chacobot (3).zip
- SHA256 5f3f1b96bf0cf7355afa217030cc51ada2ad7dac44fbe5f2270780266e0c021d
Overview
overview
8Static
static
3chacobot (...on.dll
windows10-2004-x64
1chacobot (...on.dll
windows11-ltsc_2024-x64
1chacobot (...ec.dll
windows10-2004-x64
1chacobot (...ec.dll
windows11-ltsc_2024-x64
1chacobot (1)/bz2.dll
windows10-2004-x64
1chacobot (1)/bz2.dll
windows11-ltsc_2024-x64
1chacobot (...ot.exe
windows10-2004-x64
3chacobot (...ot.exe
windows11-ltsc_2024-x64
8chacobot (...pe.dll
windows10-2004-x64
1chacobot (...pe.dll
windows11-ltsc_2024-x64
1chacobot (...rl.dll
windows10-2004-x64
1chacobot (...rl.dll
windows11-ltsc_2024-x64
1chacobot (...16.dll
windows10-2004-x64
1chacobot (...16.dll
windows11-ltsc_2024-x64
8chacobot (...sh.dll
windows10-2004-x64
1chacobot (...sh.dll
windows11-ltsc_2024-x64
1chacobot (...b1.dll
windows10-2004-x64
1chacobot (...b1.dll
windows11-ltsc_2024-x64
8chacobot (1)/zstd.dll
windows10-2004-x64
1chacobot (1)/zstd.dll
windows11-ltsc_2024-x64
8Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
chacobot (1)/brotlicommon.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
chacobot (1)/brotlicommon.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
chacobot (1)/brotlidec.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral4
Sample
chacobot (1)/brotlidec.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral5
Sample
chacobot (1)/bz2.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral6
Sample
chacobot (1)/bz2.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral7
Sample
chacobot (1)/chacobot.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
900 seconds
Behavioral task
behavioral8
Sample
chacobot (1)/chacobot.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
16 signatures
900 seconds
Behavioral task
behavioral9
Sample
chacobot (1)/freetype.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral10
Sample
chacobot (1)/freetype.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral11
Sample
chacobot (1)/libcurl.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral12
Sample
chacobot (1)/libcurl.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral13
Sample
chacobot (1)/libpng16.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral14
Sample
chacobot (1)/libpng16.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral15
Sample
chacobot (1)/xxhash.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral16
Sample
chacobot (1)/xxhash.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
Behavioral task
behavioral17
Sample
chacobot (1)/zlib1.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral18
Sample
chacobot (1)/zlib1.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
Behavioral task
behavioral19
Sample
chacobot (1)/zstd.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral20
Sample
chacobot (1)/zstd.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
14 signatures
900 seconds
General
- Target chacobot (3).zip
- Size 10.9MB
- Sample261101-2fnteadw7v
- SHA256 5f3f1b96bf0cf7355afa217030cc51ada2ad7dac44fbe5f2270780266e0c021d
- MD5 c4d3912e5bcb47f79d0f65e8645de151
- SHA1 a21b6c51a774cba3f2b92abf890886497e87b955
- SHA512 c7ff52b4aee578d019e6c41beea04874a9359d9fad70c53e5e60ba21c4ed62c6cd977bce825cea5ae7659b5b88e9d14f808552c4bbf0503d02ad837d15095512
- SSDEEP 196608:Qf8+IRHlrZNYhYYN7kjjXxji6JxnwXYSp4/E+GBkO4/gFISvWv9kcmNd8+UDnssL:QfORFdNYFcdi6JxngzJkO4/gaSCqc+G3
- TLSH T132B633088A3BCD608476BC7B11336FBC2E5BAE532C515CEA5A1D756638475E3CE818BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 10 IoCs
Checks for missing Authenticode signature.
resource unpack001/chacobot (1)/brotlicommon.dll unpack001/chacobot (1)/brotlidec.dll unpack001/chacobot (1)/bz2.dll unpack001/chacobot (1)/chacobot.exe unpack001/chacobot (1)/freetype.dll unpack001/chacobot (1)/libcurl.dll unpack001/chacobot (1)/libpng16.dll unpack001/chacobot (1)/xxhash.dll unpack001/chacobot (1)/zlib1.dll unpack001/chacobot (1)/zstd.dll
File Explorer
-
chacobot (3).zip.zip 10.9MB
-
chacobot (1)/brotlicommon.dll.dll .js 134KB
-
chacobot (1)/brotlidec.dll.dll 49KB
-
chacobot (1)/bz2.dll.dll 74KB
-
chacobot (1)/chacobot.exe.exe 8.0MB
-
chacobot (1)/chacobot.pdb19.8MB
-
chacobot (1)/freetype.dll.dll 672KB
-
chacobot (1)/libcurl.dll.dll 638KB
-
chacobot (1)/libpng16.dll.dll 192KB
-
chacobot (1)/offsets.dat195B
-
chacobot (1)/offsets.json7KB
-
chacobot (1)/offsets.version24B
-
chacobot (1)/xxhash.dll.dll 57KB
-
chacobot (1)/zlib1.dll.dll 86KB
-
chacobot (1)/zstd.dll.dll 640KB
chacobot (1)/brotlicommon.dll
- IMPHASH 2a5f637f1949fb3444b794bbcc81c34a
- SHA256 b3eb3f58a5586036cacc0c85c82ce822a6f7cd05903880355374a4eb64978cad
- MD5 af257e898fc4d8698e29c16c5e7916d7
- SHA1 a719be885574bbcb99561c74a14b2b33628d4d1d
- SHA512 5e7952047cdd54e6a1a5acbc17aaf1382d78dec3c595facea53d03135d416a407e996ae16334acd3d319b7870a062cd60e96b9eac81390c0fff4c7955c614349
- SSDEEP 3072:N4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxB4:N4AhdNorGvHdbi09GJS
- TLSH T11ED36BA1F3051736C26B227AE45A6BB8F33582B493630551B4A9066D60C3DE4873F7FE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
6268
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\brotli\x64-windows-rel\brotlicommon.pdb
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_execute_onexit_table
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
QueryPerformanceCounter
BrotliDefaultAllocFunc
BrotliDefaultFreeFunc
BrotliGetDictionary
BrotliGetTransforms
BrotliSetDictionaryData
BrotliSharedDictionaryAttach
BrotliSharedDictionaryCreateInstance
BrotliSharedDictionaryDestroyInstance
BrotliTransformDictionaryWord
