camfrog_6[.]1[.]146[.]exe

resource
unpack001/$PLUGINSDIR/DownloadOffers.exe
unpack001/$PLUGINSDIR/ExecDos.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/cfigm60.exe
unpack001/$PLUGINSDIR/gcapi_dll.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/w7tbp.dll
unpack001/CrashSender.exe

resource
camfrog_6.1.146.exe
unpack001/$PLUGINSDIR/Camfrog_Chrome.exe
unpack002/$TEMP/googleupdatesetup.exe
unpack001/$PLUGINSDIR/Camfrog_Toolbar.exe
unpack003/$TEMP/GoogleToolbarInstaller_stub_signed.exe
unpack001/$PLUGINSDIR/gtapi_signed.dll
unpack001/$PLUGINSDIR/killfrog.dll
unpack001/Camfrog Video Chat.exe
unpack001/CamfrogHandler.exe
unpack001/CamfrogNET.exe
unpack001/D3DX9_43.dll
unpack001/XFrog.dll
unpack001/audiocodec.dll
unpack001/audiosource.dll
unpack001/axsnapshot.dll
unpack001/cm_acapture.ax
unpack001/cm_arender.ax
unpack001/cm_capture.ax
unpack001/cm_render.ax
unpack001/cmnet.dll
unpack001/media.dll
unpack001/mm_dec.dll
unpack001/mm_enc.dll
unpack001/rgb9rast_1.dll
unpack001/videosource.dll

camfrog_6.1.146.exe

IMPHASH b729b61eb1515fcf7b3e511e4e66258b
SHA256 508a80f4149e210ebbbaac5e9bdf0864bdfa9340526c5cd80e0218b678132a7e
MD5 c8713ff0ea1da410600b43c5109274b8
SHA1 59d8db6d00974e6ab80a7899f22e042f1707668c
SHA512 2c2809fdbf3ce29aa5af3e70a7af4dd2da6f4e9b8cfbadeb52658c82a9d6cbae3b759c654f3a8c72d123c477b709eccbc8f0abac73da05fffbb393c57a9c6466
SSDEEP 196608:MaiM/dPN2tuYDM9/5VAu+WRmEPlciHY5NA45Su:Ma3dPwuEM9/HP+WRXmi4k4X
TLSH
T1357633ECAD82D9C4F92C49B15AA7D1324B277E3E55904D9BA8DC3F2434B358C6600DB7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c2:45:90:16:87:ab:84:17:ec:28:99:6f:e6:c3:ce:65:c1:cf:78:25

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

13643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode CloseHandle lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrcpynA

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$PLUGINSDIR/1_ico.bmp

SHA256 57be45aa895ae5d1dad33a4299f8635c7ec7cf83253138b16bc1700f68cfe534
MD5 440e4aad9340a7fddffcf8d0953fc43c
SHA1 06f76207c53c03e0f2388ca52b8179c3181f7d31
SHA512 5501d4a59131e0a55e62b0949bd6eb0a29705cb785a142ee6c8f089eb802029d8d0b7bcfa2e9b869fe4663e3eccb547353b37578512394167c1b6165ada88496
TLSH
T1940110B162234CE1E7A81AB94AFC8B1A16C99C741A4700832D6175D085F68DB0A77947
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/2_ico.bmp

SHA256 74d90a1a07779971126023c8fd2b626c7b2d780fea08dc8386284aaa361ddde3
MD5 d0ded9385aa4b85962b95c59363ba022
SHA1 58d7bb3b783eda08ac3fa437c2008f6f3a07136c
SHA512 1f9216c5ca052f0f40f0197df9bd63f2da647c3ea878925ff6a871e6f6dcf9357740be15cc938341504bf0dc78ddd790d7847ccfddc95100ba372f187f5b4041
TLSH
T11C0152A7044A94D1E8CF863591B1C42DA0838D3651827326436922E7EF8A4058861CF6
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/3_ico.bmp

SHA256 c2e4ecbc8d7c09c5d6e2c693cb9adac2e7abe11abe00451c789afa75844a1b76
MD5 d60a632bc82fca7fd26945d089d8bbd1
SHA1 61a0b469a3bad7dbbaf59a544e23cf4d933bcf72
SHA512 a3b233e37a2f50c105cd2d97ae06f38a1e5d7e686996a0a03cd3db1d60af119a3e93b6c76bcd1f5a0818803c142ccd8c7becbacd862192cc2d238b9131088a4e
TLSH
T12301EB2A218010ABE0FE023431F4C019EAE5AF72E89148AEA18275D253BB1D700EE996
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/Camfrog_Chrome.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 2c041dcfd25f347713fbeeab8374ac2b4f0dfe3b2ab3f217a585564b51d1b623
MD5 5d88dc36b1336dbde692638368e26967
SHA1 c8032f3b0f86960700695e663a3878dc2c5e81eb
SHA512 4d1852299c9f059bc52955865bfcd1b534a0fbaa616334ec6c92acc817bf3c1bce9477b5fbc5ee79618fe362a8d64533e3acbfe6d203e41a50a56207a350d746
SSDEEP 12288:tmt6cgOkXAQjfbE2YCyz+/UcYyOk3jFZcngtv9e+Y:st6nOIo2xy6MlTkuCle+Y
TLSH
T1FDC4238EE624DC23FABA4B38A4F8CF64D5D4CA02DA5B252EC3904ECD59661C1871D7DC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

1d:fb:1b:cc:8f:09:48:e1:cb:8c:0e:2e:15:eb:1f:30:3a:60:47:57

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Chains

Mar 3, 2011

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Serial Number

36:b8:da:6b:f0:0d:94:f1:58:30:10:01:ad:d6:52:7f

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2010 - Feb 22, 2012

Minor OS version

0

Major OS version

5

Entry point

13324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/googleupdatesetup.exe

IMPHASH 63bb56059f7b9f6184ab7901f4ba2948
SHA256 d31b7c8cf3207b19e18e899523a3d7caabf8fd1ac5cca38a4bada87516333091
MD5 01e1716a03b513f6538e022dd0ec6ea5
SHA1 9bbbf3b31340f4b049fd97ccfd34b2a03ac4ec39
SHA512 ccf065518cab5f34001f61f2e7f5350862c75b1b8cab7a8697712bbf4fb28789496229422a7cddaa68befb7d93afab3c37e799d4b267c300d56333f5a15cada6
SSDEEP 12288:LxTKk7QjSbE2xSyz+FUFYkOu3jgQcngtK7++T:lbY20y6qeVuqCCNT
TLSH
T18AC4120A33F94469F6F76B38ECF58AE149E4FD429E35621D83D01B8C0D319D1D2687AA
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

14:c8:43:9c:be:c2:e8:43:e4:c2:e2:18:43:b8:3e:27:e2:68:ce:f5

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Chains

Mar 9, 2010

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Serial Number

31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2007 - Jun 18, 2010

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

mi_exe_stub.pdb

$PLUGINSDIR/Camfrog_Toolbar.exe

IMPHASH bf95d1fc1d10de18b32654b123ad5e1f
SHA256 30d3d2f8cbbed9305a4292342d32acd2537c437c52b592877ebfefa1e4adea23
MD5 ce0a85f1a15af7490f40bdb729f0316e
SHA1 206b975e495a049122409c4b5ddf250083226a47
SHA512 427a679444359febff4e03acd871091892e4428648f07ccd63d974908103ec789e492f79c57fcf7602fca725cf389b81316348bc4aac90f15580f54b84ff1fd9
SSDEEP 6144:cmt6MmlXt2svZLLIb/TbVPXe8DyF8dT6OVk17gJT6uWEeK:cmt6tlXt2+ZLkbBPefskNgJT6BK
TLSH
T180441244F7A19467EDF50F309171A766EFB9C912ECD0B28693644E1E3BBABD1A40C324
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e9:89:c7:8c:bf:6b:ac:bd:7c:98:39:49:b6:e1:aa:68:97:dc:9b:a0

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Chains

Mar 24, 2011

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Serial Number

36:b8:da:6b:f0:0d:94:f1:58:30:10:01:ad:d6:52:7f

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2010 - Feb 22, 2012

Minor OS version

0

Major OS version

5

Entry point

13324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode lstrcpynA CloseHandle lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA CreateFileW GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte MulDiv lstrlenA WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrlenW

user32

ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx FindWindowExW GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint IsWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

$TEMP/GoogleToolbarInstaller_stub_signed.exe

IMPHASH 6d46664388691d2c5cd75b11672893a5
SHA256 ad68cfbbd2765be47b430cb0b3b527ade826e43c2ed6681ce6b9b5b44c8f18ff
MD5 39d998e29dc9277c8762070901e69a32
SHA1 ebd09f3ec33b4e56ebc3eccc0107689d4c5a2bca
SHA512 cec7b2dad52ea5015c1a7b819fc1c3287325711b43dee50827f90b9f890dd4d34acacfa1fb65e3f0e62835dfaf0b1c93cde84274c78caf76e1cded8e327d7834
SSDEEP 6144:M3wpq8sDsLLIb/TKVPXe8D0F8dT63VkiHFBGeWIY4AfJrrUZ:M3ssDsLkbiPenXkMNWIYzxrgZ
TLSH
T13F341264F6604715E9082FB85176E6DEDF319C4AAE9260D14132FD3E3EBA3747A08738
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5e:9f:95:5b:c2:94:d2:3c:c7:31:ea:3f:0f:c0:ed:03:01:9d:36:fd

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Chains

Oct 15, 2010

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Subject

CN=Google Inc,OU=Digital ID Class 3 - Java Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Serial Number

36:b8:da:6b:f0:0d:94:f1:58:30:10:01:ad:d6:52:7f

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 22, 2010 - Feb 22, 2012

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/DownloadOffers.exe

IMPHASH 7cbd485d70b48e53b8c0486099096976
SHA256 b5e2da84f65b658a50787b092f5a30611e11678afe8e7a066fa8cb8d698e6bcd
MD5 2d416652deca0becc7bbb2f564c0c182
SHA1 9e3635591c745ee311c4ada7758eec464368def4
SHA512 d94b33da1b8b5fc822a70b65b66f1492cd66770ff4de6bdca584f3f463a626c8768113e3637578a5dbfb98adc88bdeec3f4bc1f1c532fd746ab8050a84caa9b2
TLSH
T18C41DD270BB0DC73E0180B7082DE604D70B988444BEA9A222AA42C2732673FF45F0F62
MD5 SHA1 SHA512 TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

4140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/ExecDos.dll

IMPHASH a5d239ed12c9442d63c73cb9ff7cad0e
SHA256 720be35cd1b4a333264713dc146b4ad024f3a7ad0644c2d8c6fcedd3c30e8a1f
MD5 0deb397ca1e716bb7b15e1754e52b2ac
SHA1 fbb9bcf872c5dbb4ca4c80fb21d41519bc273ef5
SHA512 507db0bee0897660750007e7ce674406acf9e8bf942cf26ded5654c07682757b07c9eb767bead0966478abc554dc9a6461c4288dc35d12cacfadad4c128f1bb7
SSDEEP 96:J++xDiP4p7t7dNOt3stxtRFFXxGD6qxlnKE6ttdH3r3:Rx9pJ7jQs5toD6Cln/6tt1
TLSH
T153C1E73AF2E409B3C2A806343EA6A42B17F9D02B071409B7876321CC6CD0DB8FE74256
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

6324

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 039bcbc605477e8e87ec550c2e60e748
SHA256 03cd57ab00236c753e7ddeee8ee1c10839ace7c426769982365531042e1f6f8b
MD5 959ea64598b9a3e494c00e8fa793be7e
SHA1 40f284a3b92c2f04b1038def79579d4b3d066ee0
SHA512 5e765e090f712beffce40c5264674f430b08719940d66e3a4d4a516fd4ade859f7853f614d9d6bbb602780de54e11110d66dbb0f9ca20ef6096ede531f9f6d64
SSDEEP 192:sRer7uivwq1XpKs4FVWSjMd8tIg2cREbyCsZ8q2R4Sy+Xe:s67Xws4FVWig86/5eCBqSy+Xe
TLSH
T1B3322A2657B0D2F2E6A1827408A639336BBA762412B50D1BDFF74481FC15BC67E39327
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

10085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/bottomLine.bmp

SHA256 436bf0b8faf8a972bd2d909df4b503ededd5c65db8da89c7ac6ca441a9498a8b
MD5 67eac7d2b3c060105237d52352cc5cf7
SHA1 43a9898226d85a60cfba256fdfbac14ab1ecca1e
SHA512 4199709b2b4a67c7a5fa74276d4437e3fb2feab651c9877594c026c460dffab1d5ee0ce3148713e349b6a32dcb9bc3e9efeb4266b63fef17e98b932254a9d737
TLSH
T135A0040337CC1405F4047074400F5F041107DDD5100103F0544F5171DD01CCC3D05041
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/camfrog-logo.bmp

SHA256 3d8611d3182aae0558e4813b918c22084aa79ca18013ca92d666e2ca2d215252
MD5 2b0967476eae0bd7a3cad863ddc45d77
SHA1 eb542a7b27ecccaa402dac83829edeff10e2e3f1
SHA512 636c6c9adbd5435b9ec44bc15387e9b0b0cdc0048c5323e6b7d636e3d081d74230a29be80bd3ba552e4dc8270a3accf4991dbf4a7734c0cddc5fdfcbaed735be
SSDEEP 192:wtspW7Nrr9rcz9C+XwdbVtZDiU50gK4eSNjem74lOzXc0+QKShiy5kMUt:wtsMZhS9AhPZxKP4fRsczXc0+Qridt
TLSH
T1D48246A85C6EF64281B9E0F99097B2BF4148F9411CA895FDFD24E0069D6CA078F0B7B5
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/cfigm60.exe

IMPHASH 5f87e7adf84bf1b9c3aca0d109c9349f
SHA256 7950d035278918a60326c30cdb2aee425538522d5efcc265b6ab74124cac7b82
MD5 4732c6db3870396785f148637036d2d5
SHA1 a781adabae75d81fbd1d6f1b0ab270ae29fb28e4
SHA512 043d0e621eddfff09b77ed9356b1e45eb85c3880e65b66ef72cad14bdbf0ec5ec6744b314ab0b4c213683463cbfad54df016534ea9c3a9f7a4bfb72e75ec10b2
SSDEEP 384:5SdZ3S75DW0jRT5XmCCfUILFdAb6S4uT57V9+TmzApfhANLM8uYvnu3+/EDHcRqc:Hxb52PM4ofETmzoh0/pn2iED5dmwIN
TLSH
T187F21912B6E28433E1A3593158B4E2B15A7F7C52277440DF379812BE5FB1AC18EB835A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

7409

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

$PLUGINSDIR/chrome_bar.bmp

SHA256 11cd821e282e24da126260de74852f4a9ee9f3219bd5bebea58a77e6877f20de
MD5 4c3b9fb1811cae71335e418861ef32c8
SHA1 2d5de1d25a52e47e0411e1d4ea9c1ee0465017f3
SHA512 97be2d1f07b331231f6cbdb5341d8c8d8a7a05c7d140284a808682edfaf83caa3417fb217e85546fb30a69aa4e5b207ccadeeea575fae44c72be98e9f23ed9dd
SSDEEP 768:iShlAQaq999W9997UTYtDEsJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJ9nZmI:iShlAQaq999W999IaDEMmrx6r
TLSH
T1F38353570D087814946C1F0E1C28AEC91EBFBEE56E5CF71CEF45B625B2739A02EB4981
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/chrome_logo.bmp

SHA256 08aead111a1ca86ec5f4d0764fa00cf1e0859f2e6cf25c9c66fc5f2b018e6d30
MD5 c490ca72fcb6bd393af4a930ea469754
SHA1 a21c22f40ec53d25101de93b4cafd3acc9721335
SHA512 a18dfed46458a1993cec97f49e2a5409c99814af43c5ef263733a83c6114eee8f99d66846489a5f1eebe700bc68b238dac72aec377989c3159162a2770f625a2
TLSH
T15A71C6B47980C628ECA045B89EA6C6FC0616BE49CE30406FBA903F9F6D392C16B51153
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/common_user_bg.jpg

SHA256 f2af9f1287414f5309da70a53d19bf5fbbde9ee23436232535ddf0605c25377c
MD5 3c937022ee27b76056bcf169ff9552f9
SHA1 ba8a43f973656ed4bf503f4bfda8a61690b70c6f
SHA512 56778715dd14fa0c0b6bfb7c99d0fbbb7d8d200aac3c5199f0410dd630fa43e92de6227c256dee35af84dea95c92d8e7411e51351f89de6f6704344225d1bbb2
SSDEEP 768:03jMKnO/S6ITL4z5Uysdo8FFzmes4K9p66U7c9+jKvmOAIZ6YKXQt:04KnOvi4lUyGdFzq4KW6i+/APDQ
TLSH
T1934301929FBA6AC1F4785633E210AF76E05EEFC9D2D6554030FB1E18B34113A2B5105A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/eula.html

SHA256 259bb6a2cdbac92d51747ed4d7b5b50c9810d7a9ff4832d39b76532000d42c1b
MD5 9efe25368776214ce94c57ed34de97b4
SHA1 8353fa74b0422ba5ab20e761c0b96d194e53651b
SHA512 76417decb2c08d8319066086472dd77bf81f9d6e9d7133400fecdcd0a70c0dc0856d0fb24e4dd780ebb6004d4a4f2a4f7a9fb75bfde99e88234c934edd81b43e
SSDEEP 768:SkE8Whx/iSPTJV5Fs3QmcVeszeMAv1rMUyZMX6v4:Ski/iSPTdFsjcVeszevv1+4
TLSH
T1BA1383AE7B4503E30AD103613F0366DAF71BC23A322A5695356D819E27F1D6C42FB5E8
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/favicon.ico

SHA256 d4f3948871cae8b3d3dd12b73794e508b4610e17262bfef922aeb11fff7b2a36
MD5 dd87fbde9820788c04013ad30461716e
SHA1 705972eefa5959d7be3afc7f95aec8f13ec09019
SHA512 511a1d7915669b9c0b4039b4c89264b26f68eb9e43ada97fae915aec3791fa66c2c29aae089bd090b34878f740c52be347a113420bccc2f841137646f8dbbf1a
TLSH
T1F451285F1A35EC44E851C4B541DB58AD0178ED931A9DFA8324C07E9A3A37FEEF51201E
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/footer_bg.jpg

SHA256 2bafe6b335aba6b8e3696918f257777c0cd38f3b6d3ed261aafc9cfa761a5cfe
MD5 1534c07f274549fb9ef7abae91a4636d
SHA1 f7d217147bf7848621b01e2c787d3bd40ed0a925
SHA512 87296cf6e6008a3333351eb9645d4441a14684984719c3a754b7c8d078dc58ae680d379368a1386b6902b584d8ebaeeea932cfe32e47e6e757089e236520d4c7
TLSH
T16171B52E4F709F02C4F00372BD337358AA14BB9AD6EF925D31F538458A586E839E8488
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/gcapi_dll.dll

