItem PyLong_FromDouble _Py_VaBuildValue_SizeT PyExc_AttributeError PyLong_AsVoidPtr PyDict_GetItem PyMem_Free PyObject_IsInstance PyUnicode_AsWideCharString _PyArg_ParseTupleAndKeywords_SizeT PyExc_ValueError PyLong_AsLongLong _PyObject_CallFunction_SizeT PyType_Type PySeqIter_New PyObject_IsSubclass _Py_NewReference PyExc_StopIteration PyTuple_New PyErr_SetNone PyObject_GenericGetAttr PySequence_GetItem PySequence_Size PyEval_RestoreThread PyObject_Call PyErr_Print PyExc_TypeError PyNumber_Long PyGILState_Ensure PyFile_WriteObject PyDict_New PyErr_Clear _PyObject_CallMethod_SizeT PyObject_GetAttrString PyLong_AsLong PyErr_Fetch _PyArg_ParseTuple_SizeT PyErr_SetString PyDict_SetItemString _Py_NoneStruct PyGILState_Release PySys_GetObject PyExc_MemoryError PyLong_FromLong PyExc_RuntimeError PyEval_SaveThread PyErr_Occurred PyErr_NormalizeException PyImport_ImportModule _Py_BuildValue_SizeT PyErr_GivenExceptionMatches PyErr_SetObject PyObject_Repr _Py_Dealloc PyLong_AsSsize_t PyErr_Restore

pywintypes311

?PyWinObject_AsDATE@@YAHPEAU_object@@PEAN@Z ?PyBuffer_New@@YAPEAU_object@@_J@Z ??0PyWinBufferView@@QEAA@XZ ?init@PyWinBufferView@@QEAA_NPEAU_object@@_N1@Z ?PyWinObject_AsLARGE_INTEGER@@YAHPEAU_object@@PEAT_LARGE_INTEGER@@@Z ?PyWinObject_FromDATE@@YAPEAU_object@@N@Z ?PyWinObject_FreeWCHARArray@@YAXPEAPEA_WK@Z ?PyWinObject_AsWCHARArray@@YAHPEAU_object@@PEAPEAPEA_WPEAKH@Z ?PyWinObject_FromLARGE_INTEGER@@YAPEAU_object@@AEBT_LARGE_INTEGER@@@Z ?PyWinObject_AsDWORDArray@@YAHPEAU_object@@PEAPEAKPEAKH@Z ?PyWinLong_FromHANDLE@@YAPEAU_object@@PEAX@Z ?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPEA_W@Z ?PyWinObject_AsTaskAllocatedWCHAR@@YAHPEAU_object@@PEAPEA_WH@Z ?PyWin_ReleaseGlobalLock@@YAXXZ ?PyWin_AcquireGlobalLock@@YAXXZ ?PyWinCoreString_FromString@@YAPEAU_object@@PEBD_J@Z ?PyWinLong_AsVoidPtr@@YAHPEAU_object@@PEAPEAX@Z ?FreeAbsoluteSD@@YAXPEAX@Z ?PyWin_SetAPIError@@YAPEAU_object@@PEADJ@Z ?PyWinSequence_Tuple@@YAPEAU_object@@PEAU1@PEAK@Z ?_MakeAbsoluteSD@@YAHPEAXPEAPEAX@Z ?PyWinGlobals_Ensure@@YAHXZ ?PyWinMethod_NewIID@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewTime@@YAPEAU_object@@PEAU1@0@Z ?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPEAU_object@@PEAPEAXH@Z ?PyWinObject_AsHANDLE@@YAHPEAU_object@@PEAPEAX@Z ?PyWinObject_FromIID@@YAPEAU_object@@AEBU_GUID@@@Z ??1PyWinBufferView@@QEAA@XZ ?ok@PyWinBufferView@@QEAA_NXZ ?ptr@PyWinBufferView@@QEAAPEAXXZ ?len@PyWinBufferView@@QEAAKXZ ?PyWinObject_FreeWCHAR@@YAXPEA_W@Z ?PyWinObject_AsWCHAR@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ??BPyWin_AutoFreeBstr@@QEAAPEA_WXZ ?PyWinObject_FreeBstr@@YAXPEA_W@Z ??0PyWin_AutoFreeBstr@@QEAA@PEA_W@Z ??1PyWin_AutoFreeBstr@@QEAA@XZ ?SetBstr@PyWin_AutoFreeBstr@@QEAAXPEA_W@Z ?PyWinCoreString_FromString@@YAPEAU_object@@PEB_W_J@Z ?PyWinObject_FromULARGE_INTEGER@@YAPEAU_object@@AEBT_ULARGE_INTEGER@@@Z ?PyWinTime_Check@@YAHPEAU_object@@@Z ?PyWinObject_AsULARGE_INTEGER@@YAHPEAU_object@@PEAT_ULARGE_INTEGER@@@Z ?PyWinObject_AsFILETIME@@YAHPEAU_object@@PEAU_FILETIME@@@Z ?PyWinObject_AsIID@@YAHPEAU_object@@PEAU_GUID@@@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W_J@Z ?PyWinObject_FromFILETIME@@YAPEAU_object@@AEBU_FILETIME@@@Z ?PyWinObject_FromBstr@@YAPEAU_object@@QEA_WH@Z ?PyWinExc_COMError@@3PEAU_object@@EA ?GetPythonTraceback@@YAPEA_WPEAU_object@@00@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W@Z ?PyWin_GetErrorMessageModule@@YAPEAUHINSTANCE__@@K@Z ?PyWinObject_AsBstr@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ??0PyWinBufferView@@QEAA@PEAU_object@@_N1@Z

kernel32

FormatMessageW InitializeSListHead GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext VirtualAlloc VirtualFree VirtualProtect GlobalUnlock GlobalLock GlobalAlloc GlobalSize DisableThreadLibraryCalls GetCurrentThreadId LoadLibraryW GetModuleHandleW GetProcAddress OutputDebugStringW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception __C_specific_handler __current_exception_context __std_terminate __std_exception_copy __std_exception_destroy memcpy _CxxThrowException memset __std_type_info_destroy_list _purecall

api-ms-win-crt-stdio-l1-1-0

fopen __stdio_common_vswprintf __acrt_iob_func __stdio_common_vsprintf fclose __stdio_common_vfprintf __stdio_common_vfwprintf

api-ms-win-crt-string-l1-1-0

wcsncpy strcmp

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-runtime-l1-1-0

_initterm _crt_at_quick_exit _initterm_e terminate __p___wargv _configure_narrow_argv _seh_filter_dll _cexit _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit

??0CPyFactory@@QEAA@AEBU_GUID@@@Z ??0CPyFactory@@QEAA@AEBV0@@Z ??0PyComEnumProviderTypeObject@@QEAA@PEBDPEAVPyComTypeObject@@_JPEAUPyMethodDef@@P6APEAVPyIUnknown@@PEAUIUnknown@@@Z0@Z ??0PyComEnumTypeObject@@QEAA@PEBDPEAVPyComTypeObject@@_JPEAUPyMethodDef@@P6APEAVPyIUnknown@@PEAUIUnknown@@@Z@Z ??0PyComTypeObject@@QEAA@PEBDPEAV0@_JPEAUPyMethodDef@@P6APEAVPyIUnknown@@PEAUIUnknown@@@Z@Z ??0PyGOleWindow@@IEAA@PEAU_object@@@Z ??0PyGOleWindow@@QEAA@$$QEAV0@@Z ??0PyGOleWindow@@QEAA@AEBV0@@Z ??0PyGPersist@@IEAA@PEAU_object@@@Z ??0PyGPersist@@QEAA@$$QEAV0@@Z ??0PyGPersist@@QEAA@AEBV0@@Z ??0PyGatewayBase@@IEAA@PEAU_object@@@Z ??0PyGatewayBase@@QEAA@AEBV0@@Z ??0PyIBase@@IEAA@XZ ??0PyIBase@@QEAA@AEBV0@@Z ??0PyIBindCtx@@IEAA@PEAUIUnknown@@@Z ??0PyIBindCtx@@QEAA@AEBV0@@Z ??0PyIClassFactory@@IEAA@PEAUIUnknown@@@Z ??0PyIClassFactory@@QEAA@AEBV0@@Z ??0PyIConnectionPoint@@IEAA@PEAUIUnknown@@@Z ??0PyIConnectionPoint@@QEAA@AEBV0@@Z ??0PyIConnectionPointContainer@@IEAA@PEAUIUnknown@@@Z ??0PyIConnectionPointContainer@@QEAA@AEBV0@@Z ??0PyIDispatch@@IEAA@PEAUIUnknown@@@Z ??0PyIDispatch@@QEAA@AEBV0@@Z ??0PyIDispatchEx@@IEAA@PEAUIUnknown@@@Z ??0PyIDispatchEx@@QEAA@AEBV0@@Z ??0PyIEnumMoniker@@IEAA@PEAUIUnknown@@@Z ??0PyIEnumMoniker@@QEAA@AEBV0@@Z ??0PyIEnumVARIANT@@IEAA@PEAUIUnknown@@@Z ??0PyIEnumVARIANT@@QEAA@AEBV0@@Z ??0PyIMoniker@@IEAA@PEAUIUnknown@@@Z ??0PyIMoniker@@QEAA@AEBV0@@Z ??0PyIOleWindow@@IEAA@PEAUIUnknown@@@Z ??0PyIOleWindow@@QEAA@AEBV0@@Z ??0PyIPersist@@IEAA@PEAUIUnknown@@@Z ??0PyIPersist@@QEAA@AEBV0@@Z ??0PyIPersistStream@@IEAA@PEAUIUnknown@@@Z ??0PyIPersistStream@@QEAA@AEBV0@@Z ??0PyIPersistStreamInit@@IEAA@PEAUIUnknown@@@Z ??0PyIPersistStreamInit@@QEAA@AEBV0@@Z ??0PyIProvideClassInfo2@@IEAA@PEAUIUnknown@@@Z ??0PyIProvideClassInfo2@@QEAA@AEBV0@@Z ??0PyIProvideClassInfo@@IEAA@PEAUIUnknown@@@Z ??0PyIProvideClassInfo@@QEAA@AEBV0@@Z ??0PyIServiceProvider@@IEAA@PEAUIUnknown@@@Z ??0PyIServiceProvider@@QEAA@AEBV0@@Z ??0PyIStream@@IEAA@PEAUIUnknown@@@Z ??0PyIStream@@QEAA@AEBV0@@Z ??0PyITypeComp@@IEAA@PEAUIUnknown@@@Z ??0PyITypeComp@@QEAA@AEBV0@@Z ??0PyITypeInfo@@IEAA@PEAUIUnknown@@@Z ??0PyITypeInfo@@QEAA@AEBV0@@Z ??0PyITypeLib@@IEAA@PEAUIUnknown@@@Z ??0PyITypeLib@@QEAA@AEBV0@@Z ??0PyIUnknown@@IEAA@PEAUIUnknown@@@Z ??0PyIUnknown@@QEAA@AEBV0@@Z ??0PyOleArgNotFound@@QEAA@XZ ??0PyOleEmpty@@QEAA@XZ ??0PyOleMissing@@QEAA@XZ ??0PyOleNothing@@QEAA@XZ ??0PySTGMEDIUM@@QEAA@PEAUtagSTGMEDIUM@@@Z ??0PythonOleArgHelper@@QEAA@XZ ??1CPyFactory@@QEAA@XZ ??1PyComEnumProviderTypeObject@@QEAA@XZ ??1PyComEnumTypeObject@@QEAA@XZ ??1PyComTypeObject@@QEAA@XZ ??1PyGOleWindow@@UEAA@XZ ??1PyGPersist@@UEAA@XZ ??1PyGatewayBase@@MEAA@XZ ??1PyIBase@@MEAA@XZ ??1PyIBindCtx@@MEAA@XZ ??1PyIClassFactory@@MEAA@XZ ??1PyIConnectionPoint@@MEAA@XZ ??1PyIConnectionPointContainer@@MEAA@XZ ??1PyIDispatch@@MEAA@XZ ??1PyIDispatchEx@@MEAA@XZ ??1PyIEnumMoniker@@MEAA@XZ ??1PyIEnumVARIANT@@MEAA@XZ ??1PyIMoniker@@MEAA@XZ ??1PyIOleWindow@@MEAA@XZ ??1PyIPersist@@MEAA@XZ ??1PyIPersistStream@@MEAA@XZ ??1PyIPersistStreamInit@@MEAA@XZ ??1PyIProvideClassInfo2@@MEAA@XZ ??1PyIProvideClassInfo@@MEAA@XZ ??1PyIServiceProvider@@MEAA@XZ ??1PyIStream@@MEAA@XZ ??1PyITypeComp@@MEAA@XZ ??1PyITypeInfo@@MEAA@XZ ??1PyITypeLib@@MEAA@XZ ??1PyIUnknown@@MEAA@XZ ??1PySTGMEDIUM@@QEAA@XZ ??1PythonOleArgHelper@@QEAA@XZ ??4CPyFactory@@QEAAAEAV0@AEBV0@@Z ??4PyComEnumProviderTypeObject@@QEAAAEAV0@$$QEAV0@@Z ??4PyComEnumProviderTypeObject@@QEAAAEAV0@AEBV0@@Z ??4PyComEnumTypeObject@@QEAAAEAV0@$$QEAV0@@Z ??4PyComEnumTypeObject@@QEAAAEAV0@AEBV0@@Z ??4PyComTypeObject@@QEAAAEAV0@AEBV0@@Z ??4PyGOleWindow@@QEAAAEAV0@$$QEAV0@@Z ??4PyGOleWindow@@QEAAAEAV0@AEBV0@@Z ??4PyGPersist@@QEAAAEAV0@$$QEAV0@@Z ??4PyGPersist@@QEAAAEAV0@AEBV0@@Z ??4PyGatewayBase@@QEAAAEAV0@AEBV0@@Z ??4PyIBase@@QEAAAEAV0@AEBV0@@Z ??4PyIBindCtx@@QEAAAEAV0@AEBV0@@Z ??4PyIClassFactory@@QEAAAEAV0@AEBV0@@Z ??4PyIConnectionPoint@@QEAAAEAV0@AEBV0@@Z ??4PyIConnectionPointContainer@@QEAAAEAV0@AEBV0@@Z ??4PyIDispatch@@QEAAAEAV0@AEBV0@@Z ??4PyIDispatchEx@@QEAAAEAV0@AEBV0@@Z ??4PyIEnumMoniker@@QEAAAEAV0@AEBV0@@Z ??4PyIEnumVARIANT@@QEAAAEAV0@AEBV0@@Z ??4PyIMoniker@@QEAAAEAV0@AEBV0@@Z ??4PyIOleWindow@@QEAAAEAV0@AEBV0@@Z ??4PyIPersist@@QEAAAEAV0@AEBV0@@Z ??4PyIPersistStream@@QEAAAEAV0@AEBV0@@Z ??4PyIPersistStreamInit@@QEAAAEAV0@AEBV0@@Z ??4PyIProvideClassInfo2@@QEAAAEAV0@AEBV0@@Z ??4PyIProvideClassInfo@@QEAAAEAV0@AEBV0@@Z ??4PyIServiceProvider@@QEAAAEAV0@AEBV0@@Z ??4PyIStream@@QEAAAEAV0@AEBV0@@Z ??4PyITypeComp@@QEAAAEAV0@AEBV0@@Z ??4PyITypeInfo@@QEAAAEAV0@AEBV0@@Z ??4PyITypeLib@@QEAAAEAV0@AEBV0@@Z ??4PyIUnknown@@QEAAAEAV0@AEBV0@@Z ??4PyOleArgNotFound@@QEAAAEAV0@$$QEAV0@@Z ??4PyOleArgNotFound@@QEAAAEAV0@AEBV0@@Z ??4PyOleEmpty@@QEAAAEAV0@$$QEAV0@@Z ??4PyOleEmpty@@QEAAAEAV0@AEBV0@@Z ??4PyOleMissing@@QEAAAEAV0@$$QEAV0@@Z ??4PyOleMissing@@QEAAAEAV0@AEBV0@@Z ??4PyOleNothing@@QEAAAEAV0@$$QEAV0@@Z ??4PyOleNothing@@QEAAAEAV0@AEBV0@@Z ??4PySTGMEDIUM@@QEAAAEAV0@AEBV0@@Z ??4PythonOleArgHelper@@QEAAAEAV0@AEBV0@@Z ??_7CPyFactory@@6B@ ??_7PyGOleWindow@@6B@ ??_7PyGOleWindow@@6BIDispatchEx@@@ ??_7PyGOleWindow@@6BIInternalUnwrapPythonObject@@@ ??_7PyGOleWindow@@6BISupportErrorInfo@@@ ??_7PyGPersist@@6B@ ??_7PyGPersist@@6BIDispatchEx@@@ ??_7PyGPersist@@6BIInternalUnwrapPythonObject@@@ ??_7PyGPersist@@6BISupportErrorInfo@@@ ??_7PyGatewayBase@@6BIDispatchEx@@@ ??_7PyGatewayBase@@6BIInternalUnwrapPythonObject@@@ ??_7PyGatewayBase@@6BISupportErrorInfo@@@ ??_7PyIBase@@6B@ ??_7PyIBindCtx@@6B@ ??_7PyIClassFactory@@6B@ ??_7PyIConnectionPoint@@6B@ ??_7PyIConnectionPointContainer@@6B@ ??_7PyIDispatch@@6B@ ??_7PyIDispatchEx@@6B@ ??_7PyIEnumMoniker@@6B@ ??_7PyIEnumVARIANT@@6B@ ??_7PyIMoniker@@6B@ ??_7PyIOleWindow@@6B@ ??_7PyIPersist@@6B@ ??_7PyIPersistStream@@6B@ ??_7PyIPersistStreamInit@@6B@ ??_7PyIProvideClassInfo2@@6B@ ??_7PyIProvideClassInfo@@6B@ ??_7PyIServiceProvider@@6B@ ??_7PyIStream@@6B@ ??_7PyITypeComp@@6B@ ??_7PyITypeInfo@@6B@ ??_7PyITypeLib@@6B@ ??_7PyIUnknown@@6B@ ??_FPySTGMEDIUM@@QEAAXXZ ?AddRef@CPyFactory@@UEAAKXZ ?AddRef@PyGOleWindow@@MEAAKXZ ?AddRef@PyGPersist@@MEAAKXZ ?AddRef@PyGatewayBase@@UEAAKXZ ?Advise@PyIConnectionPoint@@SAPEAU_object@@PEAU2@0@Z ?Bind@PyITypeComp@@QEAAPEAU_object@@PEA_WG@Z ?BindToObject@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?BindToStorage@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?BindType@PyITypeComp@@QEAAPEAU_object@@PEA_W@Z ?Clone@PyIEnumMoniker@@SAPEAU_object@@PEAU2@0@Z ?Clone@PyIEnumVARIANT@@SAPEAU_object@@PEAU2@0@Z ?Clone@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?Close@PySTGMEDIUM@@QEAAXXZ ?Commit@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?ComposeWith@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?ContextSensitiveHelp@PyGOleWindow@@MEAAJH@Z ?ContextSensitiveHelp@PyIOleWindow@@SAPEAU_object@@PEAU2@0@Z ?CopyTo@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?CopyTo@PySTGMEDIUM@@QEAAHPEAUtagSTGMEDIUM@@@Z ?CreateInstance@CPyFactory@@UEAAJPEAUIUnknown@@AEBU_GUID@@PEAPEAX@Z ?CreateInstance@PyIClassFactory@@SAPEAU_object@@PEAU2@0@Z ?CreateNewPythonInstance@CPyFactory@@IEAAJAEBU_GUID@@0PEAPEAU_object@@@Z ?DeleteMemberByDispID@PyGatewayBase@@UEAAJJ@Z ?DeleteMemberByDispID@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?DeleteMemberByName@PyGatewayBase@@UEAAJPEA_WK@Z ?DeleteMemberByName@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?DropOwnership@PySTGMEDIUM@@QEAAXXZ ?Enum@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?EnumConnectionPoints@PyIConnectionPointContainer@@SAPEAU_object@@PEAU2@0@Z ?EnumConnections@PyIConnectionPoint@@SAPEAU_object@@PEAU2@0@Z ?EnumObjectParam@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?FindConnectionPoint@PyIConnectionPointContainer@@SAPEAU_object@@PEAU2@0@Z ?GetBindOptions@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?GetClassID@PyGPersist@@MEAAJPEAU_GUID@@@Z ?GetClassID@PyIPersist@@SAPEAU_object@@PEAU2@0@Z ?GetClassInfoW@PyIProvideClassInfo@@SAPEAU_object@@PEAU2@0@Z ?GetConnectionInterface@PyIConnectionPoint@@SAPEAU_object@@PEAU2@0@Z ?GetConnectionPointContainer@PyIConnectionPoint@@SAPEAU_object@@PEAU2@0@Z ?GetContainingTypeLib@PyITypeInfo@@QEAAPEAU_object@@XZ ?GetDispID@PyGatewayBase@@UEAAJPEA_WKPEAJ@Z ?GetDispID@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?GetDisplayName@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?GetDocumentation@PyITypeInfo@@QEAAPEAU_object@@J@Z ?GetDocumentation@PyITypeLib@@QEAAPEAU_object@@H@Z ?GetFuncDesc@PyITypeInfo@@QEAAPEAU_object@@H@Z ?GetGUID@PyIProvideClassInfo2@@SAPEAU_object@@PEAU2@0@Z ?GetI@PyIBindCtx@@SAPEAUIBindCtx@@PEAU_object@@@Z ?GetI@PyIClassFactory@@SAPEAUIClassFactory@@PEAU_object@@@Z ?GetI@PyIConnectionPoint@@SAPEAUIConnectionPoint@@PEAU_object@@@Z ?GetI@PyIConnectionPointContainer@@SAPEAUIConnectionPointContainer@@PEAU_object@@@Z ?GetI@PyIDispatch@@SAPEAUIDispatch@@PEAU_object@@@Z ?GetI@PyIDispatchEx@@SAPEAUIDispatchEx@@PEAU_object@@@Z ?GetI@PyIEnumMoniker@@SAPEAUIEnumMoniker@@PEAU_object@@@Z ?GetI@PyIEnumVARIANT@@SAPEAUIEnumVARIANT@@PEAU_object@@@Z ?GetI@PyIMoniker@@SAPEAUIMoniker@@PEAU_object@@@Z ?GetI@PyIOleWindow@@SAPEAUIOleWindow@@PEAU_object@@@Z ?GetI@PyIPersist@@SAPEAUIPersist@@PEAU_object@@@Z ?GetI@PyIPersistStream@@SAPEAUIPersistStream@@PEAU_object@@@Z ?GetI@PyIPersistStreamInit@@SAPEAUIPersistStreamInit@@PEAU_object@@@Z ?GetI@PyIProvideClassInfo2@@SAPEAUIProvideClassInfo2@@PEAU_object@@@Z ?GetI@PyIProvideClassInfo@@SAPEAUIProvideClassInfo@@PEAU_object@@@Z ?GetI@PyIServiceProvider@@SAPEAUIServiceProvider@@PEAU_object@@@Z ?GetI@PyIStream@@SAPEAUIStream@@PEAU_object@@@Z ?GetI@PyITypeComp@@SAPEAUITypeComp@@PEAU_object@@@Z ?GetI@PyITypeInfo@@SAPEAUITypeInfo@@PEAU_object@@@Z ?GetI@PyITypeLib@@SAPEAUITypeLib@@PEAU_object@@@Z ?GetI@PyIUnknown@@SAPEAUIUnknown@@PEAU_object@@@Z ?GetIDsOfNames@PyGatewayBase@@UEAAJAEBU_GUID@@PEAPEA_WIKPEAJ@Z ?GetIDsOfNames@PyIDispatch@@SAPEAU_object@@PEAU2@0@Z ?GetIID@PyGOleWindow@@MEAA?AU_GUID@@XZ ?GetIID@PyGPersist@@MEAA?AU_GUID@@XZ ?GetIID@PyGatewayBase@@UEAA?AU_GUID@@XZ ?GetImplTypeFlags@PyITypeInfo@@QEAAPEAU_object@@H@Z ?GetLibAttr@PyITypeLib@@QEAAPEAU_object@@XZ ?GetMemberName@PyGatewayBase@@UEAAJJPEAPEA_W@Z ?GetMemberName@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?GetMemberProperties@PyGatewayBase@@UEAAJJKPEAK@Z ?GetMemberProperties@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?GetNameSpaceParent@PyGatewayBase@@UEAAJPEAPEAUIUnknown@@@Z ?GetNames@PyITypeInfo@@QEAAPEAU_object@@J@Z ?GetNextDispID@PyGatewayBase@@UEAAJKJPEAJ@Z ?GetNextDispID@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?GetObjectParam@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?GetRefTypeInfo@PyITypeInfo@@QEAAPEAU_object@@K@Z ?GetRefTypeOfImplType@PyITypeInfo@@QEAAPEAU_object@@H@Z ?GetRunningObjectTable@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?GetSizeMax@PyIPersistStream@@SAPEAU_object@@PEAU2@0@Z ?GetTypeAttr@PyITypeInfo@@QEAAPEAU_object@@XZ ?GetTypeComp@PyITypeInfo@@QEAAPEAU_object@@XZ ?GetTypeComp@PyITypeLib@@QEAAPEAU_object@@XZ ?GetTypeInfo@PyGatewayBase@@UEAAJIKPEAPEAUITypeInfo@@@Z ?GetTypeInfo@PyIDispatch@@SAPEAU_object@@PEAU2@0@Z ?GetTypeInfo@PyITypeLib@@QEAAPEAU_object@@H@Z ?GetTypeInfoCount@PyGatewayBase@@UEAAJPEAI@Z ?GetTypeInfoCount@PyIDispatch@@SAPEAU_object@@PEAU2@0@Z ?GetTypeInfoCount@PyITypeLib@@QEAAPEAU_object@@XZ ?GetTypeInfoOfGuid@PyITypeLib@@QEAAPEAU_object@@AEBU_GUID@@@Z ?GetTypeInfoType@PyITypeLib@@QEAAPEAU_object@@H@Z ?GetVarDesc@PyITypeInfo@@QEAAPEAU_object@@H@Z ?GetWindow@PyGOleWindow@@MEAAJPEAPEAUHWND__@@@Z ?GetWindow@PyIOleWindow@@SAPEAU_object@@PEAU2@0@Z ?Hash@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?InitNew@PyIPersistStreamInit@@SAPEAU_object@@PEAU2@0@Z ?InterfaceSupportsErrorInfo@PyGatewayBase@@UEAAJAEBU_GUID@@@Z ?Invoke@PyGatewayBase@@UEAAJJAEBU_GUID@@KGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAI@Z ?Invoke@PyIDispatch@@SAPEAU_object@@PEAU2@0@Z ?InvokeEx@PyGatewayBase@@UEAAJJKGPEAUtagDISPPARAMS@@PEAUtagVARIANT@@PEAUtagEXCEPINFO@@PEAUIServiceProvider@@@Z ?InvokeEx@PyIDispatchEx@@SAPEAU_object@@PEAU2@0@Z ?InvokeTypes@PyIDispatch@@SAPEAU_object@@PEAU2@0@Z ?InvokeViaPolicy@PyGatewayBase@@MEAAJPEBDPEAPEAU_object@@0ZZ ?IsDirty@PyIPersistStream@@SAPEAU_object@@PEAU2@0@Z ?IsEqual@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?IsSystemMoniker@PyIMoniker@@SAPEAU_object@@PEAU2@0@Z ?Load@PyIPersistStream@@SAPEAU_object@@PEAU2@0@Z ?LockRegion@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?LockServer@CPyFactory@@UEAAJH@Z ?LockServer@PyIClassFactory@@SAPEAU_object@@PEAU2@0@Z ?MakeBstrToObj@@YAPEAU_object@@QEA_W@Z ?MakeOLECHARToObj@@YAPEAU_object@@PEB_W@Z ?MakeOLECHARToObj@@YAPEAU_object@@PEB_WH@Z ?MakeObjToVariant@PythonOleArgHelper@@QEAAHPEAU_object@@PEAUtagVARIANT@@0@Z ?MakePythonArgumentTuples@@YAHPEAPEAU_object@@PEAPEAVPythonOleArgHelper@@01PEAUtagDISPPARAMS@@@Z ?MakeVariantToObj@PythonOleArgHelper@@QEAAPEAU_object@@PEAUtagVARIANT@@@Z ?Next@PyIEnumMoniker@@SAPEAU_object@@PEAU2@0@Z ?Next@PyIEnumVARIANT@@SAPEAU_object@@PEAU2@0@Z ?ParseTypeInformation@PythonOleArgHelper@@QEAAHPEAU_object@@@Z ?PyCom_BstrFromPyObject@@YAHPEAU_object@@PEAPEA_WH@Z ?PyCom_BuildInternalPyException@@YAPEAU_object@@PEAD@Z ?PyCom_BuildPyException@@YAPEAU_object@@JPEAUIUnknown@@AEBU_GUID@@@Z ?PyCom_BuildPyExceptionFromEXCEPINFO@@YAPEAU_object@@JPEAUtagEXCEPINFO@@I@Z ?PyCom_CheckIEnumNextResult@@YAJJAEBU_GUID@@@Z ?PyCom_DLLAddRef@@YAXXZ ?PyCom_DLLReleaseRef@@YAXXZ ?PyCom_EnableQuitMessage@@YAXK@Z ?PyCom_ExcepInfoFromPyException@@YAXPEAUtagEXCEPINFO@@@Z ?PyCom_ExcepInfoFromPyObject@@YAHPEAU_object@@PEAUtagEXCEPINFO@@PEAJ@Z ?PyCom_HandleIEnumNoSequence@@YAJAEBU_GUID@@@Z ?PyCom_InterfaceFromPyInstanceOrObject@@YAHPEAU_object@@AEBU_GUID@@PEAPEAXH@Z ?PyCom_IsGatewayRegistered@@YAHAEBU_GUID@@@Z ?PyCom_LogF@@YAXPEB_WZZ ?PyCom_LoggerException@@YAXPEAU_object@@PEB_WZZ ?PyCom_LoggerNonServerException@@YAXPEAU_object@@PEB_WZZ ?PyCom_LoggerWarning@@YAXPEAU_object@@PEB_WZZ ?PyCom_PyObjectAsSTATPROPSETSTG@@YAHPEAU_object@@PEAUtagSTATPROPSETSTG@@@Z ?PyCom_PyObjectAsSTATSTG@@YAHPEAU_object@@PEAUtagSTATSTG@@K@Z ?PyCom_PyObjectAsSTGOPTIONS@@YAHPEAU_object@@PEAPEAUtagSTGOPTIONS@@PEAVTmpWCHAR@@@Z ?PyCom_PyObjectFromExcepInfo@@YAPEAU_object@@PEBUtagEXCEPINFO@@@Z ?PyCom_PyObjectFromSAFEARRAY@@YAPEAU_object@@PEAUtagSAFEARRAY@@W4VARENUM@@@Z ?PyCom_PyObjectFromSTATPROPSETSTG@@YAPEAU_object@@PEAUtagSTATPROPSETSTG@@@Z ?PyCom_PyObjectFromSTATSTG@@YAPEAU_object@@PEAUtagSTATSTG@@@Z ?PyCom_RegisterClientType@@YAHPEAU_typeobject@@PEBU_GUID@@@Z ?PyCom_RegisterExtensionSupport@@YAHPEAU_object@@PEBUPyCom_InterfaceSupportInfo@@H@Z ?PyCom_RegisterGatewayObject@@YAJAEBU_GUID@@P6AJPEAU_object@@PEAVPyGatewayBase@@PEAPEAX0@ZPEBD@Z ?PyCom_SAFEARRAYFromPyObject@@YAHPEAU_object@@PEAPEAUtagSAFEARRAY@@W4VARENUM@@@Z ?PyCom_SetAndLogCOMErrorFromPyException@@YAJPEBDAEBU_GUID@@@Z ?PyCom_SetAndLogCOMErrorFromPyExceptionEx@@YAJPEAU_object@@PEBDAEBU_GUID@@@Z ?PyCom_SetCOMErrorFromPyException@@YAJAEBU_GUID@@@Z ?PyCom_SetCOMErrorFromSimple@@YAJJAEBU_GUID@@PEB_W@Z ?PyGatewayConstruct@PyGOleWindow@@SAJPEAU_object@@PEAVPyGatewayBase@@PEAPEAXAEBU_GUID@@@Z ?PyGatewayConstruct@PyGPersist@@SAJPEAU_object@@PEAVPyGatewayBase@@PEAPEAXAEBU_GUID@@@Z ?PyGatewayConstruct@PyGatewayBase@@SAJPEAU_object@@PEAV1@PEAPEAXAEBU_GUID@@@Z ?PyObConstruct@PyIBindCtx@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIClassFactory@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIConnectionPoint@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIConnectionPointContainer@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIDispatch@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIDispatchEx@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIEnumMoniker@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIEnumVARIANT@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIMoniker@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIOleWindow@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIPersist@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIPersistStream@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIPersistStreamInit@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIProvideClassInfo2@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIProvideClassInfo@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIServiceProvider@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIStream@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyITypeComp@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyITypeInfo@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyITypeLib@@SAPEAVPyIUnknown@@PEAUIUnknown@@@Z ?PyObConstruct@PyIUnknown@@SAPEAV1@PEAUIUnknown@@@Z ?PyObject_AsCurrency@@YAHPEAU_object@@PEATtagCY@@@Z ?PyObject_AsOLEMENUGROUPWIDTHS@@YAHPEAU_object@@PEAUtagOleMenuGroupWidths@@@Z ?PyObject_AsPROPVARIANT@@YAHPEAU_object@@PEAUtagPROPVARIANT@@@Z ?PyObject_FromCurrency@@YAPEAU_object@@AEATtagCY@@@Z ?PyObject_FromOLEMENUGROUPWIDTHS@@YAPEAU_object@@PEBUtagOleMenuGroupWidths@@@Z ?PyObject_FromPROPVARIANT@@YAPEAU_object@@PEAUtagPROPVARIANT@@@Z ?PyObject_FromPROPVARIANTs@@YAPEAU_object@@PEAUtagPROPVARIANT@@K@Z ?PyObject_FromSTGMEDIUM@@YAPEAVPySTGMEDIUM@@PEAUtagSTGMEDIUM@@@Z ?PyOleArgNotFoundType@@3U_typeobject@@A ?PyOleEmptyType@@3U_typeobject@@A ?PyOleMissingType@@3U_typeobject@@A ?PyOleNothingType@@3U_typeobject@@A ?QueryInterface@CPyFactory@@UEAAJAEBU_GUID@@PEAPEAX@Z ?QueryInterface@PyGOleWindow@@MEAAJAEBU_GUID@@PEAPEAX@Z ?QueryInterface@PyGPersist@@MEAAJAEBU_GUID@@PEAPEAX@Z ?QueryInterface@PyGatewayBase@@UEAAJAEBU_GUID@@PEAPEAX@Z ?QueryInterface@PyIUnknown@@SAPEAU_object@@PEAU2@0@Z ?QueryService@PyIServiceProvider@@SAPEAU_object@@PEAU2@0@Z ?Read@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?RegisterObjectParam@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?Release@CPyFactory@@UEAAKXZ ?Release@PyGOleWindow@@MEAAKXZ ?Release@PyGPersist@@MEAAKXZ ?Release@PyGatewayBase@@UEAAKXZ ?Reset@PyIEnumMoniker@@SAPEAU_object@@PEAU2@0@Z ?Reset@PyIEnumVARIANT@@SAPEAU_object@@PEAU2@0@Z ?Revert@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?RevokeObjectParam@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?SafeRelease@PyIUnknown@@SAXPEAV1@@Z ?Save@PyIPersistStream@@SAPEAU_object@@PEAU2@0@Z ?Seek@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?SetBindOptions@PyIBindCtx@@SAPEAU_object@@PEAU2@0@Z ?SetPythonCOMError@PyIConnectionPoint@@SAPEAU_object@@PEAU2@J@Z ?SetPythonCOMError@PyIConnectionPointContainer@@SAPEAU_object@@PEAU2@J@Z ?SetPythonCOMError@PyIDispatchEx@@SAPEAU_object@@PEAU2@J@Z ?SetSize@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?Skip@PyIEnumMoniker@@SAPEAU_object@@PEAU2@0@Z ?Skip@PyIEnumVARIANT@@SAPEAU_object@@PEAU2@0@Z ?Stat@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?ThisAsIID@PyGOleWindow@@MEAAPEAXU_GUID@@@Z ?ThisAsIID@PyGPersist@@MEAAPEAXU_GUID@@@Z ?ThisAsIID@PyGatewayBase@@UEAAPEAXU_GUID@@@Z ?Type@PySTGMEDIUM@@2U_typeobject@@A ?Unadvise@PyIConnectionPoint@@SAPEAU_object@@PEAU2@0@Z ?UnlockRegion@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?Unwrap@PyGatewayBase@@UEAAJPEAPEAU_object@@@Z ?Write@PyIStream@@SAPEAU_object@@PEAU2@0@Z ?cmp@PyIBase@@SAHPEAU_object@@0@Z ?compare@PyIBase@@UEAAHPEAU_object@@@Z ?compare@PyIUnknown@@UEAAHPEAU_object@@@Z ?dealloc@PyIBase@@SAXPEAU_object@@@Z ?deallocFunc@PySTGMEDIUM@@SAXPEAU_object@@@Z ?getattr@PyIBase@@UEAAPEAU_object@@PEAD@Z ?getattro@PyIBase@@SAPEAU_object@@PEAU2@0@Z ?getattro@PySTGMEDIUM@@SAPEAU_object@@PEAU2@0@Z ?is_interface_type@PyComTypeObject@@SAHPEAU_object@@@Z ?is_object@PyIBase@@QEAAHPEAVPyComTypeObject@@@Z ?is_object@PyIBase@@SAHPEAU_object@@PEAVPyComTypeObject@@@Z ?iter@PyComEnumProviderTypeObject@@SAPEAU_object@@PEAU2@@Z ?iter@PyComEnumTypeObject@@SAPEAU_object@@PEAU2@@Z ?iter@PyIBase@@UEAAPEAU_object@@XZ ?iternext@PyComEnumTypeObject@@SAPEAU_object@@PEAU2@@Z ?iternext@PyIBase@@UEAAPEAU_object@@XZ ?methods@PySTGMEDIUM@@2PAUPyMethodDef@@A ?repr@PyIBase@@SAPEAU_object@@PEAU2@@Z ?repr@PyIBase@@UEAAPEAU_object@@XZ ?repr@PyIUnknown@@UEAAPEAU_object@@XZ ?richcmp@PyIBase@@SAPEAU_object@@PEAU2@0H@Z ?setattr@PyIBase@@UEAAHPEADPEAU_object@@@Z ?setattro@PyIBase@@SAHPEAU_object@@00@Z ?szErrMsgObjectReleased@PyIUnknown@@2PEADEA ?type@PyIBindCtx@@2VPyComTypeObject@@A ?type@PyIClassFactory@@2VPyComTypeObject@@A ?type@PyIConnectionPoint@@2VPyComTypeObject@@A ?type@PyIConnectionPointContainer@@2VPyComTypeObject@@A ?type@PyIDispatch@@2VPyComTypeObject@@A ?type@PyIDispatchEx@@2VPyComTypeObject@@A ?type@PyIEnumMoniker@@2VPyComEnumTypeObject@@A ?type@PyIEnumVARIANT@@2VPyComEnumTypeObject@@A ?type@PyIMoniker@@2VPyComEnumProviderTypeObject@@A ?type@PyIOleWindow@@2VPyComTypeObject@@A ?type@PyIPersist@@2VPyComTypeObject@@A ?type@PyIPersistStream@@2VPyComTypeObject@@A ?type@PyIPersistStreamInit@@2VPyComTypeObject@@A ?type@PyIProvideClassInfo2@@2VPyComTypeObject@@A ?type@PyIProvideClassInfo@@2VPyComTypeObject@@A ?type@PyIServiceProvider@@2VPyComTypeObject@@A ?type@PyIStream@@2VPyComTypeObject@@A ?type@PyITypeComp@@2VPyComTypeObject@@A ?type@PyITypeInfo@@2VPyComTypeObject@@A ?type@PyITypeLib@@2VPyComTypeObject@@A ?type@PyIUnknown@@2VPyComTypeObject@@A DllCanUnloadNow DllGetClassObject DllMain DllRegisterServerEx DllUnregisterServerEx PyCom_CoInitialize PyCom_CoInitializeEx PyCom_CoUninitialize PyCom_InterfaceFromPyObject PyCom_MakeOlePythonCall PyCom_PyObjectFromIUnknown PyCom_PyObjectFromVariant PyCom_VariantFromPyObject PyInit_pythoncom

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/pywintypes311.dll

IMPHASH 5b71a076f0c32bb52117188a36e3fec6
SHA256 89f2a5c6be1e70b3d895318fdd618506b8c0e9a63b6a1a4055dff4abdc89f18a
MD5 90b786dc6795d8ad0870e290349b5b52
SHA1 592c54e67cf5d2d884339e7a8d7a21e003e6482f
SHA512 c6e1dbf25d260c723a26c88ec027d40d47f5e28fc9eb2dbc72a88813a1d05c7f75616b31836b68b87df45c65eef6f3eaed2a9f9767f9e2f12c45f672c2116e72
SSDEEP 3072:luJ2G0a2fYrFceQaVK756Y/r06trRjEKQze7KN9eJKVKG6j1J:luJ2faiYrFceQaVfY/rx1eze7KbewVrk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