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
Name
.text
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
336B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
444B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35403,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=11, id=261, version=35403,
count=2, id=257, version=33145,
count=29, id=1, productName=Unmarked objects,
count=6, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=258, version=35724,
chacobot (1)/brotlidec.dll
- IMPHASH 4f8041f89db18a93f3f026abef3d9814
- SHA256 b8e3a1da8b255fa51f76f912e2f638c6342f31d612d0522ee23710ceb55d2bb1
- MD5 8cd23c8634723f4fde1cba57275edb3e
- SHA1 e7266f916cfd939aea91d9453255e8cbc3e992e4
- SHA512 70526dc392b650764014d34cf215bc2a0445a059ef117cdf0f18145ae2896b5565892fe1c5196be75ff2952af7f09092c71f25197ba2e425a29adf4f4bc4b28c
- SSDEEP 768:2UwDM0oE4j4vwyu/x6oOWIH880mL/RkeqW/azQxARbYs3JNmG:2UwA1ewyu/xiHfL/vmrmG
- TLSH T1A7336D41B5E65A58DD13813883EB976BE7BBB8499301E3E7F2D0F6223E07AD113B5244
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
35956
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\brotli\x64-windows-rel\brotlidec.pdb
brotlicommon
BrotliTransformDictionaryWord
BrotliSharedDictionaryDestroyInstance
BrotliSharedDictionaryCreateInstance
BrotliDefaultFreeFunc
BrotliDefaultAllocFunc
_kBrotliContextLookupTable
_kBrotliPrefixCodeRanges
BrotliSharedDictionaryAttach
vcruntime140
__C_specific_handler
__std_type_info_destroy_list
memcpy
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
_initterm_e
_configure_narrow_argv
kernel32
QueryPerformanceCounter
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
BrotliDecoderAttachDictionary
BrotliDecoderCreateInstance
BrotliDecoderDecompress
BrotliDecoderDecompressStream
BrotliDecoderDestroyInstance
BrotliDecoderErrorString
BrotliDecoderGetErrorCode
BrotliDecoderHasMoreOutput
BrotliDecoderIsFinished
BrotliDecoderIsUsed
BrotliDecoderSetMetadataCallbacks
BrotliDecoderSetParameter
BrotliDecoderTakeOutput
BrotliDecoderVersion
Name
.text
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
11KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
528B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=4, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=12, id=261, version=35403,
count=2, id=257, version=33145,
count=3, id=257, version=35724,
count=37, id=1, productName=Unmarked objects,
count=6, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=258, version=35724,
chacobot (1)/bz2.dll
- IMPHASH 5f60da79124e5b501468e93daf73f658
- SHA256 c05cd98210049cebd99dab3706fa91899db34315066d4187ff57137b741f7775
- MD5 73f6b87164c68ed987a005e253e52691
- SHA1 5b88715255336dcdd1b12bf0d7b0a576033d89d9
- SHA512 fbb7d948eae46309bcaabbf987cfe45427c55f2fc6e85766cb6ee9b40d439ae40b9cfc47d90ed551ad3d36d9b7ed6004f4bf9436052a73b5b1ec445d761b84f6
- SSDEEP 1536:maoPj/yb4mgmidK3qFUYGwrxgaE7eJ6yUnz/2l/JYp82:7Ie78BUnyrYm2
- TLSH T127733B81A7A6BBEDD61B857982330212FB38BD3C0B5157BF22A4C7362B41FA55C71319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
61188
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\bzip2\x64-windows-rel\bz2.pdb
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
_fileno
__acrt_iob_func
__stdio_common_vfprintf
fopen
fgetc
fflush
ferror
fclose
ungetc
fwrite
_setmode
fread
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
exit
_initterm_e
_execute_onexit_table
_cexit
_initterm
_initialize_onexit_table
api-ms-win-crt-string-l1-1-0
isdigit
api-ms-win-crt-math-l1-1-0
_fdopen
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
QueryPerformanceCounter
BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite
Name
.text
Size
58KB
Virtual Size
57KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
80B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35403,
count=3, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=2, id=257, version=33145,
count=44, id=1, productName=Unmarked objects,
count=7, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=258, version=35724,
chacobot (1)/chacobot.exe
- IMPHASH 329240511d66c9356f79645040011b1b
- SHA256 ba538b3ccc1277478ef37de4a51e1a31c63ca4fd794539b68683628fdf6a1dd5
- MD5 14899f31b45f896ea8c1b0f535a53dbc
- SHA1 dee950716ecf7b00ec07605d6b905be051d26128
- SHA512 68ab6604dcf5525a6e16d918a68c5b2aada07da6653502655040342e13e7e0eb7ff2820629ef7cda8c1276e59b5b8d48d92c425080dd0aad56fb92d3217dc490
- SSDEEP 196608:9cT4YviQy68NRpo2TEg7PAmkG/0ZqL1lF+QEd5/gklQnAP:w4YviQy68NRpo2xPAmkyvL1Gd5/gklQM
- TLSH T10C86BF82F3A181E8C167C139C647D767E7727C08172157EB329CAA6A2F63AE05F39741
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2235120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\steam\Downloads\Downloads\projects\chacobot-src-keyauth\tc\build\chacobot.pdb
d3d11
D3D11CreateDeviceAndSwapChain
xxhash
XXH32
zstd
ZSTD_decompress
ZSTD_isError
winhttp
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpReceiveResponse
WinHttpOpenRequest
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpCrackUrl
WinHttpSetOption
WinHttpAddRequestHeaders
kernel32
GetConsoleMode
GetTempPathA
CreateFileA
SetDllDirectoryA
LockResource
CloseHandle
LoadResource
ExitProcess
CreateDirectoryA
Process32First
Module32Next
GetProcessId
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32Next
GetFileSizeEx
ReadFile
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileW
GetLastError
HeapDestroy
HeapSize
InitializeCriticalSectionEx
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleW
SetLastError
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
RaiseException