IMPHASH 8891c36d74fe91d057004cc47a0ac3cd
SHA256 996fdcdbc3118570b5f250fb06a101306fbacd15a5f82ae3fbeda8049ea73d03
MD5 1f90c49bc9eae611aee441e97b6a2b2e
SHA1 13289dbf63d2ff3d7674b4eaa7fe8f8d2b54e2da
SHA512 6945652d59554a899c0c7c15fec262f54e46eccacebf127e8c2d8fd3ac04a93add5e44d7bde4c260b4d9f913172af9238e4a443862dce088fc0ceb9a39ef3df9
SSDEEP 1536:ym4zAUy/W3uc1bp6YI5IE4T385DnbU+VgR:yHJ3uezIH4TwDnbU+V
TLSH
T183538D21B9A1C8B3D45A41799656CB017B7B78526BFAD8833F9B078D5E212C0B73F342
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

9004

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\chromiumtrunk\chromium\src\chrome\Release\gcapi_dll.pdb

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

CreateFileA HeapSize WriteConsoleW Sleep GetCurrentProcessId LocalFree GetModuleFileNameW GetLocalTime OpenProcess GetLastError GetCurrentProcess CloseHandle lstrlenW GetVersionExW FlushFileBuffers TlsGetValue GetConsoleOutputCP WriteConsoleA SetStdHandle RtlUnwind InitializeCriticalSection LoadLibraryA GetCurrentThreadId GetCommandLineA HeapFree GetVersionExA HeapAlloc GetProcessHeap TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleA GetProcAddress TlsAlloc TlsSetValue TlsFree SetLastError ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc SetFilePointer WriteFile GetConsoleCP GetConsoleMode MultiByteToWideChar RaiseException LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA

user32

GetWindowThreadProcessId GetShellWindow SetWindowPos FindWindowExW

advapi32

ImpersonateLoggedOnUser RevertToSelf ConvertSidToStringSidW OpenProcessToken GetTokenInformation RegCreateKeyExW RegSetValueExW RegDeleteValueW RegDeleteKeyW AllocateAndInitializeSid CheckTokenMembership FreeSid RegOpenKeyExW RegQueryValueExW RegCloseKey DuplicateTokenEx

ole32

CoInitializeEx CoUninitialize CoInitializeSecurity CoCreateInstance

$PLUGINSDIR/gtapi_signed.dll

IMPHASH 7ffe854b1d056041e067b211f52d2336
SHA256 89e157a4f61d7d18180cb7f901c0095da3b7a5cc5a9fd58d710099e5f0ee505a
MD5 61bc40d1fad9e0faa9a07219b90ba0e4
SHA1 5b5c3badedba915707000d2047eaf13f27b8925e
SHA512 fa341aa975c471082b4b6c380f794d1e9ab3939382972cfb9e1dbb3491f68296ad1cedc8f03736921c8e133f62432997de29642e223c2a97f1cab5ce91d68af9
SSDEEP 1536:/J6IYeD05jIx9A1jV0PAy/DTPJocNmk8SwD3QVS9JBhp9:/JL3m0l/JocNmowD3QVS9Jx9
TLSH
T174636C6230D5C0B2F55D067E908AC3225B6679908DF649C77FD307CA8E266E6EF2E341
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7f:49:f1:ae:00:b6:0e:1b:16:b2:e8:21:97:1a:8f:5a:54:fe:ce:ee

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Chains

Nov 6, 2009

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Serial Number

41:91:a1:5a:39:78:df:cf:49:65:66:38:1d:4c:75:c2

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

Jul 16, 2004 - Jul 15, 2014

Subject

CN=Google Inc,OU=Digital ID Class 3 - Netscape Object Signing,O=Google Inc,L=Mountain View,ST=California,C=US

Serial Number

31:44:c0:6a:6c:fb:50:76:c1:5d:39:95:72:c6:94:21

Issuer

CN=VeriSign Class 3 Code Signing 2004 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)04,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 19, 2007 - Jun 18, 2010

Minor OS version

0

Major OS version

4

Entry point

10387

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

gtapi.pdb

kernel32

GetVersion GetProcAddress GetCurrentProcessId lstrlenA LoadLibraryW LocalFree Sleep FreeLibrary GetLocalTime LoadLibraryA LocalAlloc GetFileAttributesW GetModuleFileNameW GetModuleFileNameA GetModuleHandleA GetCurrentThreadId GetCommandLineA HeapFree HeapAlloc GetProcessHeap ExitProcess TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement InterlockedDecrement SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime OpenProcess GetACP GetOEMCP IsValidCodePage TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent WriteFile LeaveCriticalSection EnterCriticalSection InitializeCriticalSection VirtualAlloc HeapReAlloc RtlUnwind LCMapStringA MultiByteToWideChar LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode HeapSize SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA FlushFileBuffers SetLastError lstrcmpA GetLastError CloseHandle GetVersionExA GetModuleHandleW GetCPInfo OutputDebugStringA

user32

EnumChildWindows GetClassNameA FindWindowExA MessageBoxA CharUpperA CharNextA PostMessageA

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

advapi32

RegQueryValueExA RegCloseKey RegDeleteValueA RegDeleteKeyA RegCreateKeyExA RegOpenKeyExA RegSetValueExA

$PLUGINSDIR/header.bmp

SHA256 00fdcc1b93650989cea156c51c86c23cee9ccf8a8fa50acc4df0201194c3628d
MD5 28a9efbecc59b40588512a512e0a3f5d
SHA1 12b09f09c26722eb071842ed32044e217f08ace7
SHA512 5f4cae3865d8226e713d869e0ce8a5c8c434eecc959520f296773846180199613820d06ac58806cb40f09446b7fe214e6f4396041837f51108edc493c2ba8eb8
SSDEEP 1536:s92999y999996969999999999Y99p99999n9999B9399999999b99Sn999H9+99V:1mIkiAaaB2QfrK97TKOuiDt
TLSH
T13034C364CC4AE7478035F9FC84577A4A00A8FDC31D5592BE9E34BC0B7DB8B5A8A1B394
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/killfrog.dll

IMPHASH 304852d9f7b204b6e36b19a25ea78547
SHA256 58d56845f9bf28bc8e67d0c136810468e3ccf7250deb307d2136d8a28594173d
MD5 0d78d4939f894cec98bde4ce1aa77e7a
SHA1 68b2219046becc3b91040e1f24d83f926b0d6499
SHA512 cb8e1a6dfeb94a5a44f0d6365c39fd50c5047e25abc2a20f65969ca300ce8db1ad4eb13cdcb6961ee74198bbdd30a5802b37b91ffcd7a2b37488754ab53277ad
SSDEEP 384:CRhJoPR0bQZQXtMDDXkNFUMYJLn+bCHx1q:chJo+cQQOFUBL+bCzq
TLSH
T1DA925CF36F2400A3D9495B70E0F9E6174E7577402AE4509759F0898A3D8A7F63B1F21B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

de:c9:ce:8d:ff:fe:19:c1:14:32:54:4c:42:9d:ad:79:89:79:9f:0a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Dec 18, 2010

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

4

Entry point

4514

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/lastHeader.bmp

SHA256 763d701e10222b555af0435a3dbad9beda44f08fcc1fb5177523ba4e5dd45f7f
MD5 b84fb365c07cd82cdd8a70252e34fceb
SHA1 d255f83fedb0a618c0978a61a258ae6391eb5a0d
SHA512 9ef25946550c014e33a1efa216ee833ca8c59722f88dcaaacee571de76e7b9e0b605a14796a0b4abf3147c9275f6752f01a49b647c4bf58a3fd6c5338f06c468
SSDEEP 768:zvi8D+ik1J6kuuYdUfuuuuuuQWT4vZ+luS7+Yi/DiS7x4ujiNOfDVzjSwuNdxYqK:7iSPQ0dUZ40DyYi/jWiqAt
TLSH
T12024A164CC49E6864035F9FC8467B94A01A8FDC21D5542BF9D34BC0B7EB8B6B8A1B3D4
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/list.gif

SHA256 27ba5a2bf515713509f0409f80bc403d51fc4734c19fea270891391baf836918
MD5 2a6437af1429851df4d2ac9fcf22aebc
SHA1 a0d3906883b17fe80350fc2bee7cff0a1153c1ce
SHA512 7a9eccec4c8c0dc5e69511813b2f9c42242fc82bd66944bf5908f657920987157ccb0b8ab3158da5ea557d078ba179200bc9cf7d2cc8757a39f6e68c36fce390
TLSH
T172A00212CC65F729E0295B7EC869D2A1200CF63A46058D5F335EFB6252DF0571DD40C4
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/modern-header.bmp

SHA256 707ad20d0945204baba9a20d2a54dc4dfdfb3bfda706dc9035f833c742089370
MD5 bdcd17bd9729c017759746d6ef6bc577
SHA1 88d2f5aa8db123db0deaf55bd568a223c2235ed7
SHA512 71e2865a20267e52f973665e2823ba9ba5f55b7649af3e06404a4ba19d37a0a1c9a594ad57ef174633cbbf59b1f1b635d44bfd48be1926218acb0c9b0c76f0d6
SSDEEP 96:eaok0O+kJDXuylWXlza34CAtP+QCKptwbOrfQXKKGrbo+OiF:ehkDzuyl8za34DFAKf9rzOiF
TLSH
T1B4C24B457459CCA580614A70CFADC6FE19A90D56DE4E7C6BB048BFCF3E7A03A204A024
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/nsDialogs.dll

IMPHASH 9ea5bdc8c90dfcffe309465c26c89758
SHA256 2bee549b2816ba29f81c47778d9e299c3a364b81769e43d5255310c2bd146d6e
MD5 f7b92b78f1a00a872c8a38f40afa7d65
SHA1 872522498f69ad49270190c74cf3af28862057f2
SHA512 3ad6afa6269b48f238b48cf09eeefdef03b58bab4e25282c8c2887b4509856cf5cbb0223fbb06c822fb745aeea000dd1eee878df46ad0ba7f2ef520a7a607f79
SSDEEP 192:y1zQhZDqlJcKISw99ioU3MSfwLF/+nhHUisdz:ozoZDGKYw9goWyFGBU7z
TLSH
T1DB121B626688D5BBD2D1223636A92701DBF97328F0666C05D7B34E467DA42C67E39302
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

7449

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/options-logo.bmp

SHA256 7ea9287ea73a9ed338fed776db6f0296356ef0ea86329a15e4288e36d77a5335
MD5 9b425f853872e8a6bf485c8623c88ed8
SHA1 74ba62cfe176aa4bcbfdfe93da49c515c2d226d2
SHA512 f1499b700a3420403963171a9a9dcc372f53ae04ee6c4a57d89b9a0f4a7aecdf9ef0816eaa748b998d30afaa27ae3ae65e1c7e2dc3acae955567a457e384c4de
SSDEEP 192:fav7bx6OGuly5iA39WcK/WyFwAx+GY7opzHZm:fav7d6fYOVWceWewgpE0z5m
TLSH
T14D4253788D1AEE82407AF0FDE4B77B5F4088B9415C69B6FDED2190039D8DA17890B778
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/options_header.bmp

SHA256 f47399e611da24722a9029d0326864a87c627ffcad60ddc658ec75168f50b05c
MD5 96ffafbf090dbbae3406a3f570fedb58
SHA1 8bb962e97d6b1d9d79c9d185b16744a4e56efae5
SHA512 bf7701d988555c9faf4744ce659cce6932cae0fb93011f7488f436e56677f45a9766ddb0c0d4dc3e9cdb3c5b6644386219735a8b621a649fb51db739b5f1793f
SSDEEP 384:Z3sPPXGumuuuuuutH3J2u3SZjX9lL8twoqAidMpvHihj:5uPWumuuuuuuF3JN3mItXs
TLSH
T16B830DB8CC4AE642807AF0FD5067766D0148FE031DA9E6BDED35E407AD98B13861B379
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/privacy.html

SHA256 295ff9abe0689ea65474993a1145f60a94d971e3fae0ba069a693a5dbc6e963e
MD5 ad68e253412fb718415690ee0c4363bf
SHA1 401af717f4a217dae57bdc596d2ba286f4595013
SHA512 eca968d54c196aec23e458d9f406c7cd08762b2fa9cb5f3b7b0a8943d3cf337eb0bb4630137f1598bdcf4c882f0ca3889ee4f17ae73d34248a16577e5b9531c4
SSDEEP 192:SlNFhvNv7BVb0VdYvqujIzIWphQ7zWcjPELqOsq:SlNFhvLheMf3TjPxOsq
TLSH
T1011283ABE6813292147303722A53E761FF1640AF3315A5253C6C819B9FF2E16872B3F5
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/style.css

SHA256 da5e589e961c4c6213a37820afbcc2b52cae9e89f23c0690e1d31a56723fd500
MD5 d1e735f8287957a8dd1da5a356582bc1
SHA1 14b1eb34c15c17a5ec0e148841a7c35ddbe09b48
SHA512 05ecd8ebba2fd3b9cc30cd546684e33d754e52ac1fb4753444a99c8c449836383e05fc09565956192c391b09a1565860db0d6b4cc5309177f8cb93ad33cd4a9f
TLSH
T15C51E095DFC6200EB31B9A98F7F26B52DF144463570B8138B6E53361D69083876B53DC
MD5 SHA1 SHA512 TLSH

$PLUGINSDIR/toolbar.bmp

SHA256 6fcb7d64ee20e77333d8edfa25ab06faa303c4a9a8a5e75c35a1d23478123970
MD5 fbfa84a7a258979bbec4f0087cea9182
SHA1 9362770cb5c5a6b73cd8f232b6eb8ebf6d20d04a
SHA512 679140ea0420df350ef1d09e80be146724b0b35c145ae4e510e1ee2b0cd4c8372ae067cd8fb83d7c81a4ffcdee6c12aecc5c1667b91dc06970e1310c9164d125
SSDEEP 384:vdCpFaLjsv8NTZA4uc2RaVY0lJmJHD8nzAWiCQEloE:lCCL2OA41J8JHDsnQEloE
TLSH
T174333B11D3F0709EDCA814213067195379869CBAE08A24EFDF5172ABF8B5BC5B70BD89
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/updateBG.bmp

SHA256 a81135a7a7d92c3ffc2dfa9eed21b41937fa378826e8a4ae2a5be55ddf2396a4
MD5 d2096d45149c1974e72a7b8e7eab4eba
SHA1 994e1f28c0b7ea9f2e278a5fdcdeac627b8f67f2
SHA512 4bd712e032ed7371b2ea7935f10ddfec68837cc3af4a74da08e6754e63ee8bf4b4a229792bf1bd21ac1ac9338d3ba7188e421fb78a328f0bcacaf90db4a1bef7
SSDEEP 3072:HlcYxSIZGPHVlp2G6kDtTueKkx/cVQ9L/xxg5KDNhJM:GD64tm4L1Xq
TLSH
T191B4230EC4D32296D2343A9C61FC5DC11A497EFC6E6CF52CBA377E1A93B78C2601954A
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/updateBtn_h.bmp

SHA256 5ae00cc6ce952b855c8712d01b5ffe0ba9798d6267fda0fa94ab5b275f06b73c
MD5 76b0edb9aa4d10b161ab30ae61247258
SHA1 1b99df04e825c24ab898ad7f0ec3103bc06239dc
SHA512 c6550d556c4c7e9587e54c1c1f1715bb6464a5034c14480e66e83769f6faa2ff1d5ddf48eba14a36b29ca002672f45e1367958865160074162b62be88dec0195
SSDEEP 1536:VnRlkeuIMBiD99h99H995Y99B99l9+mxxxxxxNI4xqxxorxxxxx9xjxxMxxmJxxY:VnRtzmxxxxxxNI4xqxxorxxxxx9xjxxO
TLSH
T1EC73BF0C81A853DBAE150F0054736289C3363FDA598E734AF76F7D87EE27762A059D82
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/updateBtn_n.bmp

SHA256 e05d7118a3342d18f736ffa7f092e9b813c9738671badccf12ef415ddbba8d34
MD5 2e1128294f7a8ae2270b81efe6c4b4cc
SHA1 b3968f933711b41f0d898f24e0a8c25e5e7b06dc
SHA512 98ac228924caa551f9f9864a621177cbfcb461753299af3de40c01530a6b6040699ee3180ba26ff8e650c45c6d7666362c843e40cfc8ef9aad278ab61c85e769
SSDEEP 1536:wVEsGYYWDaYaYOttV99U99L99YO99qK99l9El9B9eLAxLjOciiiMiiiiiif:wV2PrJjOciiiMiiiiiif
TLSH
T18B73C3E85D1073CAB62848B27C3DDE51DE753FFB8128FDA9802323B125616F37616A58
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/updateBtn_p.bmp

SHA256 5b3b685344d927f5fc65e92a1d9d324aa8aae331d187fad465ca089be8367174
MD5 8e6e52afb0b9e50b8128c564e9994af3
SHA1 5d14b307810220998df1ca3d4873b3cbe8228af8
SHA512 dc815cc1ae5ae0ef598b42a5328537e52582b3bc73b60ffa5ce2cbb63d9a853d0a4ad76dccc31c4a55727d4c103ae77f4239038dc7171f7b4d7a03ba6e6177cb
SSDEEP 1536:SpppppppppppEi59ooNwd+z4XvKtST/99kd99S99H+99gBdb99l9LBl9a495ienv:EbHtSTbnbHpjOciiiMiiiiiif
TLSH
T19D737B01A23273C1F91A2FB21D855A95AB317EFE4A8426FEB27235D5B923274708D731
MD5 SHA1 SHA512 SSDEEP TLSH

$PLUGINSDIR/w7tbp.dll

IMPHASH fdb9d529772752ac356e92b3e3221b71
SHA256 65e3d41af62784429ebfbd8b17426a89e4c7643a94d9811aab62809711bdbc6d
MD5 71ca8666466a334aba2f8cd2b7868feb
SHA1 18a0bfb286c56ea10223bf8315480e8a5e396e08
SHA512 93cb29a8cf1302e45894cbded4cb3469e574a2e3d2cff5da934c770cb31e4e9e3b5b0aa53230f752e80cd721d500191b3bfcb800d6e49efb99b34b2285f1b2aa
TLSH
T1DB51027363B2177BC19522303B93A725B2BB497093D6C09A4CFD495E715468DD43CF86
MD5 SHA1 SHA512 TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

4531

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Camfrog Video Chat.exe

IMPHASH 9f9141a5aa960336ad63b5942daf9e1f
SHA256 c273fabe05e65148a599c3c53ca710f25ecdaebb0b6544f80dc7dd95f1c140ac
MD5 c4bef5d83299cb6965ec261d5d9cbab1
SHA1 77d1b021a5e1d0618767d59ac2e4ac17bd5d51db
SHA512 063005056b7190db48ca79f3119fb0419dd83cd4973b813408fab07ca4fda9963f32c462ca2aee3261079afcaa6adfdb2c18a4991dbb9f102a501d6e96f96427
SSDEEP 393216:hk83k9ZI05Dc8V3YsEcgeqBTRhYvIuHRcBbqibQxj4BIK+qdkSywnniehwEUdiDK:hZ3k9pDc8V3YZvUdm81
TLSH
T129E63A80EB705B36E3A502B58C6F57C43138E645DBF332C356A039E938D25E245BB96B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

