ยซ๐๐๐๐๐ข๐๐๐ต๐๐๐๐ฝ๐๐ยปยปยป4405ยป.7z
- SHA256 a3cbf3a4455e38c93be71801901efe4567babaa3a574bd34ccc018a7c7f6f156
Password
4405
Behavioral task
behavioral1
Sample
Setup.exe
Resource
win10v2004-20251016-en
windows10-2004-x64
18 signatures
300 seconds
Behavioral task
behavioral2
Sample
Setup.exe
Resource
win10ltsc2021-20251017-en
windows10-ltsc_2021-x64
18 signatures
300 seconds
General
- Target ยซ๐๐๐๐๐ข๐๐๐ต๐๐๐๐ฝ๐๐ยปยปยป4405ยป.7z
- Size 7.5MB
- Sample251025-sb3bkaev9d
- SHA256 a3cbf3a4455e38c93be71801901efe4567babaa3a574bd34ccc018a7c7f6f156
- MD5 5e3fc8ec13677a5ae2ee776145cb6619
- SHA1 c560e93513d9468df3b3949ec616be908a30b9ce
- SHA512 d966da1d4104e5f125faa6d591f2dd06b857d43f21f82c8bfb806a8fd73841832d596f6f1e192da034e17dc416022dafa6a57b70d1154900c13e41e4392cfae0
- SSDEEP 196608:EIZAeUMHG7VaBKzKJtyCC5payE/+25+fyeTr0pv:EIq5SsQBKzuZC5payOh5+LTrc
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Extracted
Family
-
hijackloader
Attributes
-
directory
%ALLUSERSPROFILE%\basedbg_release
-
inject_dll
%windir%\SysWOW64\rasapi32.dll
xor.hex
Signatures
- Detects HijackLoader (aka IDAT Loader) 1 IoCs
resource yara_rule static1/unpack001/Drourtnefiem.xw family_hijackloader - Hijackloader family
- Codesign digest Mismatch 2 IoCs
File was altered after it was signed.
resource unpack001/Conduit.Broker.dll unpack001/TE.Loaders.dll - Insecure Codesign Algorithm 2 IoCs
File was Codesigned using an insecure algorithm.
resource unpack001/x64/trading_api64.dll unpack001/x64/tradingnetworkingsockets.dll
File Explorer
-
ยซ๐๐๐๐๐ข๐๐๐ต๐๐๐๐ฝ๐๐ยปยปยป4405ยป.7z.7z 7.5MB
-
Atfrog.fc11KB
-
Conduit.Broker.dll.dll 498KB
-
Drourtnefiem.xw736KB
-
Setup.exe.exe 34KB
-
TE.Common.dll.dll 601KB
-
TE.Host.dll.dll 382KB
-
TE.Loaders.dll.dll 483KB
-
TE.WinRT.dll.dll 212KB
-
Wex.Common.dll.dll 483KB
-
Wex.Communication.dll.dll 390KB
-
Wex.Logger.dll.dll 610KB
-
config.prx.exe 364KB
-
opengl64.dll.exe 17.7MB
-
updater/NvStWiz.prx.exe 432KB
-
updater/manager/ks_tyres.ini9KB
-
x64/trading_api64.dll.dll 282KB
-
x64/tradingnetworkingsockets.dll.dll 4.1MB
-
x86/api-ms-win-core-processthreads-l1-1-1.dll.dll 17KB
-
x86/api-ms-win-core-profile-l1-1-0.dll.dll 16KB
-
x86/api-ms-win-core-rtlsupport-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-core-string-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-core-synch-l1-1-0.dll.dll 19KB
-
x86/api-ms-win-core-synch-l1-2-0.dll.dll 17KB
-
x86/api-ms-win-core-sysinfo-l1-1-0.dll.dll 18KB
-
x86/api-ms-win-core-timezone-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-core-util-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-crt-conio-l1-1-0.dll.dll 18KB
-
x86/api-ms-win-crt-convert-l1-1-0.dll.dll 21KB
-
x86/api-ms-win-crt-environment-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-crt-filesystem-l1-1-0.dll.dll 19KB
-
x86/api-ms-win-crt-heap-l1-1-0.dll.dll 18KB
-
x86/api-ms-win-crt-locale-l1-1-0.dll.dll 17KB
-
x86/api-ms-win-crt-math-l1-1-0.dll.dll 26KB
-
x86/api-ms-win-crt-multibyte-l1-1-0.dll.dll 25KB
-
x86/api-ms-win-crt-private-l1-1-0.dll.dll 68KB
-
x86/api-ms-win-crt-process-l1-1-0.dll.dll 18KB
Atfrog.fc
- SHA256 81b3faffcebacf7916413ed42b33eebcb643d825cd5ec3f14e5e7358d2845be5
- MD5 f028fcff9963b2679dda4bf0519b6a2c
- SHA1 4ea1347fa43a3342c27b4ca244eed589fbf80c92
- SHA512 3b878cfd15b79bec640717ecb4fac33595101bba62a3db559e04cc68ecbf7384f0385e0ac3fe4dd62bff221f0dc0487019eba1c6fe202b7a06587b410fbbc220
- SSDEEP 192:epvcoZ9BP+UJGyub677WqjI9c1aPFWQ1TYX+bQ3wni646IR3oo59j0F:VE+lf4aPQQ1HbQ3wnZ3I7b8
- MD5 SHA1 SHA512 SSDEEP
Conduit.Broker.dll
- IMPHASH 93c014d671d45e0c8c566d13abca79d7
- SHA256 b019dc9fd9132ff113a7e572819df386446744e7f800c8aaa4049fc4ec2b5aaf
- MD5 30213c8ffae77c8bfe947660949048b6
- SHA1 94044ca4f6edd79f608f06d1e1bb86b3e819ed82
- SHA512 4d2e8db8bf9f8d12bbfaa49cc85f22d9cf391683339315719e2a86327a7a6d796e2cf2e3e36305467db6c62d1c5c0c09a8e65a8bbbebb48fd25b925d5e227cc8
- SSDEEP 6144:7kG5EhAT1lLgSCgOmFDiIY3QWwmmcHRIzj6xAH6uWpTEscXhPo:795EhU1RC7AD1awmmcxVxAH76TnSo
- MD5 SHA1 SHA512 SSDEEP
-
Codesign digest Mismatch
File was altered after it was signed.
Password
4405
PE Signature issue
Digest
dc:a2:a9:f6:16:55:5f:d8:95:ff:e3:25:b7:ae:04:62:d9:12:48:40:e6:67:76:ff:f6:17:fc:47:73:0b:c6:28
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
289968
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Conduit.Broker.pdb
rpcrt4
NdrAsyncServerCall
NdrClientCall3
RpcStringBindingParseW
RpcBindingToStringBindingW
RpcSsDestroyClientContext
RpcAsyncInitializeHandle
RpcAsyncCancelCall
RpcAsyncCompleteCall
RpcServerUnsubscribeForNotification
RpcServerSubscribeForNotification
RpcBindingInqObject
RpcServerInqBindingHandle
NdrServerCallAll
RpcServerUseProtseqEpW
RpcObjectSetType
RpcServerUnregisterIfEx
RpcServerRegisterIf2
RpcStringFreeW
RpcErrorGetNextRecord
RpcErrorStartEnumeration
RpcErrorEndEnumeration
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingBind
RpcBindingFree
RpcBindingCreateW
Ndr64AsyncServerCallAll
Ndr64AsyncClientCall
UuidCreate
NdrServerCall2
RpcExceptionFilter
advapi32
EventRegister
EventWriteTransfer
OpenServiceW
OpenSCManagerW
CloseServiceHandle
EventActivityIdControl
CreateWellKnownSid
CheckTokenMembership
DuplicateTokenEx
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExW
RegQueryValueExW
OpenProcessToken
EventUnregister
kernel32
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
RtlUnwindEx
GetCurrentProcessId
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
EncodePointer
LeaveCriticalSection
EnterCriticalSection
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
GetModuleHandleExW
TlsAlloc
FreeLibrary
GetFinalPathNameByHandleW
CreateFileW
TlsGetValue
SetLastError
TlsSetValue
TlsFree
GetVersion
GetProcAddress
LoadLibraryExW
HeapFree
HeapAlloc
GetProcessHeap
GetModuleHandleA
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
GetModuleHandleW
GetStdHandle
InitializeProcThreadAttributeList
IsProcessorFeaturePresent
GetFileInformationByHandleEx
DeleteProcThreadAttributeList
CreateProcessW
InitOnceBeginInitialize
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSectionAndSpinCount
GetExitCodeProcess
DisassociateCurrentThreadFromCallback
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CloseThreadpoolTimer
CreateThreadpoolTimer
SubmitThreadpoolWork
LocalFree
CloseHandle
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
CreateThreadpoolCleanupGroup
VirtualProtect
LoadLibraryExA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetSystemInfo
VirtualQuery
CreateEventW
GetLastError
CloseThreadpoolWork
CreateThreadpoolWork
GetModuleFileNameW
UpdateProcThreadAttribute
AreFileApisANSI
InitOnceComplete
GetFileAttributesExW
CreateThreadpoolWait
CloseThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
FindFirstFileW
FindClose
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount64
SleepEx
TryAcquireSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable
GetLocaleInfoEx
FormatMessageA
ws2_32
htons
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
terminate
abort
_invalid_parameter_noinfo
_configure_narrow_argv
_initterm_e
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_errno
_initterm
_initialize_onexit_table
_cexit
_crt_atexit
_register_onexit_function
_execute_onexit_table
api-ms-win-crt-string-l1-1-0
_wcsicmp
_stricmp
_strnicmp
strncpy_s
wmemcpy_s
wcsnlen
wcscpy_s
wcsncmp
_wcsnicmp
towlower
isspace
isalnum
wcsncpy_s
strcpy_s
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf_s
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
free
malloc
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-locale-l1-1-0
__pctype_func
localeconv
___lc_codepage_func
_lock_locales
___mb_cur_max_func
___lc_locale_name_func
setlocale
_unlock_locales
api-ms-win-crt-convert-l1-1-0
_itow_s
strtoul
oleaut32
SysFreeString
SysAllocString
ntdll
RtlIpv4AddressToStringW
RtlIpv6AddressToStringW
BrokerConnector_CreateBrokerRpcConnectionAsync
BrokerConnector_Destroy
BrokerConnector_GetConnectionString
BrokerManagerClient_AddDefaultPathMapping
BrokerManagerClient_AddPathMapping
BrokerManagerClient_AllowAccessFromVM
BrokerManagerClient_Create
BrokerManagerClient_CreateBrokerManagerClientForContainer
BrokerManagerClient_CreateBrokerRpcConnection
BrokerManagerClient_CreateNewReference
BrokerManagerClient_CreateWithAddress
BrokerManagerClient_Destroy
BrokerManagerClient_GetConnectionId
BrokerManagerClient_GetServerAddress
BrokerManagerClient_IsLocalServerAvailable
BrokerManagerClient_MapPath
BrokerManagerClient_PrepareForExternalBrokerLaunch
BrokerManagerClient_RepresentsLocalComputeSystem
BrokerManagerClient_SetDefaultConnectionToCrossVmServer
BrokerManagerClient_SetDefaultConnectionToLocalServer
BrokerManagerClient_TryGetBrokerByID
BrokerManager_AllowAccessFromVM
BrokerManager_AllowUnauthenticatedRemoteAccess
BrokerManager_Create
BrokerManager_DefaultConstruct
BrokerManager_Destroy
BrokerManager_GetConnectedClient
BrokerReference_CreateNewReference
BrokerReference_Destroy
BrokerReference_GetBrokerRpcConnection
BrokerReference_SetID
BrokerReference_SetKeepAliveDuration
BrokerRpcConnection_Destroy
BrokerRpcConnection_GetBrokerReference
BrokerRpcConnection_GetConnectionAddress
BrokerRpcConnection_GetConnectionAddressToBrokerManagerFromBroker
BrokerRpcConnection_GetHvSocketAddress
BrokerRpcConnection_GetRpcBindingHandle
BrokerRpcConnection_IsConnectedOverHvSocket
BrokerRpcConnection_IsConnectedToSameBroker
ConnectionAddress_CreateHvSocketAddress
ConnectionAddress_CreateIPv4Address
ConnectionAddress_CreateIPv6Address
ConnectionAddress_CreateLocalAddress
ConnectionAddress_Destroy
ConnectionAddress_GetAddressType
ConnectionAddress_GetHvSocketAddress
ConnectionAddress_GetIPv4Address
ConnectionAddress_GetIPv6Address
ConnectionAddress_GetPortNumber
Name
.text
Size
310KB
Virtual Size
310KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
148KB
Virtual Size
147KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=260, version=33808,
count=12, id=259, version=33808,
count=83, id=261, version=33808,
count=326, id=1, productName=Unmarked objects,
count=31, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=84, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
Drourtnefiem.xw
- SHA256 51363a341b5e275cf479e7ee431b0a77f77f8fac342e7d5ad642c864447d1b64
- MD5 145ef2397e32cd6ed76a855ee1ef8ea7
- SHA1 480c628a7891b6f7d497752ca9301ebb7f952fcb
- SHA512 7a70b6b462efc584b00cd35162bfbec93f54beb259b3c12c2a0358407696ca7f1b44b93f03d50f971ce07b52503a7e3d383032abc0414024db5db6b42ddc4d7c
- SSDEEP 12288:jjbQob2ruSi1g7+Xt96sLSYvhKOKbRUOdrK/6lqQ0l27RymZgafaSnNZQ:HbF6r3BiXEYvhKxFUOdrK/6/0lgMmZg3
- MD5 SHA1 SHA512 SSDEEP
-
Detects HijackLoader (aka IDAT Loader)
Setup.exe
- IMPHASH 4951d73e1ea15cf92064c12479a1e646
- SHA256 5d11218f67cfe78347280b0e1a06ade63c890ac78f970f57b0200ff5be8aa77c
- MD5 4a8e1e703d538aa882b235ca98802b0c
- SHA1 f345d138fac0587944956260153d70416e2492f7
- SHA512 88d1e3bd7023c57d4667562ed128a8e9c71ba86a5af1748c8619895007512a88d77a6dc3bee6520c377dbf30dd493f6aa102c22f2c8bf7145f44fde90ba17dc9
- SSDEEP 384:RAqgGJZXH01fV+VxsTyf5YfV8ctMaV7EeZ+7jWH4oDB3IdlkELRPR9zABf6c1:RBTXKbTe5SVj3ZC3gfQ9zQ6g
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
f1:15:b9:b2:c8:12:9a:1d:fc:58:6a:53:41:80:82:b6:09:80:e9:bd:76:5c:16:11:f5:75:78:fb:14:d5:02:ef
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6B05-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f6:83:2f:26:6a:54:5d:22:c1:00:01:00:00:01:f6
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
3
Major OS version
6
Entry point
4784
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\__w\1\b\Release\x64\TE.ProcessHost.UAP.pdb
te.common
?SetIsUapProcessHost@ClrHostOverride@TestExecution@WEX@@YAXXZ
te.winrt
HostApplicationRunWithUWAInitialization2
kernel32
RtlUnwindEx
LoadLibraryExW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetProcAddress
GetLastError
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
api-ms-win-crt-runtime-l1-1-0
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_wide_winmain_command_line
exit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_initialize_wide_environment
_configure_wide_argv
abort
_exit
_seh_filter_exe
_set_app_type
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
calloc
api-ms-win-crt-string-l1-1-0
wcsncmp
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
720B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
296B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=7, id=259, version=33808,
count=12, id=260, version=33808,
count=39, id=261, version=33808,
count=5, id=257, version=34123,
count=73, id=1, productName=Unmarked objects,
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=265, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
TE.Common.dll
- IMPHASH 726eea9f61004962e5c77558efcdba6a
- SHA256 7329a448d002060bc13a1caea1f88681cf9c75b0092b8e918fda901dc3e0ee75
- MD5 37b7eee9838570894da2f69da26ebe6f
- SHA1 8e8f72fae282127f72337224cfdb35a233c43049
- SHA512 5dcebfd62732a47f1b04dcff99fa7b687f608f97201fc701893847196646024beb1bba155fd9840ef6ba3c442921ed81de0dc71424d74f273371ed8d4820d247
- SSDEEP 12288:BjsmRbRWgObp3K6SVMTOEHH6x3fFV+GObGoRLcMbD1j5qZ+5XkaC:pN9QgOb9QVMCEHa9fz+GObGoRLcMbD1M
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
41:c1:5a:b1:72:ea:f5:9f:1b:04:e4:5b:37:d9:2d:4d:62:a7:95:76:ef:6d:12:18:3a:19:f8:e6:c1:73:42:4e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:651A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f5:99:09:94:bc:f1:c6:50:8c:00:01:00:00:01:f5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
311840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Wlk\TE.Common.pdb
kernel32
TlsAlloc
GetModuleHandleA
RtlPcToFileHeader
GetVersion
InterlockedFlushSList
TlsGetValue
GetModuleHandleExW
EncodePointer
SetThreadLocale
GetThreadLocale
TlsSetValue
InitializeCriticalSectionAndSpinCount
TlsFree
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
VirtualFree
VirtualAlloc
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
GetProcessHeap
HeapFree
HeapAlloc
IsDebuggerPresent
GetSystemTimeAsFileTime
QueryPerformanceCounter
DecodePointer
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
TryAcquireSRWLockExclusive
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
CreateDirectoryW
GetCurrentDirectoryW
InitOnceComplete
InitOnceBeginInitialize
GetLocaleInfoEx
FormatMessageA
VirtualQuery
GetSystemInfo
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualProtect
LocalFree
QueueUserWorkItem
RaiseException
GetCurrentProcessId
FindResourceW
LoadResource
SizeofResource
lstrcmpiW
GetModuleHandleW
MultiByteToWideChar
GetCurrentThreadId
FreeLibraryAndExitThread
VerifyVersionInfoW
VerSetConditionMask
CreateProcessW
DeleteProcThreadAttributeList
UpdateProcThreadAttribute
CreateThread
InitializeProcThreadAttributeList
GetStdHandle
SetEvent
LCMapStringEx
WideCharToMultiByte
GetCurrentThread
FindFirstFileExW
FindClose
CloseHandle
CreateFileW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
FindNextFileW
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
LoadLibraryExW
GetLastError
OutputDebugStringA
OutputDebugStringW
SetLastError
FreeLibrary
GetProcAddress
advapi32
CreateWellKnownSid
CheckTokenMembership
EventWriteTransfer
EventActivityIdControl
DuplicateTokenEx
LookupPrivilegeValueW
AdjustTokenPrivileges
RevertToSelf
ImpersonateSelf
OpenThreadToken
OpenProcessToken
GetTokenInformation
AccessCheck
CreateProcessAsUserW
RegDeleteKeyW
GetFileSecurityW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
EventRegister
EventUnregister
RegQueryValueExW
InitiateSystemShutdownExW
ConvertStringSidToSidW
SetTokenInformation
ntdll
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlIpv6AddressToStringW
RtlIpv4AddressToStringW
conduit.broker
BrokerManagerClient_Create
ConnectionAddress_CreateIPv6Address
ConnectionAddress_CreateIPv4Address
ConnectionAddress_Destroy
BrokerManagerClient_Destroy
BrokerManagerClient_CreateWithAddress
BrokerManagerClient_AddPathMapping
wex.common
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEB_W@Z
?GetLastHResult@NoThrowString@Common@WEX@@QEBAJXZ
??0MemoryStream@Common@TAEF@@QEAA@XZ
??1String@Common@WEX@@QEAA@XZ
??4String@Common@WEX@@QEAAAEBV012@PEB_W@Z
??0String@Common@WEX@@QEAA@XZ
?Initialize@LegacyThread@Common@TAEF@@UEAAX_K@Z
?OpenForExecution@PeFile@Common@TAEF@@SA?AV123@AEBVpath@filesystem@std@@W4PeFileOptions@23@PEAPEAUHINSTANCE__@@@Z
??1PeFile@Common@TAEF@@QEAA@XZ
??1Exception@Common@WEX@@UEAA@XZ
??0Exception@Common@WEX@@IEAA@JPEB_W@Z
?ReleaseBuffer@NoThrowString@Common@WEX@@QEAAXH@Z
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
?TryGetNetFrameworkRuntimeInfo@ClrHelpers@Common@TAEF@@YA?AV?$ComPtr@UICLRRuntimeInfo@@@WRL@Microsoft@@XZ
?GetModuleBase@PeFile@Common@TAEF@@QEBA_KXZ
?Create@Event@Common@TAEF@@YA?AV?$AutoHandle@UHandlePolicy@Common@TAEF@@@23@W4EventCharacteristics@23@@Z
?GetLastError@Debug@Common@WEX@@SAKXZ
?SetLastError@Debug@Common@WEX@@SAXK@Z
??1NoThrowString@Common@WEX@@QEAA@XZ
??BNoThrowString@Common@WEX@@QEBAPEB_WXZ
??0NoThrowString@Common@WEX@@QEAA@XZ
??0NoThrowString@Common@WEX@@QEAA@PEB_W@Z
??0NoThrowString@Common@WEX@@QEAA@AEBV012@@Z
?Format@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_WZZ
?GetLength@NoThrowString@Common@WEX@@QEBAHXZ
?GetBufferSetLength@NoThrowString@Common@WEX@@QEAAPEAGH@Z
??0NoThrowString@Common@WEX@@QEAA@PEA_W@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_W@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@AEBV123@@Z
?IsEmpty@NoThrowString@Common@WEX@@QEBA_NXZ
?ToCStrWithFallbackTo@NoThrowString@Common@WEX@@QEBAPEB_WPEB_W@Z
?WaitForWorkerThreadExit@LegacyThread@Common@TAEF@@IEAAXXZ
??0Exception@Common@WEX@@QEAA@AEBV012@@Z
wex.logger
?GetThreadLocalLogSession@Logging@WEX@@YA?AV?$optional@VLogSession@Logging@WEX@@@std@@XZ
Log_Trace
?TryParseForRuntimeParameter@TestResults@Logging@WEX@@YA_NPEBDAEAW4Result@123@@Z
SetVerifyOutputSettings
GetVerifyOutputSettings
GetDisabledVerifyThrowCount
?SetThreadLogSession@Logging@WEX@@YAXVLogSession@12@@Z
api-ms-win-crt-runtime-l1-1-0
_resetstkoflw
_invalid_parameter_noinfo
_errno
_crt_atexit
_cexit
_register_onexit_function
_initialize_onexit_table
_initterm
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
abort
_invalid_parameter_noinfo_noreturn
terminate
_execute_onexit_table
api-ms-win-crt-string-l1-1-0
wcsncmp
isupper
_wcsicmp
_wcsdup
islower
_stricmp
strcpy_s
isalnum
wcscat_s
__strncnt
_wcsnicmp
wcscpy_s
_strnicmp
tolower
wcsncpy_s
strcspn
strncmp
towlower
strncpy_s
isspace
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
calloc
free
_recalloc
api-ms-win-crt-convert-l1-1-0
strtod
strtof
wcstoul
_strtoui64
_strtoi64
strtol
strtoul
atol
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf
api-ms-win-crt-math-l1-1-0
ceilf
_isnan
frexp
_dsign
api-ms-win-crt-locale-l1-1-0
_unlock_locales
___mb_cur_max_func
_lock_locales
___lc_locale_name_func
__pctype_func
setlocale
___lc_codepage_func
localeconv
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
??0?$TestDataArray@H@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@H@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@I@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@I@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@J@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@J@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@K@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@K@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@M@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@M@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@N@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@N@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@_J@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@_J@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@_K@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@_K@TestExecution@WEX@@QEAA@XZ
??0?$TestDataArray@_N@TestExecution@WEX@@AEAA@AEBV012@@Z
??0?$TestDataArray@_N@TestExecution@WEX@@QEAA@XZ
??0AbortHandlerRegistration@TestExecution@WEX@@QEAA@AEAVIAbortHandler@12@@Z
??0CommandThread@TestExecution@WEX@@QEAA@XZ
??0ExecutionScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??0OperationInvokeScope@EtwEvents@TestExecution@WEX@@QEAA@PEBD@Z
??0ProcessHostScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??0ResourceList@TestExecution@WEX@@AEAA@XZ
??0TestRunScope@EtwEvents@TestExecution@WEX@@QEAA@PEB_W@Z
??1?$TestDataArray@H@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@I@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@J@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@K@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@M@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@N@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@_J@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@_K@TestExecution@WEX@@QEAA@XZ
??1?$TestDataArray@_N@TestExecution@WEX@@QEAA@XZ
??1AbortHandlerRegistration@TestExecution@WEX@@QEAA@XZ
??1CommandThread@TestExecution@WEX@@QEAA@XZ
??1ExecutionScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??1OperationInvokeScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??1ProcessHostScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??1ResourceList@TestExecution@WEX@@AEAA@XZ
??1TestRunScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??4?$TestData@H@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@H@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@I@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@I@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@J@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@J@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@K@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@K@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@M@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@M@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@N@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@N@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@_J@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@_J@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@_K@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@_K@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestData@_N@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4?$TestData@_N@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??4?$TestDataArray@H@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@I@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@J@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@K@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@M@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@N@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@_J@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@_K@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4?$TestDataArray@_N@TestExecution@WEX@@AEAAAEAV012@AEAV012@@Z
??4TestNotification@TestExecution@WEX@@QEAAAEAV012@$$QEAV012@@Z
??4TestNotification@TestExecution@WEX@@QEAAAEAV012@AEBV012@@Z
??4XmlTestData@Private@TestExecution@WEX@@QEAAAEAV0123@$$QEAV0123@@Z
??4XmlTestData@Private@TestExecution@WEX@@QEAAAEAV0123@AEBV0123@@Z
??A?$TestDataArray@H@TestExecution@WEX@@QEAAAEAH_K@Z
??A?$TestDataArray@H@TestExecution@WEX@@QEBAAEBH_K@Z
??A?$TestDataArray@I@TestExecution@WEX@@QEAAAEAI_K@Z
??A?$TestDataArray@I@TestExecution@WEX@@QEBAAEBI_K@Z
??A?$TestDataArray@J@TestExecution@WEX@@QEAAAEAJ_K@Z
??A?$TestDataArray@J@TestExecution@WEX@@QEBAAEBJ_K@Z
??A?$TestDataArray@K@TestExecution@WEX@@QEAAAEAK_K@Z
??A?$TestDataArray@K@TestExecution@WEX@@QEBAAEBK_K@Z
??A?$TestDataArray@M@TestExecution@WEX@@QEAAAEAM_K@Z
??A?$TestDataArray@M@TestExecution@WEX@@QEBAAEBM_K@Z
??A?$TestDataArray@N@TestExecution@WEX@@QEAAAEAN_K@Z
??A?$TestDataArray@N@TestExecution@WEX@@QEBAAEBN_K@Z
??A?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEAAAEAVNoThrowString@Common@2@_K@Z
??A?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEBAAEBVNoThrowString@Common@2@_K@Z
??A?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEAAAEAVString@Common@2@_K@Z
??A?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEBAAEBVString@Common@2@_K@Z
??A?$TestDataArray@_J@TestExecution@WEX@@QEAAAEA_J_K@Z
??A?$TestDataArray@_J@TestExecution@WEX@@QEBAAEB_J_K@Z
??A?$TestDataArray@_K@TestExecution@WEX@@QEAAAEA_K_K@Z
??A?$TestDataArray@_K@TestExecution@WEX@@QEBAAEB_K_K@Z
??A?$TestDataArray@_N@TestExecution@WEX@@QEAAAEA_N_K@Z
??A?$TestDataArray@_N@TestExecution@WEX@@QEBAAEB_N_K@Z
?AbortApplication@TestExecution@WEX@@YAXK@Z
?Add@ResourceList@TestExecution@WEX@@QEAAJPEAUITestResource@23@@Z
?Allocate@?$TestDataArray@H@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@I@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@J@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@K@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@M@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@N@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@_J@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@_K@TestExecution@WEX@@AEAAX_K@Z
?Allocate@?$TestDataArray@_N@TestExecution@WEX@@AEAAX_K@Z
?CheckIfList@TestExecution@WEX@@YA_NAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
?Count@ResourceList@TestExecution@WEX@@QEAAKXZ
?Count@ResourceListImpl@TestExecution@WEX@@QEAA_KXZ
?Count@Resources@TestExecution@WEX@@SAKXZ
?CreateClrHost@IClrHost@TestExecution@WEX@@SA?AV?$unique_ptr@VIClrHost@TestExecution@WEX@@U?$default_delete@VIClrHost@TestExecution@WEX@@@std@@@std@@PEBUNetCoreHostConfiguration@23@_N@Z
?CreateEnvironmentSetting@ActivationContextEnvironmentModifier@TestExecution@WEX@@YA?AV?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@Vpath@filesystem@5@@Z
?CreateEnvironmentSetting@DefaultAppDomainEnvironmentModifier@TestExecution@WEX@@YA?AV?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@_N@Z
?CreateEnvironmentSetting@DpiAwareEnvironmentModifier@TestExecution@WEX@@YA?AV?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@_N@Z
?CreateEnvironmentSetting@ThreadModelEnvironmentModifier@TestExecution@WEX@@YA?AV?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@W4ThreadModelType@23@@Z
?Detach@?$TestDataArray@H@TestExecution@WEX@@AEAAPEAHXZ
?Detach@?$TestDataArray@I@TestExecution@WEX@@AEAAPEAIXZ
?Detach@?$TestDataArray@J@TestExecution@WEX@@AEAAPEAJXZ
?Detach@?$TestDataArray@K@TestExecution@WEX@@AEAAPEAKXZ
?Detach@?$TestDataArray@M@TestExecution@WEX@@AEAAPEAMXZ
?Detach@?$TestDataArray@N@TestExecution@WEX@@AEAAPEANXZ
?Detach@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAAPEAVNoThrowString@Common@3@XZ
?Detach@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAAPEAVString@Common@3@XZ
?Detach@?$TestDataArray@_J@TestExecution@WEX@@AEAAPEA_JXZ
?Detach@?$TestDataArray@_K@TestExecution@WEX@@AEAAPEA_KXZ
?Detach@?$TestDataArray@_N@TestExecution@WEX@@AEAAPEA_NXZ
?EnableIndex@ResourceListImpl@TestExecution@WEX@@QEAAXV?$optional@_K@std@@@Z
?Free@?$TestDataArray@H@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@I@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@J@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@K@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@M@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@N@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@_J@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@_K@TestExecution@WEX@@AEAAXXZ
?Free@?$TestDataArray@_N@TestExecution@WEX@@AEAAXXZ
?GetDefaultOutputFolder@Configuration@TestExecution@WEX@@YA?AVpath@filesystem@std@@XZ
?GetEnvironmentSettings@TestExecution@WEX@@YA?AV?$vector@V?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@V?$allocator@V?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@@2@@std@@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@4@@Z
?GetName@TestResource@TestExecution@WEX@@QEBAJAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetResourceId@TestResource@TestExecution@WEX@@QEBAJAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetResourceList@ResourceListContainer@TestExecution@WEX@@YAAEAV?$shared_ptr@VResourceListImpl@TestExecution@WEX@@@std@@XZ
?GetRunAsUserToken@TestExecution@WEX@@YAJW4RunAsUser@12@PEAPEAXPEAPEAUIErrorInfo@@@Z
?GetRunningClrHost@IClrHost@TestExecution@WEX@@SA?AV?$unique_ptr@VIClrHost@TestExecution@WEX@@U?$default_delete@VIClrHost@TestExecution@WEX@@@std@@@std@@XZ
?GetRuntimeParametersContainer@RuntimeParametersContainer@TestExecution@WEX@@CAAEAV123@XZ
?GetSize@?$TestDataArray@H@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@I@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@J@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@K@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@M@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@N@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@_J@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@_K@TestExecution@WEX@@QEBA?B_KXZ
?GetSize@?$TestDataArray@_N@TestExecution@WEX@@QEBA?B_KXZ
?GetTestDataContainer@TestDataContainer@TestExecution@WEX@@CAAEAV123@XZ
?GetType@TestResource@TestExecution@WEX@@QEBAJAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?GetUseDefaultAppDomain@DefaultAppDomainEnvironmentModifier@TestExecution@WEX@@YA_NXZ
?Initialize@CommandThread@TestExecution@WEX@@QEAAX_K@Z
?Initialize@RuntimeParametersContainer@TestExecution@WEX@@SAXV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@AEBVpath@filesystem@5@@Z
?InitializeTestEnvironmentMetadata@TestEnvironmentContainer@TestExecution@WEX@@YAXAEBVTestEnvironmentMetadata@23@@Z
?InsertExcludedRazzleBinaries@TestExecution@WEX@@YAXAEAV?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@std@@@Z
?Item@ResourceList@TestExecution@WEX@@QEAAJKPEAPEAUITestResource@23@@Z
?Item@ResourceListImpl@TestExecution@WEX@@QEAAJ_KAEAV?$shared_ptr@VTestResource@TestExecution@WEX@@@std@@@Z
?Item@Resources@TestExecution@WEX@@SAJ_KPEAPEAUITestResource@23@@Z
?MakeDataSourceWrapper@TestExecution@WEX@@YA?AV?$unique_ptr@VIDataSourceWrapper@TestExecution@WEX@@U?$default_delete@VIDataSourceWrapper@TestExecution@WEX@@@std@@@std@@AEBVpath@filesystem@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@4@@Z
