auto-unlocker.zip
- SHA256 aa4957c05ea0cb873db6ff2634bdd888ed9822f5db96003108ba24f2c460d23e
Overview
overview
8Static
static
3Unlocker.exe
windows10-2004-x64
1Unlocker.exe
windows11-ltsc_2024-x64
8bz2.dll
windows10-2004-x64
1bz2.dll
windows11-ltsc_2024-x64
8libcurl.dll
windows10-2004-x64
1libcurl.dll
windows11-ltsc_2024-x64
1liblzma.dll
windows10-2004-x64
1liblzma.dll
windows11-ltsc_2024-x64
1zip.dll
windows10-2004-x64
1zip.dll
windows11-ltsc_2024-x64
1zlib1.dll
windows10-2004-x64
1zlib1.dll
windows11-ltsc_2024-x64
1zstd.dll
windows10-2004-x64
1zstd.dll
windows11-ltsc_2024-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unlocker.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unlocker.exe
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral3
Sample
bz2.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
bz2.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
Behavioral task
behavioral5
Sample
libcurl.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
libcurl.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
liblzma.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
liblzma.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
zip.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
zip.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
zlib1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
zlib1.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
zstd.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
zstd.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
150 seconds
General
- Target auto-unlocker.zip
- Size 1.0MB
- Sample260702-e1g52abx5v
- SHA256 aa4957c05ea0cb873db6ff2634bdd888ed9822f5db96003108ba24f2c460d23e
- MD5 c9e986c4caba6b57a84f569a971458fa
- SHA1 f3e1f5c88db80574abd55cc757fd1c22cab08348
- SHA512 1091c3a064dc53f3779833ea83021aa0e2041cbfa4ce892a09e28ed7fe6e0f02ca197cde917a0cdf7a3e02f6373f796871ff792f6b278b2b841ff786a084265c
- SSDEEP 24576:Ai/RIXFCVrgqwxToHiGYDzIGfbWt38BsprH03D/qVX:X6IVyToHiGYPINtTrUzGX
- TLSH T16E353388D4EA5C258379B5F1DCF92D3FD1057D29B99CCB724004E3AFC2EB6A0806B946
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/Unlocker.exe unpack001/bz2.dll unpack001/libcurl.dll unpack001/liblzma.dll unpack001/zip.dll unpack001/zlib1.dll unpack001/zstd.dll
File Explorer
-
auto-unlocker.zip.zip 1.0MB
-
Unlocker.exe.exe 765KB
-
bz2.dll.dll 75KB
-
libcurl.dll.dll 619KB
-
liblzma.dll.dll 184KB
-
zip.dll.dll 176KB
-
zlib1.dll.dll 88KB
-
zstd.dll.dll 643KB
Unlocker.exe
- IMPHASH 45e455865d49493a01133f7d7197ca9a
- SHA256 7cfe6fa824ebc8bee0f300e0fb5e681eaef09cd22323acf6aa711495da1910a0
- MD5 76cbbf4e0814fa802b464a66842c458b
- SHA1 3d19488f0840a4e1d6d4ca7c96986b70295d1e67
- SHA512 47072cad17d6beb82e64722bcaf472af524d2d9a12752cb9e5ead58af93a6c55bdacda3f1e0aa873da872c4b8c89db6e672a885f7a6873123a217e2bf1bf3dd0
- SSDEEP 6144:QAZT6gWkgbGOXE/8f2R1oqMZHuAx996xF52937kWQNFpnmDVfAxjKswtOl/tecsK:VT6HBK4r6UDVfVsXltzsQdr
- TLSH T108F47C1E666C15D9F17BC17DCADB9E16E97238080361CACB06D18BED1E17EDC1A7B220
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
14296
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\infan\Desktop\auto-unlocker\out\build\x64-Release\Unlocker.pdb
libcurl
curl_global_cleanup
curl_easy_strerror
curl_easy_init
curl_global_init
curl_easy_setopt
curl_easy_perform
curl_easy_cleanup
zip
zip_close
zip_fclose
zip_fopen
zip_fread
zip_stat
zip_stat_init
zip_open
comctl32
InitCommonControlsEx
shlwapi
PathAppendA
kernel32
MultiByteToWideChar
WideCharToMultiByte
RtlCaptureContext
CreateSymbolicLinkW
GetFileInformationByHandleEx
