roblox-zapret-zxclinux.zip
- SHA256 0b13bed5a1cfacb5da0c3d8c8377eb9fecd6defec1280cb7a07305a3eceed18f
Overview
overview
4Static
static
3bin\WinDivert.dll
windows10-2004-x64
1bin\WinDivert.dll
windows11-ltsc_2024-x64
1bin\WinDivert64.sys
windows10-2004-x64
3bin\cygwin1.dll
windows10-2004-x64
1bin\cygwin1.dll
windows11-ltsc_2024-x64
1bin\winws.exe
windows10-2004-x64
1bin\winws.exe
windows11-ltsc_2024-x64
1general (ALT).bat
windows10-2004-x64
4general (ALT).bat
windows11-ltsc_2024-x64
4general (ALT10).bat
windows10-2004-x64
4general (ALT10).bat
windows11-ltsc_2024-x64
4general (ALT11).bat
windows10-2004-x64
4general (ALT11).bat
windows11-ltsc_2024-x64
4general (ALT2).bat
windows10-2004-x64
4general (ALT2).bat
windows11-ltsc_2024-x64
4general (ALT3).bat
windows10-2004-x64
4general (ALT3).bat
windows11-ltsc_2024-x64
4general (ALT4).bat
windows10-2004-x64
4general (ALT4).bat
windows11-ltsc_2024-x64
4general (ALT5).bat
windows10-2004-x64
4general (ALT5).bat
windows11-ltsc_2024-x64
4general (ALT6).bat
windows10-2004-x64
4general (ALT6).bat
windows11-ltsc_2024-x64
4general (ALT7).bat
windows10-2004-x64
4general (ALT7).bat
windows11-ltsc_2024-x64
4general (ALT8).bat
windows10-2004-x64
4general (ALT8).bat
windows11-ltsc_2024-x64
4general (ALT9).bat
windows10-2004-x64
4general (ALT9).bat
windows11-ltsc_2024-x64
4general (F...T).bat
windows10-2004-x64
4general (F...T).bat
windows11-ltsc_2024-x64
4general (F...2).bat
windows10-2004-x64
4Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bin\WinDivert.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bin\WinDivert.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
bin\WinDivert64.sys
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
bin\cygwin1.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
bin\cygwin1.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
bin\winws.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
bin\winws.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
general (ALT).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral9
Sample
general (ALT).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral10
Sample
general (ALT10).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral11
Sample
general (ALT10).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral12
Sample
general (ALT11).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral13
Sample
general (ALT11).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral14
Sample
general (ALT2).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral15
Sample
general (ALT2).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral16
Sample
general (ALT3).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral17
Sample
general (ALT3).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral18
Sample
general (ALT4).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral19
Sample
general (ALT4).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral20
Sample
general (ALT5).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral21
Sample
general (ALT5).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral22
Sample
general (ALT6).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral23
Sample
general (ALT6).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral24
Sample
general (ALT7).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral25
Sample
general (ALT7).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral26
Sample
general (ALT8).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral27
Sample
general (ALT8).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral28
Sample
general (ALT9).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral29
Sample
general (ALT9).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral30
Sample
general (FAKE TLS AUTO ALT).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral31
Sample
general (FAKE TLS AUTO ALT).bat
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral32
Sample
general (FAKE TLS AUTO ALT2).bat
Resource
win10v2004-20260513-en
windows10-2004-x64
7 signatures
150 seconds
General
- Target roblox-zapret-zxclinux.zip
- Size 2.7MB
- Sample260730-28vgnastcs
- SHA256 0b13bed5a1cfacb5da0c3d8c8377eb9fecd6defec1280cb7a07305a3eceed18f
- MD5 921758018916e7471d2a77476d283b8a
- SHA1 b0368d82dccfecaf556e8cfdb5f1f2c9d0dca0c1
- SHA512 ca6d62f25e52b927a446e0755aa7fa53c859c064f2ae4131d04a2f480640f86b9b61e8ecdf1a4a4047902611ffd35d46443a2ee2df829abaefe01b4244ed821e
- SSDEEP 49152:/uTQ5NorTHGxnUta5bvLokMbHKiBkuTQ5NorTHGxnUta5bvLokMbHK2B4DF:/uUHUS1zdDokMjKi+uUHUS1zdDokMjKt
- TLSH T1FFD533AAA091DA8FD21263325C0E491146E6F1D135E0EFCD7BDD36488311C939B79EBE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin\WinDivert.dll unpack001/bin\cygwin1.dll unpack001/bin\winws.exe unpack001/update\bin\WinDivert.dll unpack001/update\bin\cygwin1.dll unpack001/update\bin\winws.exe
File Explorer
-
roblox-zapret-zxclinux.zip.zip 2.7MB
-
bin\WinDivert.dll.dll 46KB
-
bin\WinDivert64.sys.sys 91KB
-
bin\cygwin1.dll.dll 2.8MB
-
bin\quic_initial_dbankcloud_ru.bin1KB
-
bin\quic_initial_www_google_com.bin1KB
-
bin\stun.bin100B
-
bin\tls_clienthello_4pda_to.bin284B
-
bin\tls_clienthello_max_ru.bin664B
-
bin\tls_clienthello_www_google_com.bin681B
-
bin\winws.exe.exe 199KB
-
general (ALT).bat3KB
-
general (ALT10).bat3KB
-
general (ALT11).bat4KB
-
general (ALT2).bat3KB
-
general (ALT3).bat3KB
-
general (ALT4).bat3KB
-
general (ALT5).bat2KB
-
general (ALT6).bat3KB
-
general (ALT7).bat3KB
-
general (ALT8).bat3KB
-
general (ALT9).bat3KB
-
general (FAKE TLS AUTO ALT).bat3KB
-
general (FAKE TLS AUTO ALT2).bat4KB
-
general (FAKE TLS AUTO ALT3).bat4KB
-
general (FAKE TLS AUTO).bat3KB
-
general (SIMPLE FAKE ALT).bat3KB
-
general (SIMPLE FAKE ALT2).bat3KB
-
general (SIMPLE FAKE).bat3KB
-
general.bat3KB
-
lists\ipset-all.txt836B
-
lists\ipset-all.txt.backup805B
-
lists\ipset-exclude-user.txt18B
-
lists\ipset-exclude.txt125B
-
lists\list-exclude-user.txt20B
-
lists\list-exclude.txt1KB
-
lists\list-general.txt4KB
-
lists\list-google.txt361B
-
lists\list-roblox.txt3KB
-
service.bat.bat 28KB
-
update\bin\WinDivert.dll.dll 46KB
-
update\bin\WinDivert64.sys.sys 91KB
-
update\bin\cygwin1.dll.dll 2.8MB
-
update\bin\quic_initial_www_google_com.bin1KB
-
update\bin\stun.bin100B
-
update\bin\tls_clienthello_4pda_to.bin284B
-
update\bin\tls_clienthello_max_ru.bin664B
-
update\bin\tls_clienthello_www_google_com.bin681B
-
update\bin\winws.exe.exe 199KB
-
update\general (ALT).bat3KB
-
update\general (ALT10).bat3KB
-
update\general (ALT11).bat3KB
-
update\general (ALT2).bat3KB
-
update\general (ALT3).bat3KB
-
update\general (ALT4).bat3KB
-
update\general (ALT5).bat2KB
-
update\general (ALT6).bat3KB
-
update\general (ALT7).bat2KB
-
update\general (ALT8).bat3KB
-
update\general (ALT9).bat3KB
-
update\general (FAKE TLS AUTO ALT).bat3KB
-
update\general (FAKE TLS AUTO ALT2).bat4KB
-
update\general (FAKE TLS AUTO ALT3).bat3KB
-
update\general (FAKE TLS AUTO).bat3KB
-
update\general (SIMPLE FAKE ALT).bat3KB
-
update\general (SIMPLE FAKE ALT2).bat3KB
-
update\general (SIMPLE FAKE).bat3KB
-
update\general.bat3KB
-
update\lists\ipset-all.txt18B
-
update\lists\ipset-all.txt.backup268KB
-
update\lists\ipset-exclude.txt135B
-
update\lists\list-exclude.txt573B
-
update\lists\list-general.txt859B
-
update\lists\list-google.txt362B
-
update\service.bat.bat 28KB
-
update\utils\check_updates.enabled10B
-
update\utils\targets.txt1KB
-
update\utils\test zapret.ps1.ps1 37KB
-
utils\game_filter.enabled5B
-
utils\targets.txt1KB
-
utils\test results\test_results_2026-03-02_19-53-52.txt12KB
-
utils\test results\test_results_2026-03-03_00-38-28.txt11KB
-
utils\test zapret.ps1.ps1 37KB
-
zxclinux.bat3KB
bin\WinDivert.dll
- IMPHASH 0b649f8e17494bb31b47f6e959a1769c
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
HeapAlloc
HeapCreate
HeapDestroy
ReleaseMutex
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinDivertClose
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCompileFilter
WinDivertHelperDecrementTTL
WinDivertHelperEvalFilter
WinDivertHelperFormatFilter
WinDivertHelperFormatIPv4Address
WinDivertHelperFormatIPv6Address
WinDivertHelperHashPacket
WinDivertHelperHtonIPv6Address
WinDivertHelperHtonIpv6Address
WinDivertHelperHtonl
WinDivertHelperHtonll
WinDivertHelperHtons
WinDivertHelperNtohIPv6Address
WinDivertHelperNtohIpv6Address
WinDivertHelperNtohl
WinDivertHelperNtohll
WinDivertHelperNtohs
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
WinDivertShutdown
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin\WinDivert64.sys
- IMPHASH db584dd0570594898805dd67d7ff391c
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb
ntoskrnl.exe
RtlCopyUnicodeString
KeBugCheckEx
IoGetRequestorProcess
PsGetProcessId
ExUuidCreate
ObfDereferenceObject
ObfReferenceObject
IoWriteErrorLogEntry
IoGetCurrentProcess
IoFreeMdl
IoAllocateMdl
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeQueryPerformanceCounter
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
fwpkclnt.sys
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectNetworkReceiveAsync0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpmCalloutAdd0
FwpmCalloutDeleteByKey0
FwpmFilterAdd0
FwpmFilterDeleteByKey0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsAllocateNetBufferAndNetBufferList0
FwpsFreeNetBufferList0
FwpsInjectNetworkSendAsync0
FwpsInjectForwardAsync0
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=259, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
bin\cygwin1.dll
- IMPHASH 8f21c12c4e790805822951d4e4dcad1c
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
202560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredContinueHandler
AllocConsole
AttachConsole
CallNamedPipeA
CancelIo
CancelSynchronousIo
ClearCommBreak
ClearCommError
CloseHandle
CompareStringW
ConnectNamedPipe
CreateFileA
CreateFileW
CreateNamedPipeA
CreatePipe
CreateProcessW
CreateRemoteThread
CreateSymbolicLinkW
CreateTapePartition
CreateThread
DebugBreak
DeleteCriticalSection
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GenerateConsoleCtrlEvent
GetBinaryTypeW
GetCommModemStatus
GetCommState
GetCommandLineW
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleProcessList
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentConsoleFontEx
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumberEx
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetNamedPipeClientProcessId
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessGroupAffinity
GetProcessHeap
GetProcessId
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadPriority
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
IdnToAscii
IdnToUnicode
InitializeCriticalSection
InitializeProcThreadAttributeList
IsBadStringPtrA
IsDebuggerPresent
IsProcessInJob
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LocaleNameToLCID
MapViewOfFile
MapViewOfFileEx
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
PeekConsoleInputA
PeekConsoleInputW
PeekNamedPipe
PrepareTape
PurgeComm
QueryDosDeviceW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
QueueUserAPC
RaiseException
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetComputerNameExW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleW
SetConsoleWindowInfo
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessAffinityMask
SetProcessWorkingSetSize
SetStdHandle
SetSystemTime
SetTapeParameters
SetTapePosition
SetThreadContext
SetThreadGroupAffinity
SetThreadPriority
SetThreadStackGuarantee