?MergeTestDataPrivate@TestExecution@WEX@@YAXAEAVTestDataPrivate@12@AEBV312@@Z
?ProcessCommand@CommandThread@TestExecution@WEX@@QEAAXAEAVCommand@23@@Z
?RaiseExecutingNodeScopeStartEvent@EtwEvents@TestExecution@WEX@@YAXPEB_W_N@Z
?RaiseExecutingNodeScopeStopEvent@EtwEvents@TestExecution@WEX@@YAXPEB_W_N@Z
?Reboot@Interruption@TestExecution@WEX@@YAXW4Option@RebootOption@23@@Z
?RebootCustom@Interruption@TestExecution@WEX@@YAXW4Option@RebootOption@23@@Z
?RegisterHandler@TestNotification@TestExecution@WEX@@SAJP6AKKKPEAX0@Z@Z
?RegisterOperations@CustomDataSourceRole@TestExecution@WEX@@YAXAEAVServerConfiguration@Communication@3@@Z
?RemoveAllItems@ResourceListImpl@TestExecution@WEX@@QEAAXXZ
?ResumeFromCallback@CommandThread@TestExecution@WEX@@QEAAXXZ
?RunAsInteractiveUserFromSystem@TestExecution@WEX@@YAJPEBG00_NPEAU_PROCESS_INFORMATION@@@Z
?SetGlobalTaefCallback@RegisterCallback@TestExecution@WEX@@CAXPEAVTaefCallback@23@@Z
?SetIsUapProcessHost@ClrHostOverride@TestExecution@WEX@@YAXXZ
?SetResourceList@ResourceListContainer@TestExecution@WEX@@YAXV?$shared_ptr@VResourceListImpl@TestExecution@WEX@@@std@@@Z
?TellCommandSenderToProcessCallback@CommandThread@TestExecution@WEX@@QEAAXXZ
?This@?$TestDataArray@H@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@I@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@J@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@K@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@M@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@N@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@_J@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@_K@TestExecution@WEX@@AEAAPEAV123@XZ
?This@?$TestDataArray@_N@TestExecution@WEX@@AEAAPEAV123@XZ
?ToString@TestExecution@WEX@@YAPEB_WW4AppVerifierDetail@12@@Z
?ToString@TestExecution@WEX@@YAPEB_WW4IsolationLevel@12@@Z
?ToString@TestExecution@WEX@@YAPEB_WW4ListType@12@@Z
?ToString@TestExecution@WEX@@YAPEB_WW4ResumeOption@12@@Z
?ToString@TestExecution@WEX@@YAPEB_WW4ThreadModelType@12@@Z
?ToStringUtf8@TestExecution@WEX@@YAPEBDW4AppVerifierDetail@12@@Z
?ToStringUtf8@TestExecution@WEX@@YAPEBDW4IsolationLevel@12@@Z
?ToStringUtf8@TestExecution@WEX@@YAPEBDW4ListType@12@@Z
?ToStringUtf8@TestExecution@WEX@@YAPEBDW4ResumeOption@12@@Z
?ToStringUtf8@TestExecution@WEX@@YAPEBDW4ThreadModelType@12@@Z
?TryGetValue@?$RuntimeParameters@H@Private@TestExecution@WEX@@SAJPEBGAEAH@Z
?TryGetValue@?$RuntimeParameters@H@Private@TestExecution@WEX@@SAJPEB_WAEAH@Z
?TryGetValue@?$RuntimeParameters@I@Private@TestExecution@WEX@@SAJPEBGAEAI@Z
?TryGetValue@?$RuntimeParameters@I@Private@TestExecution@WEX@@SAJPEB_WAEAI@Z
?TryGetValue@?$RuntimeParameters@K@Private@TestExecution@WEX@@SAJPEBGAEAK@Z
?TryGetValue@?$RuntimeParameters@K@Private@TestExecution@WEX@@SAJPEB_WAEAK@Z
?TryGetValue@?$RuntimeParameters@M@Private@TestExecution@WEX@@SAJPEBGAEAM@Z
?TryGetValue@?$RuntimeParameters@M@Private@TestExecution@WEX@@SAJPEB_WAEAM@Z
?TryGetValue@?$RuntimeParameters@N@Private@TestExecution@WEX@@SAJPEBGAEAN@Z
?TryGetValue@?$RuntimeParameters@N@Private@TestExecution@WEX@@SAJPEB_WAEAN@Z
?TryGetValue@?$RuntimeParameters@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAVNoThrowString@Common@4@@Z
?TryGetValue@?$RuntimeParameters@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAVNoThrowString@Common@4@@Z
?TryGetValue@?$RuntimeParameters@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAVString@Common@4@@Z
?TryGetValue@?$RuntimeParameters@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAVString@Common@4@@Z
?TryGetValue@?$RuntimeParameters@W4Result@TestResults@Logging@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAW4Result@TestResults@Logging@4@@Z
?TryGetValue@?$RuntimeParameters@W4Result@TestResults@Logging@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAW4Result@TestResults@Logging@4@@Z
?TryGetValue@?$RuntimeParameters@_J@Private@TestExecution@WEX@@SAJPEBGAEA_J@Z
?TryGetValue@?$RuntimeParameters@_J@Private@TestExecution@WEX@@SAJPEB_WAEA_J@Z
?TryGetValue@?$RuntimeParameters@_K@Private@TestExecution@WEX@@SAJPEBGAEA_K@Z
?TryGetValue@?$RuntimeParameters@_K@Private@TestExecution@WEX@@SAJPEB_WAEA_K@Z
?TryGetValue@?$RuntimeParameters@_N@Private@TestExecution@WEX@@SAJPEBGAEA_N@Z
?TryGetValue@?$RuntimeParameters@_N@Private@TestExecution@WEX@@SAJPEB_WAEA_N@Z
?TryGetValue@?$TestData@H@Private@TestExecution@WEX@@SAJPEBGAEAH@Z
?TryGetValue@?$TestData@H@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@H@34@@Z
?TryGetValue@?$TestData@H@Private@TestExecution@WEX@@SAJPEB_WAEAH@Z
?TryGetValue@?$TestData@H@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@H@34@@Z
?TryGetValue@?$TestData@I@Private@TestExecution@WEX@@SAJPEBGAEAI@Z
?TryGetValue@?$TestData@I@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@I@34@@Z
?TryGetValue@?$TestData@I@Private@TestExecution@WEX@@SAJPEB_WAEAI@Z
?TryGetValue@?$TestData@I@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@I@34@@Z
?TryGetValue@?$TestData@J@Private@TestExecution@WEX@@SAJPEBGAEAJ@Z
?TryGetValue@?$TestData@J@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@J@34@@Z
?TryGetValue@?$TestData@J@Private@TestExecution@WEX@@SAJPEB_WAEAJ@Z
?TryGetValue@?$TestData@J@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@J@34@@Z
?TryGetValue@?$TestData@K@Private@TestExecution@WEX@@SAJPEBGAEAK@Z
?TryGetValue@?$TestData@K@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@K@34@@Z
?TryGetValue@?$TestData@K@Private@TestExecution@WEX@@SAJPEB_WAEAK@Z
?TryGetValue@?$TestData@K@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@K@34@@Z
?TryGetValue@?$TestData@M@Private@TestExecution@WEX@@SAJPEBGAEAM@Z
?TryGetValue@?$TestData@M@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@M@34@@Z
?TryGetValue@?$TestData@M@Private@TestExecution@WEX@@SAJPEB_WAEAM@Z
?TryGetValue@?$TestData@M@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@M@34@@Z
?TryGetValue@?$TestData@N@Private@TestExecution@WEX@@SAJPEBGAEAN@Z
?TryGetValue@?$TestData@N@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@N@34@@Z
?TryGetValue@?$TestData@N@Private@TestExecution@WEX@@SAJPEB_WAEAN@Z
?TryGetValue@?$TestData@N@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@N@34@@Z
?TryGetValue@?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@VNoThrowString@Common@WEX@@@34@@Z
?TryGetValue@?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAVNoThrowString@Common@4@@Z
?TryGetValue@?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@VNoThrowString@Common@WEX@@@34@@Z
?TryGetValue@?$TestData@VNoThrowString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAVNoThrowString@Common@4@@Z
?TryGetValue@?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@VString@Common@WEX@@@34@@Z
?TryGetValue@?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEBGAEAVString@Common@4@@Z
?TryGetValue@?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@VString@Common@WEX@@@34@@Z
?TryGetValue@?$TestData@VString@Common@WEX@@@Private@TestExecution@WEX@@SAJPEB_WAEAVString@Common@4@@Z
?TryGetValue@?$TestData@_J@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@_J@34@@Z
?TryGetValue@?$TestData@_J@Private@TestExecution@WEX@@SAJPEBGAEA_J@Z
?TryGetValue@?$TestData@_J@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@_J@34@@Z
?TryGetValue@?$TestData@_J@Private@TestExecution@WEX@@SAJPEB_WAEA_J@Z
?TryGetValue@?$TestData@_K@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@_K@34@@Z
?TryGetValue@?$TestData@_K@Private@TestExecution@WEX@@SAJPEBGAEA_K@Z
?TryGetValue@?$TestData@_K@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@_K@34@@Z
?TryGetValue@?$TestData@_K@Private@TestExecution@WEX@@SAJPEB_WAEA_K@Z
?TryGetValue@?$TestData@_N@Private@TestExecution@WEX@@SAJPEBGAEAV?$TestDataArray@_N@34@@Z
?TryGetValue@?$TestData@_N@Private@TestExecution@WEX@@SAJPEBGAEA_N@Z
?TryGetValue@?$TestData@_N@Private@TestExecution@WEX@@SAJPEB_WAEAV?$TestDataArray@_N@34@@Z
?TryGetValue@?$TestData@_N@Private@TestExecution@WEX@@SAJPEB_WAEA_N@Z
?TryGetValue@XmlTestData@Private@TestExecution@WEX@@SAJPEBGPEAPEAUIStream@@@Z
?TryGetValue@XmlTestData@Private@TestExecution@WEX@@SAJPEB_WPEAPEAUIStream@@@Z
?TryParse@TestExecution@WEX@@YA_NPEBDAEAW4AppVerifierDetail@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEBDAEAW4IsolationLevel@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEBDAEAW4ListType@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEBDAEAW4ResumeOption@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEBDAEAW4ThreadModelType@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEB_WAEAW4AppVerifierDetail@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEB_WAEAW4IsolationLevel@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEB_WAEAW4ListType@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEB_WAEAW4ResumeOption@12@@Z
?TryParse@TestExecution@WEX@@YA_NPEB_WAEAW4ThreadModelType@12@@Z
?UnregisterHandler@TestNotification@TestExecution@WEX@@SAXXZ
?__autoclassinit2@?$TestDataArray@H@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@I@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@J@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@K@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@M@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@N@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@VNoThrowString@Common@WEX@@@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@VString@Common@WEX@@@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@_J@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@_K@TestExecution@WEX@@QEAAX_K@Z
?__autoclassinit2@?$TestDataArray@_N@TestExecution@WEX@@QEAAX_K@Z
ConduitConnector_GetBrokerManagerClient
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetAssemblyProbingSubdirectory
GetRunAsUserToken
Interruption_Disconnect
Interruption_Reboot
Interruption_RebootCustom
NetworkConnectionInfo_GetHostName
NetworkConnectionInfo_GetIPAddressAsString
NetworkConnectionInfo_TryGetIPv4Address
NetworkConnectionInfo_TryGetIPv6Address
PropertyCollection_GetAllProperties
PropertyCollection_TryGetProperty
SetDelegateFactory
TaefLogFromHost_Comment
TaefLogFromHost_Error
TestEnvironment_GetPropertyLookupToken
TestEnvironment_GetTestRoleGroupNames
TestEnvironment_IsAvailable
TestEnvironment_TryGetTestRoleGroup
TestRoleGroup_GetTestRole
Name
ted_data
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
365KB
Virtual Size
365KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
173KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=33808,
count=10, id=259, version=33808,
count=93, id=261, version=33808,
count=6, id=257, version=34123,
count=406, id=1, productName=Unmarked objects,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=2, id=259, version=30795,
count=2, id=260, version=30795,
count=84, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
TE.Host.dll
- IMPHASH c6ba5596bb3cbb70d95732171d937bfd
- SHA256 2a9af756333a415d7cd798eb87ea4a17e9c132b17051404e5e7076cab63f24bd
- MD5 465f473d45beef730c636dbc6cd3493d
- SHA1 5de2d28d9577d559f529beec5efb319e6d643b11
- SHA512 7ef6a2d9e68aa2815cae157e9a7d704f1483138aead136e6faffab1deb2c5c4d1f2dd03520cffb5b04f033cd7c67b1d4828adb344eb648c4b14576441b441d73
- SSDEEP 6144:pC6+LmCAp04d4TvSEdxUDS/O/4ikarfpiyeoK65VZNGEQKTOQUJY:pC6+Lmbp04dSqEkDwO/JDrfpiyeoK65f
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
34:87:64:82:38:e7:5c:7d:6e:95:74:5c:6d:99:06:b3:b3:a4:7e:b8:4e:79:7d:74:a9:53:37:04:b3:9b:1e:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
210448
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Wlk\TE.Host.pdb
kernel32
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
GetSystemTimeAsFileTime
GetVersion
LeaveCriticalSection
EnterCriticalSection
EncodePointer
QueryPerformanceCounter
TlsFree
WideCharToMultiByte
MultiByteToWideChar
LCMapStringEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
DeleteCriticalSection
GetCurrentThread
DecodePointer
InitializeCriticalSectionEx
GetModuleHandleW
FreeLibraryAndExitThread
VerSetConditionMask
VerifyVersionInfoW
CreateThread
SetLastError
GetLastError
LoadLibraryExW
GetCurrentProcess
TerminateProcess
GetCommandLineW
CloseHandle
LocalFree
FreeLibrary
GetProcAddress
GetStringTypeW
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
Sleep
SetDllDirectoryW
WerSetFlags
FormatMessageA
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
advapi32
EventWriteTransfer
EventActivityIdControl
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
EventUnregister
EventRegister
conduit.broker
BrokerManagerClient_SetDefaultConnectionToLocalServer
BrokerManagerClient_AddDefaultPathMapping
wex.common
?CurrentTimeAsString@Time@Common@TAEF@@YA?AVString@23@XZ
?SetMaximumCallStackFrameCount@Common@TAEF@@YAXK@Z
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
wex.communication
?ConnectToLocalRpcTarget@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@PEB_WV?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
?GetIPAddress@Private@Communication@WEX@@YA?AVString@Common@TAEF@@XZ
?StringToProtocol@Communication@WEX@@YA?AW4ConnectionProtocol@12@V?$basic_string_view@DU?$char_traits@D@std@@@std@@@Z
?GetRpcServer@Communication@WEX@@YA?AV?$shared_ptr@VRpcServer@Communication@WEX@@@std@@W4ServerAuthentication@12@P6AJW4ConnectionProtocol@12@PEAX@ZW4RpcServerOptions@12@@Z
wex.logger
Log_Trace
?CreateLogEndpoint@Logging@WEX@@YA?AV?$unique_ptr@VILogEndpoint@Logging@WEX@@U?$default_delete@VILogEndpoint@Logging@WEX@@@std@@@std@@$$QEAV?$function@$$A6AXPEBDJ@Z@4@AEBU_GUID@@PEBU6@VLogSession@12@@Z
?WriteLine@Console@Logging@WEX@@YAXW4TextColor@23@PEBD@Z
?WriteLine@Console@Logging@WEX@@YAXW4TextColor@23@PEB_W@Z
?GetGlobalLoggerState@Logging@WEX@@YAAEAVGlobalLoggerState@12@XZ
?ToStringUtf8@TestResults@Logging@WEX@@YAPEBDW4Result@123@@Z
te.common
?GetTestDataContainer@TestDataContainer@TestExecution@WEX@@CAAEAV123@XZ
?ProcessCommand@CommandThread@TestExecution@WEX@@QEAAXAEAVCommand@23@@Z
?GetRuntimeParametersContainer@RuntimeParametersContainer@TestExecution@WEX@@CAAEAV123@XZ
?EnableIndex@ResourceListImpl@TestExecution@WEX@@QEAAXV?$optional@_K@std@@@Z
?GetResourceList@ResourceListContainer@TestExecution@WEX@@YAAEAV?$shared_ptr@VResourceListImpl@TestExecution@WEX@@@std@@XZ
??0CommandThread@TestExecution@WEX@@QEAA@XZ
?Initialize@RuntimeParametersContainer@TestExecution@WEX@@SAXV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@std@@AEBVpath@filesystem@5@@Z
?Initialize@CommandThread@TestExecution@WEX@@QEAAX_K@Z
?InitializeTestEnvironmentMetadata@TestEnvironmentContainer@TestExecution@WEX@@YAXAEBVTestEnvironmentMetadata@23@@Z
??1CommandThread@TestExecution@WEX@@QEAA@XZ
??0ProcessHostScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??1ProcessHostScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
?TellCommandSenderToProcessCallback@CommandThread@TestExecution@WEX@@QEAAXXZ
?ResumeFromCallback@CommandThread@TestExecution@WEX@@QEAAXXZ
?RegisterOperations@CustomDataSourceRole@TestExecution@WEX@@YAXAEAVServerConfiguration@Communication@3@@Z
?SetGlobalTaefCallback@RegisterCallback@TestExecution@WEX@@CAXPEAVTaefCallback@23@@Z
?GetEnvironmentSettings@TestExecution@WEX@@YA?AV?$vector@V?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@V?$allocator@V?$unique_ptr@$$CBVIEnvironmentSetting@TestExecution@WEX@@U?$default_delete@$$CBVIEnvironmentSetting@TestExecution@WEX@@@std@@@std@@@2@@std@@AEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V12@@std@@@2@@4@@Z
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_seh_filter_dll
abort
_crt_atexit
_cexit
_invalid_parameter_noinfo
_errno
_initterm
_initterm_e
_execute_onexit_table
terminate
api-ms-win-crt-string-l1-1-0
wcsnlen
isspace
strcpy_s
_wcsdup
towlower
strcspn
_wcsnicmp
_strnicmp
wcsncmp
wcscpy_s
isalnum
strncmp
_stricmp
api-ms-win-crt-locale-l1-1-0
_wsetlocale
setlocale
_unlock_locales
__pctype_func
___lc_codepage_func
___lc_locale_name_func
localeconv
___mb_cur_max_func
_lock_locales
api-ms-win-crt-convert-l1-1-0
wcstoul
atol
strtoul
api-ms-win-crt-heap-l1-1-0
free
calloc
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
api-ms-win-crt-math-l1-1-0
_dsign
ceilf
te.loaders
?GetTestExecutorForNewModule@TestExecutor@TestExecution@WEX@@QEAAAEAVTestExecutorImpl@23@V?$basic_string_view@DU?$char_traits@D@std@@@std@@AEBV?$optional@_N@6@@Z
?Shutdown@TestExecutor@TestExecution@WEX@@QEAAXXZ
rpcrt4
UuidCreate
?HostApplicationRunAsync@TestExecution@WEX@@YAJPEB_WW4RuntimeType@12@P6AXX_E@Z
?HostApplicationRunAsync@TestExecution@WEX@@YAJPEB_WW4RuntimeType@12@P6AXX_EV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@@Z
?HostApplicationRunWithPossibleUWAInitialization@TestExecution@WEX@@YAHURawCommandLine@Common@TAEF@@AEA_N@Z
HostApplicationRunAsync2
RunTaefTestHostWithinPackagedWin32App
Name
ted_data
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
257KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=33808,
count=12, id=259, version=33808,
count=82, id=261, version=33808,
count=12, id=257, version=34123,
count=272, id=1, productName=Unmarked objects,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=36, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
TE.Loaders.dll
- IMPHASH da8075277e13018d58a3ec9e5ce867d6
- SHA256 a314743474564328a2610beb59413f7540487da3bf36380fb81e1a34d7c3670a
- MD5 ccfc9ff249250b3bf2163769e079bc78
- SHA1 24163fe0d7147e65f7838ab4822edbc211234605
- SHA512 fa0e066408a48c88f28151680ab88f4faa67a74ee76bb15c7791d16e66eca5aa8ff17083fa8a683d590b929fb780785fb2cb83d0a7ba93dbd952d841dc2d47a2
- SSDEEP 6144:60/lxhGUWQSwvJQklrT/Nu9gFN6yQ2csaVAmnD07UmJ3jtLshXj4v:607hGUWQr7u9aN6ydFkAswUGQhXj4v
- MD5 SHA1 SHA512 SSDEEP
-
Codesign digest Mismatch
File was altered after it was signed.
Password
4405
PE Signature issue
Digest
da:18:0f:c8:6c:0a:9a:84:35:4d:be:62:39:52:dc:04:1b:3c:5a:9a:96:43:c8:17:62:69:8b:96:2f:58:16:e0
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a6:58:10:67:4b:3d:6c:7c:f6:00:00:00:00:05:a6
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:591A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f4:17:46:85:c0:cb:3f:39:e5:00:01:00:00:01:f4
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
307504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\TE.Loaders.pdb
kernel32
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WakeAllConditionVariable
EncodePointer
LeaveCriticalSection
EnterCriticalSection
GetCurrentThreadId
SleepConditionVariableSRW
AcquireSRWLockShared
ReleaseSRWLockShared
InitOnceComplete
InitOnceBeginInitialize
GetFileInformationByHandleEx
AreFileApisANSI
SetFileInformationByHandle
TlsFree
FindFirstFileW
GetLocaleInfoEx
FormatMessageA
VirtualQuery
GetSystemInfo
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualProtect
GetVersion
TlsSetValue
GetModuleHandleA
GetModuleHandleExW
SetFilePointerEx
DeleteCriticalSection
DecodePointer
InitializeCriticalSectionEx
CompareStringW
MultiByteToWideChar
FormatMessageW
GetModuleHandleW
LocalFree
GetCurrentProcess
GetModuleFileNameW
CloseHandle
SetLastError
GetLastError
WideCharToMultiByte
GetEnvironmentVariableW
ReadFile
GetFileSizeEx
FindFirstFileExW
FindNextFileW
WriteFile
FindClose
CreateFileW
GetProcAddress
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
OutputDebugStringA
SizeofResource
LockResource
FindResourceExW
LoadResource
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryExW
GetFileAttributesExW
FreeLibrary
advapi32
EventUnregister
EventRegister
EventWriteTransfer
EventActivityIdControl
wex.common
?CalculateFromFile@Crc@Common@TAEF@@YAIAEBVpath@filesystem@std@@@Z
?GetLatestRuntimeVersionFromDeploymentRegistrySettings@ClrHelpers@Common@TAEF@@YA?AVVersion@23@XZ
?FindModulePath@Common@TAEF@@YA?AV?$optional@Vpath@filesystem@std@@@std@@AEBVpath@filesystem@4@0AEBV?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@4@W4ProcessorArchitecture@12@@Z
?GetTempFolderPath@TempFileContainerOperations@Common@TAEF@@YAAEBVpath@filesystem@std@@XZ
?GetMetadataDispenser@Common@TAEF@@YA?AVMetadataDispenser@12@XZ
?OpenForReflection@PeFile@Common@TAEF@@SA?AV123@AEBVpath@filesystem@std@@@Z
?GetDirectory@PeFile@Common@TAEF@@QEBA?AV?$optional@VDataView@Common@TAEF@@@std@@K@Z
?GetSectionDataAtRva@PeFile@Common@TAEF@@QEBA?AVDataView@23@KK@Z
?GetAttributeParameterValues@Private@Common@TAEF@@YA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@PEBEKVDataView@23@@Z
?IsArchitectureAgnostic@PeFile@Common@TAEF@@QEBA_NXZ
?ExecuteAndWait@CommandWrapper@Common@TAEF@@QEBAKAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?FindManagedModulePath@Common@TAEF@@YA?AV?$optional@Vpath@filesystem@std@@@std@@AEBVpath@filesystem@4@AEBVVersion@12@0AEBV?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@4@W4ProcessorArchitecture@12@@Z
?TryOpenForReflection@PeFile@Common@TAEF@@SA?AV?$optional@VPeFile@Common@TAEF@@@std@@AEBVpath@filesystem@5@@Z
?IsNativeBinary@PeFile@Common@TAEF@@QEBA_NXZ
?OpenFromMemory@PeFile@Common@TAEF@@SA?AV123@VDataView@23@@Z
?OpenForExecution@PeFile@Common@TAEF@@SA?AV123@AEBVpath@filesystem@std@@W4PeFileOptions@23@PEAPEAUHINSTANCE__@@@Z
?GetPointerSize@PeFile@Common@TAEF@@QEBAEXZ
?GetSectionByName@PeFile@Common@TAEF@@QEBA?AV?$optional@VDataView@Common@TAEF@@@std@@PEBD@Z
?GetSectionDataAtVirtualAddress@PeFile@Common@TAEF@@QEBA?AVDataView@23@_K@Z
?ReadAllTextNarrow@TextFile@Common@TAEF@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Encoding@23@@Z
?GetSettings@Settings@Common@TAEF@@YAAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@XZ
?AddFileToInclude@ModuleLookup@Common@TAEF@@QEAAXAEBVpath@filesystem@std@@@Z
?GetSourceInfoForMethods@Common@TAEF@@YA?AV?$map@V?$StringViewZ@D@Common@TAEF@@VSourceInfo@23@U?$less@X@std@@V?$allocator@U?$pair@$$CBV?$StringViewZ@D@Common@TAEF@@VSourceInfo@23@@std@@@6@@std@@AEBVpath@filesystem@4@AEBV?$vector@V?$StringViewZ@D@Common@TAEF@@V?$allocator@V?$StringViewZ@D@Common@TAEF@@@std@@@4@AEAVStringCache@12@@Z
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
?CreateTempFile@TempFileContainerOperations@Common@TAEF@@YA?AVpath@filesystem@std@@XZ
?ReadAllTextNarrow@TextFile@Common@TAEF@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z
??0TextFile@Common@TAEF@@QEAA@AEBVpath@filesystem@std@@KKKK@Z
??1PeFile@Common@TAEF@@QEAA@XZ
?OpenLoadedModule@PeFile@Common@TAEF@@SA?AV123@PEAUHINSTANCE__@@@Z
?GetArchitecture@PeFile@Common@TAEF@@QEBA?AW4ProcessorArchitecture@23@XZ
wex.logger
?GenerateConnectionDataStringUsingGlobalLogEndpoint@Logging@WEX@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
Log_Trace
te.common
?GetRuntimeParametersContainer@RuntimeParametersContainer@TestExecution@WEX@@CAAEAV123@XZ
?GetTestDataContainer@TestDataContainer@TestExecution@WEX@@CAAEAV123@XZ
??1OperationInvokeScope@EtwEvents@TestExecution@WEX@@QEAA@XZ
??0OperationInvokeScope@EtwEvents@TestExecution@WEX@@QEAA@PEBD@Z
?CreateClrHost@IClrHost@TestExecution@WEX@@SA?AV?$unique_ptr@VIClrHost@TestExecution@WEX@@U?$default_delete@VIClrHost@TestExecution@WEX@@@std@@@std@@PEBUNetCoreHostConfiguration@23@_N@Z
api-ms-win-crt-runtime-l1-1-0
abort
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
terminate
_errno
_initterm
_initterm_e
api-ms-win-crt-string-l1-1-0
isalnum
_strnicmp
strcspn
isalpha
towlower
_wcsicmp
wcsncmp
tolower
_wcsnicmp
isspace
strcpy_s
api-ms-win-crt-environment-l1-1-0
_wputenv_s
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
calloc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
localeconv
_lock_locales
__pctype_func
___mb_cur_max_func
___lc_locale_name_func
setlocale
_unlock_locales
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-convert-l1-1-0
wcstol
wcstoul
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
__stdio_common_vswprintf_s
rpcrt4
UuidCreate
?CreateTaefTestLoader@TestExecution@WEX@@YA?AV?$unique_ptr@VITestLoader@TestExecution@WEX@@U?$default_delete@VITestLoader@TestExecution@WEX@@@std@@@std@@XZ
?GetTestExecutorForNewModule@TestExecutor@TestExecution@WEX@@QEAAAEAVTestExecutorImpl@23@V?$basic_string_view@DU?$char_traits@D@std@@@std@@AEBV?$optional@_N@6@@Z
?Shutdown@TestExecutor@TestExecution@WEX@@QEAAXXZ
Name
.text
Size
327KB
Virtual Size
326KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
118KB
Virtual Size
118KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
testdata
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=33808,
count=12, id=259, version=33808,
count=77, id=261, version=33808,
count=6, id=257, version=34123,
count=291, id=1, productName=Unmarked objects,
count=27, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=64, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
TE.WinRT.dll
- IMPHASH 113cea6c5b3937c2d9a26b33132fa5be
- SHA256 ef55c3d46b01b6ea9da5f87198849a9304a551a17f9d318ecd8aec0f93b620f6
- MD5 674d03c68f6e4956747aa0403261cce4
- SHA1 5796993ea1f2d99d9f9259f54b7d9763a53dd2ac
- SHA512 9480c5f57a1ad163140e4395a9294ff8cf3ca2d5714837455c7a647dba5010c08e3635fd5beedd5f6b7a510374eb0f2d9697a9f7692a28af15ae8159bee140d6
- SSDEEP 3072:3gNuhx9dgVPZpCVbZ2Kjbqx8tFa8wNPHs/tQCYF0VVHNYE:wNuH9dgVPZ4j2jUIs1d
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
db:b8:16:64:3d:1e:77:da:73:97:d7:5c:d5:87:bd:8d:c0:cf:81:e6:3d:fa:be:30:27:04:97:eb:8e:fc:b7:2f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:551A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:01:d1:45:59:98:10:cc:42:4f:00:01:00:00:02:01
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
3
Major OS version
6
Entry point
99248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\TE.WinRT.pdb
ole32
CoCreateFreeThreadedMarshaler
CoTaskMemAlloc
CoTaskMemFree
kernel32
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
RtlUnwindEx
DecodePointer
DeleteCriticalSection
QueryPerformanceCounter
FreeLibrary
IsDebuggerPresent
SetLastError
LoadLibraryExW
GetProcAddress
InitializeCriticalSectionEx
GetLastError
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
EncodePointer
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LeaveCriticalSection
EnterCriticalSection
InitOnceComplete
InitOnceBeginInitialize
GetLocaleInfoEx
LocalFree
FormatMessageA
VerifyVersionInfoW
VerSetConditionMask
GetModuleFileNameW
GetModuleHandleExW
GetCurrentProcess
WideCharToMultiByte
RtlPcToFileHeader
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoActivateInstance
RoGetActivationFactory
api-ms-win-core-winrt-error-l1-1-0
RoOriginateError
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateString
WindowsGetStringRawBuffer
WindowsCreateStringReference
WindowsDeleteString
advapi32
EventRegister
EventUnregister
EventWriteTransfer
EventActivityIdControl
EventSetInformation
wex.common
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
wex.communication
?ConnectToLocalRpcTarget@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@PEB_WV?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
te.host
?HostApplicationRunAsync@TestExecution@WEX@@YAJPEB_WW4RuntimeType@12@P6AXX_EV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@@Z
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_invalid_parameter_noinfo
_execute_onexit_table
_crt_atexit
_cexit
_initterm
terminate
_initterm_e
_errno
_invalid_parameter_noinfo_noreturn
_register_onexit_function
abort
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
api-ms-win-crt-heap-l1-1-0
free
_callnewh
calloc
malloc
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_locale_name_func
___lc_codepage_func
_lock_locales
___mb_cur_max_func
setlocale
_unlock_locales
__pctype_func
HostApplicationRunWithUWAInitialization2
Name
.text
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
14KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=260, version=33808,
count=12, id=259, version=33808,
count=75, id=261, version=33808,
count=6, id=257, version=34123,
count=149, id=1, productName=Unmarked objects,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=14, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
Wex.Common.dll
- IMPHASH 7c499e594631ba281da4b282a62f8d00
- SHA256 0474a08a863958851ddc7fd826675ec7a176d6b095f25a00ce8445f74422364d
- MD5 d06e01dea072bf9d290ccb91073c838d
- SHA1 2648e49a1291d10b84139a061821de9410dd17c5
- SHA512 d3958f2cda286c55c6c90ca82c9472f128f7fc0f760f787dd1876b8e09e87c89ba17b4d9f38cf1ac1728f2e483ba4ebc499981e915bbd6d4f37856fbb1f8b6ad
- SSDEEP 12288:yZb3xHfprRwqcLpjAjRKarcM6tctVl168:yZb3xHfp1wfjAj0arcXtctVl1
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
e3:a5:37:8b:7a:e3:cb:9b:45:34:58:cf:16:86:40:b1:a1:42:37:f5:72:06:29:85:df:d2:8b:c9:33:5b:7a:aa
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:7F00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:06:d7:bc:51:38:98:23:ec:2c:00:01:00:00:02:06
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
282000
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Wlk\Wex.Common.pdb
kernel32
CreateEventW
GetCurrentThreadId
CreateThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetCurrentProcessId
GetCommandLineW
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
GetTempFileNameW
SetFilePointerEx
GetFileSizeEx
CreateThreadpoolTimer
CloseThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
IsDebuggerPresent
GetProcessId
GetExitCodeProcess
TerminateProcess
OutputDebugStringW
RtlCaptureContext
MultiByteToWideChar
lstrcmpiW
TlsFree
GetVersion
GetModuleHandleA
TlsSetValue
TlsGetValue
TlsAlloc
SetThreadErrorMode
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
WaitForSingleObjectEx
GetSystemTimeAsFileTime
EncodePointer
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
WideCharToMultiByte
GetModuleFileNameW
K32GetModuleFileNameExW
K32EnumProcessModulesEx
FindFirstFileExW
FindNextFileW
FindClose
VerSetConditionMask
VerifyVersionInfoW
ExpandEnvironmentStringsW
GetEnvironmentVariableW
GetFinalPathNameByHandleW
CreateProcessW
GetStdHandle
OpenProcess
GetHandleInformation
DuplicateHandle
GetDllDirectoryW
GetSystemDirectoryW
GetWindowsDirectoryW
LoadLibraryExW
GetLocalTime
SetLastError
GetCurrentProcess
GetCurrentThread
GetThreadContext
OpenThread
K32GetModuleInformation
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalFree
GetNativeSystemInfo
GetFileInformationByHandle
DeleteFileW
SetFilePointer
WriteFile
ReadFile
CreateFileW
CloseHandle
GetModuleHandleW
GetProcAddress
FreeLibrary
GetLastError
ActivateActCtx
CreateActCtxW
VirtualProtect
LoadLibraryExA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetSystemInfo
VirtualQuery
FormatMessageA
GetLocaleInfoEx
TryAcquireSRWLockExclusive
InitOnceBeginInitialize
InitOnceComplete
GetCurrentDirectoryW
CreateDirectoryW
FindFirstFileW
GetFileAttributesW
GetFileAttributesExW
advapi32
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
EventActivityIdControl
EventWriteTransfer
EventRegister
EventUnregister
OpenServiceW
OpenSCManagerW
CloseServiceHandle
ntdll
RtlAnsiStringToUnicodeString
RtlFreeUnicodeString
RtlInitAnsiString
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_register_onexit_function
_crt_atexit
_initterm
terminate
_initterm_e
_cexit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_errno
_seh_filter_dll
_initialize_onexit_table
abort
_configure_narrow_argv
api-ms-win-crt-string-l1-1-0
iswspace
_wcsicmp
wmemmove_s
strcpy_s
wmemcpy_s
strncmp
towlower
wcscspn
_strnicmp
isalnum
isspace
_wcsnicmp
wcsncmp
_stricmp
wcsnlen
wcscmp
api-ms-win-crt-heap-l1-1-0
free
calloc
_callnewh
malloc
realloc
api-ms-win-crt-locale-l1-1-0
_unlock_locales
_lock_locales
___lc_locale_name_func
___lc_codepage_func
___mb_cur_max_func
__pctype_func
localeconv
setlocale
api-ms-win-crt-math-l1-1-0
_dsign
ceilf
api-ms-win-crt-utility-l1-1-0
srand
rand
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
_putws
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vsprintf
api-ms-win-crt-convert-l1-1-0
wcstoul
??0AutoDisableWow64FsRedirection@Common@TAEF@@QEAA@XZ
??0AutoSetRegKey@Common@TAEF@@QEAA@PEAUHKEY__@@PEB_W1AEBVString@12@@Z
??0AutoSetRegKey@Common@TAEF@@QEAA@PEAUHKEY__@@PEB_W1K@Z
??0Exception@Common@WEX@@IEAA@J@Z
??0Exception@Common@WEX@@IEAA@JAEBVString@12@@Z
??0Exception@Common@WEX@@IEAA@JPEBG@Z
??0Exception@Common@WEX@@IEAA@JPEB_W@Z
??0Exception@Common@WEX@@QEAA@AEBV012@@Z
??0MemoryStream@Common@TAEF@@QEAA@PEB_W@Z
??0MemoryStream@Common@TAEF@@QEAA@V?$vector@EV?$allocator@E@std@@@std@@@Z
??0MemoryStream@Common@TAEF@@QEAA@XZ
??0ModuleLookup@Common@TAEF@@QEAA@W4FilterImportSetting@12@V?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@std@@@Z
??0NoThrowString@Common@WEX@@AEAA@J@Z
??0NoThrowString@Common@WEX@@QEAA@$$QEAV012@@Z
??0NoThrowString@Common@WEX@@QEAA@AEBV012@@Z
??0NoThrowString@Common@WEX@@QEAA@AEBVString@12@@Z
??0NoThrowString@Common@WEX@@QEAA@PEAD@Z
??0NoThrowString@Common@WEX@@QEAA@PEAG@Z
??0NoThrowString@Common@WEX@@QEAA@PEA_W@Z
??0NoThrowString@Common@WEX@@QEAA@PEBD@Z
??0NoThrowString@Common@WEX@@QEAA@PEBG@Z
??0NoThrowString@Common@WEX@@QEAA@PEBGH@Z
??0NoThrowString@Common@WEX@@QEAA@PEB_W@Z
??0NoThrowString@Common@WEX@@QEAA@PEB_WH@Z
??0NoThrowString@Common@WEX@@QEAA@XZ
??0PeFile@Common@TAEF@@QEAA@V?$unique_ptr@UIExtraData@PeFile@Common@TAEF@@U?$default_delete@UIExtraData@PeFile@Common@TAEF@@@std@@@std@@VDataView@12@W4SectionLookupMethod@012@_K@Z
??0String@Common@WEX@@QEAA@$$QEAV012@@Z
??0String@Common@WEX@@QEAA@AEBV012@@Z
??0String@Common@WEX@@QEAA@AEBVNoThrowString@12@@Z
??0String@Common@WEX@@QEAA@PEAD@Z
??0String@Common@WEX@@QEAA@PEAG@Z
??0String@Common@WEX@@QEAA@PEA_W@Z
??0String@Common@WEX@@QEAA@PEBD@Z
??0String@Common@WEX@@QEAA@PEBG@Z
??0String@Common@WEX@@QEAA@PEBGH@Z
??0String@Common@WEX@@QEAA@PEB_W@Z
??0String@Common@WEX@@QEAA@PEB_WH@Z
??0String@Common@WEX@@QEAA@XZ
??0TextFile@Common@TAEF@@QEAA@AEBVpath@filesystem@std@@KKKK@Z
??0WaitableTimer@Common@TAEF@@QEAA@V?$function@$$A6AXXZ@std@@@Z
??1AutoDisableWow64FsRedirection@Common@TAEF@@QEAA@XZ
??1AutoSetRegKey@Common@TAEF@@QEAA@XZ
??1Exception@Common@WEX@@UEAA@XZ
??1NoThrowString@Common@WEX@@QEAA@XZ
??1PeFile@Common@TAEF@@QEAA@XZ
??1String@Common@WEX@@QEAA@XZ
??1WaitableTimer@Common@TAEF@@QEAA@XZ
??3Exception@Common@WEX@@CAXPEAX@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@AEBVString@12@@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@D@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@G@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEBD@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEBE@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEBG@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEB_W@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@V012@@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@_W@Z
??4String@Common@WEX@@QEAAAEBV012@$$QEAVNoThrowString@12@@Z
??4String@Common@WEX@@QEAAAEBV012@AEBVNoThrowString@12@@Z
??4String@Common@WEX@@QEAAAEBV012@D@Z
??4String@Common@WEX@@QEAAAEBV012@G@Z
??4String@Common@WEX@@QEAAAEBV012@PEBD@Z
??4String@Common@WEX@@QEAAAEBV012@PEBE@Z
??4String@Common@WEX@@QEAAAEBV012@PEBG@Z
??4String@Common@WEX@@QEAAAEBV012@PEB_W@Z
??4String@Common@WEX@@QEAAAEBV012@V012@@Z
??4String@Common@WEX@@QEAAAEBV012@_W@Z
??8Common@WEX@@YA_NAEBVNoThrowString@01@0@Z
??8Common@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??8Common@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??8Common@WEX@@YA_NAEBVString@01@0@Z
??8Common@WEX@@YA_NAEBVString@01@PEBG@Z
??8Common@WEX@@YA_NAEBVString@01@PEB_W@Z
??8Common@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??8Common@WEX@@YA_NPEBGAEBVString@01@@Z
??8Common@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??8Common@WEX@@YA_NPEB_WAEBVString@01@@Z
??9Common@WEX@@YA_NAEBVNoThrowString@01@0@Z
??9Common@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??9Common@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??9Common@WEX@@YA_NAEBVString@01@0@Z
??9Common@WEX@@YA_NAEBVString@01@PEBG@Z
??9Common@WEX@@YA_NAEBVString@01@PEB_W@Z
??9Common@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??9Common@WEX@@YA_NPEBGAEBVString@01@@Z
??9Common@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??9Common@WEX@@YA_NPEB_WAEBVString@01@@Z
??BNoThrowString@Common@WEX@@QEBAPEBGXZ
??BNoThrowString@Common@WEX@@QEBAPEB_WXZ
??BString@Common@WEX@@QEBAPEBGXZ
??BString@Common@WEX@@QEBAPEB_WXZ
??HCommon@WEX@@YA?AVNoThrowString@01@DAEBV201@@Z
??HCommon@WEX@@YA?AVNoThrowString@01@GAEBV201@@Z
??HCommon@WEX@@YA?AVNoThrowString@01@PEBGAEBV201@@Z
??HCommon@WEX@@YA?AVNoThrowString@01@PEB_WAEBV201@@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@AEBV201@@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@D@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@G@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@PEBG@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@PEB_W@Z
??HCommon@WEX@@YA?AVNoThrowString@01@V201@_W@Z
??HCommon@WEX@@YA?AVNoThrowString@01@_WAEBV201@@Z
??HCommon@WEX@@YA?AVString@01@DAEBV201@@Z
??HCommon@WEX@@YA?AVString@01@GAEBV201@@Z
??HCommon@WEX@@YA?AVString@01@PEBGAEBV201@@Z
??HCommon@WEX@@YA?AVString@01@PEB_WAEBV201@@Z
??HCommon@WEX@@YA?AVString@01@V201@AEBV201@@Z
??HCommon@WEX@@YA?AVString@01@V201@D@Z
??HCommon@WEX@@YA?AVString@01@V201@G@Z
??HCommon@WEX@@YA?AVString@01@V201@PEBG@Z
??HCommon@WEX@@YA?AVString@01@V201@PEB_W@Z
??HCommon@WEX@@YA?AVString@01@V201@_W@Z
??HCommon@WEX@@YA?AVString@01@_WAEBV201@@Z
??MCommon@WEX@@YA_NAEBVNoThrowString@01@0@Z
??MCommon@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??MCommon@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??MCommon@WEX@@YA_NAEBVString@01@0@Z
??MCommon@WEX@@YA_NAEBVString@01@PEBG@Z
??MCommon@WEX@@YA_NAEBVString@01@PEB_W@Z
??MCommon@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??MCommon@WEX@@YA_NPEBGAEBVString@01@@Z
??MCommon@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??MCommon@WEX@@YA_NPEB_WAEBVString@01@@Z
??NCommon@WEX@@YA_NAEBVNoThrowString@01@0@Z
??NCommon@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??NCommon@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??NCommon@WEX@@YA_NAEBVString@01@0@Z
??NCommon@WEX@@YA_NAEBVString@01@PEBG@Z
??NCommon@WEX@@YA_NAEBVString@01@PEB_W@Z
??NCommon@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??NCommon@WEX@@YA_NPEBGAEBVString@01@@Z
??NCommon@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??NCommon@WEX@@YA_NPEB_WAEBVString@01@@Z
??OCommon@WEX@@YA_NAEBVNoThrowString@01@0@Z
??OCommon@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??OCommon@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??OCommon@WEX@@YA_NAEBVString@01@0@Z
??OCommon@WEX@@YA_NAEBVString@01@PEBG@Z
??OCommon@WEX@@YA_NAEBVString@01@PEB_W@Z
??OCommon@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??OCommon@WEX@@YA_NPEBGAEBVString@01@@Z
??OCommon@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??OCommon@WEX@@YA_NPEB_WAEBVString@01@@Z
??PCommon@WEX@@YA_NAEBVNoThrowString@01@0@Z
??PCommon@WEX@@YA_NAEBVNoThrowString@01@PEBG@Z
??PCommon@WEX@@YA_NAEBVNoThrowString@01@PEB_W@Z
??PCommon@WEX@@YA_NAEBVString@01@0@Z
??PCommon@WEX@@YA_NAEBVString@01@PEBG@Z
??PCommon@WEX@@YA_NAEBVString@01@PEB_W@Z
??PCommon@WEX@@YA_NPEBGAEBVNoThrowString@01@@Z
??PCommon@WEX@@YA_NPEBGAEBVString@01@@Z
??PCommon@WEX@@YA_NPEB_WAEBVNoThrowString@01@@Z
??PCommon@WEX@@YA_NPEB_WAEBVString@01@@Z
??UCommon@TAEF@@YA?AW4EventCharacteristics@01@W4201@AEBW4201@@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@AEBV012@@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@D@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@G@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@PEBG@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@PEB_W@Z
??YNoThrowString@Common@WEX@@QEAAAEBV012@_W@Z
??YString@Common@WEX@@QEAAAEBV012@AEBV012@@Z
??YString@Common@WEX@@QEAAAEBV012@D@Z
??YString@Common@WEX@@QEAAAEBV012@G@Z
??YString@Common@WEX@@QEAAAEBV012@PEBG@Z
??YString@Common@WEX@@QEAAAEBV012@PEB_W@Z
??YString@Common@WEX@@QEAAAEBV012@_W@Z
??_5Common@TAEF@@YAAEAW4EventCharacteristics@01@AEAW4201@AEBW4201@@Z
??_7Exception@Common@WEX@@6B@
??_FModuleLookup@Common@TAEF@@QEAAXXZ
?Activate@ActivationContext@Common@TAEF@@QEBA?AV?$AutoHandle@UActivationScopePolicy@Detail@Common@TAEF@@@23@XZ
?AddFileToExclude@ModuleLookup@Common@TAEF@@QEAAXAEBVpath@filesystem@std@@@Z
?AddFileToInclude@ModuleLookup@Common@TAEF@@QEAAXAEBVpath@filesystem@std@@@Z
?AddSearchPath@ModuleLookup@Common@TAEF@@QEAAXAEBVpath@filesystem@std@@@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@AEBV123@@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@D@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@G@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@PEBG@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_W@Z
?Append@NoThrowString@Common@WEX@@QEAAAEAV123@_W@Z
?Append@String@Common@WEX@@QEAAAEAV123@AEBV123@@Z
?Append@String@Common@WEX@@QEAAAEAV123@D@Z
?Append@String@Common@WEX@@QEAAAEAV123@G@Z
?Append@String@Common@WEX@@QEAAAEAV123@PEBG@Z
?Append@String@Common@WEX@@QEAAAEAV123@PEB_W@Z
?Append@String@Common@WEX@@QEAAAEAV123@_W@Z
?AppendFormat@NoThrowString@Common@WEX@@QEAAAEAV123@PEBGZZ
?AppendFormat@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_WZZ
?AppendFormat@String@Common@WEX@@QEAAAEAV123@PEBGZZ
?AppendFormat@String@Common@WEX@@QEAAAEAV123@PEB_WZZ
?AppendFormatV@NoThrowString@Common@WEX@@QEAAAEAV123@PEBGPEAD@Z
?AppendFormatV@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_WPEAD@Z
?AppendFormatV@String@Common@WEX@@QEAAAEAV123@PEBGPEAD@Z
?AppendFormatV@String@Common@WEX@@QEAAAEAV123@PEB_WPEAD@Z
?Assert@Debug@Common@WEX@@SAX_NPEBG111H@Z
?Assert@Debug@Common@WEX@@SAX_NPEB_W111H@Z
?Break@Debug@Common@WEX@@SAXXZ
?Calculate@Crc@Common@TAEF@@YAIAEAVStreamBase@23@@Z
?Calculate@Crc@Common@TAEF@@YAIAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CalculateFromFile@Crc@Common@TAEF@@YAIAEBVpath@filesystem@std@@@Z
?CodeSegments@MiniDumpFormat@Common@WEX@@3KB
?ColumnNames@CallStackFormat@Common@WEX@@3KB
?Compare@NoThrowString@Common@WEX@@QEBAHPEBG@Z
?Compare@NoThrowString@Common@WEX@@QEBAHPEB_W@Z
?Compare@String@Common@WEX@@QEBAHPEBG@Z
?Compare@String@Common@WEX@@QEBAHPEB_W@Z
?CompareNoCase@NoThrowString@Common@WEX@@QEBAHPEBG@Z
?CompareNoCase@NoThrowString@Common@WEX@@QEBAHPEB_W@Z
?CompareNoCase@String@Common@WEX@@QEBAHPEBG@Z
?CompareNoCase@String@Common@WEX@@QEBAHPEB_W@Z
?Copy@NoThrowString@Common@WEX@@QEAAXPEBGH@Z
?Copy@NoThrowString@Common@WEX@@QEAAXPEB_WH@Z
?Copy@String@Common@WEX@@QEAAXPEBGH@Z
?Copy@String@Common@WEX@@QEAAXPEB_WH@Z
?Create@Event@Common@TAEF@@YA?AV?$AutoHandle@UHandlePolicy@Common@TAEF@@@23@W4EventCharacteristics@23@@Z
?CreateTempFile@TempFileContainerOperations@Common@TAEF@@YA?AVpath@filesystem@std@@XZ
?CurrentTimeAsString@Time@Common@TAEF@@YA?AVString@23@XZ
?DataSegments@MiniDumpFormat@Common@WEX@@3KB
?Default@CallStackFormat@Common@WEX@@3KB
?Default@MiniDumpFormat@Common@WEX@@3KB
?Delete@NoThrowString@Common@WEX@@QEAAHHH@Z
?Delete@String@Common@WEX@@QEAAHHH@Z
?DetachStorage@MemoryStream@Common@TAEF@@QEAA?AV?$vector@EV?$allocator@E@std@@@std@@XZ
?Empty@NoThrowString@Common@WEX@@QEAAXXZ
?Empty@String@Common@WEX@@QEAAXXZ
?ErrorCode@Exception@Common@WEX@@QEBAJXZ
?Exception@Throw@Common@WEX@@YAXJ@Z
?Exception@Throw@Common@WEX@@YAXJPEBG@Z
?Exception@Throw@Common@WEX@@YAXJPEB_W@Z
?ExecuteAndWait@CommandWrapper@Common@TAEF@@QEBAKAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?ExecuteNoWait@CommandWrapper@Common@TAEF@@QEBA?AV?$AutoHandle@UHandlePolicy@Common@TAEF@@@23@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?Find@NoThrowString@Common@WEX@@QEBAHG@Z
?Find@NoThrowString@Common@WEX@@QEBAHGH@Z
?Find@NoThrowString@Common@WEX@@QEBAHPEBG@Z
?Find@NoThrowString@Common@WEX@@QEBAHPEBGH@Z
?Find@NoThrowString@Common@WEX@@QEBAHPEB_W@Z
?Find@NoThrowString@Common@WEX@@QEBAHPEB_WH@Z
?Find@NoThrowString@Common@WEX@@QEBAH_W@Z
?Find@NoThrowString@Common@WEX@@QEBAH_WH@Z
?Find@String@Common@WEX@@QEBAHG@Z
?Find@String@Common@WEX@@QEBAHGH@Z
?Find@String@Common@WEX@@QEBAHPEBG@Z
?Find@String@Common@WEX@@QEBAHPEBGH@Z
?Find@String@Common@WEX@@QEBAHPEB_W@Z
?Find@String@Common@WEX@@QEBAHPEB_WH@Z
?Find@String@Common@WEX@@QEBAH_W@Z
?Find@String@Common@WEX@@QEBAH_WH@Z
?FindManagedModulePath@Common@TAEF@@YA?AV?$optional@Vpath@filesystem@std@@@std@@AEBVpath@filesystem@4@AEBVVersion@12@0AEBV?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@4@W4ProcessorArchitecture@12@@Z
?FindModulePath@Common@TAEF@@YA?AV?$optional@Vpath@filesystem@std@@@std@@AEBVpath@filesystem@4@0AEBV?$set@Vpath@filesystem@std@@UPathCompare@Common@TAEF@@V?$allocator@Vpath@filesystem@std@@@3@@4@W4ProcessorArchitecture@12@@Z
?Format@NoThrowString@Common@WEX@@QEAAAEAV123@PEBGZZ
?Format@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_WZZ
?Format@String@Common@WEX@@QEAAAEAV123@PEBGZZ
?Format@String@Common@WEX@@QEAAAEAV123@PEB_WZZ
?FormatV@NoThrowString@Common@WEX@@QEAAAEAV123@PEBGPEAD@Z
?FormatV@NoThrowString@Common@WEX@@QEAAAEAV123@PEB_WPEAD@Z
?FormatV@String@Common@WEX@@QEAAAEAV123@PEBGPEAD@Z
?FormatV@String@Common@WEX@@QEAAAEAV123@PEB_WPEAD@Z
?FrameAddress@CallStackFormat@Common@WEX@@3KB
?FrameMemoryUsage@CallStackFormat@Common@WEX@@3KB
?FrameNumbers@CallStackFormat@Common@WEX@@3KB
?FreeExtra@NoThrowString@Common@WEX@@QEAAXXZ
?FreeExtra@String@Common@WEX@@QEAAXXZ
?FullDump@MiniDumpFormat@Common@WEX@@3KB
?FullInfo@CallStackFormat@Common@WEX@@3KB
?FullMemory@MiniDumpFormat@Common@WEX@@3KB
?FullMemoryInfo@MiniDumpFormat@Common@WEX@@3KB
?FunctionInfo@CallStackFormat@Common@WEX@@3KB
?Generate@Random@Common@TAEF@@SAIII@Z
?Generate@Random@Common@TAEF@@SAIXZ
?GenerateMiniDumpFileName@Common@TAEF@@YA?AVpath@filesystem@std@@AEBV345@@Z
?GetArchitecture@PeFile@Common@TAEF@@QEBA?AW4ProcessorArchitecture@23@XZ
?GetAttributeParameterValues@Private@Common@TAEF@@YA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@PEBEKVDataView@23@@Z
?GetBuffer@NoThrowString@Common@WEX@@QEAAPEAGXZ
?GetBuffer@String@Common@WEX@@QEAAPEAGXZ
?GetBufferLength@Common@WEX@@YAHAEBVNoThrowString@12@@Z
?GetBufferLength@Common@WEX@@YAHAEBVString@12@@Z
?GetBufferSetLength@NoThrowString@Common@WEX@@QEAAPEAGH@Z
?GetBufferSetLength@String@Common@WEX@@QEAAPEAGH@Z
?GetCallStackForContext@Common@TAEF@@YA?AV?$vector@VString@Common@TAEF@@V?$allocator@VString@Common@TAEF@@@std@@@std@@KU_CONTEXT@@@Z
?GetCallStackOfSuspendedThread@Common@TAEF@@YA?AV?$vector@VString@Common@TAEF@@V?$allocator@VString@Common@TAEF@@@std@@@std@@PEAXKIW4ProcessorArchitecture@12@@Z
?GetDirectory@PeFile@Common@TAEF@@QEBA?AV?$optional@VDataView@Common@TAEF@@@std@@K@Z
?GetFileVersion@Common@TAEF@@YA?AVVersion@12@AEBVpath@filesystem@std@@@Z
?GetFileVersion@Common@TAEF@@YA_NAEBVpath@filesystem@std@@AEAUtagVS_FIXEDFILEINFO@@@Z
?GetId@LegacyThread@Common@TAEF@@IEBAKXZ
?GetImports@PeFile@Common@TAEF@@QEBA?AV?$vector@Vpath@filesystem@std@@V?$allocator@Vpath@filesystem@std@@@3@@std@@XZ
?GetLastError@Debug@Common@WEX@@SAKXZ
?GetLastHResult@NoThrowString@Common@WEX@@QEBAJXZ
?GetLatestRuntimeVersionFromDeploymentRegistrySettings@ClrHelpers@Common@TAEF@@YA?AVVersion@23@XZ
?GetLength@NoThrowString@Common@WEX@@QEBAHXZ
?GetLength@String@Common@WEX@@QEBAHXZ
?GetMetadataDispenser@Common@TAEF@@YA?AVMetadataDispenser@12@XZ
?GetModuleBase@PeFile@Common@TAEF@@QEBA_KXZ
?GetNamespace@Settings@Common@TAEF@@YA?AV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@AEBV45@PEBD@Z
?GetPointerSize@PeFile@Common@TAEF@@QEBAEXZ
?GetPosition@TextFile@Common@TAEF@@QEBA_KXZ
?GetSectionByName@PeFile@Common@TAEF@@QEBA?AV?$optional@VDataView@Common@TAEF@@@std@@PEBD@Z
?GetSectionDataAtRva@PeFile@Common@TAEF@@QEBA?AVDataView@23@K@Z
?GetSectionDataAtRva@PeFile@Common@TAEF@@QEBA?AVDataView@23@KK@Z
?GetSectionDataAtVirtualAddress@PeFile@Common@TAEF@@QEBA?AVDataView@23@_K@Z
?GetSettings@Settings@Common@TAEF@@YAAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@XZ
?GetSourceInfoForMethods@Common@TAEF@@YA?AV?$map@V?$StringViewZ@D@Common@TAEF@@VSourceInfo@23@U?$less@X@std@@V?$allocator@U?$pair@$$CBV?$StringViewZ@D@Common@TAEF@@VSourceInfo@23@@std@@@6@@std@@AEBVpath@filesystem@4@AEBV?$vector@V?$StringViewZ@D@Common@TAEF@@V?$allocator@V?$StringViewZ@D@Common@TAEF@@@std@@@4@AEAVStringCache@12@@Z
?GetStack@Debug@Common@WEX@@SAJAEAVNoThrowString@23@@Z
?GetStack@Debug@Common@WEX@@SAJKAEAVNoThrowString@23@@Z
?GetStack@Debug@Common@WEX@@SAJKPEBXAEAVNoThrowString@23@@Z
?GetStack@Debug@Common@WEX@@SAJPEBXAEAVNoThrowString@23@@Z
?GetTempFolderPath@TempFileContainerOperations@Common@TAEF@@YAAEBVpath@filesystem@std@@XZ
?GetThreadHandle@LegacyThread@Common@TAEF@@IEBAPEAXXZ
?HandleData@MiniDumpFormat@Common@WEX@@3KB
?If@Throw@Common@WEX@@YAX_NJ@Z
?If@Throw@Common@WEX@@YAX_NJPEBG@Z
?If@Throw@Common@WEX@@YAX_NJPEB_W@Z
?IfFailed@Throw@Common@WEX@@YAXJ@Z
?IfFailed@Throw@Common@WEX@@YAXJPEBG@Z
?IfFailed@Throw@Common@WEX@@YAXJPEB_W@Z
?IfFalse@Throw@Common@WEX@@YAX_NJ@Z
?IfFalse@Throw@Common@WEX@@YAX_NJPEBG@Z
?IfFalse@Throw@Common@WEX@@YAX_NJPEB_W@Z
?IfNull@Throw@Common@WEX@@YAXPEBX@Z
?IfNull@Throw@Common@WEX@@YAXPEBXPEBG@Z
?IfNull@Throw@Common@WEX@@YAXPEBXPEB_W@Z
?IndirectMemory@MiniDumpFormat@Common@WEX@@3KB
?Initialize@LegacyThread@Common@TAEF@@UEAAX_K@Z
?Insert@NoThrowString@Common@WEX@@QEAAHHG@Z
?Insert@NoThrowString@Common@WEX@@QEAAHHPEBG@Z
?Insert@NoThrowString@Common@WEX@@QEAAHHPEB_W@Z
?Insert@NoThrowString@Common@WEX@@QEAAHH_W@Z
?Insert@String@Common@WEX@@QEAAHHG@Z
?Insert@String@Common@WEX@@QEAAHHPEBG@Z
?Insert@String@Common@WEX@@QEAAHHPEB_W@Z
?Insert@String@Common@WEX@@QEAAHH_W@Z
?IsArchitectureAgnostic@PeFile@Common@TAEF@@QEBA_NXZ
?IsDebuggerPresent@Debug@Common@WEX@@SA_NXZ
?IsDll@PeFile@Common@TAEF@@QEBA_NXZ
?IsEmpty@NoThrowString@Common@WEX@@QEBA_NXZ
?IsEmpty@String@Common@WEX@@QEBA_NXZ
?IsNativeBinary@PeFile@Common@TAEF@@QEBA_NXZ
?IsNullOrEmpty@NoThrowString@Common@WEX@@SA_NPEBG@Z
?IsNullOrEmpty@NoThrowString@Common@WEX@@SA_NPEB_W@Z
?IsNullOrEmpty@String@Common@WEX@@SA_NPEBG@Z
?IsNullOrEmpty@String@Common@WEX@@SA_NPEB_W@Z
?IsRunning@LegacyThread@Common@TAEF@@QEBA_NXZ
?IsValid@NoThrowString@Common@WEX@@QEBA_NXZ
?LastError@Throw@Common@WEX@@YAXPEBG@Z
?LastError@Throw@Common@WEX@@YAXPEB_W@Z
?LastError@Throw@Common@WEX@@YAXXZ
?LastErrorIf@Throw@Common@WEX@@YAX_N@Z
?LastErrorIf@Throw@Common@WEX@@YAX_NPEBG@Z
?LastErrorIf@Throw@Common@WEX@@YAX_NPEB_W@Z
?LastErrorIfFalse@Throw@Common@WEX@@YAX_N@Z
?LastErrorIfFalse@Throw@Common@WEX@@YAX_NPEBG@Z
?LastErrorIfFalse@Throw@Common@WEX@@YAX_NPEB_W@Z
?Left@NoThrowString@Common@WEX@@QEBA?AV123@H@Z
?Left@String@Common@WEX@@QEBA?AV123@H@Z
?ManagedDump@MiniDumpFormat@Common@WEX@@3KB
?Message@Exception@Common@WEX@@QEBAPEBGXZ
?Mid@NoThrowString@Common@WEX@@QEBA?AV123@H@Z
?Mid@NoThrowString@Common@WEX@@QEBA?AV123@HH@Z
?Mid@String@Common@WEX@@QEBA?AV123@H@Z
?Mid@String@Common@WEX@@QEBA?AV123@HH@Z
?OpenForExecution@PeFile@Common@TAEF@@SA?AV123@AEBVpath@filesystem@std@@W4PeFileOptions@23@PEAPEAUHINSTANCE__@@@Z
?OpenForReflection@PeFile@Common@TAEF@@SA?AV123@AEBVpath@filesystem@std@@@Z
?OpenFromMemory@PeFile@Common@TAEF@@SA?AV123@VDataView@23@@Z
?OpenLoadedModule@PeFile@Common@TAEF@@SA?AV123@PEAUHINSTANCE__@@@Z
?Parameters@CallStackFormat@Common@WEX@@3KB
?PrivateReadWriteMemory@MiniDumpFormat@Common@WEX@@3KB
?ProcessThreadData@MiniDumpFormat@Common@WEX@@3KB
?QueryStringValue@RegistryUtilities@Common@TAEF@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AEAVCRegKey@ATL@@PEB_W@Z
?RaiseDeprecatedFeatureTelemetry@Common@TAEF@@YAXW4Situation@12@PEB_W@Z
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
?ReadAllTextNarrow@TextFile@Common@TAEF@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Encoding@23@@Z
?ReadAllTextNarrow@TextFile@Common@TAEF@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEAX@Z
?ReadAllTextWide@TextFile@Common@TAEF@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAX@Z
?ReadFromCurrentPositionNarrow@TextFile@Common@TAEF@@QEAA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?ReleaseBuffer@NoThrowString@Common@WEX@@QEAAXH@Z
?ReleaseBuffer@String@Common@WEX@@QEAAXH@Z
?Remove@NoThrowString@Common@WEX@@QEAAHG@Z
?Remove@NoThrowString@Common@WEX@@QEAAH_W@Z
?Remove@String@Common@WEX@@QEAAHG@Z
?Remove@String@Common@WEX@@QEAAH_W@Z
?Replace@NoThrowString@Common@WEX@@QEAAHGG@Z
?Replace@NoThrowString@Common@WEX@@QEAAHPEBG0@Z
?Replace@NoThrowString@Common@WEX@@QEAAHPEB_W0@Z
?Replace@NoThrowString@Common@WEX@@QEAAH_W0@Z
?Replace@String@Common@WEX@@QEAAHGG@Z
?Replace@String@Common@WEX@@QEAAHPEBG0@Z
?Replace@String@Common@WEX@@QEAAHPEB_W0@Z
?Replace@String@Common@WEX@@QEAAH_W0@Z
?Restore@AutoDisableWow64FsRedirection@Common@TAEF@@QEAAXXZ
?Restore@AutoSetRegKey@Common@TAEF@@QEAAXXZ
?Reverse@NoThrowString@Common@WEX@@QEAAXXZ
?Reverse@String@Common@WEX@@QEAAXXZ
?ReverseFind@NoThrowString@Common@WEX@@QEBAHG@Z
?ReverseFind@NoThrowString@Common@WEX@@QEBAH_W@Z
?ReverseFind@String@Common@WEX@@QEBAHG@Z
?ReverseFind@String@Common@WEX@@QEBAH_W@Z
?Right@NoThrowString@Common@WEX@@QEBA?AV123@H@Z
?Right@String@Common@WEX@@QEBA?AV123@H@Z
?RunningUnderWtt@Wtt@Common@TAEF@@YA_NXZ
?Save@ScreenCapture@Common@WEX@@SAJAEAVNoThrowString@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJAEAVNoThrowString@23@W4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJAEAVNoThrowString@23@W4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJAEAVNoThrowString@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHAEAVNoThrowString@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHAEAVNoThrowString@23@W4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHAEAVNoThrowString@23@W4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHAEAVNoThrowString@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEBG@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEBGW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEBGW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEBGW4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEB_W@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEB_WW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEB_WW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJHHHHPEB_WW4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEBG@Z
?Save@ScreenCapture@Common@WEX@@SAJPEBGW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEBGW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEBGW4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEB_W@Z
?Save@ScreenCapture@Common@WEX@@SAJPEB_WW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEB_WW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJPEB_WW4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@AEAVNoThrowString@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@AEAVNoThrowString@23@W4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@AEAVNoThrowString@23@W4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@AEAVNoThrowString@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEBG@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEBGW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEBGW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEBGW4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEB_W@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEB_WW4Format@ImageFormats@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEB_WW4Format@ImageFormats@23@W4Options@ScreenCaptureOptions@23@@Z
?Save@ScreenCapture@Common@WEX@@SAJUtagRECT@@PEB_WW4Options@ScreenCaptureOptions@23@@Z
?SaveDump@Debug@Common@WEX@@SAJAEAVNoThrowString@23@@Z
?SaveDump@Debug@Common@WEX@@SAJKAEAVNoThrowString@23@@Z
?SaveMiniDump@Common@TAEF@@YA?AVpath@filesystem@std@@KKAEBV345@@Z
?SaveMiniDump@Common@TAEF@@YAXW4_MINIDUMP_TYPE@@KPEAX@Z
?SaveMiniDumpForCurrentProcess@Common@TAEF@@YA?AVpath@filesystem@std@@KPEAU_CONTEXT@@@Z
?SaveWholeScreenToMemory@ScreenCapturePrivate@Common@TAEF@@YA?AV?$vector@EV?$allocator@E@std@@@std@@W4ImageFormats@123@W4ScreenCaptureOptions@123@@Z
?Seed@Random@Common@TAEF@@SAXI@Z
?SetLastError@Debug@Common@WEX@@SAXK@Z
?SetMaximumCallStackFrameCount@Common@TAEF@@YAXK@Z
?SetPosition@TextFile@Common@TAEF@@QEAAX_K@Z
?SetRequiredArchitecture@ModuleLookup@Common@TAEF@@QEAAXW4ProcessorArchitecture@23@@Z
?SetStdError@CommandWrapper@Common@TAEF@@QEAA_NPEAX@Z
?SetStdOut@CommandWrapper@Common@TAEF@@QEAA_NPEAX@Z
?SetStdOutToTemporaryFile@CommandWrapper@Common@TAEF@@QEAAXXZ
?SetValue@Settings@Common@TAEF@@YAXPEBD0@Z
?SetValue@Settings@Common@TAEF@@YAXPEBG0@Z
?SourceLine@CallStackFormat@Common@WEX@@3KB
?Start@WaitableTimer@Common@TAEF@@QEAAXV?$duration@_JU?$ratio@$00$0JIJGIA@@std@@@chrono@std@@0@Z
?Stop@WaitableTimer@Common@TAEF@@QEAAXXZ
?StopWithoutWatingForPendingCallbacks@WaitableTimer@Common@TAEF@@QEAAXXZ
?ThreadInfo@MiniDumpFormat@Common@WEX@@3KB
?ToCStrWithFallbackTo@NoThrowString@Common@WEX@@QEBAPEBGPEBG@Z
?ToCStrWithFallbackTo@NoThrowString@Common@WEX@@QEBAPEB_WPEB_W@Z
?ToLower@NoThrowString@Common@WEX@@QEAAAEAV123@XZ
?ToLower@String@Common@WEX@@QEAAAEAV123@XZ
?ToUpper@NoThrowString@Common@WEX@@QEAAAEAV123@XZ
?ToUpper@String@Common@WEX@@QEAAAEAV123@XZ
?Trim@NoThrowString@Common@WEX@@QEAAXXZ
?Trim@String@Common@WEX@@QEAAXG@Z
?Trim@String@Common@WEX@@QEAAXXZ
?TrimLeft@NoThrowString@Common@WEX@@QEAAXXZ
?TrimLeft@String@Common@WEX@@QEAAXXZ
?TrimRight@NoThrowString@Common@WEX@@QEAAXXZ
?TrimRight@String@Common@WEX@@QEAAXXZ
?TryCreateFirewallManager@Common@TAEF@@YA?AV?$shared_ptr@VIFirewallManager@Common@TAEF@@@std@@XZ
?TryCreateFromExecutableFile@ActivationContext@Common@TAEF@@SA?AV?$optional@VActivationContext@Common@TAEF@@@std@@AEBVpath@filesystem@5@@Z
?TryDelayLoadTelemetryDll@Common@TAEF@@YAPEAUHINSTANCE__@@AEAUDelayLoadInfo@@@Z
?TryGetNetFrameworkRuntimeInfo@ClrHelpers@Common@TAEF@@YA?AV?$ComPtr@UICLRRuntimeInfo@@@WRL@Microsoft@@XZ
?TryGetStrongNameTokenFromAssembly@ClrHelpers@Common@TAEF@@YA_NAEBVpath@filesystem@std@@AEAVString@23@@Z
?TryOpenForReflection@PeFile@Common@TAEF@@SA?AV?$optional@VPeFile@Common@TAEF@@@std@@AEBVpath@filesystem@5@@Z
?TryQueryStringValue@RegistryUtilities@Common@TAEF@@YA?AV?$optional@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@std@@AEAVCRegKey@ATL@@PEB_W@Z
?UnloadedModules@MiniDumpFormat@Common@WEX@@3KB
?UpdateDebugPointer@NoThrowString@Common@WEX@@AEAAXXZ
?WaitForWorkerThreadExit@LegacyThread@Common@TAEF@@IEAAXXZ
?Write@Debug@Common@WEX@@SAXPEBG@Z
?Write@Debug@Common@WEX@@SAXPEB_W@Z
?WriteCab@MiniDumpFormat@Common@WEX@@3KB
?WriteCabSecondaryFiles@MiniDumpFormat@Common@WEX@@3KB
?WriteImpl@Debug@Common@WEX@@CAXPEBG@Z
?WriteImpl@Debug@Common@WEX@@CAXPEB_W@Z
?WriteLine@Debug@Common@WEX@@SAXPEBG@Z
?WriteLine@Debug@Common@WEX@@SAXPEB_W@Z
?WriteLineImpl@Debug@Common@WEX@@CAXPEBG@Z
?WriteLineImpl@Debug@Common@WEX@@CAXPEB_W@Z
?__autoclassinit2@AutoDisableWow64FsRedirection@Common@TAEF@@QEAAX_K@Z
?__autoclassinit2@Exception@Common@WEX@@QEAAX_K@Z
?__autoclassinit2@NoThrowString@Common@WEX@@QEAAX_K@Z
?__autoclassinit2@String@Common@WEX@@QEAAX_K@Z
?swap@Common@WEX@@YAXAEAVNoThrowString@12@0@Z
?swap@Common@WEX@@YAXAEAVString@12@0@Z
DebugHelp_Construct
DebugHelp_Destroy
DebugHelp_DestroyDebugTypeInfoArray
DebugHelp_GetDebugTypeInfoArrayElement
DebugHelp_GetDebugTypeInfoArrayFromQuery
DebugHelp_GetSearchPath
DebugHelp_SetSearchPath
Debug_Break
RaiseDeprecatedFeatureTelemetry
ScreenCapture_SaveWholeScreen
ScreenCapture_SaveWithSize
Thread_Wait_For
WexDebugBreak_ShouldUseDebuggerLaunch
Name
.text
Size
303KB
Virtual Size
302KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
368B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=260, version=33808,
count=10, id=259, version=33808,
count=87, id=261, version=33808,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=2, id=259, version=30795,
count=2, id=260, version=30795,
count=333, id=1, productName=Unmarked objects,
count=75, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
Wex.Communication.dll
- IMPHASH 92de70fe1c98cf562ee45c59b12ba820
- SHA256 a2bb6bd64eac312f0bd5d0ecc51c87ad55a44420ce9a9e26810192acc78da4b3
- MD5 e7e711b85ef0e0fba0cc8d48f98add32
- SHA1 261fe3d096cda15288a7dcf8930f41099a711a48
- SHA512 a84d658791516bc7a08a3ce7c14b52b61c824ab42bda9fbb5fe0fcf0b9270cc95857cf8a635864383f6838cc2aefa304ccd14588c5273d9bff9f1378665c5cdb
- SSDEEP 6144:EiXEngXfqX/ZBV6Z3CraJcAkMqSWrXD8VEwtyKHDjJX+dNBG:1XEngXfQBBVeCOGZMKrz8VEV6lMBG
- MD5 SHA1 SHA512 SSDEEP
Password
4405
Digest