OutputDebugStringA
SetFileAttributesA
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
Sleep
TerminateProcess
GetExitCodeProcess
OpenProcess
GetTickCount64
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentDirectoryA
RtlLookupFunctionEntry
UnhandledExceptionFilter
FormatMessageA
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
GetProcAddress
GetModuleHandleW
DeviceIoControl
CloseHandle
AreFileApisANSI
GetTempPathW
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileInformationByHandle
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
GetFileAttributesA
RtlVirtualUnwind
FindFirstFileExW
FindFirstFileW
FindClose
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
CreateThread
GetStartupInfoW
GetLocaleInfoEx
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
LocalFree
user32
SetWindowLongPtrA
IsWindowEnabled
SystemParametersInfoA
RegisterClassA
PostQuitMessage
GetSysColorBrush
LoadCursorA
EnableWindow
DispatchMessageA
TranslateMessage
GetMessageA
ShowWindow
MessageBoxA
CreateWindowExA
GetWindowLongPtrA
SendMessageA
SetWindowTextA
GetWindowTextA
DefWindowProcA
gdi32
CreateFontIndirectA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
advapi32
StartServiceA
QueryServiceStatusEx
OpenServiceA
OpenSCManagerA
EnumDependentServicesA
ControlService
CloseServiceHandle
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
msvcp140
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Id_cnt@id@locale@std@@0HA
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAHH@Z
_Query_perf_counter
_Query_perf_frequency
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?setf@ios_base@std@@QEAAHHH@Z
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Xtime_get_ticks
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?_Xlength_error@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
_Strcoll
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
vcruntime140
__std_exception_copy
memcmp
__std_exception_destroy
_CxxThrowException
__std_type_info_destroy_list
__C_specific_handler
strchr
__current_exception
_purecall
memchr
memset
memmove
memcpy
__current_exception_context
__std_terminate
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_configure_narrow_argv
abort
_seh_filter_dll
_initterm_e
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_invoke_watson
terminate
_initterm
_get_narrow_winmain_command_line
_errno
_seh_filter_exe
_set_app_type
_exit
_initialize_onexit_table
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
free
realloc
_callnewh
calloc
malloc
_set_new_mode
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-string-l1-1-0
strlen
strcpy
wcslen
strcmp
_stricmp
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf
_get_stream_buffer_pointers
fclose
fflush
__stdio_common_vsscanf
ftell
fseek
fopen
fgetc
__stdio_common_vsprintf
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-math-l1-1-0
ceil
__setusermatherr
api-ms-win-crt-time-l1-1-0
_time64
_localtime64
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
Name
.text
Size
607KB
Virtual Size
607KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
22KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=32, id=261, version=35207,
count=6, id=257, version=35207,
count=14, id=257, version=33140,
count=5, id=257, version=35215,
count=310, id=1, productName=Unmarked objects,
count=32, id=261, version=35215,
count=1, id=258, version=35215,
bz2.dll
- IMPHASH dd331803226d3faa597f372b74281ca8
- SHA256 61c5e162d6dac796bf710e8ae848e2723135a6dac69123d55289e78b56a2fcf3