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleOutputW
WriteConsoleW
WriteFile
WriteProcessMemory
WriteTapemark
ntdll
NtAccessCheck
NtAdjustPrivilegesToken
NtAllocateLocallyUniqueId
NtAssignProcessToJobObject
NtCancelTimer
NtClose
NtCommitTransaction
NtCreateDirectoryObject
NtCreateEvent
NtCreateFile
NtCreateJobObject
NtCreateKey
NtCreateMutant
NtCreateNamedPipeFile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateTimer
NtCreateTransaction
NtDuplicateToken
NtFlushBuffersFile
NtFsControlFile
NtLockFile
NtLockVirtualMemory
NtMapViewOfSection
NtOpenDirectoryObject
NtOpenEvent
NtOpenFile
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThreadToken
NtPrivilegeCheck
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryObject
NtQueryQuotaInformationFile
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtReadFile
NtRollbackTransaction
NtSetEaFile
NtSetEvent
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationThread
NtSetInformationToken
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetTimer
NtSetValueKey
NtSetVolumeInformationFile
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtWaitForSingleObject
NtWriteFile
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessDeniedAceEx
RtlAllocateHeap
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlCheckRegistryKey
RtlCompareUnicodeString
RtlConvertSidToUnicodeString
RtlCopySid
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateQueryDebugBuffer
RtlCreateSecurityDescriptor
RtlDestroyQueryDebugBuffer
RtlDowncaseUnicodeString
RtlEnterCriticalSection
RtlEqualPrefixSid
RtlEqualSid
RtlEqualUnicodeString
RtlFirstFreeAce
RtlFreeHeap
RtlFreeUnicodeString
RtlGetAce
RtlGetControlSecurityDescriptor
RtlGetCurrentTransaction
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetNtVersionNumbers
RtlGetOwnerSecurityDescriptor
RtlGetVersion
RtlIdentifierAuthoritySid
RtlInitAnsiString
RtlInitUnicodeString
RtlInitializeSid
RtlLeaveCriticalSection
RtlLengthSid
RtlNtStatusToDosError
RtlPrefixUnicodeString
RtlQueryProcessDebugInformation
RtlQueryRegistryValues
RtlSetControlSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentTransaction
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlUnicodeStringToAnsiString
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
GetCommandLineA@0
GetCommandLineW@0
_Exit
__argc
__argv
__assert
__assert_func
__assertfail
__b64_ntop
__b64_pton
__bsd_qsort_r
__check_rhosts_file
__chk_fail
__cpuset_alloc
__cpuset_free
__ctype_ptr__
__cxa_atexit
__cxa_finalize
__cygwin_user_data
__dn_comp
__dn_expand
__dn_skipname
__eprintf
__errno
__fbufsize
__flbf
__fpclassifyd
__fpclassifyf
__fpending
__fpurge
__freadable
__freading
__fsetlocking
__fwritable
__fwriting
__getpagesize
__getreent
__gets_chk
__gnu_basename
__infinity
__isinfd
__isinff
__isnand
__isnanf
__locale_ctype_ptr
__locale_ctype_ptr_l
__locale_mb_cur_max
__main
__mb_cur_max
__memcpy_chk
__memmove_chk
__mempcpy
__mempcpy_chk
__memset_chk
__opendir_with_d_ino
__progname
__rcmd_errstr
__res_close
__res_init
__res_mkquery
__res_nclose
__res_ninit
__res_nmkquery
__res_nquery
__res_nquerydomain
__res_nsearch
__res_nsend
__res_query
__res_querydomain
__res_search
__res_send
__res_state
__sched_getaffinity_sys
__signbitd
__signbitf
__signgam
__snprintf_chk
__sprintf_chk
__srget
__srget_r
__stack_chk_fail
__stack_chk_fail_local
__stack_chk_guard
__stpcpy_chk
__stpncpy_chk
__strcat_chk
__strcpy_chk
__strncat_chk
__strncpy_chk
__swbuf
__swbuf_r
__vsnprintf_chk
__vsprintf_chk
__wrap__ZdaPv
__wrap__ZdaPvRKSt9nothrow_t
__wrap__ZdlPv
__wrap__ZdlPvRKSt9nothrow_t
__wrap__Znam
__wrap__ZnamRKSt9nothrow_t
__wrap__Znwm
__wrap__ZnwmRKSt9nothrow_t
__xdrrec_getrec
__xdrrec_setnonblock
__xpg_sigpause
__xpg_strerror_r
_alloca
_check_for_executable
_ctype_
_daylight
_dll_crt0
_exit
_fe_dfl_env
_fe_nomask_env
_feinitialise
_fscanf_r
_get_osfhandle
_impure_ptr
_longjmp
_pipe
_pthread_cleanup_pop
_pthread_cleanup_push
_setjmp
_setmode
_sys_errlist
_sys_nerr
_timezone
_tzname
a64l
abort
abs
accept
accept4
access
acl
acl_add_perm
acl_calc_mask
acl_check
acl_clear_perms
acl_cmp
acl_copy_entry
acl_copy_ext
acl_copy_int
acl_create_entry
acl_delete_def_file
acl_delete_entry
acl_delete_perm
acl_dup
acl_entries
acl_equiv_mode
acl_error
acl_extended_fd
acl_extended_file
acl_extended_file_nofollow
acl_free
acl_from_mode
acl_from_text
acl_get_entry
acl_get_fd
acl_get_file
acl_get_perm
acl_get_permset
acl_get_qualifier
acl_get_tag_type
acl_init
acl_set_fd
acl_set_file
acl_set_permset
acl_set_qualifier
acl_set_tag_type
acl_size
acl_to_any_text
acl_to_text
acl_valid
aclcheck
aclfrommode
aclfrompbits
aclfromtext
aclsort
acltomode
acltopbits
acltotext
acos
acosf
acosh
acoshf
acoshl
acosl
aio_cancel
aio_error
aio_fsync
aio_read
aio_return
aio_suspend
aio_write
alarm
aligned_alloc
alphasort
arc4random
arc4random_addrandom
arc4random_buf
arc4random_stir
arc4random_uniform
argz_add
argz_add_sep
argz_append
argz_count
argz_create
argz_create_sep
argz_delete
argz_extract
argz_insert
argz_next
argz_replace
argz_stringify
asctime
asctime_r
asin
asinf
asinh
asinhf
asinhl
asinl
asnprintf
asprintf
at_quick_exit
atan
atan2
atan2f
atan2l
atanf
atanh
atanhf
atanhl
atanl
atexit
atof
atoff
atoi
atol
atoll
basename
bcmp
bcopy
bind
bindresvport
bindresvport_sa
bsearch
btowc
bzero
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
call_once
calloc
canonicalize_file_name
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
catclose
catgets
catopen
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
ceilf
ceill
cexp
cexpf
cexpl
cfgetispeed
cfgetospeed
cfmakeraw
cfsetispeed
cfsetospeed
cfsetspeed
chdir
chmod
chown
chroot
cimag
cimagf
cimagl
clearenv
clearerr
clearerr_unlocked
clock
clock_getcpuclockid
clock_getres
clock_gettime
clock_nanosleep
clock_setres
clock_settime
clog
clog10
clog10f
clog10l
clogf
clogl
close
closedir
closelog
cnd_broadcast
cnd_destroy
cnd_init
cnd_signal
cnd_timedwait
cnd_wait
confstr
conj
conjf
conjl
connect
copysign
copysignf
copysignl
cos
cosf
cosh
coshf
coshl
cosl
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
creat
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
ctermid
ctime
ctime_r
cuserid
cwait
cygwin_attach_handle_to_fd
cygwin_conv_path
cygwin_conv_path_list
cygwin_create_path
cygwin_detach_dll
cygwin_dll_init
cygwin_internal
cygwin_logon_user
cygwin_posix_path_list_p
cygwin_set_impersonation_token
cygwin_split_path
cygwin_stackdump
cygwin_umount
cygwin_winpid_to_pid
daemon
dbm_clearerr
dbm_close
dbm_delete
dbm_dirfno
dbm_error
dbm_fetch
dbm_firstkey
dbm_nextkey
dbm_open
dbm_store
difftime
dirfd
dirname
div
dladdr
dlclose
dlerror
dlfork
dll_crt0__FP11per_process
dll_dllcrt0
dll_entry
dlopen
dlsym
dn_comp
dn_expand
dn_skipname
dprintf
drand48
drem
dremf
dreml
dup
dup2
dup3
duplocale
eaccess
ecvt
ecvtbuf
ecvtf
endgrent
endhostent
endmntent
endprotoent
endpwent
endservent
endusershell
endutent
endutxent
environ
envz_add
envz_entry
envz_get
envz_merge
envz_remove
envz_strip
erand48
erf
erfc
erfcf
erfcl
erff
erfl
err
error
error_at_line
error_message_count
error_one_per_line
error_print_progname
errx
euidaccess
execl
execle
execlp
execv
execve
execvp
execvpe
exit
exp
exp10
exp10f
exp10l
exp2
exp2f
exp2l
expf
expl
explicit_bzero
expm1
expm1f
expm1l
fabs
fabsf
fabsl
faccessat
facl
fchdir
fchmod
fchmodat
fchown
fchownat
fclose
fcloseall
fcntl
fcvt
fcvtbuf
fcvtf
fdatasync
fdim
fdimf
fdiml
fdopen
fdopendir
feclearexcept
fedisableexcept
feenableexcept
fegetenv
fegetexcept
fegetexceptflag
fegetprec
fegetround
feholdexcept
feof
feof_unlocked
feraiseexcept
ferror
ferror_unlocked
fesetenv
fesetexceptflag
fesetprec
fesetround
fetestexcept
feupdateenv
fexecve
fflush
fflush_unlocked
ffs
ffsl
ffsll
fgetc
fgetc_unlocked
fgetpos
fgets
fgets_unlocked
fgetwc
fgetwc_unlocked
fgetws
fgetws_unlocked
fgetxattr
fileno
fileno_unlocked
finite
finitef
finitel
fiprintf
flistxattr
flock
flockfile
floor
floorf
floorl
fls
flsl
flsll
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmemopen
fmin
fminf
fminl
fmod
fmodf
fmodl
fnmatch
fopen
fopencookie
fork
forkpty
fpathconf
fprintf
fpurge
fputc
fputc_unlocked
fputs
fputs_unlocked
fputwc
fputwc_unlocked
fputws
fputws_unlocked
fread
fread_unlocked
free
freeaddrinfo
freeifaddrs
freelocale
fremovexattr
freopen
frexp
frexpf
frexpl
fscanf
fseek
fseeko
fsetpos
fsetxattr
fstat
fstatat
fstatfs
fstatvfs
fsync
ftell
ftello
ftime
ftok
ftruncate
ftrylockfile
fts_children
fts_close
fts_get_clientptr
fts_get_stream
fts_open
fts_read
fts_set
fts_set_clientptr
ftw
funlockfile
funopen
futimens
futimes
futimesat
fwide
fwprintf
fwrite
fwrite_unlocked
fwscanf
gai_strerror
gamma
gamma_r
gammaf
gammaf_r
gcvt
gcvtf
get_avphys_pages
get_current_dir_name
get_nprocs
get_nprocs_conf
get_phys_pages
getaddrinfo
getc
getc_unlocked
getchar
getchar_unlocked
getcontext
getcwd
getdelim
getdomainname
getdtablesize
getegid
getentropy
getenv
geteuid
getgid
getgrent
getgrgid
getgrgid_r
getgrnam
getgrnam_r
getgrouplist
getgroups
gethostbyaddr
gethostbyname
gethostbyname2
gethostid
gethostname
getifaddrs
getitimer
getline
getloadavg
getlogin
getlogin_r
getmntent
getmntent_r
getmode
getnameinfo
getopt
getopt_long
getopt_long_only
getpagesize
getpass
getpeereid
getpeername
getpgid
getpgrp
getpid
getppid
getpriority
getprogname
getprotobyname
getprotobynumber
getprotoent
getpt
getpwent
getpwnam
getpwnam_r
getpwuid
getpwuid_r
getrandom
getrlimit
getrusage
gets
getservbyname
getservbyport
getservent
getsid
getsockname
getsockopt
getsubopt
gettimeofday
getuid
getusershell
getutent
getutid
getutline
getutxent
getutxid
getutxline
getw
getwc
getwc_unlocked
getwchar
getwchar_unlocked
getwd
getxattr
glob
glob_pattern_p
globfree
gmtime
gmtime_r
grantpt
h_errno
hcreate
hcreate_r
hdestroy
hdestroy_r
herror
hsearch
hsearch_r
hstrerror
htonl
htons
hypot
hypotf
hypotl
if_freenameindex
if_indextoname
if_nameindex
if_nametoindex
ilogb
ilogbf
ilogbl
imaxabs
imaxdiv
in6addr_any
in6addr_loopback
index
inet_addr
inet_aton
inet_makeaddr
inet_netof
inet_network
inet_ntoa
inet_ntop
inet_pton
infinity
infinityf
initgroups
initstate
insque
ioctl
iprintf
iruserok
iruserok_sa
isalnum
isalnum_l
isalpha
isalpha_l
isascii
isascii_l
isatty
isblank
isblank_l
iscntrl
iscntrl_l
isdigit
isdigit_l
isgraph
isgraph_l
isinf
isinff
isinfl
islower
islower_l
isnan
isnanf
isnanl
isprint
isprint_l
ispunct
ispunct_l
issetugid
isspace
isspace_l
isupper
isupper_l
iswalnum
iswalnum_l
iswalpha
iswalpha_l
iswblank
iswblank_l
iswcntrl
iswcntrl_l
iswctype
iswctype_l
iswdigit
iswdigit_l
iswgraph
iswgraph_l
iswlower
iswlower_l
iswprint
iswprint_l
iswpunct
iswpunct_l
iswspace
iswspace_l
iswupper
iswupper_l
iswxdigit
iswxdigit_l
isxdigit
isxdigit_l
j0
j0f
j1
j1f
jn
jnf
jrand48
kill
killpg
l64a
labs
lchown
lcong48
ldexp
ldexpf
ldexpl
ldiv
lfind
lgamma
lgamma_r
lgammaf
lgammaf_r
lgammal
lgammal_r
lgetxattr
link
linkat
lio_listio
listen
listxattr
llabs
lldiv
llistxattr
llrint
llrintf
llrintl
llround
llroundf
llroundl
localeconv
localtime
localtime_r
lockf
log
log10
log10f
log10l
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
logf
login
login_tty
logl
logout
logwtmp
longjmp
lrand48
lremovexattr
lrint
lrintf
lrintl
lround
lroundf
lroundl
lsearch
lseek
lsetxattr
lstat
lutimes
madvise
makecontext
mallinfo
malloc
malloc_stats
malloc_trim
malloc_usable_size
mallopt
mblen
mbrlen
mbrtowc
mbsinit
mbsnrtowcs
mbsrtowcs
mbstowcs
mbtowc
memalign
memccpy
memchr
memcmp
memcpy
memmem
memmove
mempcpy
memrchr
memset
mkdir
mkdirat
mkdtemp
mkfifo
mkfifoat
mknod
