JaffaCakes118_f21fc236f99382ba56941352a456882e65c4d99bcb9ce0094a0981920e9dba09
- SHA256 f21fc236f99382ba56941352a456882e65c4d99bcb9ce0094a0981920e9dba09
Password
infected
Overview
overview
10Static
static
7Untrimmed.exe
windows7-x64
10Untrimmed.exe
windows10-2004-x64
7$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3Devastatin...er.dll
windows7-x64
1Devastatin...er.dll
windows10-2004-x64
1Laursens/S...re.dll
windows7-x64
1Laursens/S...re.dll
windows10-2004-x64
1Laursens/S...er.dll
windows7-x64
1Laursens/S...er.dll
windows10-2004-x64
1Prostatism...46.dll
windows7-x64
1Prostatism...46.dll
windows10-2004-x64
1Prostatism...-6.dll
windows7-x64
1Prostatism...-6.dll
windows10-2004-x64
1Puntlatsh/...ff.dll
windows7-x64
3Puntlatsh/...ff.dll
windows10-2004-x64
3Symbranchi...10.dll
windows7-x64
1Symbranchi...10.dll
windows10-2004-x64
1Udspecific...rd.dll
windows7-x64
3Udspecific...rd.dll
windows10-2004-x64
3Udspecific...LV.chm
windows7-x64
1Udspecific...LV.chm
windows10-2004-x64
1Udspecific...on.pdf
windows7-x64
3Udspecific...on.pdf
windows10-2004-x64
3Behavioral task
behavioral1
Sample
Untrimmed.exe
Resource
win7-20240729-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Untrimmed.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
Devastatingly143/Begyndelsesordene/vmrawdskver.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Devastatingly143/Begyndelsesordene/vmrawdskver.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Laursens/Synstetiskes/Laquais/Ttsiddende/ServiceCore.dll
Resource
win7-20240729-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Laursens/Synstetiskes/Laquais/Ttsiddende/ServiceCore.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
Laursens/Synstetiskes/Laquais/Ttsiddende/System.Xml.ReaderWriter.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Laursens/Synstetiskes/Laquais/Ttsiddende/System.Xml.ReaderWriter.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Prostatism/Mellemfristet/Aprioriskes/lang-5146.dll
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Prostatism/Mellemfristet/Aprioriskes/lang-5146.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Prostatism/Mellemfristet/Aprioriskes/libfreetype-6.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Prostatism/Mellemfristet/Aprioriskes/libfreetype-6.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Puntlatsh/Chromophobic30/APM_Aiff.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
Puntlatsh/Chromophobic30/APM_Aiff.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
Symbranchia/libgmp-10.dll
Resource
win7-20240708-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
Symbranchia/libgmp-10.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
Udspecificerendes/Kommunekemis/demasculinisation/Bluetooth Suite help_LV.chm
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral22
Sample
Udspecificerendes/Kommunekemis/demasculinisation/Bluetooth Suite help_LV.chm
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral23
Sample
Udspecificerendes/Kommunekemis/demasculinisation/How-To CFF Extension.pdf
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral24
Sample
Udspecificerendes/Kommunekemis/demasculinisation/How-To CFF Extension.pdf
Resource
win10v2004-20241007-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target JaffaCakes118_f21fc236f99382ba56941352a456882e65c4d99bcb9ce0094a0981920e9dba09
- Size 1.4MB
- Sample241227-cc4m1syner
- SHA256 f21fc236f99382ba56941352a456882e65c4d99bcb9ce0094a0981920e9dba09
- MD5 38d95a020f777979c1939e0881be2115
- SHA1 29b9dcd417dff7ce4693fa60c13bb8778db89f70
- SHA512 f4df4c8608abf0fa1c7d293a1d2ea6086c432cb17b18ad5fc45c2045dc7bb9f49677b49cd88e60a58a10a2e3e5d7d18427458058fe4b758c88654d2ff22ebf38
- SSDEEP 24576:9KHFVDf5/jH9paD8lqAvd/XnHuUrcEj+qx/blRQXBqbPdh0ZWhdbUkT0b4z4u1O:UHFVDfwxa/XHuqcm94AOWhdbUkT0btmO
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- ACProtect 1.3x - 1.4x DLL software 1 IoCs
Detects file using ACProtect software.
resource yara_rule static1/unpack003/Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll acprotect - Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack003/$PLUGINSDIR/System.dll unpack003/Devastatingly143/Begyndelsesordene/vmrawdskver.dll unpack003/Prostatism/Mellemfristet/Aprioriskes/libfreetype-6.dll unpack003/Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll
File Explorer
-
JaffaCakes118_f21fc236f99382ba56941352a456882e65c4d99bcb9ce0094a0981920e9dba09.zip 1.4MB
-
72c35df79a994d9623c4cfc717808f39a663c7c9c754488cab6123480f68643d.zip 1.4MB
-
Untrimmed.exe.exe 1.5MB
-
$PLUGINSDIR/System.dll.dll 11KB
-
Devastatingly143/Begyndelsesordene/network-wired-acquiring-symbolic.svg1KB
-
Devastatingly143/Begyndelsesordene/start-here-symbolic.symbolic.png.png 365B
-
Devastatingly143/Begyndelsesordene/trophy-gold.png.png 835B
-
Devastatingly143/Begyndelsesordene/view-pin-symbolic.svg.xml 719B
-
Devastatingly143/Begyndelsesordene/vmrawdskver.dll.dll 2KB
-
Laursens/Synstetiskes/Laquais/Ttsiddende/ServiceCore.dll.dll 568KB
-
Laursens/Synstetiskes/Laquais/Ttsiddende/System.Xml.ReaderWriter.dll.dll 21KB
-
Laursens/Synstetiskes/Laquais/Ttsiddende/battery-caution-symbolic.symbolic.png.png 207B
-
Laursens/Synstetiskes/Laquais/Ttsiddende/dialog-password-symbolic.symbolic.png.png 237B
-
Laursens/Synstetiskes/Laquais/Ttsiddende/emblem-default.png.png 316B
-
Prostatism/Mellemfristet/Aprioriskes/format-justify-fill-symbolic.svg.xml 314B
-
Prostatism/Mellemfristet/Aprioriskes/help-browser.png.png 821B
-
Prostatism/Mellemfristet/Aprioriskes/lang-5146.dll.dll 98KB
-
Prostatism/Mellemfristet/Aprioriskes/libfreetype-6.dll.dll 722KB
-
Puntlatsh/Chromophobic30/APM_Aiff.dll.dll 151KB
-
Puntlatsh/Chromophobic30/Corbin.Und18KB
-
Puntlatsh/Chromophobic30/Siddebadets.Eng109KB
-
Symbranchia/libgmp-10.dll.dll 619KB
-
Symbranchia/microphone-hardware-disabled-symbolic.symbolic.png.png 223B
-
Symbranchia/network-idle-symbolic.svg722B
-
Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll.dll 22KB
-
Udspecificerendes/Kommunekemis/demasculinisation/Bluetooth Suite help_LV.chm.chm 45KB
-
Udspecificerendes/Kommunekemis/demasculinisation/How-To CFF Extension.pdf.pdf 267KB
72c35df79a994d9623c4cfc717808f39a663c7c9c754488cab6123480f68643d
- SHA256 72c35df79a994d9623c4cfc717808f39a663c7c9c754488cab6123480f68643d
- MD5 ff9abb81e51f1fb2c9956b48c08eca78
- SHA1 91d155fef4eeecccf400f903784348e2356a6157
- SHA512 51807e8bb4bbd1d1619ca5543d95bc09880b1aeadce7ccba3800cc308025c3670543eea792935d179b6b0bedbd942ec05dec74462688cfc904cc7a81d9e87e07
- SSDEEP 24576:C+vtQtcoa+yOTCWLnHYDMl/vPsWSTuSfurCfuvPrA37fckjsqmOsnEKTJWMF3zBs:C4cLyCjLnHzZcuQur9PrCnjsq0tx1s
- MD5 SHA1 SHA512 SSDEEP
Untrimmed.exe
- IMPHASH 7ed0d71376e55d58ab36dc7d3ffda898
- SHA256 723d80c135349493233609d246043e692e87cf1a9976a06a58837fcf4d4eba04
- MD5 32f2cb3180077e9886042bd21a2892fc
- SHA1 c237fbdf4adde0417aa34f1938436a027b72f2f6
- SHA512 673c4c86d519d021c6cf027d64af4df5977355e4d74041a1d80ff1862b6fa7b378f012af1a926bb7cc166811eee1879cbb678096d6108ac43ace2ebb2da14455
- SSDEEP 49152:IGIyoUTjnn7HO8mcLr4ZluTjou7sWgB33X:I7yogOcsZefqBnX
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
7a:0e:0b:68:73:f6:da:56:cf:93:ec:a9:72:34:0a:94:db:88:30:2e:2a:47:b4:05:e4:6d:b8:16:77:52:88:86
