SaladBootstrapper (1).zip
- SHA256 0f8ddaa2bc8e8fbf2d12d88e76a80b8aa5b671c28c3e6c9271dbbe646fd3ff0e
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
Overview
overview
10Static
static
10SaladBoots...ad.dll
windows7-x64
1SaladBoots...ad.dll
windows10-2004-x64
1SaladBoots...o.html
windows7-x64
3SaladBoots...o.html
windows10-2004-x64
6SaladBoots...ad.dll
windows7-x64
1SaladBoots...ad.dll
windows10-2004-x64
1SaladBoots...ain.js
windows7-x64
3SaladBoots...ain.js
windows10-2004-x64
3SaladBoots...bat.js
windows7-x64
3SaladBoots...bat.js
windows10-2004-x64
3SaladBoots...fee.js
windows7-x64
3SaladBoots...fee.js
windows10-2004-x64
3SaladBoots...cpp.js
windows7-x64
3SaladBoots...cpp.js
windows10-2004-x64
3SaladBoots...arp.js
windows7-x64
3SaladBoots...arp.js
windows10-2004-x64
3SaladBoots...csp.js
windows7-x64
3SaladBoots...csp.js
windows10-2004-x64
3SaladBoots...css.js
windows7-x64
3SaladBoots...css.js
windows10-2004-x64
3SaladBoots...ile.js
windows7-x64
3SaladBoots...ile.js
windows10-2004-x64
3SaladBoots...arp.js
windows7-x64
3SaladBoots...arp.js
windows10-2004-x64
3SaladBoots.../go.js
windows7-x64
3SaladBoots.../go.js
windows10-2004-x64
3SaladBoots...ars.js
windows7-x64
3SaladBoots...ars.js
windows10-2004-x64
3SaladBoots...tml.js
windows7-x64
3SaladBoots...tml.js
windows10-2004-x64
3SaladBoots...ini.js
windows7-x64
3SaladBoots...ini.js
windows10-2004-x64
3Behavioral task
behavioral1
Sample
SaladBootstrapper/Salad.dll
Resource
win7-20240903-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
SaladBootstrapper/Salad.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
SaladBootstrapper/bin/Monaco.html
Resource
win7-20240903-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
SaladBootstrapper/bin/Monaco.html
Resource
win10v2004-20241007-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral5
Sample
SaladBootstrapper/bin/Salad.dll
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
SaladBootstrapper/bin/Salad.dll
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
SaladBootstrapper/bin/vs/base/worker/workerMain.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
SaladBootstrapper/bin/vs/base/worker/workerMain.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
SaladBootstrapper/bin/vs/basic-languages/bat/bat.js
Resource
win7-20241023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
SaladBootstrapper/bin/vs/basic-languages/bat/bat.js
Resource
win10v2004-20241007-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral11
Sample
SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
SaladBootstrapper/bin/vs/basic-languages/csp/csp.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
SaladBootstrapper/bin/vs/basic-languages/csp/csp.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
SaladBootstrapper/bin/vs/basic-languages/css/css.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
SaladBootstrapper/bin/vs/basic-languages/css/css.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js
Resource
win7-20240729-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js
Resource
win7-20241023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
SaladBootstrapper/bin/vs/basic-languages/go/go.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
SaladBootstrapper/bin/vs/basic-languages/go/go.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
SaladBootstrapper/bin/vs/basic-languages/html/html.js
Resource
win7-20240903-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
SaladBootstrapper/bin/vs/basic-languages/html/html.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
SaladBootstrapper/bin/vs/basic-languages/ini/ini.js
Resource
win7-20241010-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
SaladBootstrapper/bin/vs/basic-languages/ini/ini.js
Resource
win10v2004-20241007-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target SaladBootstrapper (1).zip
- Size 68.7MB
- Sample250116-cgymkawkhs
- SHA256 0f8ddaa2bc8e8fbf2d12d88e76a80b8aa5b671c28c3e6c9271dbbe646fd3ff0e
- MD5 8f0ce7846e7b4d560fad2c0dc164a648
- SHA1 9de242408d37f54deda72501acaa750f0d14058e
- SHA512 dff795447f06d1b922dd92e6c6b7b566909996f8e0134af1a2f2e2b252f7e4305208db771ae0625b17d9f4df71e0ed4122689e8a1610c2b6ed48535b40364a95
- SSDEEP 786432:8VyJowM7W8788m1Nu6BYdBU+dSYCxeDLkVhXkT6fR:g7Wb8muaYdBR1Lknkm
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detect Pysilon 1 IoCs
resource yara_rule static1/unpack002/source_prepared.pyc pysilon - Pysilon family
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/SaladBootstrapper/Salad2.1.exe pyinstaller - Embeds OpenSSL 2 IoCs
Embeds OpenSSL, may be used to circumvent TLS interception.
resource yara_rule sample embeds_openssl static1/unpack001/SaladBootstrapper/bin/Salad.dll embeds_openssl - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/SaladBootstrapper/Salad.dll unpack001/SaladBootstrapper/Salad2.1.exe unpack001/SaladBootstrapper/bin/Salad.dll unpack001/SaladBootstrapper/xxhash.dll unpack001/SaladBootstrapper/zstd.dll
File Explorer
-
SaladBootstrapper (1).zip.zip 68.7MB
-
SaladBootstrapper/Salad.dll.dll 942KB
-
SaladBootstrapper/Salad2.1.exe.exe 24.0MB
-
discord_token_grabber.pyc16KB
-
get_cookies.pyc9KB
-
misc.pyc4KB
-
passwords_grabber.pyc7KB
-
source_prepared.pyc150KB
-
SaladBootstrapper/SaladBootstrapper.pdb29.8MB
-
SaladBootstrapper/bin/Monaco.html.html .js 70KB
-
SaladBootstrapper/bin/Salad.dll.dll 6.2MB
-
SaladBootstrapper/bin/tabs.json126B
-
SaladBootstrapper/bin/vs/base/worker/workerMain.js.js 149KB
-
SaladBootstrapper/bin/vs/basic-languages/bat/bat.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js5KB
-
SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js4KB
-
SaladBootstrapper/bin/vs/basic-languages/csp/csp.js1KB
-
SaladBootstrapper/bin/vs/basic-languages/css/css.js4KB
-
SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/go/go.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js.js 6KB
-
SaladBootstrapper/bin/vs/basic-languages/html/html.js.js 4KB
-
SaladBootstrapper/bin/vs/basic-languages/ini/ini.js1KB
-
SaladBootstrapper/bin/vs/basic-languages/java/java.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/less/less.js4KB
-
SaladBootstrapper/bin/vs/basic-languages/lua/lua.js5KB
-
SaladBootstrapper/bin/vs/basic-languages/markdown/markdown.js.js 3KB
-
SaladBootstrapper/bin/vs/basic-languages/msdax/msdax.js5KB
-
SaladBootstrapper/bin/vs/basic-languages/mysql/mysql.js14KB
-
SaladBootstrapper/bin/vs/basic-languages/objective-c/objective-c.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/pgsql/pgsql.js17KB
-
SaladBootstrapper/bin/vs/basic-languages/php/php.js8KB
-
SaladBootstrapper/bin/vs/basic-languages/postiats/postiats.js8KB
-
SaladBootstrapper/bin/vs/basic-languages/powershell/powershell.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/pug/pug.js5KB
-
SaladBootstrapper/bin/vs/basic-languages/python/python.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/r/r.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/razor/razor.js.js 8KB
-
SaladBootstrapper/bin/vs/basic-languages/redis/redis.js3KB
-
SaladBootstrapper/bin/vs/basic-languages/redshift/redshift.js11KB
-
SaladBootstrapper/bin/vs/basic-languages/ruby/ruby.js8KB
-
SaladBootstrapper/bin/vs/basic-languages/rust/rust.js4KB
-
SaladBootstrapper/bin/vs/basic-languages/sb/sb.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/scss/scss.js6KB
-
SaladBootstrapper/bin/vs/basic-languages/solidity/solidity.js18KB
-
SaladBootstrapper/bin/vs/basic-languages/sql/sql.js18KB
-
SaladBootstrapper/bin/vs/basic-languages/st/st.js7KB
-
SaladBootstrapper/bin/vs/basic-languages/swift/swift.js4KB
-
SaladBootstrapper/bin/vs/basic-languages/vb/vb.js5KB
-
SaladBootstrapper/bin/vs/basic-languages/xml/xml.js2KB
-
SaladBootstrapper/bin/vs/basic-languages/yaml/yaml.js3KB
