EliteCheatsX-2.0.zip
- SHA256 41b52640a33c92b80fe4c21aff63b1ea84bd3683e8f078d309c2beda8a5dbc2b
Password
EliteCheatsX_v2026
Overview
overview
8Static
static
3AppBase/fo...er.dll
windows10-2004-x64
1AppBase/fo...pxx.js
windows10-2004-x64
3AppBase/fo...pxx.js
windows11-ltsc_2024-x64
3AppBase/fo...GL.dll
windows10-2004-x64
3AppBase/fo...GL.dll
windows11-ltsc_2024-x64
3AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
8AppBase/fo....2.jar
windows10-2004-x64
1AppBase/fo....2.jar
windows11-ltsc_2024-x64
1AppBase/fo....2.jar
windows10-2004-x64
1AppBase/fo....2.jar
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
8AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
8AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1AppBase/fo...in.dll
windows11-ltsc_2024-x64
1AppBase/fo...in.dll
windows10-2004-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
AppBase/fonts/Settings/dxcompiler.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
AppBase/fonts/Settings/include/gmpxx.js
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
900 seconds
Behavioral task
behavioral3
Sample
AppBase/fonts/Settings/include/gmpxx.js
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
1 signatures
900 seconds
Behavioral task
behavioral4
Sample
AppBase/fonts/Settings/lib/x64/libEGL.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral5
Sample
AppBase/fonts/Settings/lib/x64/libEGL.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
3 signatures
900 seconds
Behavioral task
behavioral6
Sample
AppBase/fonts/Settings/lib/x64/libaccess_concat_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
AppBase/fonts/Settings/lib/x64/libaccess_concat_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral8
Sample
AppBase/fonts/Settings/lib/x64/libattachment_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral9
Sample
AppBase/fonts/Settings/lib/x64/libattachment_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
11 signatures
900 seconds
Behavioral task
behavioral10
Sample
AppBase/fonts/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral11
Sample
AppBase/fonts/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
AppBase/fonts/Settings/lib/x64/libbluray-j2se-1.3.2.jar
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
AppBase/fonts/Settings/lib/x64/libbluray-j2se-1.3.2.jar
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
AppBase/fonts/Settings/lib/x64/libcdda_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral15
Sample
AppBase/fonts/Settings/lib/x64/libcdda_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
AppBase/fonts/Settings/lib/x64/libdvdnav_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
AppBase/fonts/Settings/lib/x64/libdvdnav_plugin.dll
Resource
win11ltsc2024-20260630-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
AppBase/fonts/Settings/lib/x64/libdvdread_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral19
Sample
AppBase/fonts/Settings/lib/x64/libdvdread_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
AppBase/fonts/Settings/lib/x64/libhttps_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral21
Sample
AppBase/fonts/Settings/lib/x64/libhttps_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral22
Sample
AppBase/fonts/Settings/lib/x64/libidummy_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral23
Sample
AppBase/fonts/Settings/lib/x64/libidummy_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral24
Sample
AppBase/fonts/Settings/lib/x64/libimem_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral25
Sample
AppBase/fonts/Settings/lib/x64/libimem_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral26
Sample
AppBase/fonts/Settings/lib/x64/liblive555_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral27
Sample
AppBase/fonts/Settings/lib/x64/liblive555_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral28
Sample
AppBase/fonts/Settings/lib/x64/libnfs_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral29
Sample
AppBase/fonts/Settings/lib/x64/libnfs_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral30
Sample
AppBase/fonts/Settings/lib/x64/librtp_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral31
Sample
AppBase/fonts/Settings/lib/x64/librtp_plugin.dll
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral32
Sample
AppBase/fonts/Settings/lib/x64/libscreen_plugin.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Errors
Reason
zip: not a valid zip file
Reason
zip: not a valid zip file
Reason
zip: not a valid zip file
Reason
zip: not a valid zip file
General
- Target EliteCheatsX-2.0.zip
- Size 106.2MB
- Sample260706-es6tesdv2p
- SHA256 41b52640a33c92b80fe4c21aff63b1ea84bd3683e8f078d309c2beda8a5dbc2b
- MD5 c83e505ea87bab9cf58710111a60d904
- SHA1 827b5763f639d1b8ea381161b22bbb371a4a7d12
- SHA512 51dcc704b9c5b951e8715168b72669722b69190ccb972be87385b8893e9bf29e3ea601a1025039dfeb8c5368a5da3b9fea6084da4d16893e1fca2bad3d16e93d
- SSDEEP 3145728:n5pNp8zLCtQPeXyEMHuqnRf9n1qK5O3i+hzRk:5pNp1WeMHu61Z+he
- TLSH T1BE38339D1ACBEBC0E1C86027D2FCC1A4EA6D41369CFF5906B5E1229C6AC5D8E360FC55
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned JAR 1 IoCs
Checks for missing JAR codesign signature.
resource unpack001/AppBase/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar - Unsigned PE 34 IoCs
Checks for missing Authenticode signature.
resource unpack001/AppBase/fonts/Settings/lib/x64/libEGL.dll unpack001/AppBase/fonts/Settings/lib/x64/libaccess_concat_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libattachment_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libcdda_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libdvdnav_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libdvdread_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libhttps_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libidummy_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libimem_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/liblive555_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libnfs_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/librtp_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libscreen_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libsdp_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libshm_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libtcp_plugin.dll unpack001/AppBase/fonts/Settings/lib/x64/libudp_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libEGL.dll unpack001/AppBase/user/Settings/lib/x64/libaccess_concat_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libattachment_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libcdda_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libdvdnav_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libdvdread_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libhttps_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libidummy_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libimem_plugin.dll unpack001/AppBase/user/Settings/lib/x64/liblive555_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libnfs_plugin.dll unpack001/AppBase/user/Settings/lib/x64/librtp_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libscreen_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libsdp_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libshm_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libtcp_plugin.dll unpack001/AppBase/user/Settings/lib/x64/libudp_plugin.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/EliteCheatsX-2.0.exe
File Explorer
-
EliteCheatsX-2.0.zip.zip 106.2MB
-
AppBase/app_109.sdata526KB
-
AppBase/app_116.000735KB
-
AppBase/archive_14.dat731KB
-
AppBase/archive_60.sdata739KB
-
AppBase/archive_85.bin545KB
-
AppBase/backup_122.sdat673KB
-
AppBase/base_51.bin673KB
-
AppBase/cache_29.sdat592KB
-
AppBase/cache_46.002679KB
-
AppBase/cache_90.sdata677KB
-
AppBase/config_118.sdat594KB
-
AppBase/config_40.000605KB
-
AppBase/core_106.data673KB
-
AppBase/core_39.000723KB
-
AppBase/core_80.002676KB
-
AppBase/data_56.sdata705KB
-
AppBase/fonts/Ermilov-bold.otf19KB
-
AppBase/fonts/Settings/dxcompiler.dll.dll 19.5MB
-
AppBase/fonts/Settings/icudtl.dat11.9MB
-
AppBase/fonts/Settings/include/gmp.h82KB
-
AppBase/fonts/Settings/include/gmpxx.h.js 126KB
-
AppBase/fonts/Settings/lib/x64/cef_100_percent.pak261KB
-
AppBase/fonts/Settings/lib/x64/cef_200_percent.pak412KB
-
AppBase/fonts/Settings/lib/x64/chrome_100_percent.pak602KB
-
AppBase/fonts/Settings/lib/x64/libEGL.dll.dll 360KB
-
AppBase/fonts/Settings/lib/x64/libaccess_concat_plugin.dll.dll 45KB
-
AppBase/fonts/Settings/lib/x64/libattachment_plugin.dll.dll 43KB
-
AppBase/fonts/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar.jar 68KB
-
AppBase/fonts/Settings/lib/x64/libbluray-j2se-1.3.2.jar752KB
-
AppBase/fonts/Settings/lib/x64/libcdda_plugin.dll.dll 810KB
-
AppBase/fonts/Settings/lib/x64/libdvdnav_plugin.dll.dll 230KB
-
AppBase/fonts/Settings/lib/x64/libdvdread_plugin.dll.dll 164KB
-
AppBase/fonts/Settings/lib/x64/libhttps_plugin.dll.dll 154KB
-
AppBase/fonts/Settings/lib/x64/libidummy_plugin.dll.dll 43KB
-
AppBase/fonts/Settings/lib/x64/libimem_plugin.dll.dll 43KB
-
AppBase/fonts/Settings/lib/x64/liblive555_plugin.dll.dll 586KB
-
AppBase/fonts/Settings/lib/x64/libnfs_plugin.dll.dll 288KB
-
AppBase/fonts/Settings/lib/x64/librtp_plugin.dll.dll 662KB
-
AppBase/fonts/Settings/lib/x64/libscreen_plugin.dll.dll 50KB
-
AppBase/fonts/Settings/lib/x64/libsdp_plugin.dll.dll 42KB
-
AppBase/fonts/Settings/lib/x64/libshm_plugin.dll.dll 45KB
-
AppBase/fonts/Settings/lib/x64/libtcp_plugin.dll.dll 43KB
-
AppBase/fonts/Settings/lib/x64/libudp_plugin.dll.dll 44KB
-
AppBase/fonts/Settings/mspdf.dll.dll 18.4MB
-
AppBase/fonts/noirpro-bold.otf46KB
-
AppBase/fonts/noirpro-light.otf45KB
-
AppBase/fonts/noirpro-medium.otf46KB
-
AppBase/fonts/noirpro-regular.otf45KB
-
AppBase/fonts/noirpro-semibold.otf46KB
-
AppBase/info_1.sdata756KB
-
AppBase/info_38.bin558KB
-
AppBase/info_6.dll645KB
-
AppBase/log_17.data531KB
-
AppBase/main_47.dat657KB
-
AppBase/main_92.sdat540KB
-
AppBase/meta_42.bin747KB
-
AppBase/module_127.bin697KB
-
AppBase/module_26.dat561KB
-
AppBase/module_74.dll547KB
-
AppBase/node_25.dat563KB
-
AppBase/output_129.data680KB
-
AppBase/output_31.bin540KB
-
AppBase/output_58.dlm554KB
-
AppBase/proj_10.bin545KB
-
AppBase/proj_35.data585KB
-
AppBase/proj_73.002730KB
-
AppBase/record_0.002711KB
-
AppBase/record_11.sdat541KB
-
AppBase/record_62.dlm700KB
-
AppBase/record_70.sdat715KB
-
AppBase/resource_121.dlm676KB
-
AppBase/resource_53.bin544KB
-
AppBase/resource_7.sdata734KB
-
AppBase/resource_95.bin534KB
-
AppBase/sample_93.data747KB
-
AppBase/settings_102.sdata705KB
-
AppBase/settings_12.dll744KB
-
AppBase/settings_30.data630KB
-
AppBase/settings_57.data720KB
-
AppBase/settings_88.data723KB
-
AppBase/settings_97.sdata643KB
-
AppBase/user/Avatar.jpg.png 47KB
-
AppBase/user/Settings/dxcompiler.dll.dll 19.5MB
-
AppBase/user/Settings/icudtl.dat11.9MB
-
AppBase/user/Settings/include/gmp.h82KB
-
AppBase/user/Settings/include/gmpxx.h.js 126KB
-
AppBase/user/Settings/lib/x64/cef_100_percent.pak261KB
-
AppBase/user/Settings/lib/x64/cef_200_percent.pak412KB
-
AppBase/user/Settings/lib/x64/chrome_100_percent.pak602KB
-
AppBase/user/Settings/lib/x64/libEGL.dll.dll 360KB
-
AppBase/user/Settings/lib/x64/libaccess_concat_plugin.dll.dll 45KB
-
AppBase/user/Settings/lib/x64/libattachment_plugin.dll.dll 43KB
-
AppBase/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar.jar 68KB
-
AppBase/user/Settings/lib/x64/libbluray-j2se-1.3.2.jar752KB
-
AppBase/user/Settings/lib/x64/libcdda_plugin.dll.dll 810KB
-
AppBase/user/Settings/lib/x64/libdvdnav_plugin.dll.dll 230KB
-
AppBase/user/Settings/lib/x64/libdvdread_plugin.dll.dll 164KB
-
AppBase/user/Settings/lib/x64/libhttps_plugin.dll.dll 154KB
-
AppBase/user/Settings/lib/x64/libidummy_plugin.dll.dll 43KB
-
AppBase/user/Settings/lib/x64/libimem_plugin.dll.dll 43KB
-
AppBase/user/Settings/lib/x64/liblive555_plugin.dll.dll 586KB
-
AppBase/user/Settings/lib/x64/libnfs_plugin.dll.dll 288KB
-
AppBase/user/Settings/lib/x64/librtp_plugin.dll.dll 662KB
-
AppBase/user/Settings/lib/x64/libscreen_plugin.dll.dll 50KB
-
AppBase/user/Settings/lib/x64/libsdp_plugin.dll.dll 42KB
-
AppBase/user/Settings/lib/x64/libshm_plugin.dll.dll 45KB
-
AppBase/user/Settings/lib/x64/libtcp_plugin.dll.dll 43KB
-
AppBase/user/Settings/lib/x64/libudp_plugin.dll.dll 44KB
-
AppBase/user/Settings/mspdf.dll.dll 18.4MB
-
AppBase/user/level.txt1B
-
AppBase/user/login.cfg19B
-
AppBase/user/nickname.txt7B
-
AppBase/utils_112.sdat735KB
-
EliteCheatsX-2.0.exe.exe 7.1MB
-
dxil.dll.dll 1.4MB
-
libEGL.dll.dll 491KB
-
settings.dll645KB
-
vc_redist.x64.msi.msi 25.6MB
AppBase/app_109.sdata
- SHA256 e6f1e9fcca6921088c6251de4b30c91ef75922567511403d16059e8303334748
- MD5 2e5238c696b8173f2a77ec50fdf8480f
- SHA1 123057d6bd5e21628c92b0d26ffb824530f56673
- SHA512 6da8aec6b1e0fbdbd9d8f75654332adb834d831e87b7f6efb9458c63548893b73dcccd53a00366a243816047dd1f13e6a9474431442fff1d0cf3371d37f2480a
- SSDEEP 12288:TFfUOPZQ3x4P0nChHMplzCB8fNSpofJvM2TfhuRLvZyFm:TFc1GPJsHzCB8FXmGfOLMFm
- TLSH T1B4B4232DE568CDF8BBC9D4D0B135BA64311B1FE87F40481C115DD9022BE5BB4289EAFA
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/app_116.000
- SHA256 1799c4fb2e0729e19b75bfbdcf87da5867193bfe4353287d86396f5125f86660
- MD5 cccda5e5e567b77a468c31716684c8db
- SHA1 20644968b5de84410f23d56bc1a8862ed5b60939
- SHA512 dfa0372b9833c4fc6c3a3024ec4f06e637662115751eec37c5981fbcd1f7579fa7136e74764cc8f9905aa50ab802ebd59e6202d43f620e217e35a50f30976e92
- SSDEEP 12288:thfy6uEpD0HCr/G9eOZKvBMYy8GNp8KGMpfsX3mf522Dj/g4VBqluj8:thFLr/GIRGCGNp8KGefsX3Fi/g4VBql9
- TLSH T151F4331D7D606F4D621E6E49A6DB0018BE77A3FC3CC4020D1DEDC5D96722B362950EBA
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/archive_14.dat
- SHA256 1997fbd9db999ebb76f31445edf15c36214af01868c30a7c4518bcaab04dc355
- MD5 0cd36618d57ff97b1f49436677a44b07
- SHA1 a8595a241467876bc252f2f3f4e4dc210c6b1902
- SHA512 5cf073e1f980b9b467592a622a5cc42eba56aeac44c910cd0e141ba8a2959baf75e8fb988c7236674bd9282bf0bf038e463775af2723c262212b0ca52bfe3865
- SSDEEP 12288:4ios1y3V/BlRSc29VwTSUvbJTX4t88aOdKtNGpD8p8AuCzrLJ:3z1y3CcIw+Uj2CfMKDkD8JPrLJ
- TLSH T130F4233F25ABDF190DEF9BE3E91153055009B0CBF2163009279966F9F28EFEA14652E1
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/archive_60.sdata
- SHA256 00c2ae47af1d9323bfaa11467b1fcac2298d02da95f69bb9ec922d59cd64d114
- MD5 d9eac3efa350fe9eddce4f727af4b950
- SHA1 db24c6f539b571d951b0dbd8f70b710f6c0c8dd4
- SHA512 f77c59890dbbdda9509b1179fa5d4e2893ccd51a60712c975cbb9b577f3cccc2db5734dc76a51e646f6560bc4cb59318f49362b02ccae0b27c68eba4ec6af65f
- SSDEEP 12288:nrq59403l5qLVx0OcuxnNYZzpOqBqHZEJ5YNFwxMRlFMjjZUYtppGpcDJyXtxeo:G5F3lkLIuNYF6UYIxMRjwJr8uU7eo
- TLSH T151F423F051A40E68194C352F8DF1D7C64472C84BF2FBBDB5DAA8B7BA479361BD42A081
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/archive_85.bin
- SHA256 fc044ce36c3165de9821f230611e4ddedd9d341ce9b75cd9370fc07acf14e4c6
- MD5 9172a41f347e55418bcf0503bef400e4
- SHA1 bcf07bc651ce28f86e075a8ca2577af9fdd16f9d
- SHA512 b17bd79a91e3dc2dcc311c77e4eaf03a34a80b2624a9fda86edf3710fcacf879012db1d4190ddfe53c15174985ccd19f47209aa4acb42c591eadc486bdb50704
- SSDEEP 12288:FH/eWA1Oh7+JSqOhW67taAxfMezYMaOKQD/9jTSJD2tySePKrOlDd:Vc1OV+5OhVaAee8MaO3UJiveSrOlDd
- TLSH T16CC4233C3CD7666E11EA967C978D39964A63C3740032F0F6D79A24298E67472E1EC2D3
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/backup_122.sdat
- SHA256 ff4eaa2579cb3788cc2361edeacd88f2b784cdca318a1b4a54042a7dae07a3d1
- MD5 cadd38cf979dda8b2c68ce95721847ec
- SHA1 a01c1e26eb624104e378a5f001d363603e0f2798
- SHA512 73abefa15c19bfd6c25cf6fceb1c844f4345a4bcff07fe8290a0ee7b18c735079ca5a1e275b94bc4ae4422a0ef92424fa9949282e3fccb8b0aa4a67f225031ee
- SSDEEP 12288:Ohylx8oX0gL5gKG4ta2tERibMTyR+1ILFgh8x9syQhU5KTug6cj:OhaLGKNa2tmuMTO9DAU5KTnN
- TLSH T1D4E433FB1834DBD8AEA4172854F4BC5F7AE9D8C2E154F071853F2BB68D10B2D64A19C2
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/base_51.bin
- SHA256 6960417ad6ee6e5a12d58cee55a622bb2a4df9ef10113b2c70995b50c3c71fc1
- MD5 113a8fa0d4a3c18502fa6e5c0c9519dd
- SHA1 29b56557f6d99e40955fb2d39635804cc8a0d870
- SHA512 b4654b25879269e81b1e61d60d4249a271a26ef6e19ce7f73d4b0df5cfdca70ec433cda960c4fc049c43005e358b0e58ef370a52dd0b86edaf84ff3d6f106ad1