3e:ab:bc:b2:78:9f:e8:58:60:e3:1d:bf:65:37:70:50:86:e3:1d:4c:51:6a:83:d9:19:9d:fd:e4:b2:5d:12:e3
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:651A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f5:99:09:94:bc:f1:c6:50:8c:00:01:00:00:01:f5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
211344
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Wlk\Wex.Communication.pdb
advapi32
EventWriteTransfer
EventActivityIdControl
CredFree
CredReadW
ConvertStringSecurityDescriptorToSecurityDescriptorW
EventRegister
EventUnregister
OpenThreadToken
kernel32
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
GetProcAddress
CloseHandle
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedPushEntrySList
GetCurrentThread
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
LoadLibraryExW
GetLastError
SetLastError
InitializeCriticalSectionEx
DecodePointer
DeleteCriticalSection
GetSystemTimeAsFileTime
InterlockedFlushSList
RtlPcToFileHeader
GetModuleHandleExW
RtlUnwindEx
CompareStringEx
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SleepEx
InitOnceComplete
InitOnceBeginInitialize
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount64
AcquireSRWLockShared
ReleaseSRWLockShared
GetStringTypeW
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
TryAcquireSRWLockExclusive
GetLocaleInfoEx
FormatMessageA
VirtualQuery
GetSystemInfo
AcquireSRWLockExclusive
MultiByteToWideChar
LCMapStringEx
WideCharToMultiByte
RaiseException
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
GetComputerNameExW
GetModuleHandleW
TlsAlloc
VerSetConditionMask
VerifyVersionInfoW
TlsGetValue
TlsSetValue
TlsFree
GetVersion
Sleep
CloseThreadpoolWork
GetModuleHandleA
LocalFree
FreeLibrary
GetTickCount
GetCurrentThreadId
CreateThreadpoolWork
OutputDebugStringA
GetModuleFileNameW
ReleaseSRWLockExclusive
LoadLibraryExA
VirtualProtect
rpcrt4
RpcServerInqCallAttributesW
UuidCreate
RpcStringFreeW
RpcBindingSetAuthInfoExW
RpcStringBindingComposeW
RpcBindingSetOption
RpcBindingFromStringBindingW
I_RpcExceptionFilter
RpcAsyncInitializeHandle
RpcAsyncCancelCall
RpcAsyncCompleteCall
RpcErrorStartEnumeration
RpcErrorEndEnumeration
RpcErrorGetNextRecord
RpcSsDestroyClientContext
RpcBindingFree
RpcRevertToSelf
RpcImpersonateClient
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcBindingInqAuthClientW
RpcServerInqBindings
RpcEpRegisterW
RpcEpUnregister
RpcServerRegisterAuthInfoW
RpcServerListen
RpcServerRegisterIf2
RpcServerUnregisterIfEx
RpcServerUseProtseqW
RpcServerUseProtseqEpW
RpcObjectSetType
NdrClientCall3
Ndr64AsyncClientCall
NdrAsyncServerCall
NdrServerCallAll
Ndr64AsyncServerCallAll
NdrServerCall2
RpcBindingVectorFree
wex.common
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
?GetSettings@Settings@Common@TAEF@@YAAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@XZ
api-ms-win-crt-runtime-l1-1-0
abort
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_errno
_crt_atexit
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table
terminate
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscpy_s
isalnum
_wcsnicmp
strncmp
strcspn
strcpy_s
isspace
wcsnlen
_strnicmp
_stricmp
wcsncmp
_wcsdup
api-ms-win-crt-heap-l1-1-0
realloc
_callnewh
free
calloc
malloc
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
api-ms-win-crt-math-l1-1-0
frexp
_dsign
ceilf
api-ms-win-crt-locale-l1-1-0
___lc_collate_cp_func
__pctype_func
___mb_cur_max_func
___lc_codepage_func
setlocale
localeconv
___lc_locale_name_func
_unlock_locales
_lock_locales
api-ms-win-crt-convert-l1-1-0
atol
wcstoul
?AbandonConnection@PollingInputChannel@Communication@WEX@@QEAAXXZ
?ConnectToHvSocketServer@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@0V?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
?ConnectToLocalRpcTarget@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@PEB_WV?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
?ConnectToLocalRpcTargetWithRetry@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@PEB_WAEAVAbortList@Common@TAEF@@V?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
?Create@PolledOutputChannel@Communication@WEX@@SA?AV?$unique_ptr@VMessageSender@Communication@WEX@@U?$default_delete@VMessageSender@Communication@WEX@@@std@@@std@@AEAVServerConfiguration@23@@Z
?Create@PolledOutputChannel@Communication@WEX@@SA?AV?$unique_ptr@VMessageSender@Communication@WEX@@U?$default_delete@VMessageSender@Communication@WEX@@@std@@@std@@AEBU_GUID@@@Z
?CreateTargetMachine@Communication@WEX@@YA?AV?$unique_ptr@VTargetMachine@Communication@WEX@@U?$default_delete@VTargetMachine@Communication@WEX@@@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?Disconnect@PollingInputChannel@Communication@WEX@@QEAAJXZ
?GetIPAddress@Private@Communication@WEX@@YA?AVString@Common@TAEF@@XZ
?GetRpcServer@Communication@WEX@@YA?AV?$shared_ptr@VRpcServer@Communication@WEX@@@std@@W4ServerAuthentication@12@P6AJW4ConnectionProtocol@12@PEAX@ZW4RpcServerOptions@12@@Z
?PollForMessages@PollingInputChannel@Communication@WEX@@QEAAJPEAVClientContextBase@23@@Z
?ProtocolToString@Communication@WEX@@YAPEB_WW4ConnectionProtocol@12@@Z
?ResetChannel@PollingInputChannel@Communication@WEX@@QEAAXV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@@Z
?StringToProtocol@Communication@WEX@@YA?AW4ConnectionProtocol@12@V?$basic_string_view@DU?$char_traits@D@std@@@std@@@Z
Name
ted_data
Size
512B
Virtual Size
8B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
259KB
Virtual Size
258KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=260, version=33808,
count=12, id=259, version=33808,
count=81, id=261, version=33808,
count=2, id=257, version=34123,
count=285, id=1, productName=Unmarked objects,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=56, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=258, version=34123,
Wex.Logger.dll
- IMPHASH b817cea9416b458fcddb1d5f34860a5d
- SHA256 9ddb0f0db0aae8f137f293769b3febbba7625912e04ef6de4b672607cb40d5fe
- MD5 842d407fdcd6f3d961395d8e7115589e
- SHA1 9a5630b6e363fb84dd961ea2bc93483269cac4ca
- SHA512 4aba4ced9b8835641b58f4abf39f98f38e8927c10a0845b39aec240e2b52f868403396088b45798479e129913ffa57939a78b2f2ecb36b99966ff07b39a98788
- SSDEEP 12288:AmA5D/lVklQHKXRzXQnFZ2eKPE31Yu+in9DH0o3yHdNNm2K:AD5D/lVklIKXRzXQnFZ2eKPE3CHADHQ6
- MD5 SHA1 SHA512 SSDEEP
Digest
b4:d5:68:a9:b8:6b:d1:05:42:4e:d1:07:b7:f5:ea:9e:54:f7:7d:7f:6f:57:32:bb:79:28:6b:ee:49:9b:0e:cc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Feb 21, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:05:a7:b8:8f:fb:97:5d:35:84:ec:00:00:00:00:05:a7
Issuer
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Jul 5, 2025
Subject
CN=Microsoft Code Signing PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0c:52:4c:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 6, 2010 - Jul 6, 2025
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
1
Major OS version
6
Entry point
339248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\Release\x64\Wlk\Wex.Logger.pdb
advapi32
EventWriteTransfer
EventActivityIdControl
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
GetSidSubAuthorityCount
GetSidSubAuthority
OpenProcessToken
OpenThreadToken
GetTokenInformation
EventRegister
EventUnregister
kernel32
GetCurrentThreadId
RtlCaptureContext
DeleteFileW
CloseHandle
CloseThreadpoolWork
CreateThread
FreeLibraryAndExitThread
GetCurrentThread
CreateFileW
DecodePointer
GetTickCount64
GetTimeZoneInformation
WideCharToMultiByte
RaiseException
EncodePointer
GetThreadLocale
SetThreadLocale
QueryPerformanceCounter
FlushFileBuffers
GetModuleHandleExW
GetCurrentProcessId
GetModuleHandleA
GetVersion
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwindEx
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
SetConsoleTextAttribute
QueryPerformanceFrequency
GetStringTypeW
RtlPcToFileHeader
AcquireSRWLockShared
ReleaseSRWLockShared
SleepConditionVariableSRW
WakeAllConditionVariable
GetFileInformationByHandleEx
AreFileApisANSI
GetTempPathW
SetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
CreateDirectoryW
GetCurrentDirectoryW
InitOnceComplete
InitOnceBeginInitialize
GetLocaleInfoEx
LCMapStringEx
FormatMessageA
ExpandEnvironmentStringsW
GetEnvironmentVariableW
SetLastError
GetCurrentProcess
FindClose
OutputDebugStringW
GetLocalTime
OutputDebugStringA
GetComputerNameExW
IsDebuggerPresent
SetConsoleMode
GetConsoleMode
GetConsoleScreenBufferInfoEx
GetFileType
GetStdHandle
ReadFile
GetFileSizeEx
SetFilePointer
LocalFree
GetTempFileNameW
WriteFile
WriteConsoleA
WriteConsoleW
VerSetConditionMask
VerifyVersionInfoW
DeleteCriticalSection
InitializeCriticalSectionEx
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
lstrcmpiW
GetModuleHandleW
GetProcAddress
FreeLibrary
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
GetLastError
MultiByteToWideChar
VirtualProtect
LoadLibraryExA
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetSystemInfo
VirtualQuery
TryAcquireSRWLockExclusive
wex.common
?GetSettings@Settings@Common@TAEF@@YAAEBV?$map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@UCaseInsensitiveStringCompareUtf8@Common@TAEF@@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@2@@std@@@2@@std@@XZ
?SaveMiniDumpForCurrentProcess@Common@TAEF@@YA?AVpath@filesystem@std@@KPEAU_CONTEXT@@@Z
?GetCallStackForContext@Common@TAEF@@YA?AV?$vector@VString@Common@TAEF@@V?$allocator@VString@Common@TAEF@@@std@@@std@@KU_CONTEXT@@@Z
??4NoThrowString@Common@WEX@@QEAAAEBV012@PEB_W@Z
??0NoThrowString@Common@WEX@@QEAA@XZ
??1NoThrowString@Common@WEX@@QEAA@XZ
?GetLastHResult@NoThrowString@Common@WEX@@QEBAJXZ
?GetLength@NoThrowString@Common@WEX@@QEBAHXZ
?GetBuffer@NoThrowString@Common@WEX@@QEAAPEAGXZ
?SaveWholeScreenToMemory@ScreenCapturePrivate@Common@TAEF@@YA?AV?$vector@EV?$allocator@E@std@@@std@@W4ImageFormats@123@W4ScreenCaptureOptions@123@@Z
?RunningUnderWtt@Wtt@Common@TAEF@@YA_NXZ
?RaiseExceptionEventsNarrow@Throw@Common@TAEF@@YAXJPEBD00AEBUsource_location@std@@@Z
wex.communication
?GetRpcServer@Communication@WEX@@YA?AV?$shared_ptr@VRpcServer@Communication@WEX@@@std@@W4ServerAuthentication@12@P6AJW4ConnectionProtocol@12@PEAX@ZW4RpcServerOptions@12@@Z
?CreateTargetMachine@Communication@WEX@@YA?AV?$unique_ptr@VTargetMachine@Communication@WEX@@U?$default_delete@VTargetMachine@Communication@WEX@@@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?ConnectToLocalRpcTarget@Communication@WEX@@YA?AV?$unique_ptr@VOutputChannel@Communication@WEX@@U?$default_delete@VOutputChannel@Communication@WEX@@@std@@@std@@AEBU_GUID@@PEB_WV?$duration@KU?$ratio@$00$0DOI@@std@@@chrono@4@@Z
?Create@PolledOutputChannel@Communication@WEX@@SA?AV?$unique_ptr@VMessageSender@Communication@WEX@@U?$default_delete@VMessageSender@Communication@WEX@@@std@@@std@@AEBU_GUID@@@Z
?AbandonConnection@PollingInputChannel@Communication@WEX@@QEAAXXZ
?Disconnect@PollingInputChannel@Communication@WEX@@QEAAJXZ
?PollForMessages@PollingInputChannel@Communication@WEX@@QEAAJPEAVClientContextBase@23@@Z
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
abort
_initterm_e
_initterm
_cexit
_initialize_narrow_environment
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
terminate
_seh_filter_dll
_configure_narrow_argv
_errno
api-ms-win-crt-heap-l1-1-0
free
_recalloc
_callnewh
calloc
malloc
api-ms-win-crt-string-l1-1-0
islower
_strnicmp
_wcsdup
wmemcpy_s
_stricmp
isalnum
__strncnt
_wcsicmp
wcscpy_s
isupper
wcscat_s
wcsncpy_s
isspace
strcpy_s
wcsnlen
strncmp
strcspn
wcsncmp
api-ms-win-crt-convert-l1-1-0
strtoul
atol
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsprintf_s
api-ms-win-crt-math-l1-1-0
frexp
_dsign
ceilf
api-ms-win-crt-locale-l1-1-0
setlocale
___lc_codepage_func
___mb_cur_max_func
__pctype_func
___lc_locale_name_func
_unlock_locales
_lock_locales
localeconv
rpcrt4
UuidCreate
??0AutoSetLogSession@Logging@WEX@@QEAA@VLogSession@12@@Z
??1AutoConsoleColor@Logging@WEX@@QEAA@XZ
??1AutoSetLogSession@Logging@WEX@@QEAA@XZ
??6Logging@WEX@@YAAEAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AEAV23@AEBVLoggerDescription@01@@Z
?Assert@Log@Logging@WEX@@SAXPEBG000H@Z
?Assert@Log@Logging@WEX@@SAXPEBG00H@Z
?Assert@Log@Logging@WEX@@SAXPEBG0@Z
?Assert@Log@Logging@WEX@@SAXPEBG@Z
?Assert@Log@Logging@WEX@@SAXPEB_W000H@Z
?Assert@Log@Logging@WEX@@SAXPEB_W00H@Z
?Assert@Log@Logging@WEX@@SAXPEB_W0@Z
?Assert@Log@Logging@WEX@@SAXPEB_W@Z
?Bug@Log@Logging@WEX@@SAXPEBGH0@Z
?Bug@Log@Logging@WEX@@SAXPEBGH@Z
?Bug@Log@Logging@WEX@@SAXPEB_WH0@Z
?Bug@Log@Logging@WEX@@SAXPEB_WH@Z
?CloseContext@LogContext@Logging@WEX@@SAXPEBGW4Result@TestResults@23@@Z
?CloseContext@LogContext@Logging@WEX@@SAXPEB_WW4Result@TestResults@23@@Z
?Comment@Log@Logging@WEX@@SAXPEBG0@Z
?Comment@Log@Logging@WEX@@SAXPEBG@Z
?Comment@Log@Logging@WEX@@SAXPEB_W0@Z
?Comment@Log@Logging@WEX@@SAXPEB_W@Z
?CreateContext@LogContext@Logging@WEX@@SAXPEBG00@Z
?CreateContext@LogContext@Logging@WEX@@SAXPEB_W00@Z
?CreateLogEndpoint@Logging@WEX@@YA?AV?$unique_ptr@VILogEndpoint@Logging@WEX@@U?$default_delete@VILogEndpoint@Logging@WEX@@@std@@@std@@$$QEAV?$function@$$A6AXPEBDJ@Z@4@AEBU_GUID@@PEBU6@VLogSession@12@@Z
?CreateLogManager@Logging@WEX@@YA?AV?$unique_ptr@VILogManager@Logging@WEX@@U?$default_delete@VILogManager@Logging@WEX@@@std@@@std@@AEBVLogSettings@12@AEBVpath@filesystem@4@$$QEAV?$function@$$A6AXPEBDJ@Z@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@AEBVLoggerState@12@@Z
?EndGroup@Log@Logging@WEX@@SAXPEBG0@Z
?EndGroup@Log@Logging@WEX@@SAXPEBG@Z
?EndGroup@Log@Logging@WEX@@SAXPEB_W0@Z
?EndGroup@Log@Logging@WEX@@SAXPEB_W@Z
?Error@Log@Logging@WEX@@SAXPEBG000H@Z
?Error@Log@Logging@WEX@@SAXPEBG00H@Z
?Error@Log@Logging@WEX@@SAXPEBG0@Z
?Error@Log@Logging@WEX@@SAXPEBG@Z
?Error@Log@Logging@WEX@@SAXPEB_W000H@Z
?Error@Log@Logging@WEX@@SAXPEB_W00H@Z
?Error@Log@Logging@WEX@@SAXPEB_W0@Z
?Error@Log@Logging@WEX@@SAXPEB_W@Z
?File@Log@Logging@WEX@@SAXPEBG0@Z
?File@Log@Logging@WEX@@SAXPEBG0PEBE_K@Z
?File@Log@Logging@WEX@@SAXPEBG@Z
?File@Log@Logging@WEX@@SAXPEBGPEBE_K@Z
?File@Log@Logging@WEX@@SAXPEB_W0@Z
?File@Log@Logging@WEX@@SAXPEB_W0PEBE_K@Z
?File@Log@Logging@WEX@@SAXPEB_W@Z
?File@Log@Logging@WEX@@SAXPEB_WPEBE_K@Z
?FinalizeLogging@LogController@Logging@WEX@@SAJXZ
?FormatAuxiliaryData@TraceInfo@Logging@WEX@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GenerateConnectionData@RemoteLogController@Logging@WEX@@SAJAEAVNoThrowString@Common@3@@Z
?GenerateConnectionData@RemoteLogController@Logging@WEX@@SAJPEBGAEAVNoThrowString@Common@3@@Z
?GenerateConnectionData@RemoteLogController@Logging@WEX@@SAJPEB_WAEAVNoThrowString@Common@3@@Z
?GenerateConnectionDataString@Logging@WEX@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBU_GUID@@VLogSession@12@V?$basic_string_view@DU?$char_traits@D@std@@@4@@Z
?GenerateConnectionDataStringUsingGlobalLogEndpoint@Logging@WEX@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetGlobalLoggerState@Logging@WEX@@YAAEAVGlobalLoggerState@12@XZ
?GetLogName@LogController@Logging@WEX@@SAPEBGXZ
?GetThreadLocalLogSession@Logging@WEX@@YA?AV?$optional@VLogSession@Logging@WEX@@@std@@XZ
?GetThreadLogSession@ILogEndpoint@Logging@WEX@@QEBA?AVLogSession@23@XZ
?Indent@Console@Logging@WEX@@YAX_K@Z
?InitializeGlobalLoggerFromConnectionString@Logging@WEX@@YAJAEBVLogSettings@12@PEBDAEBV?$function@$$A6AXPEBDJ@Z@std@@@Z
?InitializeLogging@LogController@Logging@WEX@@SAJP6AXPEBGJ@Z@Z
?InitializeLogging@LogController@Logging@WEX@@SAJPEBG@Z
?InitializeLogging@LogController@Logging@WEX@@SAJPEBGP6AX0J@Z@Z
?InitializeLogging@LogController@Logging@WEX@@SAJPEB_W@Z
?InitializeLogging@LogController@Logging@WEX@@SAJPEB_WP6AXPEBGJ@Z@Z
?InitializeLogging@LogController@Logging@WEX@@SAJXZ
?InitializeLogging@RemoteLogController@Logging@WEX@@SAJPEBG@Z
?InitializeLogging@RemoteLogController@Logging@WEX@@SAJPEB_W@Z
?IsInitialized@LogController@Logging@WEX@@SA_NXZ
?LogComment@LogContext@Logging@WEX@@SAXPEBG0@Z
?LogComment@LogContext@Logging@WEX@@SAXPEB_W0@Z
?LogFile@LogContext@Logging@WEX@@SAXPEBG0@Z
?LogFile@LogContext@Logging@WEX@@SAXPEB_W0@Z
?LogXml@LogContext@Logging@WEX@@SAXPEBG0@Z
?LogXml@LogContext@Logging@WEX@@SAXPEB_W0@Z
?MiniDump@Log@Logging@WEX@@SAXXZ
?Property@Log@Logging@WEX@@SAXPEBG00@Z
?Property@Log@Logging@WEX@@SAXPEBG0@Z
?Property@Log@Logging@WEX@@SAXPEB_W00@Z
?Property@Log@Logging@WEX@@SAXPEB_W0@Z
?ReplaceThreadLogSession@Logging@WEX@@YA?AV?$optional@VLogSession@Logging@WEX@@@std@@V34@@Z
?Result@Log@Logging@WEX@@SAXW40TestResults@23@@Z
?Result@Log@Logging@WEX@@SAXW40TestResults@23@PEBG1@Z
?Result@Log@Logging@WEX@@SAXW40TestResults@23@PEBG@Z
?Result@Log@Logging@WEX@@SAXW40TestResults@23@PEB_W1@Z
?Result@Log@Logging@WEX@@SAXW40TestResults@23@PEB_W@Z
?SetFlushWrites@Console@Logging@WEX@@YAX_N@Z
?SetTextColor@AutoConsoleColor@Logging@WEX@@QEAAXW4TextColor@23@@Z
?SetThreadLogSession@Logging@WEX@@YAXVLogSession@12@@Z
?StartGroup@Log@Logging@WEX@@SAXPEBG0@Z
?StartGroup@Log@Logging@WEX@@SAXPEBG0W4Result@TestResults@23@@Z
?StartGroup@Log@Logging@WEX@@SAXPEBG@Z
?StartGroup@Log@Logging@WEX@@SAXPEBGW4Result@TestResults@23@@Z
?StartGroup@Log@Logging@WEX@@SAXPEB_W0@Z
?StartGroup@Log@Logging@WEX@@SAXPEB_W0W4Result@TestResults@23@@Z
?StartGroup@Log@Logging@WEX@@SAXPEB_W@Z
?StartGroup@Log@Logging@WEX@@SAXPEB_WW4Result@TestResults@23@@Z
?ToString@Logging@WEX@@YAPEBDW4OutputLevel@12@@Z
?ToString@TestResults@Logging@WEX@@YAPEB_WW4Result@123@@Z
?ToStringUtf8@TestResults@Logging@WEX@@YAPEBDW4Result@123@@Z
?Trace@ILogEndpoint@Logging@WEX@@QEAAX$$QEAVLogTrace@23@@Z
?Trace@Log@Logging@WEX@@SAX$$QEAVLogTrace@23@@Z
?TryParse@Logging@WEX@@YA_NPEBDAEAVLoggerDescription@12@@Z
?TryParse@Logging@WEX@@YA_NPEBDAEAW4OutputLevel@12@@Z
?TryParse@Logging@WEX@@YA_NPEB_WAEAVLoggerDescription@12@@Z
?TryParse@Logging@WEX@@YA_NPEB_WAEAW4OutputLevel@12@@Z
?TryParse@TestResults@Logging@WEX@@YA_NPEBDAEAW4Result@123@@Z
?TryParse@TestResults@Logging@WEX@@YA_NPEB_WAEAW4Result@123@@Z
?TryParseForRuntimeParameter@TestResults@Logging@WEX@@YA_NPEBDAEAW4Result@123@@Z
?Warning@Log@Logging@WEX@@SAXPEBG000H@Z
?Warning@Log@Logging@WEX@@SAXPEBG00H@Z
?Warning@Log@Logging@WEX@@SAXPEBG0@Z
?Warning@Log@Logging@WEX@@SAXPEBG@Z
?Warning@Log@Logging@WEX@@SAXPEB_W000H@Z
?Warning@Log@Logging@WEX@@SAXPEB_W00H@Z
?Warning@Log@Logging@WEX@@SAXPEB_W0@Z
?Warning@Log@Logging@WEX@@SAXPEB_W@Z
?Write@Console@Logging@WEX@@YAXPEBD@Z
?Write@Console@Logging@WEX@@YAXPEB_W@Z
?Write@Console@Logging@WEX@@YAXW4TextColor@23@PEBD@Z
?Write@Console@Logging@WEX@@YAXW4TextColor@23@PEB_W@Z
?WriteLine@Console@Logging@WEX@@YAXPEBD@Z
?WriteLine@Console@Logging@WEX@@YAXPEB_W@Z
?WriteLine@Console@Logging@WEX@@YAXW4TextColor@23@PEBD@Z
?WriteLine@Console@Logging@WEX@@YAXW4TextColor@23@PEB_W@Z
?Xml@Log@Logging@WEX@@SAXPEBG0@Z
?Xml@Log@Logging@WEX@@SAXPEBG@Z
?Xml@Log@Logging@WEX@@SAXPEB_W0@Z
?Xml@Log@Logging@WEX@@SAXPEB_W@Z
DecrementDisabledVerifyThrowCount
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DoNotDiscard
GetDisabledVerifyThrowCount
GetVerifyOutputSettings
IncrementDisabledVerifyThrowCount
LogContext_CloseContext
LogContext_CreateContext
LogContext_LogComment
LogContext_LogFile
LogContext_LogXml
LogController_FinalizeLogging
LogController_GetLogName
LogController_InitializeLogging
LogController_InitializeLoggingWithConnectionData
LogController_InitializeLoggingWithErrorCallback
LogController_IsInitialized
LogController_NotifyCallback
LogController_NotifyCallbackUtf8
Log_MiniDump
Log_Trace
RemoteLogController_GenerateConnectionData
RemoteLogController_InitializeLogging
SetVerifyOutputSettings
TAEF_TryGetUtf8ByteCountForCharStringValue
TAEF_TryGetUtf8ByteCountForWCharStringValue
TAEF_TryWriteUtf8ForCharStringValue
TAEF_TryWriteUtf8ForWCharStringValue
Name
.text
Size
393KB
Virtual Size
393KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
125KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
13KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=13, id=260, version=33808,
count=12, id=259, version=33808,
count=92, id=261, version=33808,
count=4, id=257, version=34123,
count=25, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=263, version=30795,
count=330, id=1, productName=Unmarked objects,
count=63, id=265, version=34123,
count=1, id=256, version=34123,
count=1, id=255, version=34123,
count=1, id=151,
count=1, id=258, version=34123,
config.prx
- IMPHASH d21794f0d47bb5c7f5977a6500854d85
- SHA256 7fa86147035627bae39576bcbe619d045e94a48c4db8ca131968c20bb4de4a36
- MD5 14934caca84d5fe0288f27efb31dcbf8
- SHA1 98c8c659488a5782679112e0ffb089422a664ac5
- SHA512 9a239132a46fe578fa04ff727d8c28f9e1d179e7154619670a22a403819f337af0a96ebd7081d04d53910a12bbdc548b3cd2b2a285931c92f1c149ad5d846a6a
- SSDEEP 3072:rbT9vTZFNSlIbVf7o3Cyi7igb/Js0S6uZZspiDbZHNjWOnNxFiKey1ISQlXflY:fRvNvvbhOq7F3S/qpiDlNCONvmXdY
- MD5 SHA1 SHA512 SSDEEP
Digest
cc:08:bb:49:63:6e:cf:3f:72:bf:92:cf:45:8b:91:0e:90:0f:7d:11:28:70:03:90:0a:af:8b:19:89:f5:2f:7b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Mar 4, 2024
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
b2:c8:9c:70:dd:00:70:00:00:18:3b:25:00:02:8e:c2:fc:f9:28:b7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Mar 4, 2024
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 17, 2022 - Jul 29, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
SERIALNUMBER=91110108680456115E,CN=Glarysoft Ltd,O=Glarysoft Ltd,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
04:28:14:36:98:54:a8:5f:9b:8f:90:12:67:c0:3c:f2
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 17, 2022 - Jul 29, 2025
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
5
Entry point
117406
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\winapps\mh\trunk\exe\vc\StartupHelper\sourcecode\Release\StartupHelper.pdb
mfc90u
ord404
ord2597
ord2141
ord4131
ord6635
ord4044
ord611
ord595
ord3489
ord5664
ord4652
ord1493
ord6411
ord3355
ord1665
ord5939
ord4405
ord1607
ord3220
ord5632
ord5167
ord5324
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord3140
ord4910
ord4682
ord3515
ord2593
ord5653
ord6091
ord4774
ord4815
ord5078
ord613
ord337
ord4631
ord2901
ord4741
ord1533
ord3537
ord6095
ord3622
ord6187
ord6094
ord333
ord3488
ord1354
ord1353
ord2097
ord3543
ord1183
ord3486
ord4527
ord6579
ord4543
ord6577
ord2592
ord744
ord524
ord2069
ord1063
ord663
ord2146
ord1166
ord1064
ord6604
ord4530
ord2904
ord1047
ord2596
ord5008
ord1108
ord367
ord586
ord4000
ord374
ord2130
ord3577
ord2282
ord4512
ord4442
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord2771
ord2983
ord3112
ord799
ord265
ord266
ord1272
ord1137
ord1254
ord686
ord436
ord792
ord587
ord4728
ord2966
ord3115
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4905
ord4681
ord3670
ord2447
ord636
ord790
ord639
ord2208
ord6482
ord1098
ord4211
ord794
ord589
ord4043
ord4967
ord1318
ord2327
ord316
ord601
ord899
ord1315
ord938
ord1603
ord2478
ord5979
ord6687
ord285
ord5535
ord6079
ord6813
ord1552
ord2551
ord946
ord821
ord2470
ord6096
ord4541
ord4410
ord290
ord1088
ord6659
ord2243
ord6204
ord339
ord289
ord288
ord6164
ord1599
ord809
ord6013
ord935
ord936
ord2702
ord286
ord5851
ord3637
ord2106
ord811
ord280
ord2326
ord2694
ord6529
ord813
ord2537
ord600
ord1143
ord296
ord1248
ord2084
ord1250
ord801
msvcr90
memcpy
memset
towupper
__CxxFrameHandler3
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
?terminate@@YAXXZ
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
__wargv
__argc
setlocale
_resetstkoflw
?what@exception@std@@UBEPBDXZ
_msize
_purecall
_set_errno
_get_errno
_wtoi64
realloc
_gcvt_s
_fpclass
_HUGE
iswspace
wcsrchr
wcschr
_ui64toa_s
_i64toa_s
isspace
_itoa_s
wcsncmp
wcstod
wcstol
_wcstoui64
_wcstoi64
strtol
_wtoi
wcsnlen
_wcsicmp
_scwprintf
_ultoa_s
strncmp
_strlwr_s
_recalloc
calloc
_itow_s
swprintf_s
_CxxThrowException
malloc
wcscpy_s
wcsncpy_s
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
free
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove_s
memcpy_s
kernel32
GetPrivateProfileSectionW
LocalFree
GetCurrentProcessId
InterlockedCompareExchange
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
SetLastError
LoadLibraryW
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
GetProcAddress
GetModuleHandleW
Sleep
GetTickCount
GetCommandLineW
InterlockedExchange
CreateMutexW
CloseHandle
HeapReAlloc
GetPrivateProfileIntW
HeapFree
GetProcessHeap
HeapAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetLastError
GetModuleFileNameW
lstrlenW
WaitForSingleObject
HeapDestroy
HeapSize
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
user32
SendMessageW
AppendMenuW
GetSystemMenu
GetWindowRect
MessageBoxW
GetWindowLongW
SetWindowLongW
UnionRect
GetMenuBarInfo
GetMenuItemID
GetMenuItemCount
GetSysColor
OffsetRect
FrameRect
DrawFrameControl
CopyRect
EnableWindow
IsWindow
InvalidateRect
KillTimer
PtInRect
ReleaseDC
FillRect
GetDC
SystemParametersInfoW
EndPaint
BeginPaint
DrawIcon
GetSystemMetrics
IsIconic
SetTimer
GetClientRect
LoadIconW
gdi32
CreatePen
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
SetDIBColorTable
GetTextExtentPoint32W
SetBkMode
CreateRoundRectRgn
GetCurrentObject
GetBkMode
CreatePatternBrush
SetBrushOrgEx
FillRgn
FrameRgn
SelectObject
CreateFontW
GetDIBColorTable
StretchBlt
CreateDIBSection
BitBlt
CreateCompatibleDC
DeleteDC
DeleteObject
msimg32
TransparentBlt
GradientFill
AlphaBlend
advapi32
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteW
CommandLineToArgvW
comctl32
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFileExistsW
ole32
OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysAllocStringLen
VariantClear
SysAllocString
VariantInit
SysFreeString
msvcp90
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?swap@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXAAV12@@Z
?find_last_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?find_first_not_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
?erase@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@II@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
ws2_32
WSASetLastError
GetAddrInfoW
WSAStartup
WSACleanup
closesocket
WSACloseEvent
WSASocketW
WSAGetLastError
WSAConnect
WSAEnumNetworkEvents
WSAResetEvent
WSASend
WSAGetOverlappedResult
WSARecv
WSACreateEvent
WSASetEvent
WSAEventSelect
FreeAddrInfoW
boottime
ord2
GetSetupTime
ord1
gdiplus
GdipDisposeImage
GdipFree
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdipAlloc
languages
ord5
ord3
ord6
ord8
ord4
config
ord13
ord11
Name
.text
Size
122KB
Virtual Size
121KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
161KB
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=109, productName=VS2005 build 50727, version=50727,
count=26, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=150, version=20413,
count=9, id=149, productName=VS2008 build 21022, version=21022,
count=20, id=131, productName=VS2008 build 21022, version=21022,
count=11, id=132, productName=VS2008 build 21022, version=21022,
count=15, id=147, productName=VS2008 build 21022, version=21022,
count=724, id=1, productName=Unmarked objects,
count=12, id=138, version=21022,
count=1, id=148, productName=VS2008 build 21022, version=21022,
count=1, id=145, productName=VS2008 build 21022, version=21022,
opengl64.dll
- IMPHASH 12c058d908f07eb19d3f1f0a4bb41bef
- SHA256 dd575f3c64382193610815909bd2c52490244ecbbb9bba6eef5fe4f0bb43bb4d
- MD5 0a84667145e7efef026c888d4b768126
- SHA1 27673e1bd7c55bba6eaa37620d3b3820ce45d46a
- SHA512 3e964c996ed358787c4dfdb965a00b38b4118c804ae1bf8d32aeb7d936584e72c188e3fa0d27d1c2ffd3be13dca8045b08b28b15070812c195d82d1bf23a2604
- SSDEEP 393216:PXhbUNnoBP98OQ//aXUszfTBHCOUZ2UenCDkOH2:PXhNB4nlW
- MD5 SHA1 SHA512 SSDEEP
Digest
0c:52:fd:13:81:7d:a3:86:5d:e4:84:46:8c:35:09:a5:26:83:ae:ac:37:64:c9:0f:42:89:b7:70:65:88:10:df
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
b4:28:b6:ea:a9:f1:d8:dd:26:dd:e6:4d:49:5f:06:c6:e0:8c:f6:c4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
6
Entry point
11948956
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
CrashReportClient.pdb
xinput1_3
ord3
ord2
advapi32
CryptReleaseContext
OpenProcessToken
RegDeleteTreeW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegSetValueExW
GetUserNameW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptAcquireContextW
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyExW
GetTokenInformation
FreeSid
EqualSid
AllocateAndInitializeSid
RegCloseKey
RegCreateKeyExW
user32
WindowFromPoint
ClipCursor
GetDlgItem
SetDlgItemTextW
GetSystemMetrics
SetForegroundWindow
SetWindowTextW
GetWindowRect
MessageBoxW
ScreenToClient
GetWindowLongW
GetTopWindow
EnumDisplayDevicesW
GetKeyboardLayout
DisableProcessWindowsGhosting
TranslateMessage
DispatchMessageW
GetMessageExtraInfo
SendMessageW
DefWindowProcW
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoA
ReleaseDC
GetWindowInfo
EnumDisplayMonitors
SetWindowLongPtrW
GetProcessWindowStation
GetUserObjectInformationW
GetCursorPos
SetCursor
SetCursorPos
ClientToScreen
RegisterClassW
UnregisterClassW
CreateWindowExW
GetClipCursor
DestroyWindow
ShowWindow
SetLayeredWindowAttributes
FlashWindowEx
GetWindowPlacement
SetWindowPlacement
IsIconic
IsZoomed
GetDC
GetForegroundWindow
SetActiveWindow
UpdateWindow
EnableMenuItem
GetSystemMenu
IsWindowEnabled
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
ShowCursor
AdjustWindowRectEx
GetClientRect
SetWindowRgn
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
MonitorFromPoint
SystemParametersInfoW
EnumDisplaySettingsW
CreateIconIndirect
LoadImageW
LoadIconW
LoadCursorFromFileW
LoadCursorW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetClassLongPtrW
RegisterClassExW
MoveWindow
MsgWaitForMultipleObjects
SetRect
IsWindow
GetWindowLongPtrW
SetWindowLongW
EnableWindow
ReleaseCapture
SetCapture
GetCapture
MapVirtualKeyW
RegisterTouchWindow
CloseTouchInputHandle
GetTouchInputInfo
GetAsyncKeyState
GetKeyState
GetFocus
EndDialog
DialogBoxParamW
SetWindowPos
PostQuitMessage
UnregisterHotKey
RegisterHotKey
PeekMessageW
GetActiveWindow
GetRawInputData
SetFocus
gdi32
PtInRegion
SelectObject
CreateCompatibleDC
DeleteDC
GetTextExtentPoint32W
SwapBuffers
SetPixelFormat
ChoosePixelFormat
GetTextMetricsW
CreateFontW
CreateBitmap
GetDeviceCaps