- MD5 658609b2ad258deb2377b67c48253003
- SHA1 c88e7ce17b022679ad47382beb753d739751bc72
- SHA512 43babcee97475a9ba783ab042ad7b5c92ef469d5e0d1726d144ea60cffc6558cf836c4982fc8d6f3951f36520e4ead80e2fb86a509623f8aa5bba3499b3de690
- SSDEEP 1536:oxVEJaODufsitWI2HNkK+13Ta5c/aBPEDDc3hT5lO1rJ8Ti:LuMV+xbrYV5lGrG+
- TLSH T1A0734C40B6E3FBBDDAABC0395623074BFF35BD680B1117BF3560867A2B22A910D74516
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
61284
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\vcpkg\buildtrees\bzip2\x64-windows-rel\bz2.pdb
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
ungetc
fwrite
fread
_fileno
fgetc
fflush
ferror
fclose
fopen
__stdio_common_vfprintf
_setmode
api-ms-win-crt-heap-l1-1-0
free
malloc
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_cexit
_seh_filter_dll
exit
_initterm
_configure_narrow_argv
_initterm_e
api-ms-win-crt-string-l1-1-0
strcmp
isdigit
api-ms-win-crt-math-l1-1-0
_fdopen
kernel32
GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
Name
.text
Size
58KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=3, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=2, id=257, version=33140,
count=53, id=1, productName=Unmarked objects,
count=7, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=258, version=35215,
libcurl.dll
- IMPHASH 6b12d16f8b59edf8c46b7021a5871086
- SHA256 bce45020aa4448868b892412351b0fd2355bef07cf9f6f357f66123d76a301a6
- MD5 91ecea753400e7f01a1ce1564abe7014
- SHA1 c4cb746f547955cf106898adcd626d2e55136b15
- SHA512 7295b316d7ef42ffd5bf1ffa8b23a780a1a29ca30d3b75c0081d45ec715f22190a789be2b7f369a7f75110f5b95b1b7f4b29608bf5090bc3872c9e70142968fd
- SSDEEP 12288:br0KlpyZWS1UsV6Cs9SfnNTTIqiyzJPqWHFi5uTc6:bgKlpypGsV6S/NTTIqiyzJPqWHFi5uP
- TLSH T1A6D46C5AA3F414A8D1A7C17CC6534617E3B3B0542360A7DB13B4CABA2F13BE6673A750
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
468068
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb
zlib1
zlibVersion
inflateInit2_
inflateInit_
inflateReset2
inflateEnd
inflate
ws2_32
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
gethostname
freeaddrinfo
WSAEventSelect
WSAIoctl
WSASetLastError
socket
setsockopt
recv
ntohs
htons
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
htonl
__WSAFDIsSet
select
WSAStartup
WSACleanup
recvfrom
sendto
ioctlsocket
getsockopt
send
closesocket
getaddrinfo
WSAGetLastError
accept
bind
connect
getpeername
getsockname
iphlpapi
if_nametoindex
bcrypt
BCryptGenRandom
advapi32
CryptAcquireContextW
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
crypt32
CertFreeCertificateContext
CryptDecodeObjectEx
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptStringToBinaryW
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFindCertificateInStore
CertFreeCertificateChain
secur32
InitSecurityInterfaceW
kernel32
PeekNamedPipe
ReadFile
GetFileType
GetStdHandle
QueryPerformanceFrequency
SetLastError
WaitForMultipleObjects
GetProcAddress
Sleep
GetEnvironmentVariableA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObjectEx
CloseHandle
GetLastError
GetModuleHandleA
SleepEx
DeleteCriticalSection
MultiByteToWideChar
CreateFileW
GetFileSizeEx
GetFullPathNameW
WideCharToMultiByte
QueryPerformanceCounter
GetTickCount
VerifyVersionInfoW
FormatMessageW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
MoveFileExW
VerSetConditionMask
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
strstr
wcschr
strrchr
memmove
memset
memchr
memcpy
strchr
memcmp
api-ms-win-crt-stdio-l1-1-0
feof
_wopen
_wfopen
_read
ftell
_fseeki64
fclose
_fileno
_write
fflush
fputs