- SSDEEP 12288:fREoR8M1f2hhEzzjQd69+dbkPucOYfnbTwyyRcTgOxTqN9B4qHZi9XTIu+Nfk:5Eop1pXH+dbwbTCARcDZIXTQFk
- TLSH T141E4238D8B382785885DD5F72BD79590BDD9ED3F44AAE15F2382270C12E192A388CD1A
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/cache_29.sdat
- SHA256 eaf1afa4483b61e65b5f3abbba4ffc4e127bd434218f831ecd6bd336478f9552
- MD5 7ee460ed63b66d60641f023ae90bf5b1
- SHA1 ae916cff30ef55314496469726ee0d9a4be7945c
- SHA512 a0088fda5aae58c2a2a6f9e6d565c1ab08400a3fdf14b259ab90e6583ef76bb27055aacd0ce87785ec7de4ae6dabed67972eeff7faf3a9bb96a69de5aee7c3cd
- SSDEEP 12288:pQC15o6il4Dqfd2IaBo9O0Q+GQP1TW7SVvzid/CCqtgZmJMqDjj:pQW5Cqqfd2IaK9O0Q+R3v2ZVtqDP
- TLSH T103D42323C7258F07ECB645681FBDEE51CE74088C7AA5D1F6215A9BCA020D0294DBFA5F
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/cache_46.002
- SHA256 fc04e091692c5dcd01085f2033e1914f465d021bd38296d1f00cd84b24cfb446
- MD5 5f42aa6b08552682d32be6b5781336b0
- SHA1 fb4a6a8addb73d6fc5aefeccaa47c687fdfd0009
- SHA512 017f8f549ca48bc0f0ad1e26f531c654aa67e853e7e5992e248d63d0ca78169718cccb24766be846d2f7bed774c7db039135c29e0ffac9ddf2ada299a7beac96
- SSDEEP 12288:13uyXyvx7vIDIU1GwdAWaLK2p8zsFaho1n8RaR5MsM+PJcToBiKi4cG3QkYEg1V9:1eyodO1BdvaB8AFahoJRqaiKi4F89j
- TLSH T1ACE4334696797DC4906680ADEC65590C2464F237BC2D9CAC58D4E9363FC2DCCBA43ACF
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/cache_90.sdata
- SHA256 7d49371e15ce67c41f2c73af611b89e8116054c908556354a09877723218b5e1
- MD5 aa8035d99a0b870ac094b084afaa176a
- SHA1 577d33d04ece0e46787577281ec294f233fdd245
- SHA512 79290519be158cb86f0ac7b7e548d6d9fd989171586df42c806be27cd6bbe1106e0e2d04f1441ae2e6631dee92e95b52a5ec82e5efd5ba14c36b70ecf918888c
- SSDEEP 12288:q9o/cAUlq6tA/AJWQD5PdtOlFVNbhJe19/R7TC5zeOoiRLMXnpRPb7vxhtwN1l:qKUHl6Acu5PdtO3jbhJe1BVTC56GLsns
- TLSH T1ADE4238009C528FA035274F56EE07D96AF5E1C0FB854ED54FEE4C24588C22DC9BA9B39
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/config_118.sdat
- SHA256 87fab9ce5c3ab31abc6e8df27ff17b0242fc5138715941063f3e996bd1ec0aa1
- MD5 bec84a98548068bb82e770228cd40450
- SHA1 336db6556adb75e4ea8f2e4356e7ffa2006660f8
- SHA512 76db90a4104e9e299f239048dd9a03e6fd7a99ff294ce7cc0a9df412c9791de837f8e2747ab4f63b6e809675b292736173843d648e5dcc9b49c468a08b4556ec
- SSDEEP 12288:38XMzPacw8a/P7W9tTclySWj24IO87d64jLguvBxJHO9YT8g:38XMzScta/P7WzQwj24Qgu7JH6YQg
- TLSH T10FD423F8EED48DA9FAA79790678C7CD69C702EEB009DB81785B6393DBE134102941706
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/config_40.000
- SHA256 4ad3687ea0eda48273287aea6ccf67b9f7d1010e23cdcbbe9ca825e9cd5fa145
- MD5 90ac264b5439bb55f4b3653ba79dc5b7
- SHA1 fc0e6934726379f7fa2b7f62d26ab39e0bec0962
- SHA512 2c6705b1a0d209452a8582bdda396f3752aa8032310a941b907188c0de04a34e4de6d862f445c365696a3dc28f8577517ec38d54cc519a3efe7e1c859fd4a2b2
- SSDEEP 12288:2ANn7H8XZF6CmoT8cSpNEG/LlRH5o4hZYYJOkPNIYRp8jfn2:2gTmZFAoBSMCzcYJOWNImp8S
- TLSH T1E0D4330960E631E39477DE871FEEF6A930299EF21D5653DC01039B92AEA63780311FD8
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/core_106.data
- SHA256 de0d2bb056f4b431c21893fff30d042943138288e30e055487dc5dfd327fc07a
- MD5 2cea1e55db399421cf259b97f8dd4fed
- SHA1 b029a006b300a19f9cd78f06fb087dc8d8d68a1a
- SHA512 209c4f52d182fe24ca346beeb0a824af692a318dc03ed4f5fa56470caf44e835d6677a3705b79c109df04aa6915ad2e4382f005042fe3ee2733c1aa6cc38f0ca
- SSDEEP 12288:xfqLt0xOs338ldKcyqu7xMfJjkRgKj0VysU4LemNtVoJi1wHXlAN3FT2/Ryq:xyB+8+7ufYgVysU4Lezo1wVAlFTyYq
- TLSH T1D8E43394562BF9CC619E0C9422DE0DB16B9C514C408DCE93E5BB56EE2C4A23BFCC84B7
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/core_39.000
- SHA256 1a27e075fed08a81632bbbd9aa61d070e4de72194e03cd5f58f54427392df40c
- MD5 f8bd1e5c99a7a1a84a3297e4a5836dfd
- SHA1 5066292a35f9ad3551b5ab90d86ca7863b8a426d
- SHA512 632355c868507d24e2a5943801c6e21130a1a44014ca7f073d35a82703dda1655191a9c89457a7b68af1d1abbc288e9d108763c669bf7e2c7723df9ed1182330
- SSDEEP 12288:0nWa0mKNcc2CsiVjCnw5DRaGz929+BRsRHsO5xt9clrhvp+3omLRUW532QAyu/X:KENMCvjB5t/Jw+wHs0ti9+3okRUW5GQa
- TLSH T16BF4335FB299640839BEB17026116795A1E6EDE3E35C8B4D29B3195A9FFCA00433CD3C
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/core_80.002
- SHA256 62c5ba87689fe7f74fa76a389172a8ae7579928f82330bb48856378a10f6e5cb
- MD5 0a29ef60f24d10c8b46a9c3b7e813ec9
- SHA1 6c261299f51f501ef33cc0213961a9fa96b95a03
- SHA512 0834760fa7d6538823954f7afd5a38859e16b06db36e235d3485610dfca6c75e415510474d6e0faa1a50aaa5cdb63992401953eb9a1e2a2bce960b60457fb202
- SSDEEP 12288:Ftq8ysgfjO2JeFiEOxNdRQN9y0iJvSlsWbbAxvuXoTLHFAuPDJ4PBO3aOsa9eMF7:/5MS2JAiEOPHQ20OalXbbABpvNJ4PBOL
- TLSH T170E4337085D82D003E567BC860940DD8CA6833DD57DE3686E7ABB19188EFEA3C572F19
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/data_56.sdata
- SHA256 b14724a3f9f6c3146cf03a77110975a8dd8a4c62605a4e07ffa9e7268f30aeb0
- MD5 547e14bf03837cab0864157d5b4979fb
- SHA1 1f8ba4f9b1bf4e6d57bf04249202ea4bf6a13ef7
- SHA512 a464cc0d207b5a011d27ea05b12946599a99d8d19fc4d011a1e3c3302c78695b340092ad43ff7b5684790ddd53092a572ad5080c9fbf0a1050937b5fe782a59b
- SSDEEP 12288:cDMFGlVrGYr9JDEZLEQ1BCYCZJjk/+bNIeUHRZ2xx6P/eMtiC011I3sJux:cDvVrXDwyQ1Nnt/90I3sc
- TLSH T114E4337FB63BC005C9D18F00B4AA615F4758ED80334467EEAAFA7AC2E5E14A4355E1B3
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Ermilov-bold.otf
- SHA256 313853834af268849fa2cc950f72c8ec8476762357f243c0b0041bf1c01b2cd9
- MD5 46bcd614caed5a6160502337ae3be4ec
- SHA1 068686e8303eae02b07ebc7c06b584b4436f840a
- SHA512 5f0ab318b2fdb24fc9659db1c3122756128d51565e2512164b842003c4ca0407f1003791ceddd191bbb493b534f87aea8138033a00c4f1815b540ab41e89f531
- SSDEEP 384:BRdcyzfWkdiVuo0w0bgylLqffH3CRcxHtiUX9DymoRr7mDkbB:BRdmii8mnyFqffH3CRcxHtn9e/SgF
- TLSH T16F926AD8BBB64364DE1599310715C7596738BCAC970EBB32B39C2E40A2547D0EF243A7
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/dxcompiler.dll
- IMPHASH cb1c31153b2195b8d3996116a8998d6d
- SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
- MD5 ef254abdb4599bf754222ab6894ba6bc
- SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
- SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
- SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
- TLSH T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
EliteCheatsX_v2026
Digest
7b:60:fe:27:4e:3e:1a:5d:14:87:0f:31:63:5a:1d:dd:d9:a2:0b:00:c5:c6:0a:f0:7e:a5:f4:b8:88:bf:08:e8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1a:a9:a0:1d:06:a0:0f:43:aa:00:01:00:00:02:1a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
15785744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
dxcompiler.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringOrdinal
CompareStringW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapWalk
InitializeCriticalSection
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
user32
UnregisterClassA
advapi32
EventRegister
EventUnregister
EventWriteTransfer
ole32
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarBstrCat
VariantClear
VariantCopy
VariantInit
DxcCreateInstance
DxcCreateInstance2
Name
.text
Size
15.4MB
Virtual Size
15.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
586KB
Virtual Size
585KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
25B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/icudtl.dat
- SHA256 d0f4be489b2db9021c599df3a9bf60250c80812b25cf7516ddd54f9aebfeb4dd
- MD5 d4da57dd6a5958018ba2993ec04d6829
- SHA1 b5d66e2a9402a46beb78705779bb815da2daf320
- SHA512 aef0effee0ed59edfa777645a53144a7eb64df62bd44253f38ee6169ad0ba5f89b2971368f23f46487ca48cfc5467169523f4fb36ca2740b94414053e909ecc4
- SSDEEP 98304:epcBQYOo+ddly1PUsGQDQCHHiXUxO/RJk3IWhlbntjidHp8L:epcBhORoZbHiXUxO/RJk3IWhlbntjEa
- TLSH T12CC62903A2FB4EC2F9FBAF70D9F552679567BD49AE32805911042F3B1C333A08665762
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/include/gmp.h
- SHA256 10e3ea336a3b8422a71cfe16e275a06d5a2b61fdb61d517cdb667c8b68d79c2b
- MD5 fd70afafe6ed14c4ae916ed73837db11
- SHA1 8624bf591cf657b4fc9156467ad45b202c8ec693
- SHA512 311737f45ec22b27e8adb8ada061d9e69048dcfe3a7b0eba73163e83001aab65c46e5a99524f285e74be6615f3080d5f42bb5e0411149700b4a1a0e182a14a4b
- SSDEEP 768:mtKm3ThBjswH4UtgczTHzAMAGKwzyJ8+Phyw+cZToydVG+7HRcpLPZoUJ2WEdNqZ:UlBjsnUvoJ8+Phyw+hpLBPJ2WE4GC
- TLSH T1F1832F2C2FCA6CD160EAD215F75BD14D4980DB2331929ADC7C4D2CD85BCB42A16EDBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/include/gmpxx.h
- SHA256 0011ae411a0bc1030e07d968b32fdc1343f5ac2a17b7d28f493e7976dde2ac82
- MD5 ea3d21de4bcf7c696799c5c55dd3655b
- SHA1 3e020a13e5ff85d6214ad56ac07395f53efa50d2
- SHA512 5c102c423d0147cc7bfdb4a5fce6863605969cd3a2d914c8485b5db60d33f6efef4729cce6c63d57f81627dbd50e83438c8ab54fb525d119fe02d922ce540d97
- SSDEEP 1536:ljLJi+vitB4/K8YKwUWyomDIgBxf4zj9f8LaqDyOp0e2j4DO4KV4/KX4YKztWcZk:l2xmWxg/M8OVFi2Qm
- TLSH T12DC32079208AFC919A93C031D263C5A5F650474133E8CD98B81E2678DFE3C56C7AEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/lib/x64/cef_100_percent.pak
- SHA256 df959508b33b444926f952d14dc0a7b3a5e65da6f24fb6ea43fad9baa9569065
- MD5 4219da3feb0447386fef2dd5c3b20e79
- SHA1 aa2c5a3d3740d8a703966e32f9c44c63c9400ea6
- SHA512 0d000f59bcfeb08fdf6f75204a5a3364c1bb65974d04d158a5006a774880ffb1576db44c583ad519ff62a91691b71dcacada3a8e326d48f8336e63ea15f746f8
- SSDEEP 6144:/8MrUnuUE6f3urK6bYSTw3o8z0i9Q83LDW4IqYbBv1urwA95X6x:/8eMefh8b4qesL6x
- TLSH T18144F1E3B3B4BC3ED65A1A33B2510B37D97B423906930349C28685B57D56B80EADD34B
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/lib/x64/cef_200_percent.pak
- SHA256 15f7f63f3ff7e6b0b69d059342d0f38e4b21f18a0ddf7c63fa0509829057eb07
- MD5 b4ce3ed593a2a468537a0129f4ed10a2
- SHA1 22896f7fe4f037c45fd5503d239a6fb3ecb43f7c
- SHA512 3a5aec6c5ebfd2d91aa26946fae7c9618c7b29c488b4310425dad043ccdb17b086f9b6d7dbd7390131d83a901b772a3de5b9beaa12a1061fa589d760240804fd
- SSDEEP 6144:cMrUnuUE6f3uruUQXaFeVGThjO7k1u3o8z0ILuBJeD5UV0Fmm8Rz4tPWS7vKv6AA:ceMeIK11jO7k15BMS0FmmQ+DOhGr
- TLSH T1FB9402E6F3F8AC39D9631A3352520A73DD7B143506A7030AC28A9D397D56B9489CD38F
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/lib/x64/chrome_100_percent.pak
- SHA256 b41f48b151cc4beddb80b15f3209a83b8f5bcde5bcf28187638c2d0f9e71f406
- MD5 d5c28e09fe5fe20bcd00e54fbc0a3305
- SHA1 8e0702d3a34e0b96ab1bdba9af59e679d6fbb5b0
- SHA512 e246cf397dcb1740a995ffc0cedeadc59dc61ebd87a1810a94c3478c83bcba0248821016e8e894d241fdf04ab3105a45386e4be52440504f2e6a269b6c805f34
- SSDEEP 12288:fR3jWI7PsCnz3bqe24pOAV8x0jJ/QuCbJa9tHuMySq9TOtxxCJuA:1WlCzb4v+JYb+tHHySq9TMxxyJ
- TLSH T1A4D412D37375EC3DEA6B567BA22940B0FC3345194A92020A07DFE87A2E56748D8D97C3
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/lib/x64/libEGL.dll
- IMPHASH 14cd5ffd5d2a5e20eb8ffa21377b813a
- SHA256 fbbe65fb7725e6fde8c381c59d170bff153b87fdf99f531d46dcfd2c1e237f98
- MD5 a1cd233bdfb48de54e18a074caad1f5c
- SHA1 dced789ffa957951389482aa03c3da272bde114a
- SHA512 22b7a5c4dae5d5220cf2179201c88371d0d24de3a4fdb709381059548bc238e892423f8dd2d3837706de6b554551651aed956526e8f69a89ddc1088974f8d164
- SSDEEP 6144:y8BSlAEZQH65WlPum8AW7elHtE+pGMYgZwlxE:y8BEjQH0/m8AW7extsB3E
- TLSH T157749E40B5C0C072D46E25353A28D37C4ABDAD621F6959CB93B84DFD6F702C26A3726B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
1
Major OS version
5
Entry point
133152
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
X:\RGL\cef-git\chromium\src\out\Release_GN_x86\libEGL.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCopyMetalSharedEventANGLE
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglForceGPUSwitchANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglMakeCurrent
eglPostSubBufferNV
eglPrepareSwapBuffersANGLE
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryDmaBufFormatsEXT
eglQueryDmaBufModifiersEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSetDamageRegionKHR
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR
Name
.text
Size
263KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
145B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
126B
Characteristics
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libaccess_concat_plugin.dll
- IMPHASH 0a4632681e630c8eebeeb93ae1bd84dc
- SHA256 f28831b08aa6969c91f282668cd7fd02311e83a001fd31ad7ac6f1fe49fccdbc
- MD5 486b252a5b4f4c60b70ebba8dc7cbaa3
- SHA1 30e45ff8cfb6d34d6462a11373714c1668083156
- SHA512 5963c7834c6dc17ac1d432564bf4c80b9c0a011de5aaf891933b9594a275763e93c8b1e1ef280ebaa8580c7ce07ab69f46bcc4d60aa8f096aa66e4ef7438ad7b
- SSDEEP 768:7cLsu3hSEwFxXiVdEVOxY/ANxXiVdEVOxJu:oLseDw7yVTxIAjyVTxI
- TLSH T110237E679350AC58C91FC571B5ED8737A671B9571A61CAAA0328C2300FA0B85BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Create
var_Destroy
var_GetChecked
var_SetChecked
vlc_Log
vlc_access_NewMRL
vlc_obj_malloc
vlc_stream_Delete
vlc_stream_Eof
vlc_stream_ReadBlock
vlc_stream_ReadPartial
vlc_stream_Seek
vlc_stream_vaControl
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
616B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
170B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libattachment_plugin.dll
- IMPHASH 842d6bc0885c1b6720a2bb513f206c6a
- SHA256 37cf9f70a31fa6231e163348aeda9bbfc1eb8bd10efc4a5ca62cae568cbcdaea
- MD5 021917923bb4eba130526a89030c596d
- SHA1 cc8cd0413fb4da4a86944c085fc895f6654d3434
- SHA512 34f8759d6960cc805e38be749b83cafaf5fd27b4ad3f0e25b23742aac9c85e56bdf76deba59e1277651b65dcf5d07084c152d8e8bc150ebb5c0d5853d536591f
- SSDEEP 768:CW2Exuqnbs7wYxXiVdEVOx6ubhxXiVdEVOxtr3y:KEx9kwqyVTxJbvyVTxM
- TLSH T167137E67A650AC48C91FC57075EA8A3AAD75B9131EB1C7DB0364D2204FA0B81BBFD17C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
input_Control
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
167B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar
- SHA256 f6c9188634b521b08abb1ea530ab94d222a52f67fa59ca829136422931c1b213
- MD5 22ab31ce5bba1cd7069515e5d9c0d7d2
- SHA1 85dc9099235470cf2ed9b9dd559e6965d8612b17
- SHA512 55baa09d3a04dc72e43cf24ff5d84396e0d3af6f6a55b045e250a52d6fcb10f4c549570b96a57e6ff1247cdcbbd19e2ec35f4dd35e7c6649c84bb9c533fba524
- SSDEEP 1536:NXtczIvxI2imckaqmB+BOY8AujaARNkwCqZ4bwUWiz3t0m6g7Up:xtbI2sBnYwj5RNtbabSKt0mKp
- TLSH T1BF63E13218B82077DB5FC173D09606C1351E25F498872D262DE9AED376BADBFCB06520
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
AppBase/fonts/Settings/lib/x64/libbluray-j2se-1.3.2.jar
- SHA256 75fd105e4581290801866538270a9e7badeb5a6b9fba7d00b14b8312123c2d22
- MD5 9d76776c432194bb8ae70922eab1feca
- SHA1 5c4df6fdf208dea9d0bb9f7a4f418477981b4131
- SHA512 3b777731409ad23a2950081e7b8a87a53fe070e926ab2c1624669a85be41b95a238165f5d174e77f4c137418797f72fab45f3aee373c4ee177dda56fea896e0b
- SSDEEP 12288:gZ8S4ERL9jxTjxOL6uz9BoaItnvcKSClnb5yelW0lZ/hy+3njEz1Mk:gZ87Ej1xO1A3VvcKSeb5ycWqd0+3mMk
- TLSH T138F4CE72E1C42931F5638177A6E38423382E04DDEA867D13A8F66AD7E472C5AEF03715
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/Settings/lib/x64/libcdda_plugin.dll
- IMPHASH 027f361674bdef3fbbc4f6e5a32075cf
- SHA256 7a7d2c190907053f17ce7cdfad9d689cb6bcbcaa9e1e5d55f1071db137ef4e2f
- MD5 28087f663eb9e5516cb788ffed7c6ea7
- SHA1 f6d1b224d443e7064105b7196ae06033dc09ce19
- SHA512 4ec25c5085e547f6751a539df919b2927bb9143283c967be472219e68f9a2e3f0babc8ed27f4620c5184ff630b0446fef91cc6b75c0ef11f3d9d2be6a57ceb87
- SSDEEP 12288:6Vnl/u0/J8DPk9PX7OzfCHhINhaGvuy/12YK5sqcXYobT:6Vhu0KDPk9PKTshIWURRMUT
- TLSH T1AB056B5BE6A314ECC26BC13443976733B472F86612707EBF16A4D6303E12E605B6E7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
access_vaDirectoryControlHelper
block_Alloc
config_GetUserDir
date_Get
date_Increment
date_Init
date_Set
es_format_Init
input_item_AddOption
input_item_NewExt
input_item_Release
input_item_SetMeta
input_item_SetName
input_item_node_AppendItem
var_Inherit
vlc_Log
vlc_b64_encode_binary
vlc_close
vlc_fopen
vlc_gettext
vlc_memstream_close
vlc_memstream_flush
vlc_memstream_open
vlc_memstream_printf
vlc_meta_Delete
vlc_meta_Get
vlc_meta_Merge
vlc_meta_New
vlc_meta_Set
vlc_obj_malloc
vlc_open
vlc_stream_Delete
vlc_stream_FilterNew
vlc_stream_NewURL
vlc_stream_Read
vlc_towc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetACP
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
QueryPerformanceCounter
ReadFile
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_exit
_fstat64
_initterm
_lock
_lseeki64
_onexit
_open_osfhandle
_stat64
_stricmp
_time64
_unlock
_vsnprintf
abort
atof
atoi
calloc
clock
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getc