5c:55:d1:b8:84:eb:13:24:b5:81:66:c7:17:74:69:c7:1b:ff:aa:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

1

Major OS version

5

Entry point

3650461

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Camfrog Video Chat.pdb

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA

ws2_32

ioctlsocket WSAStartup WSACleanup select __WSAFDIsSet recv send setsockopt connect WSAGetLastError htons gethostbyname closesocket socket

winmm

PlaySoundW

urlmon

CoInternetGetSession RegisterBindStatusCallback CreateURLMoniker

netapi32

NetLocalGroupGetMembers NetServerGetInfo NetApiBufferFree

media

?get_capture_framerate@@YAJPA_J@Z ?set_decoder_path@@YAJPA_W@Z ?show_capture_property_page@@YAJPAUHWND__@@@Z ?get_capture_snapshot@@YAJPAE@Z ?start_stop_audio_playback@@YAJK_N@Z ?remove_audio_playback_stream@@YAJK@Z ?close_audio_renderer@@YAJK@Z ?add_audio_playback_stream@@YAJPAKK@Z ?assign_XFrog_Graph@@YAJK@Z ?create_audio_renderer@@YAJHW4AUDIO_TYPE@@JPAK@Z ?remove_audio_capture_entity@@YAJK@Z ?add_audio_capture_entity@@YAJPAK_N@Z ?deassign_XFrog_Graph@@YAJK@Z ?set_xfrog_hd_button_state@@YAJK_N@Z ?assign_XFrog_GUI@@YAJKKKHH_N00PAUHWND__@@@Z ?set_renderer_control_attributes@@YAJKGJ@Z ?put_OSD_capture@@YAJPAEHH0HH@Z ?show_renderer_window@@YAJK_N@Z ?create_video_renderer@@YAJ_JHPAUHWND__@@_NPAK@Z ?close_video_renderer@@YAJK@Z ?set_video_capture_fps@@YAJKE@Z ?pause_video_capture@@YAJK_N@Z ?remove_video_capture_entity@@YAJK@Z ?add_video_capture_entity@@YAJPAKHE_NPAH@Z ?remove_audio_playback_stream_all@@YAJXZ ?close_video_renderer_all@@YAJXZ ?close_video_capture@@YAJ_N@Z ?remove_video_capture_entity_all@@YAJXZ ?create_video_capture@@YAJPA_WP6GXPBKPBEPBH_J4@ZPAH_N@Z ?create_audio_capture@@YAJHMP6GXPBKPBEPBH_J3@Z@Z ?enable_AEC@@YAJ_N@Z ?get_audio_playback_devices@@YAJPA_WPAI@Z ?get_audio_capture_devices@@YAJPA_WPAI@Z ?get_video_devices@@YAJPAEI@Z ?shutdown_media@@YAJXZ ?get_cvc_versions@@YAJAAH0@Z ?set_vu_callback@@YAJP6GX_NPBKPBH@Z@Z ?set_xfrog_gui_strings@@YAJPAU__gui_strings@@@Z ?init_media@@YAJPA_W_N011@Z ?push_audio_data@@YAJKPAEK_J1@Z ?push_video_data@@YAJKPAEK_J1@Z ?assign_XFrog_OSD@@YAJKPA_WPAU__osdfont_desc@@@Z ?put_OSD_render@@YAJKPAEHH0HH@Z ?switch_to_fullscreen@@YAJK_N@Z ?set_volume_meter_level@@YAJPAUHWND__@@H@Z ?push_pause_video_data@@YAJK_NPADKKK@Z ?set_audio_capture_volume@@YAJM@Z ?close_audio_capture@@YAJ_N@Z ?reconnect_audio_capture@@YAJHM@Z ?set_renderer_viewport@@YAJKUtagRECT@@@Z ?set_audio_playback_volume@@YAJK_NM@Z ?get_capture_property_page_title@@YAJPA_W@Z ?assign_XFrog_Snapshot@@YAJKPAUHWND__@@_NK1K@Z

cmnet

cmnet_inet_addr shutdown_nwlayer set_callback startup_nwlayer send_udp_room_packet send_udp_p2p_packet report_server_status report_menu_item report_menu_handle report_online_status start_p2p_process unregister_udp_stream register_hlp_udp_stream register_p2p_udp_stream register_server_udp_stream send_tcp_packet unregister_tcp_stream register_tcp_stream_set

kernel32

TlsSetValue TlsGetValue TlsAlloc IsValidCodePage GetOEMCP GetACP HeapCreate IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter Sleep GetTickCount CreateThread GetCurrentThreadId DebugBreak WaitForSingleObject TerminateThread GetModuleFileNameA InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetProcAddress GetModuleHandleW lstrlenW GlobalFree GlobalAlloc RaiseException SetLastError GetCurrentProcess FlushInstructionCache GetCurrentProcessId FindResourceW SizeofResource LockResource LoadResource FreeResource FindResourceExW GetLastError GlobalHandle InterlockedDecrement InterlockedIncrement GetModuleFileNameW InitializeCriticalSectionAndSpinCount GlobalUnlock GlobalLock MulDiv lstrcmpW LocalFree FreeLibrary LoadLibraryW LocalAlloc lstrcmpiW CloseHandle GetComputerNameW CreateDirectoryW GetCurrentDirectoryW MultiByteToWideChar CreateFileW GetFileSize ReadFile DeleteFileW CopyFileW MoveFileW SetFilePointer WriteFile FlushFileBuffers CreateEventW SetEvent LoadLibraryExW WideCharToMultiByte WinExec lstrlenA LoadLibraryA GetVersionExW CreateProcessW GetTimeFormatW GetLocalTime InterlockedExchange InterlockedExchangeAdd CreateMutexW ReleaseMutex TerminateProcess VirtualQuery GetFileAttributesW GetSystemTime SetCurrentDirectoryW OpenFileMappingW MapViewOfFile TlsFree CreateSemaphoreA ReleaseSemaphore GetSystemTimeAsFileTime WaitForMultipleObjects GetFileSizeEx SetEndOfFile HeapAlloc GetProcessHeap HeapFree GetModuleHandleA GetVersion GetFileType GetStdHandle QueryPerformanceCounter GlobalMemoryStatus GetVersionExA FlushConsoleInputBuffer AreFileApisANSI LockFile LockFileEx UnlockFile UnlockFileEx GetTempPathA GetTempPathW FormatMessageA FormatMessageW GetFileAttributesA DeleteFileA GetFileAttributesExW GetFullPathNameA GetFullPathNameW GetDiskFreeSpaceA GetDiskFreeSpaceW UnmapViewOfFile CreateFileA CreateFileMappingW InterlockedCompareExchange GetDateFormatW VirtualProtect GetSystemInfo GetCommandLineW HeapSetInformation GetStartupInfoW SetConsoleCtrlHandler ReadConsoleInputA SetConsoleMode GetConsoleMode RtlUnwind GetCPInfo GetTimeFormatA GetDateFormatA CompareStringW GetConsoleCP GetLocaleInfoA EnumSystemLocalesA IsValidLocale FreeEnvironmentStringsW GetEnvironmentStringsW SetStdHandle WriteConsoleW SetEnvironmentVariableA OpenEventA ResetEvent ResumeThread SystemTimeToFileTime FindClose DeviceIoControl FindFirstFileW FindNextFileW GetFileInformationByHandle GetStringTypeExA OutputDebugStringW WritePrivateProfileStringW GetTempFileNameW SystemTimeToTzSpecificLocalTime GetPrivateProfileStringW GetTimeZoneInformation LCMapStringW LCMapStringA GetStringTypeExW CreateEventA SetHandleCount ExitProcess InterlockedPushEntrySList IsProcessorFeaturePresent VirtualFree VirtualAlloc InterlockedPopEntrySList HeapDestroy HeapReAlloc HeapSize GetStringTypeW EncodePointer DecodePointer GetLocaleInfoW GetUserDefaultLCID ExitThread FileTimeToSystemTime FileTimeToLocalFileTime GetDriveTypeW FindFirstFileExW PeekNamedPipe GetCurrentThread SetEnvironmentVariableW

user32

SetScrollInfo SetScrollPos GetClipboardData RegisterClipboardFormatW GetDlgCtrlID EnumChildWindows ShowCursor GetScrollInfo SendDlgItemMessageW GetProcessWindowStation MessageBoxA OffsetRect LockWindowUpdate IsDialogMessageW TranslateAcceleratorW PtInRect SetWindowPlacement GetWindowPlacement DrawTextW EnableWindow GetActiveWindow IsWindowVisible EnableMenuItem GetSystemMenu EndDialog MapDialogRect SetWindowContextHelpId BeginPaint EndPaint GetDlgItem GetClassNameW GetSysColor CharNextW CreateAcceleratorTableW ClientToScreen ScreenToClient SetCapture ReleaseCapture FillRect GetClientRect InvalidateRgn InvalidateRect GetDC ReleaseDC DestroyAcceleratorTable FlashWindowEx IsChild GetWindow GetForegroundWindow GetWindowTextLengthW GetWindowTextW GetWindowRect GetCursorPos SetFocus RedrawWindow SetWindowTextW ActivateKeyboardLayout GetSystemMetrics SystemParametersInfoW IsIconic IsRectEmpty GetDesktopWindow SetWindowPos MoveWindow CopyRect SetForegroundWindow ShowWindow GetParent EmptyClipboard RegisterHotKey UnregisterHotKey LoadAcceleratorsW DrawFocusRect CloseDesktop GetUserObjectInformationW OpenInputDesktop MessageBoxW IsWindowEnabled EqualRect EnumDisplaySettingsW CloseClipboard GetWindowThreadProcessId GetFocus GetAsyncKeyState CallWindowProcW GetWindowLongW SetWindowLongW CreateWindowExW LoadCursorW GetClassInfoExW RegisterClassExW PostMessageW DestroyWindow KillTimer IsWindow SetTimer DefWindowProcW RegisterWindowMessageW GetSysColorBrush OpenClipboard SetWindowsHookExW PostQuitMessage UnhookWindowsHookEx PeekMessageW TranslateMessage DispatchMessageW FindWindowW GetKeyboardLayoutList CallNextHookEx GetMessageW EndDeferWindowPos DeferWindowPos BeginDeferWindowPos BringWindowToTop GetCapture GetKeyboardLayout SetCursor DestroyCursor UpdateWindow AnimateWindow SetRect IsZoomed ShowScrollBar GetNextDlgTabItem GetKeyState GetKeyboardState SetRectEmpty GetIconInfo SetMenu MapWindowPoints GetWindowRgn SetWindowRgn GetWindowDC DrawIconEx GetAncestor EndMenu DrawEdge GetMessagePos GetMenu MonitorFromPoint MapVirtualKeyW GetKeyNameTextW GetMenuItemInfoW SetMenuItemInfoW InsertMenuW AppendMenuW ModifyMenuW GetMenuState CheckMenuItem GetMenuBarInfo GetMenuItemCount CreateMenu WindowFromPoint GetMonitorInfoW MonitorFromWindow EnumDisplayMonitors CreatePopupMenu TrackPopupMenu SetMenuInfo GetMenuStringW RemoveMenu DestroyMenu ValidateRect EnumDisplayDevicesW MonitorFromRect SetClipboardData GetCaretPos GetLastInputInfo DrawFrameControl GetDialogBaseUnits FrameRect GetComboBoxInfo DestroyIcon CreateIconIndirect UnregisterClassA LoadStringA LoadStringW wvsprintfW SetParent IntersectRect InflateRect SendMessageW SetCursorPos CreateDialogIndirectParamW

gdi32

FillRgn Polyline RestoreDC CombineRgn CreatePen Rectangle CreateRectRgnIndirect GetTextMetricsW ExtCreatePen MoveToEx PatBlt SelectPalette RealizePalette SetPolyFillMode Polygon CreatePalette SetDIBitsToDevice SetLayout CreateBitmap CreatePatternBrush CreateRectRgn LineTo SaveDC ExtTextOutW GetCurrentObject SetViewportOrgEx SetBkColor GetPixel SetTextColor SetBkMode CreateFontIndirectW SetPixel CreateDIBSection CreateRoundRectRgn CreateDCW GetTextExtentPoint32W GetClipBox CreateSolidBrush CreateCompatibleDC CreateCompatibleBitmap SelectObject DeleteObject BitBlt GetStockObject GetObjectW ExcludeClipRect DeleteDC GetDeviceCaps

comdlg32

ChooseColorW GetSaveFileNameW GetOpenFileNameW ChooseFontW

advapi32

ReportEventA DeregisterEventSource RegEnumValueW RegEnumKeyExW RegQueryInfoKeyW RegDeleteKeyW FreeSid AllocateAndInitializeSid LsaClose LsaFreeMemory LsaQueryInformationPolicy LsaOpenPolicy LogonUserW LookupAccountNameW LookupAccountSidW GetTokenInformation OpenThreadToken LsaNtStatusToWinError RegDeleteValueW RegOpenKeyExW RegSetValueExW RegQueryValueExW RegCreateKeyExW RegCloseKey RegisterEventSourceA

shell32

SHFileOperationW SHGetSpecialFolderPathW SHGetFileInfoW Shell_NotifyIconW ShellExecuteExW SHGetFolderPathW SHGetPathFromIDListW SHBrowseForFolderW SHGetMalloc ShellExecuteW

ole32

CreateStreamOnHGlobal PropVariantClear CoUninitialize CoInitializeEx CreateBindCtx CoTaskMemAlloc OleUninitialize StringFromGUID2 OleLockRunning CoCreateGuid CoTaskMemRealloc CoCreateInstance CoGetClassObject CLSIDFromProgID CLSIDFromString OleInitialize CoInitialize CoTaskMemFree

oleaut32

VariantCopy VariantChangeType VarBstrCmp VarUI4FromStr VarBstrFromDate VarDateFromStr SystemTimeToVariantTime VariantTimeToSystemTime SysAllocStringLen VariantInit VariantClear LoadTypeLi LoadRegTypeLi SysStringLen OleCreateFontIndirect SysFreeString SysAllocString

shlwapi

UrlIsW StrStrIW StrCmpIW SHStrDupW UrlUnescapeW PathFindFileNameW PathRemoveExtensionW UrlEscapeW PathRemoveFileSpecW PathIsDirectoryW

comctl32

ImageList_SetBkColor ImageList_Destroy ImageList_ReplaceIcon ImageList_Create _TrackMouseEvent InitCommonControlsEx ImageList_Draw ImageList_AddMasked ImageList_DragMove ImageList_EndDrag ImageList_DragLeave ImageList_GetIconSize ImageList_BeginDrag ImageList_DragEnter

rpcrt4

UuidToStringA RpcStringFreeA

??$void_cast_register@Utext_ts@packets@@Ubase@2@@serialization@boost@@YAABVvoid_caster@void_cast_detail@01@PBUtext_ts@packets@@PBUbase@5@@Z ??$void_cast_register@Utext_with_link_ts@packets@@Utext_ts@2@@serialization@boost@@YAABVvoid_caster@void_cast_detail@01@PBUtext_with_link_ts@packets@@PBUtext_ts@5@@Z ??0?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@QAE@XZ ??0?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@QAE@XZ ??_B?1??get_instance@?$singleton@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@serialization@boost@@CAAAV?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Ubase@packets@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UtagSubItem@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_ts@packets@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_with_link_ts@packets@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V__packet@@@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ@51 ??_B?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@51 ??_B?1??get_instance@?$singleton@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@23@XZ@51 ??_B?1??get_instance@?$singleton@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@23@XZ@51 ?get_const_instance@?$singleton@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@serialization@boost@@SAABV?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Ubase@packets@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@UtagSubItem@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Utext_ts@packets@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@Utext_with_link_ts@packets@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@serialization@boost@@SAABV?$extended_type_info_typeid@V__packet@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@SAABV?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAABV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@SAABV?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAABV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAABV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ ?get_const_instance@?$singleton@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@serialization@boost@@SAABV?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@23@XZ ?get_const_instance@?$singleton@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@serialization@boost@@SAABV?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@23@XZ ?get_instance@?$singleton@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@serialization@boost@@CAAAV?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Ubase@packets@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UtagSubItem@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_ts@packets@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_with_link_ts@packets@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@23@XZ ?get_instance@?$singleton@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V__packet@@@23@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@XZ ?get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ ?get_instance@?$singleton@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@23@XZ ?get_instance@?$singleton@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@23@XZ ?get_mutable_instance@?$singleton@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAU?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAU?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ ?get_mutable_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@SAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ ?instance@?$singleton@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAU?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@3@A ?instance@?$singleton@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAU?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@serialization@boost@@0AAV?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@3@A ?instance@?$singleton@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@Ubase@packets@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@UtagSubItem@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@Utext_ts@packets@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@Utext_with_link_ts@packets@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@23@A ?instance@?$singleton@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@serialization@boost@@0AAV?$extended_type_info_typeid@V__packet@@@23@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@0AAV?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@3@A ?instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@0AAV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@3@A ?instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@3@A ?instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@0AAV?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@0AAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@3@A ?instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@0AAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@A ?instance@?$singleton@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@serialization@boost@@0AAV?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@23@A ?instance@?$singleton@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@serialization@boost@@0AAV?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@23@A ?instantiate@?$ptr_serialization_support@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@UAEXXZ ?instantiate@?$ptr_serialization_support@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@UAEXXZ ?instantiate@?$ptr_serialization_support@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@UAEXXZ ?instantiate@?$ptr_serialization_support@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@UAEXXZ ?is_destroyed@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@SA_NXZ ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_data@?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@UBEXAAVbasic_iarchive@234@PAXI@Z ?load_object_ptr@?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@AAPAXI@Z ?load_object_ptr@?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@AAPAXI@Z ?load_object_ptr@?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@EBEXAAVbasic_iarchive@234@AAPAXI@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_data@?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@UBEXAAVbasic_oarchive@234@PBX@Z ?save_object_ptr@?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z ?save_object_ptr@?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z ?save_object_ptr@?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@EBEXAAVbasic_oarchive@234@PBX@Z ?t@?1??get_instance@?$singleton@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@U?$guid_initializer@Utext_ts@packets@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAU?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@U?$guid_initializer@Utext_with_link_ts@packets@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@serialization@boost@@CAAAV?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$archive_serializer_map@Vbinary_oarchive@archive@boost@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@boost@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@U?$serialization_version@UtagSubItem@@@detail@multi_index@boost@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Ubase@packets@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@Ubase@packets@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@UtagSubItem@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@UtagSubItem@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_ts@packets@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@Utext_ts@packets@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@Utext_with_link_ts@packets@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@Utext_with_link_ts@packets@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@boost@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@serialization@boost@@CAAAV?$extended_type_info_typeid@V__packet@@@34@XZ@4V?$singleton_wrapper@V?$extended_type_info_typeid@V__packet@@@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$iserializer@Vbinary_iarchive@archive@boost@@V__packet@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vbinary_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@CAAAV?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@4@XZ@4V?$singleton_wrapper@V?$map@Vnaked_binary_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@734@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PBVextended_type_info@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$multiset@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$index_node_base@UtagSubItem@@V?$allocator@UtagSubItem@@@std@@@detail@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@U?$serialization_version@UtagSubItem@@@detail@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@UtagSubItem@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V?$multi_index_container@UtagSubItem@@U?$indexed_by@U?$ordered_unique@U?$member@UtagSubItem@@K$0A@@multi_index@boost@@Una@mpl@3@U453@@multi_index@boost@@U?$ordered_unique@U?$member@UtagSubItem@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$03@multi_index@boost@@Uci_less_w@@Una@mpl@3@@23@Una@mpl@3@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@U563@@multi_index@boost@@V?$allocator@UtagSubItem@@@std@@@multi_index@3@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@serialization@boost@@CAAAV?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$oserializer@Vbinary_oarchive@archive@boost@@V__packet@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_iserializer@Vbinary_iarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Ubase@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@serialization@boost@@CAAAV?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@4@XZ@4V?$singleton_wrapper@V?$pointer_oserializer@Vbinary_oarchive@archive@boost@@Utext_with_link_ts@packets@@@detail@archive@boost@@@634@A ?t@?1??get_instance@?$singleton@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@serialization@boost@@CAAAV?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@XZ@4V?$singleton_wrapper@V?$set@PBVvoid_caster@void_cast_detail@serialization@boost@@Uvoid_caster_compare@234@V?$allocator@PBVvoid_caster@void_cast_detail@serialization@boost@@@std@@@std@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@34@XZ@4V?$singleton_wrapper@V?$void_caster_primitive@Utext_ts@packets@@Ubase@2@@void_cast_detail@serialization@boost@@@detail@34@A ?t@?1??get_instance@?$singleton@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@serialization@boost@@CAAAV?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@34@XZ@4V?$singleton_wrapper@V?$void_caster_primitive@Utext_with_link_ts@packets@@Utext_ts@2@@void_cast_detail@serialization@boost@@@detail@34@A

