Zapret2GUI-lite.zip
- SHA256 34741eb9cafc374c8e5d3603350233c4aaa406e482e6123c2e52e1d19e7cdd3e
Overview
overview
7Static
static
3bin/WinDivert.dll
windows10-2004-x64
1bin/WinDivert.dll
windows11-ltsc_2024-x64
1bin/WinDivert64.sys
windows10-2004-x64
3bin/cygwin1.dll
windows10-2004-x64
1bin/cygwin1.dll
windows11-ltsc_2024-x64
1bin/winws2.exe
windows10-2004-x64
1bin/winws2.exe
windows11-ltsc_2024-x64
1lua/zapret-auto.bat
windows10-2004-x64
3lua/zapret-auto.bat
windows11-ltsc_2024-x64
3lua/zapret-lib.bat
windows10-2004-x64
3lua/zapret-lib.bat
windows11-ltsc_2024-x64
3lua/zapret-tests.bat
windows10-2004-x64
3lua/zapret-tests.bat
windows11-ltsc_2024-x64
3service-install.bat
windows10-2004-x64
7service-install.bat
windows11-ltsc_2024-x64
7service-remove.bat
windows10-2004-x64
7service-remove.bat
windows11-ltsc_2024-x64
7service.bat
windows10-2004-x64
3service.bat
windows11-ltsc_2024-x64
3start-auto.bat
windows10-2004-x64
5start-auto.bat
windows11-ltsc_2024-x64
5start-default-alt.bat
windows10-2004-x64
5start-default-alt.bat
windows11-ltsc_2024-x64
5start-default.bat
windows10-2004-x64
5start-default.bat
windows11-ltsc_2024-x64
5start-fake...er.bat
windows10-2004-x64
5start-fake...er.bat
windows11-ltsc_2024-x64
5start-fake...er.bat
windows10-2004-x64
5start-fake...er.bat
windows11-ltsc_2024-x64
5start-fake-only.bat
windows10-2004-x64
5start-fake-only.bat
windows11-ltsc_2024-x64
5start-fakedsplit.bat
windows10-2004-x64
5Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bin/WinDivert.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
bin/WinDivert.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
bin/WinDivert64.sys
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
bin/cygwin1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
bin/cygwin1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
bin/winws2.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
bin/winws2.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral8
Sample
lua/zapret-auto.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral9
Sample
lua/zapret-auto.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral10
Sample
lua/zapret-lib.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral11
Sample
lua/zapret-lib.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral12
Sample
lua/zapret-tests.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral13
Sample
lua/zapret-tests.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral14
Sample
service-install.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral15
Sample
service-install.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral16
Sample
service-remove.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral17
Sample
service-remove.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
6 signatures
150 seconds
Behavioral task
behavioral18
Sample
service.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral19
Sample
service.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral20
Sample
start-auto.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral21
Sample
start-auto.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral22
Sample
start-default-alt.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral23
Sample
start-default-alt.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral24
Sample
start-default.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral25
Sample
start-default.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral26
Sample
start-fake-disorder.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral27
Sample
start-fake-disorder.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral28
Sample
start-fake-multidisorder.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral29
Sample
start-fake-multidisorder.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral30
Sample
start-fake-only.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral31
Sample
start-fake-only.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target Zapret2GUI-lite.zip
- Size 1.7MB
- Sample261027-mxff2adc64
- SHA256 34741eb9cafc374c8e5d3603350233c4aaa406e482e6123c2e52e1d19e7cdd3e
- MD5 81fd5f528f804cbcc21e2a150d9a3149
- SHA1 6fbdaaf1781aff2885b1126ba9c8b137f4045067
- SHA512 2a3c63fe52c3d8e8196bf2aab29d3640277282332c38092b42d07b5dc3103a9720b9ee5a96957cc4e4ab93aff0f11ce56d572d6dd8574054e25a1dd50a0a7eef
- SSDEEP 49152:DuTQ5NorTHGxnUta5bvLokMbHK2i9cZH6U:DuUHUS1zdDokMjK2i9cZHV
- TLSH T146853376B045DECBDA26DB315C0E8D1549E7A0803180FBCE77C479858E29C835FB9A6E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/bin/WinDivert.dll unpack001/bin/cygwin1.dll unpack001/bin/winws2.exe
File Explorer
-
Zapret2GUI-lite.zip.zip 1.7MB
-
LICENSE.txt1KB
-
README.txt2KB
-
THIRD_PARTY_NOTICES.txt3KB
-
VERSION17B
-
bin/WinDivert.dll.dll 46KB
-
bin/WinDivert64.sys.sys 91KB
-
bin/cygwin1.dll.dll 2.8MB
-
bin/winws2.exe.exe 641KB
-
blobs/README.txt1KB
-
blobs/fake_http_ovhcloud.bin143B
-
blobs/quic_facebook1KB
-
blobs/quic_icloud1KB
-
blobs/quic_initial_dbankcloud_ru.bin1KB
-
blobs/quic_initial_icloud_com.bin1KB
-
blobs/quic_initial_steamcommunity_com.bin1KB
-
blobs/quic_initial_www_google_com.bin1KB
-
blobs/quic_short620B
-
blobs/stun.bin100B
-
blobs/tls_4pda517B
-
blobs/tls_clienthello_2gis_ru.bin235B
-
blobs/tls_clienthello_4pda_to.bin284B
-
blobs/tls_clienthello_alfabank_ru.bin239B
-
blobs/tls_clienthello_chat_wb_ru.bin238B
-
blobs/tls_clienthello_hcaptcha_com.bin240B
-
blobs/tls_clienthello_iana_org.bin517B
-
blobs/tls_clienthello_mail_ru.bin235B
-
blobs/tls_clienthello_max_ru.bin664B
-
blobs/tls_clienthello_rutracker_org_kyber.bin1KB
-
blobs/tls_clienthello_sochi_park.bin244B
-
blobs/tls_clienthello_vk_com.bin517B
-
blobs/tls_clienthello_web_max_ru.bin238B
-
blobs/tls_clienthello_www_cloudflare_com.bin246B
-
blobs/tls_clienthello_www_google_com.bin681B
-
blobs/tls_clienthello_www_sferum_ru.bin661B
-
blobs/tls_google_rec522B
-
blobs/tls_gosuslugi517B
-
blobs/tls_iana_big517B
-
blobs/tls_sberbank517B
-
blobs/zero_10241024B
-
blobs/zero_256256B
-
blobs/zero_512512B
-
games.json3KB
-
lists/cdn-asn-probes.json10KB
-
lists/games/_pool_d4r1.txt59B
-
lists/ipset-all.txt.gz.gz 103KB
-
ipset-all.txt511KB
-
lists/ipset-exclude.txt125B
-
lists/list-cdn-fix.txt140B
-
lists/list-cdn-test.txt191B
-
lists/list-discord.txt398B
-
lists/list-exclude.txt1KB
-
lists/list-games.txt195B
-
lists/list-general.txt817B
-
lists/list-google.txt275B
-
lists/list-include-all.txt195B
-
lists/whitelist-sni.txt3KB
-
lua/zapret-antidpi.lua50KB
-
lua/zapret-auto.lua.bat 20KB
-
lua/zapret-custom.lua5KB
-
lua/zapret-lib.lua.bat 90KB
-
lua/zapret-obfs.lua18KB
-
lua/zapret-pcap.lua1KB
-
lua/zapret-tests.lua.bat 36KB
-
presets/auto.txt2KB
-
presets/default-alt.txt2KB
-
presets/default.txt2KB
-
presets/fake-disorder.txt1KB
-
presets/fake-multidisorder.txt1KB
-
presets/fake-only.txt1KB
-
presets/fakedsplit.txt2KB
-
presets/hostfakesplit.txt2KB
-
presets/multisplit-pure.txt1KB
-
presets/multisplit-seqovl.txt1KB
-
presets/tcpmd5-fake.txt2KB
-
service-install.bat3KB
-
service-remove.bat141B
-
service.bat.bat 1004B
-
start-auto.bat3KB
-
start-default-alt.bat2KB
-
start-default.bat2KB
-
start-fake-disorder.bat2KB
-
start-fake-multidisorder.bat2KB
-
start-fake-only.bat2KB
-
start-fakedsplit.bat2KB
-
start-hostfakesplit.bat3KB
-
start-ipset.bat2KB
-
start-multisplit-pure.bat2KB
-
start-multisplit-seqovl.bat2KB
-
start-tcpmd5-fake.bat2KB
-
stop.bat89B
-
test.bat100B
-
test.ps1.ps1 9KB
-
update_manifest.json7KB
-
windivert/windivert_part.dht.txt87B
-
windivert/windivert_part.discord_media.txt534B
-
windivert/windivert_part.quic_initial_ietf.txt157B
-
windivert/windivert_part.stun.txt96B
-
windivert/windivert_part.wireguard.txt166B
LICENSE.txt
- SHA256 8edcccd75905275e0e92244d58e4a6dacffee7b21340d4d5d379d864e78c3dba
- MD5 6b557f2c62977a8ed356bfe1ad5d54ed
- SHA1 6cacdd47119993f96bee0390ef0950aabbae8420
- SHA512 7892ba35237ff7624edd17d715c7822167d27c1f4bd623bf05e20345992f98dd09f1d6a69fdb3a848a8feeb0eb7e98684957a434c8018d0d309f32a9d1e2d705
- TLSH T1A231B52DB1550BBA286635A49828B88CF53F75FFBFAB164010ADF22126B502CC5FF444
- MD5 SHA1 SHA512 TLSH
README.txt
- SHA256 3a353902b541cfc498d7a7aabdd048d3704f0f2ba40fada95dcf2270fa5d2021
- MD5 ef68c612806c993a495236c0787e7367
- SHA1 8b419e7ce4e8cfa206822f7946b3eae28bd6b652
- SHA512 eedb98dd4e71bf592e1ab007823a9e78e4db9c81e03dacb303a3e3409a79e527a0aaf97186316c18830b6ebfd7895921e79667ff27830efa4b0586fcc6f6df39
- TLSH T171519E00564B38AF0511B05BD804F90D79BE84FE7E7E930B396C6DBD2BF2238811D659
- MD5 SHA1 SHA512 TLSH
THIRD_PARTY_NOTICES.txt
- SHA256 886c51c726c9db4c2f54d51657dedcdb853bef89a1df8215c68198b7214e3984
- MD5 c776fd4495c20790617e7d0392bf3d02
- SHA1 95334b224ce1feff789f293bed0f16a7e8ba3237
- SHA512 d18edb1bcf066dff03dc0ed14adac1384422b6e64fb96c70faf148d667c4833d98b75c6d1ceccbaeda6227463348f62ce75561caf50076cd94831cd47c41198d
- TLSH T10D716264115449DA0619B1ABC914784E79BF50FEBFBB57051438AA7D71F2028C2BB70B
- MD5 SHA1 SHA512 TLSH
VERSION
- SHA256 2801dd3ac307cfa77a9e1f3e0657b43f0378a7eed4c627bda3a209a9c13e6fae
- MD5 c3c2311d017e5d99827e5051fbf05c3a
- SHA1 59759e4489f4456a878997cb500dcde80df8a3b4
- SHA512 0bbd1be59a6212ff7713468b16c01adc0ea3786f26408f9029f54f3da51127c7583180597e737162021d39b6506a8def48379804ada96e3c821f2f1d3748cd16
- MD5 SHA1 SHA512
bin/WinDivert.dll
- IMPHASH 0b649f8e17494bb31b47f6e959a1769c
- SHA256 16abd6a029e65557c6a309bea7b13bf81fff4e193567582e1cddbf6719f323e0
- MD5 407f321a43415b878b727e2c38152950
- SHA1 50aa3cc1cb575e057b335cad83a0242f31fc6d46
- SHA512 8d2235920a21b4142e1b561db181acb5c6a5725a5c9ba0f506e913ff5a0809fc8f7648a474318bc5837e37150ae82718a444954b71f29495c6fa5b90cfeb6eff
- SSDEEP 768:Qjf2rf/kxpxI+JEw2VWHDDjQSQX4zTtllgwBqWocwTicI:YuT/CXHDvVQatonTic
- TLSH T13623D803F74151B7C429C27083AED352AE22FCC56354F9EF82DEB7992D85E42DB1A606
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
31496
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
advapi32
CloseServiceHandle
CreateServiceW
DeleteService
OpenSCManagerW
OpenServiceW
RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegSetValueExW
StartServiceW
kernel32
CloseHandle
CreateEventW
CreateFileW
CreateMutexW
DeviceIoControl
GetLastError
GetModuleFileNameW
GetOverlappedResult
HeapAlloc
HeapCreate
HeapDestroy
ReleaseMutex
SetLastError
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
WinDivertClose
WinDivertGetParam
WinDivertHelperCalcChecksums
WinDivertHelperCompileFilter
WinDivertHelperDecrementTTL
WinDivertHelperEvalFilter
WinDivertHelperFormatFilter
WinDivertHelperFormatIPv4Address
WinDivertHelperFormatIPv6Address
WinDivertHelperHashPacket