-
SaladBootstrapper/bin/vs/editor/contrib/suggest/media/String_16x.svg4KB
-
SaladBootstrapper/bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg4KB
-
SaladBootstrapper/bin/vs/editor/editor.main.css171KB
-
SaladBootstrapper/bin/vs/editor/editor.main.js.js 2.0MB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.de.js36KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.es.js37KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.fr.js40KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.it.js38KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.ja.js41KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.js31KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.ko.js36KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.ru.js56KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.zh-cn.js29KB
-
SaladBootstrapper/bin/vs/editor/editor.main.nls.zh-tw.js30KB
-
SaladBootstrapper/bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg20KB
-
SaladBootstrapper/bin/vs/language/css/cssMode.js.js 21KB
-
SaladBootstrapper/bin/vs/language/css/cssWorker.js.js 489KB
-
SaladBootstrapper/bin/vs/language/html/htmlMode.js.js 18KB
-
SaladBootstrapper/bin/vs/language/html/htmlWorker.js.js 154KB
-
SaladBootstrapper/bin/vs/language/json/jsonMode.js.js 38KB
-
SaladBootstrapper/bin/vs/language/json/jsonWorker.js.js 99KB
-
SaladBootstrapper/bin/vs/language/typescript/lib/typescriptServices.js.js 1.6MB
-
SaladBootstrapper/bin/vs/language/typescript/tsMode.js.js 19KB
-
SaladBootstrapper/bin/vs/language/typescript/tsWorker.js.js 1.7MB
-
SaladBootstrapper/bin/vs/loader.js.js 27KB
-
SaladBootstrapper/dependenciescheck.bat1KB
-
SaladBootstrapper/tabs.json126B
-
SaladBootstrapper/xxhash.dll.dll 47KB
-
SaladBootstrapper/zstd.dll.dll 638KB
SaladBootstrapper/Salad.dll
- IMPHASH 12a9ce968f1a98b80da3deb780350fa5
- SHA256 37a39e08106ce45727eb3a45ce2519985ce86b198068697bd169e0326bee5627
- MD5 d5a3406447a03f4ae00197909c21ec16
- SHA1 f1416af46c2588a2ab3653e4996f557619d06c2f
- SHA512 25d8cc1588e24c934dc13a67786950eee0961682a27bcb89fac6ec4e4e301dc21ab0062f4c3b5ab09d86e1f992501048594f692caccbf51f7652b35f8ff28813
- SSDEEP 12288:8KuHqB3ueaLOh1HwIao596UC8yZKJ5EWnfYoyCIrr2KgXc11:8dWeOh15v596UC8ydWgdjr2Kg
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
593328
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\Desktop\Projects\Xeno\build\Release\net8.0-windows\Xeno.pdb
kernel32
UnmapViewOfFile
GlobalAlloc
GlobalFree
CloseHandle
FreeConsole
CreateFileMappingFromApp
GlobalLock
MapViewOfFileFromApp
GlobalUnlock
AllocConsole
SizeofResource
GetModuleHandleExW
GetProcessId
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
Process32NextW
K32GetProcessMemoryInfo
QueryFullProcessImageNameA
LockResource
Process32FirstW
LoadResource
FindResourceW
VirtualProtectEx
VirtualAllocEx
VirtualQueryEx
TerminateProcess
GetModuleFileNameW
LoadLibraryA
GetCurrentProcessId
GetExitCodeProcess
InitOnceBeginInitialize
InitOnceComplete
GetLocaleInfoEx
FormatMessageA
LocalFree
WideCharToMultiByte
SetConsoleTitleA
GetFileSizeEx
MultiByteToWideChar
GetFileInformationByHandleEx
CopyFileW
AreFileApisANSI
GetTempPathW
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateFileW
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetModuleHandleW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateFile2
GetModuleFileNameA
QueryPerformanceCounter
GetProcAddress
user32
OpenClipboard
GetWindowThreadProcessId
keybd_event
SetClipboardData
EmptyClipboard
CloseClipboard
MapVirtualKeyW
SetForegroundWindow
EnumWindows
GetForegroundWindow
advapi32
GetCurrentHwProfileW
ole32
CoCreateGuid
libcrypto-3-x64
EVP_DigestFinal_ex
X509_get_ext_d2i
BIO_ctrl
OPENSSL_thread_stop
X509_STORE_free
X509_NAME_get_text_by_NID
EVP_MD_CTX_new
d2i_X509
X509_STORE_add_cert
OPENSSL_sk_num
X509_get_subject_name
EVP_md5
EVP_sha256
EVP_DigestUpdate
GENERAL_NAMES_free
EVP_MD_CTX_free
EVP_DigestInit_ex
OPENSSL_sk_value
ASN1_STRING_get0_data
EVP_sha512
BIO_new_socket
X509_free
ASN1_STRING_length
libssl-3-x64
SSL_peek
SSL_get_error
SSL_shutdown
OPENSSL_init_ssl
SSL_free
SSL_CTX_get_cert_store
SSL_CTX_set_default_verify_paths
SSL_new
SSL_CTX_free
SSL_CTX_ctrl
SSL_CTX_set_cert_store
SSL_CTX_use_certificate_file
SSL_CTX_use_PrivateKey_file
SSL_CTX_new
SSL_write
SSL_get_verify_result
TLS_client_method
SSL_CTX_set_default_passwd_cb_userdata
SSL_ctrl
SSL_set_bio
SSL_connect
SSL_pending
SSL_read
SSL_set_verify
SSL_CTX_load_verify_locations
SSL_get1_peer_certificate
xxhash
XXH32
zstd
ZSTD_compress
ZSTD_getErrorName
ZSTD_decompress
ZSTD_compressBound
ZSTD_isError
ZSTD_maxCLevel
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
_Thrd_detach
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Cnd_signal
_Thrd_hardware_concurrency
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_init_in_situ
_Strxfrm
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Query_perf_frequency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Strcoll
_Cnd_do_broadcast_at_thread_exit
_Cnd_wait
_Thrd_id
_Query_perf_counter
_Thrd_join
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
ws2_32
listen
shutdown
select
WSAAccept
bind
__WSAFDIsSet
WSACleanup
WSAGetLastError
WSASocketW
closesocket
setsockopt
getnameinfo
ioctlsocket
inet_pton
getaddrinfo
WSAStartup
getpeername
getsockname
send
socket
ntohs
connect
recv
getsockopt
freeaddrinfo
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertOpenSystemStoreW
CertFreeCertificateContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcmp
memcpy
memchr
__std_type_info_destroy_list
memset
_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
wcsrchr
strchr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
system
terminate
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_errno
abort
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_beginthreadex
_initterm_e
_initterm
api-ms-win-crt-math-l1-1-0
sin
sinh
sqrt
tan
log
fmod
floor
pow
asin
round
ldexp
ceil
log2
atan
tanh
ceilf
cos
atan2
cosh
acos
exp
log10
_dsign
api-ms-win-crt-convert-l1-1-0
strtol
strtoul
strtoll
strtod
strtoull
atoi
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
realloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
fsetpos
ungetc
fread
setvbuf
fgetpos
fwrite
fputc
_get_stream_buffer_pointers
freopen_s
fgetc
_fseeki64
fclose
fflush
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strncmp
strspn
isdigit
strcpy_s
_wcsicmp
strcmp
strnlen
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
Compilable
Execute
GetClients
Initialize
Name
.text
Size
615KB
Virtual Size
615KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
46KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
75KB
Virtual Size
75KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=257, version=33808,
count=6, id=259, version=33808,
count=8, id=260, version=33808,
count=30, id=261, version=33808,
count=8, id=257, version=34120,
count=13, id=257, version=30795,
count=428, id=1, productName=Unmarked objects,
count=21, id=265, version=34120,
count=1, id=256, version=34120,
count=1, id=255, version=34120,
count=1, id=151,
count=1, id=258, version=34120,
SaladBootstrapper/Salad2.1.exe
- IMPHASH 72c4e339b7af8ab1ed2eb3821c98713a
- SHA256 693446ea933661ef261b66281be2ceb173bf4b2fae82cac1eb7071fb4928ecf7
- MD5 fe8badc51be8c09356dc089651bddd59
- SHA1 cd77eabe6b5f7eaf5b25f80853f0847e080f5c49
- SHA512 76129471820d72bd72fffddf3fb04941d783f8b6e398dd864d66e6a2d47245a3cd270b015dad22b3871a3a99723624abe8acdde137f6341d1c77aeae8fe50d1b
- SSDEEP 786432:WowM7W8788m1Nu6BYdBU+dSYCxeDLkVh:/7Wb8muaYdBR1Lk
- MD5 SHA1 SHA512 SSDEEP
-
Detects Pyinstaller
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
52768
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