__stdio_common_vsprintf
fputc
fseek
_close
fgets
fwrite
fread
_lseeki64
__acrt_iob_func
api-ms-win-crt-time-l1-1-0
_time64
strftime
_gmtime64
api-ms-win-crt-string-l1-1-0
strlen
strpbrk
strspn
wcsncmp
wcslen
strncmp
wcscpy
strcpy
strcmp
wcsncpy
strcspn
_strdup
api-ms-win-crt-runtime-l1-1-0
_errno
_beginthreadex
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
__sys_errlist
__sys_nerr
_initterm
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
free
calloc
realloc
malloc
api-ms-win-crt-filesystem-l1-1-0
_fullpath
_wstat64
_unlink
_fstat64
api-ms-win-crt-convert-l1-1-0
atoi
wcstombs
api-ms-win-crt-math-l1-1-0
_fdopen
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_ssls_export
curl_easy_ssls_import
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_global_trace
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_get_handles
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_waitfds
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send
Name
.text
Size
456KB
Virtual Size
455KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
129KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=6, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=14, id=257, version=33140,
count=3, id=257, version=35215,
count=193, id=1, productName=Unmarked objects,
count=179, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
liblzma.dll
- IMPHASH c31d1f99d47be9a5cee087ae4ddf1a4a
- SHA256 e0de297c794a8c52f43441f4370958dc5ceba3c4a0168365fc92c683cb9ea1b6
- MD5 1cb6e994cd54a0fad8c31eb33138ce5f
- SHA1 7db0545fc9b4408499c72605f903dcf97e32a7a9
- SHA512 8c266e2412088a556b11a5c4c93808830adaa77ed7bd708f16fbbed4da0cb21bd7b43331bac1c35bea47706d558ab858321a6fce8708ca2499b9764f50b0b58e
- SSDEEP 3072:J9wAe9mKOlgbzxjioNDWg+2H/D4q246xUQr/Es9mNoUow1V1C3:J9w/R4eFUgVw45CYOnw1V
- TLSH T18E0428A562A5F0D5E2678C38C9678B17D7F678040310A6EB06DC837D2B2FBE4563A317
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
134516
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\vcpkg\buildtrees\liblzma\x64-windows-rel\liblzma.pdb
kernel32
GlobalMemoryStatusEx
GetSystemInfo
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
WaitForSingleObject
GetTickCount
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
vcruntime140
memcmp
memmove
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
memchr
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_beginthreadex
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm
_cexit
_initterm_e
lzma_alone_decoder
lzma_alone_encoder
lzma_auto_decoder
lzma_bcj_arm64_decode
lzma_bcj_arm64_encode
lzma_bcj_riscv_decode
lzma_bcj_riscv_encode
lzma_bcj_x86_decode
lzma_bcj_x86_encode
lzma_block_buffer_bound
lzma_block_buffer_decode
lzma_block_buffer_encode
lzma_block_compressed_size
lzma_block_decoder
lzma_block_encoder
lzma_block_header_decode
lzma_block_header_encode
lzma_block_header_size
lzma_block_total_size
lzma_block_uncomp_encode
lzma_block_unpadded_size
lzma_check_is_supported
lzma_check_size
lzma_code
lzma_cputhreads
lzma_crc32
lzma_crc64
lzma_easy_buffer_encode
lzma_easy_decoder_memusage
lzma_easy_encoder
lzma_easy_encoder_memusage
lzma_end
lzma_file_info_decoder
lzma_filter_decoder_is_supported
lzma_filter_encoder_is_supported
lzma_filter_flags_decode
lzma_filter_flags_encode
lzma_filter_flags_size
lzma_filters_copy
lzma_filters_free
lzma_filters_update
lzma_get_check
lzma_get_progress
lzma_index_append
lzma_index_block_count
lzma_index_buffer_decode
lzma_index_buffer_encode
lzma_index_cat
lzma_index_checks
lzma_index_decoder
lzma_index_dup
lzma_index_encoder