EnterCriticalSection
LeaveCriticalSection
LocalFree
GetSystemDirectoryW
LoadLibraryW
SetCurrentConsoleFontEx
GetSystemInfo
GetTickCount
MoveFileExW
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
PeekNamedPipe
WaitForMultipleObjects
GetCurrentProcessId
VerifyVersionInfoW
GetFileAttributesExW
SetFileInformationByHandle
CreateFile2
AreFileApisANSI
GetFileInformationByHandleEx
WakeAllConditionVariable
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
SetConsoleMode
WriteFile
GetStdHandle
SetConsoleTitleA
GetFileAttributesExA
SizeofResource
GetModuleFileNameA
ReadProcessMemory
SetThreadPriority
GetCurrentThread
GetCurrentProcess
GetConsoleWindow
SwitchToThread
Sleep
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
QueryPerformanceCounter
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
FindResourceA
CheckRemoteDebuggerPresent
IsDebuggerPresent
SleepEx
GetThreadContext
GetLocaleInfoA
GetModuleHandleA
FindNextFileW
FindFirstFileExW
FindFirstFileW
InitializeCriticalSection
FindClose
CreateDirectoryW
GetCurrentDirectoryW
GetLocaleInfoEx
FormatMessageA
InitOnceBeginInitialize
InitOnceComplete
GetCurrentThreadId
SleepConditionVariableSRW
AcquireSRWLockShared
ReleaseSRWLockShared
FormatMessageW
user32
GetWindowRect
MessageBoxA
CloseClipboard
OpenClipboard
SetWindowLongA
GetSystemMetrics
MonitorFromPoint
EmptyClipboard
SetLayeredWindowAttributes
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
ScreenToClient
GetAsyncKeyState
TranslateMessage
SystemParametersInfoA
PeekMessageA
UnregisterClassA
SetClipboardData
RegisterClassExA
UpdateWindow
GetWindowThreadProcessId
IsWindow
EnumWindows
FindWindowExA
GetWindowTextA
SetWindowDisplayAffinity
IsWindowVisible
ShowWindow
FindWindowA
SendInput
GetCursorPos
ReleaseDC
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
GetKeyState
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
GetCapture
GetMessageExtraInfo
LoadCursorA
PostQuitMessage
GetForegroundWindow
GetDC
GetClipboardData
gdi32
GetDeviceCaps
advapi32
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
ConvertSidToStringSidA
CopySid
RegDeleteKeyA
RegCreateKeyExA
IsValidSid
GetTokenInformation
GetLengthSid
OpenProcessToken
CryptHashData
CryptDestroyHash
SystemFunction036
CryptDestroyKey
CryptImportKey
CryptEncrypt
shell32
ShellExecuteW
ShellExecuteA
SHGetFolderPathA
msvcp140
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
__crtLCMapStringA
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
_Strxfrm
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
_Xtime_get_ticks
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_lock
_Query_perf_counter
_Mtx_unlock
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_broadcast
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?_Random_device@std@@YAIXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??7ios_base@std@@QEBA_NXZ
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
winmm
PlaySoundA
timeBeginPeriod
crypt32
PFXImportCertStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryW
CertGetNameStringW
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CryptQueryObject
ws2_32
ioctlsocket
recvfrom
freeaddrinfo
getaddrinfo
listen
htonl
accept
gethostname
__WSAFDIsSet
WSAIoctl
socket
setsockopt
recv
htons
getsockname
getpeername
connect
select
bind
WSACleanup
WSAStartup
inet_ntop
sendto
ntohs
inet_pton
WSAGetLastError
closesocket
WSAWaitForMultipleEvents
WSAResetEvent
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
send
WSASetLastError
getsockopt
shlwapi
PathFindFileNameW
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__intrinsic_setjmp
__current_exception_context
__current_exception
wcschr
_CxxThrowException
memcmp
memchr
memset
strchr
memcpy
longjmp
__std_exception_destroy
strrchr
__C_specific_handler
_purecall
__std_exception_copy
__std_terminate
strstr
__RTtypeid
memmove
__std_type_info_compare
api-ms-win-crt-heap-l1-1-0
free
realloc
_callnewh
malloc
_set_new_mode
calloc
api-ms-win-crt-math-l1-1-0
sqrtf
ldexp
nearbyint
asinf
atan2f
roundf
sin
acosf
_dsign
_fdopen
cosf
floorf
fmodf
powf
_dclass
__setusermatherr
fmaxf
pow
logf
ceilf
cos
fminf
log
sinf
tanf
api-ms-win-crt-string-l1-1-0
strncpy_s
strncpy
strcmp
strncmp
strcspn
_stricmp
_strdup
strlen
wcslen
_wcsdup
wcsncpy
strpbrk
tolower
wcsncmp
strcpy_s
isspace
isblank
isalnum
toupper
strspn
wcspbrk
wcscpy_s
api-ms-win-crt-stdio-l1-1-0
fgetc
_set_fmode
_lseeki64
fputc
_wopen
__stdio_common_vsscanf
ftell
_popen
__p__commode
ungetc
fgetpos
_write
_pclose
fgets
_fileno
_close
fread
fputs
__acrt_iob_func
fsetpos
fflush
_fseeki64
_read
_get_stream_buffer_pointers
fclose
setvbuf
feof
_wfopen
__stdio_common_vsprintf_s
fwrite
__stdio_common_vfprintf
fseek
__stdio_common_vsprintf
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-convert-l1-1-0
atoi
atof
strtod
strtoll
strtol
strtoull
wcstombs
strtof
strtoul
api-ms-win-crt-runtime-l1-1-0
system
_resetstkoflw
_invoke_watson
_register_thread_local_exe_atexit_callback
_c_exit
_invalid_parameter_noinfo
_beginthreadex
abort
terminate
__p___argv
__p___argc
_exit
_errno
__sys_nerr
__sys_errlist
_initterm_e
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_initterm
_get_initial_narrow_environment
exit
api-ms-win-crt-filesystem-l1-1-0
_fstat64
_wstat64
_lock_file
_unlink
_unlock_file
api-ms-win-crt-time-l1-1-0
_localtime64
_time64
_gmtime64
strftime
_localtime64_s
api-ms-win-crt-locale-l1-1-0
___lc_collate_cp_func
___lc_codepage_func
_configthreadlocale
___lc_locale_name_func
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
Name
.text
Size
2.2MB