CreateWindowExW
ShutdownBlockReasonCreate
MsgWaitForMultipleObjects
ShowWindow
DestroyWindow
RegisterClassW
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
PostMessageW
GetMessageW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
comctl32
ord380
kernel32
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
SetEnvironmentVariableW
FlushFileBuffers
GetCurrentDirectoryW
LCMapStringW
CompareStringW
FlsFree
GetOEMCP
GetCPInfo
GetModuleHandleW
MulDiv
FormatMessageW
GetLastError
GetModuleFileNameW
LoadLibraryExW
SetDllDirectoryW
CreateSymbolicLinkW
GetProcAddress
GetEnvironmentStringsW
GetCommandLineW
GetEnvironmentVariableW
ExpandEnvironmentStringsW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
RemoveDirectoryW
GetTempPathW
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
Sleep
GetCurrentProcess
TerminateProcess
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LocalFree
SetConsoleCtrlHandler
K32EnumProcessModules
K32GetModuleFileNameExW
CreateFileW
FindFirstFileExW
GetFinalPathNameByHandleW
MultiByteToWideChar
WideCharToMultiByte
FlsSetValue
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
CreateDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ReadFile
GetFullPathNameW
SetStdHandle
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
advapi32
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
gdi32
SelectObject
DeleteObject
CreateFontIndirectW
Name
.text
Size
168KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
75KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=30795,
count=180, id=261, version=30795,
count=10, id=260, version=30795,
count=3, id=253, version=33808,
count=9, id=259, version=33808,
count=17, id=260, version=33808,
count=40, id=261, version=33808,
count=11, id=257, version=30795,
count=155, id=1, productName=Unmarked objects,
count=25, id=260, version=34123,
count=1, id=258, version=34123,
discord_token_grabber.pyc
- SHA256 78a36fae762432c89f4c0b185e5c227144817199dbde90d16749c6bfc0fb1dd1
- MD5 924ef065a5167d44170ac81a60cc6fbe
- SHA1 ebfa171438758dd9810369d3077f618bfab5bc09
- SHA512 15a2144fe6e0e081856fd875bcbb239a83da115dce2cda1924f71cfc401f13f681d5047cb80b40cdcdcb617c12d9c12f7bfdc15d38177ace8685c59bb631afdc
- SSDEEP 192:bIqqTmuEWauge+M6DA8AYv++JDcNQshU8En5W4NXOYd/G7XW:+9avP588A+DDWRm5FOUG7XW
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
get_cookies.pyc
- SHA256 ec0628cca3f23628d1ff24a88e8215238eee1601cfe9e49a4525fdca15034497
- MD5 c9a6c4ec57f83d1aa200fe076665c42c
- SHA1 42bf07fb97a2ccd29a67067ae9ead40548e046b9
- SHA512 ffe8ba3ff8edb65ff53b9006fa327991f9c272ace5f7cfb387080d8cd23f994842eee49246f1c32d41d6e081dff1a04f9c6b3e5d5e5e2f3cd96fead21fa09745
- SSDEEP 192:srJe41QfUE0xZVbFAI6dokUpjYnuHN3gQ:iQBifedokqYnuHN3gQ
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
misc.pyc
- SHA256 8ebd34d6a4a41a2107ab7000da651fed3996ae0e13291fe6970971b5bc0e5087
- MD5 36ed907d6c57862deacc25f4da2bde11
- SHA1 0e21743b8eff2688e13055bfe26467cd3af43559
- SHA512 89dca2a052a77c829423d0cc1389e83b645ae97d063ccef2f47188c3b83dfeef6632d116cac714df01c908b148767d59e46006bded668f046fc78a564c52fdd4
- SSDEEP 96:vDh/7Y8hYPUywfLDwfPsULKliOCpmrSTUpjdaJuo1kUZsX3g:vVR5ywfwXsULPJmDpjwN1kIo3g
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
passwords_grabber.pyc
- SHA256 6a67c8b0591fef85f8436d152361796d4bf1fb3ddf46a5af873743cc16ece1fe
- MD5 cc180daa11732953527c69ac7bbea3b1
- SHA1 24ea916374f1fe5981219c1c330ba8f851571e9e
- SHA512 5e4e259999b3155ca5d9f55de691ced7c918acdab8b7c3ef7bca69903d6057a6c102a997b4b2af4a655026b3dd3ea8aed855306633392ab6a9171e70a34dbfbb
- SSDEEP 192:0tkwY6bLQ3hT8+NE102sGMleDkUhMbvEh:dwY6bLQ3RzHOMER
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
source_prepared.pyc
- SHA256 6fe3d6935939dc80770fd2e6f81f441312bef34a2526effe2ec9ae24ea8b2858
- MD5 e6779c2634cecbd1580b18dfc4179949
- SHA1 bd46b749ff7573689cc63e38c6b2b2b7adf3e44b
- SHA512 0405dd830ae4564aa990ce5e874e08258584ac1708e1e4c05bb08077843d4b87b6ae29655ff7d8ddb82b7d7b07f4ddf9f15258125211692523aef33107b59b0c
- SSDEEP 3072:TKfKoQItXJpUBGfE4z6TaoI7iD6GxShcxvSgsszO/:2fKoQkzUMcaohSAvuse
- MD5 SHA1 SHA512 SSDEEP
-
Detect Pysilon
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/SaladBootstrapper.pdb
- SHA256 0090426672bf9cce59040eb22e5925ff0b54e0269e8954994085e08ef7d4f9fc
- MD5 3b69a1021882459b80c41e2dd8bd8d0c
- SHA1 388ee099d1cc0cb948a2713a307d267d5fbca3d4
- SHA512 aba78548bb2af04fda0b81d0a308d7353529af7b9cb8967ab998e936e899fdc7419a799157708533a0bf045618f855bd3182ff815fd4a37009dad32218059037
- SSDEEP 196608:0uvhg3+Cac4VXrnI2c2nLEdWAFUf+eo9Vkz4:35jo9
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/Monaco.html
- SHA256 99c6272931dab083bf7bed7766c8b2f482b90ce91640881fc3c25e628b99de48
- MD5 0c89c5f7d91bab9c7061c348010e5060
- SHA1 1c62133f565001f9bbb1278aaf7476450585a47d
- SHA512 07bbe66911cd03feaf7942e0815d6bd340b6413985c5de3a9d9883932cf1031d116671e86676495fd1a8d718013f0f4196e6ed3e86db2ed5d857d2ae7a8b347d
- SSDEEP 1536:AwmVPlSG/xJ4RyTbNfBf8XT/p/gmFwZhQVsWTVW2P2zVDKxgoa7:3mVPlSaJ4RyTbNfBf8XT/p/gmFwHSsWi
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/Salad.dll
- IMPHASH 9e17feafd9e32ed7cb877d6739c852c0
- SHA256 b2f73faae3e8f343eef01cc87efb889a33357faa0c749a4bfe04b1df6a7571e4
- MD5 42fe6e4b1feb2c9c50ae78a0e15ab9ed
- SHA1 74b11462a0b3f67750a4fb7899009acdf58db664
- SHA512 d77ffbccd5f84bf81569dbf21d712f77f6a90042cc49b8ddd119e1ab52e25e7dd2d62563677a3f1f0b16136bb0707eee1c132f4b1702c883f7ee5d8d3d11a536
- SSDEEP 98304:jY+RSMlSw1AwIpYsiVZ+eYbFNjX1Nu6I:MGSMlSw1ArYsiVZ+eYbFNbTRI
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4512920
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ws2_32
setsockopt
ioctlsocket
freeaddrinfo
recv
connect
socket
send
getaddrinfo
select
closesocket
__WSAFDIsSet
WSAStartup
gethostname
WSAResetEvent
WSAIoctl
sendto
getpeername
getservbyname
getservbyport
gethostbyaddr
inet_ntoa
inet_addr
htons
htonl
gethostbyname
ntohs
shutdown
recvfrom
listen
getsockopt
getsockname
bind
accept
inet_ntop
inet_pton
WSAWaitForMultipleEvents
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
WSASetLastError
WSACleanup
WSAGetLastError
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateContext
CryptDecodeObjectEx
CertOpenStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertOpenSystemStoreW
CryptStringToBinaryW
PFXImportCertStore
CertFindCertificateInStore
CertAddCertificateContextToStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringW
CertFindExtension
advapi32
CryptAcquireContextW
GetCurrentHwProfileA
DeregisterEventSource
RegisterEventSourceW
ReportEventW
CryptReleaseContext
CryptGenRandom
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptEncrypt
CryptImportKey
CryptHashData
CryptGetHashParam
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
user32
GetAsyncKeyState
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
MessageBoxW
GetUserObjectInformationW
GetProcessWindowStation
keybd_event
CallNextHookEx
GetSystemMetrics
MapVirtualKeyA
MessageBoxA
mouse_event
FindWindowA
ClientToScreen
GetForegroundWindow
GetClientRect
kernel32
RtlUnwindEx
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetFilePointerEx
GetConsoleCP
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
HeapReAlloc
GetTimeZoneInformation
DeleteFileW
SetStdHandle
SetEndOfFile
IsValidCodePage
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext
GetStringTypeW
GetCPInfo
LCMapStringEx
DecodePointer
EncodePointer
RtlPcToFileHeader
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
GetFileInformationByHandleEx
CopyFileW
GetOEMCP
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindFirstFileExW
CreateDirectoryW
GetCurrentDirectoryW
GetLocaleInfoEx
LocalFree
FormatMessageA
GetModuleHandleA