60492

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\pywin32\build\temp.win-amd64-cpython-311\Release\pywintypes.pdb

advapi32

IsValidAcl GetAuditedPermissionsFromAclW GetLengthSid InitializeAcl AddAuditAccessAce AddAce DeleteAce SetEntriesInAclW GetAce GetExplicitEntriesFromAclW GetEffectiveRightsFromAclW RegCloseKey SetSecurityDescriptorGroup MakeAbsoluteSD MakeSelfRelativeSD GetSecurityDescriptorLength InitializeSecurityDescriptor IsValidSecurityDescriptor IsValidSid SetSecurityDescriptorSacl GetSecurityDescriptorOwner GetSecurityDescriptorControl GetSecurityDescriptorGroup SetSecurityDescriptorOwner GetAclInformation GetSecurityDescriptorDacl SetSecurityDescriptorDacl GetSecurityDescriptorSacl GetSidIdentifierAuthority InitializeSid CopySid GetSidSubAuthority AllocateAndInitializeSid GetSidSubAuthorityCount EqualSid IsTextUnicode

user32

wsprintfW

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString CoCreateGuid CLSIDFromProgID StringFromGUID2

oleaut32

VariantTimeToSystemTime SystemTimeToVariantTime SysAllocStringLen SysStringLen SysFreeString

python311

PyExc_Exception PyErr_SetObject PyModule_AddIntConstant PyRun_StringFlags PyMemoryView_FromObject PyLong_FromUnsignedLong PyThreadState_New PyLong_AsUnsignedLongMask PyModule_GetDict PyObject_GetBuffer PyModule_Create2 PyUnicode_Type PyByteArray_FromStringAndSize PyDict_GetItemString PyLong_AsVoidPtr PyObject_CallObject PyThreadState_Clear PyCallable_Check PyThreadState_Swap _Py_FatalErrorFunc PyEval_AcquireThread PyMemoryView_FromBuffer PyThreadState_Delete PyEval_ReleaseThread PyUnicode_AsUTF8 PyExc_PendingDeprecationWarning PyLong_FromLongLong PyLong_AsLongLong PyLong_AsUnsignedLongLong PyLong_FromUnsignedLongLong PyErr_Occurred PyErr_WarnEx PyBuffer_FillInfo PyEval_RestoreThread PyObject_Print _Py_TrueStruct PyUnicode_AsMBCSString _Py_HashPointer PyObject_GenericSetAttr PyErr_Fetch PyErr_Restore _Py_FalseStruct PyEval_SaveThread PyBytes_FromStringAndSize PyExc_AttributeError PyExc_WindowsError PyBytes_AsStringAndSize PyArg_ParseTuple PyBuffer_Release PyExc_TypeError _Py_NewReference PyArg_ParseTupleAndKeywords PyExc_NotImplementedError PyTuple_SetItem PySequence_Check PyDict_New PyDict_SetItem PyMapping_Check PyErr_Clear PyObject_GetAttrString PyTuple_GetItem _Py_Dealloc PyExc_OverflowError PyErr_Format PyExc_ValueError PyErr_SetString PyTuple_New _Py_NoneStruct PyExc_MemoryError Py_BuildValue PyLong_FromLong PyObject_GenericGetAttr PySequence_GetItem PyMapping_Items PySequence_Size Py_MakePendingCalls PyMem_Malloc PyMem_Free PyBytes_Size PyList_Append PyList_New PyUnicode_AsWideCharString PyUnicode_FromWideChar PyUnicode_DecodeMBCS PyBytes_AsString PyEval_CallObjectWithKeywords PyBool_FromLong PyNumber_Long PyNumber_Check PyObject_HasAttrString PyCapsule_Import PyObject_CallMethod PyTuple_Size PyType_Ready PyErr_BadArgument PyLong_AsLong PyType_IsSubtype PyDict_SetItemString PyImport_ImportModule PySequence_Tuple PyErr_NoMemory _PyArg_ParseTuple_SizeT PyBytes_FromString _Py_NotImplementedStruct _Py_BuildValue_SizeT PyObject_Call

kernel32

LocalFree CloseHandle SetLastError lstrlenW FileTimeToSystemTime SystemTimeToFileTime MultiByteToWideChar TlsSetValue EnterCriticalSection LeaveCriticalSection InitializeCriticalSection LocalAlloc FormatMessageW TlsAlloc GetLastError LoadLibraryW GetProcAddress DeleteCriticalSection GetModuleHandleW TlsGetValue TlsFree DosDateTimeToFileTime RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset __std_type_info_destroy_list _CxxThrowException __std_exception_destroy memcpy __C_specific_handler __current_exception_context __current_exception __std_terminate memcmp __std_exception_copy

api-ms-win-crt-heap-l1-1-0

realloc _callnewh malloc free

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vswprintf __stdio_common_vfprintf

api-ms-win-crt-time-l1-1-0

_mktime64

api-ms-win-crt-string-l1-1-0

wcsncpy strncpy strcmp _wcsdup

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv terminate _initterm _initterm_e _seh_filter_dll _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _cexit _crt_at_quick_exit _crt_atexit _execute_onexit_table

api-ms-win-crt-math-l1-1-0

floor

??0PyACL@@QEAA@HH@Z ??0PyACL@@QEAA@PEAU_ACL@@@Z ??0PyDEVMODEW@@QEAA@G@Z ??0PyDEVMODEW@@QEAA@PEAU_devicemodeW@@@Z ??0PyDEVMODEW@@QEAA@XZ ??0PyHANDLE@@QEAA@AEBV0@@Z ??0PyHANDLE@@QEAA@PEAX@Z ??0PyHKEY@@QEAA@$$QEAV0@@Z ??0PyHKEY@@QEAA@AEBV0@@Z ??0PyHKEY@@QEAA@PEAX@Z ??0PyIID@@QEAA@AEBU_GUID@@@Z ??0PyOVERLAPPED@@QEAA@PEBVsMyOverlapped@0@@Z ??0PyOVERLAPPED@@QEAA@XZ ??0PySECURITY_ATTRIBUTES@@QEAA@AEBU_SECURITY_ATTRIBUTES@@@Z ??0PySECURITY_ATTRIBUTES@@QEAA@XZ ??0PySECURITY_DESCRIPTOR@@QEAA@PEAX@Z ??0PySECURITY_DESCRIPTOR@@QEAA@_J@Z ??0PySID@@QEAA@PEAX@Z ??0PySID@@QEAA@_JPEAX@Z ??0PyWAVEFORMATEX@@QEAA@AEBUtWAVEFORMATEX@@@Z ??0PyWAVEFORMATEX@@QEAA@XZ ??0PyWinBufferView@@QEAA@PEAU_object@@_N1@Z ??0PyWinBufferView@@QEAA@XZ ??0PyWin_AutoFreeBstr@@QEAA@PEA_W@Z ??0sMyOverlapped@PyOVERLAPPED@@QEAA@AEBU_OVERLAPPED@@@Z ??0sMyOverlapped@PyOVERLAPPED@@QEAA@XZ ??1PyACL@@QEAA@XZ ??1PyDEVMODEW@@IEAA@XZ ??1PyHANDLE@@UEAA@XZ ??1PyHKEY@@UEAA@XZ ??1PyOVERLAPPED@@QEAA@XZ ??1PySECURITY_ATTRIBUTES@@QEAA@XZ ??1PySECURITY_DESCRIPTOR@@QEAA@XZ ??1PySID@@QEAA@XZ ??1PyWAVEFORMATEX@@QEAA@XZ ??1PyWinBufferView@@QEAA@XZ ??1PyWin_AutoFreeBstr@@QEAA@XZ ??4PyACL@@QEAAAEAV0@AEBV0@@Z ??4PyDEVMODEW@@QEAAAEAV0@AEBV0@@Z ??4PyHANDLE@@QEAAAEAV0@AEBV0@@Z ??4PyHKEY@@QEAAAEAV0@$$QEAV0@@Z ??4PyHKEY@@QEAAAEAV0@AEBV0@@Z ??4PyIID@@QEAAAEAV0@$$QEAV0@@Z ??4PyIID@@QEAAAEAV0@AEBV0@@Z ??4PyOVERLAPPED@@QEAAAEAV0@AEBV0@@Z ??4PySECURITY_ATTRIBUTES@@QEAAAEAV0@AEBV0@@Z ??4PySECURITY_DESCRIPTOR@@QEAAAEAV0@AEBV0@@Z ??4PySID@@QEAAAEAV0@AEBV0@@Z ??4PyWAVEFORMATEX@@QEAAAEAV0@AEBV0@@Z ??4PyWin_AutoFreeBstr@@QEAAAEAV0@AEBV0@@Z ??4sMyOverlapped@PyOVERLAPPED@@QEAAAEAV01@$$QEAV01@@Z ??4sMyOverlapped@PyOVERLAPPED@@QEAAAEAV01@AEBV01@@Z ??BPyHANDLE@@QEAAPEAXXZ ??BPyWin_AutoFreeBstr@@QEAAPEA_WXZ ??_7PyHANDLE@@6B@ ??_7PyHKEY@@6B@ ??_FPyIID@@QEAAXXZ ??_FPySECURITY_DESCRIPTOR@@QEAAXXZ ??_FPyWin_AutoFreeBstr@@QEAAXXZ ?AddAccessAllowedAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAccessAllowedAceEx@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAccessAllowedObjectAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAccessDeniedAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAccessDeniedAceEx@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAccessDeniedObjectAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAuditAccessAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAuditAccessAceEx@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddAuditAccessObjectAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?AddMandatoryAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?Clear@PyDEVMODEW@@SAPEAU_object@@PEAU2@0@Z ?Close@PyHANDLE@@SAPEAU_object@@PEAU2@0@Z ?Close@PyHANDLE@@UEAAHXZ ?Close@PyHKEY@@UEAAHXZ ?DeleteAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?Detach@PyHANDLE@@SAPEAU_object@@PEAU2@0@Z ?FreeAbsoluteSD@@YAXPEAX@Z ?GetACL@PyACL@@QEAAPEAU_ACL@@XZ ?GetAce@PyACL@@SAPEAU_object@@PEAU2@0@Z ?GetAceCount@PyACL@@SAPEAU_object@@PEAU2@0@Z ?GetAclRevision@PyACL@@SAPEAU_object@@PEAU2@0@Z ?GetAclSize@PyACL@@SAPEAU_object@@PEAU2@0@Z ?GetDEVMODE@PyDEVMODEW@@QEAAPEAU_devicemodeW@@XZ ?GetLength@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetLength@PySID@@SAPEAU_object@@PEAU2@0@Z ?GetOverlapped@PyOVERLAPPED@@QEAAPEAU_OVERLAPPED@@XZ ?GetPythonTraceback@@YAPEA_WPEAU_object@@00@Z ?GetSA@PySECURITY_ATTRIBUTES@@QEAAPEAU_SECURITY_ATTRIBUTES@@XZ ?GetSD@PySECURITY_DESCRIPTOR@@QEAAPEAXXZ ?GetSID@PySID@@QEAAPEAXXZ ?GetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?GetSidIdentifierAuthority@PySID@@SAPEAU_object@@PEAU2@0@Z ?GetSubAuthority@PySID@@SAPEAU_object@@PEAU2@0@Z ?GetSubAuthorityCount@PySID@@SAPEAU_object@@PEAU2@0@Z ?GetTypeName@PyHANDLE@@UEAAPEBDXZ ?GetTypeName@PyHKEY@@UEAAPEBDXZ ?Initialize@PyACL@@SAPEAU_object@@PEAU2@0@Z ?Initialize@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?Initialize@PySID@@SAPEAU_object@@PEAU2@0@Z ?IsEqual@PyIID@@QEAAHAEAV1@@Z ?IsEqual@PyIID@@QEAAHAEBU_GUID@@@Z ?IsEqual@PyIID@@QEAAHPEAU_object@@@Z ?IsSelfRelative@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?IsValid@PyACL@@SAPEAU_object@@PEAU2@0@Z ?IsValid@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?IsValid@PySID@@SAPEAU_object@@PEAU2@0@Z ?PyACLType@@3U_typeobject@@A ?PyBuffer_FromMemory@@YAPEAU_object@@PEAX_J@Z ?PyBuffer_New@@YAPEAU_object@@_J@Z ?PyDEVMODEWType@@3U_typeobject@@A ?PyGetAuditedPermissionsFromAcl@PyACL@@SAPEAU_object@@PEAU2@0@Z ?PyGetEffectiveRightsFromAcl@PyACL@@SAPEAU_object@@PEAU2@0@Z ?PyGetExplicitEntriesFromAcl@PyACL@@SAPEAU_object@@PEAU2@0@Z ?PyHANDLEType@@3U_typeobject@@A ?PyIIDType@@3U_typeobject@@A ?PyOVERLAPPEDType@@3U_typeobject@@A ?PyObject_FromWIN32_FIND_DATAW@@YAPEAU_object@@PEAU_WIN32_FIND_DATAW@@@Z ?PySECURITY_ATTRIBUTESType@@3U_typeobject@@A ?PySECURITY_DESCRIPTORType@@3U_typeobject@@A ?PySIDType@@3U_typeobject@@A ?PySetEntriesInAcl@PyACL@@SAPEAU_object@@PEAU2@0@Z ?PySocket_AsSOCKET@@YAHPEAU_object@@PEA_K@Z ?PyWAVEFORMATEXType@@3U_typeobject@@A ?PyWinCoreString_FromIID@@YAPEAU_object@@AEBU_GUID@@@Z ?PyWinCoreString_FromString@@YAPEAU_object@@PEBD_J@Z ?PyWinCoreString_FromString@@YAPEAU_object@@PEB_W_J@Z ?PyWinExc_ApiError@@3PEAU_object@@EA ?PyWinExc_COMError@@3PEAU_object@@EA ?PyWinGlobals_Ensure@@YAHXZ ?PyWinGlobals_Free@@YAXXZ ?PyWinInterpreterLock_Acquire@@YAXXZ ?PyWinInterpreterLock_Release@@YAXXZ ?PyWinLong_AsVoidPtr@@YAHPEAU_object@@PEAPEAX@Z ?PyWinLong_FromHANDLE@@YAPEAU_object@@PEAX@Z ?PyWinLong_FromVoidPtr@@YAPEAU_object@@PEBX@Z ?PyWinMethod_NewACL@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewHANDLE@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewIID@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewOVERLAPPED@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewSECURITY_ATTRIBUTES@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewSECURITY_DESCRIPTOR@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewSID@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewTime@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewTimeStamp@@YAPEAU_object@@PEAU1@0@Z ?PyWinMethod_NewWAVEFORMATEX@@YAPEAU_object@@PEAU1@0@Z ?PyWinObject_AsACL@@YAHPEAU_object@@PEAPEAU_ACL@@H@Z ?PyWinObject_AsBstr@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ?PyWinObject_AsChars@@YAHPEAU_object@@PEAPEADHPEAK@Z ?PyWinObject_AsDATE@@YAHPEAU_object@@PEAN@Z ?PyWinObject_AsDEVMODE@@YAHPEAU_object@@PEAPEAU_devicemodeW@@H@Z ?PyWinObject_AsDWORDArray@@YAHPEAU_object@@PEAPEAKPEAKH@Z ?PyWinObject_AsFILETIME@@YAHPEAU_object@@PEAU_FILETIME@@@Z ?PyWinObject_AsHANDLE@@YAHPEAU_object@@PEAPEAX@Z ?PyWinObject_AsHKEY@@YAHPEAU_object@@PEAPEAUHKEY__@@@Z ?PyWinObject_AsIID@@YAHPEAU_object@@PEAU_GUID@@@Z ?PyWinObject_AsLARGE_INTEGER@@YAHPEAU_object@@PEAT_LARGE_INTEGER@@@Z ?PyWinObject_AsMSG@@YAHPEAU_object@@PEAUtagMSG@@@Z ?PyWinObject_AsMultipleString@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ?PyWinObject_AsOVERLAPPED@@YAHPEAU_object@@PEAPEAU_OVERLAPPED@@H@Z ?PyWinObject_AsPARAM@@YAHPEAU_object@@PEAVPyWin_PARAMHolder@@@Z ?PyWinObject_AsPOINT@@YAHPEAU_object@@PEAUtagPOINT@@@Z ?PyWinObject_AsPyOVERLAPPED@@YAHPEAU_object@@PEAPEAVPyOVERLAPPED@@H@Z ?PyWinObject_AsRECT@@YAHPEAU_object@@PEAUtagRECT@@@Z ?PyWinObject_AsResourceId@@YAHPEAU_object@@PEAPEA_WH@Z ?PyWinObject_AsResourceIdA@@YAHPEAU_object@@PEAPEADH@Z ?PyWinObject_AsSECURITY_ATTRIBUTES@@YAHPEAU_object@@PEAPEAU_SECURITY_ATTRIBUTES@@H@Z ?PyWinObject_AsSECURITY_DESCRIPTOR@@YAHPEAU_object@@PEAPEAXH@Z ?PyWinObject_AsSID@@YAHPEAU_object@@PEAPEAXH@Z ?PyWinObject_AsSYSTEMTIME@@YAHPEAU_object@@PEAU_SYSTEMTIME@@@Z ?PyWinObject_AsSimplePARAM@@YAHPEAU_object@@PEA_K@Z ?PyWinObject_AsTaskAllocatedWCHAR@@YAHPEAU_object@@PEAPEA_WH@Z ?PyWinObject_AsULARGE_INTEGER@@YAHPEAU_object@@PEAT_ULARGE_INTEGER@@@Z ?PyWinObject_AsWAVEFORMATEX@@YAHPEAU_object@@PEAPEAUtWAVEFORMATEX@@H@Z ?PyWinObject_AsWCHAR@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ?PyWinObject_AsWCHARArray@@YAHPEAU_object@@PEAPEAPEA_WPEAKH@Z ?PyWinObject_CloseHANDLE@@YAHPEAU_object@@@Z ?PyWinObject_CloseHKEY@@YAHPEAU_object@@@Z ?PyWinObject_FreeBstr@@YAXPEA_W@Z ?PyWinObject_FreeChars@@YAXPEAD@Z ?PyWinObject_FreeMultipleString@@YAXPEA_W@Z ?PyWinObject_FreeResourceId@@YAXPEA_W@Z ?PyWinObject_FreeResourceIdA@@YAXPEAD@Z ?PyWinObject_FreeTaskAllocatedWCHAR@@YAXPEA_W@Z ?PyWinObject_FreeWCHAR@@YAXPEA_W@Z ?PyWinObject_FreeWCHARArray@@YAXPEAPEA_WK@Z ?PyWinObject_FromBstr@@YAPEAU_object@@QEA_WH@Z ?PyWinObject_FromDATE@@YAPEAU_object@@N@Z ?PyWinObject_FromDEVMODE@@YAPEAU_object@@PEAU_devicemodeW@@@Z ?PyWinObject_FromFILETIME@@YAPEAU_object@@AEBU_FILETIME@@@Z ?PyWinObject_FromHANDLE@@YAPEAU_object@@PEAX@Z ?PyWinObject_FromHKEY@@YAPEAU_object@@PEAUHKEY__@@@Z ?PyWinObject_FromIID@@YAPEAU_object@@AEBU_GUID@@@Z ?PyWinObject_FromIO_COUNTERS@@YAPEAU_object@@PEAU_IO_COUNTERS@@@Z ?PyWinObject_FromLARGE_INTEGER@@YAPEAU_object@@AEBT_LARGE_INTEGER@@@Z ?PyWinObject_FromMSG@@YAPEAU_object@@PEBUtagMSG@@@Z ?PyWinObject_FromMultipleString@@YAPEAU_object@@PEAD@Z ?PyWinObject_FromMultipleString@@YAPEAU_object@@PEA_W@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W_J@Z ?PyWinObject_FromOVERLAPPED@@YAPEAU_object@@PEBU_OVERLAPPED@@@Z ?PyWinObject_FromRECT@@YAPEAU_object@@PEAUtagRECT@@@Z ?PyWinObject_FromSECURITY_ATTRIBUTES@@YAPEAU_object@@AEBU_SECURITY_ATTRIBUTES@@@Z ?PyWinObject_FromSECURITY_DESCRIPTOR@@YAPEAU_object@@PEAX@Z ?PyWinObject_FromSID@@YAPEAU_object@@PEAX@Z ?PyWinObject_FromSYSTEMTIME@@YAPEAU_object@@AEBU_SYSTEMTIME@@@Z ?PyWinObject_FromTimeStamp@@YAPEAU_object@@AEBT_LARGE_INTEGER@@@Z ?PyWinObject_FromULARGE_INTEGER@@YAPEAU_object@@AEBT_ULARGE_INTEGER@@@Z ?PyWinSequence_Tuple@@YAPEAU_object@@PEAU1@PEAK@Z ?PyWinThreadState_Clear@@YAXXZ ?PyWinThreadState_Ensure@@YAHXZ ?PyWinThreadState_Free@@YAXXZ ?PyWinTimeObject_Fromtime_t@@YAPEAU_object@@_J@Z ?PyWinTime_Check@@YAHPEAU_object@@@Z ?PyWin_AcquireGlobalLock@@YAXXZ ?PyWin_CopyString@@YAPEADPEBD@Z ?PyWin_CopyString@@YAPEA_WPEB_W@Z ?PyWin_GetErrorMessageModule@@YAPEAUHINSTANCE__@@K@Z ?PyWin_InterpreterState@@3PEAU_is@@EA ?PyWin_MakePendingCalls@@YAXXZ ?PyWin_NewUnicode@@YAPEAU_object@@PEAU1@0@Z ?PyWin_RegisterErrorMessageModule@@YAHKKPEAUHINSTANCE__@@@Z ?PyWin_ReleaseGlobalLock@@YAXXZ ?PyWin_SetAPIError@@YAPEAU_object@@PEADJ@Z ?PyWin_SetBasicCOMError@@YAPEAU_object@@J@Z ?SetACL@PyACL@@QEAAHPEAU_ACL@@@Z ?SetBstr@PyWin_AutoFreeBstr@@QEAAXPEA_W@Z ?SetSD@PySECURITY_DESCRIPTOR@@QEAAHPEAX@Z ?SetSecurityDescriptorControl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?SetSecurityDescriptorDacl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?SetSecurityDescriptorGroup@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?SetSecurityDescriptorOwner@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?SetSecurityDescriptorSacl@PySECURITY_DESCRIPTOR@@SAPEAU_object@@PEAU2@0@Z ?SetSubAuthority@PySID@@SAPEAU_object@@PEAU2@0@Z ?_MakeAbsoluteSD@@YAHPEAXPEAPEAX@Z ?asStr@PyHANDLE@@QEAAPEAU_object@@XZ ?binaryFailureFunc@PyHANDLE@@SAPEAU_object@@PEAU2@0@Z ?deallocFunc@PyACL@@SAXPEAU_object@@@Z ?deallocFunc@PyDEVMODEW@@SAXPEAU_object@@@Z ?deallocFunc@PyHANDLE@@SAXPEAU_object@@@Z ?deallocFunc@PyIID@@SAXPEAU_object@@@Z ?deallocFunc@PyOVERLAPPED@@SAXPEAU_object@@@Z ?deallocFunc@PySECURITY_ATTRIBUTES@@SAXPEAU_object@@@Z ?deallocFunc@PySECURITY_DESCRIPTOR@@SAXPEAU_object@@@Z ?deallocFunc@PySID@@SAXPEAU_object@@@Z ?deallocFunc@PyWAVEFORMATEX@@SAXPEAU_object@@@Z ?get_DeviceName@PyDEVMODEW@@SAPEAU_object@@PEAU2@PEAX@Z ?get_DriverData@PyDEVMODEW@@SAPEAU_object@@PEAU2@PEAX@Z ?get_FormName@PyDEVMODEW@@SAPEAU_object@@PEAU2@PEAX@Z ?get_handle@PyHANDLE@@SAPEAU_object@@PEAU2@PEAX@Z ?getattro@PyOVERLAPPED@@SAPEAU_object@@PEAU2@0@Z ?getattro@PySECURITY_ATTRIBUTES@@SAPEAU_object@@PEAU2@0@Z ?getbufferinfo@PySECURITY_DESCRIPTOR@@SAHPEAU_object@@PEAUPy_buffer@@H@Z ?getbufferinfo@PySID@@SAHPEAU_object@@PEAUPy_buffer@@H@Z ?getset@PyDEVMODEW@@2PAUPyGetSetDef@@A ?getset@PyHANDLE@@2PAUPyGetSetDef@@A ?hash@PyHANDLE@@QEAA_JXZ ?hash@PyIID@@QEAA_JXZ ?hashFunc@PyHANDLE@@SA_JPEAU_object@@@Z ?hashFunc@PyIID@@SA_JPEAU_object@@@Z ?hashFunc@PyOVERLAPPED@@SA_JPEAU_object@@@Z ?init@PyWinBufferView@@QEAA_NPEAU_object@@_N1@Z ?intFunc@PyHANDLE@@SAPEAU_object@@PEAU2@@Z ?len@PyWinBufferView@@QEAAKXZ ?longFunc@PyHANDLE@@SAPEAU_object@@PEAU2@@Z ?members@PyDEVMODEW@@2PAUPyMemberDef@@A ?members@PyOVERLAPPED@@2PAUPyMemberDef@@A ?members@PySECURITY_ATTRIBUTES@@2PAUPyMemberDef@@A ?members@PyWAVEFORMATEX@@2PAUPyMemberDef@@A ?methods@PyACL@@2PAUPyMethodDef@@A ?methods@PyDEVMODEW@@2PAUPyMethodDef@@A ?methods@PyHANDLE@@2PAUPyMethodDef@@A ?methods@PySECURITY_ATTRIBUTES@@2PAUPyMethodDef@@A ?methods@PySECURITY_DESCRIPTOR@@2PAUPyMethodDef@@A ?methods@PySID@@2PAUPyMethodDef@@A ?modify_in_place@PyDEVMODEW@@QEAAXXZ ?nonzeroFunc@PyHANDLE@@SAHPEAU_object@@@Z ?ok@PyWinBufferView@@QEAA_NXZ ?print@PyHANDLE@@QEAAHPEAU_iobuf@@H@Z ?printFunc@PyHANDLE@@SAHPEAU_object@@PEAU_iobuf@@H@Z ?ptr@PyWinBufferView@@QEAAPEAXXZ ?release@PyWinBufferView@@QEAAXXZ ?repr@PyIID@@QEAAPEAU_object@@XZ ?reprFunc@PyIID@@SAPEAU_object@@PEAU2@@Z ?richcompare@PyHANDLE@@QEAAPEAU_object@@PEAU2@H@Z ?richcompare@PyIID@@QEAAPEAU_object@@PEAU2@H@Z ?richcompare@PySID@@QEAAPEAU_object@@PEAU2@H@Z ?richcompareFunc@PyHANDLE@@SAPEAU_object@@PEAU2@0H@Z ?richcompareFunc@PyIID@@SAPEAU_object@@PEAU2@0H@Z ?richcompareFunc@PyOVERLAPPED@@SAPEAU_object@@PEAU2@0H@Z ?richcompareFunc@PySID@@SAPEAU_object@@PEAU2@0H@Z ?set_DeviceName@PyDEVMODEW@@SAHPEAU_object@@0PEAX@Z ?set_DriverData@PyDEVMODEW@@SAHPEAU_object@@0PEAX@Z ?set_FormName@PyDEVMODEW@@SAHPEAU_object@@0PEAX@Z ?setattro@PyOVERLAPPED@@SAHPEAU_object@@00@Z ?setattro@PySECURITY_ATTRIBUTES@@SAHPEAU_object@@00@Z ?str@PyIID@@QEAAPEAU_object@@XZ ?strFunc@PyHANDLE@@SAPEAU_object@@PEAU2@@Z ?strFunc@PyIID@@SAPEAU_object@@PEAU2@@Z ?strFunc@PySID@@SAPEAU_object@@PEAU2@@Z ?ternaryFailureFunc@PyHANDLE@@SAPEAU_object@@PEAU2@00@Z ?tp_new@PyDEVMODEW@@SAPEAU_object@@PEAU_typeobject@@PEAU2@1@Z ?unaryFailureFunc@PyHANDLE@@SAPEAU_object@@PEAU2@@Z DllMain PyInit_pywintypes

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/rtmpltfm.dll

IMPHASH e74ce553ad6e540050de22c665dfee4b
SHA256 4a0a4593e1f67d56fb0d3e76870d59857976fc30d1f6bd9bd2e9deb08ed1d955
MD5 cc2c487d1949966ac0aa38f6f017afc7
SHA1 fb36e2b1a0dad185f126e1e0d64c160c0de6c4b1
SHA512 f9d4b505c1fa35114bb669e67942d8f73f17b37f1bbe87c4b2aef097c8c538bf18ba2db720bf33067d5a0ccf9a01d1d14cf366ee7776a63dc450d24083654f99
SSDEEP 49152:1t0zc1YmnYhGJ0OxJzclFgyixeqiqSKixb4JOTbrcPV//UnTLgbnq99CIlCCYBFA:7qAyiBOXrcFnqGLryQM4mp5
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

82:cc:77:6c:22:1f:f8:6d:56:45:c5:ee:d3:6a:af:d1:cf:dc:48:5b:cb:1d:be:ea:97:4c:10:e5:c7:76:f3:7f

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Skype Software Sarl,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

562000

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\MSRTC\msrtc\build.d\output\release\RTMPLTFM.pdb

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter GetLastError

oleaut32

SysFreeString SysAllocString SysStringLen SysStringByteLen SysAllocStringByteLen VariantClear SysAllocStringLen

api-ms-win-core-string-l1-1-0

WideCharToMultiByte

api-ms-win-core-synch-l1-1-0

LeaveCriticalSection EnterCriticalSection InitializeCriticalSectionEx InitializeSRWLock WaitForSingleObjectEx TryEnterCriticalSection DeleteCriticalSection TryAcquireSRWLockExclusive

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls GetProcAddress

api-ms-win-crt-string-l1-1-0

strncpy_s strncmp __strncnt wcslen wcscpy_s isupper _wcsdup _strnicmp isdigit islower wcsncmp isalnum strtok_s strcmp memset strcspn wcscmp wcsncpy_s tolower strcpy_s _strdup isspace strlen

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function _execute_onexit_table _initialize_onexit_table _crt_atexit _beginthreadex _initialize_narrow_environment _errno _invalid_parameter_noinfo _cexit _initterm _initterm_e _invalid_parameter_noinfo_noreturn terminate abort _invoke_watson _configure_narrow_argv _seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf fgetc fflush __stdio_common_vsnprintf_s __stdio_common_vsprintf_s fclose _get_stream_buffer_pointers fsetpos __stdio_common_vswscanf _fseeki64 __acrt_iob_func fwrite __stdio_common_vsnwprintf_s fputc setvbuf ungetc __stdio_common_vswprintf __stdio_common_vswprintf_s __stdio_common_vsprintf fgetpos

api-ms-win-crt-utility-l1-1-0

_byteswap_ushort llabs srand abs _abs64 qsort _byteswap_ulong rand

api-ms-win-crt-heap-l1-1-0

_malloc_base _callnewh _calloc_base free _get_heap_handle malloc _free_base calloc realloc _aligned_free _aligned_malloc

rtmcodecs

RtcPalVideoPlatformCloseSource RtcPalVideoPlatformQuerySourceList RtcPalVideoPlatformOpenSource RtcPalVideoPlatformGetMediaExtension RtcPalVideoPlatformClose RtcPalVideoPlatformOpen RtmCodecsVscaGetManager RtcPalVideoSourceStop RtcPalVideoSourceRestart RtcPalVideoSourceGetStatistics RtcPalVideoPreviewStart RtcPalVideoPreviewStop RtcPalVideoSourceCreatePreview RtcPalVideoSourceDeletePreview RtcPalVideoSourceGetSupportedFormatList RtcPalVideoSourceStart RtmCodecsVscaCreatePacsiGenerator RtmCodecGetFrameCountersFromPacsi RtmCodecsVscaCreateFecUtility RtmCodecsVscaGetPacsiInfo RtcPalVideoConfigurationSetInteger RtcPalVideoConfigurationSetBoolean RtcPalVideoConfigurationReset RtcPalGetComponentStateTrackerBlob RtmCodecsGetGfxMetrics RtmCodecsVscaGetEncodingMetrics RtmCodecsVscaGetDecodingMetrics RtmCodecsVscaGetStreamCountStatistics

rtmpal

?fileFlush@spl@@YA_NPEAX@Z ?fileWrite@spl@@YA_JPEAXPEBX_K@Z ?isGood@Event@auf@@QEBA_NXZ ?isGood@ThreadRef@auf@@QEBA_NXZ ?fileRead@spl@@YA_JPEAX0_K@Z ?fileSize@spl@@YA_JPEAX@Z RtcPalIsLaptop ?pathInitFromLocation@spl@@YA?AW4FileError@1@AEAVPath@1@AEBUPathLocation@1@@Z ?fileClose@spl@@YAXPEAX@Z ?pathStringValue@spl@@YAPEBDAEBVPath@1@@Z ?pathAppendComponent@spl@@YA_NAEAVPath@1@PEBD1@Z ?directoryCreateRecursive@spl@@YA?AW4FileError@1@AEBVPath@1@H@Z __imp_?PL_TEMP_DIR@spl@@3UPathLocation@1@A auf_internal_log_obfuscated ?size@SimpleBuffer@rtnet@@QEBA_KXZ ?atomicAddI@spl@@YAHPECHH@Z ?atomicAddL@spl@@YAJPECJJ@Z ?compareExchangeL@spl@@YA_NPECJJJ@Z RtcPalCreateEvent RtcPalSetEvent RtcPalCloseWaitableHandle RtcPalWaitForSingleObject RtcPalGetTimeLongIn100ns RtcPalInitializeCriticalSection ?destroyCert@rtnet@@YAXPEAUX509Cert@1@@Z RtcPalSecureZeroMemory rtcpal_inet_addr rtcpal_getaddrinfo rtcpal_freeaddrinfo RtcPalNetAddressToStringA RtcPalNetAddressToStringW RtcPalNetStringToIPv4AddressW RtcPalNetStringToIPv6AddressW RtcPalCreateThread RtcPalCryptGenRandom ?compareExchangePI@spl@@YA_NPEC_J_J1@Z ?exchangePI@spl@@YA_JPEC_J_J@Z ?post@Event@auf@@QEAAXXZ ?wait@Event@auf@@QEAA_N_K@Z ?intrusive_ptr_release@auf@@YAXPEBVIReferenceCountable@1@@Z ?intrusive_ptr_add_ref@auf@@YAXPEBVIReferenceCountable@1@@Z ?createStrand@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@W4ThreadPoolPriority@spl@@@Z RtcPalEnableEtwTracing RtcPalIsEtwTracingEnabled RtcPalIsTracingEnabled RtcPalEnableTracing RtcPalGetEcsSetting ??0Event@auf@@QEAA@XZ ??1Event@auf@@QEAA@XZ InitializeSListHead IsDebuggerPresent QueryPerformanceCounter InterlockedPushEntrySList RaiseException SetLastError MultiByteToWideChar RtcPalGetSystemMetricsTemplate RtcPalGetTimeLongIn100nsFast RtcPalCreateSocketIOCP RtcPalCloseSocketIOCP RtcPalPostSocketIOCPQueuedCompletionStatus RtcPalGetSocketIOCPQueuedCompletionStatus RtcPalGetLastError ?encodeUtf8@spl@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBX_K1@Z RtcPalInitializeCriticalSectionAndSpinCount ?utcTimestamp@spl@@YA_JXZ ?x509NameEncode@rtnet@@YAPEAUX509CertName@1@PEBD@Z ?x509NameDestroy@rtnet@@YAXPEAUX509CertName@1@@Z ?getSelfSignedCert@rtnet@@YAPEAUX509Cert@1@PEBUX509CertName@1@_J1W4HashAlgorithm@spl@@PEAX@Z ?getCertHash@rtnet@@YA_NPEAUX509Cert@1@W4HashAlgorithm@spl@@PEAUCertHash@1@@Z UnregisterTraceGuids GetTraceLoggerHandle GetTraceEnableLevel GetTraceEnableFlags EventRegister EventUnregister RtcPalRegisterTraceGuids RtcPalIsAutomaticProxyTraversalSupported RtcPalGetIfAddrs RtcPalFreeIfAddrs ??0IPv4@rtnet@@QEAA@XZ ??1IPv4@rtnet@@QEAA@XZ ?fromBytes@IPv4@rtnet@@QEAA_NPEBE@Z ??0IPv6@rtnet@@QEAA@XZ ??1IPv6@rtnet@@QEAA@XZ ??AIPv6@rtnet@@QEAAAEAE_K@Z ?embedIPv4@IPv6@rtnet@@QEAA_NAEBVIPv4@2@_K@Z ?asIPv6@Address@rtnet@@QEBA_NAEAVIPv6@2@@Z ?address@InterfaceAddress@rtnet@@QEBA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ ?prefixLength@InterfaceAddress@rtnet@@QEBA_KXZ ?getNat64Prefixes@rtnet@@YA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@AEAV?$vector@V?$IntrusivePtr@VInterfaceAddress@rtnet@@@auf@@V?$allocator@V?$IntrusivePtr@VInterfaceAddress@rtnet@@@auf@@@std@@@4@@Z ?memset_s@spl@@YAHPECX_KH1@Z ?memFree@spl@@YAXPEAX@Z RtcPalNetStartup RtcPalNetCleanup RtcPalRegisterSocket RtcPalSetLastError RtcPalInitThreadAttr RtcPalResetEvent RtcPalSetSchedulerPolicy RtcPalWaitForAllThreads ?encryptWithTempKey@spl@@YA?AV?$vector@DU?$secure_allocator@D@internal@spl@@@std@@PEBX_K@Z ?decryptWithTempKey@spl@@YA?AV?$vector@DU?$secure_allocator@D@internal@spl@@@std@@PEBD_K@Z AcquireCredentialsHandleW FreeCredentialsHandle InitializeSecurityContextW DeleteSecurityContext FreeContextBuffer EnumerateSecurityPackagesW RtcPalCryptMD5Create RtcPalCryptMD5Update RtcPalCryptMD5Final RtcPalCryptMD5Destroy EventWrite RtcPalInitializeSlimLock RtcPalDeleteSlimLock RtcPalAcquireSlimLock RtcPalReleaseSlimLock ?sysInfoCPUInfo@spl@@YAXIAEAUCPUInfo@1@@Z RtcPalGetOSName RtcPalGetMachineInfo RtcPalGetComputerNameW ?g_CPUTopology@spl@@3UCPUTopology@1@A ?g_sysInfo@spl@@3USysinfo@1@A OutputDebugStringA RtcPalGetAssertRecords RtcPalClearAssertRecords RtcPalEnableRDTSCTime RtcPalTaskQueueCreate RtcPalTaskQueueDestroy RtcPalTaskQueueEnqueue RtcPalTaskQueueDequeue RtcPalAllocateWorkItem RtcPalQueueWorkItem RtcPalFreeWorkItem RtcPalGetADSPConfig ?lock@MutexCore@internal@auf@@QEAAXXZ ?unlock@MutexCore@internal@auf@@QEAAXXZ ??0CheckedMutex@auf@@QEAA@PEBD_N@Z ??1CheckedMutex@auf@@QEAA@XZ ?decodeToUtf16@spl@@YA?AV?$basic_string@_SU?$char_traits@_S@std@@V?$allocator@_S@2@@std@@PEBD_K@Z RtcPalGetSystemConfigurationInfo RtcPalGetTimeDouble RtcPalTraceLoggingWrite RtcPalPopulateNetworkInterfaceIdForTraceLoggingEvent RtcPalSetPlatformProfile RtcPalInitTracing RtcPalDeinitTracing RtcPalCryptStartup RtcPalCryptCleanup RtcPalStartup RtcPalCleanup RtcPalSetEcsSetting RtcPalGetAllEcsSettings RtcPalWaitForAnyObject RtcPalInitCollectSystemMetrics RtcPalUninitCollectSystemMetrics RtcPalStartCollectSystemMetrics RtcPalStopCollectSystemMetrics ??0Flag@auf@@QEAA@XZ ??1Flag@auf@@QEAA@XZ ?raise@Flag@auf@@QEAA_NXZ ?release@Flag@auf@@QEAAXXZ ?wait@Flag@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@@Z ?advance@SimpleBuffer@rtnet@@QEAAX_K@Z DecodePointer ?memcpy_s@spl@@YAHPEAX_KPEBX1@Z ?log@LogComponent@auf@@QEAAXPEBXIIAEBVLogArgs@2@@Z ?setLogComponentSafe@internal@auf@@YA_NPEBD_N@Z ?setLogComponentDescription@internal@auf@@YAPEBDPEBD0@Z ?instantiateLogComponent@internal@auf@@YAPEAVLogComponent@2@PEBD@Z EncodePointer ?isGood@MutexCore@internal@auf@@QEBA_NXZ ?strcpy_s@spl@@YAHPEAD_KPEBD@Z ?strnlen_s@spl@@YA_KPEBD_K@Z ?exchangeI@spl@@YAHPECHH@Z RtcPalRegOpenKeyExW RtcPalRegQueryValueExW RtcPalRegCloseKey RtcPalLoadLibrary GetSystemInfo RtcPalCreateSemaphore RtcPalReleaseSemaphore ?dataBarrier@spl@@YAXXZ RtcPalTryAcquireSlimLock ?localTimestamp@spl@@YA?AUHidingSystemTime@1@XZ ?localTime@spl@@YAHAEBUHidingSystemTime@1@PEAUtm@@@Z ?highPrecisionTimestamp@spl@@YA_KXZ ?msFromHp@spl@@YA_K_J@Z ?log@LogComponent@auf@@QEAAXPEBXIIPEBDAEBVLogArgs@2@@Z ??0XorshiftRNG@auf@@QEAA@I@Z ??1XorshiftRNG@auf@@QEAA@XZ ?randomUInt@XorshiftRNG@auf@@QEAAIXZ ??0LockfreeStackPool@auf@@QEAA@I@Z ??1LockfreeStackPool@auf@@QEAA@XZ ?allocate@LockfreeStackPool@auf@@QEAAPEAX_K@Z ?lockfreeStackPoolDeallocate@auf@@YAXPEAX@Z ?isGood@LockfreeStackPool@auf@@QEBA_NXZ ??0LockfreeQueue@auf@@QEAA@AEAVLockfreeStackPool@1@@Z ??1LockfreeQueue@auf@@QEAA@XZ ?isGood@LockfreeQueue@auf@@QEBA_NXZ ?enqueue@LockfreeQueue@auf@@QEAA_NPEAX@Z ?dequeue@LockfreeQueue@auf@@QEAAPEAXPEA_N@Z ?empty@LockfreeQueue@auf@@QEAA_NXZ ?snprintf_s@spl@@YAHPEAD_KPEBDZZ ?vsnprintf_s@spl@@YAHPEAD_KPEBD0@Z ?strlcpy@spl@@YA_KPEADPEBD_K@Z ?memMalloc@spl@@YAPEAX_K@Z ?io@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VISocketIO@rtnet@@@auf@@XZ ?compareExchangeI@spl@@YA_NPECHHH@Z ?wait@Event@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@@Z ??0UncheckedMutex@auf@@QEAA@PEBD_N@Z ??1UncheckedMutex@auf@@QEAA@XZ ?initInternal@auf@@YA_NPEAUAufInitTag@1@PEBDI_K@Z ?stopInternal@auf@@YAXPEAUAufInitTag@1@PEBD@Z ?g_aufUp@auf@@3HA ?g_configMaxObjectWaitUs@auf@@3_KA ?g_logObjectCountChanges@auf@@3DA ?g_objectCheckDisabled@auf@@3DA ?g_nextObjectId@auf@@3IC ?g_nextCallId@auf@@3IC ?data@SimpleBuffer@rtnet@@QEAAPEAXXZ ?createWithSize@SimpleBuffer@rtnet@@SA?AV?$IntrusivePtr@VSimpleBuffer@rtnet@@@auf@@_K@Z ?port@Address@rtnet@@QEBAHXZ ?asIPv4@Address@rtnet@@QEBA_NAEAVIPv4@2@@Z ??1PortSpecification@rtnet@@QEAA@XZ ??0PortSpecification@rtnet@@QEAA@AEBU?$pair@HH@std@@@Z ??AIPv4@rtnet@@QEAAAEAE_K@Z ?createStrandWithTransport@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@AEBV21@@Z ?globalThreadPoolTransport2@auf@@YA?AV?$IntrusivePtr@VThreadPoolTransport@auf@@@1@W4ThreadPoolPriority@spl@@@Z RtcPalWlanEnterMediaStreamingMode RtcPalCryptHMACSHA256Destroy RtcPalCryptHMACSHA256Final RtcPalCryptHMACSHA256Update RtcPalCryptHMACSHA256Create RtcPalCryptHMACSHA256DestroyKey RtcPalCryptHMACSHA256CreateKey ?weak_intrusive_ptr_release@auf@@YAXPEAVWeakAuxiliary@1@@Z ?weak_intrusive_ptr_add_ref@auf@@YAXPEAVWeakAuxiliary@1@@Z ?weak_intrusive_ptr_create@auf@@YAPEAVWeakAuxiliary@1@PEBVIReferenceCountable@1@@Z RtcPalSocketEnableLowLatency RtcPalSocketSetQoSDSCP RtcPalSocketSetRecvBufSize RtcPalSocketSetSendBufSize RtcPalRecvFrom RtcPalRecv RtcPalSendTo RtcPalSend RtcPalGetPeerName RtcPalGetSockName ?tlsGetPeerCert@rtnet@@YAPEAUX509Cert@1@PEAUTlsSession@1@@Z ?dtlsAccept@rtnet@@YAHPEAUTlsSession@1@PEAUTlsBuf@1@1PEAX@Z ?dtlsConnect@rtnet@@YAHPEAUTlsSession@1@PEAUTlsBuf@1@1@Z ?dtlsDestroy@rtnet@@YAXPEAUTlsSession@1@@Z ?dtlsCreate@rtnet@@YAPEAUTlsSession@1@_NPEBUX509Cert@1@@Z ?tlsBufInit@rtnet@@YAXPEAUTlsBuf@1@@Z ?tlsBufAlloc@rtnet@@YA_NPEAUTlsBuf@1@K@Z ?dtlsSrtpParametersFreeMkiBuffer@rtnet@@YAXPEAUDtlsSrtpParameters@1@@Z ?getDtlsSrtpParameters@rtnet@@YA_NPEAUTlsSession@1@PEAUDtlsSrtpParameters@1@@Z RtcPalNetStringToIPAddressW ?encode@BASE64@spl@@SAXPEADPEBX_K@Z ?encodedLength@BASE64@spl@@SA_K_K@Z RtcPalSocketSetTcpNoDelay RtcPalSocketSetLinger RtcPalConnectToHostname RtcPalConnect ?fileOpen@spl@@YAPEAXAEBVPath@1@W4FileSemantics@1@HAEAW4FileError@1@@Z ?tlsBufFree@rtnet@@YAXPEAUTlsBuf@1@@Z RtcPalGetBestSourceAddress RtcPalWlanLeaveMediaStreamingMode spl_pii_OmitW spl_pii_OmitS RtcPalDestroyAesKey ?pathFromFilename@spl@@YA_NAEAVPath@1@PEBD@Z ??1Path@spl@@QEAA@XZ ??0Path@spl@@QEAA@XZ ?utcHpTimestamp@spl@@YA_KXZ ?startImp@auf@@YAXPEAUSplOpaqueUpperLayerThread@@PEAUVarBase@spl@@@Z ?getImp@ThreadRef@auf@@AEBAPEAUSplOpaqueUpperLayerThread@@XZ ?setDone@ThreadRef@auf@@QEAAX_N@Z ?done@ThreadRef@auf@@QEBA_NXZ ?stop@ThreadRef@auf@@QEAA_NV?$duration@_JU?$ratio@$00$0PECEA@@std@@@chrono@std@@PEA_J@Z ??1ThreadRef@auf@@QEAA@XZ ??0ThreadRef@auf@@QEAA@PEBDI_K@Z ?sleep@spl@@YAX_K@Z RtcPalDeviceAudioGetGlitchInfo RtcPalDeviceAudioGetQueuedBytes RtcPalDevicePlatformOpenAudioLoopbackDevice RtcPalDeviceIsErrorCodeRecoverable RtcPalDeviceAudioGetMetrics RtcPalDevicePlatformGetVolumeInfoByDeviceHandle RtcPalDeviceAudioUnlockBuffer RtcPalDeviceAudioLockBuffer RtcPalDeviceAudioReset RtcPalDeviceAudioStop RtcPalDeviceAudioStart RtcPalAesEncrypt RtcPalSetAesKey RtcPalCryptHMACSHA1DupeContext RtcPalCryptHMACSHA1Final RtcPalCryptHMACSHA1Update RtcPalCryptHMACSHA1Create RtcPalCryptHMACSHA1DestroyKey RtcPalCryptHMACSHA1CreateKey RtcPalCryptHMACSHA1Destroy RtcPalDevicePlatformCloseDevice RtcPalDevicePlatformDeviceRegisterNotification RtcPalDevicePlatformOpenAudioDevice GetVersionExW RtcPalDevicePlatformGetMediaExtension RtcPalRegCreateKeyExW RtcPalSocketSetNonBlockingMode RtcPalDeviceAudioSetActiveEndpoint RtcPalDevicePlatformSetVolumeInfo RtcPalDevicePlatformGetVolumeInfo RtcPalDevicePlatformCreateDeviceId RtcPalCloseSocket RtcPalDevicePlatformGetDeviceList RtcPalDevicePlatformEnumDevices RtcPalAccept RtcPalDevicePlatformEnableAudio RtcPalDevicePlatformUnregisterNotification RtcPalDevicePlatformRegisterNotification RtcPalDevicePlatformClose RtcPalListen RtcPalBind RtcPalCreateSocket QueryPerformanceFrequency RtcPalDevicePlatformOpen RtcPalWaitAndCancelPendingCallback RtcPalDeviceErrorCodeFromHResult RtcPalDevicePlatformGetAudioCertifiedListId RtcPalDeviceAudioGetSupportedProcessingCapacity RtcPalDeviceAudioGetProcessingFeatures RtcPalDevicePlatformGetHIDInformation RtcPalDevicePlatformSetHIDInformation RtcPalDevicePlatformCloseHIDContext RtcPalDevicePlatformOpenHIDContext AcquireSRWLockExclusive ReleaseSRWLockExclusive RtcPalDevicePlatformSetState RtcPalDevicePlatformDisposeDeviceId RtcPalDevicePlatformIsSamePhysicalDevice RtcPalDevicePlatformCompareDeviceId ?complete@SimpleBuffer@rtnet@@QEAAXXZ RtcPalDevicePlatformDuplicateDeviceId ?exchangeL@spl@@YAJPECJJ@Z RtcPalTraceRt ?setOptions@StreamSocket@rtnet@@QEAA_NAEBV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@auf@@@Z ?options@StreamSocket@rtnet@@QEBA?AV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@auf@@XZ ?peerAddress@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ ?localAddress@StreamSocket@rtnet@@QEAA?AV?$IntrusivePtr@VAddress@rtnet@@@auf@@XZ ?startTlsAsync@StreamSocket@rtnet@@QEAAXPEBDPEAUAsyncTag@auf@@@Z ?disconnect@StreamSocket@rtnet@@QEAAXXZ ?make@ProxyInfo@rtnet@@SA?AV?$IntrusivePtr@VProxyInfo@rtnet@@@auf@@W4ProxyProtocol@2@PEBDI11@Z ?setQualityOfServiceDSCP@SocketOptions@rtnet@@QEAAXI@Z ?setTlsCertificateVerification@SocketOptions@rtnet@@QEAAX_N@Z ?dtorCore@SocketOptions@rtnet@@AEAAXXZ ??0SocketOptions@rtnet@@IEAA@XZ ?setNoDelayEnabled@StreamSocketOptions@rtnet@@QEAAX_N@Z ??0SocketConnectOptions@rtnet@@QEAA@XZ ?setPortSpecification@SocketConnectOptions@rtnet@@QEAAXAEBV?$shared_ptr@VPortSpecification@rtnet@@@std@@@Z ?setProxy@SocketConnectOptions@rtnet@@QEAAXW4ProxyPolicy@2@AEBV?$IntrusivePtr@VProxyInfo@rtnet@@@auf@@@Z ?dtorCore@SocketConnectOptions@rtnet@@AEAAXXZ ?connectedCore@IStreamSocketDelegate@rtnet@@AEAAXAEBV?$IntrusivePtr@VStreamSocket@rtnet@@@auf@@PEAUAsyncTag@4@@Z ?connectTCPHostAsync@rtnet@@YA?AV?$IntrusivePtr@VAsyncOperation@auf@@@auf@@PEBDHAEBV?$IntrusivePtr@VThreadPoolTransport@auf@@@3@AEBV?$IntrusivePtr@VIStreamSocketDelegate@rtnet@@@3@PEAUAsyncTag@3@AEBV?$IntrusivePtr@VStreamSocketOptions@rtnet@@@3@AEBV?$IntrusivePtr@VStreamSocketConnectOptions@rtnet@@@3@I@Z ?clearDelegate@StreamSocket@rtnet@@QEAAXXZ ?logFlush@auf@@YAXXZ

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlPcToFileHeader RtlCaptureContext RtlUnwindEx RtlVirtualUnwind

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId GetCurrentProcessId GetExitCodeThread TlsAlloc TlsSetValue GetCurrentProcess GetCurrentThread TerminateProcess TlsFree TlsGetValue

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent

api-ms-win-core-sysinfo-l1-1-0

GetSystemTime GetSystemTimeAsFileTime GetTickCount

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

api-ms-win-core-fibers-l1-1-0

FlsFree FlsGetValue FlsAlloc FlsSetValue

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-com-l1-1-0

StringFromGUID2 CoUninitialize CoInitializeEx

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime

api-ms-win-core-heap-l1-1-0

HeapDestroy HeapCreate HeapSize HeapFree HeapAlloc GetProcessHeap HeapSetInformation

api-ms-win-mm-time-l1-1-0

timeGetDevCaps timeBeginPeriod timeEndPeriod

api-ms-win-crt-convert-l1-1-0

wcstombs_s strtod strtol _ui64toa_s atol strtof _itoa_s mbstowcs_s

api-ms-win-crt-math-l1-1-0

sin log pow sinf atan2 cos floor ceilf expf roundf round logf cosf exp log10 fabs ceil sqrt ldexp powf frexp log10f sqrtf floorf

api-ms-win-crt-locale-l1-1-0

__pctype_func _unlock_locales localeconv _lock_locales ___lc_locale_name_func ___lc_codepage_func setlocale ___mb_cur_max_func

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS InitOnceExecuteOnce WakeConditionVariable

api-ms-win-core-localization-l1-2-0

LCMapStringEx

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/select.pyd

IMPHASH fc4f7d736924aa67a1bd7b7b80894df9
SHA256 8a9a103bc417dede9f6946d9033487c410937e1761d93c358c1600b82f0a711f
MD5 8472d39b9ee6051c961021d664c7447e
SHA1 b284e3566889359576d43e2e0e99d4acf068e4fb
SHA512 309f1ec491d9c39f4b319e7ce1abdedf11924301e4582d122e261e948705fb71a453fec34f63df9f9abe7f8cc2063a56cd2c2935418ab54be5596aadc2e90ad3
SSDEEP 768:neUeJhHq2GD9IVQGA5YiSyv3g+AMxkEdC:neUeJhK2GD9IVQGS7SyfgMxRC
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

e5:aa:bf:52:bc:8b:70:0e:12:14:40:48:2f:11:a6:ef:b6:a8:cb:90:e0:c8:90:48:fb:48:46:d3:13:15:21:f0

