8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771.zip
- SHA256 8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771
Password
infected
Overview
overview
10Static
static
1New folder...dor.js
windows7-x64
3New folder...dor.js
windows10-2004-x64
3New folder...002.js
windows7-x64
3New folder...002.js
windows10-2004-x64
3New folder...nt.dll
windows7-x64
1New folder...nt.dll
windows10-2004-x64
1New folder....0.dll
windows7-x64
1New folder....0.dll
windows10-2004-x64
1New folder...mp.dll
windows7-x64
1New folder...mp.dll
windows10-2004-x64
1New folder...st.exe
windows7-x64
1New folder...st.exe
windows10-2004-x64
1New folder...ce.ps1
windows7-x64
3New folder...ce.ps1
windows10-2004-x64
3New folder...n3.ps1
windows7-x64
3New folder...n3.ps1
windows10-2004-x64
3New folder...007.js
windows7-x64
3New folder...007.js
windows10-2004-x64
3New folder...st.ps1
windows7-x64
3New folder...st.ps1
windows10-2004-x64
3New folder...co.dll
windows7-x64
1New folder...co.dll
windows10-2004-x64
1New folder...009.js
windows7-x64
3New folder...009.js
windows10-2004-x64
3New folder...ult.js
windows7-x64
3New folder...ult.js
windows10-2004-x64
3New folder/Setup.exe
windows7-x64
10New folder/Setup.exe
windows10-2004-x64
10New folder...e3.dll
windows7-x64
3New folder...e3.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
New folder/Data/Config/test_vendor.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
New folder/Data/Config/test_vendor.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
New folder/Data/DOMCharacterData_data_error_002.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
New folder/Data/DOMCharacterData_data_error_002.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
Resource
win7-20241010-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
New folder/Data/MigrationService/dvatemporalxmp.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
New folder/Data/MigrationService/dvatemporalxmp.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
New folder/Data/MigrationService/helper/bin/wintoast.exe
Resource
win7-20241023-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
New folder/Data/MigrationService/helper/bin/wintoast.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
New folder/Data/Rapid/mysqli_poll_reference.ps1
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral14
Sample
New folder/Data/Rapid/mysqli_poll_reference.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral15
Sample
New folder/Data/Rapid/sort_variation3.ps1
Resource
win7-20240903-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral16
Sample
New folder/Data/Rapid/sort_variation3.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral17
Sample
New folder/Data/add_007.js
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
New folder/Data/add_007.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
New folder/Data/dom_test.ps1
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral20
Sample
New folder/Data/dom_test.ps1
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral21
Sample
New folder/Data/msenvico.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral22
Sample
New folder/Data/msenvico.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral23
Sample
New folder/Data/serialization_objects_009.js
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
New folder/Data/serialization_objects_009.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
New folder/Data/skipLazyInitialization_default.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
New folder/Data/skipLazyInitialization_default.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
New folder/Setup.exe
Resource
win7-20241010-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral28
Sample
New folder/Setup.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral29
Sample
New folder/sqlite3.dll
Resource
win7-20241010-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
New folder/sqlite3.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target 8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771.zip
- Size 4.0MB
- Sample250107-aceb1strbx
- SHA256 8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771
- MD5 4f8990ef52c83f8c0eeaf7e37f8bb831
- SHA1 3f95f80d5b0e1ab235889a0929944599bfea3c58
- SHA512 2081040a09e73252e80c4bb019228cd34c3548c3ce73dee2fd0ee2c1be11a474cdf89112351a0256b657e28e530ac067815cb83bfd08251128f508bd5dd43da4
- SSDEEP 98304:r/4wk6rYHqGcwLdRNO/d9M7Ko1JOzvIf2NTTkk6HcutLQ0cyLgE0LUt:dZtWNgeDHeIf2dQLQ0V0E0g
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
File Explorer
-
8b62a4d92cbfb4074bc17d26a4929611d5dd4d40448221d6b1b884fa095e1771.zip.rar 4.0MB
-
New folder/Data/Config/DisplayLanguageNames.de_CH.txt34KB
-
New folder/Data/Config/DisplayLanguageNames.el_GR_PREEURO.txt32KB
-
New folder/Data/Config/code6.txt270B
-
New folder/Data/Config/custom-hg-hello.txt366B
-
New folder/Data/Config/example.com_noroot_v1.0.1.txt136B
-
New folder/Data/Config/github.com_dmitshur-test_modtest5_v0.5.0-alpha.txt215B
-
New folder/Data/Config/mod_convert_glide.txt460B
-
New folder/Data/Config/mod_run_issue52331.txt704B
-
New folder/Data/Config/msg_30.txt.eml 345B
-
attachment-1250B
-
New folder/Data/Config/test_vendor.txt.js 1000B
-
New folder/Data/Config/todo.txt304KB
-
New folder/Data/Config/work_use_issue55952.txt165B
-
New folder/Data/DOMCharacterData_data_error_002.phpt.js 383B
-
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll.dll 545KB
-
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll.dll 187KB
-
New folder/Data/MigrationService/dvatemporalxmp.dll.dll 569KB
-
New folder/Data/MigrationService/helper/Blend.150x150.contrast-standard_scale-180.png.png 14KB
-
New folder/Data/MigrationService/helper/Locals3.png.png 9KB
-
New folder/Data/MigrationService/helper/bin/wintoast.exe.exe 348KB
-
New folder/Data/MigrationService/helper/common-icons.png.png 12KB
-
New folder/Data/Rapid/002.phpt10KB
-
New folder/Data/Rapid/005.phpt237B
-
New folder/Data/Rapid/bug38464.phpt306B
-
New folder/Data/Rapid/bug47054.phpt373B
-
New folder/Data/Rapid/bug47745.phpt242B
-
New folder/Data/Rapid/bug69975.phpt676B
-
New folder/Data/Rapid/bug78356.phpt471B
-
New folder/Data/Rapid/flexible-heredoc-complex-test1.phpt560B
-
New folder/Data/Rapid/mysqli_poll_reference.phpt.ps1 6KB
-
New folder/Data/Rapid/sort_variation3.phpt.ps1 4KB
-
New folder/Data/add_007.phpt.js 445B
-
New folder/Data/array_multisort_basic2.phpt806B
-
New folder/Data/bug47254.phpt512B
-
New folder/Data/bug75420.7.phpt313B
-
New folder/Data/bug76601-reload-child-signals.phpt2KB
-
New folder/Data/const.h51KB
-
New folder/Data/cpu_usage.png.png 209KB
-
New folder/Data/create_new_phar_b.phpt822B
-
New folder/Data/dom_test.inc.ps1 1KB
-
New folder/Data/ftp_mlsd_missing_directory.phpt375B
-
New folder/Data/magic_methods_014.phpt248B
-
New folder/Data/msenvico.dll.dll 683KB
-
New folder/Data/php_libmagic.h2KB
-
New folder/Data/readonly_class_missing_type1.phpt207B
-
New folder/Data/serialization_objects_009.phpt.js 540B
-
New folder/Data/session_set_save_handler_variation4.phpt2KB
-
New folder/Data/skipLazyInitialization_default.phpt.js 1KB
-
New folder/Data/zend_ini_scanner_defs.h204B
-
New folder/Setup.exe.exe 665.7MB
-
New folder/sqlite3.dll.dll 1.0MB
New folder/Data/Config/DisplayLanguageNames.de_CH.txt
- SHA256 8f302adcbfc601a5410d7c09ceb3e2ff867e5efc31204dba637b25a090a1b55a
- MD5 25e1b7c45d5fb1dbe6fe4a533c4722cb
- SHA1 2836b7a4d3a6fdb41739072093300df98bf4f3d2
- SHA512 218e5be434ea62429950a3fea75b601d74d35f65e8aa20c871e7623a7de678e6bfd85af62299d119b311295d1c7e7a708741f264f4bf074564300c2a54f819dc
- SSDEEP 768:5kWK3myuglze+LqxHAYBDhA7XSo2VimyfQXL:56P2omyfQb
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/Config/DisplayLanguageNames.el_GR_PREEURO.txt
- SHA256 210e62cf843f9e398e878fbd9502a68c66a2f2ab0ea2eb312b135c8f1807963d
- MD5 46b3a1b71a26e53ea8869c855131a5fb
- SHA1 1a925edf65b935d748b34a6ab0c422d7419bd654
- SHA512 046909c6166234ae18b690be0742206726716f4c3f6f8aaabdb98f4c6f5d035513c3af7233e51f4ec69b444b284e2c5e421a75a96931b9df6340780d0dc95886
- SSDEEP 384:LqGqfqYq5qrqequq7qDoqnq3qBqIqfqbq0Yeqeq8qvq1q+zPFz4z5FiQ4mWfX8R8:aYKz4z5FiQ4mEM2
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/Config/code6.txt
- SHA256 51fab753a2f49bab7b3d0745e27771dd9d58d5a5dd60c81390ae878fa95e094e
- MD5 b9babb266f182c22a4e2e80680b07b72
- SHA1 0d31b47ff587c1c516dc08f3f59ea60a94970df1
- SHA512 772f28dac16178163fe87eebaaa65f48e318ad9ceeea908556e40bb5a49c99d090b46b6c7dfb894920d8c596679fbe54d6e0879f82813ae279d423134b2033f2
- MD5 SHA1 SHA512
New folder/Data/Config/custom-hg-hello.txt
- SHA256 1058a99bd62d4b686c2f4602acb85eae6a5b6b05c2202150585a6e98cb1b2797