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
OU=Honeybuns Topman Hotshots\ ,O=Kursisten,L=Périgny,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1a636f7270757363756c6f75734046696c65746b6e6976652e4d65
Chains
Sep 29, 2022
Subject
OU=Honeybuns Topman Hotshots\ ,O=Kursisten,L=Périgny,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1a636f7270757363756c6f75734046696c65746b6e6976652e4d65
Serial Number
18:21:4f:ce:f7:4c:d2:cf
Issuer
OU=Honeybuns Topman Hotshots\ ,O=Kursisten,L=Périgny,ST=Nouvelle-Aquitaine,C=FR,1.2.840.113549.1.9.1=#0c1a636f7270757363756c6f75734046696c65746b6e6976652e4d65
Timespan
Aug 27, 2022 - Aug 26, 2025
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
12841
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
CompareFileTime
SearchPathW
SetFileTime
CloseHandle
GetShortPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
GetFullPathNameW
CreateDirectoryW
Sleep
GetTickCount
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
SetEnvironmentVariableW
GetWindowsDirectoryW
GetTempPathW
SetFileAttributesW
ExpandEnvironmentStringsW
LoadLibraryW
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
CreateProcessW
RemoveDirectoryW
lstrcmpiA
CreateFileW
GetTempFileNameW
lstrcpyA
lstrcpyW
lstrcatW
GetSystemDirectoryW
GetVersion
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
lstrcmpiW
lstrcmpW
WaitForSingleObject
GlobalFree
GlobalAlloc
LoadLibraryExW
GetExitCodeProcess
FreeLibrary
WritePrivateProfileStringW
SetErrorMode
GetCommandLineW
GetPrivateProfileStringW
FindFirstFileW
FindNextFileW
DeleteFileW
SetFilePointer
ReadFile
FindClose
MulDiv
MultiByteToWideChar
WriteFile
lstrlenA
WideCharToMultiByte
user32
EndDialog
ScreenToClient
GetWindowRect
RegisterClassW
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongW
SetCursor
LoadCursorW
CheckDlgButton
GetMessagePos
LoadBitmapW
CallWindowProcW
IsWindowVisible
CloseClipboard
SetClipboardData
wsprintfW
CreateWindowExW
SystemParametersInfoW
AppendMenuW
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharPrevW
CharNextA
wsprintfA
DispatchMessageW
PeekMessageW
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
GetDC
SetWindowLongW
LoadImageW
SendMessageTimeoutW
FindWindowExW
EmptyClipboard
OpenClipboard
TrackPopupMenu
EndPaint
ShowWindow
GetDlgItem
IsWindow
SetForegroundWindow
gdi32
SelectObject
SetBkMode
CreateFontIndirectW
SetTextColor
DeleteObject
GetDeviceCaps
CreateBrushIndirect
SetBkColor
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
advapi32
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumKeyW
comctl32
ImageList_Create
ImageList_AddMasked
ImageList_Destroy
ord17
ole32
CoCreateInstance
CoTaskMemFree
OleInitialize
OleUninitialize
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
Name
.text
Size
24KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.ndata
Size
Virtual Size
160KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
117KB
Virtual Size
117KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=2, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=166, id=1, productName=Unmarked objects,
count=17, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=10, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
$PLUGINSDIR/System.dll
- IMPHASH fc0224e99e736751432961db63a41b76
- SHA256 5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3
- MD5 7399323923e3946fe9140132ac388132
- SHA1 728257d06c452449b1241769b459f091aabcffc5
- SHA512 d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1
- SSDEEP 192:eF2HS5ih/7i00dWz9T7PH6lOFcQMI5+Vw+bPFomi7dJWsP:rSUmlw9T7DmnI5+N273FP
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
10134
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
835B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
578B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=14, version=7299,
count=20, id=1, productName=Unmarked objects,
count=7, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=4, id=48, version=9044,
count=1, id=42, version=8803,
count=1, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,
Devastatingly143/Begyndelsesordene/network-wired-acquiring-symbolic.svg
- SHA256 a7e867efbd9f4931f8103fb2f4f20d3d70c2687d27fa4b91109bb1e3820a5759
- MD5 d206626c98077656d53b15c6cd6c6c02
- SHA1 30965721ae590e9b799c50685144508303d582e4
- SHA512 899f6b75aadb1847d8f1914a8f1fd6678bd801b6eceaf982e2e107f9362970fea271035d3a2a72be931449a4a1a8a751c301bb0f630d095249778bfbebb5e5b6
- MD5 SHA1 SHA512
Devastatingly143/Begyndelsesordene/start-here-symbolic.symbolic.png
- SHA256 c41bf0ddfcf750d4428f471a07afd0a65354fb513194e13a65b2da30dde62381
- MD5 36ec61b4ddd43d624bc27bebc8015bbc
- SHA1 2a00c6a6e9bc92b721ccf25a384e7d1447be6da3
- SHA512 254993cd171a31b29474870da80e4cdf9aed79b80ab8be074bc909541aa8595c9ebd630d9928ec6d250a939cd4f1219cfdcdab6e5f77110e8dc7e2d56dc25624
- MD5 SHA1 SHA512
Devastatingly143/Begyndelsesordene/trophy-gold.png
- SHA256 5e316e48f3db0ec805a7dcf540454d827a6d70ddd005711901eb567e342bab0b
- MD5 62dd5056d0bc54c00926703d3304fc66
- SHA1 7169ed773a4f79239b57d457f3321a3b74ad803e
- SHA512 f133449def92c7b609359560f3d3a9708121ffb2551ce4865d88c7a9f2fed5464cd16cf1d8f19a04f6ee5aa2c4ffc9e6814e8c6685839ea86ce10ae2f5d649cd
- MD5 SHA1 SHA512
Devastatingly143/Begyndelsesordene/view-pin-symbolic.svg
- SHA256 48b8a297729f160f3cd9e01ffcad9fdc66a26076b1e93a734a729d42f40d5de6
- MD5 4f371d3fe4c997469e9593b10fae76ff
- SHA1 6135f5588ce0e99c452d8b42ea65278cfdf99b14
- SHA512 f05061d0d57b29fb5d1cd5b63a6a48a1bdb11e24d3617bd2ed455cfe8ecf40153232d8cb14d35cc2691230b565fe51c1645c0e542757cb3103c25ce174455d57
- MD5 SHA1 SHA512
Devastatingly143/Begyndelsesordene/vmrawdskver.dll
- SHA256 85664c35cde1a9d284d7d306ba00ae1ff3925e3289e12c39c29633f71e7c8706
- MD5 9d4fb7d49748486615e131f35bd2e99c
- SHA1 974c1b6242ef99ba0a66740d0d427dc41e8727c0
- SHA512 ce1e60f691a4d086b5b7c3762475f2a803dfa6d453d5e3d767870f030c9bacc9510c16d2f2e2b74bf2aca9ddf7450e4000fe5fd539ee35ef5dd57d7cf3cd96d1
- MD5 SHA1 SHA512
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
808B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
Laursens/Synstetiskes/Laquais/Ttsiddende/ServiceCore.dll
- IMPHASH be6e213fa7580cb0840f3582136e536d
- SHA256 02a32317a09b57359c06dc3beae500bdbd6b41c133d24aa475d0c9ef0cc230e8
- MD5 6c7b373a8a2da882fb2061860e65940f
- SHA1 9fff5ef33e9d49fac7c31b07b7c14e9136dff5a1
- SHA512 af4c38b6aabe76b65715145326936cc24be9a0b5bd2f16bfc479080c40291d05f5b944c1e5b30b492c5948d1d0785b9f5c7c0962a22d1c650a6bdd51d724a13e
- SSDEEP 12288:MzM949O48v4oAHlP6EmnVqIOPD2jNTJb3n2WggeJisBqrRXSVeyRbVCxseVNDdiL:MzM9aO48v4oAHlP6EmjOPDIxJb3Op
- MD5 SHA1 SHA512 SSDEEP
Digest
3e:e7:b8:78:d1:72:6c:0d:5c:f4:1f:23:9f:f3:7c:84:cd:a6:38:66:a7:32:67:5f:8f:89:00:3c:7d:bf:0b:3a
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Aug 26, 2021
SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Serial Number
01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Sep 19, 2018 - Jan 28, 2028
Subject
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Serial Number
48:1b:6a:07:a9:42:4c:1e:aa:fe:f3:cd:f1:0f
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageOCSPSigning
Timespan
Jun 15, 2016 - Jun 15, 2024
Subject