lzma_index_end
lzma_index_file_size
lzma_index_hash_append
lzma_index_hash_decode
lzma_index_hash_end
lzma_index_hash_init
lzma_index_hash_size
lzma_index_init
lzma_index_iter_init
lzma_index_iter_locate
lzma_index_iter_next
lzma_index_iter_rewind
lzma_index_memusage
lzma_index_memused
lzma_index_size
lzma_index_stream_count
lzma_index_stream_flags
lzma_index_stream_padding
lzma_index_stream_size
lzma_index_total_size
lzma_index_uncompressed_size
lzma_lzip_decoder
lzma_lzma_preset
lzma_memlimit_get
lzma_memlimit_set
lzma_memusage
lzma_mf_is_supported
lzma_microlzma_decoder
lzma_microlzma_encoder
lzma_mode_is_supported
lzma_mt_block_size
lzma_physmem
lzma_properties_decode
lzma_properties_encode
lzma_properties_size
lzma_raw_buffer_decode
lzma_raw_buffer_encode
lzma_raw_decoder
lzma_raw_decoder_memusage
lzma_raw_encoder
lzma_raw_encoder_memusage
lzma_str_from_filters
lzma_str_list_filters
lzma_str_to_filters
lzma_stream_buffer_bound
lzma_stream_buffer_decode
lzma_stream_buffer_encode
lzma_stream_decoder
lzma_stream_decoder_mt
lzma_stream_encoder
lzma_stream_encoder_mt
lzma_stream_encoder_mt_memusage
lzma_stream_flags_compare
lzma_stream_footer_decode
lzma_stream_footer_encode
lzma_stream_header_decode
lzma_stream_header_encode
lzma_version_number
lzma_version_string
lzma_vli_decode
lzma_vli_encode
lzma_vli_size
Name
.text
Size
130KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
260B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=3, id=257, version=33140,
count=55, id=1, productName=Unmarked objects,
count=79, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
zip.dll
- IMPHASH 56783cf8204eed71fc27ec54b45c32b2
- SHA256 4dbc3f42b466e4f01b0738599399d5af7df83688c235f0dca976c6fa4454306d
- MD5 11d14bfbf08e4fdc06359e63baefc4f6
- SHA1 c1726dcf11ffe4d3d135edd46c5db3ba2f644a76
- SHA512 26a4fd0800184a48c5589590fd00c323fda1f33b75a399e6f34e6351b7b770d76981ca514d1a4aacf8a78ced1a360205428ffac1b2b83fd9dfb7fb2b0b2f1711
- SSDEEP 1536:pKii5rjSVN0WNoyO++gyCBnH+LdFf2i8kgbhAWCFYpdMjMjFvHkA:Vi5S7GyWgyCBHiF+lCFYD0gk
- TLSH T12C0429AB37A42176E177817D85C3660BE2B27111073557CF44E48B7A6B33ECA2A7E314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4146
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\Desktop\auto-unlocker\libzip-1.11.4\out\build\x64-Release\lib\zip.pdb
advapi32
GetSecurityInfo
bz2
BZ2_bzCompress
BZ2_bzCompressInit
BZ2_bzCompressEnd
BZ2_bzDecompress
BZ2_bzDecompressInit
BZ2_bzDecompressEnd
liblzma
lzma_alone_encoder
lzma_stream_decoder
lzma_end
lzma_alone_decoder
lzma_lzma_preset
lzma_stream_encoder
lzma_code
zstd
ZSTD_compressBound
ZSTD_minCLevel
ZSTD_decompressStream
ZSTD_freeDStream
ZSTD_createDStream
ZSTD_endStream
ZSTD_compressStream
ZSTD_initCStream
ZSTD_freeCStream
ZSTD_createCStream
ZSTD_maxCLevel
ZSTD_isError
bcrypt
BCryptDestroyHash
BCryptCreateHash
BCryptDestroyKey
BCryptEncrypt
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptGenerateSymmetricKey
BCryptDeriveKeyPBKDF2
BCryptFinishHash
BCryptHashData
zlib1
crc32
zError
inflate
deflateEnd
deflate
deflateInit2_
inflateEnd
inflateInit2_
kernel32
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
MoveFileExA
SetFileAttributesA
GetFileAttributesExA
GetFileAttributesA
FindFirstFileA
DeleteFileA
CreateFileA
MultiByteToWideChar
MoveFileExW
SetFileAttributesW
GetFileAttributesExW
GetFileAttributesW
FindFirstFileW
DeleteFileW
CreateFileW
LocalFree
GetTickCount
WriteFile
GetLastError
CloseHandle
SetFilePointerEx
ReadFile
GetFileTime
GetFileType
GetFileSizeEx
vcruntime140
memcpy
