neshta | StrixRat V2[.]0[.]7z

resource	yara_rule
static1/unpack001/StrixRat V2.0/res/Lib/7z.exe	family_neshta
static1/unpack001/StrixRat V2.0/res/Lib/aapt.exe	family_neshta
static1/unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/java.exe	family_neshta
static1/unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/javaw.exe	family_neshta
static1/unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/unpack200.exe	family_neshta

resource	yara_rule
static1/unpack001/StrixRat V2.0/Bunifu_UI_v1.5.3.dll	agile_net

resource
unpack001/StrixRat V2.0/Cryptolens.Licensing.dll
unpack001/StrixRat V2.0/DrakeUI.Framework.dll
unpack001/StrixRat V2.0/Embeded.dll
unpack001/StrixRat V2.0/GeoIPCitys.dll
unpack001/StrixRat V2.0/LiveCharts.WinForms.dll
unpack001/StrixRat V2.0/LiveCharts.Wpf.dll
unpack001/StrixRat V2.0/LiveCharts.dll
unpack001/StrixRat V2.0/NAudio.dll
unpack001/StrixRat V2.0/SipaaFramework.dll
unpack001/StrixRat V2.0/StrixRat.exe
unpack001/StrixRat V2.0/VeryReal.Framework.dll
unpack001/StrixRat V2.0/WinMM.Net.dll
unpack001/StrixRat V2.0/res/Lib/7z.dll
unpack001/StrixRat V2.0/res/Lib/7z.exe
unpack001/StrixRat V2.0/res/Lib/aapt.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/JAWTAccessBridge-64.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/JavaAccessBridge-64.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/WindowsAccessBridge-64.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/attach.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/awt.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/dt_shmem.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/dt_socket.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/fontmanager.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/freetype.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/hprof.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/instrument.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/j2pcsc.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/j2pkcs11.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jaas_nt.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jabswitch.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/java-rmi.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/java.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/java.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/java_crw_demo.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/javaw.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jawt.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jdwp.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jjs.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jli.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jpeg.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jsdt.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jsound.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/jsoundds.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/keytool.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/kinit.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/klist.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/ktab.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/lcms.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/management.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/mlib_image.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/net.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/nio.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/npt.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/orbd.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/pack200.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/policytool.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/rmid.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/rmiregistry.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/sawindbg.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/server/jvm.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/servertool.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/splashscreen.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/sunec.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/sunmscapi.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/tnameserv.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/unpack.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/unpack200.exe
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/verify.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/w2k_lsa_auth.dll
unpack001/StrixRat V2.0/res/Lib/platformBinary/platformBinary64/bin/zip.dll

StrixRat V2.0.7z

.7z

Password: ixeeno

StrixRat V2.0/Bunifu_UI_v1.5.3.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Code Sign

02:ac:5c:26:6a:0b:40:9b:8f:0b:79:f2:ae:46:25:77
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2031, 00:00

Subject

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

08:f8:b2:43:88:63:93:78:21:d1:77:24:80:3c:cf:30
Certificate

Issuer

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/11/2017, 00:00

Not After

12/11/2018, 12:00

Subject

SERIALNUMBER=P051534213R,CN=Bunifu Technologies\, LTD,O=Bunifu Technologies\, LTD,L=Nairobi,C=KE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#13024b45

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2014, 00:00

Not After

22/10/2024, 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Certificate

Issuer

CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

18/04/2012, 12:00

Not After

18/04/2027, 12:00

Subject

CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10/11/2006, 00:00

Not After

10/11/2021, 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth

ExtKeyUsageClientAuth

ExtKeyUsageCodeSigning

ExtKeyUsageEmailProtection

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5c:77:06:b1:6d:99:75:73:11:ed:06:41:47:14:c8:c3:c0:0b:e3:a1
Signer

Actual PE Digest

5c:77:06:b1:6d:99:75:73:11:ed:06:41:47:14:c8:c3:c0:0b:e3:a1

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\bunifu\Desktop\Bunifu Framework\Projects\Master\bunifu-framework-winforms-repo\Obfuscation\1.5.4 - secured\Bunifu_UI_v1.5.3.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Cryptolens.Licensing.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\Artem Los\Documents\GitHub\SKGL-Extension-for-dot-NET\Cryptolens.Licensing\obj\Release\net48\Cryptolens.Licensing.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/DrakeUI.Framework.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

E:\DrakeUI.Framework\DrakeUI.Framework\DrakeUI.Framework\obj\Release\DrakeUI.Framework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Embeded.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/GeoIPCitys.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\EVLF\source\repos\GeoIPCitys\GeoIPCitys\obj\Debug\GeoIPCitys.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Guna.UI2.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Code Sign

7a:98:1b:7d:3e:b4:86:bb:45:84:c4:3c:c9:a8:3f:db
Certificate

Issuer

CN=Sobatdata Root CA

Not Before

23/10/2019, 05:22

Not After

22/10/2025, 17:00

Subject

CN=Sobatdata Software

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99
Signer

Actual PE Digest

51:85:2a:c3:53:87:5a:c8:6e:df:5c:75:c9:c6:c7:dc:b9:6d:bd:99

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Licence.p12

StrixRat V2.0/License.xml

StrixRat V2.0/LiveCharts.WinForms.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Users\btord\Documents\Projects\LiveCharts\WinFormsView\obj\Release\LiveCharts.WinForms.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/LiveCharts.Wpf.dll

.dll windows:4 windows x86 arch:x86

Password: ixeeno

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Users\btord\Documents\Projects\LiveCharts\WpfView\obj\Release\LiveCharts.Wpf.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/LiveCharts.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\Users\btord\Documents\Projects\LiveCharts\Core40\obj\Release\LiveCharts.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/NAudio.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Users\Mark\code\github\NAudio\NAudio\obj\Release\net35\NAudio.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 496KB - Virtual size: 495KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Newtonsoft.Json.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/01/2021, 00:00

Not After

14/01/2046, 23:59

Subject

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Certificate

Issuer

CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US

Not Before

15/07/2021, 00:00

Not After

14/07/2031, 23:59

Subject

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Certificate

Issuer

CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US

Not Before

13/08/2021, 00:00

Not After

29/10/2024, 23:59

Subject

SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Signer

Actual PE Digest

38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 681KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Newtonsoft.Json.xml

.xml

StrixRat V2.0/SipaaFramework.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\Sources\VS\SipaaOS\SipaaOS\obj\Debug\SipaaFramework.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/Siticone.Desktop.UI.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

3a:93:0b:19:8f:29:72:9a:49:b0:8b:f3:6d:f8:17:ae
Certificate

Issuer

CN=Siticone Root CA

Not Before

05/02/2020, 06:42

Not After

22/10/2030, 17:00

Subject

CN=Siticone Technology

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

b1:71:29:25:46:e9:2d:e2:55:d6:f1:cb:f7:85:05:22:d0:ea:41:50
Signer

Actual PE Digest

b1:71:29:25:46:e9:2d:e2:55:d6:f1:cb:f7:85:05:22:d0:ea:41:50

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

Siticone.Desktop.UI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/StrixRat.exe

.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 141.8MB - Virtual size: 141.8MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/StrixRat.exe.config

.xml

StrixRat V2.0/StrixRat.pdb

StrixRat V2.0/System.ComponentModel.Annotations.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:bf:91:6c:fb:7c:1a:24:e0:22:00:00:00:00:00:bf
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=AOC+OU=nCipher DSE ESN:57C8-2D15-1C8B,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:79:7c:2e:57:4e:52:e1:ca:d6:00:01:00:00:01:79
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:11

Not After

11/08/2018, 20:11

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:c4:e9:89:f8:7a:81:50:e9:ff:00:00:00:00:00:c4
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

11/08/2017, 20:20

Not After

11/08/2018, 20:20

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

5f:90:d3:b6:dd:87:df:4e:84:6f:b5:22:f4:f6:9c:c6:e6:fd:34:f3:6b:0a:66:83:1d:4b:6c:06:60:25:a2:05
Signer

Actual PE Digest

5f:90:d3:b6:dd:87:df:4e:84:6f:b5:22:f4:f6:9c:c6:e6:fd:34:f3:6b:0a:66:83:1d:4b:6c:06:60:25:a2:05

Digest Algorithm

sha256

PE Digest Matches

true

c3:31:16:77:dd:f7:23:e7:e9:f0:6b:b3:3c:f4:65:e7:13:97:71:ed
Signer

Actual PE Digest

c3:31:16:77:dd:f7:23:e7:e9:f0:6b:b3:3c:f4:65:e7:13:97:71:ed

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

E:\A\_work\39\s\corefx\bin/obj/AnyOS.AnyCPU.Release/System.ComponentModel.Annotations/netfx\System.ComponentModel.Annotations.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/System.IO.Compression.ZipFile.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Code Sign

33:00:00:00:cb:d9:52:06:53:bf:3e:2a:59:00:00:00:00:00:cb
Certificate

Issuer

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/09/2016, 17:58

Not After

07/09/2018, 17:58

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:5847-F761-4F70,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

33:00:00:01:40:96:a9:ee:70:56:fe:cc:07:00:01:00:00:01:40
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

18/08/2016, 20:17

Not After

02/11/2017, 20:17

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:33:26:1a:00:00:00:00:00:31
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

31/08/2010, 22:19

Not After

31/08/2020, 22:29

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

61:16:68:34:00:00:00:00:00:1c
Certificate

Issuer

CN=Microsoft Root Certificate Authority,0.9.2342.19200300.100.1.25=#13096d6963726f736f6674,0.9.2342.19200300.100.1.25=#1303636f6d

Not Before

03/04/2007, 12:53

Not After

03/04/2021, 13:03

Subject

CN=Microsoft Time-Stamp PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

33:00:00:00:64:47:84:94:86:db:41:19:38:00:00:00:00:00:64
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

28/10/2015, 20:31

Not After

28/01/2017, 20:31

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77
Signer

Actual PE Digest

2b:e3:a3:2d:f8:71:76:9b:66:a7:70:02:ef:69:91:70:2e:1d:d6:c5:f3:f4:b4:cf:e9:62:5e:c5:de:66:cf:77

Digest Algorithm

sha256

PE Digest Matches

true

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94
Signer

Actual PE Digest

14:b0:8e:4d:e3:ae:df:ee:dd:e1:6b:b6:23:93:9d:2a:c5:d1:47:94

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

D:\A\_work\39\s\bin/obj/AnyOS.AnyCPU.Release/System.IO.Compression.ZipFile/net46\System.IO.Compression.ZipFile.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/VeryReal.Framework.dll

.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.zov0
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.zov1
Size: 196KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/WinMM.Net.dll