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentProcess
GetProcAddress
MultiByteToWideChar
GlobalAlloc
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
VerSetConditionMask
FreeLibrary
Process32First
EnterCriticalSection
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
CreateToolhelp32Snapshot
Sleep
GetLastError
OpenMutexA
Process32Next
CloseHandle
ExitProcess
RaiseException
GetSystemTimeAsFileTime
FindClose
FindFirstFileW
FindNextFileW
GetStdHandle
GetFileType
WriteFile
GetModuleHandleW
RtlVirtualUnwind
SetLastError
InitializeSRWLock
RtlUnwind
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemDirectoryA
GetModuleHandleExW
GetCurrentProcessId
GetEnvironmentVariableW
VirtualFree
GetACP
DeleteCriticalSection
ReleaseSemaphore
WaitForSingleObject
GetExitCodeThread
CreateSemaphoreA
LoadLibraryW
GetSystemTime
SystemTimeToFileTime
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
SleepEx
InitializeCriticalSectionEx
GetSystemDirectoryW
GetEnvironmentVariableA
GetTickCount
FormatMessageW
MoveFileExW
VerifyVersionInfoW
ReadFile
PeekNamedPipe
WaitForMultipleObjects
WaitForSingleObjectEx
CreateFileW
GetFileSizeEx
WakeAllConditionVariable
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
InitializeSListHead
HeapSize
WriteConsoleW
AreFileApisANSI
ReleaseSRWLockExclusive
oleaut32
VariantClear
bcrypt
BCryptGenRandom
NextHook
Name
.text
Size
4.5MB
Virtual Size
4.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
38KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
177KB
Virtual Size
177KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=39, id=260, version=26715,
count=25, id=259, version=26715,
count=201, id=261, version=26715,
count=1, id=262, version=26715,
count=7, id=253, version=34321,
count=17, id=260, version=34321,
count=12, id=259, version=34321,
count=101, id=261, version=34321,
count=27, id=257, version=26715,
count=378, id=1, productName=Unmarked objects,
count=921, id=260, version=33813,
count=35, productName=Unmarked objects (old),
count=20, id=261, version=33813,
count=79, id=260, version=34435,
count=26, id=261, version=34435,
count=71, id=265, version=34435,
count=1, id=256, version=34435,
count=1, id=255, version=34435,
count=1, id=258, version=34435,
SaladBootstrapper/bin/tabs.json
- SHA256 695bc0f3114bec708c8d4bed63b8cd8f00acf63d819bbd2480be8fce14a577db
- MD5 768b26f60e8c69f6adedce98927ce6b4
- SHA1 a2de4d66b553d402561dcedb0e8f78e77b1f8498
- SHA512 fd7403e83e64815946df56b0f7528f706e54a859f6a56116841fe86a320aea9e775c0911df2f9644d3a7472cccccf0813ff46812083c72ed76355791c1bdc23f
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/base/worker/workerMain.js
- SHA256 bdf9433692a08851e13dd58504eef19f51bd2ec7241923a68edf5772e0e53af5
- MD5 27ead90c7702154755785e0e53398755
- SHA1 86b59485fe6f6ccb1805183fa75062a2ac1c859e
- SHA512 6829681575179c90bb7817b17feee60e7d44d8abb15264ab39d7f0edf95dd1d030b99c12b005c753cd786c26ce6f17ff09b058c16f3363596f785e386ef78e82
- SSDEEP 1536:XNSxrkwnz+dTHHfvYYdBwDZ2Ogvh52xgh2hQXIvTBaB7hU74Yc6aphU1PblosJEl:XzdTagJkb+6jFlJJEt9yjjTCD2zw
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/bat/bat.js
- SHA256 9bca42394fe8922fec24b768eeb8ce04692de6fad82f9052d5b7e70f5c6b0f40
- MD5 4cb475399c4490eea41982dcd6d9653e
- SHA1 fc97d57206ff7fa1c89ff0fc9f6e2f04a20ea185
- SHA512 27eefe83cf38a7d784414d99b472f6fcd7e595691eb0f368254ba1f71aaf702840b62bf232c30c515a8fada234699fefeef496c0c24669cc158cb567227e4783
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/coffee/coffee.js
- SHA256 e706c9f8e5c5a0cb01b2f4e4879ec34a050d6eb2a8840284eb7badd9d78099f9
- MD5 9d0c4ac1691eed0a480c3e9246490d29
- SHA1 38258864fd070c35cec6b68715d58771df9fe3e1
- SHA512 437a703607a9f0cb96ffb56312d149b95f596290591d14098c36d978b2e1fdba3c3712c9099923bc0a709c5c0ebd7eea868f63dfbcc69cdf5a9325b8a67006b6
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/cpp/cpp.js
- SHA256 a7c2bea7ca3d9e203a3a286735945fe010c8f4f8d46620386ee8befc6a78b32b
- MD5 0a16509e6cd0155fb622e785cfe976c7
- SHA1 7afa7f823191c43d7a4bdd7d91577495de62c21a
- SHA512 2cbc48cb10c467561c6a84f59405e9c2f864640b3a21e6fe5cd14ad1a7ca5667b766b3c0511df26f28205dd17338a878bd1164a4f5875235a73214f3e4aeb49d
- SSDEEP 96:hFDMgRs/rbV1+gqVV1+/LVb9ZRC2seM6jjz13MwVcEghhb6Yw76wGcmvRBNIs:hZGrTOcVv5M61h8hSeiYL
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/csharp/csharp.js
- SHA256 6b3be9a86ee8e3202f51745d94d24cc1eefbcf7d9e6d94fbaf70146b084e835f
- MD5 f8f841d13c9220e15dcd6bc386b37ba2
- SHA1 2b8b7003820d19ed83afde98c845db5e3d5753f8
- SHA512 0b167865b8d7847792c80144e83bdf33655db6ecc0934bb3290f8b5793fee8168aeaf9d74b3541a9424c4f180aad496c2d8710e3847a5bf9d4b2c960ddea4ae5
- SSDEEP 96:hFDMgRsVx+rbV1+gqGV1+hmQuq1cBh8b7gj8/pLxb6J994wGcKU7dYIkI:hZi+rTtPsRXpw9SiKUJGI
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/csp/csp.js
- SHA256 4b5a5d7d50986b86b00833447e097c0f01a4388ce1765b48e7e371d06e3a4789
- MD5 22ada25d590811dcff4e5f5d698e583b
- SHA1 c43d4846967d5037ef05b102e49d1fbc54e45fbc
- SHA512 c8373ea0b78114f82e8bf027473f72ada0d8acd51623152a0072111d8b3b7d5ac310a1cc510c4e4cd2e97a7686db3c87b2da675fc910898bd11108e4b50ed189
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/css/css.js
- SHA256 bd331fd3bd2c37b0c3150035325f163ac9266bf6d942310764815e676d856d91
- MD5 49ad30f1151cfd7a74677fdc6dd13da9
- SHA1 286d47f0a4cfa26da2e4d1f1317a8c87000bb5fc
- SHA512 7337706bfd5bd54938da0fba35e97f8e5780491c04b58d43fc6d905bd2dca92897f1ed8d48e42665f166da7684cc6e29a63ae73f8d3779a9feb97c397a642f0d
- SSDEEP 96:hFDMgRsozIq+q17qcq6V1+/aMj1cqTroIrqjKf8O3lzXY0Jc:hZzzv9VmjoOf8O39XbJc
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/dockerfile/dockerfile.js
- SHA256 65b86fc54e9b35d6cb84f01dfb905680dbcad6605757de1d6bca84e3029889af
- MD5 e32de981bdaf75e6ffb8fe40bc955a68
- SHA1 bef1af7b26ea01c987c7a6295bb7192d83a32068
- SHA512 a3eadd8c1389dff6c2c6e595efff69be3a573d01e4e16b8e4a8b28f63e4c48c9c439b5dd93666d81d703d1c6b5bf927cc8e47d04af270128095f0d579407c2f4
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/fsharp/fsharp.js
- SHA256 1390079babc117d3f376735780d98f409f317eb4628d17106642c6933ea1da7f
- MD5 de122b3bc44a8714f386dc80282dcb12
- SHA1 06888a9b616993e9af9797cec64c6d419065f2cb
- SHA512 ab48f2e5bfa6ea0024530141bb5d35b9090ee0254a3e8f8b86fa36cc8c2fca8000a3caafcfffc1d83e21c488e1f1990c91f537290b54fbbca1d3c7be090dfba5
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/go/go.js
- SHA256 46d1757c3cd3dbc3c7b465a338880144922a1c34c30e36f06ff2db8c2ff75b86
- MD5 5b4484c914cd97aff4510b803f2517ef
- SHA1 8f275ac36c57c4c464e30f92f525ffbd0fd436c6
- SHA512 b34c64f9997f4b72760eca270d2a0c2e22d83467d3f0bc82e7c0e63d62d8f9d74a144a28d676a223cdefef417af723801ac0535375d0dd64bb3a81e87617fed0
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/handlebars/handlebars.js
- SHA256 31d25588d120e7c79f3332ff3b3c794cebd0554c7578e3bb37b3cac366e4f6c2
- MD5 3ca7cf83292b56444548f2914c0e1811
- SHA1 4be5b1adaa187d82a94967e6960d811acd700b93
- SHA512 2d337b64def0d42f8bd6476cf31e806f67f77d26c95c68e75574fc310f7974852a810f8b197238559a2cb20d07914de5844481477321cdcb2c68c47da9088eb8
- SSDEEP 96:hFDMgRspITV1+/I/+B1BerJzlWK2BZwIBTIwbcdg6EHpf4Og6E8S6g6EB+FpAjE3:hZhbYbQRld2BZ1O0p4OE60+dMZLDs
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/html/html.js
- SHA256 c717ac0701d3b1e22dc52a0c53608214297e5fab7bc7011cf4e964f2eca9d62f
- MD5 630fa41f59a189aed68b4db82559de95
- SHA1 14a527d27240ba0effcfa43a5c46b9289e96b822
- SHA512 e15c602788f13afd1e19e5f82de7a35eb9656950553bc3913205ba3e70ddf87199b7f9b358db7b7704efd3dc85029ad277692b6b84f5f549964b9dd7cce1ad60
- SSDEEP 96:hFDMgRsfInV1+/6mQVV1+HBwBRl0GSytHd6EHaK4T6Ef6EByyEhcKMgEQEJWf:hZLP+4+GLl0GSytHLaK4ccKM2
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/ini/ini.js
- SHA256 1f0feeae58c32f6e1f31b78f7e2aab3c91da387e464234c0f55ebff0e77444a2
