zljll.zip
- SHA256 8b1f6ca7e80d2bc8b78ff4515c45d91bf76c786445c189908e4f2cd212d5caf3
Overview
overview
5Static
static
51.exe
windows10-2004-x64
11.exe
windows11-ltsc_2024-x64
12.exe
windows10-2004-x64
12.exe
windows11-ltsc_2024-x64
13 (2).exe
windows10-2004-x64
13 (2).exe
windows11-ltsc_2024-x64
13.exe
windows10-2004-x64
13.exe
windows11-ltsc_2024-x64
13.pdf
windows10-2004-x64
33.pdf
windows11-ltsc_2024-x64
34.pdf
windows10-2004-x64
34.pdf
windows11-ltsc_2024-x64
385.exe
windows10-2004-x64
185.exe
windows11-ltsc_2024-x64
18qwd.exe
windows10-2004-x64
18qwd.exe
windows11-ltsc_2024-x64
1966XC.exe
windows10-2004-x64
1966XC.exe
windows11-ltsc_2024-x64
19788463.exe
windows10-2004-x64
19788463.exe
windows11-ltsc_2024-x64
1HH.pdf
windows10-2004-x64
3HH.pdf
windows11-ltsc_2024-x64
3IIY.exe
windows10-2004-x64
1IIY.exe
windows11-ltsc_2024-x64
1KIFU.exe
windows10-2004-x64
1KIFU.exe
windows11-ltsc_2024-x64
1KISDF.exe
windows10-2004-x64
1KISDF.exe
windows11-ltsc_2024-x64
1LoggerCollector.dll
windows10-2004-x64
3LoggerCollector.dll
windows11-ltsc_2024-x64
3MyProg-x64.exe
windows10-2004-x64
1MyProg-x64.exe
windows11-ltsc_2024-x64
1Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
1.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
1.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
3 (2).exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
3 (2).exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
3.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
3.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
3.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral10
Sample
3.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral11
Sample
4.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral12
Sample
4.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral13
Sample
85.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
85.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
8qwd.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
8qwd.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
966XC.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
966XC.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral19
Sample
9788463.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral20
Sample
9788463.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral21
Sample
HH.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
7 signatures
150 seconds
Behavioral task
behavioral22
Sample
HH.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
Behavioral task
behavioral23
Sample
IIY.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral24
Sample
IIY.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral25
Sample
KIFU.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral26
Sample
KIFU.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral27
Sample
KISDF.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral28
Sample
KISDF.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral29
Sample
LoggerCollector.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral30
Sample
LoggerCollector.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral31
Sample
MyProg-x64.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral32
Sample
MyProg-x64.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target zljll.zip
- Size 9.0MB
- Sample261014-pg3yhavtfv
- SHA256 8b1f6ca7e80d2bc8b78ff4515c45d91bf76c786445c189908e4f2cd212d5caf3
- MD5 fd141a01d46f7c9c7145fdce54e89ff5
- SHA1 5ac988723b3be098af0fb58e553f1a347f1a5447
- SHA512 08f3ab110abfc6de356a7ac989fd94a223140ccd4a791bf183017d0807cf293f805e6aaf7753085a8104b72a3802051b89edec54aa4f7da26bf5ecb47cf2c6ba
- SSDEEP 196608:cfTyKrkogmYyjBmYyj5mqCb5vTTmYyjnBmYyjRKuOmmYyj3mYyjOmYyj5:c7y7xwMCtvLOju7G1u
- TLSH T19D9633CA5FA848846101F1AD0BBFDD2AEF6DEA466DA4CF431DC96083C24D1CB885DF59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- DLL Hijacking vulnerability 1 IoCs
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
resource unpack001/gmodule-2.0.dll - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/gmodule-2.0.dll - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/LoggerCollector.dll
File Explorer
-
zljll.zip.zip 9.0MB
-
1.exe.exe 76KB
-
2.exe.exe 76KB
-
2.ico16KB
-
2.txt18B
-
222.txt18B
-
3 (2).exe.exe 76KB
-
3.exe.exe 76KB
-
3.ico16KB
-
3.pdf.pdf 824KB
-
4.ico16KB
-
4.pdf.pdf 824KB
-
55.ico127KB
-
6.ico16KB
-
85.exe.exe 76KB
-
8qwd.exe.exe 76KB
-
966XC.exe.exe 76KB
-
9788463.exe.exe 76KB
-
BBB.ico24KB
-
F.ico16KB
-
G.ico16KB
-
H.ico16KB
-
HH.pdf.pdf 824KB
-
IIY.exe.exe 76KB
-
KIFU.exe.exe 76KB
-
KISDF.exe.exe 76KB
-
LoggerCollector.dll.dll 95KB
-
MMF.ico24KB
-
MyProg-x64.exe.exe 76KB
-
PW.bin1KB
-
RTBV.ico24KB
-
S.ico16KB
-
SER.pdf.pdf 824KB
-
STYUU.exe.exe 76KB
-
SetupIcon - 副本.ico24KB
-
SetupIcon.ico24KB
-
TT.exe.exe 76KB
-
TYU.exe.exe 76KB
-
UTR.exe.exe 76KB
-
XIAO.pdf.pdf 824KB
-
YUA.exe.exe 76KB
-
bgf.exe.exe 76KB
-
chgport.exe.exe 2.2MB
-
dda.ico24KB
-
dw.exe.exe 76KB
-
fg.exe.exe 76KB
-
fg.ico16KB
-
glib-2.0.dll.dll 1.1MB
-
gmodule-2.0.dll.dll 130KB
-
gobject-2.0.dll.dll 295KB
-
help.pdf.pdf 824KB
-
hggs.ico24KB
-
intl.dll.dll 94KB
-
ioy.ico16KB
-
llod.exe.exe 76KB
-
lpinfos.dll.dll 33KB
-
msvcp140.dll.dll 544KB
-
oid.pdf.pdf 824KB
-
pcre.dll.dll 403KB
-
qe79c.exe.exe 76KB
-
qerga.exe.exe 76KB
-
rt8a.exe.exe 76KB
-
ssafgt.ico24KB
-
vcruntime140.dll.dll 117KB
-
vcruntime140_1.dll.dll 48KB
-
vmtools.dll.dll 821KB
-
vmtoolsd.exe.exe 91KB
-
wow32.dll.dll 510KB
-
图标组103.ico127KB
-
新建文本文档.txt18B
1.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
2.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
2.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
2.txt
- SHA256 d6aae17a44e4d1f7e882e5fe898f56edfc0aaa27d620f735c9ed7902ce72c199
- MD5 fa1cd2e98edffcc96319ac4133176307
- SHA1 769fc3d91e8d2f9e2c7e70f95cacc6243c9191c6
- SHA512 96a260b9a1fb596899c87d13dd7251fc3011f8c2a6ea71def3b2ec7b435ff1584460fc6d6cff5b23113ed5706c76040c64c0910f7c90e3e91d9bad1fdbaa9fae
- MD5 SHA1 SHA512
222.txt
- SHA256 d6aae17a44e4d1f7e882e5fe898f56edfc0aaa27d620f735c9ed7902ce72c199
- MD5 fa1cd2e98edffcc96319ac4133176307
- SHA1 769fc3d91e8d2f9e2c7e70f95cacc6243c9191c6
- SHA512 96a260b9a1fb596899c87d13dd7251fc3011f8c2a6ea71def3b2ec7b435ff1584460fc6d6cff5b23113ed5706c76040c64c0910f7c90e3e91d9bad1fdbaa9fae
- MD5 SHA1 SHA512
3 (2).exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
3.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
3.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
3.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
4.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
4.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
55.ico
- SHA256 bc26780840e1d52b7214c3f9655b5c5114967ed2c0700f4a524db476200d909e
- MD5 bfc2f7ffdae9d9e62fcebb5d3a0e9e1e
- SHA1 cf2438aeced0eae21381ddd7b4e2c100b931fc3c
- SHA512 f0cd94a80d93ec75a46e6fe79841e5d10fdc1f87e73197aa5cb3a411834a3fb9962f4ca8869086b2691dddb5e02bbee3762e2dab830917cf72e8d7f361762731
- SSDEEP 3072:Ws3A63r4ybzfWRKqwhT+36Ub6/utwTY8BmihtfsQrC:WpI4ybzf2KLTSDtwTYBiXjC
- TLSH T15FD3F1B3E682565DC4279DFDA001C6B956238D28B0714E2260F1BF2B7674393AD3D1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
6.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
85.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
8qwd.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
966XC.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
9788463.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
BBB.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
F.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
G.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
H.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
HH.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
IIY.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
KIFU.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
KISDF.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
LoggerCollector.dll
- IMPHASH 34191e329aa2fecd99bec0d42664f9e5
- SHA256 e60b22ed4e5e75122b39182eac0c41f5ede0e9d5b1b182769496a90815f29371
- MD5 b5da29b2c80fe13de471fc928b101831
- SHA1 b222d95131e3d06e58add82b8b830fce8f7c24be
- SHA512 7139146469b7c9c8f25c0c6fe4a95d424e700d66ffaf41e285dc62622c6297c03d80b8e4d1c00f165280b1a4fe7145c18f78b14625665eaac6450952e02b7c15
- SSDEEP 1536:FX+tlqk6/UoMKDrdCMpKmy54IU17/j3rN3fQOvgbGLSg61sWhsLcdwjGPWnAR:FX+te/UoTESKmx17FvQOvgjDpsawjGPv
- TLSH T1BE937B40B1D1D079E4BE19391868DA715B7EB910DFE0ACE7275507AE4E302C0EF39E2A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
0c:a1:63:e4:fc:fd:e7:99:c5:ea:bd:3d:12:ac:76:33:a9:3b:e3:3f:94:cb:35:ce:e7:d7:1f:28:99:7c:b6:41
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Oct 11, 2026
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
6e:9d:03:62:6f:6c:83:be:45:cb:94:9f:11:4f:b5:9c
Issuer
CN=Microsoft Windows Production PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Timespan
Mar 26, 2024 - Dec 31, 2039
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
0
Major OS version
6
Entry point
7926
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
kernel32
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
EncodePointer
RaiseException
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer
LogCollectorGetAllLogLevel
LogCollectorGetLogLevel
LogCollectorInit
OnLogCollectorTask
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=11, id=259, version=33140,
count=137, id=261, version=33140,
count=19, id=260, version=33140,
count=20, id=259, version=35207,
count=15, id=260, version=35207,
count=30, id=261, version=35207,
count=3, id=257, version=33140,
count=88, id=1, productName=Unmarked objects,
count=2, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=258, version=35217,
MMF.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
MyProg-x64.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
PW.bin
- SHA256 47c3cdcd7d66e8110191cefeebd2c3a41c79a35be2d6fa6343c327d329787db4
- MD5 29e0e4adda7ccc00f6fc83cf9724b6fa
- SHA1 c4008d327941102a661bd2e79da459114e06a607
- SHA512 7de40326fd944bceb2c716d67d725cd8cc9350c5fc0b710df34b7bd8cc758caeef0bcb812d66cd36dd824d81f73e5d05fe6fa391d86da711ae94e6a081c2faac
- TLSH T190314EAF92B641ED38987066F960AC7CABD0DF8F2F700140A2F83694B39B80B5A14548
- MD5 SHA1 SHA512 TLSH
RTBV.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
S.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
SER.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
STYUU.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
SetupIcon - 副本.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
SetupIcon.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
TT.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
TYU.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
UTR.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
XIAO.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
YUA.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
bgf.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
chgport.exe
- IMPHASH 801311b38c50dfba8c03ac5783f3b410
- SHA256 255e4c5b81ddabc02455b7b4560e168b4064e63ec3721230201d1a7928c9f158
- MD5 33922d12e5bb8f40ecddf816124ae93d
- SHA1 28244217fa205f12cf40278e97a3a01e6d7366a3
- SHA512 1fdc906fdf3a89105d8e8996ec58e26e4d802fbbc99004d2f9a13a94cabeabde104fd55135763d5b959d1741d53e06ca18879407864c1e37e0a8764df9ea1973
- SSDEEP 49152:6r7yiWVow1eV9LFc2/4Pu6qBWzoTJkpuHI27:47PW+2eV9LXmCWzwJS+
- TLSH T1E5B56D21B546E433E5B200B157BF57FEC62DAA30172580CBA3C05EB95A386D37A3176B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a5:c9:dc:0d:5a:f6:a9:f6:c8:2b:07:27:cc:14:d9:06:62:96:50:50:df:e4:6b:1a:06:43:fc:dd:da:35:bc:a7
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Apr 25, 2022
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
77:2a:f8:fb:4e:19:aa:d9:66:ad:99:92:76:26:5d:1b:86:8b:0e:28
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Apr 25, 2022
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert\, Inc.,C=US
Serial Number
0a:7a:4a:88:9e:c9:99:42:90:06:63:38:4d:86:97:9d
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 29, 2022 - Mar 14, 2033
Subject
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.2=#0c09e6b599e6b19fe79c81,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
08:9f:d5:83:8b:30:58:28:61:f0:ed:44:6c:27:7c:68
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 10, 2021 - Aug 19, 2023
Minor OS version
1
Major OS version
5
Entry point
1429224
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
F:\tyb-elf\elf\Release\elf.pdb
loggercollector
OnLogCollectorTask
LogCollectorGetLogLevel
LogCollectorInit
wininet
InternetGetCookieA
InternetSetCookieA
kernel32
MultiByteToWideChar
lstrcmpiW
ExitProcess
GetCommandLineW
CreateMutexA
OpenMutexA
CreateDirectoryW
ReadFile
WriteFile
SetFilePointer
LocalFileTimeToFileTime
GetCurrentDirectoryW
SystemTimeToFileTime
DeleteFileW
GetModuleFileNameW
LoadLibraryA
GetModuleHandleA
GetSystemDirectoryA
FormatMessageW
MoveFileExA
GetFileType
GetStdHandle
PeekNamedPipe
GetEnvironmentVariableA
VerifyVersionInfoA
GetCurrentProcessId
TerminateThread
SetEvent
Sleep
CreateEventW
GetQueuedCompletionStatus
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
InterlockedCompareExchange
SetLastError
TlsSetValue
SetWaitableTimer
OutputDebugStringA
VirtualFreeEx
CreateProcessW
ReadProcessMemory
VirtualAllocEx
Process32FirstW
Process32NextW
OpenProcess
lstrcmpA
WriteProcessMemory
GlobalUnlock
WideCharToMultiByte
GlobalLock
CreateDirectoryA
GetLongPathNameA
GetTempPathA
CreateThread
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
GetDriveTypeW
LoadLibraryW
GetVersionExW
GlobalFree
GlobalAlloc
CloseHandle
CreateFileW
DeviceIoControl
GetModuleHandleW
HeapSize
WriteConsoleW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
CreateToolhelp32Snapshot
GetTickCount
GetPrivateProfileIntW
OutputDebugStringW
LoadLibraryExW
FreeLibrary
GetProcAddress
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageA
TlsFree
InterlockedIncrement
LocalFree
InterlockedExchangeAdd
TlsAlloc
GetLastError
PostQueuedCompletionStatus
LeaveCriticalSection
InterlockedDecrement
CreateIoCompletionPort
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
HeapReAlloc
HeapFree
FlushFileBuffers
HeapAlloc
GetConsoleCP
ReadConsoleW
GetConsoleMode
SetEnvironmentVariableA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleExW
ExitThread
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
FreeLibraryAndExitThread
GetThreadTimes
GetCurrentThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
EnterCriticalSection
InterlockedExchange
GetCurrentThreadId
lstrlenW
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
GetSystemTimeAsFileTime
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
GetStringTypeW
SwitchToThread
WaitForSingleObjectEx
TryEnterCriticalSection
MoveFileExW
AreFileApisANSI
SetFilePointerEx
SetEndOfFile
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindClose
lstrcpynW
RaiseException
lstrcpyW
DecodePointer
FindResourceW
SizeofResource
LoadResource
LockResource
TlsGetValue
VerifyVersionInfoW
SleepEx
VerSetConditionMask
SetStdHandle
QueueUserAPC
FreeResource
MulDiv
GetACP
GetFileSize
GetLocalTime
user32
MapWindowPoints
GetSysColor
UnionRect
GetWindowLongW
RegisterWindowMessageW
InvalidateRect
ReleaseCapture
GetClientRect
GetMonitorInfoW
OffsetRect
FillRect
MonitorFromWindow
SetWindowPos
InflateRect
GetWindowRect
MoveWindow
IsWindowVisible
DestroyWindow
SetWindowLongW
IsRectEmpty
GetWindow
CallWindowProcW
DefWindowProcW
SendMessageTimeoutW
GetCursorPos
PtInRect
PostQuitMessage
KillTimer
IsZoomed
FindWindowW
IntersectRect
SetTimer
GetSystemMetrics
ScreenToClient
GetParent
SystemParametersInfoW
EnumDisplaySettingsW
GetDesktopWindow
ClientToScreen
SendMessageW
FindWindowExW
GetWindowThreadProcessId
IsWindow
SendNotifyMessageW
RegisterClassW
CreateWindowExW
PostMessageW
TranslateMessage
MapVirtualKeyExW
GetKeyNameTextW
GetKeyboardLayout
GetGUIThreadInfo
InvalidateRgn
CreateAcceleratorTableW
DrawTextA
wsprintfA
IsWindowEnabled
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
GetCaretBlinkTime
CreateCaret
TrackPopupMenu
AppendMenuW
EnableMenuItem
DestroyMenu
CreatePopupMenu
SetRect
DrawTextW
CharPrevW
GetWindowRgn
UpdateLayeredWindow
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
UpdateWindow
SetForegroundWindow
MonitorFromPoint
MessageBoxW
SetWindowRgn
SetPropW
EnableWindow
ShowWindow
GetClassInfoExW
RegisterClassExW
LoadCursorW
SetCursor
EnumDisplayMonitors
GetUpdateRect
GetPropW
EnumWindows
GetMessageW
LoadAcceleratorsW
DispatchMessageW
TranslateAcceleratorW
ReleaseDC
IsIconic
EqualRect
EndPaint
CharNextW
SetFocus
GetActiveWindow
GetFocus
GetKeyState
SetCapture
GetDC
BeginPaint
LoadImageW
gdi32
SetBitmapBits
GetBitmapBits
GetTextExtentPointA
GetClipBox
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
DeleteDC
DeleteObject
GetDeviceCaps
GetStockObject
AddFontMemResourceEx
RemoveFontMemResourceEx
Rectangle
RestoreDC
SaveDC
SelectObject
CloseEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
PlayEnhMetaFile
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CreatePatternBrush
SetBkMode
SetTextColor
CreateRectRgn
PtInRegion
CreateDIBSection
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
GetObjectA
MoveToEx
TextOutW
GdiFlush
advapi32
CryptDestroyHash
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegSetValueExW
CryptAcquireContextA
CryptReleaseContext
CryptEncrypt
CryptImportKey
CryptDestroyKey
RegQueryValueExW
CryptHashData
CryptCreateHash
CryptGetHashParam
shell32
SHGetFolderPathW
DragQueryFileW
ole32
CLSIDFromString
CLSIDFromProgID
OleLockRunning
OleDuplicateData
DoDragDrop
RegisterDragDrop
CreateStreamOnHGlobal
CoCreateInstance
ReleaseStgMedium
CoInitializeEx
ws2_32
sendto
recvfrom
WSAStartup
WSACleanup
gethostname
gethostbyname
WSAGetLastError
setsockopt
ioctlsocket
htons
htonl
getsockopt
WSARecv
connect
ntohs
getsockname
WSASocketW
WSASetLastError
listen
ntohl
select
WSASend
closesocket
WSAIoctl
bind
accept
__WSAFDIsSet
WSAStringToAddressW
send
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
recv
getpeername
socket
getaddrinfo
freeaddrinfo
comctl32
ord17
InitCommonControlsEx
_TrackMouseEvent
gdiplus
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipLoadImageFromStream
GdipDeleteGraphics
GdipCreateFromHDC
GdipFree
GdipLoadImageFromStreamICM
GdipDisposeImage
GdipImageSelectActiveFrame
GdipAlloc
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipCreatePath
GdipDeletePath
GdipAddPathLine
ord1
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetSmoothingMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipDrawRectangleI
GdipDrawPath
GdipFillRectangleI
GdipFillPath
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImageRectI
GdipSetStringFormatTrimming
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
iphlpapi
GetAdaptersInfo
shlwapi
StrCmpW
PathFileExistsA
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
oleaut32
SysFreeString
VariantClear
SysAllocString
VariantInit
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
288KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
30KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
103KB
Virtual Size
102KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
84KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=241, version=40116,
count=205, id=243, version=40116,
count=33, id=242, version=40116,
count=7, id=199, version=41118,
count=19, id=260, version=28920,
count=26, id=259, version=28920,
count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=157, id=261, version=28920,
count=51, id=261, productName=VS2019 v16.7.1 build 29111, version=29111,
count=16, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=103, id=260, productName=VS2019 v16.7.1 build 29111, version=29111,
count=30, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, productName=VS2019 v16.7.1 build 29111, version=29111,
count=546, id=1, productName=Unmarked objects,
count=72, id=265, version=29111,
count=1, id=255, productName=VS2019 v16.7.1 build 29111, version=29111,
count=1, id=151,
count=1, id=258, productName=VS2019 v16.7.1 build 29111, version=29111,
dda.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
dw.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
fg.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
fg.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
glib-2.0.dll
- IMPHASH 85dcd5344799452c9ff25c313c50445a
- SHA256 2e6ed256cc0c0e1dbd8d0fbd83818744b4723def05be9c0bcbca961feac56fdf
- MD5 daa7802f04778cb6287490737ad48c50
- SHA1 115ec90a6b366e469aca8082524f13be14a4c5e0
- SHA512 d0d697fd12229a90add7a2effb6541425b1e33144ba98ad4b044f4ab12a0b9ad5288c1b42a9a59efe2422e0028ebe4fa6645392c39eb9118e49422cd26793331
- SSDEEP 24576:wiLoh7Mu3tDbVt1nqxo/GqMMaeE0YZr+NIZd6tv1M80ap:xkh7Mu3tf1nQo/GqJbE0YZrsoktvEC
- TLSH T110452955E64939A7EB96CC7988E19353E27075080F3366DB3E6CC6691B2FAD30236F01
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
21:0f:d2:e0:14:fa:14:2c:23:a1:93:6b:e8:db:c4:d1:43:fd:f9:2f:75:e7:14:30:34:73:07:a8:e2:a7:8f:93
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
19:f6:43:4b:c9:bd:05:d3:65:66:d7:77:b6:9b:11:cb:99:19:a3:2b
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
606048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-11054036\cayman_glib\glib\src\build\win32\vs14\Release\x64\bin\glib-2.0.pdb
ws2_32
closesocket
WSACloseEvent
WSACreateEvent
WSASetEvent
WSAEventSelect
send
recv
getsockopt
WSAEnumNetworkEvents
ioctlsocket
WSAGetLastError
winmm
timeGetTime
pcre
pcre_get_stringnumber
pcre_config
pcre_dfa_exec
pcre_fullinfo
pcre_get_stringtable_entries
pcre_compile2
pcre_free
pcre_study
pcre_exec
intl
libintl_dgettext
libintl_sprintf
libintl_dcgettext
libintl_bindtextdomain
libintl_dngettext
libintl_bind_textdomain_codeset
libintl_gettext
libintl_textdomain
kernel32
GetVersion
LocalFree
GetModuleHandleW
FreeLibrary
FormatMessageW
LoadLibraryW
GetLocaleInfoA
MapViewOfFile
GetShortPathNameW
GetCommandLineW
TlsGetValue
RaiseException
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TlsAlloc
TlsSetValue