mknodat
mkostemp
mkostemps
mkstemp
mkstemps
mktemp
mktime
mlock
mmap
modf
modff
modfl
mount
mprotect
mq_close
mq_getattr
mq_notify
mq_open
mq_receive
mq_send
mq_setattr
mq_timedreceive
mq_timedsend
mq_unlink
mrand48
msgctl
msgget
msgrcv
msgsnd
msync
mtx_destroy
mtx_init
mtx_lock
mtx_timedlock
mtx_trylock
mtx_unlock
munlock
munmap
nan
nanf
nanl
nanosleep
nearbyint
nearbyintf
nearbyintl
newlocale
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
nftw
nice
nl_langinfo
nl_langinfo_l
nrand48
ntohl
ntohs
on_exit
open
open_memstream
open_wmemstream
openat
opendir
openlog
openpty
optarg
opterr
optind
optopt
optreset
pathconf
pause
pclose
perror
pipe
pipe2
poll
popen
posix_fadvise
posix_fallocate
posix_madvise
posix_memalign
posix_openpt
posix_spawn
posix_spawn_file_actions_addclose
posix_spawn_file_actions_adddup2
posix_spawn_file_actions_addopen
posix_spawn_file_actions_destroy
posix_spawn_file_actions_init
posix_spawnattr_destroy
posix_spawnattr_getflags
posix_spawnattr_getpgroup
posix_spawnattr_getschedparam
posix_spawnattr_getschedpolicy
posix_spawnattr_getsigdefault
posix_spawnattr_getsigmask
posix_spawnattr_init
posix_spawnattr_setflags
posix_spawnattr_setpgroup
posix_spawnattr_setschedparam
posix_spawnattr_setschedpolicy
posix_spawnattr_setsigdefault
posix_spawnattr_setsigmask
posix_spawnp
pow
pow10
pow10f
pow10l
powf
powl
ppoll
pread
printf
program_invocation_name
program_invocation_short_name
pselect
psiginfo
psignal
pthread_atfork
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getguardsize
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstack
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setguardsize
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstack
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_clockwait
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_continue
pthread_create
pthread_detach
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getattr_np
pthread_getconcurrency
pthread_getcpuclockid
pthread_getname_np
pthread_getschedparam
pthread_getsequence_np
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_clocklock
pthread_mutex_destroy
pthread_mutex_getprioceiling
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_setprioceiling
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_once
pthread_rwlock_clockrdlock
pthread_rwlock_clockwrlock
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setschedprio
pthread_setspecific
pthread_sigmask
pthread_sigqueue
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_suspend
pthread_testcancel
pthread_timedjoin_np
pthread_tryjoin_np
pthread_yield
ptsname
ptsname_r
putc
putc_unlocked
putchar
putchar_unlocked
putenv
puts
pututline
pututxline
putw
putwc
putwc_unlocked
putwchar
putwchar_unlocked
pwrite
qsort
qsort_r
quick_exit
quotactl
raise
rand
rand_r
random
rawmemchr
rcmd
rcmd_af
read
readdir
readdir_r
readlink
readlinkat
readv
realloc
reallocarray
reallocf
realpath
recv
recvfrom
recvmsg
reent_data
regcomp
regerror
regexec
regfree
remainder
remainderf
remainderl
remove
removexattr
remque
remquo
remquof
remquol
rename
renameat
renameat2
res_close
res_init
res_mkquery
res_nclose
res_ninit
res_nmkquery
res_nquery
res_nquerydomain
res_nsearch
res_nsend
res_query
res_querydomain
res_search
res_send
revoke
rewind
rewinddir
rexec
rindex
rint
rintf
rintl
rmdir
round
roundf
roundl
rpmatch
rresvport
rresvport_af
ruserok
sbrk
scalb
scalbf
scalbl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
scandir
scandirat
scanf
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_getcpu
sched_getparam
sched_getscheduler
sched_rr_get_interval
sched_setaffinity
sched_setparam
sched_setscheduler
sched_yield
secure_getenv
seed48
seekdir
select
sem_clockwait
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_timedwait
sem_trywait
sem_unlink
sem_wait
semctl
semget
semop
send
sendmsg
sendto
setbuf
setbuffer
setcontext
setdtablesize
setegid
setenv
seteuid
setgid
setgrent
setgroups
sethostent
sethostname
setitimer
setjmp
setlinebuf
setlocale
setlogmask
setmntent
setpassent
setpgid
setpgrp
setpriority
setprogname
setprotoent
setpwent
setregid
setreuid
setrlimit
setservent
setsid
setsockopt
setstate
settimeofday
setuid
setusershell
setutent
setutxent
setvbuf
setxattr
shm_open
shm_unlink
shmat
shmctl
shmdt
shmget
shutdown
sig2str
sigaction
sigaddset
sigaltstack
sigdelset
sigemptyset
sigfillset
sighold
sigignore
siginterrupt
sigismember
siglongjmp
signal
signalfd
significand
significandf
sigpause
sigpending
sigprocmask
sigqueue
sigrelse
sigset
sigsetjmp
sigsuspend
sigtimedwait
sigwait
sigwaitinfo
sin
sincos
sincosf
sincosl
sinf
sinh
sinhf
sinhl
sinl
siprintf
sleep
snprintf
sockatmark
socket
socketpair
spawnl
spawnle
spawnlp
spawnlpe
spawnv
spawnve
spawnvp
spawnvpe
sprintf
sqrt
sqrtf
sqrtl
srand
srand48
srandom
sscanf
stat
statfs
statvfs
stime
stpcpy
stpncpy
str2sig
strcasecmp
strcasecmp_l
strcasestr
strcat
strchr
strchrnul
strcmp
strcoll
strcoll_l
strcpy
strcspn
strdup
strerror
strerror_l
strerror_r
strfmon
strfmon_l
strftime
strftime_l
strlcat
strlcpy
strlen
strlwr
strncasecmp
strncasecmp_l
strncat
strncmp
strncpy
strndup
strnlen
strnstr
strpbrk
strptime
strptime_l
strrchr
strsep
strsignal
strspn
strstr
strtod
strtod_l
strtof
strtof_l
strtoimax
strtok
strtok_r
strtol
strtol_l
strtold
strtold_l
strtoll
strtoll_l
strtosigno
strtoul
strtoul_l
strtoull
strtoull_l
strtoumax
strupr
strverscmp
strxfrm
strxfrm_l
swab
swapcontext
swprintf
swscanf
symlink
symlinkat
sync
sys_errlist
sys_nerr
sys_sigabbrev
sys_siglist
sysconf
sysinfo
syslog
system
tan
tanf
tanh
tanhf
tanhl
tanl
tcdrain
tcflow
tcflush
tcgetattr
tcgetpgrp
tcgetsid
tcsendbreak
tcsetattr
tcsetpgrp
tdelete
tdestroy
telldir
tempnam
tfind
tgamma
tgammaf
tgammal
thrd_create
thrd_current
thrd_detach
thrd_equal
thrd_exit
thrd_join
thrd_sleep
thrd_yield
time
timegm
timelocal
timer_create
timer_delete
timer_getoverrun
timer_gettime
timer_settime
timerfd_create
timerfd_gettime
timerfd_settime
times
timezone
timingsafe_bcmp
timingsafe_memcmp
tmpfile
tmpnam
toascii
toascii_l
tolower
tolower_l
toupper
toupper_l
towctrans
towctrans_l
towlower
towlower_l
towupper
towupper_l
trunc
truncate
truncf
truncl
tsearch
tss_create
tss_delete
tss_get
tss_set
ttyname
ttyname_r
ttyslot
twalk
tzset
ualarm
umask
umount
uname
uname_x
ungetc
ungetwc
unlink
unlinkat
unlockpt
unsetenv
updwtmp
updwtmpx
uselocale
usleep
utime
utimensat
utimes
utmpname
utmpxname
valloc
vasnprintf
vasprintf
vdprintf
verr
verrx
versionsort
vfiprintf
vfork
vfprintf
vfscanf
vfwprintf
vfwscanf
vhangup
vprintf
vscanf
vsnprintf
vsprintf
vsscanf
vswprintf
vswscanf
vsyslog
vwarn
vwarnx
vwprintf
vwscanf
wait
wait3
wait4
waitpid
warn
warnx
wcpcpy
wcpncpy
wcrtomb
wcscasecmp
wcscasecmp_l
wcscat
wcschr
wcscmp
wcscoll
wcscoll_l
wcscpy
wcscspn
wcsdup
wcsftime
wcsftime_l
wcslcat
wcslcpy
wcslen
wcsncasecmp
wcsncasecmp_l
wcsncat
wcsncmp
wcsncpy
wcsnlen
wcsnrtombs
wcspbrk
wcsrchr
wcsrtombs
wcsspn
wcsstr
wcstod
wcstod_l
wcstof
wcstof_l
wcstoimax
wcstok
wcstol
wcstol_l
wcstold
wcstold_l
wcstoll
wcstoll_l
wcstombs
wcstoul
wcstoul_l
wcstoull
wcstoull_l
wcstoumax
wcswidth
wcsxfrm
wcsxfrm_l
wctob
wctomb
wctrans
wctrans_l
wctype
wctype_l
wcwidth
wmemchr
wmemcmp
wmemcpy
wmemmove
wmempcpy
wmemset
wordexp
wordfree
wprintf
write
writev
wscanf
xdr_array
xdr_bool
xdr_bytes
xdr_char
xdr_double
xdr_enum
xdr_float
xdr_free
xdr_hyper
xdr_int
xdr_int16_t
xdr_int32_t
xdr_int64_t
xdr_int8_t
xdr_long
xdr_longlong_t
xdr_netobj
xdr_opaque
xdr_pointer
xdr_reference
xdr_short
xdr_sizeof
xdr_string
xdr_u_char
xdr_u_hyper
xdr_u_int
xdr_u_int16_t
xdr_u_int32_t
xdr_u_int64_t
xdr_u_int8_t
xdr_u_long
xdr_u_longlong_t
xdr_u_short
xdr_uint16_t
xdr_uint32_t
xdr_uint64_t
xdr_uint8_t
xdr_union
xdr_vector
xdr_void
xdr_wrapstring
xdrmem_create
xdrrec_create
xdrrec_endofrecord
xdrrec_eof
xdrrec_skiprecord
xdrstdio_create
y0
y0f
y1
y1f
yn
ynf
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
/4
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
274KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
400KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/38
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin\quic_initial_dbankcloud_ru.bin
- SHA256 f7a1c1cffc8f65bd47412b7ca5588653d21eec916bb79203c9914890a62874df
- MD5 5e594564fd03d52d6257356dcd25909e
- SHA1 f6d8770f529cf1a902ff127e3ada2ade2a205e4e
- SHA512 c64e87c746cd7d5a3f135ac5a2a09f01adee313ec8f25691fb3cfc477f7fc02b1de41e9fb18bfdaf150777370c419913511d7ac99c5ef6642b97129626e99e3b
- TLSH T109212675B24108D4F045B3B07F8B31BCF47C4AED5D51C170825C8395F8060187715375
- MD5 SHA1 SHA512 TLSH
bin\quic_initial_www_google_com.bin
- SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
- MD5 312526d39958d89b1f8ab67789ab985f
- SHA1 49a06ceebb13807faaf2a935a716127faff9864d
- SHA512 472e88fdd60f9c67f784514a6b699bbefac257657f53a9682a864c0ced474b33f89cf14eb112226ebc9b2c6b07a8f2ec9b25010ccdf98c13370c5c9c6dc2b893
- TLSH T16C21E766D88023896108F64536222E5009B3A4471621258F07292781C83EFEEC1EC0C6
- MD5 SHA1 SHA512 TLSH
bin\stun.bin
- SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
- MD5 0357596c0e38a10a4b99dca2032419cc
- SHA1 05fb322426bd56771a1e1873e88626bc98d34563
- SHA512 319880f7624ff32720d11b79e5cdc24e24ee482a92cd2224e2175936b54a32916d059f431bf2f0e8ff74cf1be41395a462665e75fd1cf17a2c126d01cc2ee165
- TLSH T181B01200C24B4DA4C014103CC4436A9F84A415D58F00DFC389091E9050CA05E6CC1ACD
- MD5 SHA1 SHA512 TLSH
bin\tls_clienthello_4pda_to.bin
- SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
- MD5 e6d649de132c3c10cb62531ef74f5b73
- SHA1 689c7e8d021a99d0a64fee9099fa9012a3528265
- SHA512 f7be809482e3098a5a8f79a759d1f8bcdc2e5201ac35f06eb8662afbb8194f2dfacc2c3e64114557de78e935086cad43880be83b0af1611a1aa0bced0facffba
- TLSH T14ED02B87C982745FDF090B7AA5D5C9B9DED3F1EA03CB8F4768058344FAD85B1422208D
- MD5 SHA1 SHA512 TLSH
bin\tls_clienthello_max_ru.bin
- SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
- MD5 b2b3e684ce449b60f0bc5a9028221a08
- SHA1 32538a43ec8502f0146cd59456646bce7aedd29c
- SHA512 19963986a6c0f7265456aeaa4622fd4f8061dc81d1b722fb62f61574f6d96e4b55cfcd256dcfc555bec11ae458ddebb943de25dc1df102dafe99a2b4174b5b38
- TLSH T1CF0128771655D117A54D1F1650E150418585EF447302C7EF3B74D974CAD68C34E75345
- MD5 SHA1 SHA512 TLSH
bin\tls_clienthello_www_google_com.bin
- SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
- MD5 41e47557f16690df1781f67c8712714e
- SHA1 2f3ca8e75528e0e7797e8f5edfdc582535531913
- SHA512 e8b644d7996168e51d8b991b1d263b9d98f7178bdd9a060078cf4f5ef368fa6e864492b3365227aa68d4d079d734f17d8a5755bbab7424f1bb66e82c0b72f1dc
- TLSH T1D601F4AB1D42D11AD9020E1629D7854A51CADA0561138F772705AF11E8C3D97CD10BC9
- MD5 SHA1 SHA512 TLSH
bin\winws.exe
- IMPHASH a4b140fe839e54b299bb799d5e755765
- SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
- MD5 d498e19bc7a79dd1efcb6b928cbe9909
- SHA1 e660246d9b5de531d8c6ed563919d2690f47d209
- SHA512 03fa6ccc762999e4b5e3c7ed4f4a269d5e7114af52c833842f94fcbca19c3b2edd3c218df247d7616a54d25262f2dc14762a958c620433589ac3c1efa14b379a
- SSDEEP 3072:llblEpda/1ZqNUckRoAHzGDIAaSLECf6CuWhs/JSDxIcdDFth2zp:l/TY5czliX5mhYIcdptyp
- TLSH T145145B17F39588F9C462C17896AB5333E932FC452134FA4B9FA4DB212F65E10B12E798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
cygwin1
__cxa_atexit
__errno
__getreent
__locale_ctype_ptr
__main
__stack_chk_fail
__stack_chk_guard
_dll_crt0
_impure_ptr
atoi
calloc
chdir
close
cygwin_detach_dll
cygwin_internal
dirname
dll_dllcrt0
dup
exit
fclose
fgets
fopen
fork
fprintf
fputc
fputs
fread
free