Name

.text

Size

4.1MB

Virtual Size

4.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

884KB

Virtual Size

883KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

96KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

7.9MB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

286KB

Virtual Size

285KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

CamfrogHandler.exe

IMPHASH e6ea1fe88e8d8c3044715552b645f532
SHA256 612b13e58da84b024e47bcbb347bfa9f41337463bc726b1f9e5a41cd46294c0e
MD5 a9eb522b48dac97da21bcaba0152a87d
SHA1 df71faa2f0737d940910cf7a1589ce61e561590a
SHA512 7b8a9a260ef71f69644b9de724070c180cbed1b94bd5dd103753ffc01b5ca859c9304295f16f433ddc2cacfe602431524ea5e11455470b30f5d9e6443bc02a6a
SSDEEP 768:eF8YucsXbLuABkRnF4f1SmpqhoC1kkQ7iED8uOnGw33+MZU9x4F+IL+bCzb:4zsLL3kRFA1hko2kVWuYR+My4F+IqCzb
TLSH
T1CF73F41236508071F72A0B305865F1E04A6BAD395AE4E18FF67C7E7A2E712C31A7725F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

95:f0:a1:1b:63:8d:1e:c3:1e:63:72:75:06:69:eb:cf:00:be:5e:ca

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

May 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

1

Major OS version

5

Entry point

10964

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

X:\prj\cf.new\cf2010\installer\src\CamfrogHandler\!Output\CamfrogHandler.pdb

CamfrogNET.exe

IMPHASH d720ec723b01ea27379f7259b9ab2736
SHA256 2c864096047a69745e8e723073c73937d36f468743c97a11e26d7c37907c1f4c
MD5 cc61edf8c5c24315e5d0409f56aff6af
SHA1 ebd76899efc56c7bc46d4dabca76aed8b91a912b
SHA512 6c196480571c367265fe9219d75766db8c1d1994eda7b9ef732898fe558019fbf652974aa9935a6a3e3016251521a9784ff50f96ebdf28c43c7e2dbf3131970c
SSDEEP 768:vLNRC/QYdyySsH9fvh6mGj1pd78e2l5fniIP/CC8bTP/L+bCzyy:vLQQkyySshvhZs1DClvz8bTP/qCzyy
TLSH
T14A336D13BA906032DC564A7040AADA026B37BD0517F095834B643D9B7F733E0AF7A35B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7f:a3:56:75:b8:4d:c5:66:41:65:3a:27:c0:ad:08:f0:8a:33:1f:4b

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Dec 16, 2010

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

4

Entry point

5792

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

x:\prj\cf\Installer\src\CamfrogNET\Release\CamfrogNET.pdb

wininet

InternetGetConnectedState

user32

LoadStringA LoadAcceleratorsA GetMessageA TranslateAcceleratorA TranslateMessage DispatchMessageA LoadCursorA RegisterClassExA DestroyMenu PostQuitMessage SetTimer CreatePopupMenu InsertMenuItemA LoadIconA DefWindowProcA GetCursorPos SetForegroundWindow TrackPopupMenu PostMessageA KillTimer DestroyWindow CreateWindowExA ShowWindow

shell32

Shell_NotifyIconA ShellExecuteA

kernel32

GetModuleFileNameA GetSystemInfo VirtualProtect GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW MultiByteToWideChar LCMapStringA HeapSize HeapReAlloc VirtualAlloc HeapAlloc GetCPInfo GetOEMCP GetACP VirtualQuery InterlockedExchange RtlUnwind LoadLibraryA HeapFree VirtualFree HeapCreate HeapDestroy GetFileType SetHandleCount GetEnvironmentStringsW GetLastError ExitProcess GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersionExA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime GetProcAddress TerminateProcess GetCurrentProcess WriteFile GetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte

CrashSender.exe

IMPHASH 6ae846b9423f216093cc601927c65b75
SHA256 e16ecf100ca69de38fb1a2a662d1578c65c8c6d72bf80fa450ce9ef9b270db8d
MD5 b997fab9e53f9291eb3be1d5a853d0a4
SHA1 34886ef7a939c96e653ff59851f6a16bcb8e623e
SHA512 5e138f9eb77dcf1de5b240f5ac02b732e863b69639efa55c90a8dc9043b72c36b5ec6e137f55cc8eef5eef0f357dc0e3535a0262af721e38f89222bdd7211453
SSDEEP 24576:G2/h6PqcT6z1pHJ6QTXhyxkcILJElTypV5:ZcBT6z1pHJzTXgxkvJCTm5
TLSH
T12A059D21BAD0E037D1B717708629A7665EBEB6312835951FA7CC0F3C6E706C1DA24B27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

487000

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\lib\CrashRpt_v.1.2.10_r1203\bin\CrashSender.pdb

psapi

GetProcessMemoryInfo

ws2_32

WSASetLastError WSACleanup inet_addr WSAGetLastError gethostbyname inet_ntoa htonl socket connect closesocket send recv WSAStartup getservbyport ntohs gethostbyaddr htons getservbyname

dnsapi

DnsQuery_W DnsFree

wininet

HttpSendRequestExW InternetOpenW HttpEndRequestW InternetReadFile InternetWriteFile InternetConnectW HttpOpenRequestW InternetCloseHandle

rpcrt4

RpcStringFreeA UuidToStringA

gdi32

CreateDCW GetDIBits TextOutW CreateFontW CreateRectRgn SelectClipRgn BitBlt SelectPalette RealizePalette SetStretchBltMode StretchBlt SetViewportOrgEx SetDIBits SetLayout DeleteObject SelectObject GetObjectW SetBkMode SetTextColor DeleteDC CreateFontIndirectW GetStockObject CreateCompatibleDC CreateCompatibleBitmap CreatePen Polygon CreateSolidBrush SetBkColor CreateHalftonePalette CreatePalette GetDIBColorTable

shell32

SHFileOperationW ExtractIconW ShellExecuteW CommandLineToArgvW SHGetFileInfoW Shell_NotifyIconW SHGetSpecialFolderPathW

comdlg32

GetOpenFileNameW GetSaveFileNameW

version

GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

kernel32

IsDebuggerPresent GetCPInfo GetACP HeapReAlloc GetConsoleCP GetConsoleMode PeekNamedPipe GetFileType GetCurrentDirectoryW SetCurrentDirectoryW SetFilePointer SetHandleCount QueryPerformanceCounter GetTickCount SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCurrentThread TlsFree TlsSetValue TlsGetValue TlsAlloc GetCurrentProcessId LCMapStringW SetConsoleCtrlHandler GetLocaleInfoW GetStdHandle HeapSize GetTimeZoneInformation lstrlenW InterlockedDecrement OpenFileMappingW CreateFileMappingW CloseHandle UnmapViewOfFile MapViewOfFile InterlockedIncrement GetSystemInfo GetCurrentProcess FreeLibrary GetProcAddress LoadLibraryW WritePrivateProfileStringW SystemTimeToFileTime GetUserDefaultLCID InterlockedExchange lstrlenA DebugBreak OutputDebugStringW GetModuleFileNameW GetTempFileNameW GetTempPathW SystemTimeToTzSpecificLocalTime GetPrivateProfileStringW GlobalFree FormatMessageW GlobalAlloc GetFileAttributesW GetLastError CreateDirectoryW SetEvent WaitForSingleObject EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection ResetEvent CreateEventW lstrcpyW FindNextFileW FindClose SetLastError GetFullPathNameW FindFirstFileW WideCharToMultiByte GetSystemTime FileTimeToSystemTime GetProcessTimes OpenProcess GetFileSizeEx CreateFileW RaiseException FlushInstructionCache GetCurrentThreadId lstrcmpiW MulDiv CompareStringW lstrcmpW SizeofResource LoadResource FindResourceW LoadLibraryExW CreateMutexW GetCommandLineW GetVersionExW lstrcpynW CreateProcessW ReadFile GetFileInformationByHandle WriteFile CreateThread InitializeCriticalSection GlobalUnlock GlobalLock GetProcessId LoadLibraryA GetSystemDirectoryA ExitProcess GetStartupInfoW HeapSetInformation FindFirstFileExW GetLocaleInfoA GetDriveTypeW FileTimeToLocalFileTime DecodePointer EncodePointer GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime RtlUnwind InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedPushEntrySList InterlockedCompareExchange FlushFileBuffers GetFileAttributesA CreateFileA MultiByteToWideChar SetEnvironmentVariableW EnumSystemLocalesA IsValidLocale SetStdHandle WriteConsoleW SetEndOfFile SetEnvironmentVariableA GetFullPathNameA GetModuleHandleW IsValidCodePage GetStringTypeW HeapCreate HeapDestroy FreeEnvironmentStringsW GetEnvironmentStringsW FatalAppExitA Sleep GetOEMCP

user32

CheckMenuRadioItem SetMenuItemInfoW DestroyMenu GetMonitorInfoW MonitorFromPoint MonitorFromWindow LoadMenuW TrackPopupMenu GetSubMenu GetActiveWindow DrawIcon DrawTextExW GetIconInfo GetMenu SetTimer KillTimer EnableWindow IsDialogMessageW AdjustWindowRectEx CopyRect LoadIconW PostQuitMessage DialogBoxParamW PostMessageW GetScrollInfo SetScrollInfo CharUpperW DrawTextExA AnimateWindow EnableMenuItem OpenClipboard CloseClipboard SetClipboardData EmptyClipboard GetSystemMetrics GetWindowThreadProcessId EnumWindows IntersectRect EnumDisplayMonitors GetCursorInfo GetSysColor GetFocus OffsetRect GetCapture ReleaseCapture DeleteMenu EndPaint BeginPaint GetCursorPos SetCursor DrawFocusRect FillRect DrawTextW PtInRect CallWindowProcW IsWindow GetDlgCtrlID GetParent SetFocus SetCapture IsWindowEnabled UpdateWindow ScreenToClient GetWindowTextLengthW GetWindowTextW SetWindowTextW CreateWindowExW DestroyWindow SetRectEmpty GetDlgItem RedrawWindow IsWindowVisible ShowWindow InvalidateRect SendMessageW SetWindowPos DefWindowProcW PeekMessageW GetMessageW TranslateMessage DispatchMessageW DestroyIcon GetGuiResources CharNextW GetWindowLongW SetWindowLongW GetDC GetClientRect GetWindowRect MoveWindow GetWindow LoadStringW wvsprintfW EndDialog MessageBoxW SetProcessDefaultLayout LoadImageW GetDesktopWindow GetSysColorBrush CreateDialogParamW GetKeyState GetClassNameW ReleaseDC LoadCursorW MapWindowPoints UnregisterClassA

advapi32

RegOpenKeyExW RegCloseKey RegEnumValueW RegEnumKeyExW RegQueryInfoKeyW RegSetValueExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegQueryValueExW

ole32

CoUninitialize CoTaskMemFree CoCreateInstance CoTaskMemRealloc CoTaskMemAlloc CoCreateGuid CoInitialize

oleaut32

VarDateFromStr VarI4FromStr VarR8FromStr VarDecFromStr VarDecCmp SysFreeString VarUI4FromStr

comctl32

InitCommonControlsEx ImageList_Create ImageList_ReplaceIcon _TrackMouseEvent

D3DX9_43.dll

IMPHASH 5fb75b2a87c1fa7cc3d7904a0b97084a
SHA256 0b28546be22c71834501f7d7185ede5d79742457331c7ee09efc14490dd64f5f
MD5 86e39e9161c3d930d93822f1563c280d
SHA1 f5944df4142983714a6d9955e6e393d9876c1e11
SHA512 0a3e311c4fd5c2194a8807469e47156af35502e10aeb8a3f64a01ff802cd8669c7e668cc87b593b182fd830a126d002b5d5d7b6c77991158bffdb0b5b997f6b3
SSDEEP 24576:8UtU6OIyl2Wy9M3bJ45fPS0zFZghQ6aOiFaKOE31GrvFXl74YZ29X1MDd6olmrBs:8566l2u45BiNYFrz31Cv3D29kd6kWa
TLSH
T14895AF51C5191075FDE69030110D32B2219C9B316391ABCF665E2ED9FFB8BE1EAB8387
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

9b:28:ef:17:5d:cd:b3:d3:ec:10:d1:6d:64:92:d2:24:02:c3:2b:3e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 22, 2010

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

2e:ab:11:dc:50:ff:5c:9d:cb:c0

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Aug 22, 2007 - Aug 25, 2012

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:01:cf:3e:00:00:00:00:00:0f

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Dec 7, 2009 - Mar 7, 2011

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 16, 2006 - Sep 15, 2019

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:06:94:2d:00:00:00:00:00:09

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 25, 2008 - Jul 25, 2013

Minor OS version

1

Major OS version

6

Entry point

1829901

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d3dx9_43.pdb

msvcrt

_isatty _write _lseeki64 __pioinfo __badioinfo wctomb _itoa _snprintf _fileno isleadbyte ?terminate@@YAXXZ _onexit _lock __dllonexit _unlock _amsg_exit _initterm _XcptFilter srand strtod fread fflush fwrite abort _tempnam exit isalpha atof atol isxdigit _ultoa wcstombs _CIexp _isnan rand atoi isalnum floor _strtime _strdate sscanf isspace isdigit _setjmp3 longjmp ldexp frexp calloc realloc _CIlog setlocale _strdup free _clearfp ceil _controlfp malloc _CIatan _CIcos _CIasin _finite _CIsin _CIatan2 _CIacos memmove qsort _CIfmod _purecall _stricmp modf iswspace iswalpha iswdigit iswpunct _CIsqrt memcpy memset _CIpow ??2@YAPAXI@Z ??3@YAXPAX@Z _iob _vsnprintf _vsnwprintf _errno __CxxFrameHandler

gdi32

GetTextMetricsA GetObjectA GetGlyphOutlineA CreateDIBSection DeleteDC DeleteObject SelectObject GetCharacterPlacementW GetCharacterPlacementA SetTextColor SetBkColor SetBkMode GetTextMetricsW GetFontLanguageInfo CreateFontIndirectA CreateFontIndirectW SetTextAlign SetMapMode CreateCompatibleDC ExtTextOutA MoveToEx ExtTextOutW TranslateCharsetInfo GetCurrentObject GetOutlineTextMetricsA GetGlyphOutlineW GetObjectW

kernel32

DeleteFileW SetFilePointer GetFileSize CreateFileMappingA MapViewOfFile UnmapViewOfFile FindResourceA LoadResource LockResource SizeofResource FreeResource CompareStringA LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection FormatMessageA LocalFree CreateFileW GetFileSizeEx GetFullPathNameW GetLastError IsDBCSLeadByte WriteFile GetTempPathA MoveFileA CreateFileA ReadFile CloseHandle DeleteFileA InterlockedDecrement InterlockedIncrement IsProcessorFeaturePresent VirtualFree GetACP WideCharToMultiByte MultiByteToWideChar OutputDebugStringA GetModuleHandleA FreeLibrary LoadLibraryA GetVersionExA GetSystemInfo GetProcAddress VirtualAlloc GetProcessHeap HeapFree HeapAlloc DisableThreadLibraryCalls MoveFileW GetTempFileNameW GlobalMemoryStatus SetEndOfFile ExpandEnvironmentStringsA IsBadCodePtr IsBadReadPtr IsBadWritePtr WaitForSingleObject ReleaseMutex CreateMutexA Sleep InterlockedExchange InterlockedCompareExchange RtlUnwind QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter GetVersion GetTempFileNameA FindResourceW