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
92KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=8, id=253, version=35721,
count=10, id=260, version=35721,
count=45, id=261, version=35721,
count=6, id=259, version=35721,
count=6, id=257, version=35721,
count=2, id=257, version=34808,
count=43, id=260, version=33523,
count=129, id=260, version=32535,
count=5, id=261, version=35214,
count=4, id=257, version=35717,
count=27, id=260, version=32822,
count=37, id=257, version=35222,
count=643, id=1, productName=Unmarked objects,
count=66, id=265, version=36248,
count=1, id=259, version=36248,
count=1, id=255, version=36248,
count=1, id=151,
count=1, id=258, version=36248,
chacobot (1)/chacobot.pdb
- SHA256 0322349a4b8eb60ded2e04a2065b53472265fdf642c45f5b7754438a11ac1be7
- MD5 84119419b959db0dae5faae7316d9f5b
- SHA1 bbd4e378d25afa55c9017d5ba608dc447f692b1c
- SHA512 13178b45cf0912d50be213faacecf68489c39868b7689233f69e97eaac2f9594a3defa1941002d1b02de2884ce0802dc5c7d3301fccddad4bdab11edb19afb3d
- SSDEEP 98304:He5ksNOMGxBrEjAe5bKE82enYGAiogqMQTNNyvPhvZ51TWzT3QPNHYBNB/BcBrB5:He5ksNExknNYC26ZPpNrhrRZ0
- TLSH T153275B62B6555D13C8AF2739A0970B1C23A59906EFDE67C7894EE32C4CC634CCF6B981
- MD5 SHA1 SHA512 SSDEEP TLSH
chacobot (1)/freetype.dll
- IMPHASH 1d1f72f133ba13a369c5242abfa37030
- SHA256 6d1f5033f52f098ba5445e2f7b058f83c25d7894119e6f3c721c025156c97ac9
- MD5 a4c6917e7ce10c3cc81c2ead434ca20d
- SHA1 7fd822c56e9e3fc066f1d3ed1d2081ea6193bb27
- SHA512 6f7a3d668caed8c436a47ffe58f6659a80d3eff64a89b77c5d8e731b193a26b1995b2bcea6e52ea0235dbd91ba1b12e2424c1a2bb63e248d6234699e5f705166
- SSDEEP 12288:5UfzJWl+OzQHDaZsTfJepcW6amB+ImlA1afEWmNRK:5UVWTzJZs9ep/6amBNmlUZ
- TLSH T119E48D82F3A016ACC667C27C8617872BE776740513109BDB56A05B6BBF13FE16B3A314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
493760
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\freetype\x64-windows-rel\freetype.pdb
zlib1
inflateInit2_
inflateReset
inflateEnd
inflate
bz2
BZ2_bzDecompress
BZ2_bzDecompressInit
BZ2_bzDecompressEnd
libpng16
png_set_expand_gray_1_2_4_to_8
png_set_palette_to_rgb
png_set_tRNS_to_alpha
png_set_gray_to_rgb
png_set_filler
png_set_packing
png_set_interlace_handling
png_set_strip_16
png_read_update_info
png_create_info_struct
png_read_end
png_destroy_read_struct
png_get_error_ptr
png_set_read_fn
png_get_io_ptr
png_set_read_user_transform_fn
png_error
png_get_valid
png_get_IHDR
png_set_longjmp_fn
png_read_info
png_read_image
png_create_read_struct
brotlidec
BrotliDecoderDecompress
kernel32
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetFileSizeEx
ReadFile
CloseHandle
HeapAlloc
HeapReAlloc
HeapFree
GetProcessHeap
MapViewOfFile
CreateFileA
UnmapViewOfFile
CreateFileMappingA
vcruntime140
memcpy
memset
strrchr
strstr
memmove
memcmp
memchr
__intrinsic_setjmp
__C_specific_handler
__std_type_info_destroy_list
longjmp
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-string-l1-1-0
strncmp
strcpy
strcmp
strncpy
strlen
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-runtime-l1-1-0
_seh_filter_dll
_initterm_e
_initterm
_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
FTC_CMapCache_Lookup
FTC_CMapCache_New
FTC_ImageCache_Lookup
FTC_ImageCache_LookupScaler
FTC_ImageCache_New
FTC_Manager_Done
FTC_Manager_LookupFace
FTC_Manager_LookupSize
FTC_Manager_New
FTC_Manager_RemoveFaceID
FTC_Manager_Reset
FTC_Node_Unref
FTC_SBitCache_Lookup
FTC_SBitCache_LookupScaler
FTC_SBitCache_New
FT_Activate_Size
FT_Add_Default_Modules
FT_Add_Module
FT_Angle_Diff
FT_Atan2
FT_Attach_File
FT_Attach_Stream
FT_Bitmap_Blend
FT_Bitmap_Convert
FT_Bitmap_Copy
FT_Bitmap_Done
FT_Bitmap_Embolden
FT_Bitmap_Init
FT_Bitmap_New
FT_CeilFix
FT_ClassicKern_Free
FT_ClassicKern_Validate
FT_Cos
FT_DivFix
FT_Done_Face
FT_Done_FreeType
FT_Done_Glyph
FT_Done_Library
FT_Done_MM_Var
FT_Done_Size
FT_Error_String
FT_Face_CheckTrueTypePatents
FT_Face_GetCharVariantIndex
FT_Face_GetCharVariantIsDefault
FT_Face_GetCharsOfVariant
FT_Face_GetVariantSelectors
FT_Face_GetVariantsOfChar
FT_Face_Properties
FT_Face_SetUnpatentedHinting
FT_FloorFix
FT_Get_Advance
FT_Get_Advances
FT_Get_BDF_Charset_ID
FT_Get_BDF_Property
FT_Get_CID_From_Glyph_Index
FT_Get_CID_Is_Internally_CID_Keyed
FT_Get_CID_Registry_Ordering_Supplement
FT_Get_CMap_Format
FT_Get_CMap_Language_ID
FT_Get_Char_Index
FT_Get_Charmap_Index
FT_Get_Color_Glyph_ClipBox
FT_Get_Color_Glyph_Layer
FT_Get_Color_Glyph_Paint
FT_Get_Colorline_Stops
FT_Get_Default_Named_Instance
FT_Get_FSType_Flags
FT_Get_First_Char
FT_Get_Font_Format
FT_Get_Gasp
FT_Get_Glyph
FT_Get_Glyph_Name
FT_Get_Kerning
FT_Get_MM_Blend_Coordinates
FT_Get_MM_Var
FT_Get_MM_WeightVector
FT_Get_Module
FT_Get_Multi_Master
FT_Get_Name_Index
FT_Get_Next_Char
FT_Get_PFR_Advance
FT_Get_PFR_Kerning
FT_Get_PFR_Metrics
FT_Get_PS_Font_Info
FT_Get_PS_Font_Private
FT_Get_PS_Font_Value
FT_Get_Paint
FT_Get_Paint_Layers
FT_Get_Postscript_Name
FT_Get_Renderer
FT_Get_Sfnt_LangTag
FT_Get_Sfnt_Name
FT_Get_Sfnt_Name_Count
FT_Get_Sfnt_Table
FT_Get_SubGlyph_Info
FT_Get_Track_Kerning
FT_Get_Transform
FT_Get_TrueType_Engine_Type
FT_Get_Var_Axis_Flags
FT_Get_Var_Blend_Coordinates
FT_Get_Var_Design_Coordinates
FT_Get_WinFNT_Header
FT_Get_X11_Font_Format
FT_GlyphSlot_AdjustWeight
FT_GlyphSlot_Embolden
FT_GlyphSlot_Oblique
FT_GlyphSlot_Own_Bitmap
FT_GlyphSlot_Slant
FT_Glyph_Copy
FT_Glyph_Get_CBox
FT_Glyph_Stroke
FT_Glyph_StrokeBorder
FT_Glyph_To_Bitmap
FT_Glyph_Transform
FT_Gzip_Uncompress
FT_Has_PS_Glyph_Names
FT_Init_FreeType
FT_Library_SetLcdFilter
FT_Library_SetLcdFilterWeights
FT_Library_SetLcdGeometry
FT_Library_Version
FT_List_Add
FT_List_Finalize