CreateFontIndirectW
CreateRectRgn
CreateRoundRectRgn
DeleteObject
crypt32
CertGetCertificateContextProperty
CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CertCloseStore
CertOpenSystemStoreW
CertGetNameStringW
CertEnumCertificatesInStore
ws2_32
accept
bind
closesocket
connect
ioctlsocket
getpeername
getsockname
__WSAFDIsSet
htonl
htons
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
gethostname
WSAStartup
WSACleanup
WSAGetLastError
getaddrinfo
freeaddrinfo
getnameinfo
WSAIoctl
WSASetLastError
getsockopt
inet_pton
wldap32
ord143
ord46
ord211
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
normaliz
IdnToAscii
dxgi
CreateDXGIFactory1
d3d11
D3D11CreateDevice
d3dcompiler_43
D3DCompile
D3DReflect
dbghelp
SymFunctionTableAccess64
MiniDumpWriteDump
SymRefreshModuleList
StackWalk64
SymFromAddr
SymInitializeW
SymGetLineFromAddr64
SymGetModuleBase64
SymGetModuleInfo64
SymSetOptions
SymGetModuleInfoW64
SymGetOptions
winmm
timeBeginPeriod
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
VerSetConditionMask
RtlCaptureStackBackTrace
CreateToolhelp32Snapshot
K32GetProcessMemoryInfo
K32GetModuleFileNameExW
K32EnumProcessModulesEx
SystemTimeToFileTime
FileTimeToSystemTime
MoveFileW
CopyFileW
ReOpenFile
UnmapViewOfFile
MapViewOfFile
VirtualFree
VirtualProtect
VirtualAlloc
GetSystemInfo
GlobalMemoryStatusEx
GetProcessId
ResumeThread
SuspendThread
OpenThread
GetCurrentProcessId
SetCurrentDirectoryW
GetLongPathNameW
GetTempPathW
OutputDebugStringW
SetThreadErrorMode
PeekNamedPipe
QueryPerformanceFrequency
SetEvent
ReleaseSemaphore
GetEnvironmentVariableW
CreateFileMappingW
GetCurrentDirectoryW
Sleep
GetCurrentProcess
LoadLibraryExA
VirtualQuery
CreateSemaphoreA
GetProcessTimes
TerminateProcess
GetExitCodeProcess
LocalFree
SwitchToThread
VerifyVersionInfoA
GetModuleHandleA
GetSystemDirectoryA
ExpandEnvironmentStringsA
WaitForMultipleObjects
WaitForSingleObjectEx
SleepEx
InitializeCriticalSectionEx
GetTickCount64
FormatMessageA
ReadConsoleW
ReadConsoleA
SetConsoleMode
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
WideCharToMultiByte
MultiByteToWideChar
CreateFiber
DeleteFiber
SwitchToFiber
CreateEventW
GetDateFormatEx
GetTimeFormatEx
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
CreateThread
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetCurrentThread
SetThreadPriority
ResolveLocaleName
GetCurrencyFormatEx
GetNumberFormatEx
LocaleNameToLCID
LCIDToLocaleName
GetUserGeoID
GetVersionExW
CreateProcessW
GetLogicalProcessorInformationEx
GetNativeSystemInfo
GetGeoInfoW
GetDynamicTimeZoneInformation
GetLocaleInfoEx
FreeLibrary
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadResource
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetACP
GetThreadContext
GetEnvironmentVariableA
GetStartupInfoW
LoadLibraryA
VirtualUnlock
GetLargePageMinimum
FlsSetValue
FlsAlloc
GetModuleHandleExA
SetErrorMode
MulDiv
GlobalFree
SetConsoleWindowInfo
SetConsoleTextAttribute
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
AttachConsole
FreeConsole
AllocConsole
GlobalLock
GlobalUnlock
GlobalAlloc
GetVersion
GetProcessHandleCount
CreateWaitableTimerW
SetWaitableTimer
Process32NextW
DebugBreak
LockResource
Process32FirstW
GetConsoleWindow
SetConsoleCtrlHandler
GetUserDefaultLocaleName
GetUserPreferredUILanguages
GetSystemPowerStatus
VerifyVersionInfoW
GetComputerNameW
QueryFullProcessImageNameW
lstrlenW
FormatMessageW
SetThreadAffinityMask
LoadLibraryW
FindResourceW
InitializeCriticalSection
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentThreadId
GetStdHandle
GetCommandLineW
FindClose
FindFirstFileW
GetFileType
OpenProcess
WriteConsoleW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InitializeSRWLock
AcquireSRWLockShared
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
HeapSetInformation
SetHandleInformation
CreatePipe
CreateDirectoryW
CreateFileW
DeleteFileW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFinalPathNameByHandleW
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
WriteFile
CloseHandle
RaiseException
GetLastError
SetLastError
GetOverlappedResult
ResetEvent
WaitForSingleObject
SizeofResource
comdlg32
ChooseFontW
shell32
ShellExecuteW
ShellExecuteExW
SHGetKnownFolderPath
SHGetFolderPathW
SHCreateItemFromParsingName
ole32
RevokeDragDrop
ReleaseStgMedium
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize
OleInitialize
RegisterDragDrop
CoTaskMemFree
OleUninitialize
oleaut32
VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SysFreeString
iphlpapi
GetAdaptersAddresses
setupapi
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
CM_Get_Device_IDW
dwmapi
DwmExtendFrameIntoClientArea
DwmGetCompositionTimingInfo
DwmSetWindowAttribute
DwmIsCompositionEnabled
imm32
ImmGetDescriptionW
ImmGetIMEFileNameW
ImmGetProperty
ImmCreateContext
ImmDestroyContext
ImmGetContext
ImmReleaseContext
ImmAssociateContext
ImmGetCompositionStringW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
uiautomationcore
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseAutomationEvent
UiaReturnRawElementProvider
UiaHostProviderFromHwnd
UiaClientsAreListening
winhttp
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
opengl32
glPolygonMode
glScissor
glStencilFunc
glStencilMask
glStencilOp
glGetString
glTexImage2D
glTexParameteri
glTexSubImage2D
glGenTextures
glViewport
glEnable
glDisable
wglCreateContext
glBlendFunc
glPixelStorei
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
glBindTexture
glAlphaFunc
glDeleteTextures
glTexEnvi
msvcp140
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Thrd_yield
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
dbgeng
DebugCreate
bcrypt
BCryptGenRandom
vcruntime140
__intrinsic_setjmp
__current_exception_context
__current_exception
__RTDynamicCast
__std_type_info_name
__std_type_info_compare
__RTtypeid
__CxxFrameHandler3
strchr
longjmp
__std_exception_destroy
__std_exception_copy
__std_terminate
memchr
_set_purecall_handler
__C_specific_handler
wcsrchr
strstr
wcschr
_CxxThrowException
_purecall
memcpy
memmove
memset
wcsstr
memcmp
strrchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-convert-l1-1-0
strtod
_wtof
_wtoi64
_wtoi
atoi
wcstod
_wcstoui64
_wcstoi64
_strtoi64
atof
strtol
strtoul
strtoll
wcstoul
api-ms-win-crt-utility-l1-1-0
srand
div
rand
qsort
bsearch
api-ms-win-crt-stdio-l1-1-0
__p__commode
__stdio_common_vfprintf
fputs
fwrite
_read
_write
_close
_open
setbuf
fread
ferror
fclose
_setmode
_fileno
clearerr
_lseeki64
_set_fmode
feof
fseek
ftell
__acrt_iob_func
__stdio_common_vsprintf
fgets
__stdio_common_vsscanf
_wfopen
fopen
__stdio_common_vfwprintf
__stdio_common_vswprintf
fputc
fflush
api-ms-win-crt-string-l1-1-0
isxdigit
tolower
isalpha
strpbrk
wcsncmp
isalnum
_strdup
strcspn
_strnicmp
_stricmp
wcsncpy
isdigit
iswdigit
iswspace
strcmp
isupper
islower
isgraph
strncmp
isspace
strncat
toupper
strncpy
strspn
isprint
iswpunct
iswlower
iswxdigit
iswalpha
iswalnum
api-ms-win-crt-heap-l1-1-0
_heapchk
_set_new_mode
_aligned_free
_aligned_malloc
realloc
_get_heap_handle
calloc
free
malloc
api-ms-win-crt-math-l1-1-0
floor
logf
truncf
floorf
ceil
fmod
ceilf
_dsign
__setusermatherr
_dtest
trunc
modf
_isnan
round
asin
frexp
powf
_finite
cosf
sinf
atan
atan2
cos
log
sin
pow
sqrt
tan
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_getpid
_errno
exit
_invalid_parameter_noinfo_noreturn
_cexit
_crt_atexit
_register_onexit_function
_set_app_type
_initialize_onexit_table
_exit
raise
__sys_nerr
_initterm
strerror
_initterm_e
_beginthreadex
abort
_initialize_narrow_environment
_configure_narrow_argv
_c_exit
_register_thread_local_exe_atexit_callback
signal
terminate
strerror_s
_get_narrow_winmain_command_line
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-conio-l1-1-0
_cputs
api-ms-win-crt-time-l1-1-0
__tzname
_tzset
_gmtime64_s
_gmtime64
_time64
__timezone
api-ms-win-crt-filesystem-l1-1-0
_stat64
_fstat64
_stat64i32
_fstat64i32
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
Name
.text
Size
11.6MB
Virtual Size
11.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.uedbg
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.4MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
582KB
Virtual Size
582KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=26715,
count=7, id=199, version=41118,
count=10, id=260, version=28117,
count=11, id=259, version=28117,
count=6, id=257, version=28117,
count=5, id=260, version=26715,
count=4, id=262, version=26715,
count=32, id=261, version=28117,
count=1, id=173, version=30319,
count=4, id=156, version=21202,
count=42, id=257, version=26715,
count=73, id=261, productName=VS2017 v15.9.5 build 27026, version=27026,
count=1, id=262, version=25711,
count=6, id=260, productName=VS2017 v15.8.5 build 26732, version=26732,
count=14, id=257, version=25711,
count=112, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=564, id=260, version=27032,
count=3, id=156, productName=VS2010 build 30319, version=30319,
count=888, id=1, productName=Unmarked objects,
count=344, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,
count=11, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,
count=5, id=261, version=27034,
count=24, productName=Unmarked objects (old),
count=71, id=261, productName=VS2019 v16.4.3 build 28315, version=28315,
count=1, id=256, productName=VS2019 v16.4.3 build 28315, version=28315,
count=1, id=255, productName=VS2019 v16.4.3 build 28315, version=28315,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.4.3 build 28315, version=28315,
updater/NvStWiz.prx
- IMPHASH a7e73ef2207e9ee97c678506145e1258
- SHA256 c2ad5bd189df04b39be18dec5cd251cf79b066010706ad26d99df7e49fd07762
- MD5 9e82e3b658393bed3f7e4f090df1fbe7
- SHA1 bfff954b8ef192c01af9fb5d9141a21279cb9c31
- SHA512 de6a1e62d4e33f807d9c04f355a762717eedbcf540e747a97ba824871d4a1f144f4929141df333711d42af01e441dbbcecbb25a6a4f8ec073a024d94197b776b
- SSDEEP 6144:9S4bS5XFvti0A0YqsAtMZDeJmdzh8KL5g3AepeV2fbRahYzUM3:9SMCXFFe0YqsAtEeJKCqN2jRahYp
- MD5 SHA1 SHA512 SSDEEP
Digest
54:cb:ab:94:75:80:97:ed:a8:bb:b7:bd:5b:5f:9b:d9:c4:b8:e5:05:1b:74:5b:83:60:86:a9:f7:ca:58:97:d7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Chains
Jan 17, 2019
CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
7f:01:56:fd:7c:3f:56:65:ab:41:e1:66:0d:22:36:1d:f4:00:d1:24
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Chains
Jan 17, 2019
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Serial Number
4f:be:0a:02:42:6e:bd:20:c2:62:44:b5:ec:a6:52:a3
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 9, 2018 - Jul 10, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=NVIDIA Corporation,OU=IT-MIS,O=NVIDIA Corporation,L=Santa Clara,ST=California,C=US
Serial Number
62:e7:45:e9:21:65:21:3c:97:1f:5c:49:0a:ea:12:a5
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 9, 2018 - Jul 9, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7c:1b:35:35:4a:e7:db:74:e7:41:5f:11:69:ca:6b:a8
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 22, 2014 - Jul 21, 2024
Subject
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:2d:23:cb:00:00:00:00:00:21
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
6
Entry point
105376
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\dvs\p4\build\sw\rel\gpu_drv\r415\r415_00\drivers\stereo_vision\Apps\GeForce3DVisionSetupWizard\release\NvStWiz.pdb
user32
GetDesktopWindow
PostQuitMessage
GetUserObjectInformationW
SetCursor
LoadCursorW
TranslateMessage
OpenInputDesktop
ValidateRect
PeekMessageW
EnumDisplaySettingsExW
DestroyIcon
EnumDisplaySettingsW
CloseDesktop
ChangeDisplaySettingsW
ShowWindow
DestroyCursor
RegisterClassExW
SendMessageW
CreateWindowExW
MessageBoxW
DestroyWindow
DefWindowProcW
ChangeDisplaySettingsExW
UpdateWindow
LoadImageW
SetCursorPos
DispatchMessageW
GetCursorPos
shell32
SHGetFolderPathW
ShellExecuteW
SHGetKnownFolderPath
ole32
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
d3d9
Direct3DCreate9
d3d10
D3D10CreateDevice
gdiplus
GdipLoadImageFromStream
GdipSetStringFormatFlags
GdipGetImageWidth
GdipSetStringFormatAlign
GdiplusStartup
GdipCreatePen1
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageHeight
GdipSetImageAttributesColorMatrix
GdipDeleteFont
GdipSetCompositingMode
GdipDeleteStringFormat
GdipDeleteGraphics
GdiplusShutdown
GdipMeasureString
GdipCloneBrush
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipDrawString
GdipFree
GdipGetGenericFontFamilySansSerif
GdipCreateImageAttributes
GdipDrawLine
GdipCreateSolidFill
GdipCreateFont
GdipDisposeImage
GdipDisposeImageAttributes
GdipDrawImageRectI
GdipAlloc
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipCreateFontFamilyFromName
GdipDeletePen
kernel32
GetConsoleCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetStringTypeW
GetFileType
HeapAlloc
HeapFree
GetACP
WriteFile
GetStdHandle
HeapSize
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
GetCommandLineW
GetCommandLineA
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
GetConsoleMode
HeapReAlloc
SetFilePointerEx
SetEndOfFile
ReadFile
ReadConsoleW
DecodePointer
WideCharToMultiByte
SizeofResource
FindFirstFileW
GetSystemDefaultLCID
FindNextFileW
lstrcpynW
GetThreadLocale
GetUserDefaultUILanguage
GetTempPathW
FindClose
GetLocaleInfoW
GetFileAttributesW
GetVersionExW
GetSystemDirectoryW
FreeResource
CreateEventW
Sleep
GetLastError
LockResource
GlobalAlloc
GlobalFree
CloseHandle
LoadLibraryW
FindResourceExW
LoadResource
FindResourceW
GetProcAddress
GlobalLock
WriteConsoleW
FreeLibrary
lstrcmpiW
GlobalUnlock
LoadLibraryExW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VerSetConditionMask
ExpandEnvironmentStringsW
CreateFileW
GetFullPathNameW
SetLastError
GetCurrentProcess
GetModuleHandleA
LocalAlloc
LocalFree
lstrcmpW
VerifyVersionInfoW
GetModuleHandleW
advapi32
RegQueryValueExW
RegOpenKeyExA
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegCloseKey
SetSecurityDescriptorDacl
RegOpenKeyExW
Name
.text
Size
182KB
Virtual Size
182KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
152KB
Virtual Size
151KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=24610,
count=139, id=261, version=24610,
count=18, id=260, version=24610,
count=20, id=259, version=25305,
count=20, id=260, version=25305,
count=42, id=261, version=25305,
count=1, id=261, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=1, id=260, productName=VS2015 Update 3 [14.0] build 24210, version=24210,
count=3, id=262, version=24610,
count=17, id=257, version=24610,
count=207, id=1, productName=Unmarked objects,
count=1, id=265, version=25506,
count=1, id=255, productName=VS2017 v15.3 build 25506, version=25506,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.3 build 25506, version=25506,
updater/manager/ks_tyres.ini
- SHA256 894d3c57598ecb22c769cc3ea8219859a95e22740e72394a474012ea2119b3d9
- MD5 47f6571c7884da6c743551ac724186d4
- SHA1 c338ce7d292c78f420876332de93684102ec04ac
- SHA512 5cf57f3f2c53fcbedf44cd2c896008c41607d7583045e37b819da1b1d3ce26073802e73fab74ea6def035f11a256d9f0d11a87991cea14ef5baf67bda21d6e20
- SSDEEP 192:oqCaCVsP1MQzeRO11bvR2hpg6iYRkX+DHj5jkZU3KAg/sVfKPPfYqlwvR:9bf1MQzeRA1TR2hpg6iY+X+SuaAg+zqW
- MD5 SHA1 SHA512 SSDEEP
x64/trading_api64.dll
- IMPHASH f7d326cb8fdda36f97bcf61c5e808a67
- SHA256 f1eb582e607a1e43cdb1654bfb7cb29ad46f6728b3fb89a14f7727e0e8daab69
- MD5 2bca4e2c047ec969cb3cff277e7fc184
- SHA1 c4b5b00b605e59c6fdcb6731f2e53069506e287a
- SHA512 3819178ec650298157b1d67317e0895cb92709b106d0d8525921e341eba5e960f42434e010066bb405f1ba1619adff1a645ede58e16c4b2d88df2c90611a6cb5
- SSDEEP 6144:Aa0EKzmilQBrUssevOkHcAxilMrCynC0bcLd1x:B0EZbr3se1SynC9x
- MD5 SHA1 SHA512 SSDEEP
-
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Digest
d6:f4:f2:14:01:39:23:fa:d2:a1:74:05:1b:dd:82:d1:27:84:25:17
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Chains
Jul 25, 2019
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0c:e7:e0:e5:17:d8:46:fe:8f:e5:60:fc:1b:f0:30:39
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Nov 10, 2006 - Nov 10, 2031
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=Valve,O=Valve,L=Bellevue,ST=WA,C=US
Serial Number
05:4f:46:6c:ec:cb:e9:d6:be:e8:1f:54:35:e6:4d:47
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 4, 2018 - Oct 7, 2021
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Minor OS version
2
Major OS version
5
Entry point
45092
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\buildslave\steam_rel_client_win64\build\src\steam_api\win64\Release\steam_api64.pdb
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
LoadLibraryExA
LoadLibraryExW
GetModuleFileNameW
GetExitCodeProcess
GetModuleHandleExW
GetCommandLineW
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringA
GetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
FreeLibrary
GetModuleHandleA
GetProcAddress
SetEndOfFile
ReadConsoleW
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleFileNameA
HeapFree
HeapAlloc
GetACP
GetStringTypeW
LCMapStringW
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
FlushFileBuffers
WriteFile
GetConsoleCP
GetConsoleMode
SetStdHandle
CreateFileW
HeapSize
HeapReAlloc
SetFilePointerEx
WriteConsoleW
ReadFile
advapi32
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
shell32
ShellExecuteW
CAddAppDependencyResult_t_RemoveCallResult
CAddAppDependencyResult_t_SetCallResult
CAddUGCDependencyResult_t_RemoveCallResult
CAddUGCDependencyResult_t_SetCallResult
CAssociateWithClanResult_t_RemoveCallResult
CAssociateWithClanResult_t_SetCallResult
CChangeNumOpenSlotsCallback_t_RemoveCallResult
CChangeNumOpenSlotsCallback_t_SetCallResult
CCheckFileSignature_t_RemoveCallResult
CCheckFileSignature_t_SetCallResult
CClanOfficerListResponse_t_RemoveCallResult
CClanOfficerListResponse_t_SetCallResult
CComputeNewPlayerCompatibilityResult_t_RemoveCallResult
CComputeNewPlayerCompatibilityResult_t_SetCallResult
CCreateBeaconCallback_t_RemoveCallResult
CCreateBeaconCallback_t_SetCallResult
CCreateItemResult_t_RemoveCallResult
CCreateItemResult_t_SetCallResult
CDeleteItemResult_t_RemoveCallResult
CDeleteItemResult_t_SetCallResult
CDurationControl_t_RemoveCallResult
CDurationControl_t_SetCallResult
CEncryptedAppTicketResponse_t_RemoveCallResult
CEncryptedAppTicketResponse_t_SetCallResult
CFileDetailsResult_t_RemoveCallResult
CFileDetailsResult_t_SetCallResult
CFriendsEnumerateFollowingList_t_RemoveCallResult
CFriendsEnumerateFollowingList_t_SetCallResult
CFriendsGetFollowerCount_t_RemoveCallResult
CFriendsGetFollowerCount_t_SetCallResult
CFriendsIsFollowing_t_RemoveCallResult
CFriendsIsFollowing_t_SetCallResult
CGSReputation_t_RemoveCallResult
CGSReputation_t_SetCallResult
CGSStatsReceived_t_RemoveCallResult
CGSStatsReceived_t_SetCallResult
CGSStatsStored_t_RemoveCallResult
CGSStatsStored_t_SetCallResult
CGetAppDependenciesResult_t_RemoveCallResult
CGetAppDependenciesResult_t_SetCallResult
CGetOPFSettingsResult_t_RemoveCallback
CGetOPFSettingsResult_t_SetCallback
CGetUserItemVoteResult_t_RemoveCallResult
CGetUserItemVoteResult_t_SetCallResult
CGlobalAchievementPercentagesReady_t_RemoveCallResult
CGlobalAchievementPercentagesReady_t_SetCallResult
CGlobalStatsReceived_t_RemoveCallResult
CGlobalStatsReceived_t_SetCallResult
CHTML_BrowserReady_t_RemoveCallResult
CHTML_BrowserReady_t_SetCallResult
CJoinClanChatRoomCompletionResult_t_RemoveCallResult
CJoinClanChatRoomCompletionResult_t_SetCallResult
CJoinPartyCallback_t_RemoveCallResult
CJoinPartyCallback_t_SetCallResult
CLeaderboardFindResult_t_RemoveCallResult
CLeaderboardFindResult_t_SetCallResult
CLeaderboardScoreUploaded_t_RemoveCallResult
CLeaderboardScoreUploaded_t_SetCallResult
CLeaderboardScoresDownloaded_t_RemoveCallResult
CLeaderboardScoresDownloaded_t_SetCallResult
CLeaderboardUGCSet_t_RemoveCallResult
CLeaderboardUGCSet_t_SetCallResult
CLobbyCreated_t_RemoveCallResult
CLobbyCreated_t_SetCallResult
CLobbyEnter_t_RemoveCallResult
CLobbyEnter_t_SetCallResult
CLobbyMatchList_t_RemoveCallResult
CLobbyMatchList_t_SetCallResult
CMarketEligibilityResponse_t_RemoveCallResult
CMarketEligibilityResponse_t_SetCallResult
CNumberOfCurrentPlayers_t_RemoveCallResult
CNumberOfCurrentPlayers_t_SetCallResult
CRemoteStorageDeletePublishedFileResult_t_RemoveCallResult
CRemoteStorageDeletePublishedFileResult_t_SetCallResult
CRemoteStorageDownloadUGCResult_t_RemoveCallResult
CRemoteStorageDownloadUGCResult_t_SetCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_RemoveCallResult
CRemoteStorageEnumeratePublishedFilesByUserActionResult_t_SetCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserPublishedFilesResult_t_SetCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateUserSubscribedFilesResult_t_SetCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_RemoveCallResult
CRemoteStorageEnumerateWorkshopFilesResult_t_SetCallResult
CRemoteStorageFileReadAsyncComplete_t_RemoveCallResult
CRemoteStorageFileReadAsyncComplete_t_SetCallResult
CRemoteStorageFileShareResult_t_RemoveCallResult
CRemoteStorageFileShareResult_t_SetCallResult
CRemoteStorageFileWriteAsyncComplete_t_RemoveCallResult
CRemoteStorageFileWriteAsyncComplete_t_SetCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedFileDetailsResult_t_SetCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_RemoveCallResult
CRemoteStorageGetPublishedItemVoteDetailsResult_t_SetCallResult
CRemoteStoragePublishFileProgress_t_RemoveCallResult
CRemoteStoragePublishFileProgress_t_SetCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_RemoveCallResult
CRemoteStorageSetUserPublishedFileActionResult_t_SetCallResult
CRemoteStorageSubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageSubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_RemoveCallResult
CRemoteStorageUnsubscribePublishedFileResult_t_SetCallResult
CRemoteStorageUpdatePublishedFileResult_t_RemoveCallResult
CRemoteStorageUpdatePublishedFileResult_t_SetCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_RemoveCallResult
CRemoteStorageUpdateUserPublishedItemVoteResult_t_SetCallResult
CRemoveAppDependencyResult_t_RemoveCallResult
CRemoveAppDependencyResult_t_SetCallResult
CRemoveUGCDependencyResult_t_RemoveCallResult
CRemoveUGCDependencyResult_t_SetCallResult
CSetPersonaNameResponse_t_RemoveCallResult
CSetPersonaNameResponse_t_SetCallResult
CSetUserItemVoteResult_t_RemoveCallResult
CSetUserItemVoteResult_t_SetCallResult
CStartPlaytimeTrackingResult_t_RemoveCallResult
CStartPlaytimeTrackingResult_t_SetCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_RemoveCallResult
CSteamInventoryEligiblePromoItemDefIDs_t_SetCallResult
CSteamInventoryRequestPricesResult_t_RemoveCallResult
CSteamInventoryRequestPricesResult_t_SetCallResult
CSteamInventoryStartPurchaseResult_t_RemoveCallResult
CSteamInventoryStartPurchaseResult_t_SetCallResult
CSteamUGCQueryCompleted_t_RemoveCallResult
CSteamUGCQueryCompleted_t_SetCallResult
CStopPlaytimeTrackingResult_t_RemoveCallResult
CStopPlaytimeTrackingResult_t_SetCallResult
CStoreAuthURLResponse_t_RemoveCallResult
CStoreAuthURLResponse_t_SetCallResult
CSubmitItemUpdateResult_t_RemoveCallResult
CSubmitItemUpdateResult_t_SetCallResult
CUserFavoriteItemsListChanged_t_RemoveCallResult
CUserFavoriteItemsListChanged_t_SetCallResult
CUserStatsReceived_t_RemoveCallResult
CUserStatsReceived_t_RemoveCallback
CUserStatsReceived_t_SetCallResult
CUserStatsReceived_t_SetCallback
GetHSteamPipe
GetHSteamUser
SteamAPI_GetHSteamPipe
SteamAPI_GetHSteamUser
SteamAPI_GetSteamInstallPath
SteamAPI_ISteamAppList_GetAppBuildId
SteamAPI_ISteamAppList_GetAppInstallDir
SteamAPI_ISteamAppList_GetAppName
SteamAPI_ISteamAppList_GetInstalledApps
SteamAPI_ISteamAppList_GetNumInstalledApps
SteamAPI_ISteamApps_BGetDLCDataByIndex
SteamAPI_ISteamApps_BIsAppInstalled
SteamAPI_ISteamApps_BIsCybercafe
SteamAPI_ISteamApps_BIsDlcInstalled
SteamAPI_ISteamApps_BIsLowViolence
SteamAPI_ISteamApps_BIsSubscribed
SteamAPI_ISteamApps_BIsSubscribedApp
SteamAPI_ISteamApps_BIsSubscribedFromFamilySharing
SteamAPI_ISteamApps_BIsSubscribedFromFreeWeekend
SteamAPI_ISteamApps_BIsVACBanned
SteamAPI_ISteamApps_GetAppBuildId
SteamAPI_ISteamApps_GetAppInstallDir
SteamAPI_ISteamApps_GetAppOwner
SteamAPI_ISteamApps_GetAvailableGameLanguages
SteamAPI_ISteamApps_GetCurrentBetaName
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamApps_GetDLCCount
SteamAPI_ISteamApps_GetDlcDownloadProgress
SteamAPI_ISteamApps_GetEarliestPurchaseUnixTime
SteamAPI_ISteamApps_GetFileDetails
SteamAPI_ISteamApps_GetInstalledDepots
SteamAPI_ISteamApps_GetLaunchCommandLine
SteamAPI_ISteamApps_GetLaunchQueryParam
SteamAPI_ISteamApps_InstallDLC
SteamAPI_ISteamApps_MarkContentCorrupt
SteamAPI_ISteamApps_RequestAllProofOfPurchaseKeys
SteamAPI_ISteamApps_RequestAppProofOfPurchaseKey
SteamAPI_ISteamApps_UninstallDLC
SteamAPI_ISteamClient_BReleaseSteamPipe
SteamAPI_ISteamClient_BShutdownIfAllPipesClosed
SteamAPI_ISteamClient_ConnectToGlobalUser
SteamAPI_ISteamClient_CreateLocalUser
SteamAPI_ISteamClient_CreateSteamPipe
SteamAPI_ISteamClient_GetIPCCallCount
SteamAPI_ISteamClient_GetISteamAppList
SteamAPI_ISteamClient_GetISteamApps
SteamAPI_ISteamClient_GetISteamController
SteamAPI_ISteamClient_GetISteamFriends
SteamAPI_ISteamClient_GetISteamGameSearch
SteamAPI_ISteamClient_GetISteamGameServer
SteamAPI_ISteamClient_GetISteamGameServerStats
SteamAPI_ISteamClient_GetISteamGenericInterface
SteamAPI_ISteamClient_GetISteamHTMLSurface
SteamAPI_ISteamClient_GetISteamHTTP
SteamAPI_ISteamClient_GetISteamInput
SteamAPI_ISteamClient_GetISteamInventory
SteamAPI_ISteamClient_GetISteamMatchmaking
SteamAPI_ISteamClient_GetISteamMatchmakingServers
SteamAPI_ISteamClient_GetISteamMusic
SteamAPI_ISteamClient_GetISteamMusicRemote
SteamAPI_ISteamClient_GetISteamNetworking
SteamAPI_ISteamClient_GetISteamParentalSettings
SteamAPI_ISteamClient_GetISteamParties
SteamAPI_ISteamClient_GetISteamRemotePlay
SteamAPI_ISteamClient_GetISteamRemoteStorage
SteamAPI_ISteamClient_GetISteamScreenshots
SteamAPI_ISteamClient_GetISteamUGC
SteamAPI_ISteamClient_GetISteamUser
SteamAPI_ISteamClient_GetISteamUserStats
SteamAPI_ISteamClient_GetISteamUtils
SteamAPI_ISteamClient_GetISteamVideo
SteamAPI_ISteamClient_ReleaseUser
SteamAPI_ISteamClient_SetLocalIPBinding
SteamAPI_ISteamClient_SetWarningMessageHook
SteamAPI_ISteamController_ActivateActionSet
SteamAPI_ISteamController_ActivateActionSetLayer
SteamAPI_ISteamController_DeactivateActionSetLayer
SteamAPI_ISteamController_DeactivateAllActionSetLayers
SteamAPI_ISteamController_GetActionOriginFromXboxOrigin
SteamAPI_ISteamController_GetActionSetHandle
SteamAPI_ISteamController_GetActiveActionSetLayers
SteamAPI_ISteamController_GetAnalogActionData
SteamAPI_ISteamController_GetAnalogActionHandle
SteamAPI_ISteamController_GetAnalogActionOrigins
SteamAPI_ISteamController_GetConnectedControllers
SteamAPI_ISteamController_GetControllerBindingRevision
SteamAPI_ISteamController_GetControllerForGamepadIndex
SteamAPI_ISteamController_GetCurrentActionSet
SteamAPI_ISteamController_GetDigitalActionData
SteamAPI_ISteamController_GetDigitalActionHandle
SteamAPI_ISteamController_GetDigitalActionOrigins
SteamAPI_ISteamController_GetGamepadIndexForController
SteamAPI_ISteamController_GetGlyphForActionOrigin
SteamAPI_ISteamController_GetGlyphForXboxOrigin
SteamAPI_ISteamController_GetInputTypeForHandle
SteamAPI_ISteamController_GetMotionData
SteamAPI_ISteamController_GetStringForActionOrigin
SteamAPI_ISteamController_GetStringForXboxOrigin
SteamAPI_ISteamController_Init
SteamAPI_ISteamController_RunFrame
SteamAPI_ISteamController_SetLEDColor
SteamAPI_ISteamController_ShowBindingPanel
SteamAPI_ISteamController_Shutdown
SteamAPI_ISteamController_StopAnalogActionMomentum
SteamAPI_ISteamController_TranslateActionOrigin
SteamAPI_ISteamController_TriggerHapticPulse
SteamAPI_ISteamController_TriggerRepeatedHapticPulse
SteamAPI_ISteamController_TriggerVibration
SteamAPI_ISteamFriends_ActivateGameOverlay
SteamAPI_ISteamFriends_ActivateGameOverlayInviteDialog
SteamAPI_ISteamFriends_ActivateGameOverlayToStore
SteamAPI_ISteamFriends_ActivateGameOverlayToUser
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamFriends_ClearRichPresence
SteamAPI_ISteamFriends_CloseClanChatWindowInSteam
SteamAPI_ISteamFriends_DownloadClanActivityCounts
SteamAPI_ISteamFriends_EnumerateFollowingList
SteamAPI_ISteamFriends_GetChatMemberByIndex
SteamAPI_ISteamFriends_GetClanActivityCounts
SteamAPI_ISteamFriends_GetClanByIndex
SteamAPI_ISteamFriends_GetClanChatMemberCount
SteamAPI_ISteamFriends_GetClanChatMessage
SteamAPI_ISteamFriends_GetClanCount
SteamAPI_ISteamFriends_GetClanName
SteamAPI_ISteamFriends_GetClanOfficerByIndex
SteamAPI_ISteamFriends_GetClanOfficerCount
SteamAPI_ISteamFriends_GetClanOwner
SteamAPI_ISteamFriends_GetClanTag
SteamAPI_ISteamFriends_GetCoplayFriend
SteamAPI_ISteamFriends_GetCoplayFriendCount
SteamAPI_ISteamFriends_GetFollowerCount
SteamAPI_ISteamFriends_GetFriendByIndex
SteamAPI_ISteamFriends_GetFriendCoplayGame
SteamAPI_ISteamFriends_GetFriendCoplayTime
SteamAPI_ISteamFriends_GetFriendCount
SteamAPI_ISteamFriends_GetFriendCountFromSource
SteamAPI_ISteamFriends_GetFriendFromSourceByIndex
SteamAPI_ISteamFriends_GetFriendGamePlayed
SteamAPI_ISteamFriends_GetFriendMessage
SteamAPI_ISteamFriends_GetFriendPersonaName
SteamAPI_ISteamFriends_GetFriendPersonaNameHistory
SteamAPI_ISteamFriends_GetFriendPersonaState
SteamAPI_ISteamFriends_GetFriendRelationship
SteamAPI_ISteamFriends_GetFriendRichPresence
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyByIndex
SteamAPI_ISteamFriends_GetFriendRichPresenceKeyCount
SteamAPI_ISteamFriends_GetFriendSteamLevel
SteamAPI_ISteamFriends_GetFriendsGroupCount
SteamAPI_ISteamFriends_GetFriendsGroupIDByIndex
SteamAPI_ISteamFriends_GetFriendsGroupMembersCount
SteamAPI_ISteamFriends_GetFriendsGroupMembersList
SteamAPI_ISteamFriends_GetFriendsGroupName
SteamAPI_ISteamFriends_GetLargeFriendAvatar
SteamAPI_ISteamFriends_GetMediumFriendAvatar
SteamAPI_ISteamFriends_GetNumChatsWithUnreadPriorityMessages
SteamAPI_ISteamFriends_GetPersonaName
SteamAPI_ISteamFriends_GetPersonaState