WinDivertHelperHtonIPv6Address
WinDivertHelperHtonIpv6Address
WinDivertHelperHtonl
WinDivertHelperHtonll
WinDivertHelperHtons
WinDivertHelperNtohIPv6Address
WinDivertHelperNtohIpv6Address
WinDivertHelperNtohl
WinDivertHelperNtohll
WinDivertHelperNtohs
WinDivertHelperParseIPv4Address
WinDivertHelperParseIPv6Address
WinDivertHelperParsePacket
WinDivertOpen
WinDivertRecv
WinDivertRecvEx
WinDivertSend
WinDivertSendEx
WinDivertSetParam
WinDivertShutdown
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
1024B
Virtual Size
840B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
800B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/WinDivert64.sys
- IMPHASH db584dd0570594898805dd67d7ff391c
- SHA256 8da085332782708d8767bcace5327a6ec7283c17cfb85e40b03cd2323a90ddc2
- MD5 89ed5be7ea83c01d0de33d3519944aa5
- SHA1 4c9b9c74529399abacc2284de1dead5f2332ee9b
- SHA512 be6530fa0e26441441028b530cd6fc4f900448916e137f92613a1f886c16399d415ddd17f7f8847258cc19c63b1510f2f3068942203c50486e48eed838f9f138
- SSDEEP 1536:AsmCCzg4Klt7jh//NiRMwoGK0tmdsAXixJz48dJ/zuXR:Atzilt/iR5ojGmdsAXoz4k/8R
- TLSH T12E935B46B2E240C5F9F6C97895F59253EE31FA90A721C7DF11E0981E4F21BE1AD78322
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Sep 20, 2022
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Digest
5a:de:d7:5d:6b:eb:31:58:49:f6:98:a7:8f:80:33:de:26:eb:15:19:55:a1:cb:c0:1e:30:37:32:0e:2a:0e:b6
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Chains
Sep 20, 2022
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Subject
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
01
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 1, 2004 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Serial Number
48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Issuer
CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2021 - Dec 31, 2028
Subject
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Serial Number
33:d7:08:a8:91:40:53:19:e2:a5:bb:d3:39:b9:ad:6e
Issuer
CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Mar 22, 2021 - Mar 21, 2036
Subject
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Serial Number
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Issuer
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 2, 2019 - Jan 18, 2038
Subject
CN=Sectigo RSA Time Stamping Signer #3,O=Sectigo Limited,ST=Manchester,C=GB
Serial Number
90:39:7f:9a:d2:4a:3a:13:f2:bd:91:5f:08:38:a9:43
Issuer
CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 11, 2022 - Aug 10, 2033
Subject
SERIALNUMBER=91510107MA7E8Y2876,CN=成都密思听科技有限公司,O=成都密思听科技有限公司,ST=四川省,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Serial Number
61:50:19:91:b1:8f:32:38:04:52:51:37:dc:25:00:5a
Issuer
CN=Sectigo Public Code Signing CA EV R36,O=Sectigo Limited,C=GB
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 25, 2022 - May 25, 2023
Subject
CN=Microsoft Windows Hardware Compatibility Publisher,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:57:ee:4d:65:9a:92:3e:7c:10:00:00:00:00:00:57
Issuer
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Jun 7, 2022 - Jun 1, 2023
Subject
CN=Microsoft Windows Third Party Component CA 2014,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:0d:69:0d:5d:78:93:d0:76:df:00:00:00:00:00:0d
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Oct 15, 2014 - Oct 15, 2029
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Operations Puerto Rico+OU=Thales TSS ESN:0A56-E329-4D4D,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:a7:35:bb:2e:c2:64:85:50:29:00:01:00:00:01:a7
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 2, 2022 - May 11, 2023
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
4484
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\WinDivert-2.2.2\install\MSVC\amd64\WinDivert64.pdb
ntoskrnl.exe
RtlCopyUnicodeString
KeBugCheckEx
IoGetRequestorProcess
PsGetProcessId
ExUuidCreate
ObfDereferenceObject
ObfReferenceObject
IoWriteErrorLogEntry
IoGetCurrentProcess
IoFreeMdl
IoAllocateMdl
IoAllocateErrorLogEntry
MmMapLockedPagesSpecifyCache
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
ExAllocatePoolWithTag
KeReleaseInStackQueuedSpinLock
KeAcquireInStackQueuedSpinLock
RtlGetVersion
RtlIntegerToUnicodeString
hal
KeQueryPerformanceCounter
ndis.sys
NdisAllocateNetBufferPool
NdisFreeNetBufferPool
NdisAllocateNetBufferListPool
NdisGetDataBuffer
NdisAdvanceNetBufferDataStart
NdisRetreatNetBufferDataStart
NdisFreeNetBufferListPool
fwpkclnt.sys
FwpmTransactionAbort0
FwpmTransactionBegin0
FwpmEngineClose0
FwpmEngineOpen0
FwpsQueryPacketInjectionState0
FwpmProviderAdd0
FwpmProviderDeleteByKey0
FwpsInjectNetworkReceiveAsync0
FwpmSubLayerAdd0
FwpmSubLayerDeleteByKey0
FwpmCalloutAdd0
FwpmCalloutDeleteByKey0
FwpmFilterAdd0
FwpmFilterDeleteByKey0
FwpmTransactionCommit0
FwpsCalloutRegister0
FwpsCalloutUnregisterByKey0
FwpsFlowAssociateContext0
FwpsFlowRemoveContext0
FwpsInjectionHandleCreate0
FwpsInjectionHandleDestroy0
FwpsAllocateNetBufferAndNetBufferList0
FwpsFreeNetBufferList0
FwpsInjectNetworkSendAsync0
FwpsInjectForwardAsync0
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbindClass
WdfVersionBind
WdfVersionUnbind
Name
.text
Size
45KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gfids
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=262, version=24610,
count=3, id=136, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=57, id=1, productName=Unmarked objects,
count=9, id=257, version=24610,
count=5, id=259, version=24610,
count=5, id=260, version=24610,
count=1, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,
count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,
count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,
bin/cygwin1.dll
- IMPHASH 8f21c12c4e790805822951d4e4dcad1c
- SHA256 103104a52e5293ce418944725df19e2bf81ad9269b9a120d71d39028e821499b
- MD5 a1c82ed072dc079dd7851f82d9aa7678
- SHA1 52f26fa1aee39476f1c13438aec8bf969c78da45
- SHA512 22993e7cee1e7aa69ffe45adf3a329abced7e53d54ffea96dab42fe273c81522252c7b7e98e5af36d2fdec0346c51540e977c6e56b8c08835bac86fa6d04ca59
- SSDEEP 49152:hGniafRcs02/oSqCmB5RMiCwDjUZQjuhKv+TLRlURxKc+tKaZrpu8dhcy1u7MHz:YniGRcsVJqCmB5RMiCwDIS4TBrppUy1J
- TLSH T165D55C1BF3A350ECC967C138466BA372BA32B82441347F6E2958CB701F72F51666DB25
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
202560
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredContinueHandler
AllocConsole
AttachConsole
CallNamedPipeA
CancelIo
CancelSynchronousIo
ClearCommBreak
ClearCommError
CloseHandle
CompareStringW
ConnectNamedPipe
CreateFileA
CreateFileW
CreateNamedPipeA
CreatePipe
CreateProcessW
CreateRemoteThread
CreateSymbolicLinkW
CreateTapePartition
CreateThread
DebugBreak
DeleteCriticalSection
DeleteProcThreadAttributeList
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
EscapeCommFunction
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GenerateConsoleCtrlEvent
GetBinaryTypeW
GetCommModemStatus
GetCommState
GetCommandLineW
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleProcessList
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrentConsoleFontEx
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumberEx
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetHandleInformation
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDriveStringsA
GetLogicalDrives
GetLogicalProcessorInformationEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetNamedPipeClientProcessId
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessGroupAffinity
GetProcessHeap
GetProcessId
GetProcessWorkingSetSize
GetStartupInfoA
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadPriority
GetTickCount
GetTickCount64
GetTimeZoneInformation
GetVolumeNameForVolumeMountPointW
GetVolumePathNamesForVolumeNameW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
IdnToAscii
IdnToUnicode
InitializeCriticalSection
InitializeProcThreadAttributeList
IsBadStringPtrA
IsDebuggerPresent
IsProcessInJob
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LocaleNameToLCID
MapViewOfFile
MapViewOfFileEx
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
PeekConsoleInputA
PeekConsoleInputW
PeekNamedPipe
PrepareTape
PurgeComm
QueryDosDeviceW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
QueueUserAPC
RaiseException
ReadConsoleInputA
ReadConsoleInputW
ReadConsoleOutputW
ReadFile
ReadProcessMemory
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
ResumeThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
ScrollConsoleScreenBufferA
ScrollConsoleScreenBufferW
SetCommBreak
SetCommMask
SetCommState
SetCommTimeouts
SetComputerNameExW
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleW
SetConsoleWindowInfo
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFilePointerEx
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessAffinityMask
SetProcessWorkingSetSize
SetStdHandle
SetSystemTime
SetTapeParameters
SetTapePosition
SetThreadContext
SetThreadGroupAffinity
SetThreadPriority
SetThreadStackGuarantee
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
UnmapViewOfFile
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitCommEvent
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleOutputW
WriteConsoleW
WriteFile
WriteProcessMemory
WriteTapemark
ntdll
NtAccessCheck
NtAdjustPrivilegesToken
NtAllocateLocallyUniqueId
NtAssignProcessToJobObject
NtCancelTimer
NtClose
NtCommitTransaction
NtCreateDirectoryObject
NtCreateEvent
NtCreateFile
NtCreateJobObject
NtCreateKey
NtCreateMutant
NtCreateNamedPipeFile
NtCreateSection
NtCreateSemaphore
NtCreateSymbolicLinkObject
NtCreateTimer
NtCreateTransaction
NtDuplicateToken
NtFlushBuffersFile
NtFsControlFile
NtLockFile
NtLockVirtualMemory
NtMapViewOfSection
NtOpenDirectoryObject
NtOpenEvent
NtOpenFile
NtOpenJobObject
NtOpenKey
NtOpenMutant
NtOpenProcessToken
NtOpenSection
NtOpenSemaphore
NtOpenSymbolicLinkObject
NtOpenThreadToken
NtPrivilegeCheck
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryDirectoryObject
NtQueryEaFile
NtQueryEvent
NtQueryInformationFile
NtQueryInformationJobObject
NtQueryInformationProcess
NtQueryInformationThread
NtQueryInformationToken
NtQueryObject
NtQueryQuotaInformationFile
NtQuerySecurityObject
NtQuerySemaphore
NtQuerySymbolicLinkObject
NtQuerySystemInformation
NtQuerySystemTime
NtQueryTimer
NtQueryTimerResolution
NtQueryValueKey
NtQueryVirtualMemory
NtQueryVolumeInformationFile
NtReadFile
NtRollbackTransaction
NtSetEaFile
NtSetEvent
NtSetInformationFile
NtSetInformationJobObject
NtSetInformationThread
NtSetInformationToken
NtSetQuotaInformationFile
NtSetSecurityObject
NtSetTimer
NtSetValueKey
NtSetVolumeInformationFile
NtUnlockFile