SERIALNUMBER=23638777,CN=ASUSTEK COMPUTER INCORPORATION,O=ASUSTEK COMPUTER INCORPORATION,STREET=4F\, NO. 150\, LI-TE RD.\, PEI TOU,L=TAIPEI,ST=TAIPEI,C=TW,1.3.6.1.4.1.311.60.2.1.3=#13025457,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
32:b5:c7:f8:c1:8a:7a:2b:fb:b5:27:46
Issuer
CN=GlobalSign Extended Validation CodeSigning CA - SHA256 - G3,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2019 - Jun 4, 2022
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
368996
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\SourceCode\GC3.Service\production_V4.2\GamingCenter.Service\ServiceSDK\Release\ServiceCore.pdb
kernel32
CopyFileW
FindNextFileW
FindPackagesByPackageFamily
lstrcmpW
FindClose
OpenEventW
DisconnectNamedPipe
CreateNamedPipeW
ConnectNamedPipe
GetOverlappedResult
WriteFile
GetWindowsDirectoryW
OutputDebugStringA
GetEnvironmentVariableW
LoadLibraryW
FreeLibrary
GetFirmwareEnvironmentVariableW
FlushViewOfFile
TerminateThread
GetThreadId
MapViewOfFile
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
Sleep
CreateThread
GetModuleFileNameW
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileStringW
GetSystemDirectoryW
GetExitCodeProcess
CreateFileMappingW
VerifyVersionInfoW
CreateProcessW
VerSetConditionMask
WTSGetActiveConsoleSessionId
LocalFree
GetProcAddress
Process32FirstW
Process32NextW
FormatMessageW
CreateToolhelp32Snapshot
OpenProcess
LocalAlloc
InitializeCriticalSectionEx
PeekNamedPipe
CreatePipe
TerminateProcess
GetCurrentProcess
SetLastError
CreateDirectoryW
ResetEvent
WaitForMultipleObjects
GetLastError
CreateEventW
WaitForSingleObject
SetEvent
DeleteCriticalSection
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SystemTimeToFileTime
FileTimeToSystemTime
lstrcmpA
FileTimeToLocalFileTime
GetCurrentThreadId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
ReadFile
GetFileSize
CreateFileW
FindFirstFileW
GetProcessHeap
HeapAlloc
OutputDebugStringW
FlushFileBuffers
HeapFree
user32
SetWindowPos
GetShellWindow
GetWindowThreadProcessId
FindWindowW
ShowWindow
IsIconic
advapi32
SetSecurityDescriptorDacl
CloseEventLog
NotifyChangeEventLog
ReadEventLogW
GetOldestEventLogRecord
GetNumberOfEventLogRecords
GetTokenInformation
RegQueryValueExW
AddAccessAllowedAce
DuplicateTokenEx
GetLengthSid
CreateProcessAsUserW
RegOpenKeyExW
InitializeAcl
RegNotifyChangeKeyValue
CryptDecrypt
CryptEncrypt
CryptSetKeyParam
CryptImportKey
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
RegDeleteTreeW
RegDeleteKeyExW
LookupPrivilegeValueW
OpenEventLogW
AdjustTokenPrivileges
RegCloseKey
RegQueryInfoKeyW
AllocateAndInitializeSid
SetEntriesInAclW
RegCreateKeyExW
ConvertStringSidToSidW
CreateProcessWithTokenW
RegEnumKeyExW
RegSetValueExW
OpenProcessToken
FreeSid
InitializeSecurityDescriptor
shell32
SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ole32
StringFromCLSID
CoUninitialize
CoCreateGuid
CoTaskMemFree
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CLSIDFromString
oleaut32
VariantClear
SysFreeString
VariantInit
SysStringLen
VarBstrCmp
SysAllocStringByteLen
SysStringByteLen
SysAllocString
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Query_perf_frequency
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
_Query_perf_counter
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Throw_C_error@std@@YAXH@Z
_Thrd_start
_Thrd_join
_Mtx_init
_Mtx_lock
_Mtx_unlock
_Cnd_init
_Cnd_wait
_Cnd_signal
_Cnd_destroy
_Mtx_destroy
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_id
?_Xinvalid_argument@std@@YAXPEBD@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?uncaught_exception@std@@YA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
_Cnd_do_broadcast_at_thread_exit
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
bcrypt
BCryptOpenAlgorithmProvider
BCryptDestroyKey
BCryptExportKey
BCryptDecrypt
BCryptEncrypt
BCryptFinalizeKeyPair
BCryptGetProperty
BCryptGenRandom
BCryptGenerateKeyPair
BCryptCloseAlgorithmProvider
BCryptImportKey
BCryptImportKeyPair
BCryptGenerateSymmetricKey
BCryptSetProperty
shlwapi
PathFileExistsW
PathAppendW
PathIsDirectoryW
wevtapi
EvtQuery
EvtExportLog
EvtFormatMessage
EvtNext
EvtOpenPublisherMetadata
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsW
WTSQueryUserToken
WTSQuerySessionInformationW
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
api-ms-win-core-path-l1-1-0
PathCchRemoveFileSpec
PathAllocCombine
PathCchAppend
hid
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes
HidD_GetFeature
HidD_FreePreparsedData
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
winhttp
WinHttpSetTimeouts
WinHttpOpenRequest
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
WinHttpConnect
WinHttpCloseHandle
WinHttpReadData
crypt32
CryptDecodeObject
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertFindCertificateInStore
CertCloseStore
CryptMsgGetParam
CryptMsgClose
wintrust
WinVerifyTrust
vcruntime140
__std_exception_destroy
__std_terminate
__std_exception_copy
wcsrchr
_purecall
strchr
__std_type_info_compare
_CxxThrowException
memcmp
memcpy
memset
strstr
__C_specific_handler
__std_type_info_destroy_list
memchr
__CxxFrameHandler3
__RTDynamicCast
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfwprintf
__stdio_common_vswprintf_s
__acrt_iob_func
setvbuf
__stdio_common_vsscanf
__stdio_common_vsprintf
fopen_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
fgetc
fgetwc
fputwc
ungetc
ungetwc
fseek
__stdio_common_vsprintf_s
fflush
ferror
fsetpos
_fseeki64
fgetpos
fwrite
fread
__stdio_common_vsnwprintf_s
ftell
fclose
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-runtime-l1-1-0
signal
_crt_atexit
_invalid_parameter_noinfo
_configure_narrow_argv
_seh_filter_dll
_errno
_initialize_narrow_environment
_initterm_e
_initialize_onexit_table
_initterm
_register_onexit_function
_beginthreadex
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_cexit
terminate
api-ms-win-crt-string-l1-1-0
isalnum
tolower
_wcsicmp
strncpy_s
isalpha
towlower
strncmp
wcsnlen
strnlen
isspace
isdigit
wcscpy_s
_stricmp
wcstok_s
wcsncpy_s
_wcsnicmp
wcscat_s
api-ms-win-crt-time-l1-1-0
_localtime64_s
wcsftime
_time64
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
_callnewh
api-ms-win-crt-convert-l1-1-0
_itow_s
wcstol
_wtoi
mbstowcs_s
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
QueryLibrary
Name
.text
Size
381KB
Virtual Size
381KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
147KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=260, version=26706,
count=3, id=259, version=26706,
count=30, id=261, version=26706,
count=4, id=257, version=26706,
count=4, id=261, version=27045,
count=4, id=262, version=25203,
count=33, id=257, version=25203,
count=482, id=1, productName=Unmarked objects,
count=28, id=265, version=27045,
count=1, id=256, version=27045,
count=1, id=255, version=27045,
count=2, id=151,
count=1, id=258, version=27045,
Laursens/Synstetiskes/Laquais/Ttsiddende/System.Xml.ReaderWriter.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 3a5b515bcadbb8d24af113c9ae6ad5c6a8e332175a04f2b3535a479d2ec07636
- MD5 e75480e09a1c76d8a0cb6f980e31c3d5
- SHA1 55054399fbcdc5fd8eaacfd48e95f17bb2fdd5ec
- SHA512 abb6b73a0d0a82b8c176c9f7a55ec293635f3fcfc1c3d3c388c121fc7c38a27614f1afa9a34b7617595aeadd4408a7c992ab78c2f5d9443875e99cd787c1cdee
- SSDEEP 384:M/125qkxK67ex4FCvu22WBAWqlX/uPHRN79SWF//dJR9ztw:M9KLg90lvM9SWF//dj9zC