advapi32

RegOpenKeyA RegQueryValueExA RegCloseKey

D3DXAssembleShader D3DXAssembleShaderFromFileA D3DXAssembleShaderFromFileW D3DXAssembleShaderFromResourceA D3DXAssembleShaderFromResourceW D3DXBoxBoundProbe D3DXCheckCubeTextureRequirements D3DXCheckTextureRequirements D3DXCheckVersion D3DXCheckVolumeTextureRequirements D3DXCleanMesh D3DXColorAdjustContrast D3DXColorAdjustSaturation D3DXCompileShader D3DXCompileShaderFromFileA D3DXCompileShaderFromFileW D3DXCompileShaderFromResourceA D3DXCompileShaderFromResourceW D3DXComputeBoundingBox D3DXComputeBoundingSphere D3DXComputeIMTFromPerTexelSignal D3DXComputeIMTFromPerVertexSignal D3DXComputeIMTFromSignal D3DXComputeIMTFromTexture D3DXComputeNormalMap D3DXComputeNormals D3DXComputeTangent D3DXComputeTangentFrame D3DXComputeTangentFrameEx D3DXConcatenateMeshes D3DXConvertMeshSubsetToSingleStrip D3DXConvertMeshSubsetToStrips D3DXCreateAnimationController D3DXCreateBox D3DXCreateBuffer D3DXCreateCompressedAnimationSet D3DXCreateCubeTexture D3DXCreateCubeTextureFromFileA D3DXCreateCubeTextureFromFileExA D3DXCreateCubeTextureFromFileExW D3DXCreateCubeTextureFromFileInMemory D3DXCreateCubeTextureFromFileInMemoryEx D3DXCreateCubeTextureFromFileW D3DXCreateCubeTextureFromResourceA D3DXCreateCubeTextureFromResourceExA D3DXCreateCubeTextureFromResourceExW D3DXCreateCubeTextureFromResourceW D3DXCreateCylinder D3DXCreateEffect D3DXCreateEffectCompiler D3DXCreateEffectCompilerFromFileA D3DXCreateEffectCompilerFromFileW D3DXCreateEffectCompilerFromResourceA D3DXCreateEffectCompilerFromResourceW D3DXCreateEffectEx D3DXCreateEffectFromFileA D3DXCreateEffectFromFileExA D3DXCreateEffectFromFileExW D3DXCreateEffectFromFileW D3DXCreateEffectFromResourceA D3DXCreateEffectFromResourceExA D3DXCreateEffectFromResourceExW D3DXCreateEffectFromResourceW D3DXCreateEffectPool D3DXCreateFontA D3DXCreateFontIndirectA D3DXCreateFontIndirectW D3DXCreateFontW D3DXCreateKeyframedAnimationSet D3DXCreateLine D3DXCreateMatrixStack D3DXCreateMesh D3DXCreateMeshFVF D3DXCreateNPatchMesh D3DXCreatePMeshFromStream D3DXCreatePRTBuffer D3DXCreatePRTBufferTex D3DXCreatePRTCompBuffer D3DXCreatePRTEngine D3DXCreatePatchMesh D3DXCreatePolygon D3DXCreateRenderToEnvMap D3DXCreateRenderToSurface D3DXCreateSPMesh D3DXCreateSkinInfo D3DXCreateSkinInfoFVF D3DXCreateSkinInfoFromBlendedMesh D3DXCreateSphere D3DXCreateSprite D3DXCreateTeapot D3DXCreateTextA D3DXCreateTextW D3DXCreateTexture D3DXCreateTextureFromFileA D3DXCreateTextureFromFileExA D3DXCreateTextureFromFileExW D3DXCreateTextureFromFileInMemory D3DXCreateTextureFromFileInMemoryEx D3DXCreateTextureFromFileW D3DXCreateTextureFromResourceA D3DXCreateTextureFromResourceExA D3DXCreateTextureFromResourceExW D3DXCreateTextureFromResourceW D3DXCreateTextureGutterHelper D3DXCreateTextureShader D3DXCreateTorus D3DXCreateVolumeTexture D3DXCreateVolumeTextureFromFileA D3DXCreateVolumeTextureFromFileExA D3DXCreateVolumeTextureFromFileExW D3DXCreateVolumeTextureFromFileInMemory D3DXCreateVolumeTextureFromFileInMemoryEx D3DXCreateVolumeTextureFromFileW D3DXCreateVolumeTextureFromResourceA D3DXCreateVolumeTextureFromResourceExA D3DXCreateVolumeTextureFromResourceExW D3DXCreateVolumeTextureFromResourceW D3DXDebugMute D3DXDeclaratorFromFVF D3DXDisassembleEffect D3DXDisassembleShader D3DXFVFFromDeclarator D3DXFileCreate D3DXFillCubeTexture D3DXFillCubeTextureTX D3DXFillTexture D3DXFillTextureTX D3DXFillVolumeTexture D3DXFillVolumeTextureTX D3DXFilterTexture D3DXFindShaderComment D3DXFloat16To32Array D3DXFloat32To16Array D3DXFrameAppendChild D3DXFrameCalculateBoundingSphere D3DXFrameDestroy D3DXFrameFind D3DXFrameNumNamedMatrices D3DXFrameRegisterNamedMatrices D3DXFresnelTerm D3DXGenerateOutputDecl D3DXGeneratePMesh D3DXGetDeclLength D3DXGetDeclVertexSize D3DXGetDriverLevel D3DXGetFVFVertexSize D3DXGetImageInfoFromFileA D3DXGetImageInfoFromFileInMemory D3DXGetImageInfoFromFileW D3DXGetImageInfoFromResourceA D3DXGetImageInfoFromResourceW D3DXGetPixelShaderProfile D3DXGetShaderConstantTable D3DXGetShaderConstantTableEx D3DXGetShaderInputSemantics D3DXGetShaderOutputSemantics D3DXGetShaderSamplers D3DXGetShaderSize D3DXGetShaderVersion D3DXGetVertexShaderProfile D3DXIntersect D3DXIntersectSubset D3DXIntersectTri D3DXLoadMeshFromXA D3DXLoadMeshFromXInMemory D3DXLoadMeshFromXResource D3DXLoadMeshFromXW D3DXLoadMeshFromXof D3DXLoadMeshHierarchyFromXA D3DXLoadMeshHierarchyFromXInMemory D3DXLoadMeshHierarchyFromXW D3DXLoadPRTBufferFromFileA D3DXLoadPRTBufferFromFileW D3DXLoadPRTCompBufferFromFileA D3DXLoadPRTCompBufferFromFileW D3DXLoadPatchMeshFromXof D3DXLoadSkinMeshFromXof D3DXLoadSurfaceFromFileA D3DXLoadSurfaceFromFileInMemory D3DXLoadSurfaceFromFileW D3DXLoadSurfaceFromMemory D3DXLoadSurfaceFromResourceA D3DXLoadSurfaceFromResourceW D3DXLoadSurfaceFromSurface D3DXLoadVolumeFromFileA D3DXLoadVolumeFromFileInMemory D3DXLoadVolumeFromFileW D3DXLoadVolumeFromMemory D3DXLoadVolumeFromResourceA D3DXLoadVolumeFromResourceW D3DXLoadVolumeFromVolume D3DXMatrixAffineTransformation D3DXMatrixAffineTransformation2D D3DXMatrixDecompose D3DXMatrixDeterminant D3DXMatrixInverse D3DXMatrixLookAtLH D3DXMatrixLookAtRH D3DXMatrixMultiply D3DXMatrixMultiplyTranspose D3DXMatrixOrthoLH D3DXMatrixOrthoOffCenterLH D3DXMatrixOrthoOffCenterRH D3DXMatrixOrthoRH D3DXMatrixPerspectiveFovLH D3DXMatrixPerspectiveFovRH D3DXMatrixPerspectiveLH D3DXMatrixPerspectiveOffCenterLH D3DXMatrixPerspectiveOffCenterRH D3DXMatrixPerspectiveRH D3DXMatrixReflect D3DXMatrixRotationAxis D3DXMatrixRotationQuaternion D3DXMatrixRotationX D3DXMatrixRotationY D3DXMatrixRotationYawPitchRoll D3DXMatrixRotationZ D3DXMatrixScaling D3DXMatrixShadow D3DXMatrixTransformation D3DXMatrixTransformation2D D3DXMatrixTranslation D3DXMatrixTranspose D3DXOptimizeFaces D3DXOptimizeVertices D3DXPlaneFromPointNormal D3DXPlaneFromPoints D3DXPlaneIntersectLine D3DXPlaneNormalize D3DXPlaneTransform D3DXPlaneTransformArray D3DXPreprocessShader D3DXPreprocessShaderFromFileA D3DXPreprocessShaderFromFileW D3DXPreprocessShaderFromResourceA D3DXPreprocessShaderFromResourceW D3DXQuaternionBaryCentric D3DXQuaternionExp D3DXQuaternionInverse D3DXQuaternionLn D3DXQuaternionMultiply D3DXQuaternionNormalize D3DXQuaternionRotationAxis D3DXQuaternionRotationMatrix D3DXQuaternionRotationYawPitchRoll D3DXQuaternionSlerp D3DXQuaternionSquad D3DXQuaternionSquadSetup D3DXQuaternionToAxisAngle D3DXRectPatchSize D3DXSHAdd D3DXSHDot D3DXSHEvalConeLight D3DXSHEvalDirection D3DXSHEvalDirectionalLight D3DXSHEvalHemisphereLight D3DXSHEvalSphericalLight D3DXSHMultiply2 D3DXSHMultiply3 D3DXSHMultiply4 D3DXSHMultiply5 D3DXSHMultiply6 D3DXSHPRTCompSplitMeshSC D3DXSHPRTCompSuperCluster D3DXSHProjectCubeMap D3DXSHRotate D3DXSHRotateZ D3DXSHScale D3DXSaveMeshHierarchyToFileA D3DXSaveMeshHierarchyToFileW D3DXSaveMeshToXA D3DXSaveMeshToXW D3DXSavePRTBufferToFileA D3DXSavePRTBufferToFileW D3DXSavePRTCompBufferToFileA D3DXSavePRTCompBufferToFileW D3DXSaveSurfaceToFileA D3DXSaveSurfaceToFileInMemory D3DXSaveSurfaceToFileW D3DXSaveTextureToFileA D3DXSaveTextureToFileInMemory D3DXSaveTextureToFileW D3DXSaveVolumeToFileA D3DXSaveVolumeToFileInMemory D3DXSaveVolumeToFileW D3DXSimplifyMesh D3DXSphereBoundProbe D3DXSplitMesh D3DXTessellateNPatches D3DXTessellateRectPatch D3DXTessellateTriPatch D3DXTriPatchSize D3DXUVAtlasCreate D3DXUVAtlasPack D3DXUVAtlasPartition D3DXValidMesh D3DXValidPatchMesh D3DXVec2BaryCentric D3DXVec2CatmullRom D3DXVec2Hermite D3DXVec2Normalize D3DXVec2Transform D3DXVec2TransformArray D3DXVec2TransformCoord D3DXVec2TransformCoordArray D3DXVec2TransformNormal D3DXVec2TransformNormalArray D3DXVec3BaryCentric D3DXVec3CatmullRom D3DXVec3Hermite D3DXVec3Normalize D3DXVec3Project D3DXVec3ProjectArray D3DXVec3Transform D3DXVec3TransformArray D3DXVec3TransformCoord D3DXVec3TransformCoordArray D3DXVec3TransformNormal D3DXVec3TransformNormalArray D3DXVec3Unproject D3DXVec3UnprojectArray D3DXVec4BaryCentric D3DXVec4CatmullRom D3DXVec4Cross D3DXVec4Hermite D3DXVec4Normalize D3DXVec4Transform D3DXVec4TransformArray D3DXWeldVertices

Help/camfrogclient.html

SHA256 21f6931fdde6cd0de7cbc26f9ad4118f0ac667c008bc9da30835e1f05959f057
MD5 8725398f1c8b42191a5694ba4c4af74d
SHA1 5004434065b57a187966871a6fd610238e96f03c
SHA512 298371902eeccb9eb32e0c86fde3a154603f15e1c6f45c844e82402dcffad92b33a9252aff884a90085b79d5cb6cdba760b0ead4027b449ce86e20aafeb1bdce
SSDEEP 192:SosXDLjm6CmRW7kCF7PmEU9cL6bUioyNzqGDueV4UB6zZlFcws+:SLzOkC9ZzgipwDUyws+
TLSH
T16362649BF25111561933003F372B7B99FB69918F31091462781F106BAFF59A787A3BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Help/common_user_bg.jpg

SHA256 f2af9f1287414f5309da70a53d19bf5fbbde9ee23436232535ddf0605c25377c
MD5 3c937022ee27b76056bcf169ff9552f9
SHA1 ba8a43f973656ed4bf503f4bfda8a61690b70c6f
SHA512 56778715dd14fa0c0b6bfb7c99d0fbbb7d8d200aac3c5199f0410dd630fa43e92de6227c256dee35af84dea95c92d8e7411e51351f89de6f6704344225d1bbb2
SSDEEP 768:03jMKnO/S6ITL4z5Uysdo8FFzmes4K9p66U7c9+jKvmOAIZ6YKXQt:04KnOvi4lUyGdFzq4KW6i+/APDQ
TLSH
T1934301929FBA6AC1F4785633E210AF76E05EEFC9D2D6554030FB1E18B34113A2B5105A
MD5 SHA1 SHA512 SSDEEP TLSH

Help/favicon.ico

SHA256 d4f3948871cae8b3d3dd12b73794e508b4610e17262bfef922aeb11fff7b2a36
MD5 dd87fbde9820788c04013ad30461716e
SHA1 705972eefa5959d7be3afc7f95aec8f13ec09019
SHA512 511a1d7915669b9c0b4039b4c89264b26f68eb9e43ada97fae915aec3791fa66c2c29aae089bd090b34878f740c52be347a113420bccc2f841137646f8dbbf1a
TLSH
T1F451285F1A35EC44E851C4B541DB58AD0178ED931A9DFA8324C07E9A3A37FEEF51201E
MD5 SHA1 SHA512 TLSH

Help/footer_bg.jpg

SHA256 2bafe6b335aba6b8e3696918f257777c0cd38f3b6d3ed261aafc9cfa761a5cfe
MD5 1534c07f274549fb9ef7abae91a4636d
SHA1 f7d217147bf7848621b01e2c787d3bd40ed0a925
SHA512 87296cf6e6008a3333351eb9645d4441a14684984719c3a754b7c8d078dc58ae680d379368a1386b6902b584d8ebaeeea932cfe32e47e6e757089e236520d4c7
TLSH
T16171B52E4F709F02C4F00372BD337358AA14BB9AD6EF925D31F538458A586E839E8488
MD5 SHA1 SHA512 TLSH

Help/style.css

SHA256 f02f34ad5d28e7af1d31489c3feffa5f4aae0ab63c7aae2a2842c487d8b0e75a
MD5 5aea409c4a1a500bc3aac47998917d83
SHA1 93d40b78ecf1002a0c3ec43716587753dcd24960
SHA512 d742c7ca3acf585e0e06dd525b45d218d48a04b4eb4933418eb5ce722e5734836572d54fc1031382bc8b943b677da7ab9bc1e993ab4af0d4ca50be80f219a51f
TLSH
T1CC51ED99DFC6200EB32F9A98F7B25B41DF1444631B0B8238B6E53361E69083876B53DC
MD5 SHA1 SHA512 TLSH

Lang/Arabic.lang

SHA256 a743e823536d0034976f132f0f732f378d8c3987b481eda6ee73fc21745731d7
MD5 9207a05e71a47cada6fc4159a7ab3075
SHA1 77b599d41b1719a663a229d9047e73ab2d898b49
SHA512 239362bba626c4c79dcb4b05a3b62f6ed1023a81e5794625f5e2134f391f97fef20c9dbb474b76d5e967c5ee7c2cf4c2c2c9104d480bbbd3c5fbe85cef089169
SSDEEP 384:FKWKYDR6hbmgjCa7VnYHLJ7LGnS1eL8ncblOf4ui4bQZuZD0x8AhmJ0Or5cM7Hdl:OYaea7VnYHlvGdccblOf4u8ZuZDgYJ0y
TLSH
T15EA2E1E76B10D45E3CE99840B254854F5BDC4CC24BF13E2D074AD51C3BAA31A27AF9A7
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Bosnian.lang

SHA256 c2b11d5aa8b1dab66909fa6a3f5f0e35f476e8cac7e519e8f38c74ff793c1e45
MD5 77dbbe4da5e90799073e7a2fc9499efd
SHA1 adfa57a0125b3a7f2bc4e3091dfe2265270c9929
SHA512 f8fc172b5e1252d4ba86a01746182413b9f2af6fccd3c7705b73e84059f6b90d5d9864aec4db230d4cf0400b5608ba39b0f853a148b393fb91af6323ec579973
SSDEEP 384:sfKvIJHqRm3KJaIHqE6CpeyKv6pWxRK3VlMqiCQlK0jCtBoTY108jaB3:sSvIIRm3KJ7HHpzKvkWKvfUs0OtB510/
TLSH
T19092E128D135AE067E0ABA3B7E60CDB32D728E99B6ED3081885857DE64914C3DC21AC5
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Bulgarian.lang

SHA256 fac4cf840ea37169ff1e46e56865d27c299623852ddf610637c5aefa6f212788
MD5 a8a24b87d72e67cc0465bcd1003873c0
SHA1 dc52b82a12c3d1f308a3b9d7c5e57725c2bc78c5
SHA512 8ef1bc83bb565d4c66fd7c07623c7b1ca0f358737c583acf3fe0260b6a2675254ffba6076322db1194e3f8dc57979af4c7a037de73915954e58abf8aef892fc8
SSDEEP 384:IWoXiU4E3zYqUcvCN+Lkvdq/cuqhL4E8M0Y4Ie45sqfeYz8Y2qz+25t+:I4U4E3t3KNljuE4Eo4GAz8md3+
TLSH
T18DB2E1ACA8128CDD73A9EB1626FEF666F8C61B73C1D971119F7FE08830A005D4C97159
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Chinese_Simplified.lang

SHA256 b5adfae9dc04bfd83fa7af6eb16d0d1b73901a88de15619e7dfa4a5c4cc4cb7a
MD5 75dcf4480c253b2c81cdde6f334e36c6
SHA1 9554beb28826b85fae95fbdeb192e971ae764e0f
SHA512 725e5ae13b3d5497f95f63cb2f2b36501eb3928cfdb7885b4e155b91eb56ffe3459c2586c4a9f2bdb0127d5991230ee8f32801f571b41cf1854d6a1d87cf1441
SSDEEP 384:/jsIkjOChZ/+fSbd+5d7EAPFRclMOwrbsQ5P1BCa+vFEbHNwiPu:cOK/+F5d7btulMOyX5P1BCa+vFEaiPu
TLSH
T13592E08DD2E5FC12A042F22C544248BB0B9B6D20992EF59B3F4D6DF31F71796F41A421
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Chinese_Traditional.lang

SHA256 1588271a6f346d592067dc571a0d5f73bc46e89c5c42b3870ef8dcd37d931580
MD5 c530137c7892a9708b4e4fba3360dbbd
SHA1 f48210d49e4a954a54a4eddb890a264d5780aa6d
SHA512 141e7af20279f4d6b652409c418a6c0a8388f56dfb7f4342b4e7ceb55d2096184b6e6c2f8596f3316a61f1d84f78b43e3c8da22ec913b437fcf63cb29c92d41a
SSDEEP 384:7OHJTT5qFYQr76mH7clp1nwSecMxSF8C0kaLYwMD1o/upgDOEOD71kVSYs1s8g:wwFYQXd7clplwSecMxSXgYwM6GWeiwYx
TLSH
T19692E1F8F1140177EDAC6403D7564212947F6C4966092EEAB8F8BC59EA778C8A3657C0
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Croatian.lang

SHA256 f1e19b16577ba55b145f7caf1584b67257517aac2ddcc08e615ad87dd9da5583
MD5 e2666800c6351898a197e97bb72dc1c3
SHA1 0163e228c1a6b0d8bd08c8c303c44127b48d4f11
SHA512 da72f03d2d764c1c4f956768dca44967ef932e6ab659a5a845336473d95067a921465269d57fe594943857a063177d76d063c2185c6f0a22cab6665319882d78
SSDEEP 384:RU68c2dD/9oxyqwQFYJJ+ch9vld4GuNJszKI3lK3uYgVAahkqOiuPOxJ8o1ibzSL:Bkp9S5F+0MNiGKpI3lKe9VJaQf14SL
TLSH
T1D892E180F11D48CD84AB1410F4AFC724E7A5787DA0D4A22216252FC9AEFEAB299DE5D1
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Czech.lang