TryEnterCriticalSection
GetConsoleWindow
DuplicateHandle
IsDebuggerPresent
IsDBCSLeadByteEx
GetCPInfo
GetACP
IsValidCodePage
MultiByteToWideChar
GetLastError
LoadLibraryA
GetProcAddress
WideCharToMultiByte
GetThreadLocale
GetLocaleInfoW
GetTimeZoneInformation
GetTimeFormatW
GetDateFormatW
GetFileAttributesW
ExpandEnvironmentStringsW
SetEnvironmentVariableW
GetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentDirectoryW
GetModuleHandleA
GetSystemTimeAsFileTime
GetTickCount
GetExitCodeProcess
UnmapViewOfFile
CloseHandle
CreateFileMappingA
DeleteCriticalSection
WaitForMultipleObjectsEx
SleepEx
GetSystemInfo
MoveFileExW
TerminateProcess
GetCurrentProcess
GetProcessAffinityMask
GetNativeSystemInfo
Sleep
GetModuleFileNameW
GetSystemDirectoryW
GetWindowsDirectoryW
VirtualQuery
GetComputerNameA
SetEvent
ResetEvent
CreateEventA
ReadFile
EnterCriticalSection
WriteFile
LeaveCriticalSection
InitializeCriticalSection
PeekNamedPipe
PeekConsoleInputA
WaitForSingleObject
ReadConsoleInputA
user32
IsWindow
MessageBoxA
PeekMessageA
PostMessageA
MsgWaitForMultipleObjectsEx
advapi32
RegOpenKeyExA
RegCloseKey
GetUserNameW
RegQueryValueExA
shell32
CommandLineToArgvW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CoTaskMemFree
vcruntime140
memcpy
memcmp
memchr
__std_type_info_destroy_list
wcschr
strstr
memset
strrchr
memmove
__C_specific_handler
strchr
api-ms-win-crt-string-l1-1-0
strcoll
islower
strcmp
isdigit
isupper
toupper
strxfrm
strpbrk
strcspn
_stricmp
_strnicmp
strncmp
strncpy
tolower
strspn
api-ms-win-crt-runtime-l1-1-0
_getpid
_cexit
strerror_s
_seh_filter_dll
_register_onexit_function
_configure_narrow_argv
strerror
_beginthreadex
_exit
_execute_onexit_table
_initialize_narrow_environment
abort
_initterm
_initterm_e
_crt_atexit
_initialize_onexit_table
_errno
exit
_endthreadex
api-ms-win-crt-time-l1-1-0
_gmtime64
_mktime64
_wutime64
_localtime64
_time64
api-ms-win-crt-convert-l1-1-0
strtol
atol
wctomb
atoi
strtoul
strtod
api-ms-win-crt-heap-l1-1-0
free
calloc
malloc
realloc
api-ms-win-crt-locale-l1-1-0
setlocale
localeconv
___mb_cur_max_func
api-ms-win-crt-filesystem-l1-1-0
_wremove
_wrmdir
_wstat64i32
_wunlink
_wfullpath
_wmkdir
_wchmod
_wfindnext64i32
_findclose
_fstat64
_wchdir
_waccess
_wfindfirst64i32
api-ms-win-crt-environment-l1-1-0
getenv
_wputenv
api-ms-win-crt-stdio-l1-1-0
_lseek
_wopen
_wcreat
_wfreopen
fputs
fflush
fwrite
_get_osfhandle
_read
_close
__stdio_common_vfprintf
__stdio_common_vsprintf
_chsize
__acrt_iob_func
_kbhit
fread
feof
fclose
_pipe
ferror
_open_osfhandle
_wfopen
_write
api-ms-win-crt-utility-l1-1-0
bsearch
rand_s
api-ms-win-crt-process-l1-1-0
_wspawnvpe
_wspawnvp
_wspawnv
_wspawnve
__glib_assert_msg
_glib_get_locale_dir
g_access
g_allocator_free
g_allocator_new
g_array_append_vals
g_array_free
g_array_get_element_size
g_array_insert_vals
g_array_new
g_array_prepend_vals
g_array_ref
g_array_remove_index
g_array_remove_index_fast
g_array_remove_range
g_array_set_clear_func
g_array_set_size
g_array_sized_new
g_array_sort
g_array_sort_with_data
g_array_unref
g_ascii_digit_value
g_ascii_dtostr
g_ascii_formatd
g_ascii_strcasecmp
g_ascii_strdown
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_strtoull
g_ascii_strup
g_ascii_table
g_ascii_tolower
g_ascii_toupper
g_ascii_xdigit_value
g_assert_warning
g_assertion_message
g_assertion_message_cmpnum
g_assertion_message_cmpstr
g_assertion_message_error
g_assertion_message_expr
g_async_queue_length
g_async_queue_length_unlocked
g_async_queue_lock
g_async_queue_new
g_async_queue_new_full
g_async_queue_pop
g_async_queue_pop_unlocked
g_async_queue_push
g_async_queue_push_front
g_async_queue_push_front_unlocked
g_async_queue_push_sorted
g_async_queue_push_sorted_unlocked
g_async_queue_push_unlocked
g_async_queue_ref
g_async_queue_ref_unlocked
g_async_queue_remove
g_async_queue_remove_unlocked
g_async_queue_sort
g_async_queue_sort_unlocked
g_async_queue_timed_pop
g_async_queue_timed_pop_unlocked
g_async_queue_timeout_pop
g_async_queue_timeout_pop_unlocked
g_async_queue_try_pop
g_async_queue_try_pop_unlocked
g_async_queue_unlock
g_async_queue_unref
g_async_queue_unref_and_unlock
g_atexit
g_atomic_int_add
g_atomic_int_and
g_atomic_int_compare_and_exchange
g_atomic_int_dec_and_test
g_atomic_int_exchange_and_add
g_atomic_int_get
g_atomic_int_inc
g_atomic_int_or
g_atomic_int_set
g_atomic_int_xor
g_atomic_pointer_add
g_atomic_pointer_and
g_atomic_pointer_compare_and_exchange
g_atomic_pointer_get
g_atomic_pointer_or
g_atomic_pointer_set
g_atomic_pointer_xor
g_base64_decode
g_base64_decode_inplace
g_base64_decode_step
g_base64_encode
g_base64_encode_close
g_base64_encode_step
g_basename
g_bit_lock
g_bit_nth_lsf
g_bit_nth_msf
g_bit_storage
g_bit_trylock
g_bit_unlock
g_blow_chunks
g_bookmark_file_add_application
g_bookmark_file_add_group
g_bookmark_file_error_quark
g_bookmark_file_free
g_bookmark_file_get_added
g_bookmark_file_get_app_info
g_bookmark_file_get_applications
g_bookmark_file_get_description
g_bookmark_file_get_groups
g_bookmark_file_get_icon
g_bookmark_file_get_is_private
g_bookmark_file_get_mime_type
g_bookmark_file_get_modified
g_bookmark_file_get_size
g_bookmark_file_get_title
g_bookmark_file_get_uris
g_bookmark_file_get_visited
g_bookmark_file_has_application
g_bookmark_file_has_group
g_bookmark_file_has_item
g_bookmark_file_load_from_data
g_bookmark_file_load_from_data_dirs
g_bookmark_file_load_from_file
g_bookmark_file_move_item
g_bookmark_file_new
g_bookmark_file_remove_application
g_bookmark_file_remove_group
g_bookmark_file_remove_item
g_bookmark_file_set_added
g_bookmark_file_set_app_info
g_bookmark_file_set_description
g_bookmark_file_set_groups
g_bookmark_file_set_icon
g_bookmark_file_set_is_private
g_bookmark_file_set_mime_type
g_bookmark_file_set_modified
g_bookmark_file_set_title
g_bookmark_file_set_visited
g_bookmark_file_to_data
g_bookmark_file_to_file
g_build_filename
g_build_filenamev
g_build_path
g_build_pathv
g_byte_array_append
g_byte_array_free
g_byte_array_free_to_bytes
g_byte_array_new
g_byte_array_new_take
g_byte_array_prepend
g_byte_array_ref
g_byte_array_remove_index
g_byte_array_remove_index_fast
g_byte_array_remove_range
g_byte_array_set_size
g_byte_array_sized_new
g_byte_array_sort
g_byte_array_sort_with_data
g_byte_array_unref
g_bytes_compare
g_bytes_equal
g_bytes_get_data
g_bytes_get_size
g_bytes_hash
g_bytes_new
g_bytes_new_from_bytes
g_bytes_new_static
g_bytes_new_take
g_bytes_new_with_free_func
g_bytes_ref
g_bytes_unref
g_bytes_unref_to_array
g_bytes_unref_to_data
g_cache_destroy
g_cache_insert
g_cache_key_foreach
g_cache_new
g_cache_remove
g_cache_value_foreach
g_chdir
g_checksum_copy
g_checksum_free
g_checksum_get_digest
g_checksum_get_string
g_checksum_new
g_checksum_reset
g_checksum_type_get_length
g_checksum_update
g_child_watch_add
g_child_watch_add_full
g_child_watch_funcs
g_child_watch_source_new
g_chmod
g_clear_error
g_clear_pointer
g_close
g_completion_add_items
g_completion_clear_items
g_completion_complete
g_completion_complete_utf8
g_completion_free
g_completion_new
g_completion_remove_items
g_completion_set_compare
g_compute_checksum_for_bytes
g_compute_checksum_for_data
g_compute_checksum_for_string
g_compute_hmac_for_data
g_compute_hmac_for_string
g_cond_broadcast
g_cond_clear
g_cond_free
g_cond_init
g_cond_new
g_cond_signal
g_cond_timed_wait
g_cond_wait
g_cond_wait_until
g_convert
g_convert_error_quark
g_convert_with_fallback
g_convert_with_iconv
g_creat
g_datalist_clear
g_datalist_foreach
g_datalist_get_data
g_datalist_get_flags
g_datalist_id_dup_data
g_datalist_id_get_data
g_datalist_id_remove_no_notify
g_datalist_id_replace_data
g_datalist_id_set_data_full
g_datalist_init
g_datalist_set_flags
g_datalist_unset_flags
g_dataset_destroy
g_dataset_foreach
g_dataset_id_get_data
g_dataset_id_remove_no_notify
g_dataset_id_set_data_full
g_date_add_days
g_date_add_months
g_date_add_years
g_date_clamp
g_date_clear
g_date_compare
g_date_days_between
g_date_free
g_date_get_day
g_date_get_day_of_year
g_date_get_days_in_month
g_date_get_iso8601_week_of_year
g_date_get_julian
g_date_get_monday_week_of_year
g_date_get_monday_weeks_in_year
g_date_get_month
g_date_get_sunday_week_of_year
g_date_get_sunday_weeks_in_year
g_date_get_weekday
g_date_get_year
g_date_is_first_of_month
g_date_is_last_of_month
g_date_is_leap_year
g_date_new
g_date_new_dmy
g_date_new_julian
g_date_order
g_date_set_day
g_date_set_dmy
g_date_set_julian
g_date_set_month
g_date_set_parse
g_date_set_time
g_date_set_time_t
g_date_set_time_val
g_date_set_year
g_date_strftime
g_date_subtract_days
g_date_subtract_months
g_date_subtract_years
g_date_time_add
g_date_time_add_days
g_date_time_add_full
g_date_time_add_hours
g_date_time_add_minutes
g_date_time_add_months
g_date_time_add_seconds
g_date_time_add_weeks
g_date_time_add_years
g_date_time_compare
g_date_time_difference
g_date_time_equal
g_date_time_format
g_date_time_get_day_of_month
g_date_time_get_day_of_week
g_date_time_get_day_of_year
g_date_time_get_hour
g_date_time_get_microsecond
g_date_time_get_minute
g_date_time_get_month
g_date_time_get_second
g_date_time_get_seconds
g_date_time_get_timezone_abbreviation
g_date_time_get_utc_offset
g_date_time_get_week_numbering_year
g_date_time_get_week_of_year
g_date_time_get_year
g_date_time_get_ymd
g_date_time_hash
g_date_time_is_daylight_savings
g_date_time_new
g_date_time_new_from_timeval_local
g_date_time_new_from_timeval_utc
g_date_time_new_from_unix_local
g_date_time_new_from_unix_utc
g_date_time_new_local
g_date_time_new_now
g_date_time_new_now_local
g_date_time_new_now_utc
g_date_time_new_utc
g_date_time_ref
g_date_time_to_local
g_date_time_to_timeval
g_date_time_to_timezone
g_date_time_to_unix
g_date_time_to_utc
g_date_time_unref
g_date_to_struct_tm
g_date_valid
g_date_valid_day
g_date_valid_dmy
g_date_valid_julian
g_date_valid_month
g_date_valid_weekday
g_date_valid_year
g_dcgettext
g_dgettext
g_dir_close
g_dir_make_tmp
g_dir_open_utf8
g_dir_read_name_utf8
g_dir_rewind
g_direct_equal
g_direct_hash
g_dngettext
g_double_equal
g_double_hash
g_dpgettext
g_dpgettext2
g_environ_getenv
g_environ_setenv
g_environ_unsetenv
g_error_copy
g_error_free
g_error_matches
g_error_new
g_error_new_literal
g_error_new_valist
g_file_error_from_errno
g_file_error_quark
g_file_get_contents_utf8
g_file_open_tmp_utf8
g_file_read_link
g_file_set_contents
g_file_test_utf8
g_filename_display_basename
g_filename_display_name
g_filename_from_uri_utf8
g_filename_from_utf8_utf8
g_filename_to_uri_utf8
g_filename_to_utf8_utf8
g_find_program_in_path
g_fopen
g_format_size
g_format_size_for_display
g_format_size_full
g_fprintf
g_free
g_freopen
g_get_application_name
g_get_charset
g_get_codeset
g_get_current_dir_utf8
g_get_current_time
g_get_environ
g_get_filename_charsets
g_get_home_dir
g_get_host_name
g_get_language_names
g_get_locale_variants
g_get_monotonic_time
g_get_num_processors
g_get_prgname
g_get_real_name
g_get_real_time
g_get_system_config_dirs
g_get_system_data_dirs
g_get_tmp_dir
g_get_user_cache_dir
g_get_user_config_dir
g_get_user_data_dir
g_get_user_name
g_get_user_runtime_dir
g_get_user_special_dir
g_getenv_utf8
g_hash_table_add
g_hash_table_contains
g_hash_table_destroy
g_hash_table_find
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_foreach_steal
g_hash_table_get_keys
g_hash_table_get_keys_as_array
g_hash_table_get_values
g_hash_table_insert
g_hash_table_iter_get_hash_table
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_iter_replace
g_hash_table_iter_steal
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_ref
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal
g_hash_table_steal_all
g_hash_table_unref
g_hmac_copy
g_hmac_get_digest
g_hmac_get_string
g_hmac_new
g_hmac_ref
g_hmac_unref
g_hmac_update
g_hook_alloc
g_hook_compare_ids
g_hook_destroy
g_hook_destroy_link
g_hook_find
g_hook_find_data
g_hook_find_func
g_hook_find_func_data
g_hook_first_valid
g_hook_free
g_hook_get
g_hook_insert_before
g_hook_insert_sorted
g_hook_list_clear
g_hook_list_init
g_hook_list_invoke
g_hook_list_invoke_check
g_hook_list_marshal
g_hook_list_marshal_check
g_hook_next_valid
g_hook_prepend
g_hook_ref
g_hook_unref
g_hostname_is_ascii_encoded
g_hostname_is_ip_address
g_hostname_is_non_ascii
g_hostname_to_ascii
g_hostname_to_unicode
g_iconv
g_iconv_close
g_iconv_open
g_idle_add
g_idle_add_full
g_idle_funcs
g_idle_remove_by_data
g_idle_source_new
g_int64_equal
g_int64_hash
g_int_equal
g_int_hash
g_intern_static_string
g_intern_string
g_io_add_watch
g_io_add_watch_full
g_io_channel_close
g_io_channel_error_from_errno
g_io_channel_error_quark
g_io_channel_flush
g_io_channel_get_buffer_condition
g_io_channel_get_buffer_size
g_io_channel_get_buffered
g_io_channel_get_close_on_unref
g_io_channel_get_encoding
g_io_channel_get_flags
g_io_channel_get_line_term
g_io_channel_init
g_io_channel_new_file_utf8
g_io_channel_read
g_io_channel_read_chars
g_io_channel_read_line
g_io_channel_read_line_string
g_io_channel_read_to_end
g_io_channel_read_unichar
g_io_channel_ref
g_io_channel_seek
g_io_channel_seek_position
g_io_channel_set_buffer_size
g_io_channel_set_buffered
g_io_channel_set_close_on_unref
g_io_channel_set_encoding
g_io_channel_set_flags
g_io_channel_set_line_term
g_io_channel_shutdown
g_io_channel_unix_get_fd
g_io_channel_unix_new
g_io_channel_unref
g_io_channel_win32_get_fd
g_io_channel_win32_make_pollfd
g_io_channel_win32_new_fd
g_io_channel_win32_new_messages
g_io_channel_win32_new_socket
g_io_channel_win32_poll
g_io_channel_win32_set_debug
g_io_channel_write
g_io_channel_write_chars
g_io_channel_write_unichar
g_io_create_watch
g_io_watch_funcs
g_key_file_error_quark
g_key_file_free
g_key_file_get_boolean
g_key_file_get_boolean_list
g_key_file_get_comment
g_key_file_get_double
g_key_file_get_double_list
g_key_file_get_groups
g_key_file_get_int64
g_key_file_get_integer
g_key_file_get_integer_list
g_key_file_get_keys
g_key_file_get_locale_string
g_key_file_get_locale_string_list
g_key_file_get_start_group
g_key_file_get_string
g_key_file_get_string_list
g_key_file_get_uint64
g_key_file_get_value
g_key_file_has_group
g_key_file_has_key
g_key_file_load_from_data
g_key_file_load_from_data_dirs
g_key_file_load_from_dirs
g_key_file_load_from_file
g_key_file_new
g_key_file_ref
g_key_file_remove_comment
g_key_file_remove_group
g_key_file_remove_key
g_key_file_save_to_file
g_key_file_set_boolean
g_key_file_set_boolean_list
g_key_file_set_comment
g_key_file_set_double
g_key_file_set_double_list
g_key_file_set_int64
g_key_file_set_integer
g_key_file_set_integer_list
g_key_file_set_list_separator
g_key_file_set_locale_string
g_key_file_set_locale_string_list
g_key_file_set_string
g_key_file_set_string_list
g_key_file_set_uint64
g_key_file_set_value
g_key_file_to_data
g_key_file_unref
g_list_alloc
g_list_append
g_list_concat
g_list_copy
g_list_copy_deep
g_list_delete_link
g_list_find
g_list_find_custom
g_list_first
g_list_foreach
g_list_free
g_list_free_1
g_list_free_full
g_list_index
g_list_insert
g_list_insert_before
g_list_insert_sorted
g_list_insert_sorted_with_data
g_list_last
g_list_length
g_list_nth
g_list_nth_data
g_list_nth_prev
g_list_pop_allocator
g_list_position
g_list_prepend
g_list_push_allocator
g_list_remove
g_list_remove_all
g_list_remove_link
g_list_reverse
g_list_sort
g_list_sort_with_data
g_listenv
g_locale_from_utf8
g_locale_to_utf8
g_log
g_log_default_handler
g_log_remove_handler
g_log_set_always_fatal
g_log_set_default_handler
g_log_set_fatal_mask
g_log_set_handler
g_log_set_handler_full
g_logv
g_lstat
g_main_context_acquire
g_main_context_add_poll
g_main_context_check
g_main_context_default
g_main_context_dispatch
g_main_context_find_source_by_funcs_user_data
g_main_context_find_source_by_id
g_main_context_find_source_by_user_data
g_main_context_get_poll_func
g_main_context_get_thread_default
g_main_context_invoke
g_main_context_invoke_full
g_main_context_is_owner
g_main_context_iteration
g_main_context_new
g_main_context_pending
g_main_context_pop_thread_default
g_main_context_prepare
g_main_context_push_thread_default
g_main_context_query
g_main_context_ref
g_main_context_ref_thread_default
g_main_context_release
g_main_context_remove_poll
g_main_context_set_poll_func
g_main_context_unref
g_main_context_wait
g_main_context_wakeup
g_main_current_source
g_main_depth
g_main_loop_get_context
g_main_loop_is_running
g_main_loop_new
g_main_loop_quit
g_main_loop_ref
g_main_loop_run
g_main_loop_unref
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mapped_file_free
g_mapped_file_get_bytes
g_mapped_file_get_contents
g_mapped_file_get_length
g_mapped_file_new
g_mapped_file_new_from_fd
g_mapped_file_ref
g_mapped_file_unref
g_markup_collect_attributes
g_markup_error_quark
g_markup_escape_text
g_markup_parse_context_end_parse
g_markup_parse_context_free
g_markup_parse_context_get_element
g_markup_parse_context_get_element_stack
g_markup_parse_context_get_position
g_markup_parse_context_get_user_data
g_markup_parse_context_new
g_markup_parse_context_parse
g_markup_parse_context_pop
g_markup_parse_context_push
g_markup_parse_context_ref
g_markup_parse_context_unref
g_markup_printf_escaped
g_markup_vprintf_escaped
g_match_info_expand_references
g_match_info_fetch
g_match_info_fetch_all
g_match_info_fetch_named
g_match_info_fetch_named_pos
g_match_info_fetch_pos
g_match_info_free
g_match_info_get_match_count
g_match_info_get_regex
g_match_info_get_string
g_match_info_is_partial_match
g_match_info_matches
g_match_info_next
g_match_info_ref
g_match_info_unref
g_mem_chunk_alloc
g_mem_chunk_alloc0
g_mem_chunk_clean
g_mem_chunk_destroy
g_mem_chunk_free
g_mem_chunk_info
g_mem_chunk_new
g_mem_chunk_print
g_mem_chunk_reset
g_mem_gc_friendly
g_mem_is_system_malloc
g_mem_profile
g_mem_set_vtable
g_memdup
g_mkdir
g_mkdir_with_parents
g_mkdtemp
g_mkdtemp_full
g_mkstemp_full
g_mkstemp_utf8
g_mutex_clear
g_mutex_free
g_mutex_init
g_mutex_lock
g_mutex_new
g_mutex_trylock
g_mutex_unlock
g_node_child_index
g_node_child_position
g_node_children_foreach
g_node_copy
g_node_copy_deep
g_node_depth
g_node_destroy
g_node_find
g_node_find_child
g_node_first_sibling
g_node_get_root
g_node_insert
g_node_insert_after
g_node_insert_before
g_node_is_ancestor
g_node_last_child
g_node_last_sibling
g_node_max_height
g_node_n_children
g_node_n_nodes
g_node_new
g_node_nth_child
g_node_pop_allocator
g_node_prepend
g_node_push_allocator
g_node_reverse_children
g_node_traverse
g_node_unlink
g_nullify_pointer
g_on_error_query
g_on_error_stack_trace
g_once_impl
g_once_init_enter
g_once_init_enter_impl
g_once_init_leave
g_open
g_option_context_add_group
g_option_context_add_main_entries
g_option_context_free
g_option_context_get_description
g_option_context_get_help
g_option_context_get_help_enabled
g_option_context_get_ignore_unknown_options
g_option_context_get_main_group
g_option_context_get_strict_posix
g_option_context_get_summary
g_option_context_new
g_option_context_parse
g_option_context_parse_strv
g_option_context_set_description
g_option_context_set_help_enabled
g_option_context_set_ignore_unknown_options
g_option_context_set_main_group
g_option_context_set_strict_posix
g_option_context_set_summary
g_option_context_set_translate_func
g_option_context_set_translation_domain
g_option_error_quark
g_option_group_add_entries
g_option_group_free
g_option_group_new
g_option_group_ref
g_option_group_set_error_hook
g_option_group_set_parse_hooks
g_option_group_set_translate_func
g_option_group_set_translation_domain
g_option_group_unref
g_parse_debug_string
g_path_get_basename
g_path_get_dirname
g_path_is_absolute
g_path_skip_root
g_pattern_match
g_pattern_match_simple
g_pattern_match_string
g_pattern_spec_equal
g_pattern_spec_free
g_pattern_spec_new
g_pointer_bit_lock
g_pointer_bit_trylock
g_pointer_bit_unlock
g_poll
g_prefix_error
g_print
g_printerr
g_printf
g_printf_string_upper_bound
g_private_get
g_private_new
g_private_replace
g_private_set
g_propagate_error
g_propagate_prefixed_error
g_ptr_array_add
g_ptr_array_foreach
g_ptr_array_free
g_ptr_array_insert
g_ptr_array_new
g_ptr_array_new_full
g_ptr_array_new_with_free_func
g_ptr_array_ref
g_ptr_array_remove
g_ptr_array_remove_fast
g_ptr_array_remove_index
g_ptr_array_remove_index_fast
g_ptr_array_remove_range
g_ptr_array_set_free_func
g_ptr_array_set_size
g_ptr_array_sized_new
g_ptr_array_sort
g_ptr_array_sort_with_data
g_ptr_array_unref
g_qsort_with_data
g_quark_from_static_string
g_quark_from_string
g_quark_to_string
g_quark_try_string
g_queue_clear
g_queue_copy
g_queue_delete_link
g_queue_find
g_queue_find_custom
g_queue_foreach
g_queue_free
g_queue_free_full
g_queue_get_length
g_queue_index
g_queue_init
g_queue_insert_after
g_queue_insert_before
g_queue_insert_sorted
g_queue_is_empty
g_queue_link_index
g_queue_new
g_queue_peek_head
g_queue_peek_head_link
g_queue_peek_nth
g_queue_peek_nth_link
g_queue_peek_tail
g_queue_peek_tail_link
g_queue_pop_head
g_queue_pop_head_link
g_queue_pop_nth
g_queue_pop_nth_link
g_queue_pop_tail
g_queue_pop_tail_link
g_queue_push_head
g_queue_push_head_link
g_queue_push_nth
g_queue_push_nth_link
g_queue_push_tail
g_queue_push_tail_link
g_queue_remove
g_queue_remove_all
g_queue_reverse
g_queue_sort
g_queue_unlink
g_rand_copy
g_rand_double
g_rand_double_range
g_rand_free
g_rand_int
g_rand_int_range
g_rand_new
g_rand_new_with_seed
g_rand_new_with_seed_array
g_rand_set_seed
g_rand_set_seed_array
g_random_double
g_random_double_range
g_random_int
g_random_int_range
g_random_set_seed
g_realloc
g_realloc_n
g_rec_mutex_clear
g_rec_mutex_init
g_rec_mutex_lock
g_rec_mutex_trylock
g_rec_mutex_unlock
g_regex_check_replacement
g_regex_error_quark
g_regex_escape_nul
g_regex_escape_string
g_regex_get_capture_count
g_regex_get_compile_flags
g_regex_get_has_cr_or_lf
g_regex_get_match_flags
g_regex_get_max_backref
g_regex_get_max_lookbehind
g_regex_get_pattern
g_regex_get_string_number
g_regex_match
g_regex_match_all
g_regex_match_all_full
g_regex_match_full
g_regex_match_simple
g_regex_new
g_regex_ref
g_regex_replace
g_regex_replace_eval