- MD5 9716121c5042516ca7388fd526b81df2
- SHA1 93467e2df5231d42c07162124a54053a168835d7
- SHA512 7e7994ab8fc51f1a2b6f31895c04a66f022706f44a7cfbd249e58459240d84303c2e7bf5830729fa109acfc4ab1b9db6dae21aa0db6da9071005d78245efee7b
- MD5 SHA1 SHA512
New folder/Data/Config/example.com_noroot_v1.0.1.txt
- SHA256 595975bc53a4f9094bb2793dd82bf51e80ebaf2d6b4c31d56fe77c0d9db7533c
- MD5 7288d609b53d947433d19929dc8a30f0
- SHA1 4482120804287d50e4167c340643c5b018266b2a
- SHA512 ce7da08eb7db96becef06c16a721637e4bae203c1f38b6eb8b1a63e89dfef01860461fb2654aeccabbefce9a61246fd6d36fe0247e0a893f5ece8946e0d3e338
- MD5 SHA1 SHA512
New folder/Data/Config/github.com_dmitshur-test_modtest5_v0.5.0-alpha.txt
- SHA256 82ae4cc41728d0b2eb84fe415153a3bd3b17d084827dce2f57f29707745e29ab
- MD5 3f47b6a55fbd2d5a8c99213d719709b0
- SHA1 7ab2139f567b317a35bd78906c4bb0d39fb35cdc
- SHA512 59eac9b5a35a22324c8ea5683e06c39908679c4f742875a3895f424b88d93c8ea5dd8c8825dd7a5e1d96510284f66c7bc73913fae1ba4439ee504310c8d44a72
- MD5 SHA1 SHA512
New folder/Data/Config/mod_convert_glide.txt
- SHA256 5e514f80ec4bbd5e93644f447b2e2b469f8edf09c541b54ac52b2c25673154c5
- MD5 f5dbc96107be0223dfbe9ead75586749
- SHA1 782657c1c053a3d69eecc4545c7dadb3499869e0
- SHA512 63aafcfb739ddb9ea00cfba6b7e90ae648e0696ddcc681e1f4b34f717df3e2bd8c9fddf86147f7e4bdf6bbc986810df33189a1c0e9cba9357bfed47e3d4f8f5f
- MD5 SHA1 SHA512
New folder/Data/Config/mod_run_issue52331.txt
- SHA256 d84b2ffa9261a15ca009c8e24dd7919d554811a03277f92a182450cd423dac95
- MD5 de6b86d9a5e674079e7ac7e77010b52d
- SHA1 0abf85928dc87816cb3d387af5515bff7c10c758
- SHA512 24fb1e21400daf6ab41900206dcaf20ff8b7d076bc072f7d9656b631c701e930f96fb973e6f11b5d8feb8175d58ea8df8402d39b18c1fa38eb2ea01bde6ce817
- MD5 SHA1 SHA512
New folder/Data/Config/msg_30.txt
- SHA256 c35da53f1c5bf7639417aecde7052db57700828fcff4600a81751ae13bac03a8
- MD5 c045ee85a52d1967d69de8a9614085bd
- SHA1 da33f4f914ef2abb8871a2edca2814df2c40043d
- SHA512 2f491e5ab0ffa3a3056042f8f5175934807683a01bff476c3e2b6560d455ad24ceaebf20e462baadb2b8211883e449af15ccf4dc6c11182b29fc8dec014d4cc9
- MD5 SHA1 SHA512
Password
infected
attachment-1
- SHA256 e06e74ede7f135bc1442aa463fcbcbf4dfa687f5c59b091d0c3cbbf00aa8265f
- MD5 62eb31b514e2b9f45309fdc6d540ecfc
- SHA1 40cf35a413957af1c940b52102d57920c62c77b8
- SHA512 e45ecaced6df476832a3c4f7b60e4be511cf88edb69b79ca4bad1017dc32d94e1b212ba22ccbd89b79fe914ee09e75f3395aed993340e25bfcebe5d434a94ce9
- MD5 SHA1 SHA512
New folder/Data/Config/test_vendor.txt
- SHA256 5912f1ba252bac927720d0342e63b16a7e273b63e097bb3d1c8e68f9b0703742
- MD5 80aec646e662ecdb8f7677b93f39aab7
- SHA1 5fd0591618895472bbfa350c9ea59356c93d8346
- SHA512 19e5d35c78cdfb64ca5caaeda5cd3b46dec21aa77c85d421959fa771614e5265602277c85b7557e58cae04d166feab5a9c5cb6c70c512a29852eb7b1a68fa078
- MD5 SHA1 SHA512
New folder/Data/Config/todo.txt
- SHA256 14ff2b92d86cf32a4ace3930f7871e12e3b4089297e2b0f5d8fa190d5e354765
- MD5 007fcd32bbf72f6d0db5c437574d3159
- SHA1 7391ec6d5c98495a3e39ab0965a9060b66c0bb71
- SHA512 60aa6da59f6d705fb7d4b7f46f3bddb875632f53f06339927cd0812a9ea4e414a35b7809d87e9466ce14997eefc026377e95b1ecb3355304e2fe332e7e857234
- SSDEEP 6144:4FxxisFtIKwQi6wwGqqUh163NBDszswZt+VtGcpdvX0h:4UsFbjqUhM3nQzswZt+Vtfxm
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/Config/work_use_issue55952.txt
- SHA256 cce99e4949e725f7cc51553e24a1f68d78f6d7260f4f8885eaf128ee30d75c73
- MD5 a6d8767473fc6131646148bdd488b3b4
- SHA1 35ae38eb82a547d6dd3350344e83dc77d377296f
- SHA512 70f7acbec33cf93f8d345723850ab5ad4067092bd4391299c8450cd1bb1e44b4529bd3b584519b2ea7fa8677d5348150ec6699caab4fa638d238ed7272b07ea2
- MD5 SHA1 SHA512
New folder/Data/DOMCharacterData_data_error_002.phpt
- SHA256 29d3e67c522205b50518a8df035cbc669203a0fa6d093084ddcd9f028c966d41
- MD5 1bce0f644543bdda362af19acb0c75cb
- SHA1 f5b834eb722ee6d65acc894ff0e4d25d2d95380e
- SHA512 6c35dc8d450d4062fd1da1417a97ddfdbcee10a35748a65259c78978146205d3a80f4e773b95dc70d6e86a36ac32f41fedc9b7e8f72a6fc048437ebba1e7c93f
- MD5 SHA1 SHA512
New folder/Data/Microsoft.Azure.ActiveDirectory.GraphClient.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4cd12bc688746afe7abba4f76aba706802032d0e5b04457afa0569d524b50ea8
- MD5 21e96d7a25f8725d8e08c0966aeaf5f3
- SHA1 537f9b5176cf3dfc11c1b3dd7fcc2a9074e6c8e9
- SHA512 0b4e24a192d01a6be6a296e41048344bb0d7f1cd23fc93ef05862f093253aef619623b52b2d0cc128fa6021ac5c2623e7d6aedc0f83568160478f65adb04d1c9
- SSDEEP 6144:QcJrEPv825N81G+gHUerEls+AiIWHQoQ5tgYbfAski8xfAskzAxTaj:o8M+herGsrUwtN9j
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
5e:de:6d:6c:75:e6:b4:46:e8:c6:bd:38:7b:26:8e:f5:11:aa:4d:83
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 23, 2015
Subject
CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:F528-3777-8A76,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:70:f4:18:bf:23:21:fc:50:9d:00:00:00:00:00:70
Issuer
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 20, 2015 - Jun 20, 2016
Subject
CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0a:2c:79:ae:d7:79:7b:a6:ac:00:01:00:00:01:0a
Issuer
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 4, 2015 - Sep 4, 2016
Subject
CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:33:26:1a:00:00:00:00:00:31
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 31, 2010 - Aug 31, 2020
Subject
CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:16:68:34:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Apr 3, 2007 - Apr 3, 2021
Minor OS version
0
Major OS version
4
Entry point
557390
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
x:\bt\541172\repo\src\dev\RestServices\GraphClientLibrary\Version1.5s\obj\amd64\Microsoft.Azure.ActiveDirectory.GraphClient.pdb
mscoree
_CorDllMain
Name
.text
Size
536KB
Virtual Size
536KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
New folder/Data/MigrationService/System.Web.Extensions.Design.VisualStudio.15.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 83a95d3b6444551b7bd2547ca6e5f6a5bc488e3b36087541211637201fd2b92c
- MD5 8ba1e3c39fcd5f405dc1fbd904624e51
- SHA1 36235632687a9f0145f8851531ed6ebd4ca8537c
- SHA512 db71b76256141ec90796261ef1f4e1417adedf22f9bf1dd314243d80bbe0d0585e0a66bcea6110d94a0bac1d09138b54236e123cb02e33f6752ca8a4e296d15a
- SSDEEP 768:ib7fhJUlFWUEUlyyffhlj8G3nkrtBVbh5WmgO8wQkkZ/Bl8STJsFqTEjZIdxv70t:0FQEUlxlj18VkSE8W281L7OizU
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
93:2c:22:41:88:8f:fd:c9:8c:68:fd:42:5d:39:ff:4c:c1:4b:69:19:b4:3b:97:92:eb:f2:f8:56:8f:c7:57:1b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 31, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
4
Entry point
186902
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\dbs\sh\ddvsm\0726_105248\cmd\e\out\Intermediate\vsip\system.web.extensions.design.visualstudio.csproj_34353DAD\objr\x86\System.Web.Extensions.Design.VisualStudio.15.0.pdb
mscoree
_CorDllMain
Name
.text
Size
175KB
Virtual Size
174KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
New folder/Data/MigrationService/dvatemporalxmp.dll
- IMPHASH 892a6a56a33d14639bb506d992f28935
- SHA256 a0bd236d74d13a8b878d28a78340f552b69f178a133c424391d3cf5054ebb865
- MD5 6264581b447eee4ea451521f2ea40184
- SHA1 257d8ba2fe669c40dc9c0a6e10bd74b29b4bf7ae
- SHA512 a3f765df96e9393165c89527593407f0dfa0d7a500c7b08452d2f68b3979931d61424a09bc518826a3aac04ed50ab7456ef911d2d75029a2516e880199d2bdf1
- SSDEEP 6144:kvOKVHnsSxWPo7Zb2d1bTbFv5SOGHD30OZkkMO/so4m:9KVHFRUfSpj9
- MD5 SHA1 SHA512 SSDEEP
Password
infected
PE Signature issue
Digest
d1:0a:c0:92:13:70:87:1d:dd:36:b4:12:75:e0:c5:31:4c:39:96:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
May 29, 2015
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
6c:59:ef:a9:e1:00:e1:0e:e3:06:ba:8f:e0:29:25:59
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jun 7, 2012 - Jun 6, 2022
Subject
SERIALNUMBER=2748129,CN=Adobe Systems Incorporated,OU=Photoshop\, Bridge - SHA256,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
35:a8:4f:a5:03:f8:9b:49:83:96:bb:48:91:68:a5:80
Issuer
CN=Symantec Class 3 Extended Validation Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jan 14, 2014 - Jan 7, 2016
Minor OS version
2
Major OS version
5
Entry point
327496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\DynamicLinkMediaServer8\releases\2014.03\shared\adobe\dvatemporalxmp\lib\win\release\64\dvatemporalxmp.pdb
boost_system
?system_category@system@boost@@YAAEBVerror_category@12@XZ
dvacore
??1?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
??0Guid@utility@dvacore@@QEAA@KGGEEEEEEEE@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@AEBV01@@Z