__current_exception_context
__current_exception
__std_type_info_destroy_list
__C_specific_handler
strrchr
memcmp
memset
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_errno
_initterm_e
_register_onexit_function
_execute_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
_initterm
terminate
_initialize_onexit_table
_cexit
strerror_s
_invalid_parameter_noinfo
_crt_at_quick_exit
_crt_atexit
api-ms-win-crt-heap-l1-1-0
calloc
realloc
malloc
free
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
_mktime64
api-ms-win-crt-string-l1-1-0
_stricmp
_wcsdup
strncpy_s
strlen
strncmp
_strdup
wcslen
strcmp
api-ms-win-crt-utility-l1-1-0
rand
qsort
srand
api-ms-win-crt-stdio-l1-1-0
_close
fclose
_fileno
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
ferror
fread
fseek
ftell
__stdio_common_vsnwprintf_s
_dup
api-ms-win-crt-math-l1-1-0
_fdopen
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
_stat64i32
zip_add
zip_add_dir
zip_close
zip_compression_method_supported
zip_delete
zip_dir_add
zip_discard
zip_encryption_method_supported
zip_error_clear
zip_error_code_system
zip_error_code_zip
zip_error_fini
zip_error_get
zip_error_get_sys_type
zip_error_init
zip_error_init_with_code
zip_error_set
zip_error_set_from_source
zip_error_strerror
zip_error_system_type
zip_error_to_data
zip_error_to_str
zip_fclose
zip_fdopen
zip_file_add
zip_file_attributes_init
zip_file_error_clear
zip_file_error_get
zip_file_extra_field_delete
zip_file_extra_field_delete_by_id
zip_file_extra_field_get
zip_file_extra_field_get_by_id
zip_file_extra_field_set
zip_file_extra_fields_count
zip_file_extra_fields_count_by_id
zip_file_get_comment
zip_file_get_error
zip_file_get_external_attributes
zip_file_is_seekable
zip_file_rename
zip_file_replace
zip_file_set_comment
zip_file_set_dostime
zip_file_set_encryption
zip_file_set_external_attributes
zip_file_set_mtime
zip_file_strerror
zip_fopen
zip_fopen_encrypted
zip_fopen_index
zip_fopen_index_encrypted
zip_fread
zip_fseek
zip_ftell
zip_get_archive_comment
zip_get_archive_flag
zip_get_error
zip_get_file_comment
zip_get_name
zip_get_num_entries
zip_get_num_files
zip_libzip_version
zip_name_locate
zip_open
zip_open_from_source
zip_register_cancel_callback_with_state
zip_register_progress_callback
zip_register_progress_callback_with_state
zip_rename
zip_replace
zip_secure_random
zip_set_archive_comment
zip_set_archive_flag
zip_set_default_password
zip_set_file_comment
zip_set_file_compression
zip_source_begin_write
zip_source_begin_write_cloning
zip_source_buffer
zip_source_buffer_create
zip_source_buffer_fragment
zip_source_buffer_fragment_create
zip_source_close
zip_source_commit_write
zip_source_error
zip_source_file
zip_source_file_create
zip_source_filep
zip_source_filep_create
zip_source_free
zip_source_function
zip_source_function_create
zip_source_get_file_attributes
zip_source_is_deleted
zip_source_is_seekable
zip_source_keep
zip_source_layered
zip_source_layered_create
zip_source_make_command_bitmap
zip_source_open
zip_source_pass_to_lower_layer
zip_source_read
zip_source_rollback_write
zip_source_seek
zip_source_seek_compute_offset
zip_source_seek_write
zip_source_stat
zip_source_tell
zip_source_tell_write
zip_source_win32a
zip_source_win32a_create
zip_source_win32handle
zip_source_win32handle_create
zip_source_win32w
zip_source_win32w_create
zip_source_window_create
zip_source_write
zip_source_zip
zip_source_zip_create
zip_source_zip_file
zip_source_zip_file_create
zip_stat
zip_stat_index
zip_stat_init
zip_strerror
zip_unchange
zip_unchange_all
zip_unchange_archive