SteamAPI_ISteamFriends_GetPlayerNickname
SteamAPI_ISteamFriends_GetSmallFriendAvatar
SteamAPI_ISteamFriends_GetUserRestrictions
SteamAPI_ISteamFriends_HasFriend
SteamAPI_ISteamFriends_InviteUserToGame
SteamAPI_ISteamFriends_IsClanChatAdmin
SteamAPI_ISteamFriends_IsClanChatWindowOpenInSteam
SteamAPI_ISteamFriends_IsClanOfficialGameGroup
SteamAPI_ISteamFriends_IsClanPublic
SteamAPI_ISteamFriends_IsFollowing
SteamAPI_ISteamFriends_IsUserInSource
SteamAPI_ISteamFriends_JoinClanChatRoom
SteamAPI_ISteamFriends_LeaveClanChatRoom
SteamAPI_ISteamFriends_OpenClanChatWindowInSteam
SteamAPI_ISteamFriends_ReplyToFriendMessage
SteamAPI_ISteamFriends_RequestClanOfficerList
SteamAPI_ISteamFriends_RequestFriendRichPresence
SteamAPI_ISteamFriends_RequestUserInformation
SteamAPI_ISteamFriends_SendClanChatMessage
SteamAPI_ISteamFriends_SetInGameVoiceSpeaking
SteamAPI_ISteamFriends_SetListenForFriendsMessages
SteamAPI_ISteamFriends_SetPersonaName
SteamAPI_ISteamFriends_SetPlayedWith
SteamAPI_ISteamFriends_SetRichPresence
SteamAPI_ISteamGameSearch_AcceptGame
SteamAPI_ISteamGameSearch_AddGameSearchParams
SteamAPI_ISteamGameSearch_CancelRequestPlayersForGame
SteamAPI_ISteamGameSearch_DeclineGame
SteamAPI_ISteamGameSearch_EndGame
SteamAPI_ISteamGameSearch_EndGameSearch
SteamAPI_ISteamGameSearch_HostConfirmGameStart
SteamAPI_ISteamGameSearch_RequestPlayersForGame
SteamAPI_ISteamGameSearch_RetrieveConnectionDetails
SteamAPI_ISteamGameSearch_SearchForGameSolo
SteamAPI_ISteamGameSearch_SearchForGameWithLobby
SteamAPI_ISteamGameSearch_SetConnectionDetails
SteamAPI_ISteamGameSearch_SetGameHostParams
SteamAPI_ISteamGameSearch_SubmitPlayerResult
SteamAPI_ISteamGameServerStats_ClearUserAchievement
SteamAPI_ISteamGameServerStats_GetUserAchievement
SteamAPI_ISteamGameServerStats_GetUserStat
SteamAPI_ISteamGameServerStats_GetUserStat0
SteamAPI_ISteamGameServerStats_RequestUserStats
SteamAPI_ISteamGameServerStats_SetUserAchievement
SteamAPI_ISteamGameServerStats_SetUserStat
SteamAPI_ISteamGameServerStats_SetUserStat0
SteamAPI_ISteamGameServerStats_StoreUserStats
SteamAPI_ISteamGameServerStats_UpdateUserAvgRateStat
SteamAPI_ISteamGameServer_AssociateWithClan
SteamAPI_ISteamGameServer_BLoggedOn
SteamAPI_ISteamGameServer_BSecure
SteamAPI_ISteamGameServer_BUpdateUserData
SteamAPI_ISteamGameServer_BeginAuthSession
SteamAPI_ISteamGameServer_CancelAuthTicket
SteamAPI_ISteamGameServer_ClearAllKeyValues
SteamAPI_ISteamGameServer_ComputeNewPlayerCompatibility
SteamAPI_ISteamGameServer_CreateUnauthenticatedUserConnection
SteamAPI_ISteamGameServer_EnableHeartbeats
SteamAPI_ISteamGameServer_EndAuthSession
SteamAPI_ISteamGameServer_ForceHeartbeat
SteamAPI_ISteamGameServer_GetAuthSessionTicket
SteamAPI_ISteamGameServer_GetGameplayStats
SteamAPI_ISteamGameServer_GetNextOutgoingPacket
SteamAPI_ISteamGameServer_GetPublicIP
SteamAPI_ISteamGameServer_GetServerReputation
SteamAPI_ISteamGameServer_GetSteamID
SteamAPI_ISteamGameServer_HandleIncomingPacket
SteamAPI_ISteamGameServer_InitGameServer
SteamAPI_ISteamGameServer_LogOff
SteamAPI_ISteamGameServer_LogOn
SteamAPI_ISteamGameServer_LogOnAnonymous
SteamAPI_ISteamGameServer_RequestUserGroupStatus
SteamAPI_ISteamGameServer_SendUserConnectAndAuthenticate
SteamAPI_ISteamGameServer_SendUserDisconnect
SteamAPI_ISteamGameServer_SetBotPlayerCount
SteamAPI_ISteamGameServer_SetDedicatedServer
SteamAPI_ISteamGameServer_SetGameData
SteamAPI_ISteamGameServer_SetGameDescription
SteamAPI_ISteamGameServer_SetGameTags
SteamAPI_ISteamGameServer_SetHeartbeatInterval
SteamAPI_ISteamGameServer_SetKeyValue
SteamAPI_ISteamGameServer_SetMapName
SteamAPI_ISteamGameServer_SetMaxPlayerCount
SteamAPI_ISteamGameServer_SetModDir
SteamAPI_ISteamGameServer_SetPasswordProtected
SteamAPI_ISteamGameServer_SetProduct
SteamAPI_ISteamGameServer_SetRegion
SteamAPI_ISteamGameServer_SetServerName
SteamAPI_ISteamGameServer_SetSpectatorPort
SteamAPI_ISteamGameServer_SetSpectatorServerName
SteamAPI_ISteamGameServer_UserHasLicenseForApp
SteamAPI_ISteamGameServer_WasRestartRequested
SteamAPI_ISteamHTMLSurface_AddHeader
SteamAPI_ISteamHTMLSurface_AllowStartRequest
SteamAPI_ISteamHTMLSurface_CopyToClipboard
SteamAPI_ISteamHTMLSurface_CreateBrowser
SteamAPI_ISteamHTMLSurface_DestructISteamHTMLSurface
SteamAPI_ISteamHTMLSurface_ExecuteJavascript
SteamAPI_ISteamHTMLSurface_Find
SteamAPI_ISteamHTMLSurface_GetLinkAtPosition
SteamAPI_ISteamHTMLSurface_GoBack
SteamAPI_ISteamHTMLSurface_GoForward
SteamAPI_ISteamHTMLSurface_Init
SteamAPI_ISteamHTMLSurface_JSDialogResponse
SteamAPI_ISteamHTMLSurface_KeyChar
SteamAPI_ISteamHTMLSurface_KeyDown
SteamAPI_ISteamHTMLSurface_KeyUp
SteamAPI_ISteamHTMLSurface_LoadURL
SteamAPI_ISteamHTMLSurface_MouseDoubleClick
SteamAPI_ISteamHTMLSurface_MouseDown
SteamAPI_ISteamHTMLSurface_MouseMove
SteamAPI_ISteamHTMLSurface_MouseUp
SteamAPI_ISteamHTMLSurface_MouseWheel
SteamAPI_ISteamHTMLSurface_OpenDeveloperTools
SteamAPI_ISteamHTMLSurface_PasteFromClipboard
SteamAPI_ISteamHTMLSurface_Reload
SteamAPI_ISteamHTMLSurface_RemoveBrowser
SteamAPI_ISteamHTMLSurface_SetBackgroundMode
SteamAPI_ISteamHTMLSurface_SetCookie
SteamAPI_ISteamHTMLSurface_SetDPIScalingFactor
SteamAPI_ISteamHTMLSurface_SetHorizontalScroll
SteamAPI_ISteamHTMLSurface_SetKeyFocus
SteamAPI_ISteamHTMLSurface_SetPageScaleFactor
SteamAPI_ISteamHTMLSurface_SetSize
SteamAPI_ISteamHTMLSurface_SetVerticalScroll
SteamAPI_ISteamHTMLSurface_Shutdown
SteamAPI_ISteamHTMLSurface_StopFind
SteamAPI_ISteamHTMLSurface_StopLoad
SteamAPI_ISteamHTMLSurface_ViewSource
SteamAPI_ISteamHTTP_CreateCookieContainer
SteamAPI_ISteamHTTP_CreateHTTPRequest
SteamAPI_ISteamHTTP_DeferHTTPRequest
SteamAPI_ISteamHTTP_GetHTTPDownloadProgressPct
SteamAPI_ISteamHTTP_GetHTTPRequestWasTimedOut
SteamAPI_ISteamHTTP_GetHTTPResponseBodyData
SteamAPI_ISteamHTTP_GetHTTPResponseBodySize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderSize
SteamAPI_ISteamHTTP_GetHTTPResponseHeaderValue
SteamAPI_ISteamHTTP_GetHTTPStreamingResponseBodyData
SteamAPI_ISteamHTTP_PrioritizeHTTPRequest
SteamAPI_ISteamHTTP_ReleaseCookieContainer
SteamAPI_ISteamHTTP_ReleaseHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequest
SteamAPI_ISteamHTTP_SendHTTPRequestAndStreamResponse
SteamAPI_ISteamHTTP_SetCookie
SteamAPI_ISteamHTTP_SetHTTPRequestAbsoluteTimeoutMS
SteamAPI_ISteamHTTP_SetHTTPRequestContextValue
SteamAPI_ISteamHTTP_SetHTTPRequestCookieContainer
SteamAPI_ISteamHTTP_SetHTTPRequestGetOrPostParameter
SteamAPI_ISteamHTTP_SetHTTPRequestHeaderValue
SteamAPI_ISteamHTTP_SetHTTPRequestNetworkActivityTimeout
SteamAPI_ISteamHTTP_SetHTTPRequestRawPostBody
SteamAPI_ISteamHTTP_SetHTTPRequestRequiresVerifiedCertificate
SteamAPI_ISteamHTTP_SetHTTPRequestUserAgentInfo
SteamAPI_ISteamInput_ActivateActionSet
SteamAPI_ISteamInput_ActivateActionSetLayer
SteamAPI_ISteamInput_DeactivateActionSetLayer
SteamAPI_ISteamInput_DeactivateAllActionSetLayers
SteamAPI_ISteamInput_GetActionOriginFromXboxOrigin
SteamAPI_ISteamInput_GetActionSetHandle
SteamAPI_ISteamInput_GetActiveActionSetLayers
SteamAPI_ISteamInput_GetAnalogActionData
SteamAPI_ISteamInput_GetAnalogActionHandle
SteamAPI_ISteamInput_GetAnalogActionOrigins
SteamAPI_ISteamInput_GetConnectedControllers
SteamAPI_ISteamInput_GetControllerForGamepadIndex
SteamAPI_ISteamInput_GetCurrentActionSet
SteamAPI_ISteamInput_GetDeviceBindingRevision
SteamAPI_ISteamInput_GetDigitalActionData
SteamAPI_ISteamInput_GetDigitalActionHandle
SteamAPI_ISteamInput_GetDigitalActionOrigins
SteamAPI_ISteamInput_GetGamepadIndexForController
SteamAPI_ISteamInput_GetGlyphForActionOrigin
SteamAPI_ISteamInput_GetGlyphForXboxOrigin
SteamAPI_ISteamInput_GetInputTypeForHandle
SteamAPI_ISteamInput_GetMotionData
SteamAPI_ISteamInput_GetRemotePlaySessionID
SteamAPI_ISteamInput_GetStringForActionOrigin
SteamAPI_ISteamInput_GetStringForXboxOrigin
SteamAPI_ISteamInput_Init
SteamAPI_ISteamInput_RunFrame
SteamAPI_ISteamInput_SetLEDColor
SteamAPI_ISteamInput_ShowBindingPanel
SteamAPI_ISteamInput_Shutdown
SteamAPI_ISteamInput_StopAnalogActionMomentum
SteamAPI_ISteamInput_TranslateActionOrigin
SteamAPI_ISteamInput_TriggerHapticPulse
SteamAPI_ISteamInput_TriggerRepeatedHapticPulse
SteamAPI_ISteamInput_TriggerVibration
SteamAPI_ISteamInventory_AddPromoItem
SteamAPI_ISteamInventory_AddPromoItems
SteamAPI_ISteamInventory_CheckResultSteamID
SteamAPI_ISteamInventory_ConsumeItem
SteamAPI_ISteamInventory_DeserializeResult
SteamAPI_ISteamInventory_DestroyResult
SteamAPI_ISteamInventory_ExchangeItems
SteamAPI_ISteamInventory_GenerateItems
SteamAPI_ISteamInventory_GetAllItems
SteamAPI_ISteamInventory_GetEligiblePromoItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionIDs
SteamAPI_ISteamInventory_GetItemDefinitionProperty
SteamAPI_ISteamInventory_GetItemPrice
SteamAPI_ISteamInventory_GetItemsByID
SteamAPI_ISteamInventory_GetItemsWithPrices
SteamAPI_ISteamInventory_GetNumItemsWithPrices
SteamAPI_ISteamInventory_GetResultItemProperty
SteamAPI_ISteamInventory_GetResultItems
SteamAPI_ISteamInventory_GetResultStatus
SteamAPI_ISteamInventory_GetResultTimestamp
SteamAPI_ISteamInventory_GrantPromoItems
SteamAPI_ISteamInventory_LoadItemDefinitions
SteamAPI_ISteamInventory_RemoveProperty
SteamAPI_ISteamInventory_RequestEligiblePromoItemDefinitionsIDs
SteamAPI_ISteamInventory_RequestPrices
SteamAPI_ISteamInventory_SendItemDropHeartbeat
SteamAPI_ISteamInventory_SerializeResult
SteamAPI_ISteamInventory_SetProperty
SteamAPI_ISteamInventory_SetProperty0
SteamAPI_ISteamInventory_SetProperty1
SteamAPI_ISteamInventory_SetProperty2
SteamAPI_ISteamInventory_StartPurchase
SteamAPI_ISteamInventory_StartUpdateProperties
SteamAPI_ISteamInventory_SubmitUpdateProperties
SteamAPI_ISteamInventory_TradeItems
SteamAPI_ISteamInventory_TransferItemQuantity
SteamAPI_ISteamInventory_TriggerItemDrop
SteamAPI_ISteamMatchmakingPingResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingPingResponse_ServerResponded
SteamAPI_ISteamMatchmakingPlayersResponse_AddPlayerToList
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersFailedToRespond
SteamAPI_ISteamMatchmakingPlayersResponse_PlayersRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesFailedToRespond
SteamAPI_ISteamMatchmakingRulesResponse_RulesRefreshComplete
SteamAPI_ISteamMatchmakingRulesResponse_RulesResponded
SteamAPI_ISteamMatchmakingServerListResponse_RefreshComplete
SteamAPI_ISteamMatchmakingServerListResponse_ServerFailedToRespond
SteamAPI_ISteamMatchmakingServerListResponse_ServerResponded
SteamAPI_ISteamMatchmakingServers_CancelQuery
SteamAPI_ISteamMatchmakingServers_CancelServerQuery
SteamAPI_ISteamMatchmakingServers_GetServerCount
SteamAPI_ISteamMatchmakingServers_GetServerDetails
SteamAPI_ISteamMatchmakingServers_IsRefreshing
SteamAPI_ISteamMatchmakingServers_PingServer
SteamAPI_ISteamMatchmakingServers_PlayerDetails
SteamAPI_ISteamMatchmakingServers_RefreshQuery
SteamAPI_ISteamMatchmakingServers_RefreshServer
SteamAPI_ISteamMatchmakingServers_ReleaseRequest
SteamAPI_ISteamMatchmakingServers_RequestFavoritesServerList
SteamAPI_ISteamMatchmakingServers_RequestFriendsServerList
SteamAPI_ISteamMatchmakingServers_RequestHistoryServerList
SteamAPI_ISteamMatchmakingServers_RequestInternetServerList
SteamAPI_ISteamMatchmakingServers_RequestLANServerList
SteamAPI_ISteamMatchmakingServers_RequestSpectatorServerList
SteamAPI_ISteamMatchmakingServers_ServerRules
SteamAPI_ISteamMatchmaking_AddFavoriteGame
SteamAPI_ISteamMatchmaking_AddRequestLobbyListCompatibleMembersFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListDistanceFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListFilterSlotsAvailable
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNearValueFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListNumericalFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListResultCountFilter
SteamAPI_ISteamMatchmaking_AddRequestLobbyListStringFilter
SteamAPI_ISteamMatchmaking_CreateLobby
SteamAPI_ISteamMatchmaking_DeleteLobbyData
SteamAPI_ISteamMatchmaking_GetFavoriteGame
SteamAPI_ISteamMatchmaking_GetFavoriteGameCount
SteamAPI_ISteamMatchmaking_GetLobbyByIndex
SteamAPI_ISteamMatchmaking_GetLobbyChatEntry
SteamAPI_ISteamMatchmaking_GetLobbyData
SteamAPI_ISteamMatchmaking_GetLobbyDataByIndex
SteamAPI_ISteamMatchmaking_GetLobbyDataCount
SteamAPI_ISteamMatchmaking_GetLobbyGameServer
SteamAPI_ISteamMatchmaking_GetLobbyMemberByIndex
SteamAPI_ISteamMatchmaking_GetLobbyMemberData
SteamAPI_ISteamMatchmaking_GetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_GetLobbyOwner
SteamAPI_ISteamMatchmaking_GetNumLobbyMembers
SteamAPI_ISteamMatchmaking_InviteUserToLobby
SteamAPI_ISteamMatchmaking_JoinLobby
SteamAPI_ISteamMatchmaking_LeaveLobby
SteamAPI_ISteamMatchmaking_RemoveFavoriteGame
SteamAPI_ISteamMatchmaking_RequestLobbyData
SteamAPI_ISteamMatchmaking_RequestLobbyList
SteamAPI_ISteamMatchmaking_SendLobbyChatMsg
SteamAPI_ISteamMatchmaking_SetLinkedLobby
SteamAPI_ISteamMatchmaking_SetLobbyData
SteamAPI_ISteamMatchmaking_SetLobbyGameServer
SteamAPI_ISteamMatchmaking_SetLobbyJoinable
SteamAPI_ISteamMatchmaking_SetLobbyMemberData
SteamAPI_ISteamMatchmaking_SetLobbyMemberLimit
SteamAPI_ISteamMatchmaking_SetLobbyOwner
SteamAPI_ISteamMatchmaking_SetLobbyType
SteamAPI_ISteamMusicRemote_BActivationSuccess
SteamAPI_ISteamMusicRemote_BIsCurrentMusicRemote
SteamAPI_ISteamMusicRemote_CurrentEntryDidChange
SteamAPI_ISteamMusicRemote_CurrentEntryIsAvailable
SteamAPI_ISteamMusicRemote_CurrentEntryWillChange
SteamAPI_ISteamMusicRemote_DeregisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_EnableLooped
SteamAPI_ISteamMusicRemote_EnablePlayNext
SteamAPI_ISteamMusicRemote_EnablePlayPrevious
SteamAPI_ISteamMusicRemote_EnablePlaylists
SteamAPI_ISteamMusicRemote_EnableQueue
SteamAPI_ISteamMusicRemote_EnableShuffled
SteamAPI_ISteamMusicRemote_PlaylistDidChange
SteamAPI_ISteamMusicRemote_PlaylistWillChange
SteamAPI_ISteamMusicRemote_QueueDidChange
SteamAPI_ISteamMusicRemote_QueueWillChange
SteamAPI_ISteamMusicRemote_RegisterSteamMusicRemote
SteamAPI_ISteamMusicRemote_ResetPlaylistEntries
SteamAPI_ISteamMusicRemote_ResetQueueEntries
SteamAPI_ISteamMusicRemote_SetCurrentPlaylistEntry
SteamAPI_ISteamMusicRemote_SetCurrentQueueEntry
SteamAPI_ISteamMusicRemote_SetDisplayName
SteamAPI_ISteamMusicRemote_SetPNGIcon_64x64
SteamAPI_ISteamMusicRemote_SetPlaylistEntry
SteamAPI_ISteamMusicRemote_SetQueueEntry
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryCoverArt
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryElapsedSeconds
SteamAPI_ISteamMusicRemote_UpdateCurrentEntryText
SteamAPI_ISteamMusicRemote_UpdateLooped
SteamAPI_ISteamMusicRemote_UpdatePlaybackStatus
SteamAPI_ISteamMusicRemote_UpdateShuffled
SteamAPI_ISteamMusicRemote_UpdateVolume
SteamAPI_ISteamMusic_BIsEnabled
SteamAPI_ISteamMusic_BIsPlaying
SteamAPI_ISteamMusic_GetPlaybackStatus
SteamAPI_ISteamMusic_GetVolume
SteamAPI_ISteamMusic_Pause
SteamAPI_ISteamMusic_Play
SteamAPI_ISteamMusic_PlayNext
SteamAPI_ISteamMusic_PlayPrevious
SteamAPI_ISteamMusic_SetVolume
SteamAPI_ISteamNetworking_AcceptP2PSessionWithUser
SteamAPI_ISteamNetworking_AllowP2PPacketRelay
SteamAPI_ISteamNetworking_CloseP2PChannelWithUser
SteamAPI_ISteamNetworking_CloseP2PSessionWithUser
SteamAPI_ISteamNetworking_CreateConnectionSocket
SteamAPI_ISteamNetworking_CreateListenSocket
SteamAPI_ISteamNetworking_CreateP2PConnectionSocket
SteamAPI_ISteamNetworking_DestroyListenSocket
SteamAPI_ISteamNetworking_DestroySocket
SteamAPI_ISteamNetworking_GetListenSocketInfo
SteamAPI_ISteamNetworking_GetMaxPacketSize
SteamAPI_ISteamNetworking_GetP2PSessionState
SteamAPI_ISteamNetworking_GetSocketConnectionType
SteamAPI_ISteamNetworking_GetSocketInfo
SteamAPI_ISteamNetworking_IsDataAvailable
SteamAPI_ISteamNetworking_IsDataAvailableOnSocket
SteamAPI_ISteamNetworking_IsP2PPacketAvailable
SteamAPI_ISteamNetworking_ReadP2PPacket
SteamAPI_ISteamNetworking_RetrieveData
SteamAPI_ISteamNetworking_RetrieveDataFromSocket
SteamAPI_ISteamNetworking_SendDataOnSocket
SteamAPI_ISteamNetworking_SendP2PPacket
SteamAPI_ISteamParentalSettings_BIsAppBlocked
SteamAPI_ISteamParentalSettings_BIsAppInBlockList
SteamAPI_ISteamParentalSettings_BIsFeatureBlocked
SteamAPI_ISteamParentalSettings_BIsFeatureInBlockList
SteamAPI_ISteamParentalSettings_BIsParentalLockEnabled
SteamAPI_ISteamParentalSettings_BIsParentalLockLocked
SteamAPI_ISteamParties_CancelReservation
SteamAPI_ISteamParties_ChangeNumOpenSlots
SteamAPI_ISteamParties_CreateBeacon
SteamAPI_ISteamParties_DestroyBeacon
SteamAPI_ISteamParties_GetAvailableBeaconLocations
SteamAPI_ISteamParties_GetBeaconByIndex
SteamAPI_ISteamParties_GetBeaconDetails
SteamAPI_ISteamParties_GetBeaconLocationData
SteamAPI_ISteamParties_GetNumActiveBeacons
SteamAPI_ISteamParties_GetNumAvailableBeaconLocations
SteamAPI_ISteamParties_JoinParty
SteamAPI_ISteamParties_OnReservationCompleted
SteamAPI_ISteamRemotePlay_BGetSessionClientResolution
SteamAPI_ISteamRemotePlay_GetSessionClientFormFactor
SteamAPI_ISteamRemotePlay_GetSessionClientName
SteamAPI_ISteamRemotePlay_GetSessionCount
SteamAPI_ISteamRemotePlay_GetSessionID
SteamAPI_ISteamRemotePlay_GetSessionSteamID
SteamAPI_ISteamRemoteStorage_CommitPublishedFileUpdate
SteamAPI_ISteamRemoteStorage_CreatePublishedFileUpdateRequest
SteamAPI_ISteamRemoteStorage_DeletePublishedFile
SteamAPI_ISteamRemoteStorage_EnumeratePublishedFilesByUserAction
SteamAPI_ISteamRemoteStorage_EnumeratePublishedWorkshopFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserPublishedFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserSharedWorkshopFiles
SteamAPI_ISteamRemoteStorage_EnumerateUserSubscribedFiles
SteamAPI_ISteamRemoteStorage_FileDelete
SteamAPI_ISteamRemoteStorage_FileExists
SteamAPI_ISteamRemoteStorage_FileForget
SteamAPI_ISteamRemoteStorage_FilePersisted
SteamAPI_ISteamRemoteStorage_FileRead
SteamAPI_ISteamRemoteStorage_FileReadAsync
SteamAPI_ISteamRemoteStorage_FileReadAsyncComplete
SteamAPI_ISteamRemoteStorage_FileShare
SteamAPI_ISteamRemoteStorage_FileWrite
SteamAPI_ISteamRemoteStorage_FileWriteAsync
SteamAPI_ISteamRemoteStorage_FileWriteStreamCancel
SteamAPI_ISteamRemoteStorage_FileWriteStreamClose
SteamAPI_ISteamRemoteStorage_FileWriteStreamOpen
SteamAPI_ISteamRemoteStorage_FileWriteStreamWriteChunk
SteamAPI_ISteamRemoteStorage_GetCachedUGCCount
SteamAPI_ISteamRemoteStorage_GetCachedUGCHandle
SteamAPI_ISteamRemoteStorage_GetFileCount
SteamAPI_ISteamRemoteStorage_GetFileNameAndSize
SteamAPI_ISteamRemoteStorage_GetFileSize
SteamAPI_ISteamRemoteStorage_GetFileTimestamp
SteamAPI_ISteamRemoteStorage_GetPublishedFileDetails
SteamAPI_ISteamRemoteStorage_GetPublishedItemVoteDetails
SteamAPI_ISteamRemoteStorage_GetQuota
SteamAPI_ISteamRemoteStorage_GetSyncPlatforms
SteamAPI_ISteamRemoteStorage_GetUGCDetails
SteamAPI_ISteamRemoteStorage_GetUGCDownloadProgress
SteamAPI_ISteamRemoteStorage_GetUserPublishedItemVoteDetails
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForAccount
SteamAPI_ISteamRemoteStorage_IsCloudEnabledForApp
SteamAPI_ISteamRemoteStorage_PublishVideo
SteamAPI_ISteamRemoteStorage_PublishWorkshopFile
SteamAPI_ISteamRemoteStorage_SetCloudEnabledForApp
SteamAPI_ISteamRemoteStorage_SetSyncPlatforms
SteamAPI_ISteamRemoteStorage_SetUserPublishedFileAction
SteamAPI_ISteamRemoteStorage_SubscribePublishedFile
SteamAPI_ISteamRemoteStorage_UGCDownload
SteamAPI_ISteamRemoteStorage_UGCDownloadToLocation
SteamAPI_ISteamRemoteStorage_UGCRead
SteamAPI_ISteamRemoteStorage_UnsubscribePublishedFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileDescription
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFilePreviewFile
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileSetChangeDescription
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTags
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileTitle
SteamAPI_ISteamRemoteStorage_UpdatePublishedFileVisibility
SteamAPI_ISteamRemoteStorage_UpdateUserPublishedItemVote
SteamAPI_ISteamScreenshots_AddScreenshotToLibrary
SteamAPI_ISteamScreenshots_AddVRScreenshotToLibrary
SteamAPI_ISteamScreenshots_HookScreenshots
SteamAPI_ISteamScreenshots_IsScreenshotsHooked
SteamAPI_ISteamScreenshots_SetLocation
SteamAPI_ISteamScreenshots_TagPublishedFile
SteamAPI_ISteamScreenshots_TagUser
SteamAPI_ISteamScreenshots_TriggerScreenshot
SteamAPI_ISteamScreenshots_WriteScreenshot
SteamAPI_ISteamTV_AddBroadcastGameData
SteamAPI_ISteamTV_AddRegion
SteamAPI_ISteamTV_AddTimelineMarker
SteamAPI_ISteamTV_IsBroadcasting
SteamAPI_ISteamTV_RemoveBroadcastGameData
SteamAPI_ISteamTV_RemoveRegion
SteamAPI_ISteamTV_RemoveTimelineMarker
SteamAPI_ISteamUGC_AddAppDependency
SteamAPI_ISteamUGC_AddDependency
SteamAPI_ISteamUGC_AddExcludedTag
SteamAPI_ISteamUGC_AddItemKeyValueTag
SteamAPI_ISteamUGC_AddItemPreviewFile
SteamAPI_ISteamUGC_AddItemPreviewVideo
SteamAPI_ISteamUGC_AddItemToFavorites
SteamAPI_ISteamUGC_AddRequiredKeyValueTag
SteamAPI_ISteamUGC_AddRequiredTag
SteamAPI_ISteamUGC_BInitWorkshopForGameServer
SteamAPI_ISteamUGC_CreateItem
SteamAPI_ISteamUGC_CreateQueryAllUGCRequest
SteamAPI_ISteamUGC_CreateQueryAllUGCRequest0
SteamAPI_ISteamUGC_CreateQueryUGCDetailsRequest
SteamAPI_ISteamUGC_CreateQueryUserUGCRequest
SteamAPI_ISteamUGC_DeleteItem
SteamAPI_ISteamUGC_DownloadItem
SteamAPI_ISteamUGC_GetAppDependencies
SteamAPI_ISteamUGC_GetItemDownloadInfo
SteamAPI_ISteamUGC_GetItemInstallInfo
SteamAPI_ISteamUGC_GetItemState
SteamAPI_ISteamUGC_GetItemUpdateProgress
SteamAPI_ISteamUGC_GetNumSubscribedItems
SteamAPI_ISteamUGC_GetQueryUGCAdditionalPreview
SteamAPI_ISteamUGC_GetQueryUGCChildren
SteamAPI_ISteamUGC_GetQueryUGCKeyValueTag
SteamAPI_ISteamUGC_GetQueryUGCKeyValueTag0
SteamAPI_ISteamUGC_GetQueryUGCMetadata
SteamAPI_ISteamUGC_GetQueryUGCNumAdditionalPreviews
SteamAPI_ISteamUGC_GetQueryUGCNumKeyValueTags
SteamAPI_ISteamUGC_GetQueryUGCPreviewURL
SteamAPI_ISteamUGC_GetQueryUGCResult
SteamAPI_ISteamUGC_GetQueryUGCStatistic
SteamAPI_ISteamUGC_GetSubscribedItems
SteamAPI_ISteamUGC_GetUserItemVote
SteamAPI_ISteamUGC_ReleaseQueryUGCRequest
SteamAPI_ISteamUGC_RemoveAllItemKeyValueTags
SteamAPI_ISteamUGC_RemoveAppDependency
SteamAPI_ISteamUGC_RemoveDependency
SteamAPI_ISteamUGC_RemoveItemFromFavorites
SteamAPI_ISteamUGC_RemoveItemKeyValueTags
SteamAPI_ISteamUGC_RemoveItemPreview
SteamAPI_ISteamUGC_RequestUGCDetails
SteamAPI_ISteamUGC_SendQueryUGCRequest
SteamAPI_ISteamUGC_SetAllowCachedResponse
SteamAPI_ISteamUGC_SetAllowLegacyUpload
SteamAPI_ISteamUGC_SetCloudFileNameFilter
SteamAPI_ISteamUGC_SetItemContent
SteamAPI_ISteamUGC_SetItemDescription
SteamAPI_ISteamUGC_SetItemMetadata
SteamAPI_ISteamUGC_SetItemPreview
SteamAPI_ISteamUGC_SetItemTags
SteamAPI_ISteamUGC_SetItemTitle
SteamAPI_ISteamUGC_SetItemUpdateLanguage
SteamAPI_ISteamUGC_SetItemVisibility
SteamAPI_ISteamUGC_SetLanguage
SteamAPI_ISteamUGC_SetMatchAnyTag
SteamAPI_ISteamUGC_SetRankedByTrendDays
SteamAPI_ISteamUGC_SetReturnAdditionalPreviews
SteamAPI_ISteamUGC_SetReturnChildren
SteamAPI_ISteamUGC_SetReturnKeyValueTags
SteamAPI_ISteamUGC_SetReturnLongDescription
SteamAPI_ISteamUGC_SetReturnMetadata
SteamAPI_ISteamUGC_SetReturnOnlyIDs
SteamAPI_ISteamUGC_SetReturnPlaytimeStats
SteamAPI_ISteamUGC_SetReturnTotalOnly
SteamAPI_ISteamUGC_SetSearchText
SteamAPI_ISteamUGC_SetUserItemVote
SteamAPI_ISteamUGC_StartItemUpdate
SteamAPI_ISteamUGC_StartPlaytimeTracking
SteamAPI_ISteamUGC_StopPlaytimeTracking
SteamAPI_ISteamUGC_StopPlaytimeTrackingForAllItems
SteamAPI_ISteamUGC_SubmitItemUpdate
SteamAPI_ISteamUGC_SubscribeItem
SteamAPI_ISteamUGC_SuspendDownloads
SteamAPI_ISteamUGC_UnsubscribeItem
SteamAPI_ISteamUGC_UpdateItemPreviewFile
SteamAPI_ISteamUGC_UpdateItemPreviewVideo
SteamAPI_ISteamUserStats_AttachLeaderboardUGC
SteamAPI_ISteamUserStats_ClearAchievement
SteamAPI_ISteamUserStats_DownloadLeaderboardEntries
SteamAPI_ISteamUserStats_DownloadLeaderboardEntriesForUsers
SteamAPI_ISteamUserStats_FindLeaderboard
SteamAPI_ISteamUserStats_FindOrCreateLeaderboard
SteamAPI_ISteamUserStats_GetAchievement
SteamAPI_ISteamUserStats_GetAchievementAchievedPercent
SteamAPI_ISteamUserStats_GetAchievementAndUnlockTime
SteamAPI_ISteamUserStats_GetAchievementDisplayAttribute
SteamAPI_ISteamUserStats_GetAchievementIcon
SteamAPI_ISteamUserStats_GetAchievementName
SteamAPI_ISteamUserStats_GetDownloadedLeaderboardEntry
SteamAPI_ISteamUserStats_GetGlobalStat
SteamAPI_ISteamUserStats_GetGlobalStat0
SteamAPI_ISteamUserStats_GetGlobalStatHistory
SteamAPI_ISteamUserStats_GetGlobalStatHistory0
SteamAPI_ISteamUserStats_GetLeaderboardDisplayType
SteamAPI_ISteamUserStats_GetLeaderboardEntryCount
SteamAPI_ISteamUserStats_GetLeaderboardName
SteamAPI_ISteamUserStats_GetLeaderboardSortMethod
SteamAPI_ISteamUserStats_GetMostAchievedAchievementInfo
SteamAPI_ISteamUserStats_GetNextMostAchievedAchievementInfo
SteamAPI_ISteamUserStats_GetNumAchievements
SteamAPI_ISteamUserStats_GetNumberOfCurrentPlayers
SteamAPI_ISteamUserStats_GetStat
SteamAPI_ISteamUserStats_GetStat0
SteamAPI_ISteamUserStats_GetUserAchievement
SteamAPI_ISteamUserStats_GetUserAchievementAndUnlockTime
SteamAPI_ISteamUserStats_GetUserStat
SteamAPI_ISteamUserStats_GetUserStat0
SteamAPI_ISteamUserStats_IndicateAchievementProgress
SteamAPI_ISteamUserStats_RequestCurrentStats
SteamAPI_ISteamUserStats_RequestGlobalAchievementPercentages
SteamAPI_ISteamUserStats_RequestGlobalStats
SteamAPI_ISteamUserStats_RequestUserStats
SteamAPI_ISteamUserStats_ResetAllStats
SteamAPI_ISteamUserStats_SetAchievement
SteamAPI_ISteamUserStats_SetStat
SteamAPI_ISteamUserStats_SetStat0
SteamAPI_ISteamUserStats_StoreStats
SteamAPI_ISteamUserStats_UpdateAvgRateStat
SteamAPI_ISteamUserStats_UploadLeaderboardScore
SteamAPI_ISteamUser_AdvertiseGame
SteamAPI_ISteamUser_BIsBehindNAT
SteamAPI_ISteamUser_BIsPhoneIdentifying
SteamAPI_ISteamUser_BIsPhoneRequiringVerification
SteamAPI_ISteamUser_BIsPhoneVerified
SteamAPI_ISteamUser_BIsTwoFactorEnabled
SteamAPI_ISteamUser_BLoggedOn
SteamAPI_ISteamUser_BeginAuthSession
SteamAPI_ISteamUser_CancelAuthTicket
SteamAPI_ISteamUser_DecompressVoice
SteamAPI_ISteamUser_EndAuthSession
SteamAPI_ISteamUser_GetAuthSessionTicket
SteamAPI_ISteamUser_GetAvailableVoice
SteamAPI_ISteamUser_GetDurationControl
SteamAPI_ISteamUser_GetEncryptedAppTicket
SteamAPI_ISteamUser_GetGameBadgeLevel
SteamAPI_ISteamUser_GetHSteamUser
SteamAPI_ISteamUser_GetMarketEligibility
SteamAPI_ISteamUser_GetPlayerSteamLevel
SteamAPI_ISteamUser_GetSteamID
SteamAPI_ISteamUser_GetUserDataFolder
SteamAPI_ISteamUser_GetVoice
SteamAPI_ISteamUser_GetVoiceOptimalSampleRate
SteamAPI_ISteamUser_InitiateGameConnection
SteamAPI_ISteamUser_RequestEncryptedAppTicket
SteamAPI_ISteamUser_RequestStoreAuthURL
SteamAPI_ISteamUser_StartVoiceRecording
SteamAPI_ISteamUser_StopVoiceRecording
SteamAPI_ISteamUser_TerminateGameConnection
SteamAPI_ISteamUser_TrackAppUsageEvent
SteamAPI_ISteamUser_UserHasLicenseForApp
SteamAPI_ISteamUtils_BOverlayNeedsPresent
SteamAPI_ISteamUtils_CheckFileSignature
SteamAPI_ISteamUtils_FilterText
SteamAPI_ISteamUtils_GetAPICallFailureReason
SteamAPI_ISteamUtils_GetAPICallResult
SteamAPI_ISteamUtils_GetAppID
SteamAPI_ISteamUtils_GetCSERIPPort
SteamAPI_ISteamUtils_GetConnectedUniverse
SteamAPI_ISteamUtils_GetCurrentBatteryPower
SteamAPI_ISteamUtils_GetEnteredGamepadTextInput
SteamAPI_ISteamUtils_GetEnteredGamepadTextLength
SteamAPI_ISteamUtils_GetIPCCallCount
SteamAPI_ISteamUtils_GetIPCountry
SteamAPI_ISteamUtils_GetImageRGBA
SteamAPI_ISteamUtils_GetImageSize
SteamAPI_ISteamUtils_GetSecondsSinceAppActive
SteamAPI_ISteamUtils_GetSecondsSinceComputerActive
SteamAPI_ISteamUtils_GetServerRealTime
SteamAPI_ISteamUtils_GetSteamUILanguage
SteamAPI_ISteamUtils_InitFilterText
SteamAPI_ISteamUtils_IsAPICallCompleted
SteamAPI_ISteamUtils_IsOverlayEnabled
SteamAPI_ISteamUtils_IsSteamChinaLauncher
SteamAPI_ISteamUtils_IsSteamInBigPictureMode
SteamAPI_ISteamUtils_IsSteamRunningInVR
SteamAPI_ISteamUtils_IsVRHeadsetStreamingEnabled
SteamAPI_ISteamUtils_SetOverlayNotificationInset
SteamAPI_ISteamUtils_SetOverlayNotificationPosition
SteamAPI_ISteamUtils_SetVRHeadsetStreamingEnabled
SteamAPI_ISteamUtils_SetWarningMessageHook
SteamAPI_ISteamUtils_ShowGamepadTextInput
SteamAPI_ISteamUtils_StartVRDashboard
SteamAPI_ISteamVideo_GetOPFSettings
SteamAPI_ISteamVideo_GetOPFStringForApp
SteamAPI_ISteamVideo_GetVideoURL
SteamAPI_ISteamVideo_IsBroadcasting
SteamAPI_Init
SteamAPI_InitAnonymousUser
SteamAPI_InitSafe
SteamAPI_IsSteamRunning
SteamAPI_RegisterCallResult
SteamAPI_RegisterCallback
SteamAPI_ReleaseCurrentThreadMemory
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamAPI_SetBreakpadAppID
SteamAPI_SetMiniDumpComment
SteamAPI_SetTryCatchCallbacks
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_UnregisterCallback
SteamAPI_UseBreakpadCrashHandler
SteamAPI_WriteMiniDump
SteamClient
SteamGameServer_BSecure
SteamGameServer_GetHSteamPipe
SteamGameServer_GetHSteamUser
SteamGameServer_GetIPCCallCount
SteamGameServer_GetSteamID
SteamGameServer_InitSafe
SteamGameServer_RunCallbacks
SteamGameServer_Shutdown
SteamInternal_ContextInit
SteamInternal_CreateInterface
SteamInternal_FindOrCreateGameServerInterface
SteamInternal_FindOrCreateUserInterface
SteamInternal_GameServer_Init
Steam_GetHSteamUserCurrent
Steam_RegisterInterfaceFuncs
Steam_RunCallbacks
g_pSteamClientGameServer
Name
.text
Size
141KB
Virtual Size
140KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
109KB
Virtual Size
108KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
11KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
x64/tradingnetworkingsockets.dll
- IMPHASH e917d42bcc53c047e3b944d762080d33
- SHA256 fc4a65ff603bf1f4bfe323de1866145ae1e006aa656799fd134dfa63d92d47c1
- MD5 3cf26ce759c5e261fe3ecc6451b8b08e
- SHA1 b5da110034fe394a4020367404534903764473fe
- SHA512 e7b543483f38bb6338490b5c8f5da6f95e0d78b45f2b26d898cc3b58cf7c359952bfe413414cb6cd1532c3c6fd7a860026b2bec7b6d0ddfbee9a1385a62e14f2
- SSDEEP 49152:kGtlqhcIU6ilVwASObX9F+LWDumqrJjAZVT4kmrqEUAYVxkG3q+XRQsmqkALD4z4:M+dl7+8z1mqkA8lv0bH1bBGZZs
- MD5 SHA1 SHA512 SSDEEP
-
Insecure Codesign Algorithm
File was Codesigned using an insecure algorithm.