?MixInData@MixHash@utility@dvacore@@CAXAEAVHashValue@23@PEBE_K@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@$$QEAV01@@Z
?AsUTF8String@Guid@utility@dvacore@@QEBA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?CreateUnique@Guid@utility@dvacore@@SA?AV123@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
?c_str@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEBAPEBEXZ
?Dispose@SmallBlockAllocator@utility@dvacore@@YAXPEAX_K@Z
??Y?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV01@AEBV01@@Z
?reserve@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAX_K@Z
??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@$$QEAV01@@Z
?append@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAAAEAV12@AEBV12@@Z
?UTF8to16@utility@dvacore@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@4@PEAW4UnicodeErrorCode@12@PEA_K@Z
?UTF16to8@utility@dvacore@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@AEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@4@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@AEBV01@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@QEBAHAEBV12@@Z
?GetJSONUTF8String@serialization@dvacore@@YA?AV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@AEBVany@boost@@@Z
?_Myptr@?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEBAPEBEXZ
?JSONParse@serialization@dvacore@@YA?AV?$shared_ptr@Vany@boost@@@boost@@PEBE@Z
?ObjectHasProperty@serialization@dvacore@@YA_NAEBV?$map@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@V?$shared_ptr@Vany@boost@@@boost@@U?$less@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@2@@SmallBlockAllocator@utility@2@PEBD@Z
?GetVariantInObject@serialization@dvacore@@YA?AV?$shared_ptr@Vany@boost@@@boost@@AEBV?$map@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@V?$shared_ptr@Vany@boost@@@boost@@U?$less@V?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@2@@SmallBlockAllocator@utility@2@PEBD@Z
?AddToObject@serialization@dvacore@@YAXAEAVany@boost@@PEBDAEBV34@@Z
??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@PEBE@Z
??1?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@XZ
??0?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@QEAA@AEBV01@@Z
?Allocate@SmallBlockAllocator@utility@dvacore@@YAPEAX_K@Z
adobexmp
ord17
ord76
ord75
ord74
ord73
ord72
ord71
ord70
ord69
ord68
ord66
ord50
ord61
ord37
ord23
ord22
ord21
ord20
ord16
ord15
ord104
ord107
ord4
ord103
ord116
ord106
ord101
ord92
ord90
ord89
ord88
ord1
ord2
ord3
ord5
ord6
ord7
ord8
ord9
ord10
ord11
ord13
ord14
ord18
ord19
ord24
ord25
ord26
ord27
ord28
ord29
ord30
ord31
ord32
ord33
ord34
ord35
ord36
ord40
ord41
ord42
ord43
ord44
ord45
ord46
ord47
ord48
ord49
ord38
ord39
ord60
ord51
ord54
ord55
ord56
ord57
ord59
ord52
ord53
ord58
ord124
ord125
ord126
ord65
ord64
ord63
ord62
ord67
ord78
ord79
ord80
ord81
ord82
ord83
ord84
ord85
ord86
ord87
ord91
ord93
ord123
ord94
ord95
ord96
ord97
ord98
ord99
ord100
ord102
ord108
ord109
ord105
ord110
ord111
ord112
ord113
ord114
ord115
ord117
ord118
ord119
ord120
ord77
dvametadata
?NamespaceDefinition@dvametadata@@YA?AV?$shared_ptr@USchemaDefinition@dvametadata@@@boost@@AEBV?$basic_string@EU?$char_traits@E@std@@V?$STLAllocator@E@SmallBlockAllocator@utility@dvacore@@@std@@@Z
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
CloseHandle
CreateEventA
GetSystemTimeAsFileTime
WaitForSingleObject
SetEvent
EncodePointer
DecodePointer
Sleep
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
msvcp100
?_BADOFF@std@@3_JB
?exceptions@ios_base@std@@QEAAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Orphan_all@_Container_base0@std@@QEAAXXZ
?_Swap_all@_Container_base0@std@@QEAAXAEAU12@@Z
??0id@locale@std@@QEAA@_K@Z
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
msvcr100
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_malloc_crt
_initterm
_initterm_e
free
??0exception@std@@QEAA@AEBV01@@Z
_encoded_null
_amsg_exit
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crt_debugger_hook
__clean_type_info_names_internal
??0exception@std@@QEAA@AEBQEBDH@Z
__C_specific_handler
??3@YAXPEAX@Z
??0exception@std@@QEAA@AEBQEBD@Z
?what@exception@std@@UEBAPEBDXZ
??1exception@std@@UEAA@XZ
??2@YAPEAX_K@Z
_CxxThrowException
fopen
memcpy
memmove
__CxxFrameHandler3
printf
fflush
__iob_func
memcmp
memchr
memset
_strtoi64
sprintf
_purecall
??0bad_cast@std@@QEAA@PEBD@Z
??1bad_cast@std@@UEAA@XZ
??8type_info@@QEBA_NAEBV0@@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
fclose
strncpy
fread
??_V@YAXPEAX@Z
??0Marker@dvatemporalxmp@@QEAA@AEBV01@@Z
??0Marker@dvatemporalxmp@@QEAA@AEBV01@_N@Z
??0Marker@dvatemporalxmp@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??0Marker@dvatemporalxmp@@QEAA@XZ
??0MarkerTypeFilter@dvatemporalxmp@@QEAA@XZ
??0XMPCuePointParam@dvatemporalxmp@@QEAA@PEBD0@Z
??0XMPDocOpsTemporal@dvatemporalxmp@@QEAA@XZ
??0XMPKeywordData@dvatemporalxmp@@QEAA@AEBV01@_N@Z
??0XMPKeywordData@dvatemporalxmp@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVXMPKeywordExtension@1@@Z
??0XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@AEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J1@Z
??0XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@EAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J1@Z
??0XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@PEBD0_J10000AEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@000@Z
??0XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@PEBD0_J111110000AEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@000@Z
??0XMPTrack@dvatemporalxmp@@QEAA@PEBD0_J1@Z
??0XMPTrack@dvatemporalxmp@@QEAA@PEBD_J1@Z
??0XMPTrack@dvatemporalxmp@@QEAA@XZ
??0XMPTrack@dvatemporalxmp@@QEAA@_J0@Z
??0XMPTrack@dvatemporalxmp@@QEAA@_J@Z
??1Marker@dvatemporalxmp@@QEAA@XZ
??1MarkerTypeFilter@dvatemporalxmp@@UEAA@XZ
??1XMPCuePointParam@dvatemporalxmp@@QEAA@XZ
??1XMPDocOpsTemporal@dvatemporalxmp@@QEAA@XZ
??1XMPTemporalMetadataCollector@dvatemporalxmp@@QEAA@XZ
??1XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA@XZ
??1XMPTrack@dvatemporalxmp@@QEAA@XZ
??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_K@Z
??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_KPEAX@Z
??2?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAPEAX_KUnothrow_t@std@@@Z
??3?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@SAXPEAX_K@Z
??4?$Allocated@VMarkerTypeFilter@dvatemporalxmp@@@SmallBlockAllocator@utility@dvacore@@QEAAAEAV0123@AEBV0123@@Z
??4Marker@dvatemporalxmp@@QEAAAEAV01@AEBV01@@Z
??8Marker@dvatemporalxmp@@QEBA_NAEBV01@@Z
??9Marker@dvatemporalxmp@@QEBA_NAEBV01@@Z
??_7MarkerTypeFilter@dvatemporalxmp@@6B@
?AddIngredientXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD111111111@Z
?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J11111111111PEBD22_N3@Z
?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J11111111111PEBD22_N@Z
?AddIngredientXMPTemporal@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J111PEBD22@Z
?AddKeyword@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAAXAEBVXMPKeywordData@2@@Z
?AddMarker@XMPTrack@dvatemporalxmp@@QEAAXAEBVXMPTemporalMetadataInfo@2@@Z
?AddMarker@XMPTrack@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@AEBVXMPTemporalMetadataInfo@2@@Z
?AddMarkerType@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?AddMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@@Z
?AddTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBDAEBVXMPTrack@2@@Z
?ApplyTemplateToPantry@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@K@Z
?BranchXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV12@PEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z
?ClearIngredients@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?ClearKeywords@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAAXXZ
?ClearMarkers@XMPTrack@dvatemporalxmp@@QEAAXXZ
?ConvertExternalTimeStringToTicks@XMPDocOpsTemporal@dvatemporalxmp@@SA_JPEBDPEA_J1_J@Z
?ConvertExternalTimeStringToTicks@XMPDocOpsTemporal@dvatemporalxmp@@SA_JPEBD_J11@Z
?ConvertTicksToExternalTimeString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J111_N@Z
?ConvertTicksToSeconds@XMPDocOpsTemporal@dvatemporalxmp@@SAN_J@Z
?CreateExternalFrameRateString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J1@Z
?CreateID@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD@Z
?CreatePartString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_J111111PEBD@Z
?DeleteAllTracks@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?DeleteTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?DeleteTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NPEBVXMPTrack@2@@Z
?EnsureIDsExist@XMPDocOpsTemporal@dvatemporalxmp@@QEAA_NK@Z
?ExtractXMPMetaFromPantry@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEBV3@PEBD@Z