fseek
fwrite
get_current_dir_name
getopt_long_only
getpid
getsockopt
inet_ntop
inet_pton
localtime_r
malloc
memcmp
memcpy
memmem
memmove
open
openlog
optarg
posix_memalign
printf
putchar
puts
qsort
random
realloc
setenv
setsid
setsockopt
setvbuf
signal
snprintf
srandom
sscanf
stat
strcasecmp
strchr
strcmp
strdup
strerror
strlen
strncasecmp
strncat
strncmp
strncpy
syslog
time
tolower
toupper
usleep
vfprintf
vsnprintf
wordexp
wordfree
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
kernel32
CancelIoEx
CloseHandle
CreateEventW
CreateMutexA
FormatMessageA
GetLastError
GetModuleHandleA
GetOverlappedResult
GetTickCount
LocalFree
ReleaseMutex
SetLastError
WaitForSingleObject
WideCharToMultiByte
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysFreeString
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
windivert
WinDivertClose
WinDivertOpen
WinDivertRecvEx
WinDivertSend
Name
.text
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
392B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
general (ALT).bat
- SHA256 79a97d480379f2a00d11243f54b726c290c574354aad7f3e3689077110c0b1f1
- MD5 f6f4db76dd88b16da34702b1ca40d25b
- SHA1 43b43500aa187f7d72b85f656fcf88d16e37faa8
- SHA512 d3f37b613a0ff0cdf34960b5effb579ac7d51949e4b08693fa9c5cb98ea50ae85f553b1eed07acb1c6e3f265f240a1524f1c20d1a30a92861f43831dd52d6382
- TLSH T1B77129A7E00CDE47F5CDA93EF85FA5A42027988329D6D452835B89F8CC4EDBD684E484
- MD5 SHA1 SHA512 TLSH
general (ALT10).bat
- SHA256 38c8e2f17e23c82d90811d8064997f022049580fc17f7fc7d1dcb27541b55e45
- MD5 6672d11bc3caecf7769051615e16ea36
- SHA1 432bef6971d0a13ab2f23080b6fda9170d17025c
- SHA512 7f1917e3f8cb4bcea1a03eff2f944f4de539ce13fc38202c3ef6d5682a7211be4d990a8b5b0d91cf3c7201b31e419fb089a9cd1628625b5f7a34e94ff3c50ec1
- TLSH T19C711993E00DDE47F58DA97EF85FA5B42027D88368D6D452439B89E8CC0ECBE684E484
- MD5 SHA1 SHA512 TLSH
general (ALT11).bat
- SHA256 aa9f4e22d8308327869adfa4dfb36d7abd1ace9876f9205bb9f52f543520aad4
- MD5 77a4a3ff9d975ab7ec91f76abff04081
- SHA1 757158d5da39003f1f0d12710501ee4a6d97170b
- SHA512 0e9b61da3d463d99b52c1a0bfc3e58c8ea7af06e3bce0ea3e277a4e5fe99cf434f85ee6ba9b4559bee811f0fc2afe6ff1d2f6b0c30bcd4aea7d314e015eca403
- SSDEEP 96:nL67mQGB/GRRQ1zVIKdUGB/GR6Vv/GRRQuv/GR65P+RJ5+RRLxD:AmQGB/GRRGKVGB/GRKv/GRRDv/GRuP+M
- TLSH T19A9149A3E00DEE46F6CEB57EF45FF6A5201798C328D6D452835B89E8CC0EDB9594A084
- MD5 SHA1 SHA512 SSDEEP TLSH
general (ALT2).bat
- SHA256 3133f3174bc49c72fa628332d4fab708e9191f6ec55d83aa3a5ecb3fdee42f47
- MD5 fdb51430ca84be7b045d19e209ac075f
- SHA1 3276a5e3da12dfe219dd04c498a8234a9b2604f2
- SHA512 687cd3749adcd78528a98fa3c9c24cc32ea1026a9a75ba85933d3672af281b3327fc874cfe09275848581d45b121e412bbfc20fac4246245bc9da24b050acdbd
- TLSH T18D612657E00DDE4AB68EB83FF89EE5E42007C8C35CD6D452439B89E8C84EDBE494E485
- MD5 SHA1 SHA512 TLSH
general (ALT3).bat
- SHA256 3ebb9d6b57aedfeceeeea080cab9d1b5a8657931da2ac95945b0890d9d2f774c
- MD5 8cfb1311adc6f23b5aedeee4f2f12813
- SHA1 9e23da2a968b5ac4185b4b2bf554746b24b494a6
- SHA512 d46f3403e5e3ca15a37d4d31116dd277e2ec502fd5b8e92e93625b765088d31ad05b329b4c5b189a6b640ba59c752cd78b723155ab7dd11d01f7dd0d8d679239
- TLSH T171718C93E00DDE47F5CDAC3EF88FA5A4601788876CD6C851539B49E8CC4EDBA6C4B085
- MD5 SHA1 SHA512 TLSH
general (ALT4).bat
- SHA256 dff16df02a590912c43b10ca30eb9c673dec81526cfb117e71d9ac97e860c918
- MD5 f6d638965d3f827a73a38869fbc7d98f
- SHA1 fd728439b9541c1bf8f26251fb793129197f9bc5
- SHA512 0054db2551053c1f3ed7c56d00b914117674909a90aedaca5089cd4569d2dbdc1d7235f93feb15651dd207fa8c333ac3dbaa6e0be209a7122991eb4889f700b2
- TLSH T193714993E00CDE43F6CDA53EF86FA6A4211798C358D6D452439B89F8DC0ECBD584E594
- MD5 SHA1 SHA512 TLSH
general (ALT5).bat
- SHA256 61598039abcb5d8cf9ec3c03cc6306e22b3f06ff24814b3e8ad3e9b401bdec7c
- MD5 1b08cdd98cecb06bf9f469ecccd40420
- SHA1 11b20cbd8bdeb69c00ba7b2231a5145649a6a654
- SHA512 40d11c10dc2e493bbeec9ea819d188b5b596e015f822180049b64337c244e3f9ee2518927c3797e476d9a884b71141e059668e5f6a87139142c832f302f6133f
- TLSH T1F2411847E00DDE46B48DA83EFC5AA5F5601BD8C35DE5D452539788E4C84EDAE8C4E484
- MD5 SHA1 SHA512 TLSH
general (ALT6).bat
- SHA256 27dcb6431785c1415df97b08ac1f38c5dc741aea92240c6eb195ec9d23121185
- MD5 f9221ffef5e065feec717d75450a53ee
- SHA1 ad6652408051d26b9bb6715bf27ed2e1d42b3dc8
- SHA512 f20d1eff24065b451aa812675feb3cb3ecd2c58b7fe57450a6a375599962dbca5b402e4d9e629f1cce1bc668eaba31fc03d937092bbda21674e406dc29f1ca0b
- TLSH T1BD612453E00DDE4AB6CFB83FF89EA5E52007C8C35CD6D452539B89E8C84FDAA494E484
- MD5 SHA1 SHA512 TLSH
general (ALT7).bat
- SHA256 160721780481feee8d4b18d49cc69e1ae5d516e327f87a1b2fed0927fc58847b
- MD5 a20455610cd9a21dbeb2dd0fbef1dd06
- SHA1 d139cfed7a4c9a29c582a868f5a840b81c1573c4
- SHA512 04e0429437db9a104289be977eb7dce091cc157b1e5bb8db15006145877232086eb9889e853404fd433afe750aef6e6fc4a63d56b21d2fd305d284670e893f9d
- TLSH T14B510497F00DDE46B68EA83EFC9EA5F52017C8C35CD6D462539789E8C84EDAE484E484
- MD5 SHA1 SHA512 TLSH
general (ALT8).bat
- SHA256 1e30b5721e5fe949284ebbe8eac1c887ffc08b918082e595b1cfa58ccc9100c2
- MD5 dd8c921a9b763d9158da8029957a3b87
- SHA1 8779a5013f24f6d7e61b46c7aa78c781008578bf
- SHA512 681951bf226ca7521a976f0152b852bdd31f23642b9b6a7262746801baa6cb94c3dc93eef8bf521b579b1a3626ed7cb46a3e590c936245975124d2fb9f1a7788
- TLSH T119615993E00CDE46B58CA83EF86FA6B42127DCC36CD1D452539B88F8D84EDBE584E584
- MD5 SHA1 SHA512 TLSH
general (ALT9).bat
- SHA256 203aa8be1f06d8b78006024d605f34dd78d3e27a09e6f51fbd7e2ec3a65b4f64
- MD5 3b2029b08e05dc84357236c40022dc8e
- SHA1 6c115191a7c511a0b801d4a2de16e96f8529b0b4
- SHA512 50db6ff06af02a7b511fa1e577d7030d9dfe07cb5874c478e99771ce8aac6b0e34901f58a334bd5c2c0f230526ca3085dd0a9baebf68aa610881a68d06de4b70
- TLSH T145616A93E00DDF46B58D6C3EF89BA5B52017C8872CD6D852538789F8C44EDAE5C4F085
- MD5 SHA1 SHA512 TLSH
general (FAKE TLS AUTO ALT).bat
- SHA256 1c80042803f64d18ef377895f99b93c4c203227d0023a3efec3b651b1c57b5bf
- MD5 1ffd351d17a04118d13ef5d0ddd2bd33
- SHA1 754d005f931c52336ad637b293a8655b8ba72322
- SHA512 1b2e9c5f0070339039d047bf136b383bb6a601b813894eb859d1856f313d4954fd3327a602e4ee28a2094d71d1167eceb98a555d0b37775a1901bb0e686f23da
- TLSH T17E713C97E00DDE47F68D683EF85FA6A42127C88328D1C851839B84F8DC4EDBE5C4E594
- MD5 SHA1 SHA512 TLSH
general (FAKE TLS AUTO ALT2).bat
- SHA256 af6548d7b53d40492c7d256f60da5469b6414d976da04ed1adf3a4a09792bebf
- MD5 85269b49b93f09636aab2306eb054d86
- SHA1 94f66128df31e89753b220898c041fbfb34fbcea
- SHA512 87ace9b8f2349bbb80d6f70e89c948a37d7ff2c4dac59622a619c9307116045d8d1892d96c1327cf64ee5135889ab8d4f21cbf4d55b4315723a5522bc2aa240d
- SSDEEP 96:nL67mQGB/GRRQ1znDUGB/GRdVv/GRRQuv/GRd5P+Rv5+RRLxB:AmQGB/GRRGnYGB/GR3v/GRRDv/GR3P+k
- TLSH T10D917B93E00DDE4BF7CEB43EF86FB2A5201798C36CD1D452839B45E8D84EDB9584A190
- MD5 SHA1 SHA512 SSDEEP TLSH
general (FAKE TLS AUTO ALT3).bat
- SHA256 8487fbc1f9c7a47011c7ebc015fd59f999f0d139f2d21ebeda7eea658a73070e
- MD5 d6915ee2af6aff79d8d12dad6cf2cbc4
- SHA1 5f2e389fe09cd6ac32394c72b6509cdb70693c02
- SHA512 858e8e4016ed599ac69c3b750020337754baf79a072e964faf34016b2a05a167f166688155214940bfbe15de039c7d025274c1094f633e58b1e487ba792f38f6
- SSDEEP 96:nL67mQGB/GRRQ1zn1UGB/GRPVv/GRRQuv/GRP5P+RQ5+RRLxE:AmQGB/GRRGnmGB/GR9v/GRRDv/GRxP+o
- TLSH T1B3814C97E00DEE4BB6CE743EF85EB6A56017C8C36CD6D452839B85E8CC4EDB95C5A080
- MD5 SHA1 SHA512 SSDEEP TLSH
general (FAKE TLS AUTO).bat
- SHA256 91ab60420c3903ca64ca47345393283d0cddcd025f695b3847cc85659a00b918
- MD5 817d3a04d94ced4376dace9ff7ab9758
- SHA1 1302191c116ce0339952db93660774770e0503d2
- SHA512 42f383beb7ff9c86f941cfff4d0e4f0cfe4154a79177e825dde9aea7e2a4ea56567dbbd5e40d7b818f844e446a4b995cb23409fc936d9eb8d17863adc9f3ca7c
- TLSH T163815D93E00DDE47F5CDB83EF86F76A821279C8328D5D852839A45E8DC4DDBE584B484
- MD5 SHA1 SHA512 TLSH
general (SIMPLE FAKE ALT).bat
- SHA256 c74ebcc365d4ec7f5311c41c2d7089fd29f7cd94725f0a2b2e47947862ea2330
- MD5 384482c76acccac01dd778fda6c9ba94
- SHA1 d51bd2ecffb38bbe99d96d36201db49e4cb29dc5
- SHA512 909c612cac09505d3c9f6df485532d5bdddca21abde61495f3d6d9effdd7c4c8df36669126a6b8d2398e3a51c897781d547c4005718904d21f604fae1774999b
- TLSH T1C5712893E00CDE43F58DA43EF8AFA6A42127D8C319D6D452435B89F8DC0EDBE584E594
- MD5 SHA1 SHA512 TLSH
general (SIMPLE FAKE ALT2).bat
- SHA256 35168f3c2112013b5a14052df980dcf563fa48dc663f92319c733de3dc5b04ff
- MD5 04f6665af21a17c2c796711d0d389924
- SHA1 d64adf57647f75255971ca8d8dc2a92c8a0fb595
- SHA512 95c747640ff04d0d7750771fc5df832297c682b2f5040c1959ee28ee4c3f4f457374e86ea86113049c2d573b1ea70a26729b1dc9bc0cfbbc4653cc251c3cf391
- TLSH T1E6710993E00DEE47F4CDA97EF85FA5B42017988368D6D452439B89E9CC0ECBE684E484
- MD5 SHA1 SHA512 TLSH
general (SIMPLE FAKE).bat
- SHA256 365ff94a48fc4c10f55c56f0be7dd4dca1e022d20806d3f059ca63f5f7dd65f6
- MD5 06c5b39c43a9ce1afbf955f147d44cfc
- SHA1 2216996f1846fc51688177b03a465fb826e29576
- SHA512 f09c1df360dab08cc02fe139b864b1a08e47c020d10954056654d3a9581a350fc8744eb655f7abd1543807fd0756537ca8053fda365db73cc8383ce4d6b09e0c
- TLSH T154711993E00DDE47F5CDA97EF89EA5B4211798C368D6D452439B89F8CC0ECBE684E484
- MD5 SHA1 SHA512 TLSH
general.bat
- SHA256 3218d85e956b313adcc408e7da43ed048ad255e5207697daa2c495f920061dcd
- MD5 c989072e103c6fb90095e57af374704c
- SHA1 a981471c1d771782fadb1b735d526a70e07097eb
- SHA512 8991fa716403739d2b93c48ee1385e112e1824cf887f852d0bf0610b7493779c92d2780ec478360a1bb6c39f19462bb5a87768f80fe97a545f841826c0afb32f
- TLSH T1486149A7E00DDE4AB68E787FF85EA5E12007C8C35CD6D462529789E8C84EDBA494E484
- MD5 SHA1 SHA512 TLSH
lists\ipset-all.txt
- SHA256 675f24e550bb111555ed49f9c3d918052df254944166959e10425a1f624aae61
- MD5 476e625866285ffaa1b6c518818d4cf5
- SHA1 fa25b01c6198be9468d6df8491fd7099cbf53b2a
- SHA512 65420946a91589aa5cf23d2997263d6609d61e9907bbf0c8e571a948aedcdc0d125a97a3a0e69c958b388759e9d1358a14b126742e822a6e11b3464179b74347
- TLSH T1FC01701763E52193D08F00EA53E21110369565D52EF5B7F3DF07BA53BC120B1F95802D
- MD5 SHA1 SHA512 TLSH
lists\ipset-all.txt.backup
- SHA256 6f29430f9bfcac516e651409dd9696ba0c153852b665dec26131d6d8e7ca71fd
- MD5 b89853ecb5ae669ac32fd505952bc473
- SHA1 0d61f454b399adfd49e09af2efe21156174b92d3
- SHA512 62dee91b5ca0767b24b88a812fdc266a0ce733ec48590a4a939fbc97255c0159dc8f66d3a99b214ed7612a66012d90b88a7cc4449f893210476b6633403ddf11
- TLSH T114012B5671E622F0D08373EA53E3111036DD64D566F9B7709F07FBD295120B1F948C21
- MD5 SHA1 SHA512 TLSH
lists\ipset-exclude-user.txt
- SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
- MD5 42ad35639873f78e1b2dc5c1039499df
- SHA1 0fe009c7e4f670e759fda4668a8b37904215c9fa
- SHA512 1676acc285990e44eb382705e0711fcab7fac79348c541c67bee58a49f3223d8fc61dcb895a7d2dc25ff38dec249268aa64e50c952a214f264b5430f9726a907
- MD5 SHA1 SHA512
lists\ipset-exclude.txt
- SHA256 36159ca57996843462cccef23b576cb461dfaa8738e2ab01807db5a6c1746725
- MD5 4069630ca8187612083190518057137c
- SHA1 62e51d77bddc2b9e16518b489613dee3907fc046
- SHA512 9dc7b521255ccba339cccd5be555747a57992d8ac727e1997ba4646b2ad3305fd86abf9affe63a1c5d82ac611b757460f785f2f8d150244cf79d51fcb8660d91
- TLSH T1C0B0923151A820F20E8B8B60253E4336FC2F61CB24C37C04534C401A5D005096018720
- MD5 SHA1 SHA512 TLSH
lists\list-exclude-user.txt
- SHA256 9d9832f02f42e60be30f94a7a1b051342db0b1b0092c656a7bc10e730d63b234
- MD5 1c4db6196bc14ecfdb5ff6f76ad4985d
- SHA1 e980cb9c55abe3e5213ffc680d79f75b0b904a50
- SHA512 28c56b0a3f42337b04bd7729940c83ec84d8f508f2fcf88567ebc708b09dec312d08074816ea76c48d087975743a6d682597ea7fd276a423fdbc2752bab0e24b
- MD5 SHA1 SHA512
lists\list-exclude.txt
- SHA256 c1b3832cadc4cf7aa3590e512c656aad16cb694743f1b1515822b177a9999033