NtUnlockVirtualMemory
NtUnmapViewOfSection
NtWaitForSingleObject
NtWriteFile
RtlAbsoluteToSelfRelativeSD
RtlAddAccessAllowedAce
RtlAddAccessAllowedAceEx
RtlAddAccessDeniedAceEx
RtlAllocateHeap
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlCheckRegistryKey
RtlCompareUnicodeString
RtlConvertSidToUnicodeString
RtlCopySid
RtlCopyUnicodeString
RtlCreateAcl
RtlCreateQueryDebugBuffer
RtlCreateSecurityDescriptor
RtlDestroyQueryDebugBuffer
RtlDowncaseUnicodeString
RtlEnterCriticalSection
RtlEqualPrefixSid
RtlEqualSid
RtlEqualUnicodeString
RtlFirstFreeAce
RtlFreeHeap
RtlFreeUnicodeString
RtlGetAce
RtlGetControlSecurityDescriptor
RtlGetCurrentTransaction
RtlGetDaclSecurityDescriptor
RtlGetGroupSecurityDescriptor
RtlGetNtVersionNumbers
RtlGetOwnerSecurityDescriptor
RtlGetVersion
RtlIdentifierAuthoritySid
RtlInitAnsiString
RtlInitUnicodeString
RtlInitializeSid
RtlLeaveCriticalSection
RtlLengthSid
RtlNtStatusToDosError
RtlPrefixUnicodeString
RtlQueryProcessDebugInformation
RtlQueryRegistryValues
RtlSetControlSecurityDescriptor
RtlSetCurrentDirectory_U
RtlSetCurrentTransaction
RtlSetDaclSecurityDescriptor
RtlSetGroupSecurityDescriptor
RtlSetOwnerSecurityDescriptor
RtlSubAuthorityCountSid
RtlSubAuthoritySid
RtlUnicodeStringToAnsiString
RtlUpcaseUnicodeChar
RtlUpcaseUnicodeString
GetCommandLineA@0
GetCommandLineW@0
_Exit
__argc
__argv
__assert
__assert_func
__assertfail
__b64_ntop
__b64_pton
__bsd_qsort_r
__check_rhosts_file
__chk_fail
__cpuset_alloc
__cpuset_free
__ctype_ptr__
__cxa_atexit
__cxa_finalize
__cygwin_user_data
__dn_comp
__dn_expand
__dn_skipname
__eprintf
__errno
__fbufsize
__flbf
__fpclassifyd
__fpclassifyf
__fpending
__fpurge
__freadable
__freading
__fsetlocking
__fwritable
__fwriting
__getpagesize
__getreent
__gets_chk
__gnu_basename
__infinity
__isinfd
__isinff
__isnand
__isnanf
__locale_ctype_ptr
__locale_ctype_ptr_l
__locale_mb_cur_max
__main
__mb_cur_max
__memcpy_chk
__memmove_chk
__mempcpy
__mempcpy_chk
__memset_chk
__opendir_with_d_ino
__progname
__rcmd_errstr
__res_close
__res_init
__res_mkquery
__res_nclose
__res_ninit
__res_nmkquery
__res_nquery
__res_nquerydomain
__res_nsearch
__res_nsend
__res_query
__res_querydomain
__res_search
__res_send
__res_state
__sched_getaffinity_sys
__signbitd
__signbitf
__signgam
__snprintf_chk
__sprintf_chk
__srget
__srget_r
__stack_chk_fail
__stack_chk_fail_local
__stack_chk_guard
__stpcpy_chk
__stpncpy_chk
__strcat_chk
__strcpy_chk
__strncat_chk
__strncpy_chk
__swbuf
__swbuf_r
__vsnprintf_chk
__vsprintf_chk
__wrap__ZdaPv
__wrap__ZdaPvRKSt9nothrow_t
__wrap__ZdlPv
__wrap__ZdlPvRKSt9nothrow_t
__wrap__Znam
__wrap__ZnamRKSt9nothrow_t
__wrap__Znwm
__wrap__ZnwmRKSt9nothrow_t
__xdrrec_getrec
__xdrrec_setnonblock
__xpg_sigpause
__xpg_strerror_r
_alloca
_check_for_executable
_ctype_
_daylight
_dll_crt0
_exit
_fe_dfl_env
_fe_nomask_env
_feinitialise
_fscanf_r
_get_osfhandle
_impure_ptr
_longjmp
_pipe
_pthread_cleanup_pop
_pthread_cleanup_push
_setjmp
_setmode
_sys_errlist
_sys_nerr
_timezone
_tzname
a64l
abort
abs
accept
accept4
access
acl
acl_add_perm
acl_calc_mask
acl_check
acl_clear_perms
acl_cmp
acl_copy_entry
acl_copy_ext
acl_copy_int
acl_create_entry
acl_delete_def_file
acl_delete_entry
acl_delete_perm
acl_dup
acl_entries
acl_equiv_mode
acl_error
acl_extended_fd
acl_extended_file
acl_extended_file_nofollow
acl_free
acl_from_mode
acl_from_text
acl_get_entry
acl_get_fd
acl_get_file
acl_get_perm
acl_get_permset
acl_get_qualifier
acl_get_tag_type
acl_init
acl_set_fd
acl_set_file
acl_set_permset
acl_set_qualifier
acl_set_tag_type
acl_size
acl_to_any_text
acl_to_text
acl_valid
aclcheck
aclfrommode
aclfrompbits
aclfromtext
aclsort
acltomode
acltopbits
acltotext
acos
acosf
acosh
acoshf
acoshl
acosl
aio_cancel
aio_error
aio_fsync
aio_read
aio_return
aio_suspend
aio_write
alarm
aligned_alloc
alphasort
arc4random
arc4random_addrandom
arc4random_buf
arc4random_stir
arc4random_uniform
argz_add
argz_add_sep
argz_append
argz_count
argz_create
argz_create_sep
argz_delete
argz_extract
argz_insert
argz_next
argz_replace
argz_stringify
asctime
asctime_r
asin
asinf
asinh
asinhf
asinhl
asinl
asnprintf
asprintf
at_quick_exit
atan
atan2
atan2f
atan2l
atanf
atanh
atanhf
atanhl
atanl
atexit
atof
atoff
atoi
atol
atoll
basename
bcmp
bcopy
bind
bindresvport
bindresvport_sa
bsearch
btowc
bzero
cabs
cabsf
cabsl
cacos
cacosf
cacosh
cacoshf
cacoshl
cacosl
call_once
calloc
canonicalize_file_name
carg
cargf
cargl
casin
casinf
casinh
casinhf
casinhl
casinl
catan
catanf
catanh
catanhf
catanhl
catanl
catclose
catgets
catopen
cbrt
cbrtf
cbrtl
ccos
ccosf
ccosh
ccoshf
ccoshl
ccosl
ceil
ceilf
ceill
cexp
cexpf
cexpl
cfgetispeed
cfgetospeed
cfmakeraw
cfsetispeed
cfsetospeed
cfsetspeed
chdir
chmod
chown
chroot
cimag
cimagf
cimagl
clearenv
clearerr
clearerr_unlocked
clock
clock_getcpuclockid
clock_getres
clock_gettime
clock_nanosleep
clock_setres
clock_settime
clog
clog10
clog10f
clog10l
clogf
clogl
close
closedir
closelog
cnd_broadcast
cnd_destroy
cnd_init
cnd_signal
cnd_timedwait
cnd_wait
confstr
conj
conjf
conjl
connect
copysign
copysignf
copysignl
cos
cosf
cosh
coshf
coshl
cosl
cpow
cpowf
cpowl
cproj
cprojf
cprojl
creal
crealf
creall
creat
csin
csinf
csinh
csinhf
csinhl
csinl
csqrt
csqrtf
csqrtl
ctan
ctanf
ctanh
ctanhf
ctanhl
ctanl
ctermid
ctime
ctime_r
cuserid
cwait
cygwin_attach_handle_to_fd
cygwin_conv_path
cygwin_conv_path_list
cygwin_create_path
cygwin_detach_dll
cygwin_dll_init
cygwin_internal
cygwin_logon_user
cygwin_posix_path_list_p
cygwin_set_impersonation_token
cygwin_split_path
cygwin_stackdump
cygwin_umount
cygwin_winpid_to_pid
daemon
dbm_clearerr
dbm_close
dbm_delete
dbm_dirfno
dbm_error
dbm_fetch
dbm_firstkey
dbm_nextkey
dbm_open
dbm_store
difftime
dirfd
dirname
div
dladdr
dlclose
dlerror
dlfork
dll_crt0__FP11per_process
dll_dllcrt0
dll_entry
dlopen
dlsym
dn_comp
dn_expand
dn_skipname
dprintf
drand48
drem
dremf
dreml
dup
dup2
dup3
duplocale
eaccess
ecvt
ecvtbuf
ecvtf
endgrent
endhostent
endmntent
endprotoent
endpwent
endservent
endusershell
endutent
endutxent
environ
envz_add
envz_entry
envz_get
envz_merge
envz_remove
envz_strip
erand48
erf
erfc
erfcf
erfcl
erff
erfl
err
error
error_at_line
error_message_count
error_one_per_line
error_print_progname
errx
euidaccess
execl
execle
execlp
execv
execve
execvp
execvpe
exit
exp
exp10
exp10f
exp10l
exp2
exp2f
exp2l
expf
expl
explicit_bzero
expm1
expm1f
expm1l
fabs
fabsf
fabsl
faccessat
facl
fchdir
fchmod
fchmodat
fchown
fchownat
fclose
fcloseall
fcntl
fcvt
fcvtbuf
fcvtf
fdatasync
fdim
fdimf
fdiml
fdopen
fdopendir
feclearexcept
fedisableexcept
feenableexcept
fegetenv
fegetexcept
fegetexceptflag
fegetprec
fegetround
feholdexcept
feof
feof_unlocked
feraiseexcept
ferror
ferror_unlocked
fesetenv
fesetexceptflag
fesetprec
fesetround
fetestexcept
feupdateenv
fexecve
fflush
fflush_unlocked
ffs
ffsl
ffsll
fgetc
fgetc_unlocked
fgetpos
fgets
fgets_unlocked
fgetwc
fgetwc_unlocked
fgetws
fgetws_unlocked
fgetxattr
fileno
fileno_unlocked
finite
finitef
finitel
fiprintf
flistxattr
flock
flockfile
floor
floorf
floorl
fls
flsl
flsll
fma
fmaf
fmal
fmax
fmaxf
fmaxl
fmemopen
fmin
fminf
fminl
fmod
fmodf
fmodl
fnmatch
fopen
fopencookie
fork
forkpty
fpathconf
fprintf
fpurge
fputc
fputc_unlocked
fputs
fputs_unlocked
fputwc
fputwc_unlocked
fputws
fputws_unlocked
fread
fread_unlocked
free
freeaddrinfo
freeifaddrs
freelocale
fremovexattr
freopen
frexp
frexpf
frexpl
fscanf
fseek
fseeko
fsetpos
fsetxattr
fstat
fstatat
fstatfs
fstatvfs
fsync
ftell
ftello
ftime
ftok
ftruncate
ftrylockfile
fts_children
fts_close
fts_get_clientptr
fts_get_stream
fts_open
fts_read
fts_set
fts_set_clientptr
ftw
funlockfile
funopen
futimens
futimes
futimesat
fwide
fwprintf
fwrite
fwrite_unlocked
fwscanf
gai_strerror
gamma
gamma_r
gammaf
gammaf_r
gcvt
gcvtf
get_avphys_pages
get_current_dir_name
get_nprocs
get_nprocs_conf
get_phys_pages
getaddrinfo
getc
getc_unlocked
getchar
getchar_unlocked
getcontext
getcwd
getdelim
getdomainname
getdtablesize
getegid
getentropy
getenv
geteuid
getgid
getgrent
getgrgid
getgrgid_r
getgrnam
getgrnam_r
getgrouplist
getgroups
gethostbyaddr
gethostbyname
gethostbyname2
gethostid
gethostname
getifaddrs
getitimer
getline
getloadavg
getlogin
getlogin_r
getmntent
getmntent_r
getmode
getnameinfo
getopt
getopt_long
getopt_long_only
getpagesize
getpass
getpeereid
getpeername
getpgid
getpgrp
getpid
getppid
getpriority
getprogname
getprotobyname
getprotobynumber
getprotoent
getpt
getpwent
getpwnam
getpwnam_r
getpwuid
getpwuid_r
getrandom
getrlimit
getrusage
gets
getservbyname
getservbyport
getservent
getsid
getsockname
getsockopt
getsubopt
gettimeofday
getuid
getusershell
getutent
getutid
getutline
getutxent
getutxid
getutxline
getw
getwc
getwc_unlocked
getwchar
getwchar_unlocked
getwd
getxattr
glob
glob_pattern_p
globfree
gmtime
gmtime_r
grantpt
h_errno
hcreate
hcreate_r
hdestroy
hdestroy_r
herror
hsearch
hsearch_r
hstrerror
htonl
htons
hypot
hypotf
hypotl
if_freenameindex
if_indextoname
if_nameindex
if_nametoindex
ilogb
ilogbf
ilogbl
imaxabs
imaxdiv
in6addr_any
in6addr_loopback
index
inet_addr
inet_aton
inet_makeaddr
inet_netof
inet_network
inet_ntoa
inet_ntop
inet_pton
infinity
infinityf
initgroups
initstate
insque
ioctl
iprintf
iruserok
iruserok_sa
isalnum
isalnum_l
isalpha
isalpha_l
isascii
isascii_l
isatty
isblank
isblank_l
iscntrl
iscntrl_l
isdigit
isdigit_l
isgraph
isgraph_l
isinf
isinff
isinfl
islower
islower_l
isnan
isnanf
isnanl
isprint
isprint_l
ispunct
ispunct_l
issetugid
isspace
isspace_l
isupper
isupper_l
iswalnum
iswalnum_l
iswalpha
iswalpha_l
iswblank
iswblank_l
iswcntrl
iswcntrl_l
iswctype
iswctype_l
iswdigit
iswdigit_l
iswgraph
iswgraph_l
iswlower
iswlower_l
iswprint
iswprint_l
iswpunct
iswpunct_l
iswspace
iswspace_l
iswupper
iswupper_l
iswxdigit
iswxdigit_l
isxdigit
isxdigit_l
j0
j0f
j1
j1f
jn
jnf
jrand48
kill
killpg
l64a
labs
lchown
lcong48
ldexp
ldexpf
ldexpl
ldiv
lfind
lgamma
lgamma_r
lgammaf
lgammaf_r
lgammal
lgammal_r
lgetxattr
link
linkat
lio_listio
listen
listxattr
llabs
lldiv
llistxattr
llrint
llrintf
llrintl
llround
llroundf
llroundl
localeconv
localtime
localtime_r
lockf
log
log10
log10f
log10l
log1p
log1pf
log1pl
log2
log2f
log2l
logb
logbf
logbl
logf
login
login_tty
logl
logout
logwtmp
longjmp
lrand48
lremovexattr
lrint
lrintf
lrintl
lround
lroundf
lroundl
lsearch
lseek
lsetxattr
lstat
lutimes
madvise
makecontext
mallinfo
malloc
malloc_stats
malloc_trim
malloc_usable_size
mallopt
mblen
mbrlen
mbrtowc
mbsinit
mbsnrtowcs
mbsrtowcs
mbstowcs
mbtowc
memalign
memccpy
memchr
memcmp
memcpy
memmem
memmove
mempcpy
memrchr
memset
mkdir
mkdirat
mkdtemp
mkfifo
mkfifoat
mknod
mknodat
mkostemp
mkostemps