.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_NO_SEH

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/World.xml

StrixRat V2.0/discord.txt

StrixRat V2.0/res/Audio/1.wav

StrixRat V2.0/res/Audio/2.wav

StrixRat V2.0/res/Audio/3.wav

StrixRat V2.0/res/Audio/4.wav

StrixRat V2.0/res/Audio/5.wav

StrixRat V2.0/res/Audio/6.wav

StrixRat V2.0/res/Audio/alert.wav

StrixRat V2.0/res/Audio/eagle.wav

StrixRat V2.0/res/Audio/notification.wav

StrixRat V2.0/res/ClientCrashs/Client_Crash_null.txt

StrixRat V2.0/res/Config/Language.inf

StrixRat V2.0/res/Config/Pass.inf

StrixRat V2.0/res/Config/bot.txt

StrixRat V2.0/res/Config/id.txt

StrixRat V2.0/res/Config/maps.inf

StrixRat V2.0/res/Config/settings.inf

StrixRat V2.0/res/Config/supported_images.inf

StrixRat V2.0/res/Config/supported_text.inf

StrixRat V2.0/res/Config/supported_video.inf

StrixRat V2.0/res/Fonts/Hack-Bold.ttf

StrixRat V2.0/res/Fonts/Hack-BoldOblique.ttf

StrixRat V2.0/res/Fonts/Hack-Regular.ttf

StrixRat V2.0/res/Fonts/Hack-RegularOblique.ttf

StrixRat V2.0/res/GeoIP/Flags/-1-1.ico

StrixRat V2.0/res/GeoIP/Flags/-1.ico

StrixRat V2.0/res/GeoIP/Flags/AD.ico

StrixRat V2.0/res/GeoIP/Flags/AE.ico

StrixRat V2.0/res/GeoIP/Flags/AF.ico

StrixRat V2.0/res/GeoIP/Flags/AG.ico

StrixRat V2.0/res/GeoIP/Flags/AI.ico

StrixRat V2.0/res/GeoIP/Flags/AL.ico

StrixRat V2.0/res/GeoIP/Flags/AM.ico

StrixRat V2.0/res/GeoIP/Flags/AN.ico

StrixRat V2.0/res/GeoIP/Flags/AO.ico

StrixRat V2.0/res/GeoIP/Flags/AQ.ico

StrixRat V2.0/res/GeoIP/Flags/AR.ico

StrixRat V2.0/res/GeoIP/Flags/AS.ico

StrixRat V2.0/res/GeoIP/Flags/AT.ico

StrixRat V2.0/res/GeoIP/Flags/AU.ico

StrixRat V2.0/res/GeoIP/Flags/AW.ico

StrixRat V2.0/res/GeoIP/Flags/AX.ico

StrixRat V2.0/res/GeoIP/Flags/AZ.ico

StrixRat V2.0/res/GeoIP/Flags/BA.ico

StrixRat V2.0/res/GeoIP/Flags/BB.ico

StrixRat V2.0/res/GeoIP/Flags/BD.ico

StrixRat V2.0/res/GeoIP/Flags/BE.ico

StrixRat V2.0/res/GeoIP/Flags/BF.ico

StrixRat V2.0/res/GeoIP/Flags/BG.ico

StrixRat V2.0/res/GeoIP/Flags/BH.ico

StrixRat V2.0/res/GeoIP/Flags/BI.ico

StrixRat V2.0/res/GeoIP/Flags/BJ.ico

StrixRat V2.0/res/GeoIP/Flags/BL.ico

StrixRat V2.0/res/GeoIP/Flags/BM.ico

StrixRat V2.0/res/GeoIP/Flags/BN.ico

StrixRat V2.0/res/GeoIP/Flags/BO.ico

StrixRat V2.0/res/GeoIP/Flags/BR.ico

StrixRat V2.0/res/GeoIP/Flags/BS.ico

StrixRat V2.0/res/GeoIP/Flags/BT.ico

StrixRat V2.0/res/GeoIP/Flags/BW.ico

StrixRat V2.0/res/GeoIP/Flags/BY.ico

StrixRat V2.0/res/GeoIP/Flags/BZ.ico

StrixRat V2.0/res/GeoIP/Flags/CA.ico

StrixRat V2.0/res/GeoIP/Flags/CC.ico

StrixRat V2.0/res/GeoIP/Flags/CD.ico

StrixRat V2.0/res/GeoIP/Flags/CF.ico

StrixRat V2.0/res/GeoIP/Flags/CG.ico

StrixRat V2.0/res/GeoIP/Flags/CH.ico

StrixRat V2.0/res/GeoIP/Flags/CI.ico

StrixRat V2.0/res/GeoIP/Flags/CK.ico

StrixRat V2.0/res/GeoIP/Flags/CL.ico

StrixRat V2.0/res/GeoIP/Flags/CM.ico

StrixRat V2.0/res/GeoIP/Flags/CN.ico

StrixRat V2.0/res/GeoIP/Flags/CO.ico

StrixRat V2.0/res/GeoIP/Flags/CR.ico

StrixRat V2.0/res/GeoIP/Flags/CU.ico

StrixRat V2.0/res/GeoIP/Flags/CV.ico

StrixRat V2.0/res/GeoIP/Flags/CW.ico

StrixRat V2.0/res/GeoIP/Flags/CX.ico

StrixRat V2.0/res/GeoIP/Flags/CY.ico

StrixRat V2.0/res/GeoIP/Flags/CZ.ico

StrixRat V2.0/res/GeoIP/Flags/DE.ico

StrixRat V2.0/res/GeoIP/Flags/DJ.ico

StrixRat V2.0/res/GeoIP/Flags/DK.ico

StrixRat V2.0/res/GeoIP/Flags/DM.ico

StrixRat V2.0/res/GeoIP/Flags/DO.ico

StrixRat V2.0/res/GeoIP/Flags/DZ.ico

StrixRat V2.0/res/GeoIP/Flags/EC.ico

StrixRat V2.0/res/GeoIP/Flags/EE.ico

StrixRat V2.0/res/GeoIP/Flags/EG.ico

StrixRat V2.0/res/GeoIP/Flags/EH.ico

StrixRat V2.0/res/GeoIP/Flags/ER.ico

StrixRat V2.0/res/GeoIP/Flags/ES.ico

StrixRat V2.0/res/GeoIP/Flags/ET.ico

StrixRat V2.0/res/GeoIP/Flags/EU.ico

StrixRat V2.0/res/GeoIP/Flags/FI.ico

StrixRat V2.0/res/GeoIP/Flags/FJ.ico

StrixRat V2.0/res/GeoIP/Flags/FK.ico

StrixRat V2.0/res/GeoIP/Flags/FM.ico

StrixRat V2.0/res/GeoIP/Flags/FO.ico

StrixRat V2.0/res/GeoIP/Flags/FR.ico

StrixRat V2.0/res/GeoIP/Flags/GA.ico

StrixRat V2.0/res/GeoIP/Flags/GB.ico

StrixRat V2.0/res/GeoIP/Flags/GD.ico

StrixRat V2.0/res/GeoIP/Flags/GE.ico

StrixRat V2.0/res/GeoIP/Flags/GG.ico

StrixRat V2.0/res/GeoIP/Flags/GH.ico

StrixRat V2.0/res/GeoIP/Flags/GI.ico

StrixRat V2.0/res/GeoIP/Flags/GL.ico

StrixRat V2.0/res/GeoIP/Flags/GM.ico

StrixRat V2.0/res/GeoIP/Flags/GN.ico

StrixRat V2.0/res/GeoIP/Flags/GQ.ico

StrixRat V2.0/res/GeoIP/Flags/GR.ico

StrixRat V2.0/res/GeoIP/Flags/GS.ico

StrixRat V2.0/res/GeoIP/Flags/GT.ico

StrixRat V2.0/res/GeoIP/Flags/GU.ico

StrixRat V2.0/res/GeoIP/Flags/GW.ico

StrixRat V2.0/res/GeoIP/Flags/GY.ico

StrixRat V2.0/res/GeoIP/Flags/HK.ico

StrixRat V2.0/res/GeoIP/Flags/HN.ico

StrixRat V2.0/res/GeoIP/Flags/HR.ico

StrixRat V2.0/res/GeoIP/Flags/HT.ico

StrixRat V2.0/res/GeoIP/Flags/HU.ico

StrixRat V2.0/res/GeoIP/Flags/IC.ico

StrixRat V2.0/res/GeoIP/Flags/ID.ico

StrixRat V2.0/res/GeoIP/Flags/IE.ico

StrixRat V2.0/res/GeoIP/Flags/IL.ico

StrixRat V2.0/res/GeoIP/Flags/IM.ico

StrixRat V2.0/res/GeoIP/Flags/IN.ico

StrixRat V2.0/res/GeoIP/Flags/IQ.ico

StrixRat V2.0/res/GeoIP/Flags/IR.ico

StrixRat V2.0/res/GeoIP/Flags/IS.ico

StrixRat V2.0/res/GeoIP/Flags/IT.ico

StrixRat V2.0/res/GeoIP/Flags/JE.ico

StrixRat V2.0/res/GeoIP/Flags/JM.ico

StrixRat V2.0/res/GeoIP/Flags/JO.ico

StrixRat V2.0/res/GeoIP/Flags/JP.ico

StrixRat V2.0/res/GeoIP/Flags/KE.ico

StrixRat V2.0/res/GeoIP/Flags/KG.ico

StrixRat V2.0/res/GeoIP/Flags/KH.ico

StrixRat V2.0/res/GeoIP/Flags/KI.ico

StrixRat V2.0/res/GeoIP/Flags/KM.ico

StrixRat V2.0/res/GeoIP/Flags/KN.ico

StrixRat V2.0/res/GeoIP/Flags/KP.ico

StrixRat V2.0/res/GeoIP/Flags/KR.ico

StrixRat V2.0/res/GeoIP/Flags/KW.ico

StrixRat V2.0/res/GeoIP/Flags/KY.ico

StrixRat V2.0/res/GeoIP/Flags/KZ.ico

StrixRat V2.0/res/GeoIP/Flags/LA.ico

StrixRat V2.0/res/GeoIP/Flags/LB.ico

StrixRat V2.0/res/GeoIP/Flags/LC.ico

StrixRat V2.0/res/GeoIP/Flags/LI.ico

StrixRat V2.0/res/GeoIP/Flags/LK.ico

StrixRat V2.0/res/GeoIP/Flags/LR.ico

StrixRat V2.0/res/GeoIP/Flags/LS.ico

StrixRat V2.0/res/GeoIP/Flags/LT.ico

StrixRat V2.0/res/GeoIP/Flags/LU.ico

StrixRat V2.0/res/GeoIP/Flags/LV.ico

StrixRat V2.0/res/GeoIP/Flags/LY.ico

StrixRat V2.0/res/GeoIP/Flags/MA.ico

StrixRat V2.0/res/GeoIP/Flags/MC.ico

StrixRat V2.0/res/GeoIP/Flags/MD.ico

StrixRat V2.0/res/GeoIP/Flags/ME.ico

StrixRat V2.0/res/GeoIP/Flags/MF.ico

StrixRat V2.0/res/GeoIP/Flags/MG.ico

StrixRat V2.0/res/GeoIP/Flags/MH.ico

StrixRat V2.0/res/GeoIP/Flags/MK.ico

StrixRat V2.0/res/GeoIP/Flags/ML.ico

StrixRat V2.0/res/GeoIP/Flags/MM.ico

StrixRat V2.0/res/GeoIP/Flags/MN.ico

StrixRat V2.0/res/GeoIP/Flags/MO.ico

StrixRat V2.0/res/GeoIP/Flags/MP.ico

StrixRat V2.0/res/GeoIP/Flags/MQ.ico

StrixRat V2.0/res/GeoIP/Flags/MR.ico

StrixRat V2.0/res/GeoIP/Flags/MS.ico

StrixRat V2.0/res/GeoIP/Flags/MT.ico

StrixRat V2.0/res/GeoIP/Flags/MU.ico

StrixRat V2.0/res/GeoIP/Flags/MV.ico

StrixRat V2.0/res/GeoIP/Flags/MW.ico

StrixRat V2.0/res/GeoIP/Flags/MX.ico

StrixRat V2.0/res/GeoIP/Flags/MY.ico

StrixRat V2.0/res/GeoIP/Flags/MZ.ico

StrixRat V2.0/res/GeoIP/Flags/NA.ico

StrixRat V2.0/res/GeoIP/Flags/NC.ico

StrixRat V2.0/res/GeoIP/Flags/NE.ico

StrixRat V2.0/res/GeoIP/Flags/NF.ico

StrixRat V2.0/res/GeoIP/Flags/NG.ico

StrixRat V2.0/res/GeoIP/Flags/NI.ico

StrixRat V2.0/res/GeoIP/Flags/NL.ico

StrixRat V2.0/res/GeoIP/Flags/NO.ico

StrixRat V2.0/res/GeoIP/Flags/NP.ico

StrixRat V2.0/res/GeoIP/Flags/NR.ico

StrixRat V2.0/res/GeoIP/Flags/NU.ico

StrixRat V2.0/res/GeoIP/Flags/NZ.ico

StrixRat V2.0/res/GeoIP/Flags/OM.ico

StrixRat V2.0/res/GeoIP/Flags/PA.ico

StrixRat V2.0/res/GeoIP/Flags/PE.ico

StrixRat V2.0/res/GeoIP/Flags/PF.ico

StrixRat V2.0/res/GeoIP/Flags/PG.ico

StrixRat V2.0/res/GeoIP/Flags/PH.ico

StrixRat V2.0/res/GeoIP/Flags/PK.ico

StrixRat V2.0/res/GeoIP/Flags/PL.ico

StrixRat V2.0/res/GeoIP/Flags/PN.ico

StrixRat V2.0/res/GeoIP/Flags/PR.ico

StrixRat V2.0/res/GeoIP/Flags/PS.ico

StrixRat V2.0/res/GeoIP/Flags/PT.ico

StrixRat V2.0/res/GeoIP/Flags/PW.ico

StrixRat V2.0/res/GeoIP/Flags/PY.ico

StrixRat V2.0/res/GeoIP/Flags/QA.ico

StrixRat V2.0/res/GeoIP/Flags/RO.ico

StrixRat V2.0/res/GeoIP/Flags/RS.ico

StrixRat V2.0/res/GeoIP/Flags/RU.ico

StrixRat V2.0/res/GeoIP/Flags/RW.ico

StrixRat V2.0/res/GeoIP/Flags/SA.ico

StrixRat V2.0/res/GeoIP/Flags/SB.ico

StrixRat V2.0/res/GeoIP/Flags/SC.ico

StrixRat V2.0/res/GeoIP/Flags/SD.ico

StrixRat V2.0/res/GeoIP/Flags/SE.ico

StrixRat V2.0/res/GeoIP/Flags/SG.ico

StrixRat V2.0/res/GeoIP/Flags/SH.ico

StrixRat V2.0/res/GeoIP/Flags/SI.ico

StrixRat V2.0/res/GeoIP/Flags/SK.ico

StrixRat V2.0/res/GeoIP/Flags/SL.ico

StrixRat V2.0/res/GeoIP/Flags/SM.ico

StrixRat V2.0/res/GeoIP/Flags/SN.ico

StrixRat V2.0/res/GeoIP/Flags/SO.ico

StrixRat V2.0/res/GeoIP/Flags/SR.ico

StrixRat V2.0/res/GeoIP/Flags/SS.ico

StrixRat V2.0/res/GeoIP/Flags/ST.ico

StrixRat V2.0/res/GeoIP/Flags/SV.ico

StrixRat V2.0/res/GeoIP/Flags/SY.ico

StrixRat V2.0/res/GeoIP/Flags/SZ.ico

StrixRat V2.0/res/GeoIP/Flags/TC.ico

StrixRat V2.0/res/GeoIP/Flags/TD.ico

StrixRat V2.0/res/GeoIP/Flags/TF.ico

StrixRat V2.0/res/GeoIP/Flags/TG.ico

StrixRat V2.0/res/GeoIP/Flags/TH.ico

StrixRat V2.0/res/GeoIP/Flags/TJ.ico

StrixRat V2.0/res/GeoIP/Flags/TK.ico

StrixRat V2.0/res/GeoIP/Flags/TL.ico

StrixRat V2.0/res/GeoIP/Flags/TM.ico

StrixRat V2.0/res/GeoIP/Flags/TN.ico

StrixRat V2.0/res/GeoIP/Flags/TO.ico

StrixRat V2.0/res/GeoIP/Flags/TR.ico

StrixRat V2.0/res/GeoIP/Flags/TT.ico

StrixRat V2.0/res/GeoIP/Flags/TV.ico

StrixRat V2.0/res/GeoIP/Flags/TW.ico

StrixRat V2.0/res/GeoIP/Flags/TZ.ico

StrixRat V2.0/res/GeoIP/Flags/UA.ico

StrixRat V2.0/res/GeoIP/Flags/UG.ico

StrixRat V2.0/res/GeoIP/Flags/US.ico

StrixRat V2.0/res/GeoIP/Flags/UY.ico

StrixRat V2.0/res/GeoIP/Flags/UZ.ico

StrixRat V2.0/res/GeoIP/Flags/VA.ico

StrixRat V2.0/res/GeoIP/Flags/VC.ico

StrixRat V2.0/res/GeoIP/Flags/VE.ico

StrixRat V2.0/res/GeoIP/Flags/VG.ico

StrixRat V2.0/res/GeoIP/Flags/VI.ico

StrixRat V2.0/res/GeoIP/Flags/VN.ico

StrixRat V2.0/res/GeoIP/Flags/VU.ico

StrixRat V2.0/res/GeoIP/Flags/WF.ico

StrixRat V2.0/res/GeoIP/Flags/WS.ico

StrixRat V2.0/res/GeoIP/Flags/YE.ico

StrixRat V2.0/res/GeoIP/Flags/YT.ico

StrixRat V2.0/res/GeoIP/Flags/ZA.ico

StrixRat V2.0/res/GeoIP/Flags/ZM.ico

StrixRat V2.0/res/GeoIP/Flags/ZW.ico

StrixRat V2.0/res/GeoIP/Flags/_abkhazia.ico

StrixRat V2.0/res/GeoIP/Flags/_basque-country.ico

StrixRat V2.0/res/GeoIP/Flags/_british-antarctic-territory.ico

StrixRat V2.0/res/GeoIP/Flags/_commonwealth.ico

StrixRat V2.0/res/GeoIP/Flags/_england.ico

StrixRat V2.0/res/GeoIP/Flags/_gosquared.ico

StrixRat V2.0/res/GeoIP/Flags/_kosovo.ico

StrixRat V2.0/res/GeoIP/Flags/_mars.ico

StrixRat V2.0/res/GeoIP/Flags/_nagorno-karabakh.ico

StrixRat V2.0/res/GeoIP/Flags/_nato.ico

StrixRat V2.0/res/GeoIP/Flags/_northern-cyprus.ico

StrixRat V2.0/res/GeoIP/Flags/_olympics.ico

StrixRat V2.0/res/GeoIP/Flags/_red-cross.ico

StrixRat V2.0/res/GeoIP/Flags/_scotland.ico

StrixRat V2.0/res/GeoIP/Flags/_somaliland.ico

StrixRat V2.0/res/GeoIP/Flags/_south-ossetia.ico

StrixRat V2.0/res/GeoIP/Flags/_united-nations.ico

StrixRat V2.0/res/GeoIP/Flags/_wales.ico

StrixRat V2.0/res/GeoIP/GeoIP.dat

StrixRat V2.0/res/GeoIP/GeoIPCity.dat

StrixRat V2.0/res/Icons/Apps/air_translate.png

.png

StrixRat V2.0/res/Icons/Apps/alarm.png

.png

StrixRat V2.0/res/Icons/Apps/always_on_display.png

.png

StrixRat V2.0/res/Icons/Apps/appstore.png

.png

StrixRat V2.0/res/Icons/Apps/artcanvas.png

.png

StrixRat V2.0/res/Icons/Apps/backup_and_restore.png

.png

StrixRat V2.0/res/Icons/Apps/billing.png

.png

StrixRat V2.0/res/Icons/Apps/bixby.png

.png

StrixRat V2.0/res/Icons/Apps/bixby_vision.png

.png

StrixRat V2.0/res/Icons/Apps/bookmark.png

.png

StrixRat V2.0/res/Icons/Apps/calculator.png

.png

StrixRat V2.0/res/Icons/Apps/calendar.png

.png

StrixRat V2.0/res/Icons/Apps/camera.png

.png

StrixRat V2.0/res/Icons/Apps/capture.png

.png

StrixRat V2.0/res/Icons/Apps/car_mode.png

.png

StrixRat V2.0/res/Icons/Apps/clock.png

.png