- MD5 b9252b74381fe17565d494711f4c9093
- SHA1 9ed6a00a166c0b5abdbb3ea45fa7df3a5defc8ee
- SHA512 2fe594de8ac3444223edc011cbd7f08a6f8ab2de2bf56919c2d6f1208e22391652d14549c3822c21c4999139ffce711fdbf00725e95aa01068bf5f223c3b8710
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/java/java.js
- SHA256 44be702cae05d5844dc1c452f9bd94020007b9e543a765db4e6649278607d218
- MD5 826546e08f178d68e8aa2ab29194c03a
- SHA1 444ed723cadc4231f2dce5c54597fa8558893d12
- SHA512 8edb46eefaa3277374ba5dc656423115735573a57e82002745ce6112f666079d6ab7d9b5a79ed208ff51487e9ec2b757c45ec1b3c8119d8cbcd4f7cd30347ef9
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/less/less.js
- SHA256 ed8d1a9da4e62d1cffe4c83580c9df57d688e850a45ace72c11bdeb064520a16
- MD5 696ef3dca27b4f9313deba6f99710154
- SHA1 d3b377cae3355c3facbecc85bb342d4af34436ca
- SHA512 f9f65f8730fac803cb01d127c467359f428dbcc8e368f40a15fd56b7150b2258e9c581c3a35712ccc2fcde8a7108c89a33b80cb72721fea663a11a553657dc29
- SSDEEP 96:hFDMgRsR6rMq+q17qcq6V1+/v+ufj1cCzBbu/2nOgeJamEulIHrraW4NUa:hZE6rr9PuhlzBbu4OLaDuKqW4NUa
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/lua/lua.js
- SHA256 f732178f39d01d4ab7a28f4b7d23bcb49d4f79677810b57ec0d2ebfaef0977c0
- MD5 aa2904d3b245e7d3870ee47a2e167045
- SHA1 daf31d780215af08c1e612286438697791ecbce4
- SHA512 3dae2aef4521ab1e8acbc9765b8361f0f38199051e450faf43d9876581667870515ccc523faea53df26ba2d477fc39d18b63215747ae3609b25df1a2db4af8fd
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfG:nD4Ldyn7Ss/TMmUtOfxhxjG
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/markdown/markdown.js
- SHA256 eaaf453e0a9f9a604547e564a24e682503189cb9b85c87715bc9b5b6492b6f62
- MD5 caf4799639d5df40dfb1b979ed68af9c
- SHA1 6578ccc5111ddc190c354449be2630d91a21523b
- SHA512 e787f3f849a40c608c3b35b732f16e4400c2d47e89ff309566afbc879fe37a7018722b959dc8ddc8c859d76e2f7bc0b85555cd27f7fc5e4d8e51e460ed32c9ca
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/msdax/msdax.js
- SHA256 6ab13356e083c4334e93d3167bdd17d02552508bfd11ea044c880af3a1dd94f9
- MD5 eaa7bff8662633aec211d57fd17cb8ce
- SHA1 3d783a13339a5797fa701165484bbdb70ffc0616
- SHA512 b3c5069dd3b8b56c0c945cd36909e2d7b575d3b804714b724b7f80bf03de1983a29e33dce050ff599017ece4ce22dce1f01bddda7ae2d41b25779455b96f4c00
- SSDEEP 96:hFDMgRsHrviqgq+q17qU/E18Qby0qbmofEsl93Bjy2rzR9sJDJOuz3O+PYLq+v6I:hZmrTY8Ey0UJfEI9z+zz3O+PYLZy4axE
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/mysql/mysql.js
- SHA256 7ba586bf9c623dc23f27a46e95a22342caa1f42d3b19fd9c018eb3b7298206dd
- MD5 6482b3f16ca4f1436d5a5c9b54ab8956
- SHA1 bec1d967c0db6ca73cde65debd418f3e2c4db36c
- SHA512 24b0dcb75254f4d69209d42bed81730c7c9ccac2230047a8fe46c81dab5a65618ce59be1b09100a1a2e42c515ea2a923a9c7084280bc567b2a6ee987cfb11039
- SSDEEP 384:hALxoDo1S36rNh/xkxnethQZZ62lANnY0k7N6AVzIAtSc2F9/0yW:SLxoDo1e4Nh/xNthQZZgNn67N6AVzIAp
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/objective-c/objective-c.js
- SHA256 35af39baf166f7c2e3c95345b10ec46aa523f98783daa745aef64503019e3253
- MD5 3ba48944ccda06514bf9723a2308b4c8
- SHA1 e9ebac91264e0510f8ff80710244c3ce56aee1b4
- SHA512 b8b1096188bf3837a696353988c4bd1b21f1cbde54a9ce8436f139765189c5dc8ffb02ad931a364d4780fb7fbb7dc18a600cc19a5db3e1a412f38d7269a24030
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/pgsql/pgsql.js
- SHA256 a9487e85b74fd293c0131ae9bc181e72baecf5a0a6f8b71e97770d79332c09c0
- MD5 7183810944428c812b3f9f4ed4adbb6d
- SHA1 5931e0e973678b836f548d11095b77398f7c38e5
- SHA512 a0eb6a021b24db38b98c7db1c5584bf190f789e5cb65fe13b7fb881fff1665cdaa7914556e0c0984f620b55b63a7b9f7902b706d596b2603e8720dc85dfa185f
- SSDEEP 384:hhLx5HtCBHHfrxrOmYbatR9uwX6l+qCVFQBTI7e9/asW:PLx5HtCBHHfrxrOmGaZKgKBTIuisW
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/php/php.js
- SHA256 af43769fa1bdef70da786c2296c3a5f91552163c78d5c8ede46620a146edda92
- MD5 fffc04cacea00100299900c7969e44dd
- SHA1 d15b7aff67d8fa813c43e35ac58ec08a74f4701b
- SHA512 19dd22739eb9373a2b8f4acd7712d7631adf1cfbadbdec9dac2bda25e8594731ab30caa5cf2deb241c76429f8e381775b60ae5857e4ac6b735f493885c4dac6f
- SSDEEP 192:hZe+rrpRld2BZwd0C4Ov6f+AME/gujcm91wIJ3tjPq:hQ+rr7xPSVrgm91w+3t2
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/postiats/postiats.js
- SHA256 e49fe4654ae374d12dc7a4cb210ba95f490982a014886ede88a0dad3fd99a760
- MD5 0c7a2538121071fd75d9f08806500ea3
- SHA1 968d9ee1b928cf62712ec69d5f02aeb025cc3623
- SHA512 ae39edd35bd9caa13c4e263910ce93375beadebbee846ef8d5e5da1d8f054e236ff3310e2938fcf3f9d1eefde1bbe03c20ddaad243a73f6249d8a1563f6afe67
- SSDEEP 192:hZCrsRJNHUKhfdGiAQ3Sv0vExaeZtSkgsv:hsrsbNHsQ3SMMYcF
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/powershell/powershell.js
- SHA256 d47b6e2970b4bbcd0eb8e4ef69eb2052b117e36ab20c68605a1750ad5991eb51
- MD5 25cbb67f273e62a6d0e6dd5c123f5963
- SHA1 81fcaf88c071e6b72648464f1bfdf8fc4fe8cca6
- SHA512 94d265eb4e5c91abf3edac2cf17bb37b0402cae1dbfdf950c12c7b176bae89eda618286da5f51286d2ba684c4fd894dbc138ebdcf2a0b497bbf51be892a8606e
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/pug/pug.js
- SHA256 cdad9f84576583b68a10519c4f23ba36cd4422cbb7a44fded2c99a1e823e8043
- MD5 4cce0b17d4f7bf474a5101763ec17c9c
- SHA1 880f10cb67ab667c20d20ee7a53182f5c841da87
- SHA512 9a4b988c88f888355d67f650b8cc3db8601743037b48497050cedbd61bf0b1c8864b230279322b4f05ffa8d628fd2979e6fc61e366c7efe633afa5439c6f38c7
- SSDEEP 96:hFDMgRsnreqgq+q+q15cmFIfnzvN0EJ40LW+LmlgKGJ6V0+piF6ywZ62x3Yxx:hZGrj5xQvKgK2boV0YivwZ6e3Ax
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/python/python.js
- SHA256 8b98aeb80e1fd053e80cdfbf79437338d8b1081ccbd999c5373da225777296ad
- MD5 d3618ce8d5aec23fff67ced39c79ebd9
- SHA1 2c66c7b3d631784ce297ad081fdffe48e1739eec
- SHA512 8a6d270aa09fa215fde2333febf0f012c803e83f7ee4091688b91c423408e7b0754d9e1ac3dbc4cb1d8cde7c06e59a6f140aa38f5c18e43bd2ef544f22b2dce8
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/r/r.js
- SHA256 710905ba785b707484afed8404c2b092f0b7ca4bf5aa35a7d333a7c07afee712
- MD5 bb2637578ba902dcd3ea172cf8c7b7ea
- SHA1 28c77f1e22ffe267c5ac0960938a9e0bc510fe22
- SHA512 b14e61cbd53971bbbee1f237b8c44aaf567c738c54376625ade5dd121a2364dce69d39f20d6c4f28bd66348dc0832d2b6540d0acc85b5054e0b6fd81a8999c25
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/razor/razor.js
- SHA256 2ad872aa67a12a578e652762c21136b9c9e2a741c2752d69ef48c2eb22cc621c
- MD5 c87e5b4654c9011e1df9eeaa10fa4379
- SHA1 25871cadcebb9eab44d65ef8483f03c6e4c44723
- SHA512 aae1eb996d6c157899ea466a184b263dc4380f56615a4c69bc49a49bb30856f55374d8c7dcf159b0d0a8250c24eaa0b8a7b9a40ff2084f20b51becd3dd5e9535
- SSDEEP 192:hZnmP+xRERld2BZW40v4Ou6e+vMHjIoQceC8TElNOYJXW:hYP+tsP3zkIoQceCE6JG
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/redis/redis.js
- SHA256 81d912c3bd211ab866500ebc901eeb628b21e5979587901adece649baff48f30
- MD5 947b18f3f04fe16fc51beea925aab14b
- SHA1 246f89fe753b6c98202e02bccb7d4cb4d47ed045
- SHA512 54356cfc1b4f280e3b653e8ec073efb633bebaa15386f2cdefddb232f141c66b55de062601ef8306146fc7662bca6a110f9464da1b27e481df2faf66d035bd6d
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/redshift/redshift.js
- SHA256 b461f7951effbf085cd7a090dd4e69e54f812a2543f55a4ecacaee7ef6649bdf
- MD5 c08941967ac5ba8cc4a2971b2c888456
- SHA1 22d1a7f1e89d9850507d5eba78bf734764d7197f
- SHA512 9311c13be9e19c0062870bd4c2b92815bf4427056dbbbd6a2ec71ed76c8c66c4138f929776ce788c918c51813a61f0e05f00eac984b51fbcc16620958f3655ca
- SSDEEP 192:hZnzLxzLJlx3dDC5QPsHoa2WMrtSCV0bPjNQoMyIG6r9TjasW:hBLxztR+MJ/WfCuFQobIGe9/asW
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/ruby/ruby.js
- SHA256 5f249877eef9e52f52dbe2bb4b158da3a6f7fc2d267487298d537292596b6089
- MD5 9d0eddeae6d9bf3d3d9eebf7858b45bd
- SHA1 6f0fb7feb21491fa8e46763945c266880d904461