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

5360

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\select.pdb

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/common/linux/selenium-manager

SHA256 b53480279b2322ec7b57cdaaa4d828c699dddb6d60803cb30770f6ff59a74cbb
MD5 cb1a8281ef1ef6461f61e48647364c47
SHA1 965422e6d9f5db52de364f7515748a1e6ee9db75
SHA512 a896815b7f47eb80249e0e9fd045eb246ef8aa4e9590db2171a12736b8fab46395bae82629aa585a3f5b128931ef367519592a26097dcc844d34b30a1a57b0d2
SSDEEP 49152:J2y4j8+Z3+AoSmNduCoMpmtvlVQlFuOt2QgmY8uveqs8MI0QWTq/Cz8c0EIVOxvT:I9qSDAFTPgUuGqUF9JGVovpIP+h
MD5 SHA1 SHA512 SSDEEP

linux x64

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/common/macos/selenium-manager

SHA256 a8c0c55d1e58cb84c2ac691c469bb988181cc077cdded395093363fca455094e
MD5 fe0d9264fe2443732b5a168d514e4d1d
SHA1 e7f1ce3001a79b8e5c2d50a9d444a2bee20dbbcf
SHA512 9f63441b2bfe7ca25dc8d213c4c67a934b7c24575c31445af59fc2a84d78494a51bd0ee5c0db3704b89a2541259d059ae953f19f7c707a64999679248658c822
SSDEEP 98304:yBiFviSZoAFgWeXlj7VmsPkALdlhCT+qgLuTIbuTv1iNq+HBghpC+WTuTwuTp:GYvAdm8kmswrq+o08
MD5 SHA1 SHA512 SSDEEP

macos arch:arm64 arch:x64

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/common/mutation-listener.js

SHA256 2c2083c9a49f65c510d68d3620a57d4dfedc8dc0fcc32524c1ccb11c6329ea07
MD5 81f59e36bde07e051c3cb92a4986b327
SHA1 676e0a28a5a1353e89469acaad1b08adc62c795d
SHA512 02562fc9ac369bc1994934b371db8d550638430cbc7f7729dd7b3a95e90f4e53a205a62318803d021041de362b0ed47752ad910cbdc742bef6645a20aa96a1fa
MD5 SHA1 SHA512

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/common/windows/selenium-manager.exe

IMPHASH 0173ee78d12a1737db5da04608e6742e
SHA256 070cfa94ac3edd88fa3e467f8e929f93551655a7dff4ad476737de023c2b037f
MD5 316c80ee5504617e7a02ecc21903004c
SHA1 fc13979a7efb9df0af6a778eb610a5d2e7aeaba7
SHA512 f913b34d8f1f5c9d53167ebc043a41bb693cc9ffde6e3fd1636b5757b616a20efb84609f8c7656d01631dca33586997560810a66daae0fd5d8785b115dfe003a
SSDEEP 49152:TSVn4XYrs3jzqZJAxTmmYRru8QqiWKDokAZH1QlfhknKhI9QgCxiq/:TSiIrszzgKxan7QqW4QwnKa
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

2506340

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

selenium_manager.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

advapi32

SystemFunction036 RegOpenKeyExW RegQueryValueExW RegCloseKey

kernel32

GetConsoleOutputCP HeapSize GetFileSizeEx DecodePointer FlushFileBuffers CreateSymbolicLinkW CloseHandle SwitchToThread GetCommandLineW AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread HeapFree HeapReAlloc GetConsoleMode SetConsoleMode GetLastError GetConsoleScreenBufferInfo SetConsoleTextAttribute lstrlenW SetFileTime GetQueuedCompletionStatusEx CreateIoCompletionPort SetFileCompletionNotificationModes GetFileInformationByHandle SetLastError FindClose WaitForMultipleObjects GetOverlappedResult WaitForSingleObject GetExitCodeProcess CopyFileExW SetHandleInformation GetStdHandle MultiByteToWideChar WriteConsoleW GetModuleHandleA GetProcAddress QueryPerformanceFrequency GetModuleHandleW FormatMessageW GetCurrentDirectoryW ReleaseMutex WaitForSingleObjectEx LoadLibraryA GetCurrentProcess GetCurrentProcessId CreateMutexA WideCharToMultiByte RtlCaptureContext GetEnvironmentVariableW GetTempPathW GetModuleFileNameW CreateFileW SetFileInformationByHandle GetFileInformationByHandleEx GetFullPathNameW GetFinalPathNameByHandleW SetFilePointerEx FindNextFileW CreateDirectoryW FindFirstFileW GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW GetFileAttributesW DuplicateHandle InitializeProcThreadAttributeList UpdateProcThreadAttribute DeleteProcThreadAttributeList CreateNamedPipeW CreateThread ReadFileEx SleepEx WriteFileEx CreateEventW CancelIo ReadFile ExitProcess QueryPerformanceCounter GetSystemTimePreciseAsFileTime HeapAlloc GetProcessHeap DeleteFileW MoveFileExW GetFileType CreateHardLinkW SetFileAttributesW PostQueuedCompletionStatus GetSystemInfo GetBinaryTypeW GlobalFree GlobalAlloc LocalFree LCMapStringW CompareStringW GetStringTypeW SetStdHandle SetEnvironmentVariableW GetCPInfo GetOEMCP GetACP IsValidCodePage FindFirstFileExW OutputDebugStringW GetCommandLineA WriteFile GetModuleHandleExW RaiseException LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

ws2_32

shutdown WSASend send WSAIoctl bind WSASocketW getaddrinfo freeaddrinfo getsockname WSAGetLastError getpeername ioctlsocket connect setsockopt WSAStartup getsockopt closesocket WSACleanup recv

ntdll

RtlNtStatusToDosError NtReadFile NtWriteFile NtDeviceIoControlFile NtCreateFile NtCancelIoFileEx

bcrypt

BCryptGenRandom

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/firefox/webdriver_prefs.json

SHA256 946add298a5e2346e3d53d1cbe8ad7c33e4994130511f6d8b79268be50b7a34c
MD5 648d3dababb0c714ee9a2d4a8fa4e39f
SHA1 762ac0a8d883c8c05059f1815a35f6b55464b7c2
SHA512 51b2ed36c8bb61eba99406492b2f6928db0db413a8f60e30fdab74d689247b8c83f0e790d8f6aee370e0f2e27fd565f4a87608cdc547c752514f1476e6dc89aa
MD5 SHA1 SHA512

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/remote/findElements.js

SHA256 8c0a5491732b9dae73a7cc5a07057f7ff7d184adb39b1f5c3b465f9e74176ebd
MD5 518147e422818bc640463bd7c2ea6727
SHA1 125d771e1598e129c819747aa0751a52ccb5a88a
SHA512 f11b0cc0350a356bac73370befbccfe5cac7dd67db43b242c625e053554804269e84201314c385b3431f8316cdc823c7a990836f38c306946ab3910713c84081
SSDEEP 1536:AXJFPWr+DEqXMn9XM3UkGdEMT8TZZ/6qSsdbj3SYKlnJ+S/Bf:ITU7dW6qhbrXS/Z
MD5 SHA1 SHA512 SSDEEP

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/remote/getAttribute.js

SHA256 6be9cfb504c9e0275b10a777e132aba95929f4596370a286d03d5ba9d5c9b332
MD5 b5aa6e9abbcbdba5296da6ea9f2d8bcf
SHA1 9a57e4b10cb2aded42968cbddbaf5799a1bbab8e
SHA512 8100b29a564620b51a99d3ce67d81ae8a088e493866d61836989c1d1d3fbbf8eaa067ebb9683974cc0b9878c875a02185308db606865ad3cfb4819f34e861619
SSDEEP 96:pSRH16yveW8EDrQN3N72l17l0qoIeqlr/ygKStiZMxzWJ2ssKPhBX54UctJOJK:pSRH16yvfgN3NW1DoI2PStzaJzsKPf8V
MD5 SHA1 SHA512 SSDEEP

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/selenium/webdriver/remote/isDisplayed.js

SHA256 baf99996fcd3e1f46a700b8b69fc3714e0e83f963506b822d78e62ab5fb48470
MD5 1a6ac8908afecf62f5d7802c483b4058
SHA1 5a92db43399d36621a0789e4f57d9e9fcf52f3b1
SHA512 3b41cba5b98960965dbb14c5aab15d6af3ccec5e073da4ac484752ee9919c07d78eec3fa3aba3d526aaac5c8bb6df03be8fedaa031abe0fa17fad97aa7bbf55e
SSDEEP 384:mSTsGtSMMC6tR69PEMzX5iNTLWo5hHaEhgNTOp77X93zS+trehT/qT:mwn56tR+0cT/qT
MD5 SHA1 SHA512 SSDEEP

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/shell32.dll

IMPHASH 67b3d46dff3f1ae26455345bdd85717c
SHA256 04d4f404653224f2c641bdf8685c005ff0827dcab83b9bdeab488bda1006fd91
MD5 fa030fc5256bfedbdd3c877a7db53735
SHA1 8f355ce10d7b8d6c68ba948e22573da28a27f371
SHA512 77ff9839673c8cb31b86218ad12817288ad803a37b0fa328d0da1c4dbe4c5e83d83a0932a48b687407be3f8f5079d8490aa5beb3c8326be8598b407f41ea4dc3
SSDEEP 49152:1uMmvxpm+D1dF4CCmGhh1JAhlfXlDt/6nwwS1YsS90Io/KgvaU/aZrm03B2Ol2rk:Xm/f4T6lhaB9BUzmQxlySU5YSJkqE4wg
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Digest

ad:13:eb:4f:69:0e:9e:00:8e:8e:cc:cd:70:08:a9:a8:55:77:02:af:f3:92:ea:58:92:59:1b:61:5d:8d:d1:5e

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

1127008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

shell32.pdb

msvcp_win

?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?__ExceptionPtrCreate@@YAXPEAX@Z ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?_XGetLastError@std@@YAXXZ ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z _Cnd_wait ??0task_continuation_context@Concurrency@@AEAA@XZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ _Cnd_broadcast _Mtx_unlock ?__ExceptionPtrDestroy@@YAXPEAX@Z ?_Throw_C_error@std@@YAXH@Z _Mtx_lock ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ _Mtx_init_in_situ _Mtx_destroy_in_situ _Cnd_destroy_in_situ _Cnd_init_in_situ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Xbad_function_call@std@@YAXXZ ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ ?width@ios_base@std@@QEAA_J_J@Z ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ?_Xlength_error@std@@YAXPEBD@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z

api-ms-win-crt-string-l1-1-0

wcspbrk wcsspn wcscmp wcscspn wcsncmp memset

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o_iswspace _o_log _o_malloc _o_pow _o_qsort _o_rand _o_realloc _o_sqrt _o_srand _o_strncpy_s _o_terminate _o_toupper _o_towlower _o_wcscat_s _o_wcscpy_s _o_wcsncpy_s _o_wcstok_s _o_wcstol _o_wcstoul strchr wcsrchr __CxxFrameHandler3 memmove _o__ui64tow_s _o__strnicmp _o_isdigit _o_isalpha _o_free _o__set_errno _o__seh_filter_dll _o__resetstkoflw _o__register_onexit_function _o_floor _o__purecall _o_ceil _o_calloc _o_bsearch _o__wtoi _o__itow _o__wcsupr _o__wcstoui64 _o__wcsnicmp _o__wcsicmp _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__get_errno _o__execute_onexit_table _o__errno _o__difftime64 _o__crt_atexit _o__configure_narrow_argv _o__cexit _o___stdio_common_vswscanf _o___stdio_common_vswprintf _o___stdio_common_vsprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy __std_terminate __CxxFrameHandler4 wcschr wcsstr __C_specific_handler _CxxThrowException memcmp memcpy

api-ms-win-core-heap-l2-1-0

LocalReAlloc GlobalFree LocalAlloc GlobalAlloc LocalFree

api-ms-win-core-registry-l1-1-0

RegOpenKeyExA RegOpenCurrentUser RegGetKeySecurity RegQueryInfoKeyA RegDeleteTreeW RegEnumKeyExW RegDeleteValueW RegGetValueW RegQueryValueExA RegDeleteKeyExW RegCreateKeyExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegEnumValueW RegNotifyChangeKeyValue RegQueryInfoKeyW RegSetValueExW

api-ms-win-core-libraryloader-l1-2-0

SizeofResource EnumResourceNamesExW FreeLibrary LoadResource LockResource LoadStringA FreeResource LoadLibraryExW LoadLibraryExA GetModuleFileNameW GetModuleFileNameA GetModuleHandleExW FindStringOrdinal GetProcAddress GetModuleHandleW LoadStringW FindResourceExW DisableThreadLibraryCalls

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64 GetSystemTimeAsFileTime GetSystemInfo GetSystemWindowsDirectoryW GetComputerNameExW GetTickCount GetLocalTime GetSystemTime GlobalMemoryStatusEx GetVersionExW GetWindowsDirectoryW GetSystemDirectoryW

api-ms-win-core-memory-l1-1-0

VirtualProtect MapViewOfFile OpenFileMappingW VirtualAlloc VirtualQuery WriteProcessMemory CreateFileMappingW ReadProcessMemory UnmapViewOfFile VirtualFree

api-ms-win-core-file-l1-1-0

SetFilePointerEx GetLogicalDrives GetVolumeInformationW DefineDosDeviceW FlushFileBuffers SetFileInformationByHandle GetFileInformationByHandle GetFileAttributesExW FindFirstFileExW GetFileTime GetDriveTypeW FileTimeToLocalFileTime GetFileSizeEx FindFirstFileW GetTempFileNameW FindNextFileW GetVolumePathNameW FindClose LocalFileTimeToFileTime ReadFile GetShortPathNameW QueryDosDeviceW CompareFileTime GetFileSize CreateFileW SetFileTime GetFinalPathNameByHandleW FindVolumeClose GetFullPathNameW GetFileAttributesW WriteFile FindNextVolumeW CreateDirectoryW GetLongPathNameW FindFirstVolumeW RemoveDirectoryW SetFileAttributesW GetDiskFreeSpaceExW SetFilePointer SetEndOfFile DeleteFileW GetDiskFreeSpaceW

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW FindResourceW

api-ms-win-core-string-l1-1-0

WideCharToMultiByte MultiByteToWideChar GetStringTypeW GetStringTypeExW CompareStringW CompareStringEx CompareStringOrdinal

api-ms-win-core-synch-l1-1-0

InitializeSRWLock AcquireSRWLockExclusive WaitForSingleObjectEx ReleaseSRWLockExclusive ReleaseMutex OpenSemaphoreW WaitForMultipleObjectsEx CreateSemaphoreExW CreateWaitableTimerExW AcquireSRWLockShared CreateEventExW OpenEventW CreateEventW WaitForSingleObject CreateMutexW OpenMutexW SetEvent ReleaseSRWLockShared DeleteCriticalSection TryAcquireSRWLockShared TryEnterCriticalSection InitializeCriticalSectionEx ReleaseSemaphore SetWaitableTimer TryAcquireSRWLockExclusive ResetEvent CreateMutexExW InitializeCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection

api-ms-win-core-errorhandling-l1-1-0

SetErrorMode GetLastError SetUnhandledExceptionFilter SetLastError RaiseException UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetProcessId CreateProcessW ExitProcess GetCurrentProcessId GetThreadId SetPriorityClass CreateThread TlsFree GetExitCodeThread ResumeThread TlsAlloc ProcessIdToSessionId SetThreadToken GetCurrentProcess OpenProcessToken TlsGetValue GetThreadPriority SetThreadPriority GetCurrentThread TlsSetValue OpenThreadToken TerminateProcess GetExitCodeProcess OpenThread GetCurrentThreadId CreateProcessAsUserW

api-ms-win-core-string-l2-1-0

CharLowerW CharUpperBuffW CharPrevW CharNextW CharUpperW IsCharAlphaW CharLowerBuffW

api-ms-win-core-file-l2-1-0

MoveFileExW ReadDirectoryChangesW CreateHardLinkW CopyFile2 GetFileInformationByHandleEx ReplaceFileW

api-ms-win-core-processenvironment-l1-1-0

SearchPathW GetCommandLineW SetEnvironmentVariableW SetCurrentDirectoryW GetEnvironmentVariableW ExpandEnvironmentStringsA GetCurrentDirectoryW ExpandEnvironmentStringsW

api-ms-win-security-base-l1-1-0

DuplicateTokenEx GetSecurityDescriptorOwner ImpersonateSelf RevertToSelf IsValidSid GetSidIdentifierAuthority GetSecurityDescriptorGroup GetSecurityDescriptorDacl GetSecurityDescriptorSacl GetSidSubAuthorityCount FreeSid InitializeSid GetSidSubAuthority GetSecurityDescriptorControl DuplicateToken SetFileSecurityW SetSecurityDescriptorOwner AllocateAndInitializeSid AddAccessDeniedAceEx InitializeAcl AddAccessAllowedAceEx AddAce AdjustTokenPrivileges AccessCheck GetFileSecurityW CheckTokenMembership GetAce CreateWellKnownSid GetAclInformation DeleteAce GetSidLengthRequired CopySid GetLengthSid EqualSid GetTokenInformation SetTokenInformation IsWellKnownSid

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce InitOnceComplete InitOnceBeginInitialize Sleep

api-ms-win-core-heap-l1-1-0

HeapFree HeapAlloc GetProcessHeap HeapReAlloc HeapDestroy

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-localization-l1-2-0

GetUserDefaultLangID FormatMessageW GetThreadUILanguage FindNLSStringEx GetUserDefaultLCID VerLanguageNameW IsValidLocaleName GetLocaleInfoW GetSystemPreferredUILanguages ResolveLocaleName GetSystemDefaultLCID IsDBCSLeadByte GetCPInfo FindNLSString GetACP GetUserPreferredUILanguages LCMapStringW GetThreadLocale LocaleNameToLCID GetSystemDefaultLangID LCMapStringEx

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformationForYear SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime FileTimeToSystemTime SystemTimeToFileTime

api-ms-win-core-threadpool-l1-2-0

SubmitThreadpoolWork WaitForThreadpoolWaitCallbacks CreateThreadpoolWork CreateThreadpoolWait CloseThreadpoolWait SetThreadpoolWait WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolTimer CloseThreadpoolWork

api-ms-win-core-processthreads-l1-1-1

FlushInstructionCache IsProcessorFeaturePresent OpenProcess

api-ms-win-core-psapi-l1-1-0

K32GetProcessImageFileNameW QueryFullProcessImageNameW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec PathCchCombineEx PathCchCanonicalize PathCchAddBackslashEx PathCchAddExtension PathCchSkipRoot PathCchCombine PathCchRenameExtension PathCchRemoveBackslash PathAllocCombine PathCchStripToRoot PathCchAppendEx PathCchAddBackslash PathAllocCanonicalize PathCchRemoveExtension PathCchStripPrefix PathIsUNCEx PathCchAppend

api-ms-win-core-file-l1-2-0

GetVolumePathNamesForVolumeNameW GetVolumeNameForVolumeMountPointW GetTempPathW

api-ms-win-core-io-l1-1-0

GetOverlappedResult DeviceIoControl GetQueuedCompletionStatus CreateIoCompletionPort CancelIoEx

api-ms-win-core-datetime-l1-1-0

GetDateFormatW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW RegSetKeyValueW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-file-l1-2-1

GetCompressedFileSizeW

api-ms-win-core-wow64-l1-1-1

IsWow64Process2 GetSystemWow64DirectoryW Wow64SetThreadDefaultGuestMachine

api-ms-win-core-wow64-l1-1-0

Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-localization-l2-1-0

GetNumberFormatEx

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW VerQueryValueW GetFileVersionInfoExW

api-ms-win-core-sysinfo-l1-2-3

GetIntegratedDisplaySize

api-ms-win-core-memory-l1-1-1

PrefetchVirtualMemory

api-ms-win-eventing-provider-l1-1-0

EventProviderEnabled EventSetInformation EventRegister EventUnregister EventWriteTransfer

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceLoggerHandle GetTraceEnableFlags UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableLevel

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCSpnW StrCpyNXW StrCmpLogicalW StrCmpNICW StrDupA StrTrimW StrDupW StrToIntExW StrCmpIW StrCmpICA QISearch StrCmpNCW StrPBrkW StrCmpCW StrToIntW StrCmpICW StrStrW StrStrIA StrStrA StrRStrIW StrRStrIA StrRChrW StrRChrIW StrRChrIA StrRChrA StrCmpNW StrCmpNIW StrCmpNIA StrCmpNA StrChrW StrChrIW StrChrIA StrChrA StrCmpW StrStrIW StrSpnW StrToIntA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW lstrlenA lstrlenW lstrcmpiA lstrcmpA lstrcmpW

api-ms-win-core-stringansi-l1-1-0

CharNextA CharPrevA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalUnlock GlobalReAlloc LocalSize GlobalFlags GlobalSize

api-ms-win-core-localization-obsolete-l1-2-0

GetSystemDefaultUILanguage GetNumberFormatW GetUserDefaultUILanguage EnumUILanguagesW

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW GetProfileSectionW

api-ms-win-core-atoms-l1-1-0

GlobalGetAtomNameW GlobalAddAtomW GetAtomNameW GlobalDeleteAtom FindAtomW

api-ms-win-core-shlwapi-legacy-l1-1-0

PathParseIconLocationW PathRemoveExtensionW PathFindFileNameW PathQuoteSpacesW PathUnquoteSpacesW PathIsUNCW PathAppendW PathGetDriveNumberW PathSkipRootW PathAddBackslashW PathCombineW PathIsUNCServerShareW PathIsUNCServerW PathUnExpandEnvStringsW PathFileExistsW PathRemoveFileSpecW PathMatchSpecW PathStripToRootW PathIsRootW PathIsRelativeW PathFindNextComponentW PathMatchSpecExW PathRemoveBlanksW PathGetArgsW PathFindExtensionW PathStripPathW PathIsValidCharW PathIsFileSpecW PathGetCharTypeW SHExpandEnvironmentStringsW SHExpandEnvironmentStringsA PathRemoveBackslashW PathRemoveFileSpecA PathIsRootA PathCommonPrefixW PathAppendA PathIsSameRootW IsCharSpaceW PathIsPrefixW

api-ms-win-core-kernel32-legacy-l1-1-0

GetSystemPowerStatus MulDiv GetShortPathNameA SetVolumeLabelW UnregisterWait RegisterWaitForSingleObject WTSGetActiveConsoleSessionId GetComputerNameW

api-ms-win-core-kernel32-legacy-l1-1-1

PowerSetRequest PowerCreateRequest PowerClearRequest

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx CreateTimerQueueTimer DeleteTimerQueueTimer QueueUserWorkItem

api-ms-win-core-kernel32-legacy-l1-1-2

GetBinaryTypeW

api-ms-win-core-url-l1-1-0

UrlCompareW UrlUnescapeW UrlUnescapeA UrlEscapeW ParseURLW PathCreateFromUrlW UrlIsW PathIsURLW UrlApplySchemeW UrlGetPartW HashData UrlFixupW UrlCanonicalizeW UrlCreateFromPathW PathCreateFromUrlAlloc

api-ms-win-core-registryuserspecific-l1-1-0

SHRegQueryUSValueW SHRegCloseUSKey SHRegOpenUSKeyA SHRegGetUSValueW SHRegOpenUSKeyW SHRegEnumUSKeyW SHRegGetBoolUSValueW

api-ms-win-core-kernel32-private-l1-1-0

CheckElevationEnabled CheckElevation

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-sidebyside-l1-1-0

ReleaseActCtx ActivateActCtx DeactivateActCtx QueryActCtxW CreateActCtxW

api-ms-win-shell-shellcom-l1-1-0

SHCoCreateInstance

kernelbase

GetPackageFullName GetStateFolder GetPackagesByPackageFamily GetCurrentPackageInfo CloseState OpenState ExtensionProgIdExists GetExtensionProgIds ParseApplicationUserModelId PackageNameAndPublisherIdFromFamilyName GetEffectivePackageStatusForUser NotifyRedirectedStringChange GetStagedPackagePathByFullName2 IsMrtResourceRedirectionEnabled OpenPackageInfoByFullName GetPackageInfo ClosePackageInfo GetSystemAppDataKey OpenStateExplicit

user32

DdeUninitialize DdeNameService DdeDisconnect DdeQueryStringW DdeFreeStringHandle DdeCreateStringHandleW DdeCreateDataHandle DdeGetLastError DdeGetData DdeQueryConvInfo WaitMessage LockWindowUpdate EnumDisplaySettingsW GetClassLongPtrW SetShellWindowEx EnumDisplayMonitors ord2707 CreateAcceleratorTableW GetMessageTime LoadBitmapW CheckRadioButton GetDlgItemInt SetDlgItemInt ClientToScreen IsRectEmpty SetParent WindowFromPoint GetSystemMenu PostThreadMessageW SetDialogDpiChangeBehavior IsDialogMessageW SetCapture ReleaseCapture GetCapture TrackPopupMenuEx MonitorFromRect GetClassInfoExW SetMenuInfo SetCoalescableTimer CallNextHookEx CallWindowProcW SetScrollPos ord2705 ShowScrollBar SetScrollInfo SetWindowRgn SetWindowsHookExW UnhookWindowsHookEx GetDialogBaseUnits GetLastInputInfo SystemParametersInfoA WinHelpW CreateWindowExW FindWindowExW RegisterWindowMessageA DrawTextExW ActivateKeyboardLayout AdjustWindowRectExForDpi SubtractRect CreateWindowIndirect SetLayeredWindowAttributes GetWindowDC GetPointerDevices SetRectEmpty DialogBoxParamW GetDpiForWindow BroadcastSystemMessageW SetThreadDpiAwarenessContext EnumChildWindows CloseClipboard SetClipboardData GetClipboardData OpenClipboard EnumPropsExW RedrawWindow IsWindowEnabled CloseDesktop OpenInputDesktop CreateWindowInBand GetDpiForSystem GetSystemMetricsForDpi EndDeferWindowPos BeginDeferWindowPos AdjustWindowRect GetDlgCtrlID SetDlgItemTextA SetShellChangeNotifyWindow GetShellChangeNotifyWindow GetShellWindow RegisterDeviceNotificationW UnregisterDeviceNotification SendMessageCallbackW MessageBoxW DeferWindowPos CopyAcceleratorTableW MoveWindow AttachThreadInput DefWindowProcA IsWindowUnicode RegisterShellHookWindow DeregisterShellHookWindow SetTaskmanWindow GetTaskmanWindow GetClassInfoW GetWindowTextLengthW CopyImage MapDialogRect SetActiveWindow GetWindowBand DrawIconEx IsProcessDPIAware GetProcessDefaultLayout AllowSetForegroundWindow IsSETEnabled EqualRect IntersectRect MonitorFromWindow GetAsyncKeyState ord2521 UpdateLayeredWindow IsChild UnionRect EnumDisplayDevicesW SetWindowCompositionAttribute RegisterClassExW GetScrollInfo SendMessageTimeoutW IsIconic CopyIcon GetPropW RemovePropW SetPropW UnpackDDElParam IsMenu ModifyMenuW GetMenuState CountClipboardFormats IsHungAppWindow GetClipboardOwner GetWindowPlacement MsgWaitForMultipleObjects ExitWindowsEx LoadImageW SetRect CopyRect GetMonitorInfoW MonitorFromPoint GetUserObjectInformationW GetThreadDesktop GetProcessWindowStation ChangeWindowMessageFilterEx RegisterWindowMessageW GetMessagePos GetKeyboardLayout OffsetRect SetClipboardViewer TranslateAcceleratorW CreateMenu InsertMenuW EndMenu DestroyAcceleratorTable GetMessageExtraInfo SetGestureConfig CloseGestureInfoHandle GetGestureInfo ChangeClipboardChain MapWindowPoints GetMenuItemID EnableMenuItem InsertMenuItemW GetFocus CheckMenuItem CheckMenuRadioItem AppendMenuW GetDoubleClickTime MessageBeep TrackPopupMenu SetMessageExtraInfo SetMenuDefaultItem SetMenuItemInfoW LoadAcceleratorsW PtInRect GetMenuStringW GetDesktopWindow GetForegroundWindow ReleaseDC GetDC NotifyWinEvent SendNotifyMessageW SystemParametersInfoW GetMenuItemInfoW GetMenuItemCount EnumWindows IsWindow WaitForInputIdle GetWindowThreadProcessId GetMenuDefaultItem GetLastActivePopup SwitchToThisWindow GetCursorPos RegisterClipboardFormatW GetWindow FindWindowW GetClassNameW GetAncestor EnableWindow MsgWaitForMultipleObjectsEx PeekMessageW PostQuitMessage SetForegroundWindow ShutdownBlockReasonDestroy ShutdownBlockReasonCreate LoadMenuW GetSubMenu RemoveMenu GetParent IsDlgButtonChecked CheckDlgButton DeleteMenu DestroyMenu CreatePopupMenu PostMessageW SetProcessDPIAware DispatchMessageW TranslateMessage GetMessageW SetFocus IsWindowVisible DrawEdge GetSysColorBrush FillRect EndPaint BeginPaint GetUpdateRect TrackMouseEvent UpdateWindow GetWindowRect DefWindowProcW RegisterClassW KillTimer SetTimer GetKeyState InflateRect AdjustWindowRectEx DestroyWindow SetWindowLongW GetWindowLongW DrawFocusRect DrawIcon GetSysColor EndDialog GetWindowLongPtrW SetWindowLongPtrW GetWindowTextW SetWindowPos GetClientRect GetCursor SetWindowTextW GetDlgItem InvalidateRect LoadCursorW SetCursor SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW ScreenToClient SendMessageW LookupIconIdFromDirectory CreateIconIndirect GetIconInfo DestroyIcon PrivateExtractIconsW LoadIconW GetSystemMetrics DdeInitializeW wsprintfW SetSysColors DisplayConfigGetDeviceInfo SystemParametersInfoForDpi SetShellWindow SetWinEventHook UnhookWinEvent IsWinEventHookInstalled GetMenuInfo EmptyClipboard GetDisplayConfigBufferSizes QueryDisplayConfig AnimateWindow AreDpiAwarenessContextsEqual DrawTextW ShowWindow HideCaret ShowCaret LockSetForegroundWindow SetMenu ChildWindowFromPoint CreateDialogParamW GetClassLongW RegisterPowerSettingNotification UnregisterPowerSettingNotification GetCurrentInputMessageSource GetWindowDpiAwarenessContext

ntdll

RtlFlushHeaps RtlAreLongPathsEnabled RtlQueryResourcePolicy EtwEventWriteTransfer RtlInitUnicodeString RtlPrefixString NtQueryInformationFile RtlNtStatusToDosError NtCreateFile NtClose NtFsControlFile RtlUnicodeStringToOemString NtSetInformationFile NtOpenFile RtlDosPathNameToNtPathName_U_WithStatus RtlFreeHeap NtQueryVolumeInformationFile RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlReleaseRelativeName RtlFreeUnicodeString RtlInitializeResource RtlAcquireResourceExclusive RtlReleaseResource RtlDeleteResource RtlGetLastNtStatus RtlInitUnicodeStringEx RtlQueryEnvironmentVariable_U RtlSetEnvironmentVariable RtlExpandEnvironmentStrings_U RtlCreateEnvironment RtlDestroyEnvironment NtOpenThreadToken EtwLogTraceEvent NtQuerySystemInformationEx RtlCompareUnicodeString RtlNtStatusToDosErrorNoTeb RtlAllocateHeap NtSetInformationToken RtlQueryWnfStateData RtlGetNtSystemRoot RtlQueryRegistryValuesEx RtlCheckRegistryKey NtQuerySystemInformation NtQueryObject RtlIsPartialPlaceholder NtQueryKey NtSetSecurityObject NtQuerySecurityObject RtlDosPathNameToNtPathName_U ShipAssert RtlIsNonEmptyDirectoryReparsePointAllowed ZwQueryWnfStateData RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfNotificationWaitForCompletion RtlRandomEx RtlCreateUnicodeString RtlPublishWnfStateData NtQueryWnfStateData RtlCreateServiceSid RtlLengthRequiredSid RtlGetNtProductType EtwUnregisterTraceGuids EtwRegisterTraceGuidsW EtwGetTraceEnableFlags EtwGetTraceEnableLevel EtwGetTraceLoggerHandle NtPowerInformation NtQueryInformationProcess NtQueryAttributesFile RtlDosPathNameToRelativeNtPathName_U NtOpenProcessToken NtQueryInformationToken RtlDllShutdownInProgress RtlGetDeviceFamilyInfoEnum WinSqmAddToStreamEx NtQueryInformationThread NtSetCachedSigningLevel NtCompareSigningLevels NtGetCachedSigningLevel RtlMapGenericMask WinSqmSetDWORD WinSqmIncrementDWORD WinSqmAddToStream EtwTraceMessage EtwEventWrite EtwEventEnabled EtwEventActivityIdControl EtwEventSetInformation EtwEventRegister EtwEventUnregister RtlSetCurrentEnvironment

gdi32

DeleteObject SetBkColor GetLayout SetLayout GetStockObject SetBkMode SelectObject SetTextColor GetDeviceCaps ExcludeClipRect GetTextExtentPoint32A CreateFontW GetPixel GetDIBColorTable SetDIBits ExtTextOutW GetObjectType GetWindowOrgEx GetRegionData GetRgnBox CombineRgn SaveDC RestoreDC CreateRectRgnIndirect SetDCBrushColor PlgBlt ExtSelectClipRgn GetViewportOrgEx DeleteMetaFile PlayMetaFile SetMetaFileBitsEx LPtoDP SelectClipRgn IntersectClipRect GetClipRgn CreateRectRgn GetClipBox StretchDIBits SetViewportExtEx SetViewportOrgEx SetWindowExtEx SetMapMode GetTextAlign CreatePolygonRgn LineTo MoveToEx PatBlt SetStretchBltMode CreateSolidBrush OffsetWindowOrgEx SetTextAlign GetTextExtentPoint32W SetWindowOrgEx GetTextMetricsW Rectangle CreatePen GetObjectW GetTextExtentPointW CreateFontIndirectW CreateDIBSection CreateCompatibleDC GetCurrentObject DeleteDC CreateDCW GdiAlphaBlend BitBlt CreateCompatibleBitmap GetTextColor GdiTransparentBlt StretchBlt GetDIBits TextOutA CreateBitmap

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-core-job-l2-1-0

AssignProcessToJobObject SetInformationJobObject CreateJobObjectW

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-math-l1-1-0

sqrtf ceilf expf floorf logf

AppCompat_RunDLLW AssocCreateForClasses AssocElemCreateForKey AssocGetDetailsOfPropKey CDefFolderMenu_Create2 CIDLData_CreateFromIDArray CStorageItem_GetValidatedStorageItemObject CallFileCopyHook CheckEscapesW CommandLineToArgvW Control_RunDLL Control_RunDLLA Control_RunDLLAsUserW Control_RunDLLW CreateStorageItemFromPath_FullTrustCaller CreateStorageItemFromPath_FullTrustCaller_ForPackage CreateStorageItemFromPath_PartialTrustCaller CreateStorageItemFromShellItem_FullTrustCaller CreateStorageItemFromShellItem_FullTrustCaller_ForPackage CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage DAD_AutoScroll DAD_DragEnterEx DAD_DragEnterEx2 DAD_DragLeave DAD_DragMove DAD_SetDragImage DAD_ShowDragImage DllCanUnloadNow DllGetActivationFactory DllGetClassObject DllGetVersion DllInstall DllRegisterServer DllUnregisterServer DoEnvironmentSubstA DoEnvironmentSubstW DragAcceptFiles DragFinish DragQueryFile DragQueryFileA DragQueryFileAorW DragQueryFileW DragQueryPoint DriveType DuplicateIcon ExtractAssociatedIconA ExtractAssociatedIconExA ExtractAssociatedIconExW ExtractAssociatedIconW ExtractIconA ExtractIconEx ExtractIconExA ExtractIconExW ExtractIconW FindExecutableA FindExecutableW FreeIconList GetCurrentProcessExplicitAppUserModelID GetFileNameFromBrowse GetSystemPersistedStorageItemList ILAppendID ILClone ILCloneFirst ILCombine ILCreateFromPath ILCreateFromPathA ILCreateFromPathW ILFindChild ILFindLastID ILFree ILGetNext ILGetSize ILIsEqual ILIsParent ILLoadFromStreamEx ILRemoveLastID ILSaveToStream InitNetworkAddressControl InternalExtractIconListA InternalExtractIconListW IsDesktopExplorerProcess IsLFNDrive IsLFNDriveA IsLFNDriveW IsNetDrive IsProcessAnExplorer IsUserAnAdmin LaunchMSHelp_RunDLLW OpenAs_RunDLL OpenAs_RunDLLA OpenAs_RunDLLW OpenRegStream Options_RunDLL Options_RunDLLA Options_RunDLLW PathCleanupSpec PathGetShortPath PathIsExe PathIsSlowA PathIsSlowW PathMakeUniqueName PathQualify PathResolve PathYetAnotherMakeUniqueName PickIconDlg PifMgr_CloseProperties PifMgr_GetProperties PifMgr_OpenProperties PifMgr_SetProperties PrepareDiscForBurnRunDllW PrintersGetCommand_RunDLL PrintersGetCommand_RunDLLA PrintersGetCommand_RunDLLW ReadCabinetState RealDriveType RealShellExecuteA RealShellExecuteExA RealShellExecuteExW RealShellExecuteW RegenerateUserEnvironment RestartDialog RestartDialogEx RunAsNewUser_RunDLLW SHAddDefaultPropertiesByExt SHAddFromPropSheetExtArray SHAddToRecentDocs SHAlloc SHAppBarMessage SHAssocEnumHandlers SHAssocEnumHandlersForProtocolByApplication SHBindToFolderIDListParent SHBindToFolderIDListParentEx SHBindToObject SHBindToParent SHBrowseForFolder SHBrowseForFolderA SHBrowseForFolderW SHCLSIDFromString SHChangeNotification_Lock SHChangeNotification_Unlock SHChangeNotify SHChangeNotifyDeregister SHChangeNotifyRegister SHChangeNotifyRegisterThread SHChangeNotifySuspendResume SHCloneSpecialIDList SHCoCreateInstance SHCoCreateInstanceWorker SHCreateAssociationRegistration SHCreateCategoryEnum SHCreateDataObject SHCreateDefaultContextMenu SHCreateDefaultExtractIcon SHCreateDefaultPropertiesOp SHCreateDirectory SHCreateDirectoryExA SHCreateDirectoryExW SHCreateDrvExtIcon SHCreateFileExtractIconW SHCreateItemFromIDList SHCreateItemFromParsingName SHCreateItemFromRelativeName SHCreateItemInKnownFolder SHCreateItemWithParent SHCreateLocalServerRunDll SHCreateProcessAsUserW SHCreatePropSheetExtArray SHCreateQueryCancelAutoPlayMoniker SHCreateShellFolderView SHCreateShellFolderViewEx SHCreateShellItem SHCreateShellItemArray SHCreateShellItemArrayFromDataObject SHCreateShellItemArrayFromIDLists SHCreateShellItemArrayFromShellItem SHCreateStdEnumFmtEtc SHDefExtractIconA SHDefExtractIconW SHDestroyPropSheetExtArray SHDoDragDrop SHELL32_AddToBackIconTable SHELL32_AddToFrontIconTable SHELL32_AreAllItemsAvailable SHELL32_CCommonPlacesFolder_CreateInstance SHELL32_CDBurn_CloseSession SHELL32_CDBurn_DriveSupportedForDataBurn SHELL32_CDBurn_Erase SHELL32_CDBurn_GetCDInfo SHELL32_CDBurn_GetLiveFSDiscInfo SHELL32_CDBurn_GetStagingPathOrNormalPath SHELL32_CDBurn_GetTaskInfo SHELL32_CDBurn_IsBlankDisc SHELL32_CDBurn_IsBlankDisc2 SHELL32_CDBurn_IsLiveFS SHELL32_CDBurn_OnDeviceChange SHELL32_CDBurn_OnEject SHELL32_CDBurn_OnMediaChange SHELL32_CDefFolderMenu_Create2 SHELL32_CDefFolderMenu_Create2Ex SHELL32_CDefFolderMenu_MergeMenu SHELL32_CDrivesContextMenu_Create SHELL32_CDrivesDropTarget_Create SHELL32_CDrives_CreateSFVCB SHELL32_CFSDropTarget_CreateInstance SHELL32_CFSFolderCallback_Create SHELL32_CFillPropertiesTask_CreateInstance SHELL32_CLibraryDropTarget_CreateInstance SHELL32_CLocationContextMenu_Create SHELL32_CLocationFolderUI_CreateInstance SHELL32_CMountPoint_DoAutorun SHELL32_CMountPoint_DoAutorunPrompt SHELL32_CMountPoint_IsAutoRunDriveAndEnabledByPolicy SHELL32_CMountPoint_ProcessAutoRunFile SHELL32_CMountPoint_WantAutorunUI SHELL32_CMountPoint_WantAutorunUIGetReady SHELL32_CNetFolderUI_CreateInstance SHELL32_CPL_CategoryIdArrayFromVariant SHELL32_CPL_IsLegacyCanonicalNameListedUnderKey SHELL32_CPL_ModifyWowDisplayName SHELL32_CRecentDocsContextMenu_CreateInstance SHELL32_CTransferConfirmation_CreateInstance SHELL32_CallFileCopyHooks SHELL32_CanDisplayWin8CopyDialog SHELL32_CloseAutoplayPrompt SHELL32_CommandLineFromMsiDescriptor SHELL32_CopySecondaryTiles SHELL32_CreateConfirmationInterrupt SHELL32_CreateConflictInterrupt SHELL32_CreateDefaultOperationDataProvider SHELL32_CreateFileFolderContextMenu SHELL32_CreateLinkInfoW SHELL32_CreateQosRecorder SHELL32_CreateSharePointView SHELL32_Create_IEnumUICommand SHELL32_DestroyLinkInfo SHELL32_EncryptDirectory SHELL32_EncryptedFileKeyInfo SHELL32_EnumCommonTasks SHELL32_FreeEncryptedFileKeyInfo SHELL32_GenerateAppID SHELL32_GetAppIDRoot SHELL32_GetCommandProviderForFolderType SHELL32_GetDPIAdjustedLogicalSize SHELL32_GetDiskCleanupPath SHELL32_GetFileNameFromBrowse SHELL32_GetIconOverlayManager SHELL32_GetLinkInfoData SHELL32_GetRatingBucket SHELL32_GetSqmableFileName SHELL32_GetThumbnailAdornerFromFactory SHELL32_GetThumbnailAdornerFromFactory2 SHELL32_HandleUnrecognizedFileSystem SHELL32_IconCacheCreate SHELL32_IconCacheDestroy SHELL32_IconCacheHandleAssociationChanged SHELL32_IconCacheRestore SHELL32_IconCache_AboutToExtractIcons SHELL32_IconCache_DoneExtractingIcons SHELL32_IconCache_ExpandEnvAndSearchPath SHELL32_IconCache_RememberRecentlyExtractedIconsW SHELL32_IconOverlayManagerInit SHELL32_IsGetKeyboardLayoutPresent SHELL32_IsSystemUpgradeInProgress SHELL32_IsValidLinkInfo SHELL32_LegacyEnumSpecialTasksByType SHELL32_LegacyEnumTasks SHELL32_LookupBackIconIndex SHELL32_LookupFrontIconIndex SHELL32_NormalizeRating SHELL32_NotifyLinkTrackingServiceOfMove SHELL32_PifMgr_CloseProperties SHELL32_PifMgr_GetProperties SHELL32_PifMgr_OpenProperties SHELL32_PifMgr_SetProperties SHELL32_Printers_CreateBindInfo SHELL32_Printjob_GetPidl SHELL32_PurgeSystemIcon SHELL32_RefreshOverlayImages SHELL32_ResolveLinkInfoW SHELL32_SHAddSparseIcon SHELL32_SHCreateByValueOperationInterrupt SHELL32_SHCreateDefaultContextMenu SHELL32_SHCreateLocalServer SHELL32_SHCreateShellFolderView SHELL32_SHDuplicateEncryptionInfoFile SHELL32_SHEncryptFile SHELL32_SHFormatDriveAsync SHELL32_SHGetThreadUndoManager SHELL32_SHGetUserNameW SHELL32_SHIsVirtualDevice SHELL32_SHLaunchPropSheet SHELL32_SHLogILFromFSIL SHELL32_SHOpenWithDialog SHELL32_SHStartNetConnectionDialogW SHELL32_SHUICommandFromGUID SHELL32_SendToMenu_InvokeTargetedCommand SHELL32_SendToMenu_VerifyTargetedCommand SHELL32_ShowHideIconOnlyOnDesktop SHELL32_SimpleRatingToFilterCondition SHELL32_StampIconForFile SHELL32_SuspendUndo SHELL32_TryVirtualDiscImageDriveEject SHELL32_VerifySaferTrust SHEmptyRecycleBinA SHEmptyRecycleBinW SHEnableServiceObject SHEnumerateUnreadMailAccountsW SHEvaluateSystemCommandTemplate SHExecuteErrorMessageBox SHExtractIconsW SHFileOperation SHFileOperationA SHFileOperationW SHFindFiles SHFind_InitMenuPopup SHFlushSFCache SHFormatDrive SHFree SHFreeNameMappings SHGetAttributesFromDataObject SHGetDataFromIDListA SHGetDataFromIDListW SHGetDesktopFolder SHGetDiskFreeSpaceA SHGetDiskFreeSpaceExA SHGetDiskFreeSpaceExW SHGetDriveMedia SHGetFileInfo SHGetFileInfoA SHGetFileInfoW SHGetFolderLocation SHGetFolderPathA SHGetFolderPathAndSubDirA SHGetFolderPathAndSubDirW SHGetFolderPathEx SHGetFolderPathW SHGetIDListFromObject SHGetIconOverlayIndexA SHGetIconOverlayIndexW SHGetImageList SHGetInstanceExplorer SHGetItemFromDataObject SHGetItemFromObject SHGetKnownFolderIDList SHGetKnownFolderItem SHGetKnownFolderPath SHGetLocalizedName SHGetMalloc SHGetNameFromIDList SHGetNewLinkInfo SHGetNewLinkInfoA SHGetNewLinkInfoW SHGetPathFromIDList SHGetPathFromIDListA SHGetPathFromIDListEx SHGetPathFromIDListW SHGetPropertyStoreForWindow SHGetPropertyStoreFromIDList SHGetPropertyStoreFromParsingName SHGetRealIDL SHGetSetFolderCustomSettings SHGetSetSettings SHGetSettings SHGetSpecialFolderLocation SHGetSpecialFolderPathA SHGetSpecialFolderPathW SHGetStockIconInfo SHGetTemporaryPropertyForItem SHGetUnreadMailCountW SHHandleUpdateImage SHHelpShortcuts_RunDLL SHHelpShortcuts_RunDLLA SHHelpShortcuts_RunDLLW SHILCreateFromPath SHInvokePrinterCommandA SHInvokePrinterCommandW SHIsFileAvailableOffline SHLimitInputEdit SHLoadInProc SHLoadNonloadedIconOverlayIdentifiers SHMapPIDLToSystemImageListIndex SHMultiFileProperties SHObjectProperties SHOpenFolderAndSelectItems SHOpenPropSheetW SHOpenWithDialog SHParseDisplayName SHPathPrepareForWriteA SHPathPrepareForWriteW SHPropStgCreate SHPropStgReadMultiple SHPropStgWriteMultiple SHQueryRecycleBinA SHQueryRecycleBinW SHQueryUserNotificationState SHRemoveLocalizedName SHReplaceFromPropSheetExtArray SHResolveLibrary SHRestricted SHSetDefaultProperties SHSetFolderPathA SHSetFolderPathW SHSetInstanceExplorer SHSetKnownFolderPath SHSetLocalizedName SHSetTemporaryPropertyForItem SHSetUnreadMailCountW SHShellFolderView_Message SHShowManageLibraryUI SHSimpleIDListFromPath SHStartNetConnectionDialogW SHTestTokenMembership SHUpdateImageA SHUpdateImageW SHUpdateRecycleBinIcon SHValidateUNC SetCurrentProcessExplicitAppUserModelID SheChangeDirA SheChangeDirExW SheGetDirA SheSetCurDrive ShellAboutA ShellAboutW ShellExec_RunDLL ShellExec_RunDLLA ShellExec_RunDLLW ShellExecuteA ShellExecuteEx ShellExecuteExA ShellExecuteExW ShellExecuteW ShellHookProc ShellMessageBoxA ShellMessageBoxW Shell_GetCachedImageIndex Shell_GetCachedImageIndexA Shell_GetCachedImageIndexW Shell_GetImageLists Shell_MergeMenus Shell_NotifyIcon Shell_NotifyIconA Shell_NotifyIconGetRect Shell_NotifyIconW SignalFileOpen StateRepoNewMenuCache_EnsureCacheAsync StateRepoNewMenuCache_RebuildCacheAsync StgMakeUniqueName StrChrA StrChrIA StrChrIW StrChrW StrCmpNA StrCmpNIA StrCmpNIW StrCmpNW StrNCmpA StrNCmpIA StrNCmpIW StrNCmpW StrRChrA StrRChrIA StrRChrIW StrRChrW StrRStrA StrRStrIA StrRStrIW StrRStrW StrStrA StrStrIA StrStrIW StrStrW UsersLibrariesFolderUI_CreateInstance WOWShellExecute WaitForExplorerRestartW Win32DeleteFile WriteCabinetState