?GetComment@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetCuePointList@Marker@dvatemporalxmp@@QEBAAEBV?$vector@UCustomMarkerParam@dvatemporalxmp@@V?$allocator@UCustomMarkerParam@dvatemporalxmp@@@std@@@std@@XZ
?GetCuePointParamList@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAAEBV?$vector@VXMPCuePointParam@dvatemporalxmp@@V?$allocator@VXMPCuePointParam@dvatemporalxmp@@@std@@@std@@XZ
?GetCuePointType@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetDuration@Marker@dvatemporalxmp@@QEBA?AVTickTime@dvamediatypes@@XZ
?GetDuration@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetDurationFrameRateDenominator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetDurationFrameRateNumerator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetExclusiveMode@MarkerTypeFilter@dvatemporalxmp@@QEAA_NXZ
?GetFilterList@MarkerTypeFilter@dvatemporalxmp@@QEAA?AV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@XZ
?GetFrameRateDenominator@XMPTrack@dvatemporalxmp@@QEBA_JXZ
?GetFrameRateNumerator@XMPTrack@dvatemporalxmp@@QEBA_JXZ
?GetGUID@Marker@dvatemporalxmp@@QEBA?AVGuid@utility@dvacore@@XZ
?GetInfoForm@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA?AW4_infoFormEnum@12@XZ
?GetIngredientField@XMP_internalIngredient@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_ingredientFieldEnum@12@@Z
?GetKey@XMPCuePointParam@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetKeyPtr@XMPCuePointParam@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetKeywords@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAAEBV?$vector@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@XZ
?GetLocation@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetMarkerField@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_infoFieldEnum@12@@Z
?GetMarkerFieldPtr@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4_infoFieldEnum@12@@Z
?GetMarkerID@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetMarkers@XMPTrack@dvatemporalxmp@@QEBAAEBV?$multimap@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@@std@@XZ
?GetName@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetPartChangeID@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@PEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?GetPartChangeID@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NPEBDPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetProbability@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetReportedClippedDuration@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetReportedClippedStartTime@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetSpeaker@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetStartTime@Marker@dvatemporalxmp@@QEBA?AVTickTime@dvamediatypes@@XZ
?GetStartTime@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetStartTimeFrameRateDenominator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetStartTimeFrameRateNumerator@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBA_JXZ
?GetTarget@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetTrack@XMPDocOpsTemporal@dvatemporalxmp@@QEAAPEAVXMPTrack@2@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetTrackName@XMPTrack@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetTrackType@XMPTrack@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetType@Marker@dvatemporalxmp@@QEBA?AV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@XZ
?GetValue@XMPCuePointParam@dvatemporalxmp@@QEBAXPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetValuePtr@XMPCuePointParam@dvatemporalxmp@@QEBAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetXMPTemporalMetadataInfoCollection@XMPTemporalMetadataCollector@dvatemporalxmp@@QEBAAEBV?$multimap@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@@std@@XZ
?HasPartChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEBACPEBD0@Z
?HasPartChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEBACPEBDAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z
?IngredientListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?IngredientListIteratorBegin@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@XZ
?IngredientListIteratorEnd@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@XZ
?IsDirty@XMPDocOpsTemporal@dvatemporalxmp@@QEBA_NXZ
?KeywordListIteratorBegin@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@@std@@XZ
?KeywordListIteratorEnd@XMPTemporalMetadataInfo@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPKeywordData@dvatemporalxmp@@V?$allocator@VXMPKeywordData@dvatemporalxmp@@@std@@@std@@@std@@XZ
?LookupXMPPantryPathGivenInstanceId@XMPDocOpsTemporal@dvatemporalxmp@@SA_NAEBV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?MarkerListIteratorBegin@XMPTrack@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@XZ
?MarkerListIteratorEnd@XMPTrack@dvatemporalxmp@@QEAA?AV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@XZ
?NewXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z
?NoteChange@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXAEAV?$vector@PEBDV?$allocator@PEBD@std@@@std@@@Z
?NoteChange@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD@Z
?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD1AEAUXMP_DateTime@@K@Z
?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBD1K@Z
?OpenXMP@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@PEBDK@Z
?PantryListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?ParseExternalFrameRateString@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEBDPEA_J1@Z
?ParsePart@XMPDocOpsTemporal@dvatemporalxmp@@SAXPEBDPEA_J11111_JPEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD0AEAUXMP_DateTime@@K@Z
?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD0K@Z
?PrepareForSave@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBDK@Z
?ReadAllMarkers@dvatemporalxmp@@YAXAEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@AEAV?$vector@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@V?$allocator@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@@std@@@std@@@Z
?RemoveAllMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXXZ
?RemoveIngredient@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXH@Z
?RemoveIngredient@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@VXMP_internalIngredient@dvatemporalxmp@@@std@@@2@$00@std@@@std@@@std@@@Z
?RemoveMarker@XMPTrack@dvatemporalxmp@@QEAAXV?$_Tree_iterator@V?$_Tree_val@V?$_Tmap_traits@_JVXMPTemporalMetadataInfo@dvatemporalxmp@@U?$less@_J@std@@V?$allocator@U?$pair@$$CB_JVXMPTemporalMetadataInfo@dvatemporalxmp@@@std@@@4@$00@std@@@std@@@std@@@Z
?RemoveMarkerType@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?RemoveMarkerTypes@MarkerTypeFilter@dvatemporalxmp@@QEAAXAEBV?$set@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@U?$less@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@V?$allocator@V?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@2@@std@@@Z
?RunAllTests@dvatemporalxmp@@YAXXZ
?RunGeneralTest@dvatemporalxmp@@YAXXZ
?RunImportTest@dvatemporalxmp@@YAXPEAD@Z
?RunPerformanceTest@dvatemporalxmp@@YAXXZ
?SetAppName@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXPEBD@Z
?SetComment@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetCuePointList@Marker@dvatemporalxmp@@QEAAXAEBV?$vector@UCustomMarkerParam@dvatemporalxmp@@V?$allocator@UCustomMarkerParam@dvatemporalxmp@@@std@@@std@@@Z
?SetCuePointType@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetDuration@Marker@dvatemporalxmp@@QEAAXAEBVTickTime@dvamediatypes@@@Z
?SetExclusiveMode@MarkerTypeFilter@dvatemporalxmp@@QEAAX_N@Z
?SetIngredientField@XMP_internalIngredient@dvatemporalxmp@@QEAAXW4_ingredientFieldEnum@12@PEBD@Z
?SetLocation@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetName@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetProbability@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetSpeaker@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetStartTime@Marker@dvatemporalxmp@@QEAAXAEBVTickTime@dvamediatypes@@@Z
?SetTarget@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?SetTrackName@XMPTrack@dvatemporalxmp@@QEAAXPEBD@Z
?SetTrackType@XMPTrack@dvatemporalxmp@@QEAAXPEBD@Z
?SetType@Marker@dvatemporalxmp@@QEAAXAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?StripXMPExceptInstanceID@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?TrackListChanged@XMPDocOpsTemporal@dvatemporalxmp@@QEAAXXZ
?TrackListIteratorBegin@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPTrack@dvatemporalxmp@@V?$allocator@VXMPTrack@dvatemporalxmp@@@std@@@std@@@std@@XZ