Digest
fa:8a:01:bb:57:5d:f5:1e:0c:89:2b:3d:f2:dd:29:b9:31:92:f0:e3
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Chains
Aug 10, 2022
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
05:9b:1b:57:9e:8e:21:32:e2:39:07:bd:a7:77:75:5c
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2013 - Jan 15, 2038
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
CN=Valve Corp.,O=Valve Corp.,L=Bellevue,ST=Washington,C=US
Serial Number
06:89:b3:bc:eb:44:09:89:0a:32:d7:19:76:b1:32:a4
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 7, 2021 - Oct 9, 2024
Minor OS version
0
Major OS version
6
Entry point
2916528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
c:\buildslave\sdr_public_win64\build\obj\steamnetworkingsockets_Release_x642019\steamnetworkingsockets.pdb
kernel32
LoadLibraryA
CloseHandle
RaiseException
GetLastError
SetEvent
WaitForSingleObject
CreateEventA
GetCurrentThread
GetCurrentThreadId
SetThreadPriority
LocalFree
FormatMessageA
WideCharToMultiByte
GetProcAddress
QueryPerformanceFrequency
QueryPerformanceCounter
TerminateProcess
HeapSize
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetFileSizeEx
GetFullPathNameW
SetEndOfFile
SetStdHandle
SetFilePointerEx
FlushFileBuffers
GetCurrentProcess
IsDebuggerPresent
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
SetLastError
MultiByteToWideChar
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RtlVirtualUnwind
GetCurrentProcessId
GetSystemTimeAsFileTime
DeleteFiber
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
WaitForSingleObjectEx
GetExitCodeThread
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionEx
TryEnterCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
InitOnceBeginInitialize
InitOnceComplete
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InitializeSListHead
RtlPcToFileHeader
RtlUnwindEx
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ReadFile
SetEnvironmentVariableW
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetConsoleOutputCP
ExitProcess
SetConsoleCtrlHandler
GetModuleFileNameW
HeapFree
HeapAlloc
HeapReAlloc
CompareStringW
LCMapStringW
ws2_32
WSASendTo
WSAEventSelect
WSAEnumNetworkEvents
WSAGetLastError
getaddrinfo
socket
setsockopt
recvfrom
ntohl
htonl
getsockname
freeaddrinfo
gethostname
WSACleanup
ioctlsocket
closesocket
bind
WSAStartup
recv
send
WSASetLastError
winmm
timeBeginPeriod
timeEndPeriod
iphlpapi
GetAdaptersAddresses
bcrypt
BCryptGenRandom
user32
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxW
advapi32
ReportEventW
RegisterEventSourceW
DeregisterEventSource
SteamDatagramClient_Init
SteamDatagramClient_InitSteam_InternalV1
SteamDatagramClient_Kill
SteamDatagramClient_SetCredentialsDurableCacheCallbacks
SteamDatagramServer_Init
SteamDatagramServer_InitSteam_InternalV1
SteamDatagramServer_Kill
SteamDatagram_GetNetworkConfigURL
SteamDatagram_Internal_SteamAPIKludge
SteamDatagram_SetAppID
SteamDatagram_SetNetworkConfig
SteamDatagram_SetUniverse
SteamGameServerNetworkingMessages_LibV2
SteamGameServerNetworkingSockets_LibV12
SteamNetworkingIPAddr_GetFakeIPType
SteamNetworkingIPAddr_ParseString
SteamNetworkingIPAddr_ToString
SteamNetworkingIdentity_ParseString
SteamNetworkingIdentity_ToString
SteamNetworkingMessages_LibV2
SteamNetworkingSockets_DefaultPreFormatDebugOutputHandler
SteamNetworkingSockets_LibV12
SteamNetworkingSockets_Poll
SteamNetworkingSockets_SetEnvironmentVariable
SteamNetworkingSockets_SetLockAcquiredCallback
SteamNetworkingSockets_SetLockHeldCallback
SteamNetworkingSockets_SetLockWaitWarningThreshold
SteamNetworkingSockets_SetManualPollMode
SteamNetworkingSockets_SetPreFormatDebugOutputHandler
SteamNetworkingSockets_SetServiceThreadInitCallback
SteamNetworkingUtils_GetIPv4FakeIPType
SteamNetworkingUtils_LibV4
Name
.text
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
885KB
Virtual Size
884KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
59KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
x86/api-ms-win-core-processthreads-l1-1-1.dll
- SHA256 e5ea2c21fb225090f7d0db6c6990d67b1558d8e834e86513bc8ba7a43c4e7b36
- MD5 29001f316ccfc800e2246743df9b15b3
- SHA1 dc734266648d3463c1f8d88c1ce7d900a4e3b26c
- SHA512 4cffc0c6f94fcd1155909993c622b9103abd7a7bce88742a10abd6a3496a334d667a39bb601f99eb174aa847d7dae056e0d9769754ca86320579b262a20a6599
- SSDEEP 384:WRtwDfIe9jWfhWC+Y3DGk8ZpH3GCJErra8o7Q+Y3DGUKn8JN77hhET:ape9A5DGkiRBEXaR70DGa3hqT
- MD5 SHA1 SHA512 SSDEEP
Digest
2b:7d:ca:c2:1d:8f:e4:ee:68:3f:55:68:6e:ee:d7:a5:55:c3:ae:9e:d8:56:10:32:f2:3b:00:77:cf:30:56:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
3a:0d:45:f4:86:4b:ac:8e:ed:e1:a8:ee:ce:8a:b3:ac:b3:80:83:c6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-processthreads-l1-1-1.pdb
FlushInstructionCache
GetCurrentProcessorNumber
GetCurrentProcessorNumberEx
GetCurrentThreadStackLimits
GetProcessHandleCount
GetProcessMitigationPolicy
GetThreadContext
GetThreadIdealProcessorEx
GetThreadTimes
IsProcessorFeaturePresent
OpenProcess
SetProcessMitigationPolicy
SetThreadContext
SetThreadIdealProcessorEx
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-profile-l1-1-0.dll
- SHA256 d00a0edace14715bf79dbd17b715d8a74a2300f0adb1f3fc137edfb7074c9b0a
- MD5 6ee66dca31c5cce57740d677c85b4ce7
- SHA1 8969db03f98f9548caf8e2d8c7f2f5cd7071f333
- SHA512 592e3b6c689a0d6c87079c54c3e13e6ee1fc0c5c770abc854040e85464687c46f0a558be22f8759dbc4a100810386ee379ffe4359cf9091d9afae548bc597be2
- SSDEEP 384:WiIWfhWx+Y3DGk8ZpH3GCJErcx3l/r7+Y3DGU78JN77hhC6UHR:doDGkiRBEWV/rxDGT3h06UHR
- MD5 SHA1 SHA512 SSDEEP
Digest
5f:3f:72:a9:0d:1b:b9:0f:31:df:c3:c2:81:ef:56:73:e3:d5:f3:b0:6f:40:dd:85:41:eb:20:5b:73:f5:08:f1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
c2:52:7c:b8:6d:76:c7:79:18:1c:fc:56:30:40:6f:11:ca:31:69:36
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-profile-l1-1-0.pdb
QueryPerformanceCounter
QueryPerformanceFrequency
Name
.rdata
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-rtlsupport-l1-1-0.dll
- SHA256 d11093fdc1d5c9213b9b2886ce91db3ded17ef8dae1615a8c7ffbc55b8e3f79b
- MD5 0069fd29263c0dd90314c48bbce852ef
- SHA1 dfb99c850a69e67e85f0a0985659f325bd8f84fc
- SHA512 71965e8dd2fd81d0c6dba4dbec8d2d1bfd4a644ef6bba4f6027de4bcdf9c07da16f27f2156c21b52e678c75f0a93a4bcbc3e1942f0a73f1eea5ff64b70662f70
- SSDEEP 384:WCGeVxWfhWD+Y3DGk8ZpH3GCJErYtN+Y3DGUO8JN77hhTew:3GeVmyDGkiRBEojDGa3h9ew
- MD5 SHA1 SHA512 SSDEEP
Digest
f5:ec:83:e1:f0:57:33:6d:ea:35:e3:a0:f2:f4:79:ec:45:81:9f:2e:35:73:b2:e7:8a:eb:de:11:f4:80:c9:5d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
64:e9:ed:cc:72:0c:b7:d1:30:dc:d9:d9:69:a4:24:77:16:31:95:79
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-rtlsupport-l1-1-0.pdb
RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlCompareMemory
RtlDeleteFunctionTable
RtlInstallFunctionTableCallback
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlRaiseException
RtlRestoreContext
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-string-l1-1-0.dll
- SHA256 3807db7acf1b40c797e4d4c14a12c3806346ae56b25e205e600be3e635c18d4f
- MD5 2e5c29fc652f432b89a1afe187736c4d
- SHA1 96f8480b9339411d5d8c94918e983523b1a55c56
- SHA512 fe1135532e18127f2cfefaaa4a19020d6c790374f648dc93383d58ee52b147d1451af01b8624234bd5d77abe2451eb3e15cbe72a19d283f00cf78c05c43041df
- SSDEEP 384:W4yMv9WfhWx+Y3DGk8ZpH3GCJEr4ey/+Y3DGU888JN77hhnY1:DyMvaIDGkiRBEsnDGX3hxY1
- MD5 SHA1 SHA512 SSDEEP
Digest
23:f7:59:ab:ab:36:6b:42:ba:c7:18:ac:2c:aa:8b:7d:2a:a3:03:60:d7:f7:eb:e4:3f:1e:80:a0:b4:c0:6d:a0
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
a4:dd:9d:4f:3d:e2:1f:37:9b:d2:36:25:fb:92:c5:dc:63:08:f3:97
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-string-l1-1-0.pdb
CompareStringEx
CompareStringOrdinal
CompareStringW
FoldStringW
GetStringTypeExW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
Name
.rdata
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-synch-l1-1-0.dll
- SHA256 8bb38a7a59fbaa792b3d5f34f94580429588c8c592929cbd307afd5579762abc
- MD5 979c67ba244e5328a1a2e588ff748e86
- SHA1 4c709ce527550eb7534cb6362afdb3623c98254e
- SHA512 49f3c3319aa462b445c6a0b816e10034f6e5a9cf1250ea30b348cfa1ef71525e9f62e2f13253f61375f51fc574847de0d509cffa95103771be356327d5fef90d
- SSDEEP 384:Wjdv3V0dfpkXc0vVaCWfhWt+Y3DGk8ZpH3GCJErHZpn+Y3DGUrUN8JN77hhYl:Wdv3VqpkXc0vVabkDGkiRBEtplDGEUq8
- MD5 SHA1 SHA512 SSDEEP
Digest
bd:2e:df:93:66:8f:63:8d:ba:91:83:45:84:44:22:43:bd:1e:59:5d:5b:63:12:fb:df:3e:63:d0:62:f9:c6:7e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
63:1f:d0:c3:03:31:f9:92:bc:68:de:99:6a:f4:ce:2a:06:6a:59:bf
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-synch-l1-1-0.pdb
AcquireSRWLockExclusive
AcquireSRWLockShared
CancelWaitableTimer
CreateEventA
CreateEventExA
CreateEventExW
CreateEventW
CreateMutexA
CreateMutexExA
CreateMutexExW
CreateMutexW
CreateSemaphoreExW
CreateWaitableTimerExW
DeleteCriticalSection
EnterCriticalSection
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSRWLock
LeaveCriticalSection
OpenEventA
OpenEventW
OpenMutexW
OpenSemaphoreW
OpenWaitableTimerW
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
SetCriticalSectionSpinCount
SetEvent
SetWaitableTimer
SetWaitableTimerEx
SleepEx
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-synch-l1-2-0.dll
- SHA256 9ac63682e03d55a5d18405d336634af080dd0003b565d12a39d6d71aaa989f48
- MD5 659e4febc208545a2e23c0c8b881a30d
- SHA1 11b890cc05c1e7c95f59eda4bb8ce8bc12b81591
- SHA512 010ab6d3971fabd2a956f891b8d9d20ef487e722443b2882a1a329830dc5c80d262e03a844cd3f5c3e4efcfbad72b9e1fbbf7d9dc6cf85ed034d84726946ce07
- SSDEEP 384:WHtZ36WfhW8+Y3DGk8ZpH3GCJEFxMDD+Y3DGEC8q8JN77hhFGT:EbDGkiRBEsJDGS13hj+
- MD5 SHA1 SHA512 SSDEEP
Digest
d5:7a:e9:28:76:29:a9:dd:7e:32:0b:ca:61:66:77:95:fc:93:7b:de:af:79:0e:5c:cf:df:10:01:19:98:22:76
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
75:ed:b7:f2:16:e8:88:7f:f3:08:76:dc:5d:c9:7c:2a:e4:6c:42:f4
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-synch-l1-2-0.pdb
DeleteSynchronizationBarrier
EnterSynchronizationBarrier
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitOnceInitialize
InitializeConditionVariable
InitializeSynchronizationBarrier
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-sysinfo-l1-1-0.dll
- SHA256 1fe918979f1653d63bb713d4716910d192cd09f50017a6ecb4ce026ed6285df9
- MD5 cef4b9f680faae322170b961a3421c5b
- SHA1 dd89a2d355df989bbd8648789472bfe9c14afcd5
- SHA512 f56617290d4ac25231631d708a6c8b003bdd358bae9672f7dee539a96b292c13e04c65ba5f05937c52f73288eb3dd7cba479ed030942a0d9d3a15512548fa4a9
- SSDEEP 384:WBTnWfhWt+Y3DGk8ZpH3GCJEFxqIDh/h+Y3DGER6vJ8JN77hhHWT:0TsIDGkiRBE+IxfDGM6vW3h5WT
- MD5 SHA1 SHA512 SSDEEP
Digest
12:27:75:72:0b:20:29:90:7d:8c:9e:91:41:f4:60:f6:13:7f:23:e6:db:39:b5:52:53:24:b2:ff:c5:aa:82:6c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
cb:85:e7:0e:53:77:0d:c1:23:1e:66:5c:b5:7f:87:65:9a:ef:64:d1
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-sysinfo-l1-1-0.pdb
GetComputerNameExA
GetComputerNameExW
GetLocalTime
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTickCount
GetTickCount64
GetVersion
GetVersionExA
GetVersionExW
GetWindowsDirectoryA
GetWindowsDirectoryW
GlobalMemoryStatusEx
SetLocalTime
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-timezone-l1-1-0.dll
- SHA256 a108a8f20ded00e742a1f818ef00eb425990b6b24a2bcd060dea4d7f06d3f165
- MD5 69df2cce4528c9e38d04a461ba1f992b
- SHA1 bb1d0da76cf696acf2e0f4e03e6d63fbad4325aa
- SHA512 4d02eecdda0fffc10d5509830079984c7a887b4ca3a80359aa56117b302dcfa594b0710c9f415c823d1674b5c689d31aade44f21750ccd7d53010e67f0b6f0d2
- SSDEEP 384:WGOWfhWc+Y3DGk8ZpH3GCJEFxi+3T7Tu+Y3DGEu8JN77hh2KI:5XDGkiRBEm+uDGQ3h7I
- MD5 SHA1 SHA512 SSDEEP
Digest
34:6e:05:70:ac:35:c5:e2:d4:9f:8e:22:79:f9:17:3e:2b:3a:d6:d9:78:48:5c:de:73:97:04:6d:84:13:14:35
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
79:39:32:96:a7:50:8e:b4:c7:6d:f9:16:21:28:3e:64:08:f9:7e:77
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-timezone-l1-1-0.pdb
EnumDynamicTimeZoneInformation
FileTimeToSystemTime
GetDynamicTimeZoneInformation
GetDynamicTimeZoneInformationEffectiveYears
GetTimeZoneInformation
GetTimeZoneInformationForYear
SetDynamicTimeZoneInformation
SetTimeZoneInformation
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
SystemTimeToTzSpecificLocalTimeEx
TzSpecificLocalTimeToSystemTime
TzSpecificLocalTimeToSystemTimeEx
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-core-util-l1-1-0.dll
- SHA256 68bd9c086d210eb14e78f00988ba88ceaf9056c8f10746ab024990f8512a2296
- MD5 c6553959aecd5bac01c0673cfdf86b68
- SHA1 045585659843f7214c79659a88302996bfb480a2
- SHA512 ae8e42a428202d05fea4f1e6a4d3b919b644a792567f876b0fc392b1cddb856547b4c3b433c002fded6df4d4daec8fb7235f30d1ff9f42943d9e2557ade364d6
- SSDEEP 384:WyzWWfhW++Y3DGk8ZpH3GCJErst5+Y3DGU1a8JN77hh8T:35DGkiRBEQpDGw3hKT
- MD5 SHA1 SHA512 SSDEEP
Digest
66:aa:33:af:38:5e:81:d6:7a:9d:39:f9:d7:b9:63:54:26:b3:cc:8e:4c:9c:e0:27:a7:6a:78:a9:3d:f9:8b:23
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
30:50:36:e1:d2:8a:3a:ae:51:88:03:ee:e4:39:44:d8:86:85:29:de
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-core-util-l1-1-0.pdb
Beep
DecodePointer
DecodeSystemPointer
EncodePointer
EncodeSystemPointer
Name
.rdata
Size
1024B
Virtual Size
568B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-conio-l1-1-0.dll
- SHA256 4aeeae0ac9f6c1b0b8835067ea3b7fc429f353565f18de7858f4ea5d6f72072e
- MD5 7190cbfad2d7773d3b88ccc25533a651
- SHA1 71fe2bacc14b433d51328ea0810c1a030c80d844
- SHA512 b314666c400268bf261c5f9e9966ad0680435241e7a24d85b28ae4405d798b80eedb65ed8db7e8d93df90f886a6719a8b7ace8c25d0429392bc061868890c40c
- SSDEEP 384:WL5WfhWO+Y3DGk8ZpH3GCJErBf+Y3DGUCU8JN77hhIw:FVDGkiRBELDGfX3hKw
- MD5 SHA1 SHA512 SSDEEP
Digest
d2:50:df:4e:50:dd:3b:af:f7:11:ea:2d:4b:2d:fb:a7:12:7b:a5:80:40:51:52:65:2f:89:14:79:4f:e7:7c:ba
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
e1:e6:e3:77:f5:45:0f:39:9e:9f:35:cf:71:5a:fc:78:1f:bb:99:6c
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-conio-l1-1-0.pdb
__conio_common_vcprintf
__conio_common_vcprintf_p
__conio_common_vcprintf_s
__conio_common_vcscanf
__conio_common_vcwprintf
__conio_common_vcwprintf_p
__conio_common_vcwprintf_s
__conio_common_vcwscanf
_cgets
_cgets_s
_cgetws
_cgetws_s
_cputs
_cputws
_getch
_getch_nolock
_getche
_getche_nolock
_getwch
_getwch_nolock
_getwche
_getwche_nolock
_putch
_putch_nolock
_putwch
_putwch_nolock
_ungetch
_ungetch_nolock
_ungetwch
_ungetwch_nolock
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-convert-l1-1-0.dll
- SHA256 77b69e829bdc26c7b2474be6b8a2382345b2957e23046897e40992a8157a7ba1
- MD5 3e415147ccd7c712618868bdd7a200cd
- SHA1 b332f29915d846519dcb725d39e8c50604d7b414
- SHA512 7e7e50f148414f8a84b4c39d3c7c1e0952f86f95873f3abc25b7f08574bbcce41394a59451868020b178bf68df12615bd356677e8c935c1185c5d07d15e61896
- SSDEEP 384:WluyxWfhWK+Y3DGk8ZpH3GCJEFxkNN0O+Y3DGEhy8JN77hhHL:RhDGkiRBEqDGsd3h9L
- MD5 SHA1 SHA512 SSDEEP
Digest
af:39:f7:9f:d5:a1:46:43:f5:a6:cd:a6:17:8d:2c:bc:99:5b:17:b6:f9:26:2b:86:77:07:e4:0f:72:7d:9f:44
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
6e:0c:10:bd:e8:f1:57:a4:46:f6:44:ba:7e:c8:8b:38:cd:fe:0e:9e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-convert-l1-1-0.pdb
__toascii
_atodbl
_atodbl_l
_atof_l
_atoflt
_atoflt_l
_atoi64
_atoi64_l
_atoi_l
_atol_l
_atoldbl
_atoldbl_l
_atoll_l
_ecvt
_ecvt_s
_fcvt
_fcvt_s
_gcvt
_gcvt_s
_i64toa
_i64toa_s
_i64tow
_i64tow_s
_itoa
_itoa_s
_itow
_itow_s
_ltoa
_ltoa_s
_ltow
_ltow_s
_strtod_l
_strtof_l
_strtoi64
_strtoi64_l
_strtoimax_l
_strtol_l
_strtold_l
_strtoll_l
_strtoui64
_strtoui64_l
_strtoul_l
_strtoull_l
_strtoumax_l
_ui64toa
_ui64toa_s
_ui64tow
_ui64tow_s
_ultoa
_ultoa_s
_ultow
_ultow_s
_wcstod_l
_wcstof_l
_wcstoi64
_wcstoi64_l
_wcstoimax_l
_wcstol_l
_wcstold_l
_wcstoll_l
_wcstombs_l
_wcstombs_s_l
_wcstoui64
_wcstoui64_l
_wcstoul_l
_wcstoull_l
_wcstoumax_l
_wctomb_l
_wctomb_s_l
_wtof
_wtof_l
_wtoi
_wtoi64
_wtoi64_l
_wtoi_l
_wtol
_wtol_l
_wtoll
_wtoll_l
atof
atoi
atol
atoll
btowc
c16rtomb
c32rtomb
mbrtoc16
mbrtoc32
mbrtowc
mbsrtowcs
mbsrtowcs_s
mbstowcs
mbstowcs_s
mbtowc
strtod
strtof
strtoimax
strtol
strtold
strtoll
strtoul
strtoull
strtoumax
wcrtomb
wcrtomb_s
wcsrtombs
wcsrtombs_s
wcstod
wcstof
wcstoimax
wcstol
wcstold
wcstoll
wcstombs
wcstombs_s
wcstoul
wcstoull
wcstoumax
wctob
wctomb
wctomb_s
wctrans
Name
.rdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-environment-l1-1-0.dll
- SHA256 6c9c0dc7b36afe07dfb07dd373fc757ff25df4793e6384d7a6021471a474f0b9
- MD5 ad0cbb9978fcf60d9e9ca45de6a28d30
- SHA1 65549d9d7ee72de7d0cc356f92ad22eeb8dc18cc
- SHA512 aaf4919e7629cd0bcf52283d578214043a4bdf6597a7d808dfcecd5fa1ecbd0b1395c60a165c575d20ca42928500815e14837b9e05530a667c6898e14243d64d
- SSDEEP 384:WgWfhWx+Y3DGk8ZpH3GCJEFxHiA6+Y3DGEi8JN77hhksg:CsDGkiRBEJeDG03hCD
- MD5 SHA1 SHA512 SSDEEP
Digest
12:50:ab:7d:96:b1:03:e5:9c:33:57:e5:a2:a0:b0:20:c6:70:41:b6:fc:13:b7:33:4e:95:4a:ec:63:2c:b4:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
c5:39:0c:5d:fd:6d:02:3f:78:e0:49:32:92:57:8b:49:82:d4:9a:26
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-environment-l1-1-0.pdb
__p__environ
__p__wenviron
_dupenv_s
_putenv
_putenv_s
_searchenv
_searchenv_s
_wdupenv_s
_wgetcwd
_wgetdcwd
_wgetenv
_wgetenv_s
_wputenv
_wputenv_s
_wsearchenv
_wsearchenv_s
getenv
getenv_s
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-filesystem-l1-1-0.dll
- SHA256 85b1b189ce9e3c6f4d2efdd4cd82b0807f681bea2d28851caaf545990de99000
- MD5 14f407d94c77b1b0039ae2c89b07a2ff
- SHA1 528b91a8a8611da45463fac0a6bd5c58233f8fbc
- SHA512 152b97a656acd984592bf58854222ec97c661f9f8d19557ea03501457fb5a07821f90d332f21b1b51a5bce5ab84f862354b8ee21c7c1f6b7aa1c127f4a73ab5d
- SSDEEP 384:Wcq6nWm5CpWfhW++Y3DGk8ZpH3GCJErNi4H+Y3DGUfhd8JN77hhcu:G6nWm5CeBDGkiRBEp5DGk63hqu
- MD5 SHA1 SHA512 SSDEEP
Digest
fc:47:2d:ca:6b:a1:9d:72:3c:5f:36:47:b3:d2:7a:57:1a:d1:90:9b:a8:d2:90:fd:0a:65:1c:c0:c9:09:c1:97
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
f9:a5:18:70:cc:4c:b9:ed:b4:4d:b8:5d:43:4e:52:ff:7d:59:3a:56
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-filesystem-l1-1-0.pdb
_access
_access_s
_chdir
_chdrive
_chmod
_findclose
_findfirst32
_findfirst32i64
_findfirst64
_findfirst64i32
_findnext32
_findnext32i64
_findnext64
_findnext64i32
_fstat32
_fstat32i64
_fstat64
_fstat64i32
_fullpath
_getdiskfree
_getdrive
_getdrives
_lock_file
_makepath
_makepath_s
_mkdir
_rmdir
_splitpath
_splitpath_s
_stat32
_stat32i64
_stat64
_stat64i32
_umask
_umask_s
_unlink
_unlock_file
_waccess
_waccess_s
_wchdir
_wchmod
_wfindfirst32
_wfindfirst32i64
_wfindfirst64
_wfindfirst64i32
_wfindnext32
_wfindnext32i64
_wfindnext64
_wfindnext64i32
_wfullpath
_wmakepath
_wmakepath_s
_wmkdir
_wremove
_wrename
_wrmdir
_wsplitpath
_wsplitpath_s
_wstat32
_wstat32i64
_wstat64
_wstat64i32
_wunlink
remove
rename
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-heap-l1-1-0.dll
- SHA256 0166edfb23cfc77519c97862a538a69b5d805d6a17d6e235f46927af5c04b3c9
- MD5 9c373c00ac3138233bdf1655c7be8e86
- SHA1 ee38f868e32950d1b8185249edc6ad4e1bc5592f
- SHA512 d2f56b3169c1fea1a604523b2215dbad02c6306bd804445b367756f288310554dd049aefd024babc26a3b270b8aede8b10e5ec8d80e772d3d1076b8013491067
- SSDEEP 384:WgY3eRWfhWn+Y3DGk8ZpH3GCJErTpTX+Y3DGUm8JN77hhwJ:TGeDGkiRBERTVDGm3hiJ
- MD5 SHA1 SHA512 SSDEEP
Digest
6e:d6:5e:72:3e:36:d8:eb:18:5a:15:7c:b7:d1:d7:a2:94:3a:0a:f8:1d:12:ef:82:99:65:78:35:67:28:54:40
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
14:b3:5f:6d:73:dc:fc:c0:a9:10:3a:cd:c2:7b:b5:5b:25:79:6e:80
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-heap-l1-1-0.pdb
_aligned_free
_aligned_malloc
_aligned_msize
_aligned_offset_malloc
_aligned_offset_realloc
_aligned_offset_recalloc
_aligned_realloc
_aligned_recalloc
_callnewh
_calloc_base
_expand
_free_base
_get_heap_handle
_heapchk
_heapmin
_heapwalk
_malloc_base
_msize
_query_new_handler
_query_new_mode
_realloc_base
_recalloc
_set_new_mode
calloc
free
malloc
realloc
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-locale-l1-1-0.dll
- SHA256 f16447b5fc7fe6fb8a6699a3cef1b2b8ba92d408579bcc272d3dd76acd801e2a
- MD5 c5d747f96237b6e9aa85c58745d30c80
- SHA1 c6ad21597265faf25ea8d7f09577f3e6f4f7be10
- SHA512 5bcee06d62633ecdfdf5dd1bf92ff9278f535dc5f21bfe36faaca15e378beb4da6be7ba9767569119fbf9f7383ffdb3a4a17c99d5918a64b8e12926ac0ec3140
- SSDEEP 384:WVWfhW2+Y3DGk8ZpH3GCJErYIcc+Y3DGUA8JN77hhKdf:JxDGkiRBE44DGk3h09
- MD5 SHA1 SHA512 SSDEEP
Digest
5a:45:92:9b:72:0d:e4:40:22:56:a2:e1:f6:2a:62:af:87:6b:ea:09:d2:31:d1:f8:19:7d:a0:d3:5a:75:b8:04
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
82:4d:d6:e4:c3:34:d8:4e:2e:38:55:84:0c:2d:a8:9f:20:c3:1b:a7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-locale-l1-1-0.pdb
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
___mb_cur_max_func
___mb_cur_max_l_func
__initialize_lconv_for_unsigned_char
__pctype_func
__pwctype_func
_configthreadlocale
_create_locale
_free_locale
_get_current_locale
_getmbcp
_lock_locales
_setmbcp
_unlock_locales
_wcreate_locale
_wsetlocale
localeconv
setlocale
Name
.rdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-math-l1-1-0.dll
- SHA256 c7115159babdaa1f52e478e67b4e612da2332fda4e4036999b29425fe303b6e8
- MD5 bc418a3461c5fdfa1a0d75f7e03d08a7
- SHA1 5cfefa62226f117b7e2fe58961269294eb62b84c
- SHA512 4c9f3d461a5fc42d829d517ef523423ceb18f6667e6f2d83f1e5cd645a359d32b58ac8652ea734f567ed3b9e2999f358bf0e95bf38265df7abe3fe4b2f5fa978
- SSDEEP 384:WXQUbM4Oe59Ckb1hgmLVWfhWC+Y3DGk8ZpH3GCJEr0a6eOq+Y3DGUOe8JN77hhoq:SRMq59Bb1jyRDGkiRBEQeOODGp3hqQ
- MD5 SHA1 SHA512 SSDEEP
Digest
3a:0e:44:23:c0:fa:ef:3c:a2:b9:75:e9:78:49:ba:5a:76:a5:a1:f0:55:ca:52:1a:c2:9d:09:8f:b9:66:36:9d
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
33:29:11:ca:36:3c:eb:96:9c:d1:1e:07:b1:15:13:e0:5d:32:92:a8
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-math-l1-1-0.pdb
_Cbuild
_Cmulcc
_Cmulcr
_FCbuild
_FCmulcc
_FCmulcr
_LCbuild
_LCmulcc
_LCmulcr
__setusermatherr
_cabs
_chgsign
_chgsignf
_copysign
_copysignf
_d_int
_dclass
_dexp
_dlog
_dnorm
_dpcomp
_dpoly
_dscale
_dsign
_dsin
_dtest
_dunscale
_except1
_fd_int
_fdclass
_fdexp
_fdlog
_fdnorm
_fdopen
_fdpcomp
_fdpoly
_fdscale
_fdsign
_fdsin
_fdtest
_fdunscale
_finite
_finitef
_fpclass
_fpclassf
_get_FMA3_enable