FT_List_Find
FT_List_Insert
FT_List_Iterate
FT_List_Remove
FT_List_Up
FT_Load_Char
FT_Load_Glyph
FT_Load_Sfnt_Table
FT_Matrix_Invert
FT_Matrix_Multiply
FT_MulDiv
FT_MulFix
FT_New_Face
FT_New_Glyph
FT_New_Library
FT_New_Memory_Face
FT_New_Size
FT_OpenType_Free
FT_OpenType_Validate
FT_Open_Face
FT_Outline_Check
FT_Outline_Copy
FT_Outline_Decompose
FT_Outline_Done
FT_Outline_Embolden
FT_Outline_EmboldenXY
FT_Outline_GetInsideBorder
FT_Outline_GetOutsideBorder
FT_Outline_Get_BBox
FT_Outline_Get_Bitmap
FT_Outline_Get_CBox
FT_Outline_Get_Orientation
FT_Outline_New
FT_Outline_Render
FT_Outline_Reverse
FT_Outline_Transform
FT_Outline_Translate
FT_Palette_Data_Get
FT_Palette_Select
FT_Palette_Set_Foreground_Color
FT_Property_Get
FT_Property_Set
FT_Reference_Face
FT_Reference_Library
FT_Remove_Module
FT_Render_Glyph
FT_Request_Size
FT_RoundFix
FT_Select_Charmap
FT_Select_Size
FT_Set_Char_Size
FT_Set_Charmap
FT_Set_Debug_Hook
FT_Set_Default_Log_Handler
FT_Set_Default_Properties
FT_Set_Log_Handler
FT_Set_MM_Blend_Coordinates
FT_Set_MM_Design_Coordinates
FT_Set_MM_WeightVector
FT_Set_Named_Instance
FT_Set_Pixel_Sizes
FT_Set_Renderer
FT_Set_Transform
FT_Set_Var_Blend_Coordinates
FT_Set_Var_Design_Coordinates
FT_Sfnt_Table_Info
FT_Sin
FT_Stream_OpenBzip2
FT_Stream_OpenGzip
FT_Stream_OpenLZW
FT_Stroker_BeginSubPath
FT_Stroker_ConicTo
FT_Stroker_CubicTo
FT_Stroker_Done
FT_Stroker_EndSubPath
FT_Stroker_Export
FT_Stroker_ExportBorder
FT_Stroker_GetBorderCounts
FT_Stroker_GetCounts
FT_Stroker_LineTo
FT_Stroker_New
FT_Stroker_ParseOutline
FT_Stroker_Rewind
FT_Stroker_Set
FT_Tan
FT_Trace_Set_Default_Level
FT_Trace_Set_Level
FT_TrueTypeGX_Free
FT_TrueTypeGX_Validate
FT_Vector_From_Polar
FT_Vector_Length
FT_Vector_Polarize
FT_Vector_Rotate
FT_Vector_Transform
FT_Vector_Unit
TT_New_Context
TT_RunIns
Name
.text
Size
480KB
Virtual Size
479KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
158KB
Virtual Size
157KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
264B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
28KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=12, id=261, version=35403,
count=2, id=257, version=33145,
count=9, id=257, version=35724,
count=85, id=1, productName=Unmarked objects,
count=42, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=151,
count=1, id=258, version=35724,
chacobot (1)/libcurl.dll
- IMPHASH 5662e08170ae317b2b4e62e6e6e34b14
- SHA256 9883961d1ea6b501420b8d57ac4c22e6786874fc5c33a60f51f1092db6b6d503
- MD5 406828dfb7b5b0010ae6ef42aa191edf
- SHA1 15d3aad6fb91a25b40589e6a7ffef706171ca709
- SHA512 2bb385b88c08c8cbb3679b378d5f88ff6d2a734aec38ba5d3c0735159cf013d5467e873de82853eeb1a0baee2edc1ff7aded7a6b363c2749170795570c58eb03
- SSDEEP 12288:W/clYFXBoBWhlYxOw+CyB8nRfTed5/gklQnAPlgTgc:W0lYFXBoBaYxpbBed5/gklQnAPw
- TLSH T1E4D46D55B3F401A9E167C17CC2439623E7B6B0546321A7DB07B4CABA6F13BE2673A350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
479812
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\god\Desktop\lol\vcpkg-2025.12.12\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb
zlib1
zlibVersion
inflateInit2_
inflateInit_
inflateReset2
inflateEnd
inflate
bcrypt
BCryptGenRandom
advapi32
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
crypt32
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertAddCertificateContextToStore
CertGetCertificateChain
CertFreeCertificateChain
CryptDecodeObjectEx
CertFindExtension
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryW
PFXImportCertStore
secur32
InitSecurityInterfaceW
ws2_32
gethostname
freeaddrinfo
getaddrinfo
ntohs
WSAIoctl
WSASetLastError
socket
setsockopt
recv
WSACloseEvent
getsockopt
getsockname
getpeername
connect
bind
accept
WSAGetLastError
send
closesocket
WSACreateEvent
WSAEnumNetworkEvents
sendto
WSAEventSelect
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
htonl
__WSAFDIsSet
select
WSAStartup
WSACleanup
recvfrom
listen
ioctlsocket
htons
iphlpapi
if_nametoindex
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
GetFullPathNameW
GetFileSizeEx
CreateFileW
MultiByteToWideChar
GetProcAddress
GetModuleHandleA
WaitForMultipleObjects
PeekNamedPipe
ReadFile
GetFileType
GetStdHandle
QueryPerformanceFrequency
SetLastError
MoveFileExW
Sleep
GetEnvironmentVariableA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateThread
WaitForSingleObjectEx
GetLastError
CloseHandle
SleepEx
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
FormatMessageW
LocalFree
vcruntime140
memmove
strstr
wcschr
memcmp
__C_specific_handler
memset
memchr
memcpy
strchr
__std_type_info_destroy_list
strrchr
api-ms-win-crt-stdio-l1-1-0
fflush
fseek
fputc
_lseeki64
ftell
_write
_read
_wopen
_wfopen
fwrite
_fseeki64
fgets
feof
_fileno
__acrt_iob_func
_close
__stdio_common_vsprintf
fputs
fclose
fread
api-ms-win-crt-time-l1-1-0
_gmtime64
_time64
strftime
api-ms-win-crt-string-l1-1-0
wcsncmp
strspn
strpbrk
strlen
strncmp
wcsncpy
wcslen
strcmp
strcpy
strcspn
_strdup
wcscpy
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
__sys_nerr
_initterm
_initterm_e
_errno
_seh_filter_dll
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
__sys_errlist
_cexit
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-filesystem-l1-1-0
_fullpath
_fstat64
_unlink
_wstat64
api-ms-win-crt-heap-l1-1-0
calloc
realloc
malloc
free
api-ms-win-crt-convert-l1-1-0
wcstombs
atoi
api-ms-win-crt-math-l1-1-0
_fdopen
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_header
curl_easy_init
curl_easy_nextheader
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_ssls_export
curl_easy_ssls_import