- MD5 72af6da1aa30598ff6261e9ea1099aea
- SHA1 ec26c45cd8564d36de7bb0ac5bc3c56e5f266ef5
- SHA512 0f01e05f9c7f45cc3417643a3cfbddbce2ed8b100d962ba6a6634afd9f11912bc11283967991090f1eb0512bc68a02fa48bf181abd2e7a113d9d9f6bb0f82108
- TLSH T16D118471A8047920A3E69575F13A7F19D638021FCA88FECAA6F434102A97396A915872
- MD5 SHA1 SHA512 TLSH
lists\list-general.txt
- SHA256 89f31ad03f0dc090f43dadb2e8ffbdbdbc052cace80399f2944a23e8348bcd65
- MD5 94bdb2c9b4aa3899b36ddb5ef5f6a31e
- SHA1 8834d7b359148f0856884282dd764cbd4e19f211
- SHA512 81fa6bdaf3bfaedcdcd01b648ccb939dcac59d1646aa25cf9e9dd856f6e87c033a44c68dcd9aa8202de05a7c39f7cfae222e65dcf6d6a5ae961464ab1019d425
- SSDEEP 96:EjM4wuOrPM6+fz8ITWSSR8uTA2opuxsbzUZm1naUsS6:EjM4ErPMXz8IPSTTsVUZmof
- TLSH T11DA17873079066613613153AE80C728A362A4DB0014AF2C5EBEB71FB524979AB718EF7
- MD5 SHA1 SHA512 SSDEEP TLSH
lists\list-google.txt
- SHA256 c5a5cc941366033e86b835b500614da1cbe5dfb49c2eaa589f5febad89661913
- MD5 56efe0d7ae91448eb5d6b452e65ff165
- SHA1 b0fdeacdc824af4d35107a2984395e5531654913
- SHA512 a652588f7ded89507539b8df66ea224bbfc3c39e38184f790f459c041e5ec48805ec2252d5de12d517afb847362577cf03200e3d57e416ed938729ee1bb0116a
- TLSH T17EE04683780A918B9302ECB848C0264D77209B01879DFAF4E962F02A60ADB5A3442CF2
- MD5 SHA1 SHA512 TLSH
lists\list-roblox.txt
- SHA256 a74ece9037d43ce92f32d739a0ccecb7632641eb8207c64d594cc19cf7e34240
- MD5 758f020eb83bf14cadfa75492c7e8a9c
- SHA1 591008782088f30734bb205266835158f2c6261b
- SHA512 555dbe713dc1c2768af22ed984d35f9f955d57e6c598d95ec1984f25cd1cc0b54ce3add68e2ace195ac1fe0e311493bc6a632ef2c448a2a140eb26dcb473592e
- TLSH T12E512572574044503662E61EE40D7AC63926BCB006C2E2C8EB9AF1FB2A4584D7BD98F7
- MD5 SHA1 SHA512 TLSH
service.bat
- SHA256 a831582505981546e11578b14289e3630994787dd5e98be4a71951ca7d7a2413
- MD5 fec9ea3fd680a1173d73c0e33651c59c
- SHA1 e9fdb524aa76e1a39584fe9c7b691462fed7008d
- SHA512 75d5edd74520f38686f0c08b7a914a9bf51313f6e6627102b926ed0e1adee462606e0a8df38dea25e22b59bd2fe649f8f85be19a21c19ccf28aef136895aef89
- SSDEEP 384:nvzkh51CE3utFcIuVMxe8AwKoPamn+CtIajLLjCXpEakDi5h6wUEz+omf0fOQwG4:nvzkh5RViKWaYw1hixMKkc
- TLSH T109D2612B1801586608B193B3D92640F1F75A81D30A3176DE38AEC198BF7A76395FF5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
update\bin\WinDivert.dll
- IMPHASH 0b649f8e17494bb31b47f6e959a1769c
- SHA256 c1e060ee19444a259b2162f8af0f3fe8c4428a1c6f694dce20de194ac8d7d9a2
- MD5 b2014d33ee645112d5dc16fe9d9fcbff
- SHA1 aa69498562d350f2de06954b133e59fac1e57002
- SHA512 37014a018b9cd91b2eaeeccc7c5af3838fcae4d4fe6bb50c7ae32cd5c99423965a3e3efb29499324f6885b8f0c2ee2952cb75ab73db4e8960811abcb46801f15
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH T17423D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7952D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
HeapAlloc
HeapCreate
HeapDestroy
ReleaseMutex
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinDivertClose
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCompileFilter
WinDivertHelperDecrementTTL
WinDivertHelperEvalFilter
WinDivertHelperFormatFilter
WinDivertHelperFormatIPv4Address
WinDivertHelperFormatIPv6Address
WinDivertHelperHashPacket
WinDivertHelperHtonIPv6Address
WinDivertHelperHtonIpv6Address
WinDivertHelperHtonl
WinDivertHelperHtonll
WinDivertHelperHtons
WinDivertHelperNtohIPv6Address
WinDivertHelperNtohIpv6Address
WinDivertHelperNtohl
WinDivertHelperNtohll
WinDivertHelperNtohs
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
WinDivertShutdown
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
update\bin\WinDivert64.sys
- IMPHASH db584dd0570594898805dd67d7ff391c
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb
ntoskrnl.exe
RtlCopyUnicodeString
KeBugCheckEx
IoGetRequestorProcess
PsGetProcessId
ExUuidCreate
ObfDereferenceObject
ObfReferenceObject
IoWriteErrorLogEntry
IoGetCurrentProcess
IoFreeMdl
IoAllocateMdl
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeQueryPerformanceCounter
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
fwpkclnt.sys
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectNetworkReceiveAsync0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpmCalloutAdd0
FwpmCalloutDeleteByKey0
FwpmFilterAdd0
FwpmFilterDeleteByKey0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsAllocateNetBufferAndNetBufferList0
FwpsFreeNetBufferList0
FwpsInjectNetworkSendAsync0
FwpsInjectForwardAsync0
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=259, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
update\bin\cygwin1.dll
- IMPHASH 8f21c12c4e790805822951d4e4dcad1c
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
202560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredContinueHandler
AllocConsole
AttachConsole
CallNamedPipeA
CancelIo
CancelSynchronousIo
ClearCommBreak
ClearCommError
CloseHandle
CompareStringW
ConnectNamedPipe
CreateFileA
CreateFileW
CreateNamedPipeA
CreatePipe
CreateProcessW
CreateRemoteThread
CreateSymbolicLinkW
CreateTapePartition
CreateThread
DebugBreak
DeleteCriticalSection
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GenerateConsoleCtrlEvent
GetBinaryTypeW
GetCommModemStatus
GetCommState
GetCommandLineW
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleProcessList
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentConsoleFontEx
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumberEx
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetNamedPipeClientProcessId
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessGroupAffinity
GetProcessHeap
GetProcessId
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadPriority
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
IdnToAscii
IdnToUnicode
InitializeCriticalSection
InitializeProcThreadAttributeList
IsBadStringPtrA
IsDebuggerPresent
IsProcessInJob
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LocaleNameToLCID
MapViewOfFile
MapViewOfFileEx
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
PeekConsoleInputA
PeekConsoleInputW
PeekNamedPipe
PrepareTape
PurgeComm
QueryDosDeviceW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
QueueUserAPC
RaiseException
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetComputerNameExW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleW
SetConsoleWindowInfo
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessAffinityMask
SetProcessWorkingSetSize
SetStdHandle
SetSystemTime
SetTapeParameters
SetTapePosition
SetThreadContext
SetThreadGroupAffinity
SetThreadPriority
SetThreadStackGuarantee
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleOutputW
WriteConsoleW
WriteFile
WriteProcessMemory
WriteTapemark
ntdll
NtAccessCheck
NtAdjustPrivilegesToken
NtAllocateLocallyUniqueId
NtAssignProcessToJobObject
NtCancelTimer
NtClose
NtCommitTransaction
NtCreateDirectoryObject
NtCreateEvent
NtCreateFile
NtCreateJobObject
NtCreateKey
NtCreateMutant
NtCreateNamedPipeFile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateTimer
NtCreateTransaction
NtDuplicateToken
NtFlushBuffersFile
NtFsControlFile
NtLockFile
NtLockVirtualMemory
NtMapViewOfSection
NtOpenDirectoryObject
NtOpenEvent
NtOpenFile
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThreadToken
NtPrivilegeCheck
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryObject
NtQueryQuotaInformationFile
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtReadFile
NtRollbackTransaction
NtSetEaFile
NtSetEvent
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationThread
NtSetInformationToken
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetTimer
NtSetValueKey
NtSetVolumeInformationFile
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtWaitForSingleObject
NtWriteFile
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessDeniedAceEx
RtlAllocateHeap
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlCheckRegistryKey
RtlCompareUnicodeString
RtlConvertSidToUnicodeString
RtlCopySid
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateQueryDebugBuffer
RtlCreateSecurityDescriptor
RtlDestroyQueryDebugBuffer
RtlDowncaseUnicodeString
RtlEnterCriticalSection
RtlEqualPrefixSid
RtlEqualSid
RtlEqualUnicodeString
RtlFirstFreeAce
RtlFreeHeap
RtlFreeUnicodeString
RtlGetAce
RtlGetControlSecurityDescriptor
RtlGetCurrentTransaction
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetNtVersionNumbers
RtlGetOwnerSecurityDescriptor
RtlGetVersion
RtlIdentifierAuthoritySid
RtlInitAnsiString
RtlInitUnicodeString
RtlInitializeSid
RtlLeaveCriticalSection
RtlLengthSid
RtlNtStatusToDosError
RtlPrefixUnicodeString
RtlQueryProcessDebugInformation
RtlQueryRegistryValues
RtlSetControlSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentTransaction
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlUnicodeStringToAnsiString
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
GetCommandLineA@0
GetCommandLineW@0
_Exit
__argc
__argv
__assert
__assert_func
__assertfail
__b64_ntop
__b64_pton
__bsd_qsort_r
__check_rhosts_file
__chk_fail
__cpuset_alloc
__cpuset_free
__ctype_ptr__
__cxa_atexit
__cxa_finalize
__cygwin_user_data
__dn_comp
__dn_expand
__dn_skipname
__eprintf
__errno
__fbufsize
__flbf
__fpclassifyd
__fpclassifyf
__fpending
__fpurge
__freadable
__freading
__fsetlocking
__fwritable
__fwriting
__getpagesize
__getreent
__gets_chk
__gnu_basename
__infinity
__isinfd
__isinff
__isnand
__isnanf
__locale_ctype_ptr
__locale_ctype_ptr_l
__locale_mb_cur_max
__main
__mb_cur_max
__memcpy_chk
__memmove_chk
__mempcpy
__mempcpy_chk
__memset_chk
__opendir_with_d_ino
__progname
__rcmd_errstr
__res_close
__res_init
__res_mkquery
__res_nclose
__res_ninit
__res_nmkquery
__res_nquery
__res_nquerydomain
__res_nsearch
__res_nsend
__res_query
__res_querydomain
__res_search
__res_send
__res_state
__sched_getaffinity_sys
__signbitd
__signbitf
__signgam
__snprintf_chk
__sprintf_chk
__srget
__srget_r
__stack_chk_fail
__stack_chk_fail_local
__stack_chk_guard
__stpcpy_chk
__stpncpy_chk
__strcat_chk
__strcpy_chk
__strncat_chk
__strncpy_chk
__swbuf
__swbuf_r
__vsnprintf_chk
__vsprintf_chk
__wrap__ZdaPv
__wrap__ZdaPvRKSt9nothrow_t
__wrap__ZdlPv
__wrap__ZdlPvRKSt9nothrow_t
__wrap__Znam
__wrap__ZnamRKSt9nothrow_t
__wrap__Znwm
__wrap__ZnwmRKSt9nothrow_t
__xdrrec_getrec
__xdrrec_setnonblock
__xpg_sigpause
__xpg_strerror_r
_alloca
_check_for_executable
_ctype_
_daylight
_dll_crt0
_exit
_fe_dfl_env
_fe_nomask_env
_feinitialise
_fscanf_r
_get_osfhandle
_impure_ptr
_longjmp
_pipe
_pthread_cleanup_pop
_pthread_cleanup_push
_setjmp
_setmode
_sys_errlist
_sys_nerr
_timezone
_tzname
a64l
abort
abs
accept
accept4
access
acl
acl_add_perm
acl_calc_mask
acl_check
acl_clear_perms
acl_cmp
acl_copy_entry
acl_copy_ext
acl_copy_int
acl_create_entry
acl_delete_def_file
acl_delete_entry
acl_delete_perm
acl_dup
acl_entries
acl_equiv_mode
acl_error
acl_extended_fd
acl_extended_file
acl_extended_file_nofollow
acl_free
acl_from_mode
acl_from_text
acl_get_entry
acl_get_fd
acl_get_file
acl_get_perm
acl_get_permset
acl_get_qualifier
acl_get_tag_type
acl_init
acl_set_fd
acl_set_file
acl_set_permset
acl_set_qualifier
acl_set_tag_type
acl_size
acl_to_any_text
acl_to_text
acl_valid
aclcheck
aclfrommode
aclfrompbits
aclfromtext
aclsort
acltomode
acltopbits
acltotext
acos
acosf
acosh
acoshf
acoshl
acosl
aio_cancel
aio_error
aio_fsync
aio_read
aio_return
aio_suspend
aio_write
alarm
aligned_alloc
alphasort
arc4random
arc4random_addrandom
arc4random_buf
arc4random_stir
arc4random_uniform
argz_add
argz_add_sep
argz_append
argz_count
argz_create
argz_create_sep
argz_delete