- SHA512 eeee65842033cc4f122689ffc7c3c660317d5c5d411c452ea73a26f71d041ab05c8beb6d0fd3b2d8a8fc787ac408007b0f6785b867fbdb1c55ab94eb75c017d3
- SSDEEP 192:hZn4cxI35E7BuN7MVziYlG3z9GEpWyuy7:hScx+E7cMwj9Fsvu
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/rust/rust.js
- SHA256 7c4e77f3bc6f3fb580c1c329f515e30830e6f6352d088b7948f73fa1662a3664
- MD5 f48a41336bcc1a195503c7a020ea508c
- SHA1 75f5bc806c449422e7a56de8fc3c1e3626768a12
- SHA512 f4e94b5c3dcb1fb90373f92637618e774737ac1646e5b24cb28bdfdd5188af3f61ddf49224d1459b22ddcf89b6a1fcd86884cbe2df62f826ec9cb94c5af1277b
- SSDEEP 96:hFDMgRs6Q9rbV1+gqVV1+/yldNmlf9LJ5MnWe1l0gHY4Rt04TW:hZnYrTO6llLJ5de3i4Y
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/sb/sb.js
- SHA256 51c0bbde8b266514a37f00707c34bab27571b7eb38bddc5a45bb3f987ce5227d
- MD5 95a88fd3ac1433bc136a792bd892c1d2
- SHA1 7e75796e0896b429e4d4dbdeaf83adff3c8aef29
- SHA512 0cdecc828bcf7e49fdd7be2f2e27b099d1fb3465d13b18e61b4baf1bccb8d78560666ae503ef1adf6be62975f96b685bb922c59ecc203e598c502e2e91cddc94
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/scss/scss.js
- SHA256 438f781e751495302a0e2359ea93b54d7f9cba383fb44185d73bc6e2a5a38e81
- MD5 3e266f1f8eaaae110c8ae9e31fe5cb41
- SHA1 d939d3b5cb8a5df6fca3ce2531fd633e59fe34b2
- SHA512 4bbef3febbdcebcaf8242107bf5e260ebd92bd99d00777316a2dfe29865a2d20ab11808b23d9616d77550e82d69af71fadda95eb41e83387516c21480deffbe0
- SSDEEP 96:hFDMgRsJ6rMq+q17qcq6V1+/Zpj1ctjT0PIVhUE5CsqdpvcWLPMlxXALYJvc:hZe6rr9AnhPKIsuvcWLPMfXALCvc
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/solidity/solidity.js
- SHA256 e71c1df85ced6a51254a45152ceb9bab1ec3a003e8e4911ab35c737b52d42ae4
- MD5 0c117b4dc07c6a0a0d063d1504e04ea6
- SHA1 3f72a2469df69925e2c9fa31066a56a4327acde4
- SHA512 8a209f5cb7503e716c470728d744e0674717e63df2db3590086f09866047c6f668d8d393a510320c2a1658d9026b5a968164ba3fcead36b270c364b0e663f5f2
- SSDEEP 384:hSrtoAZRoMteOKV6TXRcJcWlXvEnMemjVjlVuRHBziYQ:crtoZOA6TKJccXcnMemZ+HFA
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/sql/sql.js
- SHA256 d1ab939c0ba1033252787f1f13b503d870ee5784a23a3b0b89857860075c035b
- MD5 4788f14a5c95a359af5ee52efbcf862d
- SHA1 dd4bd763cadf57a529a0732224ec6e27cb08cbb9
- SHA512 f24ad9e95c092ba62c9646876858368b095234e212797ea76df8c708efcd4622f872ab30a21d3ec1b341e9d69924d22faeec8d949784a4ccbd02e3c877c68617
- SSDEEP 384:hwLxocwBLdRtOmmeuA7It3OMvZi3vzVga+hFyPWg8N7+HLJfh+kQ9/3W:KLxocwlU26lvZi7Vga+7yPkshAfW
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/st/st.js
- SHA256 29e530c3a0dae1dc1b630a0867132a2513b1996b7eb0d1f4090336bd6004ff09
- MD5 7f3ef65a0f0f0aeedcd64d57f191d7a6
- SHA1 b5a95d5fef3fc22c865cc176c0664928a2610582
- SHA512 ea0508987801b487dc5370bf7d1a37c486994853eb0e1991f0ec4c9b5ffe378c7c8f701df7d4defedc34c5e23512305c6297d70a51d478e292e40c25c4a40c6a
- SSDEEP 96:hFDMgRslrafEUAV1+wCXaVcJlkGLaTNzFgigKNVKVpzVxmKRBzb/eV1+/mQVcJl3:hZIrEol2JJi1VJJsjWaGr5aVl2Xaw
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/swift/swift.js
- SHA256 5e9896a1e113b93502a1249b0cc78a844b000b803410a9a956854faac8528366
- MD5 1bdd6f185cd2b5f4e11c6fac19e86175
- SHA1 e812770ef107ecdf3ccf779eeba58e0b8c0487a8
- SHA512 e8d3811f1b7d776ea49e1de61b5c1234d55eb0257664d8234c94eb22cd9289f7d304676d9565a69f44dc065ba569ca8b7e6a45c0ff9c62a673104c95ba4a7982
- SSDEEP 96:hFDMgRswdrbV1+/mQcV1+/mQSMFyb0EUiyH/l3w6Bh1D0rth:hZldrT1x1480Dv2h
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/vb/vb.js
- SHA256 5ca2ef383ccbfd449dceb76db571211374314054e22977bbeb785e2aaf8ecf24
- MD5 fd92faac5b4b3dfc2aa8cd7deb8efecf
- SHA1 39bd460afa0c614d4106602a2afb5c2c9d7cb1b0
- SHA512 fdec42d463673cbace6b50081190f0f9d2adf57130da04abaa4513c4f569ae2b676883e5d1140b38d17d0aadd602a583c0fd27d7ed071112c5093c3051266338
- SSDEEP 96:hFDMgRsrSVNv2q+q17qcqR5FX5BmzpMCgkxIcKYWKkVe9Nu6Ke7UivaQ:hZem1q5FJOZxWYlkVe+ewW
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/xml/xml.js
- SHA256 01896b21ba9fe9106316197da8118596101b966d4597aa794720f2561cbe15d8
- MD5 837efa6cbae0c226509b3f496c20660d
- SHA1 1a6263d04cd8eea94e31583611a9c7246351482a
- SHA512 a2787c69cd3989d239cce372fe141dde121caf8a637843413d590f4ff77941f10d8a8f8590bbfdb2255e97528289a7673e5377e469bedd8f63135ef70c12a46a
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/basic-languages/yaml/yaml.js
- SHA256 3730024b6d24b2ea2e9794123b038eee4383e9ae94fabd849aceb9596ad9d2d0
- MD5 a812c4e3188d84d073a481b2cadc21bd
- SHA1 a3988727891fdbcd6a0a9b88fd8aeee6767ada99
- SHA512 c6b9fa1cd85870dd9ce718d7d598a0456eb3e6d8ce762fc0a39fe59472d0a6cd000c2fecf0c39beb7dfe00ecf12cf4586850fb9a93005ecea8b23fe1538b7087
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/contrib/suggest/media/String_16x.svg
- SHA256 d1aa361f33564e8f9d527a01a66c7ce35d73f23417432e80ddf51f562770ee79
- MD5 48e754cb54c78a85dcc9aaea9a27847e
- SHA1 8d79b23037deb6586e4954305dcb4caee14afbd2
- SHA512 f6d902b5c73b59636cb71d4019ff45cb77532bf22aab28a8314697e24a62163a94140c97495ad5ce421c09c26e4bcbfe5a815eae27e945c51ccd80c2ba9c3a77
- SSDEEP 48:CnN6wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKm:zJWFCMcfkCFGE6+yZCacJImkArbbqrAm
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg
- SHA256 7d23c0f30cb9c05c81bb15785a3299772ae3cfbe51f3e04895aa1f23ffbeba5b
- MD5 6e5c0ce7ec09969f07ea6ee078ef8ad6
- SHA1 deadc5357a26852d872bffa77d1aa19108603b25
- SHA512 2b02cb82f9e4720ee43bfc8b7fe5d6de38228329aafbedb589d5a219057c15f073023deca3c1ca5b65cea4a4f0d863ebd88c889b1d67119639fae2ce180863bf
- SSDEEP 48:Cn7wkEX+c9Vlt4AFCj93Z0hDC7hSBnukNyhDFtrJGuG2XvS+yZCahDC7hSBnhKHG:EJWFCMcfkCFGE6+yZCacJImkArbbqrAm
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.css
- SHA256 2ec118616a1370e7c37342da85834ca1819400c28f83abfcbbb1ef50b51f7701
- MD5 233217455a3ef3604bf4942024b94f98
- SHA1 95cd3ce46f4ca65708ec25d59dddbfa3fc44e143
- SHA512 6f4cb7b88673666b7dc1beab3ec2aec4d7d353e6da9f6f14ed2fee8848c7da34ee5060d9eb34ecbb5db71b5b98e3f8582c09ef3efe4f2d9d3135dea87d497455
- SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq5bbhLynlDTkDatDF8Jmmvgs0aMJkn:p2bIRkDSYmmvgs0aMJK
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.js
- SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
- MD5 9399a8eaa741d04b0ae6566a5ebb8106
- SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
- SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
- SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.de.js
- SHA256 0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae
- MD5 4d83bc1bced6f773423be6f939472cfe
- SHA1 1b42889a7f580df9f7d399c33141d38548143ed1
- SHA512 c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4
- SSDEEP 768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.es.js
- SHA256 203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba
- MD5 b371235f971baa51f58f123f40c4435a
- SHA1 843d4a2d214c7d9da650cf4d0c6981ac1dab69c6
- SHA512 77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a
- SSDEEP 384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.fr.js
- SHA256 7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99
- MD5 d319e61fc6b357b9a5d8e3bbaa44ce3c
- SHA1 b1539b082b2b8290f05dfe17d6fee3d64b2ec244
- SHA512 6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6
- SSDEEP 768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.it.js
- SHA256 f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab
- MD5 a8855a662eb4d3a771fdab7ba6287def
- SHA1 a78b57810ac8e9704e97897c6168f4140d2eadf7
- SHA512 1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5
- SSDEEP 768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.ja.js
- SHA256 ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f
- MD5 a1f3c9e940206ca310147d644305a6e1
- SHA1 005a8f7023b9d873962c7272203cc0c0d0ccc624
- SHA512 f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69
- SSDEEP 384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.js
- SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
- MD5 74dd2381ddbb5af80ce28aefed3068fc
- SHA1 0996dc91842ab20387e08a46f3807a3f77958902
- SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
- SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.ko.js
- SHA256 100ca482c015571ed9aad97c2dcc5e266b270a650ce892507443b5d4f32df64f
- MD5 9ccf83d22e9a9bfafa2000f366ac47e6
- SHA1 be61e121af1a363aa66d875f46e78562a603566e
- SHA512 3d68816994abff5c528610733cc729e91d390422c2ee2259dcef3cc4db9a599c1f3800f412259fe2f9a700bf2847b942a253986c011c659868bc9edaae6c2f16
- SSDEEP 384:hS67TmO5oU1Yh4XK8ApE6/z2dHDNV1KiAaA+17tDDN3H6Sg4s/zKz8G3uyroDXYd:rmO5oGXrmi1zDB12zKzuyroKcNVk
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.ru.js
- SHA256 fa180f7b77ee252aefe73ba5993fbe7c89f43482358d7fd32e8e2f50b3b21bed
- MD5 fd1aa66906d2b3c0c9b734b17f04d73b
- SHA1 299145469d5d5397a42274ccc908c865ebc46cfa
- SHA512 235c2ea1806c13dc0b85f06b5c9f2f811bd145968e2a0ad47c3fa1e063d408efc034dca7baf0b91942cc34e995d1274692c5556c2fb875dbb1054157da9c0132
- SSDEEP 768:CXH0AKgvFBBK1ED81Z0LVdcan9oUxPr1TPgFuEFYPm/XftWZc:CXHXNtBBK1SLVdcan9oWPgFuEFYPm/d
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.zh-cn.js
- SHA256 ac881e6f56544ed9b8dd4fd8fd8a73f1da864fb8d79d91c45f5a51f923bd5287
- MD5 f954ac1091c6d0b640ed5f0abdcd8adb
- SHA1 43e0d5e39910d124c384549df0b119ad1ebb12b3
- SHA512 8aff4877bf97ca29dfd5555fe5078ed3f05ac99c43f12c9b1c4d77ca11b1d040a81e0769c10a46a0bb32f3ffe72ae1a223faf5276d05a11f981aa7677e140c83
- SSDEEP 768:FzMPbIhYBG5OcP2WyCzVsEJvjA1agnGMR:F8fcPN8Gw
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/editor.main.nls.zh-tw.js
- SHA256 7751df224ac12dbc2e918b12fdbaa465306b6c511e4e1587790163edac18ad46
- MD5 73031ff9956da03354038b3185222af8
- SHA1 712cbf8027cae6c422490499538ec4a0928c6a78
- SHA512 48b80e78a6751ff58eb33ae92f3ad0e31d2e719d9dc9f4926db41e44f8ca9819cea7b657196f4f96c8a1291d57c59c70ffcd64cc9f8cdffc12bc6b5ff6c50e77
- SSDEEP 768:pEOtM9oECeRbdFF0D1N+QZyzB0StZ4XUeqJ1wrv6Vl9YLz1/ewyOm:HXEJpdFF0xN+QyoUeqJ1wrv6Vl9Y8wo
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
- SHA256 fcc3026b97068f3d9e1743d36ca26b96ffdbcd2841fa9d804caccc4f249911c8
- MD5 649fb0a55b0e0fc9d79e6b7872a14c10
- SHA1 b33619c9dfd65d3f2e5a5fcb767a752123d51607
- SHA512 3fb4b07e9313b69c84f887c9ca0464e4c8d06a98a8f2ad7d0b48452d068bd526004c21633d0279b4b5e17ad882acf8c7e99b4c3e7650be43b495b670a87d0cbd
- SSDEEP 384:cyPJZCcKWPJuCNoSmvcar1PNY6g2HdSjEc3/WD3:DCdCNkvcaQ6x9SjES/W7
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/css/cssMode.js
- SHA256 d3108af9ffcdad3133345686646cafe3b628ad6b25a3758786b2aa7b7b51809d
- MD5 40a99739f89d382c92eb26f05a9a4497
- SHA1 30e6c52658f49bf5c6103a95d1c3ed50d71b02f2
- SHA512 9011557bc41865dc6b44495174ea2f27c700e95dabdaa67d8bdd4b798a367a29cea91def2171c5176160f5791d7bfcc2cd65b58db4ded721ed2868e4198049e7
- SSDEEP 384:h1kwG9aih9phed6ZwRVwCs8fTxUfyP0sYrkoJWMGIk8:aQih9pwd6KsuTxUfyFikkWMGC
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/css/cssWorker.js
- SHA256 288bb68a2c685957b5dc3e5353b1a03dc482b10858059063b99c1549d5fef01c
- MD5 152244e2ab4f663141e9466a8282ebe8
- SHA1 e9c0e86fbc108600d3e42a6654c5de073607ddce
- SHA512 112039647883a1cdb6a860ce1d2980562222b593508da1ea8c9838b7184e76f72de9eb68d2727ce12c78e3c0be7e85101591df6ebde1e73dcf8c2495c8454855
- SSDEEP 6144:PhKjqIze+tAxt+A7zOM1L0G52ppgGDcoFGPL2gXwiOcFt+oiEipHxJKnVZPUsf:IqkA7zO/pUIPsf
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/html/htmlMode.js
- SHA256 80d6f099563af129b4deff66f7b9d4dfb27ad0058dcb5b77d927e460022dafee
- MD5 c944ad9527d22b6ca6c0d54fd0723296
- SHA1 ddfb323ded66de709fa8b05abe0ada931ac9dd43
- SHA512 3a6abb3a15401d28e4926ac008f991b7a19b359c8420d7e5bb6804061b6f82a2bedfb86823862e1ccfbc046e896cb1a5759199f7e723fd7b1b5e6aeb19f92f58
- SSDEEP 192:hA6ZF2Cw7DrFcelxzEKfxmflhyLpYvws8edvt9vKVwZVtDFzp6RMSyotuK1sD5Sv:hJw7DTfAlhCpvedmw+MS+KOD5Sc7Pzo
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/html/htmlWorker.js
- SHA256 e80444d8fa519ff86e5c696a40843bc8392b2d3afb83118a2dd92da5497c9212
- MD5 3f5802a91a29e4504d5cd2f10ac280b8
- SHA1 368d01e59eaf25f164ab1d80b7f5d74b625b242d
- SHA512 2f3670227710c291e5e9136b2cac5c70421c2537b86219fe17ed33161136a08f5cb2069822b16a58ce377b6d1a265cf33215a1695bda5a701bae566410ce33e7
- SSDEEP 3072:wNxSv2ym9FNq9m8iktJFu/TgHdcyDnLEOhUm3xSvp:wNxSv2ym9FNimBmFu/TgHdcgnLEOhUmE
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/json/jsonMode.js
- SHA256 08af59e449f6c058514bf05c54511ee6ec83934ab9dc3e803257196b2812e8ae
- MD5 44955b6c43b7aac58492233efeeb70ad
- SHA1 528b1f0d8ebce7a607c008aa66a1d0ecd903d3d3
- SHA512 5a86921260ae9f87eb134513809231c9b512200cd2f330df37a098124db0da8c8bcef5dc668875e21328ce9a6c79440811dbbc3371147690c71d31b97745666e
- SSDEEP 768:ghT0rpM0GwBsUWdD5Sw7NibC2FyGf5Zot3OYoHAymtVoQvafg+HfNc75eEWAdy0h:gyM0GwBeD5jhiA3B7VjIQfdy0h
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/json/jsonWorker.js
- SHA256 7c6d37bb341cf59335f6a3e5e336d0de863124fa40a8f9b5f29d8da07891b649
- MD5 61e9b732bedc39b547804ac7e8897aab
- SHA1 187cba5fbd9c31257119dde24a28573b4973ef5c
- SHA512 200e32143bbcda809b0003298aa561ebb27509d309168de81ad8529476ab64caee0502b9fe0b513469c21b82edb421b642183a250d2ba4d65c74ba4c1cbe39dc
- SSDEEP 1536:rIAGGhzNFVAg0Edqq6L05i4Xw9dA+IKFt:cRyzNFV5jXOA+IKT
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/typescript/lib/typescriptServices.js
- SHA256 90e98063c644749a948edd5a7801f7b00c554e3189fe7c2811926b01eaf1b41f
- MD5 0a1a293455f5451ba11e07386ea62d4f
- SHA1 d6a43c68812a3dcddc2973db3f2dd8a6b0e45f1e
- SHA512 1674e2ad75c53f99475743618ec59d90ce8eb262131c15daead963ecb847cb70278a6d4608c66710c3cd5e92e03b5552a05401b6b008184dbf892683b27ca34a
- SSDEEP 49152:G6qR6wZ7g2oZNDR3Oy4mtYsT2ACKRRrcLHd5:W61/4mTy
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/typescript/tsMode.js
- SHA256 70957c5ede2834adf1b5bc264e119f82b4e8e6c169fc8ff140d637d1c5287bd9
- MD5 8c1a82479c380d2b2c6b096e12ee9632
- SHA1 78e429dd4a9279267679423ddb0b6d06c11172ac
- SHA512 409c8724ecfa045a7563b5c142ef0a107bffe126140bcbe5202dad59b9ba5ec0db91c74c77d5a60be92110b9d0c942fac61a782ee30a4288774f547f303e1c4a
- SSDEEP 384:hgFzm27hrrEZAmdHpjHenNvaOm/6xS1oTEXx3KjFRMqxRh2l3eBVq1A8WKm3d5vp:2FyHhzHenNvaF6xCoSx3KjFqqxL21eBp
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/language/typescript/tsWorker.js
- SHA256 2ccc6b6b1b5d884fe8df3e7b2f2bacca0c4529b68bbfe3c547fcc74f204cc5d1
- MD5 1e0047691c3637ad1e0da62023ba0e0d
- SHA1 64902c923c2194e007bc727f7ea4f30b3a796dab
- SHA512 c1bef7bfd60acfcfb206b9631f8a730b787e94101d519d157d346d8377104d1302c0e9853ba2db944d63f03b181511950b9ea25dd21e41f40b4aeba4bc44c0c8
- SSDEEP 24576:pQIJc020hIvUjQQ0s2oI4Q0s2oI4QIJc020hIvUjQQ0s2oI4Q0s2oIq:Qo3MfgfHo3Mfgfq
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/bin/vs/loader.js
- SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
- MD5 8a3086f6c6298f986bda09080dd003b1
- SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
- SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
- SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/dependenciescheck.bat
- SHA256 7614f455160f222d242f687ae465acc54eeb12d18e0a2832ab5b792ba08360e2
- MD5 484bb12eff0a2b359b94671b669aea88
- SHA1 a97be749eccc42a3503c94710db55c1ace6bbe7f
- SHA512 3ad43168f515574f3e930fbe44c5316c6908c7c61b602eef96d976cdc1c411cf570bfc0ff0ebbe6a940e761610853bd8384fee310ee993a29c65e197757cde7b
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/tabs.json
- SHA256 695bc0f3114bec708c8d4bed63b8cd8f00acf63d819bbd2480be8fce14a577db
- MD5 768b26f60e8c69f6adedce98927ce6b4
- SHA1 a2de4d66b553d402561dcedb0e8f78e77b1f8498
- SHA512 fd7403e83e64815946df56b0f7528f706e54a859f6a56116841fe86a320aea9e775c0911df2f9644d3a7472cccccf0813ff46812083c72ed76355791c1bdc23f
- MD5 SHA1 SHA512
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