?TrackListIteratorEnd@XMPDocOpsTemporal@dvatemporalxmp@@QEAA?AV?$_Vector_iterator@V?$_Vector_val@VXMPTrack@dvatemporalxmp@@V?$allocator@VXMPTrack@dvatemporalxmp@@@std@@@std@@@std@@XZ
?Validate@MarkerTypeFilter@dvatemporalxmp@@QEAA_NAEBV?$basic_string@GU?$char_traits@G@std@@V?$STLAllocator@G@SmallBlockAllocator@utility@dvacore@@@std@@@Z
?WriteAllMarkers@dvatemporalxmp@@YAXAEBV?$vector@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@V?$allocator@V?$shared_ptr@VMarker@dvatemporalxmp@@@boost@@@std@@@std@@AEAV?$TXMPMeta@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@@_J2@Z
?debug_Dump@XMPCuePointParam@dvatemporalxmp@@QEBAXXZ
?debug_Dump@XMPDocOpsTemporal@dvatemporalxmp@@QEBAXXZ
?debug_Dump@XMPTemporalMetadataCollector@dvatemporalxmp@@QEBAXXZ
?debug_Dump@XMPTemporalMetadataInfo@dvatemporalxmp@@QEBAXXZ
Name
.text
Size
348KB
Virtual Size
347KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
186KB
Virtual Size
186KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=2, id=158, productName=VS2010 build 30319, version=30319,
count=12, id=170, productName=VS2010 build 30319, version=30319,
count=4, id=171, productName=VS2010 build 30319, version=30319,
count=4, id=156, productName=VS2010 build 30319, version=30319,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,
count=7, id=156, productName=VS2010 SP1 build 40219, version=40219,
count=249, id=1, productName=Unmarked objects,
count=12, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=155, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,
New folder/Data/MigrationService/helper/Blend.150x150.contrast-standard_scale-180.png
- SHA256 c16fc15f3bb70d7a62e117d0ff10cea05e4ec511c7eec8a7497c87b9fe902bb1
- MD5 f6915fb1dcadcbdd552edbdc9b39d739
- SHA1 b761a09c0616f0b4fb454028279838f954f4df95
- SHA512 be06edf4bdfbc5c12b7667be5aec46a55ec91237f2e4fab53a409aba571f4e183d5c2013b19eb7a1ab2e1caa84bebcb81d00a262eefae2ccabd67880257c31fa
- SSDEEP 384:nc29pHVf0mCxx7EKypiX8ldusGJXSnzF0aXUGh1MBHV7zeDnUwE:ncipHVf0mCPxG5isGJ+ZOPz8UwE
- MD5 SHA1 SHA512 SSDEEP
Password
infected
New folder/Data/MigrationService/helper/Locals3.png
- SHA256 a502d521a4bcd92b4c39422cf92e95234ed2f25670ffe9d1ffc32fed8b127e66
- MD5 607ba786983350e4175f1bd3a93126cb
- SHA1 6c8682d19346851b9e933b486bdc8ae1f96df1a8
- SHA512 4e71b650290e05b509c6cf8bd799064184b3ff6ebfe4326b4cc424b2adf0c9ee4ca12bdacc734c6c322cd115c2fc5f662db3d1f62860798810df27abc77abaa7
- SSDEEP 192:wK+4h/REq9WKH6Li9tPInhI6vCgKEY4eatPb1AECNqAbnXtfj:m4Baq9JHYi9uy5c1tNb1khnXtfj
- MD5 SHA1 SHA512 SSDEEP
Password
infected
New folder/Data/MigrationService/helper/bin/wintoast.exe
- IMPHASH 83d6dfb6e524efe71fa17feb7b1990ff
- SHA256 18ff47cd790b9079dac609b1bc69b139bc28963a7ea67d4668eb4ffed18f1d78
- MD5 b412b24330409e5917080d3aa961789c
- SHA1 78b29c6322f7233020d17b2e65906fb476bb068d
- SHA512 ba52febae8544b9d68f3a1e6dd8ce7346b85eab749e68d75b68c35742ab3095eb64d2cb66ff387b7478ad305ed776f82e1a4d818a7b3b6546361566757f70b39
- SSDEEP 6144:LnbM/cNNCM73sOMHjTMVq2dkNBlQhEtqGaNnCohoE+rsrw:9N9kjkq2yZntq5NnCo8oE
- MD5 SHA1 SHA512 SSDEEP
Password
infected
Digest
b5:07:f1:5b:e2:1b:8a:63:df:49:e3:c3:20:4e:67:e4:2f:60:87:11:5e:11:2d:6d:8d:86:10:45:c9:78:3b:8d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Johannes Schindelin,O=Johannes Schindelin,ST=Nordrhein-Westfalen,C=DE
Chains
Nov 3, 2022
CN=Johannes Schindelin,O=Johannes Schindelin,ST=Nordrhein-Westfalen,C=DE
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Johannes Schindelin,O=Johannes Schindelin,ST=Nordrhein-Westfalen,C=DE
Serial Number
7d:ed:cb:b3:d5:2b:c5:76:62:19:ab:48:a2:d9:c1:9c
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2022 - May 19, 2023
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
69404
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\a\1\s\git-sdk-64\usr\src\build-extra\mingw-w64-wintoast\src\wintoast\example\console-example\x64\Release\WinToast Console Example.pdb
kernel32
GetEnvironmentVariableW
GetFileAttributesW
RaiseException
GetCurrentProcess
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LoadLibraryW
K32GetModuleFileNameExW
Sleep
WriteConsoleW
CreateFileW
HeapSize
ReadConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
CloseHandle
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetCurrentThreadId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
ReadFile
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
RtlUnwind
ole32
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
PropVariantClear
CoTaskMemAlloc
Name
.text
Size
211KB
Virtual Size
211KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.msvcjmc
Size
1024B
Virtual Size
831B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=30795,
count=171, id=261, version=30795,
count=17, id=260, version=31616,
count=10, id=259, version=31616,
count=87, id=261, version=31616,
count=21, id=260, version=30795,
count=5, id=257, version=30795,
count=112, id=1, productName=Unmarked objects,
count=2, id=261, version=31630,
count=1, id=255, version=31630,
count=1, id=258, version=31630,
New folder/Data/MigrationService/helper/common-icons.png
- SHA256 e41fc72402122e20d1a62c456d59cf7bafccd779509d12edd5f29889b3555e75
- MD5 7dbe6f5a7aaa2d84e158d123921c3c65
- SHA1 d1e79485e9ba7b7ba97c086197483200aed9d714
- SHA512 0559b813fc34759c5ac2eb50a7b29d90bd0c5e64642a419da869570cf96795954be20dde4b1e40ad5057f8a8c9d77eba1e2a197c34cb97854b7e8d41d6f02d3a
- SSDEEP 192:b4rVYsTbvQeD1KUiW9HsD5Zlp/V6zPGK0qBXg7V2kbLNZXHMyjugC2v:b4rWsTMeDliOIdkbiqBQY8Z8l9m
- MD5 SHA1 SHA512 SSDEEP
Password
infected
New folder/Data/Rapid/002.phpt
- SHA256 afb9e68095fadce21dfeda5ca56b179e06b71a33561b79b14970549d1844f4cf
- MD5 0c5faacc744b0b64a316b3dba44fa952
- SHA1 e9df787da4d7c8e8c6dcc32569dcf7bc24ec816f
- SHA512 869f55eb6ce92c1f1e28828dd6bfb0c652c6b5220abece4b3777447039b76dc4c560ff2ac3be0ebd783d7e6103a7cc62697a6884f5dbfc06f76ca98f50616e38
- SSDEEP 192:zAKI905nAtjt+4+GE5Kfz8uOzXvaJTDqQHyfP0eENvK9IiAiaR9eCnrLvI8nFw6S:z2fdX5a
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/Rapid/005.phpt
- SHA256 1d6d28e9eb0115649bc6f8e93f19faef796c2e3d698f36656db57c08a5d4e3f9
- MD5 d066a07ca1968554159c9d24bae19674
- SHA1 8ff65bfbb685f64b3e4bb74d970f9eef42d19c1a
- SHA512 a11ed9144b474803908f27577b0553b3374fc0bd55ebbf80357bff1c0469fabac94919ed3700ae903148bed55ae164f3217fafa116bdb0910068e5cf3a0543f9
- MD5 SHA1 SHA512
New folder/Data/Rapid/bug38464.phpt
- SHA256 b3b165faa6357706ef6fde83f38dab9b6eb3904caefaf1d4b73a82694e0ca264
- MD5 bd72551de01c5472c410897f3ba12c95
- SHA1 edd2465c8f73b2a58f1d08d991251021e493afb2
- SHA512 99846e8ac13483069dbff90d9203acb7971d08fac0610cd89df79b0d264d0e88cb4cf0c4652db4bb28c15469c0f53d88eb1a5adc4c0c101198850daf6bde1972
- MD5 SHA1 SHA512
New folder/Data/Rapid/bug47054.phpt
- SHA256 073cc00d74ecd0f32ba3df8e7529ad500b021fc1f07b08512908d644a5f42d2e
- MD5 484075f9d354a92f68a40a2861b7ab43
- SHA1 f00f003a86be4effe6e739fbb62cd34f2e1adfc0
- SHA512 a20c10fd061cb1e503020ec15e17caf3293117e8cb4a34d1de5d5397890d5502ba5f0f5ba0d1ed7a4f706ad4a62fafc3d9e4d9d081ba3f9912fda447c584aec2
- MD5 SHA1 SHA512
New folder/Data/Rapid/bug47745.phpt
- SHA256 aa69716fa01a7c3e24d9e701e0c137368c20cad5ec809687501c70c5efb986fd
- MD5 8a78a221042641ec789590f65c0d7f17
- SHA1 feeb81e30c8cf0d718df26d46a4915d5c499ff7d
- SHA512 b9ccdd272c0602242960f9a7d113fe534375b6047c9e9dc78422124e4d8bd4f09ff20eb42a49a00b2a9a47120ed451410c1f664e508dab13adbe43e059af3f52
- MD5 SHA1 SHA512
New folder/Data/Rapid/bug69975.phpt
- SHA256 6ddf2fffb1cd91d711f2e728aeb233168a6992e3aed1328b33d1bc9dfd5e3e3a
- MD5 c44ef95ca44b3b4be4ca6ec835b84d9c
- SHA1 b9a18a8363552583ac069636a1299b9df9c062dc
- SHA512 adb977c51a17cef1302bc949eb622e07a388ca30e03ed9fb9c23ca86e61869491696c26d4af549d34a7bfa2edfb0d35a16f160d0b7e628b78dd80bf68d9a8120
- MD5 SHA1 SHA512
New folder/Data/Rapid/bug78356.phpt
- SHA256 2146a75b444f3325d1821afadb0fa5fc621294ce682c41cb733bb58ae52eef07
- MD5 e7645bc99821b282623f7dabe0ce7b32
- SHA1 d5a456d3fc69f5f3a151b3c8f1a235d1c3f7453a
- SHA512 ee2c1f62eea0b2015769b0bfb3b6d6a2475f96742e806ad1a00333acb65539ec4823eb2b3c935e85eaf792c79159a7edc793a5b3bc4482b3950e9dc06718225d
- MD5 SHA1 SHA512
New folder/Data/Rapid/flexible-heredoc-complex-test1.phpt
- SHA256 8c21ef0667ccbb39f63c25adde34dea005cb7a91dae07136ce9ae0078c0bac4e
- MD5 fde39204de6226efadea2f555661d5d6
- SHA1 905f46b21b295a21ad20c9c85a0cb2810f469561
- SHA512 a142cfb1758b6aa99e48ba2481dcb07269388920b83f530ebe2bbf2b1abab4a0109bd68400f0247a285d39b6313d81f7674c7fbdaae9e06eebad7fe3b71120e8
- MD5 SHA1 SHA512
New folder/Data/Rapid/mysqli_poll_reference.phpt
- SHA256 0e8be1a03e075581b989fa984a7ec0cd1e40f0824bb1cf19ae792eb6e2305cd7
- MD5 5c3eea468e40d772d36669a3fd369c8d
- SHA1 8faa14a16b17bac31a717835c620c57996cb89e8