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_global_trace
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_get_handles
curl_multi_get_offt
curl_multi_info_read
curl_multi_init
curl_multi_notify_disable
curl_multi_notify_enable
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_waitfds
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_url_strerror
curl_version
curl_version_info
curl_ws_meta
curl_ws_recv
curl_ws_send
curl_ws_start_frame
Name
.text
Size
467KB
Virtual Size
466KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
134KB
Virtual Size
133KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=6, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=14, id=257, version=33145,
count=3, id=257, version=35721,
count=186, id=1, productName=Unmarked objects,
count=180, id=260, version=35721,
count=1, id=256, version=35721,
count=1, id=255, version=35721,
count=1, id=151,
count=1, id=258, version=35721,
chacobot (1)/libpng16.dll
- IMPHASH 63a0b7a59ae9bf6c6a1a400cb508669d
- SHA256 f7df77f05d2656bc682ef6e24a6c9a6ab7be26c3151b94ee0b3099b10aaecbb4
- MD5 9a2493daadb8794fa5c46b1f513722fd
- SHA1 f4d1e96db6b6fdcbe4551b9a2c137690a070042f
- SHA512 0718dd70a9ea5037813bcd107c463282cb4496eb7f0d352a3a3cce30ef0ade781d6ae110b9ec5b27603813f5a718256a7390b7cf29123c59e6a98cf78bf872e8
- SSDEEP 1536:pT3c/bKXjGSEomYvonfuQ9T4eYvoHG6n5FWt926Mxj7YAklqqZlLfyxLJ6bjK5nz:pTRtEHfu6TvGm4bn/bsLJaCuKZGS8G
- TLSH T11C147D87B2650079ED93D13C8607A117D2F1796813609BEF0BD18BBD6B23BEC693A711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
146864
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\libpng\x64-windows-rel\libpng16.pdb
zlib1
crc32
deflateInit2_
deflateReset
deflate
deflateEnd
inflateInit2_
inflateReset2
inflate
inflateEnd
inflateReset
vcruntime140
longjmp
memcmp
memset
memcpy
__intrinsic_setjmp
__C_specific_handler
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
free
malloc
api-ms-win-crt-stdio-l1-1-0
ferror
fwrite
fflush
fclose
fread
fopen
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
pow
frexp
floor
modf
api-ms-win-crt-runtime-l1-1-0
_errno
strerror
_cexit
_execute_onexit_table
_initialize_onexit_table
abort
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-filesystem-l1-1-0
remove
api-ms-win-crt-time-l1-1-0
_gmtime64
kernel32
DisableThreadLibraryCalls
InitializeSListHead
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_convert_to_rfc1123_buffer
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_XYZ
png_get_cHRM_XYZ_fixed
png_get_cHRM_fixed
png_get_cICP
png_get_cLLI
png_get_cLLI_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_eXIf
png_get_eXIf_1
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mDCV
png_get_mDCV_fixed
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_palette_max
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_progressive_ptr
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_image_begin_read_from_file
png_image_begin_read_from_memory
png_image_begin_read_from_stdio
png_image_finish_read
png_image_free
png_image_write_to_file
png_image_write_to_memory
png_image_write_to_stdio
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_process_data
png_process_data_pause
png_process_data_skip
png_progressive_combine_row
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_alpha_mode
png_set_alpha_mode_fixed
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_XYZ
png_set_cHRM_XYZ_fixed
png_set_cHRM_fixed
png_set_cICP
png_set_cLLI
png_set_cLLI_fixed
png_set_check_for_invalid_index
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_eXIf
png_set_eXIf_1
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mDCV
png_set_mDCV_fixed
png_set_mem_fn
png_set_oFFs
png_set_option
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_progressive_read_fn
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_scale_16
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_text_compression_level
png_set_text_compression_mem_level
png_set_text_compression_method
png_set_text_compression_strategy
png_set_text_compression_window_bits
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
39KB
Virtual Size
39KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
280B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=1, id=253, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=2, id=257, version=33145,
count=3, id=257, version=35724,
count=61, id=1, productName=Unmarked objects,
count=17, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=258, version=35724,
chacobot (1)/offsets.dat
- SHA256 902f0e0daa4443ce08855cce6262b4d6eb20df68033607fc16b003970d2e9ee8
- MD5 7eba4528c5d846b24b60473ef2f6dc08
- SHA1 249da64661a2baf0cf04f8a007eebd9f882cbee5
- SHA512 aa45e8e91aeade7c6dc1817be2d14d1a24e9deac00bde6b955dbf92cce5df3f6093666915a46c4f77d99b29130db51811350a1294a7e3ecc7700332c48f75bef
- TLSH T19AD0123344136D766A88C79A809542A507E5A9451690F49905CE7294AFC6E2DD81D744
- MD5 SHA1 SHA512 TLSH
chacobot (1)/offsets.json
- SHA256 028a9d86d468437417465c8726ad60c7cfccbdec823d8e108d69d34c8a58e60f
- MD5 d019e4c3c62d2f092497d28a84da4622
- SHA1 8d7567a2a656a86389fb9477e45b8f089f79c3b1
- SHA512 cd42646ccab2f314e2a53d9e0cf18f9cd05e42ad5f8f4c52fe0bcd0812055ad9c368e321e6196bdab6aec4fa5a81c61c59dc37de1aa83a76a7ccbb7fbad226cb
- SSDEEP 192:u+YWzpNAYpp5P86RxBygfoJ1K/c5wdXtNBImfVXPIZHSdZe:u+Y0PV3RxB3fs1K0KdXtNBVfV/8HT
- TLSH T1BFF19381AEE86DBA1C5EF379196F79936CBB706251034F89B4ECC70C60C896D3745B0A
- MD5 SHA1 SHA512 SSDEEP TLSH
chacobot (1)/offsets.version
- SHA256 69adeba1381cc8b7933f9b51987edd6520e67d65a0bc8b4df73fc7a6e6ce38b0
- MD5 86ab9ec41faffd536024051203cd1ba5