mkstemp
mkstemps
mktemp
mktime
mlock
mmap
modf
modff
modfl
mount
mprotect
mq_close
mq_getattr
mq_notify
mq_open
mq_receive
mq_send
mq_setattr
mq_timedreceive
mq_timedsend
mq_unlink
mrand48
msgctl
msgget
msgrcv
msgsnd
msync
mtx_destroy
mtx_init
mtx_lock
mtx_timedlock
mtx_trylock
mtx_unlock
munlock
munmap
nan
nanf
nanl
nanosleep
nearbyint
nearbyintf
nearbyintl
newlocale
nextafter
nextafterf
nextafterl
nexttoward
nexttowardf
nexttowardl
nftw
nice
nl_langinfo
nl_langinfo_l
nrand48
ntohl
ntohs
on_exit
open
open_memstream
open_wmemstream
openat
opendir
openlog
openpty
optarg
opterr
optind
optopt
optreset
pathconf
pause
pclose
perror
pipe
pipe2
poll
popen
posix_fadvise
posix_fallocate
posix_madvise
posix_memalign
posix_openpt
posix_spawn
posix_spawn_file_actions_addclose
posix_spawn_file_actions_adddup2
posix_spawn_file_actions_addopen
posix_spawn_file_actions_destroy
posix_spawn_file_actions_init
posix_spawnattr_destroy
posix_spawnattr_getflags
posix_spawnattr_getpgroup
posix_spawnattr_getschedparam
posix_spawnattr_getschedpolicy
posix_spawnattr_getsigdefault
posix_spawnattr_getsigmask
posix_spawnattr_init
posix_spawnattr_setflags
posix_spawnattr_setpgroup
posix_spawnattr_setschedparam
posix_spawnattr_setschedpolicy
posix_spawnattr_setsigdefault
posix_spawnattr_setsigmask
posix_spawnp
pow
pow10
pow10f
pow10l
powf
powl
ppoll
pread
printf
program_invocation_name
program_invocation_short_name
pselect
psiginfo
psignal
pthread_atfork
pthread_attr_destroy
pthread_attr_getdetachstate
pthread_attr_getguardsize
pthread_attr_getinheritsched
pthread_attr_getschedparam
pthread_attr_getschedpolicy
pthread_attr_getscope
pthread_attr_getstack
pthread_attr_getstackaddr
pthread_attr_getstacksize
pthread_attr_init
pthread_attr_setdetachstate
pthread_attr_setguardsize
pthread_attr_setinheritsched
pthread_attr_setschedparam
pthread_attr_setschedpolicy
pthread_attr_setscope
pthread_attr_setstack
pthread_attr_setstackaddr
pthread_attr_setstacksize
pthread_barrier_destroy
pthread_barrier_init
pthread_barrier_wait
pthread_barrierattr_destroy
pthread_barrierattr_getpshared
pthread_barrierattr_init
pthread_barrierattr_setpshared
pthread_cancel
pthread_cond_broadcast
pthread_cond_clockwait
pthread_cond_destroy
pthread_cond_init
pthread_cond_signal
pthread_cond_timedwait
pthread_cond_wait
pthread_condattr_destroy
pthread_condattr_getclock
pthread_condattr_getpshared
pthread_condattr_init
pthread_condattr_setclock
pthread_condattr_setpshared
pthread_continue
pthread_create
pthread_detach
pthread_equal
pthread_exit
pthread_getaffinity_np
pthread_getattr_np
pthread_getconcurrency
pthread_getcpuclockid
pthread_getname_np
pthread_getschedparam
pthread_getsequence_np
pthread_getspecific
pthread_join
pthread_key_create
pthread_key_delete
pthread_kill
pthread_mutex_clocklock
pthread_mutex_destroy
pthread_mutex_getprioceiling
pthread_mutex_init
pthread_mutex_lock
pthread_mutex_setprioceiling
pthread_mutex_timedlock
pthread_mutex_trylock
pthread_mutex_unlock
pthread_mutexattr_destroy
pthread_mutexattr_getprioceiling
pthread_mutexattr_getprotocol
pthread_mutexattr_getpshared
pthread_mutexattr_gettype
pthread_mutexattr_init
pthread_mutexattr_setprioceiling
pthread_mutexattr_setprotocol
pthread_mutexattr_setpshared
pthread_mutexattr_settype
pthread_once
pthread_rwlock_clockrdlock
pthread_rwlock_clockwrlock
pthread_rwlock_destroy
pthread_rwlock_init
pthread_rwlock_rdlock
pthread_rwlock_timedrdlock
pthread_rwlock_timedwrlock
pthread_rwlock_tryrdlock
pthread_rwlock_trywrlock
pthread_rwlock_unlock
pthread_rwlock_wrlock
pthread_rwlockattr_destroy
pthread_rwlockattr_getpshared
pthread_rwlockattr_init
pthread_rwlockattr_setpshared
pthread_self
pthread_setaffinity_np
pthread_setcancelstate
pthread_setcanceltype
pthread_setconcurrency
pthread_setname_np
pthread_setschedparam
pthread_setschedprio
pthread_setspecific
pthread_sigmask
pthread_sigqueue
pthread_spin_destroy
pthread_spin_init
pthread_spin_lock
pthread_spin_trylock
pthread_spin_unlock
pthread_suspend
pthread_testcancel
pthread_timedjoin_np
pthread_tryjoin_np
pthread_yield
ptsname
ptsname_r
putc
putc_unlocked
putchar
putchar_unlocked
putenv
puts
pututline
pututxline
putw
putwc
putwc_unlocked
putwchar
putwchar_unlocked
pwrite
qsort
qsort_r
quick_exit
quotactl
raise
rand
rand_r
random
rawmemchr
rcmd
rcmd_af
read
readdir
readdir_r
readlink
readlinkat
readv
realloc
reallocarray
reallocf
realpath
recv
recvfrom
recvmsg
reent_data
regcomp
regerror
regexec
regfree
remainder
remainderf
remainderl
remove
removexattr
remque
remquo
remquof
remquol
rename
renameat
renameat2
res_close
res_init
res_mkquery
res_nclose
res_ninit
res_nmkquery
res_nquery
res_nquerydomain
res_nsearch
res_nsend
res_query
res_querydomain
res_search
res_send
revoke
rewind
rewinddir
rexec
rindex
rint
rintf
rintl
rmdir
round
roundf
roundl
rpmatch
rresvport
rresvport_af
ruserok
sbrk
scalb
scalbf
scalbl
scalbln
scalblnf
scalblnl
scalbn
scalbnf
scalbnl
scandir
scandirat
scanf
sched_get_priority_max
sched_get_priority_min
sched_getaffinity
sched_getcpu
sched_getparam
sched_getscheduler
sched_rr_get_interval
sched_setaffinity
sched_setparam
sched_setscheduler
sched_yield
secure_getenv
seed48
seekdir
select
sem_clockwait
sem_close
sem_destroy
sem_getvalue
sem_init
sem_open
sem_post
sem_timedwait
sem_trywait
sem_unlink
sem_wait
semctl
semget
semop
send
sendmsg
sendto
setbuf
setbuffer
setcontext
setdtablesize
setegid
setenv
seteuid
setgid
setgrent
setgroups
sethostent
sethostname
setitimer
setjmp
setlinebuf
setlocale
setlogmask
setmntent
setpassent
setpgid
setpgrp
setpriority
setprogname
setprotoent
setpwent
setregid
setreuid
setrlimit
setservent
setsid
setsockopt
setstate
settimeofday
setuid
setusershell
setutent
setutxent
setvbuf
setxattr
shm_open
shm_unlink
shmat
shmctl
shmdt
shmget
shutdown
sig2str
sigaction
sigaddset
sigaltstack
sigdelset
sigemptyset
sigfillset
sighold
sigignore
siginterrupt
sigismember
siglongjmp
signal
signalfd
significand
significandf
sigpause
sigpending
sigprocmask
sigqueue
sigrelse
sigset
sigsetjmp
sigsuspend
sigtimedwait
sigwait
sigwaitinfo
sin
sincos
sincosf
sincosl
sinf
sinh
sinhf
sinhl
sinl
siprintf
sleep
snprintf
sockatmark
socket
socketpair
spawnl
spawnle
spawnlp
spawnlpe
spawnv
spawnve
spawnvp
spawnvpe
sprintf
sqrt
sqrtf
sqrtl
srand
srand48
srandom
sscanf
stat
statfs
statvfs
stime
stpcpy
stpncpy
str2sig
strcasecmp
strcasecmp_l
strcasestr
strcat
strchr
strchrnul
strcmp
strcoll
strcoll_l
strcpy
strcspn
strdup
strerror
strerror_l
strerror_r
strfmon
strfmon_l
strftime
strftime_l
strlcat
strlcpy
strlen
strlwr
strncasecmp
strncasecmp_l
strncat
strncmp
strncpy
strndup
strnlen
strnstr
strpbrk
strptime
strptime_l
strrchr
strsep
strsignal
strspn
strstr
strtod
strtod_l
strtof
strtof_l
strtoimax
strtok
strtok_r
strtol
strtol_l
strtold
strtold_l
strtoll
strtoll_l
strtosigno
strtoul
strtoul_l
strtoull
strtoull_l
strtoumax
strupr
strverscmp
strxfrm
strxfrm_l
swab
swapcontext
swprintf
swscanf
symlink
symlinkat
sync
sys_errlist
sys_nerr
sys_sigabbrev
sys_siglist
sysconf
sysinfo
syslog
system
tan
tanf
tanh
tanhf
tanhl
tanl
tcdrain
tcflow
tcflush
tcgetattr
tcgetpgrp
tcgetsid
tcsendbreak
tcsetattr
tcsetpgrp
tdelete
tdestroy
telldir
tempnam
tfind
tgamma
tgammaf
tgammal
thrd_create
thrd_current
thrd_detach
thrd_equal
thrd_exit
thrd_join
thrd_sleep
thrd_yield
time
timegm
timelocal
timer_create
timer_delete
timer_getoverrun
timer_gettime
timer_settime
timerfd_create
timerfd_gettime
timerfd_settime
times
timezone
timingsafe_bcmp
timingsafe_memcmp
tmpfile
tmpnam
toascii
toascii_l
tolower
tolower_l
toupper
toupper_l
towctrans
towctrans_l
towlower
towlower_l
towupper
towupper_l
trunc
truncate
truncf
truncl
tsearch
tss_create
tss_delete
tss_get
tss_set
ttyname
ttyname_r
ttyslot
twalk
tzset
ualarm
umask
umount
uname
uname_x
ungetc
ungetwc
unlink
unlinkat
unlockpt
unsetenv
updwtmp
updwtmpx
uselocale
usleep
utime
utimensat
utimes
utmpname
utmpxname
valloc
vasnprintf
vasprintf
vdprintf
verr
verrx
versionsort
vfiprintf
vfork
vfprintf
vfscanf
vfwprintf
vfwscanf
vhangup
vprintf
vscanf
vsnprintf
vsprintf
vsscanf
vswprintf
vswscanf
vsyslog
vwarn
vwarnx
vwprintf
vwscanf
wait
wait3
wait4
waitpid
warn
warnx
wcpcpy
wcpncpy
wcrtomb
wcscasecmp
wcscasecmp_l
wcscat
wcschr
wcscmp
wcscoll
wcscoll_l
wcscpy
wcscspn
wcsdup
wcsftime
wcsftime_l
wcslcat
wcslcpy
wcslen
wcsncasecmp
wcsncasecmp_l
wcsncat
wcsncmp
wcsncpy
wcsnlen
wcsnrtombs
wcspbrk
wcsrchr
wcsrtombs
wcsspn
wcsstr
wcstod
wcstod_l
wcstof
wcstof_l
wcstoimax
wcstok
wcstol
wcstol_l
wcstold
wcstold_l
wcstoll
wcstoll_l
wcstombs
wcstoul
wcstoul_l
wcstoull
wcstoull_l
wcstoumax
wcswidth
wcsxfrm
wcsxfrm_l
wctob
wctomb
wctrans
wctrans_l
wctype
wctype_l
wcwidth
wmemchr
wmemcmp
wmemcpy
wmemmove
wmempcpy
wmemset
wordexp
wordfree
wprintf
write
writev
wscanf
xdr_array
xdr_bool
xdr_bytes
xdr_char
xdr_double
xdr_enum
xdr_float
xdr_free
xdr_hyper
xdr_int
xdr_int16_t
xdr_int32_t
xdr_int64_t
xdr_int8_t
xdr_long
xdr_longlong_t
xdr_netobj
xdr_opaque
xdr_pointer
xdr_reference
xdr_short
xdr_sizeof
xdr_string
xdr_u_char
xdr_u_hyper
xdr_u_int
xdr_u_int16_t
xdr_u_int32_t
xdr_u_int64_t
xdr_u_int8_t
xdr_u_long
xdr_u_longlong_t
xdr_u_short
xdr_uint16_t
xdr_uint32_t
xdr_uint64_t
xdr_uint8_t
xdr_union
xdr_vector
xdr_void
xdr_wrapstring
xdrmem_create
xdrrec_create
xdrrec_endofrecord
xdrrec_eof
xdrrec_skiprecord
xdrstdio_create
y0
y0f
y1
y1f
yn
ynf
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
/4
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data
Size
274KB
Virtual Size
273KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
400KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
53B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
69KB
Virtual Size
68KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
161KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
35KB
Virtual Size
35KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
49KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
15KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/38
Size
512B
Virtual Size
20B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
bin/winws2.exe
- IMPHASH 4a3de85ebf45a05f24c38d3673a4f9de
- SHA256 a25355939cbe7f643c8e746c41b38d367600813898385415245b09b565d84c96
- MD5 e61e533024af451053a54bcd5316da55
- SHA1 c1275fbcef43e96481a988cfdb26eb95062e658b
- SHA512 17395b3b4fd88668f58955541aa683aaba77d6ed62ebdd9ea444efe4e09be4cb7e0cb929474dbc2e8b38160055ba409f0014ae6c9a8286527d8044883dae0384
- SSDEEP 12288:G9p2C1FPrqXUb2Qb01NronM/e3MafehBrI1gBrNZM6:u9Nqm2Qb01dQM/xafKh8Wr
- TLSH T185D47C06E2A248BAC46291718B9ED732B731FC491334AB1E3B64F7181F35D605A9F76C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4096