getenv
isalnum
isalpha
iscntrl
islower
isprint
ispunct
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
printf
raise
realloc
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strtol
strtoul
tolower
ungetc
vfprintf
wcscpy
wcslen
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_mkdir
_getpid
_fileno
_close
_access
user32
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
ws2_32
connect
gethostbyname
getsockopt
htons
ioctlsocket
recv
select
send
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
619KB
Virtual Size
619KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
161B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libdvdnav_plugin.dll
- IMPHASH ebb40a887e18180ed79c65e984c24504
- SHA256 e15f2c49db514f7e7f9d51866dfd249c739832c465185c777e0955249c9639cf
- MD5 4a5303dbb632f580a56627d83214227b
- SHA1 4344c6f6d6687bf5c7fd480275c9a4b2a52fcd26
- SHA512 335b8eddaedc57542afde15282e316eb63b22f0e07c68fa644239747aeef0d5d1bf4bad227405dcaff604d9ee61b4b33a217d17ea69e2be200d13518340b0ee4
- SSDEEP 3072:IC7jGpglaVh/Y1D6FgU9GzywQFJmFgH0mVeOurFCoTGrDTnqqqGR:LSg6mefGFomg0geVrFLkXR
- TLSH T190344B56B1922CECCA2BC1308397E632F972B8560230FD7E1B64C7751F15E216B6E96C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
es_format_Clean
es_format_Init
input_Control
msleep
var_AddCallback
var_Create
var_DelCallback
var_Destroy
var_GetChecked
var_Inherit
var_SetChecked
vlc_Log
vlc_close
vlc_dialog_display_error
vlc_gettext
vlc_global_mutex
vlc_meta_Set
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_object_release
vlc_open
vlc_stream_Peek
vlc_stream_Read
vlc_stream_Seek
vlc_stream_vaControl
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_findclose
_fstat64
_initterm
_lock
_lseeki64
_mkdir
_onexit
_stat64
_stricmp
_strnicmp
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wopen
_wstat64
abort
atoi
calloc
fprintf
fputc
free
fwprintf
fwrite
getenv
isprint
malloc
memcmp
memcpy
perror
puts
raise
rand
realloc
signal
sprintf
srand
sscanf
strchr
strerror
strlen
strncat
strncmp
strncpy
strtok
vfprintf
wcscpy
_snwprintf
_write
_strdup
_read
_open
_close
shell32
SHGetFolderPathA
user32
MessageBoxW
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libdvdread_plugin.dll
- IMPHASH b7af8b795333a0ca0174a05da5158471
- SHA256 cfb94e3e21ae82f05cf85e9f8be9ee012f6b7baa084c0ecca8c30310442959ef
- MD5 39d641807eab8c8e40d7eccf30960b4e
- SHA1 28413be490300791eb2d340a05b12e1ac2d1d24f
- SHA512 a8740bd4306e6ed495288b8af2fdc668dcfb3cb122d4e67cd79945a4045a4fc07740e7f8f0cf22698564bd2f28513d70d121dfa66fc2944b6b58f19a6ebfd208
- SSDEEP 3072:Bc25hZLo008Zo6BpLFLyfo+thjCpTZqdqsY:qUt0ibL0fZ/jWwY
- TLSH T105F34B16F15268ECDA2BC23057A7EA32F97178960330BE7D5B64C3741F25A2077AD86C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
es_format_Clean
es_format_Init
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_dialog_display_error
vlc_gettext
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_findclose
_initterm
_lock
_lseeki64
_mkdir
_onexit
_stat64
_stricmp
_strnicmp
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wopen
_wstat64
abort
atoi
calloc
fprintf
fputc
free
fwrite
getenv
malloc
memcmp
memcpy
perror
puts
realloc
signal
sprintf
sscanf
strchr
strerror
strlen
strncat
strncmp
strncpy
strtok
vfprintf
_write
_strdup
_read
_open
_close
shell32
SHGetFolderPathA
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libhttps_plugin.dll
- IMPHASH f22747f7e28bb1bec4fa071091455406
- SHA256 28f15014417c43e316af562b5809a54238a2b333fd048f83827d11c8518d08ba
- MD5 a5d6bd737c9aedac80d6a61a67e2e641
- SHA1 bab498a913367e99dbadc6e4065dc68703cc8ca3
- SHA512 6e1588d801f8dc233dd730684989b69f3bcd9be5797ab94baacddbf0e48e48238ad5cc74c993aa2fc030607111924621a113afdde87ac66b9fa213d975ca9392
- SSDEEP 3072:cjr8WMnJhvs/de6D8eaN7FlNic7bGXzMSl218JHdxCqkqqi:YQvJhvCdeQEFFlj/GjMl18JHDC8
- TLSH T14BF34C67E29254FDC65BC13456EA9736F831B8220730EEAE4774D6312E10F507B9E728
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
EliteCheatsX_v2026
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
block_heap_Alloc
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_b64_encode_binary
vlc_cancel
vlc_clone
vlc_cond_broadcast
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_wait
vlc_control_cancel
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_getProxyUrl
vlc_getaddrinfo_i22e
vlc_gettext
vlc_http_cookies_fetch
vlc_http_cookies_store
vlc_interrupt_register
vlc_interrupt_unregister
vlc_join
vlc_memstream_close
vlc_memstream_open
vlc_memstream_printf
vlc_memstream_write
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_restorecancel
vlc_savecancel
vlc_strerror_c
vlc_testcancel
vlc_tls_ClientCreate
vlc_tls_ClientSessionCreate
vlc_tls_Delete
vlc_tls_GetLine
vlc_tls_Read
vlc_tls_SessionDelete
vlc_tls_SocketOpenAddrInfo
vlc_tls_SocketOpenTCP
vlc_tls_SocketOpenTLS
vlc_tls_Write
vlc_uri_fixup
vlc_uri_resolve
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_exit
_gmtime64
_initterm
_lock
_onexit
_stricmp
_strnicmp
_time64
_unlock
abort
calloc
fputc
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
realloc
signal
strchr
strcmp
strcspn
strerror
strlen
strncmp
strspn
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
wcstombs
_write
_strdup
_open
_close
ws2_32
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAWaitForMultipleEvents
__WSAFDIsSet
freeaddrinfo
select
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
162B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libidummy_plugin.dll
- IMPHASH 1df9e74f4e9cfaa70e57d14a4542e958
- SHA256 2b2bb121de5d434a8fcb9d2bad73e3d4c20fba109417969b4f901a1569364c04
- MD5 3f42f3d4558afdba7fdac85b842cdb42
- SHA1 99bb323d783a15ca60674367cd2167d84a997229
- SHA512 56875b2514b1a2a3b61ba83481dea20666243cd43738ab7c099555de32cefe7092f0e07c4e46eff7e550bcf7ce7442f5b300f695f5afa95c37248e8062c07452
- SSDEEP 768:v26oPk8nqzeeQxXiVdEVOxam9xXiVdEVOxGT8O:v26IktieCyVTx5zyVTxk8O
- TLSH T12C138E679714AC49CD0BC57074E9863AE9B5B9521AB0CBEB0364D2704FA0741BBFE1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
libvlc_Quit
mdate
msleep
us_atof
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_stricmp
_strnicmp
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libimem_plugin.dll
- IMPHASH 5bb7568c3c7404fadffd9a95b4b48cf5
- SHA256 200cff43d8b8e7f569dc37df62619f61b78cbcdd6280c3401364e4c9f5ee5619
- MD5 cc2b2704a9565b5d55739c6cfda876aa
- SHA1 f02774528efe749e35bda06e066f4fd718a32e70
- SHA512 94d23b9e10ee9c7246e3072166c7ff105c14938d3b1b5c488dcc975c89dba3c98d1303c5a9ebcf245e1dbe14c2dab1d4bdeeef7814eda0ed4972d2dd651dca25
- SSDEEP 768:+4RVUL5iEmwgxXiVdEVOxzKxXiVdEVOx7FR:+4YQJwyyVTxcyVTx7FR
- TLSH T1DE138EA7A650AC89CD0BC57075EA4A36A975B9521A71C7EF0324C2304FA07417BFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Inherit
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
161B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/liblive555_plugin.dll
- IMPHASH 5e05b03185cd50c6283d344ad0352ba6
- SHA256 135ab5807ccf7d2af2913a43472df2182607e9daedd073b414cfc46e462a2870
- MD5 d3912ba8aa5657db2fb4df4b3ae6ba0b
- SHA1 e82c998bc6ad9b45810ac7b55929ed690a0df94a
- SHA512 29298b7b88b9fdf368807a85bf514e94486c8aad65e14a9f2e0c3bcc7c81cf049f20369dd61941388167a27967f094d6ebcedf08df9dabb37a92240e81c68b90
- SSDEEP 6144:NXPjRXFwbpefH3OG+k84UG2XPy8Btq3Ayd/ObEpVv7IzJFMy2IUbqG/6JjjAClP4:NXVWdef+b/7L/Bbw1v9y2IUb8YTSG
- TLSH T1C2D43A57AF6328FCC627C1708277A731A731F8110228BE6E36A8C7325F59D254F66678
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
ToCharset
block_Alloc
es_format_Clean
es_format_Init
var_Create
var_GetChecked
var_Inherit
var_SetChecked
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_b64_decode_binary_to_buffer
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_gettext
vlc_killed
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_rand_bytes
vlc_stream_Peek
vlc_stream_Read
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
vlc_uri_compose
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_ctime64
_errno
_exit
_gmtime64
_initterm
_lock
_onexit
_snprintf
_stricmp
_strnicmp
_time64
_unlock
abort
calloc
fputc
fputs
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
perror
puts
qsort
realloc
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
_write
_strdup
_open
_close
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyname
gethostname
getsockname
getsockopt
htonl
htons
inet_addr
ioctlsocket
listen
ntohl
ntohs
recvfrom
select
send
sendto
setsockopt
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
388KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libnfs_plugin.dll
- IMPHASH 6492fb72dbd3cb78d85aa6169324172c
- SHA256 29b9d3e676964223cd09e8836978a2d3b7c8e2bf5a03f406a4f34b7fd1f8d2ce
- MD5 6a777a460092ec80e33dc7ce8375d16d
- SHA1 46b6cc6c0415f80d642c25089e3ed2c3019262d4
- SHA512 f92a8e934c1faa9766ab0933bf4dab944286ace34cc6663541b344f5d7654390508ee742a756e290c807ec799d50b6862f4896d93b77214e7592433605e66661
- SSDEEP 6144:xuq5iH17IkJ8nDvmZo7Oj9Vwk80vvbaBL:xl5q7F2nrmZVVwk8EvU
- TLSH T1A3540A26D69625BCC66F82308257D3327971F864D721BD7F04A5CA382D18C617BBFE28
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
access_vaDirectoryControlHelper
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParseFixup
vlc_dialog_display_error
vlc_gettext
vlc_obj_calloc
vlc_poll_i22e
vlc_readdir_helper_additem
vlc_readdir_helper_finish
vlc_readdir_helper_init
vlc_uri_decode_duplicate
vlc_uri_encode
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_time64
_unlock
_vsnprintf
abort
atoi
calloc
fprintf
fputc
free
fwprintf
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memset
puts
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
vfprintf
wcscpy
wcslen
_snwprintf
_write
_strdup
_open
_getpid
_close
user32
MessageBoxW
ws2_32
WSAGetLastError
WSAIoctl
WSAStringToAddressA
__WSAFDIsSet
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getnameinfo
getservbyport
getsockopt
htonl
htons
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
193KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
232B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/librtp_plugin.dll
- IMPHASH 9291532ba75483bc643b94d5fad59688
- SHA256 721e0ba3a3c9bacce1a4516bfcfd8322cb37d3037650b3c36117452537ba9e50
- MD5 71ad272e128d31dc7e9ad4834ca5b5d9
- SHA1 4717698ae2dcd8d633a61ade99516d5028d4a56b
- SHA512 5d2d132bd2cec7bc8c0fa8c58b56bf810eae34f619895e3946a2f7fb7c4f223d26238035576036f3afa679fcbdf39f27f3e966e7631fc195a78cb6bc8ee0379f
- SSDEEP 6144:nYV+A66NDbZ08DXvTfFpbt3DUj3CDfyE80rvNlgLd3x5GUqJXQyDXeOTfYdqbXft:nYMJ6NDbZZpFDU7zE84L8CreoXD
- TLSH T1DAE48C57E6A320FCC62BC13183576733B471F82612B06EBF16A4D6302E66F506B5EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
aout_FormatPrepare
block_Alloc
block_Realloc
es_format_Init
mdate
net_Connect
net_OpenDgram
net_SetCSCov
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_cancel
vlc_clone
vlc_demux_chained_ControlVa
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_global_mutex
vlc_join
vlc_restorecancel
vlc_savecancel
vlc_strerror_c
vlc_testcancel
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetACP
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
QueryPerformanceCounter
ReadFile
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_fstat64
_initterm
_lock
_lseeki64
_onexit
_open_osfhandle
_stricmp
_time64
_unlock
_vsnprintf
abort
atoi
calloc
clock
div
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getenv
iscntrl
isspace
isxdigit
malloc
memchr
memcmp
memcpy
memmove
memset
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strpbrk
strrchr
strspn
strtoul
vfprintf
wcscpy
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_getpid
_fileno
_close
_access
user32
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
ws2_32
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSARecv
WSARecvFrom
WSAWaitForMultipleEvents
__WSAFDIsSet
closesocket
htonl
htons
ntohl
select
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
490KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libscreen_plugin.dll
- IMPHASH 5ed2f0d31bdcdaa437b87e63caf0c9bd
- SHA256 b697e893ec8aa81b12cb84db88a2f18861231af96c5129265a2905c9ed29ebd3
- MD5 c5eeeae5a9425995fdc3ff26f8a9f629
- SHA1 d211c2216e72a28f41ed88714d8e6f4d82cf384d
- SHA512 94ed899f8103359846cf3c128430b9a760eb3c3899976d01aa99b32dd10c39609e4218705644270ca316929eab3e73096c757311686c6a550fa2d962463c07cf
- SSDEEP 768:RrFvSPSFC+qwM2xXiVdEVOxQmTxXiVdEVOxafD:RrFvSPkCfwM0yVTxZlyVTxafD
- TLSH T190338DAB92506CCCC84B89B176E95637E971BD221A71CBEB4214C1310F60B907BED6BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Init
es_format_Init
image_HandlerCreate
image_HandlerDelete
mdate
module_need
module_unneed
mwait
picture_Release
picture_Setup
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_object_create
vlc_object_release
vlc_path2uri
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
gdi32
BitBlt
CreateCompatibleDC
CreateDCW
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
user32
GetCursorPos
GetSystemMetrics
ReleaseDC
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libsdp_plugin.dll
- IMPHASH 278f9cb37a30ea4253a57f5ec57e360f
- SHA256 b26704c95ecf4b10aaa234b0a5f9eeb9ab24149255568cda2efb5b236f49909d
- MD5 8dd59ec9e74d35586f6c2e2796b5e8eb
- SHA1 687c6afc69acf7339a6cd3f8083923b75a44fbf7
- SHA512 ed68ec9e3d2c0471528dc52e5269af39a26e740ca0846a2568db9d8dce04f6174203521178374785e8987f66c45d70ff797978a95c9a74814dbdd0292fe61a90
- SSDEEP 768:mZYNlkDJMUlwoxXiVdEVOxwX2RzxXiVdEVOxD:mZYjkDCuwayVTxOaFyVTxD
- TLSH T1C5138E67A750AC48C91BC57075E58B3AA9B5B9531E61C6EB0328C2204FA07857FFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libshm_plugin.dll
- IMPHASH 9c336fc03aabd21c5e047c9a45bf203f
- SHA256 e177d9bd2682ca0b515672c0ec9f4327cca79f262465ba09b794fcb61df9f957
- MD5 5f0a149e8fa1bbebfdb286e51b0a52ab
- SHA1 8c7274c96b7c7d4ad5469bd70e7198bb59e8dd68
- SHA512 b0c6f90112bdf361e0ac8970d6b523bac6eccc96e7653bdd7ab3fda3408e33571e4f4a10f6c567dd4e1807cf8e0922ebdb35d8c0126fb4f0c7fde0541ff9d074
- SSDEEP 768:923nJ0OjH+PAfGZsFpIxXiVdEVOxElaxXiVdEVOxboN:M3n1jGA4mp6yVTxiAyVTxU
- TLSH T1CC237D67E684EC58C90BC57075FA4636FAB1B9620D61CB9A0368C1304FA0745BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_File
es_format_Init
mdate
var_Inherit
vlc_Log
vlc_close
vlc_obj_malloc
vlc_open
vlc_strerror_c
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libtcp_plugin.dll
- IMPHASH fd321dcea42d32f0d9419d9e770da991
- SHA256 a522e4175106896b700b3dc014de9d08669206857a804fc0ac7d9b42f828cc04
- MD5 e710d9fc02c23890192586facf5a1650
- SHA1 875e5804c8b92e67f661aa5744133c34f45536d5
- SHA512 d0a93236c3f6e5456943a5f31a7dfc198b10e259e3e3052ffee609070ef66fabcc30876d336c892859087ce1bafa6c8141c2ec48fdbd75ded9b2564bb12a9f8e
- SSDEEP 768:FFAHPkO5XywfxXiVdEVOxp3xXiVdEVOx6Ne:FUPZCwJyVTxLyVTxX
- TLSH T1E9138FABA750AC48C91BCA7075EA8B3AA975B9521E71CBDB0354C1204FA07817FFD17C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_tls_Read
vlc_tls_SessionDelete
vlc_tls_SocketOpenTCP
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/lib/x64/libudp_plugin.dll
- IMPHASH e6b0e1924a89597cb890a4de7527f342
- SHA256 dbf280383480e463170eea81f78bac9030186f1ff32c7c3f250763517f96c9f3
- MD5 c22e2ed46403edfea1a798c65a02802d
- SHA1 03a59562398c70fd1957240b991ce78b8ad4b115
- SHA512 e9550c3e26b70e81c134c5f14ca4b90757f2f3243bd2b5516486bf7fff233ec6badb4237d78d10561dddc5d78e36ad040f3d3301a88db9fa6569df23b57a77fc
- SSDEEP 768:w3bjnZUrHUULzpExXiVdEVOxtAxXiVdEVOxNm:w3Cr0UfpuyVTx4yVTxc
- TLSH T1C6238F67E684AC8DC91FC97175E94A36F9B579522961CBEA0324C1300FA0781BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
net_OpenDgram
var_Inherit
vlc_Log
vlc_obj_malloc
vlc_poll_i22e
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_unlock
abort
atoi
calloc
free
fwrite
malloc
memcpy
signal
strchr
strlen
strncmp
vfprintf
_write
_strdup
_open
_close
ws2_32
WSAGetLastError
WSARecv
WSARecvFrom
closesocket
recv
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/Settings/mspdf.dll
- IMPHASH 8971f6ec52505de7049220663b7ba8ae
- SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
- MD5 925d01da4b5aa81778a3e9d84394e794
- SHA1 7405341d10fef12873262919928653c4a4af433e
- SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
- SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