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
83:d4:16:a6:5a:d6:da:53:01:65:e4:a8:f0:b5:11:fa:36:db:2a:4e:12:5d:a6:02:79:03:e2:5e:21:e0:13:81
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 12, 2024
Subject
CN=.NET,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:13:8c:0c:1c:31:35:bc:d2:5f:00:00:00:00:02:13
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 11, 2021 - Feb 10, 2022
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
17054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\artifacts\obj\System.Xml.ReaderWriter\net6.0-Release\System.Xml.ReaderWriter.pdb
mscoree
_CorDllMain
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Laursens/Synstetiskes/Laquais/Ttsiddende/battery-caution-symbolic.symbolic.png
- SHA256 5fd17a236af8b520db2e34e44e71c3634cb8221e0a27617e522ecb8d0ff8eff8
- MD5 ebbcb008023c6c1b4efab0774a4bb19e
- SHA1 7c657c976d7d728e9d6d8f6a603f50b42d86c321
- SHA512 dcedcf09a83f2350d42001cfd009b395f8ca7b9b33f4b7cc3c1c787edce9749030eb54ac8d90645f92c141c8d882a4f0ab9a32f274320de260cd3df37ced71ce
- MD5 SHA1 SHA512
Laursens/Synstetiskes/Laquais/Ttsiddende/dialog-password-symbolic.symbolic.png
- SHA256 421022d575aa9c374809c0dac0a28ca666680ef6ad28a9d9a4e7be1704a8ff77
- MD5 f7c7e9ebe966ff48ac79bbffc21cbff3
- SHA1 3dae893694506afe62b346a9c73ab2da11994f6c
- SHA512 2ac2080a9d40a3dff2f8a9a7cd3cc26b3ef3d32933277de33d82e405613b2c2af494720610f6aaba26d186518be8657ab8dbe2011e4478f9f57eefb489f7b5bb
- MD5 SHA1 SHA512
Laursens/Synstetiskes/Laquais/Ttsiddende/emblem-default.png
- SHA256 1a14aac6bf9c76405c72542946ad57c581c5c70ffded97d0273b8e80a830bae8
- MD5 7cb12313e659c6a086e695542bda206a
- SHA1 3c3214c25fabbff565e8172d8bee0164b0a88e4c
- SHA512 d2d7a8d22a0ba10f652eb37f0574437280cc12f615c00281e07d0f796f96ac07f3a780904dddead064dab6e194639f803a49fe47e32a1666b7cdb0b3394595e4
- MD5 SHA1 SHA512
Prostatism/Mellemfristet/Aprioriskes/format-justify-fill-symbolic.svg
- SHA256 dd3f1c117437a6f5124905de7212a1a320e76f9b33d8411bf70dbdbefa8e9bad
- MD5 53c42fca9e64a93b4c572d5ba805fd4d
- SHA1 1659423ca8f981cfd2eeb6add25c03ca5b37ffbd
- SHA512 2852eb784e5090f298259f04516c1413734ecf20ea7d143864fe0312a6410e83fff49e16dce3cf7f61177238b4decebd540fd839e3721965a5141856908392dd
- MD5 SHA1 SHA512
Prostatism/Mellemfristet/Aprioriskes/help-browser.png
- SHA256 f0dd4686284e2d378ac9edb260d5aefe8c7b5185abd3a135fe9f10c2e811469c
- MD5 906c3ffbffdd09b952d59482f850d84f
- SHA1 904f72ef3c541956b1baad84b11184bb14d7c52b
- SHA512 9b5c2a5cd671a57082deccc8f37ab9a220165b2dcd2aee4161071ae2fa9dc8cbeb4b6e4f3b3982622ead3914238d522a1d6b92caa1d2fc0649c60f43bff46de1
- MD5 SHA1 SHA512
Prostatism/Mellemfristet/Aprioriskes/lang-5146.dll
- SHA256 a0a0e7265c5713dfa57194b9f9bc9369aa71d0438233bd80302190e27c66febb
- MD5 f1a9129eeb989f1521b8beba83228c04
- SHA1 dd0eb3f87447bb0777ab97be36884fe8595fee4f
- SHA512 a0f0a16af06f72a1fddfda8699835bd78640edaf10f648fd01c9d4b7493f365d0b13f3a566e8dc5e30fc160fa6e6915e49707e8194e2d5d4fd8c3114a3010faa
- SSDEEP 1536:zlcHr3+1BoKqhBAOZ67CB2viwgbevXKrmFqY2MXUfu:uWBNsAOkC+TgbevXKrmFqY2+
- MD5 SHA1 SHA512 SSDEEP
Digest
6f:01:ba:5c:73:7a:6a:91:82:fa:04:f6:3a:3e:c6:f3:1b:03:91:8b:45:a0:0b:24:c8:2b:5a:5c:21:66:d2:79
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Piriform Software Ltd,OU=RE 901,O=Piriform Software Ltd,L=London,C=GB
Chains
Mar 12, 2020
CN=Piriform Software Ltd,OU=RE 901,O=Piriform Software Ltd,L=London,C=GB
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Piriform Software Ltd,OU=RE 901,O=Piriform Software Ltd,L=London,C=GB
Serial Number
02:fa:99:4d:66:0d:e6:59:ee:90:37:ec:b4:37:d7:66
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 14, 2019 - Oct 18, 2022
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
61:1c:b2:8a:00:00:00:00:00:26
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 15, 2011 - Apr 15, 2021
Subject
CN=TIMESTAMP-SHA256-2019-10-15,O=DigiCert\, Inc.,C=US
Serial Number
04:cd:3f:85:68:ae:76:c6:1b:b0:fe:71:60:cc:a7:6d
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 1, 2019 - Oct 17, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=24245,
count=1, id=258, version=24245,
Prostatism/Mellemfristet/Aprioriskes/libfreetype-6.dll
- IMPHASH 1146bb668972f1fbf26bf7714c615b95
- SHA256 161e0693ad4fe7e9eb411411ad72697fcb7bb18bf0bcae2d884a52875b0cd2f8
- MD5 0f0a450e617f355fca577ded02e52ede
- SHA1 aeb92363e754d5ee6db1e634c04eb1efe6e3276b
- SHA512 26a05a5b794c56fc2c4b794ce38598f78124b89ae8c815bb0f487ead639b7039fffc5067d2a1e22455fde69be8e70d97663e9c9b1d7a2cd3753f92303717bda2
- SSDEEP 12288:m5h4fIuyHZyxAW+RHDfi7qmkLpRxNRcldaxSqKfEWmjJthNw:m5Gy+mHL6qXLPv0dax3vZjJthNw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
libbz2-1
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
kernel32
CloseHandle
CreateFileA
CreateFileMappingA
DeleteCriticalSection
EnterCriticalSection
GetFileSizeEx
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
ReadFile
Sleep
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_setjmp
_unlock
abort
calloc
fputc
free
fwrite
getenv
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
qsort
realloc
strcat
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
strtol
vfprintf
wcslen
libbrotlidec
BrotliDecoderDecompress
libharfbuzz-0
hb_buffer_add_utf8
hb_buffer_clear_contents
hb_buffer_create
hb_buffer_destroy
hb_buffer_get_glyph_infos
hb_buffer_get_glyph_positions
hb_buffer_get_length
hb_buffer_guess_segment_properties
hb_font_destroy
hb_font_get_face
hb_font_set_scale
hb_ft_font_create
hb_ot_layout_collect_lookups
hb_ot_layout_lookup_collect_glyphs
hb_ot_layout_lookup_would_substitute
hb_ot_tags_from_script_and_language
hb_set_create
hb_set_destroy
hb_set_is_empty
hb_set_next
hb_set_subtract
hb_shape
libpng16-16
png_create_info_struct
png_create_read_struct
png_destroy_read_struct
png_error
png_get_IHDR
png_get_error_ptr
png_get_io_ptr
png_get_valid
png_read_end
png_read_image
png_read_info
png_read_update_info
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_gray_to_rgb
png_set_interlace_handling
png_set_longjmp_fn
png_set_packing
png_set_palette_to_rgb
png_set_read_fn
png_set_read_user_transform_fn
png_set_strip_16
png_set_tRNS_to_alpha
zlib1
inflate
inflateEnd
inflateInit2_
inflateReset
FTC_CMapCache_Lookup
FTC_CMapCache_New
FTC_ImageCache_Lookup
FTC_ImageCache_LookupScaler
FTC_ImageCache_New
FTC_Manager_Done
FTC_Manager_LookupFace
FTC_Manager_LookupSize
FTC_Manager_New
FTC_Manager_RemoveFaceID
FTC_Manager_Reset
FTC_Node_Unref
FTC_SBitCache_Lookup
FTC_SBitCache_LookupScaler
FTC_SBitCache_New
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_ClassicKern_Free
FT_ClassicKern_Validate
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Error_String
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_BDF_Charset_ID
FT_Get_BDF_Property
FT_Get_CID_From_Glyph_Index
FT_Get_CID_Is_Internally_CID_Keyed
FT_Get_CID_Registry_Ordering_Supplement
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_Layer
FT_Get_Color_Glyph_Paint
FT_Get_Colorline_Stops
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PFR_Advance
FT_Get_PFR_Kerning
FT_Get_PFR_Metrics
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Paint
FT_Get_Paint_Layers
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_Transform
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_WinFNT_Header