SaladBootstrapper/xxhash.dll
- IMPHASH fba6b233846a2ea5e6907e23b2de9a26
- SHA256 3fb171ca29d11a9f4f296d0732a5fbf5b0b0bb8b83926784b1fff168175c68b2
- MD5 efa2cd16a47d15deaf348156eb6e14d8
- SHA1 f8c8807210ae3c2557d928e634fce6e34d48a576
- SHA512 bf268a01c693ac40644f5aea93a21005a8b35ae0c935e663ebeeba2afa91e46efa3ef0b9209c3328dc73ca52e71fdb85cd301f73bdc03aa1bd0d54e9307b1c0f
- SSDEEP 768:s1WkmhW508rbV9uoF6QV8nBT+RYOsYeZbK9DSPot87xq8auTUol:s1aW5BrbuHbnBiGO9SbToyxq8auT
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
37248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\Desktop\xxhs\vcpkg\buildtrees\xxhash\x64-windows-rel\xxhash.pdb
vcruntime140
memcpy
__std_type_info_destroy_list
__C_specific_handler
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_initialize_narrow_environment
kernel32
GetCurrentThreadId
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
RtlCaptureContext
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
XXH128
XXH128_canonicalFromHash
XXH128_cmp
XXH128_hashFromCanonical
XXH128_isEqual
XXH32
XXH32_canonicalFromHash
XXH32_copyState
XXH32_createState
XXH32_digest
XXH32_freeState
XXH32_hashFromCanonical
XXH32_reset
XXH32_update
XXH3_128bits
XXH3_128bits_digest
XXH3_128bits_reset
XXH3_128bits_reset_withSecret
XXH3_128bits_reset_withSecretandSeed
XXH3_128bits_reset_withSeed
XXH3_128bits_update
XXH3_128bits_withSecret
XXH3_128bits_withSecretandSeed
XXH3_128bits_withSeed
XXH3_64bits
XXH3_64bits_digest
XXH3_64bits_reset
XXH3_64bits_reset_withSecret
XXH3_64bits_reset_withSecretandSeed
XXH3_64bits_reset_withSeed
XXH3_64bits_update
XXH3_64bits_withSecret
XXH3_64bits_withSecretandSeed
XXH3_64bits_withSeed
XXH3_copyState
XXH3_createState
XXH3_freeState
XXH3_generateSecret
XXH3_generateSecret_fromSeed
XXH64
XXH64_canonicalFromHash
XXH64_copyState
XXH64_createState
XXH64_digest
XXH64_freeState
XXH64_hashFromCanonical
XXH64_reset
XXH64_update
XXH_versionNumber
Name
.text
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
44B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=33731,
count=3, id=259, version=33731,
count=8, id=260, version=33731,
count=12, id=261, version=33731,
count=2, id=257, version=30795,
count=37, id=1, productName=Unmarked objects,
count=1, id=260, version=33812,
count=1, id=256, version=33812,
count=1, id=255, version=33812,
count=1, id=258, version=33812,
SaladBootstrapper/zstd.dll
- IMPHASH f32e8587cacdf9095c309b87f2877ebb
- SHA256 115a2e56238e05299e65111b8361b8de3324f188d172129ca4fc641b56ad0a7e
- MD5 fcbc4271f6b949ebe5fc7f02c7732378
- SHA1 81bdcf7fc286bedd3cb9575fa97673752f53e3e5
- SHA512 c2c416cf41b76530c301d12be62ef490d45d260b1a1aa1e7be3512215f3ffbce88792e70bb159f4982947a1a8fbf4df38c2e7119a8a124ccfeeab6d2a2bf95f8
- SSDEEP 6144:/qd76u2e8QuAkx7OT5evcME1Tk82zXtrwXgOTmkriCiaNFcuU2JmR/RXusb:i4u2IuAWcMEgzXt8QCmZCiaAuUn
- MD5 SHA1 SHA512 SSDEEP
-
Embeds OpenSSL
Embeds OpenSSL, may be used to circumvent TLS interception.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
568492
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\rizve\Desktop\zstd\vcpkg\buildtrees\zstd\x64-windows-rel\lib\zstd.pdb
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
CloseHandle
GetLastError
WaitForSingleObject
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
vcruntime140
memcmp
memcpy
__C_specific_handler
memmove
__std_type_info_destroy_list
memset
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
_initterm_e
_configure_narrow_argv
_seh_filter_dll
_initterm
_beginthreadex
_errno
_execute_onexit_table
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
fflush
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-time-l1-1-0
clock
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictHeaderSize
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_optimizeTrainFromBuffer_cover
ZDICT_optimizeTrainFromBuffer_fastCover
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_cover
ZDICT_trainFromBuffer_fastCover
ZDICT_trainFromBuffer_legacy
ZSTD_CCtxParams_getParameter
ZSTD_CCtxParams_init
ZSTD_CCtxParams_init_advanced
ZSTD_CCtxParams_registerSequenceProducer
ZSTD_CCtxParams_reset
ZSTD_CCtxParams_setParameter
ZSTD_CCtx_getParameter
ZSTD_CCtx_loadDictionary
ZSTD_CCtx_loadDictionary_advanced
ZSTD_CCtx_loadDictionary_byReference
ZSTD_CCtx_refCDict
ZSTD_CCtx_refPrefix
ZSTD_CCtx_refPrefix_advanced
ZSTD_CCtx_refThreadPool
ZSTD_CCtx_reset
ZSTD_CCtx_setCParams
ZSTD_CCtx_setFParams
ZSTD_CCtx_setParameter
ZSTD_CCtx_setParametersUsingCCtxParams
ZSTD_CCtx_setParams
ZSTD_CCtx_setPledgedSrcSize
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DCtx_getParameter
ZSTD_DCtx_loadDictionary
ZSTD_DCtx_loadDictionary_advanced
ZSTD_DCtx_loadDictionary_byReference
ZSTD_DCtx_refDDict
ZSTD_DCtx_refPrefix
ZSTD_DCtx_refPrefix_advanced
ZSTD_DCtx_reset
ZSTD_DCtx_setFormat
ZSTD_DCtx_setMaxWindowSize
ZSTD_DCtx_setParameter
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_cParam_getBounds
ZSTD_checkCParams
ZSTD_compress
ZSTD_compress2
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingCDict_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressSequences
ZSTD_compressStream
ZSTD_compressStream2
ZSTD_compressStream2_simpleArgs
ZSTD_compress_advanced
ZSTD_compress_usingCDict
ZSTD_compress_usingCDict_advanced
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtxParams
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_advanced2
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_createThreadPool
ZSTD_dParam_getBounds
ZSTD_decodingBufferSize_min
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDDict
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressBound
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompressStream_simpleArgs
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_decompressionMargin
ZSTD_defaultCLevel
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateCCtxSize_usingCCtxParams
ZSTD_estimateCCtxSize_usingCParams
ZSTD_estimateCDictSize
ZSTD_estimateCDictSize_advanced
ZSTD_estimateCStreamSize
ZSTD_estimateCStreamSize_usingCCtxParams
ZSTD_estimateCStreamSize_usingCParams
ZSTD_estimateDCtxSize
ZSTD_estimateDDictSize
ZSTD_estimateDStreamSize
ZSTD_estimateDStreamSize_fromFrame
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_frameHeaderSize
ZSTD_freeCCtx
ZSTD_freeCCtxParams
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_freeThreadPool
ZSTD_generateSequences
ZSTD_getBlockSize
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromCDict
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameHeader
ZSTD_getFrameHeader_advanced
ZSTD_getFrameProgression
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingCDict_advanced
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_initStaticCCtx
ZSTD_initStaticCDict
ZSTD_initStaticCStream
ZSTD_initStaticDCtx
ZSTD_initStaticDDict
ZSTD_initStaticDStream
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_isSkippableFrame
ZSTD_maxCLevel
ZSTD_mergeBlockDelimiters
ZSTD_minCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_readSkippableFrame
ZSTD_registerSequenceProducer
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_sequenceBound
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_toFlushNow
ZSTD_versionNumber
ZSTD_versionString
ZSTD_writeSkippableFrame
Name
.text
Size
553KB
Virtual Size
553KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
196B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=33731,
count=4, id=259, version=33731,
count=8, id=260, version=33731,
count=13, id=261, version=33731,
count=3, id=257, version=30795,
count=58, id=1, productName=Unmarked objects,
count=36, id=260, version=33812,
count=1, id=256, version=33812,
count=1, id=255, version=33812,
count=1, id=151,
count=1, id=258, version=33812,