Name

.text

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

289KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

33KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

77KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/spwizimg.dll

SHA256 b206630e0c06b9bea1809d80b9f2601ee417857e7c8a22c1854e30c08ea744e1
MD5 6259c2ebf8f1b15c4b075e413bf32598
SHA1 80ef443ed0dc3c93476b7a0edfa0fd76f2baa50a
SHA512 ecab9c71e95dcf2463490f34a2a66f5e9353b4be9af888f30b4e93520b4fa5a6a8fac5e69f84efeb88e195758d951cba8e36c9957eef261f4f9fb063bb04e395
SSDEEP 3072:OtsxIS9L+rz5iG7aB+H+Yge19NT6lBc/0yY+wcE9rCbpxTNX5vNRZWyXzyKblUuB:O6xISpQiG7aBMjNxTNX5vZ
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

15:3c:b0:c6:3b:b7:bd:4a:74:25:df:b7:ef:37:b9:8e:57:d0:db:7c:40:9c:53:db:0c:b1:27:5e:96:8e:41:a4

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

10

Entry point

%!f(<nil>)

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/sqlite3.dll

IMPHASH e92f8368c515b90972eef06f208a1928
SHA256 5ac6ee18cdca84c078b66055f5e9ffc6f8502e22eaf0fa54aeec92b75a3c463e
MD5 256224cc25d085663d4954be6cc8c5b5
SHA1 9931cc156642e2259dfabf0154fddf50d86e9334
SHA512 a28abf03199f0ce9f044329f7eba2f1d8ecbc43674337aafbf173f567158ba9046036da91dc3e12c2bb1d7842953526edba14bc03f81ece63dcedcc9413213a7
SSDEEP 24576:M5WQyUuqjJVKMXijWRwtHHofIyEcL/2m75i5zxHWc9C08lYfore60b:Mb0yVKMyjWR6nofQm7U59HWKYYD
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

f2:52:2c:6c:23:62:46:d8:dc:19:af:92:dd:b1:18:a2:1e:37:c6:e2:6c:cb:36:90:36:66:ea:d0:aa:21:a8:10

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

1233068

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\sqlite3.pdb

kernel32

AreFileApisANSI ReadFile TryEnterCriticalSection HeapCreate HeapFree EnterCriticalSection GetFullPathNameW WriteFile GetDiskFreeSpaceW OutputDebugStringA LockFile LeaveCriticalSection InitializeCriticalSection SetFilePointer GetFullPathNameA SetEndOfFile UnlockFileEx GetTempPathW CreateMutexW WaitForSingleObject CreateFileW GetFileAttributesW GetCurrentThreadId UnmapViewOfFile HeapValidate HeapSize MultiByteToWideChar Sleep GetTempPathA FormatMessageW GetDiskFreeSpaceA GetLastError GetFileAttributesA GetFileAttributesExW OutputDebugStringW FlushViewOfFile CreateFileA LoadLibraryA WaitForSingleObjectEx DeleteFileA DeleteFileW HeapReAlloc CloseHandle GetSystemInfo LoadLibraryW HeapAlloc HeapCompact HeapDestroy UnlockFile GetProcAddress LocalFree LockFileEx GetFileSize DeleteCriticalSection GetCurrentProcessId GetProcessHeap SystemTimeToFileTime FreeLibrary WideCharToMultiByte GetSystemTimeAsFileTime GetSystemTime FormatMessageA CreateFileMappingW MapViewOfFile QueryPerformanceCounter GetTickCount FlushFileBuffers RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent RtlCaptureContext

vcruntime140

memset memcpy __std_type_info_destroy_list __C_specific_handler strrchr memmove memcmp

api-ms-win-crt-math-l1-1-0

exp tanh pow sqrt cosh asinh acosh cos atan2 sinh asin log2 atanh trunc acos ceil sin fmod tan floor log log10 atan

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _cexit _execute_onexit_table _initialize_onexit_table _configure_narrow_argv _seh_filter_dll _beginthreadex _initterm_e _endthreadex _initterm

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-heap-l1-1-0

realloc free malloc _msize

api-ms-win-crt-string-l1-1-0

strcspn strncmp strcmp

api-ms-win-crt-utility-l1-1-0

qsort

sqlite3_aggregate_context sqlite3_aggregate_count sqlite3_auto_extension sqlite3_autovacuum_pages sqlite3_backup_finish sqlite3_backup_init sqlite3_backup_pagecount sqlite3_backup_remaining sqlite3_backup_step sqlite3_bind_blob sqlite3_bind_blob64 sqlite3_bind_double sqlite3_bind_int sqlite3_bind_int64 sqlite3_bind_null sqlite3_bind_parameter_count sqlite3_bind_parameter_index sqlite3_bind_parameter_name sqlite3_bind_pointer sqlite3_bind_text sqlite3_bind_text16 sqlite3_bind_text64 sqlite3_bind_value sqlite3_bind_zeroblob sqlite3_bind_zeroblob64 sqlite3_blob_bytes sqlite3_blob_close sqlite3_blob_open sqlite3_blob_read sqlite3_blob_reopen sqlite3_blob_write sqlite3_busy_handler sqlite3_busy_timeout sqlite3_cancel_auto_extension sqlite3_changes sqlite3_changes64 sqlite3_clear_bindings sqlite3_close sqlite3_close_v2 sqlite3_collation_needed sqlite3_collation_needed16 sqlite3_column_blob sqlite3_column_bytes sqlite3_column_bytes16 sqlite3_column_count sqlite3_column_decltype sqlite3_column_decltype16 sqlite3_column_double sqlite3_column_int sqlite3_column_int64 sqlite3_column_name sqlite3_column_name16 sqlite3_column_text sqlite3_column_text16 sqlite3_column_type sqlite3_column_value sqlite3_commit_hook sqlite3_compileoption_get sqlite3_compileoption_used sqlite3_complete sqlite3_complete16 sqlite3_config sqlite3_context_db_handle sqlite3_create_collation sqlite3_create_collation16 sqlite3_create_collation_v2 sqlite3_create_filename sqlite3_create_function sqlite3_create_function16 sqlite3_create_function_v2 sqlite3_create_module sqlite3_create_module_v2 sqlite3_create_window_function sqlite3_data_count sqlite3_data_directory sqlite3_database_file_object sqlite3_db_cacheflush sqlite3_db_config sqlite3_db_filename sqlite3_db_handle sqlite3_db_mutex sqlite3_db_name sqlite3_db_readonly sqlite3_db_release_memory sqlite3_db_status sqlite3_declare_vtab sqlite3_deserialize sqlite3_drop_modules sqlite3_enable_load_extension sqlite3_enable_shared_cache sqlite3_errcode sqlite3_errmsg sqlite3_errmsg16 sqlite3_error_offset sqlite3_errstr sqlite3_exec sqlite3_expanded_sql sqlite3_expired sqlite3_extended_errcode sqlite3_extended_result_codes sqlite3_file_control sqlite3_filename_database sqlite3_filename_journal sqlite3_filename_wal sqlite3_finalize sqlite3_free sqlite3_free_filename sqlite3_free_table sqlite3_get_autocommit sqlite3_get_auxdata sqlite3_get_table sqlite3_global_recover sqlite3_hard_heap_limit64 sqlite3_initialize sqlite3_interrupt sqlite3_is_interrupted sqlite3_keyword_check sqlite3_keyword_count sqlite3_keyword_name sqlite3_last_insert_rowid sqlite3_libversion sqlite3_libversion_number sqlite3_limit sqlite3_load_extension sqlite3_log sqlite3_malloc sqlite3_malloc64 sqlite3_memory_alarm sqlite3_memory_highwater sqlite3_memory_used sqlite3_mprintf sqlite3_msize sqlite3_mutex_alloc sqlite3_mutex_enter sqlite3_mutex_free sqlite3_mutex_leave sqlite3_mutex_try sqlite3_next_stmt sqlite3_open sqlite3_open16 sqlite3_open_v2 sqlite3_os_end sqlite3_os_init sqlite3_overload_function sqlite3_prepare sqlite3_prepare16 sqlite3_prepare16_v2 sqlite3_prepare16_v3 sqlite3_prepare_v2 sqlite3_prepare_v3 sqlite3_profile sqlite3_progress_handler sqlite3_randomness sqlite3_realloc sqlite3_realloc64 sqlite3_release_memory sqlite3_reset sqlite3_reset_auto_extension sqlite3_result_blob sqlite3_result_blob64 sqlite3_result_double sqlite3_result_error sqlite3_result_error16 sqlite3_result_error_code sqlite3_result_error_nomem sqlite3_result_error_toobig sqlite3_result_int sqlite3_result_int64 sqlite3_result_null sqlite3_result_pointer sqlite3_result_subtype sqlite3_result_text sqlite3_result_text16 sqlite3_result_text16be sqlite3_result_text16le sqlite3_result_text64 sqlite3_result_value sqlite3_result_zeroblob sqlite3_result_zeroblob64 sqlite3_rollback_hook sqlite3_rtree_geometry_callback sqlite3_rtree_query_callback sqlite3_serialize sqlite3_set_authorizer sqlite3_set_auxdata sqlite3_set_last_insert_rowid sqlite3_shutdown sqlite3_sleep sqlite3_snprintf sqlite3_soft_heap_limit sqlite3_soft_heap_limit64 sqlite3_sourceid sqlite3_sql sqlite3_status sqlite3_status64 sqlite3_step sqlite3_stmt_busy sqlite3_stmt_isexplain sqlite3_stmt_readonly sqlite3_stmt_status sqlite3_str_append sqlite3_str_appendall sqlite3_str_appendchar sqlite3_str_appendf sqlite3_str_errcode sqlite3_str_finish sqlite3_str_length sqlite3_str_new sqlite3_str_reset sqlite3_str_value sqlite3_str_vappendf sqlite3_strglob sqlite3_stricmp sqlite3_strlike sqlite3_strnicmp sqlite3_system_errno sqlite3_table_column_metadata sqlite3_temp_directory sqlite3_test_control sqlite3_thread_cleanup sqlite3_threadsafe sqlite3_total_changes sqlite3_total_changes64 sqlite3_trace sqlite3_trace_v2 sqlite3_transfer_bindings sqlite3_txn_state sqlite3_update_hook sqlite3_uri_boolean sqlite3_uri_int64 sqlite3_uri_key sqlite3_uri_parameter sqlite3_user_data sqlite3_value_blob sqlite3_value_bytes sqlite3_value_bytes16 sqlite3_value_double sqlite3_value_dup sqlite3_value_encoding sqlite3_value_free sqlite3_value_frombind sqlite3_value_int sqlite3_value_int64 sqlite3_value_nochange sqlite3_value_numeric_type sqlite3_value_pointer sqlite3_value_subtype sqlite3_value_text sqlite3_value_text16 sqlite3_value_text16be sqlite3_value_text16le sqlite3_value_type sqlite3_version sqlite3_vfs_find sqlite3_vfs_register sqlite3_vfs_unregister sqlite3_vmprintf sqlite3_vsnprintf sqlite3_vtab_collation sqlite3_vtab_config sqlite3_vtab_distinct sqlite3_vtab_in sqlite3_vtab_in_first sqlite3_vtab_in_next sqlite3_vtab_nochange sqlite3_vtab_on_conflict sqlite3_vtab_rhs_value sqlite3_wal_autocheckpoint sqlite3_wal_checkpoint sqlite3_wal_checkpoint_v2 sqlite3_wal_hook sqlite3_win32_is_nt sqlite3_win32_mbcs_to_utf8 sqlite3_win32_mbcs_to_utf8_v2 sqlite3_win32_set_directory sqlite3_win32_set_directory16 sqlite3_win32_set_directory8 sqlite3_win32_sleep sqlite3_win32_unicode_to_utf8 sqlite3_win32_utf8_to_mbcs sqlite3_win32_utf8_to_mbcs_v2 sqlite3_win32_utf8_to_unicode sqlite3_win32_write_debug

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/twinui.dll

IMPHASH 28a0aac53420676518c7b3312ff90576
SHA256 b4a4a0e42ce67c46ad1141fbed7f792f0e7517df7e04bbdbecc6bfbb15cb6300
MD5 888be45fe6aa6a8bbdd4c40e2464c072
SHA1 c769eb306ee1be99b63914ac37e6219420333c47
SHA512 e46037f8b0891b72ebb0a25a6808ac23805beff6daf3600cd216477b39fe1c9a726f5429cf0198ecff09fbbb7adffdb3f21ebb072ec431194d6723824c643699
SSDEEP 49152:FmYXxF+j0RnN53cH1LnThY1Ni86vRIlveCuHvNNsbBs91p3LcONADUh1ILw6Dtuk:zB7V3W1JexeC7uDf4YG9
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

755136

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

twinui.pdb

msvcrt

acosf cosf floorf pow wcscmp memcmp memset abort _wsetlocale __crtLCMapStringW ??8type_info@@QEBAHAEBV0@@Z _wcsdup __uncaught_exception _ismbblead ___mb_cur_max_func ___lc_codepage_func ___lc_handle_func __pctype_func setlocale memmove memcpy _CxxThrowException _callnewh toupper iswdigit _wcslwr_s wcsncpy_s wcsnlen bsearch_s wcscat_s wcsncmp swprintf_s sprintf ??0exception@@QEAA@AEBQEBDH@Z _vsnwprintf_s qsort_s _vsnprintf swscanf_s wcscpy_s calloc strncpy_s strchr strrchr strtol _errno ?what@exception@@UEBAPEBDXZ ??1bad_cast@@UEAA@XZ ??0bad_cast@@QEAA@AEBV0@@Z ??0bad_cast@@QEAA@PEBD@Z strcspn clock __ExceptionPtrCreate __ExceptionPtrCurrentException __ExceptionPtrDestroy __ExceptionPtrCopy sprintf_s localeconv ??0exception@@QEAA@AEBQEBD@Z wcstol wcscspn realloc wcschr wcsstr _free_locale _towlower_l _wcsnicmp _create_locale wcstok_s wcsrchr vswprintf_s wcstoul _wcsicmp _ultow_s memmove_s _get_errno _set_errno sinf sqrtf strcmp ??1type_info@@UEAA@XZ _onexit __dllonexit _unlock _lock ?terminate@@YAXXZ __C_specific_handler _initterm malloc free _amsg_exit _XcptFilter _vsnprintf_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ _purecall ??3@YAXPEAX@Z memcpy_s _vsnwprintf ??_V@YAXPEAX@Z __CxxFrameHandler3

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls LoadLibraryExW SizeofResource LoadResource GetProcAddress GetModuleHandleExW LoadStringW FindResourceExW FindStringOrdinal GetModuleHandleW GetModuleFileNameW FreeLibrary GetModuleFileNameA LockResource

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize InitOnceComplete WakeAllConditionVariable Sleep SleepConditionVariableSRW WakeByAddressAll InitOnceExecuteOnce WaitOnAddress

api-ms-win-core-synch-l1-1-0

SetEvent InitializeCriticalSection TryEnterCriticalSection CreateMutexExW ResetEvent CreateMutexW ReleaseSRWLockShared CreateEventExW CreateEventW LeaveCriticalSection EnterCriticalSection OpenSemaphoreW OpenMutexW InitializeSRWLock DeleteCriticalSection ReleaseSemaphore WaitForSingleObjectEx WaitForMultipleObjectsEx WaitForSingleObject ReleaseMutex ReleaseSRWLockExclusive AcquireSRWLockExclusive OpenEventW AcquireSRWLockShared TryAcquireSRWLockExclusive InitializeCriticalSectionEx CreateSemaphoreExW

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapFree HeapAlloc HeapReAlloc

api-ms-win-core-errorhandling-l1-1-0

GetLastError SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter RaiseException

api-ms-win-eventing-provider-l1-1-0

EventRegister EventUnregister EventActivityIdControl EventWriteTransfer EventProviderEnabled EventSetInformation

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableLevel GetTraceEnableFlags GetTraceLoggerHandle TraceMessage

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId OpenProcessToken GetCurrentThreadId OpenThreadToken TlsAlloc GetExitCodeProcess GetExitCodeThread TlsSetValue GetCurrentProcess CreateProcessAsUserW SetThreadToken OpenThread GetCurrentThread SetThreadPriority TerminateProcess CreateThread GetProcessId ProcessIdToSessionId TlsGetValue TlsFree

api-ms-win-core-localization-l1-2-0

GetThreadUILanguage GetUserPreferredUILanguages GetThreadPreferredUILanguages LCMapStringEx ResolveLocaleName GetSystemPreferredUILanguages FindNLSString LCMapStringW FormatMessageW GetLocaleInfoEx GetLocaleInfoW LocaleNameToLCID GetSystemDefaultLCID

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringA OutputDebugStringW

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW GetVersionExW GetSystemInfo GetTickCount GetLocalTime GetSystemTimeAsFileTime GetWindowsDirectoryW GetTickCount64 GetSystemTime

ntdll

_wcslwr ZwQueryValueKey RtlInitUnicodeStringEx ZwOpenKey ZwQuerySystemInformation RtlGetNativeSystemInformation RtlUpcaseUnicodeChar ZwClose ZwEnumerateKey RtlReAllocateHeap NtQueryValueKey RtlRunOnceExecuteOnce RtlGetNtProductType NtOpenKey WinSqmAddToStreamEx RtlCheckPortableOperatingSystem RtlNtStatusToDosErrorNoTeb RtlCompareUnicodeString NtQueryInformationToken WinSqmAddToStream WinSqmSetDWORD WinSqmIsOptedIn WinSqmIncrementDWORD RtlUnsubscribeWnfNotificationWithCompletionCallback RtlAllocateWnfSerializationGroup RtlGUIDFromString RtlRandomEx RtlFreeUnicodeString RtlUpcaseUnicodeString NtCreateFile RtlDosPathNameToNtPathName_U_WithStatus EtwEventWriteTransfer NtQuerySystemTime RtlQueryPackageClaims RtlGetDeviceFamilyInfoEnum RtlUnsubscribeWnfStateChangeNotification RtlNtStatusToDosError NtQueryInformationProcess RtlPublishWnfStateData RtlDeriveCapabilitySidsFromName RtlQueryWnfStateData NtDeviceIoControlFile NtOpenFile RtlInitUnicodeString NtClose NtQueryObject RtlAllocateHeap RtlFreeHeap EtwTraceMessage NtQuerySystemInformation RtlSubscribeWnfStateChangeNotification NtQueryWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion wcsspn _wcstoui64 RtlIsMultiSessionSku NtPowerInformation

api-ms-win-core-sidebyside-l1-1-0

QueryActCtxW FindActCtxSectionStringW ReleaseActCtx CreateActCtxW DeactivateActCtx ActivateActCtx

api-ms-win-core-threadpool-l1-2-0

DisassociateCurrentThreadFromCallback SubmitThreadpoolWork IsThreadpoolTimerSet CreateThreadpoolTimer CreateThreadpoolWork SetThreadpoolTimer CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpool CloseThreadpoolWork FreeLibraryWhenCallbackReturns CreateThreadpool CloseThreadpoolWait WaitForThreadpoolWaitCallbacks SetThreadpoolWait CreateThreadpoolWait

api-ms-win-rtcore-ntuser-window-l1-1-0

PeekMessageW UnregisterClassW GetMessageExtraInfo SetMessageExtraInfo FindWindowExW GetCursorPos SetWindowLongW SetWindowLongPtrW GetWindowLongPtrW RegisterClassExW RegisterClassW PostQuitMessage DefWindowProcW DestroyWindow SetFocus SetWindowTextW GetParent RegisterWindowMessageW TranslateMessage FindWindowW ShowWindow GetWindowTextW SetForegroundWindow CreateWindowExW IsWindow EnumChildWindows PostThreadMessageW SetTimer GetFocus GetMessageTime GetMessagePos AllowSetForegroundWindow WindowFromPoint SendMessageW GetForegroundWindow EnumWindows IsWindowVisible GetPropW GetDesktopWindow GetWindowLongW GetAncestor GetClientRect ScreenToClient SetWindowPos SendNotifyMessageW DispatchMessageW GetWindowRect RemovePropW GetWindowThreadProcessId KillTimer EnableWindow PostMessageW GetMessageW SetPropW SetParent SetCursorPos EndDeferWindowPos DeferWindowPos BeginDeferWindowPos GetWindow ClientToScreen GetClassNameW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask SHTaskPoolAllowThreadReuse SHTaskPoolGetUniqueContext

api-ms-win-core-winrt-propertysetprivate-l1-1-1

RoCreatePropertySetSerializer

user32

MapVirtualKeyW DestroyIcon IsWindowArranged GetRawInputData RegisterRawInputDevices DestroyAcceleratorTable LoadAcceleratorsW DefWindowProcA IsWindowUnicode GetKeyboardLayout RegisterHotKey UnregisterHotKey FillRect GetSystemMenu EnableMenuItem CreateIconIndirect ord2535 MapVirtualKeyExW FlashWindow CreatePopupMenu AppendMenuW TrackPopupMenu DestroyMenu MapWindowPoints ClipCursor RealGetWindowClassW SetWindowPlacement SendInput InternalGetWindowText SetCoalescableTimer IsImmersiveProcess InjectKeyboardInput ord2542 RegisterPointerDeviceNotifications GetAutoRotationState ShowWindowAsync GetMenuDefaultItem CopyImage GetMenuInfo SetMenuInfo DrawIconEx DrawTextExW GetDpiForWindow SetDisplayConfig GetRawInputDeviceInfoW LoadCursorW SetCursor ChangeWindowMessageFilterEx IsZoomed GetMenuItemInfoW SetMenuItemInfoW DeleteMenu GetMenuItemCount IsIconic GetWindowInfo MonitorFromWindow GetWindowPlacement ord2521 AdjustWindowRectEx GetSysColor GetKeyState ord2514 ord2515 GetLastActivePopup SwitchToThisWindow GetWindowRgn MonitorFromRect GetPhysicalCursorPos CalculatePopupWindowPosition WindowFromPhysicalPoint GetGUIThreadInfo SetWindowRgn UnhookWindowsHookEx TrackMouseEvent GetWindowRgnBox GetCapture ReleaseCapture SetWindowsHookExW SetCapture GetAsyncKeyState BeginPaint EndPaint DrawTextW UpdateWindow SetLayeredWindowAttributes GetDC ReleaseDC CallNextHookEx MonitorFromPoint InvalidateRect

api-ms-win-core-string-l1-1-0

CompareStringOrdinal WideCharToMultiByte GetStringTypeW CompareStringEx CompareStringW MultiByteToWideChar

api-ms-win-core-registry-l1-1-0

RegOpenCurrentUser RegQueryValueExW RegQueryInfoKeyW RegSetKeySecurity RegCreateKeyExW RegEnumValueW RegDeleteTreeW RegGetValueW RegDeleteValueW RegEnumKeyExW RegCloseKey RegNotifyChangeKeyValue RegOpenKeyExW RegDeleteKeyExW RegSetValueExW

api-ms-win-core-heap-l2-1-0

LocalReAlloc LocalFree LocalAlloc GlobalFree GlobalAlloc

api-ms-win-security-base-l1-1-0

GetSidSubAuthorityCount IsValidSid EqualSid AllocateAndInitializeSid FreeSid DuplicateTokenEx SetTokenInformation CopySid GetAclInformation CreateWellKnownSid GetAce CreateRestrictedToken DeleteAce ImpersonateLoggedOnUser GetSidSubAuthority GetTokenInformation AddAce InitializeAcl GetLengthSid

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabled QuirkIsEnabledForPackage

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-processthreads-l1-1-1

OpenProcess

api-ms-win-core-file-l1-1-0

FindClose FindNextFileW GetFileSizeEx FindFirstFileExW GetTempFileNameW ReadFile GetFileInformationByHandle FindFirstChangeNotificationW FindNextChangeNotification DeleteFileW CreateDirectoryW SetFilePointer FindCloseChangeNotification WriteFile FindFirstFileW CreateFileW CompareFileTime GetFileAttributesW

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo VerSetConditionMask

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformationForYear FileTimeToSystemTime SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime

api-ms-win-power-setting-l1-1-0

PowerSettingUnregisterNotification PowerWriteDCValueIndex PowerGetActiveScheme PowerSettingRegisterNotification PowerWriteACValueIndex

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW QueryFullProcessImageNameW K32EnumProcesses

api-ms-win-core-memory-l1-1-0

OpenFileMappingW UnmapViewOfFile ReadProcessMemory

api-ms-win-core-path-l1-1-0

PathCchRemoveBackslash PathCchCombine PathCchRemoveFileSpec PathCchAddBackslash PathAllocCombine PathCchAppend PathCchAddExtension

api-ms-win-core-file-l2-1-0

MoveFileExW CopyFileExW

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-security-base-l1-2-0

GetCachedSigningLevel SetCachedSigningLevel

rpcrt4

RpcBindingFromStringBindingW RpcStringBindingComposeW UuidToStringW RpcStringFreeW RpcBindingFree RpcBindingSetAuthInfoExW UuidCreate NdrClientCall3

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW RegDeleteKeyValueW

api-ms-win-core-string-l2-1-0

CharLowerBuffW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW FindResourceW

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-sysinfo-l1-2-3

GetIntegratedDisplaySize

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

gdi32

AddFontMemResourceEx GetDIBits GetCurrentDpiInfo SetBkMode CreateFontIndirectW GetCurrentObject ExcludeClipRect SetStretchBltMode D3DKMTNetDispQueryMiracastDisplayDeviceSupport D3DKMTNetDispStartMiracastDisplayDeviceEx GetObjectW GetRgnBox CreateDIBSection CreateCompatibleDC SelectObject CreateRectRgnIndirect GetDeviceCaps CreateSolidBrush StretchBlt CreateCompatibleBitmap BitBlt DeleteDC DeleteObject GetStockObject CreateRectRgn CombineRgn PtInRegion GetClipBox StretchDIBits GdiAlphaBlend SetTextColor GetOutlineTextMetricsW GetGlyphOutlineW SetBkColor RemoveFontMemResourceEx

dwmapi

ord163 ord164 ord162 ord147 ord138 ord145 DwmQueryThumbnailSourceSize DwmUnregisterThumbnail ord139 DwmSetWindowAttribute ord159 ord141 ord160 ord140 DwmUpdateThumbnailProperties DwmGetWindowAttribute DwmSetIconicLivePreviewBitmap DwmSetIconicThumbnail ord161 DwmShowContact

pdh

PdhGetRawCounterArrayW PdhCollectQueryData PdhOpenQueryW PdhAddCounterW PdhCloseQuery

api-ms-win-security-isolatedcontainer-l1-1-1

IsProcessInWDAGContainer

api-ms-win-shell-namespace-l1-1-0

SHCreateItemFromParsingName SHBindToFolderIDListParent SHCreateItemWithParent ILCombine ILIsEqual ILClone SHParseDisplayName SHCreateItemFromIDList ILFindLastID SHGetIDListFromObject ILFree ILGetSize ILFindChild

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalUnlock

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer UnregisterWaitEx QueueUserWorkItem DeleteTimerQueueTimer

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics GetDisplayConfigBufferSizes GetMonitorInfoW EnumDisplayMonitors SystemParametersInfoW QueryDisplayConfig EnumDisplayDevicesW DisplayConfigGetDeviceInfo EnumDisplaySettingsW EnumDisplaySettingsExW

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-kernel32-legacy-l1-1-0

MoveFileW UnregisterWait RegisterWaitForSingleObject

api-ms-win-core-processtopology-obsolete-l1-1-0

GetActiveProcessorCount

api-ms-win-shcore-path-l1-1-0

ord170

api-ms-win-core-url-l1-1-0

UrlGetPartW HashData PathIsURLW UrlUnescapeW

api-ms-win-shell-shdirectory-l1-1-0

ord290

api-ms-win-core-atoms-l1-1-0

GlobalDeleteAtom GlobalAddAtomW GlobalGetAtomNameW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW lstrlenA lstrlenW lstrcmpA

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-ntuser-rectangle-l1-1-0

IntersectRect SubtractRect EqualRect CopyRect SetRect IsRectEmpty OffsetRect UnionRect PtInRect InflateRect SetRectEmpty

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjectsEx

api-ms-win-rtcore-ntuser-clipboard-l1-1-0

OpenClipboard EmptyClipboard SetClipboardData CloseClipboard

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerDevice GetPointerDevices GetPointerInfoHistory GetCurrentInputMessageSource GetPointerInfo GetPointerFrameInfo GetPointerDeviceRects GetPointerFrameInfoHistory

api-ms-win-storage-exports-internal-l1-1-0

SHGetSpecialFolderLocation SHGetKnownFolderItem GetThreadFlags SHGetKnownFolderIDList

api-ms-win-rtcore-ntuser-winevent-l1-1-0

UnhookWinEvent SetWinEventHook NotifyWinEvent

api-ms-win-rtcore-ntuser-shell-l1-1-0

DeregisterShellHookWindow RegisterShellHookWindow GetShellWindow

api-ms-win-core-pcw-l1-1-0

PcwCollectData PcwCreateQuery PcwAddQueryItem

api-ms-win-rtcore-ntuser-private-l1-1-4

ord2589 ord2592 ord2590 ord2588 ord2594

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy CreateWindowInBandEx

api-ms-win-shell-shellcom-l1-1-0

SHCoCreateInstance

api-ms-win-storage-exports-external-l1-1-0

STORAGE_SHGetPathFromMsUri STORAGE_SHValidateMSUri

api-ms-win-core-registryuserspecific-l1-1-0

SHRegGetBoolUSValueW

api-ms-win-rtcore-ntuser-wmpointer-l1-1-1

SkipPointerFrameMessages

api-ms-win-rtcore-ntuser-powermanagement-l1-1-0

RegisterPowerSettingNotification UnregisterPowerSettingNotification

api-ms-win-shell-changenotify-l1-1-0

SHChangeNotify

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-service-private-l1-1-0

SubscribeServiceChangeNotifications UnsubscribeServiceChangeNotifications

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-rtcore-ntuser-draw-l1-1-0

RedrawWindow

api-ms-win-core-psm-key-l1-1-0

PsmGetKeyFromToken

combase

ord65 ord157 ord90 ord140

shell32

ord2 SHGetStockIconInfo ord4 ord779 ord782 Shell_GetCachedImageIndexW SHGetItemFromDataObject ord764 ShellExecuteW SHAppBarMessage SHGetPropertyStoreForWindow ord6 ord940 ord930 ShellExecuteExW SHCreateShellItemArrayFromShellItem SHCreateItemInKnownFolder ord765 ord644 ord645 ord54 SHCreateItemFromRelativeName SHFileOperationW ord791 SHGetPropertyStoreFromIDList ord931 SHGetItemFromObject ord924 ord923 ord68 DuplicateIcon SHCreateAssociationRegistration SHQueryUserNotificationState ord727 SHAssocEnumHandlers ord714

windows.storage

ord915 ord942 ord916

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

26KB

Virtual Size

69KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

246KB

Virtual Size

245KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/twinui.pcshell.dll

IMPHASH ad4a30dc0d14797a6093b37575a688c5
SHA256 460003c64bb9a1cd55706ec66abf6a6826330fecd750291af7e2614ef6e5880a
MD5 59dfd4ae407fd71e43369924f2dee2d4
SHA1 6afe03088a8e0ad06d559092035020f0efb6b008
SHA512 d447a11a3c957fce4bb4e3786bc24e3044271c9c6a9f83831fa81f3955a6fffadc8e737501f82799a2cca5e46372cd83b6732f022e7afd935a3934da7f863d1e
SSDEEP 49152:dPZgqQiZnQE3BZcpZPm/GG59Bkmte/vfizec3+iDaWUfT1FAbZfehRuxIYWp8GkH:1fDcpZE9qmKBLiOTrI1vhbMbUx7+Oyn
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

587568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

twinui.pcshell.pdb

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e

api-ms-win-crt-private-l1-1-0

_o__unlock_file _o__wcsicmp _o__wcsnicmp _o__wtof _o__wtol _o_ceil _o_fclose _o_fflush _o_fgetc _o_fgetpos _o_fputc _o_fread _o_free _o_fsetpos _o_fwrite _o_iswspace _o_malloc _o_memcpy_s _o_pow _o_realloc _o_setvbuf _o_sqrt _o_terminate _o_toupper _o_towlower _o_ungetc _o_wcscat_s _o_wcscpy_s _o_wcstod _o_wcstok_s _o_wcstol _o_wcstoul __C_specific_handler __CxxFrameHandler3 _CxxThrowException _o__set_errno _o__seh_filter_dll _o__register_onexit_function _o__purecall wcsrchr wcsstr wcschr memcpy memmove memcmp _o__lock_file _o__itow_s _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__get_stream_buffer_pointers _o__get_errno _o__fseeki64 _o__execute_onexit_table _o__errno _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__callnewh _o___stdio_common_vswscanf _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o____lc_codepage_func __std_terminate __CxxFrameHandler4

api-ms-win-crt-string-l1-1-0

wcsnlen memset wcscmp wcscspn wcslen _wcsrev wcsncpy

api-ms-win-core-libraryloader-l1-2-0

LoadStringW GetModuleFileNameA FindResourceExW DisableThreadLibraryCalls GetProcAddress LoadLibraryExW LoadResource GetModuleHandleExW LockResource FindStringOrdinal GetModuleFileNameW FreeLibrary GetModuleHandleW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll Sleep WaitOnAddress InitOnceBeginInitialize InitOnceExecuteOnce InitOnceComplete

api-ms-win-core-synch-l1-1-0

OpenEventW OpenMutexW ReleaseSRWLockShared SetEvent TryEnterCriticalSection InitializeCriticalSection InitializeCriticalSectionAndSpinCount WaitForSingleObject CreateSemaphoreExW WaitForMultipleObjectsEx InitializeSRWLock TryAcquireSRWLockShared ReleaseSRWLockExclusive InitializeCriticalSectionEx LeaveCriticalSection ResetEvent CreateEventW AcquireSRWLockExclusive ReleaseMutex WaitForSingleObjectEx CreateMutexExW AcquireSRWLockShared CreateEventExW DeleteCriticalSection EnterCriticalSection TryAcquireSRWLockExclusive ReleaseSemaphore OpenSemaphoreW

api-ms-win-core-heap-l1-1-0

HeapReAlloc GetProcessHeap HeapFree HeapAlloc

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetLastError RaiseException GetLastError SetUnhandledExceptionFilter

api-ms-win-core-winrt-string-l1-1-0

WindowsConcatString WindowsCompareStringOrdinal WindowsCreateStringReference WindowsDeleteStringBuffer WindowsCreateString WindowsDuplicateString WindowsGetStringRawBuffer WindowsIsStringEmpty WindowsDeleteString WindowsStringHasEmbeddedNull WindowsGetStringLen WindowsPreallocateStringBuffer WindowsPromoteStringBuffer WindowsSubstringWithSpecifiedLength

api-ms-win-core-com-l1-1-0

CoUninitialize CoCancelCall CoEnableCallCancellation CoDisableCallCancellation CoTaskMemRealloc CoGetCallContext CoInitializeEx CoCreateGuid CoReleaseMarshalData CoIncrementMTAUsage CoMarshalInterThreadInterfaceInStream CoRevokeClassObject CoRegisterClassObject StringFromGUID2 CoGetCallerTID CreateStreamOnHGlobal IIDFromString CoWaitForMultipleObjects CoMarshalInterface CoGetApartmentType CoGetMalloc CoGetObjectContext CoGetStdMarshalEx StringFromCLSID CoGetContextToken CoDecrementMTAUsage CoTaskMemFree CoTaskMemAlloc PropVariantClear CoCreateInstance CoWaitForMultipleHandles CoGetInterfaceAndReleaseStream CoCreateFreeThreadedMarshaler CLSIDFromString

api-ms-win-eventing-provider-l1-1-0

EventWrite EventEnabled EventWriteTransfer EventRegister EventProviderEnabled EventActivityIdControl EventSetInformation EventUnregister

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWork CreateThreadpoolTimer DisassociateCurrentThreadFromCallback TrySubmitThreadpoolCallback CloseThreadpoolWait CancelThreadpoolIo FreeLibraryWhenCallbackReturns WaitForThreadpoolWaitCallbacks SubmitThreadpoolWork SetThreadpoolTimer SetThreadpoolWait CreateThreadpoolIo CreateThreadpoolWork IsThreadpoolTimerSet CloseThreadpoolTimer WaitForThreadpoolIoCallbacks StartThreadpoolIo WaitForThreadpoolTimerCallbacks CreateThreadpoolWait CloseThreadpoolIo

api-ms-win-core-processthreads-l1-1-0

GetCurrentThreadId OpenThreadToken GetCurrentProcessId SetThreadPriority CreateThread GetThreadPriority OpenProcessToken GetCurrentProcess TerminateProcess GetCurrentThread OpenThread GetProcessTimes GetProcessId ProcessIdToSessionId

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError GetRestrictedErrorInfo RoOriginateErrorW RoTransformError SetRestrictedErrorInfo RoFailFastWithErrorContext

api-ms-win-core-localization-l1-2-0

GetThreadUILanguage GetUserPreferredUILanguages GetLocaleInfoW FormatMessageW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-processthreads-l1-1-1

OpenProcess GetProcessMitigationPolicy IsProcessorFeaturePresent

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64 GetSystemTime GetVersionExW GetTickCount GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead InterlockedPushEntrySList

user32

DrawIconEx InternalGetWindowText GetClassInfoW SetFocus DestroyIcon CopyIcon CopyImage ReleaseDC GetIconInfo RegisterClassExW ord2631 ord2632 ord2629 RegisterClassW ord2628 ord2627 GetMenuInfo ord2537 ord2511 CreateWindowExW ord2556 ord2563 ord2540 ord2630 GetDpiForWindow GetCursorInfo RegisterTouchHitTestingWindow ord2509 GetKeyboardLayout CreateIconIndirect GetDC CalculatePopupWindowPosition GetClassLongPtrW LoadIconW GetAsyncKeyState GetSysColor GetPhysicalCursorPos GetWindowCompositionInfo SetCursor GetPropA UnregisterHotKey RegisterHotKey DeleteMenu LoadCursorW GetClassLongW ChangeWindowMessageFilterEx ord2521 GetMenuItemInfoW InsertMenuW GetSystemMenu IsWindowArranged GetWindowMinimizeRect GetKeyState TrackPopupMenu GetMenuItemCount DestroyMenu ord2510 SetMenuInfo SetMenuItemInfoW ord2561

msvcp_win

?_Xinvalid_argument@std@@YAXPEBD@Z _Xtime_get_ticks ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setf@ios_base@std@@QEAAHHH@Z ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?_Xout_of_range@std@@YAXPEBD@Z ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ _Cnd_wait ??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z ??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flags@ios_base@std@@QEBAHXZ ?uncaught_exception@std@@YA_NXZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?always_noconv@codecvt_base@std@@QEBA_NXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAGG@Z ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??Bid@locale@std@@QEAA_KXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??0_Lockit@std@@QEAA@H@Z ??1_Lockit@std@@QEAA@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Winerror_message@std@@YAKKPEADK@Z ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z _Query_perf_counter _Query_perf_frequency ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z ?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ _Cnd_broadcast ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ _Cnd_destroy_in_situ _Cnd_init_in_situ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z _Mtx_unlock ?_Throw_C_error@std@@YAXH@Z _Mtx_lock _Mtx_init_in_situ _Mtx_destroy_in_situ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z ?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@_JH@Z ?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?_XGetLastError@std@@YAXXZ ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCreate@@YAXPEAX@Z

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx CreateActCtxW ReleaseActCtx ActivateActCtx

api-ms-win-core-registry-l1-1-0

RegDeleteTreeW RegOpenKeyExW RegSetValueExW RegOpenCurrentUser RegEnumValueW RegSetKeySecurity RegGetKeySecurity RegQueryInfoKeyW RegQueryValueExW RegDeleteValueW RegNotifyChangeKeyValue RegGetValueW RegCloseKey RegEnumKeyExW RegCreateKeyExW

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolAllowThreadReuse SHTaskPoolQueueTask SHTaskPoolGetUniqueContext

ntdll

NtQueryInformationProcess RtlPublishWnfStateData NtQueryWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion NtQueryInformationToken RtlSubscribeWnfStateChangeNotification RtlUnsubscribeWnfStateChangeNotification NtPowerInformation RtlAllocateHeap RtlGetDeviceFamilyInfoEnum RtlQueryTokenHostIdAsUlong64 NtSetInformationProcess RtlNtStatusToDosError RtlInitUnicodeString RtlQueryWnfStateData RtlNtStatusToDosErrorNoTeb RtlCompareUnicodeString RtlFreeHeap RtlGetAppContainerSidType

api-ms-win-core-com-l1-1-1

RoGetAgileReference

api-ms-win-shcore-obsolete-l1-1-0

CommandLineToArgvW SHStrDupW

api-ms-win-eventing-classicprovider-l1-1-0

GetTraceEnableFlags UnregisterTraceGuids RegisterTraceGuidsW TraceMessage GetTraceLoggerHandle GetTraceEnableLevel

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc LocalReAlloc

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW GlobalGetAtomNameW GlobalDeleteAtom

api-ms-win-core-winrt-l1-1-0

RoUninitialize RoInitialize RoActivateInstance RoGetActivationFactory

api-ms-win-core-file-l1-1-0

DeleteFileW GetFullPathNameW FindClose CreateFileW GetFileSize ReadFile GetFileAttributesW CreateDirectoryW FindNextFileW WriteFile GetFileAttributesExW GetLongPathNameW FindFirstFileExW CompareFileTime

api-ms-win-core-realtime-l1-1-0

QueryProcessCycleTime QueryUnbiasedInterruptTime

api-ms-win-core-quirks-l1-1-1

QuirkIsEnabledForPackage4

api-ms-win-core-string-l1-1-0

WideCharToMultiByte MultiByteToWideChar CompareStringOrdinal

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW QueryFullProcessImageNameW

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate IsErrorPropagationEnabled RoOriginateLanguageException RoGetMatchingRestrictedErrorInfo

oleaut32

VariantInit SysAllocString SafeArrayDestroy SafeArrayUnaccessData SafeArrayGetDim SafeArrayCreateVector SafeArrayPutElement SafeArrayAccessData VariantCopy SafeArrayCreate VariantClear SysFreeString SysStringLen VariantChangeType

api-ms-win-core-shlwapi-legacy-l1-1-0

PathRemoveFileSpecW PathCommonPrefixW PathGetDriveNumberW SHExpandEnvironmentStringsW PathFindExtensionW PathIsFileSpecW PathFileExistsW PathFindFileNameW PathIsRelativeW

api-ms-win-core-url-l1-1-0

UrlUnescapeW HashData PathIsURLW

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask GetProductInfo GetSystemTimePreciseAsFileTime

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer DeleteTimerQueueTimer

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-debug-l1-1-1

CheckRemoteDebuggerPresent

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

api-ms-win-core-registry-l2-1-0

RegEnumKeyW RegCreateKeyW RegDeleteKeyW RegOpenKeyW

api-ms-win-shcore-sysinfo-l1-1-0

IsOS

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream CreateStreamOverRandomAccessStream

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-kernel32-legacy-l1-1-0

PulseEvent

api-ms-win-security-base-l1-1-0

CopySid GetLengthSid SetSecurityDescriptorDacl MakeAbsoluteSD FreeSid EqualSid CreateWellKnownSid DuplicateTokenEx GetTokenInformation CheckTokenMembership GetSecurityDescriptorDacl

api-ms-win-security-provider-l1-1-0

GetExplicitEntriesFromAclW SetSecurityInfo SetEntriesInAclW GetSecurityInfo

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime FileTimeToSystemTime

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabledForPackage

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-oobe-notification-l1-1-0

RegisterWaitUntilOOBECompleted OOBEComplete UnregisterWaitUntilOOBECompleted

api-ms-win-service-management-l1-1-0

OpenSCManagerW CloseServiceHandle OpenServiceW

api-ms-win-service-management-l2-1-0

QueryServiceStatusEx

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-path-l1-1-0

PathCchRemoveFileSpec PathAllocCombine PathCchAppend PathCchRenameExtension PathCchCombine

api-ms-win-shcore-registry-l1-1-0

SHSetValueW SHRegGetValueW SHGetValueW

rpcrt4

UuidCreate

crypt32

CertCloseStore CryptQueryObject CryptMsgGetParam CertFindCertificateInStore CertFreeCertificateContext CertGetNameStringW CryptMsgClose

api-ms-win-security-cryptoapi-l1-1-0

CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextW CryptReleaseContext

api-ms-win-core-com-private-l1-2-0

InternalGetWindowPropInterface2

userenv

GetProfileType

wkscli

NetGetJoinInformation

netutils

NetApiBufferFree

api-ms-win-core-io-l1-1-0

CancelIoEx

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx ReOpenFile ReadDirectoryChangesW

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW VerQueryValueW GetFileVersionInfoExW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-rtcore-ntuser-private-l1-1-0