SHA256 6a80032b5e125d18fe56297c18ea600dca854a4498887759e7b0c4a74c7b6200
MD5 390e526c6fe7da995a4c04fc55d2ad17
SHA1 a6f8591f5de0da9359a340cc9b653e92942c12ca
SHA512 5b881f7e42fa8016fd5003578a52c68414ed14c77ce064e83e90fb2cff5f1a7b9d4e7b1896210c8b5507554a6b6dcae51cfa3a9eb6f0a472e01b8e31054f228f
SSDEEP 384:3YpuO5PiyjaOK9Tj1eCDFWOcMDNpcBsAF1cDeAFA9uW2td2jgbmGFcn:O5PiCaNj1eVOzNbDeAFAYtd8g4
TLSH
T11E92E18B47E95635E43D9027E5B4475608B13B5413B56C8C780BA2F1DE1F8A09613EE9
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Dutch.lang

SHA256 7c8dbefb743ceb88070ed18d5aed70c6b6116178707914920ad0438df1810dd0
MD5 400962b47a82a17b75891d2dc23acb16
SHA1 76731eb5505bfe77cf874a9e2cfaf45fccc8c110
SHA512 cefda7f669eaf6581a5b2a7d0a23fe6f930ff8cc658f6be5a419f4784d872ec706b3ea3cdba06d7541cc8c8ba790a9c605052a01327d58577134aca96826523e
SSDEEP 384:2SVIVcSF1a3eT6ZquwrwF8vUDXXMKyLHu/RJ7Up3/DvlzSdtWLsI8juH:6c41UeTvupF8v2nMAJJ7u37xSdELsI8i
TLSH
T18F92D1060D421252577D7E48A475B990DC0A8E8F56E3A527F400E1F4BF9589F3B70FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/English_UK.lang

SHA256 bfd89b94dd890a70198a308c03fece9fc53af6cd699a6eb9a335061b6cf6d98a
MD5 1bf448388765ba3599de5e3b2198c782
SHA1 6fcb21ab5db01810320235de2f5dc88e73ff6531
SHA512 9d2d1722e0aa7ae79780d3f49fc87e15f93355d09dd679c88c8c94886500633dc3df70c7c7f2098741f65ffd8ea9752a4c81188ff048e610289575d575311a79
SSDEEP 384:CXQnD2TiOM9t/+U317oFgXPV83T8tv6AmrEjN:CgnyZMr/3FdOgtCA9
TLSH
T12182D01B2D6C184C8BCF868211E65198BFFFFE1A63FB0A71C1C587A4160D26961B7E12
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/French.lang

SHA256 76658c30ed4c7bf59f77bd050df625c3f512092819d1e4e3211d81a67335d5c4
MD5 989411a946bce690a738dcd81e9887f7
SHA1 b8b38e559d4380af7be04c00fe211d739247417d
SHA512 64a6f7b6933d3799a59341e7cf42f26c3deef623febd4bc2918f48824a9d5f13526ffe867a62eb9bcc8c1bd26098c6d42c782cc729b55a7a874a9cdb7f971150
SSDEEP 384:CgQhINR+UQ8/3lMKn95oAODuT66h+7adNxBfuJZqZSd:CgnvQ8dnMPaTw7g5cJ
TLSH
T1EA92F2EF33D54B1B8574637DD35214703416732BE658FEDA5EE7B638C068C44A188A74
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/German.lang

SHA256 46dfa5830d238d45d74afe06808856ac2f920134f0a7563a8b7c55aff125d8c6
MD5 a4c828ec745377d692593faa759fc0be
SHA1 55762c97a31bc416e69304a1f5de993f3a1e729d
SHA512 b3977d1955161ba333d83953149451b7a9653c8bf34bdbbd00a7c3eba0776553fab31b28f6d6b3d7a302fd386fb759a0212cba36c916fcceeeb56b12fc95ac70
SSDEEP 384:ysYm44UKNDLfL8yDuedNh4WHorgnHmqJ7/ExDpopN9wx6:t44UKNDLRDtoWHorw19Zp/
TLSH
T10892D0F788D67CB9713734AA4264F8D74C06B02EF901596CA83867E6F2503628A19F56
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Indonesian.lang

SHA256 ad499e4d18b9f616d12a53b773553de7808fb87beb8c3ff47256d47d43c9b65d
MD5 a4fa338dbc964c78f42be74accd9823b
SHA1 d959a44b5596b396c89ddcef16e0390d7448a46c
SHA512 46748a422334acc582434934b9be69972d67a7b71bb7e291074ca76babac12c7cd2b25f11237fa96042a8b94a5cd70c0a75f2262b63dbf3978dd9ef2264dc9f3
SSDEEP 384:AnK7tANyRk9XgQGlE12xrh6oqW9WdNLBXzAKnXVXHZxgMd/C:AnK7t4uLQQE1ygFdDXzhjgMZC
TLSH
T15682E1315179409929DBF97F81EFE3298DA7C60DDCE25A813AD27F1E8F42BCD4852021
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Italian.lang

SHA256 36df5df41eb4ce203c3bd4e1c57d00a2c899e1d1746be67ac343c6c35ac60607
MD5 a4ceed277500dd2457a3049130ecd0ab
SHA1 ac8cf3c4d5ccae101fef5a38fd9369dbe8562dce
SHA512 2579cefc1ca5fa3241fc479bf4f432e6572b98060614d23087e79ef9f222c1d4e8ec14a69638272a9c0764c2073cedb9e9b2935a753ec98346f594ec5d7325fd
SSDEEP 384:ltTSRC8UUqkFzc2iMH98Bw+wOeC6BKerLg/drkmk1jATvL2EB/rQ425t:vWRHZqCzc2iS8BwrrKerU1rkEDSMQ55t
TLSH
T1BC92D088D86935214573F4A90A2DFB8033C0D55448104ADA6EFD70BAB3A9D9C4EBAAB1
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Korean.lang

SHA256 58d1108a8eba398a19fb0a32526c02e66582cee21788b027619cfac5213dc415
MD5 a13d069164f8c07d34a7240bfcd0e761
SHA1 009a3d6255e3208af0a276971807e8736a3d3231
SHA512 4fd90e8f858d8fdccede1285c475a09a8e24ad29843db184419b46e2f74eab979c2a03566818b103b0fcc33577317b7abc3575e5f9cf8620c2681632aaf059cb
SSDEEP 384:YScXc3XSCjgrwNmh+UGWQQMkAjqWFz4PBYU3Yo/qhKdTS4mnrXpZoKKCZ:IXGXSCsrwNmh+UGhnkAWWl4Z7Sho1ubZ
TLSH
T1FC92E18B03A75B93440FDA8E34554E10FC7A7DB6087EC3A4485AFE5336701BC446BAC9
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Malay.lang

SHA256 ffe5fefa9316ce84e8a19e7ebc687e7bdbf9d646e4b34066f6bb0e341679db04
MD5 f76fd7fcc5ca133aec9571b534ae1929
SHA1 220c81c705e47cf0a9644acd6044c31d6a0a3a18
SHA512 8e243e281996303139bd8086dec656666bd9dfb465dee5c1032edffa495242aa5bb8ce2de07dbf959d5506172dab83b58cd4be6e3ff7515eaa9008a0a428a337
SSDEEP 384:UEB+oX3n01J/1MnRlUM3P0g2RoqVWBe6W5xnIPN+pXdcSu:/hn01nMnjUMsPtbRRO
TLSH
T13F92E14BFD0E5330925DB0F85FE8222BF4349648EFD1C7C33AD8639065AD9191D6A1AD
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Norwegian.lang

SHA256 ec9d306651ee74ad00770c940d9869836c426e73272bce2ca31797c014c100d2
MD5 da6839c15c533227de8f95ac21195169
SHA1 59d756e805c17e4e8eb3e5bbc4a63e891f75eec1
SHA512 e7f0c2053c2135699fb199ebd520703d69bf31a695f473e71b723d76b529e01452f8d66a2d0ee9b31dbe1db08984799a7d5142fb797035febd146ed85ca81a89
SSDEEP 384:Mvo0JWKGUKvpyCBQzJzx3sXTWKPB9mD2u2iPtR44qg9H39KRmj8Qgpb8L0kJw512:aFBeABx3sXTnJq5V3qcsmjnSb8L0kJwi
TLSH
T1F892D1DC77F3CAC2A6767D4E4010D42BA05ABA0159F92BB453766F1AB88307D468DE22
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Polish.lang

SHA256 4e4c190f0b676e535e6240e8897f5fd577b16a0198b4c302fc24c3d8d18981f9
MD5 ecdbcebcf2bce613815be281740109f8
SHA1 7b47405701bfb0b22f77eaab71f0858b61ea4b34
SHA512 c3987af97bfad740d2f863abcb133e8b1213ef8b31283597660db317a38edfb77dc22a389b64437c3aef61298086883e79c50e79847d117bbf2cb787ea6cc208
SSDEEP 384:qO8U/yqE+0UED7+iDrfCv42Cu9WkyTdfpRblAeXxaZllWZ/j32eNW0SCD+KxzsvV:L8dVuED7+2r6v4zubGRpRblVXWWbVWZh
TLSH
T16092E1C6B2FC2A77A589314FFA35EE31298FF975DF331844665C82477866C689270380
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Portuguese_Brazil.lang

SHA256 109457215f6175faa25e068399515d3a3b0ac608f14326af5b599e4d11e832c6
MD5 18a94b6ba0d8889dfada171cc9ff8d92
SHA1 dab7599b494a6a7cdbe665f4404285fffde93432
SHA512 f726ad858d35ccd3af350245ce82aa3aba53f68bdd82149d6d4e1b7b6e3dfa52961ab3204a27c263c43d3712221566aff1c891ed4945510ab09871296ec4dbb6
SSDEEP 384:JlRmJKGgjKDm0vIA82GsM/dImork93WPVdDxOjfp5Ue1MW9qGGCYaImC:JlRmJxRmwk/umSYUddOV5dMW9q99PT
TLSH
T17C82D043FFB55205E04459308315C6FDAE7279433A20EADAB3B150B3D9A2E958DABD0B
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Russian.lang

SHA256 7c76a08e37319a501f79d37d88977a3c52ce263fc59a7ad086dc25daef4279c4
MD5 5818e6c791489811bba7d3e15ec99261
SHA1 383c3bcb1622b48c86d71a1bc809c1d79bc9760b
SHA512 4a7c41859c545ed1c3af5da61eab5a308feb6c3cd284891d87811ed7b7a83efbffe9e572079d7ca32fb0026d7e326eb9a6017f0d3e33cb05f398a4c3c690c985
SSDEEP 384:TChCVUA0Qbnuz0C3662sgCsG1k4BSj4YX0v1DlzP6Pq1g1CPVTUgelj7:TCUVUGjuz0C3f2sgOkDkvPKdCVTXGj7
TLSH
T1E4A2F151CD8538E5AAF6C261E7281FB22DBA60BD7ADF427735F8800C61C192C18BA59C
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Serbian.lang

SHA256 956125f20d0dffb76f14f106dea90ec26c5c4c95d68b396e76c2bbe9cd438c34
MD5 0490cb5a366a4f843e3f9e4039a18f09
SHA1 08d042739a0bedc246cc4c6ec25b733a860d4b0a
SHA512 11a8007169cfe48fd0ada1456785ca2ebd82bb662bf0a396f5b0dee27c0db58e20d079219f9eeba5f3fda475d05662222ca2c55c7295227baf2552e188a615f0
SSDEEP 384:W++pLMfbEeCxOdDZOubktpCiDCau2D4NyO1gTAaMfX095R9XQzFgtvmC2o8:WZLaCMDbotIiD284NyOYMWfv2
TLSH
T16C92E0EAE5E7B9270881E41EBE051ECF28BD0F2D67786494D036096DF170210F96A9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Spanish.lang

SHA256 a213d7761737349f0c27518bbf4f20215d17398da48fbf3f19f65279d753a46e
MD5 814f6503cac42338799dec7bd8801579
SHA1 28d1641c16c67be01d928f411d44702ac8076e64
SHA512 d89b09432938a1cdceda5edf1f684071ff6809de4876c1f6e7ecb19f748fcf82a0edcb3384c1b6ff215d74aa867a64e7f0f620e156e6252af5a3c6cf7e7feee9
SSDEEP 384:tjIgfbEwzdyTg7UC3zQmuv2T5s5AJVlefpAM6BZ9wlZ+iaqg4HnDqN:RICgwRyT4j2Ke5AbUaBWvHnI
TLSH
T10492C02DE6020ECD36089FB28C913F39D5075D819B9984A691156FD07682E1CEC78F6E
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Thai.lang

SHA256 e8d0b55565957114bba90f5ed8fa3f976e1d4210e6ffc17d0427e181c5c35bca
MD5 b825bf7b392ca445bf099bd0352656b5
SHA1 7c6113031dc9860ad76002c99b669ad891ccd57c
SHA512 a4e7c10762f8c633fa283ee58d45d60f4c0b82d2d5876d910179ba67d6fce3ba0158b156f5b3d01232351e8d8ff8611fc4bcfa7778f84f1d42c35c3525390cc1
SSDEEP 384:SK5aEtJbYXFF6bfiQ4a+jKUHUpUpFk8ANlcwUeRZ4Er5pJj6aCnz7PR:SKkEHYXFUfiRjlUakl8er4M3OJnz7PR
TLSH
T1BDA2E10334AD03EF5CFFCA17F8F56B387A1CA96248934230BF144E65761554D986AB41
MD5 SHA1 SHA512 SSDEEP TLSH

Lang/Turkish.lang

SHA256 57dc256812a761aec8aa94864a253e3a677181440465e0ffa28afbefb8c05246
MD5 b221c45349dc45e2bab5184296820c38
SHA1 1083124ace76e0defadf947c684a8e2bcbe6e770
SHA512 cc6bcfa23899f43592fc7daebb97e72c6b00e4cc6a34e377b8470563e54a90fdb07d5cf2119658af01656f4f451a0484124c73ae1e1da7ee585e46a0c3f96d20
SSDEEP 384:ObyTAcFPl3TyZSabg7GkaUbKjAnTyVPujkyKQp+S51tkhRFkqY:fc6yZSarkaU+aiP8kyh+QtkhDY
TLSH
T1F492CF9803E0DE4A86A478C45BFE0833C846BFFA36A9D6E96AC6891C447B3F1D409565
MD5 SHA1 SHA512 SSDEEP TLSH

XFrog.dll

IMPHASH 98573187b2a3a0c45e87802ae521d741
SHA256 04d13301a673f9ffb628bd0bc64973079590d4c3a7c63e86fcaedc7033b6744c
MD5 40a8d4d0e0ba9256ab3513e2ad656e1c
SHA1 5ab94035e18aba33f48bd4409d193f5657a07d13
SHA512 d6aba809c41a0d537d434d814fb9f5d6303e6abe4a04771af5662be1a2cef54eeb0b678db0ad43bbdca03c32fe2062e2aa38f2af3b959999ee2ccbecbb8b97b6
SSDEEP 12288:F+lFkjRLt2MrErUX3CI/YdjPciIlEwPW+Tt577o+:FXBBYdjPzDwR77o+
TLSH
T125C46D01B3E19238F5F705B256BA667D9A353A22473590CFA3801DBE4E71BE09E31B17
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

87:2f:24:d0:a1:59:53:f9:ef:d8:6b:01:88:4a:a6:32:66:16:ae:34

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

253114

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

XFrog.pdb

d3dx9_43

D3DXCreateSprite D3DXCreateTextureFromFileInMemoryEx D3DXCreateEffectFromFileW D3DXMatrixMultiply D3DXCreateLine D3DXMatrixTranslation D3DXMatrixOrthoLH D3DXMatrixScaling D3DXCreateFontIndirectW

kernel32

GetStringTypeW FreeLibrary MultiByteToWideChar Sleep GetSystemInfo GetVersionExW GetProcAddress LoadLibraryW QueryPerformanceCounter QueryPerformanceFrequency GetCurrentThread GetCurrentProcess GetThreadTimes GetProcessTimes EnterCriticalSection LeaveCriticalSection CreateDirectoryW GetFileAttributesW InitializeCriticalSection DeleteCriticalSection ResetEvent OutputDebugStringW WaitForSingleObject SetEvent CloseHandle TerminateThread CreateThread CreateEventW FreeResource LockResource SizeofResource FindResourceW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle InitializeCriticalSectionAndSpinCount CreateFileW SetFilePointer HeapReAlloc VirtualAlloc GetCurrentProcessId GetTickCount VirtualFree HeapDestroy HeapCreate GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetModuleFileNameA GetStdHandle IsValidCodePage GetOEMCP GetLocaleInfoA SetEndOfFile GetProcessHeap LoadResource SetEnvironmentVariableA CompareStringW CompareStringA CreateFileA GetACP GetCPInfo ExitProcess HeapSize LocalAlloc InterlockedExchange GetLastError LoadLibraryA RaiseException RtlUnwind TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLocalTime GetSystemTimeAsFileTime GetCurrentThreadId GetCommandLineA HeapFree GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetModuleHandleA HeapAlloc WideCharToMultiByte GetTimeZoneInformation WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers ReadFile

user32

PtInRect SetRectEmpty CopyRect SetRect PostMessageW IsIconic SetWindowPlacement CallWindowProcW GetParent GetWindowLongW SetWindowLongW DefWindowProcW LoadCursorW RegisterClassExW CreateWindowExW UpdateWindow PeekMessageW GetClientRect DispatchMessageW MessageBoxW PostQuitMessage GetCursorPos WindowFromPoint ScreenToClient GetSystemMetrics GetWindowPlacement ShowWindow TranslateMessage

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoInitialize CoUninitialize CoCreateInstance

oleaut32

VariantInit VariantClear

audiocodec.dll

IMPHASH eac939edf92df5698f4db9ea452bf38e
SHA256 da4662b6f6780785b008803611ef31ef24569412ddc756c04e2189bf2b6d557d
MD5 90f3e075dc44146c099049e62bbfd3c0
SHA1 1c6a4b3aa1219bdeb768a13dc23b77a0b62834b0
SHA512 f6ab00a977a0bf22515a70c50f9854310302313a3a537ae6486b5788f3aa393a0617790c6a1fd9e8af016d9f20e963f922e8f2c49b8879150c3e4facd565a765
SSDEEP 1536:CeknDtizJwMVbBFzlUX+lruQPwbJJ6KQWBiqCzB:CekBUJwMVzlfwJ6KQWmB
TLSH
T15A938E32B5B08072C0AB993AD166C3B1DF7E65106EE55403B77D27EEAF10B906E39346
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

b3:5e:5a:89:e8:6d:d5:03:da:4d:4f:96:dd:89:56:2c:9e:07:db:d6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