_hypot
_hypotf
_isnan
_isnanf
_j0
_j1
_jn
_ld_int
_ldclass
_ldexp
_ldlog
_ldpcomp
_ldpoly
_ldscale
_ldsign
_ldsin
_ldtest
_ldunscale
_logb
_logbf
_nextafter
_nextafterf
_scalb
_scalbf
_set_FMA3_enable
_y0
_y1
_yn
acos
acosf
acosh
acoshf
acoshl
asin
asinf
asinh
asinhf
asinhl
atan
atan2
atan2f
atanf
atanh
atanhf
atanhl
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
ceilf
cexp
cexpf
cexpl
cimag
cimagf
cimagl
clog
clog10
clog10f
clog10l
clogf
clogl
conj
conjf
conjl
copysign
copysignf
copysignl
cos
cosf
cosh
coshf
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
erf
erfc
erfcf
erfcl
erff
erfl
exp
exp2
exp2f
exp2l
expf
expm1
expm1f
expm1l
fabs
fdim
fdimf
fdiml
floor
floorf
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmin
fminf
fminl
fmod
fmodf
frexp
hypot
ilogb
ilogbf
ilogbl
ldexp
lgamma
lgammaf
lgammal
llrint
llrintf
llrintl
llround
llroundf
llroundl
log
log10
log10f
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
logf
lrint
lrintf
lrintl
lround
lroundf
lroundl
modf
modff
nan
nanf
nanl
nearbyint
nearbyintf
nearbyintl
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
norm
normf
norml
pow
powf
remainder
remainderf
remainderl
remquo
remquof
remquol
rint
rintf
rintl
round
roundf
roundl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
sin
sinf
sinh
sinhf
sqrt
sqrtf
tan
tanf
tanh
tanhf
tgamma
tgammaf
tgammal
trunc
truncf
truncl
Name
.rdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-multibyte-l1-1-0.dll
- SHA256 c6b4e1d903b3cc83bfaffbe4e82eee634cff8f97f12217caa45b464ddc4e1455
- MD5 9e9c6f83a015029808f5257f7b7e39c6
- SHA1 5674192eb60eb152773fe0d50161f32759e2ea0f
- SHA512 6e124732646cbe95ef94773d57b08c68a399854f906b14f15996bb12400d5e92b34596c38795a3ba4cdf8db4e8dd5ad486890634951a4686c6679b486ab19cb0
- SSDEEP 384:WPy+Kr6aLPmIHJI6/CpG3t2G3t4odXLVWfhWS+Y3DGk8ZpH3GCJErRMOnR+Y3DG3:uZKrZPmIHJI6kVDGkiRBE9nDGa3hYV
- MD5 SHA1 SHA512 SSDEEP
Digest
14:80:01:b3:58:1c:85:61:5d:26:39:4b:bf:53:f3:3a:df:7e:95:a1:d9:b9:09:26:4e:2d:38:3c:fa:3d:ac:d8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
07:eb:e8:45:ea:ad:1d:74:5f:21:29:93:a5:86:52:10:29:e7:63:5d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-multibyte-l1-1-0.pdb
__p__mbcasemap
__p__mbctype
_ismbbalnum
_ismbbalnum_l
_ismbbalpha
_ismbbalpha_l
_ismbbblank
_ismbbblank_l
_ismbbgraph
_ismbbgraph_l
_ismbbkalnum
_ismbbkalnum_l
_ismbbkana
_ismbbkana_l
_ismbbkprint
_ismbbkprint_l
_ismbbkpunct
_ismbbkpunct_l
_ismbblead
_ismbblead_l
_ismbbprint
_ismbbprint_l
_ismbbpunct
_ismbbpunct_l
_ismbbtrail
_ismbbtrail_l
_ismbcalnum
_ismbcalnum_l
_ismbcalpha
_ismbcalpha_l
_ismbcblank
_ismbcblank_l
_ismbcdigit
_ismbcdigit_l
_ismbcgraph
_ismbcgraph_l
_ismbchira
_ismbchira_l
_ismbckata
_ismbckata_l
_ismbcl0
_ismbcl0_l
_ismbcl1
_ismbcl1_l
_ismbcl2
_ismbcl2_l
_ismbclegal
_ismbclegal_l
_ismbclower
_ismbclower_l
_ismbcprint
_ismbcprint_l
_ismbcpunct
_ismbcpunct_l
_ismbcspace
_ismbcspace_l
_ismbcsymbol
_ismbcsymbol_l
_ismbcupper
_ismbcupper_l
_ismbslead
_ismbslead_l
_ismbstrail
_ismbstrail_l
_mbbtombc
_mbbtombc_l
_mbbtype
_mbbtype_l
_mbcasemap
_mbccpy
_mbccpy_l
_mbccpy_s
_mbccpy_s_l
_mbcjistojms
_mbcjistojms_l
_mbcjmstojis
_mbcjmstojis_l
_mbclen
_mbclen_l
_mbctohira
_mbctohira_l
_mbctokata
_mbctokata_l
_mbctolower
_mbctolower_l
_mbctombb
_mbctombb_l
_mbctoupper
_mbctoupper_l
_mblen_l
_mbsbtype
_mbsbtype_l
_mbscat_s
_mbscat_s_l
_mbschr
_mbschr_l
_mbscmp
_mbscmp_l
_mbscoll
_mbscoll_l
_mbscpy_s
_mbscpy_s_l
_mbscspn
_mbscspn_l
_mbsdec
_mbsdec_l
_mbsdup
_mbsicmp
_mbsicmp_l
_mbsicoll
_mbsicoll_l
_mbsinc
_mbsinc_l
_mbslen
_mbslen_l
_mbslwr
_mbslwr_l
_mbslwr_s
_mbslwr_s_l
_mbsnbcat
_mbsnbcat_l
_mbsnbcat_s
_mbsnbcat_s_l
_mbsnbcmp
_mbsnbcmp_l
_mbsnbcnt
_mbsnbcnt_l
_mbsnbcoll
_mbsnbcoll_l
_mbsnbcpy
_mbsnbcpy_l
_mbsnbcpy_s
_mbsnbcpy_s_l
_mbsnbicmp
_mbsnbicmp_l
_mbsnbicoll
_mbsnbicoll_l
_mbsnbset
_mbsnbset_l
_mbsnbset_s
_mbsnbset_s_l
_mbsncat
_mbsncat_l
_mbsncat_s
_mbsncat_s_l
_mbsnccnt
_mbsnccnt_l
_mbsncmp
_mbsncmp_l
_mbsncoll
_mbsncoll_l
_mbsncpy
_mbsncpy_l
_mbsncpy_s
_mbsncpy_s_l
_mbsnextc
_mbsnextc_l
_mbsnicmp
_mbsnicmp_l
_mbsnicoll
_mbsnicoll_l
_mbsninc
_mbsninc_l
_mbsnlen
_mbsnlen_l
_mbsnset
_mbsnset_l
_mbsnset_s
_mbsnset_s_l
_mbspbrk
_mbspbrk_l
_mbsrchr
_mbsrchr_l
_mbsrev
_mbsrev_l
_mbsset
_mbsset_l
_mbsset_s
_mbsset_s_l
_mbsspn
_mbsspn_l
_mbsspnp
_mbsspnp_l
_mbsstr
_mbsstr_l
_mbstok
_mbstok_l
_mbstok_s
_mbstok_s_l
_mbstowcs_l
_mbstowcs_s_l
_mbstrlen
_mbstrlen_l
_mbstrnlen
_mbstrnlen_l
_mbsupr
_mbsupr_l
_mbsupr_s
_mbsupr_s_l
_mbtowc_l
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-private-l1-1-0.dll
- SHA256 696c10112d8b86a46e5057cbd0bf40728e79c6bb49cda1f2c67fe45d0fc1258d
- MD5 ad8d9a6ea592a6c8a78c67a805cec952
- SHA1 3e9f35013044be456f33e300418453ab12c70df8
- SHA512 31c1b5717432b67e6b150911747f34e8099c1a0870262bb3b5d3ac5c9e28b3b08e4239bd105408318806f983b3fcd10e617b2385511c46efe9fe58a9cd4a7067
- SSDEEP 1536:b/XeuJDe5c4bFe2JyhcvxXWpD7d3334BkZn+P7niDv3hO3:DXeuJDe5c4bFe2JyhcvxXWpD7d3334BD
- MD5 SHA1 SHA512 SSDEEP
Digest
d5:8f:19:a7:1e:bb:8d:26:d4:25:6c:ec:c1:c1:7f:98:c4:a6:fb:ab:28:b6:f5:96:0f:8f:e9:4f:79:e7:d0:a8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
7a:e3:ab:1d:fc:78:38:8e:30:00:80:bc:88:2f:bb:19:eb:17:50:63
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-private-l1-1-0.pdb
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_GetImageBase
_GetThrowImageBase
_IsExceptionObjectToBeDestroyed
_SetImageBase
_SetThrowImageBase
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__dcrt_get_wide_environment_from_os
__dcrt_initial_narrow_environment
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_o__Getdays
_o__Getmonths
_o__Gettnames
_o__Strftime
_o__W_Getdays
_o__W_Getmonths
_o__W_Gettnames
_o__Wcsftime
_o____lc_codepage_func
_o____lc_collate_cp_func
_o____lc_locale_name_func
_o____mb_cur_max_func
_o___acrt_iob_func
_o___conio_common_vcprintf
_o___conio_common_vcprintf_p
_o___conio_common_vcprintf_s
_o___conio_common_vcscanf
_o___conio_common_vcwprintf
_o___conio_common_vcwprintf_p
_o___conio_common_vcwprintf_s
_o___conio_common_vcwscanf
_o___daylight
_o___dstbias
_o___fpe_flt_rounds
_o___p___argc
_o___p___argv
_o___p___wargv
_o___p__acmdln
_o___p__commode
_o___p__environ
_o___p__fmode
_o___p__mbcasemap
_o___p__mbctype
_o___p__pgmptr
_o___p__wcmdln
_o___p__wenviron
_o___p__wpgmptr
_o___pctype_func
_o___pwctype_func
_o___std_exception_copy
_o___std_exception_destroy
_o___std_type_info_destroy_list
_o___std_type_info_name
_o___stdio_common_vfprintf
_o___stdio_common_vfprintf_p
_o___stdio_common_vfprintf_s
_o___stdio_common_vfscanf
_o___stdio_common_vfwprintf
_o___stdio_common_vfwprintf_p
_o___stdio_common_vfwprintf_s
_o___stdio_common_vfwscanf
_o___stdio_common_vsnprintf_s
_o___stdio_common_vsnwprintf_s
_o___stdio_common_vsprintf
_o___stdio_common_vsprintf_p
_o___stdio_common_vsprintf_s
_o___stdio_common_vsscanf
_o___stdio_common_vswprintf
_o___stdio_common_vswprintf_p
_o___stdio_common_vswprintf_s
_o___stdio_common_vswscanf
_o___timezone
_o___tzname
_o___wcserror
_o__access
_o__access_s
_o__aligned_free
_o__aligned_malloc
_o__aligned_msize
_o__aligned_offset_malloc
_o__aligned_offset_realloc
_o__aligned_offset_recalloc
_o__aligned_realloc
_o__aligned_recalloc
_o__atodbl
_o__atodbl_l
_o__atof_l
_o__atoflt
_o__atoflt_l
_o__atoi64
_o__atoi64_l
_o__atoi_l
_o__atol_l
_o__atoldbl
_o__atoldbl_l
_o__atoll_l
_o__beep
_o__beginthread
_o__beginthreadex
_o__cabs
_o__callnewh
_o__calloc_base
_o__cexit
_o__cgets
_o__cgets_s
_o__cgetws
_o__cgetws_s
_o__chdir
_o__chdrive
_o__chmod
_o__chsize
_o__chsize_s
_o__close
_o__commit
_o__configthreadlocale
_o__configure_narrow_argv
_o__configure_wide_argv
_o__controlfp_s
_o__cputs
_o__cputws
_o__creat
_o__create_locale
_o__crt_atexit
_o__ctime32_s
_o__ctime64_s
_o__cwait
_o__d_int
_o__dclass
_o__difftime32
_o__difftime64
_o__dlog
_o__dnorm
_o__dpcomp
_o__dpoly
_o__dscale
_o__dsign
_o__dsin
_o__dtest
_o__dunscale
_o__dup
_o__dup2
_o__dupenv_s
_o__ecvt
_o__ecvt_s
_o__endthread
_o__endthreadex
_o__eof
_o__errno
_o__except1
_o__execute_onexit_table
_o__execv
_o__execve
_o__execvp
_o__execvpe
_o__exit
_o__expand
_o__fclose_nolock
_o__fcloseall
_o__fcvt
_o__fcvt_s
_o__fd_int
_o__fdclass
_o__fdexp
_o__fdlog
_o__fdopen
_o__fdpcomp
_o__fdpoly
_o__fdscale
_o__fdsign
_o__fdsin
_o__fflush_nolock
_o__fgetc_nolock
_o__fgetchar
_o__fgetwc_nolock
_o__fgetwchar
_o__filelength
_o__filelengthi64
_o__fileno
_o__findclose
_o__findfirst32
_o__findfirst32i64
_o__findfirst64
_o__findfirst64i32
_o__findnext32
_o__findnext32i64
_o__findnext64
_o__findnext64i32
_o__flushall
_o__fpclass
_o__fpclassf
_o__fputc_nolock
_o__fputchar
_o__fputwc_nolock
_o__fputwchar
_o__fread_nolock
_o__fread_nolock_s
_o__free_base
_o__free_locale
_o__fseek_nolock
_o__fseeki64
_o__fseeki64_nolock
_o__fsopen
_o__fstat32
_o__fstat32i64
_o__fstat64
_o__fstat64i32
_o__ftell_nolock
_o__ftelli64
_o__ftelli64_nolock
_o__ftime32
_o__ftime32_s
_o__ftime64
_o__ftime64_s
_o__fullpath
_o__futime32
_o__futime64
_o__fwrite_nolock
_o__gcvt
_o__gcvt_s
_o__get_daylight
_o__get_doserrno
_o__get_dstbias
_o__get_errno
_o__get_fmode
_o__get_heap_handle
_o__get_initial_narrow_environment
_o__get_initial_wide_environment
_o__get_invalid_parameter_handler
_o__get_narrow_winmain_command_line
_o__get_osfhandle
_o__get_pgmptr
_o__get_stream_buffer_pointers
_o__get_terminate
_o__get_thread_local_invalid_parameter_handler
_o__get_timezone
_o__get_tzname
_o__get_wide_winmain_command_line
_o__get_wpgmptr
_o__getc_nolock
_o__getch
_o__getch_nolock
_o__getche
_o__getche_nolock
_o__getcwd
_o__getdcwd
_o__getdiskfree
_o__getdllprocaddr
_o__getdrive
_o__getdrives
_o__getmbcp
_o__getsystime
_o__getw
_o__getwc_nolock
_o__getwch
_o__getwch_nolock
_o__getwche
_o__getwche_nolock
_o__getws
_o__getws_s
_o__gmtime32
_o__gmtime32_s
_o__gmtime64
_o__gmtime64_s
_o__heapchk
_o__heapmin
_o__hypot
_o__hypotf
_o__i64toa
_o__i64toa_s
_o__i64tow
_o__i64tow_s
_o__initialize_narrow_environment
_o__initialize_onexit_table
_o__initialize_wide_environment
_o__invalid_parameter_noinfo
_o__invalid_parameter_noinfo_noreturn
_o__isatty
_o__isctype
_o__isctype_l
_o__isleadbyte_l
_o__ismbbalnum
_o__ismbbalnum_l
_o__ismbbalpha
_o__ismbbalpha_l
_o__ismbbblank
_o__ismbbblank_l
_o__ismbbgraph
_o__ismbbgraph_l
_o__ismbbkalnum
_o__ismbbkalnum_l
_o__ismbbkana
_o__ismbbkana_l
_o__ismbbkprint
_o__ismbbkprint_l
_o__ismbbkpunct
_o__ismbbkpunct_l
_o__ismbblead
_o__ismbblead_l
_o__ismbbprint
_o__ismbbprint_l
_o__ismbbpunct
_o__ismbbpunct_l
_o__ismbbtrail
_o__ismbbtrail_l
_o__ismbcalnum
_o__ismbcalnum_l
_o__ismbcalpha
_o__ismbcalpha_l
_o__ismbcblank
_o__ismbcblank_l
_o__ismbcdigit
_o__ismbcdigit_l
_o__ismbcgraph
_o__ismbcgraph_l
_o__ismbchira
_o__ismbchira_l
_o__ismbckata
_o__ismbckata_l
_o__ismbcl0
_o__ismbcl0_l
_o__ismbcl1
_o__ismbcl1_l
_o__ismbcl2
_o__ismbcl2_l
_o__ismbclegal
_o__ismbclegal_l
_o__ismbclower
_o__ismbclower_l
_o__ismbcprint
_o__ismbcprint_l
_o__ismbcpunct
_o__ismbcpunct_l
_o__ismbcspace
_o__ismbcspace_l
_o__ismbcsymbol
_o__ismbcsymbol_l
_o__ismbcupper
_o__ismbcupper_l
_o__ismbslead
_o__ismbslead_l
_o__ismbstrail
_o__ismbstrail_l
_o__iswctype_l
_o__itoa
_o__itoa_s
_o__itow
_o__itow_s
_o__j0
_o__j1
_o__jn
_o__kbhit
_o__ld_int
_o__ldclass
_o__ldexp
_o__ldlog
_o__ldpcomp
_o__ldpoly
_o__ldscale
_o__ldsign
_o__ldsin
_o__ldtest
_o__ldunscale
_o__lfind
_o__lfind_s
_o__loaddll
_o__localtime32
_o__localtime32_s
_o__localtime64
_o__localtime64_s
_o__lock_file
_o__locking
_o__logb
_o__logbf
_o__lsearch
_o__lsearch_s
_o__lseek
_o__lseeki64
_o__ltoa
_o__ltoa_s
_o__ltow
_o__ltow_s
_o__makepath
_o__makepath_s
_o__malloc_base
_o__mbbtombc
_o__mbbtombc_l
_o__mbbtype
_o__mbbtype_l
_o__mbccpy
_o__mbccpy_l
_o__mbccpy_s
_o__mbccpy_s_l
_o__mbcjistojms
_o__mbcjistojms_l
_o__mbcjmstojis
_o__mbcjmstojis_l
_o__mbclen
_o__mbclen_l
_o__mbctohira
_o__mbctohira_l
_o__mbctokata
_o__mbctokata_l
_o__mbctolower
_o__mbctolower_l
_o__mbctombb
_o__mbctombb_l
_o__mbctoupper
_o__mbctoupper_l
_o__mblen_l
_o__mbsbtype
_o__mbsbtype_l
_o__mbscat_s
_o__mbscat_s_l
_o__mbschr
_o__mbschr_l
_o__mbscmp
_o__mbscmp_l
_o__mbscoll
_o__mbscoll_l
_o__mbscpy_s
_o__mbscpy_s_l
_o__mbscspn
_o__mbscspn_l
_o__mbsdec
_o__mbsdec_l
_o__mbsicmp
_o__mbsicmp_l
_o__mbsicoll
_o__mbsicoll_l
_o__mbsinc
_o__mbsinc_l
_o__mbslen
_o__mbslen_l
_o__mbslwr
_o__mbslwr_l
_o__mbslwr_s
_o__mbslwr_s_l
_o__mbsnbcat
_o__mbsnbcat_l
_o__mbsnbcat_s
_o__mbsnbcat_s_l
_o__mbsnbcmp
_o__mbsnbcmp_l
_o__mbsnbcnt
_o__mbsnbcnt_l
_o__mbsnbcoll
_o__mbsnbcoll_l
_o__mbsnbcpy
_o__mbsnbcpy_l
_o__mbsnbcpy_s
_o__mbsnbcpy_s_l
_o__mbsnbicmp
_o__mbsnbicmp_l
_o__mbsnbicoll
_o__mbsnbicoll_l
_o__mbsnbset
_o__mbsnbset_l
_o__mbsnbset_s
_o__mbsnbset_s_l
_o__mbsncat
_o__mbsncat_l
_o__mbsncat_s
_o__mbsncat_s_l
_o__mbsnccnt
_o__mbsnccnt_l
_o__mbsncmp
_o__mbsncmp_l
_o__mbsncoll
_o__mbsncoll_l
_o__mbsncpy
_o__mbsncpy_l
_o__mbsncpy_s
_o__mbsncpy_s_l
_o__mbsnextc
_o__mbsnextc_l
_o__mbsnicmp
_o__mbsnicmp_l
_o__mbsnicoll
_o__mbsnicoll_l
_o__mbsninc
_o__mbsninc_l
_o__mbsnlen
_o__mbsnlen_l
_o__mbsnset
_o__mbsnset_l
_o__mbsnset_s
_o__mbsnset_s_l
_o__mbspbrk
_o__mbspbrk_l
_o__mbsrchr
_o__mbsrchr_l
_o__mbsrev
_o__mbsrev_l
_o__mbsset
_o__mbsset_l
_o__mbsset_s
_o__mbsset_s_l
_o__mbsspn
_o__mbsspn_l
_o__mbsspnp
_o__mbsspnp_l
_o__mbsstr
_o__mbsstr_l
_o__mbstok
_o__mbstok_l
_o__mbstok_s
_o__mbstok_s_l
_o__mbstowcs_l
_o__mbstowcs_s_l
_o__mbstrlen
_o__mbstrlen_l
_o__mbstrnlen
_o__mbstrnlen_l
_o__mbsupr
_o__mbsupr_l
_o__mbsupr_s
_o__mbsupr_s_l
_o__mbtowc_l
_o__memicmp
_o__memicmp_l
_o__mkdir
_o__mkgmtime32
_o__mkgmtime64
_o__mktemp
_o__mktemp_s
_o__mktime32
_o__mktime64
_o__msize
_o__nextafter
_o__nextafterf
_o__open_osfhandle
_o__pclose
_o__pipe
_o__popen
_o__purecall
_o__putc_nolock
_o__putch
_o__putch_nolock
_o__putenv
_o__putenv_s
_o__putw
_o__putwc_nolock
_o__putwch
_o__putwch_nolock
_o__putws
_o__read
_o__realloc_base
_o__recalloc
_o__register_onexit_function
_o__resetstkoflw
_o__rmdir
_o__rmtmp
_o__scalb
_o__scalbf
_o__searchenv
_o__searchenv_s
_o__seh_filter_dll
_o__seh_filter_exe
_o__set_abort_behavior
_o__set_app_type
_o__set_doserrno
_o__set_errno
_o__set_fmode
_o__set_invalid_parameter_handler
_o__set_new_handler
_o__set_new_mode
_o__set_thread_local_invalid_parameter_handler
_o__seterrormode
_o__setmbcp
_o__setmode
_o__setsystime
_o__sleep
_o__sopen
_o__sopen_dispatch
_o__sopen_s
_o__spawnv
_o__spawnve
_o__spawnvp
_o__spawnvpe
_o__splitpath
_o__splitpath_s
_o__stat32
_o__stat32i64
_o__stat64
_o__stat64i32
_o__strcoll_l
_o__strdate
_o__strdate_s
_o__strdup
_o__strerror
_o__strerror_s
_o__strftime_l
_o__stricmp
_o__stricmp_l
_o__stricoll
_o__stricoll_l
_o__strlwr
_o__strlwr_l
_o__strlwr_s
_o__strlwr_s_l
_o__strncoll
_o__strncoll_l
_o__strnicmp
_o__strnicmp_l
_o__strnicoll
_o__strnicoll_l
_o__strnset_s
_o__strset_s
_o__strtime
_o__strtime_s
_o__strtod_l
_o__strtof_l
_o__strtoi64
_o__strtoi64_l
_o__strtol_l
_o__strtold_l
_o__strtoll_l
_o__strtoui64
_o__strtoui64_l
_o__strtoul_l
_o__strtoull_l
_o__strupr
_o__strupr_l
_o__strupr_s
_o__strupr_s_l
_o__strxfrm_l
_o__swab
_o__tell
_o__telli64
_o__timespec32_get
_o__timespec64_get
_o__tolower
_o__tolower_l
_o__toupper
_o__toupper_l
_o__towlower_l
_o__towupper_l
_o__tzset
_o__ui64toa
_o__ui64toa_s
_o__ui64tow
_o__ui64tow_s
_o__ultoa
_o__ultoa_s
_o__ultow
_o__ultow_s
_o__umask
_o__umask_s
_o__ungetc_nolock
_o__ungetch
_o__ungetch_nolock
_o__ungetwc_nolock
_o__ungetwch
_o__ungetwch_nolock
_o__unlink
_o__unloaddll
_o__unlock_file
_o__utime32
_o__utime64
_o__waccess
_o__waccess_s
_o__wasctime
_o__wasctime_s
_o__wchdir
_o__wchmod
_o__wcreat
_o__wcreate_locale
_o__wcscoll_l
_o__wcsdup
_o__wcserror
_o__wcserror_s
_o__wcsftime_l
_o__wcsicmp
_o__wcsicmp_l
_o__wcsicoll
_o__wcsicoll_l
_o__wcslwr
_o__wcslwr_l
_o__wcslwr_s
_o__wcslwr_s_l
_o__wcsncoll
_o__wcsncoll_l
_o__wcsnicmp
_o__wcsnicmp_l
_o__wcsnicoll
_o__wcsnicoll_l
_o__wcsnset
_o__wcsnset_s
_o__wcsset
_o__wcsset_s
_o__wcstod_l
_o__wcstof_l
_o__wcstoi64
_o__wcstoi64_l
_o__wcstol_l
_o__wcstold_l
_o__wcstoll_l
_o__wcstombs_l
_o__wcstombs_s_l
_o__wcstoui64
_o__wcstoui64_l
_o__wcstoul_l
_o__wcstoull_l
_o__wcsupr
_o__wcsupr_l
_o__wcsupr_s
_o__wcsupr_s_l
_o__wcsxfrm_l
_o__wctime32
_o__wctime32_s
_o__wctime64
_o__wctime64_s
_o__wctomb_l
_o__wctomb_s_l
_o__wdupenv_s
_o__wexecv
_o__wexecve
_o__wexecvp
_o__wexecvpe
_o__wfdopen
_o__wfindfirst32
_o__wfindfirst32i64
_o__wfindfirst64
_o__wfindfirst64i32
_o__wfindnext32
_o__wfindnext32i64
_o__wfindnext64
_o__wfindnext64i32
_o__wfopen
_o__wfopen_s
_o__wfreopen
_o__wfreopen_s
_o__wfsopen
_o__wfullpath
_o__wgetcwd
_o__wgetdcwd
_o__wgetenv
_o__wgetenv_s
_o__wmakepath
_o__wmakepath_s
_o__wmkdir
_o__wmktemp
_o__wmktemp_s
_o__wperror
_o__wpopen
_o__wputenv
_o__wputenv_s
_o__wremove
_o__wrename
_o__write
_o__wrmdir
_o__wsearchenv
_o__wsearchenv_s
_o__wsetlocale
_o__wsopen_dispatch
_o__wsopen_s
_o__wspawnv
_o__wspawnve
_o__wspawnvp
_o__wspawnvpe
_o__wsplitpath
_o__wsplitpath_s
_o__wstat32
_o__wstat32i64
_o__wstat64
_o__wstat64i32
_o__wstrdate
_o__wstrdate_s
_o__wstrtime
_o__wstrtime_s
_o__wsystem
_o__wtmpnam_s
_o__wtof
_o__wtof_l
_o__wtoi
_o__wtoi64
_o__wtoi64_l
_o__wtoi_l
_o__wtol
_o__wtol_l
_o__wtoll
_o__wtoll_l
_o__wunlink
_o__wutime32
_o__wutime64
_o__y0
_o__y1
_o__yn
_o_abort
_o_acos
_o_acosf
_o_acosh
_o_acoshf
_o_acoshl
_o_asctime
_o_asctime_s
_o_asin
_o_asinf
_o_asinh
_o_asinhf
_o_asinhl
_o_atan
_o_atan2
_o_atan2f
_o_atanf
_o_atanh
_o_atanhf
_o_atanhl
_o_atof
_o_atoi
_o_atol
_o_atoll
_o_bsearch
_o_bsearch_s
_o_btowc
_o_calloc
_o_cbrt
_o_cbrtf
_o_ceil
_o_ceilf
_o_clearerr
_o_clearerr_s
_o_cos
_o_cosf
_o_cosh
_o_coshf
_o_erf
_o_erfc
_o_erfcf
_o_erfcl
_o_erff
_o_erfl
_o_exit
_o_exp
_o_exp2
_o_exp2f
_o_exp2l
_o_expf
_o_fabs
_o_fclose
_o_feof
_o_ferror
_o_fflush
_o_fgetc
_o_fgetpos
_o_fgets
_o_fgetwc
_o_fgetws
_o_floor
_o_floorf
_o_fma
_o_fmaf
_o_fmal
_o_fmod
_o_fmodf
_o_fopen
_o_fopen_s
_o_fputc
_o_fputs
_o_fputwc
_o_fputws
_o_fread
_o_fread_s
_o_free
_o_freopen
_o_freopen_s
_o_frexp
_o_fseek
_o_fsetpos
_o_ftell
_o_fwrite
_o_getc
_o_getchar
_o_getenv
_o_getenv_s
_o_gets
_o_gets_s
_o_getwc
_o_getwchar
_o_hypot
_o_is_wctype
_o_isalnum
_o_isalpha
_o_isblank
_o_iscntrl
_o_isdigit
_o_isgraph
_o_isleadbyte
_o_islower
_o_isprint
_o_ispunct
_o_isspace
_o_isupper
_o_iswalnum
_o_iswalpha
_o_iswascii
_o_iswblank
_o_iswcntrl
_o_iswctype
_o_iswdigit
_o_iswgraph
_o_iswlower
_o_iswprint
_o_iswpunct
_o_iswspace
_o_iswupper
_o_iswxdigit
_o_isxdigit
_o_ldexp
_o_lgamma
_o_lgammaf
_o_lgammal
_o_llrint
_o_llrintf
_o_llrintl
_o_llround
_o_llroundf
_o_llroundl
_o_localeconv
_o_log
_o_log10
_o_log10f
_o_log1p
_o_log1pf
_o_log1pl
_o_log2
_o_log2f
_o_log2l
_o_logb
_o_logbf
_o_logbl
_o_logf
_o_lrint
_o_lrintf
_o_lrintl
_o_lround
_o_lroundf
_o_lroundl
_o_malloc
_o_mblen
_o_mbrlen
_o_mbrtoc16
_o_mbrtoc32
_o_mbrtowc
_o_mbsrtowcs
_o_mbsrtowcs_s
_o_mbstowcs
_o_mbstowcs_s
_o_mbtowc
_o_memcpy_s
_o_memset
_o_modf
_o_modff
_o_nan
_o_nanf
_o_nanl
_o_nearbyint
_o_nearbyintf
_o_nearbyintl
_o_nextafter
_o_nextafterf
_o_nextafterl
_o_nexttoward
_o_nexttowardf
_o_nexttowardl
_o_pow
_o_powf
_o_putc
_o_putchar
_o_puts
_o_putwc
_o_putwchar
_o_qsort
_o_qsort_s
_o_raise
_o_rand
_o_rand_s
_o_realloc
_o_remainder
_o_remainderf
_o_remainderl
_o_remove
_o_remquo
_o_remquof
_o_remquol
_o_rename
_o_rewind
_o_rint
_o_rintf
_o_rintl
_o_round
_o_roundf
_o_roundl
_o_scalbln
_o_scalblnf
_o_scalblnl
_o_scalbn
_o_scalbnf
_o_scalbnl
_o_set_terminate
_o_setbuf
_o_setlocale
_o_setvbuf
_o_sin
_o_sinf
_o_sinh
_o_sinhf
_o_sqrt
_o_sqrtf
_o_srand
_o_strcat_s
_o_strcoll
_o_strcpy_s
_o_strerror
_o_strerror_s
_o_strftime
_o_strncat_s
_o_strncpy_s
_o_strtod
_o_strtof
_o_strtok
_o_strtok_s
_o_strtol
_o_strtold
_o_strtoll
_o_strtoul
_o_strtoull
_o_system
_o_tan
_o_tanf
_o_tanh
_o_tanhf
_o_terminate
_o_tgamma
_o_tgammaf
_o_tgammal
_o_tmpfile_s
_o_tmpnam_s
_o_tolower
_o_toupper
_o_towlower
_o_towupper
_o_ungetc
_o_ungetwc
_o_wcrtomb
_o_wcrtomb_s
_o_wcscat_s
_o_wcscoll
_o_wcscpy
_o_wcscpy_s
_o_wcsftime
_o_wcsncat_s
_o_wcsncpy_s
_o_wcsrtombs
_o_wcsrtombs_s
_o_wcstod
_o_wcstof
_o_wcstok
_o_wcstok_s
_o_wcstol
_o_wcstold
_o_wcstoll
_o_wcstombs
_o_wcstombs_s
_o_wcstoul
_o_wcstoull
_o_wctob
_o_wctomb
_o_wctomb_s
_o_wmemcpy_s
_o_wmemmove_s
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
set_unexpected
setjmp
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.rdata
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,
x86/api-ms-win-crt-process-l1-1-0.dll
- SHA256 542a22540cdb7df46d957a0208d50507916f7c737bea833931239d56ebe8d68c
- MD5 66f4e530a19ed2f6862b5ce946437875
- SHA1 016bfa4eafb407e43abdcd9582dbca7dcf85d3de
- SHA512 2653b2118f4db250850dcefd3536e0fd2bc55e9774376b51e586658e4e5d79a35cb425ebe0a8391124997e24c8aaa84bac799162a31446ef47db667a4a3f0eb9
- SSDEEP 384:W3KAWfhWk+Y3DGk8ZpH3GCJErW25tL+Y3DGURRQ8JN77hhGz:fDDGkiRBEy4BDG43hgz
- MD5 SHA1 SHA512 SSDEEP
Digest
d7:4d:95:42:60:13:dc:77:da:2e:4b:f6:f5:c6:d7:36:3f:ab:86:9d:2f:12:c3:af:7c:3e:c8:72:2f:1e:2d:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Jul 24, 2023
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
PE Signature issue
Digest
ad:be:51:42:48:63:74:38:8d:7e:95:8b:ad:67:95:ca:63:a5:fd:b6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Chains
Oct 17, 2025
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 3, 2023 - Aug 2, 2034
Subject
CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US
Serial Number
0d:fe:7b:a4:82:f0:76:db:90:bc:c2:2b:2c:48:7c:bd
Issuer
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Feb 25, 2021 - Feb 29, 2024
Subject
CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2013 - Oct 22, 2028
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
10
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
api-ms-win-crt-process-l1-1-0.pdb
_beep
_cwait
_execl
_execle
_execlp
_execlpe
_execv
_execve
_execvp
_execvpe
_loaddll
_spawnl
_spawnle
_spawnlp
_spawnlpe
_spawnv
_spawnve
_spawnvp
_spawnvpe
_unloaddll
_wexecl
_wexecle
_wexeclp
_wexeclpe
_wexecv
_wexecve
_wexecvp
_wexecvpe
_wspawnl
_wspawnle
_wspawnlp
_wspawnlpe
_wspawnv
_wspawnve
_wspawnvp
_wspawnvpe
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=1, id=256, version=26213,
count=2, id=260, version=26213,
count=1, id=255, version=26213,
count=1, id=258, version=26213,