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
cygwin1
__cxa_atexit
__errno
__getreent
__locale_ctype_ptr
__main
__stack_chk_fail
__stack_chk_guard
_dll_crt0
_impure_ptr
acos
asin
atan
atan2
atoi
basename
calloc
chdir
clock
clock_gettime
close
connect
cos
cosh
cygwin_conv_path
cygwin_detach_dll
cygwin_internal
difftime
dirname
dlclose
dlerror
dll_dllcrt0
dlopen
dlsym
dup
exit
exp
fclose
fflush
fgets
fmod
fopen
fork
fprintf
fputc
fputs
fread
free
frexp
fscanf
fseek
fseeko
ftello
fwrite
getc
getcwd
getentropy
getenv
getopt_long_only
getpid
getrandom
getsockname
getsockopt
gmtime_r
inet_ntop
inet_pton
ldexp
localtime_r
log
log10
log2
malloc
memchr
memcmp
memcpy
memmem
memmove
memset
mkdir
mkstemp
mktime
mmap
modf
mprotect
munmap
nanosleep
open
openlog
optarg
pclose
popen
posix_memalign
pow
printf
putchar
puts
qsort
random
read
realloc
realpath
remove
rename
rint
setenv
setitimer
setlocale
setsid
setsockopt
setvbuf
sigaction
sigemptyset
sin
sinh
snprintf
socket
sqrt
srandom
sscanf
stat
strcasecmp
strchr
strcmp
strcpy
strdup
strerror
strftime
strlen
strncasecmp
strncat
strncmp
strncpy
strrchr
strstr
strtoul
swprintf
syslog
system
tan
tanh
time
timegm
tmpfile
tolower
toupper
tzset
uname
uname_x
ungetc
usleep
vfprintf
vsnprintf
wcsncmp
wordexp
wordfree
write
advapi32
AddMandatoryAce
AdjustTokenPrivileges
GetSidSubAuthority
GetTokenInformation
InitializeAcl
InitializeSid
LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegisterServiceCtrlHandlerA
SetNamedSecurityInfoW
SetSecurityInfo
SetServiceStatus
SetTokenInformation
StartServiceCtrlDispatcherA
iphlpapi
GetAdaptersAddresses
kernel32
AssignProcessToJobObject
CancelIoEx
CloseHandle
CreateEventW
CreateJobObjectW
CreateMutexA
FormatMessageA
FreeLibrary
GetConsoleWindow
GetCurrentProcess
GetCurrentThreadId
GetFileAttributesW
GetLastError
GetModuleHandleA
GetOverlappedResult
GetProcAddress
GetTickCount
LoadLibraryExW
LocalAlloc
LocalFree
MultiByteToWideChar
RaiseException
ReleaseMutex
SetInformationJobObject
SetLastError
WaitForSingleObject
WideCharToMultiByte
ntdll
NtClose
NtOpenDirectoryObject
NtQueryDirectoryObject
NtQueryInformationProcess
RtlCaptureContext
RtlInitUnicodeString
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
ole32
CoCreateInstance
CoInitialize
CoTaskMemFree
CoUninitialize
oleaut32
SysFreeString
shell32
SHGetKnownFolderPath
user32
DestroyIcon
LoadImageA
SendMessageA
windivert
WinDivertClose
WinDivertOpen
WinDivertRecvEx
WinDivertSend
Name
.text
Size
438KB
Virtual Size
437KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
35KB
Virtual Size
34KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
88KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
18KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
416B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
blobs/README.txt
- SHA256 5600e88235077453e286a54242cb59fe2ba808204dcf79f3536ab50c81914573
- MD5 7946d7c8315b5fe0902a2edfa2da94fc
- SHA1 15e91676e6ee6e5756ac80c1e86ea087fa734b13
- SHA512 499a4f721543cff3174433d44ee8e262762530f53f16c4774462655c90b12d16090b5dfab26326597b05ff46f795abea3779d5a432cb490a1bd01a41177ea674
- TLSH T1C931C22511D848AB432AB54BD414DF1E39FF05FB7B62B21B295D2E1F67F2024C6B4119
- MD5 SHA1 SHA512 TLSH
blobs/fake_http_ovhcloud.bin
- SHA256 72e65755eefcd229a7f39f053525d8d5d8dc2a8fefa05b904c0e545df547a537
- MD5 88e3826b28ffb140de190bc00595d261
- SHA1 237543926cc21ac60294352d4482fa1378e9c00f
- SHA512 0789d417b00c2d75beecf931ec73be81e018ecaedf95580145dd59ac5eaea447818c3b630778a2e7112247aeb6e167d5abf5b9bc59d5426f4949f63207d57d2a
- TLSH T15BC08C0262297D9227092EC28052B240086A8163B2672152A0320422C8486C8183B9E9
- MD5 SHA1 SHA512 TLSH
blobs/quic_facebook
- SHA256 d6504305e15e6f63930d24ced9045001e345d3c1aeb56b1b4c329d51c7dea274
- MD5 fbed62e95d51ee56b8045e905e0945df
- SHA1 9f5ba4367d78f7f1c0683aae19d10cafc3728ba3
- SHA512 ba48b158c2f4e12d084666ea9de958bf7e98cff0133ce40c22e94c3d4f4310d8b0be5100d5612db21de2e4d1c6f58da64f68b6d4d781a8a59489d486c7855a06
- TLSH T19021E780C794DBB1DA0DB5C2C743FD25DE187108B47D850C2D6BB5F99138C5AC25138B
- MD5 SHA1 SHA512 TLSH
blobs/quic_icloud
- SHA256 3f3a81c492d3d7b55c503883dd9dbb3cf1f060d089797c057180a8c69ce34884
- MD5 4c555e3ae8ed50a60e19b295e5dacab0
- SHA1 45d970b37da490cc21c41dd4fcc2a27ebea52975
- SHA512 223d01604721351664368d6d4a7a7ed5c8f0f06b837ca9fdee49ee24a29a25f5f312b763a7b271ae5861fac3184e6fc83b476d3e5736cb1fc659bae17f7ac5ca
- TLSH T1EA21C84689224B02D458EA90904ADBA2A9ECFAA3118AB0034F550843E4C7E8A5F182EC
- MD5 SHA1 SHA512 TLSH
blobs/quic_initial_dbankcloud_ru.bin
- SHA256 f7a1c1cffc8f65bd47412b7ca5588653d21eec916bb79203c9914890a62874df
- MD5 5e594564fd03d52d6257356dcd25909e
- SHA1 f6d8770f529cf1a902ff127e3ada2ade2a205e4e
- SHA512 c64e87c746cd7d5a3f135ac5a2a09f01adee313ec8f25691fb3cfc477f7fc02b1de41e9fb18bfdaf150777370c419913511d7ac99c5ef6642b97129626e99e3b
- TLSH T109212675B24108D4F045B3B07F8B31BCF47C4AED5D51C170825C8395F8060187715375
- MD5 SHA1 SHA512 TLSH
blobs/quic_initial_icloud_com.bin
- SHA256 3f3a81c492d3d7b55c503883dd9dbb3cf1f060d089797c057180a8c69ce34884
- MD5 4c555e3ae8ed50a60e19b295e5dacab0
- SHA1 45d970b37da490cc21c41dd4fcc2a27ebea52975
- SHA512 223d01604721351664368d6d4a7a7ed5c8f0f06b837ca9fdee49ee24a29a25f5f312b763a7b271ae5861fac3184e6fc83b476d3e5736cb1fc659bae17f7ac5ca
- TLSH T1EA21C84689224B02D458EA90904ADBA2A9ECFAA3118AB0034F550843E4C7E8A5F182EC
- MD5 SHA1 SHA512 TLSH
blobs/quic_initial_steamcommunity_com.bin
- SHA256 2fe18b3bd20807d36704d0b072092ee49ae84edca907a4420ab9a0f0f28fddcf
- MD5 7429222625dfb23a41af04a4aa704acb
- SHA1 5e17589b3ab3d86dd269e6382dfdd15931f386e8
- SHA512 28563bd1fa798dcd3d95f13421c3b5041363cf0943baa3479138375f6daabbbfcaa6e2658b8e8e126850a40bdd658ce9a9e43abf5a5a073e6377a28211eb5243
- TLSH T1DD210DEF44273587CE95476523AC42FCA7C3956FC648047A6FF372051C7C14EE591415
- MD5 SHA1 SHA512 TLSH
blobs/quic_initial_www_google_com.bin
- SHA256 f4589c57749f956bb30538197a521d7005f8b0a8723b4707e72405e51ddac50a
- MD5 312526d39958d89b1f8ab67789ab985f
- SHA1 49a06ceebb13807faaf2a935a716127faff9864d
- SHA512 472e88fdd60f9c67f784514a6b699bbefac257657f53a9682a864c0ced474b33f89cf14eb112226ebc9b2c6b07a8f2ec9b25010ccdf98c13370c5c9c6dc2b893
- TLSH T16C21E766D88023896108F64536222E5009B3A4471621258F07292781C83EFEEC1EC0C6
- MD5 SHA1 SHA512 TLSH
blobs/quic_short
- SHA256 ec07b86d54395a3620569d786846c2062f5d30fe8847ecb862703a623c4176ab
- MD5 41024fe1d0152f545887d7b84bcca430
- SHA1 7a8e5594bf69b66efb63ad5a482f7e80a198d4c3
- SHA512 25ac8e7629abda5c6ddcd73e797720c3d439dd2df618be39fbfda323ec15c4865d4c45bb050be1697ac8252780f2d4c4458508da136d11182e1edc1bfe1cfbbe
- TLSH T1C1F002658AFED0F96D2D72356F08867B5C1EBF42F31F141654866048810B3E4581D6D2
- MD5 SHA1 SHA512 TLSH
blobs/stun.bin
- SHA256 9cd5469309780ca56c0bd97266524a48c7ee529d02c3179cfecb20b260a59641
- MD5 0357596c0e38a10a4b99dca2032419cc
- SHA1 05fb322426bd56771a1e1873e88626bc98d34563
- SHA512 319880f7624ff32720d11b79e5cdc24e24ee482a92cd2224e2175936b54a32916d059f431bf2f0e8ff74cf1be41395a462665e75fd1cf17a2c126d01cc2ee165
- TLSH T181B01200C24B4DA4C014103CC4436A9F84A415D58F00DFC389091E9050CA05E6CC1ACD
- MD5 SHA1 SHA512 TLSH
blobs/tls_4pda
- SHA256 9db8772636bb332f1970e8767bc7d628bfa640714bd0b7e699fbe92d559e666e
- MD5 25f535aebfdfce4b84e4fd996cb82ac1
- SHA1 f73d45c02faaec6773e89f3e72d80efe14d6f4b7
- SHA512 8d45e61d9b928be8ac2cf8029a7bb0ee069eaab2c44e6c7f72da708b735c058173cc54695631006dd5586bf1ebded032f5ce80786c036d527451aacc21746abc
- TLSH T129F0C0823391040BE04481375A37222B93D41740071B278BF52B9F00CFC4EC9C63194D
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_2gis_ru.bin
- SHA256 c77e8dd0821912d03379b23eccecc54c26d347319fe32ea10002032572c3c0a6
- MD5 946deecfeeb311d2ca01e8451f3a33b4
- SHA1 87d42c84c08c3865459f27c388cf8d7c44f19adb
- SHA512 ec30575b5245e30bd6849749c2558d9362a94f56d3b562295d6e53337186d20be321c4bbe6c7368492ad4291f784387d7b12bcb297c4120b184953f8b6dc6080
- TLSH T1C7D097D9836210ABD908AA3034FE1361400AE482039E18C39113BD478A818D505A066D
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_4pda_to.bin
- SHA256 eefeaf09dde8d69b1f176212541f63c68b314a33a335eced99a8a29f17254da8
- MD5 e6d649de132c3c10cb62531ef74f5b73
- SHA1 689c7e8d021a99d0a64fee9099fa9012a3528265
- SHA512 f7be809482e3098a5a8f79a759d1f8bcdc2e5201ac35f06eb8662afbb8194f2dfacc2c3e64114557de78e935086cad43880be83b0af1611a1aa0bced0facffba
- TLSH T14ED02B87C982745FDF090B7AA5D5C9B9DED3F1EA03CB8F4768058344FAD85B1422208D
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_alfabank_ru.bin
- SHA256 75867f186b5b163e2893d0100354da3dff58819db9aec332aa545b5bd6526edb
- MD5 acb378d9e8c499fec12da675be79b004
- SHA1 6dd6fbc9efff9778460c35fcb431e7f2d6f4c11f
- SHA512 84c5391bb612f799a9846a098feb52746d0c6da36f42113723ae9ba75322448fa35d10e55eb651d74c83ed2034344b038b41b4b2ce057edceaf18c2f3ff02d95
- TLSH T195D09780A8D32087CF103A372A9CB3401CCEF887174B1B800C13FE0F0BC8A628864016
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_chat_wb_ru.bin
- SHA256 c1ed41a56a5e0ae9d071df283fa27aa1fc2d888c87cd56da5d4a5fbf4522c782
- MD5 33b70a992369f5a417399d61e1f19615
- SHA1 a3c6bcb0af9a7a24c143c5407622fc4b1d6c8dd6
- SHA512 778d145e6eb9333f991585e602d48965a3a62fcc97557034b65e2d09fd8a67fc9cc09f9999db0dfb5a01b655386159604c664794ce258e1755b2506dd23d1ed4
- TLSH T17AD095D411C36043ED50153D2D5096150E67DD3016050161045773574BCCA556054598
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_hcaptcha_com.bin
- SHA256 198c372816b5b9c3c84ac12364048eaa5567f2b2e0861a0cf3e2160861f1e3d5
- MD5 c7b7458ea7d1ca57f55405ad31d29e16
- SHA1 0448cc62f968cfb42d903fff5aa188b1a36ac2c4
- SHA512 ea6ab2b44bfb1352c82a0ef7ee6b9b5097d282b290c01425041cc5fc0a9ca17a682d1a08cf28fb128a1b2bf6dc141c055c2ca942d68fd8c2e30794495e26772a
- TLSH T15BD097A019C3A227CF201632175493B60093F104EE0BA98A8806971F8FC98CBA460458
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_iana_org.bin
- SHA256 9db8772636bb332f1970e8767bc7d628bfa640714bd0b7e699fbe92d559e666e
- MD5 25f535aebfdfce4b84e4fd996cb82ac1
- SHA1 f73d45c02faaec6773e89f3e72d80efe14d6f4b7
- SHA512 8d45e61d9b928be8ac2cf8029a7bb0ee069eaab2c44e6c7f72da708b735c058173cc54695631006dd5586bf1ebded032f5ce80786c036d527451aacc21746abc
- TLSH T129F0C0823391040BE04481375A37222B93D41740071B278BF52B9F00CFC4EC9C63194D
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_mail_ru.bin
- SHA256 ff6b13e82747a9a0ec8da69e3e7c70f246303eb0266afe8cb2f4cde6bbcd263e
- MD5 cff3f06b0e46e5c32717c83d940f01df
- SHA1 79435fbfcb246af8f29c3b1ea58057f740a33630
- SHA512 7bb2ff4a90a3c98fa0252e6c71d91d920b3cfcee49efcaff117492f6cd51e169f5e5e335bfd074edb35afa88630c79616757d0ee3f0ca446de350eed0155a598