37139

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

audiosource.dll

IMPHASH 2790b5e26a7b9e086ff699c9f61480cb
SHA256 f482024246e52f9e9332e15d1878f77a4f768a17bb46cdb193dbe776594e997c
MD5 97e54f224133bc8613d414c9c7ebabb1
SHA1 46bf6e91a7b764b198a9683838b96ecac189c8b5
SHA512 90934855301c7d40950bf5dc9659b5f716aa78f80c63a041653ee0fe927fedc479f6d2307b235edbb82d4b47603547d99af5ade4bceb900c61787e4e25aacd70
SSDEEP 3072:ea3sU5Nuh/Yayw+NC42XDvZ0AY8X6yb4UjhAeOrl5dndfI4Z8B5+tYg/:5NkhXV4ohAecl5dnq4Zzn/
TLSH
T1E8F36B0137E0C6B6D2A7567984B6C3268A3FB9725760C1CF7394066F0EA07D1EEB171A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ea:f0:c0:3b:8e:a6:e6:17:62:a6:eb:50:a3:27:95:e4:96:9c:1d:aa

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

42726

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

audiosource.pdb

kernel32

LeaveCriticalSection GetFileAttributesW EnterCriticalSection DeleteCriticalSection CreateDirectoryW GetProcAddress InitializeCriticalSection CompareStringW CompareStringA ReadFile GetProcessHeap SetEndOfFile CreateFileA RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetSystemTimeAsFileTime GetLocalTime GetCurrentThreadId GetCommandLineA GetLastError HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetModuleHandleA GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW Sleep HeapSize ExitProcess WideCharToMultiByte GetTimeZoneInformation CloseHandle WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId VirtualAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA LoadLibraryA InitializeCriticalSectionAndSpinCount SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW SetFilePointer CreateFileW SetEnvironmentVariableA

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoLoadLibrary CoCreateInstance CoFreeUnusedLibraries

oleaut32

SysFreeString SysAllocString

axsnapshot.dll

IMPHASH 072420321902546ed4766b34af77d0a5
SHA256 80d3e65cfd8df0a9da48c6555d4d07505ef140b96cee3fd30543ec113907fcb9
MD5 63cd2bbc1820572b0d2eeb51bbb3e0b9
SHA1 cca1f13692741aa62fb99bf1b44cd4ceb9d15db1
SHA512 363e1918ae390ecc2bc1e939fedd70ac1ebfc1ac25537e1db16c195b343bb5d0a977daaf186f917043f81ba395d174f1487fabbfa7a2ed3409df9b4a87192d97
SSDEEP 3072:4IAueAA4cWb7zfvlAX01UtJbKloX5dYkDe3Qdn7DAl7P1J:mzAA4bzW01UtUCq3Qdn/+1J
TLSH
T170D34922779AC075C09A11398879E769172BBF71CFE640C73B94376E1EB02D1AE38257
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

ff:8e:a9:b3:89:ca:f3:a5:72:a2:2e:cc:fc:b2:ef:61:f2:6c:ab:2f

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

1

Major OS version

5

Entry point

51173

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

X:\cfc61.qa\!Output\axsnapshot.pdb

kernel32

InitializeCriticalSectionAndSpinCount InterlockedIncrement InterlockedDecrement GlobalAlloc GetCurrentProcess FlushInstructionCache MulDiv GlobalLock GlobalUnlock GetCurrentThreadId GetCPInfo GetConsoleMode GetConsoleCP SetFilePointer RtlUnwind GetSystemTimeAsFileTime LeaveCriticalSection SizeofResource QueryPerformanceCounter GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameA GetStartupInfoW GetFileType SetHandleCount TlsFree TlsSetValue TlsGetValue TlsAlloc Sleep HeapSize HeapReAlloc HeapDestroy HeapCreate GetStdHandle EnterCriticalSection DeleteCriticalSection SetThreadLocale GetThreadLocale OutputDebugStringA GetModuleFileNameW LoadLibraryW LoadLibraryExW GetFileAttributesW GetVersion GetModuleHandleA SetLastError FindResourceW GetCurrentProcessId LoadResource MultiByteToWideChar GetLastError RaiseException FreeLibrary lstrcmpiW GetModuleHandleW GetProcAddress lstrlenW GetTickCount WriteFile FlushFileBuffers CloseHandle CreateFileW GetStringTypeW LCMapStringW WriteConsoleW SetStdHandle IsValidCodePage GetOEMCP ExitProcess IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess GetCommandLineA DecodePointer EncodePointer InterlockedPopEntrySList VirtualAlloc VirtualFree IsProcessorFeaturePresent HeapAlloc GetProcessHeap HeapFree InterlockedCompareExchange InterlockedPushEntrySList GetACP

user32

UnionRect PtInRect GetKeyState CallWindowProcW OffsetRect EqualRect IntersectRect UnregisterClassA LoadCursorW GetClassInfoExW DefWindowProcW GetFocus IsWindow SetWindowRgn IsChild SetFocus ShowWindow InvalidateRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect SetWindowPos DestroyWindow CreateWindowExW GetWindowLongW SetWindowLongW CharNextW RegisterClassExW

gdi32

SetMapMode LPtoDP DeleteMetaFile CloseMetaFile RestoreDC SetWindowExtEx SetWindowOrgEx SaveDC CreateMetaFileW CreateRectRgnIndirect CreateDCW DeleteDC GetDeviceCaps SetViewportOrgEx

advapi32

RegEnumKeyExW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegQueryInfoKeyW RegCloseKey RegDeleteKeyW

ole32

OleSaveToStream WriteClassStm ReadClassStm CreateDataAdviseHolder OleRegGetMiscStatus OleRegGetUserType OleRegEnumVerbs CreateOleAdviseHolder CoCreateInstance StringFromGUID2 CoTaskMemAlloc CoTaskMemFree CoTaskMemRealloc

oleaut32

LoadRegTypeLi VariantChangeType SysStringByteLen SysAllocStringByteLen OleCreatePropertyFrame VariantClear VariantInit UnRegisterTypeLi LoadTypeLi SysAllocString SysFreeString SysStringLen RegisterTypeLi VarUI4FromStr

cm_acapture.ax

IMPHASH 707bbee5cb129789a4fdd6734519a32d
SHA256 ed105111a8536a4e27a08c95562aef54f2175b84395f4c2f207ee00a0e9bb777
MD5 ec63f650a19099b0f9bd1adc5851dfbf
SHA1 4d49213b28622443957125c4df48af0421d38201
SHA512 61ae800e4eb0be691925d64ae4614cb5e5f6fd5d8f3faa2bdc9583f6dcd0b075c36f460da989ff884789fdf05f350daf52b2ae94599315d47656e058f9ca0d3c
SSDEEP 1536:aFlltf+iEWBXLnIDuk1f/9RVrkntOk5RRr+M7VpT1G5qCzc:aFlz+iEmXLnI7x/nk5RRr++pT1Gvc
TLSH
T187A37C2137A1C1B1C98F66394429DB64A76BF6219FE459C77BA403BE2F203D05E3934B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

be:46:b1:2f:5c:77:6e:cb:d0:97:6a:28:5a:0c:0f:8b:ea:b2:d2:14

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

21840

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cm_acapture.pdb

kernel32

TlsGetValue InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetVersionExW DisableThreadLibraryCalls InterlockedDecrement lstrcmpW InterlockedIncrement CloseHandle VirtualFree GetCurrentProcess GetCurrentThreadId VirtualAlloc FreeLibrary GetProcAddress GetModuleHandleW GetTickCount GetLastError FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA MultiByteToWideChar RtlUnwind GetCommandLineA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapFree TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc RaiseException Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy GetModuleHandleA WriteFile HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoFreeUnusedLibraries CoCreateInstance

cm_arender.ax

IMPHASH 811f2994f5122506c37445feaf706faa
SHA256 506962338866e921503f4abd1c643010fa78f8b6881290d51c3d100ecad55759
MD5 32bc17932239229dee1f12f42a8e4728
SHA1 6cf5c863994ec06365ee5a3827a83961b24cae8c
SHA512 6cdac27c3c64ddfd7bc959fb3a3fac8a23f305632570cd4a048162431fee951e089223959d30ad0e15113351f0238ce5eaf78c4e9951dcebd6a32bb322db63d2
SSDEEP 3072:2deUwWdCVOQsyAalsv4enlPVR+yeNKFXv:gCLcb94eBPv
TLSH
T1A0C37C2232A1C072D98E153E4856C7696B3BB9719FA459C7BFA4036E5F203E1DE38347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

7a:dc:98:78:8d:8f:84:9a:d4:38:a4:cc:e3:e6:07:09:ff:20:3d:40

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

35797

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cm_arender.pdb

kernel32

RtlUnwind InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObject InterlockedIncrement InterlockedDecrement CloseHandle CreateEventW VirtualFree GetCurrentProcess GetCurrentThreadId VirtualAlloc FreeLibrary InterlockedExchange Sleep GetProcAddress GetModuleHandleW GetTickCount GetLastError GetVersionExW CreateThread DisableThreadLibraryCalls FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA MultiByteToWideChar TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetCommandLineA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError GetModuleHandleA ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy WriteFile HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoFreeUnusedLibraries CoCreateInstance

cm_capture.ax

IMPHASH cc574f81fc4736ff9e1693192ed0fe45
SHA256 e1f78f242f8f179172a61025b1dd8eade409981bcc42adcb27106ad149963864
MD5 0909fc16ea5d7d952f53142723ecc31e
SHA1 589aaacf5b3a5328272465138b97fd554555f23a
SHA512 b7ac831bb8e075ba91250719c5fae12a05778496f6d00cd25f76fe0c9b98beeb16fbfc3e1be5ffa517faa08dc2f0c9333d02ec869e743392880c421ab978ee4a
SSDEEP 1536:wnZn1cy56VtKHoq5IuR1d0lVFiHgSgqRda8z/VuJgtauuzKc+IzE/zytO+/cjqC+:2Zn1cw62Hoq5Xjda8yugKc+z/zy7/cZa
TLSH
T193E3AD007391C873C48E64B64476C3659777B7328BA499C7BBA80B6AAF612E01F39347
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fb:44:64:c3:2d:0a:40:25:3c:6f:4a:f4:d3:54:a4:fa:59:ea:bc:0d

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

56902

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cm_capture.pdb

kernel32

HeapFree InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection GetVersionExW DisableThreadLibraryCalls InterlockedDecrement lstrcmpW InterlockedIncrement CloseHandle VirtualFree GetCurrentProcess GetCurrentThreadId VirtualAlloc FreeLibrary GetProcAddress GetModuleHandleW GetTickCount GetLastError FlushFileBuffers CreateFileA ReadFile WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA GetVersionExA RtlUnwind GetCommandLineA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime HeapAlloc TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException GetModuleHandleA Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy WriteFile HeapReAlloc GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize LoadLibraryA InitializeCriticalSectionAndSpinCount GetLocaleInfoA SetFilePointer GetConsoleCP GetConsoleMode MultiByteToWideChar

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoFreeUnusedLibraries CoCreateInstance

Name

.text

Size

105KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

TORQ_CX_

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

cm_render.ax

IMPHASH e576729cee0800014dc65b8ce3bd1597
SHA256 920cd4cf4944464fb2dda134acc43ef3e8996113a9d3b329016d17be1e5f99a9
MD5 28360c6191fdd771415db8800dd51531
SHA1 f555cf1744a95b0da312fc6bcf9b9a860b34a3d5
SHA512 dc2198f666589e129213ea36b6a79de40e7deba2aaf6d92d51d3079c14be690a5178b10d21145d85a8108fd550cf93304a96ef8ad5342cf80b15686721bd1023
SSDEEP 3072:z6ES6Kt7bH2kRZ31Wu1U+wOSeuB2n+669BrfOCf:zEjzd4jOSeu+6rrf7f
TLSH
T175D37D1236A4C072D64E153E0466C36A6B6BB5B29FE859CB7F9402FE4F243D19E34387
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

c8:97:f6:55:2a:7a:49:df:8e:90:b4:91:a3:95:89:4d:42:61:dd:d9

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

48070

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

cm_render.pdb

kernel32

RtlUnwind InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent ResetEvent WaitForSingleObject InterlockedIncrement InterlockedDecrement CloseHandle CreateEventW VirtualFree GetCurrentProcess GetCurrentThreadId VirtualAlloc FreeLibrary InterlockedExchange Sleep GetProcAddress GetModuleHandleW GetTickCount GetLastError GetVersionExW CreateThread DisableThreadLibraryCalls FlushFileBuffers CreateFileA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle LCMapStringW LCMapStringA GetStringTypeW GetStringTypeA MultiByteToWideChar GetConsoleMode TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RaiseException HeapFree HeapAlloc GetCommandLineA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapCreate HeapDestroy HeapReAlloc ExitProcess WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleA SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize InitializeCriticalSectionAndSpinCount LoadLibraryA GetLocaleInfoA SetFilePointer GetConsoleCP

user32

SetRect

ole32

CoUninitialize CoTaskMemFree CoTaskMemAlloc CoInitialize CoFreeUnusedLibraries CoCreateInstance

cmnet.dll

IMPHASH 065375d77b9c1b575dc0cdbcbb5eb05c
SHA256 76fe8dd24d48961f2ad5a6199f373e43e87ca85de8cb2b1c06c307f92ec629c5
MD5 7ede93c2947f7ef4ffe8716acf158fef
SHA1 a92114c37e20b4ccab1ac8cb55cc5f673e34a822
SHA512 cc4043d680ea1d2b0e5f4bcf8e0f70f924ecd5ba0c6b14dd4bb8d77449d96e4a10078e57377da5efdb419a1dfed6e2f24e0cb95eac4c0d5d4d20c9485bd6d42e
SSDEEP 12288:XCOZhaO2I8Ele1rInnvX768SW6tWiAehGAv608:hgfP8SW6tWiAOvV8
TLSH
T14E947C11BA82C036E5AF11F1CEBE967D93BCA9A0072D14C3E3DC09AF5F655D26A31217
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

bb:01:8e:7f:1c:4e:dd:00:05:7c:50:86:7f:04:1a:a2:0b:25:93:f4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

243859

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

shutdown getsockopt accept listen send recv connect inet_ntoa WSAStartup gethostname ioctlsocket sendto recvfrom select __WSAFDIsSet socket bind getsockname setsockopt gethostbyname WSAGetLastError closesocket htons ntohs inet_addr

kernel32

WriteConsoleA FlushFileBuffers SetStdHandle InitializeCriticalSectionAndSpinCount GetLocaleInfoW LoadLibraryA IsValidLocale EnumSystemLocalesA GetUserDefaultLCID GetStringTypeW GetStringTypeA GetLocaleInfoA GetConsoleMode GetConsoleCP SetFilePointer ReadFile CreateEventA CreateSemaphoreA CloseHandle GetSystemTimeAsFileTime HeapAlloc GetProcessHeap HeapFree ReleaseSemaphore SetEvent WaitForSingleObject WaitForMultipleObjects Sleep GetCurrentThreadId lstrcmpiA GetSystemInfo GetVersionExA GetFileAttributesA GetConsoleOutputCP CreateFileA GetLastError GetFullPathNameA CreateDirectoryA WideCharToMultiByte LocalFree FormatMessageA GetTimeZoneInformation GetModuleHandleA WriteConsoleW SetEndOfFile CompareStringA CompareStringW SetEnvironmentVariableA InterlockedIncrement InterlockedDecrement InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection ReleaseMutex TlsAlloc TlsFree TlsGetValue CreateMutexA GetCurrentProcessId ResetEvent TlsSetValue ResumeThread GetTickCount SystemTimeToFileTime SetWaitableTimer CreateWaitableTimerA RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCommandLineA HeapReAlloc LCMapStringA MultiByteToWideChar LCMapStringW GetCPInfo ExitThread CreateThread WriteFile GetStdHandle GetModuleFileNameA GetModuleHandleW GetProcAddress SetLastError HeapSize ExitProcess HeapCreate HeapDestroy VirtualFree VirtualAlloc SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetACP GetOEMCP IsValidCodePage

user32

GetSystemMetrics

advapi32

RegQueryValueExA RegCloseKey RegSetValueExA RegDeleteValueA RegOpenKeyExA

Name

.text

Size

333KB

Virtual Size

332KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

55KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

11KB

Virtual Size

23KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

2B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

crashrpt_lang.ini

SHA256 f4f18cf3eeb4cc1bc6ece25508edddba3fdf65c1af476cb00941dc6dda0543e2
MD5 3fc423548202be2996140157dfc6e8d7
SHA1 d5d92edb16d0a1480b9d2be77d537a1a73d8f179
SHA512 90342d1aa3ad1d79a0ef8fd67de0b6caa6b215c054d0efd2ac5e97f9edd45d84c9bf93bb44153836fa9e189953bb581f2ad2621d87807d70a9d1c51a6c5e4525
SSDEEP 96:rsw6oaKPZEOTWSucfgjfJpkiZJpkiVxoVrOSBngI3NnKgFivuiLugXeTmZ4dIc8v:wloaK/uKFpVgOgncox
TLSH
T156E1555227FE1208F9F63F80AE7695744E3BBC65AD3AC59D1191414E0AF2E40C8727B3
MD5 SHA1 SHA512 SSDEEP TLSH

graphstats.fxo

SHA256 4402b20597aa568bd5fa4f7c40cec8cc99a19b281c0b8afb8c5fa1f06fd96d20
MD5 c99c4d86afd4a8f5e59b3187d64f9a4d
SHA1 5efa1d45f51d1cb5abc75fbda08a778a1841c090
SHA512 21b789cb05f7f0977311ee7706b369dd5c02fae61aea988e7db0b5e1188068306fdf8cb12b115527637bdd598274efaa9163bc37358b7e1ca165e774a31ac9c5
TLSH
T1B4119ED5B188962FCC9447755ED74F68312CF1021B838707F092CB8F5EA93C45EA1A04
MD5 SHA1 SHA512 TLSH

media.dll

IMPHASH 22d9c4f62a5540c8f4866d597a2371b6
SHA256 2d2a3f73e78757f98772b76eba0a09b647164c958593c57fe01169d855c9e41d
MD5 de5a8cbdff0a286effb01dfcb24106c9
SHA1 ae60517a70ac9c73be9abbe6d3e3afec1fb64ccf
SHA512 565acbdcc43d795d9954be4de6dfbfdf5feeac0b54dde68dda2e20551aebab287d6006465688f24e2f9fa670309167f9c01d87b5c0f5c54d5f8619b3e75ea618
SSDEEP 6144:M2u170Bufhen8tz2x/5K2xnyP6613v/dZZETI4LbOtAOjQNIvu:CN0BufNz295K25613v3ZET/LCtvu
TLSH
T16D54AE117BE6C072E0FB29B4587993A54EBDBD304970C96F37E4061E9E30B92DA31366
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

dd:37:e0:52:3a:b6:0b:54:eb:df:05:45:be:07:f5:cb:65:40:a8:0a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