- TLSH T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9f:93:8b:5f:47:d8:97:7f:6d:bf:77:16:0d:e8:e7:06:0e:b0:64:d9:d6:0f:a9:d9:08:d7:da:10:10:12:6c:83
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
10288304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mspdf.dll.pdb
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AreFileApisANSI
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiber
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateIoCompletionPort
CreateThread
CreateWaitableTimerW
DeleteCriticalSection
DeleteFiber
DeviceIoControl
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetActiveProcessorCount
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GlobalMemoryStatusEx
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFileEx
MultiByteToWideChar
OpenEventA
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToFiber
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
winmm
timeGetTime
ws2_32
WSACleanup
WSAStartup
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@$$QEAU0123@@Z
??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@W4PdfFeatures@23@W4PdfVersion@23@_KIW4FormType@23@V?$single_ptr@V?$PDFVector@V?$SizeT@N@pdf_base@edge_pdf@@@pdf_base@edge_pdf@@@pdf_base@3@V?$single_ptr@V?$PDFArray@D@pdf_base@edge_pdf@@@83@55555555V?$single_ptr@V?$PDFVector@PEAVPdfDocumentCustomMetadata@datamodel@pdfcontrol@edge_pdf@@@pdf_base@edge_pdf@@@83@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@V?$SizeT@N@pdf_base@2@W4ViewRotation@infra@2@V?$RectT@N@42@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@XZ
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@$$QEAU012@@Z
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@XZ
??0ShapeData@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0ShapeData@datamodel@edge_pdf@@QEAA@XZ
??0StampData@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0StampData@datamodel@edge_pdf@@QEAA@XZ
??1PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@XZ
??1ShapeData@datamodel@edge_pdf@@QEAA@XZ
??1StampData@datamodel@edge_pdf@@QEAA@XZ
??4PdfPageMetadata@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@$$QEAU012@@Z
??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
??4ShapeData@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
?MakeAnnotationRenderParameters@pdfcontrol@edge_pdf@@YA?AV?$single_ptr@VPdfAnnotRenderParameters@pdfcontrol@edge_pdf@@@pdf_base@2@V?$single_ptr@VPdfAnnotationID@pdfcontrol@edge_pdf@@@42@UPdfRenderParameters@42@NW4AppearanceType@12@W4AppearanceState@12@@Z
?do_always_noconv@?$codecvt_null@_W@archive@boost@@EEBA_NXZ
?do_encoding@?$codecvt_null@_W@archive@boost@@EEBAHXZ
?do_max_length@?$codecvt_null@_W@archive@boost@@EEBAHXZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Uindex@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?unlock@singleton_module@serialization@boost@@QEAAXXZ
CreatePrintHandler
GetCryptoFactoryFunc
GetPdfControlFactory
GetPlatformFactoryFunc
InitializePdfControlFactory
InitializePdfControlFactoryEx
SetGetCryptoFactory
SetPlatformFactory
UninitializePdfControlFactory
Name
.text
Size
11.2MB
Virtual Size
11.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.7MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
758KB
Virtual Size
758KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
585B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
malloc_h
Size
512B
Virtual Size
193B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/fonts/noirpro-bold.otf
- SHA256 b012d85155925bbe2106b20234b96522dec7914f03b09bc6e2fff71554f31bf6
- MD5 e57b6bc24b970a377574124e026a7c01
- SHA1 00184aedd4ee4d2ca6b5c87cf41e78f64304c89b
- SHA512 c162cd8a7130d2c94dac5c3dad58794f368436cbf782e8063c245d4cae405af6aa25c2f381549defd520c3f7cdbc04a27f891798697e9c291317d3b3ba82efdc
- SSDEEP 768:JpCoXk4xtsCZDUqJB8WA6JIPvX0isBZspMBdgcOpgUd0AkMKc2dAWBYejEARJWsl:C08CZDU+FrJIPBTu89gUd0AEm7A2sfag
- TLSH T12E237D5FE38A8B12C3CA0E3416B0637563BBA91045158B5DF7889F10AF868B67D6D3CD
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/noirpro-light.otf
- SHA256 3c9ef459625f995c62b993b64da299204b741e153ba8e6d988463aaa86b1aa44
- MD5 d10d77b03ba3abe6ccc1c142d9852595
- SHA1 6108edf0cfb3d5f25e3c593949c301c5c2aa5f25
- SHA512 71c4fc3b6f43b4125c5ea5ae09297d72446de81ffc2928fee33aef386754e60dab11cc170c4d6689dd6eeac451f2a57b9d3372278f750dca6ed39ec82fcf9368
- SSDEEP 768:UVKxtsCZD7MXJXAWYO3LtAgTPpOKp0mKNTiamxAvq7jo03xfzIhZ3t+TXLu3w:0K8CZD7MXJX1hJxpST/omq7jzBLmZ30p
- TLSH T1DF238D0EF3594B02D3CA8F7E07B053366712A26A85004F4EEB849BA47E515B7F66DBC4
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/noirpro-medium.otf
- SHA256 a728e91375dcadbdf6ef6d7e3cd0bbf5c56fb992d5b1be6640b83214c9d015ed
- MD5 df63e8855d04ab0e25d2bb6a0b1fabfb
- SHA1 5512dc285f36cdf7da5ba5eabaca128ca3442537
- SHA512 eba8afd3289089841e4eda4abd992c2e2020d18d44741733b5a51a2a1e0c0982ffd9da187aa56ba3b891bc259398ec156e08e45265f7218e87eb914794ca69d6
- SSDEEP 768:iuEi6qnatxPsnZDkt+BJzvAFEhe/SJI9mqbN6z8r77Ty5CYs2K9ffBwOmzPKYTAd:tEi4unZDk0vHhe/SqmqbN6svKCF2KUOz
- TLSH T1C323AD1AB74A9BC6C3C34E3A17B1432973A29818D53A8F9FF7D0B7055BD19902D0A3A4
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/noirpro-regular.otf
- SHA256 c7fc6d9f2ff611073fa09a6c61a8c086da0ebe8da841a9f4ec4087a3e9b52152
- MD5 d969db6adb881f1dfa91a5b7ec0154d9
- SHA1 d7b44b20eb246b0ff5c41147c0d0fb96fde47c48
- SHA512 2a225a8c12b46aa14e14dd547c6a55c80aef6bfe8cc791dcf60a14ef91994eddc4dec473d856f7c2446d62a41d017d256b64b603d87ae45e75fdeb2230deb5b2
- SSDEEP 768:DOWxtssZDH8PabnLLjnAfeVnHl0RoW+KIBGGuJtdIaUSCtLbyk2qdhuGtRfH8Txd:qWgsZD/nLHncehWaW+5pAtTUfNbykXds
- TLSH T1EA23AD1AF71B8742E3CB0E3A07B043B57B27A24589124F1EE7445A647E414E3BA4DBD8
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/fonts/noirpro-semibold.otf
- SHA256 50000ce2f0f8bf3018f1d04aa5c6716583b808ca05c802c46a9de4f084a91f7d
- MD5 5177edfb54762b59df676052d11b363d
- SHA1 fa18815bf4914b93d587c2758b65e234ad51b38b
- SHA512 7475fe248eafd528a05acab94f3973eeeb0d169203769ee6b42d007b5fa0605a58a290e145d74d57e17486367bacffed22e4a88e576fa9f65d000e487aa78e27
- SSDEEP 768:OZxrsZZD7GhsAHrQzDQmWw/OQuyQDaAumdLgQaVVcUiKv+xX7u3w:OZqZZDqSar4jQnD0iqQKGxqg
- TLSH T14F23AE22B34D7BD7C6830E3647725379F3E68926A5378BADF78097006FC16E02959398
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/info_1.sdata
- SHA256 3017665e98dc971566adf5b034b19786eaece91eabd6a9a81c09ed65a8dca904
- MD5 a61c49b829461cd68ecddb9d419f6962
- SHA1 8f9fa5d81ef3a13a9be33c725072efe8533ef9d2
- SHA512 484dec6b81af137a8be301f68b35d16d5f226d10b4c1ac71be3094d4332369998a8b73e18bad0bd19ba2a27616f7aee6d5b361d9be08d7e9fa896acc981a4c46
- SSDEEP 12288:LT1Xb/VkmOyd/aN2wZ/QHhFLXh1G8tuXidL9mDn3IXuj1jQNqaq2vosgXSeGfohl:1Uu/aNyhtx1wiKlWNwmoRCfoGd6
- TLSH T120F4333C31DA373C481F6C9E9C1FE18D7A22008E0741E63A5BA19A61B8D8F15D76ED6D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/info_38.bin
- SHA256 affd4a4df138c462d44eebe371377a8835b33190e79a8c938b19870c67f5353a
- MD5 04a888c923fbe1a929296376711f9efb
- SHA1 119777cbf16cf8ad1b0f790ddc9ff794e5c1fcd1
- SHA512 1781822a70fff8240f43e5d67b42cf732fa9a972f50e4110581dcf44335cad0c1dd568ec27fedb0fcbb94b1de1743c5e76926fe9ddcd0e52295a4243424d37aa
- SSDEEP 12288:G+7PrtJLrMeA/wjdbUtevpvlC5NF8ZXgnKxqYqKAuUw6cQbA+LpOLmNEZ:vvYBwjdIt45lc8ZXgnK8fwoM+LELX
- TLSH T111C423083B2D178AF6050737A87EDFF13AA3567DB20B67D372B79C1192259BE066E500
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/info_6.dll
- SHA256 da439e4984cf44b48491854f81f6219f2e1ccc29c39ffd98e77e6187fe4c4723
- MD5 aa34361c6a3ead75b408750c85434105
- SHA1 43868bdd830ce5c8ad9d36fd8bea4b25ec1dbd41
- SHA512 94a31f7ff1020beb746b71d5dec258f977fde4259524c92e9beb52196a0c4caac2ba35b911956459e937e6544fe272113c769c3cd66e2ee0e5cae924ada890b6
- SSDEEP 12288:e8EUyGkBupyPfDYN31m6SxT26B13Et95CFZC7hWc9Q45DI6Hiu/G:e8EUNxMUN31KxS6B13Et9GZCNBIZ/
- TLSH T13DE43352F617B9838D27C48387838432ECF9F9A6864929B61CB345B5E1AF742F5F3520
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/log_17.data
- SHA256 4dcaed2c782422eef0be478cc45da07c2a391bdd7120e8fe6e8725e883284bbe
- MD5 d7c323795b2305e71f027ce2a39a822f
- SHA1 3191bc4164d11fa77da343bc8694f55732645f3f
- SHA512 d10e6d52234c24004a53b3d474875f65c9f06afd747e89a0e024e8958cc1462b323b16bf72fa61a05f9322f8c3416d34b00ba9e95c012a5ebdfd9864fb172aa0
- SSDEEP 12288:+eOHuHUnwOEBIT/FN0B3WKYien95zaxqpOV/k373b9GlXfJ/E:+eqKUwOE0to3BYiezIyhGlvJc
- TLSH T1E0C423194482AECD9788CB78EF2E6339DA1D1F67D60E635E8E317E9F66281C10132716
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/main_47.dat
- SHA256 1dbc58975b1a2fe3775ba5753140593b77faab891b98a7655be26dcf50e5da4a
- MD5 29413ccae9ba14a701868aa937e959b1
- SHA1 fb2b6836bc15db9dd41a5ed07b704d0a0c689705
- SHA512 8298180e4dc901d821566a340274186f4d86ea7413c19287e45cd52df2d23ac7a2eb4dded2e6b439e7b96e0ced49cf52e7ebb6aac89410966ac5062012a18ca8
- SSDEEP 12288:X0/JcQR/osTg6mHHrxLjvsmgzU5Gd0ZXT41TOGFZ4CIJIJS3a6Q48:X+JDRAsTgtHHlL7gz0GGt41y3vuI8
- TLSH T19DE42333432A2F0156833549B852CA544EAC71DDE4DC2E52D38ACDA31E90E5F1BF5DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/main_92.sdat
- SHA256 755b4bd6f7a56c9a53b7db02bae73bfa6b60035f3e2b07291c926667301c1e9f
- MD5 2cc0c2842c90a964a84c4d706effa7f9
- SHA1 33dda225de90063a3ac78f742ae09c47071f29ae
- SHA512 6883582898cc97dc7af0a83cd6869946737c479215069d31b89549cdd42c21afaf320818579c6a4955f7ee0cd600c531fd3ddd43b062a66f0a3d0f318e38f56d
- SSDEEP 12288:RMgMt2qsc+1cC6dt91vjl6gegdcryLZKS21Nm8Krs:rM3bjvh1mrK0InQ
- TLSH T16EC4236350FB5FF945861F9CC26A96E680646FCD42FE38EF297509730E9A8F44C6208D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/meta_42.bin
- SHA256 bea76ab0759eff83d125185e14f12e606cb200de99805b572588b8007623eb9e
- MD5 9a506d0fecb9eb002d185b5bf7758301
- SHA1 e92b5a3d9e56fade124d2058ad5a2e8a9c7716da
- SHA512 d83982f288051dae41882e6c505bc6391ec709ff296f2972d2772fca65e438b02b84ad96eda2ca4d082dd5e40c5f660bcc112af74739eadd8e832336d81cf5e6
- SSDEEP 12288:0TJ2v2tRX9Iv1WxBFV/Fvlt+2Oyt/ULDKby2XU3j1fA5+bGT3QsvCPuH2zLbmdrI:0TJzRX95Hxl42lqfKbyGU3jxAkbGXcgI
- TLSH T165F423BB6F66574A90693C84991D0C4336FC990F212C33C974F9FB5A8AA477F4844FA2
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/module_127.bin
- SHA256 ac1d4d21a2b0540a67b43b495bf373e54b3f66f3406f7f46ccd8a5cb951c71ff
- MD5 9bd38a19f753ec01270ebc05853902a3
- SHA1 952bb8852b32a502202085818ec0a29dd1cf2079
- SHA512 3a865ff32481ff8a588fc84b413b99bcbe3ff93936a8b25ea223ef34ed99218de3323abd4540cbd5bcc0a5c1faf310c4c311bbebf05f8263f3c191c931a982c7
- SSDEEP 12288:JcEW/7g3LiWrQT+Ql9aIfmQOWS9gVQxdZi/TGFjWf/CK1+mfNOocfhUNxELTLtw0:Jch0VEyCbfVsOVpCRWf1++ghUN2T+0
- TLSH T1B6E433F843A0DB3810F10BDB6DD893CC7A6CBC527A64B56807C1CAEF9728986671C58D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/module_26.dat
- SHA256 f42bc6adbf1a2feca0902f63182ab58ba7a4136ad795cd202df8d6ba7d57878f
- MD5 fd735b96fd562be646850269a3b46c7b
- SHA1 6ce9b8f3991a45589fec3e911bb71eac0ae86437
- SHA512 88018bab6f34838683b09a9d8d31e867d1544a9651b1c9fde0df56bda4a9b1f694234dd592478a0c82a74e1ff99335ae6370347a63da4e2ea441d7342384a898
- SSDEEP 12288:fVjGTrT2KbTN84SseoUkAJ5Npr/jbrliCDUeuTTzyKDGnI+TX3F1a7l:fVa/tfFS8U1rT1rQ17yU9+L3FsB
- TLSH T188C423890CA77650DFA0686FB86F1B1DE01A7DBB9303F2209CDECAD3157543F94846A6
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/module_74.dll
- SHA256 e02958df21dea0f16700dd521f7a572db420971db830bd41bb142f5ab6fbe81f
- MD5 a506e077e5c3ecc89849780b268d6948
- SHA1 6ca72544535eb32dd8710f52aefbdec40ce5e5e5
- SHA512 0daa67fa43bcb178d448c3d02a5e6c91f352e7d5befacb60db67a92c6a32017f40b0b8d562e06bb7696731fc3807b9f267d3244844763a325e68ad907f437529
- SSDEEP 12288:plzj8C7SVa7WrtEfinEakLjAByf9zl/cvhkvRxPEym4zZ1U1tVUnO:Tj8fVa6rvnEaMjmyVMhkvTPJmnUO
- TLSH T169C42306FEFB1E59653F57812D19CA75F8930E509B9748A2CAF00D979D30372C80DAEA
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/node_25.dat
- SHA256 2815089208a132fcfde85cab709a24a1242334cb0dea49e966d879274db49ee9
- MD5 12076f4895ee3cdea080f4daf3ac35e5
- SHA1 2790b95d7e8ca64c33b2dc57c9e19605952b4eee
- SHA512 4e5c6ba153ea82029da246750c4f285b710f707c3a38b8c223a8789a9bda9ef3f012a7233a6545bdb4f945e6841413a2838d07260e324f2cb8250238c1faad99
- SSDEEP 12288:DTwYJYYLQvvvp7JeC9xznUBk3aly0l4b4Q5kuenUFqY7ZKi:DU0cPxVzfaU0A4+kuJsY7ZKi
- TLSH T125C42338E48AB5D7F4DB160BA21F228081B090F58BFBC59179FC504818ACF6D97BB657
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/output_129.data
- SHA256 6ed593605dbe36ac3c520ed4b8bb856b6b5af8f1c03e345ce3047d9897709b27
- MD5 26802acc4aa9a9daaa7161c9e146fd25
- SHA1 b739d884a2f4ce54139f8f86a56c58cbeef615dc
- SHA512 afcf2bd3d4d31949dd57f061dc384178e2454b4ef581ecc24f13a1b515bc69bb05d2f6374569a02982688437054df4ec73d0c3106b3721a8ccd3cbf3da72928f
- SSDEEP 12288:LOBELZxP01Dx18+WM1/PPXZuJyJp+40NOLQ1XmrMmUubHSk15vjJfjZEBkp5:fLZxPiDx18+PAJG+2M1Xe3rSk15vjvEU
- TLSH T119E433879DC14F7E7B00D91EABEF66C82EDB56053E387CC0D2719CD29A6E54E984A108
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/output_31.bin
- SHA256 3f8ca1904de4ffd26936a38742289e8947a6d60cfa2064ad861e7a053c8965a6
- MD5 688ba3bcdd0252b6d530b66597f9cd00
- SHA1 97432287fb7ca2312cf2df2cc3afb3fbd45a7e44
- SHA512 071a6c7f007e52c7a004f2f264469a73b78ae77abc08e2eec683abaa4988db0003cb5d6e3c2b72ae5d0a1fe9c73d53ffd366923d8f6f681b23be0c2cc761235a
- SSDEEP 12288:gcLuZRFNOY38xJ+obz5T48IjsNUzPRL/DHB9U+8SvYa95uj:gDRF0MK+oXy8IoAPRL/bY+Bvf95uj
- TLSH T138C423A0AEE3568F15FC6A43AB4C642D80F94AC167479A98E327797EF80B4D4F10161D
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/output_58.dlm
- SHA256 affdc43129e4a1f807cfdec4371f539429eae7813b2317e541a3868db1f59b1f
- MD5 44731d0548c754666dda0a89a67402d4
- SHA1 8351ca617425f0d477adc92d6c8b213afe8c89b4
- SHA512 ffab15e3ccf97fce9442a760acf7761cb5b6ae6f5008015aff55bafaaf363716aa67a0c5e7ac6ed4114aed9fa31f38442654e373bb255098aca54e39df9d59ff
- SSDEEP 12288:eYfs8Fq3dwbzdXZDpCs+CfQy4Ke/WT4eXN9nGNVmv4cXHJLQjXA2LuoQ+:eysSwORZDpCmnP9tGNVmtXOjXPKR+
- TLSH T1FCC4234B4790826E7077750EEB5F2A58B852B49D77BB8AE3F50F5E1823F4810C23568E
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/proj_10.bin
- SHA256 226618df14a4c59d4b36d9f6e49ed25dc3f6a8852546f08c63e992c7e11208a2
- MD5 550a958790f162a7e00ad29e1c7e397e
- SHA1 9a2782f524504994f822ca60542ce74aeba95f48
- SHA512 7ae4a445b1ae3dc2b5d38ff7a5b73727d731f087f0fecee7b5a27a673e1372ef780e5fdb07ebf396b979086e74d330a29108522b5e744d9821b95edc1ddcc098
- SSDEEP 12288:jyHqnFRXL3gIWbU7Q1ARBf3nLuJ1rZ6DQUjxfDRb7bf5j:2eFRLTWbU0Mp3nyt6DQAf1bvf5j
- TLSH T17BC423CFD01C4828D1BE782FCE28A4337B4534380E9D42468399E715BAA66D3BD576DE
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/proj_35.data
- SHA256 a9f319a0665f5d13863cf274e66f7205ef49ad0017f822ddf0cf9461ca6653a9
- MD5 9a92e7b7c52362fc601a3a8a9a35d3b8
- SHA1 9f4eea578e0390f27fe00768904ce619ec9660b1
- SHA512 bcac037ee345371d5e531a6571eb2d30b8b8170d218ce7dcfa93365e1644478d460f32f3962cbcb505fa98fef53d84458327305338be931dab4f0c216d06c7ec
- SSDEEP 12288:VJ/JhsWRRNKbJ6pNouhQBrk3GJCtV8BEbZMhCYlIp/QnllMCFxP9yJ:VaWRIqoubGTqW+mVjVyJ
- TLSH T15CD423D86D3EC58C2DBE387A42F709DA74A6E48352F4F94471E8D3390BD5BE083AA115
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/proj_73.002
- SHA256 c6f9a5ac58a464d4b6dbb2b96a5b79016a02a3bbc061732e8a591623dfcc8fd4
- MD5 5c5fef734fe0124cdd25ca324479cc11
- SHA1 d50f7bdc1c94b9301bc13ec9cbcf622478527682
- SHA512 0c7904de01d11540d0092b276fd17a5016628a161c83fa823edf6373dfcc7c2aa563961166983e9fffee3e62fc792dbe01a3d9b7a854121059b3cd962871d8a7
- SSDEEP 12288:jXOQEWbRHs+nCG6/KN4jyE2roRVHOy4OVtzdJzmsjLxO0MxoN+N4h+mF3byo0YWA:rOQ7RHs+Cl/XyEsqVftV5/mYx1AmFV0C
- TLSH T106F42394044B471F0151CFEC6EA7BE16E2A36982F8181EDFA3C95894702E74D14AF2FE
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/record_0.002
- SHA256 dd4c774cfcb41029777ef2add534784147dc38d3821fdcb38af1386a6162b4aa
- MD5 0d826b056722f5fded1eb3592ae1d0c1
- SHA1 4ba89917a1b4afa902bcc75f54e4efaf92d4a0cd
- SHA512 c5157a2a883eb047d22f8eb5d50caf39f53bb1a8862d31809430e43a8be84646f9c99588351900a81f435ceabb3fad87a9abd4ab715e031498bd0e57d2e4c39f
- SSDEEP 12288:EMtJtBpt2fn9jKcDsJt5AwyZZam+TO8n5GlWT2oRlFw+bL7ndqduuSg+TcPN47QZ:EMtzM/9jKfVm+TOqhT1lFfndqduuuEGm
- TLSH T117F43352B5A5098CE051B0EFDBB82B69E5AF73F02CFB940F341857ED94AF20D16901AD
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/record_11.sdat
- SHA256 f9d6ea7ae9bbb9e3eb0c1b6627ccee45c1215daceba55e5df64e495f778d957e
- MD5 51bb4829d3e8624778c22c07dadd32e7