- TLSH T1A0D0978364111083CE08223B3D0F86414D47E64A87AA71A206250E078ED4C2129D286C
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_max_ru.bin
- SHA256 4ee0870abe0a0128600b0095189987ba1d210dae8bf963bc725aff49cf922624
- MD5 b2b3e684ce449b60f0bc5a9028221a08
- SHA1 32538a43ec8502f0146cd59456646bce7aedd29c
- SHA512 19963986a6c0f7265456aeaa4622fd4f8061dc81d1b722fb62f61574f6d96e4b55cfcd256dcfc555bec11ae458ddebb943de25dc1df102dafe99a2b4174b5b38
- TLSH T1CF0128771655D117A54D1F1650E150418585EF447302C7EF3B74D974CAD68C34E75345
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_rutracker_org_kyber.bin
- SHA256 0fe5b4118d698536bb845450e3314e22969c59f69f72d90dcb4ef477327ce81d
- MD5 b09cf16b9c9e2785b01a98965132d03c
- SHA1 4db227f57bf070f343e3bbd2afd04977312a63b6
- SHA512 117a761161567987751443b3d6153949f398352202dba18b03e72956d3a3f86a32d2c982835697fe7ce5ff5e815f2192f2aef62bb29a274f40be9b44401d6120
- TLSH T18631092AE2605F6AD590C5660075CB220388F9ED33FAC32B3E14F74D8FD148EA9B4526
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_sochi_park.bin
- SHA256 ad552922acfe029521da884ea29f4bb28bb6bdcee9b1a70b46adbfd266c11d4d
- MD5 cae56426ee185c46b19cd4f7dc8a6222
- SHA1 13fc2ceef9f883203f0cceef5978c3bb3b7f8972
- SHA512 68a928058cda86b67d0e30014d135eae1fc632e3daf4b504f618fa6809878c937000737ae5fbc8acd6eaa1ab6223138ea0006a54abf32f341cc8073fda966fa0
- TLSH T199D097C39901BC3E70204720AA2E86AEA1A370139B03670E30F6F0201AE8C643F33E81
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_vk_com.bin
- SHA256 d6d63c53bc0e1d97e913a43fc4db34f6558bb807228bf6100e3b6863f0720404
- MD5 5299f24cf3ef34818300e204cf40c203
- SHA1 9347fda75189373b3ca74f8d1d5d2e27f48e12f8
- SHA512 e7b21c62cb804cf0bac995cfdcbf4e9e9d2ac304153870b1f5b908d1fd2b8df588e36afb67d780b6025176b429d68422498ebf2d697da4e9cbaeb63d13dc81b0
- TLSH T1E6F07D211202448BCAA691719457C118124ABC4C16075B4F208182A1CED94841DB8226
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_web_max_ru.bin
- SHA256 a086300a4723e95c5e8823bfcb9833457c591da7d096a748c6af6660c77640cd
- MD5 99d7a941f08ccc57f0625536ed29fbf6
- SHA1 8bd5ec1b72bd44563694af5a5fe04dd4c815ca9b
- SHA512 8b75348aa14484f35449ad20de04dc29e30f719d3d944de93f94babf971d919534206cf5c1be01ed4308d45fb5aeb645fb00c906e25bcecfd1e05392f2150c77
- TLSH T10BD097D221836083CB062B372D1A8F7140ABE8221626049300DB8322C3C7821C6F70B8
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_www_cloudflare_com.bin
- SHA256 1281d3676d84f07b14789113471d9f8e5d462975cc20f6d33d200e4ea61c89c2
- MD5 48556dcb90e7fecfe01dbeb8ad80d3fb
- SHA1 48dbbc5ba891afc1129a316cac1da637485d4f42
- SHA512 f177b60a322f8117f619ebc35363efc89fe7f75772edacd82c77997e190758d46633237724f379d6e7b01d8ee3b6d9210b88c13547c530496b90dd723f4c3116
- TLSH T104D095537345C6A7DE18663D5D54033011CA4606571ADFC7C6676303C3CDC758045008
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_www_google_com.bin
- SHA256 936c2bee4cfb80aa3c426b2dcbcc834b3fbcd1adb17172959dc569c73a14275c
- MD5 41e47557f16690df1781f67c8712714e
- SHA1 2f3ca8e75528e0e7797e8f5edfdc582535531913
- SHA512 e8b644d7996168e51d8b991b1d263b9d98f7178bdd9a060078cf4f5ef368fa6e864492b3365227aa68d4d079d734f17d8a5755bbab7424f1bb66e82c0b72f1dc
- TLSH T1D601F4AB1D42D11AD9020E1629D7854A51CADA0561138F772705AF11E8C3D97CD10BC9
- MD5 SHA1 SHA512 TLSH
blobs/tls_clienthello_www_sferum_ru.bin
- SHA256 e6dd8d724eecc6a7340bf64e2ebec81c60bc4e078c6f702b4b6ba9bf184180ad
- MD5 2e7d5581af22c22b0828e1048acb6dd4
- SHA1 49179dc0c4e65937af15de143b3baf7e8802bf2a
- SHA512 35cea376e854b246f80b9348cc93c525641ae203cc4cf73911d92e31e9617a922051551bfffca1d5f057bd54afc4037357a471a81969a48e1c6f04643ebab7a2
- TLSH T1780123860047745BD9875F2B0CD5D5844689F04AB6078327B0E3F5A8EF51AD55990B2E
- MD5 SHA1 SHA512 TLSH
blobs/tls_google_rec
- SHA256 2b13340d72a3d39c0fd0caf1dab544093eb1b81f22e7fd549792bae1c11432e9
- MD5 23461903bdfc7e077976549a77ccb6ab
- SHA1 c0214eff570368d7ddd11cfe5d0107ca849342eb
- SHA512 8310e3696b266925b9f7fe3420e1676a8c3a5a3f76bf30c0c5e4d9ee0556365c3897817f3c1546e0db186cd60e086c06af22f7fc42143ce6f4bb9130190efb01
- TLSH T1FBF0C0C36B168153D40202301AF862050851F5305B0A276BE4678E084ECDD4597584FD
- MD5 SHA1 SHA512 TLSH
blobs/tls_gosuslugi
- SHA256 ec581c9877ebc4b69e6cdab48f46e0f7b0eeb67c5fefe849f21525faa1ff4f74
- MD5 e2c7337d41e48644dcb16591c446ab17
- SHA1 423911dc8ed5a6b4b791e31282f20972d9fda8ad
- SHA512 6a34a1720ed4af9b80430613750ea456cda941f3e883d1793408193d099a3fb5c61ae4cbc1e193f563d8386bea4053ce60a02c7c037d7a00e50eba3893c5e922
- TLSH T176F07D73098005C5E55A8A759C0244915B39644B5137034F326D43D1AFCD99F67B0A40
- MD5 SHA1 SHA512 TLSH
blobs/tls_iana_big
- SHA256 f1c9cad58ce517b9e0f6f57d14e9fafc207140378551f90d2217d0a24ffca961
- MD5 adff1d786a04f001f66a8e19796213d9
- SHA1 16a5bf1a0912efdd06be7f68b4cf692fc2a8d076
- SHA512 efc6e59604bc4b9501e03b8da3016d856a4580235835227fb8b442a9d9c22a2bde25075f14a2df8dece4fe8d441fc6d605a50ad3255e926e002a1a6938eb4930
- TLSH T163F0C0823291040BE044817B593B212B93D41740071B2747F53BAF008F84DC9C53194D
- MD5 SHA1 SHA512 TLSH
blobs/tls_sberbank
- SHA256 d10110e695ec16cdbed292cfbba3e779b8f08acb92bfa1023ad56a8cccd3aae6
- MD5 6287cc49725e3f869660c078355eee06
- SHA1 b6a13b0ca5c339bbab80ff3119625c42897f4833
- SHA512 45707155706ee36251e166b109f88b6ad2ea77a290fb90d88b2c60364c634345c3cb32d51a743b75ef1d5ba587563196ed847d0aeb1c1667b71e39ab43917ce6
- TLSH T1A3F07DA395024749C64650715DB150E80B4EB3015717174F9127A3825BD560C6596B8F
- MD5 SHA1 SHA512 TLSH
blobs/zero_1024
- SHA256 5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
- MD5 0f343b0931126a20f133d67c2b018a3b
- SHA1 60cacbf3d72e1e7834203da608037b1bf83b40e8
- SHA512 8efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461
- MD5 SHA1 SHA512
blobs/zero_256
- SHA256 5341e6b2646979a70e57653007a1f310169421ec9bdd9f1a5648f75ade005af1
- MD5 348a9791dc41b89796ec3808b5b5262f
- SHA1 b376885ac8452b6cbf9ced81b1080bfd570d9b91
- SHA512 693f95d58383a6162d2aab49eb60395dcc4bb22295120caf3f21e3039003230b287c566a03c7a0ca5accaed2133c700b1cb3f82edf8adcbddc92b4f9fb9910c6
- MD5 SHA1 SHA512
blobs/zero_512
- SHA256 076a27c79e5ace2a3d47f9dd2e83e4ff6ea8872b3c2218f66c92b89b55f36560
- MD5 bf619eac0cdf3f68d496ea9344137e8b
- SHA1 5c3eb80066420002bc3dcc7ca4ab6efad7ed4ae5
- SHA512 df40d4a774e0b453a5b87c00d6f0ef5d753143454e88ee5f7b607134598294c7905ccbcf94bbc46e474db6eb44e56a6dbb6d9a1be9d4fb5d1b5f2d0c6ed34bfe
- MD5 SHA1 SHA512
games.json
- SHA256 f2c4a5fce2869b435552767b64c70e4029321e0f6cf3444ee7bf4950ff8e14a2
- MD5 391478d9ef941930a8a7940559b8659b
- SHA1 1cb439956ad97e5281f12ce6a253cdaa5aea4ff8
- SHA512 e3d3cad2f9ee7e5382ed2be0462c9e13b90fc47cbfbee54bf278c8974a15cca645529449525e7007d8c0f3b687071c022cfbb00e24eace21ead2f6155ec04688
- TLSH T148610036C9291CBB1DF2A918A924B203F529533F2189052339FC368D3FB613A6115F5E
- MD5 SHA1 SHA512 TLSH
lists/cdn-asn-probes.json
- SHA256 546c14d6d3fd120884111bbc37da4a3367ee98f42716d58c6bb6d932a2dc7b12
- MD5 d5fbf3321b20d6fe08563fc01f710e37
- SHA1 0116fbf655f44ed7fd11a1bb8a87975eeadfb0b6
- SHA512 d4315175624aa77488d90ad33e8fa0324c7950e283c6238db095022cd53a98ccc67239d7295456f408b1d034156a610b654678f4c9fbf9e2963f36498cab09ad
- SSDEEP 192:ZdwzxH6DNKNIXcgcZsVs5qYB7zeptP6xFPgrLZ2XOkQw4qEHgBsSFU4jj/i1aeK/:ZdwzxH6DNKNIXcgcZsVs5qYxktCH43ER
- TLSH T1FC323798D584CE57AF8E5D1E3E904F22A8CE134FCAC05A3052C276BD8D9FEB81461663
- MD5 SHA1 SHA512 SSDEEP TLSH
lists/games/_pool_d4r1.txt
- SHA256 76a4fa4af4c15ea21604ff12bcace8d7c7214ab1612fe4082f61538b04754679
- MD5 e54475b94903ff92f5947318ebf2d76a
- SHA1 ed3cfbfbcb4072cd564ccced15814d578bdc48a7
- SHA512 d3c34ba67de85c5edcefa857596f6d67ed302da4bc37018cac518032508c7cab6c04a536d5c20422eed331af75761debffda4af9cd60d563e6fde1c7cee74e80
- MD5 SHA1 SHA512
lists/ipset-all.txt.gz
- SHA256 4bee3d10d3c01a6ff700267b86c108dc73fb6a6d98649b5bd3cd1801af2afa64
- MD5 835f384181077ee7fba84470cc91aa44
- SHA1 6e9427f9139e1f50e3467e8f52b8bd68f006c25d
- SHA512 13dfe5330982a191c8fcd5f670a3bd5f411e3214925ca03996c48ec36642db5da9cef56faf5ddb933915a41bea830878f00633487ba73a0d61e1c112d5391c2c
- SSDEEP 1536:2R9+i0IIs8F+Sl9FyQmx3ucpmlFpeFJsdKtIhuIPrsUM723EvruiNL55YYVQDV4o:C+/W+cQlFAvqKtILPY7d3557yB5lv
- TLSH T14AA312DF660243E7C9DF4C5990AEA4E44CD08ACE770197C66C19AAD7BEFA380063A901
- MD5 SHA1 SHA512 SSDEEP TLSH
ipset-all.txt
- SHA256 5ee845ffa47ef97a505fca2ee6148498c4ca8ad503b7075565aa39298171c417
- MD5 dcc991cdaddcf8ebe8c04f07c487e304
- SHA1 df2a737ff600aa705b3828b0496d4d87f904a518
- SHA512 000bc2f3e3d251db1c6aa63e54e9864b8b36d251636a4cd50fcb4c7079444a7855df20f7ad6207736bc5c2282dcf64c9dfe9cefc8bcf1439300e7d2350246324
- SSDEEP 1536:0Nejf60yCo1hWUbq9CoJwc8wK0HoTOk88Wc7m/k+IgmKI+5yEsIphMq9Ypxq31Xm:3K+IgmKI+5yXSho/
- TLSH T191B47F7132FE5EF099C1B3EA22D781647AFBD1C634F6F2608B4FA67129220417D59D22
- MD5 SHA1 SHA512 SSDEEP TLSH
lists/ipset-exclude.txt
- SHA256 36159ca57996843462cccef23b576cb461dfaa8738e2ab01807db5a6c1746725
- MD5 4069630ca8187612083190518057137c
- SHA1 62e51d77bddc2b9e16518b489613dee3907fc046
- SHA512 9dc7b521255ccba339cccd5be555747a57992d8ac727e1997ba4646b2ad3305fd86abf9affe63a1c5d82ac611b757460f785f2f8d150244cf79d51fcb8660d91
- TLSH T1C0B0923151A820F20E8B8B60253E4336FC2F61CB24C37C04534C401A5D005096018720
- MD5 SHA1 SHA512 TLSH
lists/list-cdn-fix.txt
- SHA256 8f61656e6842b29a75d6d4b381d8b5b852b219c59460e3ddfc47391a22146dff
- MD5 47a66392a626fb8c4c4a50ece4ecc2c4
- SHA1 03bf45d357759e3ef50bfe039ea7ba48df2c3b7e
- SHA512 9a4f54d35aeb69183659b70b9718a6c8c3fd7b3064949a00caf8c809ad9adf2aa5dc953441f186b7ab93edde5b9413dbe3f1f13b4db42b93c41d3ad4a4d99bfe
- TLSH T12EC09BAF04E0D18615596651142542C3304437B4C6F7E9D505C1DD5D5A485DC90CA57D
- MD5 SHA1 SHA512 TLSH
lists/list-cdn-test.txt
- SHA256 c27cc5466bbb7d3033ddffd543bbb701ddfbc928eb793facac5e576fb479c63a
- MD5 2c5d431b3f3d38b5386cfee21e06d951
- SHA1 6bda63274a92a378d80f89e450d0030fb14e1fb4
- SHA512 e9bbf2e3117096b27ac59db6e50cc6b031ecc5c5e1680367ead085baddeb977106a878a7c29b99be2fdfc5fded62c8b4047f35bcd1063ac2bff90cc24baa5459
- TLSH T17BC022108A846B82504AD0C9505065085D09B2B98FC0F2C24FF4C47F1D02410B9D664F
- MD5 SHA1 SHA512 TLSH
lists/list-discord.txt
- SHA256 a71cc87c4fa501527d22ec5c0159f8d5af55b3d14b168e011a7d5c5fa3f137cd
- MD5 c937d231008a8363e6a60d47a233973c
- SHA1 761edfd39b544a13952101bf573d080a132e221c
- SHA512 10b0adeab4a99ee68fa5ca1301027748f470f1a820e9b39a049c0341cd9e117957836ac8ca44917b42b3f484e3a065ba1d910c860df6f829b7b277214b1a8876
- TLSH T140E0B653810C64661B5A94F8475535121728A4D5545FF7D3AFBE318C400D783B2D0FF7
- MD5 SHA1 SHA512 TLSH
lists/list-exclude.txt
- SHA256 51433db0edda9197c765b1c7903ab6a72731c5bc6d2ddd2629f637bfb32ffef2
- MD5 70ccb1556ed33ba9cebcc1731564a48c
- SHA1 c34aafe7fa4f5e2ab7e728bd51f62b9394608e3b