StrixRat V2.0/res/Icons/Apps/clock_bg.png

.png

StrixRat V2.0/res/Icons/Apps/connect.png

.png

StrixRat V2.0/res/Icons/Apps/contacts.png

.png

StrixRat V2.0/res/Icons/Apps/device_maintenance.png

.png

StrixRat V2.0/res/Icons/Apps/document.png

.png

StrixRat V2.0/res/Icons/Apps/edge_screen.png

.png

StrixRat V2.0/res/Icons/Apps/email.png

.png

StrixRat V2.0/res/Icons/Apps/enhanced_features.png

.png

StrixRat V2.0/res/Icons/Apps/flow.png

.png

StrixRat V2.0/res/Icons/Apps/galaxy_apps.png

.png

StrixRat V2.0/res/Icons/Apps/gallery.png

.png

StrixRat V2.0/res/Icons/Apps/game_launcher.png

.png

StrixRat V2.0/res/Icons/Apps/gear_360.png

.png

StrixRat V2.0/res/Icons/Apps/gear_manager.png

.png

StrixRat V2.0/res/Icons/Apps/gtrans.png

.png

StrixRat V2.0/res/Icons/Apps/health.png

.png

StrixRat V2.0/res/Icons/Apps/home.png

.png

StrixRat V2.0/res/Icons/Apps/ic_bg_container.png

.png

StrixRat V2.0/res/Icons/Apps/ic_bg_container_mask.png

.png

StrixRat V2.0/res/Icons/Apps/ic_launcher.png

.png

StrixRat V2.0/res/Icons/Apps/image.png

.png

StrixRat V2.0/res/Icons/Apps/internet.png

.png

StrixRat V2.0/res/Icons/Apps/keyboard.png

.png

StrixRat V2.0/res/Icons/Apps/knox.png

.png

StrixRat V2.0/res/Icons/Apps/knox_2.png

.png

StrixRat V2.0/res/Icons/Apps/launcher.png

.png

StrixRat V2.0/res/Icons/Apps/led_icon_editor.png

.png

StrixRat V2.0/res/Icons/Apps/link_sharing.png

.png

StrixRat V2.0/res/Icons/Apps/live_drawing.png

.png

StrixRat V2.0/res/Icons/Apps/lockscreen.png

.png

StrixRat V2.0/res/Icons/Apps/members.png

.png

StrixRat V2.0/res/Icons/Apps/memo.png

.png

StrixRat V2.0/res/Icons/Apps/messaging.png

.png

StrixRat V2.0/res/Icons/Apps/milk.png

.png

StrixRat V2.0/res/Icons/Apps/music.png

.png

StrixRat V2.0/res/Icons/Apps/my_files.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_amr.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_apk.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_contact.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_eml.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_etc.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_gallery.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_html.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_hwp.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_memo.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_music.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_pdf.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_ppt.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_raw.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_s_planner.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_scrapbook.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_sdoc.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_snb.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_spd.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_storyalbum.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_task.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_txt.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_video.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_vtext.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_word.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_xls.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_list_zip.png

.png

StrixRat V2.0/res/Icons/Apps/myfiles_thumb_folder_home.png

.png

StrixRat V2.0/res/Icons/Apps/notes.png

.png

StrixRat V2.0/res/Icons/Apps/optical_reader.png

.png

StrixRat V2.0/res/Icons/Apps/pass.png

.png

StrixRat V2.0/res/Icons/Apps/pay.png

.png

StrixRat V2.0/res/Icons/Apps/penup.png

.png

StrixRat V2.0/res/Icons/Apps/phone.png

.png

StrixRat V2.0/res/Icons/Apps/phone_log.png

.png

StrixRat V2.0/res/Icons/Apps/photo360_editor.png

.png

StrixRat V2.0/res/Icons/Apps/photo_editor.png

.png

StrixRat V2.0/res/Icons/Apps/protect.png

.png

StrixRat V2.0/res/Icons/Apps/recorder_audio.png

.png

StrixRat V2.0/res/Icons/Apps/reminder.png

.png

StrixRat V2.0/res/Icons/Apps/s_health.png

.png

StrixRat V2.0/res/Icons/Apps/s_protect.png

.png

StrixRat V2.0/res/Icons/Apps/s_translator.png

.png

StrixRat V2.0/res/Icons/Apps/samsung_pay.png

.png

StrixRat V2.0/res/Icons/Apps/secure_folder.png

.png

StrixRat V2.0/res/Icons/Apps/settings.png

.png

StrixRat V2.0/res/Icons/Apps/smart_switch.png

.png

StrixRat V2.0/res/Icons/Apps/smart_view.png

.png

StrixRat V2.0/res/Icons/Apps/soundcamp.png

.png

StrixRat V2.0/res/Icons/Apps/story_album.png

.png

StrixRat V2.0/res/Icons/Apps/svoice.png

.png

StrixRat V2.0/res/Icons/Apps/tempmailicon.png

.png

StrixRat V2.0/res/Icons/Apps/theme_store.png

.png

StrixRat V2.0/res/Icons/Apps/translator.png

.png

StrixRat V2.0/res/Icons/Apps/video_editor.png

.png

StrixRat V2.0/res/Icons/Apps/video_library.png

.png

StrixRat V2.0/res/Icons/Apps/wallp.png

.png

StrixRat V2.0/res/Icons/Apps/ytlite.png

.png

StrixRat V2.0/res/Icons/FillEllipse/Account.png

.png

StrixRat V2.0/res/Icons/FillEllipse/CLICKED.png

.png

StrixRat V2.0/res/Icons/FillEllipse/FOCUSED.png

.png

StrixRat V2.0/res/Icons/FillEllipse/Incoming.png

.png

StrixRat V2.0/res/Icons/FillEllipse/LONG CLICKED.png

.png

StrixRat V2.0/res/Icons/FillEllipse/Missed.png

.png

StrixRat V2.0/res/Icons/FillEllipse/NA.png

.png

StrixRat V2.0/res/Icons/FillEllipse/NOTIFICATION.png

.png

StrixRat V2.0/res/Icons/FillEllipse/Outgoing.png

.png

StrixRat V2.0/res/Icons/FillEllipse/System.png

.png

StrixRat V2.0/res/Icons/FillEllipse/TEXT.png

.png

StrixRat V2.0/res/Icons/FillEllipse/User.png

.png

StrixRat V2.0/res/Icons/FillEllipse/WINDOW CHANGED.png

.png

StrixRat V2.0/res/Icons/FillEllipse/null.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/account.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/add.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/applications.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/callphone.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/calls.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/camera.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/clipboard.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/contacts.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/copy.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/cut.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/decode.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/delete.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/download.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/downloads.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/edit.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/encrypt.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/folder.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/hidden.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/info.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/keylogger.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/location.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/microphone.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/open.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/paste.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/paths.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/playsound.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/refresh.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/rename.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/server.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/show.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/sms.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/terminal.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/unzip.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/upload.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/viewfile.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/wallpaper.png

.png

StrixRat V2.0/res/Icons/Menu_Items/17/zip.png

.png

StrixRat V2.0/res/Icons/apk.ico

StrixRat V2.0/res/Icons/resoicons.zip

.zip

StrixRat V2.0/res/Icons/win/1.ico

StrixRat V2.0/res/Icons/win/10.ico

StrixRat V2.0/res/Icons/win/11.ico

StrixRat V2.0/res/Icons/win/12.ico

StrixRat V2.0/res/Icons/win/13.ico

StrixRat V2.0/res/Icons/win/14.ico

StrixRat V2.0/res/Icons/win/15.ico

StrixRat V2.0/res/Icons/win/16.ico

StrixRat V2.0/res/Icons/win/17.ico

StrixRat V2.0/res/Icons/win/18.ico

StrixRat V2.0/res/Icons/win/19.ico

StrixRat V2.0/res/Icons/win/2.ico

StrixRat V2.0/res/Icons/win/20.ico

StrixRat V2.0/res/Icons/win/3.ico

StrixRat V2.0/res/Icons/win/4.ico

StrixRat V2.0/res/Icons/win/5.ico

StrixRat V2.0/res/Icons/win/6.ico

StrixRat V2.0/res/Icons/win/7.ico

StrixRat V2.0/res/Icons/win/8.ico

StrixRat V2.0/res/Icons/win/9.ico

StrixRat V2.0/res/Lib/7z.dll

.dll windows:4 windows x86 arch:x86

f3dc956f72b38463817f1a764bf2b5a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

oleaut32

SysAllocStringByteLen

SysAllocStringLen

SysAllocString

SysFreeString

SysStringLen

VariantCopy

VariantClear

user32

CharPrevExA

CharUpperW

msvcrt

_adjust_fdiv

_initterm

_onexit

__dllonexit

?terminate@@YAXXZ

??1type_info@@UAE@XZ

_except_handler3

_beginthreadex

exit

strchr

strcat

strcpy

realloc

memset

free

malloc

strlen

wcscmp

strcmp

strstr

memmove

_CxxThrowException

memcpy

memcmp

_purecall

__CxxFrameHandler

kernel32

InitializeCriticalSection

ReleaseSemaphore

CreateSemaphoreW

ResetEvent

SetEvent

CreateEventW

SetThreadAffinityMask

ResumeThread

WaitForSingleObject

InterlockedIncrement

IsProcessorFeaturePresent

VirtualFree

VirtualAlloc

LoadLibraryW

FreeLibrary

QueryPerformanceCounter

GetOEMCP

DeleteCriticalSection

GetVersionExW

LocalFileTimeToFileTime

WaitForMultipleObjects

EnterCriticalSection

LeaveCriticalSection

GetSystemTimeAsFileTime

FileTimeToDosDateTime

DosDateTimeToFileTime

GlobalMemoryStatus

GetSystemInfo

GetCurrentProcess

GetProcessAffinityMask

FileTimeToLocalFileTime

FileTimeToSystemTime

CompareFileTime

GetLastError

MultiByteToWideChar

WideCharToMultiByte

CloseHandle

GetProcAddress

GetModuleHandleW

GetCurrentProcessId

GetTickCount

GetCurrentThreadId

GetModuleHandleA

Exports

CreateDecoder

CreateEncoder

CreateObject

GetHandlerProperty

GetHandlerProperty2

GetHashers

GetIsArc

GetMethodProperty

GetNumberOfFormats

GetNumberOfMethods

SetCaseSensitive

SetCodecs

SetLargePageMode

Sections

.text
Size: 932KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/7z.exe

.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/ALLPRIM

StrixRat V2.0/res/Lib/APKEditor.jar

.jar

StrixRat V2.0/res/Lib/APPS

.zip

StrixRat V2.0/res/Lib/BootPrim

StrixRat V2.0/res/Lib/CypherMini

StrixRat V2.0/res/Lib/FORGROUD

StrixRat V2.0/res/Lib/MainMith

StrixRat V2.0/res/Lib/OpenSSH/FixHostFilePermissions.ps1

.ps1

StrixRat V2.0/res/Lib/OpenSSH/FixUserFilePermissions.ps1

.ps1

StrixRat V2.0/res/Lib/OpenSSH/LICENSE.txt

StrixRat V2.0/res/Lib/OpenSSH/NOTICE.txt

StrixRat V2.0/res/Lib/OpenSSH/OpenSSHUtils.psd1

StrixRat V2.0/res/Lib/OpenSSH/OpenSSHUtils.psm1

.ps1

StrixRat V2.0/res/Lib/OpenSSH/_manifest/spdx_2.2/bsi.json

StrixRat V2.0/res/Lib/OpenSSH/_manifest/spdx_2.2/manifest.cat

StrixRat V2.0/res/Lib/OpenSSH/_manifest/spdx_2.2/manifest.spdx.json

StrixRat V2.0/res/Lib/OpenSSH/_manifest/spdx_2.2/manifest.spdx.json.sha256

StrixRat V2.0/res/Lib/OpenSSH/install-sshd.ps1

.ps1

StrixRat V2.0/res/Lib/OpenSSH/libcrypto.dll

.dll windows:6 windows x64 arch:x64

8929f19b8e99ca471b8cfa5b2eea4a18

Code Sign

33:00:00:03:84:d9:68:7d:66:cc:75:4b:a1:00:00:00:00:03:84
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

13/07/2023, 23:45

Not After

15/09/2024, 23:45

Subject

CN=Microsoft 3rd Party Application Component,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

4e:42:20:fc:bf:94:77:ef:de:9b:8f:f6:0d:7f:bb:bb:e4:e7:e1:d7:12:3f:94:bb:be:3f:27:cd:fc:04:d8:51
Signer

Actual PE Digest

4e:42:20:fc:bf:94:77:ef:de:9b:8f:f6:0d:7f:bb:bb:e4:e7:e1:d7:12:3f:94:bb:be:3f:27:cd:fc:04:d8:51