- SHA1 8e2151b83553100ff6150f25ed6e52db0c2074a5
- SHA512 d0502ef3750119d55f9fd3c6569f854a54673e0d38b08d6f63427ae635fa749bcedfc316f451d11d3d4e741995dcb36272c4c7c0d0139abe9f6002beda93bbe1
- SSDEEP 12288:osBPW6EM6fanW4UwTjKJz03cutq0hBjH60CvcURMQ77/zpuqP5:osolDSW5Ty3xq0hBbutbEqR
- TLSH T108C4237D23C84223F485B89BC592F44C485F28676A7A09DCDED22DBB85B8F0B85D6707
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/record_62.dlm
- SHA256 9846dbff4bf3329f9d34be350023b4981e6279797e801edf83f860327a64851f
- MD5 e6926b92acb0ac4d987976cdb2ba3239
- SHA1 852f2300bae469ca40ce53e12d6d7d013f838219
- SHA512 5fb01143a72e862d966fe211b5caaf7f887095cd0ac3cf2f24891011044b66d08491c897430be209a4a30f60f447cf5a5a6523edf61f0c5300e57552885ba77c
- SSDEEP 12288:azCDEXQpwsg88wx22mZcFeF19Aq6RqRVM7A9wnmpDxJCdtHGrzxPoWL1+sr:nDZpwsgKz5s9KRqY7znmpvCdtHGrzloe
- TLSH T12BE4232E4388AE8585066388EE90C5EF8E99AEDF780376DDFC183571E04A38E1D71DD0
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/record_70.sdat
- SHA256 84a31338b830717c6176c0e7a43f8cea9b7aa3cb187c95bf03bdca747ebd24a9
- MD5 64e893f0438766b3f5fedd60781059c0
- SHA1 b62796ef831fcfa69ab59940bc63a2db74e2ec32
- SHA512 fd3f010fa8ec82e6b0899ebc236f9b8f89674a123b8ea133f27df7afb1b93df515866621144228da3986c356228017708b8459bbcd8452e80835cabc6e521e09
- SSDEEP 12288:wUSjoAz4VbOvWRiy67Byzd967H3tBC2Uopp/qaPRLrhPeGLiVPN5taPB9oX8+JkC:fPROvWRk0d9O3/dUodNtsiB+sV+7
- TLSH T178F4333FF04F96AF28C344D2AB55E20DB73B061BAAAEF93F5614B1B5C45C684536C0A1
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/resource_121.dlm
- SHA256 ca2ea16ead2762eea0bbf447a5f2c0e57ad337bba305236cd27c846f8a3629cc
- MD5 c21b9b1a0105d878cd34b25762c62f89
- SHA1 47a7bede83ac30bcd370d15d404902aeaa70b82b
- SHA512 eaa120e95f642725aa4f5790c4445d00fda48cb7f1d5ae2ac5aa86e788b332568f014ad7b4b0edef854594acec56257f5383df110e3bfd8534c3cc668da67ca4
- SSDEEP 12288:JV+gnyOYMq3cEVlJvWmnoGnHw0h8uEUnRjRKO+6eyNCcu:z+gnyAq3ccL7f8UZUO+iCcu
- TLSH T1CEE423DE67CD5ECF8E0D6954E644400EF8A863AC69A1939F77D4729EC442278F3A23C1
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/resource_53.bin
- SHA256 232a56df0b4c08e235f354d71ca9f584cc4cb85237b34b72b81be4b4bd251e6d
- MD5 ef8f70f6e5edb1e5e968eadb1258d381
- SHA1 9b90aa76efe66bf4c30895ee9b57b53c23438b81
- SHA512 a108b0682763a9362e0c60abe03016dd11ff292dbbeea294fb035a79fc6a7b75ff87f32d01e46c2c8856a013c62cdc6609abc6a6ef60ecd2b1356b1cf310850c
- SSDEEP 12288:kvmD5NQMEtPT+0BJDPFAejhyaUkz+JHUJvnlOHMAyNJgYgFb:s5MW6+PFAejAaUoKHUCyNJzM
- TLSH T12EC423781351CA5A8A0B376EEAB42D311535EE616DD8C8C40FF31F562F75E30A88A935
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/resource_7.sdata
- SHA256 f10dd795402d5337fc4d2639b8e3ff23a4791997b2ff74ea9a697e44111ca82a
- MD5 7aaf1435a70cbf2eaffef7870e0275e5
- SHA1 2372c7c2f643269bd242360e2289b4886ca15a09
- SHA512 984dab20f87d12cef57c88ab1c5774d983b7dc17118aaf2d9f057448af4090c62ce4e3b09aad4209f636b8084fa9441b3749f2a5f213a8441c8c456b6f391529
- SSDEEP 12288:SJTKoW3DXzoDhoSUk4gQHDVAC2tIDavwD9592xEK+RmMG4vocCgNxl0k7Gse:SJKoW3LRoQjV/2SaYG1+RmMwVyllU
- TLSH T152F423386D6A64FDACA65024B0F0A3F561117FCD7814E395D1D898420523BFBA2F36BA
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/resource_95.bin
- SHA256 2c372c26d9b7cdafef65a2689cbc940b46982f2d331973aa89dd6728fd82fe1b
- MD5 4a98d42f183dbfa54ac42133237f5ff9
- SHA1 bc1fb39e09674f03562af0f25b75ad11966c2d4f
- SHA512 410bfada21a11f4958e5b29f6775e1b54db5ff35538578b985b4f21e1332b7a388a2170eb1ab21ebf401739078b0b14e19e00f6c23243d6d3c6518f620d7e735
- SSDEEP 12288:4s5yxuJK8k81fXy0KU6XV+mOJb1xo+l9GkI7uDEoylWk+:J5y78kOq0KTXV+xlo++ToyYk+
- TLSH T140C42369578CE85822601C397636D8BFB93CC8F1CE4D25925F9989123F9C701E5CAACE
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/sample_93.data
- SHA256 8d5666e05c1690ef9c89b28b48ca9386f3befc169c272b0b812619a51dcd031b
- MD5 44f30fe5a26dcea400f3cc693af0138f
- SHA1 578022a1af194abe960ceec7023c35af5b25779f
- SHA512 238053004cdd7fe970db56e8187726ff7425f17fc51af5d40757a974bcf0219c06091b34dad63925e1c90c34c7723918d034ffb88b037db3bb8a9cc155469bf8
- SSDEEP 12288:6Qf2x/nrDHiC5kiUD+7M1cWlOqfic8YtiMFiPqXyLCD+ecLfaieVPUQqpNv/mDKT:f2JrLf5rUSEOq/W8TCLCDGmiedUxTuDi
- TLSH T104F4239B07954D257B1230C0946AC73F3C9FDEB043589369CE6AFECAA1DB284052FB59
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_102.sdata
- SHA256 59e44f2144fee05d76fdca49edce78902591d6632d08f81e44d8f4b9c016994d
- MD5 d32f8304d04defd062f1698366a9b397
- SHA1 13cedc79a5be0e5d366cb261e87a9adf6d9e7f55
- SHA512 39f88575747127fcee271dafec852a2a992006d2185f3b076936d25bb9486ae869e53f607a0b47a835139fcc21a25267e479683cd6285ff1aeff625b7f63ab41
- SSDEEP 12288:Nnspqm5YVAHVXu4DxRP0xeW3xc2IYUMT3C3krAtJqUCUtjthNiTFVF0coVuUgY:N4NY+ew/PqeW3xOEbC3krZUprAGV1h
- TLSH T1C8E42307E3442AD1BE966035612AC1BA413B1DFE58C75C3E745AB988CD396CAF0F7A48
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_12.dll
- SHA256 0b57b36b95cb4f1f60afd6b8ccfa81809dd6623de85290631e64f14f8762a841
- MD5 10670d4cadd6d4830bc3e46aa6a2762b
- SHA1 85930d5a11d6164b5e7c3edc735ef5788142d845
- SHA512 ece8656821e6e4feb6b592ddd0742b6353893ea17cb721daa6c65a7f1c3365d9cc3923cac65294a19755f8da1810244095c3d897d20bf2b5526fd53e3c498c90
- SSDEEP 12288:0iaj1Quur+TEqQNcjxt0Pjaea5uaVeWscJvf2nb1AMvwybX0kCK5MVvOHLC7F/ip:VaRQZ+qcjxt0PjfaMaVFf6+QBh2VvOHh
- TLSH T163F42368C6DDC0097A613EAA68DFCB188963CDF0B22567B1F414C2B46831EA9BDF44D5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_30.data
- SHA256 fba4c3855266e087c25871b1a2655d37de7e4391e519c88fcaf32cf0a7b2ae77
- MD5 31c016e29d2dc19ac8b8cfdc4babd0c5
- SHA1 e01258b4a60bb490e8b436ff016c515877a55a5e
- SHA512 4e96bb280bd593009dfbe48009c88fd6bebac48e4336a86d7ee70f3695756ad578a6c85dd614b8f8692abd2f98927a6cf9ce6e15d1631665bf91e7a10d4d269b
- SSDEEP 12288:YiINIxjrxu3d9cauYbAYTKVs1LyyB94BF72/SqhkxmsOGlcm:4Najr07capA5qeyB94BF7shkxmZGim
- TLSH T1B8D4231EB09E624895EA21DFA550C50FCFB99993095FD3C47AB6D3135DE0D8130C27BA
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_57.data
- SHA256 e37cb68f1837c205efa42d39532670b2e624474b1512b63e1f18ff1358f39d3a
- MD5 6c2635d00638d320aa6d43f923a2c9d6
- SHA1 6f5b5f50e7591c02a70e6c30e7c35f06f53a2f00
- SHA512 79bc61c135bc0618043f4f26af86f0ef19be95aa578d759342e4ab2515fc39181f1a519fa21464a5bea4ec75ca139f99269c52606bc06383cec0b4f1db239431
- SSDEEP 12288:agZUQPmMDIqFielT1kRDIl+zPrWPqRs5X/rjzibWDwK7BFEpo30ZAdpwf6FjXgG:lZU01IteDlDpJ/rjziQdnj30Z2pwC1f
- TLSH T11BF4337C442F0CDEB0A5A5B1ADB8A0D90B827DCD7FBD3B4DE173427AD8161B112D16A2
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_88.data
- SHA256 f0238544ab849ae1633c2392d98a13f7165ff43a8259094f84053df71de29638
- MD5 6c055fd2fe850b9696ad616ba438da30
- SHA1 7f683d72028688079f9f63bfe556ebeb882d4911
- SHA512 baaab2aed3f22082ab7f88e2af9b775c25625a7a5a6c7c9948535119cc742ac81c0e0832938f9cf3063909d1726dcbe442b5c9484c707d46262a17102687f6ba
- SSDEEP 12288:Fj5QZEh6xXRJ4zOoTey7mfUmiRgot11WOjetq5ba8:kZEh6xB3oTPmJiRf1WVtUbz
- TLSH T1A0F423EEE702117EE4D4A046C350E5574BBA4BB2DF03A0FB9B8A8B90567D5937708C93
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/settings_97.sdata
- SHA256 b6cb15b443246a7b8a321ee71b827e677cdf3e64b072841884ac267d66c28974
- MD5 1c6c94258eac0680556beda09fd4a4b3
- SHA1 d00e43033f1e4c1e854e4e6dd2b8e4646c04bd38
- SHA512 d4a1f8fa542a3b2963cd5f99323cfc26258bdc966f5bcd18a1b6963b5182971a25aea08375a0f89a5eb605a68c14b6762c52fe759eecd848675c3c63af5c8943
- SSDEEP 12288:agGRX/jLNzte5TfSOHS9TCLt37TZY4H5PrgF9lF5bdEFaz0P:0nNzOfSOHS9Ty35YOzgF9b5bdEZP
- TLSH T1EAE42390D9ECBF04C9CC11F54038B667B5426276DF40C778ABA4CF6C963AD1782BA4B6
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Avatar.jpg
- SHA256 b9307ec780794710b1f94fdc2c4ed970c131ed0973f1a0108dc1fa3be362b04e
- MD5 be97c497b134fe58230206c740238531
- SHA1 df9909b8a9544347683005a75fedc49c96a2616a
- SHA512 d5c5394805166bf62a9746d7208262e6940736cabe1d240ae2d3ff631f3b9ad7230873197d952eb211724c47a72c72db57f78d9acea1b66ffeaaec68c6a2f061
- SSDEEP 768:4TnoJoXtnr+i5St5N+aFqxd5yxpjZ3LyYlr4OY720+p4ul3DmEXk9n9yUqRZig:4TnYo9niiY7NlQ3MxpjZ3mYlvx0UDE9G
- TLSH T1A723D1DB26A76DEBDF6C7A89827678723B2B2F2FB0231357C92D6B48181C5055120D7C
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/dxcompiler.dll
- IMPHASH cb1c31153b2195b8d3996116a8998d6d
- SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
- MD5 ef254abdb4599bf754222ab6894ba6bc
- SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
- SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
- SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
- TLSH T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7b:60:fe:27:4e:3e:1a:5d:14:87:0f:31:63:5a:1d:dd:d9:a2:0b:00:c5:c6:0a:f0:7e:a5:f4:b8:88:bf:08:e8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:1a:a9:a0:1d:06:a0:0f:43:aa:00:01:00:00:02:1a
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
15785744
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
dxcompiler.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringOrdinal
CompareStringW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateThread
DecodePointer
DeleteCriticalSection
DeleteFileW
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
HeapWalk
InitializeCriticalSection
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RemoveDirectoryW
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableW
SetFilePointerEx
SetFileTime
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
user32
UnregisterClassA
advapi32
EventRegister
EventUnregister
EventWriteTransfer
ole32
CoTaskMemAlloc
CoTaskMemFree
oleaut32
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysFreeString
SysStringByteLen
SysStringLen
VarBstrCat
VariantClear
VariantCopy
VariantInit
DxcCreateInstance
DxcCreateInstance2
Name
.text
Size
15.4MB
Virtual Size
15.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
32KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
586KB
Virtual Size
585KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
25B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1016B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
71KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/icudtl.dat
- SHA256 d0f4be489b2db9021c599df3a9bf60250c80812b25cf7516ddd54f9aebfeb4dd
- MD5 d4da57dd6a5958018ba2993ec04d6829
- SHA1 b5d66e2a9402a46beb78705779bb815da2daf320
- SHA512 aef0effee0ed59edfa777645a53144a7eb64df62bd44253f38ee6169ad0ba5f89b2971368f23f46487ca48cfc5467169523f4fb36ca2740b94414053e909ecc4
- SSDEEP 98304:epcBQYOo+ddly1PUsGQDQCHHiXUxO/RJk3IWhlbntjidHp8L:epcBhORoZbHiXUxO/RJk3IWhlbntjEa
- TLSH T12CC62903A2FB4EC2F9FBAF70D9F552679567BD49AE32805911042F3B1C333A08665762
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/include/gmp.h
- SHA256 10e3ea336a3b8422a71cfe16e275a06d5a2b61fdb61d517cdb667c8b68d79c2b
- MD5 fd70afafe6ed14c4ae916ed73837db11
- SHA1 8624bf591cf657b4fc9156467ad45b202c8ec693
- SHA512 311737f45ec22b27e8adb8ada061d9e69048dcfe3a7b0eba73163e83001aab65c46e5a99524f285e74be6615f3080d5f42bb5e0411149700b4a1a0e182a14a4b
- SSDEEP 768:mtKm3ThBjswH4UtgczTHzAMAGKwzyJ8+Phyw+cZToydVG+7HRcpLPZoUJ2WEdNqZ:UlBjsnUvoJ8+Phyw+hpLBPJ2WE4GC
- TLSH T1F1832F2C2FCA6CD160EAD215F75BD14D4980DB2331929ADC7C4D2CD85BCB42A16EDBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/include/gmpxx.h
- SHA256 0011ae411a0bc1030e07d968b32fdc1343f5ac2a17b7d28f493e7976dde2ac82
- MD5 ea3d21de4bcf7c696799c5c55dd3655b
- SHA1 3e020a13e5ff85d6214ad56ac07395f53efa50d2
- SHA512 5c102c423d0147cc7bfdb4a5fce6863605969cd3a2d914c8485b5db60d33f6efef4729cce6c63d57f81627dbd50e83438c8ab54fb525d119fe02d922ce540d97
- SSDEEP 1536:ljLJi+vitB4/K8YKwUWyomDIgBxf4zj9f8LaqDyOp0e2j4DO4KV4/KX4YKztWcZk:l2xmWxg/M8OVFi2Qm
- TLSH T12DC32079208AFC919A93C031D263C5A5F650474133E8CD98B81E2678DFE3C56C7AEAF5
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/lib/x64/cef_100_percent.pak
- SHA256 df959508b33b444926f952d14dc0a7b3a5e65da6f24fb6ea43fad9baa9569065
- MD5 4219da3feb0447386fef2dd5c3b20e79
- SHA1 aa2c5a3d3740d8a703966e32f9c44c63c9400ea6
- SHA512 0d000f59bcfeb08fdf6f75204a5a3364c1bb65974d04d158a5006a774880ffb1576db44c583ad519ff62a91691b71dcacada3a8e326d48f8336e63ea15f746f8
- SSDEEP 6144:/8MrUnuUE6f3urK6bYSTw3o8z0i9Q83LDW4IqYbBv1urwA95X6x:/8eMefh8b4qesL6x
- TLSH T18144F1E3B3B4BC3ED65A1A33B2510B37D97B423906930349C28685B57D56B80EADD34B
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/lib/x64/cef_200_percent.pak
- SHA256 15f7f63f3ff7e6b0b69d059342d0f38e4b21f18a0ddf7c63fa0509829057eb07
- MD5 b4ce3ed593a2a468537a0129f4ed10a2
- SHA1 22896f7fe4f037c45fd5503d239a6fb3ecb43f7c
- SHA512 3a5aec6c5ebfd2d91aa26946fae7c9618c7b29c488b4310425dad043ccdb17b086f9b6d7dbd7390131d83a901b772a3de5b9beaa12a1061fa589d760240804fd
- SSDEEP 6144:cMrUnuUE6f3uruUQXaFeVGThjO7k1u3o8z0ILuBJeD5UV0Fmm8Rz4tPWS7vKv6AA:ceMeIK11jO7k15BMS0FmmQ+DOhGr
- TLSH T1FB9402E6F3F8AC39D9631A3352520A73DD7B143506A7030AC28A9D397D56B9489CD38F
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/lib/x64/chrome_100_percent.pak
- SHA256 b41f48b151cc4beddb80b15f3209a83b8f5bcde5bcf28187638c2d0f9e71f406
- MD5 d5c28e09fe5fe20bcd00e54fbc0a3305
- SHA1 8e0702d3a34e0b96ab1bdba9af59e679d6fbb5b0
- SHA512 e246cf397dcb1740a995ffc0cedeadc59dc61ebd87a1810a94c3478c83bcba0248821016e8e894d241fdf04ab3105a45386e4be52440504f2e6a269b6c805f34
- SSDEEP 12288:fR3jWI7PsCnz3bqe24pOAV8x0jJ/QuCbJa9tHuMySq9TOtxxCJuA:1WlCzb4v+JYb+tHHySq9TMxxyJ
- TLSH T1A4D412D37375EC3DEA6B567BA22940B0FC3345194A92020A07DFE87A2E56748D8D97C3
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/lib/x64/libEGL.dll
- IMPHASH 14cd5ffd5d2a5e20eb8ffa21377b813a
- SHA256 fbbe65fb7725e6fde8c381c59d170bff153b87fdf99f531d46dcfd2c1e237f98
- MD5 a1cd233bdfb48de54e18a074caad1f5c
- SHA1 dced789ffa957951389482aa03c3da272bde114a
- SHA512 22b7a5c4dae5d5220cf2179201c88371d0d24de3a4fdb709381059548bc238e892423f8dd2d3837706de6b554551651aed956526e8f69a89ddc1088974f8d164
- SSDEEP 6144:y8BSlAEZQH65WlPum8AW7elHtE+pGMYgZwlxE:y8BEjQH0/m8AW7extsB3E
- TLSH T157749E40B5C0C072D46E25353A28D37C4ABDAD621F6959CB93B84DFD6F702C26A3726B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
133152
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
X:\RGL\cef-git\chromium\src\out\Release_GN_x86\libEGL.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateEventW
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ResetEvent
RtlUnwind
SetEnvironmentVariableW
SetEvent
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCopyMetalSharedEventANGLE
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglForceGPUSwitchANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglMakeCurrent
eglPostSubBufferNV
eglPrepareSwapBuffersANGLE
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryDmaBufFormatsEXT
eglQueryDmaBufModifiersEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSetDamageRegionKHR
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapBuffersWithFrameTokenANGLE
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR
Name
.text
Size
263KB
Virtual Size
262KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
62KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
145B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.voltbl
Size
512B
Virtual Size
126B
Characteristics
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libaccess_concat_plugin.dll
- IMPHASH 0a4632681e630c8eebeeb93ae1bd84dc
- SHA256 f28831b08aa6969c91f282668cd7fd02311e83a001fd31ad7ac6f1fe49fccdbc
- MD5 486b252a5b4f4c60b70ebba8dc7cbaa3
- SHA1 30e45ff8cfb6d34d6462a11373714c1668083156
- SHA512 5963c7834c6dc17ac1d432564bf4c80b9c0a011de5aaf891933b9594a275763e93c8b1e1ef280ebaa8580c7ce07ab69f46bcc4d60aa8f096aa66e4ef7438ad7b
- SSDEEP 768:7cLsu3hSEwFxXiVdEVOxY/ANxXiVdEVOxJu:oLseDw7yVTxIAjyVTxI
- TLSH T110237E679350AC58C91FC571B5ED8737A671B9571A61CAAA0328C2300FA0B85BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Create
var_Destroy
var_GetChecked
var_SetChecked
vlc_Log
vlc_access_NewMRL
vlc_obj_malloc
vlc_stream_Delete
vlc_stream_Eof
vlc_stream_ReadBlock
vlc_stream_ReadPartial
vlc_stream_Seek
vlc_stream_vaControl
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
732B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
616B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
170B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libattachment_plugin.dll
- IMPHASH 842d6bc0885c1b6720a2bb513f206c6a
- SHA256 37cf9f70a31fa6231e163348aeda9bbfc1eb8bd10efc4a5ca62cae568cbcdaea
- MD5 021917923bb4eba130526a89030c596d