- SHA512 14b54454e0aafabc72e8b6a558f5cea9f9b92783b82a94b0a350f1030131918f124842236212d2808e98b52591ef85f9a9021620c4372d4dfd699dcee953a57e
- TLSH T1B921CB74C8087860A7C6A479F4266E989A38871AC580F9CCB6E479002AD3395BD4ED32
- MD5 SHA1 SHA512 TLSH
lists/list-games.txt
- SHA256 c91874135f3205cbc4f9b67fa322196b58bde3f524a25f041798d09f29b2e965
- MD5 885c4c06017f5d113d3631dcdc0a1ba1
- SHA1 89753b55301b54a81491acccab5bebef9a1dba91
- SHA512 dfa7b5c1cd26eef27f8d4a8a2e03d87e8665b7136a6f3775a6f0e9096c174927f27474567dc4aa1dd684bdabed0efdcef71e6e21a8f47542d7e1e774441221fc
- TLSH T174D012025E7A86A02EA3D9B4A52070C80A03323B60C6E7D017E2E92D0609BE3A0D0E21
- MD5 SHA1 SHA512 TLSH
lists/list-general.txt
- SHA256 a6c4e6e413bfb962b40a1011a52247b211f7bd3cba5fde1ef85690d8f69442aa
- MD5 a374bf7f6d9bc40c01c662f8c69f417b
- SHA1 fce4b5ecc16384904252de5220fd4eec9c786547
- SHA512 d95fa7886474a5bf5792f758a5746722b5d2f6027bdb41504ad1aa5b97cd40dc848504c42fc23bba73bfe62e4041b8370d9424ad00cf6dc175c0d4168b0b1096
- TLSH T16701AD9A34E5C7543325C9D0A46423E133A0B07044DAE2F74B7BC5AB8D007FDA7C55B9
- MD5 SHA1 SHA512 TLSH
lists/list-google.txt
- SHA256 6510ee14a0f5f041dc011b578d16b32ef3e2765683492eef74f6bafb23d439e5
- MD5 f2a8ecf4263277bfe7da83fd09818402
- SHA1 f8e3df42948018e035b77b47a4ee61b3c0188873
- SHA512 4bf4c847ac28b07ef581518d05934401c7212d48088a8e87f506f3ab33be000e3716ea24f2912c36a31909d802ba0c7aff5b2384fc24724a3dced6e1d71286a1
- TLSH T1E9D09E87781E81CB5201FDF418C0295D77645F05C6DCFAF59932F02A70AD75624418F1
- MD5 SHA1 SHA512 TLSH
lists/list-include-all.txt
- SHA256 c91874135f3205cbc4f9b67fa322196b58bde3f524a25f041798d09f29b2e965
- MD5 885c4c06017f5d113d3631dcdc0a1ba1
- SHA1 89753b55301b54a81491acccab5bebef9a1dba91
- SHA512 dfa7b5c1cd26eef27f8d4a8a2e03d87e8665b7136a6f3775a6f0e9096c174927f27474567dc4aa1dd684bdabed0efdcef71e6e21a8f47542d7e1e774441221fc
- TLSH T174D012025E7A86A02EA3D9B4A52070C80A03323B60C6E7D017E2E92D0609BE3A0D0E21
- MD5 SHA1 SHA512 TLSH
lists/whitelist-sni.txt
- SHA256 0f85b93e7a15c8d5f53aa1abb02f81eade6d5645217f6cf155dbecbea73ffa41
- MD5 61d39351142cc7c689ee8d6fabfe28a6
- SHA1 0100ae39cf480b8fc310964406ccef86584e5a75
- SHA512 b10ed2ac69e40b685757008348681e7c1fa485bb8a525a4594a0a8a2193cf78267e9c70f1f7c521167048f28938055e3ccbb2b33ec7cefb36bf8c7ea138d621c
- TLSH T10261982146D431A297BD3935F4283EE41D685378C898F3ED2E72B8811CC67C07E5E9B6
- MD5 SHA1 SHA512 TLSH
lua/zapret-antidpi.lua
- SHA256 31c9dd75b0bd55e98e5306293f2be81e9d2ecadcbbf9157394ff37dcff7dc85a
- MD5 6ccb6c967560c2f74ada2c2b057409a9
- SHA1 f84c5ae78a28b848c333dee67445af6123c83363
- SHA512 71cbedd12a9ce56da00681a2eeca95151dceb43b3611284dc541a9bc6b46425042894294a7c49c7607691201cee4a9b595992d88b0e585254315671998821834
- SSDEEP 768:BUe7rKzzr4OPX5Mv7GOmQ43PSdEkuZXxKrXqK//Ko4P:BUe8PpP5oNmQ43PSdEPZhKjb//r4P
- TLSH T1A63372E832EDC01809C4327EC02F7F4BDD7DB1B79A995609F8CD5E20255E61EA9E3A14
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/zapret-auto.lua
- SHA256 c2028f544134b0dec33f054ac54fe4f2315d969ba034601456f72017fd5f8528
- MD5 eccead0f735db874d75c1c11719ec492
- SHA1 3eb0fcf533fd7f9649d29b15159aa01d53ffb4f8
- SHA512 1b0642220822f4951afb33c92bbfc7638321c37c38189bdb02a317a361a7ee8ab933d788d924ef64a1295db47ac1ba3e12cb43818f9ef82952f28a12c492df03
- SSDEEP 384:63XwNmUNOhLJrbgl4ggcfXZmE3pLAyulgSriMJ989Un2jYyXuTw:63/vhLJrMl4ggchmE9LulgIiMJ989U+3
- TLSH T1E292748F33A5E2611E1912F8D41F3616AE3EF4A6828C2554E5CD0FA0262741FE4F7F5A
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/zapret-custom.lua
- SHA256 c41147faad60febb1a4fc862765e60ea83a5299f59fe63e28eb6174756858e38
- MD5 40133dc0aeb10462954e968677003a02
- SHA1 e70dc17e733972140221ebf5307acd2bd267eda4
- SHA512 b4e7356a4040efaa3761ac95ce5c9a0f880320668ef0fa59c58ecfc4bc61ce4b7fe618efbabf7fed17a8cd290ddda5b771ce6835d24631cfb062a0b61290e685
- SSDEEP 96:h2fRV4cOhuPQGvSuBRkg8UUpj+C8pz9a7ZhuPhGVSuB0kg8UUpj+C8pz9Q:h2pVycSmkg8UUpj+C8pz9XqSjkg8UUpx
- TLSH T141C111C536BCD804045472BDCA2E7F4BBC3EB4B6295D2219F8CC7D38629971AE967248
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/zapret-lib.lua
- SHA256 b67a470f23b00a8d6e732c4e5135a39b224511e0b71809d5f4616adf62674980
- MD5 387a52c6a18bff57072e6dac3084781d
- SHA1 884fe05ac90882191d574ae631ae2ef6c40bd8d7
- SHA512 e17a90764c095b5723e5bf8a57ef80b1a80b0ccae8e4d278cb973c05c5f8ad04a2525cc9ee199cb1d8c248c039fe659ae0ac3fed6a2f16b9b748b89ad6be6717
- SSDEEP 1536:84Oc4TT2a12F79QbbHR6UCfdmYBGhmgrgyf7KXq:8Rc4TT2wfx6ddzurgyfAq
- TLSH T1929309CE37AAB2AE168032B5C00F2E517E6CF676618CD615E0CC81B5750969FD1F3A78
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/zapret-obfs.lua
- SHA256 e9581bfbca846630ada78193641d834e25abc11337ba85467d642c2d8c6fa47f
- MD5 c40262fbe6f14f5be5f211f6f0d227d6
- SHA1 33b419448379e6a2312684ce7b42146958028483
- SHA512 09280d676730a1072b31a7694151124f7173f19cf515bdd95553ee34dc7601c01e0290def3b089f5357292c984ed06c5ed97b23eda6a7571620bb63ee11cdaac
- SSDEEP 384:FavlnwkwXAPUpC3WJ+A9KMYb3/TpnQnJ7/EdVnIdsZFitROuFADA3M31MtHv:s9wkwXfpC3WJ+AsMYb3/T907/ELnIdsc
- TLSH T1B082C7D91B5AD02ED94433B9D13FFF153F2DB1BA82C4861A949EC56025092BEBCF3614
- MD5 SHA1 SHA512 SSDEEP TLSH
lua/zapret-pcap.lua
- SHA256 6866c37c92fbc62075accf94228da48af618c7f416edc682eba99b2196e05f45
- MD5 9e2cb04cb8526bd6750131054e6ccb58
- SHA1 08239d45888a9625abad710f33f7d52050079654
- SHA512 a9ccb11fc51de47a354dc37f98be0e7dc5b295b2e357d25e9518a31bee41618a3f54e721147d49b035ddaa8b1601a526d8c7a753c74701f2d74e3a7f4554f544
- TLSH T15D212FCEAB62A1474114C0B1AF36E62A7E08C4EBD6CC139004EC6B82635736F91E35E2
- MD5 SHA1 SHA512 TLSH
lua/zapret-tests.lua
- SHA256 82664cb50a751a531b63dce094ac03de5045b16b489e726ff32a9a1034811459
- MD5 a6cfaac8b4f12f644bf791c3da2db824
- SHA1 baa0168b11fc3b08088f0b264728093f292bd889
- SHA512 a90a1d8b7686a2b0a7254f016fc839aec434fd41747c3357d0bb42a2ed86b621c1fe4a250ffb97371c6d99fa15c6453555b9e4fa0ec395f3ed487a44ff9184f1
- SSDEEP 768:5alnzVSr+xTZPVNQBcaEuSP+KOmnVw72XC:kpSr+xxVNQBc/uSP4
- TLSH T1C9F2C68AFA9B8458988221BCDD7971416868FE37A4E57833E14F870DC27D58F61A3D38
- MD5 SHA1 SHA512 SSDEEP TLSH
presets/auto.txt
- SHA256 ea387d49f99cf8489d559c2f57b7025201cb1b68ecb277ce50709063da9414e5
- MD5 2c58460eae668b563f2751a87e6e6f06
- SHA1 bcd633b9cc0ea693c275d1e26a9f089657cec456
- SHA512 755e566785f7d5dcbf7db051101e689bf4617734723cf7d01705ef525670fe4b5580fc3f6f9155c237f2ebe29fd106fd3525e9e224b33a1d46970997aaa9ff81
- TLSH T14F51806BF5E09E0E86CBE01FE02DAA01909BCD47D8C5D41157CC5FD81743A2A96D69CB
- MD5 SHA1 SHA512 TLSH
presets/default-alt.txt
- SHA256 15f3cb071aa3385b092d0faca3596ec74218841ea9b47813e2ffd08198021a3d
- MD5 04ec6f3c8218c43542191ac6ddb84008
- SHA1 33361f1ed80a7e3a787b9257a02834a49163ed78
- SHA512 4a1c77a7f2eb7479408bb4fe395665a82937a2ab349595618f4b960c6df45c03f2442517c5dc1f52235836dc877ebc0dcb489b0bc660677499ce0bc4ba096089
- TLSH T15D417E57E8504A0AC6DFD00FF039AA1181AADD97DDCBE80297CC5ED81B43F5695D188A
- MD5 SHA1 SHA512 TLSH
presets/default.txt
- SHA256 71f4e2567aebb4fee812c48a2a6174c484364bc93bb690e4624a95adaf54fe93
- MD5 fd1ef206e58307f990b664e2367d3972
- SHA1 6c823c0ee3ae734f61ba1196cea8a2cd8cfb0da4
- SHA512 042037db218db2a456a0494c35a64303003d7f8b1638885bc3b223e638a4662d8e2264413b3774baecdf5a3a11d3cf955f964b7b1f5ec53d927db8cfc95764c0
- TLSH T12F41FE57E440C44ED5CED41FF026B91142A6DD8AEAC7D4039FCC5F981A03D2BA1D684E
- MD5 SHA1 SHA512 TLSH
presets/fake-disorder.txt
- SHA256 db54c8997c41d5a3df294793679a15c238a4e9cd7e4f428e85b417b5b4af00d0
- MD5 0eecb3d9778163d89f3ace2d53052476
- SHA1 edba622268321ab5bf780ac43e3765c60cd22f85
- SHA512 6e11a83820fa344d3617f0f1e6b0ad942f87f4256ff5887cc8650825ae87dacb7449ab2dca84750af8981a808739c9ec2a0d2a069d20cc2133f43f0bc753d9cc
- TLSH T19F410C5BE404C40984DECC1AF022A5264267DC8AE9C7A4439BCCDFA92A43C6B51D5C0F
- MD5 SHA1 SHA512 TLSH
presets/fake-multidisorder.txt
- SHA256 ca5c1c50a256a286d67b231827e8827265d99787fcd81145de076de038fef7d8
- MD5 136cf611fe35870e4e855268a7c49920
- SHA1 2396f708a546231919f5252bd4164e06ccdcc2c8
- SHA512 c71bc1b35078fd3a01e40c92b898ef6fdf2869fa76dc223d3fda359e3df183cd82d75e1896581dd9649443684bca82e59f8ee861a34a1cac79135440862bae94
- TLSH T14541F05BE840C50DD9CED41FF02BB52152A6DD8AEAC794035FCC8FA91A03D2B91D5C4E
- MD5 SHA1 SHA512 TLSH
presets/fake-only.txt
- SHA256 8819d494927a03e19c970eeb40aa7c115661390620aaf0c159d61813d7652d72
- MD5 c5de279dfd09735fa9d857f3b3b917ee
- SHA1 48ec28b8b278a8909b1ffd2748d7a931cd13a024
- SHA512 03acadba56356ceaf1f2fb409c60506d3fcfca6b560a0f0a341400e97835ca28d7b325598d96d58df777a3e5e53642b919780aad0f854c4ffec6830a2d7cc831
- TLSH T1EA31EB5BE840C51AD5CEC41BF02BE5218265DD8AEACB94035FCD9FAD1A03D6B90D584F
- MD5 SHA1 SHA512 TLSH
presets/fakedsplit.txt
- SHA256 d202ef8d8c6a80bc32174e5aeca112b3945d989fd32d5d3822a6c6f2e6642d2f
- MD5 ba917caaae7128d6504ff62b935ae636
- SHA1 582235778dae652f015824127cbced0fd9def8ef
- SHA512 11a584d7b7b24b95d082b2fb84ed518bc4470828fbd7ad803eb67d7d1c5636fe6cf88ae4b29ed18ed3026d774d76c5d3a211b8115eb7b706d0b2ded4d78af5e5
- TLSH T1FB41FD5BE840C05ED5CEC41BF02BB61542A6DD8AEAC7C5039FCC8FA90E03D2BA0D584E
- MD5 SHA1 SHA512 TLSH
presets/hostfakesplit.txt
- SHA256 b5d3f0e7c4ab7a8f326d859134677b101842b4ae0d7bd3dfd9715d714f1154c6
- MD5 d2f37774a55503f042fc31401a57ae3e
- SHA1 a835267600757a970ebffa789f65e633b9c6ff72
- SHA512 9845e92d3be6c0ec1edead26624c4cbda7798fae61ddbaba19b0afff44378f2831926f0fe4b1e7ac7c94bcf0e872a445202beec99a50a60cf3814311a85ae6ad
- TLSH T1E3410197D840C54ED5CD881BF01BB52156A69D8AEAC7D8035BCC8FA90A03D6BA1D684F
- MD5 SHA1 SHA512 TLSH
presets/multisplit-pure.txt
- SHA256 633342fb417e09c77c4ceddd3766c9bd00fd7c8b3a07564f0c527292deb852df
- MD5 4dc8283efc909aedb31fc0f891eef31a
- SHA1 d9280432260c16641eca570123bc30e913e8a00d
- SHA512 2fb3db9ebfc7134e75d0bdb851bff03ec20c269d356b32c76a9c131dec9d4f631238caaf0189ce7f3e86e7990186610576551c58e1b9dbe571302e3ba56683d1
- TLSH T13B412367D480C40D95CF981BF016A52182A68D86EDCBD8039FCD5F9D1E53C6B91D5C1F
- MD5 SHA1 SHA512 TLSH
presets/multisplit-seqovl.txt
- SHA256 669f6bd90190782ec65aa54abc416894c54611c369609f8e3fc7c419fd375f8c
- MD5 af935fb8d06bbb94e320937f555c5e8e
- SHA1 d2a830cfa4520fcb071e035a9bc3fe3a1f63afc2
- SHA512 da9a8f8a0599dc8e44659b48e5b3a7e3da51f95ac960778a716f0e37123ce5e0ed0202f71774d74c0a0d703d35e9714c90bf53de334c33f8c64355bfdd81f3b4
- TLSH T173410167E480C40D95CFD81BF016A52182A68D86EDCBD8039FCC5F9D1A53C6B91D581F
- MD5 SHA1 SHA512 TLSH
presets/tcpmd5-fake.txt
- SHA256 74110b552437b39d7df2499802096cf3e00b26924828ba6ed00da1824dcce8bd
- MD5 81d5c17078daa0eef2b4b21ccbb41539
- SHA1 12cf61e133efb5f5aa451c52b5790734ff8605e1
- SHA512 7029843030a1133bf9746893928d8e3e320752de42f29fa8ff23020d43734d933c53cdb193469a25b4e42d0fca915689b51f0f53bfd87d68a82979810b9007b6