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_DLL

PDB Paths

C:\a\_work\1\s\Libressl\libressl\build_X64\crypto\Release\libcrypto.pdb

Imports

ws2_32

setsockopt

send

recv

getsockopt

connect

closesocket

WSAGetLastError

WSAStartup

inet_pton

ntohl

sendto

recvfrom

getsockname

htons

htonl

shutdown

getnameinfo

freeaddrinfo

getaddrinfo

gethostbyname

socket

ntohs

listen

ioctlsocket

bind

accept

ntdll

RtlCaptureContext

RtlPcToFileHeader

RtlLookupFunctionEntry

RtlUnwindEx

RtlVirtualUnwind

bcrypt

BCryptGenRandom

kernel32

GetLastError

GetCommandLineA

GetCPInfo

GetOEMCP

GetACP

IsValidCodePage

FindNextFileW

FindFirstFileExW

FindClose

MultiByteToWideChar

GetFullPathNameW

GetCurrentDirectoryW

OutputDebugStringW

FlushFileBuffers

LCMapStringW

CompareStringW

FlsFree

FlsSetValue

HeapSize

GetTimeZoneInformation

GetStringTypeW

SetEndOfFile

GetProcessHeap

GetCurrentThreadId

InitOnceExecuteOnce

FormatMessageA

InitializeCriticalSection

EnterCriticalSection

LeaveCriticalSection

DeleteCriticalSection

GetStdHandle

GetFileType

GetConsoleMode

SetConsoleMode

GetSystemTime

MoveFileExA

SystemTimeToFileTime

GetSystemInfo

GetModuleFileNameA

CloseHandle

ReleaseMutex

WaitForSingleObject

CreateMutexA

GetCurrentProcess

TerminateProcess

VirtualAlloc

VirtualFree

FlsGetValue

SetEnvironmentVariableW

FreeEnvironmentStringsW

GetEnvironmentStringsW

WideCharToMultiByte

UnhandledExceptionFilter

SetUnhandledExceptionFilter

IsProcessorFeaturePresent

QueryPerformanceCounter

GetCurrentProcessId

GetSystemTimeAsFileTime

InitializeSListHead

IsDebuggerPresent

GetStartupInfoW

GetModuleHandleW

InterlockedFlushSList

FlsAlloc

SetLastError

InitializeCriticalSectionAndSpinCount

TlsAlloc

TlsGetValue

TlsSetValue

TlsFree

FreeLibrary

GetProcAddress

LoadLibraryExW

EncodePointer

RaiseException

ExitProcess

GetModuleHandleExW

ReadFile

GetModuleFileNameW

WriteConsoleW

CreateFileW

GetDriveTypeW

GetFileInformationByHandle

PeekNamedPipe

SystemTimeToTzSpecificLocalTime

FileTimeToSystemTime

SetStdHandle

SetFilePointerEx

ReadConsoleW

WriteFile

GetConsoleOutputCP

HeapFree

HeapAlloc

HeapReAlloc

GetFileSizeEx

GetCommandLineW

Exports

ACCESS_DESCRIPTION_free

ACCESS_DESCRIPTION_it

ACCESS_DESCRIPTION_new

AES_cbc_encrypt

AES_cfb128_encrypt

AES_cfb1_encrypt

AES_cfb8_encrypt

AES_ctr128_encrypt

AES_decrypt

AES_ecb_encrypt

AES_encrypt

AES_ige_encrypt

AES_ofb128_encrypt

AES_set_decrypt_key

AES_set_encrypt_key

AES_unwrap_key

AES_wrap_key

ASIdOrRange_free

ASIdOrRange_it

ASIdOrRange_new

ASIdentifierChoice_free

ASIdentifierChoice_it

ASIdentifierChoice_new

ASIdentifiers_free

ASIdentifiers_it

ASIdentifiers_new

ASN1_ANY_it

ASN1_BIT_STRING_free

ASN1_BIT_STRING_get_bit

ASN1_BIT_STRING_it

ASN1_BIT_STRING_new

ASN1_BIT_STRING_set

ASN1_BIT_STRING_set_bit

ASN1_BMPSTRING_free

ASN1_BMPSTRING_it

ASN1_BMPSTRING_new

ASN1_ENUMERATED_free

ASN1_ENUMERATED_get

ASN1_ENUMERATED_get_int64

ASN1_ENUMERATED_it

ASN1_ENUMERATED_new

ASN1_ENUMERATED_set

ASN1_ENUMERATED_set_int64

ASN1_ENUMERATED_to_BN

ASN1_GENERALIZEDTIME_adj

ASN1_GENERALIZEDTIME_check

ASN1_GENERALIZEDTIME_free

ASN1_GENERALIZEDTIME_it

ASN1_GENERALIZEDTIME_new

ASN1_GENERALIZEDTIME_print

ASN1_GENERALIZEDTIME_set

ASN1_GENERALIZEDTIME_set_string

ASN1_GENERALSTRING_free

ASN1_GENERALSTRING_it

ASN1_GENERALSTRING_new

ASN1_IA5STRING_free

ASN1_IA5STRING_it

ASN1_IA5STRING_new

ASN1_INTEGER_cmp

ASN1_INTEGER_dup

ASN1_INTEGER_free

ASN1_INTEGER_get

ASN1_INTEGER_get_int64

ASN1_INTEGER_get_uint64

ASN1_INTEGER_it

ASN1_INTEGER_new

ASN1_INTEGER_set

ASN1_INTEGER_set_int64

ASN1_INTEGER_set_uint64

ASN1_INTEGER_to_BN

ASN1_NULL_free

ASN1_NULL_it

ASN1_NULL_new

ASN1_OBJECT_create

ASN1_OBJECT_free

ASN1_OBJECT_it

ASN1_OBJECT_new

ASN1_OCTET_STRING_cmp

ASN1_OCTET_STRING_dup

ASN1_OCTET_STRING_free

ASN1_OCTET_STRING_it

ASN1_OCTET_STRING_new

ASN1_OCTET_STRING_set

ASN1_PCTX_free

ASN1_PCTX_get_cert_flags

ASN1_PCTX_get_flags

ASN1_PCTX_get_nm_flags

ASN1_PCTX_get_oid_flags

ASN1_PCTX_get_str_flags

ASN1_PCTX_new

ASN1_PCTX_set_cert_flags

ASN1_PCTX_set_flags

ASN1_PCTX_set_nm_flags

ASN1_PCTX_set_oid_flags

ASN1_PCTX_set_str_flags

ASN1_PRINTABLESTRING_free

ASN1_PRINTABLESTRING_it

ASN1_PRINTABLESTRING_new

ASN1_PRINTABLE_free

ASN1_PRINTABLE_it

ASN1_PRINTABLE_new

ASN1_PRINTABLE_type

ASN1_SEQUENCE_ANY_it

ASN1_SEQUENCE_it

ASN1_SET_ANY_it

ASN1_STRING_TABLE_add

ASN1_STRING_TABLE_cleanup

ASN1_STRING_TABLE_get

ASN1_STRING_cmp

ASN1_STRING_copy

ASN1_STRING_data

ASN1_STRING_dup

ASN1_STRING_free

ASN1_STRING_get0_data

ASN1_STRING_get_default_mask

ASN1_STRING_length

ASN1_STRING_length_set

ASN1_STRING_new

ASN1_STRING_print

ASN1_STRING_print_ex

ASN1_STRING_print_ex_fp

ASN1_STRING_set

ASN1_STRING_set0

ASN1_STRING_set_by_NID

ASN1_STRING_set_default_mask

ASN1_STRING_set_default_mask_asc

ASN1_STRING_to_UTF8

ASN1_STRING_type

ASN1_STRING_type_new

ASN1_T61STRING_free

ASN1_T61STRING_it

ASN1_T61STRING_new

ASN1_TIME_adj

ASN1_TIME_check

ASN1_TIME_cmp_time_t

ASN1_TIME_compare

ASN1_TIME_diff

ASN1_TIME_free

ASN1_TIME_it

ASN1_TIME_new

ASN1_TIME_normalize

ASN1_TIME_print

ASN1_TIME_set

ASN1_TIME_set_string

ASN1_TIME_set_string_X509

ASN1_TIME_set_tm

ASN1_TIME_to_generalizedtime

ASN1_TIME_to_tm

ASN1_TYPE_cmp

ASN1_TYPE_free

ASN1_TYPE_get

ASN1_TYPE_get_int_octetstring

ASN1_TYPE_get_octetstring

ASN1_TYPE_new

ASN1_TYPE_set

ASN1_TYPE_set1

ASN1_TYPE_set_int_octetstring

ASN1_TYPE_set_octetstring

ASN1_UNIVERSALSTRING_free

ASN1_UNIVERSALSTRING_it

ASN1_UNIVERSALSTRING_new

ASN1_UNIVERSALSTRING_to_string

ASN1_UTCTIME_adj

ASN1_UTCTIME_check

ASN1_UTCTIME_cmp_time_t

ASN1_UTCTIME_free

ASN1_UTCTIME_it

ASN1_UTCTIME_new

ASN1_UTCTIME_print

ASN1_UTCTIME_set

ASN1_UTCTIME_set_string

ASN1_UTF8STRING_free

ASN1_UTF8STRING_it

ASN1_UTF8STRING_new

ASN1_VISIBLESTRING_free

ASN1_VISIBLESTRING_it

ASN1_VISIBLESTRING_new

ASN1_add_oid_module

ASN1_d2i_bio

ASN1_d2i_fp

ASN1_dup

ASN1_generate_nconf

ASN1_generate_v3

ASN1_get_object

ASN1_i2d_bio

ASN1_i2d_fp

ASN1_item_d2i

ASN1_item_d2i_bio

ASN1_item_d2i_fp

ASN1_item_digest

ASN1_item_dup

ASN1_item_ex_d2i

ASN1_item_ex_free

ASN1_item_ex_i2d

ASN1_item_ex_new

ASN1_item_free

ASN1_item_i2d

ASN1_item_i2d_bio

ASN1_item_i2d_fp

ASN1_item_new

ASN1_item_pack

ASN1_item_print

ASN1_item_sign

ASN1_item_sign_ctx

ASN1_item_unpack

ASN1_item_verify

ASN1_mbstring_copy

ASN1_mbstring_ncopy

ASN1_object_size

ASN1_parse

ASN1_parse_dump

ASN1_put_eoc

ASN1_put_object

ASN1_tag2bit

ASN1_tag2str

ASN1_time_parse

ASN1_time_tm_clamp_notafter

ASN1_time_tm_cmp

ASRange_free

ASRange_it

ASRange_new

AUTHORITY_INFO_ACCESS_free

AUTHORITY_INFO_ACCESS_it

AUTHORITY_INFO_ACCESS_new

AUTHORITY_KEYID_free

AUTHORITY_KEYID_it

AUTHORITY_KEYID_new

BASIC_CONSTRAINTS_free

BASIC_CONSTRAINTS_it

BASIC_CONSTRAINTS_new

BF_cbc_encrypt

BF_cfb64_encrypt

BF_decrypt

BF_ecb_encrypt

BF_encrypt

BF_ofb64_encrypt

BF_set_key

BIGNUM_it

BIO_CONNECT_free

BIO_CONNECT_new

BIO_accept

BIO_callback_ctrl

BIO_clear_flags

BIO_copy_next_retry

BIO_ctrl

BIO_ctrl_get_read_request

BIO_ctrl_get_write_guarantee

BIO_ctrl_pending

BIO_ctrl_reset_read_request

BIO_ctrl_wpending

BIO_debug_callback

BIO_dgram_non_fatal_error

BIO_dump

BIO_dump_cb

BIO_dump_fp

BIO_dump_indent

BIO_dump_indent_cb

BIO_dump_indent_fp

BIO_dup_chain

BIO_f_base64

BIO_f_buffer

BIO_f_cipher

BIO_f_md

BIO_f_nbio_test

BIO_f_null

BIO_fd_non_fatal_error

BIO_fd_should_retry

BIO_find_type

BIO_free

BIO_free_all

BIO_get_accept_socket

BIO_get_callback

BIO_get_callback_arg

BIO_get_callback_ex

BIO_get_data

BIO_get_ex_data

BIO_get_ex_new_index

BIO_get_host_ip

BIO_get_init

BIO_get_new_index

BIO_get_port

BIO_get_retry_BIO

BIO_get_retry_reason

BIO_get_shutdown

BIO_gethostbyname

BIO_gets

BIO_indent

BIO_int_ctrl

BIO_meth_free

BIO_meth_get_callback_ctrl

BIO_meth_get_create

BIO_meth_get_ctrl

BIO_meth_get_destroy

BIO_meth_get_gets

BIO_meth_get_puts

BIO_meth_get_read

BIO_meth_get_write

BIO_meth_new

BIO_meth_set_callback_ctrl

BIO_meth_set_create

BIO_meth_set_ctrl

BIO_meth_set_destroy

BIO_meth_set_gets

BIO_meth_set_puts

BIO_meth_set_read

BIO_meth_set_write

BIO_method_name

BIO_method_type

BIO_new

BIO_new_CMS

BIO_new_PKCS7

BIO_new_accept

BIO_new_bio_pair

BIO_new_connect

BIO_new_dgram

BIO_new_fd

BIO_new_file

BIO_new_fp

BIO_new_mem_buf

BIO_new_socket

BIO_next

BIO_number_read

BIO_number_written

BIO_pop

BIO_printf

BIO_ptr_ctrl

BIO_push

BIO_puts

BIO_read

BIO_s_accept

BIO_s_bio

BIO_s_connect

BIO_s_datagram

BIO_s_fd

BIO_s_file

BIO_s_mem

BIO_s_null

BIO_s_socket

BIO_set

BIO_set_callback

BIO_set_callback_arg

BIO_set_callback_ex

BIO_set_cipher

BIO_set_data

BIO_set_ex_data

BIO_set_flags

BIO_set_init

BIO_set_next

BIO_set_retry_reason

BIO_set_shutdown

BIO_set_tcp_ndelay

BIO_snprintf

BIO_sock_cleanup

BIO_sock_error

BIO_sock_init

BIO_sock_non_fatal_error

BIO_sock_should_retry

BIO_socket_ioctl

BIO_socket_nbio

BIO_test_flags

BIO_up_ref

BIO_vfree

BIO_vprintf

BIO_vsnprintf

BIO_write

BN_CTX_end

BN_CTX_free

BN_CTX_get

BN_CTX_new

BN_CTX_start

BN_GENCB_call

BN_GENCB_free

BN_GENCB_get_arg

BN_GENCB_new

BN_GENCB_set

BN_GENCB_set_old

BN_MONT_CTX_copy

BN_MONT_CTX_free

BN_MONT_CTX_new

BN_MONT_CTX_set

BN_MONT_CTX_set_locked

BN_abs_is_word

BN_add

BN_add_word

BN_asc2bn

BN_bin2bn

BN_bn2bin

BN_bn2binpad

BN_bn2dec

BN_bn2hex

BN_bn2lebinpad

BN_bn2mpi

BN_clear

BN_clear_bit

BN_clear_free

BN_cmp

BN_consttime_swap

BN_copy

BN_dec2bn

BN_div

BN_div_word

BN_dup

BN_exp

BN_free

BN_from_montgomery

BN_gcd

BN_generate_prime_ex

BN_get_flags

BN_get_rfc2409_prime_1024

BN_get_rfc2409_prime_768

BN_get_rfc3526_prime_1536

BN_get_rfc3526_prime_2048

BN_get_rfc3526_prime_3072

BN_get_rfc3526_prime_4096

BN_get_rfc3526_prime_6144

BN_get_rfc3526_prime_8192

BN_get_word

BN_hex2bn

BN_is_bit_set

BN_is_negative

BN_is_odd

BN_is_one

BN_is_prime_ex

BN_is_prime_fasttest_ex

BN_is_word

BN_is_zero

BN_kronecker

BN_lebin2bn

BN_lshift

BN_lshift1

BN_mask_bits

BN_mod_add

BN_mod_add_quick

BN_mod_exp

BN_mod_exp2_mont

BN_mod_exp_mont

BN_mod_exp_mont_consttime

BN_mod_exp_mont_word

BN_mod_exp_simple

BN_mod_inverse

BN_mod_lshift

BN_mod_lshift1

BN_mod_lshift1_quick

BN_mod_lshift_quick

BN_mod_mul

BN_mod_mul_montgomery

BN_mod_sqr

BN_mod_sqrt

BN_mod_sub

BN_mod_sub_quick

BN_mod_word

BN_mpi2bn

BN_mul

BN_mul_word

BN_new

BN_nnmod