- SHA512 a403e29ba79ffe7a061107a20118ae787bda92a53c7cecba7631e51b420751bf693202e88e2bf2c619af3762e896a9f60909bc1de55f6bd3cbdcc61e16d71a43
- SSDEEP 192:bvMsdqBiQePgqB1Q38PgqBQQT8PsdLDPn1FPsNygqhOlC8P4:bvHdqBnqBUqBdd32qhb
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/Rapid/sort_variation3.phpt
- SHA256 6d116bc991be2e5618c6efab8f47b5b83952442f8d2cd0a5dbc5db6a91fdebe8
- MD5 d5354d13001d4f86881248ddc952da6e
- SHA1 a8aa74c0b727d0b7aed7cf9b5ae9a96636b3f2be
- SHA512 9fc45066e50fb69a49aa4dcd6a7a98ed7a5186eb628fd219494059f98fba7eb084b8a821fe5178c010685e028290d0cd6c3852ae7ed12d7d70de8eb7ce055a9a
- SSDEEP 48:M2/+Cs0v8954hj05JcGt0XBqWtWKcBFPfhAv7FPfhAviFPfhc/6vP6v+kPzv0Pzs:MBN0hj0axgPapaUm/6P6+aTKTzHZ1ZK9
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/add_007.phpt
- SHA256 0fd0f08e8d608bb3c46c3d242e5758bea99ea0c8eb7c19c87ea598a0475d6e29
- MD5 7b7bd886db62b3ca4d25e7df4639f1a5
- SHA1 e842536bd398b22df29b527ac6ba613fefe170d0
- SHA512 1215f5560e8347361bd1f242d7b45538703c2e577b5ab7d88f81c766dd9b5d2e3359c7e9f1722e046ab233b8ef1c0a723b94942cef6aa88f24cc01f07e02bc79
- MD5 SHA1 SHA512
New folder/Data/array_multisort_basic2.phpt
- SHA256 7d913c8c1371dfb0c9949f8ca9b5110f438331d8c7a8ef69fd5e32d22654eea9
- MD5 8fabfcc8b6ffeddf5bc9b10d1df8eac9
- SHA1 6a45f58a59075d96dcde7591771f6aac2527f5c1
- SHA512 b9b0cffc2b570a38b8a96e7c294d57ee8133bf3c08d5bb6c77fee99e94baa2eb876630ac426e0776a7bafa261bf163918c218b8f76f8635e5c6d119293cd5dce
- MD5 SHA1 SHA512
New folder/Data/bug47254.phpt
- SHA256 7158377b543f4b7edbb25a4284cb580f10f995f42d69da808fcc4d97c5881113
- MD5 124566e01f194e82ed76a9621ed069c7
- SHA1 8253c51a7f1af6441d66ce6ab463b0f1109a4fe9
- SHA512 8daf619115ce791413bdb7426afb60513dfdd5a85e7f8894f898ff1bf38b12a1f5a5489b144d6fdc4e3c8a0372778fa091e3cc4ef40c18c6042f134a8e9de7ae
- MD5 SHA1 SHA512
New folder/Data/bug75420.7.phpt
- SHA256 14df84cb519a2ead9201daab647cb15ee3c4ebec8523937a493fefc4b43d00e0
- MD5 9b26afadc7e9057f4a1ccae684fba4d0
- SHA1 bd3159ea3201891f13dbd391d05d3de828b3ce99
- SHA512 3ed9131f78a1657af7733a0b10f34372a305e5947876eeca1f35ab83fa1d7055f9e7b9f970544c3d4962ebd94064e272a3fe1cbc36a71f919dfeda8e6a1486cb
- MD5 SHA1 SHA512
New folder/Data/bug76601-reload-child-signals.phpt
- SHA256 e130ae7b8cfed7c1261e6bc1243724b59c86a241a57cdf8eab3c97c11cd2481b
- MD5 cbb7d34d44ae04d69968e299cdfcda71
- SHA1 3295ab8d8ab61452820cd70424baf52d9f9a9085
- SHA512 62faa16f4a2acaeace293f4e9f0cd03e60fc717ab84904f302f705d8b4e5e27aae7823b84f8289693f071a663ede2d1df0c8dff95244a5bd9973caa3eb072186
- MD5 SHA1 SHA512
New folder/Data/const.h
- SHA256 e693fb91a653562e13a09ec404a80c76dbc2e674ec933bc63d751181032a9928
- MD5 156515cafa17466909e97cc290b5bb4e
- SHA1 bf5d8d08365791e7d5287627a5c85854949fb9a9
- SHA512 66ac571d104d72e706c0ff7ba554c752c8351efbb4ef2d2c190a432082dffa5bcd16401f780b9a66dbe3a89bbfbbaaa957091ed8f6822ae7beed2ee19ff2ff4c
- SSDEEP 384:nOOHA+aynU9WxbWzMLr+gcBYDU/MXh7dF14Cm4oeJLtPRI8MY:nOCA+aynUGKirQYDuCm4oiL4O
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/cpu_usage.png
- SHA256 f1b802ddce2878c70569e01c35e05802b0cbd3081fa16583728a2f28688752dc
- MD5 c5b445ef4d751201c763ced1430ed888
- SHA1 c7dd1e5680f8c52ec44da83a7314609586005bec
- SHA512 2fe99ad91559486f1a7da83a435423224a0efbb22e5991d9dcc33a125f3883c10ec544f732997dd5e2854972cee99d383e58bdab209e2cd572be4a346047703d
- SSDEEP 6144:F88pd0Gb8N9TmHEr0L2zLLxxSYLvJnUssrBu3OW:Npxoz+34LPS4xWrBu3OW
- MD5 SHA1 SHA512 SSDEEP
New folder/Data/create_new_phar_b.phpt
- SHA256 fa582dfd12652b928e233846190c303c6d7795c043e2a360bfefac102e74ddc6
- MD5 f45888bd89e7860e489fedb9ec49145f
- SHA1 79424ea5bd167a38c927e7d5fa065c1d3bf88fea
- SHA512 1d2f90c3708e57d8bdbd27a95388c378a0fe86268583d8091c5fd602a4dd1b8d24f12c8f71713f6bb45b985802dbc80ad310ab10c9058fd52c919d942a7d0fc3
- MD5 SHA1 SHA512
New folder/Data/dom_test.inc
- SHA256 5cbf33ba9058e6a4b6c313bd0a806863c21a4d5c41559875c3581d2c6654afb1
- MD5 0a79fb2493d43b639ca1cb215aea65cc
- SHA1 41859d9b67dec66e0e7f3079b783cfe7f60b50b3
- SHA512 7d8f6d1a7230490112082aaef7cc397ba4aaf9662d9019f5133e7a3b0aab4c24fb4d33c8673a20c50635c94ca8c1c48e181502716379efceff042006506af444
- MD5 SHA1 SHA512
New folder/Data/ftp_mlsd_missing_directory.phpt
- SHA256 980d3141cfaa027e78fed1bc53c7fc046acbc502abc3d2a4cab12c563334c693
- MD5 17a5ed4d2c5c04b54db488fccfbc730c
- SHA1 b1769d20e60c15481c2e28a8f07ddef8cd32678b
- SHA512 fea62005a0ca8c8294106e0a4a90b0cd6d668ea1af358da5843a67c559a5c414861c02943f7f1f6a1d85cdb0ed22bf00ebaadfa5cbcabcfe7fa091d721aa4a08
- MD5 SHA1 SHA512
New folder/Data/magic_methods_014.phpt
- SHA256 cdfb9dd3d1a5bf7fce0d096099763c4cc2ce755a8d7d0463c4aca2ccaff0a026
- MD5 3287f14c9ea0bea7abcfc3b7e88e4349
- SHA1 646ff1f4cf89e4ec204cd8d81b65a755495f6ab8
- SHA512 07fae61e9c1eadacde2c2c9a4d5f4afdc0e779a8a4b54897be28ecb8bad8f4f57d7ecc7c565785322557c25de410994cee8137a7517904fdb0f5d7b33eba2fd5
- MD5 SHA1 SHA512
New folder/Data/msenvico.dll
- SHA256 c2a84abdf647e4a3f1671b33806f0283257627fe91c717bcd0eac14cced0b00d
- MD5 c346dca20fb65853c5d5e0026390091a
- SHA1 cc985c0edfd450a0c0b85f0521de46eb61b21adb
- SHA512 778cccab5f0ba187f77bec54ac1ca43b2930aba1a387e98b142671a30419b40400f1eadaa280a6bc899c50f64027db661a9e2bb43fee1006125b242cfcb4408a
- SSDEEP 3072:2Zx55LPHCaJp9mrGAj3w9QsdkQQMKZonA8YaQhNosoMeuiVehE:qZPHCa79/CA9QMQMKZj8LQhNosoxuiIE
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
f0:f2:91:eb:b3:05:d4:71:70:e1:7e:2e:00:7e:2b:d5:e1:12:7c:59:14:5b:38:2e:c2:d6:21:77:f8:c2:1e:e2
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Dec 31, 2024
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:4e:b5:3c:7a:c1:84:6f:eb:2b:00:00:00:00:03:4e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 16, 2023 - Mar 14, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Name
.rdata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
672KB
Virtual Size
672KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=255, version=31940,
count=1, id=258, version=31940,
New folder/Data/php_libmagic.h
- SHA256 9313a7a8c34b12323ad02c58feec264c331f55df8345ae918dc7b762e1b6bb27
- MD5 5fd783d9c7cf1bf669bce48515e39ab9
- SHA1 bee6f6b932af42f65c8c8c72d2d5e94f6bc7b719
- SHA512 80b7ef4ce1b21d3a9aa01e408c55e9a939ca3f7ea8d5181e76062ed015287c51659f0d235414ecbe7a4321c5124c07ab7b4f7bf3c73fb82a86deac9cfc098c69
- MD5 SHA1 SHA512
New folder/Data/readonly_class_missing_type1.phpt
- SHA256 fe4b0dfcf08de21b24fa99e53ce6ac935acae4e40e720522250a21c289cce5fe
- MD5 1d2dc020c4d2efc6bede42a47288a7d9
- SHA1 88668d71d14b6834a4bde9776ae8271b377ac16a
- SHA512 5143435ce2c737655ba3287c03ea42c4621d3cdb6de20e94683af6523100d3af938c959e6b3c29c485c8b64972a8336c7a62edf467d30ea5a830a079b6ceb31f
- MD5 SHA1 SHA512
New folder/Data/serialization_objects_009.phpt
- SHA256 ff9aadf0e165b1b9d26e9f8bb7a997ddfd537d22c0063f0fe3a19a2a912f7388
- MD5 c208830c831716b0055bfd8868f1bda8
- SHA1 437bce21269d3fb05ca3032867488805e629d4d8
- SHA512 4420fce04ccc67edf68117fcd330e01965069707caedb58cbe46beed85ff293dfaf34ebe6b922995b8d5fc04049f13c0770b931e7e4d60a5153bb941b16e1300
- MD5 SHA1 SHA512
New folder/Data/session_set_save_handler_variation4.phpt
- SHA256 a6b5fa0f43c4ba903e8c410c57cab2480baff9e11221a1989ed7166041f31ea5
- MD5 b8d5665d973447ea18c2597f25004f1c
- SHA1 770e11c9c216014f1bb58db9a3e5004611e50740
- SHA512 a50b3f94a22044ed8dfaf19815ac67d013f58595b0ec6ef2566f52f8aa9e7639048dab1eecf04aea9e761a61c4017ab06dd60f473d6d326564f18fb4078b23a4
- MD5 SHA1 SHA512
New folder/Data/skipLazyInitialization_default.phpt
- SHA256 d081c0a6278ac634ec48ff2f0b89dca85df0201b4d514746d75017a4670485cd
- MD5 bd6a0dac960294892a7c243a083284a1
- SHA1 4d643759d8cebda7ef1e5dfd766e293cb80b100f
- SHA512 2fa3feb5d3d0da64a94f25e23d34dade2659dbe49158691102828bcdac1472db8e75a2f3b4736c056d5523b54de22a815cf8276694a6a57d0646eae66177830b
- MD5 SHA1 SHA512
New folder/Data/zend_ini_scanner_defs.h
- SHA256 b5d35e0d22c9a860d07cab12c773653bf5be1856b70b0539f29496cba72dc971
- MD5 98d48182d936bc795137ebdd605e59be
- SHA1 2c2a3323008bc8af44c3b93903310215d0db871f
- SHA512 b75b76971a0ad79e8a36243efbb9b152d7f901dd2cd9bb714051f077c88b672083ec5b0bd4394b1a8bd8fbe04dd11e83600c69320018238ecb9c7ba66f6bf9df
- MD5 SHA1 SHA512
New folder/Setup.exe
- IMPHASH dcf3d09be16d7afc38b0a112da45acab
- SHA256 dc0c4d24bc55828f05ab6945e62f698b526013205b03bd30a2aaf1912ee364ae
- MD5 fdd6404bca6c3d345e63b5951702eeca
- SHA1 54281052f8e27002a146a64ab8c12626c91040bc
- SHA512 82459f5130eed8a8ec094b0fcc35d7c9c11f2157b4bc10843392436de81838645c1722286b67ae34a0c0452705370710ea484e6502c4b86080c79c76c6462654
- SSDEEP 98304:tNDxwQ+8btvockyGcX+o7whyFxi5A/T2OV/GU2JIvXE7Ckgr09KPYitpMI3grY:Hh+8b3zj+owsxi5uT/VcRvj4mM
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