IsWindowInDestroy CreateWindowInBandEx GetWindowBand CreateWindowInBand

api-ms-win-rtcore-ntuser-shell-l1-1-0

GetShellWindow

api-ms-win-dx-d3dkmt-l1-1-0

D3DKMTCheckOcclusion

api-ms-win-dwmapi-l1-1-0

DwmFlush

propsys

PSPropertyBag_WriteStr PSCreateMemoryPropertyStore PropVariantToUInt32 PSGetPropertyFromPropertyStorage VariantToBuffer PropVariantToInt32 InitVariantFromStringArray PropVariantToBoolean InitVariantFromDoubleArray PropVariantToStringAlloc

api-ms-win-shell-namespace-l1-1-0

ILFindChild ILCombine ILIsParent SHBindToFolderIDListParentEx ILIsEqual SHGetNameFromIDList SHBindToParent SHCreateItemFromIDList ILFindLastID SHCreateItemFromParsingName SHGetIDListFromObject ILClone SHParseDisplayName ILGetSize

api-ms-win-rtcore-ntuser-private-l1-1-4

ord2597

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerDevices GetCurrentInputMessageSource GetPointerDeviceRects GetPointerType GetPointerInfo

api-ms-win-appmodel-runtime-l1-1-1

FindPackagesByPackageFamily

api-ms-win-rtcore-ntuser-private-l1-1-5

ord2616

api-ms-win-rtcore-ntuser-winevent-l1-1-0

SetWinEventHook UnhookWinEvent NotifyWinEvent

api-ms-win-gdi-dpiinfo-l1-1-0

GetCurrentDpiInfo

dwrite

DWriteCreateFactory

api-ms-win-rtcore-ntuser-private-l1-1-10

ord2546

api-ms-win-appmodel-runtime-l1-1-0

GetApplicationUserModelId GetPackagesByPackageFamily

api-ms-win-storage-exports-internal-l1-1-0

SHGetKnownFolderIDList SHGetSpecialFolderLocation DetermineFolderDestinationParentAppID

shell32

SHAppBarMessage SHGetPathFromIDListW SHGetLocalizedName SHCreateItemInKnownFolder ShellExecuteExW SHSetLocalizedName ord901 SHGetStockIconInfo DragQueryFileW ShellExecuteW ord723 ord524 SHRemoveLocalizedName ord75 ord28 SHGetPathFromIDListEx ord727 ord905 SHChangeNotify SHFileOperationW ord894 ord941 SHBindToFolderIDListParent ord155 SHGetPropertyStoreForWindow SHCreateItemWithParent ord19

combase

ord167

api-ms-win-shlwapi-ie-l1-1-0

SHRegGetBoolValueFromHKCUHKLM GUIDFromStringW

uxtheme

ord126

shcore

ord213 ord248 ord193 ord102 ord192 ord191 ord249 ord270 ord240 ord246 ord247 ord190

dcomp

DCompositionCreateDevice2 ord1046

wincorlib

?__abi_WinRTraiseOutOfMemoryException@@YAXXZ ?Allocate@Heap@Details@Platform@@SAPEAX_K0@Z ?__abi_WinRTraiseOutOfBoundsException@@YAXXZ ?GetWeakReference@Details@Platform@@YAPEAU__abi_IUnknown@@QE$ADVObject@2@@Z ?Allocate@Heap@Details@Platform@@SAPEAX_K@Z ??0Delegate@Platform@@QE$AAA@XZ ?ReleaseTarget@ControlBlock@Details@Platform@@AEAAXXZ ?AlignedFree@Heap@Details@Platform@@SAXPEAX@Z ?Free@Heap@Details@Platform@@SAXPEAX@Z ??0Object@Platform@@QE$AAA@XZ ?__abi_WinRTraiseObjectDisposedException@@YAXXZ ?__abi_WinRTraiseInvalidCastException@@YAXXZ ?GetIBoxArrayVtable@Details@Platform@@YAPEAXPEAX@Z ?__abi_WinRTraiseNotImplementedException@@YAXXZ ?ResolveWeakReference@Details@Platform@@YAPE$AAVObject@2@AEBU_GUID@@PEAPEAU__abi_IUnknown@@@Z ?CreateException@Exception@Platform@@SAPE$AAV12@HPE$AAVString@2@@Z ?GetIBoxVtable@Details@Platform@@YAPEAXPEAX@Z ?__abi_ObjectToString@__abi_details@@YAPE$AAVString@Platform@@PE$AAVObject@3@_N@Z ?EventSourceRemove@Details@Platform@@YAXPEAPEAXPEAUEventLock@12@VEventRegistrationToken@Foundation@Windows@@@Z ?get@Message@Exception@Platform@@QE$AAAPE$AAVString@3@XZ ?EventSourceGetTargetArrayEvent@Details@Platform@@YAPEAXPEAXIPEBXPEA_J@Z ?EventSourceGetTargetArraySize@Details@Platform@@YAIPEAX@Z ?EventSourceGetTargetArray@Details@Platform@@YAPEAXPEAXPEAUEventLock@12@@Z ??0DisconnectedException@Platform@@QE$AAA@XZ ?AllocateException@Heap@Details@Platform@@SAPEAX_K0@Z ?EventSourceUninitialize@Details@Platform@@YAXPEAPEAX@Z ?EventSourceInitialize@Details@Platform@@YAXPEAPEAX@Z ??0NotImplementedException@Platform@@QE$AAA@XZ ?__abi_WinRTraiseChangedStateException@@YAXXZ ?EventSourceAdd@Details@Platform@@YA?AVEventRegistrationToken@Foundation@Windows@@PEAPEAXPEAUEventLock@12@PE$AAVDelegate@2@@Z ??0OutOfBoundsException@Platform@@QE$AAA@XZ ??0ChangedStateException@Platform@@QE$AAA@XZ ?GetProxyImpl@Details@Platform@@YAJPEAUIUnknown@@AEBU_GUID@@0PEAPEAU3@@Z ??0FailureException@Platform@@QE$AAA@XZ ??0OutOfMemoryException@Platform@@QE$AAA@XZ ?__abi_WinRTraiseNullReferenceException@@YAXXZ ?__abi_WinRTraiseDisconnectedException@@YAXXZ ?__abi_WinRTraiseCOMException@@YAXJ@Z ?__abi_WinRTraiseFailureException@@YAXXZ ?__abi_WinRTraiseClassNotRegisteredException@@YAXXZ ?ReleaseInContextImpl@Details@Platform@@YAJPEAUIUnknown@@0@Z ?GetObjectContext@Details@Platform@@YAPEAUIUnknown@@XZ ?ReCreateException@Exception@Platform@@SAPE$AAV12@H@Z ?UninitializeData@Details@Platform@@YAXH@Z ?__abi_WinRTraiseOperationCanceledException@@YAXXZ ?__abi_FailFast@@YAXXZ ?__abi_WinRTraiseInvalidArgumentException@@YAXXZ ?__abi_WinRTraiseWrongThreadException@@YAXXZ ?ReCreateFromException@Details@Platform@@YAJPE$AAVException@2@@Z ?__abi_WinRTraiseAccessDeniedException@@YAXXZ ?GetActivationFactoryByPCWSTR@@YAJPEAXAEAVGuid@Platform@@PEAPEAX@Z ?GetIidsFn@@YAJHPEAKPEBU__s_GUID@@PEAPEAVGuid@Platform@@@Z ?InitializeData@Details@Platform@@YAJH@Z

wininet

InternetReadFile InternetOpenUrlW InternetOpenW InternetCloseHandle HttpQueryInfoW InternetCrackUrlW

cdp

CDPGetUserActivitySettings CDPInitialize CDPShutdown

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-shcore-unicodeansi-l1-1-0

SHUnicodeToAnsi SHAnsiToUnicode

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalLock

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-appmodel-runtime-l1-1-3

GetStagedPackagePathByFullName2

api-ms-win-rtcore-ntuser-clipboard-l1-1-0

RegisterClipboardFormatW

api-ms-win-crt-math-l1-1-0

ceilf floorf

Name

.text

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

288KB

Virtual Size

288KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/unicodedata.pyd

IMPHASH bb6f6d951dbdd290ecf382ca57459172
SHA256 1a965c1904da88989468852fdc749b520cce46617b9190163c8df19345b59560
MD5 57f8f40cf955561a5044ddffa4f2e144
SHA1 19218025bcae076529e49dde8c74f12e1b779279
SHA512 db2a7a32e0b5bf0684a8c4d57a1d7df411d8eb1bc3828f44c95235dd3af40e50a198427350161dff2e79c07a82ef98e1536e0e013030a15bdf1116154f1d8338
SSDEEP 12288:C3kYbfjwR6nbVonRiPDjRrO5184EPYPx++ZiLKGZ5KXyVH4eD1Ji:CUYbM40IDJcjEwPgPOG6Xyd461Ji
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Digest

d8:7b:f3:e0:a1:46:f5:8e:5b:8e:f5:84:61:eb:7f:1f:d6:ff:24:19:29:d0:dc:f2:cb:10:0b:ed:ab:d3:de:31

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Chains

Oct 2, 2023

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2013 - Jan 15, 2038

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US

Serial Number

07:1f:14:1b:8b:30:0d:25:f3:14:eb:23:0c:d0:d1:dd

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Jan 17, 2022 - Jan 15, 2025

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Serial Number

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 14, 2023 - Oct 13, 2034

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

0

Major OS version

6

Entry point

10832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\1\b\bin\amd64\unicodedata.pdb

python311

PyCapsule_GetPointer PyUnicode_FromStringAndSize PyModule_AddObjectRef _Py_Dealloc PyUnicode_FromString _Py_FalseStruct PyModule_AddStringConstant PyModule_AddType PyModule_Type _PyUnicode_Ready _Py_TrueStruct _PyUnicode_ToDigit PyModule_AddObject PyMem_Realloc PyUnicode_Compare PyType_FromSpec PyObject_GC_Track PyModuleDef_Init PyUnicode_FromKindAndData PyErr_NoMemory PyMem_Free PyCapsule_New PyObject_GC_Del _PyObject_GC_New PyMem_Malloc PyType_IsSubtype PyErr_Format PyExc_ValueError PyErr_SetString _PyArg_BadArgument _PyUnicode_ToDecimalDigit _PyUnicode_ToNumeric PyFloat_FromDouble _Py_ctype_toupper PyUnicode_FromOrdinal PyObject_GC_UnTrack PyLong_FromLong PyObject_GenericGetAttr PyErr_Occurred PyExc_KeyError _PyArg_CheckPositional PyOS_snprintf PyUnicode_CompareWithASCIIString _PyArg_Parse_SizeT

vcruntime140

__std_type_info_destroy_list __C_specific_handler memset memcpy

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm _initterm_e

kernel32

IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/vcruntime140.dll

IMPHASH 7f07fd94e5bb907093556781cc464017
SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
MD5 4585a96cc4eef6aafd5e27ea09147dc6
SHA1 489cfff1b19abbec98fda26ac8958005e88dd0cb
SHA512 d78260c66331fe3029d2cc1b41a5d002ec651f2e3bbf55076d65839b5e3c6297955afd4d9ab8951fbdc9f929dbc65eb18b14b59bce1f2994318564eb4920f286
SSDEEP 1536:GcghbEGyzXJZDWnEzWG9q4lVOiVgXjO5/woecbq8qZHg2zuCS+zuecL:GV3iC0h9q4v6XjKwoecbq8qBTq+1cL
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

ad:cc:9b:95:6f:75:f6:81:5c:18:63:52:76:3b:18:68:22:cb:de:95:db:10:4e:8b:c4:50:5b:c1:36:c9:93:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

ad:cc:9b:95:6f:75:f6:81:5c:18:63:52:76:3b:18:68:22:cb:de:95:db:10:4e:8b:c4:50:5b:c1:36:c9:93:d7

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

65424

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb

_CreateFrameInfo _CxxThrowException _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __C_specific_handler __C_specific_handler_noexcept __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __NLG_Dispatch2 __NLG_Return2 __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __intrinsic_setjmpex __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _get_purecall_handler _get_unexpected _is_exception_typeof _local_unwind _purecall _set_purecall_handler _set_se_translator longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

Name

.text

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

348B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

976B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

416B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/vcruntime140_1.dll

IMPHASH f241ab269df0f49a166138f5cc16a017
SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
MD5 7e668ab8a78bd0118b94978d154c85bc
SHA1 dbac42a02a8d50639805174afd21d45f3c56e3a0
SHA512 72bb41db17256141b06e2eaeb8fc65ad4abdb65e4b5f604c82b9e7e7f60050734137d602e0f853f1a38201515655b6982f2761ee0fa77c531aa58591c95f0032
SSDEEP 768:YEgYXUcHJcUJSDW/tfxL1qBSHGm6Ub/I2Hi09z0XQKBcRmuU9zuKl:YvGS8fZ1esJwUpz0X3B+d8zuKl
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

cb:74:3f:bf:2a:a4:f3:30:70:ef:98:10:0d:67:29:5e:dd:b4:7d:63:4a:23:9f:fa:d0:f5:f7:55:9a:cd:54:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

cb:74:3f:bf:2a:a4:f3:30:70:ef:98:10:0d:67:29:5e:dd:b4:7d:63:4a:23:9f:fa:d0:f5:f7:55:9a:cd:54:02

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

16848

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/win32crypt.pyd

IMPHASH bffdfe175af4738a3359ba39fd0dfb52
SHA256 9771f09be29bd7a69abe774e28472a392382883c18a3cc524f8141e84b1be22c
MD5 5390ade0ed5428024f3d854b5b9bfe9f
SHA1 dada7b44887dcb7b77dcadb9690baecf3ee2b937
SHA512 92e82eff79f45d4de1cf27946a357f122c5337a85315d7c139458a1a6a51dffbf3cbfcf832851fbdcd0ec1bd0f82e7089125ffbbe3275675433089bddbff865b
SSDEEP 1536:qcoj2WDPYNSPEkIrFCkAShRD/bv0SShzljLraBqf9308qxJ83zEBoPTEdLQEF8/d:q7jbPA0SD9S3vrCqf93xM4TEdLZn1xa
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

63272

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\src\pywin32\build\temp.win-amd64-cpython-311\Release\win32crypt.pdb

crypt32

CryptExportPublicKeyInfo CryptImportPublicKeyInfo CertFreeCTLContext CertSerializeCTLStoreElement CertDeleteCTLFromStore CertEnumCTLContextProperties CertEnumSubjectInSortedCTL CryptBinaryToStringW PFXImportCertStore CryptDecryptMessage CryptDecodeObjectEx CryptGetMessageSignerCount CryptFormatObject CryptEnumKeyIdentifierProperties CryptEncryptMessage CryptGetKeyIdentifierProperty CryptSignMessage CertEnumSystemStore CryptFindOIDInfo PFXVerifyPassword CertRegisterSystemStore CertOpenSystemStoreW CertVerifySubjectCertificateContext CryptGetMessageCertificates CryptSignAndEncryptMessage CertEnumPhysicalStore CertNameToStrW CryptQueryObject PFXIsPFXBlob CryptEncodeObjectEx CryptFindLocalizedName CryptDecodeMessage CertOIDToAlgId CertOpenStore CryptVerifyDetachedMessageSignature CryptUnprotectData CertAddSerializedElementToStore CryptProtectData CryptStringToBinaryW CryptVerifyMessageSignature CryptEnumOIDInfo CertEnumSystemStoreLocation CertUnregisterSystemStore CryptDecryptAndVerifyMessageSignature CryptMsgClose CertGetCertificateContextProperty CertSetCertificateContextProperty CertSerializeCertificateStoreElement CertAddCTLLinkToStore CertDuplicateStore CertFreeCertificateContext CertGetEnhancedKeyUsage CertGetIntendedKeyUsage CryptAcquireCertificatePrivateKey CertDeleteCertificateFromStore CertEnumCertificateContextProperties CertDuplicateCTLContext CertEnumCTLsInStore PFXExportCertStoreEx CertCloseStore CertDuplicateCertificateContext CertAddCTLContextToStore CertEnumCertificatesInStore CertAddCertificateLinkToStore CertSaveStore CertAddCertificateContextToStore CertControlStore CertRemoveStoreFromCollection CertAddEncodedCertificateToStore CertAddStoreToCollection CertAlgIdToOID

advapi32

CryptDestroyHash CryptEnumProvidersW CryptEnumProviderTypesW CryptGetDefaultProviderW CryptSetProviderExW CryptGetUserKey CryptGenRandom CryptCreateHash CryptImportKey CryptGetProvParam CryptGenKey CryptReleaseContext CryptDestroyKey CryptGetKeyParam CryptEncrypt CryptDuplicateKey CryptDecrypt CryptExportKey CryptDuplicateHash CryptVerifySignatureW CryptHashSessionKey CryptHashData CryptSignHashW CryptGetHashParam CryptContextAddRef CryptAcquireContextW

python311

PySequence_GetItem PyErr_WarnEx PyObject_GenericGetAttr PyEval_SaveThread PyExc_MemoryError _Py_NoneStruct PyErr_SetString PyExc_PendingDeprecationWarning _Py_Dealloc PyList_New PyList_Append PyObject_GenericSetAttr PyMem_Free PyLong_FromVoidPtr PyErr_NoMemory PyExc_NotImplementedError PyArg_ParseTupleAndKeywords _Py_NewReference PyExc_TypeError PyExc_SystemError PyEval_RestoreThread PyBool_FromLong PyLong_AsUnsignedLong PyErr_Occurred PyArg_ParseTuple PyType_Ready PyModule_Create2 PyLong_AsLong PyModule_GetDict PyObject_Call PyGILState_Ensure PyLong_AsVoidPtr PySequence_Check PyErr_Clear _PyArg_ParseTuple_SizeT PyGILState_Release PyLong_FromLong PyUnicode_DecodeUTF8 PyBytes_FromStringAndSize PyBytes_AsString PyExc_RuntimeWarning PySequence_Size _PyArg_ParseTupleAndKeywords_SizeT PyBytes_FromString _Py_BuildValue_SizeT _Py_TrueStruct PyUnicode_AsUTF8 PyErr_Format PyLong_FromUnsignedLong PyExc_ValueError PyTuple_New Py_BuildValue

pywintypes311

?PyWinLong_AsVoidPtr@@YAHPEAU_object@@PEAPEAX@Z ?PyWinGlobals_Ensure@@YAHXZ ?PyWinSequence_Tuple@@YAPEAU_object@@PEAU1@PEAK@Z ?PyWinObject_AsHKEY@@YAHPEAU_object@@PEAPEAUHKEY__@@@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W@Z ?PyWinObject_FromHANDLE@@YAPEAU_object@@PEAX@Z ?PyWinCoreString_FromString@@YAPEAU_object@@PEBD_J@Z ?PyWinObject_FromSECURITY_DESCRIPTOR@@YAPEAU_object@@PEAX@Z ??0PyWinBufferView@@QEAA@XZ ?init@PyWinBufferView@@QEAA_NPEAU_object@@_N1@Z ?PyWinObject_AsFILETIME@@YAHPEAU_object@@PEAU_FILETIME@@@Z ?PyWinObject_FromOLECHAR@@YAPEAU_object@@PEB_W_J@Z ?PyWinObject_FromFILETIME@@YAPEAU_object@@AEBU_FILETIME@@@Z ??0PyWinBufferView@@QEAA@PEAU_object@@_N1@Z ??1PyWinBufferView@@QEAA@XZ ?ok@PyWinBufferView@@QEAA_NXZ ?ptr@PyWinBufferView@@QEAAPEAXXZ ?len@PyWinBufferView@@QEAAKXZ ?PyWin_SetAPIError@@YAPEAU_object@@PEADJ@Z ?PyWinObject_FreeWCHAR@@YAXPEA_W@Z ?PyWinObject_AsWCHAR@@YAHPEAU_object@@PEAPEA_WHPEAK@Z ?PyWinObject_AsHANDLE@@YAHPEAU_object@@PEAPEAX@Z

kernel32

LocalFree RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime DisableThreadLibraryCalls InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetLastError

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list __std_terminate memset __current_exception_context __current_exception __C_specific_handler _CxxThrowException __std_exception_destroy __std_exception_copy memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initterm_e _cexit terminate _crt_at_quick_exit _initterm

api-ms-win-crt-string-l1-1-0

strcmp

??0PyCERTSTORE@@QEAA@PEAX@Z ??0PyCERT_CONTEXT@@QEAA@PEBU_CERT_CONTEXT@@@Z ??0PyCRYPTHASH@@QEAA@_K@Z ??0PyCRYPTKEY@@QEAA@_KPEAU_object@@@Z ??0PyCRYPTMSG@@QEAA@PEAX@Z ??0PyCRYPTPROV@@QEAA@_K@Z ??0PyCTL_CONTEXT@@QEAA@PEBU_CTL_CONTEXT@@@Z ??1PyCERTSTORE@@QEAA@XZ ??1PyCERT_CONTEXT@@QEAA@XZ ??1PyCRYPTHASH@@QEAA@XZ ??1PyCRYPTKEY@@QEAA@XZ ??1PyCRYPTMSG@@QEAA@XZ ??1PyCRYPTPROV@@QEAA@XZ ??1PyCTL_CONTEXT@@QEAA@XZ ??4PyCERTSTORE@@QEAAAEAV0@AEBV0@@Z ??4PyCERT_CONTEXT@@QEAAAEAV0@AEBV0@@Z ??4PyCRYPTHASH@@QEAAAEAV0@AEBV0@@Z ??4PyCRYPTKEY@@QEAAAEAV0@AEBV0@@Z ??4PyCRYPTMSG@@QEAAAEAV0@AEBV0@@Z ??4PyCRYPTPROV@@QEAAAEAV0@AEBV0@@Z ??4PyCTL_CONTEXT@@QEAAAEAV0@AEBV0@@Z ?GetCTL_CONTEXT@PyCTL_CONTEXT@@QEAAPEBU_CTL_CONTEXT@@XZ ?GetHCERTSTORE@PyCERTSTORE@@QEAAPEAXXZ ?GetHCRYPTHASH@PyCRYPTHASH@@QEAA_KXZ ?GetHCRYPTKEY@PyCRYPTKEY@@QEAA_KXZ ?GetHCRYPTMSG@PyCRYPTMSG@@QEAAPEAXXZ ?GetHCRYPTPROV@PyCRYPTPROV@@QEAA_KXZ ?GetPCCERT_CONTEXT@PyCERT_CONTEXT@@QEAAPEBU_CERT_CONTEXT@@XZ ?PyCERTSTOREType@@3U_typeobject@@A ?PyCERT_CONTEXTType@@3U_typeobject@@A ?PyCRYPTHASHType@@3U_typeobject@@A ?PyCRYPTKEYType@@3U_typeobject@@A ?PyCRYPTMSGType@@3U_typeobject@@A ?PyCRYPTPROVType@@3U_typeobject@@A ?PyCTL_CONTEXTType@@3U_typeobject@@A ?PyCertAddCTLContextToStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertAddCTLLinkToStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertAddCertificateContextToStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertAddCertificateLinkToStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertAddEncodedCertificateToStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertAddStoreToCollection@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertCloseStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertControlStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertDeleteCTLFromStore@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertDeleteCertificateFromStore@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertEnumCTLContextProperties@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertEnumCTLsInStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@0@Z ?PyCertEnumCertificateContextProperties@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertEnumCertificatesInStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@0@Z ?PyCertEnumSubjectInSortedCTL@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertFreeCTLContext@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertFreeCertificateContext@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertGetCertificateContextProperty@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCertGetEnhancedKeyUsage@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCertGetIntendedKeyUsage@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?PyCertRemoveStoreFromCollection@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertSaveStore@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?PyCertSerializeCTLStoreElement@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCertSerializeCertificateStoreElement@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCertSetCertificateContextProperty@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCertVerifySubjectCertificateContext@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCryptAcquireCertificatePrivateKey@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@00@Z ?PyCryptCreateHash@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptDecrypt@PyCRYPTKEY@@SAPEAU_object@@PEAU2@00@Z ?PyCryptDestroyHash@PyCRYPTHASH@@SAPEAU_object@@PEAU2@0@Z ?PyCryptDestroyKey@PyCRYPTKEY@@SAPEAU_object@@PEAU2@0@Z ?PyCryptDuplicateHash@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyCryptDuplicateKey@PyCRYPTKEY@@SAPEAU_object@@PEAU2@00@Z ?PyCryptEncrypt@PyCRYPTKEY@@SAPEAU_object@@PEAU2@00@Z ?PyCryptExportKey@PyCRYPTKEY@@SAPEAU_object@@PEAU2@00@Z ?PyCryptExportPublicKeyInfo@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGenKey@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGenRandom@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGetHashParam@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGetKeyParam@PyCRYPTKEY@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGetProvParam@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptGetUserKey@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptHashData@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyCryptHashSessionKey@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyCryptImportKey@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptImportPublicKeyInfo@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptMsgClose@PyCRYPTMSG@@SAPEAU_object@@PEAU2@0@Z ?PyCryptReleaseContext@PyCRYPTPROV@@SAPEAU_object@@PEAU2@00@Z ?PyCryptSignHash@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyCryptVerifySignature@PyCRYPTHASH@@SAPEAU_object@@PEAU2@00@Z ?PyPFXExportCertStoreEx@PyCERTSTORE@@SAPEAU_object@@PEAU2@00@Z ?deallocFunc@PyCERTSTORE@@SAXPEAU_object@@@Z ?deallocFunc@PyCERT_CONTEXT@@SAXPEAU_object@@@Z ?deallocFunc@PyCRYPTHASH@@SAXPEAU_object@@@Z ?deallocFunc@PyCRYPTKEY@@SAXPEAU_object@@@Z ?deallocFunc@PyCRYPTMSG@@SAXPEAU_object@@@Z ?deallocFunc@PyCRYPTPROV@@SAXPEAU_object@@@Z ?deallocFunc@PyCTL_CONTEXT@@SAXPEAU_object@@@Z ?getattro@PyCERTSTORE@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCERT_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCRYPTHASH@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCRYPTKEY@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCRYPTMSG@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCRYPTPROV@@SAPEAU_object@@PEAU2@0@Z ?getattro@PyCTL_CONTEXT@@SAPEAU_object@@PEAU2@0@Z ?members@PyCERTSTORE@@2PAUPyMemberDef@@A ?members@PyCERT_CONTEXT@@2PAUPyMemberDef@@A ?members@PyCRYPTHASH@@2PAUPyMemberDef@@A ?members@PyCRYPTKEY@@2PAUPyMemberDef@@A ?members@PyCRYPTMSG@@2PAUPyMemberDef@@A ?members@PyCRYPTPROV@@2PAUPyMemberDef@@A ?members@PyCTL_CONTEXT@@2PAUPyMemberDef@@A ?methods@PyCERTSTORE@@2PAUPyMethodDef@@A ?methods@PyCERT_CONTEXT@@2PAUPyMethodDef@@A ?methods@PyCRYPTHASH@@2PAUPyMethodDef@@A ?methods@PyCRYPTKEY@@2PAUPyMethodDef@@A ?methods@PyCRYPTMSG@@2PAUPyMethodDef@@A ?methods@PyCRYPTPROV@@2PAUPyMethodDef@@A ?methods@PyCTL_CONTEXT@@2PAUPyMethodDef@@A ?setattro@PyCERTSTORE@@SAHPEAU_object@@00@Z ?setattro@PyCERT_CONTEXT@@SAHPEAU_object@@00@Z ?setattro@PyCRYPTHASH@@SAHPEAU_object@@00@Z ?setattro@PyCRYPTKEY@@SAHPEAU_object@@00@Z ?setattro@PyCRYPTMSG@@SAHPEAU_object@@00@Z ?setattro@PyCRYPTPROV@@SAHPEAU_object@@00@Z ?setattro@PyCTL_CONTEXT@@SAHPEAU_object@@00@Z PyInit_win32crypt

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/windows.storage.dll

IMPHASH a78aae42f9ae6a0e2b23c60d81d598c9
SHA256 47c90b40632e70c9327ef60f09a442e5f35563d5602011ea2522a9cf1b97fa87
MD5 5fbe11eb42a7b28d21ed8ee5a15cc9d6
SHA1 6cd39ad9f8281fb86bdf1eab83886fd49862d500
SHA512 f4347521c40eeffa959b9f497a192fb798d341858ccb2b12c27dff3925abefaa72721f671f12ea75db2a640c584b37b5520c502ac4ab9582182487fa900aa3ea
SSDEEP 98304:/33WviCMGeSjuvcMaTvifuF0WCr8kab3K:evreSSvcMaTKG0WCrharK
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Digest

30:21:3b:bd:c0:77:63:7c:05:42:1c:8d:3f:58:11:e8:4c:92:f0:2d:af:c5:c0:5f:a8:7a:1c:66:a6:97:b4:80

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Minor OS version

0

Major OS version

10

Entry point

1808352

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Windows.Storage.pdb

api-ms-win-crt-string-l1-1-0

wcscmp wcscspn memset wcsncmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__recalloc _o__register_onexit_function _o__resetstkoflw _o__seh_filter_dll _o__set_errno _o__ui64tow_s _o__wcsicmp _o__wcsnicmp _o__wcstoi64 _o__wtoi _o_bsearch _o_calloc _o_free _o_iswalnum memmove _o_iswcntrl _o_iswprint _o_iswspace _o_malloc _o_memcpy_s _o_rand _o_realloc _o_srand _o_strncat_s _o_strncpy_s _o_strtol _o_strtoul _o_terminate _o_toupper _o_towlower _o_wcscat_s _o_wcscpy_s _o_wcsncpy_s _o_wcstok_s _o_wcstol _o_wcstoul _o__purecall _o__get_errno wcsrchr wcschr wcsstr strchr __CxxFrameHandler3 _o__execute_onexit_table _o__errno _o__crt_atexit _o__ltow_s _o__configure_narrow_argv _o__cexit _o___stdio_common_vswscanf _o___stdio_common_vswprintf _o___stdio_common_vsprintf_s _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o__invalid_parameter_noinfo_noreturn _o__invalid_parameter_noinfo _o__initialize_onexit_table _o__initialize_narrow_environment _o__i64tow_s __C_specific_handler __std_terminate __CxxFrameHandler4 _CxxThrowException memcmp memcpy

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW GetModuleFileNameA FreeLibrary SizeofResource GetModuleFileNameW FindResourceExW LoadResource GetModuleHandleExW FindStringOrdinal LoadStringW GetProcAddress GetModuleHandleW LoadStringA LockResource DisableThreadLibraryCalls

api-ms-win-core-synch-l1-1-0

CreateEventExW WaitForSingleObject LeaveCriticalSection ResetEvent InitializeCriticalSectionEx InitializeCriticalSection CreateEventW WaitForMultipleObjectsEx AcquireSRWLockExclusive CreateMutexExW OpenSemaphoreW ReleaseSemaphore CreateSemaphoreExW CreateWaitableTimerExW InitializeSRWLock DeleteCriticalSection TryEnterCriticalSection CreateMutexW SetWaitableTimer OpenMutexW TryAcquireSRWLockShared SetEvent WaitForSingleObjectEx AcquireSRWLockShared TryAcquireSRWLockExclusive ReleaseSRWLockShared OpenEventW ReleaseMutex InitializeCriticalSectionAndSpinCount ReleaseSRWLockExclusive EnterCriticalSection

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapReAlloc HeapAlloc HeapFree

api-ms-win-core-errorhandling-l1-1-0

SetErrorMode GetLastError SetLastError RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess OpenThread DeleteProcThreadAttributeList GetExitCodeProcess InitializeProcThreadAttributeList GetCurrentProcess TlsFree OpenProcessToken GetProcessId OpenThreadToken CreateProcessAsUserW GetCurrentThread UpdateProcThreadAttribute GetThreadPriority SetThreadToken GetCurrentProcessId ProcessIdToSessionId CreateProcessW SetThreadPriority CreateThread TlsAlloc TlsGetValue TlsSetValue ResumeThread GetCurrentThreadId GetExitCodeThread

api-ms-win-core-localization-l1-2-0

GetSystemDefaultLCID ResolveLocaleName GetSystemPreferredUILanguages FindNLSString LCMapStringW FormatMessageW IsDBCSLeadByte GetUserDefaultLCID SetThreadPreferredUILanguages GetLocaleInfoW GetThreadPreferredUILanguages IdnToAscii LocaleNameToLCID GetThreadUILanguage FindNLSStringEx

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

ntdll

NtQueryInformationProcess NtQueryVolumeInformationFile EtwCheckCoverage NtSetInformationProcess RtlIsCloudFilesPlaceholder RtlIsPartialPlaceholder WinSqmIsOptedIn RtlSetProxiedProcessId NtOpenProcessToken WinSqmAddToStream WinSqmSetDWORD RtlQueryPackageClaims NtClose RtlMapGenericMask NtCreateLowBoxToken RtlGetAppContainerSidType NtQueryWnfStateData RtlSubscribeWnfStateChangeNotification RtlGetDeviceFamilyInfoEnum NtQueryInformationFile RtlNtStatusToDosError RtlDeriveCapabilitySidsFromName NtQueryInformationThread NtGetCachedSigningLevel RtlIsMultiUsersInSessionSku NtSetSecurityObject WinSqmAddToStreamEx NtQuerySecurityObject RtlSetDaclSecurityDescriptor RtlAddAccessAllowedAce RtlAddAce RtlGetAce RtlCreateAcl RtlLengthSid RtlQueryInformationAcl RtlGetDaclSecurityDescriptor EtwEventActivityIdControl NtCompareSigningLevels NtSetCachedSigningLevel RtlDosPathNameToRelativeNtPathName_U NtQueryAttributesFile RtlFreeHeap RtlReleaseRelativeName RtlDosPathNameToRelativeNtPathName_U_WithStatus RtlLengthRequiredSid RtlCreateServiceSid RtlGetOwnerSecurityDescriptor NtSetInformationThread NtGetNextThread RtlReportExceptionEx RtlEqualSid RtlUnicodeStringToAnsiString RtlFreeAnsiString RtlIsTextUnicode NtQuerySystemInformation RtlQueryThreadPlaceholderCompatibilityMode NtOpenThreadToken RtlCompareUnicodeString RtlSetThreadPlaceholderCompatibilityMode RtlInitUnicodeStringEx NtQueryDirectoryFile ZwQueryWnfStateData RtlInitUnicodeString RtlUnsubscribeWnfNotificationWaitForCompletion RtlAreLongPathsEnabled RtlQueryResourcePolicy RtlFlushHeaps NtQuerySystemInformationEx RtlDllShutdownInProgress RtlAllocateHeap RtlNtStatusToDosErrorNoTeb NtQueryInformationToken RtlCreateSecurityDescriptor NtOpenProcessTokenEx RtlPrefixString RtlInitString RtlOemStringToUnicodeString RtlDowncaseUnicodeString RtlUnicodeStringToOemString NtFsControlFile EtwUnregisterTraceGuids EtwRegisterTraceGuidsW EtwGetTraceEnableFlags RtlpEnsureBufferSize RtlNtPathNameToDosPathName EtwGetTraceEnableLevel EtwGetTraceLoggerHandle EtwEventSetInformation EtwEventRegister SbSelectProcedure EtwEventUnregister EtwEventWriteTransfer RtlGetLastNtStatus NtQueryKey RtlDosPathNameToNtPathName_U NtOpenFile RtlIsNonEmptyDirectoryReparsePointAllowed RtlFreeUnicodeString NtSetInformationFile NtCreateFile

api-ms-win-core-url-l1-1-0

PathIsURLW ParseURLW PathCreateFromUrlW UrlGetLocationW UrlGetPartW UrlEscapeW UrlCombineW UrlCompareW UrlApplySchemeW UrlIsW UrlUnescapeW UrlCreateFromPathW

api-ms-win-core-string-obsolete-l1-1-0

lstrlenW lstrcmpiA lstrcmpiW lstrcmpA lstrcmpW lstrlenA

api-ms-win-core-shlwapi-legacy-l1-1-0

PathFindNextComponentW PathMatchSpecW PathGetArgsA PathIsSameRootW PathStripPathW PathRemoveExtensionW PathCommonPrefixW PathRemoveBackslashW PathGetCharTypeW PathRemoveBlanksW PathFileExistsW PathIsRelativeW PathIsUNCW PathSkipRootW PathStripToRootW PathIsUNCServerW PathIsFileSpecW PathUnquoteSpacesW PathIsValidCharW PathUnExpandEnvStringsW PathMatchSpecExW SHExpandEnvironmentStringsW PathGetDriveNumberW PathGetDriveNumberA PathParseIconLocationW PathIsPrefixW PathFindFileNameW PathQuoteSpacesW PathRemoveFileSpecW PathIsRootW PathFindExtensionW PathIsUNCServerShareW PathRelativePathToW

api-ms-win-core-registry-l1-1-0

RegCloseKey RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegDeleteTreeW RegOpenCurrentUser RegEnumKeyExW RegSetValueExW RegDeleteValueW RegGetKeySecurity RegNotifyChangeKeyValue RegDeleteKeyExW RegEnumValueW RegCreateKeyExW RegGetValueW

api-ms-win-core-heap-l2-1-0

LocalAlloc GlobalAlloc LocalFree GlobalFree LocalReAlloc

api-ms-win-core-string-l1-1-0

WideCharToMultiByte CompareStringW CompareStringEx MultiByteToWideChar CompareStringOrdinal GetStringTypeW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCpyNXW StrCSpnW StrCmpNW StrCmpW StrDupA StrStrW StrRChrW StrStrIW StrCmpNICW StrTrimW StrToIntExW StrCmpICW StrPBrkW StrDupW StrChrIW StrCmpNIW StrToIntW StrCmpICA StrStrNIW StrCmpLogicalW StrCmpCW StrChrW StrCmpIW QISearch

api-ms-win-core-string-l2-1-0

CharUpperBuffW CharLowerBuffW CharUpperW CharLowerW CharPrevW CharNextW

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce InitOnceBeginInitialize Sleep InitOnceComplete

api-ms-win-core-winrt-error-l1-1-0

SetRestrictedErrorInfo GetRestrictedErrorInfo RoTransformError RoOriginateError RoOriginateErrorW

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-stringansi-l1-1-0

CharPrevA CharNextA

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW GetEnvironmentVariableW FreeEnvironmentStringsW SearchPathW GetEnvironmentStringsW GetCurrentDirectoryW SetCurrentDirectoryW

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage GetSystemDefaultUILanguage

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlCompareMemory RtlCaptureContext RtlLookupFunctionEntry

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetSystemTime GetSystemInfo GlobalMemoryStatusEx GetLocalTime GetComputerNameExW GetTickCount GetSystemDirectoryW GetSystemWindowsDirectoryW GetWindowsDirectoryW GetTickCount64 GetVersionExW

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InitializeSListHead InterlockedFlushSList

combase

ord140 ord157 ord167 SetErrorInfo ord90 GetErrorInfo ord148

msvcp_win

?_Xout_of_range@std@@YAXPEBD@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?_Xlength_error@std@@YAXPEBD@Z

api-ms-win-crt-time-l1-1-0

_time64

wldp

WldpQueryWindowsLockdownMode

api-ms-win-eventing-provider-l1-1-0

EventEnabled EventWrite EventProviderEnabled EventUnregister EventSetInformation EventRegister EventWriteTransfer EventActivityIdControl

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolWait SetThreadpoolTimer CloseThreadpoolTimer WaitForThreadpoolWaitCallbacks SetThreadpoolWait TrySubmitThreadpoolCallback CreateThreadpoolTimer IsThreadpoolTimerSet CloseThreadpoolWait WaitForThreadpoolTimerCallbacks

api-ms-win-core-winrt-error-l1-1-1

RoReportFailedDelegate IsErrorPropagationEnabled RoGetMatchingRestrictedErrorInfo RoOriginateLanguageException

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabledForProcess QuirkIsEnabled

api-ms-win-core-path-l1-1-0

PathCchAddBackslashEx PathCchRemoveBackslash PathCchRenameExtension PathCchCanonicalizeEx PathCchSkipRoot PathAllocCombine PathCchStripToRoot PathCchAppendEx PathCchAppend PathCchCombine PathCchAddBackslash PathCchCombineEx PathCchCanonicalize PathIsUNCEx PathAllocCanonicalize PathCchFindExtension PathCchRemoveFileSpec

api-ms-win-core-file-l1-1-0

GetFileAttributesW FindNextFileW ReadFile SetFilePointer UnlockFile FindClose GetFileSizeEx LockFile GetLogicalDrives GetFileTime CompareFileTime GetFullPathNameW WriteFile GetDiskFreeSpaceW FlushFileBuffers SetFilePointerEx GetDiskFreeSpaceExW QueryDosDeviceW GetLongPathNameW GetFileSize GetVolumePathNameW GetFileInformationByHandle SetFileTime DeleteFileW GetVolumeInformationW GetShortPathNameW GetFileAttributesExW GetVolumeInformationByHandleW GetFinalPathNameByHandleW GetTempFileNameW CreateDirectoryW SetFileInformationByHandle FindFirstFileExW FindFirstFileW RemoveDirectoryW GetDriveTypeW CreateFileW SetFileAttributesW

api-ms-win-core-file-l2-1-0

ReadDirectoryChangesW CopyFile2 ReplaceFileW CreateHardLinkW MoveFileExW GetFileInformationByHandleEx

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-com-private-l1-1-0

CoRevokeInitializeSpy CoRegisterInitializeSpy

api-ms-win-core-file-l1-2-0

GetTempPathW GetVolumePathNamesForVolumeNameW GetVolumeNameForVolumeMountPointW CreateFile2

api-ms-win-shell-shellcom-l1-1-0

SHCoCreateInstance

api-ms-win-core-psapi-l1-1-0

K32GetModuleFileNameExW K32GetProcessImageFileNameW QueryFullProcessImageNameW

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformationForYear TzSpecificLocalTimeToSystemTime SystemTimeToTzSpecificLocalTime FileTimeToSystemTime SystemTimeToFileTime

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryLocationW

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-sysinfo-l1-2-0

GetOsSafeBootMode GetSystemTimePreciseAsFileTime GetProductInfo

api-ms-win-core-heap-obsolete-l1-1-0

GlobalSize GlobalLock GlobalReAlloc GlobalUnlock

api-ms-win-core-wow64-l1-1-1

Wow64SetThreadDefaultGuestMachine GetSystemWow64DirectoryW IsWow64Process2

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-kernel32-legacy-l1-1-0

SetVolumeLabelW MoveFileW DosDateTimeToFileTime GetComputerNameW FileTimeToDosDateTime

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW RegDeleteKeyValueW

api-ms-win-core-file-l2-1-1

OpenFileById

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem CreateTimerQueueTimer DeleteTimerQueueTimer

api-ms-win-core-io-l1-1-0

GetOverlappedResult CancelIoEx DeviceIoControl

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-kernel32-legacy-l1-1-1

PowerClearRequest PowerCreateRequest PowerSetRequest

api-ms-win-core-memory-l1-1-0

CreateFileMappingW VirtualFree MapViewOfFile UnmapViewOfFile ReadProcessMemory WriteProcessMemory

api-ms-win-core-privateprofile-l1-1-1

WritePrivateProfileSectionW

api-ms-win-core-privateprofile-l1-1-0

GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW

api-ms-win-core-sysinfo-l1-2-1

GetPhysicallyInstalledSystemMemory

api-ms-win-core-registryuserspecific-l1-1-0

SHRegGetBoolUSValueW SHRegGetUSValueW

api-ms-win-core-console-l3-2-0

GetConsoleWindow

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW GlobalDeleteAtom GlobalGetAtomNameW

api-ms-win-core-sysinfo-l1-2-3

GetIntegratedDisplaySize

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW WaitForMultipleObjects

api-ms-win-core-kernel32-private-l1-1-0

CheckElevationEnabled CheckElevation

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-file-l1-2-1

GetCompressedFileSizeW

api-ms-win-core-sidebyside-l1-1-0

DeactivateActCtx ReleaseActCtx ActivateActCtx CreateActCtxW

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

kernelbase

GetPackageFamilyNameFromToken IsDeveloperModeEnabled ParseApplicationUserModelId PackageNameAndPublisherIdFromFamilyName GetPackageApplicationIds GetCurrentPackageId GetCurrentPackageInfo GetCurrentApplicationUserModelId GetCurrentPackageFamilyName CheckAllowDecryptedRemoteDestinationPolicy GetApplicationUserModelIdFromToken GetCurrentPackageInfo2 FindPackagesByPackageFamily GetPackageInfo2 GetStagedPackagePathByFullName2

api-ms-win-core-psm-key-l1-1-0

PsmGetKeyFromToken

api-ms-win-crt-math-l1-1-0

ceilf

AssocCreateForClasses AssocGetDetailsOfPropKey AssocShouldProcessUseAppToAppLaunching CCachedShellItem_CreateInstance CCollectionFactory_CreateInstance CDesktopFolder_CreateInstanceWithBindContext CFSFolder_AdjustForSlowColumn CFSFolder_CreateFolder CFSFolder_IsCommonItem CFileOperationRecorder_CreateInstance CFreeThreadedItemContainer_CreateInstance CMruLongList_CreateInstance CPrivateProfileCache_Save CRegFolder_CreateAndInit CRegFolder_CreateInstance CShellItemArrayAsCollection_CreateInstance CShellItemArrayAsVirtualizedObjectArray_CreateInstance CShellItemArrayWithCommonParent_CreateInstance CShellItemArray_CreateInstance CShellItem_CreateInstance CStorageItem_GetValidatedStorageItemObject CTaskAddDoc_Create CViewSettings_CreateInstance CheckSmartScreenWithAltFile CopyDefaultLibrariesFromGroupPolicy CreateExtrinsicPropertyStore CreateItemArrayFromItemStore CreateItemArrayFromObjectArray CreateLocalizationDesktopIni CreateSortColumnArray CreateStorageItemFromPath_FullTrustCaller CreateStorageItemFromPath_FullTrustCaller_ForPackage CreateStorageItemFromPath_PartialTrustCaller CreateStorageItemFromShellItem CreateStorageItemFromShellItem_FullTrustCaller_ForPackage CreateVolatilePropertyStore CustomStatePropertyDescription_CreateWithItemPropertyStore CustomStatePropertyDescription_CreateWithStateIdentifier DataAccessCaches_InvalidateForLibrary DeserializeTextToLink DetermineFolderDestinationParentAppID DllCanUnloadNow DllGetActivationFactory DllGetClassObject DllMain DllRegisterServer DllUnregisterServer DragQueryFileW EnumShellItemsFromEnumFullIdList GetCachedFileUpdateInformation GetCommandProviderForFolderType GetFileUndoText GetFindDataForPath GetFindDataFromFileInformationByHandle GetInfoForFileInUse GetRegDataDrivenCommand GetRegDataDrivenCommandWithAssociation GetSelectionStateFromItemArray GetSystemPersistedStorageItemList GetSystemPersistedStorageItemListForUser GetThreadFlags GetUserChoiceForUrl Global_WindowsStorage_MaxIcons Global_WindowsStorage_Untyped_FileClassSRWLock Global_WindowsStorage_Untyped_MountPoint Global_WindowsStorage_Untyped_pFileClassCacheTable Global_WindowsStorage_Untyped_pFileHanderMap Global_WindowsStorage_Untyped_rgshil Global_WindowsStorage_afNotRedirected Global_WindowsStorage_ccIcon Global_WindowsStorage_csIconCache Global_WindowsStorage_csSCN Global_WindowsStorage_dwThreadBindCtx Global_WindowsStorage_dwThreadInitializing Global_WindowsStorage_esServerMode Global_WindowsStorage_fEndInitialized Global_WindowsStorage_fIconCacheHasBeenSuccessfullyCreated Global_WindowsStorage_fIconCacheIsValid Global_WindowsStorage_fNeedsInitBroadcast Global_WindowsStorage_hwndSCN Global_WindowsStorage_iLastSysIcon Global_WindowsStorage_iLastSystemColorDepth Global_WindowsStorage_iUseLinkPrefix Global_WindowsStorage_lProcessClassCount Global_WindowsStorage_lrFlags Global_WindowsStorage_nImageManagerVersion Global_WindowsStorage_tlsChangeClientProxy Global_WindowsStorage_tlsIconCache Global_WindowsStorage_tlsThreadFlags Global_WindowsStorage_ulNextID GrantPathAccess_FullTrustCaller_ForPackage GrantWorkingDirectoryAccess_FullTrustCaller_ForPackage HideExtension ILAppendID ILClone ILCloneFirst ILCombine ILFindChild ILFindLastID ILFree ILGetNext ILGetSize ILIsEqual ILIsParent ILLoadFromStreamEx ILRemoveLastID ILSaveToStream IsLFNDriveW IsLibraryCreatedByPolicy IsLibraryPolicyEnabled IsNameListedUnderKey IsUserAnAdmin NeverProvidedByJunction PathCleanupSpec PathContainedByManifestedKnownFolder_FullTrustCaller_ForPackage PathIsExe PathMakeUniqueName PathYetAnotherMakeUniqueName QueryStorageAccess_FullTrustCaller_ForPackage QueryStorageAccess_FullTrustCaller_ForToken RebaseOnDriveLetter RebaseOnVolumeID RegistryVerbs_GetHandlerMultiSelectModel SHBindToFolderIDListParent SHBindToFolderIDListParentEx SHBindToObject SHBindToParent SHCLSIDFromString SHChangeNotification_Lock SHChangeNotification_Unlock SHChangeNotify SHChangeNotifyDeregister SHChangeNotifyRegister SHCoCreateInstanceWorker SHCreateAssociationRegistration SHCreateDataObject SHCreateDefaultExtractIcon SHCreateDirectory SHCreateDirectoryExA SHCreateDirectoryExW SHCreateItemFromIDList SHCreateItemFromParsingName SHCreateItemInKnownFolder SHCreateItemWithParent SHCreateItemWithParentAndChildId SHCreateShellItemArray SHCreateShellItemArrayFromDataObject SHCreateShellItemArrayFromIDLists SHCreateShellItemArrayFromShellItem SHCreateShellItemArrayWithFolderParent SHCreateStdEnumFmtEtc SHFileOperationWithAdditionalFlags SHFindFiles SHFlushSFCache SHGetDesktopFolder SHGetFileInfoW SHGetFolderLocation SHGetFolderPathA SHGetFolderPathAndSubDirA SHGetFolderPathAndSubDirW SHGetFolderPathEx SHGetFolderPathW SHGetIDListFromObject SHGetInstanceExplorer SHGetItemFromObject SHGetKnownFolderIDList SHGetKnownFolderIDList_Internal SHGetKnownFolderItem SHGetKnownFolderPath SHGetNameFromIDList SHGetPathFromIDListEx SHGetPathFromIDListW SHGetSetSettings SHGetSpecialFolderLocation SHGetSpecialFolderPathA SHGetSpecialFolderPathW SHGetStockIconInfo SHGetTemporaryPropertyForItem SHILCreateFromPath SHKnownFolderFromCSIDL SHKnownFolderToCSIDL SHParseDisplayName SHPrepareKnownFoldersCommon SHPrepareKnownFoldersUser SHResolveLibrary SHRestricted SHSetFolderPathA SHSetFolderPathW SHSetKnownFolderPath SHSetLocalizedName SHSetTemporaryPropertyForItem SHSysErrorMessageBox SHTestTokenMembership STORAGE_AddItemToRecentDocs STORAGE_AddNewFolderToFrequentPlaces STORAGE_CEnumFiles_CreateInstance STORAGE_CStatusProvider_CreateInstance STORAGE_CStorageItem_GetValidatedStorageItem STORAGE_CStorageItem_GetValidatedStorageItemObject STORAGE_ClearDestinationsForAllApps STORAGE_CreateSortColumnArrayFromListDesc STORAGE_CreateStorageItemFromPath_FullTrustCaller STORAGE_CreateStorageItemFromPath_FullTrustCaller_ForPackage STORAGE_CreateStorageItemFromPath_PartialTrustCaller STORAGE_CreateStorageItemFromShellItem_FullTrustCaller STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandle STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_ForPackage_WithProcessHandleAndSecondaryStreamName STORAGE_CreateStorageItemFromShellItem_FullTrustCaller_UseImplicitFlagsAndPackage STORAGE_FillResultWithNullForKeys STORAGE_GetShellItemFromStorageItem STORAGE_GetSystemPersistedStorageItemList STORAGE_MakeDestinationItem STORAGE_PathIsEqualOrSubFolderOfKnownFolders STORAGE_SHAddToRecentDocs STORAGE_SHAddToRecentDocsEx STORAGE_SHConfirmOperation STORAGE_SHCreateDirectory STORAGE_SHCreateDirectoryExA STORAGE_SHCreateDirectoryExWWorker STORAGE_SHCreateShellItemArray STORAGE_SHCreateShellItemArrayFromDataObject STORAGE_SHCreateShellItemArrayFromIDLists STORAGE_SHCreateShellItemArrayFromShellItem STORAGE_SHFileOperation STORAGE_SHFileOperationA STORAGE_SHFreeNameMappings STORAGE_SHGetDesktopFolderWorker STORAGE_SHGetPathFromMsUri STORAGE_SHPathPrepareForWriteA STORAGE_SHPathPrepareForWriteW STORAGE_SHValidateMSUri SendNotificationsForLibraryItem SerializeLinkToText SetThreadFlags ShellExecuteExW StateRepoVerbsCache_Destroy StateRepoVerbsCache_GetContextMenuVerbs StateRepoVerbsCache_RebuildCacheAsync StorageItemHelpers_IsSupportedRemovablePath Storage_Internal_GetAccessListForPackage _CleanRecentDocs _PredictReasonableImpact