FT_Get_X11_Font_Format
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Gzip_Uncompress
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_OpenType_Free
FT_OpenType_Validate
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Palette_Data_Get
FT_Palette_Select
FT_Palette_Set_Foreground_Color
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Log_Handler
FT_Set_Default_Properties
FT_Set_Log_Handler
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stream_OpenBzip2
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_Trace_Set_Default_Level
FT_Trace_Set_Level
FT_TrueTypeGX_Free
FT_TrueTypeGX_Validate
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
TT_New_Context
TT_RunIns
Name
.text
Size
542KB
Virtual Size
541KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
432B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Puntlatsh/Chromophobic30/APM_Aiff.dll
- IMPHASH 3e064ee4c6db94f08b3e7aaf4c13b6ee
- SHA256 555a7ef39aa4ea426f3ed3e4016d5301eaeada1f27c37c5ab1ade5cc75c0881e
- MD5 e16708b292cb310904110a5a5bea9899
- SHA1 e96feb4fa67304b415aec25fec81a0fb2f93a681
- SHA512 57a371c362cd7514325f63d92aef46e56366ed06ce5c3c76e2d62ced0459e5c59169c613affee3bc4dce2e0a08711c82c4fb8a2205554ef47456e132c93ede63
- SSDEEP 3072:BnM7WceyVzK7c1YAYx4W36wY+Y83/jq7DuKGf7y+fr2YwrmVbUC1jraq1VhLEFw3:7yI7cSJ1VREFtft+
- MD5 SHA1 SHA512 SSDEEP
Digest
2a:36:41:b9:fa:8b:db:22:e0:8a:a4:cb:1a:9b:cc:f4:f4:8d:64:e7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE
Chains
Feb 27, 2016
CN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Nero AG,O=Nero AG,L=Karlsruhe,ST=Baden Wuerttemberg,C=DE
Serial Number
4d:7a:5e:95:c9:2e:17:b8:e5:b3:1a:2b:d0:45:3a:49
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 14, 2015 - Jul 13, 2018
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Dec 10, 2013 - Dec 9, 2023
Minor OS version
1
Major OS version
5
Entry point
74016
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\Builds\149\N2\HO_MMC_g_2016_r_2016\Sources\AudioPluginMgr\plugins\aiff\Release\Aiff.pdb
mfc110u
ord10130
ord10132
ord10131
ord10129
ord10133
ord5528
ord11563
ord11564
ord8990
ord11927
ord3780
ord11774
ord14408
ord8816
ord12058
ord6840
ord9318
ord10847
ord9106
ord3211
ord13699
ord12097
ord12095
ord1707
ord1716
ord1724
ord1720
ord1729
ord4858
ord4895
ord4866
ord4878
ord4874
ord4870
ord4901
ord1467
ord4862
ord4905
ord4883
ord4847
ord4853
ord4886
ord4441
ord5664
ord9541
ord4433
ord3000
ord14410
ord7771
ord14416
ord14328
ord6739
ord11555
ord14055
ord12860
ord13952
ord13524
ord5806
ord2628
ord11962
ord3882
ord3317
ord3316
ord3210
ord12006
ord996
ord7879
ord300
ord2122
ord2707
ord8055
ord10100
ord3247
ord3250
ord13577
ord6091
ord6000
ord3758
ord922
ord13076
ord1403
ord4821
ord3635
ord6401
ord457
ord3109
ord3348
ord3349
ord4033
ord4424
ord10317
ord11233
ord10860
ord8891
ord1104
ord12010
ord9060
ord2706
ord13573
ord6089
ord11969
ord7345
ord499
ord5461
ord1135
ord6367
ord3092
ord4163
ord8597
ord2938
ord3814
ord1063
ord8979
ord3636
ord3639
ord6360
ord3090
ord4160
ord1059
ord8977
ord6419
ord1126
ord9059
ord8064
ord5285
ord7563
ord7573
ord7572
ord5109
ord5287
ord5131
ord5401
ord9200
ord5635
ord5425
ord5128
ord293
ord5792
ord2279
ord1645
ord4265
ord1688
ord2942
ord14240
ord280
ord2935
ord4825
ord6887
ord2335
ord2194
ord968
ord13077
ord1441
ord5753
ord550
ord8349
ord1646
ord6046
ord1175
ord1656
ord8028
ord316
ord306
ord1040
ord1523
ord1644
ord1654
ord4264
ord5755
ord8027
ord296
ord286
ord290
ord1039
ord1514
ord1516
ord1678
ord1681
ord2941
ord8610
ord8204
ord8308
ord5756
ord5211
ord1517
ord5212
ord485
ord1524
ord1521
ord1502
ord12182
ord14424
ord12239
ord14477
ord2329
ord323
ord1045
ord6617
ord266
ord2331
ord2324
ord265
ord4754
ord4891
ord3791
ord1505
ord324
ord1046
ord2311
ord2354
ord2357
ord2322
ord2356
ord484
ord2216
ord2320
ord2134
ord2248
ord2345
ord1504
msvcr110
_localtime64_s
ldexp
_wtoi
_mktime64
isdigit
_recalloc
floor
calloc
free
memmove
__RTDynamicCast
iswalnum
memcpy_s
wcsftime
frexp
_CxxThrowException
__CxxFrameHandler3
memcpy
wcschr
wcsncpy_s
atoi
iswalpha
_snwprintf_s
__clean_type_info_names_internal
_except_handler4_common
?terminate@@YAXXZ
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_stricmp
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
_wcsnicmp
memset
_purecall
kernel32
LockResource
GetLastError
MultiByteToWideChar
GetFileSize
FileTimeToSystemTime
CreateFileW
SizeofResource
LoadResource
FindResourceW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
LeaveCriticalSection
GetFileTime
CloseHandle
FileTimeToLocalFileTime
SetFilePointer
WriteFile
ReadFile
FreeLibrary
GetProcAddress
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
LoadLibraryW
GetEnvironmentVariableW
ResumeThread
WaitForSingleObject
GetTickCount
SetEvent
ResetEvent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
LocalFree
LocalAlloc
CreateSemaphoreW
CreateEventW
CreateMutexW
ReleaseMutex
ReleaseSemaphore
InterlockedIncrement
user32
IsWindow
GetMenuItemCount
GetClassNameW
GetWindowTextW
GetWindowLongW
ModifyMenuW
GetMenuStringW
SendMessageW
GetMenuItemID
AdjustWindowRect
EnableWindow
GetClientRect
GetWindowRect
MessageBoxW
SetWindowTextW
GetSubMenu
GetWindow
advapi32
RegQueryValueExW
RegOpenKeyW
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyW
ole32
CoCreateInstance
oleaut32
SysFreeString
crypt32
CertGetNameStringW
CertFindCertificateInStore
CryptMsgGetParam
CryptQueryObject
msvcp110
??0id@locale@std@@QAE@I@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
wintrust
WinVerifyTrust
NERO_PLUGIN_GetPrimaryAudioObject
NERO_PLUGIN_ReadyToFinish
Name
.text
Size
77KB
Virtual Size
77KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
34KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.shared
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=199, version=41118,
count=4, id=205, version=50929,
count=13, id=206, version=50929,
count=8, id=207, version=50929,
count=348, id=1, productName=Unmarked objects,
count=7, id=203, version=50929,
count=1, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=6, id=207, productName=VS2012 UPD3 build 60610, version=60610,
count=6, id=211, version=61030,
count=1, id=202, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=201, productName=VS2012 UPD4 build 61030, version=61030,
count=1, id=151,
count=1, id=204, productName=VS2012 UPD4 build 61030, version=61030,
Puntlatsh/Chromophobic30/Corbin.Und
- SHA256 3e7f56196c7cbf48eb03dd28a52ee860fce5c3b73e3937e58392b20b59b9f79a
- MD5 80e95e00f05061800e5baa99ecbc6763
- SHA1 6a1b147b141b004cddfc39600a859f315cdb06b2
- SHA512 7ef4329170215b825e88013183d73ef36a6e56a0a8a10955fb32da84241de5f4ed889cdf7cac2fcea1a49a042a4bc9467c77c03bf145e7cd907e1a3d73966bce
- SSDEEP 384:dYwCZCPmit65pp6BuI/kYj4NAH/PRCN6H8LGOLodn3LLAliN/ye:awC4+it65pXIMk4NS6E3LkIb
- MD5 SHA1 SHA512 SSDEEP
Puntlatsh/Chromophobic30/Siddebadets.Eng
- SHA256 856c966da05cfa28c442f8724611625a38e398197d5f9b4ece8286603a35060d
- MD5 b73d9ccd1f207bf5d37919810517dd32
- SHA1 55e6605f8483d37f48f72eb5ca643b9c4304cca3
- SHA512 f9044e14397ebe9407731b77b1309e66ecbd9164472b0a63460754bda0e040c8bffc5543472ce0a6d9f3a8c9d565760838ae72ecf6991ce9d9a4afe4f88e45bf
- SSDEEP 1536:sIDUggN67NQyVhH7DUMwbw0+OnJM7QXztwhRLIxChLVk:pRgNMqs1y7JM7QJOXk