g_regex_replace_literal
g_regex_split
g_regex_split_full
g_regex_split_simple
g_regex_unref
g_relation_count
g_relation_delete
g_relation_destroy
g_relation_exists
g_relation_index
g_relation_insert
g_relation_new
g_relation_print
g_relation_select
g_reload_user_special_dirs_cache
g_remove
g_rename
g_return_if_fail_warning
g_rmdir
g_rw_lock_clear
g_rw_lock_init
g_rw_lock_reader_lock
g_rw_lock_reader_trylock
g_rw_lock_reader_unlock
g_rw_lock_writer_lock
g_rw_lock_writer_trylock
g_rw_lock_writer_unlock
g_scanner_cur_line
g_scanner_cur_position
g_scanner_cur_token
g_scanner_cur_value
g_scanner_destroy
g_scanner_eof
g_scanner_error
g_scanner_get_next_token
g_scanner_input_file
g_scanner_input_text
g_scanner_lookup_symbol
g_scanner_new
g_scanner_peek_next_token
g_scanner_scope_add_symbol
g_scanner_scope_foreach_symbol
g_scanner_scope_lookup_symbol
g_scanner_scope_remove_symbol
g_scanner_set_scope
g_scanner_sync_file_offset
g_scanner_unexp_token
g_scanner_warn
g_sequence_append
g_sequence_foreach
g_sequence_foreach_range
g_sequence_free
g_sequence_get
g_sequence_get_begin_iter
g_sequence_get_end_iter
g_sequence_get_iter_at_pos
g_sequence_get_length
g_sequence_insert_before
g_sequence_insert_sorted
g_sequence_insert_sorted_iter
g_sequence_is_empty
g_sequence_iter_compare
g_sequence_iter_get_position
g_sequence_iter_get_sequence
g_sequence_iter_is_begin
g_sequence_iter_is_end
g_sequence_iter_move
g_sequence_iter_next
g_sequence_iter_prev
g_sequence_lookup
g_sequence_lookup_iter
g_sequence_move
g_sequence_move_range
g_sequence_new
g_sequence_prepend
g_sequence_range_get_midpoint
g_sequence_remove
g_sequence_remove_range
g_sequence_search
g_sequence_search_iter
g_sequence_set
g_sequence_sort
g_sequence_sort_changed
g_sequence_sort_changed_iter
g_sequence_sort_iter
g_sequence_swap
g_set_application_name
g_set_error
g_set_error_literal
g_set_prgname
g_set_print_handler
g_set_printerr_handler
g_setenv_utf8
g_shell_error_quark
g_shell_parse_argv
g_shell_quote
g_shell_unquote
g_slice_alloc
g_slice_alloc0
g_slice_copy
g_slice_free1
g_slice_free_chain_with_offset
g_slice_get_config
g_slice_get_config_state
g_slice_set_config
g_slist_alloc
g_slist_append
g_slist_concat
g_slist_copy
g_slist_copy_deep
g_slist_delete_link
g_slist_find
g_slist_find_custom
g_slist_foreach
g_slist_free
g_slist_free_1
g_slist_free_full
g_slist_index
g_slist_insert
g_slist_insert_before
g_slist_insert_sorted
g_slist_insert_sorted_with_data
g_slist_last
g_slist_length
g_slist_nth
g_slist_nth_data
g_slist_pop_allocator
g_slist_position
g_slist_prepend
g_slist_push_allocator
g_slist_remove
g_slist_remove_all
g_slist_remove_link
g_slist_reverse
g_slist_sort
g_slist_sort_with_data
g_snprintf
g_source_add_child_source
g_source_add_poll
g_source_attach
g_source_destroy
g_source_get_can_recurse
g_source_get_context
g_source_get_current_time
g_source_get_id
g_source_get_name
g_source_get_priority
g_source_get_ready_time
g_source_get_time
g_source_is_destroyed
g_source_new
g_source_ref
g_source_remove
g_source_remove_by_funcs_user_data
g_source_remove_by_user_data
g_source_remove_child_source
g_source_remove_poll
g_source_set_callback
g_source_set_callback_indirect
g_source_set_can_recurse
g_source_set_funcs
g_source_set_name
g_source_set_name_by_id
g_source_set_priority
g_source_set_ready_time
g_source_unref
g_spaced_primes_closest
g_spawn_async_utf8
g_spawn_async_with_pipes_utf8
g_spawn_check_exit_status
g_spawn_close_pid
g_spawn_command_line_async_utf8
g_spawn_command_line_sync_utf8
g_spawn_error_quark
g_spawn_exit_error_quark
g_spawn_sync_utf8
g_sprintf
g_stat
g_static_mutex_free
g_static_mutex_get_mutex_impl
g_static_mutex_init
g_static_private_free
g_static_private_get
g_static_private_init
g_static_private_set
g_static_rec_mutex_free
g_static_rec_mutex_init
g_static_rec_mutex_lock
g_static_rec_mutex_lock_full
g_static_rec_mutex_trylock
g_static_rec_mutex_unlock
g_static_rec_mutex_unlock_full
g_static_rw_lock_free
g_static_rw_lock_init
g_static_rw_lock_reader_lock
g_static_rw_lock_reader_trylock
g_static_rw_lock_reader_unlock
g_static_rw_lock_writer_lock
g_static_rw_lock_writer_trylock
g_static_rw_lock_writer_unlock
g_stpcpy
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_str_is_ascii
g_str_match_string
g_str_to_ascii
g_str_tokenize_and_fold
g_strcanon
g_strcasecmp
g_strchomp
g_strchug
g_strcmp0
g_strcompress
g_strconcat
g_strdelimit
g_strdown
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strdupv
g_strerror
g_strescape
g_strfreev
g_string_append
g_string_append_c
g_string_append_len
g_string_append_printf
g_string_append_unichar
g_string_append_uri_escaped
g_string_append_vprintf
g_string_ascii_down
g_string_ascii_up
g_string_assign
g_string_chunk_clear
g_string_chunk_free
g_string_chunk_insert
g_string_chunk_insert_const
g_string_chunk_insert_len
g_string_chunk_new
g_string_down
g_string_equal
g_string_erase
g_string_free
g_string_free_to_bytes
g_string_hash
g_string_insert
g_string_insert_c
g_string_insert_len
g_string_insert_unichar
g_string_new
g_string_new_len
g_string_overwrite
g_string_overwrite_len
g_string_prepend
g_string_prepend_c
g_string_prepend_len
g_string_prepend_unichar
g_string_printf
g_string_set_size
g_string_sized_new
g_string_truncate
g_string_up
g_string_vprintf
g_strip_context
g_strjoin
g_strjoinv
g_strlcat
g_strlcpy
g_strncasecmp
g_strndup
g_strnfill
g_strreverse
g_strrstr
g_strrstr_len
g_strsignal
g_strsplit
g_strsplit_set
g_strstr_len
g_strtod
g_strup
g_strv_contains
g_strv_length
g_test_add_data_func
g_test_add_data_func_full
g_test_add_func
g_test_add_vtable
g_test_assert_expected_messages_internal
g_test_bug
g_test_bug_base
g_test_build_filename
g_test_config_vars
g_test_create_case
g_test_create_suite
g_test_expect_message
g_test_fail
g_test_failed
g_test_get_dir
g_test_get_filename
g_test_get_root
g_test_incomplete
g_test_init
g_test_log_buffer_free
g_test_log_buffer_new
g_test_log_buffer_pop
g_test_log_buffer_push
g_test_log_msg_free
g_test_log_set_fatal_handler
g_test_log_type_name
g_test_maximized_result
g_test_message
g_test_minimized_result
g_test_queue_destroy
g_test_queue_free
g_test_rand_double
g_test_rand_double_range
g_test_rand_int
g_test_rand_int_range
g_test_run
g_test_run_suite
g_test_set_nonfatal_assertions
g_test_skip
g_test_subprocess
g_test_suite_add
g_test_suite_add_suite
g_test_timer_elapsed
g_test_timer_last
g_test_timer_start
g_test_trap_assertions
g_test_trap_fork
g_test_trap_has_passed
g_test_trap_reached_timeout
g_test_trap_subprocess
g_thread_create
g_thread_create_full
g_thread_error_quark
g_thread_exit
g_thread_foreach
g_thread_functions_for_glib_use
g_thread_get_initialized
g_thread_gettime
g_thread_init_glib
g_thread_join
g_thread_new
g_thread_pool_free
g_thread_pool_get_max_idle_time
g_thread_pool_get_max_threads
g_thread_pool_get_max_unused_threads
g_thread_pool_get_num_threads
g_thread_pool_get_num_unused_threads
g_thread_pool_move_to_front
g_thread_pool_new
g_thread_pool_push
g_thread_pool_set_max_idle_time
g_thread_pool_set_max_threads
g_thread_pool_set_max_unused_threads
g_thread_pool_set_sort_function
g_thread_pool_stop_unused_threads
g_thread_pool_unprocessed
g_thread_ref
g_thread_self
g_thread_set_priority
g_thread_try_new
g_thread_unref
g_thread_use_default_impl
g_thread_yield
g_threads_got_initialized
g_time_val_add
g_time_val_from_iso8601
g_time_val_to_iso8601
g_time_zone_adjust_time
g_time_zone_find_interval
g_time_zone_get_abbreviation
g_time_zone_get_offset
g_time_zone_is_dst
g_time_zone_new
g_time_zone_new_local
g_time_zone_new_utc
g_time_zone_ref
g_time_zone_unref
g_timeout_add
g_timeout_add_full
g_timeout_add_seconds
g_timeout_add_seconds_full
g_timeout_funcs
g_timeout_source_new
g_timeout_source_new_seconds
g_timer_continue
g_timer_destroy
g_timer_elapsed
g_timer_new
g_timer_reset
g_timer_start
g_timer_stop
g_trash_stack_height
g_trash_stack_peek
g_trash_stack_pop
g_trash_stack_push
g_tree_destroy
g_tree_foreach
g_tree_height
g_tree_insert
g_tree_lookup
g_tree_lookup_extended
g_tree_new
g_tree_new_full
g_tree_new_with_data
g_tree_nnodes
g_tree_ref
g_tree_remove
g_tree_replace
g_tree_search
g_tree_steal
g_tree_traverse
g_tree_unref
g_try_malloc
g_try_malloc0
g_try_malloc0_n
g_try_malloc_n
g_try_realloc
g_try_realloc_n
g_tuples_destroy
g_tuples_index
g_ucs4_to_utf16
g_ucs4_to_utf8
g_unichar_break_type
g_unichar_combining_class
g_unichar_compose
g_unichar_decompose
g_unichar_digit_value
g_unichar_fully_decompose
g_unichar_get_mirror_char
g_unichar_get_script
g_unichar_isalnum
g_unichar_isalpha
g_unichar_iscntrl
g_unichar_isdefined
g_unichar_isdigit
g_unichar_isgraph
g_unichar_islower
g_unichar_ismark
g_unichar_isprint
g_unichar_ispunct
g_unichar_isspace
g_unichar_istitle
g_unichar_isupper
g_unichar_iswide
g_unichar_iswide_cjk
g_unichar_isxdigit
g_unichar_iszerowidth
g_unichar_to_utf8
g_unichar_tolower
g_unichar_totitle
g_unichar_toupper
g_unichar_type
g_unichar_validate
g_unichar_xdigit_value
g_unicode_canonical_decomposition
g_unicode_canonical_ordering
g_unicode_script_from_iso15924
g_unicode_script_to_iso15924
g_unlink
g_unsetenv_utf8
g_uri_escape_string
g_uri_list_extract_uris
g_uri_parse_scheme
g_uri_unescape_segment
g_uri_unescape_string
g_usleep
g_utf16_to_ucs4
g_utf16_to_utf8
g_utf8_casefold
g_utf8_collate
g_utf8_collate_key
g_utf8_collate_key_for_filename
g_utf8_find_next_char
g_utf8_find_prev_char
g_utf8_get_char
g_utf8_get_char_validated
g_utf8_normalize
g_utf8_offset_to_pointer
g_utf8_pointer_to_offset
g_utf8_prev_char
g_utf8_skip
g_utf8_strchr
g_utf8_strdown
g_utf8_strlen
g_utf8_strncpy
g_utf8_strrchr
g_utf8_strreverse
g_utf8_strup
g_utf8_substring
g_utf8_to_ucs4
g_utf8_to_ucs4_fast
g_utf8_to_utf16
g_utf8_validate
g_utime
g_variant_builder_add
g_variant_builder_add_parsed
g_variant_builder_add_value
g_variant_builder_clear
g_variant_builder_close
g_variant_builder_end
g_variant_builder_init
g_variant_builder_new
g_variant_builder_open
g_variant_builder_ref
g_variant_builder_unref
g_variant_byteswap
g_variant_check_format_string
g_variant_classify
g_variant_compare
g_variant_dict_clear
g_variant_dict_contains
g_variant_dict_end
g_variant_dict_init
g_variant_dict_insert
g_variant_dict_insert_value
g_variant_dict_lookup
g_variant_dict_lookup_value
g_variant_dict_new
g_variant_dict_ref
g_variant_dict_remove
g_variant_dict_unref
g_variant_dup_bytestring
g_variant_dup_bytestring_array
g_variant_dup_objv
g_variant_dup_string
g_variant_dup_strv
g_variant_equal
g_variant_format_string_scan
g_variant_format_string_scan_type
g_variant_get
g_variant_get_boolean
g_variant_get_byte
g_variant_get_bytestring
g_variant_get_bytestring_array
g_variant_get_child
g_variant_get_child_value
g_variant_get_data
g_variant_get_data_as_bytes
g_variant_get_double
g_variant_get_fixed_array
g_variant_get_handle
g_variant_get_int16
g_variant_get_int32
g_variant_get_int64
g_variant_get_maybe
g_variant_get_normal_form
g_variant_get_objv
g_variant_get_size
g_variant_get_string
g_variant_get_strv
g_variant_get_type
g_variant_get_type_string
g_variant_get_uint16
g_variant_get_uint32
g_variant_get_uint64
g_variant_get_va
g_variant_get_variant
g_variant_hash
g_variant_is_container
g_variant_is_floating
g_variant_is_normal_form
g_variant_is_object_path
g_variant_is_of_type
g_variant_is_signature
g_variant_iter_copy
g_variant_iter_free
g_variant_iter_init
g_variant_iter_loop
g_variant_iter_n_children
g_variant_iter_new
g_variant_iter_next
g_variant_iter_next_value
g_variant_lookup
g_variant_lookup_value
g_variant_n_children
g_variant_new
g_variant_new_array
g_variant_new_boolean
g_variant_new_byte
g_variant_new_bytestring
g_variant_new_bytestring_array
g_variant_new_dict_entry
g_variant_new_double
g_variant_new_fixed_array
g_variant_new_from_bytes
g_variant_new_from_data
g_variant_new_handle
g_variant_new_int16
g_variant_new_int32
g_variant_new_int64
g_variant_new_maybe
g_variant_new_object_path
g_variant_new_objv
g_variant_new_parsed
g_variant_new_parsed_va
g_variant_new_printf
g_variant_new_signature
g_variant_new_string
g_variant_new_strv
g_variant_new_take_string
g_variant_new_tuple
g_variant_new_uint16
g_variant_new_uint32
g_variant_new_uint64
g_variant_new_va
g_variant_new_variant
g_variant_parse
g_variant_parse_error_print_context
g_variant_parse_error_quark
g_variant_parser_get_error_quark
g_variant_print
g_variant_print_string
g_variant_ref
g_variant_ref_sink
g_variant_serialised_byteswap
g_variant_serialised_get_child
g_variant_serialised_is_normal
g_variant_serialised_n_children
g_variant_serialiser_is_object_path
g_variant_serialiser_is_signature
g_variant_serialiser_is_string
g_variant_serialiser_needed_size
g_variant_serialiser_serialise
g_variant_store
g_variant_take_ref
g_variant_type_checked_
g_variant_type_copy
g_variant_type_dup_string
g_variant_type_element
g_variant_type_equal
g_variant_type_first
g_variant_type_free
g_variant_type_get_string_length
g_variant_type_hash
g_variant_type_info_assert_no_infos
g_variant_type_info_element
g_variant_type_info_get
g_variant_type_info_get_type_string
g_variant_type_info_member_info
g_variant_type_info_n_members
g_variant_type_info_query
g_variant_type_info_query_element
g_variant_type_info_ref
g_variant_type_info_unref
g_variant_type_is_array
g_variant_type_is_basic
g_variant_type_is_container
g_variant_type_is_definite
g_variant_type_is_dict_entry
g_variant_type_is_maybe
g_variant_type_is_subtype_of
g_variant_type_is_tuple
g_variant_type_is_variant
g_variant_type_key
g_variant_type_n_items
g_variant_type_new
g_variant_type_new_array
g_variant_type_new_dict_entry
g_variant_type_new_maybe
g_variant_type_new_tuple
g_variant_type_next
g_variant_type_peek_string
g_variant_type_string_is_valid
g_variant_type_string_scan
g_variant_type_value
g_variant_unref
g_vasprintf
g_vfprintf
g_vprintf
g_vsnprintf
g_vsprintf
g_warn_message
g_win32_check_windows_version
g_win32_error_message
g_win32_ftruncate
g_win32_get_command_line
g_win32_get_package_installation_directory_of_module
g_win32_get_package_installation_directory_utf8
g_win32_get_package_installation_subdirectory_utf8
g_win32_get_system_data_dirs_for_module
g_win32_get_windows_version
g_win32_getlocale
g_win32_locale_filename_from_utf8
glib__private__
glib_binary_age
glib_check_version
glib_gettext
glib_interface_age
glib_major_version
glib_mem_profiler_table
glib_micro_version
glib_minor_version
glib_on_error_halt
glib_pgettext
Name
.text
Size
590KB
Virtual Size
589KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
503KB
Virtual Size
502KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
48KB
Virtual Size
47KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=5, id=199, version=41118,
count=3, id=259, version=26706,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=4, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,
count=15, id=257, version=25711,
count=235, id=1, productName=Unmarked objects,
count=91, id=264, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
gmodule-2.0.dll
- IMPHASH 2c41ebe227da34bb57a4f030b95191cf
- SHA256 441e3d7a4078320cfdc2be822fc16eee813b26176c55d91fd7ce57b6b8ce4ea6
- MD5 8c54d8bd1012d9cfed263b1217072cf4
- SHA1 e8de264f8c05a232accbdf6c97c1a063191be821
- SHA512 2b5363ecfbc1939a7f13fc8cdeb0510743f4bcb1e82a092bf7e841bec4862af6a213edbd83262524242822cde73f57241ca46e5863c4bd6a87cc979616689d98
- SSDEEP 3072:mjhxfdymDHB2ISW/tzE3Bh4M//RYdzwIRQDW959ZlpPK:eImj0IS93By0eV5Vpi
- TLSH T176D33A4B73F510BBE4B6D139C4932606E772B8611760AFAF07A0465A1F237E09D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
DLL Hijacking vulnerability
Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
16880
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
ExitProcess
CreateThread
CreateRemoteThread
VirtualAllocEx
WriteProcessMemory
VirtualFreeEx
DisableThreadLibraryCalls
FreeLibrary
GetModuleFileNameW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
WriteConsoleW
CreateFileW
WaitForSingleObject
CloseHandle
GetModuleHandleA
CheckRemoteDebuggerPresent
SetFilePointerEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
TerminateProcess
GetModuleHandleExW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
VirtualProtect
LCMapStringW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
HeapSize
HeapReAlloc
SetStdHandle
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
user32
MessageBoxA
advapi32
RegCreateKeyExW
RegCloseKey
RegSetValueExW
shlwapi
PathAppendW
PathRemoveFileSpecW
PathStripPathW
g_module_build_path
g_module_close
g_module_error
g_module_make_resident
g_module_name_utf8
g_module_open_utf8
g_module_supported
g_module_symbol
Name
.text
Size
74KB
Virtual Size
74KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
43KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=137, id=261, version=33140,
count=12, id=260, version=33140,
count=8, id=259, version=33140,
count=9, id=259, version=35207,
count=14, id=260, version=35207,
count=37, id=261, version=35207,
count=9, id=257, version=33140,
count=116, id=1, productName=Unmarked objects,
count=1, id=259, version=35217,
count=2, id=261, version=35217,
count=1, id=256, version=35217,
count=1, id=258, version=35217,
gobject-2.0.dll
- IMPHASH 206d048f7ee241a287e036db59b775f4
- SHA256 8716833a789cb1bd0c3367be44996f9198138faaeb876a7874812319ff505c3f
- MD5 f8ed96def23c414c08b064cc13e6e67c
- SHA1 ff4aac8d31996cb557f65571f5c76206c156acd4
- SHA512 ea0d87c4fc5e622560c8ae2416461fa8db40a9c404322ffd24f47d95b1d132df42892afd4a90beb73b29ff1656692f424ea918d13c5127a588e1d321b180e03c
- SSDEEP 6144:qpFZCqYVAWHgAhh+c12xSk5FbYL+W5nP/fijbRV4KNPGmKHTAZTYWu3TM:uFZCqYqWH3hh+c12JSVinR91KYEY
- TLSH T18B545B5DA2582C69EEABC038C642D507D2B374011362A3CF17B487AA1F37AE5F93E705
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7b:9c:27:cc:c3:58:1e:fd:0e:f5:cf:64:4d:a7:c8:62:2f:b6:fd:6a:43:34:19:17:57:0c:ad:01:86:af:8c:62
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
94:d5:f6:ef:41:83:ce:5d:dd:42:42:15:ce:56:f8:2e:23:31:83:84
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
184496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-11054036\cayman_glib\glib\src\build\win32\vs14\Release\x64\bin\gobject-2.0.pdb
glib-2.0
g_date_free
g_byte_array_ref
g_malloc0_n
g_source_ref
g_thread_unref
g_array_ref
g_variant_dict_ref
g_time_zone_ref
g_date_new_julian
g_free
g_error_copy
g_main_loop_unref
g_strfreev
g_hash_table_unref
g_time_zone_unref
g_main_context_unref
g_source_unref
g_date_time_unref
g_regex_unref
g_bytes_ref
g_regex_ref
g_match_info_ref
g_strdup_printf
g_array_unref
g_match_info_unref
g_atomic_int_compare_and_exchange
g_realloc_n
g_variant_ref_sink
g_malloc0
g_variant_unref
g_strdup
g_quark_try_string
g_slist_delete_link
g_datalist_clear
g_datalist_get_data
g_malloc_n
g_datalist_id_replace_data
g_slist_free
g_atomic_int_get
g_datalist_set_flags
g_slist_length
g_getenv_utf8
g_rw_lock_reader_lock
g_rw_lock_writer_unlock
g_datalist_get_flags
g_slist_prepend
g_hash_table_add
g_atomic_int_add
g_datalist_id_get_data
g_slist_copy
g_rw_lock_reader_unlock
g_strconcat
g_slist_find
g_datalist_id_dup_data
g_rw_lock_writer_lock
g_atomic_pointer_compare_and_exchange
g_nullify_pointer
g_mapped_file_unref
g_hash_table_contains
g_quark_from_static_string
g_datalist_id_set_data_full
g_realloc
g_datalist_id_remove_no_notify
g_slist_append
g_list_free
g_hash_table_new
g_slist_remove
g_atomic_pointer_and
g_atomic_int_inc
g_hash_table_ref
g_atomic_int_dec_and_test
g_hash_table_foreach
g_hash_table_remove
g_list_prepend
g_hash_table_insert
g_slist_sort
g_hash_table_lookup
g_unichar_validate
g_variant_is_of_type
g_array_append_vals
g_strdelimit
g_hook_destroy_link
g_hook_alloc
g_hook_insert_before
g_hook_next_valid
g_hook_list_init
g_malloc
g_direct_hash
g_hook_first_valid
g_array_free
g_quark_to_string
g_hook_destroy
g_memdup
g_hook_list_clear
g_array_new
g_io_watch_funcs
g_timeout_funcs
g_io_channel_unref
g_idle_funcs
g_child_watch_funcs
g_source_destroy
g_io_channel_ref
g_source_set_callback_indirect
g_atomic_int_set
g_str_hash
glib__private__
g_rec_mutex_unlock
g_parse_debug_string
g_str_equal
g_rec_mutex_lock
g_qsort_with_data
g_string_new
g_string_append
g_strescape
g_variant_take_ref
g_string_append_printf
g_byte_array_unref
g_error_free
g_checksum_copy
g_markup_parse_context_unref
g_date_time_ref
g_markup_parse_context_ref
g_key_file_unref
g_variant_dict_unref
g_option_group_unref
g_main_context_ref
g_strdupv
g_bytes_unref
g_variant_builder_ref
g_ptr_array_unref
g_key_file_ref
g_main_loop_ref
g_variant_type_free
g_string_free
g_checksum_free
g_ptr_array_ref
g_option_group_ref
g_string_new_len
g_thread_ref
g_date_get_julian
g_slist_free_1
g_variant_type_copy
g_mapped_file_ref
g_variant_builder_unref
g_intern_static_string
g_quark_from_string
g_once_init_leave
g_intern_string
glib_gettext
g_slice_free1
g_strcmp0
g_return_if_fail_warning
g_once_init_enter
g_log
g_slice_alloc0
g_slice_alloc
g_assertion_message_expr
g_mutex_lock
g_atomic_pointer_get
g_atomic_pointer_set
g_datalist_unset_flags
g_mutex_unlock
vcruntime140
memcmp
strchr
memcpy
__C_specific_handler
memmove
__std_type_info_destroy_list
memset
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
strcmp
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
abort
exit
_execute_onexit_table
_cexit
api-ms-win-crt-utility-l1-1-0
qsort
kernel32
QueryPerformanceCounter
RtlLookupFunctionEntry
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
g_array_get_type
g_binding_flags_get_type
g_binding_get_flags
g_binding_get_source
g_binding_get_source_property
g_binding_get_target
g_binding_get_target_property
g_binding_get_type
g_binding_unbind
g_boxed_copy
g_boxed_free
g_boxed_type_register_static
g_byte_array_get_type
g_bytes_get_type
g_cclosure_marshal_BOOLEAN__BOXED_BOXED
g_cclosure_marshal_BOOLEAN__BOXED_BOXEDv
g_cclosure_marshal_BOOLEAN__FLAGS
g_cclosure_marshal_BOOLEAN__FLAGSv
g_cclosure_marshal_STRING__OBJECT_POINTER
g_cclosure_marshal_STRING__OBJECT_POINTERv
g_cclosure_marshal_VOID__BOOLEAN
g_cclosure_marshal_VOID__BOOLEANv
g_cclosure_marshal_VOID__BOXED
g_cclosure_marshal_VOID__BOXEDv
g_cclosure_marshal_VOID__CHAR