Name

.text

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

330KB

Virtual Size

329KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

121KB

Virtual Size

121KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/wininet.dll

IMPHASH 8f2adb9f59f915ba37a117c6317dab73
SHA256 1e5514cf0d23b8c176d57416861f0b34749a7c19d2c42896fc6b9f631984f6fc
MD5 38dd8e704873bdc8071987f18b12affb
SHA1 c1e4e3ea9cbfd68dae5506e94c8bbc286f00ac91
SHA512 6d92897fc17136be389bb8a6297c16cab51857332e80a49976fe817ad45a6a5020a308716e0070bb8c1ec860aea87a9ed2bac920f21c9ca670d8af1e4d5c56a5
SSDEEP 49152:NcmwjR80huNgGxRwcr3Gto+bj+nKovhLgtdpM1t0T+XgTqVAMPLf+yim81pngHmp:ojyFCM5ySVAEit9p
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

904128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

wininet.pdb

msvcrt

_amsg_exit _XcptFilter __C_specific_handler _lock wcstok_s qsort _itow _strnicmp _wtoi tolower _vscwprintf _unlock strchr strcmp wcscpy_s wcschr _wcsnicmp _atoi64 wcsstr _itoa_s wcsrchr bsearch wcsncmp memmove_s memcpy_s _strlwr __dllonexit _initterm memset memmove memcpy memcmp memchr iscntrl ispunct wcsncpy_s isalnum isspace isalpha isxdigit isdigit _onexit __isascii strncmp _vsnwprintf iswdigit strcspn strpbrk _vsnprintf ?terminate@@YAXXZ toupper _wcslwr_s __CxxFrameHandler3 _stricmp _wcsicmp _purecall free malloc _itow_s wcscmp

api-ms-win-core-memory-l1-1-0

MapViewOfFile UnmapViewOfFile OpenFileMappingW CreateFileMappingW VirtualFree VirtualAlloc

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetSystemTime GetTickCount64 GetTickCount GetSystemDirectoryW

api-ms-win-core-string-l1-1-0

CompareStringW WideCharToMultiByte MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError GetLastError

api-ms-win-core-synch-l1-1-0

WaitForSingleObject CreateEventW EnterCriticalSection SetEvent ResetEvent CreateEventA CreateMutexExW OpenSemaphoreW LeaveCriticalSection ReleaseMutex InitializeCriticalSectionEx ReleaseSemaphore InitializeCriticalSectionAndSpinCount CreateSemaphoreExW WaitForMultipleObjectsEx InitializeCriticalSection AcquireSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockShared ReleaseSRWLockExclusive InitializeSRWLock TryAcquireSRWLockExclusive CreateEventExA DeleteCriticalSection WaitForSingleObjectEx

api-ms-win-core-libraryloader-l1-2-0

LoadStringW LoadStringA GetModuleHandleExW GetModuleHandleW LoadLibraryExW GetModuleHandleExA GetModuleFileNameA FreeLibraryAndExitThread FreeLibrary LoadLibraryExA GetProcAddress GetModuleFileNameW

api-ms-win-core-heap-l1-1-0

HeapFree GetProcessHeap HeapAlloc HeapSize HeapReAlloc HeapDestroy

api-ms-win-core-synch-l1-2-0

SleepConditionVariableCS Sleep WakeAllConditionVariable InitOnceExecuteOnce InitializeConditionVariable SleepConditionVariableSRW

api-ms-win-core-file-l1-1-0

GetFileAttributesExW RemoveDirectoryW SetFileAttributesW FindNextFileW FindFirstFileW CreateDirectoryW SetEndOfFile SetFilePointerEx GetFileTime GetShortPathNameW SetFileInformationByHandle GetFileSizeEx GetDiskFreeSpaceExW CompareFileTime GetVolumeInformationW GetVolumePathNameW GetDriveTypeW CreateFileA DeleteFileW FindFirstFileExW WriteFile SetFilePointer CreateFileW ReadFile GetFileSize GetFileAttributesW FindClose LocalFileTimeToFileTime GetDiskFreeSpaceExA GetLongPathNameW

api-ms-win-eventing-provider-l1-1-0

EventWrite EventRegister EventWriteTransfer EventUnregister EventProviderEnabled EventActivityIdControl EventSetInformation

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime FileTimeToSystemTime

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessageVa

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-registry-l1-1-0

RegQueryValueExW RegOpenCurrentUser RegQueryInfoKeyW RegEnumKeyExW RegNotifyChangeKeyValue RegOpenKeyExW RegCloseKey RegCreateKeyExW RegQueryValueExA RegSetValueExA RegDeleteTreeA RegCreateKeyExA RegOpenKeyExA RegEnumKeyExA RegGetValueA RegGetValueW RegDeleteValueW RegDeleteTreeW RegSetValueExW

api-ms-win-core-heap-l2-1-0

LocalFree LocalAlloc GlobalAlloc GlobalFree

api-ms-win-core-localization-l1-2-0

IdnToAscii FormatMessageW IsDBCSLeadByteEx GetLocaleInfoW IdnToUnicode IsValidCodePage GetCPInfoExW GetCPInfo FormatMessageA IsDBCSLeadByte

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId OpenThreadToken OpenProcessToken CreateThread ProcessIdToSessionId TerminateProcess GetCurrentProcess SwitchToThread TlsFree TlsGetValue TlsSetValue GetCurrentThreadId TlsAlloc GetCurrentThread

api-ms-win-core-datetime-l1-1-0

GetDateFormatA GetTimeFormatA

api-ms-win-core-string-l2-1-0

CharLowerW

api-ms-win-core-threadpool-l1-2-0

FreeLibraryWhenCallbackReturns CreateThreadpoolWork CloseThreadpoolWork SubmitThreadpoolWork WaitForThreadpoolWorkCallbacks CreateThreadpoolWait CloseThreadpoolWait WaitForThreadpoolWaitCallbacks TrySubmitThreadpoolCallback CallbackMayRunLong SetThreadpoolWait WaitForThreadpoolTimerCallbacks CreateThreadpoolIo CloseThreadpoolIo StartThreadpoolIo CancelThreadpoolIo CreateThreadpoolTimer SetThreadpoolTimer CloseThreadpoolTimer

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-sysinfo-l1-2-0

GetProductInfo GetSystemTimePreciseAsFileTime GetNativeSystemInfo

api-ms-win-core-debug-l1-1-0

OutputDebugStringW DebugBreak IsDebuggerPresent

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus CreateIoCompletionPort GetOverlappedResult DeviceIoControl GetQueuedCompletionStatus

api-ms-win-core-file-l2-1-0

MoveFileExW CreateHardLinkW

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-security-appcontainer-l1-1-0

GetAppContainerNamedObjectPath

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InterlockedFlushSList InitializeSListHead

api-ms-win-core-file-l1-2-0

GetVolumeNameForVolumeMountPointW

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureContext

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-url-l1-1-0

UrlUnescapeA PathCreateFromUrlW UrlCanonicalizeW UrlCombineW UrlCanonicalizeA UrlCombineA

api-ms-win-core-kernel32-legacy-l1-1-0

GetComputerNameW MoveFileW SetFileCompletionNotificationModes WTSGetActiveConsoleSessionId

api-ms-win-core-registry-l2-1-0

RegEnumKeyW

api-ms-win-core-threadpool-legacy-l1-1-0

QueueUserWorkItem

api-ms-win-core-shlwapi-legacy-l1-1-0

PathAddBackslashA

api-ms-win-core-stringansi-l1-1-0

CharLowerA CharUpperA CharNextA

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpNIA StrCmpNICW StrStrIA StrRChrW StrToIntA StrCmpNA StrCmpNIW StrChrW StrCmpICA StrStrIW StrCmpNICA StrChrNW StrStrA StrChrA StrRChrA

api-ms-win-core-localization-obsolete-l1-2-0

CompareStringA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpA lstrcmpiA lstrcmpW

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalLock GlobalReAlloc

ntdll

NtClose NtCreateFile RtlReportExceptionEx NtSetInformationFile RtlQueryPackageClaims RtlFreeHeap RtlAllocateHeap NtQueryLicenseValue RtlInitUnicodeString RtlGetPersistedStateLocation RtlGetLastNtStatus RtlGetDeviceFamilyInfoEnum RtlGetVersion RtlIpv6AddressToStringExW RtlIpv4AddressToStringExW RtlFreeSid RtlGetAppContainerParent RtlGetAppContainerSidType RtlIpv6AddressToStringW RtlIpv4AddressToStringW RtlIpv6AddressToStringExA RtlIpv6AddressToStringA RtlIpv4AddressToStringA RtlIpv6StringToAddressExW RtlIpv4StringToAddressExW RtlIpv6StringToAddressExA RtlIpv4StringToAddressExA EtwUnregisterTraceGuids EtwRegisterTraceGuidsW EtwGetTraceEnableFlags EtwGetTraceEnableLevel NtQueryVolumeInformationFile NtQueryInformationToken EtwGetTraceLoggerHandle RtlNtStatusToDosError NtQueryWnfStateData RtlPublishWnfStateData RtlUnsubscribeWnfNotificationWaitForCompletion RtlSubscribeWnfStateChangeNotification RtlQueryWnfStateData NtSetInformationObject

kernelbase

GetIsEdpEnabled SubscribeEdpEnabledStateChange UnsubscribeEdpEnabledStateChange GetIsWdagEnabled SubscribeWdagEnabledStateChange UnsubscribeWdagEnabledStateChange GetPackageSecurityProperty GetPackageSecurityContext

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

AppCacheCheckManifest AppCacheCloseHandle AppCacheCreateAndCommitFile AppCacheDeleteGroup AppCacheDeleteIEGroup AppCacheDuplicateHandle AppCacheFinalize AppCacheFreeDownloadList AppCacheFreeGroupList AppCacheFreeIESpace AppCacheFreeSpace AppCacheGetDownloadList AppCacheGetFallbackUrl AppCacheGetGroupList AppCacheGetIEGroupList AppCacheGetInfo AppCacheGetManifestUrl AppCacheLookup CommitUrlCacheEntryA CommitUrlCacheEntryBinaryBlob CommitUrlCacheEntryW CreateMD5SSOHash CreateUrlCacheContainerA CreateUrlCacheContainerW CreateUrlCacheEntryA CreateUrlCacheEntryExW CreateUrlCacheEntryW CreateUrlCacheGroup DeleteIE3Cache DeleteUrlCacheContainerA DeleteUrlCacheContainerW DeleteUrlCacheEntry DeleteUrlCacheEntryA DeleteUrlCacheEntryW DeleteUrlCacheGroup DeleteWpadCacheForNetworks DetectAutoProxyUrl DispatchAPICall DllCanUnloadNow DllGetClassObject DllInstall DllRegisterServer DllUnregisterServer FindCloseUrlCache FindFirstUrlCacheContainerA FindFirstUrlCacheContainerW FindFirstUrlCacheEntryA FindFirstUrlCacheEntryExA FindFirstUrlCacheEntryExW FindFirstUrlCacheEntryW FindFirstUrlCacheGroup FindNextUrlCacheContainerA FindNextUrlCacheContainerW FindNextUrlCacheEntryA FindNextUrlCacheEntryExA FindNextUrlCacheEntryExW FindNextUrlCacheEntryW FindNextUrlCacheGroup ForceNexusLookup ForceNexusLookupExW FreeUrlCacheSpaceA FreeUrlCacheSpaceW FtpCommandA FtpCommandW FtpCreateDirectoryA FtpCreateDirectoryW FtpDeleteFileA FtpDeleteFileW FtpFindFirstFileA FtpFindFirstFileW FtpGetCurrentDirectoryA FtpGetCurrentDirectoryW FtpGetFileA FtpGetFileEx FtpGetFileSize FtpGetFileW FtpOpenFileA FtpOpenFileW FtpPutFileA FtpPutFileEx FtpPutFileW FtpRemoveDirectoryA FtpRemoveDirectoryW FtpRenameFileA FtpRenameFileW FtpSetCurrentDirectoryA FtpSetCurrentDirectoryW GetProxyDllInfo GetUrlCacheConfigInfoA GetUrlCacheConfigInfoW GetUrlCacheEntryBinaryBlob GetUrlCacheEntryInfoA GetUrlCacheEntryInfoExA GetUrlCacheEntryInfoExW GetUrlCacheEntryInfoW GetUrlCacheGroupAttributeA GetUrlCacheGroupAttributeW GetUrlCacheHeaderData GopherCreateLocatorA GopherCreateLocatorW GopherFindFirstFileA GopherFindFirstFileW GopherGetAttributeA GopherGetAttributeW GopherGetLocatorTypeA GopherGetLocatorTypeW GopherOpenFileA GopherOpenFileW HttpAddRequestHeadersA HttpAddRequestHeadersW HttpCheckDavCompliance HttpCloseDependencyHandle HttpDuplicateDependencyHandle HttpEndRequestA HttpEndRequestW HttpGetServerCredentials HttpGetTunnelSocket HttpIndicatePageLoadComplete HttpIsHostHstsEnabled HttpOpenDependencyHandle HttpOpenRequestA HttpOpenRequestW HttpPushClose HttpPushEnable HttpPushWait HttpQueryInfoA HttpQueryInfoW HttpSendRequestA HttpSendRequestExA HttpSendRequestExW HttpSendRequestW HttpWebSocketClose HttpWebSocketCompleteUpgrade HttpWebSocketQueryCloseStatus HttpWebSocketReceive HttpWebSocketSend HttpWebSocketShutdown IncrementUrlCacheHeaderData InternetAlgIdToStringA InternetAlgIdToStringW InternetAttemptConnect InternetAutodial InternetAutodialCallback InternetAutodialHangup InternetCanonicalizeUrlA InternetCanonicalizeUrlW InternetCheckConnectionA InternetCheckConnectionW InternetClearAllPerSiteCookieDecisions InternetCloseHandle InternetCombineUrlA InternetCombineUrlW InternetConfirmZoneCrossing InternetConfirmZoneCrossingA InternetConfirmZoneCrossingW InternetConnectA InternetConnectW InternetConvertUrlFromWireToWideChar InternetCrackUrlA InternetCrackUrlW InternetCreateUrlA InternetCreateUrlW InternetDial InternetDialA InternetDialW InternetEnumPerSiteCookieDecisionA InternetEnumPerSiteCookieDecisionW InternetErrorDlg InternetFindNextFileA InternetFindNextFileW InternetFortezzaCommand InternetFreeCookies InternetFreeProxyInfoList InternetGetCertByURL InternetGetCertByURLA InternetGetConnectedState InternetGetConnectedStateEx InternetGetConnectedStateExA InternetGetConnectedStateExW InternetGetCookieA InternetGetCookieEx2 InternetGetCookieExA InternetGetCookieExW InternetGetCookieW InternetGetLastResponseInfoA InternetGetLastResponseInfoW InternetGetPerSiteCookieDecisionA InternetGetPerSiteCookieDecisionW InternetGetProxyForUrl InternetGetSecurityInfoByURL InternetGetSecurityInfoByURLA InternetGetSecurityInfoByURLW InternetGoOnline InternetGoOnlineA InternetGoOnlineW InternetHangUp InternetInitializeAutoProxyDll InternetLockRequestFile InternetOpenA InternetOpenUrlA InternetOpenUrlW InternetOpenW InternetQueryDataAvailable InternetQueryFortezzaStatus InternetQueryOptionA InternetQueryOptionW InternetReadFile InternetReadFileExA InternetReadFileExW InternetSecurityProtocolToStringA InternetSecurityProtocolToStringW InternetSetCookieA InternetSetCookieEx2 InternetSetCookieExA InternetSetCookieExW InternetSetCookieW InternetSetDialState InternetSetDialStateA InternetSetDialStateW InternetSetFilePointer InternetSetOptionA InternetSetOptionExA InternetSetOptionExW InternetSetOptionW InternetSetPerSiteCookieDecisionA InternetSetPerSiteCookieDecisionW InternetSetSecureLegacyServersAppCompat InternetSetStatusCallback InternetSetStatusCallbackA InternetSetStatusCallbackW InternetShowSecurityInfoByURL InternetShowSecurityInfoByURLA InternetShowSecurityInfoByURLW InternetTimeFromSystemTime InternetTimeFromSystemTimeA InternetTimeFromSystemTimeW InternetTimeToSystemTime InternetTimeToSystemTimeA InternetTimeToSystemTimeW InternetUnlockRequestFile InternetWriteFile InternetWriteFileExA InternetWriteFileExW IsHostInProxyBypassList IsUrlCacheEntryExpiredA IsUrlCacheEntryExpiredW LoadUrlCacheContent ParseX509EncodedCertificateForListBoxEntry PrivacyGetZonePreferenceW PrivacySetZonePreferenceW ReadUrlCacheEntryStream ReadUrlCacheEntryStreamEx RegisterUrlCacheNotification ResumeSuspendedDownload RetrieveUrlCacheEntryFileA RetrieveUrlCacheEntryFileW RetrieveUrlCacheEntryStreamA RetrieveUrlCacheEntryStreamW RunOnceUrlCache SetUrlCacheConfigInfoA SetUrlCacheConfigInfoW SetUrlCacheEntryGroup SetUrlCacheEntryGroupA SetUrlCacheEntryGroupW SetUrlCacheEntryInfoA SetUrlCacheEntryInfoW SetUrlCacheGroupAttributeA SetUrlCacheGroupAttributeW SetUrlCacheHeaderData ShowCertificate ShowClientAuthCerts ShowSecurityInfo ShowX509EncodedCertificate UnlockUrlCacheEntryFile UnlockUrlCacheEntryFileA UnlockUrlCacheEntryFileW UnlockUrlCacheEntryStream UpdateUrlCacheContentPath UrlCacheCheckEntriesExist UrlCacheCloseEntryHandle UrlCacheContainerSetEntryMaximumAge UrlCacheCreateContainer UrlCacheFindFirstEntry UrlCacheFindNextEntry UrlCacheFreeEntryInfo UrlCacheFreeGlobalSpace UrlCacheGetContentPaths UrlCacheGetEntryInfo UrlCacheGetGlobalCacheSize UrlCacheGetGlobalLimit UrlCacheReadEntryStream UrlCacheReloadSettings UrlCacheRetrieveEntryFile UrlCacheRetrieveEntryStream UrlCacheServer UrlCacheSetGlobalLimit UrlCacheUpdateEntryExtraData UrlZonesDetach _GetFileExtensionFromUrl

Name

.text

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.wpp_sf

Size

102KB

Virtual Size

101KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

98KB

Virtual Size

97KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

129KB

Virtual Size

128KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/DXCaptureReplay.dll

IMPHASH afda62a30750fccc3ac8a433a9c98148
SHA256 4eadf2b928010c507db8ce7749654688b98101b2b510a7e6971e8e8d2b08b57f
MD5 2afe05f53624abbe4e0f83c072b5f180
SHA1 1cdb09685936b6fb3647389450ecf696eb6934fc
SHA512 ada3a0425d3438869aa7f9176eb1df5caa8000ca4b12b6c5ae80bb0c8ac62d49bdc7280dad1dd8911cdd4816817b3121dc42ff5d995e1612e97ddff94ef5ed15
SSDEEP 393216:jyyUU6PZs5IsNDtJiUS3WbkAKcsBQ9BFeUa3Xo6/X4+tAbDr3eNxqdu:jybU6PZs5IsNDtJiUS3WbkAKcsOeUa3p
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

12712016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

DXCaptureReplay.pdb

api-ms-win-core-version-l1-1-0

GetFileVersionInfoExW VerQueryValueW GetFileVersionInfoSizeExW

api-ms-win-core-libraryloader-l1-2-0

GetModuleFileNameW LockResource GetModuleFileNameA GetModuleHandleExW FreeLibrary GetProcAddress SizeofResource LoadResource LoadLibraryExW GetModuleHandleW

api-ms-win-core-synch-l1-1-0

CreateMutexW AcquireSRWLockExclusive OpenMutexW CreateSemaphoreExW ReleaseSemaphore WaitForSingleObject ReleaseMutex WaitForSingleObjectEx OpenSemaphoreW CreateMutexExW CreateEventW EnterCriticalSection LeaveCriticalSection InitializeCriticalSection TryAcquireSRWLockExclusive InitializeCriticalSectionEx SetEvent DeleteCriticalSection ReleaseSRWLockExclusive InitializeSRWLock AcquireSRWLockShared ResetEvent ReleaseSRWLockShared OpenEventW

api-ms-win-core-heap-l1-1-0

HeapReAlloc HeapAlloc HeapFree GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

UnhandledExceptionFilter SetLastError GetLastError SetUnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcessId GetCurrentThreadId TlsGetValue TlsSetValue TlsAlloc ProcessIdToSessionId GetExitCodeThread TlsFree TerminateProcess CreateThread OpenProcessToken GetCurrentProcess

api-ms-win-core-localization-l1-2-0

FormatMessageW LCMapStringEx FormatMessageA GetLocaleInfoEx GetCPInfo

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringA OutputDebugStringW

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

xmllite

CreateXmlReader

rpcrt4

UuidCreate

api-ms-win-core-memory-l1-1-0

VirtualFree VirtualAlloc OpenFileMappingW FlushViewOfFile MapViewOfFile UnmapViewOfFile CreateFileMappingW

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-memory-l1-1-1

ResetWriteWatch GetWriteWatch

api-ms-win-core-com-l1-1-0

CoInitializeEx CoTaskMemAlloc CoTaskMemFree CoCreateGuid CoCreateInstance StringFromCLSID CLSIDFromString

api-ms-win-core-interlocked-l1-1-0

InterlockedPopEntrySList InterlockedFlushSList InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-file-l1-1-0

GetFileSizeEx FlushFileBuffers CreateFileW SetFilePointerEx WriteFile ReadFile CreateDirectoryW FindClose FindFirstFileW

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable WakeConditionVariable Sleep InitializeConditionVariable SleepConditionVariableSRW InitOnceExecuteOnce

api-ms-win-core-namedpipe-l1-1-0

CreateNamedPipeW WaitNamedPipeW

api-ms-win-security-appcontainer-l1-1-0

GetAppContainerNamedObjectPath

api-ms-win-core-io-l1-1-1

CancelSynchronousIo

api-ms-win-core-registry-l1-1-0

RegGetValueW RegOpenKeyExW RegCloseKey RegQueryValueExW

api-ms-win-core-job-l2-1-0

OpenJobObjectW

api-ms-win-core-job-l1-1-0

IsProcessInJob

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-eventing-provider-l1-1-0

EventRegister EventSetInformation EventUnregister EventWriteTransfer

dwrite

DWriteCreateFactory

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolTimer SetThreadpoolTimer SetThreadpoolWait CreateThreadpoolTimer FreeLibraryWhenCallbackReturns CreateThreadpoolWait DisassociateCurrentThreadFromCallback SubmitThreadpoolWork CloseThreadpoolWait CloseThreadpoolWork CreateThreadpoolWork

d2d1

ord1

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW GlobalMemoryStatusEx GetTickCount64 GetSystemInfo GetSystemTimeAsFileTime GetTickCount

api-ms-win-core-file-l1-2-0

GetTempPathW CreateFile2

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW FindResourceW

dxgi

DXGIGetDebugInterface1 CreateDXGIFactory CreateDXGIFactory2 CreateDXGIFactory1

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-shcore-stream-l1-1-0

SHCreateStreamOnFileEx

api-ms-win-security-base-l1-1-0

FreeSid AddMandatoryAce AllocateAndInitializeSid SetSecurityDescriptorDacl InitializeSecurityDescriptor GetTokenInformation InitializeAcl SetSecurityDescriptorSacl

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalFree

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW

api-ms-win-crt-string-l1-1-0

memset __strncnt wcsncmp strnlen wcsnlen strcspn

api-ms-win-crt-locale-l1-1-0

_lock_locales _unlock_locales

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e

api-ms-win-crt-private-l1-1-0

_o___stdio_common_vfwprintf _o___stdio_common_vsnprintf_s _o___stdio_common_vsprintf _o___stdio_common_vsprintf_s _o___stdio_common_vswprintf _o___stdio_common_vswprintf_s _o__aligned_free _o__aligned_malloc _o__callnewh _o__calloc_base _o__cexit _o__configure_narrow_argv _o__crt_atexit _o__errno _o__execute_onexit_table _o__free_base _o__fseeki64 _o__fsopen _o__get_stream_buffer_pointers _o__Getdays _o__Getmonths _o__Gettnames _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__lock_file _o__malloc_base _o__purecall _o__realloc_base _o__register_onexit_function _o__seh_filter_dll _o__Strftime _o__unlock_file _o__W_Getdays _o__W_Getmonths _o__W_Gettnames _o__wcsdup _o__Wcsftime _o__wcsicmp _o__wfopen _o__wfopen_s _o__wtof _o__wtoi _o__wtoi64 _o_abort _o_atof _o_atoi _o_calloc _o_ceil _o_fclose _o_fflush _o_fgetc _o_fgetpos _o_floor _o_fopen _o_fopen_s _o_fputc _o_fread _o_free _o_frexp _o_fseek _o_fsetpos _o_fwrite _o_islower _o_isspace _o_isupper _o_iswgraph _o_ldexp _o_localeconv _o_log2 _o_malloc _o_pow _o_powf _o_realloc _o_setlocale _o_setvbuf _o_strtod _o_strtof _o_terminate _o_tolower _o_towlower _o_ungetc _o_wcscat_s _o_wcstoul _o_wcstoull __uncaught_exception _CxxThrowException _o____mb_cur_max_func _o____lc_locale_name_func _o____lc_collate_cp_func _o____lc_codepage_func wcsstr __C_specific_handler __std_type_info_compare strchr __CxxFrameHandler3 _o___stdio_common_vfprintf _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy memchr memcmp memcpy _o___pctype_func memmove

api-ms-win-core-string-l1-1-0

GetStringTypeW CompareStringEx MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

cryptsp

CryptAcquireContextW CryptGetHashParam CryptDestroyHash CryptCreateHash CryptHashData CryptReleaseContext

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-rtcore-ntuser-window-l1-1-0

GetClientRect SetWindowLongPtrW CreateWindowExW RegisterClassExW PeekMessageW DefWindowProcW PostQuitMessage GetWindowLongPtrW SetWindowPos DestroyWindow ShowWindow DispatchMessageW TranslateMessage SetWindowTextW

api-ms-win-crt-math-l1-1-0

ceilf floorf fmodf

CheckForWindowClosure CreateDXGIFactory1Generated CreateDXGIFactory2Generated CreateDXGIFactoryGenerated CreatePMCommsPUGA CreateUtilityWindow CustomEventGenerated D2D1CreateDeviceContextGenerated D2D1CreateDeviceGenerated D2D1CreateFactoryGenerated D3D10CreateDevice1Generated D3D10CreateDeviceAndSwapChain1Generated D3D10CreateDeviceAndSwapChainGenerated D3D10CreateDeviceGenerated D3D11CreateDeviceAndSwapChainGenerated D3D11CreateDeviceGenerated D3D11On12CreateDeviceGenerated D3D12CreateDeviceGenerated D3D12EnableExperimentalFeaturesGenerated D3D12FenceEventCompletionGenerated D3D12GetDebugInterfaceGenerated D3DCreateCaptureRecreationHelperGenerated D3DPERF_BeginEventGenerated D3DPERF_EndEventGenerated D3DPERF_SetMarkerGenerated D3DPERF_SetRegionGenerated DImageLoadGraphFromStringGenerated DXGIGetDebugInterface1Generated GetRealPtrPtrCreateDXGIFactory GetRealPtrPtrCreateDXGIFactory1 GetRealPtrPtrCreateDXGIFactory2 GetRealPtrPtrCustomEvent GetRealPtrPtrD2D1CreateDevice GetRealPtrPtrD2D1CreateDeviceContext GetRealPtrPtrD2D1CreateFactory GetRealPtrPtrD3D10CreateDevice GetRealPtrPtrD3D10CreateDevice1 GetRealPtrPtrD3D10CreateDeviceAndSwapChain GetRealPtrPtrD3D10CreateDeviceAndSwapChain1 GetRealPtrPtrD3D11CreateDevice GetRealPtrPtrD3D11CreateDeviceAndSwapChain GetRealPtrPtrD3D11On12CreateDevice GetRealPtrPtrD3D12CreateDevice GetRealPtrPtrD3D12EnableExperimentalFeatures GetRealPtrPtrD3D12FenceEventCompletion GetRealPtrPtrD3D12GetDebugInterface GetRealPtrPtrD3DCreateCaptureRecreationHelper GetRealPtrPtrD3DPERF_BeginEvent GetRealPtrPtrD3DPERF_EndEvent GetRealPtrPtrD3DPERF_SetMarker GetRealPtrPtrD3DPERF_SetRegion GetRealPtrPtrDImageLoadGraphFromString GetRealPtrPtrDXGIGetDebugInterface1 GetReflectionLayer LazyAttachToInProc LazyAttachToMonitor ReleaseCaptureSessionContext

Name

.text

Size

12.4MB

Virtual Size

12.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

24KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

342KB

Virtual Size

342KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

216B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

92KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

156KB

Virtual Size

155KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/VBoxGL.dll

IMPHASH 5a96d35d5ee68dbe223684ab692d9a7a
SHA256 434317e80f1868722a4ff3e9c7f3ae0e69244ceb478efbf1507217c8490062ed
MD5 cedd456cd8f0e7b3c60090f4a2609ea6
SHA1 2418ce0c0f8a8377ae0540320a7c5bb00470686e
SHA512 f8fcfece71de5c5d4da9b1a2cabda15f307025e4cc1404850e9b0db63ad2beba900a00a24922d2aa37e9a4c0006b8e34e541d40d8eca109853810e1d787d14de
SSDEEP 196608:SWUp/mcUa8/9LiDrOOsVpE5lwSzO0L+nvgw+p21cWKzEtehSx0fJDb8reADxEVf9:SWUp/mcUa8/9LiDrOOsVpE5lwSzO0L+K
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

32864

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\tinderbox\add\out\win.amd64\release\obj\VBoxGL\VBoxGL.pdb

kernel32

GetLastError GetConsoleMode GetEnvironmentVariableW SetLastError GetCurrentProcess TerminateProcess SetErrorMode GetModuleHandleW GetProcAddress GetModuleFileNameW GetModuleHandleA WideCharToMultiByte GetACP CreateFileW FlushFileBuffers GetFileSize ReadFile SetEndOfFile SetFileAttributesW SetFilePointer WriteFile CloseHandle DuplicateHandle DeviceIoControl GetCommandLineW OutputDebugStringA RaiseException WaitForSingleObject CreateThread GetCurrentThread GetCurrentThreadId ExitThread TlsAlloc TlsGetValue TlsSetValue GetThreadTimes Sleep GetSystemTime GetStdHandle GetTickCount SystemTimeToFileTime TlsFree SetThreadPriority GetCurrentDirectoryW GetFullPathNameW GetFileAttributesW MoveFileExW RtlUnwindEx GetSystemDirectoryW FreeLibrary LoadLibraryExW VirtualAlloc VirtualFree InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection CreateToolhelp32Snapshot Thread32First Thread32Next GetEnvironmentVariableA IsDebuggerPresent GetSystemInfo GetConsoleWindow InitOnceExecuteOnce InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS QueryPerformanceCounter QueryPerformanceFrequency GetSystemTimeAsFileTime GetCommandLineA SetThreadAffinityMask GetCurrentProcessorNumber GetProcessTimes GetFileType GetCurrentProcessId GetProcessHeap HeapFree HeapReAlloc GetVersion HeapAlloc

user32

GetDC CallNextHookEx ClientToScreen GetWindowRect GetClientRect LoadIconA LoadCursorA AdjustWindowRectEx DestroyWindow CreateWindowExA RegisterClassA DefWindowProcA UnhookWindowsHookEx WindowFromDC EnumDisplayDevicesA EnumDisplaySettingsA SetWindowsHookExA ReleaseDC

gdi32

GetGlyphOutlineA DeleteDC DescribePixelFormat GetPixelFormat SetPixelFormat CreateDCA

ntdll

NtQueryInformationProcess RtlFreeUnicodeString NtOpenProcess NtSetEvent NtResetEvent NtCreateEvent NtWaitForSingleObject NtQueryDirectoryObject NtQueryDirectoryFile NtSetInformationFile NtQueryInformationFile NtQueryVolumeInformationFile NtCreateFile NtClose NtOpenDirectoryObject

DrvCopyContext DrvCreateContext DrvCreateLayerContext DrvDeleteContext DrvDescribeLayerPlane DrvDescribePixelFormat DrvGetLayerPaletteEntries DrvGetProcAddress DrvPresentBuffers DrvRealizeLayerPalette DrvReleaseContext DrvSetCallbackProcs DrvSetContext DrvSetLayerPaletteEntries DrvSetPixelFormat DrvShareLists DrvSwapBuffers DrvSwapLayerBuffers DrvValidateVersion glAccum glAlphaFunc glAreTexturesResident glArrayElement glBegin glBindTexture glBitmap glBlendFunc glCallList glCallLists glClear glClearAccum glClearColor glClearDepth glClearIndex glClearStencil glClipPlane glColor3b glColor3bv glColor3d glColor3dv glColor3f glColor3fv glColor3i glColor3iv glColor3s glColor3sv glColor3ub glColor3ubv glColor3ui glColor3uiv glColor3us glColor3usv glColor4b glColor4bv glColor4d glColor4dv glColor4f glColor4fv glColor4i glColor4iv glColor4s glColor4sv glColor4ub glColor4ubv glColor4ui glColor4uiv glColor4us glColor4usv glColorMask glColorMaterial glColorPointer glCopyPixels glCopyTexImage1D glCopyTexImage2D glCopyTexSubImage1D glCopyTexSubImage2D glCullFace glDeleteLists glDeleteTextures glDepthFunc glDepthMask glDepthRange glDisable glDisableClientState glDrawArrays glDrawBuffer glDrawElements glDrawPixels glEdgeFlag glEdgeFlagPointer glEdgeFlagv glEnable glEnableClientState glEnd glEndList glEvalCoord1d glEvalCoord1dv glEvalCoord1f glEvalCoord1fv glEvalCoord2d glEvalCoord2dv glEvalCoord2f glEvalCoord2fv glEvalMesh1 glEvalMesh2 glEvalPoint1 glEvalPoint2 glFeedbackBuffer glFinish glFlush glFogf glFogfv glFogi glFogiv glFrontFace glFrustum glGenLists glGenTextures glGetBooleanv glGetClipPlane glGetDoublev glGetError glGetFloatv glGetIntegerv glGetLightfv glGetLightiv glGetMapdv glGetMapfv glGetMapiv glGetMaterialfv glGetMaterialiv glGetPixelMapfv glGetPixelMapuiv glGetPixelMapusv glGetPointerv glGetPolygonStipple glGetString glGetTexEnvfv glGetTexEnviv glGetTexGendv glGetTexGenfv glGetTexGeniv glGetTexImage glGetTexLevelParameterfv glGetTexLevelParameteriv glGetTexParameterfv glGetTexParameteriv glHint glIndexMask glIndexPointer glIndexd glIndexdv glIndexf glIndexfv glIndexi glIndexiv glIndexs glIndexsv glIndexub glIndexubv glInitNames glInterleavedArrays glIsEnabled glIsList glIsTexture glLightModelf glLightModelfv glLightModeli glLightModeliv glLightf glLightfv glLighti glLightiv glLineStipple glLineWidth glListBase glLoadIdentity glLoadMatrixd glLoadMatrixf glLoadName glLogicOp glMap1d glMap1f glMap2d glMap2f glMapGrid1d glMapGrid1f glMapGrid2d glMapGrid2f glMaterialf glMaterialfv glMateriali glMaterialiv glMatrixMode glMultMatrixd glMultMatrixf glNewList glNormal3b glNormal3bv glNormal3d glNormal3dv glNormal3f glNormal3fv glNormal3i glNormal3iv glNormal3s glNormal3sv glNormalPointer glOrtho glPassThrough glPixelMapfv glPixelMapuiv glPixelMapusv glPixelStoref glPixelStorei glPixelTransferf glPixelTransferi glPixelZoom glPointSize glPolygonMode glPolygonOffset glPolygonStipple glPopAttrib glPopClientAttrib glPopMatrix glPopName glPrioritizeTextures glPushAttrib glPushClientAttrib glPushMatrix glPushName glRasterPos2d glRasterPos2dv glRasterPos2f glRasterPos2fv glRasterPos2i glRasterPos2iv glRasterPos2s glRasterPos2sv glRasterPos3d glRasterPos3dv glRasterPos3f glRasterPos3fv glRasterPos3i glRasterPos3iv glRasterPos3s glRasterPos3sv glRasterPos4d glRasterPos4dv glRasterPos4f glRasterPos4fv glRasterPos4i glRasterPos4iv glRasterPos4s glRasterPos4sv glReadBuffer glReadPixels glRectd glRectdv glRectf glRectfv glRecti glRectiv glRects glRectsv glRenderMode glRotated glRotatef glScaled glScalef glScissor glSelectBuffer glShadeModel glStencilFunc glStencilMask glStencilOp glTexCoord1d glTexCoord1dv glTexCoord1f glTexCoord1fv glTexCoord1i glTexCoord1iv glTexCoord1s glTexCoord1sv glTexCoord2d glTexCoord2dv glTexCoord2f glTexCoord2fv glTexCoord2i glTexCoord2iv glTexCoord2s glTexCoord2sv glTexCoord3d glTexCoord3dv glTexCoord3f glTexCoord3fv glTexCoord3i glTexCoord3iv glTexCoord3s glTexCoord3sv glTexCoord4d glTexCoord4dv glTexCoord4f glTexCoord4fv glTexCoord4i glTexCoord4iv glTexCoord4s glTexCoord4sv glTexCoordPointer glTexEnvf glTexEnvfv glTexEnvi glTexEnviv glTexGend glTexGendv glTexGenf glTexGenfv glTexGeni glTexGeniv glTexImage1D glTexImage2D glTexParameterf glTexParameterfv glTexParameteri glTexParameteriv glTexSubImage1D glTexSubImage2D glTranslated glTranslatef glVertex2d glVertex2dv glVertex2f glVertex2fv glVertex2i glVertex2iv glVertex2s glVertex2sv glVertex3d glVertex3dv glVertex3f glVertex3fv glVertex3i glVertex3iv glVertex3s glVertex3sv glVertex4d glVertex4dv glVertex4f glVertex4fv glVertex4i glVertex4iv glVertex4s glVertex4sv glVertexPointer glViewport wglChoosePixelFormat wglCopyContext wglCreateContext wglCreateLayerContext wglDeleteContext wglDescribeLayerPlane wglDescribePixelFormat wglGetCurrentContext wglGetCurrentDC wglGetLayerPaletteEntries wglGetPixelFormat wglGetProcAddress wglMakeCurrent wglRealizeLayerPalette wglSetLayerPaletteEntries wglSetPixelFormat wglShareLists wglSwapBuffers wglSwapLayerBuffers wglSwapMultipleBuffers wglUseFontBitmapsA wglUseFontBitmapsW wglUseFontOutlinesA wglUseFontOutlinesW

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/Windows.UI.Xaml.dll

IMPHASH 5bdb058d8bd5a4fb017b7e63aab20627
SHA256 d349466874104005aec3e2a7d02d48c59871963dd9a75becd55b2f7078a8d782
MD5 55ef5390e47db15b8fd9de62766db77f
SHA1 812342462b6c7af69caefdc7e26ced5a0e3e606c
SHA512 32151d5af6fca83ade2f26d727c673d4fc80792f4492ee0f0426b895d8f1adf98e437cd3a9610ff6693c3f7548c73afd3faec2ef4446297102184fa2df43f178
SSDEEP 98304:b+npI+aso3pMWWkL5DUwjzaAKzI5itIy6uiNQcvLROBEdb6Yjj4bajOIfd:b+++ar1WSwwjuAKU5wIPhztc2j4bqOi
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

3444944

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

windows.ui.xaml.pdb

msvcp_win

??0facet@locale@std@@IEAA@_K@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@M@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z ?_Incref@facet@locale@std@@UEAAXXZ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?widen@?$ctype@G@std@@QEBAGD@Z ?id@?$ctype@G@std@@2V0locale@2@A ?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??Bid@locale@std@@QEAA_KXZ ?is@?$ctype@G@std@@QEBA_NFG@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ _Wcscoll _Wcsxfrm ??1_Locinfo@std@@QEAA@XZ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0_Locinfo@std@@QEAA@PEBD@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?id@?$collate@G@std@@2V0locale@2@A ??0_Lockit@std@@QEAA@H@Z ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z ??1_Lockit@std@@QEAA@XZ ?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z ?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ ?tolower@?$ctype@G@std@@QEBAGG@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?setf@ios_base@std@@QEAAHHH@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z ?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z ??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ ?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z ??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ ?good@ios_base@std@@QEBA_NXZ ?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ ??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ ??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ ?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z ?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z ?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z ?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ ?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z ?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z ?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ ?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ ?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA _Mtx_lock ?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z _Mtx_init_in_situ ?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ ?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ ?flags@ios_base@std@@QEBAHXZ ?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ ?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ _Mtx_destroy_in_situ ?_Throw_C_error@std@@YAXH@Z ??1facet@locale@std@@MEAA@XZ ?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ ?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ ?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z ?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ _Mtx_unlock ?_Xbad_function_call@std@@YAXXZ

api-ms-win-crt-string-l1-1-0

memset wcscspn wcscmp wcsncmp

api-ms-win-crt-math-l1-1-0

cosf ceilf atan2f _isnan _finite fminf fmaxf _fdtest floorf fmodf logf sinf tanf sqrtf

api-ms-win-crt-runtime-l1-1-0

_initterm _initterm_e _invoke_watson

api-ms-win-crt-private-l1-1-0

_o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__itow_s _o__purecall _o__recalloc _o__register_onexit_function _o__seh_filter_dll _o__wcsicmp _o__wcsnicmp _o__wcstoi64 memmove _o__wsplitpath_s _o__wtoi _o_abort _o_bsearch _o_calloc _o_ceil _o_cos _o_exp _o_floor _o_fmod _o_free _o_isalpha _o_isspace _o_iswalnum _o_iswblank _o_iswcntrl _o_iswdigit _o_iswgraph _o_iswprint _o_iswpunct _o_iswspace _o_log _o_log2f _o_lroundf _o_malloc _o_pow _o_powf _o_realloc _o_round _o_sin _o_terminate _o_tolower _o_toupper _o_towlower _o_towupper _o_wcscpy_s _o_wcsncpy_s _o_wcstod _o_wcstol _o_wcstoll _o_wcstoul _o_wcstoull wcsstr __std_type_info_compare wcschr strchr __C_specific_handler wcsrchr __CxxFrameHandler3 _o__execute_onexit_table _o__errno _o__dtest _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__beginthreadex _o___stdio_common_vswscanf _o___stdio_common_vswprintf_s _o___stdio_common_vswprintf _o___stdio_common_vsnprintf_s _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy __std_terminate __CxxFrameHandler4 _CxxThrowException memcmp memcpy

api-ms-win-core-libraryloader-l1-2-0

LoadResource GetModuleHandleExW GetProcAddress SizeofResource FreeLibrary FindResourceExW LoadLibraryExW LockResource GetModuleFileNameW GetModuleFileNameA GetModuleHandleW

api-ms-win-core-featurestaging-l1-1-0

RecordFeatureError GetFeatureEnabledState SubscribeFeatureStateChangeNotification RecordFeatureUsage UnsubscribeFeatureStateChangeNotification

api-ms-win-core-synch-l1-1-0

OpenEventW CreateSemaphoreExW InitializeSRWLock InitializeCriticalSectionAndSpinCount SetEvent TryAcquireSRWLockExclusive DeleteCriticalSection EnterCriticalSection InitializeCriticalSection WaitForSingleObject LeaveCriticalSection ResetEvent OpenMutexW ReleaseMutex CreateEventW CreateMutexW ReleaseSRWLockExclusive ReleaseSemaphore AcquireSRWLockShared CreateMutexExW CreateEventExW WaitForMultipleObjectsEx ReleaseSRWLockShared AcquireSRWLockExclusive InitializeCriticalSectionEx OpenSemaphoreW WaitForSingleObjectEx

api-ms-win-core-heap-l1-1-0

HeapSize HeapDestroy HeapCreate HeapReAlloc HeapAlloc HeapFree GetProcessHeap

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter GetLastError UnhandledExceptionFilter SetLastError RaiseException

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids GetTraceEnableLevel GetTraceEnableFlags TraceMessage TraceEvent GetTraceLoggerHandle RegisterTraceGuidsW

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolTimerCallbacks CreateThreadpoolCleanupGroup SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolWork CloseThreadpoolTimer CreateThreadpoolTimer SetThreadpoolWait CloseThreadpoolCleanupGroup CloseThreadpoolCleanupGroupMembers CreateThreadpoolWait SetThreadpoolTimer WaitForThreadpoolWorkCallbacks CloseThreadpoolWait WaitForThreadpoolWaitCallbacks

api-ms-win-core-processthreads-l1-1-0

TlsFree SetPriorityClass SwitchToThread GetPriorityClass GetCurrentThreadId OpenProcessToken GetProcessId GetCurrentProcessId SetThreadPriority TlsAlloc GetThreadPriority TlsGetValue TlsSetValue TerminateProcess GetCurrentThread GetExitCodeProcess CreateThread GetCurrentProcess OpenThreadToken

api-ms-win-core-sysinfo-l1-1-0

GetTickCount GetTickCount64 GetSystemTimeAsFileTime GetVersionExW GetSystemInfo GetWindowsDirectoryW

api-ms-win-core-localization-l1-2-0

SetProcessPreferredUILanguages GetLocaleInfoW GetLocaleInfoEx FormatMessageW GetThreadUILanguage LocaleNameToLCID LCMapStringEx ResolveLocaleName GetUserDefaultLCID FindNLSStringEx