- MD5 SHA1 SHA512 SSDEEP
Symbranchia/libgmp-10.dll
- IMPHASH 50d3e0798b0b3d30fc332b48dda65861
- SHA256 09a0f42528f124955dca1ff2905f04e8add2b490cd34d1743c175dddccfeb48a
- MD5 819bc7486589d014d8fb07fa48fda00f
- SHA1 0875f331bc35f31f90c8c6beae587118e3c74e82
- SHA512 82ba377e0b991d691508b5f2f96b69932bb6a8c77c9e6c43cab869b8986fa1daaefe703b1725af08c83158bc838560799f426726b58f6d430bc068a5882f91ed
- SSDEEP 6144:VqCGo2jbRSFZxZ3S9fO4yciqIJuYpvTHq7yXE/0vk5bBGslJ6NoUuUPaT1QANbr6:8Rsx8iP0/GkW/uUi6Al6G+Jh3
- MD5 SHA1 SHA512 SSDEEP
Digest
93:8f:a8:f6:fa:33:15:d7:f9:f4:a9:a5:53:fd:8a:d8:79:97:c5:95:85:5d:35:a5:28:92:5a:81:2e:1a:19:15
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Tim Kosse,O=Tim Kosse,POSTALCODE=50823,STREET=Lukasstr. 10,L=Köln,ST=NRW,C=DE
Chains
Feb 11, 2022
CN=Tim Kosse,O=Tim Kosse,POSTALCODE=50823,STREET=Lukasstr. 10,L=Köln,ST=NRW,C=DE
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Subject
CN=Tim Kosse,O=Tim Kosse,POSTALCODE=50823,STREET=Lukasstr. 10,L=Köln,ST=NRW,C=DE
Serial Number
5d:38:d8:bd:64:45:50:68:c2:d1:c7:40:88:c5:e2:8a
Issuer
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 13, 2019 - Feb 12, 2022
Subject
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Serial Number
01
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Serial Number
13:ea:28:70:5b:f4:ec:ed:0c:36:63:09:80:61:43:36
Issuer
CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 30, 2000 - May 30, 2020
Subject
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
1d:a2:48:30:6f:9b:26:18:d0:82:e0:96:7d:33:d3:6a
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning, ExtKeyUsageTimeStamping
Timespan
Nov 2, 2018 - Dec 31, 2030
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 1, 2021 - Jan 6, 2031
Minor OS version
0
Major OS version
4
Entry point
4944
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
GetLastError
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
ferror
fgetc
fputc
fread
free
fwrite
getc
islower
isspace
isupper
isxdigit
localeconv
malloc
memcpy
memmove
memset
putc
raise
realloc
strchr
strerror
strlen
strncmp
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
__gmp_0
__gmp_allocate_func
__gmp_asprintf
__gmp_asprintf_final
__gmp_asprintf_funs
__gmp_asprintf_memory
__gmp_asprintf_reps
__gmp_assert_fail
__gmp_assert_header
__gmp_binvert_limb_table
__gmp_bits_per_limb
__gmp_default_allocate
__gmp_default_fp_limb_precision
__gmp_default_free
__gmp_default_reallocate
__gmp_digit_value_tab
__gmp_divide_by_zero
__gmp_doprnt
__gmp_doprnt_integer
__gmp_doprnt_mpf2
__gmp_doscan
__gmp_errno
__gmp_exception
__gmp_extract_double
__gmp_fac2cnt_table
__gmp_fib_table
__gmp_fprintf
__gmp_fprintf_funs
__gmp_free_func
__gmp_fscanf
__gmp_fscanf_funs
__gmp_get_memory_functions
__gmp_init_primesieve
__gmp_invalid_operation
__gmp_jacobi_table
__gmp_junk
__gmp_limbroots_table
__gmp_mt_recalc_buffer
__gmp_nextprime
__gmp_odd2fac_table
__gmp_oddfac_table
__gmp_primesieve
__gmp_printf
__gmp_randclear
__gmp_randclear_mt
__gmp_randget_mt
__gmp_randinit
__gmp_randinit_default
__gmp_randinit_lc_2exp
__gmp_randinit_lc_2exp_size
__gmp_randinit_mt
__gmp_randinit_mt_noseed
__gmp_randinit_set
__gmp_randiset_mt
__gmp_rands
__gmp_rands_initialized
__gmp_randseed
__gmp_randseed_ui
__gmp_reallocate_func
__gmp_scanf
__gmp_set_memory_functions
__gmp_snprintf
__gmp_snprintf_funs
__gmp_sprintf
__gmp_sprintf_funs
__gmp_sqrt_of_negative
__gmp_sscanf
__gmp_sscanf_funs
__gmp_tmp_reentrant_alloc
__gmp_tmp_reentrant_free
__gmp_urandomb_ui
__gmp_urandomm_ui
__gmp_vasprintf
__gmp_version
__gmp_vfprintf
__gmp_vfscanf
__gmp_vprintf
__gmp_vscanf
__gmp_vsnprintf
__gmp_vsprintf
__gmp_vsscanf
__gmpf_abs
__gmpf_add
__gmpf_add_ui
__gmpf_ceil
__gmpf_clear
__gmpf_clears
__gmpf_cmp
__gmpf_cmp_d
__gmpf_cmp_si
__gmpf_cmp_ui
__gmpf_cmp_z
__gmpf_div
__gmpf_div_2exp
__gmpf_div_ui
__gmpf_dump
__gmpf_eq
__gmpf_fits_sint_p
__gmpf_fits_slong_p
__gmpf_fits_sshort_p
__gmpf_fits_uint_p
__gmpf_fits_ulong_p
__gmpf_fits_ushort_p
__gmpf_floor
__gmpf_get_d
__gmpf_get_d_2exp
__gmpf_get_default_prec
__gmpf_get_prec
__gmpf_get_si
__gmpf_get_str
__gmpf_get_ui
__gmpf_init
__gmpf_init2
__gmpf_init_set
__gmpf_init_set_d
__gmpf_init_set_si
__gmpf_init_set_str
__gmpf_init_set_ui
__gmpf_inits
__gmpf_inp_str
__gmpf_integer_p
__gmpf_mul
__gmpf_mul_2exp
__gmpf_mul_ui
__gmpf_neg
__gmpf_out_str
__gmpf_pow_ui
__gmpf_random2
__gmpf_reldiff
__gmpf_set
__gmpf_set_d
__gmpf_set_default_prec
__gmpf_set_prec
__gmpf_set_prec_raw
__gmpf_set_q
__gmpf_set_si
__gmpf_set_str
__gmpf_set_ui
__gmpf_set_z
__gmpf_size
__gmpf_sqrt
__gmpf_sqrt_ui
__gmpf_sub
__gmpf_sub_ui
__gmpf_swap
__gmpf_trunc
__gmpf_ui_div
__gmpf_ui_sub
__gmpf_urandomb
__gmpn_add
__gmpn_add_1
__gmpn_add_err1_n
__gmpn_add_err2_n
__gmpn_add_err3_n
__gmpn_add_n
__gmpn_add_n_atom
__gmpn_add_n_bd1
__gmpn_add_n_bt1
__gmpn_add_n_core2
__gmpn_add_n_coreihwl
__gmpn_add_n_coreisbr
__gmpn_add_n_goldmont
__gmpn_add_n_init
__gmpn_add_n_pentium4
__gmpn_add_n_silvermont
__gmpn_add_n_sub_n
__gmpn_add_n_x86_64
__gmpn_add_nc_atom
__gmpn_add_nc_bd1
__gmpn_add_nc_bt1
__gmpn_add_nc_core2
__gmpn_add_nc_coreihwl
__gmpn_add_nc_coreisbr
__gmpn_add_nc_goldmont
__gmpn_add_nc_pentium4
__gmpn_add_nc_silvermont
__gmpn_add_nc_x86_64
__gmpn_addlsh1_n
__gmpn_addlsh1_n_atom
__gmpn_addlsh1_n_bd1
__gmpn_addlsh1_n_core2
__gmpn_addlsh1_n_coreisbr
__gmpn_addlsh1_n_init
__gmpn_addlsh1_n_pentium4
__gmpn_addlsh1_n_silvermont
__gmpn_addlsh1_n_x86_64
__gmpn_addlsh1_n_zen
__gmpn_addlsh1_nc_atom
__gmpn_addlsh1_nc_bd1
__gmpn_addlsh1_nc_coreisbr
__gmpn_addlsh1_nc_zen
__gmpn_addlsh2_n
__gmpn_addlsh2_n_atom
__gmpn_addlsh2_n_core2
__gmpn_addlsh2_n_coreisbr
__gmpn_addlsh2_n_init
__gmpn_addlsh2_n_pentium4
__gmpn_addlsh2_n_silvermont
__gmpn_addlsh2_n_x86_64
__gmpn_addlsh2_nc_coreisbr
__gmpn_addlsh_n
__gmpn_addmul_1
__gmpn_addmul_1_atom
__gmpn_addmul_1_bd1
__gmpn_addmul_1_bt1
__gmpn_addmul_1_core2
__gmpn_addmul_1_coreibwl
__gmpn_addmul_1_coreihwl
__gmpn_addmul_1_coreinhm
__gmpn_addmul_1_coreisbr
__gmpn_addmul_1_goldmont
__gmpn_addmul_1_init
__gmpn_addmul_1_pentium4
__gmpn_addmul_1_silvermont
__gmpn_addmul_1_x86_64
__gmpn_addmul_1_zen
__gmpn_addmul_1c_core2
__gmpn_addmul_1c_silvermont
__gmpn_addmul_2
__gmpn_addmul_2_atom
__gmpn_addmul_2_bd1
__gmpn_addmul_2_coreihwl
__gmpn_addmul_2_coreisbr
__gmpn_addmul_2_fat
__gmpn_addmul_2_init
__gmpn_addmul_2_k8
__gmpn_addmul_2_pentium4
__gmpn_and_n
__gmpn_andn_n
__gmpn_bases
__gmpn_bc_mulmod_bnm1
__gmpn_bc_set_str
__gmpn_bdiv_dbm1c
__gmpn_bdiv_dbm1c_init
__gmpn_bdiv_dbm1c_x86_64
__gmpn_bdiv_q
__gmpn_bdiv_q_1
__gmpn_bdiv_q_itch
__gmpn_bdiv_qr
__gmpn_bdiv_qr_itch
__gmpn_binvert
__gmpn_binvert_itch
__gmpn_broot
__gmpn_broot_invm1
__gmpn_brootinv
__gmpn_bsqrt
__gmpn_bsqrtinv
__gmpn_cmp
__gmpn_cnd_add_n
__gmpn_cnd_add_n_atom
__gmpn_cnd_add_n_coreisbr
__gmpn_cnd_add_n_init
__gmpn_cnd_add_n_x86_64
__gmpn_cnd_sub_n
__gmpn_cnd_sub_n_atom
__gmpn_cnd_sub_n_coreisbr
__gmpn_cnd_sub_n_init
__gmpn_cnd_sub_n_x86_64
__gmpn_cnd_swap
__gmpn_com
__gmpn_com_atom
__gmpn_com_bd1
__gmpn_com_bt2
__gmpn_com_core2
__gmpn_com_init
__gmpn_com_x86_64
__gmpn_com_zen
__gmpn_compute_powtab
__gmpn_copyd
__gmpn_copyd_atom
__gmpn_copyd_bd1
__gmpn_copyd_bt1
__gmpn_copyd_bt2
__gmpn_copyd_core2
__gmpn_copyd_init
__gmpn_copyd_nano
__gmpn_copyd_x86_64