argz_extract
argz_insert
argz_next
argz_replace
argz_stringify
asctime
asctime_r
asin
asinf
asinh
asinhf
asinhl
asinl
asnprintf
asprintf
at_quick_exit
atan
atan2
atan2f
atan2l
atanf
atanh
atanhf
atanhl
atanl
atexit
atof
atoff
atoi
atol
atoll
basename
bcmp
bcopy
bind
bindresvport
bindresvport_sa
bsearch
btowc
bzero
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
call_once
calloc
canonicalize_file_name
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
catclose
catgets
catopen
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
ceilf
ceill
cexp
cexpf
cexpl
cfgetispeed
cfgetospeed
cfmakeraw
cfsetispeed
cfsetospeed
cfsetspeed
chdir
chmod
chown
chroot
cimag
cimagf
cimagl
clearenv
clearerr
clearerr_unlocked
clock
clock_getcpuclockid
clock_getres
clock_gettime
clock_nanosleep
clock_setres
clock_settime
clog
clog10
clog10f
clog10l
clogf
clogl
close
closedir
closelog
cnd_broadcast
cnd_destroy
cnd_init
cnd_signal
cnd_timedwait
cnd_wait
confstr
conj
conjf
conjl
connect
copysign
copysignf
copysignl
cos
cosf
cosh
coshf
coshl
cosl
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
creat
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
ctermid
ctime
ctime_r
cuserid
cwait
cygwin_attach_handle_to_fd
cygwin_conv_path
cygwin_conv_path_list
cygwin_create_path
cygwin_detach_dll
cygwin_dll_init
cygwin_internal
cygwin_logon_user
cygwin_posix_path_list_p
cygwin_set_impersonation_token
cygwin_split_path
cygwin_stackdump
cygwin_umount
cygwin_winpid_to_pid
daemon
dbm_clearerr
dbm_close
dbm_delete
dbm_dirfno
dbm_error
dbm_fetch
dbm_firstkey
dbm_nextkey
dbm_open
dbm_store
difftime
dirfd
dirname
div
dladdr
dlclose
dlerror
dlfork
dll_crt0__FP11per_process
dll_dllcrt0
dll_entry
dlopen
dlsym
dn_comp
dn_expand
dn_skipname
dprintf
drand48
drem
dremf
dreml
dup
dup2
dup3
duplocale
eaccess
ecvt
ecvtbuf
ecvtf
endgrent
endhostent
endmntent
endprotoent
endpwent
endservent
endusershell
endutent
endutxent
environ
envz_add
envz_entry
envz_get
envz_merge
envz_remove
envz_strip
erand48
erf
erfc
erfcf
erfcl
erff
erfl
err
error
error_at_line
error_message_count
error_one_per_line
error_print_progname
errx
euidaccess
execl
execle
execlp
execv
execve
execvp
execvpe
exit
exp
exp10
exp10f
exp10l
exp2
exp2f
exp2l
expf
expl
explicit_bzero
expm1
expm1f
expm1l
fabs
fabsf
fabsl
faccessat
facl
fchdir
fchmod
fchmodat
fchown
fchownat
fclose
fcloseall
fcntl
fcvt
fcvtbuf
fcvtf
fdatasync
fdim
fdimf
fdiml
fdopen
fdopendir
feclearexcept
fedisableexcept
feenableexcept
fegetenv
fegetexcept
fegetexceptflag
fegetprec
fegetround
feholdexcept
feof
feof_unlocked
feraiseexcept
ferror
ferror_unlocked
fesetenv
fesetexceptflag
fesetprec
fesetround
fetestexcept
feupdateenv
fexecve
fflush
fflush_unlocked
ffs
ffsl
ffsll
fgetc
fgetc_unlocked
fgetpos
fgets
fgets_unlocked
fgetwc
fgetwc_unlocked
fgetws
fgetws_unlocked
fgetxattr
fileno
fileno_unlocked
finite
finitef
finitel
fiprintf
flistxattr
flock
flockfile
floor
floorf
floorl
fls
flsl
flsll
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmemopen
fmin
fminf
fminl
fmod
fmodf
fmodl
fnmatch
fopen
fopencookie
fork
forkpty
fpathconf
fprintf
fpurge
fputc
fputc_unlocked
fputs
fputs_unlocked
fputwc
fputwc_unlocked
fputws
fputws_unlocked
fread
fread_unlocked
free
freeaddrinfo
freeifaddrs
freelocale
fremovexattr
freopen
frexp
frexpf
frexpl
fscanf
fseek
fseeko
fsetpos
fsetxattr
fstat
fstatat
fstatfs
fstatvfs
fsync
ftell
ftello
ftime
ftok
ftruncate
ftrylockfile
fts_children
fts_close
fts_get_clientptr
fts_get_stream
fts_open
fts_read
fts_set
fts_set_clientptr
ftw
funlockfile
funopen
futimens
futimes
futimesat
fwide
fwprintf
fwrite
fwrite_unlocked
fwscanf
gai_strerror
gamma
gamma_r
gammaf
gammaf_r
gcvt
gcvtf
get_avphys_pages
get_current_dir_name
get_nprocs
get_nprocs_conf
get_phys_pages
getaddrinfo
getc
getc_unlocked
getchar
getchar_unlocked
getcontext
getcwd
getdelim
getdomainname
getdtablesize
getegid
getentropy
getenv
geteuid
getgid
getgrent
getgrgid
getgrgid_r
getgrnam
getgrnam_r
getgrouplist
getgroups
gethostbyaddr
gethostbyname
gethostbyname2
gethostid
gethostname
getifaddrs
getitimer
getline
getloadavg
getlogin
getlogin_r
getmntent
getmntent_r
getmode
getnameinfo
getopt
getopt_long
getopt_long_only
getpagesize
getpass
getpeereid
getpeername
getpgid
getpgrp
getpid
getppid
getpriority
getprogname
getprotobyname
getprotobynumber
getprotoent
getpt
getpwent
getpwnam
getpwnam_r
getpwuid
getpwuid_r
getrandom
getrlimit
getrusage
gets
getservbyname
getservbyport
getservent
getsid
getsockname
getsockopt
getsubopt
gettimeofday
getuid
getusershell
getutent
getutid
getutline
getutxent
getutxid
getutxline
getw
getwc
getwc_unlocked
getwchar
getwchar_unlocked
getwd
getxattr
glob
glob_pattern_p
globfree
gmtime
gmtime_r
grantpt
h_errno
hcreate
hcreate_r
hdestroy
hdestroy_r
herror
hsearch
hsearch_r
hstrerror
htonl
htons
hypot
hypotf
hypotl
if_freenameindex
if_indextoname
if_nameindex
if_nametoindex
ilogb
ilogbf
ilogbl
imaxabs
imaxdiv
in6addr_any
in6addr_loopback
index
inet_addr
inet_aton
inet_makeaddr
inet_netof
inet_network
inet_ntoa
inet_ntop
inet_pton
infinity
infinityf
initgroups
initstate
insque
ioctl
iprintf
iruserok
iruserok_sa
isalnum
isalnum_l
isalpha
isalpha_l
isascii
isascii_l
isatty
isblank
isblank_l
iscntrl
iscntrl_l
isdigit
isdigit_l
isgraph
isgraph_l
isinf
isinff
isinfl
islower
islower_l
isnan
isnanf
isnanl
isprint
isprint_l
ispunct
ispunct_l
issetugid
isspace
isspace_l
isupper
isupper_l
iswalnum
iswalnum_l
iswalpha
iswalpha_l
iswblank
iswblank_l
iswcntrl
iswcntrl_l
iswctype
iswctype_l
iswdigit
iswdigit_l
iswgraph
iswgraph_l
iswlower
iswlower_l
iswprint
iswprint_l
iswpunct
iswpunct_l
iswspace
iswspace_l
iswupper
iswupper_l
iswxdigit
iswxdigit_l
isxdigit
isxdigit_l
j0
j0f
j1
j1f
jn
jnf
jrand48
kill
killpg
l64a
labs
lchown
lcong48
ldexp
ldexpf
ldexpl
ldiv
lfind
lgamma
lgamma_r
lgammaf
lgammaf_r
lgammal
lgammal_r
lgetxattr
link
linkat
lio_listio
listen
listxattr
llabs
lldiv
llistxattr
llrint
llrintf
llrintl
llround
llroundf
llroundl
localeconv
localtime
localtime_r
lockf
log
log10
log10f
log10l
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
logf
login
login_tty
logl
logout
logwtmp
longjmp
lrand48
lremovexattr
lrint
lrintf
lrintl
lround
lroundf
lroundl
lsearch
lseek
lsetxattr
lstat
lutimes
madvise
makecontext
mallinfo
malloc
malloc_stats
malloc_trim
malloc_usable_size
mallopt
mblen
mbrlen
mbrtowc
mbsinit
mbsnrtowcs
mbsrtowcs
mbstowcs
mbtowc
memalign
memccpy
memchr
memcmp
memcpy
memmem
memmove
mempcpy
memrchr
memset
mkdir
mkdirat
mkdtemp
mkfifo
mkfifoat
mknod
mknodat
mkostemp
mkostemps
mkstemp
mkstemps
mktemp
mktime
mlock
mmap
modf
modff
modfl
mount
mprotect
mq_close
mq_getattr
mq_notify
mq_open
mq_receive
mq_send
mq_setattr
mq_timedreceive
mq_timedsend
mq_unlink
mrand48
msgctl
msgget
msgrcv
msgsnd
msync
mtx_destroy
mtx_init
mtx_lock
mtx_timedlock
mtx_trylock
mtx_unlock
munlock
munmap
nan
nanf
nanl
nanosleep
nearbyint
nearbyintf
nearbyintl
newlocale
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
nftw
nice
nl_langinfo
nl_langinfo_l
nrand48
ntohl
ntohs
on_exit
open
open_memstream
open_wmemstream
openat
opendir
openlog
openpty
optarg
opterr
optind
optopt
optreset
pathconf
pause
pclose
perror
pipe
pipe2
poll
popen
posix_fadvise
posix_fallocate
posix_madvise
posix_memalign
posix_openpt
posix_spawn
posix_spawn_file_actions_addclose
posix_spawn_file_actions_adddup2
posix_spawn_file_actions_addopen
posix_spawn_file_actions_destroy
posix_spawn_file_actions_init
posix_spawnattr_destroy
posix_spawnattr_getflags
posix_spawnattr_getpgroup
posix_spawnattr_getschedparam
posix_spawnattr_getschedpolicy
posix_spawnattr_getsigdefault
posix_spawnattr_getsigmask
posix_spawnattr_init
posix_spawnattr_setflags
posix_spawnattr_setpgroup
posix_spawnattr_setschedparam
posix_spawnattr_setschedpolicy
posix_spawnattr_setsigdefault
posix_spawnattr_setsigmask
posix_spawnp
pow
pow10
pow10f
pow10l
powf
powl
ppoll
pread
printf
program_invocation_name
program_invocation_short_name
pselect
psiginfo
psignal
pthread_atfork
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getguardsize
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstack
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setguardsize
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstack
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_clockwait
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_continue
pthread_create
pthread_detach
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getattr_np
pthread_getconcurrency
pthread_getcpuclockid
pthread_getname_np
pthread_getschedparam
pthread_getsequence_np
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_clocklock
pthread_mutex_destroy
pthread_mutex_getprioceiling
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_setprioceiling
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_once
pthread_rwlock_clockrdlock
pthread_rwlock_clockwrlock
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setschedprio
pthread_setspecific
pthread_sigmask
pthread_sigqueue
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_suspend
pthread_testcancel
pthread_timedjoin_np
pthread_tryjoin_np
pthread_yield
ptsname
ptsname_r
putc
putc_unlocked
putchar
putchar_unlocked
putenv
puts
pututline
pututxline
putw
putwc
putwc_unlocked
putwchar
putwchar_unlocked
pwrite
qsort
qsort_r
quick_exit
quotactl
raise
rand
rand_r
random
rawmemchr
rcmd
rcmd_af
read
readdir
readdir_r
readlink
readlinkat
readv
realloc
reallocarray
reallocf
realpath
recv
recvfrom
recvmsg
reent_data
regcomp
regerror
regexec
regfree
remainder
remainderf
remainderl
remove
removexattr
remque
remquo
remquof
remquol
rename
renameat
renameat2
res_close
res_init
res_mkquery
res_nclose
res_ninit
res_nmkquery
res_nquery
res_nquerydomain
res_nsearch
res_nsend
res_query
res_querydomain
res_search
res_send
revoke
rewind
rewinddir
rexec
rindex
rint
rintf
rintl
rmdir
round
roundf
roundl
rpmatch
rresvport
rresvport_af
ruserok
sbrk
scalb
scalbf
scalbl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
scandir
scandirat
scanf
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_getcpu
sched_getparam
sched_getscheduler
sched_rr_get_interval
sched_setaffinity
sched_setparam
sched_setscheduler
sched_yield
secure_getenv
seed48
seekdir
select
sem_clockwait
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_timedwait
sem_trywait
sem_unlink
sem_wait
semctl
semget
semop
send
sendmsg
sendto
setbuf
setbuffer
setcontext
setdtablesize
setegid
setenv
seteuid
setgid
setgrent
setgroups
sethostent
sethostname
setitimer
setjmp
setlinebuf
setlocale
setlogmask
setmntent
setpassent
setpgid
setpgrp
setpriority
setprogname
setprotoent
setpwent
setregid
setreuid
setrlimit
setservent
setsid
setsockopt
setstate
settimeofday
setuid
setusershell
setutent
setutxent
setvbuf
setxattr
shm_open
shm_unlink
shmat
shmctl
shmdt
shmget
shutdown
sig2str
sigaction
sigaddset
sigaltstack
sigdelset
sigemptyset
sigfillset
sighold
sigignore
siginterrupt
sigismember
siglongjmp
signal
signalfd
significand
significandf
sigpause
sigpending
sigprocmask
sigqueue
sigrelse
sigset
sigsetjmp
sigsuspend
sigtimedwait
sigwait
sigwaitinfo
sin
sincos
sincosf
sincosl
sinf
sinh
sinhf
sinhl
sinl
siprintf
sleep
snprintf
sockatmark
socket
socketpair
spawnl
spawnle
spawnlp
spawnlpe
spawnv
spawnve
spawnvp
spawnvpe
sprintf
sqrt
sqrtf
sqrtl
srand
srand48
srandom
sscanf
stat
statfs
statvfs
stime
stpcpy
stpncpy
str2sig
strcasecmp
strcasecmp_l
strcasestr
strcat
strchr
strchrnul
strcmp
strcoll
strcoll_l
strcpy
strcspn
strdup
strerror
strerror_l
strerror_r