g_cclosure_marshal_VOID__CHARv
g_cclosure_marshal_VOID__DOUBLE
g_cclosure_marshal_VOID__DOUBLEv
g_cclosure_marshal_VOID__ENUM
g_cclosure_marshal_VOID__ENUMv
g_cclosure_marshal_VOID__FLAGS
g_cclosure_marshal_VOID__FLAGSv
g_cclosure_marshal_VOID__FLOAT
g_cclosure_marshal_VOID__FLOATv
g_cclosure_marshal_VOID__INT
g_cclosure_marshal_VOID__INTv
g_cclosure_marshal_VOID__LONG
g_cclosure_marshal_VOID__LONGv
g_cclosure_marshal_VOID__OBJECT
g_cclosure_marshal_VOID__OBJECTv
g_cclosure_marshal_VOID__PARAM
g_cclosure_marshal_VOID__PARAMv
g_cclosure_marshal_VOID__POINTER
g_cclosure_marshal_VOID__POINTERv
g_cclosure_marshal_VOID__STRING
g_cclosure_marshal_VOID__STRINGv
g_cclosure_marshal_VOID__UCHAR
g_cclosure_marshal_VOID__UCHARv
g_cclosure_marshal_VOID__UINT
g_cclosure_marshal_VOID__UINT_POINTER
g_cclosure_marshal_VOID__UINT_POINTERv
g_cclosure_marshal_VOID__UINTv
g_cclosure_marshal_VOID__ULONG
g_cclosure_marshal_VOID__ULONGv
g_cclosure_marshal_VOID__VARIANT
g_cclosure_marshal_VOID__VARIANTv
g_cclosure_marshal_VOID__VOID
g_cclosure_marshal_VOID__VOIDv
g_cclosure_marshal_generic
g_cclosure_marshal_generic_va
g_cclosure_new
g_cclosure_new_object
g_cclosure_new_object_swap
g_cclosure_new_swap
g_checksum_get_type
g_clear_object
g_closure_add_finalize_notifier
g_closure_add_invalidate_notifier
g_closure_add_marshal_guards
g_closure_get_type
g_closure_invalidate
g_closure_invoke
g_closure_new_object
g_closure_new_simple
g_closure_ref
g_closure_remove_finalize_notifier
g_closure_remove_invalidate_notifier
g_closure_set_marshal
g_closure_set_meta_marshal
g_closure_sink
g_closure_unref
g_date_get_type
g_date_time_get_type
g_enum_complete_type_info
g_enum_get_value
g_enum_get_value_by_name
g_enum_get_value_by_nick
g_enum_register_static
g_error_get_type
g_flags_complete_type_info
g_flags_get_first_value
g_flags_get_value_by_name
g_flags_get_value_by_nick
g_flags_register_static
g_gstring_get_type
g_gtype_get_type
g_hash_table_get_type
g_initially_unowned_get_type
g_io_channel_get_type
g_io_condition_get_type
g_key_file_get_type
g_main_context_get_type
g_main_loop_get_type
g_mapped_file_get_type
g_markup_parse_context_get_type
g_match_info_get_type
g_object_add_toggle_ref
g_object_add_weak_pointer
g_object_bind_property
g_object_bind_property_full
g_object_bind_property_with_closures
g_object_class_find_property
g_object_class_install_properties
g_object_class_install_property
g_object_class_list_properties
g_object_class_override_property
g_object_compat_control
g_object_connect
g_object_disconnect
g_object_dup_data
g_object_dup_qdata
g_object_force_floating
g_object_freeze_notify
g_object_get
g_object_get_data
g_object_get_property
g_object_get_qdata
g_object_get_type
g_object_get_valist
g_object_interface_find_property
g_object_interface_install_property
g_object_interface_list_properties
g_object_is_floating
g_object_new
g_object_new_valist
g_object_newv
g_object_notify
g_object_notify_by_pspec
g_object_ref
g_object_ref_sink
g_object_remove_toggle_ref
g_object_remove_weak_pointer
g_object_replace_data
g_object_replace_qdata
g_object_run_dispose
g_object_set
g_object_set_data
g_object_set_data_full
g_object_set_property
g_object_set_qdata
g_object_set_qdata_full
g_object_set_valist
g_object_steal_data
g_object_steal_qdata
g_object_thaw_notify
g_object_unref
g_object_watch_closure
g_object_weak_ref
g_object_weak_unref
g_option_group_get_type
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_char
g_param_spec_double
g_param_spec_enum
g_param_spec_flags
g_param_spec_float
g_param_spec_get_blurb
g_param_spec_get_default_value
g_param_spec_get_name
g_param_spec_get_name_quark
g_param_spec_get_nick
g_param_spec_get_qdata
g_param_spec_get_redirect_target
g_param_spec_gtype
g_param_spec_int
g_param_spec_int64
g_param_spec_internal
g_param_spec_long
g_param_spec_object
g_param_spec_override
g_param_spec_param
g_param_spec_pointer
g_param_spec_pool_insert
g_param_spec_pool_list
g_param_spec_pool_list_owned
g_param_spec_pool_lookup
g_param_spec_pool_new
g_param_spec_pool_remove
g_param_spec_ref
g_param_spec_ref_sink
g_param_spec_set_qdata
g_param_spec_set_qdata_full
g_param_spec_sink
g_param_spec_steal_qdata
g_param_spec_string
g_param_spec_types
g_param_spec_uchar
g_param_spec_uint
g_param_spec_uint64
g_param_spec_ulong
g_param_spec_unichar
g_param_spec_unref
g_param_spec_value_array
g_param_spec_variant
g_param_type_register_static
g_param_value_convert
g_param_value_defaults
g_param_value_set_default
g_param_value_validate
g_param_values_cmp
g_pointer_type_register_static
g_pollfd_get_type
g_ptr_array_get_type
g_regex_get_type
g_signal_accumulator_first_wins
g_signal_accumulator_true_handled
g_signal_add_emission_hook
g_signal_chain_from_overridden
g_signal_chain_from_overridden_handler
g_signal_connect_closure
g_signal_connect_closure_by_id
g_signal_connect_data
g_signal_connect_object
g_signal_emit
g_signal_emit_by_name
g_signal_emit_valist
g_signal_emitv
g_signal_get_invocation_hint
g_signal_handler_block
g_signal_handler_disconnect
g_signal_handler_find
g_signal_handler_is_connected
g_signal_handler_unblock
g_signal_handlers_block_matched
g_signal_handlers_destroy
g_signal_handlers_disconnect_matched
g_signal_handlers_unblock_matched
g_signal_has_handler_pending
g_signal_list_ids
g_signal_lookup
g_signal_name
g_signal_new
g_signal_new_class_handler
g_signal_new_valist
g_signal_newv
g_signal_override_class_closure
g_signal_override_class_handler
g_signal_parse_name
g_signal_query
g_signal_remove_emission_hook
g_signal_set_va_marshaller
g_signal_stop_emission
g_signal_stop_emission_by_name
g_signal_type_cclosure_new
g_source_get_type
g_source_set_closure
g_source_set_dummy_callback
g_strdup_value_contents
g_strv_get_type
g_thread_get_type
g_time_zone_get_type
g_type_add_class_cache_func
g_type_add_class_private
g_type_add_instance_private
g_type_add_interface_check
g_type_add_interface_dynamic
g_type_add_interface_static
g_type_check_class_cast
g_type_check_class_is_a
g_type_check_instance
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_is_value_type
g_type_check_value
g_type_check_value_holds
g_type_children
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_get_instance_private_offset
g_type_class_get_private
g_type_class_peek
g_type_class_peek_parent
g_type_class_peek_static
g_type_class_ref
g_type_class_unref
g_type_class_unref_uncached
g_type_create_instance
g_type_default_interface_peek
g_type_default_interface_ref
g_type_default_interface_unref
g_type_depth
g_type_ensure
g_type_free_instance
g_type_from_name
g_type_fundamental
g_type_fundamental_next
g_type_get_instance_count
g_type_get_plugin
g_type_get_qdata
g_type_get_type_registration_serial
g_type_init
g_type_init_with_debug_flags
g_type_instance_get_private
g_type_interface_add_prerequisite
g_type_interface_get_plugin
g_type_interface_peek
g_type_interface_peek_parent
g_type_interface_prerequisites
g_type_interfaces
g_type_is_a
g_type_module_add_interface
g_type_module_get_type
g_type_module_register_enum
g_type_module_register_flags
g_type_module_register_type
g_type_module_set_name
g_type_module_unuse
g_type_module_use
g_type_name
g_type_name_from_class
g_type_name_from_instance
g_type_next_base
g_type_parent
g_type_plugin_complete_interface_info
g_type_plugin_complete_type_info
g_type_plugin_get_type
g_type_plugin_unuse
g_type_plugin_use
g_type_qname
g_type_query
g_type_register_dynamic
g_type_register_fundamental
g_type_register_static
g_type_register_static_simple
g_type_remove_class_cache_func
g_type_remove_interface_check
g_type_set_qdata
g_type_test_flags
g_type_value_table_peek
g_value_array_append
g_value_array_copy
g_value_array_free
g_value_array_get_nth
g_value_array_get_type
g_value_array_insert
g_value_array_new
g_value_array_prepend
g_value_array_remove
g_value_array_sort
g_value_array_sort_with_data
g_value_copy
g_value_dup_boxed
g_value_dup_object
g_value_dup_param
g_value_dup_string
g_value_dup_variant
g_value_fits_pointer
g_value_get_boolean
g_value_get_boxed
g_value_get_char
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_float
g_value_get_gtype
g_value_get_int
g_value_get_int64
g_value_get_long
g_value_get_object
g_value_get_param
g_value_get_pointer
g_value_get_schar
g_value_get_string
g_value_get_type
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_get_variant
g_value_init
g_value_init_from_instance
g_value_peek_pointer
g_value_register_transform_func
g_value_reset
g_value_set_boolean
g_value_set_boxed
g_value_set_boxed_take_ownership
g_value_set_char
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_float
g_value_set_gtype
g_value_set_instance
g_value_set_int
g_value_set_int64
g_value_set_long
g_value_set_object
g_value_set_object_take_ownership
g_value_set_param
g_value_set_param_take_ownership
g_value_set_pointer
g_value_set_schar
g_value_set_static_boxed
g_value_set_static_string
g_value_set_string
g_value_set_string_take_ownership
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_ulong
g_value_set_variant
g_value_take_boxed
g_value_take_object
g_value_take_param
g_value_take_string
g_value_take_variant
g_value_transform
g_value_type_compatible
g_value_type_transformable
g_value_unset
g_variant_builder_get_type
g_variant_dict_get_type
g_variant_get_gtype
g_variant_type_get_gtype
g_weak_ref_clear
g_weak_ref_get
g_weak_ref_init
g_weak_ref_set
Name
.text
Size
179KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
83KB
Virtual Size
82KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
320B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=2, id=259, version=26706,
count=11, id=261, version=26706,
count=7, id=260, version=26706,
count=3, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=259, version=25711,
count=1, id=260, version=25711,
count=2, id=257, version=25711,
count=203, id=1, productName=Unmarked objects,
count=3, id=260, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=259, productName=VS2017 v15.8.4 build 26729, version=26729,
count=18, id=264, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
help.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
hggs.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
intl.dll
- IMPHASH 633c44cf13ac8555f2c2b460c743052c
- SHA256 2b610cef5cdaafcdb10a2b63de10913912b4b5141ae7d81cece4e9398911d10b
- MD5 7e9a97dcaa4be1d9260a98461d663efb
- SHA1 6d245eb746d94ab786444ad42c2c59663833bdc2
- SHA512 5c909ad401397cd51c091b8f04e8a84c159b620116e3ed0e739a7cc9d2944adb5e96ebda37048ea5bdabb78cced10fcfd26b8ccb73492ff40e590f794b3b5167
- SSDEEP 1536:8Qdk8l0gArxP3gncYJ8yIZlHQmZtBJwaOW5B2eIlLR8iy80Q:8QaDFxmBiB2aOW5wR8iy80Q
- TLSH T1B7935B8E8A995052D95B81F49496F302CA73B853072C9BDF0A78C3152F869FB1F3B791
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
6b:e9:8f:2b:56:75:61:2b:ab:91:72:9b:e5:ae:08:88:a2:c2:43:d3:df:b0:31:20:aa:4c:08:de:c8:5e:42:be
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
a0:f6:c2:5a:dc:88:79:74:3c:1b:11:f4:24:cb:d1:32:77:62:a1:fe
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
5936
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-10939163\cayman_gettext\gettext\MSVC14\libintl_dll\x64\Release\libintl_dll.pdb
kernel32
GetThreadLocale
GetModuleHandleW
GetLocaleInfoA
RtlLookupFunctionEntry
GetProcAddress
EnumResourceLanguagesW
GetLocaleInfoW
GetLastError
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlCaptureContext
IsProcessorFeaturePresent
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
vcruntime140
__C_specific_handler
wcschr
strstr
strchr
memset
memchr
__std_type_info_destroy_list
memcpy
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
abort
_cexit
raise
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0
isupper
isdigit
isalnum
isalpha
tolower
mblen
strncmp
isspace
_strdup
api-ms-win-crt-heap-l1-1-0
free
realloc
malloc
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-convert-l1-1-0
wctomb
strtoul
mbtowc
api-ms-win-crt-stdio-l1-1-0
fwrite
__stdio_common_vfprintf
__stdio_common_vfwprintf
_getcwd
__stdio_common_vsprintf
__stdio_common_vswprintf
feof
fgets
fputwc
fclose
_read
fopen
__acrt_iob_func
_close
fputs
_open
putc
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
api-ms-win-crt-utility-l1-1-0
qsort
bsearch
_nl_expand_alias
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
gettext
libintl_bind_textdomain_codeset
libintl_bindtextdomain
libintl_dcgettext
libintl_dcngettext
libintl_dgettext
libintl_dngettext
libintl_fprintf
libintl_fwprintf
libintl_gettext
libintl_ngettext
libintl_printf
libintl_set_relocation_prefix
libintl_sprintf
libintl_swprintf
libintl_textdomain
libintl_version
libintl_vfprintf
libintl_vfwprintf
libintl_vprintf
libintl_vsprintf
libintl_vswprintf
libintl_vwprintf
libintl_wprintf
ngettext
textdomain
Name
.text
Size
60KB
Virtual Size
59KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=1, id=199, version=41118,
count=3, id=259, version=26706,
count=12, id=261, version=26706,
count=8, id=260, version=26706,
count=5, id=257, version=25711,
count=91, id=1, productName=Unmarked objects,
count=27, id=264, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
ioy.ico
- SHA256 950d53003d6787915dbad120d0e2964ea7302a56da93e836e27ced079624e697
- MD5 ecc018d8fad1329c36f5a78a4cf07bc9
- SHA1 4859a5e3f031064aba203bcb2a54082358bff5e8
- SHA512 15e943de6af5660f075132d71c75804e4e62b5e23b3e2e568a00eff9cca6f2b55dcaf85873e9ff2ce7688abdc65d49c0e35b4a19d29989d45cbf4c7608ffa481
- SSDEEP 48:ReHYByUFMV4WnYnhcWSPmZSuLrTESQ0NSqaJX9QweZ10f:RWYEa2oeO1/p10f
- TLSH T10572D9D1C7FC218CF46A393B2B614D4894E9EE34482DA4A3890CB0CB15F6C5565A67FF
- MD5 SHA1 SHA512 SSDEEP TLSH
llod.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
lpinfos.dll
- IMPHASH f7062edf6833a344269d306327365009
- SHA256 16a2b6ba2284a2476d4a345b35502c52a2a98ac0931ce7faf814765f659e2725
- MD5 4267e963815c81d39b7cb792630bcde6
- SHA1 b10b62324a8685d5ded99e92a34742a25a7a7a11
- SHA512 f13247528613f9f7ca9189150f0235b3ba6054892e1573f7eb0de84d0fec10e884dc595a7faf3f620fc0fc52969221c98e0c7efbe46942be6becb693d9f6e416
- SSDEEP 384:Aa57HaWAvSRJHxLKTEzm0fVZN0cH3FSqHOnmnYPL5YUHeMSLdiOUUip23+r/jLri:Ae7Avkx44ZTVSJmOuLdiyip23+zjFI
- TLSH T171E26C871B5868A3EE86CAB4D4A2E61BDE75F3D05BD411CF1131C2841F92BD23B69B09
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3e:82:eb:d8:5a:59:24:0a:c2:24:bb:4f:99:e9:cf:f0:ad:d1:2c:f2:53:c1:45:d9:41:d8:96:54:15:a6:b9:e1
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
05:e2:4a:09:02:e2:aa:6f:99:42:5d:0c:f6:dc:95:c6:b4:73:f6:0e
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
9024
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-11054036\cayman_glib\glib\src\build\win32\vs14\Release\x64\bin\gmodule-2.0.pdb
kernel32
Module32Next
Module32First
GetModuleHandleA
CreateToolhelp32Snapshot
GetLastError
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
glib-2.0
g_parse_debug_string
g_strdup_printf
g_rec_mutex_lock
g_scanner_input_file
g_private_get
g_scanner_destroy
g_filename_display_name
g_strdup
g_scanner_new
g_utf8_to_utf16
g_strconcat
g_free
g_ascii_strcasecmp
g_rec_mutex_unlock
g_scanner_eof
g_strdup_vprintf
g_return_if_fail_warning
g_getenv_utf8
g_open
g_file_test_utf8
g_private_replace
g_malloc_n
g_path_get_dirname
g_scanner_scope_add_symbol
g_win32_error_message
g_scanner_get_next_token
vcruntime140
memset
__std_type_info_destroy_list
strrchr
__C_specific_handler
api-ms-win-crt-string-l1-1-0
strncmp
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit
_initialize_onexit_table
_initterm_e
_errno
_initterm
api-ms-win-crt-stdio-l1-1-0
_close
g_module_build_path
g_module_close
g_module_error
g_module_make_resident
g_module_name_utf8
g_module_open_utf8
g_module_supported
g_module_symbol
Name
.text
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
708B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
40B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=1, id=199, version=41118,
count=2, id=259, version=26706,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,
count=3, id=257, version=25711,
count=71, id=1, productName=Unmarked objects,
count=1, id=264, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
msvcp140.dll
- IMPHASH a29913e289925d243ffca4cf74f9992a
- SHA256 0f885b509a685d2bbfa652fed26b5fb31d88fbdab0a978c641d1c7b8aa460aa9
- MD5 bc88b387cafa556068b5c5d6ff3ccc8f
- SHA1 b370eca8fa727e46cf61d834fcc956698b02e1fd
- SHA512 b7aee12e1bf86027e3c42ae28f6f6fb34dca81c1f5af6983ea4aac559f2fedf945956a381f529c553d71bc83cd71dcbad12266fad86c944f17f63db92b8ca95b
- SSDEEP 12288:tdkDYbKloU7/7mozO39V5WZyhNFdQEKZm+jWodEEVLa69sU:tdnGoU/7m/V5WZ8dQEKZm+jWodEER7N
- TLSH T10BC41A27F74A06B0E195E3B8A1838702D7F1BC598322E3C752EB955D2F573D0A63B690
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
a2:16:3f:f7:72:e1:99:38:26:13:94:e4:6b:5f:f6:57:4e:12:6c:2e:35:48:1b:7e:8d:46:5d:cb:8f:f2:2b:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
a2:16:3f:f7:72:e1:99:38:26:13:94:e4:6b:5f:f6:57:4e:12:6c:2e:35:48:1b:7e:8d:46:5d:cb:8f:f2:2b:5c
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jun 10, 2025
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:0c:d7:49:5b:8b:1c:bc:5e:ea:00:00:00:00:01:0c
Issuer
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 1, 2013 - May 1, 2028
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:6F1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fc:18:a0:af:cc:69:5a:87:3a:00:01:00:00:01:fc
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:04:7e:ac:fa:0a:41:ff:7e:13:f5:00:00:00:00:04:7e
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 15, 2025 - May 15, 2026
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:651A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f5:99:09:94:bc:f1:c6:50:8c:00:01:00:00:01:f5
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Minor OS version
0
Major OS version
6
Entry point
318128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\msvcp140.amd64.pdb
vcruntime140
__current_exception_context
__C_specific_handler
memcmp
__uncaught_exceptions
__uncaught_exception
memchr
memmove
__std_terminate
_purecall
memset
memcpy
_CxxThrowException
__AdjustPointer
__current_exception
__std_exception_destroy
__std_type_info_destroy_list
__std_exception_copy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initterm_e
_initterm
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_crt_atexit
_seh_filter_dll
_endthreadex
_beginthreadex
_set_new_handler
_errno
_cexit
abort
_invoke_watson
terminate
_initialize_narrow_environment
api-ms-win-crt-string-l1-1-0
iswxdigit
iswdigit
tolower
isalnum
wcsnlen
__strncnt
strlen
wcscpy_s
isxdigit
isspace
isdigit
wcslen
strcmp
isupper
iswspace
islower
_wcsdup
strcspn
iswalnum
api-ms-win-crt-locale-l1-1-0
setlocale
localeconv
___mb_cur_max_func
_lock_locales
_unlock_locales
___lc_codepage_func
__pctype_func
___lc_collate_cp_func
___lc_locale_name_func
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
fputs
fgetwc
fseek
_fsopen
_wfsopen
fclose
fputwc
ungetwc
__stdio_common_vsprintf_s
fgetc
fgetpos
fputc
fread
fsetpos
_fseeki64
fwrite
__acrt_iob_func
setvbuf
ungetc
fflush
api-ms-win-crt-filesystem-l1-1-0
_wchdir
_wrmdir
_wrename
_unlock_file
_wremove
_lock_file
api-ms-win-crt-time-l1-1-0
_W_Getdays
_Getmonths
_W_Gettnames
_Wcsftime
_Strftime
_W_Getmonths
_Gettnames
_Getdays
api-ms-win-crt-environment-l1-1-0
_wgetcwd
api-ms-win-crt-math-l1-1-0
_dclass
_ldclass
frexp
logf
copysign
ldexp
log
api-ms-win-crt-convert-l1-1-0
strtof
btowc
strtod
api-ms-win-crt-utility-l1-1-0
rand_s
kernel32
EnterCriticalSection
RaiseException
CompareStringEx
MultiByteToWideChar
GetCPInfo
InitializeSListHead
WideCharToMultiByte
LCMapStringEx
GetLocaleInfoEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesExW
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetFileInformationByHandleEx
GetProcAddress
GetModuleHandleW
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
GetTempPathW
InitOnceExecuteOnce
GetStringTypeW
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
RtlPcToFileHeader
QueryPerformanceFrequency
QueryPerformanceCounter
GetModuleHandleExW
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
IsProcessorFeaturePresent
RtlCaptureStackBackTrace
TryAcquireSRWLockExclusive
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
Sleep
WaitForSingleObjectEx
GetCurrentThreadId
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
FormatMessageA
LocalFree
DecodePointer
EncodePointer
CreateSymbolicLinkW
CreateHardLinkW
CopyFileW
GetLastError
CloseHandle
AreFileApisANSI
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFileInformationByHandle
??$_Getvals@_W@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??$_Getvals@_W@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAX_WAEBV_Locinfo@1@@Z
??0?$_Yarn@D@std@@QEAA@AEBV01@@Z
??0?$_Yarn@D@std@@QEAA@PEBD@Z
??0?$_Yarn@D@std@@QEAA@XZ
??0?$_Yarn@G@std@@QEAA@AEBV01@@Z
??0?$_Yarn@G@std@@QEAA@PEBG@Z
??0?$_Yarn@G@std@@QEAA@XZ
??0?$_Yarn@_W@std@@QEAA@AEBV01@@Z
??0?$_Yarn@_W@std@@QEAA@PEB_W@Z
??0?$_Yarn@_W@std@@QEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_ios@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N1@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N1@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@_N@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAA@$$QEAV01@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@W4_Uninitialized@1@_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAA@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@AEBV01@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@W4_Uninitialized@1@@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@DDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@GDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@KW4_Codecvt_mode@1@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_UDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??0?$ctype@D@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@D@std@@QEAA@PEBF_N_K@Z
??0?$ctype@G@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@G@std@@QEAA@_K@Z