- SHA1 cc8cd0413fb4da4a86944c085fc895f6654d3434
- SHA512 34f8759d6960cc805e38be749b83cafaf5fd27b4ad3f0e25b23742aac9c85e56bdf76deba59e1277651b65dcf5d07084c152d8e8bc150ebb5c0d5853d536591f
- SSDEEP 768:CW2Exuqnbs7wYxXiVdEVOx6ubhxXiVdEVOxtr3y:KEx9kwqyVTxJbvyVTxM
- TLSH T167137E67A650AC48C91FC57075EA8A3AAD75B9131EB1C7DB0364D2204FA0B81BBFD17C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
input_Control
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
167B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar
- SHA256 f6c9188634b521b08abb1ea530ab94d222a52f67fa59ca829136422931c1b213
- MD5 22ab31ce5bba1cd7069515e5d9c0d7d2
- SHA1 85dc9099235470cf2ed9b9dd559e6965d8612b17
- SHA512 55baa09d3a04dc72e43cf24ff5d84396e0d3af6f6a55b045e250a52d6fcb10f4c549570b96a57e6ff1247cdcbbd19e2ec35f4dd35e7c6649c84bb9c533fba524
- SSDEEP 1536:NXtczIvxI2imckaqmB+BOY8AujaARNkwCqZ4bwUWiz3t0m6g7Up:xtbI2sBnYwj5RNtbabSKt0mKp
- TLSH T1BF63E13218B82077DB5FC173D09606C1351E25F498872D262DE9AED376BADBFCB06520
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned JAR
Checks for missing JAR codesign signature.
AppBase/user/Settings/lib/x64/libbluray-j2se-1.3.2.jar
- SHA256 75fd105e4581290801866538270a9e7badeb5a6b9fba7d00b14b8312123c2d22
- MD5 9d76776c432194bb8ae70922eab1feca
- SHA1 5c4df6fdf208dea9d0bb9f7a4f418477981b4131
- SHA512 3b777731409ad23a2950081e7b8a87a53fe070e926ab2c1624669a85be41b95a238165f5d174e77f4c137418797f72fab45f3aee373c4ee177dda56fea896e0b
- SSDEEP 12288:gZ8S4ERL9jxTjxOL6uz9BoaItnvcKSClnb5yelW0lZ/hy+3njEz1Mk:gZ87Ej1xO1A3VvcKSeb5ycWqd0+3mMk
- TLSH T138F4CE72E1C42931F5638177A6E38423382E04DDEA867D13A8F66AD7E472C5AEF03715
- MD5 SHA1 SHA512 SSDEEP TLSH
AppBase/user/Settings/lib/x64/libcdda_plugin.dll
- IMPHASH 027f361674bdef3fbbc4f6e5a32075cf
- SHA256 7a7d2c190907053f17ce7cdfad9d689cb6bcbcaa9e1e5d55f1071db137ef4e2f
- MD5 28087f663eb9e5516cb788ffed7c6ea7
- SHA1 f6d1b224d443e7064105b7196ae06033dc09ce19
- SHA512 4ec25c5085e547f6751a539df919b2927bb9143283c967be472219e68f9a2e3f0babc8ed27f4620c5184ff630b0446fef91cc6b75c0ef11f3d9d2be6a57ceb87
- SSDEEP 12288:6Vnl/u0/J8DPk9PX7OzfCHhINhaGvuy/12YK5sqcXYobT:6Vhu0KDPk9PKTshIWURRMUT
- TLSH T1AB056B5BE6A314ECC26BC13443976733B472F86612707EBF16A4D6303E12E605B6E7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
access_vaDirectoryControlHelper
block_Alloc
config_GetUserDir
date_Get
date_Increment
date_Init
date_Set
es_format_Init
input_item_AddOption
input_item_NewExt
input_item_Release
input_item_SetMeta
input_item_SetName
input_item_node_AppendItem
var_Inherit
vlc_Log
vlc_b64_encode_binary
vlc_close
vlc_fopen
vlc_gettext
vlc_memstream_close
vlc_memstream_flush
vlc_memstream_open
vlc_memstream_printf
vlc_meta_Delete
vlc_meta_Get
vlc_meta_Merge
vlc_meta_New
vlc_meta_Set
vlc_obj_malloc
vlc_open
vlc_stream_Delete
vlc_stream_FilterNew
vlc_stream_NewURL
vlc_stream_Read
vlc_towc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetACP
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
QueryPerformanceCounter
ReadFile
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_exit
_fstat64
_initterm
_lock
_lseeki64
_onexit
_open_osfhandle
_stat64
_stricmp
_time64
_unlock
_vsnprintf
abort
atof
atoi
calloc
clock
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getc
getenv
isalnum
isalpha
iscntrl
islower
isprint
ispunct
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
printf
raise
realloc
signal
sprintf
sscanf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strtol
strtoul
tolower
ungetc
vfprintf
wcscpy
wcslen
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_mkdir
_getpid
_fileno
_close
_access
user32
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
ws2_32
connect
gethostbyname
getsockopt
htons
ioctlsocket
recv
select
send
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
619KB
Virtual Size
619KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
96KB
Virtual Size
96KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
161B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libdvdnav_plugin.dll
- IMPHASH ebb40a887e18180ed79c65e984c24504
- SHA256 e15f2c49db514f7e7f9d51866dfd249c739832c465185c777e0955249c9639cf
- MD5 4a5303dbb632f580a56627d83214227b
- SHA1 4344c6f6d6687bf5c7fd480275c9a4b2a52fcd26
- SHA512 335b8eddaedc57542afde15282e316eb63b22f0e07c68fa644239747aeef0d5d1bf4bad227405dcaff604d9ee61b4b33a217d17ea69e2be200d13518340b0ee4
- SSDEEP 3072:IC7jGpglaVh/Y1D6FgU9GzywQFJmFgH0mVeOurFCoTGrDTnqqqGR:LSg6mefGFomg0geVrFLkXR
- TLSH T190344B56B1922CECCA2BC1308397E632F972B8560230FD7E1B64C7751F15E216B6E96C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
es_format_Clean
es_format_Init
input_Control
msleep
var_AddCallback
var_Create
var_DelCallback
var_Destroy
var_GetChecked
var_Inherit
var_SetChecked
vlc_Log
vlc_close
vlc_dialog_display_error
vlc_gettext
vlc_global_mutex
vlc_meta_Set
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_object_release
vlc_open
vlc_stream_Peek
vlc_stream_Read
vlc_stream_Seek
vlc_stream_vaControl
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_findclose
_fstat64
_initterm
_lock
_lseeki64
_mkdir
_onexit
_stat64
_stricmp
_strnicmp
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wopen
_wstat64
abort
atoi
calloc
fprintf
fputc
free
fwprintf
fwrite
getenv
isprint
malloc
memcmp
memcpy
perror
puts
raise
rand
realloc
signal
sprintf
srand
sscanf
strchr
strerror
strlen
strncat
strncmp
strncpy
strtok
vfprintf
wcscpy
_snwprintf
_write
_strdup
_read
_open
_close
shell32
SHGetFolderPathA
user32
MessageBoxW
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libdvdread_plugin.dll
- IMPHASH b7af8b795333a0ca0174a05da5158471
- SHA256 cfb94e3e21ae82f05cf85e9f8be9ee012f6b7baa084c0ecca8c30310442959ef
- MD5 39d641807eab8c8e40d7eccf30960b4e
- SHA1 28413be490300791eb2d340a05b12e1ac2d1d24f
- SHA512 a8740bd4306e6ed495288b8af2fdc668dcfb3cb122d4e67cd79945a4045a4fc07740e7f8f0cf22698564bd2f28513d70d121dfa66fc2944b6b58f19a6ebfd208
- SSDEEP 3072:Bc25hZLo008Zo6BpLFLyfo+thjCpTZqdqsY:qUt0ibL0fZ/jWwY
- TLSH T105F34B16F15268ECDA2BC23057A7EA32F97178960330BE7D5B64C3741F25A2077AD86C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
es_format_Clean
es_format_Init
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_dialog_display_error
vlc_gettext
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetLastError
GetLogicalDrives
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetFilePointer
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_findclose
_initterm
_lock
_lseeki64
_mkdir
_onexit
_stat64
_stricmp
_strnicmp
_unlock
_vsnprintf
_wfindfirst64
_wfindnext64
_wopen
_wstat64
abort
atoi
calloc
fprintf
fputc
free
fwrite
getenv
malloc
memcmp
memcpy
perror
puts
realloc
signal
sprintf
sscanf
strchr
strerror
strlen
strncat
strncmp
strncpy
strtok
vfprintf
_write
_strdup
_read
_open
_close
shell32
SHGetFolderPathA
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
106KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
116B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libhttps_plugin.dll
- IMPHASH f22747f7e28bb1bec4fa071091455406
- SHA256 28f15014417c43e316af562b5809a54238a2b333fd048f83827d11c8518d08ba
- MD5 a5d6bd737c9aedac80d6a61a67e2e641
- SHA1 bab498a913367e99dbadc6e4065dc68703cc8ca3
- SHA512 6e1588d801f8dc233dd730684989b69f3bcd9be5797ab94baacddbf0e48e48238ad5cc74c993aa2fc030607111924621a113afdde87ac66b9fa213d975ca9392
- SSDEEP 3072:cjr8WMnJhvs/de6D8eaN7FlNic7bGXzMSl218JHdxCqkqqi:YQvJhvCdeQEFFlj/GjMl18JHDC8
- TLSH T14BF34C67E29254FDC65BC13456EA9736F831B8220730EEAE4774D6312E10F507B9E728
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
block_heap_Alloc
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_b64_encode_binary
vlc_cancel
vlc_clone
vlc_cond_broadcast
vlc_cond_destroy
vlc_cond_init
vlc_cond_signal
vlc_cond_wait
vlc_control_cancel
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_getProxyUrl
vlc_getaddrinfo_i22e
vlc_gettext
vlc_http_cookies_fetch
vlc_http_cookies_store
vlc_interrupt_register
vlc_interrupt_unregister
vlc_join
vlc_memstream_close
vlc_memstream_open
vlc_memstream_printf
vlc_memstream_write
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_restorecancel
vlc_savecancel
vlc_strerror_c
vlc_testcancel
vlc_tls_ClientCreate
vlc_tls_ClientSessionCreate
vlc_tls_Delete
vlc_tls_GetLine
vlc_tls_Read
vlc_tls_SessionDelete
vlc_tls_SocketOpenAddrInfo
vlc_tls_SocketOpenTCP
vlc_tls_SocketOpenTLS
vlc_tls_Write
vlc_uri_fixup
vlc_uri_resolve
vlc_vaLog
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_exit
_gmtime64
_initterm
_lock
_onexit
_stricmp
_strnicmp
_time64
_unlock
abort
calloc
fputc
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memchr
memcmp
memcpy
memmove
realloc
signal
strchr
strcmp
strcspn
strerror
strlen
strncmp
strspn
strstr
strtol
strtoul
tolower
ungetc
vfprintf
wcslen
wcstombs
_write
_strdup
_open
_close
ws2_32
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAWaitForMultipleEvents
__WSAFDIsSet
freeaddrinfo
select
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
162B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libidummy_plugin.dll
- IMPHASH 1df9e74f4e9cfaa70e57d14a4542e958
- SHA256 2b2bb121de5d434a8fcb9d2bad73e3d4c20fba109417969b4f901a1569364c04
- MD5 3f42f3d4558afdba7fdac85b842cdb42
- SHA1 99bb323d783a15ca60674367cd2167d84a997229
- SHA512 56875b2514b1a2a3b61ba83481dea20666243cd43738ab7c099555de32cefe7092f0e07c4e46eff7e550bcf7ce7442f5b300f695f5afa95c37248e8062c07452
- SSDEEP 768:v26oPk8nqzeeQxXiVdEVOxam9xXiVdEVOxGT8O:v26IktieCyVTx5zyVTxk8O
- TLSH T12C138E679714AC49CD0BC57074E9863AE9B5B9521AB0CBEB0364D2704FA0741BBFE1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
libvlc_Quit
mdate
msleep
us_atof
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_stricmp
_strnicmp
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
696B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
544B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libimem_plugin.dll
- IMPHASH 5bb7568c3c7404fadffd9a95b4b48cf5
- SHA256 200cff43d8b8e7f569dc37df62619f61b78cbcdd6280c3401364e4c9f5ee5619
- MD5 cc2b2704a9565b5d55739c6cfda876aa
- SHA1 f02774528efe749e35bda06e066f4fd718a32e70
- SHA512 94d23b9e10ee9c7246e3072166c7ff105c14938d3b1b5c488dcc975c89dba3c98d1303c5a9ebcf245e1dbe14c2dab1d4bdeeef7814eda0ed4972d2dd651dca25
- SSDEEP 768:+4RVUL5iEmwgxXiVdEVOxzKxXiVdEVOx7FR:+4YQJwyyVTxcyVTx7FR
- TLSH T1DE138EA7A650AC89CD0BC57075EA4A36A975B9521A71C7EF0324C2304FA07417BFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Inherit
vlc_Log
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
536B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
161B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/liblive555_plugin.dll
- IMPHASH 5e05b03185cd50c6283d344ad0352ba6
- SHA256 135ab5807ccf7d2af2913a43472df2182607e9daedd073b414cfc46e462a2870
- MD5 d3912ba8aa5657db2fb4df4b3ae6ba0b
- SHA1 e82c998bc6ad9b45810ac7b55929ed690a0df94a
- SHA512 29298b7b88b9fdf368807a85bf514e94486c8aad65e14a9f2e0c3bcc7c81cf049f20369dd61941388167a27967f094d6ebcedf08df9dabb37a92240e81c68b90
- SSDEEP 6144:NXPjRXFwbpefH3OG+k84UG2XPy8Btq3Ayd/ObEpVv7IzJFMy2IUbqG/6JjjAClP4:NXVWdef+b/7L/Bbw1v9y2IUb8YTSG
- TLSH T1C2D43A57AF6328FCC627C1708277A731A731F8110228BE6E36A8C7325F59D254F66678
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
ToCharset
block_Alloc
es_format_Clean
es_format_Init
var_Create
var_GetChecked
var_Inherit
var_SetChecked
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_b64_decode_binary_to_buffer
vlc_credential_clean
vlc_credential_get
vlc_credential_init
vlc_credential_store
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_gettext
vlc_killed
vlc_mutex_destroy
vlc_mutex_init
vlc_mutex_lock
vlc_mutex_unlock
vlc_rand_bytes
vlc_stream_Peek
vlc_stream_Read
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
vlc_uri_compose
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
CloseHandle
CreateSemaphoreW
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReleaseSemaphore
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetLastError
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_ctime64
_errno
_exit
_gmtime64
_initterm
_lock
_onexit
_snprintf
_stricmp
_strnicmp
_time64
_unlock
abort
calloc
fputc
fputs
free
fwrite
getc
getenv
islower
isspace
isupper
isxdigit
localeconv
malloc
memcmp
memcpy
memmove
memset
perror
puts
qsort
realloc
signal
sprintf
sscanf
strcat
strchr
strcmp
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strstr
strtol
strtoul
tolower
toupper
ungetc
vfprintf
wcslen
_write
_strdup
_open
_close
ws2_32
WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyname
gethostname
getsockname
getsockopt
htonl
htons
inet_addr
ioctlsocket
listen
ntohl
ntohs
recvfrom
select
send
sendto
setsockopt
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
388KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
20KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
84KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
164B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libnfs_plugin.dll
- IMPHASH 6492fb72dbd3cb78d85aa6169324172c
- SHA256 29b9d3e676964223cd09e8836978a2d3b7c8e2bf5a03f406a4f34b7fd1f8d2ce
- MD5 6a777a460092ec80e33dc7ce8375d16d
- SHA1 46b6cc6c0415f80d642c25089e3ed2c3019262d4
- SHA512 f92a8e934c1faa9766ab0933bf4dab944286ace34cc6663541b344f5d7654390508ee742a756e290c807ec799d50b6862f4896d93b77214e7592433605e66661
- SSDEEP 6144:xuq5iH17IkJ8nDvmZo7Oj9Vwk80vvbaBL:xl5q7F2nrmZVVwk8EvU
- TLSH T1A3540A26D69625BCC66F82308257D3327971F864D721BD7F04A5CA382D18C617BBFE28
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
access_vaDirectoryControlHelper
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParseFixup
vlc_dialog_display_error
vlc_gettext
vlc_obj_calloc
vlc_poll_i22e
vlc_readdir_helper_additem
vlc_readdir_helper_finish
vlc_readdir_helper_init
vlc_uri_decode_duplicate
vlc_uri_encode
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetTimeZoneInformation
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte
msvcrt
___lc_codepage_func
__dllonexit
__iob_func
__mb_cur_max
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_time64
_unlock
_vsnprintf
abort
atoi
calloc
fprintf
fputc
free
fwprintf
fwrite
getenv
localeconv
malloc
memcmp
memcpy
memset
puts
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strerror
strlen
strncmp
strncpy
strrchr
strstr
vfprintf
wcscpy
wcslen
_snwprintf
_write
_strdup
_open
_getpid
_close
user32
MessageBoxW
ws2_32
WSAGetLastError
WSAIoctl
WSAStringToAddressA
__WSAFDIsSet
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getnameinfo
getservbyport
getsockopt
htonl
htons
ioctlsocket
ntohl
recv
recvfrom
select
send
sendto
setsockopt
socket
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
193KB
Virtual Size
193KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
232B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
228B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/librtp_plugin.dll
- IMPHASH 9291532ba75483bc643b94d5fad59688
- SHA256 721e0ba3a3c9bacce1a4516bfcfd8322cb37d3037650b3c36117452537ba9e50
- MD5 71ad272e128d31dc7e9ad4834ca5b5d9
- SHA1 4717698ae2dcd8d633a61ade99516d5028d4a56b
- SHA512 5d2d132bd2cec7bc8c0fa8c58b56bf810eae34f619895e3946a2f7fb7c4f223d26238035576036f3afa679fcbdf39f27f3e966e7631fc195a78cb6bc8ee0379f
- SSDEEP 6144:nYV+A66NDbZ08DXvTfFpbt3DUj3CDfyE80rvNlgLd3x5GUqJXQyDXeOTfYdqbXft:nYMJ6NDbZZpFDU7zE84L8CreoXD
- TLSH T1DAE48C57E6A320FCC62BC13183576733B471F82612B06EBF16A4D6302E66F506B5EB64
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
aout_FormatPrepare
block_Alloc
block_Realloc
es_format_Init
mdate
net_Connect
net_OpenDgram
net_SetCSCov
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_cancel
vlc_clone
vlc_demux_chained_ControlVa
vlc_demux_chained_Delete
vlc_demux_chained_New
vlc_demux_chained_Send
vlc_dialog_display_error
vlc_global_mutex
vlc_join
vlc_restorecancel
vlc_savecancel
vlc_strerror_c
vlc_testcancel
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
kernel32
CloseHandle
CreateDirectoryA
CreateEventA
CreateFileA
CreateThread
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
FreeLibrary
GetACP
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessTimes
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemTimeAsFileTime
GetTempPathA
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetVersionExA
GlobalMemoryStatus
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
QueryPerformanceCounter
ReadFile
ResetEvent
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetEvent
SetFilePointerEx
SetUnhandledExceptionFilter
Sleep
SleepEx
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_fstat64
_initterm
_lock
_lseeki64
_onexit
_open_osfhandle
_stricmp
_time64
_unlock
_vsnprintf
abort
atoi
calloc
clock
div
fclose
feof
ferror
fflush
fgets
fopen
fprintf
fputc
fread
free
fseek
ftell
fwprintf
fwrite
getenv
iscntrl
isspace
isxdigit
malloc
memchr
memcmp
memcpy
memmove
memset
raise
realloc
signal
sprintf
strchr
strcmp
strcpy
strcspn
strerror
strlen
strncmp
strpbrk
strrchr
strspn
strtoul
vfprintf
wcscpy
_snwprintf
_write
_stricmp
_strdup
_setmode
_read
_open
_getpid
_fileno
_close
_access
user32
GetActiveWindow
GetCapture
GetCaretPos
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDesktopWindow
GetFocus
GetInputState
GetMessagePos
GetMessageTime
GetOpenClipboardWindow
GetProcessWindowStation
MessageBoxW
ws2_32
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSARecv
WSARecvFrom
WSAWaitForMultipleEvents
__WSAFDIsSet
closesocket
htonl
htons
ntohl
select
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
490KB
Virtual Size
490KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
85KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libscreen_plugin.dll
- IMPHASH 5ed2f0d31bdcdaa437b87e63caf0c9bd
- SHA256 b697e893ec8aa81b12cb84db88a2f18861231af96c5129265a2905c9ed29ebd3
- MD5 c5eeeae5a9425995fdc3ff26f8a9f629
- SHA1 d211c2216e72a28f41ed88714d8e6f4d82cf384d
- SHA512 94ed899f8103359846cf3c128430b9a760eb3c3899976d01aa99b32dd10c39609e4218705644270ca316929eab3e73096c757311686c6a550fa2d962463c07cf
- SSDEEP 768:RrFvSPSFC+qwM2xXiVdEVOxQmTxXiVdEVOxafD:RrFvSPkCfwM0yVTxZlyVTxafD
- TLSH T190338DAB92506CCCC84B89B176E95637E971BD221A71CBEB4214C1310F60B907BED6BD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Init
es_format_Init
image_HandlerCreate
image_HandlerDelete
mdate
module_need
module_unneed
mwait
picture_Release
picture_Setup
var_Create
var_GetChecked
var_Inherit
vlc_Log
vlc_object_create
vlc_object_release
vlc_path2uri
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
gdi32
BitBlt
CreateCompatibleDC
CreateDCW
CreateDIBSection
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
user32
GetCursorPos
GetSystemMetrics
ReleaseDC
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
756B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
644B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
163B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libsdp_plugin.dll
- IMPHASH 278f9cb37a30ea4253a57f5ec57e360f
- SHA256 b26704c95ecf4b10aaa234b0a5f9eeb9ab24149255568cda2efb5b236f49909d
- MD5 8dd59ec9e74d35586f6c2e2796b5e8eb
- SHA1 687c6afc69acf7339a6cd3f8083923b75a44fbf7
- SHA512 ed68ec9e3d2c0471528dc52e5269af39a26e740ca0846a2568db9d8dce04f6174203521178374785e8987f66c45d70ff797978a95c9a74814dbdd0292fe61a90
- SSDEEP 768:mZYNlkDJMUlwoxXiVdEVOxwX2RzxXiVdEVOxD:mZYjkDCuwayVTxOaFyVTxD
- TLSH T1C5138E67A750AC48C91BC57075E58B3AA9B5B9531E61C6EB0328C2204FA07857FFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
vlc_obj_malloc
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
520B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libshm_plugin.dll
- IMPHASH 9c336fc03aabd21c5e047c9a45bf203f
- SHA256 e177d9bd2682ca0b515672c0ec9f4327cca79f262465ba09b794fcb61df9f957
- MD5 5f0a149e8fa1bbebfdb286e51b0a52ab
- SHA1 8c7274c96b7c7d4ad5469bd70e7198bb59e8dd68
- SHA512 b0c6f90112bdf361e0ac8970d6b523bac6eccc96e7653bdd7ab3fda3408e33571e4f4a10f6c567dd4e1807cf8e0922ebdb35d8c0126fb4f0c7fde0541ff9d074
- SSDEEP 768:923nJ0OjH+PAfGZsFpIxXiVdEVOxElaxXiVdEVOxboN:M3n1jGA4mp6yVTxiAyVTxU
- TLSH T1CC237D67E684EC58C90BC57075FA4636FAB1B9620D61CB9A0368C1304FA0745BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_File
es_format_Init
mdate
var_Inherit
vlc_Log
vlc_close
vlc_obj_malloc
vlc_open
vlc_strerror_c
vlc_timer_create
vlc_timer_destroy
vlc_timer_schedule
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
684B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
560B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libtcp_plugin.dll
- IMPHASH fd321dcea42d32f0d9419d9e770da991
- SHA256 a522e4175106896b700b3dc014de9d08669206857a804fc0ac7d9b42f828cc04
- MD5 e710d9fc02c23890192586facf5a1650
- SHA1 875e5804c8b92e67f661aa5744133c34f45536d5
- SHA512 d0a93236c3f6e5456943a5f31a7dfc198b10e259e3e3052ffee609070ef66fabcc30876d336c892859087ce1bafa6c8141c2ec48fdbd75ded9b2564bb12a9f8e
- SSDEEP 768:FFAHPkO5XywfxXiVdEVOxp3xXiVdEVOx6Ne:FUPZCwJyVTxLyVTxX
- TLSH T1E9138FABA750AC48C91BCA7075EA8B3AA975B9521E71CBDB0354C1204FA07817FFD17C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
var_Inherit
vlc_Log
vlc_UrlClean
vlc_UrlParse
vlc_tls_Read
vlc_tls_SessionDelete
vlc_tls_SocketOpenTCP
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_exit
_initterm
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
signal
strlen
strncmp
vfprintf
_write
_open
_close
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/lib/x64/libudp_plugin.dll
- IMPHASH e6b0e1924a89597cb890a4de7527f342
- SHA256 dbf280383480e463170eea81f78bac9030186f1ff32c7c3f250763517f96c9f3
- MD5 c22e2ed46403edfea1a798c65a02802d
- SHA1 03a59562398c70fd1957240b991ce78b8ad4b115
- SHA512 e9550c3e26b70e81c134c5f14ca4b90757f2f3243bd2b5516486bf7fff233ec6badb4237d78d10561dddc5d78e36ad040f3d3301a88db9fa6569df23b57a77fc
- SSDEEP 768:w3bjnZUrHUULzpExXiVdEVOxtAxXiVdEVOxNm:w3Cr0UfpuyVTx4yVTxc
- TLSH T1C6238F67E684AC8DC91FC97175E94A36F9B579522961CBEA0324C1300FA0781BBFD1BC
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libvlccore
block_Alloc
net_OpenDgram
var_Inherit
vlc_Log
vlc_obj_malloc
vlc_poll_i22e
advapi32
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
kernel32
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__iob_func
_amsg_exit
_errno
_exit
_initterm
_lock
_onexit
_unlock
abort
atoi
calloc
free
fwrite
malloc
memcpy
signal
strchr
strlen
strncmp
vfprintf
_write
_strdup
_open
_close
ws2_32
WSAGetLastError
WSARecv
WSARecvFrom
closesocket
recv
vlc_entry__3_0_0f
vlc_entry_copyright__3_0_0f
vlc_entry_license__3_0_0f
Name
.text
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
672B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
572B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
160B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
112B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/Settings/mspdf.dll
- IMPHASH 8971f6ec52505de7049220663b7ba8ae
- SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
- MD5 925d01da4b5aa81778a3e9d84394e794
- SHA1 7405341d10fef12873262919928653c4a4af433e
- SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
- SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
- TLSH T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
9f:93:8b:5f:47:d8:97:7f:6d:bf:77:16:0d:e8:e7:06:0e:b0:64:d9:d6:0f:a9:d9:08:d7:da:10:10:12:6c:83
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
May 15, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32
Issuer
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 16, 2026 - Apr 15, 2027
Subject
CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Mar 22, 2036
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
10288304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mspdf.dll.pdb
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AreFileApisANSI
CloseHandle
CompareStringW
ConvertFiberToThread
ConvertThreadToFiber
CreateEventA
CreateEventW
CreateFiber
CreateFileA
CreateFileMappingA
CreateFileW
CreateIoCompletionPort
CreateThread
CreateWaitableTimerW
DeleteCriticalSection
DeleteFiber
DeviceIoControl
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
ExitThread
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
GetACP
GetActiveProcessorCount
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GlobalMemoryStatusEx
InitOnceExecuteOnce
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MapViewOfFileEx
MultiByteToWideChar
OpenEventA
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ResetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFilePointer
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToFiber
TerminateProcess
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
winmm
timeGetTime
ws2_32
WSACleanup
WSAStartup
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@QEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ
??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@$$QEAU0123@@Z
??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@W4PdfFeatures@23@W4PdfVersion@23@_KIW4FormType@23@V?$single_ptr@V?$PDFVector@V?$SizeT@N@pdf_base@edge_pdf@@@pdf_base@edge_pdf@@@pdf_base@3@V?$single_ptr@V?$PDFArray@D@pdf_base@edge_pdf@@@83@55555555V?$single_ptr@V?$PDFVector@PEAVPdfDocumentCustomMetadata@datamodel@pdfcontrol@edge_pdf@@@pdf_base@edge_pdf@@@83@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@V?$SizeT@N@pdf_base@2@W4ViewRotation@infra@2@V?$RectT@N@42@@Z
??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@XZ
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@$$QEAU012@@Z
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0PdfPrintParams@datamodel@edge_pdf@@QEAA@XZ
??0ShapeData@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0ShapeData@datamodel@edge_pdf@@QEAA@XZ
??0StampData@datamodel@edge_pdf@@QEAA@AEBU012@@Z
??0StampData@datamodel@edge_pdf@@QEAA@XZ
??1PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@XZ
??1ShapeData@datamodel@edge_pdf@@QEAA@XZ
??1StampData@datamodel@edge_pdf@@QEAA@XZ
??4PdfPageMetadata@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@$$QEAU012@@Z
??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
??4ShapeData@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z
?MakeAnnotationRenderParameters@pdfcontrol@edge_pdf@@YA?AV?$single_ptr@VPdfAnnotRenderParameters@pdfcontrol@edge_pdf@@@pdf_base@2@V?$single_ptr@VPdfAnnotationID@pdfcontrol@edge_pdf@@@42@UPdfRenderParameters@42@NW4AppearanceType@12@W4AppearanceState@12@@Z
?do_always_noconv@?$codecvt_null@_W@archive@boost@@EEBA_NXZ
?do_encoding@?$codecvt_null@_W@archive@boost@@EEBAHXZ
?do_max_length@?$codecvt_null@_W@archive@boost@@EEBAHXZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Uindex@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@23@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ
?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ
?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ
?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ
?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ
?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ
?is_locked@singleton_module@serialization@boost@@QEAA_NXZ
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z
?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA
?lock@singleton_module@serialization@boost@@QEAAXXZ
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z
?unlock@singleton_module@serialization@boost@@QEAAXXZ
CreatePrintHandler
GetCryptoFactoryFunc
GetPdfControlFactory
GetPlatformFactoryFunc
InitializePdfControlFactory
InitializePdfControlFactoryEx
SetGetCryptoFactory
SetPlatformFactory
UninitializePdfControlFactory
Name
.text
Size
11.2MB
Virtual Size
11.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
4.7MB
Virtual Size
4.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.7MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
758KB
Virtual Size
758KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
1024B
Virtual Size
585B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
malloc_h
Size
512B
Virtual Size
193B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
AppBase/user/level.txt
- SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
- MD5 c4ca4238a0b923820dcc509a6f75849b
- SHA1 356a192b7913b04c54574d18c28d46e6395428ab
- SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
- MD5 SHA1 SHA512
AppBase/user/login.cfg
- SHA256 c5b3cf05ed6e2a79e8d7305b3af7ccb5ed02918ddc7624b330ed97f41e066f02
- MD5 a88082a7664be4f56db07c5e5112d163
- SHA1 2271f7061d8e3c3f7b5f4b25b8eb09b4f92b7657
- SHA512 f2be5ddf15d61348f71da98148f2f4739d0d7025db8c3e596d502d4e9dd8427adb776554607b31365202949ac6d39c87df82d8074f1f2b2adf4d053854adb5ed
- MD5 SHA1 SHA512
AppBase/user/nickname.txt
- SHA256 3ac7b1a5e63ed517f0902c8c51f4474c4e4e0ffc03c519a48e9137083e337ff8
- MD5 043579f720143ae4801b30b16b83919f
- SHA1 324f6ab2a047a612b59685b33713300f22d5ae07
- SHA512 0a86b46d9ae2ad6f9612744daabf34a7c52bc4e890b40a83472e255d0761881f9b58b4e6ed9f04831e57d4e627f5940b4daa4c983e2b8139f1b82cc38217fbf3
- MD5 SHA1 SHA512
AppBase/utils_112.sdat
- SHA256 9f10df24eb85ab77509326b7f403f398815f795bef72210db965e136bc7decb2
- MD5 042d0a7397e0b3f35caf1264c84fc01d
- SHA1 679cfbfbd1418cefdaa2f878d279673650082459
- SHA512 2faa6c6d89de3f8d2d99501a0e5fb85dd953d711cc23ab846b6933fbde41f1b32546162d8586681c25e219a80987ee2e4a4f66a875d948413661d8bad683d10e
- SSDEEP 12288:xGItV8QQvH8S6o8j3+LDyEWYQYMWTXmlpuB5OzDR0TKlBOLd5w/s:xGIVxEcS6o86LWurTXmTy0pB2
- TLSH T1C0F423639BC9F3E1ACA29A8393F4BAA0543174F1468D0412E6DCE5EF4E9611F911F43B
- MD5 SHA1 SHA512 SSDEEP TLSH
EliteCheatsX-2.0.exe
- IMPHASH a82ed2c7f2b70e750b56a945410afcfa
- SHA256 d9c0e3b483f426ceb02277be9e47ca30c0ec0519473f7b453ec7698053a0b97c
- MD5 2a4cd41140799b0694f9cbbe315c3355
- SHA1 7427cdca4650f1182e743a9a160c50101f1ed857
- SHA512 3d6993e0790dd2edec056f82b431ce3335ce8369b6361caa850706451b3df757109a219f149ffe138852548ab3716a9a3fcca3f103127c1a5123ee16fea3288c
- SSDEEP 49152:g9Ianq2L6KNrg0Yzmy0NUgJCD5AS7nrjc0+AnT1Ov0Wte4qPb27K:oXPe35IoOOPq7K
- TLSH T12A76B3AF66DC9568C129D339CC52CF01F4F66463CB32C6EB019317988A65CCD5EBAD21
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0a:4c:02:45:e5:85:91:fd:c9:7f:41:0f:45:86:a3:8b:cc:d3:98:58:92:57:15:fa:15:0b:c5:f0:84:1c:1b:04:57:35:b5:20:77:e6:c5:0c:45:9d:4f:25:02:16:48:87:ba:42:30:70:08:09:8c:57:7a:3a:5e:bd:00:b4:ab:85
Digest Algorithm
sha512
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
Chains
Jul 5, 2026
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
PE Signature issue
Digest
ca:4d:17:56:b0:37:53:67:a7:b5:ed:f0:a5:20:05:89:55:f0:bf:65
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
Chains
Jul 5, 2026
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
Subject
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
Serial Number
5c:5c:73:3b:94:09:b4:88:4d:08:2b:99:bd:7b:d3:ff
Issuer
CN=Disk Resizer\, O=SunTon Cloud Works\, Ltd.\, OU=Release Engineering\, L=Chicago\, S=IL\, C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 5, 2026 - Jul 5, 2031
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Subject
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Serial Number
90:ac:08:72:20:fd:c5:a7:c4:6b:5c:c7:0d:f7:3d:06
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Mar 24, 2041
Subject
CN=Sectigo Public Time Stamping Signer R37,O=Sectigo Limited,ST=Greater London,C=GB
Serial Number
e7:4e:f2:55:b0:50:4f:fa:db:a6:df:f7:fc:8b:a3:15
Issuer
CN=Sectigo Public Time Stamping CA R41,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 25, 2026 - Jun 24, 2037
Minor OS version
2
Major OS version
5
Entry point
3505840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
oleaut32
SysFreeString
SysReAllocStringLen
SysAllocStringLen
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreate
VariantChangeType
VariantCopy
VariantClear
VariantInit
GetErrorInfo
SysFreeString
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegUnLoadKeyW
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
user32
CharNextW
LoadStringW
SetClassLongPtrW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
CreateWindowExW
WindowFromPoint
WaitMessage
UpdateWindow
UnregisterClassW
UnhookWindowsHookEx
TranslateMessage
TranslateMDISysAccel
TrackPopupMenu
SystemParametersInfoW
ShowWindow
ShowScrollBar
ShowOwnedPopups
ShowCaret
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
SetWindowPos
SetWindowPlacement
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetMenu
SetForegroundWindow
SetFocus
SetCursorPos
SetCursor
SetClipboardData
SetCapture
SetActiveWindow
SendMessageA
SendMessageW
ScrollWindow
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageA
PeekMessageW
OpenClipboard
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