strfmon
strfmon_l
strftime
strftime_l
strlcat
strlcpy
strlen
strlwr
strncasecmp
strncasecmp_l
strncat
strncmp
strncpy
strndup
strnlen
strnstr
strpbrk
strptime
strptime_l
strrchr
strsep
strsignal
strspn
strstr
strtod
strtod_l
strtof
strtof_l
strtoimax
strtok
strtok_r
strtol
strtol_l
strtold
strtold_l
strtoll
strtoll_l
strtosigno
strtoul
strtoul_l
strtoull
strtoull_l
strtoumax
strupr
strverscmp
strxfrm
strxfrm_l
swab
swapcontext
swprintf
swscanf
symlink
symlinkat
sync
sys_errlist
sys_nerr
sys_sigabbrev
sys_siglist
sysconf
sysinfo
syslog
system
tan
tanf
tanh
tanhf
tanhl
tanl
tcdrain
tcflow
tcflush
tcgetattr
tcgetpgrp
tcgetsid
tcsendbreak
tcsetattr
tcsetpgrp
tdelete
tdestroy
telldir
tempnam
tfind
tgamma
tgammaf
tgammal
thrd_create
thrd_current
thrd_detach
thrd_equal
thrd_exit
thrd_join
thrd_sleep
thrd_yield
time
timegm
timelocal
timer_create
timer_delete
timer_getoverrun
timer_gettime
timer_settime
timerfd_create
timerfd_gettime
timerfd_settime
times
timezone
timingsafe_bcmp
timingsafe_memcmp
tmpfile
tmpnam
toascii
toascii_l
tolower
tolower_l
toupper
toupper_l
towctrans
towctrans_l
towlower
towlower_l
towupper
towupper_l
trunc
truncate
truncf
truncl
tsearch
tss_create
tss_delete
tss_get
tss_set
ttyname
ttyname_r
ttyslot
twalk
tzset
ualarm
umask
umount
uname
uname_x
ungetc
ungetwc
unlink
unlinkat
unlockpt
unsetenv
updwtmp
updwtmpx
uselocale
usleep
utime
utimensat
utimes
utmpname
utmpxname
valloc
vasnprintf
vasprintf
vdprintf
verr
verrx
versionsort
vfiprintf
vfork
vfprintf
vfscanf
vfwprintf
vfwscanf
vhangup
vprintf
vscanf
vsnprintf
vsprintf
vsscanf
vswprintf
vswscanf
vsyslog
vwarn
vwarnx
vwprintf
vwscanf
wait
wait3
wait4
waitpid
warn
warnx
wcpcpy
wcpncpy
wcrtomb
wcscasecmp
wcscasecmp_l
wcscat
wcschr
wcscmp
wcscoll
wcscoll_l
wcscpy
wcscspn
wcsdup
wcsftime
wcsftime_l
wcslcat
wcslcpy
wcslen
wcsncasecmp
wcsncasecmp_l
wcsncat
wcsncmp
wcsncpy
wcsnlen
wcsnrtombs
wcspbrk
wcsrchr
wcsrtombs
wcsspn
wcsstr
wcstod
wcstod_l
wcstof
wcstof_l
wcstoimax
wcstok
wcstol
wcstol_l
wcstold
wcstold_l
wcstoll
wcstoll_l
wcstombs
wcstoul
wcstoul_l
wcstoull
wcstoull_l
wcstoumax
wcswidth
wcsxfrm
wcsxfrm_l
wctob
wctomb
wctrans
wctrans_l
wctype
wctype_l
wcwidth
wmemchr
wmemcmp
wmemcpy
wmemmove
wmempcpy
wmemset
wordexp
wordfree
wprintf
write
writev
wscanf
xdr_array
xdr_bool
xdr_bytes
xdr_char
xdr_double
xdr_enum
xdr_float
xdr_free
xdr_hyper
xdr_int
xdr_int16_t
xdr_int32_t
xdr_int64_t
xdr_int8_t
xdr_long
xdr_longlong_t
xdr_netobj
xdr_opaque
xdr_pointer
xdr_reference
xdr_short
xdr_sizeof
xdr_string
xdr_u_char
xdr_u_hyper
xdr_u_int
xdr_u_int16_t
xdr_u_int32_t
xdr_u_int64_t
xdr_u_int8_t
xdr_u_long
xdr_u_longlong_t
xdr_u_short
xdr_uint16_t
xdr_uint32_t
xdr_uint64_t
xdr_uint8_t
xdr_union
xdr_vector
xdr_void
xdr_wrapstring
xdrmem_create
xdrrec_create
xdrrec_endofrecord
xdrrec_eof
xdrrec_skiprecord
xdrstdio_create
y0
y0f
y1
y1f
yn
ynf
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
/4
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
274KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
400KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/38
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
update\bin\quic_initial_www_google_com.bin
- SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
- MD5 312526d39958d89b1f8ab67789ab985f
- SHA1 49a06ceebb13807faaf2a935a716127faff9864d
- SHA512 472e88fdd60f9c67f784514a6b699bbefac257657f53a9682a864c0ced474b33f89cf14eb112226ebc9b2c6b07a8f2ec9b25010ccdf98c13370c5c9c6dc2b893
- TLSH T16C21E766D88023896108F64536222E5009B3A4471621258F07292781C83EFEEC1EC0C6
- MD5 SHA1 SHA512 TLSH
update\bin\stun.bin
- SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
- MD5 0357596c0e38a10a4b99dca2032419cc
- SHA1 05fb322426bd56771a1e1873e88626bc98d34563
- SHA512 319880f7624ff32720d11b79e5cdc24e24ee482a92cd2224e2175936b54a32916d059f431bf2f0e8ff74cf1be41395a462665e75fd1cf17a2c126d01cc2ee165
- TLSH T181B01200C24B4DA4C014103CC4436A9F84A415D58F00DFC389091E9050CA05E6CC1ACD
- MD5 SHA1 SHA512 TLSH
update\bin\tls_clienthello_4pda_to.bin
- SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
- MD5 e6d649de132c3c10cb62531ef74f5b73
- SHA1 689c7e8d021a99d0a64fee9099fa9012a3528265
- SHA512 f7be809482e3098a5a8f79a759d1f8bcdc2e5201ac35f06eb8662afbb8194f2dfacc2c3e64114557de78e935086cad43880be83b0af1611a1aa0bced0facffba
- TLSH T14ED02B87C982745FDF090B7AA5D5C9B9DED3F1EA03CB8F4768058344FAD85B1422208D
- MD5 SHA1 SHA512 TLSH
update\bin\tls_clienthello_max_ru.bin
- SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
- MD5 b2b3e684ce449b60f0bc5a9028221a08
- SHA1 32538a43ec8502f0146cd59456646bce7aedd29c
- SHA512 19963986a6c0f7265456aeaa4622fd4f8061dc81d1b722fb62f61574f6d96e4b55cfcd256dcfc555bec11ae458ddebb943de25dc1df102dafe99a2b4174b5b38
- TLSH T1CF0128771655D117A54D1F1650E150418585EF447302C7EF3B74D974CAD68C34E75345
- MD5 SHA1 SHA512 TLSH
update\bin\tls_clienthello_www_google_com.bin
- SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
- MD5 41e47557f16690df1781f67c8712714e
- SHA1 2f3ca8e75528e0e7797e8f5edfdc582535531913
- SHA512 e8b644d7996168e51d8b991b1d263b9d98f7178bdd9a060078cf4f5ef368fa6e864492b3365227aa68d4d079d734f17d8a5755bbab7424f1bb66e82c0b72f1dc
- TLSH T1D601F4AB1D42D11AD9020E1629D7854A51CADA0561138F772705AF11E8C3D97CD10BC9
- MD5 SHA1 SHA512 TLSH
update\bin\winws.exe
- IMPHASH a4b140fe839e54b299bb799d5e755765
- SHA256 affb4f69d2ea302a7abccd5325d81826e140ddae014f1e070bc4a6c0dd555188
- MD5 d498e19bc7a79dd1efcb6b928cbe9909
- SHA1 e660246d9b5de531d8c6ed563919d2690f47d209
- SHA512 03fa6ccc762999e4b5e3c7ed4f4a269d5e7114af52c833842f94fcbca19c3b2edd3c218df247d7616a54d25262f2dc14762a958c620433589ac3c1efa14b379a
- SSDEEP 3072:llblEpda/1ZqNUckRoAHzGDIAaSLECf6CuWhs/JSDxIcdDFth2zp:l/TY5czliX5mhYIcdptyp
- TLSH T145145B17F39588F9C462C17896AB5333E932FC452134FA4B9FA4DB212F65E10B12E798
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
cygwin1
__cxa_atexit
__errno
__getreent
__locale_ctype_ptr
__main
__stack_chk_fail
__stack_chk_guard
_dll_crt0
_impure_ptr
atoi
calloc
chdir
close
cygwin_detach_dll
cygwin_internal
dirname
dll_dllcrt0
dup
exit
fclose
fgets
fopen
fork
fprintf
fputc
fputs
fread
free
fseek
fwrite
get_current_dir_name
getopt_long_only
getpid
getsockopt
inet_ntop
inet_pton
localtime_r
malloc
memcmp
memcpy
memmem
memmove
open
openlog
optarg
posix_memalign
printf
putchar
puts
qsort
random
realloc
setenv
setsid
setsockopt
setvbuf
signal
snprintf
srandom
sscanf
stat
strcasecmp
strchr
strcmp
strdup
strerror
strlen
strncasecmp
strncat
strncmp
strncpy
syslog
time
tolower
toupper
usleep
vfprintf
vsnprintf
wordexp
wordfree
advapi32
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegisterServiceCtrlHandlerA
SetServiceStatus
StartServiceCtrlDispatcherA
kernel32
CancelIoEx
CloseHandle
CreateEventW
CreateMutexA
FormatMessageA
GetLastError
GetModuleHandleA
GetOverlappedResult
GetTickCount
LocalFree
ReleaseMutex
SetLastError
WaitForSingleObject
WideCharToMultiByte
ole32
CoCreateInstance
CoInitialize
CoUninitialize
oleaut32
SysFreeString
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
windivert
WinDivertClose
WinDivertOpen
WinDivertRecvEx
WinDivertSend
Name
.text
Size
123KB
Virtual Size
122KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
55KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
392B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
update\general (ALT).bat
- SHA256 1c0b20341128ca2dff78902acf5270a071d7ea65c7694549d4269c7730b61d1e
- MD5 d355b57b5f43df082d8337a807d4f2d1
- SHA1 e3c40c9ccce9d028ee2aebf0748a6321b70a00f2
- SHA512 2c833ecf2da0eb4ef83f7d37b43c4625821977c1afcb70df301fd61a21e498c3a39194181231e83852857eeb6b2e429edeb33bf396a96937df3e6abdca83fba0
- TLSH T131712CA7E00CDE47F5CDA93EF85FA5A42027D88329D6D452835B89F8CC4EDBD584E484
- MD5 SHA1 SHA512 TLSH
update\general (ALT10).bat
- SHA256 9ce4a37ad5535b7b6316a0b8fb578d42af87dfbe5077cdd077ed67901e603dbc
- MD5 409198f7c2281b7abfa91fec2a8f7f65
- SHA1 3317dd7465c55bacf67ffd02540052b3d08b75d5
- SHA512 44de55a3221e943a6927963def4964c87c8cbb90a332247c35f493d4a324afebe8279130ab3f1214a9224fc80e8b089874ca59fd93e4368bcecd2fdd00e05f30
- TLSH T106612B93E00CDE47F5CDA97EF85FA5B42027D88328D6D452439B89E8CC0EDBE584E484
- MD5 SHA1 SHA512 TLSH
update\general (ALT11).bat
- SHA256 c9ba68454e647c69d62a96eca3b378e3bb60cd22cd66d759c945ee24fb073e2f
- MD5 28dd9521447db4339428553457cd1210
- SHA1 0d449fbfb8a808d2b03d689649e8c419e268c83d
- SHA512 ba3ecbaaa0024f307424327940d7942bfb9594033375f33270a48c6c44918a4138e0ca083309f71298ca25787d5454203e6286411475831a6ab3895e55e47f2b
- TLSH T1118148A3E00DEE46F6CE753EF85EF6A52017C8C328D6D452438B89E8CC0EDB9594A084
- MD5 SHA1 SHA512 TLSH
update\general (ALT2).bat
- SHA256 3dfab68519b23c747a6de957c197c467b2dbe5c932ac24713b5d5e31f18f4af2
- MD5 d43f122288ff522b2d1a3886c09495d3
- SHA1 cbeecf7b03fa0d00b3fcfaa666bc42074c501ccb
- SHA512 a51d2386d837fafb6e7387ba68e324845ef067e1050863b8235f86e0d6a7bd162a09ac47c08e32145097649628e5e66eba097dae3a2e12727ea1d53f1f733bb4
- TLSH T107610467E00DDE4AB68EB83FF89EA5E42007C4C31CD6D462539789E8C84EDBE494E485
- MD5 SHA1 SHA512 TLSH
update\general (ALT3).bat
- SHA256 5e50cbd4e74796a8fb42555b076cb1b7d5abcf5ffe1227c8d82f17826732b37a
- MD5 1dc3caa65a31e27a19665c0628e90fbf
- SHA1 e87b05cf38e76d6c3d9f7b47283714d7ec4bd252
- SHA512 a8a8cc465dfd819359c2aa18896a11511fde6baa56498a53e65fb8afeceedb8e8136574508378abf964e2ece8024bd436af98800e92ce720366531cce299e8a4
- TLSH T135715C93E00DDE47F5CDAC7EF88EA5A5601788872CD6C85153DA89E8C84EDBE6C4B085
- MD5 SHA1 SHA512 TLSH
update\general (ALT4).bat
- SHA256 2ce749c1db9918215833af6cc116be096ea0e1c07181f81b064ef0f61c396cf4
- MD5 5dea9765ef6d50a7dbc77e700876b772
- SHA1 d402563301556be0be5d189e7015f74614e598fc
- SHA512 8b75a6ff7af0069116aa8d6f7502efa3b93fd1b4a9b98855ac4aeb9fb37f38dd8f59f7091c1d87faeda89a344a606b33fe2f0c0bcf5fecae8434f46543854a40
- TLSH T103714A93E00CDE42F6CDA53EF8AFA5A4211798C31CD6D452439B89F8DC0EDBE584E594
- MD5 SHA1 SHA512 TLSH
update\general (ALT5).bat
- SHA256 bcf8bdb486cb76150436010495e3a034b4568326add99ed44522050adb58e97a
- MD5 ee50f4d311623acf442d9e1f8af573d3
- SHA1 ec3f15f044c9efd71a69aba8aa81ed587e0db823
- SHA512 2781b69c60de50a1e6ccbe6d69062512271e857e14d68f78b1253fae2ae716994c89118f1d257f2b901efbeb8d572b51668107176e488c14ebe73fd316d783ae
- TLSH T13D411487E00EDE46B48DAC3EFC9AA5F5601BD8C71CE1D462539788E4D84FDAE8C4E484
- MD5 SHA1 SHA512 TLSH
update\general (ALT6).bat
- SHA256 683d210becf3926d0ebd0bf76de6ddd6204bdb27bff0d90c5df30aaeea6843e5
- MD5 de4e78504bbd89601460918ba09e77ff
- SHA1 3cfb349282f4409d9db8f355d0471b7e6ef40300
- SHA512 9de8358a74ab668266e52b01808fcd2f13dda094d6330b10049cfbc4554921ad9325647ed574153cf07e71f0f2d8cb48045efa089db448dc37409f2191367fb4
- TLSH T16B611557E00DDE4AB6CEB83FF89EA5E52007C8C31C96D462539789E8C84FDAE494E485
- MD5 SHA1 SHA512 TLSH
update\general (ALT7).bat
- SHA256 ff49bd6c4281da322925375465d57143e00ea9ea6d17b79e388801150c973802
- MD5 f5a674210e392baeb032d9bd1b4088b5
- SHA1 0e91fa044cc5ea7c7e4fb73c028ffc3a0a289830
- SHA512 d3a4a40572ca44c4c620515be20350e420f720ee357c447ba9b55baaae397630fca0a08cfa4282668145673c1ae4f726cb82ae285f54317c1d368aa2cfee788f
- TLSH T1DC51E497E00DDE46B68EA83FFC9AA5F52017C4C31CD6D462539789E8C84EDAE4C4E485
- MD5 SHA1 SHA512 TLSH
update\general (ALT8).bat
- SHA256 c561a5c35b7295488a5e2c3b45ada9868268177c3b0c397c9b5f02f7a4f955d6
- MD5 de3a4d9ec9fce357967e19b0c054eff3
- SHA1 b93f91b82847155cd2ef62360a4999df8c5bc7aa
- SHA512 849cf8815d88c3ba195902c258f2bc250d136c6e0e591c130555ef6bcdee12026e1b77284d5b7ea1549aaaef13aa7e69def1152bb9a98a81d430235e2a3fb6f8