??0?$ctype@_W@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$ctype@_W@std@@QEAA@_K@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAA@_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAA@PEBD_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@AEBV_Locinfo@1@_K@Z
??0?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAA@_K@Z
??0Init@ios_base@std@@QEAA@XZ
??0_Facet_base@std@@QEAA@AEBV01@@Z
??0_Facet_base@std@@QEAA@XZ
??0_Init_locks@std@@QEAA@XZ
??0_Locimp@locale@std@@AEAA@AEBV012@@Z
??0_Locimp@locale@std@@AEAA@_N@Z
??0_Locinfo@std@@QEAA@HPEBD@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??0_Lockit@std@@QEAA@XZ
??0_Timevec@std@@QEAA@AEBV01@@Z
??0_Timevec@std@@QEAA@PEAX@Z
??0_UShinit@std@@QEAA@XZ
??0_Winit@std@@QEAA@XZ
??0codecvt_base@std@@QEAA@_K@Z
??0ctype_base@std@@QEAA@_K@Z
??0facet@locale@std@@IEAA@_K@Z
??0id@locale@std@@QEAA@_K@Z
??0ios_base@std@@IEAA@XZ
??0task_continuation_context@Concurrency@@AEAA@XZ
??0time_base@std@@QEAA@_K@Z
??1?$_Yarn@D@std@@QEAA@XZ
??1?$_Yarn@G@std@@QEAA@XZ
??1?$_Yarn@_W@std@@QEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$codecvt@DDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@GDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_UDU_Mbstatet@@@std@@MEAA@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??1?$ctype@D@std@@MEAA@XZ
??1?$ctype@G@std@@MEAA@XZ
??1?$ctype@_W@std@@MEAA@XZ
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEAA@XZ
??1?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEAA@XZ
??1Init@ios_base@std@@QEAA@XZ
??1_Facet_base@std@@UEAA@XZ
??1_Init_locks@std@@QEAA@XZ
??1_Locimp@locale@std@@MEAA@XZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??1_Timevec@std@@QEAA@XZ
??1_UShinit@std@@QEAA@XZ
??1_Winit@std@@QEAA@XZ
??1codecvt_base@std@@UEAA@XZ
??1ctype_base@std@@UEAA@XZ
??1facet@locale@std@@MEAA@XZ
??1ios_base@std@@UEAA@XZ
??1time_base@std@@UEAA@XZ
??4?$_Iosb@H@std@@QEAAAEAV01@$$QEAV01@@Z
??4?$_Iosb@H@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??4?$_Yarn@G@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@G@std@@QEAAAEAV01@PEBG@Z
??4?$_Yarn@_W@std@@QEAAAEAV01@AEBV01@@Z
??4?$_Yarn@_W@std@@QEAAAEAV01@PEB_W@Z
??4?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@$$QEAV01@@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAAEAV01@AEBV01@@Z
??4Init@ios_base@std@@QEAAAEAV012@AEBV012@@Z
??4_Crt_new_delete@std@@QEAAAEAU01@$$QEAU01@@Z
??4_Crt_new_delete@std@@QEAAAEAU01@AEBU01@@Z
??4_Facet_base@std@@QEAAAEAV01@AEBV01@@Z
??4_Init_locks@std@@QEAAAEAV01@AEBV01@@Z
??4_Timevec@std@@QEAAAEAV01@AEBV01@@Z
??4_UShinit@std@@QEAAAEAV01@AEBV01@@Z
??4_Winit@std@@QEAAAEAV01@AEBV01@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAJ@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAK@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAM@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEAPEAX@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_K@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??5?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@DU?$char_traits@D@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@GU?$char_traits@G@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@F@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@O@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV?$basic_ios@_WU?$char_traits@_W@std@@@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_N@Z
??7ios_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
??Bios_base@std@@QEBA_NXZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ios@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_iostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_iostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_iostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_istream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_istream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_ostream@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_ostream@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??_7?$basic_streambuf@GU?$char_traits@G@std@@@std@@6B@
??_7?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@6B@
??_7?$codecvt@DDU_Mbstatet@@@std@@6B@
??_7?$codecvt@GDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_SDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_UDU_Mbstatet@@@std@@6B@
??_7?$codecvt@_WDU_Mbstatet@@@std@@6B@
??_7?$ctype@D@std@@6B@
??_7?$ctype@G@std@@6B@
??_7?$ctype@_W@std@@6B@
??_7?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??_7?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@6B@
??_7?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@6B@
??_7_Facet_base@std@@6B@
??_7_Locimp@locale@std@@6B@
??_7codecvt_base@std@@6B@
??_7ctype_base@std@@6B@
??_7facet@locale@std@@6B@
??_7ios_base@std@@6B@
??_7time_base@std@@6B@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_istream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_iostream@_WU?$char_traits@_W@std@@@std@@7B?$basic_ostream@_WU?$char_traits@_W@std@@@1@@
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_istream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_istream@_WU?$char_traits@_W@std@@@std@@7B@
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
??_8?$basic_ostream@_WU?$char_traits@_W@std@@@std@@7B@
??_D?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_iostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??_D?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
??_D?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??_F?$codecvt@DDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@GDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_SDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_UDU_Mbstatet@@@std@@QEAAXXZ
??_F?$codecvt@_WDU_Mbstatet@@@std@@QEAAXXZ
??_F?$ctype@D@std@@QEAAXXZ
??_F?$ctype@G@std@@QEAAXXZ
??_F?$ctype@_W@std@@QEAAXXZ
??_F?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEAAXXZ
??_F?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEAAXXZ
??_F_Locinfo@std@@QEAAXXZ
??_F_Timevec@std@@QEAAXXZ
??_Fcodecvt_base@std@@QEAAXXZ
??_Fctype_base@std@@QEAAXXZ
??_Ffacet@locale@std@@QEAAXXZ
??_Fid@locale@std@@QEAAXXZ
??_Ftime_base@std@@QEAAXXZ
?CaptureCallstack@platform@details@Concurrency@@YA_KPEAPEAX_K1@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?GetNextAsyncId@platform@details@Concurrency@@YAIXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Addcats@_Locinfo@std@@QEAAAEAV12@HPEBD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Addstd@ios_base@std@@SAXPEAV12@@Z
?_Assign@_ContextCallback@details@Concurrency@@AEAAXPEAX@Z
?_Atexit@@YAXP6AXXZ@Z
?_BADOFF@std@@3_JB
?_C_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_C_str@?$_Yarn@G@std@@QEBAPEBGXZ
?_C_str@?$_Yarn@_W@std@@QEBAPEB_WXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Callfns@ios_base@std@@AEAAXW4event@12@@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Clocptr@_Locimp@locale@std@@0PEAV123@EA
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Donarrow@?$ctype@G@std@@IEBADGD@Z
?_Donarrow@?$ctype@_W@std@@IEBAD_WD@Z
?_Dowiden@?$ctype@G@std@@IEBAGD@Z
?_Dowiden@?$ctype@_W@std@@IEBA_WD@Z
?_Empty@?$_Yarn@D@std@@QEBA_NXZ
?_Empty@?$_Yarn@G@std@@QEBA_NXZ
?_Empty@?$_Yarn@_W@std@@QEBA_NXZ
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Ffmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Ffmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Ffmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADDH@Z
?_Findarr@ios_base@std@@AEAAAEAU_Iosarray@12@H@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBGHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Fput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBD_K@Z
?_Fput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBD_K@Z
?_Fput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBD_K@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@GDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_SDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_UDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@G@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@facet@locale@std@@SA_KPEAPEBV123@PEBV23@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getctype@_Locinfo@std@@QEBA?AU_Ctypevec@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getdateorder@_Locinfo@std@@QEBAHXZ
?_Getdays@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1AEAVios_base@2@PEAH@Z
?_Getfmt@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getfmt@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getfmt@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@1HAEBVlocale@2@@Z
?_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@1HAEBVlocale@2@@Z
?_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@1HAEBVlocale@2@@Z
?_Getint@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@0HHAEAHAEBV?$ctype@D@2@@Z
?_Getint@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@0HHAEAHAEBV?$ctype@G@2@@Z
?_Getint@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@0HHAEAHAEBV?$ctype@_W@2@@Z
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getmonths@_Locinfo@std@@QEBAPEBDXZ
?_Getname@_Locinfo@std@@QEBAPEBDXZ
?_Getptr@_Timevec@std@@QEBAPEAXXZ
?_Gettnames@_Locinfo@std@@QEBA?AV_Timevec@2@XZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Gnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBA_JXZ
?_Gnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBA_JXZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gndec@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gndec@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Gnpreinc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnpreinc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Gnpreinc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Id_cnt@id@locale@std@@0HA
?_Ifmt@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Ifmt@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Ifmt@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAPEADPEADPEBDH@Z
?_Incref@facet@locale@std@@UEAAXXZ
?_Index@ios_base@std@@0HA
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAPEAG0PEAH001@Z
?_Init@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEAPEA_W0PEAH001@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?_Init@?$codecvt@DDU_Mbstatet@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$codecvt@GDU_Mbstatet@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$codecvt@_SDU_Mbstatet@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$codecvt@_UDU_Mbstatet@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$codecvt@_WDU_Mbstatet@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$ctype@D@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$ctype@G@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$ctype@_W@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@IEAAXAEBV_Locinfo@2@@Z
?_Init@ios_base@std@@IEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Init_cnt@Init@ios_base@std@@0HA
?_Init_cnt@_UShinit@std@@0HA
?_Init_cnt@_Winit@std@@0HA
?_Init_cnt_func@Init@ios_base@std@@CAAEAHXZ
?_Init_ctor@Init@ios_base@std@@CAXPEAV123@@Z
?_Init_dtor@Init@ios_base@std@@CAXPEAV123@@Z
?_Init_locks_ctor@_Init_locks@std@@CAXPEAV12@@Z
?_Init_locks_dtor@_Init_locks@std@@CAXPEAV12@@Z
?_Ios_base_dtor@ios_base@std@@CAXPEAV12@@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Iput@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEAD_K@Z
?_Iput@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEAD_K@Z
?_Iput@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEAD_K@Z
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_IsNonBlockingThread@_Task_impl_base@details@Concurrency@@SA_NXZ
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Locimp_ctor@_Locimp@locale@std@@CAXPEAV123@AEBV123@@Z
?_Locimp_dtor@_Locimp@locale@std@@CAXPEAV123@@Z
?_Locinfo_Addcats@_Locinfo@std@@SAAEAV12@PEAV12@HPEBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@HPEBD@Z
?_Locinfo_ctor@_Locinfo@std@@SAXPEAV12@PEBD@Z
?_Locinfo_dtor@_Locinfo@std@@SAXPEAV12@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lockit_ctor@_Lockit@std@@CAXPEAV12@@Z
?_Lockit_ctor@_Lockit@std@@CAXPEAV12@H@Z
?_Lockit_ctor@_Lockit@std@@SAXH@Z
?_Lockit_dtor@_Lockit@std@@CAXPEAV12@@Z
?_Lockit_dtor@_Lockit@std@@SAXH@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_MP_Add@std@@YAXQEA_K_K@Z
?_MP_Get@std@@YA_KQEA_K@Z
?_MP_Mul@std@@YAXQEA_K_K1@Z
?_MP_Rem@std@@YAXQEA_K_K@Z
?_Makeloc@_Locimp@locale@std@@CAPEAV123@AEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_Makeushloc@_Locimp@locale@std@@CAXAEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_Makewloc@_Locimp@locale@std@@CAXAEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_Makexloc@_Locimp@locale@std@@CAXAEBV_Locinfo@3@HPEAV123@PEBV23@@Z
?_Mtx_delete@threads@stdext@@YAXPEAX@Z
?_Mtx_lock@threads@stdext@@YAXPEAX@Z
?_Mtx_new@threads@stdext@@YAXAEAPEAX@Z
?_Mtx_unlock@threads@stdext@@YAXPEAX@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Pnavail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBA_JXZ
?_Pnavail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBA_JXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Pninc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAPEAGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?_Ptr_cerr@std@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@1@EA
?_Ptr_cin@std@@3PEAV?$basic_istream@DU?$char_traits@D@std@@@1@EA
?_Ptr_clog@std@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@1@EA
?_Ptr_cout@std@@3PEAV?$basic_ostream@DU?$char_traits@D@std@@@1@EA
?_Ptr_wcerr@std@@3PEAV?$basic_ostream@GU?$char_traits@G@std@@@1@EA
?_Ptr_wcerr@std@@3PEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@EA
?_Ptr_wcin@std@@3PEAV?$basic_istream@GU?$char_traits@G@std@@@1@EA
?_Ptr_wcin@std@@3PEAV?$basic_istream@_WU?$char_traits@_W@std@@@1@EA
?_Ptr_wclog@std@@3PEAV?$basic_ostream@GU?$char_traits@G@std@@@1@EA
?_Ptr_wclog@std@@3PEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@EA
?_Ptr_wcout@std@@3PEAV?$basic_ostream@GU?$char_traits@G@std@@@1@EA
?_Ptr_wcout@std@@3PEAV?$basic_ostream@_WU?$char_traits@_W@std@@@1@EA
?_Put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@PEBD_K@Z
?_Put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@PEBG_K@Z
?_Put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@PEB_W_K@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Random_device@std@@YAIXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Rep@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@D_K@Z
?_Rep@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@G_K@Z
?_Rep@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@_W_K@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Reschedule_chore@details@Concurrency@@YAHPEBU_Threadpool_chore@12@@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Rng_abort@std@@YAXPEBD@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Setgloballocale@locale@std@@CAXPEAX@Z
?_Src@?1??_Getffld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getffld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getffld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getffldx@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getffldx@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getffldx@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1AEAVios_base@3@PEAH@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@DU?$char_traits@D@std@@@3@1HAEBVlocale@3@@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@GU?$char_traits@G@std@@@3@1HAEBVlocale@3@@Z@4QBDB
?_Src@?1??_Getifld@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEBAHPEADAEAV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@3@1HAEBVlocale@3@@Z@4QBDB
?_Sync@ios_base@std@@0_NA
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Tidy@?$_Yarn@D@std@@AEAAXXZ
?_Tidy@?$_Yarn@G@std@@AEAAXXZ
?_Tidy@?$_Yarn@_W@std@@AEAAXXZ
?_Tidy@?$ctype@D@std@@IEAAXXZ
?_Tidy@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@AEAAXXZ
?_Tidy@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@AEAAXXZ
?_Tidy@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@AEAAXXZ
?_Tidy@ios_base@std@@AEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@GU?$char_traits@G@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ
?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ
?_W_Gettnames@_Locinfo@std@@QEBA?AV_Timevec@2@XZ
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPEADK@Z
?_XGetLastError@std@@YAXXZ
?_XLgamma@std@@YAMM@Z
?_XLgamma@std@@YANN@Z
?_XLgamma@std@@YAOO@Z
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xoverflow_error@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xruntime_error@std@@YAXPEBD@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCompare@@YA_NPEBX0@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrSwap@@YAXPEAX0@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?bad@ios_base@std@@QEBA_NXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?c_str@?$_Yarn@G@std@@QEBAPEBGXZ
?c_str@?$_Yarn@_W@std@@QEBAPEB_WXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAAEBV12@XZ
?classic_table@?$ctype@D@std@@SAPEBFXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXI@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXI@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXI@Z
?clear@ios_base@std@@QEAAXH@Z
?clear@ios_base@std@@QEAAXH_N@Z
?clear@ios_base@std@@QEAAXI@Z
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
?copyfmt@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAAEAV12@AEBV12@@Z
?copyfmt@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@AEBV12@@Z
?copyfmt@ios_base@std@@QEAAAEAV12@AEBV12@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AW4dateorder@time_base@2@XZ
?date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AW4dateorder@time_base@2@XZ
?do_always_noconv@?$codecvt@DDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@GDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@_SDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@_UDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@_WDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@codecvt_base@std@@MEBA_NXZ
?do_date_order@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AW4dateorder@time_base@2@XZ
?do_date_order@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AW4dateorder@time_base@2@XZ
?do_encoding@?$codecvt@GDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@codecvt_base@std@@MEBAHXZ
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?do_get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?do_get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?do_get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?do_get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?do_in@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_in@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?do_in@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
?do_in@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_U3AEAPEA_U@Z
?do_in@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?do_is@?$ctype@G@std@@MEBAPEBGPEBG0PEAF@Z
?do_is@?$ctype@G@std@@MEBA_NFG@Z
?do_is@?$ctype@_W@std@@MEBAPEB_WPEB_W0PEAF@Z
?do_is@?$ctype@_W@std@@MEBA_NF_W@Z
?do_length@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_max_length@?$codecvt@GDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@codecvt_base@std@@MEBAHXZ
?do_narrow@?$ctype@D@std@@MEBADDD@Z
?do_narrow@?$ctype@D@std@@MEBAPEBDPEBD0DPEAD@Z
?do_narrow@?$ctype@G@std@@MEBADGD@Z
?do_narrow@?$ctype@G@std@@MEBAPEBGPEBG0DPEAD@Z
?do_narrow@?$ctype@_W@std@@MEBAD_WD@Z
?do_narrow@?$ctype@_W@std@@MEBAPEB_WPEB_W0DPEAD@Z
?do_out@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?do_out@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?do_out@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_S1AEAPEB_SPEAD3AEAPEAD@Z
?do_out@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
?do_out@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DJ@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DK@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DN@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DO@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBX@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_J@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_K@Z
?do_put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_N@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GJ@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GK@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GN@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GO@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBX@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_J@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_K@Z
?do_put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_N@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WJ@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WK@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WN@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WO@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBX@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_J@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_K@Z
?do_put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_N@Z
?do_put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
?do_put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBUtm@@DD@Z
?do_put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@MEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@DD@Z
?do_scan_is@?$ctype@G@std@@MEBAPEBGFPEBG0@Z
?do_scan_is@?$ctype@_W@std@@MEBAPEB_WFPEB_W0@Z
?do_scan_not@?$ctype@G@std@@MEBAPEBGFPEBG0@Z
?do_scan_not@?$ctype@_W@std@@MEBAPEB_WFPEB_W0@Z
?do_tolower@?$ctype@D@std@@MEBADD@Z
?do_tolower@?$ctype@D@std@@MEBAPEBDPEADPEBD@Z
?do_tolower@?$ctype@G@std@@MEBAGG@Z
?do_tolower@?$ctype@G@std@@MEBAPEBGPEAGPEBG@Z
?do_tolower@?$ctype@_W@std@@MEBAPEB_WPEA_WPEB_W@Z
?do_tolower@?$ctype@_W@std@@MEBA_W_W@Z
?do_toupper@?$ctype@D@std@@MEBADD@Z
?do_toupper@?$ctype@D@std@@MEBAPEBDPEADPEBD@Z
?do_toupper@?$ctype@G@std@@MEBAGG@Z
?do_toupper@?$ctype@G@std@@MEBAPEBGPEAGPEBG@Z