Name
.text
Size
124KB
Virtual Size
123KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
512B
Virtual Size
373B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=1, id=253, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=8, id=257, version=35215,
count=7, id=257, version=33140,
count=144, id=1, productName=Unmarked objects,
count=125, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=258, version=35215,
zlib1.dll
- IMPHASH ba6617d7c335ce13500db41802bfc904
- SHA256 63158ca78e53fafcf18886fbfd7d23dbc6e986f5e61a09f225bb2b42eb7a9112
- MD5 c24d0a85ac479cd5d0f952a759420f3d
- SHA1 90862067f151e48dcc3d982f6b3e5c542f91cb21
- SHA512 595d288797b989826ea66ff152db9d50ca5597d2ca55326139f1f3521cedffe8702d79e95632d66f2b86d4803d92dec86934f8167bad761997a6e4350a46937a
- SSDEEP 1536:bvkS6XmTzqbKxfXOTBpp/foyUaDmjGI2naIOcIOZdFBhkxUOw2:gdXozwBppnqGnoSZdF/kxUOw2
- TLSH T187937B46AAB422A5D6F781B8D8D3079DC330702407A45BDF5648A76A1F23AE41F363FD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
56596
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memmove
memchr
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
_read
_open
_lseeki64
_wopen
__stdio_common_vsprintf
_write
_close
api-ms-win-crt-heap-l1-1-0
free
malloc
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
_errno
_execute_onexit_table
strerror
_initterm
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_cexit
kernel32
DisableThreadLibraryCalls
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine_gen
crc32_combine_op
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35207,
count=4, id=253, version=35207,
count=3, id=259, version=35207,
count=8, id=260, version=35207,
count=12, id=261, version=35207,
count=2, id=257, version=33140,
count=50, id=1, productName=Unmarked objects,
count=15, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,
zstd.dll
- IMPHASH 1fb54f11addd4822f50dedaf8983fcd0
- SHA256 6693f11bfdf9328b58b7844b405b0f6b5a3236859261f6a51e7ad0bccdb27d1f
- MD5 a61f2565e4ac8965deb14332cb579159
- SHA1 4aa6cb5311d39449fc5e9eca0f30a87116181eeb
- SHA512 2602ccb3aefcd20ada36e6434fb235f0aed39bf25ce5d70771084db176adf7ea521ddfe05abe0bb85dcc802305e9e742b2858bdefaa1b3977975a0ef15031c14
- SSDEEP 12288:Rz7UEAKdgfa7MVE3QmBlJN/sDgNEYtbdDkaBrY1SrK4jbxSxs:RzQEAAgs/sDgNEYtbVko3K4jbv
- TLSH T126E48D83F29592EDD13FC178C9564363EBB2380613046AEB83A4EF652F13AE55B35385
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
572348
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\infan\vcpkg\buildtrees\zstd\x64-windows-rel\lib\zstd.pdb
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
CloseHandle
GetLastError
WaitForSingleObject
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
vcruntime140
memcmp
memcpy
__C_specific_handler
memmove
__std_type_info_destroy_list
memset
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
_initterm_e
_configure_narrow_argv
_seh_filter_dll
_initterm
_beginthreadex
_errno
_execute_onexit_table
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
fflush
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-utility-l1-1-0
qsort_s
api-ms-win-crt-time-l1-1-0
clock
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictHeaderSize
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_optimizeTrainFromBuffer_cover
ZDICT_optimizeTrainFromBuffer_fastCover
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_cover
ZDICT_trainFromBuffer_fastCover
ZDICT_trainFromBuffer_legacy
ZSTD_CCtxParams_getParameter
ZSTD_CCtxParams_init
ZSTD_CCtxParams_init_advanced
ZSTD_CCtxParams_registerSequenceProducer