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent DebugBreak OutputDebugStringW

api-ms-win-core-featurestaging-l1-1-1

GetFeatureVariant

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle

api-ms-win-eventing-provider-l1-1-0

EventWriteTransfer EventSetInformation EventRegister EventProviderEnabled EventUnregister EventActivityIdControl

api-ms-win-core-wow64-l1-1-1

IsWow64Process2

api-ms-win-core-wow64-l1-1-0

Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection

coremessaging

CreateDispatcherQueueController CoreUICreate

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlCaptureStackBackTrace

api-ms-win-core-registry-l1-1-0

RegDeleteValueW RegQueryInfoKeyW RegGetValueW RegEnumKeyExW RegSetValueExW RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW

api-ms-win-core-string-l1-1-0

CompareStringOrdinal CompareStringEx MultiByteToWideChar WideCharToMultiByte GetStringTypeExW

api-ms-win-core-synch-l1-2-0

InitOnceExecuteOnce InitOnceInitialize Sleep InitOnceBeginInitialize InitOnceComplete

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabled

api-ms-win-rtcore-ntuser-window-l1-1-0

SetTimer GetAncestor SetParent GetClientRect GetFocus GetMessageW DispatchMessageW RegisterWindowMessageW IsWindow KillTimer TranslateMessage GetWindow PostQuitMessage GetDesktopWindow GetQueueStatus SetWindowLongW ScreenToClient SetWindowLongPtrW GetWindowThreadProcessId RegisterClassW GetWindowLongPtrW PostMessageW FindWindowW GetCursorPos SendMessageW GetWindowRect GetMessageTime GetWindowTextW DefWindowProcW GetPropW RemovePropW SetPropW ClientToScreen ShowWindow SetWindowPos DestroyWindow CreateWindowExW RegisterClassExW PeekMessageW GetClassInfoW IsChild GetClassNameW EnumChildWindows SetFocus CallWindowProcW GetParent GetForegroundWindow

api-ms-win-core-shlwapi-legacy-l1-1-0

PathAddBackslashW PathFindExtensionW PathRemoveFileSpecW PathCombineW

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerFrameInfoHistory GetPointerDeviceProperties EnableMouseInPointer GetPointerDevices GetPointerDeviceRects GetPointerInfo

api-ms-win-core-kernel32-legacy-l1-1-1

PowerClearRequest PowerCreateRequest PowerSetRequest

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-oobe-notification-l1-1-0

OOBEComplete

api-ms-win-shcore-stream-l1-1-0

SHCreateMemStream

api-ms-win-shcore-stream-winrt-l1-1-0

CreateRandomAccessStreamOverStream

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-string-l2-1-0

CharNextW

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW

api-ms-win-core-processtopology-obsolete-l1-1-0

GetProcessAffinityMask

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo QueryFullProcessImageNameW

api-ms-win-core-file-l1-1-0

GetFileAttributesW ReadFile GetFileSize GetFileSizeEx SetEndOfFile GetTempFileNameW CreateFileW WriteFile SetFilePointerEx GetFileTime

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent OpenProcess GetThreadTimes

api-ms-win-core-memory-l1-1-0

MapViewOfFile VirtualProtect VirtualFree UnmapViewOfFile CreateFileMappingW OpenFileMappingW VirtualAlloc

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentVariableW ExpandEnvironmentStringsW SearchPathW

api-ms-win-security-base-l1-1-0

GetSidSubAuthority GetSidSubAuthorityCount DuplicateTokenEx GetTokenInformation AccessCheck DuplicateToken

api-ms-win-core-url-l1-1-0

PathCreateFromUrlW UrlCanonicalizeW UrlCreateFromPathW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-timezone-l1-1-0

GetDynamicTimeZoneInformation SystemTimeToFileTime

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage GetSystemDefaultUILanguage

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

ntdll

RtlAcquireSRWLockShared RtlReleaseSRWLockShared RtlClearBits RtlInitializeBitMap NtQueryInformationThread NtSetInformationVirtualMemory RtlFindClearBitsAndSet RtlRaiseException RtlAreBitsClear RtlInitializeSRWLock RtlCompareMemory RtlAcquireSRWLockExclusive RtlCopyUnicodeString RtlNtStatusToDosError ZwQueryWnfStateData RtlInitUnicodeString RtlUnsubscribeWnfStateChangeNotification RtlSubscribeWnfStateChangeNotification RtlQueryWnfStateData RtlQueryPackageClaims NtQuerySecurityAttributesToken RtlIsMultiSessionSku RtlGetDeviceFamilyInfoEnum RtlPublishWnfStateData RtlFreeHeap RtlAllocateHeap NtPowerInformation RtlReleaseSRWLockExclusive

api-ms-win-core-heap-l2-1-0

LocalFree GlobalAlloc LocalAlloc

api-ms-win-security-sddl-l1-1-0

ConvertStringSecurityDescriptorToSecurityDescriptorW

api-ms-win-security-provider-l1-1-0

GetSecurityInfo

api-ms-win-rtcore-ntuser-synch-l1-1-0

MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx

api-ms-win-dx-d3dkmt-l1-1-0

GdiEntry13

api-ms-win-core-errorhandling-l1-1-3

TerminateProcessOnMemoryExhaustion

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

bcp47langs

LanguageListAsMuiForm Bcp47GetAbbreviation Bcp47GetLanguageName Bcp47FromLcid Bcp47GetNlsForm Bcp47FromHkl GetFontFallbackLanguageList SetApplicationLanguageOverride ClearApplicationLanguageOverride GetApplicationLanguages

combase

ord157 ord90 ord134

iertutil

PrivateCoInternetCombineIUri ord811

dcomp

ord1040 ord1045

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalLock

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName

api-ms-win-shcore-taskpool-l1-1-0

SHTaskPoolQueueTask

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW

api-ms-win-core-path-l1-1-0

PathCchAppend

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCSpnW QISearch

Name

.text

Size

11.5MB

Virtual Size

11.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.7MB

Virtual Size

3.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

73KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

726KB

Virtual Size

726KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

158KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

504KB

Virtual Size

504KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/WindowsCodecsRaw.dll

IMPHASH 3e017d2a373236275eed4a9a07ef23d3
SHA256 b11435a0aefd2493960c35e2159aeebfafcc4a0e17db9bfb9d50e6c565b79a4d
MD5 218dfab0adf3c9fed1da2e124c0a4c5c
SHA1 294c0a29246427c572f85bd06ab62ab9d413dd48
SHA512 56b3d9666f587fa867e45b6f3696ba2cabf9dfa5844d51a7b4e4420a5f8ee195301632bc3974780039638bb056d492b0f598f1f1d8812d9949d5b59570c1fd17
SSDEEP 393216:D02vRt8dujxt4RFDUXGMrUMgr3K7d6/8A:LR2dTvYGyE6d6/8A
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

PE Signature issue

Digest

93:40:cc:72:95:ab:69:b3:e7:44:d0:1b:f1:57:28:56:16:fc:aa:cc:5d:2a:ca:a0:28:d3:5e:b9:23:62:45:42

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

10

Entry point

2401808

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

WindowsCodecsRaw.pdb

msvcp_win

?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z

api-ms-win-crt-string-l1-1-0

memset strncmp strcmp

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm

api-ms-win-crt-private-l1-1-0

_o__execute_onexit_table _o__gmtime64_s _o__initialize_narrow_environment _o__initialize_onexit_table _o__invalid_parameter_noinfo _o__invalid_parameter_noinfo_noreturn _o__localtime64_s _o__mktime64 _o__purecall _o__register_onexit_function _o__seh_filter_dll _o__strdup _o__stricmp _o___stdio_common_vswprintf _o__strnicmp memmove _o__swab _o__errno _o_atoi _o_calloc _o_fclose _o_fopen_s _o_fread _o_free _o_fseek _o_ftell _o_isdigit _o_isspace _o_log _o_malloc _o_pow _o_powf _o_qsort _o_sqrt _o_strcat_s _o_strcpy_s _o_strftime _o_strncpy_s _o_terminate _o_tolower _o_toupper _o_wmemcpy_s __CxxFrameHandler3 _CxxThrowException _o___stdio_common_vsscanf _o___stdio_common_vsprintf_s _o___stdio_common_vsnprintf_s _o__crt_atexit _o__configure_narrow_argv _o__cexit _o__callnewh _o___stdio_common_vfscanf _o__aligned_malloc _o__aligned_free _o___std_type_info_destroy_list _o___std_exception_destroy _o___std_exception_copy _o___acrt_iob_func __C_specific_handler __std_terminate __CxxFrameHandler4 _o___stdio_common_vswprintf_s memchr memcmp memcpy

api-ms-win-core-synch-l1-1-0

EnterCriticalSection ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeCriticalSection DeleteCriticalSection AcquireSRWLockShared LeaveCriticalSection ReleaseSRWLockShared InitializeSRWLock

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc PropVariantClear CreateStreamOnHGlobal PropVariantCopy CoCreateInstance

api-ms-win-core-libraryloader-l1-2-0

LockResource SizeofResource DisableThreadLibraryCalls LoadResource FindResourceExW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

propsys

PropVariantCompareEx PropVariantChangeType PSCreateMemoryPropertyStore

oleaut32

VariantInit SystemTimeToVariantTime

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter GetLastError RaiseException UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetCurrentProcessorNumber

api-ms-win-shcore-obsolete-l1-1-0

SHStrDupW

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapSize HeapAlloc HeapReAlloc HeapFree HeapDestroy

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess TerminateProcess GetCurrentThreadId GetCurrentProcessId

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-shlwapi-obsolete-l1-1-0

QISearch

api-ms-win-ntuser-rectangle-l1-1-0

IntersectRect

mscms

CreateMultiProfileTransform DeleteColorTransform CloseColorProfile TranslateBitmapBits OpenColorProfileW

kernel32

OutputDebugStringA UnmapViewOfFile CreateFileA CloseHandle GetSystemInfo GetFileSizeEx CreateFileMappingW QueryPerformanceFrequency CreateThreadpoolWork SubmitThreadpoolWork GetActiveProcessorCount WaitForThreadpoolWorkCallbacks CloseThreadpoolWork MapViewOfFile

gdi32

CombineRgn CreateRectRgn GetRegionData DeleteObject GetRgnBox

advapi32

CryptGenRandom CryptAcquireContextW CryptReleaseContext

ws2_32

ntohs htonl

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-crt-math-l1-1-0

logf floorf expf ceilf cosf sqrtf

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

777KB

Virtual Size

777KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27.5MB

Virtual Size

27.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

52KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

152KB

Virtual Size

151KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/_cffi.pyd

IMPHASH b4c7d8b732a49f0803d88b34751d2661
SHA256 3ed00bb5876eafa617bebb213d2bc887b5637c53c4a849fcc2366084bf056787
MD5 a19b5e6324d1a6a9fd99c98fe7b83fe2
SHA1 4e3e56754a3c46c661ef591a4b5a5985bd4f6b85
SHA512 5975f90036cb7d3013fc6815f2c372eb9b89af6c8153d1770ebbd70bf5b61e3b12defa3d7a4ccd364bd6a978b2879a15801d2aec8bad9221ca15dffc9b7ba929
SSDEEP 6144:rbTutDqcmbgSZZ/jZMaBHXD/OHHSAU1gIkpWCuMshv9K1HFV1jBjgG4LFxJY/1n:rfrcmsSHBHXiSArRENMivwF1jdgs/1n
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

563232

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python3

_Py_NoneStruct PyLong_FromUnsignedLongLong _Py_Dealloc PyObject_Free PyObject_CallMethod PyLong_FromVoidPtr PyArg_UnpackTuple PyEval_RestoreThread PyLong_FromLong PyEval_SaveThread PyObject_Malloc PyLong_FromUnsignedLong PyErr_Occurred PyImport_ImportModule

kernel32

IsDebuggerPresent GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime SleepConditionVariableCS EnterCriticalSection WakeAllConditionVariable WakeConditionVariable LeaveCriticalSection InitializeCriticalSection InitializeConditionVariable WaitForSingleObject GetLastError CloseHandle DeleteCriticalSection RtlCaptureContext GetCurrentThreadId

vcruntime140

__C_specific_handler __std_type_info_destroy_list memset memcmp memcpy memmove

api-ms-win-crt-heap-l1-1-0

calloc free malloc

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf fflush __acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _cexit _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _initialize_onexit_table _beginthreadex _errno

api-ms-win-crt-utility-l1-1-0

qsort

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/backend_c.pyd

IMPHASH 967688a20660ed091a8fc54f4ff72575
SHA256 6ab611c4a24406d9d97f09d49d50142ab2734b69a2b0d9ea6489e4af90c4a2a4
MD5 56db4a861aec914a860461dedcdca0a0
SHA1 8535a8c9eac371a54308795a8bbe89414933e035
SHA512 600a21666e9ed334de5b4b17f60136434ee485c80f9740e6085e24ef95ca5376e6223a54c6b1c8f12987edab5d89af9676cc12e2a335f4c4e9ab79dfef8e4b90
SSDEEP 12288:n5vDYEvt0Fwyow0k1rErp645rtxvi1gRNg5sXgz0:npBvt0Fw9fk1rErQ45rt5RNZ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

450592

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

python311

PyMem_Malloc PyExc_IndexError PyExc_ImportError _Py_TrueStruct PyList_New PyUnicode_FromString PyLong_FromSize_t PyBuffer_Release PyEval_RestoreThread PySet_New PyObject_GetBuffer _PyBytes_Resize _PyArg_ParseTuple_SizeT PyObject_CheckBuffer PyModule_AddObject PyObject_Free _Py_Dealloc PyType_IsSubtype _Py_FalseStruct PyErr_Format _PyArg_ParseTupleAndKeywords_SizeT PyLong_FromUnsignedLong PyTuple_Pack PyErr_SetString PyList_Size PySet_Add PyBuffer_FillInfo PyDict_SetItemString PyTuple_New _Py_NoneStruct PyBytes_AsStringAndSize PyBytes_FromString PyLong_AsUnsignedLongLong PyLong_FromUnsignedLongLong PyErr_SetNone PyLong_FromLong PyObject_SetAttrString PyEval_SaveThread PyLong_FromSsize_t PyErr_Occurred PyBytes_AsString PyImport_ImportModule PyLong_AsSsize_t PyType_GenericNew PyModule_AddIntConstant PyObject_IsTrue PyMem_Realloc PyExc_TypeError _PyObject_New PyExc_NotImplementedError PyType_FromSpec PyBytes_FromStringAndSize PyObject_HasAttrString PyObject_CallObject PyExc_OSError PyDict_GetItemString PyErr_NoMemory PyList_Type PyTuple_SetItem PyExc_StopIteration PyMem_Free PyObject_IsInstance PyList_GetItem PyDict_New PyBytes_Size PyTuple_Size PyList_Append PyErr_Clear _PyObject_CallMethod_SizeT PyErr_NewException PyObject_GetAttrString PyType_Ready PyExc_ValueError PyModule_Create2 PyDict_DelItemString PyExc_BufferError

kernel32

GetCurrentProcess EnterCriticalSection WakeAllConditionVariable WakeConditionVariable LeaveCriticalSection InitializeCriticalSection InitializeConditionVariable IsDebuggerPresent InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SleepConditionVariableCS SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext DeleteCriticalSection GetSystemInfo CloseHandle GetLastError WaitForSingleObject

vcruntime140

__std_type_info_destroy_list memset memmove __C_specific_handler memcpy

api-ms-win-crt-heap-l1-1-0

calloc free malloc realloc

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fflush __stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _cexit _beginthreadex _errno _initialize_onexit_table

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/edgehtml.dll

IMPHASH 92dbd485a8f15640c0fff7b2a7c647e7
SHA256 85195b5cfe9baa0d9edbb645da25660844f358cad96077a246e6ce7834d43ede
MD5 eed734f75796f6be70584a9220338b83
SHA1 1875275b0b41fa65836db43b456dc50446b7482b
SHA512 64b663b93583da0c88d892c96310019fd4cc9f992c486a001d258f96f27169340c7b47194c7a56cac3a91258a4e375d882ba780c6833a099b5c119aa2f36ab07
SSDEEP 393216:XsqBC+4c2WxaXWy40cl73nP31frBCFnE8X8KYWrkiOuJJh:vucFHCLOuJJh
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

5576016

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

edgehtml.pdb

msvcrt

__mb_cur_max ?what@exception@@UEBAPEBDXZ _strlwr_s strcpy_s wcstombs_s strrchr towupper iswxdigit _wcsdup ??8type_info@@QEBAHAEBV0@@Z __crtCompareStringW __crtCompareStringA __crtLCMapStringW __crtLCMapStringA _wsetlocale ___lc_handle_func setlocale toupper memcpy memmove ___mb_cur_max_func ___lc_codepage_func _ismbblead ldexp strcspn ??0bad_cast@@QEAA@PEBD@Z localeconv ??0bad_cast@@QEAA@AEBV0@@Z ??1bad_cast@@UEAA@XZ memset __pctype_func isupper islower _Getmonths _W_Getdays _W_Getmonths _W_Gettnames _Wcsftime _Gettnames _Strftime isspace memchr ___lc_collate_cp_func memcmp sqrt _XcptFilter _amsg_exit _initterm ?terminate@@YAXXZ isdigit isxdigit isalpha swscanf_s iswspace _vsnprintf_s ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ __CxxFrameHandler3 wcsncat_s _mbsicmp _mbscspn _mbsspn _mbsstr strchr strtol _mbschr _ismbcdigit strncpy_s _mbscmp calloc mbstowcs _ultoa_s _resetstkoflw iswascii iswpunct realloc free malloc _controlfp_s _errno _set_errno time _wtoi64 _stricmp towlower wcstok_s _wcsrev _wcsupr tolower iswcntrl _aligned_malloc _aligned_free _ltow strncmp _fpclass fmod floorf floor expf exp cosf cos _isnan modf abort _i64tow_s __ExceptionPtrCopy __ExceptionPtrRethrow __ExceptionPtrToBool __ExceptionPtrDestroy __ExceptionPtrCreate sprintf_s _wcsupr_s _itow_s _wcstoui64 _ui64tow_s _wcslwr _wcslwr_s iswalnum wcsrchr wcstol wcsncpy_s wcsstr wcscat_s wcscpy_s vswprintf_s isalnum wcstod wcstoul qsort bsearch_s qsort_s iswalpha iswdigit _finite _ltow_s _ultow_s wcsnlen _wtol swprintf_s bsearch _wtof _wtoi wcsncmp _wcsnicmp wcschr tanf ??1type_info@@UEAA@XZ _vsnprintf _onexit __dllonexit _unlock _lock _wcsicmp fmodf __C_specific_handler ??0exception@@QEAA@AEBQEBD@Z _vsnwprintf memcpy_s _purecall iswprint _statusfp _clearfp iswlower strtoul wcsspn wcscspn fwrite strnlen wcstok __uncaught_exception memmove_s tan sqrtf sinf sin log powf log10f logf _HUGE _Getdays _CxxThrowException pow strstr __iob_func acos acosf asin asinf atan atan2 atan2f atanf ceil ceilf wcscmp

chakra

RecyclerNativeHeapRootAddRef RecyclerNativeHeapAllocTraced RecyclerNativeHeapAllocTracedFinalized JsVarToExtension RecyclerNativeHeapCollectGarbageInThread JsCreateThreadService MemProtectHeapRootAlloc RecyclerNativeHeapGetRealAddressFromInterior MemProtectHeapCreate RecyclerNativeHeapCreateWeakReference RecyclerNativeHeapGetStrongReference RecyclerNativeHeapAddExternalMemoryUsage RecyclerNativeHeapRootRelease JsDiscardBackgroundParse MemProtectHeapNotifyCurrentThreadDetach MemProtectHeapUnrootAndZero MemProtectHeapDestroy MemProtectHeapSynchronizeWithCollector MemProtectHeapUnprotectCurrentThread MemProtectHeapReportHeapSize MemProtectHeapProtectCurrentThread MemProtectHeapDisableCollection MemProtectHeapRootRealloc JsQueueBackgroundParse

iertutil

ord151 ord79 ord110 ord600 ord681 ord134 ord178 ord177 ord792 ord325 ord793 ord57 ord682 ord111 ord700 ord701 ord791 ord910 ord870 ord58 CreateUri ord56 CreateIUriBuilder ord911 ord690 ord139 ord138 CreateUriWithFragment ord85 ord74 ord102 ord174 ord466 ord82 ord76 ord49 ord688 ord661 ord651 ord655 ord657 ord650 ord678 ord653 ord660 ord677 ord658 ord652 ord663 ord654 ord163 ord597 ord594 ord26 ord820 ord795 ord398 ord796 ord209 ord32 GetIUriPriv GetPortFromUrlScheme ord81

ntdll

NtPowerInformation RtlReleaseSRWLockExclusive NtQueryInformationProcess NtQuerySystemInformation RtlAcquireSRWLockExclusive RtlNtStatusToDosError RtlIpv6AddressToStringExW RtlIpv4AddressToStringExW RtlDllShutdownInProgress VerSetConditionMask RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext RtlGetSuiteMask NtClose

winhttp

WinHttpGetIEProxyConfigForCurrentUser

api-ms-win-core-libraryloader-l1-2-0

FreeLibraryAndExitThread LoadStringW FreeLibrary SizeofResource LockResource LoadLibraryExA FindResourceExW LoadResource LoadLibraryExW GetModuleHandleW GetModuleFileNameW GetProcAddress GetModuleFileNameA GetModuleHandleExW

api-ms-win-core-debug-l1-1-0

OutputDebugStringW IsDebuggerPresent DebugBreak OutputDebugStringA

api-ms-win-eventing-provider-l1-1-0

EventRegister EventUnregister EventActivityIdControl EventSetInformation EventWriteEx EventWriteTransfer EventWrite EventProviderEnabled

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx WaitForSingleObject CreateEventExW ReleaseSemaphore AcquireSRWLockShared OpenSemaphoreW ResetEvent InitializeSRWLock SetEvent CreateEventW ReleaseSRWLockShared ReleaseSRWLockExclusive OpenEventW WaitForMultipleObjectsEx CreateMutexW InitializeCriticalSectionEx InitializeCriticalSectionAndSpinCount DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection TryEnterCriticalSection CreateMutexExW ReleaseMutex CreateSemaphoreExW AcquireSRWLockExclusive

api-ms-win-core-errorhandling-l1-1-2

RaiseFailFastException

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter SetLastError SetErrorMode GetLastError UnhandledExceptionFilter RaiseException

api-ms-win-core-processthreads-l1-1-0

ProcessIdToSessionId TerminateProcess CreateProcessW CreateThread GetCurrentThread GetCurrentProcess OpenProcessToken GetThreadPriority ResumeThread OpenThread CreateProcessAsUserW SetThreadPriority GetCurrentProcessId GetProcessIdOfThread GetProcessId TlsAlloc TlsSetValue TlsGetValue GetExitCodeProcess TlsFree GetProcessTimes ExitProcess OpenThreadToken GetCurrentThreadId QueueUserAPC

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW GetUserDefaultLocaleName IsValidLocaleName GetLocaleInfoEx SetThreadPreferredUILanguages LocaleNameToLCID GetUserDefaultLangID GetCPInfo GetGeoInfoW GetUserGeoID IsValidCodePage GetUserDefaultLCID GetSystemDefaultLCID FormatMessageW ResolveLocaleName IsDBCSLeadByteEx IsDBCSLeadByte GetACP LCMapStringEx GetThreadUILanguage

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-heap-l1-1-0

HeapReAlloc HeapSize HeapAlloc GetProcessHeap HeapFree HeapSetInformation HeapDestroy

api-ms-win-core-fibers-l1-1-0

FlsFree FlsSetValue FlsAlloc

api-ms-win-core-memory-l1-1-0

FlushViewOfFile VirtualFree VirtualProtect VirtualQuery UnmapViewOfFile CreateFileMappingW MapViewOfFile VirtualAlloc MapViewOfFileEx OpenFileMappingW

api-ms-win-core-atoms-l1-1-0

FindAtomW AddAtomW DeleteAtom

api-ms-win-core-sysinfo-l1-1-0

GetTickCount GetSystemWindowsDirectoryW GetLocalTime GetTickCount64 GetSystemDirectoryW GetSystemTime GetSystemTimeAsFileTime GetLogicalProcessorInformation GetVersionExA GetSystemTimeAdjustment GlobalMemoryStatusEx GetVersionExW GetSystemInfo

api-ms-win-core-synch-l1-2-0

WaitOnAddress InitOnceExecuteOnce InitOnceComplete Sleep InitOnceInitialize SleepConditionVariableSRW WakeAllConditionVariable WakeByAddressAll SleepConditionVariableCS InitializeConditionVariable InitOnceBeginInitialize

api-ms-win-core-path-l1-1-0

PathCchCanonicalizeEx PathCchAddExtension PathCchCombine PathCchAppendEx PathCchCanonicalize PathCchRemoveExtension PathCchAppend PathAllocCombine PathCchCombineEx

api-ms-win-core-shlwapi-legacy-l1-1-0

PathIsUNCW SHExpandEnvironmentStringsW PathGetDriveNumberW IsCharSpaceW PathUnquoteSpacesW PathSearchAndQualifyW PathRemoveFileSpecW PathFindFileNameW PathFileExistsW PathGetCharTypeW PathFindExtensionW PathIsFileSpecW PathIsRelativeW PathMatchSpecW PathStripPathW

api-ms-win-core-file-l1-1-0

ReadFile FileTimeToLocalFileTime FindNextFileW CreateFileW FindNextChangeNotification FindCloseChangeNotification FindFirstChangeNotificationW GetFileAttributesW CompareFileTime RemoveDirectoryW SetFileAttributesW SetFilePointerEx GetFileSize FindClose FindFirstFileW GetFullPathNameW SetFilePointer GetDiskFreeSpaceExW CreateDirectoryW GetLongPathNameW GetFileTime GetFullPathNameA GetFileAttributesExW GetFileType GetFileSizeEx FindFirstFileExW WriteFile GetTempFileNameW SetEndOfFile DeleteFileW

api-ms-win-core-shlwapi-obsolete-l1-1-0

StrCmpICW StrStrIA StrStrA StrDupW QISearch StrCmpNICW StrCSpnW StrCmpW StrRStrIW StrToIntA StrCmpIW StrTrimW StrChrNW StrStrW StrToInt64ExW StrToIntW StrToIntExW StrCmpCW StrStrIW StrChrW StrChrNIW StrCmpICA StrCmpNICA StrCmpNCW StrCmpNW StrCmpNIW StrChrA StrPBrkW

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics GetMonitorInfoW EnumDisplaySettingsW SystemParametersInfoW

api-ms-win-core-kernel32-legacy-l1-1-0

WTSGetActiveConsoleSessionId GetComputerNameW RegisterWaitForSingleObject

api-ms-win-core-threadpool-l1-2-0

WaitForThreadpoolWorkCallbacks TrySubmitThreadpoolCallback CloseThreadpoolWork SetThreadpoolTimer CreateThreadpool WaitForThreadpoolTimerCallbacks SubmitThreadpoolWork SetThreadpoolThreadMaximum SetThreadpoolThreadMinimum CreateThreadpoolTimer CloseThreadpool CloseThreadpoolWait CreateThreadpoolWait CreateThreadpoolWork WaitForThreadpoolWaitCallbacks CloseThreadpoolTimer CallbackMayRunLong CreateThreadpoolCleanupGroup CloseThreadpoolCleanupGroup SetThreadpoolWait CloseThreadpoolCleanupGroupMembers

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-string-l2-1-0

CharNextW CharLowerW CharUpperW IsCharAlphaNumericW CharLowerBuffW

api-ms-win-core-url-l1-1-0

UrlUnescapeW UrlApplySchemeW UrlCanonicalizeW UrlGetLocationW UrlCombineW HashData UrlEscapeW ParseURLW PathCreateFromUrlW GetAcceptLanguagesW UrlGetPartW UrlIsW UrlIsNoHistoryW PathIsURLW UrlCreateFromPathW

api-ms-win-core-localization-l1-2-2

LCIDToLocaleName GetSystemDefaultLocaleName

api-ms-win-core-kernel32-legacy-l1-1-1

PowerSetRequest PowerCreateRequest VerifyVersionInfoW PowerClearRequest

api-ms-win-core-processthreads-l1-1-1

GetProcessMitigationPolicy OpenProcess

api-ms-win-security-base-l1-1-0

IsValidSid GetLengthSid InitializeAcl GetTokenInformation AddAccessAllowedAce GetSidSubAuthorityCount GetSidSubAuthority DuplicateTokenEx CopySid

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalReAlloc LocalFree GlobalFree GlobalAlloc

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW LoadLibraryA

api-ms-win-core-registry-l1-1-0

RegCreateKeyExW RegGetValueW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteTreeW RegOpenKeyExA RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW

api-ms-win-core-string-l2-1-1

SHLoadIndirectString

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA lstrcmpA lstrcmpW lstrcmpiW lstrlenW

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueueTimer UnregisterWaitEx DeleteTimerQueueTimer QueueUserWorkItem

api-ms-win-core-string-l1-1-0

GetStringTypeW CompareStringEx MultiByteToWideChar CompareStringOrdinal CompareStringW WideCharToMultiByte

api-ms-win-core-processenvironment-l1-2-0

SearchPathA

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock GlobalFlags GlobalUnlock LocalSize GlobalSize GlobalReAlloc

api-ms-win-rtcore-ntuser-clipboard-l1-1-0

GetClipboardFormatNameW RegisterClipboardFormatA IsClipboardFormatAvailable SetClipboardData RegisterClipboardFormatW CloseClipboard EmptyClipboard OpenClipboard

api-ms-win-core-sidebyside-l1-1-0

ReleaseActCtx CreateActCtxW ActivateActCtx DeactivateActCtx

api-ms-win-rtcore-ole32-clipboard-l1-1-0

OleIsCurrentClipboard OleFlushClipboard OleGetClipboard OleSetClipboard

api-ms-win-rtcore-ntuser-draw-l1-1-0

RedrawWindow

api-ms-win-rtcore-ntuser-powermanagement-l1-1-0

RegisterPowerSettingNotification UnregisterPowerSettingNotification

api-ms-win-security-isolatedcontainer-l1-1-0

IsProcessInIsolatedContainer

api-ms-win-security-capability-l1-1-0

CapabilityCheck

api-ms-win-ntuser-rectangle-l1-1-0

PtInRect IsRectEmpty IntersectRect SetRect

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-timezone-l1-1-0

SystemTimeToFileTime FileTimeToSystemTime

api-ms-win-core-processenvironment-l1-1-0

SearchPathW GetEnvironmentVariableW ExpandEnvironmentStringsW SetEnvironmentVariableW GetCurrentDirectoryW

api-ms-win-core-privateprofile-l1-1-0

GetProfileIntA WritePrivateProfileStringW GetProfileIntW

api-ms-win-core-com-private-l1-1-0

CoRegisterInitializeSpy CoRegisterMessageFilter CoRevokeInitializeSpy

rpcrt4

RpcStringFreeW UuidCreate I_RpcExceptionFilter RpcBindingBind NdrAsyncServerCall Ndr64AsyncServerCallAll RpcBindingCreateW RpcServerUnregisterIf RpcMgmtStopServerListening UuidToStringW RpcBindingFree RpcStringFreeA RpcBindingVectorFree RpcEpRegisterNoReplaceW RpcExceptionFilter RpcServerInqBindingsEx RpcServerRegisterIf3 RpcServerUseProtseqEpW I_RpcBindingInqLocalClientPID RpcServerInqBindingHandle RpcAsyncInitializeHandle RpcStringBindingComposeA RpcAsyncCompleteCall UuidFromStringW NdrClientCall3 RpcBindingSetAuthInfoA Ndr64AsyncClientCall RpcBindingFromStringBindingA RpcAsyncCancelCall

api-ms-win-core-file-l1-2-0

GetTempPathW CreateFile2

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-mm-time-l1-1-0

timeEndPeriod timeBeginPeriod

api-ms-win-core-job-l1-1-0

IsProcessInJob

api-ms-win-core-datetime-l1-1-1

GetDateFormatEx GetTimeFormatEx

api-ms-win-core-systemtopology-l1-1-0

GetNumaHighestNodeNumber

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo GetSystemTimePreciseAsFileTime

api-ms-win-core-file-l2-1-0

GetFileInformationByHandleEx MoveFileExW

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList InterlockedPopEntrySList QueryDepthSList InitializeSListHead InterlockedPushEntrySList

api-ms-win-core-processtopology-obsolete-l1-1-0

GetActiveProcessorCount

api-ms-win-core-fibers-l2-1-0

DeleteFiber ConvertThreadToFiber CreateFiber SwitchToFiber ConvertFiberToThread

api-ms-win-core-marshal-l1-1-0

CLIPFORMAT_UserSize CLIPFORMAT_UserMarshal HWND_UserUnmarshal CLIPFORMAT_UserUnmarshal HWND_UserSize HWND_UserMarshal64 CLIPFORMAT_UserFree HWND_UserUnmarshal64 HWND_UserSize64 CLIPFORMAT_UserUnmarshal64 HWND_UserFree64 HWND_UserFree CLIPFORMAT_UserSize64 CLIPFORMAT_UserFree64 HWND_UserMarshal CLIPFORMAT_UserMarshal64

api-ms-win-rtcore-ntuser-wmpointer-l1-1-0

GetPointerFrameTouchInfo GetCurrentInputMessageSource GetPointerInfo GetPointerFrameInfoHistory

api-ms-win-core-winrt-robuffer-l1-1-0

RoGetBufferMarshaler

api-ms-win-core-localization-obsolete-l1-2-0

GetUserDefaultUILanguage GetNumberFormatW GetSystemDefaultUILanguage EnumUILanguagesW

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW

api-ms-win-core-registry-l2-1-0

RegEnumKeyW

api-ms-win-shlwapi-winrt-storage-l1-1-1

IUnknown_GetWindow StrRetToBufW

api-ms-win-core-realtime-l1-1-0

QueryProcessCycleTime QueryThreadCycleTime

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-interlocked-l1-2-0

InterlockedPushListSListEx

api-ms-win-shell-namespace-l1-1-0

ILFindLastID ILFree SHBindToParent

api-ms-win-core-stringansi-l1-1-0

CharLowerA

api-ms-win-security-cryptoapi-l1-1-0

CryptGenRandom CryptAcquireContextA CryptAcquireContextW CryptCreateHash CryptHashData CryptReleaseContext CryptGetHashParam CryptDestroyHash CryptContextAddRef

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadedAPI ResolveDelayLoadsFromDll

api-ms-win-core-processthreads-l1-1-3

SetProcessInformation SetThreadDescription

api-ms-win-core-registry-l1-1-1

RegDeleteKeyValueW

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW VerQueryValueW GetFileVersionInfoExW

rometadata

MetaDataGetDispenser

api-ms-win-base-util-l1-1-0

IsTextUnicode

api-ms-win-ole32-ie-l1-1-0

OleRun CoInitialize ReleaseStgMedium CreateBindCtx

kernelbase

OpenGlobalizationUserSettingsKey

rmclient

HamDisconnectForExtendedExecution HamAddDependency HamConnectForExtendedExecution

api-ms-win-core-apiquery-l1-1-0

ApiSetQueryApiSetPresence

api-ms-win-core-namedpipe-l1-1-0

CreatePipe

api-ms-win-core-localization-ansi-l1-1-0

GetStringTypeExA

api-ms-win-core-delayload-l1-1-0

DelayLoadFailureHook

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-memory-l1-1-1

VirtualUnlock

api-ms-win-eventing-classicprovider-l1-1-0

TraceMessage

api-ms-win-security-provider-l1-1-0

SetEntriesInAclW SetNamedSecurityInfoW GetNamedSecurityInfoW

api-ms-win-shell-shdirectory-l1-1-0

ord290

api-ms-win-core-windowserrorreporting-l1-1-0

WerUnregisterMemoryBlock WerRegisterMemoryBlock

Name

.text

Size

17.5MB

Virtual Size

17.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.6MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

157KB

Virtual Size

276KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

636KB

Virtual Size

635KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/mfc140d.dll

IMPHASH d593d077a3346a74c2f1d3f611bef408
SHA256 488c1997a4890a7cc6bd7803eb179140584ed6975ae85b2b940fbed88acb3a2a
MD5 c7537fdea4492b6e8a439c35ba6471da
SHA1 a1688927b0aa0be9f0075fac69390e21a968b12e
SHA512 627c9e84e7c7047506553b6fc009b59a8f619152461c3ac1bf66d0aacb8e3c56d66aeeefac076b9f27c4f1fca58e5d1cca673da0cee0e8c702c4f983d60cfa92
SSDEEP 98304:oSzVg9ljDAu4tdNb/NFLOAkGkzdnEVomFHKnPQ:ohC1TFLOyomFHKnPQ
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

75:22:2c:eb:8e:5c:24:84:21:2c:e4:18:24:1d:5c:7b:17:16:ce:17:6e:f1:ac:76:31:11:47:a1:7d:21:1b:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

75:22:2c:eb:8e:5c:24:84:21:2c:e4:18:24:1d:5c:7b:17:16:ce:17:6e:f1:ac:76:31:11:47:a1:7d:21:1b:9d

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

6469568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\mfc140d.amd64.pdb

advapi32

RegCloseKey RegCreateKeyExA RegDeleteKeyA RegEnumValueA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegDeleteValueA RegEnumKeyExA RegEnumKeyA RegQueryValueA RegSetValueA SetFileSecurityA GetFileSecurityA RegOpenKeyExW IsTextUnicode

kernel32

RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent RaiseException QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead VirtualQuery OutputDebugStringW ExpandEnvironmentStringsA GetProcessHeap HeapFree HeapAlloc GetEnvironmentVariableW GetEnvironmentVariableA LoadLibraryA GlobalFlags GlobalFindAtomA GetSystemTime LocalUnlock LocalLock GetAtomNameA CopyFileA GetTickCount64 CreateSemaphoreA WaitForMultipleObjects CreateEventA CreateMutexA ReleaseMutex ReleaseSemaphore PulseEvent RtlCaptureContext ResetEvent SetEvent FormatMessageA SetFileAttributesA LocalFileTimeToFileTime GetFileSizeEx GetFileAttributesExA FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindNextFileA FileTimeToLocalFileTime GetStringTypeExA GetThreadLocale MoveFileA GetShortPathNameA LoadLibraryExA GetCurrentProcess GetHandleInformation DuplicateHandle GetVolumeInformationA WriteFile UnlockFile SetEndOfFile ReadFile LockFile FlushFileBuffers FindFirstFileA FindClose GetProfileIntA SystemTimeToFileTime ReplaceFileA GetTempFileNameA SetFileTime GetFullPathNameA GetFileTime GetDiskFreeSpaceA VirtualProtect lstrcpyW lstrcmpW IsDBCSLeadByte GetUserDefaultLCID FindResourceExW WaitForSingleObject GetPrivateProfileStringA GetPrivateProfileIntA GlobalAddAtomA GetCurrentProcessId SetErrorMode CompareStringA GlobalDeleteAtom GetVersionExA GetCurrentThread GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW SearchPathA GlobalGetAtomNameA GlobalSize GetFileSize GetFileAttributesA LocalFree LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc GetModuleFileNameA lstrcmpiA GetWindowsDirectoryA GetTickCount FreeResource GlobalFree FindResourceA LoadLibraryExW GetModuleHandleW GetSystemDirectoryW DecodePointer EncodePointer lstrcmpA GetCurrentDirectoryA Sleep CloseHandle GetTempPathA SetFilePointer CreateFileA InitializeCriticalSectionAndSpinCount ResumeThread SuspendThread GetThreadPriority SetThreadPriority QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW OutputDebugStringA VerifyVersionInfoA FreeLibrary VerSetConditionMask MulDiv GetCPInfo GetOEMCP GetProcAddress GetModuleHandleA DeleteFileA GetACP DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCurrentThreadId GlobalLock GlobalUnlock GlobalAlloc lstrcpyA WideCharToMultiByte FindResourceW SizeofResource LockResource LoadResource MultiByteToWideChar SetLastError GetLastError WritePrivateProfileStringA GetSystemInfo

vcruntime140_1d

__CxxFrameHandler4

vcruntime140d

__std_type_info_destroy_list __C_specific_handler_noexcept __current_exception_context __current_exception wcsstr wcschr wcsrchr memcmp _CxxThrowException __C_specific_handler _purecall memset memmove memcpy __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_LoadLibraryExW

ucrtbased

wcslen __stdio_common_vswprintf_s __stdio_common_vsprintf __stdio_common_vsnprintf_s abort _CrtDbgReportW _invalid_parameter_noinfo toupper _errno wcscpy_s strlen strnlen _mbslwr_s _CrtDbgReport _mbscmp __stdio_common_vsprintf_s _mbschr _mbsinc free _mbsstr _ismbcspace labs ldiv _mbsupr_s atoi _calloc_dbg sqrt abs atan2 _mbscspn _malloc_dbg _mbspbrk _mbsrchr _mbsspn clock cos exp fabs sin ceil floor _splitpath_s _mbscoll _mbsicoll _mbsnbcmp _resetstkoflw strcpy_s _ismbcalnum _ismbcalpha _ismbcdigit _ismbcprint _mbctolower _mbctoupper _CrtSetAllocHook _CrtCheckMemory _CrtDoForAllClientObjects _CrtDumpMemoryLeaks _CrtIsMemoryBlock _CrtMemCheckpoint _CrtMemDifference _CrtMemDumpAllObjectsSince _mbsicmp _recalloc strtol _realloc_dbg rand_s _mbsdec _gcvt_s __p__crtDbgFlag _CrtSetDumpClient _CrtReportBlockType _CrtSetReportMode _CrtSetReportHook2 _fullpath_dbg __doserrno clearerr_s fclose _fdopen feof ferror fflush fgets _fileno fputs fread fseek ftell fwrite _get_osfhandle _open_osfhandle _ultoa_s wcsncpy_s _beginthreadex _endthreadex _ctime64_s strncpy_s _msize_dbg _expand_dbg iswspace wcspbrk wcsspn _wcsrev _wcslwr_s _wcsupr_s wcscoll _wcsicoll _mbsrev _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit terminate _initterm _initterm_e _wmakepath_s _wsplitpath_s _CrtMemDumpStatistics _CrtSetBreakAlloc _CrtSetDbgFlag atol __stdio_common_vsscanf strtoul wcscat_s wcsnlen wmemcpy_s wcstombs_s _localtime64_s _beginthread _endthread _strdup_dbg _makepath_s _time64 strtod _recalloc_dbg strcat_s _strnicmp __stdio_common_vsnwprintf_s __p___argc __p___argv _ismbblead _mbsnbcpy_s __stdio_common_vswprintf _itoa_s _ltoa_s _mbsnbicmp wcscmp _mktime64 _wcsicmp _free_dbg wcscspn

user32

DrawIcon DrawTextA DrawTextExA GrayStringA DrawStateA GetTabbedTextExtentA WindowFromDC ExcludeUpdateRgn ScrollDC SetMenuContextHelpId GetMenuContextHelpId DrawFocusRect FillRect FrameRect InvertRect CheckMenuRadioItem LoadBitmapA DrawCaption DrawAnimatedRects SendNotifyMessageA FlashWindow ShowOwnedPopups OpenIcon CloseWindow IsIconic IsZoomed GetNextDlgGroupItem GetNextDlgTabItem OpenClipboard GetClipboardOwner SetClipboardViewer GetClipboardViewer ChangeClipboardChain GetOpenClipboardWindow GetActiveWindow GetCapture SetCapture HiliteMenuItem DrawMenuBar GetSystemMenu DragDetect UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow GetDC GetDCEx GetWindowDC GetMenuItemInfoA BeginPaint EndPaint GetUpdateRect GetUpdateRgn SetWindowRgn GetWindowRgn InvalidateRect ValidateRect InvalidateRgn ValidateRgn LockWindowUpdate SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar EnableScrollBar GetClientRect SetWindowContextHelpId GetWindowContextHelpId CreateCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint ChildWindowFromPoint ChildWindowFromPointEx SetParent FindWindowA FindWindowExA GetTopWindow GetLastActivePopup LoadIconW DlgDirListA DlgDirSelectExA DlgDirListComboBoxA DlgDirSelectComboBoxExA ArrangeIconicWindows CharUpperA GetKeyboardState ToAsciiEx MapVirtualKeyA CreateAcceleratorTableA CopyAcceleratorTableA LoadImageW SetWindowTextA SetFocus SubtractRect GetMessageA UpdateLayeredWindow EnumChildWindows GetWindowTextA GetDoubleClickTime IsWindowEnabled RegisterClipboardFormatA GetComboBoxInfo CharUpperBuffA GetClipboardFormatNameA UnpackDDElParam UnregisterClassA GetMenuDefaultItem GetWindowThreadProcessId SetWindowLongA GetMenuCheckMarkDimensions CallWindowProcA SetWindowLongPtrA MoveWindow GetWindowTextLengthA GetTabbedTextExtentW CreateDialogIndirectParamA EndDialog GetDlgItem SetPropA GetPropA RemovePropA GetMessagePos GetMessageTime GetDialogBaseUnits MsgWaitForMultipleObjectsEx CharNextA IsDialogMessageA ClipCursor InSendMessage AdjustWindowRectEx CountClipboardFormats RegisterClassA GetClassInfoExA CreateWindowExA SetWindowPlacement GetMenu SetMenu TrackPopupMenuEx ScrollWindow GetWindowLongPtrA GetClassLongA SetScrollInfo GetScrollInfo WinHelpA MonitorFromWindow SendDlgItemMessageA LoadAcceleratorsA GetMenuBarInfo ReuseDDElParam DefFrameProcA DefMDIChildProcA TranslateMDISysAccel SetDlgItemInt GetDlgItemInt SetDlgItemTextA GetDlgItemTextA CheckDlgButton CheckRadioButton IsDlgButtonChecked ScrollWindowEx RealChildWindowFromPoint CharToOemBuffA OemToCharBuffA GetMenuItemID GetSubMenu DestroyMenu PostThreadMessageA GetSystemMetrics TranslateAcceleratorA LoadAcceleratorsW GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard WaitMessage DispatchMessageA TranslateMessage EnableWindow GetFocus IsChild TrackPopupMenu GetIconInfo CopyImage LoadImageA LoadIconA GetWindowLongA SetCursor NotifyWinEvent CopyIcon DestroyIcon GetClassNameA CopyRect SetCursorPos MessageBeep ReleaseCapture RegisterWindowMessageA IsRectEmpty GetWindowPlacement ShowWindow PostMessageA SendMessageA SetClassLongPtrA EqualRect GetSysColorBrush GetDlgCtrlID DeferWindowPos DrawIconEx OffsetRect InflateRect PtInRect SetRectEmpty GetCursorPos TrackMouseEvent SetRect IsWindow MapVirtualKeyExA GetKeyNameTextA IsCharLowerA PostQuitMessage PeekMessageA GetKeyboardLayout SetMenuDefaultItem SetMenuItemInfoA InsertMenuItemA SetMenuItemBitmaps DeleteMenu RemoveMenu ModifyMenuA AppendMenuA GetMenuItemCount InsertMenuA EnableMenuItem CheckMenuItem CreatePopupMenu CreateMenu GetMenuState GetMenuStringA LoadMenuIndirectA LoadMenuW LoadMenuA DrawFrameControl DrawEdge MapDialogRect TabbedTextOutA ReleaseDC DestroyCursor IsClipboardFormatAvailable GetClassLongPtrA EnumDisplayMonitors LoadCursorW GetSysColor MonitorFromRect GetParent DestroyAcceleratorTable DestroyWindow IsMenu IntersectRect GetWindow GetKeyState IsWindowVisible EndDeferWindowPos BeginDeferWindowPos UnionRect GetWindowRect RedrawWindow BringWindowToTop SetWindowPos CallNextHookEx UnhookWindowsHookEx SetWindowsHookExA LoadBitmapW LoadCursorA SetLayeredWindowAttributes GetMonitorInfoA MonitorFromPoint SystemParametersInfoA KillTimer SetTimer GetClassInfoA DefWindowProcA MessageBoxA GetDesktopWindow

gdi32

GetObjectType GetObjectA GetStockObject GetSystemPaletteEntries CreateDIBSection CreateDIBitmap EnumFontFamiliesA GetTextCharsetInfo CloseMetaFile CreateMetaFileA CloseEnhMetaFile CreateEnhMetaFileA ExtTextOutA AnimatePalette Arc BitBlt Chord CombineRgn CreateBitmap CreateBitmapIndirect CreateBrushIndirect CreateCompatibleBitmap CreateDiscardableBitmap CreateCompatibleDC CreateDCA CreateDIBPatternBrushPt CreateEllipticRgn CreateEllipticRgnIndirect CreateFontIndirectA CreateFontA CreateHatchBrush CreateICA CreatePalette CreatePen CreatePenIndirect CreatePolyPolygonRgn CreatePatternBrush CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DrawEscape Ellipse EnumObjects EqualRgn Escape ExtEscape ExtCreateRegion ExtFloodFill FillRgn FloodFill FrameRgn GetROP2 GetAspectRatioFilterEx GetBkColor GetBkMode GetBitmapBits GetBitmapDimensionEx GetBoundsRect GetBrushOrgEx GetCharWidthA GetCharWidthFloatA GetCharABCWidthsA GetCharABCWidthsFloatA GetCurrentObject GetCurrentPositionEx GetDeviceCaps GetFontData GetGlyphOutlineA GetGraphicsMode GetMapMode GetNearestColor GetNearestPaletteIndex GetOutlineTextMetricsA GetPaletteEntries GetPixel GetPolyFillMode GetRegionData GetRgnBox GetStretchBltMode GetTextCharacterExtra GetTextAlign GetTextColor GetTextExtentPoint32A GetFontLanguageInfo GetCharacterPlacementA GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx InvertRgn MaskBlt PlgBlt OffsetRgn PatBlt Pie PaintRgn PolyPolygon PtInRegion PtVisible RectInRegion RectVisible Rectangle ResetDCA RealizePalette RoundRect ResizePalette SelectObject SetBitmapBits SetBoundsRect SetPaletteEntries SetPixel SetPixelV StretchBlt SetRectRgn UpdateColors PlayEnhMetaFile GdiComment GetTextMetricsA AngleArc PolyPolyline GetWorldTransform GetColorAdjustment CreateHalftonePalette StartDocA EndDoc StartPage EndPage AbortDoc SetAbortProc AbortPath BeginPath CloseFigure EndPath FillPath FlattenPath GetPath PathToRegion SetMiterLimit StrokeAndFillPath StrokePath WidenPath ExtCreatePen GetMiterLimit GetArcDirection TextOutA CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetBitmapDimensionEx SetBrushOrgEx GetTextFaceA GetKerningPairsA UnrealizeObject DeleteDC EnumFontFamiliesExA GetDIBits SelectPalette SetBkColor SetDIBColorTable StretchDIBits DeleteMetaFile GetClipBox MoveToEx SetViewportExtEx SetViewportOrgEx OffsetViewportOrgEx ScaleViewportExtEx GetTextExtentPointA GetTextExtentPoint32W IntersectClipRect RestoreDC OffsetWindowOrgEx PolylineTo PolyBezierTo SetArcDirection SelectClipPath PolyDraw ArcTo SetColorAdjustment ModifyWorldTransform SetWorldTransform EnumMetaFile PlayMetaFileRecord SetTextJustification SetTextAlign SetTextCharacterExtra SetStretchBltMode SetROP2 SetPolyFillMode GetLayout SetLayout SetGraphicsMode SetMapperFlags SetBkMode ExtSelectClipRgn SelectClipRgn PlayMetaFile OffsetClipRgn LineTo GetClipRgn ExcludeClipRect CopyMetaFileA ScaleWindowExtEx SetWindowOrgEx SetWindowExtEx SetTextColor SetMapMode SaveDC DeleteObject

ole32

OleRegEnumVerbs OleRegGetMiscStatus CoDisconnectObject CoRegisterMessageFilter SetConvertStg OleDuplicateData WriteFmtUserTypeStg CoTreatAsClass GetRunningObjectTable WriteClassStg IsAccelerator OleTranslateAccelerator OleUninitialize OleInitialize OleDraw CoRevokeClassObject CoRegisterClassObject RevokeDragDrop RegisterDragDrop CoLockObjectExternal DoDragDrop OleLoad StgIsStorageFile StgOpenStorage StgCreateDocfile CoGetMalloc OleIsCurrentClipboard OleFlushClipboard OleSetClipboard OleGetClipboard OleRegGetUserType CreateFileMoniker GetClassFile CreateBindCtx ReadClassStg OleRun OleQueryCreateFromData OleQueryLinkFromData OleSetMenuDescriptor OleGetIconOfClass OleLockRunning OleSetContainedObject OleSave OleCreateFromFile OleCreateLinkToFile OleCreateStaticFromData OleCreateLinkFromData OleCreateFromData OleCreate CreateItemMoniker CreateGenericComposite GetHGlobalFromILockBytes WriteClassStm StgIsStorageILockBytes StringFromCLSID StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromProgID CLSIDFromString PropVariantCopy CoInitializeEx CoFreeUnusedLibraries CoCreateInstance CoCreateGuid CoTaskMemFree PropVariantClear CoTaskMemAlloc CoUninitialize CoInitialize CreateStreamOnHGlobal StringFromGUID2 CreateDataCache CreateDataAdviseHolder ReleaseStgMedium OleCreateMenuDescriptor OleDestroyMenuDescriptor CreateOleAdviseHolder OleSaveToStream ReadClassStm StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleLoadFromStream ReadFmtUserTypeStg OleIsRunning

oleaut32

SysFreeString SysStringLen VariantClear VariantChangeType SystemTimeToVariantTime VariantTimeToSystemTime VarBstrFromDate OleCreatePropertyFrame OleTranslateColor OleCreateFontIndirect OleCreatePictureIndirect OleLoadPicture LoadTypeLi LoadRegTypeLi RegisterTypeLi VariantInit VariantCopy VarBstrCmp DispCallFunc SafeArrayDestroy SysAllocStringByteLen SysStringByteLen SafeArrayGetDim SafeArrayGetElemsize SysReAllocStringLen SafeArrayAllocDescriptor SafeArrayAllocData SafeArrayCreate SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayRedim SafeArrayGetUBound SafeArrayGetLBound SafeArrayLock SafeArrayUnlock SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayCopy SafeArrayPtrOfIndex VarDateFromStr VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr SafeArrayCreateVector VarParseNumFromStr SysAllocString SysAllocStringLen

shlwapi

PathFindExtensionA PathFindFileNameA PathRemoveExtensionA PathRemoveFileSpecW PathIsUNCA PathStripToRootA UrlUnescapeA StrFormatKBSizeA