__gmpn_copyd_zen
__gmpn_copyi
__gmpn_copyi_atom
__gmpn_copyi_bd1
__gmpn_copyi_bt1
__gmpn_copyi_bt2
__gmpn_copyi_core2
__gmpn_copyi_init
__gmpn_copyi_nano
__gmpn_copyi_x86_64
__gmpn_copyi_zen
__gmpn_cpuid
__gmpn_cpuvec
__gmpn_cpuvec_init
__gmpn_cpuvec_initialized
__gmpn_dc_set_str
__gmpn_dcpi1_bdiv_q
__gmpn_dcpi1_bdiv_qr
__gmpn_dcpi1_bdiv_qr_n
__gmpn_dcpi1_bdiv_qr_n_itch
__gmpn_dcpi1_div_q
__gmpn_dcpi1_div_qr
__gmpn_dcpi1_div_qr_n
__gmpn_dcpi1_divappr_q
__gmpn_div_q
__gmpn_div_qr_1
__gmpn_div_qr_1n_pi1
__gmpn_div_qr_2
__gmpn_div_qr_2n_pi1
__gmpn_div_qr_2u_pi1
__gmpn_divexact
__gmpn_divexact_1
__gmpn_divexact_1_atom
__gmpn_divexact_1_init
__gmpn_divexact_1_nano
__gmpn_divexact_1_x86_64
__gmpn_divexact_by3
__gmpn_divexact_by3c
__gmpn_divisible_p
__gmpn_divmod_1
__gmpn_divrem
__gmpn_divrem_1
__gmpn_divrem_1_core2
__gmpn_divrem_1_coreisbr
__gmpn_divrem_1_init
__gmpn_divrem_1_x86_64
__gmpn_divrem_2
__gmpn_dump
__gmpn_fft_best_k
__gmpn_fft_next_size
__gmpn_fib2_ui
__gmpn_fib2m
__gmpn_gcd
__gmpn_gcd_1
__gmpn_gcd_11
__gmpn_gcd_11_bd1
__gmpn_gcd_11_bt1
__gmpn_gcd_11_bt2
__gmpn_gcd_11_core2
__gmpn_gcd_11_coreisbr
__gmpn_gcd_11_init
__gmpn_gcd_11_k10
__gmpn_gcd_11_nano
__gmpn_gcd_11_x86_64
__gmpn_gcd_11_zen
__gmpn_gcd_22
__gmpn_gcd_subdiv_step
__gmpn_gcdext
__gmpn_gcdext_1
__gmpn_gcdext_hook
__gmpn_gcdext_lehmer_n
__gmpn_get_d
__gmpn_get_str
__gmpn_hamdist
__gmpn_hgcd
__gmpn_hgcd2
__gmpn_hgcd2_jacobi
__gmpn_hgcd_appr
__gmpn_hgcd_appr_itch
__gmpn_hgcd_itch
__gmpn_hgcd_jacobi
__gmpn_hgcd_matrix_adjust
__gmpn_hgcd_matrix_init
__gmpn_hgcd_matrix_mul
__gmpn_hgcd_matrix_mul_1
__gmpn_hgcd_matrix_update_q
__gmpn_hgcd_mul_matrix1_vector
__gmpn_hgcd_reduce
__gmpn_hgcd_reduce_itch
__gmpn_hgcd_step
__gmpn_invert
__gmpn_invert_limb
__gmpn_invert_limb_table
__gmpn_invertappr
__gmpn_ior_n
__gmpn_iorn_n
__gmpn_jacobi_2
__gmpn_jacobi_base
__gmpn_jacobi_n
__gmpn_lshift
__gmpn_lshift_atom
__gmpn_lshift_core2
__gmpn_lshift_coreisbr
__gmpn_lshift_init
__gmpn_lshift_k10
__gmpn_lshift_pentium4
__gmpn_lshift_silvermont
__gmpn_lshift_x86_64
__gmpn_lshift_zen
__gmpn_lshiftc
__gmpn_lshiftc_atom
__gmpn_lshiftc_core2
__gmpn_lshiftc_coreisbr
__gmpn_lshiftc_init
__gmpn_lshiftc_k10
__gmpn_lshiftc_pentium4
__gmpn_lshiftc_silvermont
__gmpn_lshiftc_x86_64
__gmpn_lshiftc_zen
__gmpn_matrix22_mul
__gmpn_matrix22_mul1_inverse_vector
__gmpn_matrix22_mul_itch
__gmpn_mod_1
__gmpn_mod_1_1p
__gmpn_mod_1_1p_cps
__gmpn_mod_1_1p_cps_init
__gmpn_mod_1_1p_cps_x86_64
__gmpn_mod_1_1p_init
__gmpn_mod_1_1p_x86_64
__gmpn_mod_1_fat
__gmpn_mod_1_init
__gmpn_mod_1s_2p
__gmpn_mod_1s_2p_cps
__gmpn_mod_1s_2p_cps_init
__gmpn_mod_1s_2p_cps_x86_64
__gmpn_mod_1s_2p_init
__gmpn_mod_1s_2p_x86_64
__gmpn_mod_1s_3p
__gmpn_mod_1s_3p_cps
__gmpn_mod_1s_4p
__gmpn_mod_1s_4p_cps
__gmpn_mod_1s_4p_cps_init
__gmpn_mod_1s_4p_cps_x86_64
__gmpn_mod_1s_4p_init
__gmpn_mod_1s_4p_x86_64
__gmpn_mod_34lsub1
__gmpn_mod_34lsub1_init
__gmpn_mod_34lsub1_pentium4
__gmpn_mod_34lsub1_x86_64
__gmpn_modexact_1_odd_x86_64
__gmpn_modexact_1c_odd
__gmpn_modexact_1c_odd_init
__gmpn_modexact_1c_odd_x86_64
__gmpn_mu_bdiv_q
__gmpn_mu_bdiv_q_itch
__gmpn_mu_bdiv_qr
__gmpn_mu_bdiv_qr_itch
__gmpn_mu_div_q
__gmpn_mu_div_q_itch
__gmpn_mu_div_qr
__gmpn_mu_div_qr_itch
__gmpn_mu_divappr_q
__gmpn_mu_divappr_q_itch
__gmpn_mul
__gmpn_mul_1
__gmpn_mul_1_atom
__gmpn_mul_1_bd1
__gmpn_mul_1_bt1
__gmpn_mul_1_coreihwl
__gmpn_mul_1_coreisbr
__gmpn_mul_1_goldmont
__gmpn_mul_1_init
__gmpn_mul_1_pentium4
__gmpn_mul_1_silvermont
__gmpn_mul_1_x86_64
__gmpn_mul_1_zen
__gmpn_mul_1c_atom
__gmpn_mul_1c_bd1
__gmpn_mul_1c_bt1
__gmpn_mul_1c_coreisbr
__gmpn_mul_1c_goldmont
__gmpn_mul_1c_pentium4
__gmpn_mul_1c_silvermont
__gmpn_mul_1c_x86_64
__gmpn_mul_1c_zen
__gmpn_mul_2
__gmpn_mul_basecase
__gmpn_mul_basecase_bd1
__gmpn_mul_basecase_bt1
__gmpn_mul_basecase_core2
__gmpn_mul_basecase_coreibwl
__gmpn_mul_basecase_coreihwl
__gmpn_mul_basecase_coreisbr
__gmpn_mul_basecase_fat
__gmpn_mul_basecase_init
__gmpn_mul_basecase_k8
__gmpn_mul_basecase_pentium4
__gmpn_mul_basecase_silvermont
__gmpn_mul_basecase_zen
__gmpn_mul_fft
__gmpn_mul_n
__gmpn_mullo_basecase
__gmpn_mullo_basecase_core2
__gmpn_mullo_basecase_coreibwl
__gmpn_mullo_basecase_coreihwl
__gmpn_mullo_basecase_coreisbr
__gmpn_mullo_basecase_fat
__gmpn_mullo_basecase_init
__gmpn_mullo_basecase_k8
__gmpn_mullo_basecase_pentium4
__gmpn_mullo_basecase_silvermont
__gmpn_mullo_basecase_zen
__gmpn_mullo_n
__gmpn_mulmid
__gmpn_mulmid_basecase
__gmpn_mulmid_n
__gmpn_mulmod_bnm1
__gmpn_mulmod_bnm1_next_size
__gmpn_nand_n
__gmpn_neg
__gmpn_ni_invertappr
__gmpn_nior_n
__gmpn_nussbaumer_mul
__gmpn_perfect_power_p
__gmpn_perfect_square_p
__gmpn_pi1_bdiv_q_1
__gmpn_popcount
__gmpn_pow_1
__gmpn_powlo
__gmpn_powm
__gmpn_preinv_divrem_1
__gmpn_preinv_divrem_1_core2
__gmpn_preinv_divrem_1_coreisbr
__gmpn_preinv_divrem_1_init
__gmpn_preinv_divrem_1_x86_64
__gmpn_preinv_mod_1
__gmpn_preinv_mod_1_init
__gmpn_preinv_mu_div_qr
__gmpn_preinv_mu_div_qr_itch
__gmpn_random
__gmpn_random2
__gmpn_redc_1
__gmpn_redc_1_atom
__gmpn_redc_1_bt1
__gmpn_redc_1_core2
__gmpn_redc_1_coreihwl
__gmpn_redc_1_coreinhm
__gmpn_redc_1_coreisbr
__gmpn_redc_1_fat
__gmpn_redc_1_goldmont
__gmpn_redc_1_init
__gmpn_redc_1_k8
__gmpn_redc_1_pentium4
__gmpn_redc_2
__gmpn_redc_2_fat
__gmpn_redc_2_init
__gmpn_redc_n
__gmpn_remove
__gmpn_rootrem
__gmpn_rsblsh1_n
__gmpn_rsblsh2_n
__gmpn_rsblsh_n
__gmpn_rsh1add_n
__gmpn_rsh1add_nc
__gmpn_rsh1sub_n
__gmpn_rsh1sub_nc
__gmpn_rshift
__gmpn_rshift_atom
__gmpn_rshift_core2
__gmpn_rshift_coreisbr
__gmpn_rshift_init
__gmpn_rshift_k10
__gmpn_rshift_pentium4
__gmpn_rshift_silvermont
__gmpn_rshift_x86_64
__gmpn_rshift_zen
__gmpn_sbpi1_bdiv_q
__gmpn_sbpi1_bdiv_qr
__gmpn_sbpi1_bdiv_r
__gmpn_sbpi1_div_q
__gmpn_sbpi1_div_qr
__gmpn_sbpi1_divappr_q
__gmpn_scan0
__gmpn_scan1
__gmpn_sec_add_1
__gmpn_sec_add_1_itch
__gmpn_sec_div_qr
__gmpn_sec_div_qr_itch
__gmpn_sec_div_r
__gmpn_sec_div_r_itch
__gmpn_sec_invert
__gmpn_sec_invert_itch
__gmpn_sec_mul
__gmpn_sec_mul_itch
__gmpn_sec_pi1_div_qr
__gmpn_sec_pi1_div_r
__gmpn_sec_powm
__gmpn_sec_powm_itch
__gmpn_sec_sqr
__gmpn_sec_sqr_itch
__gmpn_sec_sub_1
__gmpn_sec_sub_1_itch
__gmpn_sec_tabselect
__gmpn_set_str
__gmpn_sizeinbase
__gmpn_sqr
__gmpn_sqr_basecase
__gmpn_sqr_basecase_bt1
__gmpn_sqr_basecase_core2
__gmpn_sqr_basecase_coreibwl
__gmpn_sqr_basecase_coreihwl
__gmpn_sqr_basecase_coreisbr
__gmpn_sqr_basecase_fat
__gmpn_sqr_basecase_init
__gmpn_sqr_basecase_k8
__gmpn_sqr_basecase_pentium4
__gmpn_sqr_basecase_silvermont
__gmpn_sqr_basecase_zen
__gmpn_sqr_diag_addlsh1
__gmpn_sqrlo
__gmpn_sqrlo_basecase
__gmpn_sqrmod_bnm1
__gmpn_sqrmod_bnm1_next_size
__gmpn_sqrtrem
__gmpn_strongfibo
__gmpn_sub
__gmpn_sub_1
__gmpn_sub_err1_n
__gmpn_sub_err2_n
__gmpn_sub_err3_n
__gmpn_sub_n
__gmpn_sub_n_atom
__gmpn_sub_n_bd1
__gmpn_sub_n_bt1
__gmpn_sub_n_core2
__gmpn_sub_n_coreihwl
__gmpn_sub_n_coreisbr
__gmpn_sub_n_goldmont
__gmpn_sub_n_init
__gmpn_sub_n_pentium4
__gmpn_sub_n_silvermont
__gmpn_sub_n_x86_64
__gmpn_sub_nc_atom
__gmpn_sub_nc_bd1
__gmpn_sub_nc_bt1
__gmpn_sub_nc_core2
__gmpn_sub_nc_coreihwl
__gmpn_sub_nc_coreisbr
__gmpn_sub_nc_goldmont
__gmpn_sub_nc_pentium4
__gmpn_sub_nc_silvermont
__gmpn_sub_nc_x86_64
__gmpn_sublsh1_n
__gmpn_sublsh1_n_atom
__gmpn_sublsh1_n_bd1