ZSTD_CCtxParams_reset
ZSTD_CCtxParams_setParameter
ZSTD_CCtx_getParameter
ZSTD_CCtx_loadDictionary
ZSTD_CCtx_loadDictionary_advanced
ZSTD_CCtx_loadDictionary_byReference
ZSTD_CCtx_refCDict
ZSTD_CCtx_refPrefix
ZSTD_CCtx_refPrefix_advanced
ZSTD_CCtx_refThreadPool
ZSTD_CCtx_reset
ZSTD_CCtx_setCParams
ZSTD_CCtx_setFParams
ZSTD_CCtx_setParameter
ZSTD_CCtx_setParametersUsingCCtxParams
ZSTD_CCtx_setParams
ZSTD_CCtx_setPledgedSrcSize
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DCtx_getParameter
ZSTD_DCtx_loadDictionary
ZSTD_DCtx_loadDictionary_advanced
ZSTD_DCtx_loadDictionary_byReference
ZSTD_DCtx_refDDict
ZSTD_DCtx_refPrefix
ZSTD_DCtx_refPrefix_advanced
ZSTD_DCtx_reset
ZSTD_DCtx_setFormat
ZSTD_DCtx_setMaxWindowSize
ZSTD_DCtx_setParameter
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_cParam_getBounds
ZSTD_checkCParams
ZSTD_compress
ZSTD_compress2
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingCDict_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressSequences
ZSTD_compressSequencesAndLiterals
ZSTD_compressStream
ZSTD_compressStream2
ZSTD_compressStream2_simpleArgs
ZSTD_compress_advanced
ZSTD_compress_usingCDict
ZSTD_compress_usingCDict_advanced
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtxParams
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_advanced2
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_createThreadPool
ZSTD_dParam_getBounds
ZSTD_decodingBufferSize_min
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDDict
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressBound
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompressStream_simpleArgs
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_decompressionMargin
ZSTD_defaultCLevel
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateCCtxSize_usingCCtxParams
ZSTD_estimateCCtxSize_usingCParams
ZSTD_estimateCDictSize
ZSTD_estimateCDictSize_advanced
ZSTD_estimateCStreamSize
ZSTD_estimateCStreamSize_usingCCtxParams
ZSTD_estimateCStreamSize_usingCParams
ZSTD_estimateDCtxSize
ZSTD_estimateDDictSize
ZSTD_estimateDStreamSize
ZSTD_estimateDStreamSize_fromFrame
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_frameHeaderSize
ZSTD_freeCCtx
ZSTD_freeCCtxParams
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_freeThreadPool
ZSTD_generateSequences
ZSTD_getBlockSize
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromCDict
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameHeader
ZSTD_getFrameHeader_advanced
ZSTD_getFrameProgression
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingCDict_advanced
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_initStaticCCtx
ZSTD_initStaticCDict
ZSTD_initStaticCStream
ZSTD_initStaticDCtx
ZSTD_initStaticDDict
ZSTD_initStaticDStream
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_isSkippableFrame
ZSTD_maxCLevel
ZSTD_mergeBlockDelimiters
ZSTD_minCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_readSkippableFrame
ZSTD_registerSequenceProducer
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_sequenceBound
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_toFlushNow
ZSTD_versionNumber
ZSTD_versionString
ZSTD_writeSkippableFrame
Name
.text
Size
557KB
Virtual Size
556KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
212B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=13, id=261, version=35207,
count=3, id=257, version=33140,
count=58, id=1, productName=Unmarked objects,
count=37, id=260, version=35215,
count=1, id=256, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,