83263

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

media.pdb

mm_enc

ord7 ord1 ord2 ord4 ord3

videosource

?renderer_request@@YAJ_JHJJJJ@Z ?renderer_put_osd@@YAJ_JPAEHH1HH@Z ?renderer_receive@@YAJ_JPAEK@Z ?videosource_init@@YAXPA_W_N0@Z ?capture_remove@@YAJH@Z ?capture_put_osd@@YAJPAEHH0HH@Z ?capture_show_props@@YAXPAUHWND__@@@Z ?capture_get_props_title@@YAHPA_W@Z ?capture_request_frame@@YAJPAE@Z ?capture_init@@YAJPA_W_N@Z ?capture_request@@YAJPA_JPAH1@Z ?capture_close@@YAJXZ ?videosource_get_devices@@YAHPAEI@Z ?videosource_close@@YAXXZ ?capture_reconnect_dynamic@@YAJPA_W@Z ?capture_add@@YAJPAUICMPR@@HPAH@Z ?renderer_add@@YAJK_JPA_J@Z ?renderer_remove@@YAJ_J@Z

xfrog

?XFrog_setGUIStrings@@YAJPAU__gui_strings@@@Z ?XFrog_set_volume_meter_pos@@YAJPAUHWND__@@H@Z ?XFrog_isGUIEnabled@@YA_NXZ ?XFrog_getFaultInfo@@YAXPA_WPAH@Z ?XFrog_isGraphStatsEnabled@@YA_NXZ ?XFrog_GetNetworkData@@YAJKKM@Z ?XFrog_removeAll@@YAJXZ ?XFrog_init@@YAJ_NPA_W10@Z ?XFrog_updateVideo@@YAJ_JPAE_NHH@Z ?XFrog_setControlAttributes@@YAJ_JGJ@Z ?XFrog_assignGUI@@YAJ_JKKHH_N11PAUHWND__@@@Z ?XFrog_assignSnapshotGUI@@YAJ_JPAUHWND__@@_NK2K@Z ?XFrog_assignGraphStats@@YAJ_J@Z ?XFrog_deassingGraphStats@@YAJ_J@Z ?XFrog_putOSD@@YAJ_JPA_WPAU__osdfont_desc@@@Z ?XFrog_switchToFullScreen@@YAJ_J_N@Z ?XFrog_setHDButtonState@@YAJ_J_N@Z ?XFrog_removeScreen@@YAJ_J@Z ?XFrog_deInit@@YAJXZ ?XFrog_addScreen@@YAJPAUHWND__@@HHPA_J@Z

audiosource

?acapture_set_volume@@YAXN@Z ?acapture_init@@YAJPA_WN@Z ?acapture_reconnect_dynamic@@YAJPA_WN@Z ?acapture_add@@YAJPAUICMAR@@PAH@Z ?arenderer_receive@@YAJ_JPAEK@Z ?arenderer_add@@YAJPA_WJPA_J@Z ?audiosource_get_devices_record@@YAHPAEAAI@Z ?audiosource_get_devices_playback@@YAHPAEAAI@Z ?audiosource_set_path@@YAXPA_W@Z ?audiosource_create_logs@@YAX_NPA_W@Z ?audiosource_close@@YAXXZ ?arenderer_setvolume@@YAJ_JJ@Z ?acapture_remove@@YAJH@Z ?acapture_close@@YAJXZ ?arenderer_remove@@YAJ_J@Z ?arenderer_play@@YAJ_J@Z

kernel32

WriteConsoleW GetConsoleOutputCP WriteConsoleA CreateFileW SetStdHandle SetFilePointer GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringA LoadLibraryA InitializeCriticalSectionAndSpinCount GetCurrentProcessId GetTickCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA GetStartupInfoA GetFileType SetHandleCount GetTimeZoneInformation FlushFileBuffers GetConsoleMode GetConsoleCP HeapSize LCMapStringW IsValidCodePage GetOEMCP GetACP GetCPInfo GetModuleFileNameA GetStdHandle WriteFile ExitProcess HeapReAlloc VirtualAlloc HeapDestroy HeapCreate SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleHandleW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection SetEvent Sleep WaitForSingleObject QueryPerformanceCounter InterlockedDecrement CloseHandle CreateEventW CreateSemaphoreW QueryPerformanceFrequency FreeLibrary GetProcAddress LoadLibraryW ReleaseSemaphore TerminateThread ResetEvent FindClose FindNextFileW DeleteFileW FindFirstFileW CreateDirectoryW GetFileAttributesW CreateThread GetSystemTimeAsFileTime GetLastError MultiByteToWideChar lstrlenA WideCharToMultiByte HeapFree GetProcessHeap SetEndOfFile ReadFile CreateFileA SetEnvironmentVariableA CompareStringA CompareStringW VirtualFree GetModuleHandleA GetCommandLineA GetCurrentThreadId GetLocalTime RaiseException IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess HeapAlloc RtlUnwind

advapi32

RegOpenKeyExW RegCreateKeyExW RegSetValueExW RegOpenKeyW RegQueryValueExW RegCloseKey

ole32

CoUninitialize CoInitialize CoCreateInstance CoSetProxyBlanket

oleaut32

SysFreeString VariantClear VariantInit SysAllocString

audiocodec

?adecode_frame@@YAJ_JPAEH1PAH@Z ?request_aencoder@@YAJPA_J@Z ?aencode_request@@YAJ_JPAEHPAH@Z ?close_aencoder@@YAJ_J@Z ?request_adecoder@@YAJPA_J@Z ?close_adecoder@@YAJ_J@Z ?aencode_frame@@YAJ_JPAEH@Z

?add_audio_capture_entity@@YAJPAK_N@Z ?add_audio_playback_stream@@YAJPAKK@Z ?add_video_capture_entity@@YAJPAKHE_NPAH@Z ?assign_XFrog_GUI@@YAJKKKHH_N00PAUHWND__@@@Z ?assign_XFrog_Graph@@YAJK@Z ?assign_XFrog_OSD@@YAJKPA_WPAU__osdfont_desc@@@Z ?assign_XFrog_Snapshot@@YAJKPAUHWND__@@_NK1K@Z ?close_audio_capture@@YAJ_N@Z ?close_audio_renderer@@YAJK@Z ?close_audio_renderer_all@@YAJXZ ?close_video_capture@@YAJ_N@Z ?close_video_renderer@@YAJK@Z ?close_video_renderer_all@@YAJXZ ?create_audio_capture@@YAJHMP6GXPBKPBEPBH_J3@Z@Z ?create_audio_renderer@@YAJHW4AUDIO_TYPE@@JPAK@Z ?create_video_capture@@YAJPA_WP6GXPBKPBEPBH_J4@ZPAH_N@Z ?create_video_renderer@@YAJ_JHPAUHWND__@@_NPAK@Z ?deassign_XFrog_Graph@@YAJK@Z ?enable_AEC@@YAJ_N@Z ?get_XFrog_fault_info@@YAXPA_WPAH@Z ?get_audio_capture_devices@@YAJPA_WPAI@Z ?get_audio_playback_devices@@YAJPA_WPAI@Z ?get_capture_framerate@@YAJPA_J@Z ?get_capture_property_page_title@@YAJPA_W@Z ?get_capture_snapshot@@YAJPAE@Z ?get_cvc_versions@@YAJAAH0@Z ?get_video_devices@@YAJPAEI@Z ?init_media@@YAJPA_W_N011@Z ?is_XFrog_GUI_enabled@@YA_NXZ ?notify_renderer@@YAJKPAUHWND__@@JJJ@Z ?pause_video_capture@@YAJK_N@Z ?push_audio_data@@YAJKPAEK_J1@Z ?push_pause_video_data@@YAJK_NPADKKK@Z ?push_video_data@@YAJKPAEK_J1@Z ?put_OSD_capture@@YAJPAEHH0HH@Z ?put_OSD_render@@YAJKPAEHH0HH@Z ?reconnect_audio_capture@@YAJHM@Z ?reconnect_video_capture@@YAJPA_WPAH@Z ?remove_audio_capture_entity@@YAJK@Z ?remove_audio_capture_entity_all@@YAJXZ ?remove_audio_playback_stream@@YAJK@Z ?remove_audio_playback_stream_all@@YAJXZ ?remove_video_capture_entity@@YAJK@Z ?remove_video_capture_entity_all@@YAJXZ ?set_audio_capture_volume@@YAJM@Z ?set_audio_playback_volume@@YAJK_NM@Z ?set_decoder_path@@YAJPA_W@Z ?set_renderer_control_attributes@@YAJKGJ@Z ?set_renderer_viewport@@YAJKUtagRECT@@@Z ?set_video_capture_fps@@YAJKE@Z ?set_volume_meter_level@@YAJPAUHWND__@@H@Z ?set_vu_callback@@YAJP6GX_NPBKPBH@Z@Z ?set_xfrog_gui_strings@@YAJPAU__gui_strings@@@Z ?set_xfrog_hd_button_state@@YAJK_N@Z ?show_capture_property_page@@YAJPAUHWND__@@@Z ?show_renderer_window@@YAJK_N@Z ?shutdown_media@@YAJXZ ?start_stop_audio_capture@@YAJK_N@Z ?start_stop_audio_playback@@YAJK_N@Z ?switch_to_fullscreen@@YAJK_N@Z

mm_dec.dll

IMPHASH ce7d9537ad8fe86a322f33433628f70a
SHA256 ad33b722bb3077edd2ba1eed796541fdcdddc6a4c7bf47369f27f4c8ee3b8d57
MD5 1a073f6eed31cce8399220489e2e6b4a
SHA1 f6e702c79c4c218e5e0da5ad0b2bed8b840ef51a
SHA512 59b69a85509bd69f352f11fa7f9db0cfd0dadd6beaaca69454bb9cd8ed6e2838261c4682979c96828224c5516dec0358e0851283d5fd6c96142ae10f0da3dc0a
SSDEEP 3072:+qo+no9cDzD7VDQLYtRp47kyp1f7e5ZB485GqwQ0EIZU4MwQXwQGEIZU4MwQZwQy:Fi9gzXVDcYt5G15FgCgfllKHr
TLSH
T1B9A4A5A343FAC348E2122571A67DF0D1FA9927ACD4859E7CF960431541C9ACFBE7818B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

a8:05:af:39:98:35:69:b7:fe:dc:06:03:55:6c:ac:69:5c:00:c2:71

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

409024

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Projects\vcd\bin\mm_dec.pdb

mm_enc.dll

IMPHASH b5765d97d24640501fb2f892f51c4c09
SHA256 225c18e23fd8b09b7183675c5d74d0227e9378afc1990cf0e7a2bcb8a92bc64d
MD5 5ed84f0fbc9be9f27d67a9f312012762
SHA1 3c398e1af5add1bb597ff1352525a78cefb9366b
SHA512 9dde6112bf3bb2e27ff93bb141dbb2cc26acce141967794b7eb4559a690c24b59eda93dd74b6b9bf92a05086b42a6f399189fa31dce9c15561518fa4b52c88f2
SSDEEP 6144:5vMYTa1VkSBC2KcVZGOPNPwnynmnBnunhn/nwnaRqIAOazUANcc:VMYitqIkGc
TLSH
T176E4959203F6EA46F3226D339A3EFDC2F2A4235CD499456B6811137990DD2CF5EB42C6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

99:af:7c:21:bc:76:ac:5a:0e:33:de:bf:63:be:7e:d5:04:f6:8c:a6

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

536380

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\Projects\vcd\bin\mm_enc.pdb

kernel32

GetLastError HeapFree HeapAlloc GetCurrentThreadId GetCommandLineA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapCreate HeapDestroy VirtualFree DeleteCriticalSection LeaveCriticalSection EnterCriticalSection VirtualAlloc HeapReAlloc GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle GetModuleFileNameA RtlUnwind WideCharToMultiByte GetConsoleCP GetConsoleMode CloseHandle MultiByteToWideChar ReadFile TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime RaiseException InitializeCriticalSectionAndSpinCount LoadLibraryA GetCPInfo GetACP GetOEMCP IsValidCodePage CreateFileA SetFilePointer WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle FlushFileBuffers GetModuleHandleA HeapSize GetLocaleInfoA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetEndOfFile GetProcessHeap

rgb9rast_1.dll

IMPHASH dfd9771d0e999ed62800448b4b84615c
SHA256 1e9e8829b238094661feb08ec095ebb3d55fcabd32dfe7c999845234ef2b2490
MD5 100b9cd7fa428d9ebccb73b79f52fb74
SHA1 c633a9706dfe7d97c70c54fcffdccd6a00334f3a
SHA512 6aa9010fae3ae1b9c415ea4792f51aae1f97a7c5bf8ca526a5c791e546d18f352bb789014ba9ff03decda46881acee7367c70b16cf00117055e77972b6aa5717
SSDEEP 3072:9TS+tr6rAOR/K32pr2rjOw9ThS5UCefG0IqKmsktRrIXmHP2LDy6No:4T/mFOw9ThYkG0lKm6fe
TLSH
T14BE35A707884C279CCD3B2F54ADDB63559FDD2920B208AE7588807F89B54FC6A63221F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

75:c5:0e:43:09:48:41:b1:91:1b:d1:c2:b5:bc:6b:e6:64:68:ec:b4

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Jul 27, 2005

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=VeriSign Time Stamping Services Signer,O=VeriSign\, Inc.,C=US

Serial Number

0d:e9:2b:f0:d4:d8:29:88:18:32:05:09:5e:9a:76:88

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2008

Subject

Serial Number

c1:00:8b:3c:3c:88:11:d1:3e:f6:63:ec:df:40

Issuer

Timespan

Jan 10, 1997 - Dec 31, 2020

Subject

Serial Number

6a:0b:99:4f:c0:00:0c:ab:11:d8:22:ef:7d:6c:79:7e

Issuer

Key Usages

KeyUsageContentCommitment, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 23, 2002 - Sep 25, 2011

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

61:05:87:58:00:03:00:00:00:5a

Issuer

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jan 5, 2005 - Apr 5, 2006

Minor OS version

2

Major OS version

5

Entry point

81141

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

rgb9rast_1.pdb

uninstall.exe.nsis

SHA256 259743eaf18bbd8fc603d760d0b17d5a2cc72f9c9a18ce1c2d45f311b73fff17
MD5 a1dd8738347a624f1c63c96ecbe09dc6
SHA1 8755e11889346795967de73ed03614003e2b4e0d
SHA512 3b283f55d647a871c386aae1e4c327f29e26d8abeded643490e74136bd5eb27b950510b411fdf2dd83bd7e210a8d4d63f1e2b6caa4a16cabfea5bacbdd21cfff
SSDEEP 768:z5xj3CnS9lgBf7gqhlJ0hXwd/92YCjvOcLt:Dj3ISjm7Blkgd/92Y4
TLSH
T1DAC2F1C20DFDD7EE996C320D88A3B02756E9F10671DEC0CC95258E1B62F8467BC62468
MD5 SHA1 SHA512 SSDEEP TLSH

videosource.dll

IMPHASH af58f257eb8504b4f6801d6f9877f352
SHA256 db83538ec6e7a9b89f4b5c9f7f207000348aa7cde0b9c48ef2bd9cbb259a4951
MD5 df347aeb1951edf79c4d1e1d89051c50
SHA1 2401dbef3e13d35a2984cd195d0379b7f6528226
SHA512 41265f8c06c3067f9ad0b1d93e746f1184a31f8f56f8e95b12505694651e5339e30adfe6a01a3f29ac3ece10b17f4d972731f1cf98826f6fe0ca78e51e1b3966
SSDEEP 3072:S8Dg8uGnhEzKPhP9hAdEj6cZsM55FrVtnP3tNNxfA:dDRuMhEzKZPIdEj6Wh5F3zA
TLSH
T1C3F37D0136F1C83AF1EB257A98B6C3614E7BB82159708A4F37808A5E1F71791DF25B63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

fa:a6:20:33:32:ce:eb:6d:6c:8f:f0:c5:88:35:ea:a4:78:ec:8c:1e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Chains

Aug 19, 2011

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Serial Number

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageContentCommitment

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jun 15, 2007 - Jun 14, 2012

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Serial Number

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Dec 4, 2003 - Dec 3, 2013

Subject

CN=Camshare L C,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Camfrog,O=Camshare L C,L=Moody,ST=Texas,C=US

Serial Number

54:af:1e:28:1e:8f:c5:60:27:9c:aa:32:a6:8d:73:81

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Sep 9, 2009 - Oct 19, 2012

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Serial Number

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning

Timespan

May 21, 2009 - May 20, 2019

Minor OS version

0

Major OS version

5

Entry point

57422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

videosource.pdb

kernel32

CompareStringA ReadFile GetProcessHeap LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CompareStringW DeleteCriticalSection GetFileAttributesW CreateDirectoryW GetProcAddress SetEndOfFile CreateFileA LoadLibraryA CreateFileW InitializeCriticalSectionAndSpinCount WriteConsoleW GetConsoleOutputCP WriteConsoleA SetStdHandle SetFilePointer RaiseException RtlUnwind TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetSystemTimeAsFileTime GetLocalTime GetCurrentThreadId GetCommandLineA GetLastError HeapFree HeapAlloc GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError InterlockedDecrement GetCPInfo GetACP GetOEMCP IsValidCodePage LCMapStringW WideCharToMultiByte GetTimeZoneInformation CloseHandle WriteFile GetConsoleCP GetConsoleMode FlushFileBuffers Sleep HeapSize ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId VirtualAlloc HeapReAlloc LCMapStringA MultiByteToWideChar GetStringTypeA GetStringTypeW GetLocaleInfoA SetEnvironmentVariableA

user32

FillRect GetClientRect GetDC GetDesktopWindow

gdi32

DeleteObject DeleteDC CreateSolidBrush

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

ole32

CoLoadLibrary CoGetClassObject CoCreateInstance CoTaskMemFree CoFreeUnusedLibraries

oleaut32

VariantInit VariantClear OleCreatePropertyFrame SysAllocString SysFreeString

xfrog.fxo

SHA256 07062f5df2290c3645b3fc571c58c6d93b62df4d16e60a5a5942502e2fbf4a96
MD5 f6e35319d1428e44c4938266adc76fbb
SHA1 bd659c8c79ce195e6f21c463b66996f84354a438
SHA512 621b0af53b60626d0afd4c94f13cda6678231a6a2f26d2b3f8188bf15c183254a7ed220f8675c464a520e88514d2a4132a19b262c5a6f49eca439dadf16b749a
TLSH
T1C981ED9AFB888B5BD8A947304A930B213335E485FF079797A46077391CA73848E835BC
MD5 SHA1 SHA512 TLSH

Sharing

General

Malware Config

Signatures

File Explorer

camfrog_6.1.146.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/1_ico.bmp

$PLUGINSDIR/2_ico.bmp

$PLUGINSDIR/3_ico.bmp

$PLUGINSDIR/Camfrog_Chrome.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$TEMP/googleupdatesetup.exe

PE Signature issue

kernel32

shlwapi

ole32

user32

generic

$PLUGINSDIR/Camfrog_Toolbar.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$TEMP/GoogleToolbarInstaller_stub_signed.exe

PE Signature issue

kernel32

version

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

urlmon

userenv

crypt32

psapi

wininet

wintrust

generic

$PLUGINSDIR/DownloadOffers.exe

urlmon

kernel32

shell32

ole32

generic

$PLUGINSDIR/ExecDos.dll

kernel32

user32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32