BN_num_bits

BN_num_bits_word

BN_one

BN_print

BN_print_fp

BN_pseudo_rand

BN_pseudo_rand_range

BN_rand

BN_rand_range

BN_rshift

BN_rshift1

BN_security_bits

BN_set_bit

BN_set_flags

BN_set_negative

BN_set_word

BN_sqr

BN_sub

BN_sub_word

BN_swap

BN_to_ASN1_ENUMERATED

BN_to_ASN1_INTEGER

BN_to_montgomery

BN_uadd

BN_ucmp

BN_usub

BN_value_one

BN_with_flags

BN_zero

BUF_MEM_free

BUF_MEM_grow

BUF_MEM_grow_clean

BUF_MEM_new

CAST_cbc_encrypt

CAST_cfb64_encrypt

CAST_decrypt

CAST_ecb_encrypt

CAST_encrypt

CAST_ofb64_encrypt

CAST_set_key

CBIGNUM_it

CERTIFICATEPOLICIES_free

CERTIFICATEPOLICIES_it

CERTIFICATEPOLICIES_new

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 533KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.pdata
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/OpenSSH/moduli

StrixRat V2.0/res/Lib/OpenSSH/openssh-events.man

.xml

StrixRat V2.0/res/Lib/OpenSSH/sshd_config_default

StrixRat V2.0/res/Lib/OpenSSH/uninstall-sshd.ps1

StrixRat V2.0/res/Lib/ReadPrim

StrixRat V2.0/res/Lib/SystemwindowPrim

StrixRat V2.0/res/Lib/WritePrim

StrixRat V2.0/res/Lib/aapt.exe

.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_LOCAL_SYMS_STRIPPED

IMAGE_FILE_BYTES_REVERSED_LO

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 42KB

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/accessibilityprivatesrcapp

StrixRat V2.0/res/Lib/apksigner.jar

.jar

StrixRat V2.0/res/Lib/apktool.jar

.jar

StrixRat V2.0/res/Lib/batteryprim

StrixRat V2.0/res/Lib/certificate.pem

StrixRat V2.0/res/Lib/classes2.dex

.dex

StrixRat V2.0/res/Lib/dropstub

.zip

StrixRat V2.0/res/Lib/junk.smali

.ps1

StrixRat V2.0/res/Lib/key.pk8

StrixRat V2.0/res/Lib/libaapt2_jni.dll

.dll windows:6 windows x86 arch:x86

743bb9d054ef2817921fc7debb5907f2

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/07/2021, 00:00

Not After

10/07/2024, 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e6:8a:ac:f6:d0:02:33:a0:0b:58:a2:39:b7:f6:9d:14:38:f9:ee:f5:98:03:4b:bd:32:be:d9:32:8c:41:ed:7d
Signer

Actual PE Digest

e6:8a:ac:f6:d0:02:33:a0:0b:58:a2:39:b7:f6:9d:14:38:f9:ee:f5:98:03:4b:bd:32:be:d9:32:8c:41:ed:7d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LARGE_ADDRESS_AWARE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

AcquireSRWLockExclusive

AddVectoredExceptionHandler

CloseHandle

CreateEventA

CreateFileMappingA

CreateFileMappingW

CreateMutexA

CreateSemaphoreA

CreateThread

DeleteCriticalSection

DuplicateHandle

EnterCriticalSection

ExitProcess

FindFirstVolumeW

FindNextVolumeW

FindVolumeClose

FlsAlloc

FlsGetValue

FlsSetValue

FormatMessageW

GetCurrentDirectoryW

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetDiskFreeSpaceExW

GetFileAttributesA

GetFileAttributesW

GetFileInformationByHandle

GetFileSizeEx

GetFileType

GetHandleInformation

GetLastError

GetModuleFileNameA

GetProcessAffinityMask

GetSystemInfo

GetSystemTimeAsFileTime

GetTempPathW

GetThreadContext

GetThreadId

GetThreadPriority

GetTickCount

GetTimeZoneInformation

GetVolumeInformationW

InitOnceExecuteOnce

InitializeCriticalSection

IsDBCSLeadByteEx

IsDebuggerPresent

LeaveCriticalSection

MapViewOfFile

MultiByteToWideChar

OutputDebugStringA

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReadFile

ReleaseMutex

ReleaseSRWLockExclusive

ReleaseSemaphore

RemoveVectoredExceptionHandler

ResetEvent

ResumeThread

SetEndOfFile

SetEvent

SetFilePointer

SetLastError

SetProcessAffinityMask

SetThreadContext

SetThreadPriority

SetUnhandledExceptionFilter

SignalObjectAndWait

Sleep

SleepConditionVariableSRW

SuspendThread

SwitchToThread

TerminateProcess

TlsAlloc

TlsGetValue

TlsSetValue

TryAcquireSRWLockExclusive

TryEnterCriticalSection

UnhandledExceptionFilter

UnmapViewOfFile

VirtualProtect

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

WaitForSingleObjectEx

WakeAllConditionVariable

WakeConditionVariable

WideCharToMultiByte

api-ms-win-crt-convert-l1-1-0

_strtod_l

_strtoi64_l

_strtoui64_l

_ultoa

atof

atoi

mbstowcs

strtol

strtoul

wcrtomb_s

wcstol

wcstombs

wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ

__p__wenviron

getenv

api-ms-win-crt-filesystem-l1-1-0

_findclose

_findfirst32

_findnext32

_fstat32i64

_fullpath

_lock_file

_stat32

_stat32i64

_unlock_file

_waccess

_wchdir

_wmkdir

_wstat32

_wunlink

remove

_unlink

_rmdir

api-ms-win-crt-heap-l1-1-0

_aligned_free

_aligned_malloc

calloc

free

malloc

realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

frexp

_fdopen

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vfwprintf

__stdio_common_vsprintf

__stdio_common_vsscanf

_close

_dup

_fseeki64

_ftelli64

_get_osfhandle

_lseeki64

_telli64

_wfopen

_wmktemp_s

_wopen

_write

fclose

feof

ferror

fflush

fgetwc

fopen

fputc

fputs

fputwc

fread

fseek

ftell

fwrite

getc

ungetc

_write

_setmode

_read

_open

_fileno

_dup2

_dup

_close

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

___mb_cur_max_func

__pctype_func

_configthreadlocale

_create_locale

_free_locale

localeconv

setlocale

api-ms-win-crt-string-l1-1-0

_isctype_l

_iswalpha_l

_iswcntrl_l

_iswdigit_l

_iswlower_l

_iswprint_l

_iswpunct_l

_iswspace_l

_iswupper_l

_iswxdigit_l

_strcoll_l

_strnicmp

_strxfrm_l

_tolower_l

_toupper_l

_towlower_l

_towupper_l

_wcscoll_l

_wcsxfrm_l

isalnum

isalpha

islower

isspace

isupper

iswalpha

iswctype

isxdigit

memset

strcmp

strcpy

strcpy_s

strlen

strncmp

strncpy

strpbrk

tolower

toupper

wcslen

_stricmp

_strdup

api-ms-win-crt-private-l1-1-0

_setjmp3

longjmp

memchr

memcmp

memcpy

memmove

strchr

strrchr

strstr

api-ms-win-crt-time-l1-1-0

__daylight

__timezone

__tzname

_gmtime32

_localtime32

_localtime32_s

_strftime_l

_time32

_tzset

strftime

api-ms-win-crt-utility-l1-1-0

rand_s

api-ms-win-crt-runtime-l1-1-0

_set_app_type

__p___argc

__p___argv

__p___wargv

__sys_nerr

_beginthreadex

_configure_narrow_argv

_configure_wide_argv

_crt_atexit

_endthreadex

_errno

_execute_onexit_table

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_register_onexit_function

abort

exit

strerror

strerror_s

_getpid

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

Exports

@XmlUtf16Encode@8

@XmlUtf8Encode@8

Java_com_android_tools_aapt2_Aapt2Jni_nativeCompile

Java_com_android_tools_aapt2_Aapt2Jni_nativeLink

Java_com_android_tools_aapt2_Aapt2Jni_ping

XML_DefaultCurrent

XML_ErrorString

XML_ExpatVersion

XML_ExpatVersionInfo

XML_ExternalEntityParserCreate

XML_FreeContentModel

XML_GetBase

XML_GetBuffer

XML_GetCurrentByteCount

XML_GetCurrentByteIndex

XML_GetCurrentColumnNumber

XML_GetCurrentLineNumber

XML_GetErrorCode

XML_GetFeatureList

XML_GetIdAttributeIndex

XML_GetInputContext

XML_GetParsingStatus

XML_GetSpecifiedAttributeCount

XML_MemFree

XML_MemMalloc

XML_MemRealloc

XML_Parse

XML_ParseBuffer

XML_ParserCreate

XML_ParserCreateNS

XML_ParserCreate_MM

XML_ParserFree

XML_ParserReset

XML_ResumeParser

XML_SetAttlistDeclHandler

XML_SetBase

XML_SetCdataSectionHandler

XML_SetCharacterDataHandler

XML_SetCommentHandler

XML_SetDefaultHandler

XML_SetDefaultHandlerExpand

XML_SetDoctypeDeclHandler

XML_SetElementDeclHandler

XML_SetElementHandler

XML_SetEncoding

XML_SetEndCdataSectionHandler

XML_SetEndDoctypeDeclHandler

XML_SetEndElementHandler

XML_SetEndNamespaceDeclHandler

XML_SetEntityDeclHandler

XML_SetExternalEntityRefHandler

XML_SetExternalEntityRefHandlerArg

XML_SetHashSalt

XML_SetNamespaceDeclHandler

XML_SetNotStandaloneHandler

XML_SetNotationDeclHandler

XML_SetParamEntityParsing

XML_SetProcessingInstructionHandler

XML_SetReturnNSTriplet

XML_SetSkippedEntityHandler

XML_SetStartCdataSectionHandler

XML_SetStartDoctypeDeclHandler

XML_SetStartElementHandler

XML_SetStartNamespaceDeclHandler

XML_SetUnknownEncodingHandler

XML_SetUnparsedEntityDeclHandler

XML_SetUserData

XML_SetXmlDeclHandler

XML_StopParser

XML_UseForeignDTD

XML_UseParserAsHandlerArg

XmlGetUtf16InternalEncoding

XmlGetUtf16InternalEncodingNS

XmlGetUtf8InternalEncoding

XmlGetUtf8InternalEncodingNS

XmlInitEncoding

XmlInitEncodingNS

XmlInitUnknownEncoding

XmlInitUnknownEncodingNS

XmlParseXmlDecl

XmlParseXmlDeclNS

XmlPrologStateInit

XmlPrologStateInitExternalEntity

XmlSizeOfUnknownEncoding

_INTERNAL_trim_to_complete_utf8_characters

_Unwind_Backtrace

_Unwind_DeleteException

_Unwind_FindEnclosingFunction

_Unwind_GetCFA

_Unwind_GetDataRelBase

_Unwind_GetGR

_Unwind_GetIP

_Unwind_GetIPInfo

_Unwind_GetLanguageSpecificData

_Unwind_GetRegionStart

_Unwind_GetTextRelBase

_Unwind_SetGR

_Unwind_SetIP

_Unwind_SjLj_ForcedUnwind

_Unwind_SjLj_RaiseException

_Unwind_SjLj_Register

_Unwind_SjLj_Resume

_Unwind_SjLj_Resume_or_Rethrow

_Unwind_SjLj_Unregister

_Z10asprintf_lPPc8locale_tPKcz

_Z10snprintf_lPcj8locale_tPKcz

_Z11OpenArchivePKcPP10ZipArchive

_Z11mbsrtowcs_lPwPPKcjPi8locale_t

_Z11vasprintf_lPPc8locale_tPKcS_

_Z12CloseArchiveP10ZipArchive

_Z12EndIterationPv

_Z12MB_CUR_MAX_L8locale_t

_Z12localeconv_l8locale_t

_Z12mbsnrtowcs_lPwPPKcjjPi8locale_t

_Z12wcsnrtombs_lPcPPKwjjPi8locale_t

_Z13GetDefaultTagv

_Z13OpenArchiveFdiPKcPP10ZipArchiveb

_Z14GetArchiveInfoP10ZipArchive

_Z14StartIterationP10ZipArchivePPvNSt3__117basic_string_viewIcNS3_11char_traitsIcEEEES7_

_Z14StartIterationP10ZipArchivePPvNSt3__18functionIFbNS3_17basic_string_viewIcNS3_11char_traitsIcEEEEEEE

_Z15ErrorCodeStringi

_Z15ExtractToMemoryP10ZipArchivePK10ZipEntry64Phj

_Z15ExtractToMemoryP10ZipArchivePK8ZipEntryPhj

_Z16IsValidEntryNamePKhj

_Z17GetFileDescriptorP10ZipArchive

_Z18ExtractEntryToFileP10ZipArchivePK10ZipEntry64i

_Z18ExtractEntryToFileP10ZipArchivePK8ZipEntryi

_Z18OpenArchiveFdRangeiPKcPP10ZipArchivexxb

_Z18__libcpp_vasprintfPPcPKcS_

_Z21OpenArchiveFromMemoryPKvjPKcPP10ZipArchive

_Z23GetFileDescriptorOffsetP10ZipArchive

_Z24androidCreateThreadGetIDPFiPvES_Pj

_Z4NextPvP10ZipEntry64PNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

_Z4NextPvP10ZipEntry64PNSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE

_Z4NextPvP8ZipEntryPNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

_Z4NextPvP8ZipEntryPNSt3__117basic_string_viewIcNS2_11char_traitsIcEEEE

_Z6sscanfPKcS0_z

_Z7btowc_li8locale_t

_Z7fprintfP6_iobufPKcz

_Z7sprintfPcPKcz

_Z7wctob_lt8locale_t

_Z8mbrlen_lPKcjPi8locale_t

_Z8snprintfPcjPKcz

_Z8strtof_lPKcPPc8locale_t

_Z8vfprintfP6_iobufPKcPc

_Z9FindEntryP10ZipArchiveNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEP10ZipEntry64