a5:52:20:b8:b0:77:b7:68:82:70:15:68:a5:3b:42:6e:ec:aa:eb:05:bc:6d:f2:45:f3:9d:43:96:ee:14:88:7d
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,L=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Jan 1, 0001
Subject
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,L=Beijing,C=CN,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
56:d2:a5:da:5d:53:db:3a:f8:b1:43:df:3e:c7:f6:92
Issuer
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 18, 2023 - Apr 30, 2026
Subject
CN=SSL.com EV Code Signing Intermediate CA RSA R3,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
42:4b:6a:53:ce:c7:66:14:1c:2a:63:b1:a5:1c:41:04
Issuer
CN=SSL.com EV Root Certification Authority RSA R2,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 26, 2019 - Mar 22, 2034
Subject
CN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4b
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 9, 2022 - Dec 6, 2032
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 13, 2019 - Nov 12, 2034
Minor OS version
0
Major OS version
5
Entry point
6233176
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
winmm
timeGetTime
shlwapi
PathFileExistsW
wininet
InternetCloseHandle
InternetReadFile
InternetOpenW
InternetOpenUrlW
comdlg32
GetSaveFileNameW
GetSaveFileNameA
PrintDlgW
comctl32
FlatSB_SetScrollInfo
InitCommonControls
ImageList_DragMove
ImageList_Destroy
_TrackMouseEvent
ImageList_DragShowNolock
ImageList_Add
ImageList_GetDragImage
FlatSB_SetScrollProp
ImageList_Create
ImageList_EndDrag
ImageList_DrawEx
ImageList_SetImageCount
FlatSB_GetScrollPos
FlatSB_SetScrollPos
InitializeFlatSB
FlatSB_GetScrollInfo
ImageList_Write
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_BeginDrag
ImageList_GetIcon
ImageList_Replace
ImageList_GetImageCount
ImageList_DragEnter
ImageList_GetIconSize
ImageList_SetIconSize
ImageList_Read
ImageList_DragLeave
ImageList_Draw
ImageList_Remove
shell32
SHGetMalloc
SHGetSpecialFolderLocation
Shell_NotifyIconW
SHFileOperationW
CommandLineToArgvW
ShellExecuteW
ShellExecuteA
SHGetPathFromIDListA
SHGetPathFromIDListW
ShellExecuteExW
ShellExecuteExA
user32
CopyImage
MoveWindow
SetMenuItemInfoW
GetMenuItemInfoW
DefFrameProcW
DrawTextA
GetDlgCtrlID
FrameRect
RegisterWindowMessageW
GetMenuStringW
FillRect
UnregisterClassA
SendMessageA
IsClipboardFormatAvailable
EnumWindows
ShowOwnedPopups
GetClassInfoW
GetScrollRange
SetActiveWindow
GetActiveWindow
DrawEdge
GetKeyboardLayoutList
LoadBitmapW
EnumChildWindows
SendMessageTimeoutA
UnhookWindowsHookEx
SetCapture
GetCapture
ShowCaret
CreatePopupMenu
GetMenuItemID
CharLowerBuffW
PostMessageW
SetWindowLongW
IsZoomed
SetParent
DrawMenuBar
GetClientRect
IsChild
LoadImageA
IsIconic
CallNextHookEx
ShowWindow
SetForegroundWindow
GetWindowTextW
PostThreadMessageA
IsDialogMessageW
DestroyWindow
RegisterClassW
EndMenu
CharNextW
GetFocus
GetDC
SetFocus
ReleaseDC
CreateWindowExA
GetClassLongW
GetMessageA
SetScrollRange
DrawTextW
PeekMessageA
MessageBeep
SetClassLongW
LockWindowUpdate
RemovePropW
AttachThreadInput
GetSubMenu
DestroyIcon
IsWindowVisible
DispatchMessageA
UnregisterClassW
GetTopWindow
SendMessageW
PrivateExtractIconsW
LoadStringW
CreateMenu
CharLowerW
SetWindowRgn
SetWindowPos
GetMenuItemCount
GetSysColorBrush
GetWindowDC
DrawTextExW
EnumClipboardFormats
GetScrollInfo
SetWindowTextW
GetMessageExtraInfo
GetSysColor
EnableScrollBar
TrackPopupMenu
DrawIconEx
GetClassNameW
GetMessagePos
GetIconInfo
SetScrollInfo
GetKeyNameTextW
GetDesktopWindow
SetCursorPos
GetCursorPos
SetMenu
GetMenuState
GetMenu
SetRect
GetKeyState
ValidateRect
GetCursor
GetWindowTextA
KillTimer
WaitMessage
RegisterClassA
TranslateMDISysAccel
GetWindowPlacement
CreateWindowExW
GetMessageW
GetDCEx
PeekMessageW
MonitorFromWindow
GetUpdateRect
MessageBoxA
SetTimer
WindowFromPoint
BeginPaint
RegisterClipboardFormatW
MapVirtualKeyW
OffsetRect
IsWindowUnicode
DispatchMessageW
DefMDIChildProcW
WaitForInputIdle
GetSystemMenu
SetScrollPos
GetScrollPos
InflateRect
DrawFocusRect
ReleaseCapture
LoadCursorW
ScrollWindow
GetLastActivePopup
CallWindowProcA
GetSystemMetrics
SetWindowTextA
CharUpperBuffW
GetClassNameA
ClientToScreen
SetClipboardData
GetClipboardData
SetWindowPlacement
GetMonitorInfoW
CheckMenuItem
CharUpperW
DefWindowProcW
GetForegroundWindow
EnableWindow
GetWindowThreadProcessId
RedrawWindow
EndPaint
MsgWaitForMultipleObjectsEx
FindWindowA
LoadKeyboardLayoutW
ActivateKeyboardLayout
GetParent
InsertMenuItemW
GetPropW
MessageBoxW
SetPropW
UpdateWindow
MsgWaitForMultipleObjects
DestroyMenu
SetWindowsHookExW
EmptyClipboard
AdjustWindowRectEx
IsWindow
DrawIcon
EnumThreadWindows
InvalidateRect
GetKeyboardState
ScreenToClient
DrawFrameControl
BringWindowToTop
SetCursor
CreateIcon
RemoveMenu
SubtractRect
GetKeyboardLayoutNameW
OpenClipboard
TranslateMessage
MapWindowPoints
EnumDisplayMonitors
CallWindowProcW
CountClipboardFormats
CloseClipboard
DestroyCursor
PostMessageA
UpdateLayeredWindow
PostQuitMessage
ShowScrollBar
LoadImageW
EnableMenuItem
HideCaret
FindWindowExW
MonitorFromPoint
CharUpperA
LoadIconW
SystemParametersInfoW
GetWindow
GetWindowLongW
GetWindowRect
DefWindowProcA
InsertMenuW
PostThreadMessageW
IsWindowEnabled
IsDialogMessageA
FindWindowW
GetKeyboardLayout
DeleteMenu
version
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueW
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoA
oleaut32
SafeArrayPutElement
SetErrorInfo
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
CreateErrorInfo
SafeArrayGetElement
GetActiveObject
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
VariantCopy
SafeArrayGetUBound
SafeArrayGetLBound
VariantChangeType
msvcrt
memcpy
memset
advapi32
RegSetValueExW
RegSetValueExA
RegEnumKeyA
GetUserNameA
GetUserNameW
RegQueryInfoKeyW
RegQueryInfoKeyA
GetTokenInformation
RegCreateKeyExA
RegCreateKeyExW
SetSecurityDescriptorDacl
RegEnumKeyExW
AdjustTokenPrivileges
RegDeleteKeyW
LookupPrivilegeValueW
RegOpenKeyExA
RegOpenKeyExW
OpenProcessToken
AllocateAndInitializeSid
FreeSid
RegDeleteValueA
RegDeleteValueW
RegFlushKey
RegEnumValueW
RegQueryValueExA
RegQueryValueExW
RegCloseKey
InitializeSecurityDescriptor
netapi32
NetWkstaGetInfo
NetApiBufferFree
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpGetProxyForUrl
WinHttpReadData
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpWriteData
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetOption
WinHttpSendRequest
WinHttpQueryOption
kernel32
GetFileType
GetFileTime
GetACP
LocalFree
CloseHandle
SizeofResource
GetCurrentProcessId
Beep
TerminateThread
IsDebuggerPresent
GetFullPathNameW
FindNextFileW
GlobalSize
GetCPInfoExW
GetSystemTime
SetUnhandledExceptionFilter
GetTempPathA
EnumSystemLocalesW
GetTimeZoneInformation
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
GetVersionExA
FreeLibrary
HeapDestroy
GetDiskFreeSpaceA
FindFirstFileA
SetLastError
GetModuleFileNameW
GetLastError
GlobalAlloc
GlobalUnlock
CompareStringW
CreateThread
LoadLibraryA
CreateMutexW
ResetEvent
GetVolumeInformationW
RaiseException
FormatMessageW
GetCurrentThread
CreateFileMappingA
IsBadReadPtr
ExpandEnvironmentStringsW
GetComputerNameA
LoadLibraryExW
FileTimeToSystemTime
CreateJobObjectA
VirtualQuery
GlobalFindAtomW
VirtualQueryEx
Sleep
SetFilePointer
LoadResource
SuspendThread
GetTickCount
WritePrivateProfileStringW
OpenFileMappingA
FindNextFileA
GetFileSize
GetStartupInfoW
GetFileAttributesW
LocalSize
GetThreadPriority
SetThreadPriority
VirtualAlloc
GetSystemInfo
GetTempPathW
LeaveCriticalSection
GetLogicalDriveStringsW
GetModuleHandleA
HeapCreate
VerSetConditionMask
GetDiskFreeSpaceW
GetUserDefaultUILanguage
GetConsoleOutputCP
GetModuleFileNameA
CopyFileA
HeapFree
WideCharToMultiByte
MultiByteToWideChar
FindClose
LoadLibraryW
SetEvent
GetLocaleInfoW
FormatMessageA
GetLocalTime
WaitForSingleObject
DeleteCriticalSection
SetErrorMode
AssignProcessToJobObject
GetComputerNameW
SleepEx
IsValidLocale
LoadLibraryExA
LocalAlloc
GetPrivateProfileStringW
WaitForMultipleObjectsEx
SetFileAttributesW
QueryDosDeviceW
VirtualProtect
ReadProcessMemory
OpenFileMappingW
QueryPerformanceFrequency
lstrcmpiW
VirtualFree
GetThreadContext
FlushInstructionCache
ExitProcess
HeapAlloc
GetFileAttributesA
GetCurrentDirectoryA
RtlUnwind
GetCPInfo
GetCommandLineA
GetStdHandle
GetModuleHandleW
GetWindowsDirectoryA
ReadFile
FileTimeToDosDateTime
CreateProcessW
FindResourceW
CopyFileW
lstrcmpA
MapViewOfFile
MulDiv
GetLocaleInfoA
CreateFileA
GetVersion
GetDriveTypeW
FreeResource
DeleteFileA
GlobalAddAtomW
OpenProcess
SwitchToThread
GetExitCodeThread
OutputDebugStringW
GetFileAttributesExW
SetNamedPipeHandleState
QueueUserAPC
TerminateProcess
LockResource
GetPriorityClass
CreateDirectoryA