?do_toupper@?$ctype@_W@std@@MEBAPEB_WPEA_WPEB_W@Z
?do_toupper@?$ctype@_W@std@@MEBA_W_W@Z
?do_unshift@?$codecvt@DDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@GDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@_WDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_widen@?$ctype@D@std@@MEBADD@Z
?do_widen@?$ctype@D@std@@MEBAPEBDPEBD0PEAD@Z
?do_widen@?$ctype@G@std@@MEBAGD@Z
?do_widen@?$ctype@G@std@@MEBAPEBDPEBD0PEAG@Z
?do_widen@?$ctype@_W@std@@MEBAPEBDPEBD0PEA_W@Z
?do_widen@?$ctype@_W@std@@MEBA_WD@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?eback@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?egptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?empty@?$_Yarn@D@std@@QEBA_NXZ
?empty@?$_Yarn@G@std@@QEBA_NXZ
?empty@?$_Yarn@_W@std@@QEBA_NXZ
?empty@locale@std@@SA?AV12@XZ
?encoding@codecvt_base@std@@QEBAHXZ
?eof@ios_base@std@@QEBA_NXZ
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?epptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?epptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?exceptions@ios_base@std@@QEAAXH@Z
?exceptions@ios_base@std@@QEAAXI@Z
?exceptions@ios_base@std@@QEBAHXZ
?fail@ios_base@std@@QEBA_NXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?fill@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGXZ
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA_W_W@Z
?fill@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WXZ
?flags@ios_base@std@@QEAAHH@Z
?flags@ios_base@std@@QEBAHXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?flush@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?gcount@?$basic_istream@GU?$char_traits@G@std@@@std@@QEBA_JXZ
?gcount@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEBA_JXZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@D@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_JD@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@AEAG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@G@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_J@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_JG@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAGXZ
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@AEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@AEA_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J_W@Z
?get@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?get@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?get@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?get@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBG4@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@DD@Z
?get@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEB_W4@Z
?get_date@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_date@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_date@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_monthname@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_monthname@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_monthname@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_new_handler@std@@YAP6AXXZXZ
?get_time@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_time@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_time@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_weekday@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_weekday@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_weekday@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_year@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_year@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@GU?$char_traits@G@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?get_year@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_JD@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_J@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_JG@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z
?getline@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J_W@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?global@locale@std@@SA?AV12@AEBV12@@Z
?good@ios_base@std@@QEBA_NXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?gptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@GDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@G@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@G@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$messages@D@std@@2V0locale@2@A
?id@?$messages@G@std@@2V0locale@2@A
?id@?$messages@_W@std@@2V0locale@2@A
?id@?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$money_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$moneypunct@D$00@std@@2V0locale@2@A
?id@?$moneypunct@D$0A@@std@@2V0locale@2@A
?id@?$moneypunct@G$00@std@@2V0locale@2@A
?id@?$moneypunct@G$0A@@std@@2V0locale@2@A
?id@?$moneypunct@_W$00@std@@2V0locale@2@A
?id@?$moneypunct@_W$0A@@std@@2V0locale@2@A
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$numpunct@G@std@@2V0locale@2@A
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_get@_WV?$istreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?ignore@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@_JG@Z
?ignore@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JG@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?imbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAXAEBVlocale@2@@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?imbue@ios_base@std@@QEAA?AVlocale@2@AEBV32@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAG3AEAPEAG@Z
?in@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
?in@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_U3AEAPEA_U@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JXZ
?in_avail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JXZ
?in_avail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JXZ
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?init@?$basic_ios@GU?$char_traits@G@std@@@std@@IEAAXPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@_N@Z
?init@?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAAXPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_N@Z
?intl@?$moneypunct@D$00@std@@2_NB
?intl@?$moneypunct@D$0A@@std@@2_NB
?intl@?$moneypunct@G$00@std@@2_NB
?intl@?$moneypunct@G$0A@@std@@2_NB
?intl@?$moneypunct@_W$00@std@@2_NB
?intl@?$moneypunct@_W$0A@@std@@2_NB
?ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?ipfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_N_N@Z
?ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?is@?$ctype@D@std@@QEBAPEBDPEBD0PEAF@Z
?is@?$ctype@D@std@@QEBA_NFD@Z
?is@?$ctype@G@std@@QEBAPEBGPEBG0PEAF@Z
?is@?$ctype@G@std@@QEBA_NFG@Z
?is@?$ctype@_W@std@@QEBAPEB_WPEB_W0PEAF@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?isfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?isfx@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?isfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?iword@ios_base@std@@QEAAAEAJH@Z
?length@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?length@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?length@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?length@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?length@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1_K@Z
?max_length@codecvt_base@std@@QEBAHXZ
?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAX$$QEAV12@@Z
?move@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXAEAV12@@Z
?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAX$$QEAV12@@Z
?move@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXAEAV12@@Z
?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAX$$QEAV12@@Z
?move@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXAEAV12@@Z
?narrow@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADDD@Z
?narrow@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBADGD@Z
?narrow@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAD_WD@Z
?narrow@?$ctype@D@std@@QEBADDD@Z
?narrow@?$ctype@D@std@@QEBAPEBDPEBD0DPEAD@Z
?narrow@?$ctype@G@std@@QEBADGD@Z
?narrow@?$ctype@G@std@@QEBAPEBGPEBG0DPEAD@Z
?narrow@?$ctype@_W@std@@QEBAD_WD@Z
?narrow@?$ctype@_W@std@@QEBAPEB_WPEB_W0DPEAD@Z
?opfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA_NXZ
?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA_NXZ
?opfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA_NXZ
?osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?osfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAXXZ
?osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBG1AEAPEBGPEAD3AEAPEAD@Z
?out@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_S1AEAPEB_SPEAD3AEAPEAD@Z
?out@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?overflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGG@Z
?overflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGG@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGG@Z
?pbackfail@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGG@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?pbase@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXH@Z
?pbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXH@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?peek@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAGXZ
?peek@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEBAPEAGXZ
?pptr@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEBAPEA_WXZ
?precision@ios_base@std@@QEAA_J_J@Z
?precision@ios_base@std@@QEBA_JXZ
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?pubimbue@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?pubimbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pubseekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JII@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pubseekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JII@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?pubseekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@_JII@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?pubseekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@I@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?pubseekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@I@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?pubseekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@V32@I@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAPEAV12@PEAD_J@Z
?pubsetbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAPEAV12@PEAG_J@Z
?pubsetbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAPEAV12@PEA_W_J@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?pubsync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAHXZ
?pubsync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAHXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?put@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DJ@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DK@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DN@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DO@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBX@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_J@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_K@Z
?put@?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@D_N@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GJ@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GK@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GN@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GO@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBX@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_J@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_K@Z
?put@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@G_N@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WJ@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WK@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WN@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WO@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBX@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_J@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_K@Z
?put@?$num_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_W_N@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBUtm@@DD@Z
?put@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@GU?$char_traits@G@std@@@2@V32@AEAVios_base@2@GPEBUtm@@PEBG3@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@DD@Z
?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?putback@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@G@Z
?putback@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?pword@ios_base@std@@QEAAAEAPEAXH@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@PEAV32@@Z
?rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@XZ
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@PEAV32@@Z
?rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@XZ
?rdstate@ios_base@std@@QEBAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?read@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEAG_J@Z
?read@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEA_W_J@Z
?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?readsome@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA_JPEAG_J@Z
?readsome@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_JPEA_W_J@Z
?register_callback@ios_base@std@@QEAAXP6AXW4event@12@AEAV12@H@ZH@Z
?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sbumpc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?scan_is@?$ctype@D@std@@QEBAPEBDFPEBD0@Z
?scan_is@?$ctype@G@std@@QEBAPEBGFPEBG0@Z
?scan_is@?$ctype@_W@std@@QEBAPEB_WFPEB_W0@Z
?scan_not@?$ctype@D@std@@QEBAPEBDFPEBD0@Z
?scan_not@?$ctype@G@std@@QEBAPEBGFPEBG0@Z
?scan_not@?$ctype@_W@std@@QEBAPEB_WFPEB_W0@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@_JH@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekoff@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekoff@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@_JH@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_JH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekpos@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
?set_rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@@Z
?set_rdbuf@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXPEAV?$basic_streambuf@GU?$char_traits@G@std@@@2@@Z
?set_rdbuf@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@@Z
?setbase@std@@YA?AU?$_Smanip@H@1@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAPEAV12@PEAG_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?setf@ios_base@std@@QEAAHH@Z
?setf@ios_base@std@@QEAAHHH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setg@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?setg@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG00@Z
?setp@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXPEAG0@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W00@Z
?setp@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXPEA_W0@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXI@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXI@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXI@Z
?setstate@ios_base@std@@QEAAXH@Z
?setstate@ios_base@std@@QEAAXH_N@Z
?setstate@ios_base@std@@QEAAXI@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?sgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEAG_J@Z
?sgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEA_W_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?showmanyc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputbackc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?sputbackc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGG@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAA_JPEBG_J@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?stossc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAXXZ
?stossc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAXXZ
?stossc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sungetc@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QEAAGXZ
?sungetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?swap@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXAEAV12@@Z
?swap@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAXAEAV12@@Z
?swap@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXAEAV12@@Z
?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_iostream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_iostream@_WU?$char_traits@_W@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_istream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_istream@_WU?$char_traits@_W@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_ostream@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IEAAXAEAV12@@Z
?swap@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXAEAV12@@Z
?swap@ios_base@std@@QEAAXAEAV12@@Z
?sync@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sync@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAHXZ
?sync@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAHXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAHXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?table@?$ctype@D@std@@QEBAPEBFXZ
?table_size@?$ctype@D@std@@2_KB
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellg@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellg@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@PEAV32@@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEAAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@PEAV32@@Z
?tie@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAPEAV?$basic_ostream@GU?$char_traits@G@std@@@2@XZ
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@PEAV32@@Z
?tie@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBAPEAV?$basic_ostream@_WU?$char_traits@_W@std@@@2@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@G@std@@QEBAGG@Z
?tolower@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?toupper@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?toupper@?$ctype@G@std@@QEBAGG@Z
?toupper@?$ctype@G@std@@QEBAPEBGPEAGPEBG@Z
?toupper@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?uncaught_exception@std@@YA_NXZ
?uncaught_exceptions@std@@YAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAAGXZ
?underflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?unget@?$basic_istream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@XZ
?unget@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?unsetf@ios_base@std@@QEAAXH@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?unshift@?$codecvt@GDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?unshift@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?unshift@?$codecvt@_UDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?wcerr@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcin@std@@3V?$basic_istream@GU?$char_traits@G@std@@@1@A
?wcin@std@@3V?$basic_istream@_WU?$char_traits@_W@std@@@1@A
?wclog@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wclog@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?wcout@std@@3V?$basic_ostream@GU?$char_traits@G@std@@@1@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?widen@?$basic_ios@GU?$char_traits@G@std@@@std@@QEBAGD@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?widen@?$ctype@D@std@@QEBADD@Z
?widen@?$ctype@D@std@@QEBAPEBDPEBD0PEAD@Z
?widen@?$ctype@G@std@@QEBAGD@Z
?widen@?$ctype@G@std@@QEBAPEBDPEBD0PEAG@Z
?widen@?$ctype@_W@std@@QEBAPEBDPEBD0PEA_W@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QEAAAEAV12@PEBG_J@Z
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z
?xalloc@ios_base@std@@SAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEAG_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsputn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MEAA_JPEBG_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
_Chmod
_Close_dir
_Cnd_broadcast
_Cnd_destroy
_Cnd_destroy_in_situ
_Cnd_do_broadcast_at_thread_exit
_Cnd_init
_Cnd_init_in_situ
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_timedwait
_Cnd_unregister_at_thread_exit
_Cnd_wait
_Copy_file
_Cosh
_Current_get
_Current_set
_Denorm
_Dtest
_Equivalent
_Exp
_FCosh
_FDenorm
_FDtest
_FExp
_FInf
_FNan
_FSinh
_FSnan
_File_size
_Getcoll
_Getctype
_Getcvt
_Getdateorder
_Getwctype
_Getwctypes
_Hard_links
_Hugeval
_Inf
_LCosh
_LDenorm
_LDtest
_LExp
_LInf
_LNan
_LSinh
_LSnan
_Last_write_time
_Link
_Lock_shared_ptr_spin_lock
_Lstat
_Make_dir
_Mbrtowc
_Mtx_clear_owner
_Mtx_current_owns
_Mtx_destroy
_Mtx_destroy_in_situ
_Mtx_getconcrtcs
_Mtx_init
_Mtx_init_in_situ
_Mtx_lock
_Mtx_reset_owner
_Mtx_timedlock
_Mtx_trylock
_Mtx_unlock
_Mtxdst
_Mtxinit
_Mtxlock
_Mtxunlock
_Nan
_Open_dir
_Query_perf_counter
_Query_perf_frequency
_Read_dir
_Remove_dir
_Rename
_Resize
_Set_last_write_time
_Sinh
_Snan
_Stat
_Statvfs
_Stod
_Stodx
_Stof
_Stofx
_Stold
_Stoldx
_Stoll
_Stollx
_Stolx
_Stoul
_Stoull
_Stoullx
_Stoulx
_Strcoll
_Strxfrm
_Symlink
_Symlink_get
_Temp_get
_Thrd_abort
_Thrd_create
_Thrd_current
_Thrd_detach
_Thrd_equal
_Thrd_exit
_Thrd_hardware_concurrency
_Thrd_id
_Thrd_join
_Thrd_sleep
_Thrd_start
_Thrd_yield
_To_byte
_To_wide
_Tolower
_Toupper
_Towlower
_Towupper
_Unlink
_Unlock_shared_ptr_spin_lock
_WStod
_WStodx
_WStof
_WStofx
_WStold
_WStoldx
_Wcrtomb
_Wcscoll
_Wcsxfrm
_Xtime_diff_to_millis
_Xtime_diff_to_millis2
_Xtime_get_ticks
__Wcrtomb_lk
__crtCloseThreadpoolTimer
__crtCloseThreadpoolWait
__crtCompareStringA
__crtCompareStringEx
__crtCompareStringW
__crtCreateEventExW
__crtCreateSemaphoreExW
__crtCreateSymbolicLinkW
__crtCreateThreadpoolTimer
__crtCreateThreadpoolWait
__crtFlushProcessWriteBuffers
__crtFreeLibraryWhenCallbackReturns
__crtGetCurrentProcessorNumber
__crtGetFileInformationByHandleEx
__crtGetLocaleInfoEx
__crtGetSystemTimePreciseAsFileTime
__crtGetTickCount64
__crtInitOnceExecuteOnce
__crtInitializeCriticalSectionEx
__crtIsPackagedApp
__crtLCMapStringA
__crtLCMapStringEx
__crtLCMapStringW
__crtSetFileInformationByHandle
__crtSetThreadpoolTimer
__crtSetThreadpoolWait
__crtWaitForThreadpoolTimerCallbacks
__set_stl_sync_api_mode
xtime_get
Name
.text
Size
316KB
Virtual Size
316KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
181KB
Virtual Size
181KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
7KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
14KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=30795,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=200, id=1, productName=Unmarked objects,
count=5, id=257, version=35207,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=143, id=261, version=35207,
count=1, id=256, version=35207,
count=1, id=255, version=35207,
count=1, id=258, version=35207,
oid.pdf
- SHA256 a6dde2021305f44bf707b879375811aac356af8d966329cb129df4de2fd0058d
- MD5 6f920edeba4dcb13663936d38eac6148
- SHA1 70b18ae658c5fc3b3f52ee72cc9a73fbe5b37ec4
- SHA512 580ac9068dc9ab155a6c2f9c49a0935f2c915a81860ac9ccafe91fa53f1d698b9098cfe379ca5f5361044fd8146c5da3dc7a665dacd257c3fad05920e42a2a46
- SSDEEP 24576:l0UtBd5co4vi7sMdnFxG+h/99MMwUjtFOkM9jRKfGW:l0wd2o77bde0/rMMwQGV9jofGW
- TLSH T13C05F1B9E9D41CDCEC43CB8665A6391445ADF14B97CC3AC118BC8F86B181F0E9B935E2
- MD5 SHA1 SHA512 SSDEEP TLSH
pcre.dll
- IMPHASH 9e6656e09b208aa89be311cf37854d7d
- SHA256 9524a9ae031af3d1755ef7b14031fa4372a9891622323fecb1a8f0180beb2ffe
- MD5 eb3eea73f3c326e3c1f3f230765b4a9b
- SHA1 29385ce198deabd991105e1a0a8fbaacdbfd0258
- SHA512 58751d2cca457291b05e6969759ac08c15a1d7932515285efafae8fcc963b1f96497bd873a889923bc943f3386b9eb2b643bd7d8edd16950d8235488550ad6be
- SSDEEP 6144:/kScjFvmztCe0XaHgxhBXzsF3z6Bdg5zDS/fpGY4E9:WtmoAHg3BjsF4dg5aJGZo
- TLSH T13A94294263B500B9FFEBD1374363D116DBBA316C53A35EAF24D05A70BA327710A2E619
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
d6:a2:05:5f:39:b5:72:cb:7a:c5:3b:6b:d7:55:f6:22:17:83:6d:38:01:25:05:73:ac:a1:7d:fb:e6:02:28:b4
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
91:10:0c:c6:c1:a1:fe:5d:11:33:c2:af:e8:32:fa:b7:1e:8a:2b:f7
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
295504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-11049430\cayman_pcre\pcre\src\build-VS2017\x64\Release\pcre.pdb
kernel32
VirtualFree
VirtualAlloc
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetSystemInfo
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
strchr
memset
memcpy
memcmp
memmove
api-ms-win-crt-string-l1-1-0
iscntrl
isalnum
isxdigit
isalpha
tolower
isupper
isgraph
toupper
isprint
islower
ispunct
isdigit
strncmp
isspace
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_execute_onexit_table
_initterm_e
_initterm
_seh_filter_dll
_configure_narrow_argv
pcre_assign_jit_stack
pcre_callout
pcre_compile
pcre_compile2
pcre_config
pcre_copy_named_substring
pcre_copy_substring
pcre_dfa_exec
pcre_exec
pcre_free
pcre_free_study
pcre_free_substring
pcre_free_substring_list
pcre_fullinfo
pcre_get_named_substring
pcre_get_stringnumber
pcre_get_stringtable_entries
pcre_get_substring
pcre_get_substring_list
pcre_jit_exec
pcre_jit_free_unused_memory
pcre_jit_stack_alloc
pcre_jit_stack_free
pcre_maketables
pcre_malloc
pcre_pattern_to_host_byte_order
pcre_refcount
pcre_stack_free
pcre_stack_guard
pcre_stack_malloc
pcre_study
pcre_version
Name
.text
Size
287KB
Virtual Size
287KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
92KB
Virtual Size
92KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
92B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=3, id=259, version=26706,
count=11, id=261, version=26706,
count=8, id=260, version=26706,
count=3, id=257, version=25711,
count=58, id=1, productName=Unmarked objects,
count=21, id=264, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
qe79c.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
qerga.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
rt8a.exe
- IMPHASH b5d7041263b82f6cc715fb8be1462ba7
- SHA256 b50952f9af310be586746356508b9fd430dcbbaa155a04e6f9563632de0a023b
- MD5 2b99efa18ca9132208a73c7888a8f518
- SHA1 dea37c5984985da472dda61d3b6a4cce462ae6b9
- SHA512 42c71c058c7ffebb4f6d2e3c8725eae6653dff50d55648576057ee7ead645db76b747cc67d3e864abb4b314f849821f589cc1adbc4db7553e513e672684bb6c4
- SSDEEP 768:UBB1AKdpLnrhi+NwjGNNKgZ8bmY5/hQ9E08N6QNdA3iPmbL:Uz5hi+NwjGNNKpT55YE08NZTu7
- TLSH T1EE7397C2E382AE4DEF0E70771763856480B9A9B25F036403B70D729E39F9DA0174D5AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
db:ec:11:aa:08:5a:ef:af:85:4a:09:f2:90:88:35:44:f8:e1:d0:3f:ca:b0:18:14:f4:b5:e9:cc:d2:0e:52:c6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Chains
Mar 11, 2025
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Serial Number
62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Pyrsys B.V.,O=Pyrsys B.V.,ST=Noord-Holland,C=NL
Serial Number
b2:08:31:5c:09:c0:2e:f1:55:0e:0c:8d:12:7c:f4:99
Issuer
CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Mar 10, 2025 - Mar 9, 2028
Subject
CN=Sectigo Public Time Stamping Signer R35,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
3a:52:6a:2c:84:ce:55:e6:1d:65:fc:cc:12:d8:e9:89
Issuer
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 15, 2024 - Apr 14, 2035
Subject
CN=Sectigo Public Time Stamping CA R36,O=Sectigo Limited,C=GB
Serial Number
7a:23:ae:da:53:69:96:0f:91:c8:3e:5c:f4:c7:e3:3f
Issuer
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo Public Time Stamping Root R46,O=Sectigo Limited,C=GB
Serial Number
36:c2:b0:bd:7c:1b:3a:e7:a3:b3:dd:36:cb:c9:75:68
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 22, 2021 - Jan 18, 2038
Minor OS version
0
Major OS version
6
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
comctl32
ord17
kernel32
ExitProcess
user32
MessageBoxA
Name
.text
Size
512B
Virtual Size
69B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
796B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=7, id=257, version=30795,
count=3, id=1, productName=Unmarked objects,
count=1, id=260, version=33522,
count=1, id=255, version=33522,
count=1, id=258, version=33522,
ssafgt.ico
- SHA256 a19d74c45f5e5f899f932e5917b973e14c00284d39bdbbd92e73c830da68e0ee
- MD5 212c945df6c8154d43b9b17fb86e8461
- SHA1 484e6d536b1dbae11121a39f7de193b2a8d05bed
- SHA512 a17833c3937eeae2c4cdca51650e6de02bb10476eb41ff29484c68c8fbc23e6a0b7e22d78bbbcb78e2c3518c9790749e71cb68de3c579bd0241cd23aac0f8c62
- SSDEEP 768:nlgR59GEt3rMLwpumnCJSk5+D/IZNfnskCCo6:nU5zYUomM5iAZZsOX
- TLSH T1BAB2F143613A2E48D1F4E7C072C30FDDBEAD116E6515BC9B09A34A339D85609D8182E6
- MD5 SHA1 SHA512 SSDEEP TLSH
vcruntime140.dll
- IMPHASH 7f91c705cf579114968b3edc12e1175e
- SHA256 36585912e5eaf83ba9fea0631534f690ccdc2d7ba91537166fe53e56c221e153
- MD5 862f820c3251e4ca6fc0ac00e4092239
- SHA1 ef96d84b253041b090c243594f90938e9a487a9a
- SHA512 2f8a0f11bccc3a8cb99637deeda0158240df0885a230f38bb7f21257c659f05646c6b61e993f87e0877f6ba06b347ddd1fc45d5c44bc4e309ef75ed882b82e4e
- SSDEEP 1536:N9TXF5LLXQLlNycKW+D4SdqJk6aN1ACuyxLiyazYaCVoecbdhgOwAd+zfZ1zu:N9jelDoD9uyxLizzFzecbdPwA87S
- TLSH T1A2C38D4572A042F7D17AD274C1A36A17FB75B94487A0A3CF03B58A650F13BE0AE3D396
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
c4:fa:97:43:cc:40:75:15:e2:65:01:03:0a:0a:be:0f:fa:41:0c:45:e5:5c:83:ff:d4:1d:0e:31:10:2a:cb:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
c4:fa:97:43:cc:40:75:15:e2:65:01:03:0a:0a:be:0f:fa:41:0c:45:e5:5c:83:ff:d4:1d:0e:31:10:2a:cb:e6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Issuer
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 1, 2013 - May 1, 2028
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:DC00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:e8:50:b0:80:cf:2b:72:99:4d:00:01:00:00:01:e8
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Minor OS version
0
Major OS version
6
Entry point
63120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140.amd64.pdb
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
wcsncmp
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsprintf_s
api-ms-win-crt-convert-l1-1-0
atol
kernel32
SetLastError
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlLookupFunctionEntry
RtlUnwindEx
RtlUnwind
GetModuleHandleW
EncodePointer
RaiseException
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetLastError
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
GetModuleFileNameW
_CreateFrameInfo
_CxxThrowException
_FindAndUnlinkFrame
_IsExceptionObjectToBeDestroyed
_SetWinRTOutOfMemoryExceptionCallback
__AdjustPointer
__BuildCatchObject
__BuildCatchObjectHelper
__C_specific_handler
__C_specific_handler_noexcept
__CxxDetectRethrow
__CxxExceptionFilter
__CxxFrameHandler
__CxxFrameHandler2
__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxUnregisterExceptionObject
__DestructExceptionObject
__FrameUnwindFilter
__GetPlatformExceptionInfo
__NLG_Dispatch2
__NLG_Return2
__RTCastToVoid
__RTDynamicCast
__RTtypeid
__TypeMatch
__current_exception
__current_exception_context
__intrinsic_setjmp
__intrinsic_setjmpex
__processing_throw
__report_gsfailure
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
__std_type_info_destroy_list
__std_type_info_hash
__std_type_info_name
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
__unDName
__unDNameEx
__uncaught_exception
__uncaught_exceptions
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_InitializeCriticalSectionEx
__vcrt_LoadLibraryExW
_get_purecall_handler
_get_unexpected
_is_exception_typeof
_local_unwind
_purecall
_set_purecall_handler
_set_se_translator
longjmp
memchr
memcmp
memcpy
memmove
memset
set_unexpected
strchr
strrchr
strstr
unexpected
wcschr
wcsrchr
wcsstr
Name
.text
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=30795,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=45, id=1, productName=Unmarked objects,
count=1, productName=Unmarked objects (old),
count=16, id=260, version=33923,
count=31, id=261, version=33923,
count=21, id=259, version=33923,
count=1, id=256, version=33923,
count=1, id=255, version=33923,
count=1, id=258, version=33923,
vcruntime140_1.dll
- IMPHASH 72707e942878aac770fcc118ce3ec1c9
- SHA256 82a2f9ae1e6146ae3cb0f4bc5a62b7227e0384209d9b1aef86bbcc105912f7cd
- MD5 68156f41ae9a04d89bb6625a5cd222d4
- SHA1 3be29d5c53808186eba3a024be377ee6f267c983
- SHA512 f7bf8ad7cd8b450050310952c56f6a20b378a972c822ccc253ef3d7381b56ffb3ca6ce3323bea9872674ed1c02017f78ab31e9eb9927fc6b3cba957c247e5d57
- SSDEEP 768:ApzzO6ujT3MbR3v0Cz6SR8q83yaFdWr9zRcmgEl6U9zSC:9q/oGw3fFdwzRcmZFzSC
- TLSH T1A3235A9057788486D4AB95B0C1D6EF537E7CFA924710928B0BA0E59C2F637D0EB3D21A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
2c:1b:cd:38:f8:ca:7f:cf:e5:5c:3f:e2:5d:ee:db:24:55:00:ea:06:7e:c4:85:f3:55:47:4d:48:ae:5d:d2:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
2c:1b:cd:38:f8:ca:7f:cf:e5:5c:3f:e2:5d:ee:db:24:55:00:ea:06:7e:c4:85:f3:55:47:4d:48:ae:5d:d2:13
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Jul 26, 2024
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Windows Software Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:f8:ae:a0:bd:67:8b:63:ac:eb:00:00:00:00:00:f8
Issuer
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Windows Third Party Component CA 2013,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:14:9d:fb:c3:1f:1f:63:c3:10:00:00:00:00:00:14
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 1, 2013 - May 1, 2028
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:8603-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:f1:b3:45:f5:27:e8:c0:16:d6:00:01:00:00:01:f1
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:a5:41:11:e8:f0:7f:be:0b:75:00:00:00:00:03:a5
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 19, 2023 - Oct 16, 2024
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:A000-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:eb:e0:18:6c:b5:b6:ef:38:ed:00:01:00:00:01:eb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 6, 2023 - Mar 5, 2025
Minor OS version
0
Major OS version
6
Entry point
16544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\binaries\amd64ret\bin\amd64\\vcruntime140_1.amd64.pdb
api-ms-win-crt-runtime-l1-1-0
terminate
abort
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
api-ms-win-crt-string-l1-1-0
strcpy_s
wcsncmp
vcruntime140
memcpy
__processing_throw
__C_specific_handler
memmove
__current_exception
kernel32
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlUnwindEx
RtlLookupFunctionEntry
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
GetLastError
DeleteCriticalSection
SetLastError
__CxxFrameHandler4
__NLG_Dispatch2
__NLG_Return2
Name
.text
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
324B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=30795,
count=2, id=257, version=33923,
count=11, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=51, id=1, productName=Unmarked objects,
count=7, id=260, version=33923,
count=27, id=261, version=33923,
count=5, id=259, version=33923,
count=1, id=256, version=33923,
count=1, id=255, version=33923,
count=1, id=258, version=33923,
vmtools.dll
- IMPHASH 0e33854d605f35d376aee1afc06c476b
- SHA256 4504dee573d0b4655da2362d89532fa30ddffbfb3e95575bfa0aac6684138553
- MD5 4d4b930faf6661312a64403b2b4552af
- SHA1 1133ab90824fc97dadaed42f17955bee6744a632
- SHA512 d3978639925ea64874e5f199d36b9b180c9420841fae940a5d6868dd5cf681e1d2f4850a04e61d401adb2302695fcf4d43c4056c1ba12b4b4a14f04cb0bb29a6
- SSDEEP 12288:XyvmgIAuZfO31utAZdFbUQ+S6bsAE/Ep0M5Lxi7cIEooeOy+VcEL:XyvmgGmlut6b+S6REMp0MewIEAOyyvL
- TLSH T191057C56BBA505ACD46B813885538332F7B1B8150361E7DF12A4D679EF3BBD2223EB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
81:18:23:0d:bf:89:bf:b6:90:5d:1f:b5:4d:d0:e8:19:2d:f9:3f:8a:41:2e:8d:25:7a:4c:21:1f:a9:97:1e:6e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
c3:6a:cc:4d:cb:db:2f:9a:a5:47:29:f0:d5:1a:0e:a4:01:1c:53:59
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
421248
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d:\build\ob\bora-14549434\bora-vmsoft\build\release-x64\tools-for-windows\Win32\apps\vmtoolslib\vmtools.pdb
advapi32
GetUserNameW
OpenProcessToken
GetLengthSid
GetTokenInformation
DeregisterEventSource
RegisterEventSourceW
ReportEventW
AllocateAndInitializeSid
CopySid
FreeSid
InitializeSecurityDescriptor
IsValidSid
SetKernelObjectSecurity
SetSecurityDescriptorControl
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetEntriesInAclW
OpenThreadToken
AccessCheck
DuplicateToken
GetNamedSecurityInfoW
GetFileSecurityW
ImpersonateSelf
MapGenericMask
RevertToSelf
LookupAccountSidW
LookupAccountNameW
OpenSCManagerW
OpenServiceW
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
AddAccessAllowedAceEx
CheckTokenMembership
EqualSid
GetSecurityDescriptorControl
InitializeAcl
LookupPrivilegeValueA
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegSetValueExW
GetExplicitEntriesFromAclW
RegOpenKeyExW
RegQueryValueExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegLoadKeyW
RegQueryInfoKeyW
RegUnLoadKeyW
AddAccessAllowedAce
SetSecurityDescriptorGroup
AddAce
GetAce
GetAclInformation
GetSecurityDescriptorDacl
RegOpenKeyExA
CloseServiceHandle
RegQueryValueExA
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueW
RegOpenCurrentUser
InitiateSystemShutdownW
QueryServiceStatus
DeleteAce
CreateProcessAsUserW
kernel32
OutputDebugStringA
GetCurrentProcess
LocalFree
RtlCaptureContext
RaiseException
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
GetSystemInfo
VirtualAlloc
VirtualFree
LoadLibraryW
VirtualQuery
IsBadReadPtr
GetCurrentThread
FindClose
FindNextFileW
FlushFileBuffers
ReadFile
SetEndOfFile
SetFilePointerEx
WriteFile
DuplicateHandle
CreateDirectoryW
DeleteFileW
FindFirstFileExW
GetFileAttributesExW
GetFileTime
GetVolumeInformationW
RemoveDirectoryW
SetFileTime
MoveFileExW
FreeConsole
GetDriveTypeW
GetFileInformationByHandle
OpenProcess
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
GetTickCount
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ExpandEnvironmentStringsW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
GetShortPathNameW
GetTempFileNameW
QueryDosDeviceW
GetTempPathW
GetCompressedFileSizeW
WaitNamedPipeW
CreateProcessW
GetComputerNameExW
GetVersionExW
FreeLibrary
LoadLibraryA
GetFullPathNameW
SetFileAttributesW
GetModuleFileNameW
LoadLibraryExW
FormatMessageW
GetFileAttributesA
OutputDebugStringW
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetDriveTypeA
WideCharToMultiByte
Sleep
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetFileAttributesW
GetOverlappedResult
CancelIo
WaitForSingleObject
CreateEventA
MultiByteToWideChar
GetExitCodeProcess
GetVersionExA
GetModuleHandleA
lstrcmpiA
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount64
GetACP
ExpandEnvironmentStringsA
IsDebuggerPresent
InitializeCriticalSection
CreateFileA
TerminateProcess
GetSystemFirmwareTable
SetFileInformationByHandle
SetFilePointer
GetFileSizeEx
CreateDirectoryA
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
AllocConsole
GetProcAddress
GetCommandLineW
GetExitCodeThread
ReadProcessMemory
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetLogicalDrives
GetVolumeInformationA
GetConsoleWindow
GetModuleHandleW
GetFileType
GetStdHandle
DeviceIoControl
CloseHandle
CreateFileW
SetLastError
GetLocaleInfoW
GetLastError
GetDiskFreeSpaceExW
ole32
CoQueryProxyBlanket
CoInitialize
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitializeEx
CoTaskMemFree
oleaut32
SafeArrayDestroy
SafeArrayCreate
SysFreeString
SysAllocString
VariantInit
SafeArrayPutElement
VariantClear
shell32
SHGetFolderPathW
DragQueryFileW
user32
SetWindowsHookExW
UnhookWindowsHookEx
CallNextHookEx
GetParent
SystemParametersInfoW
GetWindowInfo
PostMessageW
SendMessageTimeoutW
GetDesktopWindow
SetForegroundWindow
GetForegroundWindow
SendInput
LoadStringW
GetClipboardFormatNameW
SetProcessWindowStation
ExitWindowsEx
CloseWindowStation
CloseDesktop
MsgWaitForMultipleObjects
PeekMessageA
DispatchMessageA
TranslateMessage
GetUserObjectSecurity
SetUserObjectSecurity
GetProcessWindowStation
EnumDesktopWindows
OpenInputDesktop
OpenDesktopW
OpenWindowStationW
GetClassNameW
MessageBoxW
IsWindowVisible
ws2_32
GetNameInfoW
WSASetLastError
setsockopt
select
ntohs
getsockopt
getsockname
ioctlsocket
accept
__WSAFDIsSet
WSACleanup
htonl
WSAGetLastError
WSAStartup
socket
send
recv
ntohl
connect
closesocket
bind
crypt32
CryptAcquireCertificatePrivateKey
CryptExportPKCS8
CertFindCertificateInStore
CertAddEncodedCertificateToStore
CertGetCertificateChain
CertFreeCertificateChain
CertCreateCertificateContext
CertFreeCertificateContext
CertCloseStore
CertOpenStore
glib-2.0
g_date_time_new_now_utc
g_date_time_get_microsecond
g_date_time_format
g_key_file_new
g_io_channel_win32_new_socket
g_io_channel_win32_new_fd
g_io_channel_win32_new_messages
g_io_add_watch
g_timeout_add
g_source_remove
g_source_is_destroyed
g_main_current_source
g_slist_find
g_rec_mutex_lock
g_rec_mutex_init
g_vsnprintf
g_slist_prepend
g_slist_free
g_snprintf
g_direct_equal
g_direct_hash
g_hash_table_size
g_hash_table_foreach_remove
g_hash_table_find
g_hash_table_steal
g_hash_table_replace
g_hash_table_new_full
g_once_init_leave
g_once_init_enter
g_malloc
g_locale_from_utf8
g_unlink
g_rename
g_io_channel_write_chars
g_io_channel_flush
g_io_channel_set_encoding
g_get_user_name
g_ptr_array_foreach
g_date_time_unref
g_utf16_to_utf8
g_file_test_utf8
g_filename_from_utf8_utf8
g_timeout_source_new
g_idle_source_new
g_source_set_callback
g_source_set_priority
g_source_destroy
g_source_attach
g_source_unref
g_main_context_unref
g_ptr_array_remove_index
g_main_context_ref
g_str_hash
g_str_equal
g_hash_table_lookup
g_hash_table_remove
g_hash_table_insert
g_hash_table_destroy
g_hash_table_new
g_fopen
g_stat
g_fprintf
g_key_file_to_data
g_key_file_load_from_file
g_build_filename
g_file_error_quark
g_set_error
g_vasprintf
g_strcmp0
g_strfreev
g_strsplit
g_strjoin
g_strchomp
g_str_has_suffix
g_return_if_fail_warning
g_ptr_array_free
g_log_set_default_handler
g_log_default_handler
g_ptr_array_add
g_log_remove_handler
g_log_set_handler
g_key_file_get_integer
g_key_file_get_boolean
g_rec_mutex_unlock
g_key_file_set_string
g_key_file_get_string
g_key_file_has_key
g_ptr_array_sized_new
g_ptr_array_new
g_strdup_printf
g_strdup
g_log
g_io_channel_new_file_utf8
g_source_new
g_io_channel_read_line
g_io_channel_unref
g_utf8_to_utf16
g_malloc0_n
g_free
g_once_impl
g_mutex_unlock
g_mutex_lock
g_mutex_clear
g_mutex_init
g_key_file_free
g_clear_error
g_array_sized_new
g_key_file_get_keys
g_source_add_poll
g_malloc0
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
wcsstr
memcmp
wcschr
memchr
strstr
memset
memmove
strrchr
strchr
memcpy
wcsrchr
api-ms-win-crt-heap-l1-1-0
free
realloc
calloc
malloc
api-ms-win-crt-string-l1-1-0
strncmp
towupper
isprint
wcscspn
wcsspn
isdigit
_wcsdup
strncat
isspace
strtok_s
_stricmp
islower
strtok
_strnicmp
_strupr
strncpy
isalnum
wcsncmp
_strlwr
tolower
_strdup
_wcslwr
strcmp
strcspn
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_getpid
strerror
_cexit
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm
_seh_filter_dll
exit
_beginthreadex
abort
_errno
api-ms-win-crt-stdio-l1-1-0
fwrite
__stdio_common_vsscanf
_wopen
fflush
fgetc
fgets
_wfopen
__stdio_common_vfscanf
setvbuf
getc
feof
fputs
_wfreopen
__acrt_iob_func
__stdio_common_vfprintf
fclose
__stdio_common_vsprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-environment-l1-1-0
_wgetenv
getenv
api-ms-win-crt-filesystem-l1-1-0
_wunlink
_wmkdir
_wstat64
_wrename
_wfullpath
api-ms-win-crt-convert-l1-1-0
wcrtomb
_strtoui64
_ecvt_s
_fcvt_s
mbtowc
strtod
strtol
strtoul
_strtoi64
api-ms-win-crt-time-l1-1-0
_time64
_ftime64
_mktime64
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
frexp
Backdoor
BackdoorChannel_New
Backdoor_HbIn
Backdoor_HbOut
Base64_Decode
Base64_DecodedLength
Base64_EasyEncode
Base64_Encode
Base64_EncodedLength
CodeSet_CurrentToUtf8
CodeSet_DontUseIcu
CodeSet_GenericToGeneric
CodeSet_GetAltPathName
CodeSet_GetCurrentCodeSet
CodeSet_Init
CodeSet_Utf16leToUtf8
CodeSet_Utf8ToCurrent
CodeSet_Utf8ToUtf16le
CodeSet_Validate
Config_GetLong
CryptoHash_Compute
CryptoHash_FromString
CryptoHash_GetOutputSize
Debug
DictLL_ReadLine
DictLL_WriteLine
DynArray_AllocCount
DynArray_Destroy
DynArray_Init
DynArray_SetCount
DynBuf_Append
DynBuf_Attach
DynBuf_Copy
DynBuf_Destroy
DynBuf_Detach
DynBuf_Enlarge
DynBuf_Init
DynBuf_SafeInternalAppend
DynBuf_Trim
DynXdr_AllocGet