_Z9FindEntryP10ZipArchiveNSt3__117basic_string_viewIcNS1_11char_traitsIcEEEEP8ZipEntry

_Z9mbrtowc_lPwPKcjPi8locale_t

_Z9newlocaleiPKc8locale_t

_Z9strtold_lPKcPPc8locale_t

_Z9wcrtomb_lPcwPi8locale_t

_ZGVZN4aapt11DiffContext24GetSplitNameDependenciesEvE5empty

_ZGVZN4aapt14CompileContext21GetCompilationPackageEvE5empty

_ZGVZN4aapt14CompileContext24GetSplitNameDependenciesEvE5empty

_ZGVZN4aapt15OptimizeContext21GetCompilationPackageEvE5empty

_ZGVZN4aapt15OptimizeContext24GetSplitNameDependenciesEvE5empty

_ZGVZN4aapt15SignatureFilter4KeepERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEE15signature_regex

_ZGVZN4aapt7Context24GetSplitNameDependenciesEvE5empty

_ZGVZN6google8protobuf20FileDescriptorTables16GetEmptyInstanceEvE22file_descriptor_tables

_ZGVZN6google8protobuf8internal12ShutdownData3getEvE4data

_ZN10FileReaderD0Ev

_ZN10FileWriter6AppendEPhj

_ZN10FileWriter6CreateEiPK10ZipEntry64

_ZN10FileWriterC2Eiy

_ZN10FileWriterD0Ev

_ZN10ZipArchive26InitializeCentralDirectoryExj

_ZN10ZipArchiveC1EO13MappedZipFileb

_ZN10ZipArchiveC1EPKvj

_ZN10ZipArchiveC2EO13MappedZipFileb

_ZN10ZipArchiveC2EPKvj

_ZN10ZipArchiveD1Ev

_ZN10ZipArchiveD2Ev

_ZN10__cxxabiv116__enum_type_infoD0Ev

_ZN10__cxxabiv116__enum_type_infoD1Ev

_ZN10__cxxabiv116__enum_type_infoD2Ev

_ZN10__cxxabiv116__shim_type_infoD0Ev

_ZN10__cxxabiv116__shim_type_infoD1Ev

_ZN10__cxxabiv116__shim_type_infoD2Ev

_ZN10__cxxabiv117__array_type_infoD0Ev

_ZN10__cxxabiv117__array_type_infoD1Ev

_ZN10__cxxabiv117__array_type_infoD2Ev

_ZN10__cxxabiv117__class_type_infoD0Ev

_ZN10__cxxabiv117__class_type_infoD1Ev

_ZN10__cxxabiv117__class_type_infoD2Ev

_ZN10__cxxabiv117__pbase_type_infoD0Ev

_ZN10__cxxabiv117__pbase_type_infoD1Ev

_ZN10__cxxabiv117__pbase_type_infoD2Ev

_ZN10__cxxabiv119__getExceptionClassEPK17_Unwind_Exception

_ZN10__cxxabiv119__pointer_type_infoD0Ev

_ZN10__cxxabiv119__pointer_type_infoD1Ev

_ZN10__cxxabiv119__pointer_type_infoD2Ev

_ZN10__cxxabiv119__setExceptionClassEP17_Unwind_Exceptiony

_ZN10__cxxabiv120__free_with_fallbackEPv

_ZN10__cxxabiv120__function_type_infoD0Ev

_ZN10__cxxabiv120__function_type_infoD1Ev

_ZN10__cxxabiv120__function_type_infoD2Ev

_ZN10__cxxabiv120__si_class_type_infoD0Ev

_ZN10__cxxabiv120__si_class_type_infoD1Ev

_ZN10__cxxabiv120__si_class_type_infoD2Ev

_ZN10__cxxabiv121__isOurExceptionClassEPK17_Unwind_Exception

_ZN10__cxxabiv121__vmi_class_type_infoD0Ev

_ZN10__cxxabiv121__vmi_class_type_infoD1Ev

_ZN10__cxxabiv121__vmi_class_type_infoD2Ev

_ZN10__cxxabiv122__calloc_with_fallbackEjj

_ZN10__cxxabiv123__fundamental_type_infoD0Ev

_ZN10__cxxabiv123__fundamental_type_infoD1Ev

_ZN10__cxxabiv123__fundamental_type_infoD2Ev

_ZN10__cxxabiv128__aligned_free_with_fallbackEPv

_ZN10__cxxabiv129__pointer_to_member_type_infoD0Ev

_ZN10__cxxabiv129__pointer_to_member_type_infoD1Ev

_ZN10__cxxabiv129__pointer_to_member_type_infoD2Ev

_ZN10__cxxabiv130__aligned_malloc_with_fallbackEj

_ZN11EntryReaderD0Ev

_ZN11zip_archive15ExtractToWriterEP10ZipArchivePK10ZipEntry64PNS_6WriterE

_ZN11zip_archive6ReaderD0Ev

_ZN11zip_archive6ReaderD1Ev

_ZN11zip_archive6ReaderD2Ev

_ZN11zip_archive6WriterD0Ev

_ZN11zip_archive6WriterD1Ev

_ZN11zip_archive6WriterD2Ev

_ZN11zip_archive7InflateERKNS_6ReaderEyyPNS_6WriterEPy

_ZN12BufferReaderD0Ev

_ZN12BufferWriter6AppendEPhj

_ZN12BufferWriterD0Ev

_ZN12MemoryWriter6AppendEPhj

_ZN12MemoryWriterD0Ev

_ZN12TemporaryDir4initERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

_ZN12TemporaryDirC1Ev

_ZN12TemporaryDirC2Ev

_ZN12TemporaryDirD1Ev

_ZN12TemporaryDirD2Ev

_ZN13TemporaryFile4initERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

_ZN13TemporaryFile7releaseEv

_ZN13TemporaryFileC1ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

_ZN13TemporaryFileC1Ev

_ZN13TemporaryFileC2ERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

_ZN13TemporaryFileC2Ev

_ZN13TemporaryFileD1Ev

_ZN13TemporaryFileD2Ev

_ZN14JniDiagnostics3LogEN4aapt12IDiagnostics5LevelERNS0_17DiagMessageActualE

_ZN14JniDiagnosticsD0Ev

_ZN15CdEntryMapZip3214ResetIterationEv

_ZN15CdEntryMapZip324NextEPKh

_ZN15CdEntryMapZip326CreateEt

_ZN15CdEntryMapZip328AddToMapENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEPKh

_ZN15CdEntryMapZip32C1Et

_ZN15CdEntryMapZip32C2Et

_ZN15CdEntryMapZip32D0Ev

_ZN15CdEntryMapZip32D2Ev

_ZN15CdEntryMapZip6414ResetIterationEv

_ZN15CdEntryMapZip644NextEPKh

_ZN15CdEntryMapZip646CreateEv

_ZN15CdEntryMapZip648AddToMapENSt3__117basic_string_viewIcNS0_11char_traitsIcEEEEPKh

_ZN15CdEntryMapZip64D0Ev

_ZN15CdEntryMapZip64D2Ev

_ZN16CentralDirectory10InitializeEPKvxj

_ZN4aapt10BeginTraceERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEE

_ZN4aapt10CloneEntryERKNS_5Style5EntryEPNS_10StringPoolE

_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_

_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIN7android16BasicStringPieceIcEENS5_ISD_EEEE

_ZN4aapt10FlushTraceC1ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIS7_NS5_IS7_EEEE

_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_

_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIN7android16BasicStringPieceIcEENS5_ISD_EEEE

_ZN4aapt10FlushTraceC2ERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_RKNS1_6vectorIS7_NS5_IS7_EEEE

_ZN4aapt10FlushTraceD1Ev

_ZN4aapt10FlushTraceD2Ev

_ZN4aapt10IdAssigner7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE

_ZN4aapt10IdAssignerD0Ev

_ZN4aapt10StringPool11FlattenUtf8EPNS_9BigBufferERKS0_PNS_12IDiagnosticsE

_ZN4aapt10StringPool11HintWillAddEjj

_ZN4aapt10StringPool11MakeRefImplERKN7android16BasicStringPieceIcEERKNS0_7ContextEb

_ZN4aapt10StringPool12FlattenUtf16EPNS_9BigBufferERKS0_PNS_12IDiagnosticsE

_ZN4aapt10StringPool15ReAssignIndicesEv

_ZN4aapt10StringPool3RefC1EPNS0_5EntryE

_ZN4aapt10StringPool3RefC1ERKS1_

_ZN4aapt10StringPool3RefC1Ev

_ZN4aapt10StringPool3RefC2EPNS0_5EntryE

_ZN4aapt10StringPool3RefC2ERKS1_

_ZN4aapt10StringPool3RefC2Ev

_ZN4aapt10StringPool3RefD1Ev

_ZN4aapt10StringPool3RefD2Ev

_ZN4aapt10StringPool3RefaSERKS1_

_ZN4aapt10StringPool4SortERKNSt3__18functionIFiRKNS0_7ContextES5_EEE

_ZN4aapt10StringPool5MergeEOS0_

_ZN4aapt10StringPool5PruneEv

_ZN4aapt10StringPool7FlattenEPNS_9BigBufferERKS0_bPNS_12IDiagnosticsE

_ZN4aapt10StringPool7MakeRefERKN7android16BasicStringPieceIcEE

_ZN4aapt10StringPool7MakeRefERKN7android16BasicStringPieceIcEERKNS0_7ContextE

_ZN4aapt10StringPool7MakeRefERKNS0_3RefE

_ZN4aapt10StringPool7MakeRefERKNS0_8StyleRefE

_ZN4aapt10StringPool7MakeRefERKNS_11StyleStringE

_ZN4aapt10StringPool7MakeRefERKNS_11StyleStringERKNS0_7ContextE

_ZN4aapt10StringPool8StyleRefC1EPNS0_10StyleEntryE

_ZN4aapt10StringPool8StyleRefC1ERKS1_

_ZN4aapt10StringPool8StyleRefC1Ev

_ZN4aapt10StringPool8StyleRefC2EPNS0_10StyleEntryE

_ZN4aapt10StringPool8StyleRefC2ERKS1_

_ZN4aapt10StringPool8StyleRefC2Ev

_ZN4aapt10StringPool8StyleRefD1Ev

_ZN4aapt10StringPool8StyleRefD2Ev

_ZN4aapt10StringPool8StyleRefaSERKS1_

_ZN4aapt10StringPoolD2Ev

_ZN4aapt10VisibilityaSERKS0_

_ZN4aapt11ClassMemberD0Ev

_ZN4aapt11ClassMemberD2Ev

_ZN4aapt11DiagMessageC2ERKN7android16BasicStringPieceIcEE

_ZN4aapt11DiagMessageC2ERKNS_6SourceE

_ZN4aapt11DiagMessageC2Ev

_ZN4aapt11DiagMessageD2Ev

_ZN4aapt11DiagMessagelsINS_10ResourceIdEEERS0_RKT_

_ZN4aapt11DiagMessagelsINSt3__112basic_stringIDsNS2_11char_traitsIDsEENS2_9allocatorIDsEEEEEERS0_RKT_

_ZN4aapt11DiagMessagelsINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEERS0_RKT_

_ZN4aapt11DiagMessagelsIPKcEERS0_RKT_

_ZN4aapt11DiffCommand6ActionERKNSt3__16vectorINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS6_IS8_EEEE

_ZN4aapt11DiffCommandD0Ev

_ZN4aapt11DiffContext12GetPackageIdEv

_ZN4aapt11DiffContext14GetDiagnosticsEv

_ZN4aapt11DiffContext14GetNameManglerEv

_ZN4aapt11DiffContext14GetPackageTypeEv

_ZN4aapt11DiffContext16GetMinSdkVersionEv

_ZN4aapt11DiffContext18GetExternalSymbolsEv

_ZN4aapt11DiffContext21GetCompilationPackageEv

_ZN4aapt11DiffContext24GetSplitNameDependenciesEv

_ZN4aapt11DiffContext9IsVerboseEv

_ZN4aapt11DiffContextC2Ev

_ZN4aapt11DiffContextD0Ev

_ZN4aapt11DiffContextD2Ev

_ZN4aapt11FilterChain4KeepERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE

_ZN4aapt11FilterChainD0Ev

_ZN4aapt11FilterChainD2Ev

_ZN4aapt11GetSafePathERKN7android16BasicStringPieceIcEE

_ZN4aapt11IPathFilterD2Ev

_ZN4aapt11LinkCommand6ActionERKNSt3__16vectorINS1_12basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEENS6_IS8_EEEE

_ZN4aapt11LinkCommandC2EPNS_12IDiagnosticsE

_ZN4aapt11LinkCommandD0Ev

_ZN4aapt11LinkCommandD2Ev

_ZN4aapt11LinkContext12GetPackageIdEv

_ZN4aapt11LinkContext14GetDiagnosticsEv

_ZN4aapt11LinkContext14GetNameManglerEv

_ZN4aapt11LinkContext14GetPackageTypeEv

_ZN4aapt11LinkContext16GetMinSdkVersionEv

_ZN4aapt11LinkContext18GetExternalSymbolsEv

_ZN4aapt11LinkContext20SetNameManglerPolicyERKNS_17NameManglerPolicyE

_ZN4aapt11LinkContext21GetCompilationPackageEv

_ZN4aapt11LinkContext21SetCompilationPackageERKN7android16BasicStringPieceIcEE

_ZN4aapt11LinkContext24GetSplitNameDependenciesEv

_ZN4aapt11LinkContext9IsVerboseEv

_ZN4aapt11LinkContextC2EPNS_12IDiagnosticsE

_ZN4aapt11LinkContextD0Ev

_ZN4aapt11LinkContextD2Ev

_ZN4aapt11LinkOptionsC2ERKS0_

_ZN4aapt11LinkOptionsD2Ev

_ZN4aapt11NameMangler10MangleNameERKNS_12ResourceNameE

_ZN4aapt11NameMangler11MangleEntryERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES9_

_ZN4aapt11NameMangler8UnmangleEPNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEES8_

_ZN4aapt11NewResourceC2EOS0_

_ZN4aapt11NewResourceD2Ev

_ZN4aapt11Overlayable12kActorSchemeE

_ZN4aapt11OverlayableC2ERKN7android16BasicStringPieceIcEES5_

_ZN4aapt11OverlayableC2ERKN7android16BasicStringPieceIcEES5_RKNS_6SourceE

_ZN4aapt11ParseConfigERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPNS_12IAaptContextEPNS_15OptimizeOptionsE