__gmpn_sublsh1_n_core2
__gmpn_sublsh1_n_init
__gmpn_sublsh1_n_pentium4
__gmpn_sublsh1_n_x86_64
__gmpn_sublsh1_n_zen
__gmpn_sublsh1_nc_atom
__gmpn_sublsh1_nc_bd1
__gmpn_sublsh1_nc_zen
__gmpn_submul_1
__gmpn_submul_1_atom
__gmpn_submul_1_bd1
__gmpn_submul_1_bt1
__gmpn_submul_1_core2
__gmpn_submul_1_coreihwl
__gmpn_submul_1_coreinhm
__gmpn_submul_1_coreisbr
__gmpn_submul_1_goldmont
__gmpn_submul_1_init
__gmpn_submul_1_pentium4
__gmpn_submul_1_silvermont
__gmpn_submul_1_x86_64
__gmpn_submul_1_zen
__gmpn_submul_1c_core2
__gmpn_submul_1c_silvermont
__gmpn_tdiv_qr
__gmpn_toom22_mul
__gmpn_toom2_sqr
__gmpn_toom32_mul
__gmpn_toom33_mul
__gmpn_toom3_sqr
__gmpn_toom42_mul
__gmpn_toom42_mulmid
__gmpn_toom43_mul
__gmpn_toom44_mul
__gmpn_toom4_sqr
__gmpn_toom52_mul
__gmpn_toom53_mul
__gmpn_toom54_mul
__gmpn_toom62_mul
__gmpn_toom63_mul
__gmpn_toom6_sqr
__gmpn_toom6h_mul
__gmpn_toom8_sqr
__gmpn_toom8h_mul
__gmpn_toom_couple_handling
__gmpn_toom_eval_dgr3_pm1
__gmpn_toom_eval_dgr3_pm2
__gmpn_toom_eval_pm1
__gmpn_toom_eval_pm2
__gmpn_toom_eval_pm2exp
__gmpn_toom_eval_pm2rexp
__gmpn_toom_interpolate_12pts
__gmpn_toom_interpolate_16pts
__gmpn_toom_interpolate_5pts
__gmpn_toom_interpolate_6pts
__gmpn_toom_interpolate_7pts
__gmpn_toom_interpolate_8pts
__gmpn_trialdiv
__gmpn_xnor_n
__gmpn_xor_n
__gmpn_zero
__gmpn_zero_p
__gmpq_abs
__gmpq_add
__gmpq_canonicalize
__gmpq_clear
__gmpq_clears
__gmpq_cmp
__gmpq_cmp_si
__gmpq_cmp_ui
__gmpq_cmp_z
__gmpq_div
__gmpq_div_2exp
__gmpq_equal
__gmpq_get_d
__gmpq_get_den
__gmpq_get_num
__gmpq_get_str
__gmpq_init
__gmpq_inits
__gmpq_inp_str
__gmpq_inv
__gmpq_mul
__gmpq_mul_2exp
__gmpq_neg
__gmpq_out_str
__gmpq_set
__gmpq_set_d
__gmpq_set_den
__gmpq_set_f
__gmpq_set_num
__gmpq_set_si
__gmpq_set_str
__gmpq_set_ui
__gmpq_set_z
__gmpq_sub
__gmpq_swap
__gmpz_2fac_ui
__gmpz_abs
__gmpz_add
__gmpz_add_ui
__gmpz_addmul
__gmpz_addmul_ui
__gmpz_and
__gmpz_aorsmul_1
__gmpz_array_init
__gmpz_bin_ui
__gmpz_bin_uiui
__gmpz_cdiv_q
__gmpz_cdiv_q_2exp
__gmpz_cdiv_q_ui
__gmpz_cdiv_qr
__gmpz_cdiv_qr_ui
__gmpz_cdiv_r
__gmpz_cdiv_r_2exp
__gmpz_cdiv_r_ui
__gmpz_cdiv_ui
__gmpz_clear
__gmpz_clears
__gmpz_clrbit
__gmpz_cmp
__gmpz_cmp_d
__gmpz_cmp_si
__gmpz_cmp_ui
__gmpz_cmpabs
__gmpz_cmpabs_d
__gmpz_cmpabs_ui
__gmpz_com
__gmpz_combit
__gmpz_congruent_2exp_p
__gmpz_congruent_p
__gmpz_congruent_ui_p
__gmpz_divexact
__gmpz_divexact_gcd
__gmpz_divexact_ui
__gmpz_divisible_2exp_p
__gmpz_divisible_p
__gmpz_divisible_ui_p
__gmpz_dump
__gmpz_export
__gmpz_fac_ui
__gmpz_fdiv_q
__gmpz_fdiv_q_2exp
__gmpz_fdiv_q_ui
__gmpz_fdiv_qr
__gmpz_fdiv_qr_ui
__gmpz_fdiv_r
__gmpz_fdiv_r_2exp
__gmpz_fdiv_r_ui
__gmpz_fdiv_ui
__gmpz_fib2_ui
__gmpz_fib_ui
__gmpz_fits_sint_p
__gmpz_fits_slong_p
__gmpz_fits_sshort_p
__gmpz_fits_uint_p
__gmpz_fits_ulong_p
__gmpz_fits_ushort_p
__gmpz_gcd
__gmpz_gcd_ui
__gmpz_gcdext
__gmpz_get_d
__gmpz_get_d_2exp
__gmpz_get_si
__gmpz_get_str
__gmpz_get_ui
__gmpz_getlimbn
__gmpz_hamdist
__gmpz_import
__gmpz_init
__gmpz_init2
__gmpz_init_set
__gmpz_init_set_d
__gmpz_init_set_si
__gmpz_init_set_str
__gmpz_init_set_ui
__gmpz_inits
__gmpz_inp_raw
__gmpz_inp_str
__gmpz_inp_str_nowhite
__gmpz_invert
__gmpz_ior
__gmpz_jacobi
__gmpz_kronecker_si
__gmpz_kronecker_ui
__gmpz_lcm
__gmpz_lcm_ui
__gmpz_legendre
__gmpz_limbs_finish
__gmpz_limbs_modify
__gmpz_limbs_read
__gmpz_limbs_write
__gmpz_lucas_mod
__gmpz_lucnum2_ui
__gmpz_lucnum_ui
__gmpz_mfac_uiui
__gmpz_millerrabin
__gmpz_mod
__gmpz_mul
__gmpz_mul_2exp
__gmpz_mul_si
__gmpz_mul_ui
__gmpz_n_pow_ui
__gmpz_neg
__gmpz_nextprime
__gmpz_oddfac_1
__gmpz_out_raw
__gmpz_out_str
__gmpz_perfect_power_p
__gmpz_perfect_square_p
__gmpz_popcount
__gmpz_pow_ui
__gmpz_powm
__gmpz_powm_sec
__gmpz_powm_ui
__gmpz_primorial_ui
__gmpz_probab_prime_p
__gmpz_prodlimbs
__gmpz_random
__gmpz_random2
__gmpz_realloc
__gmpz_realloc2
__gmpz_remove
__gmpz_roinit_n
__gmpz_root
__gmpz_rootrem
__gmpz_rrandomb
__gmpz_scan0
__gmpz_scan1
__gmpz_set
__gmpz_set_d
__gmpz_set_f
__gmpz_set_q
__gmpz_set_si
__gmpz_set_str
__gmpz_set_ui
__gmpz_setbit
__gmpz_si_kronecker
__gmpz_size
__gmpz_sizeinbase
__gmpz_sqrt
__gmpz_sqrtrem
__gmpz_stronglucas
__gmpz_sub
__gmpz_sub_ui
__gmpz_submul
__gmpz_submul_ui
__gmpz_swap
__gmpz_tdiv_q
__gmpz_tdiv_q_2exp
__gmpz_tdiv_q_ui
__gmpz_tdiv_qr
__gmpz_tdiv_qr_ui
__gmpz_tdiv_r
__gmpz_tdiv_r_2exp
__gmpz_tdiv_r_ui
__gmpz_tdiv_ui
__gmpz_tstbit
__gmpz_ui_kronecker
__gmpz_ui_pow_ui
__gmpz_ui_sub
__gmpz_urandomb
__gmpz_urandomm
__gmpz_xor
Name
.text
Size
501KB
Virtual Size
501KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
496B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
Symbranchia/microphone-hardware-disabled-symbolic.symbolic.png
- SHA256 3e4429457a1c313920fafe775494bba5049bbfa41a4f29789ccc19432fd89348
- MD5 aa3a4757ff50f980ec23d5a65f6fbc0d
- SHA1 aba35fce13e7eec52bdcd1756ab6ac7f3cbe0b17
- SHA512 c26c744ce5149634d6698a7181f1f08668fea902004bddf0ea011097d139a58173ece62b22da376608406aa1a1fc65b496ef1373e1c6b532c430240f3ae7cf8f
- MD5 SHA1 SHA512
Symbranchia/network-idle-symbolic.svg
- SHA256 1299813a0bf1b80ef05ad10ab5367b73438f86f67658c12506aae7f5b9d52542
- MD5 2f7b702a661064030d2127749f631296
- SHA1 df765ce21c4e5149cb176f1ab1685fe7daa93799
- SHA512 c91046c5a59fd5ed583366d73585ba6935d9b36bacfd64cef23f876ccf5791f9d434576b5b860d1a0c3f88d9cb219ff6c0efd8202fc859dd24c4effde4488305
- MD5 SHA1 SHA512
Udspecificerendes/Kommunekemis/demasculinisation/Blizzard.dll
- SHA256 93324f2db1d28a6d9807e3c62a50bff245801fd52c951662dda6a4475fd1e99f
- MD5 141c12d2d2d9617f110794e283192a53
- SHA1 b5acb181250b314f04abf1fd20681b2be37701f0
- SHA512 14115ee5aa7115acab8cee929d5b4a29be993fa239480a6a734ab6aae70949732dd45627ebe0f41bdcae8362d183b2a94b7918ffa03d33571604013f5732b36c
- SSDEEP 384:wA1cx/42KUt/6ltsnVcI/v4pwLuaE0UqkVdWPd2u4jWgjvyXbxfQSDshCR7:zSZF8f+VnwpnV0mId2uMWgjvI1fZQCR
- MD5 SHA1 SHA512 SSDEEP
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
69168
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
CreateFileA
LoadLibraryA
Name
a
Size
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
b
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
c
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Udspecificerendes/Kommunekemis/demasculinisation/Bluetooth Suite help_LV.chm
- SHA256 dd081a00d47fdd8c6fb42b506bc3a55b49378dc44024f6b175dfcdada60a0440
- MD5 f317a63c298b7f31cb0a76ae84095be2
- SHA1 55f8b55ea5bc1c4548b579e261ea0482b4bf92cd
- SHA512 d209a9ffd3304fcb1288ffb164e71e0a4e7f4c412b722d2b82e4868135fa012cc8782d0e1730d22890bc01e11797e094c4e83b1950cd63ce6088c542179b4c97
- SSDEEP 768:R5AF7+9nLtI9Ybo2gRqq2x9IYWrE/6H6+MEULCw54YzryKdOFMOU9C:R47+9nhVs2cq3IZri6TILCgJ4FM99C
- MD5 SHA1 SHA512 SSDEEP
Udspecificerendes/Kommunekemis/demasculinisation/How-To CFF Extension.pdf
- SHA256 b085d1cdbcb15b6e8e12eb2b8f34d5e900509470bcfd49ab9565663960e2f38a
- MD5 180313065942d47df7858ade74cee19f
- SHA1 0371b23100df3fd5739585473c3718c4bf85e974
- SHA512 6764ac65d610b6f7e1f5c622a03752cef606840603285b5c49924f1a3f06c669c43a2d3083f3d823f457554a2205989e3d6b881189e3160a2e1adcbf21dd3996
- SSDEEP 6144:cbNke00sOHmmZx9VDwXJSCCCCCCCCCCCCMo6XHTa6aaFa50cZdD6N9S5uLJXe5n2:cRkNOHm0x9eXJSCCCCCCCCCCCCMTW5ed
- MD5 SHA1 SHA512 SSDEEP
Extracted URLs
-
file http://rcCheckButton.top
-
file http://www.codeproject.com/