- TLSH T19E417E57E4505A0AC6CFD00FF039AA1181AADD97D8CBE80257CC5EDC1B43F1795D188A
- MD5 SHA1 SHA512 TLSH
service-install.bat
- SHA256 270346e6d44f8d9567a6c250bbbc816c777c0958afff40bdaf7a74415a18576a
- MD5 1ae88d1e0f11ce9f15dc3e44399f51d3
- SHA1 71d07cc42fcc66138613170bbec22e8ad189fe29
- SHA512 07b655d0e006b8bb7192d5210b43ddaccd6d6de9aab63014f9ef3f65ad48d3830aead4e802392cc3e9fab0544482873189ea6291d907484fad21a6db1417e8f4
- TLSH T11C71589AF409CA19ACF3D01BB0BBAD17E085FD9688C4A581E3496F5CF5C353B7244AC9
- MD5 SHA1 SHA512 TLSH
service-remove.bat
- SHA256 d9543563ea3f0c79d3066e6eb0947df8a179faeabada32475da82930bb73f33f
- MD5 85c3edc18f26f83c579ac86ae887a090
- SHA1 9774505f25970f02feb41c698ba0f83e4736ff68
- SHA512 0d4f3764349dbf98b7c056468ea498e4272b990fa19e364450e13e551be972768d4a575bfebb9537760ed49aab0a77b339ce4f989fad81086d192956b32bfd2e
- TLSH T111C08C1F38039C201087A0C250F33045AA80CA574CA7BEC09CD3A138AC80548220540A
- MD5 SHA1 SHA512 TLSH
service.bat
- SHA256 d3368bb74fd0c23d245446abc2768682cc6a546101db6dbae4124c5b5d4e0876
- MD5 5223cf4cf6ea6f8dd95d1ba718e540d3
- SHA1 90d6d95678288eb38728bd71f332d34f34fa3f53
- SHA512 3fc3622ae0d4f8d6a55b132884f88297864240d18b9a6b7fdcdb65faedc4f5c54a1510bb35150076efd3005faee8fddca7b69acf64f3bd69150300a662b4cc66
- TLSH T1B211BA47319294335B7466B38E302009F609D2CB0325AE6C70AB42747A4C7CABBD91F2
- MD5 SHA1 SHA512 TLSH
start-auto.bat
- SHA256 3b8fd9d9115dbb8e45e6bbc067e616fa08b4eceb077019602ecd68ba7c5e2a33
- MD5 dab8ad712b081d3e9775623a3ca9e34f
- SHA1 fc3bc191fd2501416fa7b008359df62299b44411
- SHA512 430c97d3fa87e5cf71872ccc08560d8129735ab1bc5477f1de411d579ea9f774528f84d93094ae6809c53a09d4e8d2b1355a16bc2252fd6ba544f10d4323054a
- TLSH T121818AAAF668D91EA9DBA06FE05EA9001087DD9B88C0D141F34CEF6C19C7D1B7509BCD
- MD5 SHA1 SHA512 TLSH
start-default-alt.bat
- SHA256 17198e44fb3e2e1b74754b19236faa37880bc8fa3bbaea5b170b0fcc988704b6
- MD5 0d6c904cedb2ad5b2b124d5b781fd0ab
- SHA1 b39494e489b28bce9aed85028e45394e26e9d511
- SHA512 64366292dbeef3daeae52a0a7b737e08be578df34645cc61f92ce65c26a5c7a48695dccd7b8148519fd263444b3bf033458ea12a394c7f1ee8708f1dd556dabc
- TLSH T10E517EE6F419CA2AB8CB906BF45BF9001186D9DA88C49641F30CFF5C19CBD1BB644B8D
- MD5 SHA1 SHA512 TLSH
start-default.bat
- SHA256 2045591ceb18fd50e52bb6cc38f3f9b8827bf15815960d9bc2b8b6784dda231c
- MD5 310d0e89813f767636ff275aedc05642
- SHA1 9b34e7adc5e5f3af90ac0508064172d8e80b248e
- SHA512 2c399b53f2566f5fc26411c9abf96aef4db6bd47cbee17a511a7ae257e81a3bf6b7c1ba4d70132a826ca3165ef4c77c68e090fce31aff08128193c83fbd93f5d
- TLSH T1CB517CE6F419CA2AB8CB906BF05BF9001186D9DA88C49641F30CFF5C19C7D1BB644B8D
- MD5 SHA1 SHA512 TLSH
start-fake-disorder.bat
- SHA256 55923229f8749a5de8f73e532dc386acc6c79f2995741398517e87af6da1c58d
- MD5 5d4963f674ce74503a8c60db5aa56f9e
- SHA1 35c2bf783dbf1cb5183264188bdac48b8a4a64dc
- SHA512 ddbe914d6f4533fd089cb766b52c8826c143d18861c185196b96c112672c7832a62cf518b2f98a4a53bb4342b3c5c67a7018aeb7de792f4135f06ff750ab614e
- TLSH T19B518BD6F40DCA35B8CB906BB05BE9111156C9DEC8C4A681F34CEE5C29CBD1BB244B8D
- MD5 SHA1 SHA512 TLSH
start-fake-multidisorder.bat
- SHA256 ea085a1ba417c56df15920c045a435eca734643ab97339c629741f16a0359333
- MD5 95afce7524440a6e46155060acbb4bcb
- SHA1 617012338bb96c6f5073ecbf81a0eb89aad059ee
- SHA512 619aaca2d947c7b71552cce6a4e7a640fe2573a6442b5f8785d483ace0e552750616b53ee12d9d95806b611a84fe4a245f75dcca45d67904af59218095d40373
- TLSH T13F518DD6F41DCA25F9CB906BB45FF9001146D9DB88C49641F30CEE9C29CBD1BB644B89
- MD5 SHA1 SHA512 TLSH
start-fake-only.bat
- SHA256 148baa8af294c6099072bd3ef49543978f61169eacd7ce9b31622457c1fb62d1
- MD5 f8b847fe152ffeedf292e4f98fa4a314
- SHA1 adc84593b924c9ddaa740d1303d406fd822e3388
- SHA512 7528fe30fe0c5b25e4a9f423248721999db7ea895d2c8eba1943aaaffd64d3c13cd3d8a434412db893413c1524ee4561713dd6a1da1205dff6b14bb574ba0240
- TLSH T102517BE6F40DCA26F8CB906BB49BE9101145D9DE88C49681F30CFF6C19CBD1BB644B89
- MD5 SHA1 SHA512 TLSH
start-fakedsplit.bat
- SHA256 69e04a8bf615ad06aaeb01eb44070df49d2cdf54580cdf42d00d7d77af882b3a
- MD5 3336d450dfcd1a3681e1cc99c92ca5ab
- SHA1 2fb5d3824491e9a3a1e7fc38a8c73248e65306f5
- SHA512 13bc4d422f953c8a245e300839549d8c1c8c525b1e7d87dcdc2212973c9c534c32333a14576dda3212d4a1f944bf2bdbe4ffcbbf9f6cb5e512ca8f50afa11144
- TLSH T187516BE6F41DCA26F9DB906BB05FE9001186D9DA88C49641F30CEF5C19CBD1BB644BC9
- MD5 SHA1 SHA512 TLSH
start-hostfakesplit.bat
- SHA256 4f0c5cb4c69c65ec0cfa4110b207bf8043ee7c394924f10c3efd3c05413c4fc3
- MD5 7410c5cd76b543fd4a2ea539b38a5591
- SHA1 a6efe807fde47e73e9c01d5a6396607023d21844
- SHA512 8c4ca68f0c037972f12eff89862ee6d69c32b419395ff00f08fde8cfbc81d8995f8fb5d7fc91f358c7f75da86f6667c2e1161285986628b6ad884084bf0a5514
- TLSH T1D55179E6F419CA26F9CB906BB45FE9001186D9DE84C49641F30CEE6C19C7D1BB644BCD
- MD5 SHA1 SHA512 TLSH
start-ipset.bat
- SHA256 50638d7617194332006a566ecf80212828980eea2319d6949405fc2a1549cd64
- MD5 78872c8b05608d882d3524d0708592e9
- SHA1 196b8efba67b61a1cfabe2a2d1b5117495630a6b
- SHA512 9afc09141b8dfce1a7d401d1e56aa28d91ebe25bc51d5877e233d3405afbbedfde17a66a3e6a5cf406d782fb1a54a1d8be17a22e17f003fe3e9d9031e740fd4d
- TLSH T141518DE6F409CA2AB4CF906BF45BE9001186C9DA88C4D541F30CEEAC19C7D1BB648B8D
- MD5 SHA1 SHA512 TLSH
start-multisplit-pure.bat
- SHA256 f7e07541bb3b3a88a0e8b5e3e74172a44b122317cfb83d38ed1d4b5f356ccf03
- MD5 3340fc8519f9cc15a2572ed3ed4e99e7
- SHA1 16356489abff964d457bd5e238722ed1d2d11fb9
- SHA512 592fea700960e4cc041725dc858f17a3ffc93fd3ef68a66507f63f1a0eee2857933f60473b4f412b3dcee047f757cc22e515a9da958328541b501528f98e0d55
- TLSH T11F516BE6F01DDA29B8CB906BF05BE9101186C9DA88C49581F30DFF5C19CBD1BB644B99
- MD5 SHA1 SHA512 TLSH
start-multisplit-seqovl.bat
- SHA256 6f1eac97b9b2eebc59e7fb7791b90de0cc198ccbf9bd70df5b99af65b2bce1dc
- MD5 55629bb2e34a8bb6e810fb85fe95a6ab
- SHA1 b6547888187978b8cf339743a716db68914fb540
- SHA512 c343032df87a265a0de3120c29b39494bafe42e6cb1ba5990eaf1fba1199ee11c643d53dd065d80d66b6f87edf4f5c2264f7bf823e59218efe9a5982db43f226
- TLSH T144516BE6F01DDA29B8CB906BF05BE9101186C9DA88C4A581F30CFF5C19CBD1BB644B99
- MD5 SHA1 SHA512 TLSH
start-tcpmd5-fake.bat
- SHA256 2452ec25f3e551536b8a14c192a9f826271a1dddde0cdcb18f48b01ea8ffc38e
- MD5 78a6ddb471da8fc7bab14c9bfb63c3aa
- SHA1 45d0f448fecbed5cffd65a21eef123f64b181f21
- SHA512 ef8d28e2a3bc2bc8e47b2d49efe53b53180c4485c10f207bf9c9627f2e2428947571688a485f91c9416f7c6139101854e7071e4d5c20a15210e88b2318042d98
- TLSH T136516BE6F41DCA2AF8CB906BF05BF9011186D9DA88C49681F30CEF5C19C7D1BB644B89
- MD5 SHA1 SHA512 TLSH
stop.bat
- SHA256 9f24727e261270d70cb3fb038db965d8b185520412718f973ec1477574fbf1d4
- MD5 09c5519177d353f3fbf7348e5de963fb
- SHA1 3ce52f90314f3daeb9ed3364638d4c46af8cc73b
- SHA512 6287402b275c71d259441723c595b3e4fa897e0b041f8ef8357a6d06a409ed3a4f3eea006bc55f0a8c64d8f0f74b9e0e84e22c3ae24edd6dfa066f3157c14063
- TLSH T154B0020F2C07EC10C45F75C151D621516545D5770DD4EBC175C33024E44495153895CD
- MD5 SHA1 SHA512 TLSH
test.bat
- SHA256 68e6ed52f010690be409d67026ff91401924924480d1ebf237579fd641b42206
- MD5 73b70fa96bea891d732725a81c9c61b8
- SHA1 654c2ae0b41e0d82e1b5af03bfc1183da0bac88a
- SHA512 9285792e9d3f6c8cddc675080d2042083425d5877f7ae2e7c6d8811ab0a1647adadc236e9e2b9fda6d6d647a51fe91121489cd92af23739aa6296c5a1bce413a
- TLSH T1F6B01206220793183217CD3511D6BAB4582D608B1715E5C23162163DA84A36CC6691CE
- MD5 SHA1 SHA512 TLSH
test.ps1
- SHA256 3086b54daf66cfa75fbd9aa31d458e4313b5c4f3857b8e77f846f8fcde2efa73
- MD5 fa434ea296fcfb7f9b7a7f767fbc3cec
- SHA1 da27b55502a3a1e834e4e9f2646e22bc242914de
- SHA512 95c1ad2517433986db5ef31cc48c887e69036b21be01b06d2461d3196a5e040202ad52eef0a5ce4216d2330914f3ccd03f101dfe42018165bb3712427dbf8926
- SSDEEP 192:vBAEX8IGRWhdfIui0xunkDN6ozVqhNtALBuQ1yAQ9a1h2:sZ9uf8kcoR6WTA
- TLSH T12412843AA808146B3672D17E9D415004FA29743BB75A92D474BCB0AC7FFE03D8225EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
update_manifest.json
- SHA256 eb2fad90f8bbb512d43707fa56cfc11f028981b58bbb4c1c3aea06a1a670d3f0
- MD5 d19bdd24c246a061567fcae4669fd29f
- SHA1 5ae131c88e698283523f735d6a55d68f3e0cda6a
- SHA512 bcbce818182dcb6b57122e41637f51de23a8e5713ad970473c6279984e8471cb369e6f8e3b5d4be222efb48b35ff7a9815bb6c8577d2ab58e5be61b672303ab8
- SSDEEP 192:JHGDTJq1FpbwFLvyqf15JXjhGIkyXf9R5/arp:JmDTJ0zbwhvyU9zhdkyXfb5/gp
- TLSH T15AF1E677F2001D9B36B95B6FE8214944F953875F6542748372B097CD8F72E6AED02A30
- MD5 SHA1 SHA512 SSDEEP TLSH
windivert/windivert_part.dht.txt
- SHA256 0e0d071239995332c2e45e60c59c5bb3d70233426e430a7babb24b18b75e90c0
- MD5 8d432e2b6131fa26da945aeb83271e71
- SHA1 2fe7aaf9a7c3f38e3ba52b5403b5657b5b975212
- SHA512 836a872e12cdab245eb4c6a7cfa7a338649f47acbcda927233ef99fa475f7c2752626e1a835174daf00b69635b5aa71518d9d06596a4e277ebdf1c56ddbd9110
- TLSH T1D3B001A25326AC15AE6AD10C362A8BA8514638063D292D0F7CC10003830A529F7357C0
- MD5 SHA1 SHA512 TLSH
windivert/windivert_part.discord_media.txt
- SHA256 ec101b4ac40f487b93fa80074fe2192ceaf773a6891cf940d8bdd9ab603304b0
- MD5 acc98b884bc065638378feb457f0e9e8
- SHA1 fc49fe2ccb431787f739892499d5b49e06d0f46f
- SHA512 2a3ffb2593ef02021c75d3d2ce508673030fcebd34666eb1404e75e8e6d5da4bdaf91f5cea1f746e6a8976987ca0d44e91ae752fb6ab666a9bedd65e3b7cee3b
- TLSH T1CFF0E1C9914AB0F48CA8300A285A8F948E803F673E8A238089C0010CE10CE6EBA483A6
- MD5 SHA1 SHA512 TLSH
windivert/windivert_part.quic_initial_ietf.txt
- SHA256 f243ddc22758b9e04838211a3815e43fb3abe615e6be29e6a812ae4c72b392e0
- MD5 cbec0dd7ab18f9ee6a92c982607eea51
- SHA1 afc26957d5517174a28243208e9017b83e83a470
- SHA512 3ed40f9839f54fc3716f9349631ae1abe510e0e102e5405a81ec53ac540689eb7553ac77e1ce1d5a6507475562abdc28a588d74ee306c6781ba1e8939d27ac2b
- TLSH T18FC04CCA9225FCB00C5C1049754EEE1545407E033C093A854DC1014AD70C83CF2243D1
- MD5 SHA1 SHA512 TLSH
windivert/windivert_part.stun.txt
- SHA256 2a14f470b00cd9704003e0cade500086398f9222c858d9ae944bdeb89f520595
- MD5 1ebd03c38c4c732a92c11d64b7ef129a
- SHA1 837c6ed59734278a75fe3c76ef4bbc578b5fc0f2
- SHA512 b133cd83cd59d1c455bb3fb8f316d47bc5bc423404d9dffd0d3246f85d713f37621ac4568ab04e92ef6da4fba1c46ee9e520aa5c3922138c617ba502c0d40285
- TLSH T18FB01285C350F8A40C5D1000B048DA08C984AE133C0C61008DC3080DD30CB2EF2043D4
- MD5 SHA1 SHA512 TLSH
windivert/windivert_part.wireguard.txt
- SHA256 da68586267462b29e3e370203ce0369ae2baa25a07aa2deab5fb44d69fef27be
- MD5 834fb4f3c03933bb5ccc28ca03223531
- SHA1 4d3287ee62c5695196f21efe30f47bd23c825a27
- SHA512 0db1231e7ae078c0f25848413ac0fe762bbfc498d985d9a99a4447a069c49c4a28c880f9f2b5e32fc4ba5feee62ccc077d8cb1b16d03ef3c2ac81b52e683ca40
- TLSH T126C04C918320F510DC1D4098755CFF5603C83C573EC07DAAA5C6011CC50067AFB103C1
- MD5 SHA1 SHA512 TLSH