- SHA1 aaa17958c80c7a82f8b569b47a4c8887024a53ce
- SHA512 0140c1dfea5143d8a943c3d16d496f50e0411e069f3da252c95422483a8b6efed5ff855e6af81b4e3e3dde15625e6f86af56669d17e691a582a6c4cd4127d2c1
- MD5 SHA1 SHA512
chacobot (1)/xxhash.dll
- IMPHASH 28ae412fdf6d0850d90fb1527a06777c
- SHA256 c3af6cb87a7f70b2d8546bd01c4875bd1ff6ed9daf470d98c6da55c800f9187e
- MD5 466300a481b35f64f8e1478658b0a2c4
- SHA1 95fe877d0ceae5b52a6d9c2f063a5fa4d2ffcbf1
- SHA512 37e8b0a69fe66549985794e6ac2a48e9725d6027cf78c4c1390007fe63cb7dbd4a787807843cdcc9ec55c67dc7fefad3a2e6b5f2e4b3b5797ae42542f21fb571
- SSDEEP 768:upGDuJCwTes5ovICVq1XwxMBP5+injQZOl2GnWrkiASW2fJ:KoOcxKxPjIY
- TLSH T1A1435BDFD952A87CC7C6C33CD79F6D4649B6F6200170472583A361642D136AC8FBAE92
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
4754
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-private-l1-1-0
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
XXH128
XXH128_canonicalFromHash
XXH128_cmp
XXH128_hashFromCanonical
XXH128_isEqual
XXH32
XXH32_canonicalFromHash
XXH32_copyState
XXH32_createState
XXH32_digest
XXH32_freeState
XXH32_hashFromCanonical
XXH32_reset
XXH32_update
XXH3_128bits
XXH3_128bits_digest
XXH3_128bits_reset
XXH3_128bits_reset_withSecret
XXH3_128bits_reset_withSecretandSeed
XXH3_128bits_reset_withSeed
XXH3_128bits_update
XXH3_128bits_withSecret
XXH3_128bits_withSecretandSeed
XXH3_128bits_withSeed
XXH3_64bits
XXH3_64bits_digest
XXH3_64bits_reset
XXH3_64bits_reset_withSecret
XXH3_64bits_reset_withSecretandSeed
XXH3_64bits_reset_withSeed
XXH3_64bits_update
XXH3_64bits_withSecret
XXH3_64bits_withSecretandSeed
XXH3_64bits_withSeed
XXH3_copyState
XXH3_createState
XXH3_freeState
XXH3_generateSecret
XXH3_generateSecret_fromSeed
XXH64
XXH64_canonicalFromHash
XXH64_copyState
XXH64_createState
XXH64_digest
XXH64_freeState
XXH64_hashFromCanonical
XXH64_reset
XXH64_update
XXH_versionNumber
Name
.text
Size
43KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
240B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.eh_fram
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
352B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
88B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
chacobot (1)/zlib1.dll
- IMPHASH bd580d7531bda4ccb9d366b517af082d
- SHA256 16214e465d14ed2badb0bfb00ed2f9797ca9bb5f380e463d464caf9c55ebe2e5
- MD5 05b8f5143f3d082213e4d1e0a1a50695
- SHA1 74a71d9c074459ed0c9671dc402e697053449d85
- SHA512 d113f58040f9a4ecf4316fd2068b33180c010747999f1aba2e0d5b073d8580b6118d09d303eaa2f82dd54bc11e015c59045bae935f78cee4396beb5f4fe69d5f
- SSDEEP 1536:Lo5L+dFVRXa8tQahDhaBJeJ6FQMhX/FexTIOcIOZEcydZ/:Lo5La9Xa8+EgJrdh9C1SZEcyr
- TLSH T190838D95AAB422A2D6B34178E8D3479DD335B01403645BDF938CA7691F23AE02F353ED
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
56004
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\michas\Downloads\ext\dev\vcpkg\buildtrees\zlib\x64-windows-rel\zlib.pdb
vcruntime140
__std_type_info_destroy_list
__C_specific_handler
memmove
memchr
memset
memcpy
api-ms-win-crt-stdio-l1-1-0
_open
__stdio_common_vsprintf
_lseeki64
_wopen
_write
_read
_close
api-ms-win-crt-heap-l1-1-0
free
malloc
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
strerror
_execute_onexit_table
_initialize_onexit_table
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_errno
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
QueryPerformanceCounter
adler32
adler32_combine
adler32_z
compress
compress2
compressBound
crc32
crc32_combine
crc32_combine_gen
crc32_combine_op
crc32_z
deflate
deflateBound
deflateCopy
deflateEnd
deflateGetDictionary
deflateInit2_
deflateInit_
deflateParams
deflatePending
deflatePrime
deflateReset
deflateResetKeep
deflateSetDictionary
deflateSetHeader
deflateTune
get_crc_table
gzbuffer
gzclearerr
gzclose
gzclose_r
gzclose_w
gzdirect
gzdopen
gzeof
gzerror
gzflush
gzfread
gzfwrite
gzgetc
gzgetc_
gzgets
gzoffset
gzoffset64
gzopen
gzopen64
gzopen_w
gzprintf
gzputc
gzputs
gzread
gzrewind
gzseek
gzseek64
gzsetparams
gztell
gztell64
gzungetc
gzvprintf
gzwrite
inflate
inflateBack
inflateBackEnd
inflateBackInit_
inflateCodesUsed
inflateCopy
inflateEnd
inflateGetDictionary
inflateGetHeader
inflateInit2_
inflateInit_
inflateMark
inflatePrime
inflateReset
inflateReset2
inflateResetKeep
inflateSetDictionary
inflateSync
inflateSyncPoint
inflateUndermine
inflateValidate
uncompress
uncompress2
zError
zlibCompileFlags
zlibVersion
Name
.text
Size
53KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
272B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
104B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=257, version=35403,
count=4, id=253, version=35403,
count=3, id=259, version=35403,
count=8, id=260, version=35403,
count=12, id=261, version=35403,
count=2, id=257, version=33145,
count=42, id=1, productName=Unmarked objects,
count=15, id=260, version=35724,
count=1, id=256, version=35724,
count=1, id=255, version=35724,
count=1, id=151,
count=1, id=258, version=35724,
chacobot (1)/zstd.dll
- IMPHASH 2c40e0a8c17f455b7494f121efd989b7
- SHA256 d580e36ca1480c544c7bf8b036dcd8062168fc966a9761358f12149a22767a23
- MD5 be019017d876b97e3114d10fc38c80cc
- SHA1 92cf519932d4a1f104c9f74c6094b46bd9ad4964
- SHA512 3d39a64f5c618e81efd749edabb3a3888ec4ab9b139221abe570a683890bcf97e73c19d792058d3a65aabe1a5efd92d252a6de6476204d1b84af201bc1690524
- SSDEEP 12288:udFgvkkkrBELbqJBPWT/ZKg39+Pedp1FLuOxAtGdiNyb:winGtWT/ZKgtqedp1FqObx
- TLSH T199D48D83F29592ECD02BD139C6565363EBB67C4513006AEB83A0EF653F13AE55B34386
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
568800