DynXdr_AppendRaw
DynXdr_Create
DynXdr_Destroy
DynXdr_Get
Err_ErrString
Err_Errno2String
Escape_Do
Escape_DoString
Escape_Undo
FileIO_Access
FileIO_Close
FileIO_ErrorEnglish
FileIO_GetSize
FileIO_Invalidate
FileIO_Open
FileIO_Read
FileIO_Write
File_CreateDirectory
File_CreateDirectoryEx
File_CreateDirectoryHierarchy
File_CreateDirectoryHierarchyEx
File_DeleteDirectoryTree
File_DeleteEmptyDirectory
File_EnsureDirectory
File_EnsureDirectoryEx
File_Exists
File_GetFilePermissions
File_GetModTime
File_GetPathName
File_GetSafeRandomTmpDir
File_GetSafeTmpDir
File_GetSize
File_GetSizeEx
File_GetTimes
File_IsDirectory
File_IsEmptyDirectory
File_IsFile
File_IsSameFile
File_IsSymLink
File_ListDirectory
File_MakeSafeTemp
File_MakeTempEx
File_MakeTempEx2
File_Move
File_PathJoin
File_SetFilePermissions
File_SetTimes
File_SplitName
File_Unlink
File_UnlinkDelayed
File_UnlinkIfExists
File_UnlinkNoFollow
GuestApp_GetConfPath
GuestApp_GetDefaultScript
GuestApp_GetInstallPath
GuestApp_GetInstallPathW
HashTable_Alloc
HashTable_AllocOnce
HashTable_Clear
HashTable_Delete
HashTable_ForEach
HashTable_Free
HashTable_GetNumElements
HashTable_Insert
HashTable_KeyArray
HashTable_Lookup
HashTable_LookupAndDelete
HashTable_ReplaceOrInsert
HashTable_ToArray
Hostinfo_GetLibraryPath
Hostinfo_GetModulePath
Hostinfo_GetOSDetailType
Hostinfo_GetOSDetailedData
Hostinfo_GetOSGuestString
Hostinfo_GetOSName
Hostinfo_GetOSType
Hostinfo_GetSystemBitness
Hostinfo_GetTimeOfDay
Hostinfo_OSVersion
Hostinfo_SystemTimerNS
Log
LogV
MXUser_AcquireExclLock
MXUser_AcquireForRead
MXUser_AcquireForWrite
MXUser_AcquireRecLock
MXUser_BroadcastCondVar
MXUser_CreateCondVarExclLock
MXUser_CreateExclLock
MXUser_CreateRWLock
MXUser_CreateRecLock
MXUser_CreateSingletonExclLockInt
MXUser_CreateSingletonRWLockInt
MXUser_CreateSingletonRecLockInt
MXUser_DestroyCondVar
MXUser_DestroyExclLock
MXUser_DestroyRWLock
MXUser_DestroyRecLock
MXUser_IsCurThreadHoldingExclLock
MXUser_IsCurThreadHoldingRWLock
MXUser_IsCurThreadHoldingRecLock
MXUser_ReleaseExclLock
MXUser_ReleaseRWLock
MXUser_ReleaseRecLock
MXUser_SetInPanic
MXUser_SignalCondVar
MXUser_TimedWaitCondVarExclLock
MXUser_TryAcquireExclLock
MXUser_TryAcquireRecLock
MXUser_WaitCondVarExclLock
Message_Close
Message_Open
Message_Receive
Message_Send
NetUtil_GetPrimaryNic
Panic
Posix_Fopen
Posix_Getenv
Posix_Open
Posix_Stat
Preference_GetBool
ProcMgr_ExecAsync
ProcMgr_ExecSync
ProcMgr_Free
ProcMgr_FreeProcList
ProcMgr_GetAsyncProcSelectable
ProcMgr_GetExitCode
ProcMgr_GetImpersonatedUserInfo
ProcMgr_GetPid
ProcMgr_IsAsyncProcRunning
ProcMgr_KillByPid
ProcMgr_ListProcesses
ProcMgr_ListProcessesEx
ProductState_GetName
Random_Crypto
Random_Quick
Random_QuickSeed
Registry_GetRootHKey
Registry_KeyExists
Registry_ReadInteger
Registry_ReadMultiString
Registry_ReadString
Registry_SubkeysExist
Registry_WriteInteger
Registry_WriteString
RpcChannel_BuildXdrCommand
RpcChannel_Create
RpcChannel_Destroy
RpcChannel_Dispatch
RpcChannel_Free
RpcChannel_GetType
RpcChannel_New
RpcChannel_RegisterCallback
RpcChannel_Send
RpcChannel_SendOne
RpcChannel_SendOnePriv
RpcChannel_SendOneRaw
RpcChannel_SendOneRawPriv
RpcChannel_SetBackdoorOnly
RpcChannel_SetRetVals
RpcChannel_SetRetValsF
RpcChannel_Setup
RpcChannel_Start
RpcChannel_Stop
RpcChannel_UnregisterCallback
RpcOut_Construct
RpcOut_Destruct
RpcOut_SendOneRaw
RpcOut_send
RpcOut_sendOne
RpcOut_start
RpcOut_stop
RpcVMX_ConfigGetString
RpcVMX_Log
StdIO_ReadNextLine
StrUtil_DynBufPrintf
StrUtil_EndsWith
StrUtil_GetNextIntToken
StrUtil_GetNextToken
StrUtil_GetNextUintToken
StrUtil_StartsWith
StrUtil_StrToInt
StrUtil_StrToInt64
StrUtil_StrToUint
Str_Asprintf
Str_Aswprintf
Str_SafeAsprintf
Str_SafeAswprintf
Str_SafeVasprintf
Str_SafeVaswprintf
Str_Snprintf
Str_Snwprintf
Str_Sprintf
Str_Strcat
Str_Strcpy
Str_Strlen
Str_Strncat
Str_Strncpy
Str_Swprintf
Str_Vasprintf
Str_Vaswprintf
Str_Vsnprintf
Str_Wcscat
Str_Wcscpy
SyncDriver_CloseHandle
SyncDriver_Freeze
SyncDriver_Init
SyncDriver_QueryStatus
SyncDriver_Thaw
System_DisableAndKillScreenSaver
System_EnableDesktopComposition
System_GetEnv
System_GetNodeName
System_GetServiceState
System_GetTimeMonotonic
System_IsSecureDesktopActive
System_IsUserAdmin
System_SetEnv
System_SetFocusedWindow
System_SetProcessPrivilege
System_Shutdown
System_Uptime
TimeUtil_DateLowerThan
TimeUtil_DaysAdd
TimeUtil_NtTimeToUnixTime
TimeUtil_PopulateWithCurrent
TimeUtil_UnixTimeToNtTime
UUID_CreateRandom
Unicode_AllocWithLength
Unicode_CompareRange
Unicode_CopyBytes
Unicode_Duplicate
Unicode_EscapeBuffer
Unicode_FindLastSubstrInRange
Unicode_FindSubstrInRange
Unicode_FoldCase
Unicode_Format
Unicode_GetAllocBytes
Unicode_InitW
Unicode_IsBufferValid
Unicode_Join
Unicode_LengthInBytes
Unicode_LengthInCodePoints
Unicode_LengthInCodeUnits
Unicode_ReplaceRange
Unicode_Substr
Unicode_Trim
Unicode_TrimLeft
Unicode_TrimRight
Unicode_UTF16Strdup
Unicode_UTF16Strlen
UtilSafeCalloc0
UtilSafeCalloc1
UtilSafeMalloc0
UtilSafeMalloc1
UtilSafeRealloc0
UtilSafeRealloc1
UtilSafeStrdup0
UtilSafeStrdup1
UtilSafeStrndup0
UtilSafeStrndup1
Util_GetCanonicalPath
Util_Memdup
Util_TokenHasAdminPriv
VMTools_AttachConsole
VMTools_BindTextDomain
VMTools_ChangeLogFilePath
VMTools_ConfigGetBoolean
VMTools_ConfigGetInteger
VMTools_ConfigGetString
VMTools_ConfigLogToStdio
VMTools_ConfigLogging
VMTools_CreateTimer
VMTools_GetString
VMTools_GetTimeAsString
VMTools_GetUtf16String
VMTools_LoadConfig
VMTools_Log
VMTools_NewHandleSource
VMTools_ResumeLogIO
VMTools_SetGuestSDKMode
VMTools_SetupVmxGuestLog
VMTools_SuspendLogIO
VMTools_UseVmxGuestLog
VMTools_WrapArray
VMTools_WriteConfig
VMW_SHA1Final
VMW_SHA1Init
VMW_SHA1Update
VSockChannel_New
VmCheck_GetVersion
VmCheck_IsVirtualWorld
W32Util_AsciiStrToWideStr
W32Util_CheckGroupMembership
W32Util_GetInstalledFilePath
W32Util_GetModuleByAddress
W32Util_GetVmwareCommonAppDataFilePath
W32Util_OpenProductRegKey
W32Util_ReadFileTimeout
W32Util_WriteFileTimeout
WMI_EnableDHCP
WMI_EnableStatic
WMI_GetWMINicConfiguration
Warning
WarningToGuest
WarningToHost
Win32U_AllocString
Win32U_DragQueryFile
Win32U_EnumKeyExpandBuffer
Win32U_EnumValueExpandBuffer
Win32U_ExpandEnvironmentStrings
Win32U_ExpandEnvironmentStringsEx
Win32U_FindFirstFileW
Win32U_FormatMessage
Win32U_GetClassName
Win32U_GetClipboardFormatName
Win32U_GetComputerName
Win32U_GetComputerNameEx
Win32U_GetDiskFreeSpaceEx
Win32U_GetDriveType
Win32U_GetFileAttributes
Win32U_GetLogicalDriveStrings
Win32U_GetModuleFileName
Win32U_GetModuleHandle
Win32U_GetUserName
Win32U_GetVolumeInformation
Win32U_LoadLibrary
Win32U_LookupAccountSid
Win32U_LookupSidForAccount
Win32U_PathUnExpandEnvStrings
Win32U_RecurseDeleteKeyEx
Win32U_RegCreateKeyEx
Win32U_RegDeleteValue
Win32U_RegEnumKeyEx
Win32U_RegOpenKeyEx
Win32U_RegQueryValueEx
Win32U_RegSetValueEx
Win32U_SHCopyKey
Win32U_SHDeleteKey
Win32U_SHGetFolderPath
Win32U_SHSetFolderPath
Win32U_SetFileAttributes
WinReg_DeleteValue
WinReg_EnumerateSubkeys
WinReg_EnumerateValues
WinReg_GetDWORD
WinReg_GetSZ
WinReg_GetSZEx
WinReg_LoadHiveU
WinReg_SetDWORD
WinReg_SetSZ
WinReg_SetSZEx
WinReg_UnloadHiveU
WiperPartition_Close
WiperPartition_Open
WiperSinglePartition_Close
WiperSinglePartition_GetSpace
Wiper_Cancel
Wiper_Init
Wiper_IsWipeSupported
Wiper_Next
Wiper_Start
XdrUtil_ArrayAppend
XdrUtil_Deserialize
_loglevel_offset_user
getopt
getopt_long
logLevelPtr
optarg
optind
uriComposeQueryCharsRequiredA
uriComposeQueryMallocA
uriDissectQueryMallocA
uriEscapeA
uriFreeQueryListA
uriFreeUriMembersA
uriParseUriA
uriUnescapeInPlaceA
uriUriStringToWindowsFilenameA
uriWindowsFilenameToUriStringA
vm_free
xdr_DnsConfigInfo
xdr_GHIDisplaysDPIInfo
xdr_GuestNic
xdr_GuestNicList
xdr_GuestNicProto
xdr_NicInfoV3
xdr_VMCFBrokerConfig
xdr_VMCFBrokerRegistration
xdr_array
xdr_bool
xdr_bytes
xdr_char
xdr_double
xdr_enum
xdr_float
xdr_free
xdr_int
xdr_int16_t
xdr_int32_t
xdr_int64_t
xdr_long
xdr_netobj
xdr_opaque
xdr_pointer
xdr_reference
xdr_short
xdr_string
xdr_u_char
xdr_u_int
xdr_u_int16_t
xdr_u_int32_t
xdr_u_int64_t
xdr_u_long
xdr_u_short
xdr_union
xdr_vector
xdr_void
xdr_wrapstring
xdrmem_create
Name
.text
Size
474KB
Virtual Size
473KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
217KB
Virtual Size
217KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
70KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
26KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=5, id=199, version=41118,
count=5, id=260, productName=VS2017 v15.9.7 build 27027, version=27027,
count=2, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,
count=3, id=259, version=26706,
count=13, id=261, version=26706,
count=8, id=260, version=26706,
count=2, id=262, version=25711,
count=19, id=257, version=25711,
count=612, id=1, productName=Unmarked objects,
count=3, id=261, productName=VS2017 v15.8.4 build 26729, version=26729,
count=2, id=259, productName=VS2017 v15.8.4 build 26729, version=26729,
count=191, id=260, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=256, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
vmtoolsd.exe
- IMPHASH 31a5fe4adcc67c7292e7d30796683b5a
- SHA256 61d4473cff983c93df36b127c87fa682de89b49858723a22b814483632559556
- MD5 79db0282759a3b4dce94902bdeaf81b2
- SHA1 643da9772f361847e44e9bd3a9e39cb4ebea3121
- SHA512 966eaafced9e59ca31993bda5b1548ea23c7542d3978dfed2e8332e66a04700553e0ae99791edec408f88e8f8ab7c03de17ca825f49085dcc8588664f22bffcb
- SSDEEP 1536:LwNQwJyJDB/sru6l6czXcs2R8/8LEwHcbrFa5ddZ9ZkAekT5ZQfWiy/0B:MC5/WuXWXL2R8/8LVHcbrU5dd/ZkAOfL
- TLSH T1AC935C96739800C5CCA6857891629113EBF1FD641BA592CF0760F31A0FB7AF57B39B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0a:47:74:35:02:7b:01:36:3d:99:34:0a:3d:28:70:0f:e8:a6:87:70:fb:f3:f0:3e:68:f9:37:63:cb:24:2a:78
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
PE Signature issue
Digest
06:7f:9f:e2:30:6e:93:7d:de:35:d7:ef:60:f2:f1:c1:8f:b8:1f:7d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Chains
Sep 1, 2019
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Subject
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Serial Number
7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Issuer
CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Dec 21, 2012 - Dec 30, 2020
Subject
CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US
Serial Number
0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Issuer
CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 18, 2012 - Dec 29, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
59:04:09:57:f2:08:43:30:2b:a5:2a:a1:f6:ab:ce:ef
Issuer
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 2, 2016 - Dec 21, 2019
Subject
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Serial Number
61:19:93:e4:00:00:00:00:00:1c
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Feb 22, 2011 - Feb 22, 2021
Subject
CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US
Serial Number
52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Feb 8, 2010 - Feb 7, 2020
Subject
CN=VMware\, Inc.,O=VMware\, Inc.,L=Palo Alto,ST=California,C=US
Serial Number
5d:aa:d4:1c:c1:a9:50:0b:5d:ed:a2:79:34:f4:62:3b
Issuer
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2018 - Sep 11, 2021
Subject
CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Issuer
CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Dec 10, 2013 - Dec 9, 2023
Subject
CN=GlobalSign TSA for Advanced - G2
Serial Number
0c:a7:cf:5d:07:07:24:ac:89:e7:9a:3a
Issuer
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Feb 19, 2018 - Mar 18, 2029
Subject
CN=GlobalSign Timestamping CA - SHA256 - G2,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:31:89:c6:50:04
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 2, 2011 - Mar 29, 2029
Minor OS version
0
Major OS version
6
Entry point
32752
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\build\ob\bora-14549434\bora-vmsoft\build\release-x64\tools-for-windows\Win32\services\vmtoolsd\vmtoolsd.pdb
advapi32
AllocateAndInitializeSid
FreeSid
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetEntriesInAclW
DeregisterEventSource
RegisterEventSourceW
ReportEventW
RegCloseKey
RegCreateKeyW
RegSetValueExW
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegisterServiceCtrlHandlerExW
SetServiceStatus
StartServiceCtrlDispatcherW
ole32
CoUninitialize
user32
GetSystemMetrics
GetWindowLongPtrW
SetWindowLongPtrW
GetDesktopWindow
RegisterDeviceNotificationW
UnregisterDeviceNotification
MessageBoxW
CreateWindowExW
UnregisterClassW
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
RegisterClassW
DestroyWindow
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
intl
libintl_gettext
glib-2.0
g_option_context_add_main_entries
g_option_context_parse
g_option_context_get_main_group
g_option_group_set_error_hook
g_win32_error_message
g_main_context_unref
g_main_context_default
g_main_loop_new
g_main_loop_run
g_main_loop_unref
g_source_remove
g_mutex_lock
g_timeout_add
g_get_monotonic_time
g_key_file_free
g_strdup_printf
g_array_new
g_array_free
g_array_append_vals
g_ptr_array_new
g_ptr_array_free
g_ptr_array_remove_index
g_ptr_array_add
g_option_context_set_summary
g_logv
g_option_context_new
g_source_destroy
g_cond_wait_until
g_cond_signal
g_snprintf
g_atomic_int_add
g_atomic_int_set
g_key_file_get_boolean
g_thread_pool_set_max_idle_time
g_thread_pool_set_max_unused_threads
g_printerr
g_main_loop_quit
g_thread_pool_push
g_thread_pool_free
g_mutex_unlock
g_thread_pool_new
g_queue_delete_link
g_print
g_queue_remove
g_queue_pop_tail
g_queue_push_head
g_queue_find_custom
g_queue_free
g_queue_new
g_main_loop_is_running
g_key_file_get_integer
g_idle_add_full
g_free
g_clear_error
g_str_has_prefix
g_option_context_free
g_main_loop_get_context
g_key_file_new
g_source_unref
g_source_attach
g_source_set_callback
g_ptr_array_sort
g_idle_add
g_mutex_clear
g_mutex_init
g_thread_join
g_thread_try_new
g_ptr_array_remove
g_strdup
g_str_has_suffix
g_return_if_fail_warning
g_malloc0
g_malloc
g_file_test_utf8
g_dir_read_name_utf8
g_dir_open_utf8
g_dir_close
g_log
gmodule-2.0
g_module_close
g_module_open_utf8
g_module_make_resident
g_module_error
g_module_symbol
gobject-2.0
g_value_set_boolean
g_param_spec_pointer
g_object_notify
g_object_class_install_property
g_cclosure_marshal_VOID__POINTER
g_type_check_class_cast
g_type_check_instance_cast
g_type_register_static
g_value_set_uint
g_signal_parse_name
g_object_unref
g_object_set
g_object_new
g_signal_connect_data
g_signal_lookup
g_type_init
g_signal_emit_by_name
g_value_get_boolean
g_value_get_uint
g_value_set_pointer
g_value_get_pointer
g_value_peek_pointer
g_object_get
g_type_class_peek_parent
g_signal_new
vmtools
VMTools_CreateTimer
RpcChannel_New
RpcChannel_SetRetVals
RpcChannel_Setup
StrUtil_GetNextToken
GuestApp_GetConfPath
GuestApp_GetInstallPath
RpcChannel_RegisterCallback
RpcChannel_Send
RpcChannel_Start
VMTools_ResumeLogIO
VMTools_SuspendLogIO
VMTools_ConfigGetInteger
VMTools_LoadConfig
VMTools_GetString
Str_Vasprintf
Str_SafeAsprintf
Str_Vaswprintf
VMTools_BindTextDomain
VMTools_SetupVmxGuestLog
VMTools_UseVmxGuestLog
Str_Snwprintf
VMTools_ConfigLogging
Str_Wcscpy
Str_SafeVaswprintf
Str_Aswprintf
Hostinfo_GetOSType
CodeSet_Utf8ToUtf16le
Unicode_InitW
Panic
RpcChannel_Destroy
RpcChannel_Stop
VMTools_NewHandleSource
BackdoorChannel_New
VMTools_AttachConsole
VmCheck_IsVirtualWorld
vm_free
RpcChannel_SendOne
kernel32
CloseHandle
GetLastError
SetErrorMode
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcess
GetCurrentThread
SetThreadPriority
SetPriorityClass
GetModuleHandleW
GetProcAddress
LocalFree
SetDllDirectoryW
VerifyVersionInfoW
SetConsoleCtrlHandler
OpenEventW
OutputDebugStringA
OutputDebugStringW
FreeLibrary
GetModuleFileNameW
LoadLibraryW
LocalAlloc
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
VerSetConditionMask
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
vcruntime140
memset
_purecall
__CxxFrameHandler3
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__C_specific_handler
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
malloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_exit
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
exit
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
setlocale
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcmp
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfwprintf
_set_fmode
__p__commode
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
25KB
Virtual Size
25KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
13KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=26706,
count=10, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,
count=2, id=259, version=26706,
count=25, id=261, version=26706,
count=10, id=260, version=26706,
count=11, id=257, version=25711,
count=269, id=1, productName=Unmarked objects,
count=8, id=260, productName=VS2017 v15.8.4 build 26729, version=26729,
count=2, id=261, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=255, productName=VS2017 v15.8.4 build 26729, version=26729,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.4 build 26729, version=26729,
wow32.dll
- IMPHASH 60f0d8ec3746bb9d1af86a568243e23c
- SHA256 29fc393b56fcfa4a242c7bc5177b0861072f35c7c8be2546115e0f34d059e2bf
- MD5 47fe0ab041a9c28fe838eb1b11556e33
- SHA1 b7128f679230730cf477f3c081235de118c98960
- SHA512 7191170e244dac3b176bf89c67511b5938751471d84f73c58c3ff7fef3e6e1e70c3af5d3143cf3b66be461152b80845231fc6a3fafc31328193d47edd2961a40
- SSDEEP 12288:FAU5XKwOovaQZn1SkrBL5oTT548c/ZpsxSceH8b+FTuH6rD7:FH7vaQZn1Sw5oTspszK8K77
- TLSH T1CBB4AE217541C136D56F02305D78EBAB01BD7A600B7595EFBBD84A3E6EF01C26B31A2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
7a:7d:e5:27:f3:3a:8b:04:4c:c1:1d:42:db:dd:c4:be:7d:7a:90:a2:3c:9c:23:2a:af:96:76:75:43:80:36:33
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Apr 25, 2021
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Digest
74:72:3b:fa:18:6f:bf:9b:99:aa:e0:24:21:6e:ef:d7:9d:f1:94:35
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Apr 25, 2021
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US
Serial Number
0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Issuer
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 1, 2021 - Jan 6, 2031
Subject
CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 7, 2016 - Jan 7, 2031
Subject
SERIALNUMBER=9133000070337747XE,CN=Hithink RoyalFlush Information Network Co.\, Ltd.,O=Hithink RoyalFlush Information Network Co.\, Ltd.,L=Hangzhou,ST=Zhejiang,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13085a68656a69616e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
03:2b:1a:23:6d:e1:bd:e8:e5:f3:e2:1e:6a:2f:94:88
Issuer
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 14, 2020 - Aug 19, 2021
Subject
CN=DigiCert EV Code Signing CA (SHA2),OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
03:f1:b4:e1:5f:3a:82:f1:14:96:78:b3:d7:d8:47:5c
Issuer
CN=DigiCert High Assurance EV Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 18, 2012 - Apr 18, 2027
Subject
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Issuer
CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jan 12, 2016 - Jan 11, 2031
Subject
CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Serial Number
7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Issuer
CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 23, 2017 - Mar 22, 2029
Minor OS version
0
Major OS version
6
Entry point
137252
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
D:\git\LoggerCollector\logcollector\Release\LoggerCollector.pdb
kernel32
WaitForSingleObject
CloseHandle
CreateProcessA
GetCurrentThreadId
GetCurrentProcessId
GetSystemTime
ReadFile
FindFirstFileA
WriteFile
FindNextFileA
SetFilePointer
FindClose
UnmapViewOfFile
GetFileInformationByHandle
CreateFileA
FileTimeToSystemTime
GetLocalTime
GetFileSize
SystemTimeToFileTime
GetTickCount
SetEndOfFile
HeapSize
CreateFileW
ReadConsoleW
SetStdHandle
GetLastError
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentProcess
GetCurrentThread
GetExitCodeThread
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
OutputDebugStringW
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
RaiseException
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleHandleExW
WriteConsoleW
HeapAlloc
HeapFree
ExitThread
HeapReAlloc
ExitProcess
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DeleteFileW
SetFilePointerEx
GetProcessHeap
FindFirstFileExA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
GetDesktopWindow
shell32
SHCreateDirectoryExA
shlwapi
PathFileExistsA
LogCollectorGetAllLogLevel
LogCollectorGetLogLevel
LogCollectorInit
OnLogCollectorTask
Name
.text
Size
369KB
Virtual Size
369KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
95KB
Virtual Size
94KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
9KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
19KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=19, id=259, version=25203,
count=175, id=261, version=25203,
count=24, id=260, version=25203,
count=24, id=259, version=25305,
count=114, id=261, version=25305,
count=35, id=260, version=25305,
count=9, id=257, version=25203,
count=148, id=1, productName=Unmarked objects,
count=8, id=265, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
图标组103.ico
- SHA256 bc26780840e1d52b7214c3f9655b5c5114967ed2c0700f4a524db476200d909e
- MD5 bfc2f7ffdae9d9e62fcebb5d3a0e9e1e
- SHA1 cf2438aeced0eae21381ddd7b4e2c100b931fc3c
- SHA512 f0cd94a80d93ec75a46e6fe79841e5d10fdc1f87e73197aa5cb3a411834a3fb9962f4ca8869086b2691dddb5e02bbee3762e2dab830917cf72e8d7f361762731
- SSDEEP 3072:Ws3A63r4ybzfWRKqwhT+36Ub6/utwTY8BmihtfsQrC:WpI4ybzf2KLTSDtwTYBiXjC
- TLSH T15FD3F1B3E682565DC4279DFDA001C6B956238D28B0714E2260F1BF2B7674393AD3D1AA
- MD5 SHA1 SHA512 SSDEEP TLSH
新建文本文档.txt
- SHA256 d6aae17a44e4d1f7e882e5fe898f56edfc0aaa27d620f735c9ed7902ce72c199
- MD5 fa1cd2e98edffcc96319ac4133176307
- SHA1 769fc3d91e8d2f9e2c7e70f95cacc6243c9191c6
- SHA512 96a260b9a1fb596899c87d13dd7251fc3011f8c2a6ea71def3b2ec7b435ff1584460fc6d6cff5b23113ed5706c76040c64c0910f7c90e3e91d9bad1fdbaa9fae
- MD5 SHA1 SHA512