MapWindowPoints
MapVirtualKeyW
LoadStringW
LoadKeyboardLayoutW
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsWindow
IsIconic
IsDialogMessageA
IsDialogMessageW
IsChild
InvalidateRect
InsertMenuItemW
InsertMenuW
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetScrollBarInfo
GetPropW
GetParent
GetWindow
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetMenu
GetLastActivePopup
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextW
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetDC
GetCursorPos
GetCursor
GetClipboardData
GetClientRect
GetClassNameW
GetClassInfoExW
GetClassInfoW
GetCapture
GetActiveWindow
FrameRect
FindWindowExW
FindWindowW
FillRect
EnumWindows
EnumThreadWindows
EnumChildWindows
EndPaint
EndMenu
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextExW
DrawTextW
DrawMenuBar
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageA
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreatePopupMenu
CreateMenu
CreateIcon
CreateAcceleratorTableW
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
CheckMenuItem
CharUpperBuffW
CharUpperW
CharNextW
CharLowerBuffW
CharLowerW
CallWindowProcW
CallNextHookEx
BeginPaint
AdjustWindowRectEx
ActivateKeyboardLayout
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
kernel32
Sleep
VirtualFree
VirtualAlloc
lstrlenW
VirtualQuery
QueryPerformanceCounter
GetTickCount
GetSystemInfo
GetVersion
CompareStringW
IsValidLocale
SetThreadLocale
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetLocaleInfoW
WideCharToMultiByte
MultiByteToWideChar
GetACP
LoadLibraryExW
GetStartupInfoW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetCommandLineW
FreeLibrary
GetLastError
UnhandledExceptionFilter
RtlUnwindEx
RtlUnwind
RaiseException
ExitProcess
ExitThread
SwitchToThread
GetCurrentThreadId
CreateThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
FindFirstFileW
FindClose
WriteFile
GetStdHandle
CloseHandle
GetProcAddress
RaiseException
LoadLibraryA
GetLastError
TlsSetValue
TlsGetValue
LocalFree
LocalAlloc
GetModuleHandleW
FreeLibrary
WriteFile
WideCharToMultiByte
WaitForSingleObject
WaitForMultipleObjectsEx
VirtualQueryEx
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
VerSetConditionMask
VerifyVersionInfoW
TryEnterCriticalSection
SwitchToThread
SuspendThread
Sleep
SizeofResource
SetThreadPriority
SetThreadLocale
SetLastError
SetFilePointer
SetEvent
SetErrorMode
SetEndOfFile
ResumeThread
ResetEvent
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
IsDebuggerPresent
MulDiv
LockResource
LocalFree
LoadResource
LoadLibraryW
LeaveCriticalSection
IsValidLocale
InitializeCriticalSection
HeapSize
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetVersion
GetTickCount
GetThreadPriority
GetThreadLocale
GetTempPathW
GetStdHandle
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCPInfoExW
GetCPInfo
GetACP
FreeResource
FreeLibrary
FormatMessageW
FindResourceW
FindFirstFileW
FindClose
EnumSystemLocalesW
EnumResourceNamesW
EnumCalendarInfoW
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileW
CreateEventW
CompareStringW
CloseHandle
Sleep
gdi32
WidenPath
UnrealizeObject
TextOutW
StrokePath
StrokeAndFillPath
StretchDIBits
StretchBlt
StartPage
StartDocW
SetWindowOrgEx
SetWinMetaFileBits
SetViewportOrgEx
SetTextCharacterExtra
SetTextColor
SetTextAlign
SetStretchBltMode
SetRectRgn
SetROP2
SetPixel
SetGraphicsMode
SetEnhMetaFileBits
SetDIBits
SetDIBColorTable
SetBrushOrgEx
SetBkMode
SetBkColor
SetArcDirection
SetAbortProc
SelectPalette
SelectObject
SelectClipRgn
SelectClipPath
SaveDC
RoundRect
RestoreDC
Rectangle
RectVisible
RealizePalette
PtVisible
PolylineTo
Polyline
Polygon
PolyBezierTo
PolyBezier
PlayEnhMetaFile
Pie
PathToRegion
PatBlt
MoveToEx
MaskBlt
LineTo
LPtoDP
IntersectClipRect
GetWindowOrgEx
GetWinMetaFileBits
GetTextMetricsW
GetTextExtentPointW
GetTextExtentPoint32W
GetTextCharacterExtra
GetTextAlign
GetSystemPaletteUse
GetSystemPaletteEntries
GetStretchBltMode
GetStockObject
GetRgnBox
GetPixel
GetPaletteEntries
GetObjectW
GetMapMode
GetEnhMetaFilePaletteEntries
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDeviceCaps
GetDIBits
GetDIBColorTable
GetCurrentPositionEx
GetClipRgn
GetClipBox
GetBrushOrgEx
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
FillPath
ExtTextOutW
ExtSelectClipRgn
ExtFloodFill
ExtCreatePen
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPath
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateEllipticRgnIndirect
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyEnhMetaFileW
CloseFigure
Chord
BitBlt
BeginPath
ArcTo
Arc
AngleArc
AbortDoc
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ole32
OleUninitialize
OleInitialize
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoInitialize
IsEqualGUID
comctl32
InitializeFlatSB
FlatSB_SetScrollProp
FlatSB_SetScrollPos
FlatSB_SetScrollInfo
FlatSB_GetScrollPos
FlatSB_GetScrollInfo
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_SetIconSize
ImageList_GetIconSize
ImageList_Write
ImageList_Read
ImageList_GetDragImage
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
ImageList_Copy
ImageList_LoadImageW
ImageList_GetIcon
ImageList_Remove
ImageList_DrawEx
ImageList_Replace
ImageList_Draw
ImageList_SetOverlayImage
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageCount
ImageList_Destroy
ImageList_Create
shell32
Shell_NotifyIconW
winspool.drv
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
ClosePrinter
GetDefaultPrinterW
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
292KB
Virtual Size
292KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
44KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
150B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
484B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
109B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
172KB
Virtual Size
172KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.pdata
Size
189KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
dxil.dll
- IMPHASH d491d5c5bf90bc0c2622735f43de4080
- SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
- MD5 c9a7241ce83437d54a82522aa0b54575
- SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
- SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
- SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
- TLSH T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
af:ea:7c:16:de:21:8c:35:55:07:34:fb:89:38:8c:65:19:01:2b:95:5d:37:f0:a4:17:bb:12:5b:59:02:7c:1f
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jan 26, 2026
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:1c:48:9f:81:df:a1:b0:b7:77:00:00:00:00:00:1c
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 8, 2024 - Jun 23, 2035
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:86:e7:71:94:b9:4d:ff:09:fb:00:00:00:00:00:86
Issuer
CN=Microsoft Windows Code Signing PCA 2024,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 8, 2025 - May 6, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 14, 2025 - Nov 13, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
6
Entry point
450288
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\__w\1\b\build\x64\DXC\Release\bin\Symbols.pri\dxil.pdb
kernel32
DeleteCriticalSection
MoveFileExW
InitializeCriticalSectionEx
GetLastError
CreateHardLinkW
InitializeCriticalSection
GetModuleFileNameW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
SetFileTime
RemoveDirectoryW
GetFileType
GetFileInformationByHandle
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose
DeleteFileW
CreateDirectoryW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
ReadFile
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedFlushSList
RtlUnwindEx
RtlPcToFileHeader
InitializeSListHead
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
IsDebuggerPresent
OutputDebugStringW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetCurrentDirectoryW
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetProcessTimes
GetCurrentProcess
GetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
GetSystemTimeAsFileTime
CloseHandle
CreateFileW
TerminateProcess
LocalFree
FormatMessageA
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
QueryPerformanceCounter
QueryPerformanceFrequency
GetTempPathW
GetModuleHandleW
GetProcAddress
WakeAllConditionVariable
SleepConditionVariableSRW
ole32
CoTaskMemFree
CoTaskMemAlloc
CoGetMalloc
advapi32
EventUnregister
EventRegister
EventWriteTransfer
api-ms-win-crt-heap-l1-1-0
free
calloc
malloc
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_initterm_e
_execute_onexit_table
_errno
_crt_atexit
_invalid_parameter_noinfo_noreturn
_cexit
_initterm
abort
terminate
api-ms-win-crt-string-l1-1-0
isdigit
isprint
strcpy_s
toupper
isalpha
wcsncmp
isalnum
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__acrt_iob_func
_write
_read
_open_osfhandle
_lseek
_close
fwrite
_setmode
_get_osfhandle
__stdio_common_vsnprintf_s
_chsize
_wsopen_dispatch
_fileno
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
_fpclass
ceilf
api-ms-win-crt-convert-l1-1-0
atoi
DxcCreateInstance
DxcCreateInstance2
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
248KB
Virtual Size
248KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
24KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=34321,
count=11, id=260, version=34321,
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=6, id=260, version=34808,
count=50, id=261, version=34321,
count=9, id=257, version=28900,
count=211, id=1, productName=Unmarked objects,
count=168, id=261, version=34808,
count=1, id=256, version=34808,
count=1, id=255, version=34808,
count=1, id=151,
count=1, id=258, version=34808,
libEGL.dll
- IMPHASH 7e965a1503536b470bbf4a0c5000445d
- SHA256 dc7d3595727af15c3912cffbd01bafafccc168f78b7c6520aa75f26d4714a495
- MD5 072b756d0e645a48ae769927e6194c29
- SHA1 bf0a10c5a8f99b1e10f82cd11a00f8bffc408671
- SHA512 c82aa2574de52458920ce746218b39a25d05fd2404e9488197c5bb25547d8250ef3f36c0cda6f65508db198233e89dff05ab5650880cafdd8ca4187e85e2e422
- SSDEEP 6144:kx14LmwiJBujp04zkNB88Ddy1cJhrF+k82x3spkGaZv:lLscjPzp8Ddy1cJv+kNlspxaZv
- TLSH T1A8B47D15B2D949ACD03BC178CA538547EB7178520F65F6EF02A0E2792F77BE05A7A320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Digest
6c:2d:74:ee:74:a4:49:04:8b:75:1c:d8:9d:3f:c4:3f:8a:f8:7b:4e:5d:70:46:c0:5b:b1:40:55:01:c9:59:7c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains
Jun 11, 2026
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Serial Number
0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 8, 2024 - Apr 10, 2027
Minor OS version
0
Major OS version
10
Entry point
71840
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
libEGL.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
EnumSystemLocalesW
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetEnvironmentStringsW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoW
GetLogicalProcessorInformation
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
HeapAlloc
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
LCMapStringW
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadConsoleW
ReadFile
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SetEnvironmentVariableW
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
eglAcquireExternalContextANGLE
eglBindAPI
eglBindTexImage
eglChooseConfig
eglClientWaitSync
eglClientWaitSyncKHR
eglCopyBuffers
eglCopyMetalSharedEventANGLE
eglCreateContext
eglCreateDeviceANGLE
eglCreateImage
eglCreateImageKHR
eglCreateNativeClientBufferANDROID
eglCreatePbufferFromClientBuffer
eglCreatePbufferSurface
eglCreatePixmapSurface
eglCreatePlatformPixmapSurface
eglCreatePlatformPixmapSurfaceEXT
eglCreatePlatformWindowSurface
eglCreatePlatformWindowSurfaceEXT
eglCreateStreamKHR
eglCreateStreamProducerD3DTextureANGLE
eglCreateSync
eglCreateSyncKHR
eglCreateWindowSurface
eglDebugMessageControlKHR
eglDestroyContext
eglDestroyImage
eglDestroyImageKHR
eglDestroyStreamKHR
eglDestroySurface
eglDestroySync
eglDestroySyncKHR
eglDupNativeFenceFDANDROID
eglExportVkImageANGLE
eglForceGPUSwitchANGLE
eglGetCompositorTimingANDROID
eglGetCompositorTimingSupportedANDROID
eglGetConfigAttrib
eglGetConfigs
eglGetCurrentContext
eglGetCurrentDisplay
eglGetCurrentSurface
eglGetDisplay
eglGetError
eglGetFrameTimestampSupportedANDROID
eglGetFrameTimestampsANDROID
eglGetMscRateANGLE
eglGetNativeClientBufferANDROID
eglGetNextFrameIdANDROID
eglGetPlatformDisplay
eglGetPlatformDisplayEXT
eglGetProcAddress
eglGetSyncAttrib
eglGetSyncAttribKHR
eglGetSyncValuesCHROMIUM
eglHandleGPUSwitchANGLE
eglInitialize
eglLabelObjectKHR
eglLockSurfaceKHR
eglLockVulkanQueueANGLE
eglMakeCurrent
eglPostSubBufferNV
eglPrepareSwapBuffersANGLE
eglPresentationTimeANDROID
eglProgramCacheGetAttribANGLE
eglProgramCachePopulateANGLE
eglProgramCacheQueryANGLE
eglProgramCacheResizeANGLE
eglQueryAPI
eglQueryContext
eglQueryDebugKHR
eglQueryDeviceAttribEXT
eglQueryDeviceStringEXT
eglQueryDisplayAttribANGLE
eglQueryDisplayAttribEXT
eglQueryDmaBufFormatsEXT
eglQueryDmaBufModifiersEXT
eglQueryStreamKHR
eglQueryStreamu64KHR
eglQueryString
eglQueryStringiANGLE
eglQuerySupportedCompressionRatesEXT
eglQuerySurface
eglQuerySurface64KHR
eglQuerySurfacePointerANGLE
eglReacquireHighPowerGPUANGLE
eglReleaseDeviceANGLE
eglReleaseExternalContextANGLE
eglReleaseHighPowerGPUANGLE
eglReleaseTexImage
eglReleaseThread
eglSetBlobCacheFuncsANDROID
eglSetDamageRegionKHR
eglSetValidationEnabledANGLE
eglSignalSyncKHR
eglStreamAttribKHR
eglStreamConsumerAcquireKHR
eglStreamConsumerGLTextureExternalAttribsNV
eglStreamConsumerGLTextureExternalKHR
eglStreamConsumerReleaseKHR
eglStreamPostD3DTextureANGLE
eglSurfaceAttrib
eglSwapBuffers
eglSwapBuffersWithDamageKHR
eglSwapInterval
eglTerminate
eglUnlockSurfaceKHR
eglUnlockVulkanQueueANGLE
eglWaitClient
eglWaitGL
eglWaitNative
eglWaitSync
eglWaitSyncKHR
eglWaitUntilWorkScheduledANGLE
Name
.text
Size
353KB
Virtual Size
353KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
297B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
malloc_h
Size
512B
Virtual Size
265B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
settings.dll
- SHA256 da439e4984cf44b48491854f81f6219f2e1ccc29c39ffd98e77e6187fe4c4723
- MD5 aa34361c6a3ead75b408750c85434105
- SHA1 43868bdd830ce5c8ad9d36fd8bea4b25ec1dbd41
- SHA512 94a31f7ff1020beb746b71d5dec258f977fde4259524c92e9beb52196a0c4caac2ba35b911956459e937e6544fe272113c769c3cd66e2ee0e5cae924ada890b6
- SSDEEP 12288:e8EUyGkBupyPfDYN31m6SxT26B13Et95CFZC7hWc9Q45DI6Hiu/G:e8EUNxMUN31KxS6B13Et9GZCNBIZ/
- TLSH T13DE43352F617B9838D27C48387838432ECF9F9A6864929B61CB345B5E1AF742F5F3520
- MD5 SHA1 SHA512 SSDEEP TLSH
vc_redist.x64.msi
- SHA256 da23a163a259c8b7c385e055b0395de2745438283a4b3f0ac2700372e9f9a725
- MD5 6a689832959e93b7dd58711eb213ccac
- SHA1 79f4eb36da8252205cf5ea824e00108003815072
- SHA512 e46251fb06b0c35b22465555b8646e28013f394f26c0ad603a806e18ec29a42a560586c55a35bd27de1a06e99e0cc8b5c95777035668b211f9747ef8d4a4bd1d
- SSDEEP 786432:icOM/CvDpzjG7vxv2xyy5rS6rV+JCOlB+:KTvD5Mv4hNSyKB+
- TLSH T14D47336ACC725A8BD2BA8235C8F84C54A6A7FC559E470D3DB254379211F72F4B1BB0C8
- MD5 SHA1 SHA512 SSDEEP TLSH
File Signature issue
Digest
3a7628c6b7c8e34fd7b42da561c4b16b27f71a60bf2f8ba7e1b93fe108951488ea589584ecf6752e6912d18d79d08cac
Digest Algorithm
sha384
Digest Matches
Trusted
Not trusted
Prehash
Signing Certificate
CN=Hotkey Monitor,OU=Digital Products,O=RedHarbor Lane Digital GmbH,L=Chicago,ST=IL,C=US
Chains
Jul 3, 2026
CN=Hotkey Monitor,OU=Digital Products,O=RedHarbor Lane Digital GmbH,L=Chicago,ST=IL,C=US
Subject
CN=Hotkey Monitor,OU=Digital Products,O=RedHarbor Lane Digital GmbH,L=Chicago,ST=IL,C=US
Serial Number
15:61:34:c5:b6:60:bc:ba:48:94:12:5a:56:27:c3:d9
Issuer
CN=Hotkey Monitor,OU=Digital Products,O=RedHarbor Lane Digital GmbH,L=Chicago,ST=IL,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jul 3, 2026 - Jul 3, 2031
Subject
CN=SSL.com Timestamping Unit 2025 E1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
1f:6b:16:62:d2:2e:1b:6c:5d:f1:c0:c1:a0:60:0e:38
Issuer
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 18, 2025 - Nov 12, 2034
Subject
CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US
Serial Number
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56
Issuer
CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 13, 2019 - Nov 12, 2034