_ZN4aapt11SegmentNodeD0Ev

_ZN4aapt11SegmentNodeD2Ev

_ZN4aapt11SymbolTable10FindByNameERKNS_12ResourceNameE

_ZN4aapt11SymbolTable11SetDelegateENSt3__110unique_ptrINS_20ISymbolTableDelegateENS1_14default_deleteIS3_EEEE

_ZN4aapt11SymbolTable12AppendSourceENSt3__110unique_ptrINS_13ISymbolSourceENS1_14default_deleteIS3_EEEE

_ZN4aapt11SymbolTable13PrependSourceENSt3__110unique_ptrINS_13ISymbolSourceENS1_14default_deleteIS3_EEEE

_ZN4aapt11SymbolTable15FindByReferenceERKNS_9ReferenceE

_ZN4aapt11SymbolTable8FindByIdERKNS_10ResourceIdE

_ZN4aapt11SymbolTableC1EPNS_11NameManglerE

_ZN4aapt11SymbolTableC2EPNS_11NameManglerE

_ZN4aapt11TableMerger14MergeAndMangleERKNS_6SourceERKN7android16BasicStringPieceIcEEPNS_13ResourceTableE

_ZN4aapt11TableMerger18CloneAndMangleFileERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKNS_13FileReferenceE

_ZN4aapt11TableMerger5MergeERKNS_6SourceEPNS_13ResourceTableEb

_ZN4aapt11TableMerger7DoMergeERKNS_6SourceEPNS_20ResourceTablePackageEbbb

_ZN4aapt11TableMerger9MergeFileERKNS_12ResourceFileEbPNS_2io5IFileE

_ZN4aapt11TableMerger9MergeImplERKNS_6SourceEPNS_13ResourceTableEbb

_ZN4aapt11TableMergerC1EPNS_12IAaptContextEPNS_13ResourceTableERKNS_18TableMergerOptionsE

_ZN4aapt11TableMergerC2EPNS_12IAaptContextEPNS_13ResourceTableERKNS_18TableMergerOptionsE

_ZN4aapt11tracebuffer11AddWithTimeERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEcx

_ZN4aapt11tracebuffer3AddERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEEc

_ZN4aapt11tracebuffer5FlushERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE

_ZN4aapt12IAaptContextD2Ev

_ZN4aapt12IDiagnostics4NoteERKNS_11DiagMessageE

_ZN4aapt12IDiagnostics4WarnERKNS_11DiagMessageE

_ZN4aapt12IDiagnostics5ErrorERKNS_11DiagMessageE

_ZN4aapt12IDiagnosticsD2Ev

_ZN4aapt12ResourceFileD2Ev

_ZN4aapt12StyledStringC1ERKNS_10StringPool8StyleRefE

_ZN4aapt12StyledStringC2ERKNS_10StringPool8StyleRefE

_ZN4aapt12StyledStringD0Ev

_ZN4aapt12StyledStringD2Ev

_ZN4aapt12ValueVisitor5VisitEPNS_12StyledStringE

_ZN4aapt12ValueVisitor5VisitEPNS_13FileReferenceE

_ZN4aapt12ValueVisitor5VisitEPNS_15BinaryPrimitiveE

_ZN4aapt12ValueVisitor5VisitEPNS_2IdE

_ZN4aapt12ValueVisitor5VisitEPNS_5ArrayE

_ZN4aapt12ValueVisitor5VisitEPNS_5MacroE

_ZN4aapt12ValueVisitor5VisitEPNS_5StyleE

_ZN4aapt12ValueVisitor5VisitEPNS_6PluralE

_ZN4aapt12ValueVisitor5VisitEPNS_6StringE

_ZN4aapt12ValueVisitor5VisitEPNS_9AttributeE

_ZN4aapt12ValueVisitor5VisitEPNS_9RawStringE

_ZN4aapt12ValueVisitor5VisitEPNS_9ReferenceE

_ZN4aapt12ValueVisitor5VisitEPNS_9StyleableE

_ZN4aapt12ValueVisitor8VisitAnyEPNS_5ValueE

_ZN4aapt12ValueVisitor9VisitItemEPNS_4ItemE

_ZN4aapt12ValueVisitorD2Ev

_ZN4aapt12XmlFlattener7ConsumeEPNS_12IAaptContextEPKNS_3xml11XmlResourceE

_ZN4aapt12XmlFlattener7FlattenEPNS_12IAaptContextEPKNS_3xml4NodeE

_ZN4aapt13AutoVersioner7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE

_ZN4aapt13AutoVersionerD0Ev

_ZN4aapt13DominatorTree15BottomUpVisitor9VisitNodeEPNS0_4NodeE

_ZN4aapt13DominatorTree15BottomUpVisitor9VisitTreeERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEPNS0_4NodeE

_ZN4aapt13DominatorTree4Node11TryAddChildENSt3__110unique_ptrIS1_NS2_14default_deleteIS1_EEEE

_ZN4aapt13DominatorTree4Node8AddChildENSt3__110unique_ptrIS1_NS2_14default_deleteIS1_EEEE

_ZN4aapt13DominatorTree6AcceptEPNS0_7VisitorE

_ZN4aapt13DominatorTree7VisitorD2Ev

_ZN4aapt13DominatorTreeC1ERKNSt3__16vectorINS1_10unique_ptrINS_19ResourceConfigValueENS1_14default_deleteIS4_EEEENS1_9allocatorIS7_EEEE

_ZN4aapt13DominatorTreeC2ERKNSt3__16vectorINS1_10unique_ptrINS_19ResourceConfigValueENS1_14default_deleteIS4_EEEENS1_9allocatorIS7_EEEE

_ZN4aapt13ExtractConfigERKNSt3__112basic_stringIcNS0_11char_traitsIcEENS0_9allocatorIcEEEEPNS_12IAaptContextEPNS_15OptimizeOptionsE

_ZN4aapt13FileReferenceC1ERKNS_10StringPool3RefE

_ZN4aapt13FileReferenceC2ERKNS_10StringPool3RefE

_ZN4aapt13FileReferenceD0Ev

_ZN4aapt13FileReferenceD2Ev

_ZN4aapt13ISymbolSource15FindByReferenceERKNS_9ReferenceE

_ZN4aapt13ISymbolSourceD2Ev

_ZN4aapt13ManifestFixer10BuildRulesEPNS_3xml17XmlActionExecutorEPNS_12IDiagnosticsE

_ZN4aapt13ManifestFixer7ConsumeEPNS_12IAaptContextEPNS_3xml11XmlResourceE

_ZN4aapt13ManifestFixerD0Ev

_ZN4aapt13ManifestFixerD2Ev

_ZN4aapt13ProductFilter19SelectProductToKeepERKNS_15ResourceNameRefENSt3__111__wrap_iterIPNS4_10unique_ptrINS_19ResourceConfigValueENS4_14default_deleteIS7_EEEEEESC_PNS_12IDiagnosticsE

_ZN4aapt13ProductFilter7ConsumeEPNS_12IAaptContextEPNS_13ResourceTableE

_ZN4aapt13ProductFilterD0Ev

_ZN4aapt13ProductFilterD2Ev

_ZN4aapt13ResourceEntry13FindAllValuesERKN7android17ConfigDescriptionE

_ZN4aapt13ResourceEntry17FindOrCreateValueERKN7android17ConfigDescriptionERKNS1_16BasicStringPieceIcEE

_ZN4aapt13ResourceEntry9FindValueERKN7android17ConfigDescriptionENS1_16BasicStringPieceIcEE

_ZN4aapt13ResourceEntryD2Ev

_ZN4aapt13ResourceTable11AddResourceEONS_11NewResourceEPNS_12IDiagnosticsE

_ZN4aapt13ResourceTable19FindOrCreatePackageERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceTable21ResolveValueCollisionEPNS_5ValueES2_

_ZN4aapt13ResourceTableC1ENS0_10ValidationE

_ZN4aapt13ResourceTableC2ENS0_10ValidationE

_ZN4aapt13ResourceTableD2Ev

_ZN4aapt13ResourceUtils11IsReferenceERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils11TryParseIntERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils12TryParseBoolERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils13StringBuilder10AppendTextERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

_ZN4aapt13ResourceUtils13StringBuilder14ResetTextStateEv

_ZN4aapt13ResourceUtils13StringBuilder17EndUntranslatableEj

_ZN4aapt13ResourceUtils13StringBuilder19StartUntranslatableEv

_ZN4aapt13ResourceUtils13StringBuilder7EndSpanEj

_ZN4aapt13ResourceUtils13StringBuilder9StartSpanERKNSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEE

_ZN4aapt13ResourceUtils13StringBuilderC1Eb

_ZN4aapt13ResourceUtils13StringBuilderC2Eb

_ZN4aapt13ResourceUtils13TryParseColorERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils13TryParseFloatERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils14ParseReferenceERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefEPbS8_

_ZN4aapt13ResourceUtils14ToResourceNameERKN7android13AssetManager212ResourceNameE

_ZN4aapt13ResourceUtils14ToResourceNameERKN7android8ResTable13resource_nameE

_ZN4aapt13ResourceUtils15ParseResourceIdERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils15ParseSdkVersionERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils17ParseResourceNameERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefEPb

_ZN4aapt13ResourceUtils17TryParseReferenceERKN7android16BasicStringPieceIcEEPb

_ZN4aapt13ResourceUtils18FlattenedXmlStringC2ERKS1_

_ZN4aapt13ResourceUtils18TryParseEnumSymbolEPKNS_9AttributeERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils18TryParseFlagSymbolEPKNS_9AttributeERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils19ParseBinaryResValueERKNS_12ResourceTypeERKN7android17ConfigDescriptionERKNS4_13ResStringPoolERKNS4_9Res_valueEPNS_10StringPoolE

_ZN4aapt13ResourceUtils19TryParseNullOrEmptyERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils20IsAttributeReferenceERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils21BuildResourceFileNameERKNS_12ResourceFileEPKNS_11NameManglerE

_ZN4aapt13ResourceUtils21ParseXmlAttributeNameERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils23ParseAttributeReferenceERKN7android16BasicStringPieceIcEEPNS_15ResourceNameRefE

_ZN4aapt13ResourceUtils24TryParseItemForAttributeERKN7android16BasicStringPieceIcEEPKNS_9AttributeERKNSt3__18functionIFbRKNS_12ResourceNameEEEE

_ZN4aapt13ResourceUtils24TryParseItemForAttributeERKN7android16BasicStringPieceIcEEjRKNSt3__18functionIFbRKNS_12ResourceNameEEEE

_ZN4aapt13ResourceUtils25ParseStyleParentReferenceERKN7android16BasicStringPieceIcEEPNSt3__112basic_stringIcNS6_11char_traitsIcEENS6_9allocatorIcEEEE

_ZN4aapt13ResourceUtils30AndroidTypeToAttributeTypeMaskEt

_ZN4aapt13ResourceUtils7MakeIntEj

_ZN4aapt13ResourceUtils8MakeBoolEb

_ZN4aapt13ResourceUtils8MakeNullEv

_ZN4aapt13ResourceUtils8ParseIntERKN7android16BasicStringPieceIcEE

_ZN4aapt13ResourceUtils9MakeEmptyEv

_ZN4aapt13ResourceUtils9ParseBoolERKN7android16BasicStringPieceIcEE

_ZN4aapt13TableSplitter10SplitTableEPNS_13ResourceTableE

_ZN4aapt13TableSplitter22VerifySplitConstraintsEPNS_12IAaptContextE

_ZN4aapt13TableSplitterC2ERKNSt3__16vectorINS_16SplitConstraintsENS1_9allocatorIS3_EEEERKNS_20TableSplitterOptionsE

_ZN4aapt13TableSplitterD2Ev

_ZN4aapt13configuration10AndroidSdkaSEOS1_

_ZN4aapt13configuration10ToBaseNameENSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEERKN7android16BasicStringPieceIcEEPNS_12IDiagnosticsE

_ZN4aapt13configuration11AbiToStringENS0_3AbiE

_ZN4aapt13configuration12IsGroupValidIN7android17ConfigDescriptionEEEbRKNSt3__113unordered_mapINS4_12basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEENS0_12OrderedEntryIT_EENS4_4hashISB_EENS4_8equal_toISB_EENS9_INS4_4pairIKSB_SE_EEEEEERSK_PNS_12IDiagnosticsE

_ZN4aapt13configuration12IsGroupValidINS0_3AbiEEEbRKNSt3__113unordered_mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS0_12OrderedEntryIT_EENS3_4hashISA_EENS3_8equal_toISA_EENS8_INS3_4pairIKSA_SD_EEEEEERSJ_PNS_12IDiagnosticsE

_ZN4aapt13configuration12IsGroupValidINS0_9GlTextureEEEbRKNSt3__113unordered_mapINS3_12basic_stringIcNS3_11char_traitsIcEENS3_9allocatorIcEEEENS0_12OrderedEntryIT_EENS3_4hashISA_EENS3_8equal_toISA_EENS8_INS3_4pairIKSA_SD_EEEEEERSJ_PNS_12IDiagnosticsE

_ZN4aapt13configuration12IsGroupValidINSt3__112basic_stringIcNS2_11char_traitsIcEENS2_9allocatorIcEEEEEEbRKNS2_13unordered_mapIS8_NS0_12OrderedEntryIT_EENS2_4hashIS8_EENS2_8equal_toIS8_EENS6_INS2_4pairIKS8_SC_EEEEEERSI_PNS_12IDiagnosticsE

_ZN4aapt13configuration14OutputArtifactC2EOS1_

_ZN4aapt13configuration14OutputArtifactC2ERKS1_

_ZN4aapt13configuration14OutputArtifactD2Ev

_ZN4aapt13configuration18ConfiguredArtifactC2ERKS1_

_ZN4aapt13configuration18ConfiguredArtifactD2Ev

Sections

.text
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 81B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.gcc_exc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/libwinpthread-1.dll

.dll windows:4 windows x86 arch:x86

7558521c8fe6b78071bc407f14af1903

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0e:44:18:e2:de:de:36:dd:29:74:c3:44:3a:fb:5c:e5
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

02/07/2021, 00:00

Not After

10/07/2024, 23:59

Subject

CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

e1:45:e4:ab:c6:70:81:65:9f:04:5c:e0:0d:fe:ee:39:74:9b:d6:75:b5:1c:6e:d2:ca:cc:64:04:e5:b5:a0:6c
Signer

Actual PE Digest

e1:45:e4:ab:c6:70:81:65:9f:04:5c:e0:0d:fe:ee:39:74:9b:d6:75:b5:1c:6e:d2:ca:cc:64:04:e5:b5:a0:6c