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

uxtheme

IsAppThemed DrawThemeParentBackground GetWindowTheme OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemeSysColor DrawThemeText GetThemePartSize IsThemeBackgroundPartiallyTransparent

Name

.text

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

51KB

Virtual Size

88KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

357KB

Virtual Size

356KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

129KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/mfc140ud.dll

IMPHASH 423e466851d2affea46abaf8dae7384a
SHA256 bc7a6ef8f8ff770c8c6b5c69572b87ecb5ef2ca9670c9153b6cb8ff9f0c2f7f4
MD5 a03a2f925c6638938becd62e8e744d78
SHA1 d540eb0ce0ca1a4c7384b2abe4a73a79367b60be
SHA512 7412a422e06834c129d1e013bc17853e42d36587fa7d0ec9426a87d6d86d16e9d9dbbf01bfe15b632355085c7b60801b53eba188f7c45c98dba120300ae88111
SSDEEP 98304:wOWoZfnTYRhm6Uqex95qGdOoyd/mqrFLOAkGkzdnEVomFHKnPc:nNkmbD3yd+SFLOyomFHKnPc
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

PE Signature issue

Digest

5d:a8:3d:1e:6f:ff:0e:9e:3e:04:9a:32:ed:27:25:6d:b1:63:58:ff:24:8b:9e:b7:41:fd:d5:d7:17:27:0f:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

PE Signature issue

Digest

5d:a8:3d:1e:6f:ff:0e:9e:3e:04:9a:32:ed:27:25:6d:b1:63:58:ff:24:8b:9e:b7:41:fd:d5:d7:17:27:0f:69

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Nov 11, 2024

Minor OS version

0

Major OS version

6

Entry point

6486784

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\mfc140ud.amd64.pdb

advapi32

RegCloseKey RegCreateKeyExW RegDeleteKeyW RegEnumValueW RegOpenKeyExW RegQueryValueExW RegSetValueExW RegDeleteValueW RegEnumKeyExW RegEnumKeyW RegQueryValueW RegSetValueW GetFileSecurityW SetFileSecurityW IsTextUnicode RegOpenKeyExA RegQueryValueExA

kernel32

RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent RaiseException QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead VirtualQuery OutputDebugStringW ExpandEnvironmentStringsA LoadLibraryExA FormatMessageA GetProcessHeap HeapFree HeapAlloc GetEnvironmentVariableW GetEnvironmentVariableA GlobalFlags GlobalFindAtomW GetSystemTime LocalUnlock LocalLock GetAtomNameW CopyFileW GetTickCount64 CreateSemaphoreW WaitForMultipleObjects CreateEventW CreateMutexW ReleaseMutex RtlCaptureContext PulseEvent WaitForSingleObject ResetEvent SetEvent FormatMessageW SetFileAttributesW LocalFileTimeToFileTime GetFileSizeEx GetFileAttributesExW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindNextFileW FileTimeToLocalFileTime GetThreadLocale GetStringTypeExW MoveFileW GetCurrentProcess GetHandleInformation DuplicateHandle WriteFile UnlockFile SetEndOfFile ReadFile LockFile GetVolumeInformationW GetShortPathNameW FlushFileBuffers FindFirstFileW FindClose GetProfileIntW SystemTimeToFileTime ReplaceFileW SetFileTime GetTempFileNameW GetFullPathNameW GetFileTime GetDiskFreeSpaceW VirtualProtect lstrcpyA IsDBCSLeadByte ReleaseSemaphore GetUserDefaultLCID FindResourceExW WritePrivateProfileStringW GetPrivateProfileStringW GetPrivateProfileIntW GlobalAddAtomW GetCurrentProcessId SetErrorMode CompareStringA WideCharToMultiByte lstrcmpA GlobalDeleteAtom GetVersionExW GetCurrentThread GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW SearchPathW GlobalGetAtomNameW GlobalSize GetFileSize GetFileAttributesW LocalFree LocalReAlloc LocalAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc lstrcmpiW GetWindowsDirectoryW GetTickCount FreeResource GlobalFree LoadLibraryExW GetSystemDirectoryW DecodePointer EncodePointer lstrcmpW GetCurrentDirectoryW Sleep CloseHandle GetTempPathW SetFilePointer CreateFileW InitializeCriticalSectionAndSpinCount ResumeThread SuspendThread GetThreadPriority SetThreadPriority QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW LoadLibraryW GetModuleHandleExW GetModuleFileNameW OutputDebugStringA VerifyVersionInfoW FreeLibrary VerSetConditionMask MulDiv GetProcAddress GetModuleHandleW DeleteFileW DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection GetCurrentThreadId GlobalLock GlobalUnlock GlobalAlloc lstrcpyW FindResourceW SizeofResource LockResource LoadResource MultiByteToWideChar SetLastError GetLastError CompareStringW GetSystemInfo

vcruntime140_1d

__CxxFrameHandler4

vcruntime140d

__current_exception_context __vcrt_GetModuleHandleW __vcrt_LoadLibraryExW __std_type_info_destroy_list __C_specific_handler_noexcept __current_exception memcmp _CxxThrowException __C_specific_handler wcsrchr wcsstr wcschr _purecall memset memmove memcpy __vcrt_GetModuleFileNameW

ucrtbased

__stdio_common_vsprintf __stdio_common_vsnprintf_s abort _CrtDbgReportW _invalid_parameter_noinfo toupper _errno wcscpy_s wcsnlen _wcslwr_s __stdio_common_vswprintf __stdio_common_vsnwprintf_s _CrtDbgReport wcscmp wmemcpy_s _recalloc iswspace labs ldiv _wcsupr_s _wtoi _calloc_dbg sqrt abs atan2 __stdio_common_vswprintf_s wcspbrk wcsspn _wcsicmp clock cos exp fabs sin ceil floor _wsplitpath_s wcscoll wcsncmp _wcsicoll iswalnum iswalpha iswdigit iswprint towupper towlower _CrtSetAllocHook _CrtCheckMemory _CrtDoForAllClientObjects _CrtDumpMemoryLeaks _CrtIsMemoryBlock wcscspn _realloc_dbg rand_s _gcvt_s __p__crtDbgFlag _CrtSetDumpClient _CrtReportBlockType _CrtSetReportMode _CrtSetReportHook2 _wfullpath_dbg __doserrno fgetws fputws clearerr_s fclose _fdopen feof ferror fflush _fileno fread fseek ftell fwrite _get_osfhandle _open_osfhandle _ultow_s strcpy_s _beginthreadex _endthreadex _ctime64_s _msize_dbg _expand_dbg _wcsrev _mbschr _mbscoll _mbscspn _mbsicmp _mbsicoll _mbslwr_s _mbspbrk _mbsrchr _mbsrev _mbsspn _mbsstr _mbsupr_s _ismbcspace _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit terminate _initterm _initterm_e strcat_s _CrtMemCheckpoint _malloc_dbg _free_dbg _CrtMemDifference _CrtMemDumpAllObjectsSince _CrtMemDumpStatistics _CrtSetBreakAlloc _CrtSetDbgFlag _wtol __stdio_common_vswscanf wcstoul wcscat_s _localtime64_s _beginthread _endthread _wcsdup_dbg strlen _wmakepath_s _time64 wcstod _resetstkoflw _recalloc_dbg __stdio_common_vsprintf_s _strnicmp __p___argc __p___wargv wcsncpy_s _itow_s _ltow_s _wcsnicmp strnlen _mktime64 _mbscmp wcstol free wcslen _mbsinc

user32

DrawFocusRect FillRect FrameRect InvertRect CheckMenuRadioItem DrawCaption DrawAnimatedRects SendNotifyMessageW FlashWindow ShowOwnedPopups OpenIcon CloseWindow IsIconic IsZoomed GetNextDlgGroupItem GetNextDlgTabItem OpenClipboard GetClipboardOwner SetClipboardViewer GetClipboardViewer ChangeClipboardChain GetOpenClipboardWindow GetActiveWindow GetCapture SetCapture HiliteMenuItem DrawMenuBar GetSystemMenu DragDetect UpdateWindow SetActiveWindow GetForegroundWindow SetForegroundWindow GetDC GetDCEx GetWindowDC ReleaseDC BeginPaint EndPaint GetUpdateRect GetUpdateRgn SetWindowRgn GetWindowRgn InvalidateRect ValidateRect SetLayeredWindowAttributes ValidateRgn LockWindowUpdate SetScrollPos GetScrollPos SetScrollRange GetScrollRange ShowScrollBar EnableScrollBar GetClientRect SetWindowContextHelpId GetWindowContextHelpId CreateCaret HideCaret ShowCaret SetCaretPos GetCaretPos ClientToScreen ScreenToClient MapWindowPoints WindowFromPoint ChildWindowFromPoint ChildWindowFromPointEx SetParent FindWindowW FindWindowExW GetTopWindow GetLastActivePopup DlgDirListW DlgDirSelectExW DlgDirListComboBoxW DlgDirSelectComboBoxExW ArrangeIconicWindows ToUnicodeEx CharUpperW GetKeyboardState MapVirtualKeyW CreateAcceleratorTableW CopyAcceleratorTableW SetWindowTextW SetFocus SubtractRect GetMessageW UpdateLayeredWindow EnumChildWindows GetWindowTextW GetDoubleClickTime IsWindowEnabled RegisterClipboardFormatW GetComboBoxInfo CharUpperBuffW GetClipboardFormatNameA GetClipboardFormatNameW UnpackDDElParam UnregisterClassW MessageBoxW GetWindowThreadProcessId SetWindowLongW GetMenuCheckMarkDimensions CallWindowProcW SetWindowLongPtrW MoveWindow GetWindowTextLengthW CreateDialogIndirectParamW EndDialog GetDlgItem SetMenuContextHelpId GetPropW RemovePropW GetMessagePos GetMessageTime GetDialogBaseUnits MsgWaitForMultipleObjectsEx CharNextW IsDialogMessageW ClipCursor InSendMessage AdjustWindowRectEx CountClipboardFormats RegisterClassW GetClassInfoExW CreateWindowExW SetWindowPlacement GetMenu SetMenu TrackPopupMenuEx ScrollWindow GetWindowLongPtrW GetClassLongW SetScrollInfo GetScrollInfo WinHelpW MonitorFromWindow SendDlgItemMessageA GetMenuBarInfo ReuseDDElParam DefFrameProcW DefMDIChildProcW TranslateMDISysAccel SetDlgItemInt GetDlgItemInt SetDlgItemTextW GetDlgItemTextW CheckDlgButton CheckRadioButton IsDlgButtonChecked SendDlgItemMessageW ScrollWindowEx RealChildWindowFromPoint CharToOemBuffA OemToCharBuffA SetMenuDefaultItem GetMonitorInfoW MonitorFromPoint SystemParametersInfoW KillTimer SetTimer GetClassInfoW DefWindowProcW GetDesktopWindow GetMenuItemInfoW GetSubMenu DestroyMenu PostThreadMessageW GetSystemMetrics TranslateAcceleratorW LoadAcceleratorsW GetAsyncKeyState EmptyClipboard SetClipboardData CloseClipboard WaitMessage DispatchMessageW TranslateMessage EnableWindow GetFocus IsChild TrackPopupMenu GetIconInfo CopyImage LoadImageW LoadIconW GetWindowLongW SetCursor NotifyWinEvent CopyIcon DestroyIcon GetClassNameW CopyRect SetCursorPos MessageBeep ReleaseCapture RegisterWindowMessageW IsRectEmpty GetWindowPlacement ShowWindow PostMessageW SendMessageW SetClassLongPtrW EqualRect GetSysColorBrush GetDlgCtrlID DeferWindowPos DrawIconEx OffsetRect InflateRect PtInRect SetRectEmpty GetCursorPos TrackMouseEvent SetRect IsWindow MapVirtualKeyExW GetKeyNameTextW IsCharLowerW PostQuitMessage PeekMessageW GetKeyboardLayout GetMenuContextHelpId ScrollDC ExcludeUpdateRgn WindowFromDC GetTabbedTextExtentW DrawStateW GrayStringW DrawTextExW DrawIcon DrawTextW GetMenuDefaultItem SetMenuItemInfoW InsertMenuItemW SetMenuItemBitmaps DeleteMenu RemoveMenu ModifyMenuW AppendMenuW InsertMenuW GetMenuItemCount GetMenuItemID EnableMenuItem InvalidateRgn CheckMenuItem CreatePopupMenu CreateMenu GetMenuState GetMenuStringW LoadMenuIndirectW LoadMenuW DrawFrameControl DrawEdge MapDialogRect TabbedTextOutW DestroyCursor IsClipboardFormatAvailable GetClassLongPtrW EnumDisplayMonitors GetSysColor MonitorFromRect GetParent DestroyAcceleratorTable DestroyWindow IsMenu IntersectRect GetWindow GetKeyState IsWindowVisible EndDeferWindowPos BeginDeferWindowPos UnionRect GetWindowRect RedrawWindow BringWindowToTop SetWindowPos CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW LoadBitmapW SetPropW LoadCursorW

gdi32

GetStockObject GetSystemPaletteEntries CreateDIBSection CreateDIBitmap EnumFontFamiliesW GetTextCharsetInfo CloseMetaFile CreateMetaFileW CloseEnhMetaFile CreateEnhMetaFileW ExtTextOutW AnimatePalette Arc BitBlt Chord CombineRgn CreateBitmap CreateBitmapIndirect CreateBrushIndirect CreateCompatibleBitmap CreateDiscardableBitmap CreateCompatibleDC CreateDCW CreateDIBPatternBrushPt CreateEllipticRgn CreateEllipticRgnIndirect CreateFontIndirectW CreateFontW CreateHatchBrush CreateICW CreatePalette CreatePen CreatePenIndirect CreatePolyPolygonRgn CreatePatternBrush CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DrawEscape Ellipse EnumObjects EqualRgn Escape ExtEscape ExtCreateRegion ExtFloodFill FillRgn FloodFill FrameRgn GetROP2 GetAspectRatioFilterEx GetBkColor GetBkMode GetBitmapBits GetBitmapDimensionEx GetBoundsRect GetBrushOrgEx GetCharWidthW GetCharWidthFloatW GetCharABCWidthsW GetCharABCWidthsFloatW GetCurrentObject GetCurrentPositionEx GetDeviceCaps GetFontData GetGlyphOutlineW GetGraphicsMode GetMapMode GetNearestColor GetNearestPaletteIndex GetOutlineTextMetricsW GetPaletteEntries GetObjectType GetPolyFillMode GetRegionData GetRgnBox GetStretchBltMode GetTextCharacterExtra GetTextAlign GetTextColor GetTextExtentPoint32W GetFontLanguageInfo GetCharacterPlacementW GetViewportExtEx GetViewportOrgEx GetWindowExtEx GetWindowOrgEx InvertRgn MaskBlt PlgBlt OffsetRgn PatBlt Pie PaintRgn PolyPolygon PtInRegion PtVisible RectInRegion RectVisible Rectangle ResetDCW RealizePalette RoundRect ResizePalette SelectObject SetBitmapBits SetBoundsRect SetPaletteEntries SetPixel SetPixelV StretchBlt SetRectRgn UpdateColors PlayEnhMetaFile GdiComment GetTextMetricsW AngleArc PolyPolyline GetWorldTransform GetColorAdjustment CreateHalftonePalette StartDocW EndDoc StartPage EndPage AbortDoc SetAbortProc AbortPath BeginPath CloseFigure EndPath FillPath FlattenPath GetPath PathToRegion SetMiterLimit StrokeAndFillPath StrokePath WidenPath ExtCreatePen GetMiterLimit GetArcDirection TextOutW CreatePolygonRgn DPtoLP LPtoDP Polygon Polyline PolyBezier SetBitmapDimensionEx SetBrushOrgEx GetTextFaceW GetKerningPairsW UnrealizeObject DeleteDC EnumFontFamiliesExW GetDIBits SelectPalette SetBkColor SetDIBColorTable StretchDIBits DeleteMetaFile GetObjectW GetPixel GetClipBox MoveToEx SetViewportExtEx SetViewportOrgEx OffsetViewportOrgEx OffsetWindowOrgEx PolylineTo PolyBezierTo SetArcDirection SelectClipPath PolyDraw ArcTo SetColorAdjustment ModifyWorldTransform SetWorldTransform EnumMetaFile PlayMetaFileRecord SetTextJustification SetTextAlign SetTextCharacterExtra SetStretchBltMode SetROP2 SetPolyFillMode GetLayout SetLayout SetGraphicsMode SetMapperFlags SetBkMode ExtSelectClipRgn SelectClipRgn PlayMetaFile OffsetClipRgn LineTo GetClipRgn ExcludeClipRect CopyMetaFileW ScaleWindowExtEx SetWindowOrgEx SetWindowExtEx SetTextColor SetMapMode SaveDC RestoreDC IntersectClipRect GetTextExtentPointW ScaleViewportExtEx DeleteObject

ole32

OleDraw OleRegEnumVerbs OleRegGetMiscStatus CoDisconnectObject CoRegisterMessageFilter SetConvertStg OleDuplicateData WriteFmtUserTypeStg CoTreatAsClass GetRunningObjectTable WriteClassStg IsAccelerator OleTranslateAccelerator OleUninitialize OleInitialize CoFreeUnusedLibraries CoRevokeClassObject CoRegisterClassObject RevokeDragDrop RegisterDragDrop CoLockObjectExternal DoDragDrop OleLoad StgIsStorageFile StgOpenStorage StgCreateDocfile CoGetMalloc OleIsCurrentClipboard OleFlushClipboard OleSetClipboard OleGetClipboard OleRegGetUserType CreateFileMoniker GetClassFile CreateBindCtx OleRun OleQueryCreateFromData OleQueryLinkFromData OleSetMenuDescriptor OleGetIconOfClass OleLockRunning OleIsRunning OleSetContainedObject OleSave OleCreateFromFile OleCreateLinkToFile OleCreateStaticFromData OleCreateLinkFromData OleCreateFromData OleCreate CreateItemMoniker CreateGenericComposite CoCreateInstance CoCreateGuid CoTaskMemFree PropVariantClear CoTaskMemAlloc CoUninitialize CoInitialize CreateStreamOnHGlobal StringFromGUID2 CreateDataCache CreateDataAdviseHolder ReleaseStgMedium OleCreateMenuDescriptor OleDestroyMenuDescriptor CreateOleAdviseHolder OleSaveToStream ReadClassStm StgCreateDocfileOnILockBytes CreateILockBytesOnHGlobal OleLoadFromStream ReadFmtUserTypeStg CoInitializeEx PropVariantCopy CLSIDFromString CLSIDFromProgID CoGetClassObject StgOpenStorageOnILockBytes StringFromCLSID StgIsStorageILockBytes WriteClassStm GetHGlobalFromILockBytes ReadClassStg

oleaut32

SysFreeString SysStringLen VariantClear VariantChangeType SystemTimeToVariantTime VariantTimeToSystemTime VarBstrFromDate OleCreatePropertyFrame OleTranslateColor OleCreateFontIndirect OleCreatePictureIndirect OleLoadPicture LoadTypeLi LoadRegTypeLi RegisterTypeLi VariantInit VariantCopy VarBstrCmp DispCallFunc SafeArrayDestroy SysStringByteLen SafeArrayGetDim SafeArrayGetElemsize SysReAllocStringLen SysAllocStringByteLen SafeArrayAllocDescriptor SafeArrayAllocData SafeArrayCreate SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayRedim SafeArrayGetUBound SafeArrayGetLBound SafeArrayLock SafeArrayUnlock SafeArrayAccessData SafeArrayUnaccessData SafeArrayGetElement SafeArrayPutElement SafeArrayCopy SafeArrayPtrOfIndex VarDateFromStr VarCyFromStr VarBstrFromCy VarBstrFromDec VarDecFromStr SafeArrayCreateVector VarParseNumFromStr SysAllocString SysAllocStringLen

shlwapi

PathFindExtensionW PathFindFileNameW PathRemoveExtensionW PathRemoveFileSpecW PathIsUNCW PathStripToRootW UrlUnescapeW StrFormatKBSizeW

imm32

ImmReleaseContext ImmGetOpenStatus ImmGetContext

uxtheme

DrawThemeParentBackground GetWindowTheme OpenThemeData CloseThemeData DrawThemeBackground GetThemeColor GetCurrentThemeName GetThemeSysColor DrawThemeText GetThemePartSize IsThemeBackgroundPartiallyTransparent IsAppThemed

Name

.text

Size

6.6MB

Virtual Size

6.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

51KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

359KB

Virtual Size

358KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.3MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

130KB

Virtual Size

129KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/zstandard/mshtml.dll

IMPHASH 553af065af7b2fe1efd5ef3893fdefa8
SHA256 ced2a7465fa442d48c77484e4873fcb95099024f798d1f4455757fbcc29140ad
MD5 d607b4fe14007549d3c3bce89a8e3658
SHA1 7eff8b7f305b260ebf79f79ae1646d0a26357d64
SHA512 26ef5780f3f9fadbc9be5be24cdaa8661f07545229afa64d58e2ab19ce72de59a83673f2154e55c20bb0c9f05f9a0d662b3fca15b21467e49feae34b69d9fac9
SSDEEP 393216:2KdiJr/+OMhCubVyothmsz7HG8fNG8MS5dB039Rl:4JpsCP
MD5 SHA1 SHA512 SSDEEP

windows:10 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

1330368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mshtml.pdb

msvcrt

wcspbrk strncpy_s _lock _unlock __dllonexit _onexit ?terminate@@YAXXZ ??1type_info@@UEAA@XZ _XcptFilter _amsg_exit _initterm tanf _statusfp _beginthreadex fwprintf _flushall fclose ??0exception@@QEAA@AEBV0@@Z ??0exception@@QEAA@XZ ??1exception@@UEAA@XZ __CxxFrameHandler3 malloc free realloc strtoul strpbrk bsearch_s modf wcstod wcstok_s towlower _wtoi64 _aligned_free _aligned_malloc _stricmp iswgraph _itoa_s swprintf_s bsearch _finite _wtoi _isnan _ui64tow_s _wcstoui64 _wtof iswalnum iswdigit iswalpha _wcslwr_s _i64tow_s wcscat_s _ultow_s __C_specific_handler qsort wcscpy_s _vsnprintf _wcsupr _wcslwr tolower wcsncpy_s strstr strchr strncmp wcsrchr _wcsupr_s _itow_s abort wcstol wcsncmp _wtol _wcsnicmp memmove_s memcpy_s _errno wcstoul rand_s fflush strnlen wcscspn wcstombs_s towupper iswlower strrchr _strnicmp isalpha isxdigit isdigit wcsncat_s _fpclass _mbsicmp _mbscspn _mbsspn _mbsstr isspace _mbschr _ismbcdigit _mbscmp iswcntrl _ultoa_s swscanf_s _wcsrev wcsspn exit fprintf _fileno _isatty fwrite atof atoi strtol qsort_s rand sin powf memset memmove memcpy wcsstr _ltow _ltow_s _clearfp _controlfp_s iswascii calloc _resetstkoflw _wcsicmp wcsnlen sinf sqrt sqrtf strcmp tan _vsnprintf_s wcschr _vsnwprintf __iob_func iswspace iswpunct _purecall _HUGE _CxxThrowException _setjmp acosf asinf atan2 atan2f ceil ceilf cos cosf floor floorf fmod fmodf memcmp wcscmp

kernel32

HeapAlloc GetProcessHeap HeapFree GetModuleFileNameA DebugBreak GetProcAddress IsDebuggerPresent OutputDebugStringW SetLastError SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer OpenSemaphoreW QueryPerformanceCounter GetProfileIntA GlobalFree GetTickCount PowerSetRequest PowerClearRequest PowerCreateRequest LoadLibraryExW MulDiv GetTickCount64 GetSystemTimeAsFileTime CreateMutexExW CreateSemaphoreExW CreateThreadpoolTimer WideCharToMultiByte GlobalSize GlobalLock GlobalUnlock IsDBCSLeadByteEx MultiByteToWideChar OpenProcess GetCPInfo GetSystemInfo GetSystemDefaultLocaleName GetUserDefaultLocaleName GlobalMemoryStatusEx FormatMessageW CreateThreadpoolWork WaitForThreadpoolWorkCallbacks CloseThreadpoolWork SubmitThreadpoolWork GetFullPathNameW SetFilePointer WriteFile ReadFile GlobalAlloc GetTempPathW GetTempFileNameW CreateFileW GetFileSize DeleteFileW GetSystemTime SystemTimeToFileTime FindFirstFileW FindClose CopyFileW GetFileType WaitForMultipleObjectsEx CreateEventExW Sleep ResolveLocaleName GetLocaleInfoEx GetUserGeoID GetGeoInfoW IsValidLocaleName GetEnvironmentVariableW SetEnvironmentVariableW InitializeCriticalSectionAndSpinCount CreateMutexW GetFileAttributesW InitOnceExecuteOnce CompareStringEx GetSystemTimeAdjustment GetVersionExW TrySubmitThreadpoolCallback InitializeConditionVariable WakeAllConditionVariable SleepConditionVariableCS LoadLibraryW ResumeThread GetUserDefaultLCID GetLocalTime GetACP LocaleNameToLCID LCIDToLocaleName GetUserDefaultUILanguage IsValidCodePage GetExitCodeThread ResetEvent lstrcmpiA lstrcmpA InitOnceInitialize InitializeSListHead InterlockedPopEntrySList InterlockedPushEntrySList QueryDepthSList CompareFileTime TerminateThread GetActiveProcessorCount GetFileTime DeleteFiber SwitchToFiber CreateFiber ConvertThreadToFiber ConvertFiberToThread CompareStringOrdinal SetEndOfFile CreateFileMappingW FlushViewOfFile lstrcmpW GetLocaleInfoW GetDiskFreeSpaceW FileTimeToSystemTime CompareStringW LCMapStringW GetFileSizeEx ExpandEnvironmentStringsW GetSystemDirectoryW GetCurrentThread lstrcmpiW VerSetConditionMask VerifyVersionInfoW SetThreadPreferredUILanguages GetCommandLineW GlobalDeleteAtom GlobalAddAtomW GlobalFindAtomW HeapSetInformation GetStringTypeExA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess SleepConditionVariableSRW WaitForSingleObjectEx WerGetFlags WerSetFlags InitializeCriticalSectionEx ReleaseSemaphore GetLastError ReleaseMutex RaiseException InitializeSRWLock ReleaseSRWLockShared ReleaseSRWLockExclusive AcquireSRWLockShared AcquireSRWLockExclusive FlsSetValue HeapDestroy MapViewOfFile OpenFileMappingW GetCurrentProcessId HeapCreate FlsAlloc InitializeCriticalSection TlsAlloc AddAtomW TlsSetValue TlsGetValue GetModuleFileNameW LocalFree LocalAlloc FindAtomW DeleteAtom UnmapViewOfFile TlsFree FlsFree RaiseFailFastException GetModuleHandleW DeleteCriticalSection GetCurrentThreadId LeaveCriticalSection EnterCriticalSection SetEvent FreeLibrary CreateThread CreateEventW GetModuleHandleExW FreeLibraryAndExitThread CloseHandle WaitForSingleObject GetCurrentProcess ActivateActCtx DeactivateActCtx CreateActCtxW ReleaseActCtx QueueUserWorkItem GlobalFlags FindResourceExA LocalSize GlobalReAlloc WTSGetActiveConsoleSessionId LCMapStringEx ResolveDelayLoadedAPI DelayLoadFailureHook QueryPerformanceFrequency

api-ms-win-downlevel-advapi32-l1-1-0

EventRegister EventActivityIdControl EventWrite EventWriteTransfer RegCreateKeyExW RegSetValueExW DuplicateTokenEx EventWriteEx OpenProcessToken RegGetValueW RegOpenKeyExW RegCloseKey RegOpenKeyExA RegDeleteTreeW RegQueryValueExW RegQueryInfoKeyW RegEnumKeyExW EventUnregister CreateProcessAsUserW OpenThreadToken GetTokenInformation

api-ms-win-downlevel-version-l1-1-0

GetFileVersionInfoExW GetFileVersionInfoSizeExW VerQueryValueW

api-ms-win-downlevel-shlwapi-l1-1-0

StrStrIW StrCmpNIA IsInternetESCEnabled PathCreateFromUrlW PathQuoteSpacesW StrChrNIW StrCmpNICW UrlEscapeW UrlCombineW StrCmpNIW StrCmpICW UrlUnescapeW PathRemoveFileSpecW HashData StrCmpNCW PathGetArgsW StrCmpICA StrStrA PathRemoveBlanksW UrlIsW UrlCreateFromPathW QISearch StrChrW PathStripPathW StrCmpW StrCpyNW StrStrW StrCmpCW StrCmpNW StrToIntExW PathIsFileSpecW ParseURLW PathFileExistsW StrTrimW PathFindExtensionW UrlGetLocationW SHLoadIndirectString StrPBrkW PathIsRelativeW PathGetCharTypeW StrToInt64ExW PathSearchAndQualifyW PathUnquoteSpacesW IsCharSpaceW StrStrIA StrCmpNICA UrlApplySchemeW PathIsURLW StrToIntW GetAcceptLanguagesW StrChrA UrlGetPartW StrCmpCA UrlCanonicalizeW PathFindFileNameW StrCmpIW PathIsUNCW StrCSpnW PathGetDriveNumberW StrDupW

api-ms-win-downlevel-user32-l1-1-0

CharLowerBuffW CharLowerW CharUpperW CharNextW LoadStringW CharLowerA IsCharAlphaNumericW IsCharAlphaW

gdi32

DeleteDC SetWorldTransform SetGraphicsMode CreateDIBSection ExtTextOutW SetTextAlign GetTextColor GetBkColor SetStretchBltMode StretchDIBits SetDIBits GetCurrentObject GetClipRgn ExtSelectClipRgn SetBrushOrgEx CreatePatternBrush CreateBitmap Ellipse Polyline Polygon LineTo MoveToEx PatBlt CreatePen SetDCPenColor ExtCreatePen UnrealizeObject SetBkMode CreateHatchBrush SetDCBrushColor SetROP2 GetFontUnicodeRanges GetGlyphOutlineW GetCharWidthW GetFontData GetOutlineTextMetricsW AddFontMemResourceEx GetTextFaceW RemoveFontMemResourceEx StretchBlt GdiFlush Rectangle CreateSolidBrush GetTextCharsetInfo TranslateCharsetInfo ExtEscape EndDoc StartDocW CreateEnhMetaFileW CloseEnhMetaFile GetEnhMetaFileW EqualRgn ExtCreateRegion GetRegionData OffsetViewportOrgEx RealizePalette SelectPalette GetPaletteEntries DeleteObject SelectObject GetObjectType GetDeviceCaps CreateRectRgn BitBlt GetPixel CreateCompatibleBitmap CreateCompatibleDC CreateRectRgnIndirect GetRandomRgn OffsetRgn GetClipBox SetViewportOrgEx CombineRgn GetRgnBox RestoreDC SaveDC GetViewportOrgEx CreatePolygonRgn EnumFontFamiliesExW EnumFontsW CreateFontIndirectW GetTextCharset SelectClipRgn DeleteMetaFile CreateMetaFileW SetMapMode SetWindowOrgEx SetWindowExtEx CloseMetaFile SetViewportExtEx PlayMetaFile GetWindowOrgEx GetWindowExtEx LPtoDP SetTextColor SetBkColor GetStockObject IntersectClipRect GetTextMetricsW GetTextExtentPoint32W GetObjectW GetDIBits GetNearestPaletteIndex EnumObjects GetEnhMetaFileHeader GetDIBColorTable SetDIBColorTable SetMetaFileBitsEx SetEnhMetaFileBits GetEnhMetaFilePaletteEntries PlayEnhMetaFile DeleteEnhMetaFile AbortDoc StartPage EndPage CreateICW CreateDCW

user32

CheckMenuRadioItem CreatePopupMenu AppendMenuW GetMenuStringW ToUnicodeEx SubtractRect UnionRect MsgWaitForMultipleObjects GetCaretBlinkTime GetComboBoxInfo DrawFocusRect SendMessageA ScrollDC GetLayeredWindowAttributes CreateCaret DestroyCaret SetCaretPos GetLastInputInfo EnumDisplaySettingsW DisplayConfigGetDeviceInfo GetDisplayConfigBufferSizes RegisterClassW GetWindowTextW FindWindowW GetLastActivePopup DrawFrameControl ShowCaret HideCaret GetCaretPos GetKeyboardLayout InsertMenuItemW GetMenuItemInfoW SetWindowsHookExW PostThreadMessageW GetSysColorBrush IsDlgButtonChecked CallWindowProcW RemovePropW GetUpdateRect FindWindowExW IsWindowVisible CopyRect CallNextHookEx QueryDisplayConfig InflateRect GetUpdateRgn InvalidateRgn GetWindowDC LockWindowUpdate DestroyIcon AdjustWindowRectEx BringWindowToTop GetSystemMenu GetWindowLongA SetWindowLongA GetShellWindow GetKeyboardLayoutList OpenClipboard EmptyClipboard CloseClipboard SetClipboardData RegisterClipboardFormatA GetClassInfoExW UnregisterClassW GetDpiForSystem LoadBitmapW TrackPopupMenu RegisterPowerSettingNotification UnregisterPowerSettingNotification SetRect GetKeyboardLayoutNameW DestroyCursor GetIconInfo ChildWindowFromPoint MessageBeep UpdateLayeredWindow GetClassInfoW SetCursorPos SetRectEmpty GetWindowRgn EndDeferWindowPos BeginDeferWindowPos DeferWindowPos InSendMessage SetMenuItemInfoW ShowCursor TrackPopupMenuEx DestroyAcceleratorTable TranslateAcceleratorW AttachThreadInput IsClipboardFormatAvailable GetClipboardFormatNameW GetWindowPlacement GetWindowLongPtrA GetTopWindow RemoveMenu MoveWindow UnhookWindowsHookEx UnregisterClassA GetDlgItem LoadIconW SendDlgItemMessageW LoadImageW GetWindow SetWindowLongPtrW DefWindowProcW PostMessageW GetParent SetActiveWindow GetWindowLongPtrW GetKeyState GetWindowThreadProcessId GetDCEx ReleaseDC RegisterClipboardFormatW RegisterWindowMessageW GetDoubleClickTime IsWindow DestroyWindow GetClientRect FillRect AllowSetForegroundWindow GetClassNameW IsWinEventHookInstalled NotifyWinEvent SetTimer GetDesktopWindow TranslateMessage MessageBoxW DialogBoxParamW SetWindowTextW EndDialog GetFocus ValidateRect SetCursor LoadCursorW SendMessageW KillTimer EnumChildWindows IsIconic GetAncestor GetSystemMetrics GetMessageExtraInfo GetCursorInfo ChildWindowFromPointEx ScreenToClient GetCursorPos WindowFromPoint IsChild MapWindowPoints GetAsyncKeyState GetMenuState InsertMenuW DeleteMenu LoadMenuW GetSubMenu EnableMenuItem DestroyMenu GetCapture ReleaseCapture IsWindowUnicode UpdateWindow EnableWindow SendMessageTimeoutW EnumWindows GetSysColor GetForegroundWindow WinHelpW SetDlgItemTextW CheckDlgButton GetDlgItemTextW InSendMessageEx ShowWindow SetWindowPos SetForegroundWindow SetFocus ClientToScreen SystemParametersInfoW MonitorFromWindow GetActiveWindow GetWindowRect GetMessagePos PtInRect GetKeyboardState MapVirtualKeyExW ToAsciiEx IsRectEmpty IntersectRect LoadAcceleratorsW CopyAcceleratorTableW VkKeyScanW GetMenuItemCount GetMenuItemID CheckMenuItem MonitorFromRect GetMonitorInfoW GetMessageW DispatchMessageW PeekMessageW MsgWaitForMultipleObjectsEx PostQuitMessage MonitorFromPoint GetDC RedrawWindow CreateAcceleratorTableW OffsetRect EqualRect SetWindowRgn SetPropW SetParent CreateWindowExW SetLayeredWindowAttributes SetCapture GetWindowLongW SetWindowLongW IsWindowEnabled GetCursor LoadCursorA GetPropW InvalidateRect ValidateRgn BeginPaint EndPaint WindowFromDC GetMessageTime WaitMessage RegisterClassExW

iertutil

ord32 ord764 ord209 ord690 ord19 ord21 ord775 CreateIUriBuilder ord700 ord18 ord96 ord25 ord681 GetIUriPriv ord820 ord26 CreateUriWithFragment ord174 ord56 ord58 ord793 ord688 ord606 ord139 ord325 ord916 ord656 ord661 ord665 ord651 ord655 ord682 ord667 ord650 ord678 ord660 ord677 ord658 ord662 ord652 ord663 ord654 ord54 ord110 ord151 ord111 ord17 ord44 ord30 ord134 IntlPercentEncodeNormalize ord466 ord597 ord594 ord792 ord177 ord603 ord779 ord781 ord774 ord765 ord138 ord607 ord281 ord282 ord35 ord42 GetPortFromUrlScheme ord210 ord398 ord50 ord82 ord679 ord791 ord796 ord49 CreateUri ord701 ord657 ord600 ord605

ntdll

NtQueryLicenseValue NtCreateFile RtlInitUnicodeString NtQuerySystemInformation RtlDllShutdownInProgress NtClose

rpcrt4

RpcAsyncInitializeHandle Ndr64AsyncClientCall NdrClientCall3 RpcBindingFree RpcBindingCreateW RpcAsyncCancelCall RpcAsyncCompleteCall I_RpcExceptionFilter UuidCreate RpcBindingBind

api-ms-win-core-path-l1-1-0

PathCchAddBackslash PathCchCanonicalize PathCchAppend PathCchCombine

sspicli

GetUserNameExW

api-ms-win-core-quirks-l1-1-0

QuirkIsEnabled

api-ms-win-core-file-l1-1-0

SetFileInformationByHandle FlushFileBuffers GetFileInformationByHandle CreateDirectoryW GetDiskFreeSpaceExW GetFullPathNameA GetFileAttributesExW FileTimeToLocalFileTime SetFilePointerEx GetLongPathNameW

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize InitOnceComplete

api-ms-win-core-sysinfo-l1-1-0

GetSystemWindowsDirectoryW GetLogicalProcessorInformation GetVersionExA

api-ms-win-core-libraryloader-l1-2-0

LoadResource SizeofResource FindResourceExW LockResource LoadLibraryExA

api-ms-win-core-processenvironment-l1-1-0

GetCurrentDirectoryW ExpandEnvironmentStringsA GetStdHandle SearchPathW

api-ms-win-core-file-l2-1-0

MoveFileExW GetFileInformationByHandleEx

api-ms-win-core-synch-l1-1-0

TryAcquireSRWLockExclusive TryEnterCriticalSection OpenEventW

api-ms-win-core-io-l1-1-0

GetOverlappedResult CancelIoEx DeviceIoControl

api-ms-win-core-threadpool-l1-2-0

SetThreadpoolThreadMaximum DisassociateCurrentThreadFromCallback CloseThreadpool CreateThreadpool

api-ms-win-core-handle-l1-1-0

DuplicateHandle

api-ms-win-core-localization-l1-2-0

GetThreadUILanguage GetThreadPreferredUILanguages GetSystemDefaultLCID GetUserPreferredUILanguages GetUserDefaultLangID IsDBCSLeadByte

api-ms-win-core-string-l1-1-0

GetStringTypeW

api-ms-win-core-memory-l1-1-0

VirtualAlloc VirtualQuery VirtualProtect VirtualFree

api-ms-win-core-processenvironment-l1-2-0

SearchPathA

api-ms-win-core-errorhandling-l1-1-0

SetErrorMode

api-ms-win-core-com-l1-1-0

IIDFromString ProgIDFromCLSID CoGetStandardMarshal

api-ms-win-core-memory-l1-1-1

ResetWriteWatch VirtualUnlock GetWriteWatch

api-ms-win-core-string-l2-1-0

IsCharUpperW IsCharLowerW CharPrevW

api-ms-win-core-processthreads-l1-1-0

SuspendThread SwitchToThread GetProcessTimes OpenThread ProcessIdToSessionId SetThreadPriority GetProcessIdOfThread GetProcessId

api-ms-win-core-heap-l1-1-0

HeapUnlock HeapSize HeapLock HeapReAlloc

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects

api-ms-win-core-sysinfo-l1-2-0

GetNativeSystemInfo GetProductInfo

api-ms-win-core-datetime-l1-1-0

GetTimeFormatW

api-ms-win-core-heap-l2-1-0

LocalReAlloc

api-ms-win-power-base-l1-1-0

CallNtPowerInformation

api-ms-win-core-realtime-l1-1-0

QueryProcessCycleTime QueryThreadCycleTime

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList

api-ms-win-core-libraryloader-l1-2-1

FindResourceW

api-ms-win-core-datetime-l1-1-2

GetDurationFormatEx

api-ms-win-core-registry-l1-1-0

RegEnumValueW RegDeleteValueW

api-ms-win-core-delayload-l1-1-1

ResolveDelayLoadsFromDll

winhttp

WinHttpGetIEProxyConfigForCurrentUser

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-processthreads-l1-1-1

GetThreadContext

api-ms-win-core-console-l2-1-0

GetConsoleScreenBufferInfo SetConsoleTextAttribute

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace

kernelbase

EnumUILanguagesW lstrlenW lstrlenA StrToIntA OpenGlobalizationUserSettingsKey GetSystemDefaultUILanguage GetNumberFormatW

api-ms-win-downlevel-shell32-l1-1-0

CommandLineToArgvW

Name

.text

Size

15.8MB

Virtual Size

15.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

179KB

Virtual Size

267KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

908KB

Virtual Size

907KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

538KB

Virtual Size

538KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1.zip

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/AuthFWSnapin.dll

mscoree

dotnet

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/BingMaps.dll

msvcp_win

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-string-l1-1-0

mapconfiguration

api-ms-win-core-psm-app-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-synch-l1-2-0

api-ms-win-core-com-l1-1-1

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-security-base-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-path-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-file-l2-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-stateseparation-helpers-l1-1-0

api-ms-win-downlevel-shlwapi-l2-1-0

d2d1

d3d11

dwrite

dxgi

api-ms-win-shcore-stream-winrt-l1-1-0

ztrace_maps

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

moshostclient

generic

FreeCA_1.0.0RC2-conda-Windows-x86_64-installer-1/Chakra.dll

msvcrt

api-ms-win-core-atoms-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-shlwapi-obsolete-l1-1-0