QueryInformationJobObject
RemoveDirectoryA
GetCurrentThreadId
UnhandledExceptionFilter
MoveFileExW
GlobalFree
CreateEventA
SetFileAttributesA
EnterCriticalSection
ReleaseMutex
GlobalDeleteAtom
GetCurrentDirectoryW
InitializeCriticalSection
GlobalLock
GetCurrentProcess
GetCommandLineW
ResumeThread
GetProcAddress
DuplicateHandle
GetVersionExW
VerifyVersionInfoW
GetWindowsDirectoryW
LCMapStringW
FindFirstFileW
CreateProcessA
UnmapViewOfFile
GetConsoleCP
GlobalHandle
FindResourceA
lstrlenW
QueryPerformanceCounter
SetEndOfFile
CreateMutexA
SystemTimeToFileTime
CreateFileW
GetSystemDirectoryW
DeleteFileW
IsDBCSLeadByteEx
GetEnvironmentVariableW
WriteFile
ExitThread
CreateFileMappingW
CreatePipe
TlsGetValue
GetDateFormatW
ExpandEnvironmentStringsA
TlsSetValue
GetSystemDefaultUILanguage
CreateDirectoryW
EnumCalendarInfoW
RemoveDirectoryW
GlobalMemoryStatus
CreateEventW
SetThreadLocale
GetThreadLocale
sqlite3
sqlite3_bind_text
sqlite3_column_bytes
sqlite3_prepare16_v2
sqlite3_reset
sqlite3_column_int64
sqlite3_errmsg16
sqlite3_bind_double
sqlite3_open16
sqlite3_bind_blob
sqlite3_finalize
sqlite3_column_type
sqlite3_bind_parameter_index
sqlite3_errcode
sqlite3_close
sqlite3_changes
sqlite3_free
sqlite3_column_text16
sqlite3_bind_int
sqlite3_column_decltype16
sqlite3_bind_null
sqlite3_column_blob
sqlite3_column_name16
sqlite3_step
sqlite3_column_count
sqlite3_bind_int64
sqlite3_column_double
wsock32
htons
setsockopt
select
WSAStartup
WSACleanup
gethostbyname
bind
closesocket
socket
recv
ioctlsocket
WSAGetLastError
connect
inet_addr
recvfrom
sendto
send
ole32
CoCreateGuid
CoCreateInstance
CoUninitialize
IsEqualGUID
OleInitialize
ProgIDFromCLSID
CLSIDFromProgID
OleUninitialize
CoInitializeEx
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
gdi32
AddFontMemResourceEx
Pie
TextOutA
SetBkMode
CreateCompatibleBitmap
CreatePolygonRgn
BeginPath
GetEnhMetaFileHeader
RectVisible
AngleArc
ResizePalette
SetTextColor
StretchBlt
CreateFontA
RoundRect
SelectClipRgn
RestoreDC
SetRectRgn
FillPath
GetTextMetricsW
GetWindowOrgEx
CreatePalette
CreateDCW
CreatePen
PolyBezierTo
GetStockObject
CreateSolidBrush
Polygon
MoveToEx
PlayEnhMetaFile
Ellipse
StartPage
GetBitmapBits
GetTextExtentPoint32A
StartDocW
GetSystemPaletteEntries
GetEnhMetaFileBits
GetEnhMetaFilePaletteEntries
CreatePenIndirect
SetMapMode
CreateFontIndirectW
PolyBezier
RemoveFontResourceExW
EndDoc
GetObjectW
GetCurrentObject
GetWinMetaFileBits
SetROP2
GetOutlineTextMetricsW
GetEnhMetaFileDescriptionW
ArcTo
GetTextFaceA
GetKerningPairs
Arc
CreateRectRgnIndirect
TextOutW
SelectPalette
ExcludeClipRect
MaskBlt
SetWindowOrgEx
EndPath
EndPage
DeleteEnhMetaFile
Chord
SetDIBits
SetViewportOrgEx
CreateRectRgn
RealizePalette
CreateFontW
SetDIBColorTable
GetDIBColorTable
GetGlyphOutlineW
CreateBrushIndirect
PatBlt
SetEnhMetaFileBits
Rectangle
SaveDC
DeleteDC
BitBlt
FrameRgn
GetDeviceCaps
GetTextExtentPoint32W
GetClipBox
IntersectClipRect
Polyline
StartDocA
CreateBitmap
CombineRgn
SetWinMetaFileBits
CreateDIBitmap
GetStretchBltMode
CreateDIBSection
SetStretchBltMode
GetDIBits
LineTo
GetRgnBox
CreateHalftonePalette
SelectObject
DeleteObject
ExtFloodFill
UnrealizeObject
CopyEnhMetaFileW
SetBkColor
CreateCompatibleDC
GetBrushOrgEx
GetCurrentPositionEx
GetNearestPaletteIndex
RemoveFontMemResourceEx
GetTextExtentPointW
ExtTextOutW
SetBrushOrgEx
GetPixel
GdiFlush
SetPixel
EnumFontFamiliesExW
StretchDIBits
GetPath
GetPaletteEntries
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
madTraceProcess
Name
.text
Size
5.9MB
Virtual Size
5.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
227KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
181B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
520KB
Virtual Size
520KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
New folder/sqlite3.dll
- IMPHASH e727d00364cd87d72f56e7ba919d1d40
- SHA256 1eb662adeda502e661da31497f9343c5c8e3b0e4eaff29e757901ebede87fdbb
- MD5 2e96ca7b9485a401a6b2147dc8d82053
- SHA1 95b74152109b05e8ef280669c5e136b60bcc5132
- SHA512 d45359b880cdc0f5f99f005daf26d1dfa4b80552346a62b5bb61cecd84455d199c95347965fdcf5c82ce89bbdd462c03129504f7c952b5c21d3811d6cd24c363
- SSDEEP 24576:6oigHd9e5I2+McQDjtNlwTVELElvQTizGU55q:6ebMnntbhLElvQuzGL
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
4e:95:cb:78:13:ef:1f:9e:15:f5:0f:3f:18:9e:4b:65:d7:14:d0:17:ed:a6:26:f0:39:95:53:a7:3f:09:93:94
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Dec 31, 2024
PE Signature issue
Digest
15:1a:fa:e2:41:f8:db:81:5a:da:36:09:10:08:da:f0:67:c4:e5:a4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Dec 31, 2024
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 3, 2014 - Dec 2, 2029
Subject
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 9, 2020 - Jul 9, 2023
Subject
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
6d:d4:72:eb:02:ae:04:06:e3:dd:84:3f:5f:e1:45:e1
Issuer
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Dec 3, 2014 - Dec 2, 2029
Subject
SERIALNUMBER=91110101593898951F,CN=Lespeed Technology Co.\, Ltd,O=Lespeed Technology Co.\, Ltd,POSTALCODE=100028,STREET=Chaoyang District+STREET=Room 1610\, Haocheng Building\, No.9 Building\, No.6 Courtyard\, Zuojiazhuang Middle Street,L=Beijing,ST=Beijing Shi,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
2e:4a:27:9b:de:2e:b6:88:e8:ab:30:f5:90:4f:a8:75
Issuer
CN=COMODO RSA Extended Validation Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 9, 2020 - Jul 9, 2023
Minor OS version
0
Major OS version
4
Entry point
5120
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
InterlockedCompareExchange
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
TerminateProcess
TlsGetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
msvcrt
__dllonexit
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_iob
_lock
_onexit
localtime
calloc
cosh
fprintf
free
fwrite
malloc
memcmp
memmove
qsort
realloc
sinh
strcmp
strcspn
strlen
strncmp
strrchr
_unlock
abort
acos
asin
atan
tan
tanh
vfprintf
sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_autovacuum_pages
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_changes64
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_database_name
sqlite3_column_database_name16
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_origin_name
sqlite3_column_origin_name16
sqlite3_column_table_name
sqlite3_column_table_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_deserialize
sqlite3_drop_modules
sqlite3_enable_load_extension
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_load_extension
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_preupdate_blobwrite
sqlite3_preupdate_count
sqlite3_preupdate_depth
sqlite3_preupdate_hook
sqlite3_preupdate_new
sqlite3_preupdate_old
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_serialize
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_total_changes64
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug
sqlite3changegroup_add
sqlite3changegroup_add_strm
sqlite3changegroup_delete
sqlite3changegroup_new
sqlite3changegroup_output
sqlite3changegroup_output_strm
sqlite3changeset_apply
sqlite3changeset_apply_strm
sqlite3changeset_apply_v2
sqlite3changeset_apply_v2_strm
sqlite3changeset_concat
sqlite3changeset_concat_strm
sqlite3changeset_conflict
sqlite3changeset_finalize
sqlite3changeset_fk_conflicts
sqlite3changeset_invert
sqlite3changeset_invert_strm
sqlite3changeset_new
sqlite3changeset_next
sqlite3changeset_old
sqlite3changeset_op
sqlite3changeset_pk
sqlite3changeset_start
sqlite3changeset_start_strm
sqlite3changeset_start_v2
sqlite3changeset_start_v2_strm
sqlite3rebaser_configure
sqlite3rebaser_create
sqlite3rebaser_delete
sqlite3rebaser_rebase
sqlite3rebaser_rebase_strm
sqlite3session_attach
sqlite3session_changeset
sqlite3session_changeset_size
sqlite3session_changeset_strm
sqlite3session_config
sqlite3session_create
sqlite3session_delete
sqlite3session_diff
sqlite3session_enable
sqlite3session_indirect
sqlite3session_isempty
sqlite3session_memory_used
sqlite3session_object_config
sqlite3session_patchset
sqlite3session_patchset_strm
sqlite3session_table_filter
Name
.text
Size
700KB
Virtual Size
700KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
81KB
Virtual Size
81KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/31
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/45
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/57
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/70
Size
1024B
Virtual Size
803B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/81
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/92
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