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_LINE_NUMS_STRIPPED

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

Imports

kernel32

AddVectoredExceptionHandler

CloseHandle

CreateEventA

CreateSemaphoreA

DeleteCriticalSection

DuplicateHandle

EnterCriticalSection

FileTimeToSystemTime

GetCurrentProcess

GetCurrentProcessId

GetCurrentThread

GetCurrentThreadId

GetHandleInformation

GetLastError

GetProcessAffinityMask

GetProcessTimes

GetSystemTimeAdjustment

GetSystemTimeAsFileTime

GetThreadContext

GetThreadPriority

GetThreadTimes

GetTickCount

InitializeCriticalSection

IsDebuggerPresent

LeaveCriticalSection

OpenProcess

OutputDebugStringA

QueryPerformanceCounter

QueryPerformanceFrequency

RaiseException

ReleaseSemaphore

RemoveVectoredExceptionHandler

ResetEvent

ResumeThread

SetEvent

SetLastError

SetProcessAffinityMask

SetSystemTime

SetThreadContext

SetThreadPriority

SetUnhandledExceptionFilter

Sleep

SuspendThread

TerminateProcess

TlsAlloc

TlsGetValue

TlsSetValue

TryEnterCriticalSection

UnhandledExceptionFilter

VirtualProtect

VirtualQuery

WaitForMultipleObjects

WaitForSingleObject

api-ms-win-crt-convert-l1-1-0

_ultoa

api-ms-win-crt-environment-l1-1-0

__p__environ

__p__wenviron

api-ms-win-crt-heap-l1-1-0

calloc

free

malloc

realloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func

__stdio_common_vfprintf

__stdio_common_vfwprintf

__stdio_common_vsprintf

fgetwc

fwrite

getc

api-ms-win-crt-string-l1-1-0

memset

strlen

strncmp

_strdup

api-ms-win-crt-private-l1-1-0

_setjmp3

longjmp

memcpy

memmove

api-ms-win-crt-time-l1-1-0

__daylight

__timezone

__tzname

_tzset

api-ms-win-crt-runtime-l1-1-0

_set_app_type

__p___argc

__p___argv

__p___wargv

_beginthreadex

_configure_narrow_argv

_configure_wide_argv

_crt_atexit

_endthreadex

_errno

_execute_onexit_table

_initialize_narrow_environment

_initialize_onexit_table

_initialize_wide_environment

_initterm

_register_onexit_function

abort

exit

Exports

__pth_gpointer_locked

__pthread_clock_nanosleep

_pthread_cleanup_dest

_pthread_get_state

_pthread_invoke_cancel

_pthread_key_dest

_pthread_rel_time_in_ms

_pthread_set_state

_pthread_time_in_ms

_pthread_time_in_ms_from_timespec

_pthread_tryjoin

clock_getres

clock_gettime

clock_nanosleep

clock_settime

nanosleep

pthread_attr_destroy

pthread_attr_getdetachstate

pthread_attr_getinheritsched

pthread_attr_getschedparam

pthread_attr_getschedpolicy

pthread_attr_getscope

pthread_attr_getstackaddr

pthread_attr_getstacksize

pthread_attr_init

pthread_attr_setdetachstate

pthread_attr_setinheritsched

pthread_attr_setschedparam

pthread_attr_setschedpolicy

pthread_attr_setscope

pthread_attr_setstackaddr

pthread_attr_setstacksize

pthread_barrier_destroy

pthread_barrier_init

pthread_barrier_wait

pthread_barrierattr_destroy

pthread_barrierattr_getpshared

pthread_barrierattr_init

pthread_barrierattr_setpshared

pthread_cancel

pthread_cond_broadcast

pthread_cond_destroy

pthread_cond_init

pthread_cond_signal

pthread_cond_timedwait

pthread_cond_timedwait_relative_np

pthread_cond_wait

pthread_condattr_destroy

pthread_condattr_getclock

pthread_condattr_getpshared

pthread_condattr_init

pthread_condattr_setclock

pthread_condattr_setpshared

pthread_create

pthread_create_wrapper

pthread_delay_np

pthread_detach

pthread_equal

pthread_exit

pthread_get_concurrency

pthread_getclean

pthread_getconcurrency

pthread_getevent

pthread_gethandle

pthread_getname_np

pthread_getschedparam

pthread_getspecific

pthread_join

pthread_key_create

pthread_key_delete

pthread_kill

pthread_mutex_destroy

pthread_mutex_init

pthread_mutex_lock

pthread_mutex_timedlock

pthread_mutex_trylock

pthread_mutex_unlock

pthread_mutexattr_destroy

pthread_mutexattr_getprioceiling

pthread_mutexattr_getprotocol

pthread_mutexattr_getpshared

pthread_mutexattr_gettype

pthread_mutexattr_init

pthread_mutexattr_setprioceiling

pthread_mutexattr_setprotocol

pthread_mutexattr_setpshared

pthread_mutexattr_settype

pthread_num_processors_np

pthread_once

pthread_rwlock_destroy

pthread_rwlock_init

pthread_rwlock_rdlock

pthread_rwlock_timedrdlock

pthread_rwlock_timedwrlock

pthread_rwlock_tryrdlock

pthread_rwlock_trywrlock

pthread_rwlock_unlock

pthread_rwlock_wrlock

pthread_rwlockattr_destroy

pthread_rwlockattr_getpshared

pthread_rwlockattr_init

pthread_rwlockattr_setpshared

pthread_self

pthread_set_concurrency

pthread_set_num_processors_np

pthread_setcancelstate

pthread_setcanceltype

pthread_setconcurrency

pthread_setname_np

pthread_setschedparam

pthread_setspecific

pthread_spin_destroy

pthread_spin_init

pthread_spin_lock

pthread_spin_trylock

pthread_spin_unlock

pthread_testcancel

pthread_timechange_handler_np

pthread_tls_init

sched_get_priority_max

sched_get_priority_min

sched_getscheduler

sched_setscheduler

sched_yield

sem_close

sem_destroy

sem_getvalue

sem_init

sem_open

sem_post

sem_post_multiple

sem_timedwait

sem_trywait

sem_unlink

sem_wait

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1012B

IMAGE_SCN_CNT_UNINITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/oncreatecode

StrixRat V2.0/res/Lib/platformBinary.zip

.zip

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/ASSEMBLY_EXCEPTION

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/LICENSE

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/THIRD_PARTY_README

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/bin/JAWTAccessBridge-32.dll

.dll windows:5 windows x86 arch:x86

cc600014039f50aac13b9344c5ec0bc1

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/04/2017, 00:00

Not After

27/05/2020, 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

05:23:1a:f9:e0:6d:ef:c2:af:66:17:6e:78:d9:20:54:40:c6:a7:7e:57:28:4a:0a:01:e2:67:e0:72:8e:cf:85
Signer

Actual PE Digest

05:23:1a:f9:e0:6d:ef:c2:af:66:17:6e:78:d9:20:54:40:c6:a7:7e:57:28:4a:0a:01:e2:67:e0:72:8e:cf:85

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\zulu8-silver-build-win32\release\jdk\objs\libjawtaccessbridge-32\JAWTAccessBridge-32.pdb

Imports

jawt

_JAWT_GetAWT@8

msvcr100

_crt_debugger_hook

_except_handler4_common

_onexit

_lock

__dllonexit

_unlock

__clean_type_info_names_internal

__CppXcptFilter

_amsg_exit

_initterm_e

_initterm

_encoded_null

free

_malloc_crt

kernel32

IsDebuggerPresent

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

GetSystemTimeAsFileTime

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

InterlockedCompareExchange

Sleep

InterlockedExchange

DecodePointer

EncodePointer

SetUnhandledExceptionFilter

Exports

_Java_com_sun_java_accessibility_AccessBridge_jawtGetComponentFromNativeWindowHandle@12

_Java_com_sun_java_accessibility_AccessBridge_jawtGetNativeWindowHandleFromComponent@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/bin/JAWTAccessBridge.dll

.dll windows:5 windows x86 arch:x86

cc600014039f50aac13b9344c5ec0bc1

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/04/2017, 00:00

Not After

27/05/2020, 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

da:8f:ef:54:e9:a8:c1:64:7c:e1:a8:10:1d:43:d4:de:bd:88:d3:63:50:21:86:2e:a3:d3:ad:4c:fe:b3:e7:f4
Signer

Actual PE Digest

da:8f:ef:54:e9:a8:c1:64:7c:e1:a8:10:1d:43:d4:de:bd:88:d3:63:50:21:86:2e:a3:d3:ad:4c:fe:b3:e7:f4

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\zulu8-silver-build-win32\release\jdk\objs\libjawtaccessbridge\JAWTAccessBridge.pdb

Imports

jawt

_JAWT_GetAWT@8

msvcr100

_crt_debugger_hook

_except_handler4_common

_onexit

_lock

__dllonexit

_unlock

__clean_type_info_names_internal

__CppXcptFilter

_amsg_exit

_initterm_e

_initterm

_encoded_null

free

_malloc_crt

kernel32

IsDebuggerPresent

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

GetSystemTimeAsFileTime

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

InterlockedCompareExchange

Sleep

InterlockedExchange

DecodePointer

EncodePointer

SetUnhandledExceptionFilter

Exports

_Java_com_sun_java_accessibility_AccessBridge_jawtGetComponentFromNativeWindowHandle@12

_Java_com_sun_java_accessibility_AccessBridge_jawtGetNativeWindowHandleFromComponent@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 350B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/bin/JavaAccessBridge-32.dll

.dll windows:5 windows x86 arch:x86

e29944e71ead1ccb0c0a4255cba87233

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/04/2017, 00:00

Not After

27/05/2020, 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

02:01:1e:a5:c1:9a:19:a0:47:13:5d:54:ee:e5:34:dd:d9:25:fe:38:c9:6f:4a:67:4d:1e:85:b2:93:39:d1:55
Signer

Actual PE Digest

02:01:1e:a5:c1:9a:19:a0:47:13:5d:54:ee:e5:34:dd:d9:25:fe:38:c9:6f:4a:67:4d:1e:85:b2:93:39:d1:55

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\zulu8-silver-build-win32\release\jdk\objs\libjavaaccessbridge-32\JavaAccessBridge-32.pdb

Imports

kernel32

CloseHandle

UnmapViewOfFile

MapViewOfFile

GetLastError

OpenFileMappingA

Sleep

LeaveCriticalSection

EnterCriticalSection

DeleteCriticalSection

InitializeCriticalSection

GetCurrentProcessId

GetCurrentThreadId

GetTickCount

QueryPerformanceCounter

IsDebuggerPresent

SetUnhandledExceptionFilter

UnhandledExceptionFilter

GetCurrentProcess

TerminateProcess

InterlockedCompareExchange

InterlockedExchange

DecodePointer

EncodePointer

GetSystemTimeAsFileTime

user32

TranslateMessage

DispatchMessageA

CreateDialogParamA

PostMessageA

RegisterWindowMessageA

PostThreadMessageA

GetMessageA

SendMessageA

PostQuitMessage

msvcr100

??3@YAXPAX@Z

memcpy

??_U@YAPAXI@Z

??2@YAPAXI@Z

wcslen

wcsncpy

_beginthreadex

wcscmp

_malloc_crt

free

_encoded_null

_initterm

_initterm_e

_amsg_exit

__CppXcptFilter

_crt_debugger_hook

__clean_type_info_names_internal

_unlock

__dllonexit

_lock

_onexit

_except_handler4_common

strcmp

strcpy

strncpy

memset

Exports

_Java_com_sun_java_accessibility_AccessBridge_caretUpdate@16

_Java_com_sun_java_accessibility_AccessBridge_focusGained@16

_Java_com_sun_java_accessibility_AccessBridge_focusLost@16

_Java_com_sun_java_accessibility_AccessBridge_javaShutdown@8

_Java_com_sun_java_accessibility_AccessBridge_menuCanceled@16

_Java_com_sun_java_accessibility_AccessBridge_menuDeselected@16

_Java_com_sun_java_accessibility_AccessBridge_menuSelected@16

_Java_com_sun_java_accessibility_AccessBridge_mouseClicked@16

_Java_com_sun_java_accessibility_AccessBridge_mouseEntered@16

_Java_com_sun_java_accessibility_AccessBridge_mouseExited@16

_Java_com_sun_java_accessibility_AccessBridge_mousePressed@16

_Java_com_sun_java_accessibility_AccessBridge_mouseReleased@16

_Java_com_sun_java_accessibility_AccessBridge_popupMenuCanceled@16

_Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeInvisible@16

_Java_com_sun_java_accessibility_AccessBridge_popupMenuWillBecomeVisible@16

_Java_com_sun_java_accessibility_AccessBridge_propertyActiveDescendentChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyCaretChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyChildChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyDescriptionChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyNameChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertySelectionChange@16

_Java_com_sun_java_accessibility_AccessBridge_propertyStateChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyTableModelChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyTextChange@16

_Java_com_sun_java_accessibility_AccessBridge_propertyValueChange@24

_Java_com_sun_java_accessibility_AccessBridge_propertyVisibleDataChange@16

_Java_com_sun_java_accessibility_AccessBridge_runDLL@8

_Java_com_sun_java_accessibility_AccessBridge_sendDebugString@12

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE

IMAGE_SCN_MEM_EXECUTE

IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA

IMAGE_SCN_MEM_DISCARDABLE

IMAGE_SCN_MEM_READ

StrixRat V2.0/res/Lib/platformBinary/platformBinary32/bin/JavaAccessBridge.dll

.dll windows:5 windows x86 arch:x86

e29944e71ead1ccb0c0a4255cba87233

Code Sign

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22/10/2013, 12:00

Not After

22/10/2028, 12:00

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

0f:d7:4d:bd:5f:a2:8f:ef:b3:7f:37:67:73:24:bd:92
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

12/04/2017, 00:00

Not After

27/05/2020, 12:00

Subject

CN=Azul Systems\, Inc.,O=Azul Systems\, Inc.,L=Sunnyvale,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04/01/2017, 00:00

Not After

18/01/2028, 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

KeyUsageCertSign

KeyUsageCRLSign

95:81:a1:b3:86:98:a9:7d:f2:94:20:ec:22:44:64:53:9c:fa:71:7b:1a:66:b5:4e:29:eb:45:bc:3b:f1:90:95
Signer

Actual PE Digest

95:81:a1:b3:86:98:a9:7d:f2:94:20:ec:22:44:64:53:9c:fa:71:7b:1a:66:b5:4e:29:eb:45:bc:3b:f1:90:95

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

IMAGE_FILE_32BIT_MACHINE

IMAGE_FILE_DLL

PDB Paths

c:\jenkins\workspace\zulu8-silver-build-win32\release\jdk\objs\libjavaaccessbridge\JavaAccessBridge.pdb