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
E:\vcpkg\buildtrees\zstd\x64-windows-rel\lib\zstd.pdb
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
CloseHandle
GetLastError
WaitForSingleObject
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
vcruntime140
__C_specific_handler
memcmp
memmove
__std_type_info_destroy_list
memcpy
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
_initialize_narrow_environment
_initialize_onexit_table
_initterm_e
_cexit
_seh_filter_dll
_errno
_initterm
_execute_onexit_table
_configure_narrow_argv
api-ms-win-crt-stdio-l1-1-0
fflush
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-utility-l1-1-0
qsort_s
api-ms-win-crt-time-l1-1-0
clock
ZDICT_addEntropyTablesFromBuffer
ZDICT_finalizeDictionary
ZDICT_getDictHeaderSize
ZDICT_getDictID
ZDICT_getErrorName
ZDICT_isError
ZDICT_optimizeTrainFromBuffer_cover
ZDICT_optimizeTrainFromBuffer_fastCover
ZDICT_trainFromBuffer
ZDICT_trainFromBuffer_cover
ZDICT_trainFromBuffer_fastCover
ZDICT_trainFromBuffer_legacy
ZSTD_CCtxParams_getParameter
ZSTD_CCtxParams_init
ZSTD_CCtxParams_init_advanced
ZSTD_CCtxParams_registerSequenceProducer
ZSTD_CCtxParams_reset
ZSTD_CCtxParams_setParameter
ZSTD_CCtx_getParameter
ZSTD_CCtx_loadDictionary
ZSTD_CCtx_loadDictionary_advanced
ZSTD_CCtx_loadDictionary_byReference
ZSTD_CCtx_refCDict
ZSTD_CCtx_refPrefix
ZSTD_CCtx_refPrefix_advanced
ZSTD_CCtx_refThreadPool
ZSTD_CCtx_reset
ZSTD_CCtx_setCParams
ZSTD_CCtx_setFParams
ZSTD_CCtx_setParameter
ZSTD_CCtx_setParametersUsingCCtxParams
ZSTD_CCtx_setParams
ZSTD_CCtx_setPledgedSrcSize
ZSTD_CStreamInSize
ZSTD_CStreamOutSize
ZSTD_DCtx_getParameter
ZSTD_DCtx_loadDictionary
ZSTD_DCtx_loadDictionary_advanced
ZSTD_DCtx_loadDictionary_byReference
ZSTD_DCtx_refDDict
ZSTD_DCtx_refPrefix
ZSTD_DCtx_refPrefix_advanced
ZSTD_DCtx_reset
ZSTD_DCtx_setFormat
ZSTD_DCtx_setMaxWindowSize
ZSTD_DCtx_setParameter
ZSTD_DStreamInSize
ZSTD_DStreamOutSize
ZSTD_adjustCParams
ZSTD_cParam_getBounds
ZSTD_checkCParams
ZSTD_compress
ZSTD_compress2
ZSTD_compressBegin
ZSTD_compressBegin_advanced
ZSTD_compressBegin_usingCDict
ZSTD_compressBegin_usingCDict_advanced
ZSTD_compressBegin_usingDict
ZSTD_compressBlock
ZSTD_compressBound
ZSTD_compressCCtx
ZSTD_compressContinue
ZSTD_compressEnd
ZSTD_compressSequences
ZSTD_compressSequencesAndLiterals
ZSTD_compressStream
ZSTD_compressStream2
ZSTD_compressStream2_simpleArgs
ZSTD_compress_advanced
ZSTD_compress_usingCDict
ZSTD_compress_usingCDict_advanced
ZSTD_compress_usingDict
ZSTD_copyCCtx
ZSTD_copyDCtx
ZSTD_createCCtx
ZSTD_createCCtxParams
ZSTD_createCCtx_advanced
ZSTD_createCDict
ZSTD_createCDict_advanced
ZSTD_createCDict_advanced2
ZSTD_createCDict_byReference
ZSTD_createCStream
ZSTD_createCStream_advanced
ZSTD_createDCtx
ZSTD_createDCtx_advanced
ZSTD_createDDict
ZSTD_createDDict_advanced
ZSTD_createDDict_byReference
ZSTD_createDStream
ZSTD_createDStream_advanced
ZSTD_createThreadPool
ZSTD_dParam_getBounds
ZSTD_decodingBufferSize_min
ZSTD_decompress
ZSTD_decompressBegin
ZSTD_decompressBegin_usingDDict
ZSTD_decompressBegin_usingDict
ZSTD_decompressBlock
ZSTD_decompressBound
ZSTD_decompressContinue
ZSTD_decompressDCtx
ZSTD_decompressStream
ZSTD_decompressStream_simpleArgs
ZSTD_decompress_usingDDict
ZSTD_decompress_usingDict
ZSTD_decompressionMargin
ZSTD_defaultCLevel
ZSTD_endStream
ZSTD_estimateCCtxSize
ZSTD_estimateCCtxSize_usingCCtxParams
ZSTD_estimateCCtxSize_usingCParams
ZSTD_estimateCDictSize
ZSTD_estimateCDictSize_advanced
ZSTD_estimateCStreamSize
ZSTD_estimateCStreamSize_usingCCtxParams
ZSTD_estimateCStreamSize_usingCParams
ZSTD_estimateDCtxSize
ZSTD_estimateDDictSize
ZSTD_estimateDStreamSize
ZSTD_estimateDStreamSize_fromFrame
ZSTD_findDecompressedSize
ZSTD_findFrameCompressedSize
ZSTD_flushStream
ZSTD_frameHeaderSize
ZSTD_freeCCtx
ZSTD_freeCCtxParams
ZSTD_freeCDict
ZSTD_freeCStream
ZSTD_freeDCtx
ZSTD_freeDDict
ZSTD_freeDStream
ZSTD_freeThreadPool
ZSTD_generateSequences
ZSTD_getBlockSize
ZSTD_getCParams
ZSTD_getDecompressedSize
ZSTD_getDictID_fromCDict
ZSTD_getDictID_fromDDict
ZSTD_getDictID_fromDict
ZSTD_getDictID_fromFrame
ZSTD_getErrorCode
ZSTD_getErrorName
ZSTD_getErrorString
ZSTD_getFrameContentSize
ZSTD_getFrameHeader
ZSTD_getFrameHeader_advanced
ZSTD_getFrameProgression
ZSTD_getParams
ZSTD_initCStream
ZSTD_initCStream_advanced
ZSTD_initCStream_srcSize
ZSTD_initCStream_usingCDict
ZSTD_initCStream_usingCDict_advanced
ZSTD_initCStream_usingDict
ZSTD_initDStream
ZSTD_initDStream_usingDDict
ZSTD_initDStream_usingDict
ZSTD_initStaticCCtx
ZSTD_initStaticCDict
ZSTD_initStaticCStream
ZSTD_initStaticDCtx
ZSTD_initStaticDDict
ZSTD_initStaticDStream
ZSTD_insertBlock
ZSTD_isError
ZSTD_isFrame
ZSTD_isSkippableFrame
ZSTD_maxCLevel
ZSTD_mergeBlockDelimiters
ZSTD_minCLevel
ZSTD_nextInputType
ZSTD_nextSrcSizeToDecompress
ZSTD_readSkippableFrame
ZSTD_registerSequenceProducer
ZSTD_resetCStream
ZSTD_resetDStream
ZSTD_sequenceBound
ZSTD_sizeof_CCtx
ZSTD_sizeof_CDict
ZSTD_sizeof_CStream
ZSTD_sizeof_DCtx
ZSTD_sizeof_DDict
ZSTD_sizeof_DStream
ZSTD_toFlushNow
ZSTD_versionNumber
ZSTD_versionString
ZSTD_writeSkippableFrame
Name
.text
Size
553KB
Virtual Size
553KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
760B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
13KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=257, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=13, id=261, version=35403,
count=3, id=257, version=33145,
count=50, id=1, productName=Unmarked objects,
count=37, id=260, version=35717,
count=1, id=256, version=35717,
count=1, id=255, version=35717,
count=1, id=151,
count=1, id=258, version=35717,