- TLSH T128611893E00DDE46B58CA83EF8AFA5B42127DC871CE2D451539B88F8D84EDBE5C4E584
- MD5 SHA1 SHA512 TLSH
update\general (ALT9).bat
- SHA256 ae85bfe4fdf55f39abd09bf15d8b1e8ad73f0887560d3215e672985b4a07a74a
- MD5 1779c9793bd65ae735b42e92da222cd1
- SHA1 2659ec140ce3da380675834021ce5bed5a2831de
- SHA512 c794c2e7e69b30344ec79b330dee8901f2ae7ade96465505ffc8e49318f1c5b82aa87684ac22ab5eac023231a27b39cd3e0700424e96d715dcadc9c827e86772
- TLSH T132516893E00DDF4AB58DAC3EF89BA5B52017C8872CE6D851638689F8D44EDAE5C4F085
- MD5 SHA1 SHA512 TLSH
update\general (FAKE TLS AUTO ALT).bat
- SHA256 c10d3818ead3efb0f26dc80d35a2a2735d577737ce38cd45055791ee29836231
- MD5 72e1f282f88979e3510f7690d48e488f
- SHA1 2f58fa65a5abf93cf4ea47e23549f8a9f1353656
- SHA512 a5607d8e6a7ce0ef6ce174d69793f3e6e9fa5841c4f98022a8bd7dfeb4e90bbd7a4e2a8ac5069d252178596c8b78eee017f1be1d28e85074b64b61398700b9b2
- TLSH T1BE713D97E00DDE47B68D683EFC5FA2A42127C8871CD2C851939B84F8D84EDBE5C4E594
- MD5 SHA1 SHA512 TLSH
update\general (FAKE TLS AUTO ALT2).bat
- SHA256 c5dc0eb693b704ace4995e19a148c2c9c41a75f1e2cefd074541d035a3b72e17
- MD5 21279decfa70b65fb3a533496bd313ef
- SHA1 9484b8154ad7ea80c774f18eaa952a2ed9c1b9c7
- SHA512 2fecad120c2234efd47628d4ae906ebed84cd9ecce510b246157f4a9e4e11aac7677a09eee3d9e74f57ea38e7b0af6572c7441f1284064eebe3cc09262bcdfdf
- SSDEEP 96:nL67mQGB/GRRQ1zXDUGB/GRdVv/GRRQuv/GRd5P+Rv5+RRLxn:AmQGB/GRRGXYGB/GR3v/GRRDv/GR3P+4
- TLSH T1CA814A93E00DDE4BF7CEB43EF86EB2A5211798C31CD2D852839B45E8D84EDB95C4A194
- MD5 SHA1 SHA512 SSDEEP TLSH
update\general (FAKE TLS AUTO ALT3).bat
- SHA256 da4cb05eef4f66356384beada9302ba2acb269d74a789a0fac50a44a2b357655
- MD5 eef808aa25032177a59fa406a453743e
- SHA1 6b6d032a9d820a8d3d1aaf05accb799a1f61f1a7
- SHA512 732c2064c03897da5747db960483304c8f0917252d2e3e6fb9e8b0927b2b6a3422600849c14cb088660748181b73eab9b6d64f993a7c8e98da5523f7eed096d3
- TLSH T135814D97E00DDE4BB6CE743FF85EB6A56017C8C32CD6D452839B89E8D84EDB95C5A080
- MD5 SHA1 SHA512 TLSH
update\general (FAKE TLS AUTO).bat
- SHA256 6326284fff6fffdb101f9027c9a1b8bd9a62b03da4605561f908c2e1e98a8a13
- MD5 49cf9f31a18d2f27b1bb19916a79967a
- SHA1 079281cd8e2499689f64d89e39d12a5a88f48dcb
- SHA512 9abce64a0798cce1e99cd1de3f8564dfdcbb5cf8512de67be1cba81bf741a2d6ad96edb97bc8c94752cf4db038e5cb7cf8d04238e4fa5bfb827df606a0cc1209
- TLSH T14D713C93E00DDD47F5CDB83EF86F76A86127988328D5D861839A88E8DC4DDBE584B484
- MD5 SHA1 SHA512 TLSH
update\general (SIMPLE FAKE ALT).bat
- SHA256 e825a469e2ff34a74c5a2bda7346f35b75ac1f58993daa340d03c8a4dfb63405
- MD5 e2ac45a79d5d781bf0fbb9d266153f0f
- SHA1 e9dec0467e5bb7c781e0f311d0464374bcc96d56
- SHA512 a0d7689133ee784f02eda88bf21524f0e757165daed399a222de01ce736f707450eae1b687235974f754b02b0258b9d8e87445e2d25e771e7431d03524901fb5
- TLSH T162713A93E00CDE46F5CCA53EF8AFA5A42127D8C318D6D452439B89F8DC0EDBE584E594
- MD5 SHA1 SHA512 TLSH
update\general (SIMPLE FAKE ALT2).bat
- SHA256 0d0dfa6269823a049fcbb76d0736fe2302fdb5a33fd3af83bbc96ee7c492061f
- MD5 c75118b35aab9fd82acfb952e6c28b5a
- SHA1 f8bf9e352f7039b87703c4ea84697d17220974cf
- SHA512 cbc28ac828efd918465dc68e8cc86bfd3fb11a743755639907e05a715b366e1ea2d361ffe4077a4e7f5932b6f361ec448b3ed18371f9c6a7389690175c606371
- TLSH T171611A93E00DEE46F5CCA97EF85FA5B42017D88328D6D452439B89E8DC0EDBE584E484
- MD5 SHA1 SHA512 TLSH
update\general (SIMPLE FAKE).bat
- SHA256 5b8648d0b44253397e68b8c2d5870ffc2d908d2abca947da7b8d068a0eeddf8f
- MD5 7e4e87364ff4e030c37f0db72a1099df
- SHA1 bb9a9004e34234ab6b122b792fbf2fee44f54519
- SHA512 872b13254e63b518d6e02cc4f9828ec7425d798a2369f93830c701badc0a128716f259730af39b639ff27a7665ea0a20dcc4a081e9b9e83842e93ea9fd160d69
- TLSH T1C0610993E00DDE47F5CDA97EF89EA5B42127D88328D6D452439B89F8CC0EDBE584E484
- MD5 SHA1 SHA512 TLSH
update\general.bat
- SHA256 47fac0d6b08bcac349e28141de2ca14df9f7cbbd83e16e4d126153c1df777dc7
- MD5 40f0c4b499dc8c797ec78cad6db065e6
- SHA1 516a3f5402e2eb5529b3ff088bb6fa4e71ee5b0b
- SHA512 9c48582e51497978ee87d0e2db496edafd34c847afc5e6e38b8986be9388ffbc0cdeeb65b4acbcb51efb34bc45a6d639ddd732478c5adb99030c3e1594ac0f64
- TLSH T1796136A7E00DDE4AB68E783FF84EA5E12007C8C31CD2D462529789E8C94FDBE4D4E485
- MD5 SHA1 SHA512 TLSH
update\lists\ipset-all.txt
- SHA256 19123a22bf1108815c07bda3cda8df282b30bd63e4939949928969c0fd195873
- MD5 42ad35639873f78e1b2dc5c1039499df
- SHA1 0fe009c7e4f670e759fda4668a8b37904215c9fa
- SHA512 1676acc285990e44eb382705e0711fcab7fac79348c541c67bee58a49f3223d8fc61dcb895a7d2dc25ff38dec249268aa64e50c952a214f264b5430f9726a907
- MD5 SHA1 SHA512
update\lists\ipset-all.txt.backup
- SHA256 25828a6a907fd2cc6ce974fe7a382d935b02aed7fcde24735fd92e5e04ede325
- MD5 825cd3fe587c7dc0de536de21a7c8dba
- SHA1 633dcdda7727954a97338f6d9705faae87a5e3c4
- SHA512 6af84bd76838abd5604de38bd4accbd6daeae5c8ad0217e5054585f71a12458d6f47b606d67b7b28b618ecf768cea6bc1e7c08bd19816dc777fbfcd75ea8febc
- SSDEEP 3072:dd9/YOA8jtXDrod9KoCr3eCa24B4PIKxn0yAp5IGwY0gw5s7uZYEYsppucy7ZSIA:SbYvWKAmXEW
- TLSH T16144273253B41AE78ADEA1E9232395741AE7978601FAF673CB4F61623C21040FD2795F
- MD5 SHA1 SHA512 SSDEEP TLSH
update\lists\ipset-exclude.txt
- SHA256 96c03954012765ce4ab03b9c30f29ab1ca1b698c6752224d03828e6d182eb0fc
- MD5 240532f20e114cd6de2906ebc86d683e
- SHA1 f7d4b6e1ec084e64c367ac11f5fe21fff454fb68
- SHA512 809e9961b2952acff12fb27b31895f9e7c0d70433363cdd8fd61bd522ffa835e7d403de3419092145673e10644aa0803d0e244d9cfff8d8bf784e783713f799a
- TLSH T147C09271516912FB0F876B21A13E0326F9475BCB26F37D64A36C5286EC504096029920
- MD5 SHA1 SHA512 TLSH
update\lists\list-exclude.txt
- SHA256 c2c40df272c85fe67155914086d0361da7f46be7a0fc85ee86ddf9b801432154
- MD5 d191a18d4626fabd55a9034f382c4960
- SHA1 c8d8fd879b0863b1a747ec5cb80d6c9f7b4e9f7a
- SHA512 59e78ccba8735de8cc32b215450f2fd323dd0fa036ea62a052f3da5853a47c104a05e4a41419d414d6bb81c39b6125049018c0f2460fb5a9533c47ca5e1f137a
- TLSH T119F0C992DC243491576DE1A2A01875071A3532BB81E2FEC49BF9C5CC22C23A57FDAB22
- MD5 SHA1 SHA512 TLSH
update\lists\list-general.txt
- SHA256 3e6bfce8e68832a24b80619d8635097b6f1afd981c1a242e505365d0b6e792c9
- MD5 5acbacd29f9cad31f51d9b0ff7b0d9f9
- SHA1 4f829ca2dd003549a588a97a0107f8a2bbd89b6b
- SHA512 8e84a2bab71c3ee4398cb7de6a30b6aa7579721f72a1b51dc2c2448569a6548822ee34dad1458518e644bdfae9c53b15a0a9fd2da620764852c3bcdb6c9c8311
- TLSH T15B11D057A0A897502B1ED4E8145462A02394B4F51CCFE6E39B6FC19F09093FAF3D0EA7
- MD5 SHA1 SHA512 TLSH
update\lists\list-google.txt
- SHA256 36ec86bbe19b9e5815d807d6b25dffd01bdf69e9cf6c05d7cf60cd7c9bf036d8
- MD5 0c333bb65317588dc354b5c93e4203ff
- SHA1 005e6b458b2dddf8b00ca5a8db21debc107079c6
- SHA512 9726dbde7e4d4f7d4034f84908b87539ffb9f25abf628935e6e854180bf3ded4a96ae6a5c4fdd13d8236615d3c34e8b471d948bbb13773d7f5354729aa06c1d1
- TLSH T165E08687780B808E4202ECC818F01549B32CF23186DAE9F4DD61D02E60ADB4934C1CE1
- MD5 SHA1 SHA512 TLSH
update\service.bat
- SHA256 23f2531de188a0755f9f43bfbfee01b6369ca68beeed16e2dc80f13f99f22f3b
- MD5 10cbb1ff56f67d7db15f2252dbcf96ff
- SHA1 0762b93365d1d3d75fcfbd06eb198235e72b6afc
- SHA512 6022ea148a8327681bb09314eee6344cd2e4b2385a6681f69591b25a5adf1ac37b29e244deac72e0287db4e827a6339640669dceb1ce38bd1e35e777744e3704
- SSDEEP 384:yvzkh51CE3utFcIuVMxe8AIKoPamn+CtIajzjjCXpEakDi5h6wUEz+omf0fOQwQv:yvzkh5RVGKWaYw1hi6MKkc
- TLSH T162D2502A1402586608B153B3992640E1F75A81D30A3176DE38AEC198BF7A76389FF5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
update\utils\check_updates.enabled
- SHA256 02fa0e83883800772ec3462347e9a9f623fa3e13be7d4de7e0b2cb7e425ab212
- MD5 9e57d6bda4bec067ff636fe400af6ea5
- SHA1 ef2b74c624fc749c462add5ca50b9c316d24dc74
- SHA512 abb9a4d65344903007757e5136b15522975d98036cedcbe58a17c402bfbc07c5d89a38fa12392c3efcd755bea7154142322755c2e506dedc5b143384615a94ed
- MD5 SHA1 SHA512
update\utils\targets.txt
- SHA256 4c953196e2649478c267450fc80cef121ef96bc50656ef75336b9589c0808cea
- MD5 0260e9fef4eaf980bda2c0118c2693e1
- SHA1 90a1202ac88ed738059639a7925be7fe1c7d34ed
- SHA512 845f2be911a0f51aa10fc0c9417f8cf0e06015cf5b87d02c686e02b3af15f89b81e8163ee1185e571f13a6e908d08ab211587397840219699ab893d18ff8d57c
- TLSH T19C219B93F152C4B0025A84DCE400B2ACFB0A411F678A60EBF04F509F3B047F482FB696
- MD5 SHA1 SHA512 TLSH
update\utils\test zapret.ps1
- SHA256 6053e9858bfbc222875738f1b7b09ad4978df6bc2cb271cad1729a26f909420a
- MD5 27823e3bfaf081f1ba665d0da16c090b
- SHA1 9a17287f3dbacc529737dd746b4112235628f6da
- SHA512 3e6b9dba62910d5aad61b86420498fcf2398add1bb4cf2e1df508d1e3cb14ae833cd4f217d38bd614b3bb25c3d1e7f7d907c9ec58f4b8f092e29cf666f6b28aa
- SSDEEP 768:jzk38oLsQ3VD5tftciOswyBw61H1Kd8YzP:MrrwyBw61ET
- TLSH T18F03A629B90A106F52735BBF9C816104FF57417B804916C0BD9CA0D87FF492EC679EAB
- MD5 SHA1 SHA512 SSDEEP TLSH
utils\game_filter.enabled
- SHA256 9e3dbe0a16e58797ba9b8d0ff475dc0dbb5fbcab8b5c9e9f39daec57fad121b9
- MD5 71b1b880448ff68b9fe6d850e29e74b1
- SHA1 109175b8db620da1a06be64f4ddf9c1a8bc70e3b
- SHA512 251f56f4dbe8b31e3eb8ef93c36a7edcdef86ff045c8b3f55e081cce90b42a367f2be291fc73f961f7495302417f25988ad7efb9e6c4420984ce43491b7d2d08
- MD5 SHA1 SHA512
utils\targets.txt
- SHA256 353e7cd8aea69c6132024918dd7c070ee5101ccda6a62e9cb9aa1cf30703c87f
- MD5 e714bed5a784fee2a4bdcb3bf03aeb8b
- SHA1 5551aad13f4f41699d60514d774ad9771fcca214
- SHA512 3688eec90184049900f0d55288c78baac6d6bb7cdf34f6e27232f0058e066b941fa991053474e1d5b7537a5001a3df593c09e2ec94324b332e7e86a15d6a453a
- TLSH T124216BA3F551C5B0054790D8E803729CF74A542EB68A60EBF14F44DF3B207F482F66A2
- MD5 SHA1 SHA512 TLSH
utils\test results\test_results_2026-03-02_19-53-52.txt
- SHA256 d00913da92c70b30af8f39d997d0e8c47392ebdb15d1c88edde745fe0ea7b694
- MD5 67dda297b4005aec215be9b25b7ab96b
- SHA1 1ffaa7f2d2066f0e02c9441b1da1c7e34738bc5f
- SHA512 e48513d5fea34f70b62fc9e0e4dddf390c66dd0f83ebae52a5ac59bb0fef2a064c55e3788f48c76a017bb46931bd6e7432f049c384f8d797a4bb7e4beedf9b71
- SSDEEP 96:CugpVWnutDrFk8aRHugDVWXOFTFk8FFkKPCFk8n1FkKeugXerrFkEavFkEWpStXO:EJERBsZp6AXXUi
- TLSH T14F425099F0A220AD63FDC154BAE0D7DF35664E350C49E2C1789D2258671AC2E1F7CB8E
- MD5 SHA1 SHA512 SSDEEP TLSH
utils\test results\test_results_2026-03-03_00-38-28.txt
- SHA256 fbe980f47956b0f5a447b98259f7a0d0fda9d01ddf869fbc4ffe665ec8472da6
- MD5 a31d4108458efc113b2e9b9304723cb0
- SHA1 7d5b0abfc3f2565cbdf253f0d158632dd7df0a62
- SHA512 dc76f0a09aefb4fcb2130f74930d7fad6a66114f1640c1d0dfec0bb83be748582e76f78dfd839c045e396d840ab69622654df1964b93bef5c1f950250c9224ab
- SSDEEP 96:CzDgot8owrFkMV5ozFBFkVd/FkEFkCFkVYVerFkxFkmt9yiEbaFhFuuFGu/ku5Hv:TJcDQrROS9t9pld20
- TLSH T1A2328399F0A220AD63FDC254FAE0C7DF35264E361C49E1D1789D1258671AC2E1F7CB8A
- MD5 SHA1 SHA512 SSDEEP TLSH
utils\test zapret.ps1
- SHA256 9e9e69d1299f60f9189cfbd93db15d052ebce70781a0cbdf4b984b85db6e6824
- MD5 e2f67beba3f87e0212273f55a09c4a30
- SHA1 861506c928fc6fb1b787743cfb91117b992cd159
- SHA512 fb23ade175cece0be186deff71d90897e11ee99f0b2e7bb913d564ed0c3779c6ff4aaf79f15f0704351ae8cc9685713a3dd38b43de56d223c879b719ebd91aaf
- SSDEEP 384:jAakddb1Xz1jbdZxP//nnXVqcNm5tVZuyci8EULNW2pyBw61H1UVnVd8QGeSH9NY:jzk3xXFc5tHtciOswyBw61H1Kd8G
- TLSH T10A03B729BD0A106B52735BBF9C816104FF57417B804D16C0BD9CA0D87FF492ECA79EAA
- MD5 SHA1 SHA512 SSDEEP TLSH
zxclinux.bat
- SHA256 19f5799920844537a8d920a8eabc20971b49ea763dec44b87f43ac2f834fe14e
- MD5 d2fa6e23df49f121f182183006c63b74
- SHA1 43d6fff98f97044dde28c27896a83d1f8215bf36
- SHA512 233aa536ade20c22e7b7a5a462752aef19d86e345fe6638666205866cef0b66d1c1ffb16852be90b791856e3fd50893f6b80ee6b32b191a1caeb6c88a9ec09f5
- TLSH T13F516993E00DDE46B68E687FFC49A5E43417C4C35CA6D462529789E8C88BFEE8C4E484
- MD5 SHA1 SHA512 TLSH