KiddionsMenu[.]rar

resource
unpack001/data/defaults/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar

resource
unpack001/data/defaults/user/Settings/lib/x64/libEGL.dll
unpack001/data/defaults/user/Settings/lib/x64/libaccess_concat_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libattachment_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libcdda_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libdvdnav_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libdvdread_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libhttps_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libidummy_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libimem_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/liblive555_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libnfs_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/librtp_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libscreen_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libsdp_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libshm_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libtcp_plugin.dll
unpack001/data/defaults/user/Settings/lib/x64/libudp_plugin.dll
unpack001/version.dll

resource
unpack001/KiddionsLoader.exe

KiddionsMenu.rar

SHA256 3a8529a13c2cab46bcec183321ff266ae33623119924090ad47b222d237899f5
MD5 033bf6f2ee3472db4902f3b315830dce
SHA1 c5e25d49393fae62e5353240153253ffcabf92b2
SHA512 a0623b005088406bd15ce3893664deebaabebeac057fc1faa910bf68b9ba94e7107aab6d029a2918afc3b5149e0d9705fc6924673e785916336aef8a4b105705
SSDEEP 1572864:LTF/NZSwGFzC0ksd7dfZkTWY6Xlon3ZRrfX37soJKNAPJakOb4lWyy8RMxHdA+XD:LTF/NZSwGgsxdFVoTT7JJNPJibIpRsGg
TLSH
T1792833A9A76503F4558B1525C3CC0BEFBA1BBAAD2E3701714F8FCD48C0D71AA79B1849
MD5 SHA1 SHA512 SSDEEP TLSH

Password

YIMMENULIVE

Changelog.txt

SHA256 6f0a8d0b2eed24cadb3fe998782516179de8a51fddb3545bd6e6f34cb87ef3d6
MD5 ede4bf15a21f34e4e80cef77903d17d9
SHA1 38b1bc5096729ddbb22e2390690fb3ad13277772
SHA512 7986177dcc72d24cd95e0d430c0997bd8b0484a9f60a25d6c4d4f526db003a4f8e9acc09be75a6643c922f675a314a3f5715d904dfa3904df7c166fc76a2ac9a
TLSH
T16931BF6EA535F1AB66F350C751166601ADF91470D3AA8830FCB4C30CB9191FCEB2A63E
MD5 SHA1 SHA512 TLSH

KiddionsLoader.exe

IMPHASH 148e42694da50a299abf342896a79de7
SHA256 dfb4b91a45f0fe1ebe759725b213ce905c04c45d889c713874e8deca5a410135
MD5 090af036c2545ecffc9eb7a4ea7e5b25
SHA1 4aa89ed77d48bcb740418f10cc8959e42360c9bc
SHA512 8749cc7cf94f58fa65b2ac2e7968b0839f4d4f17f50cc7f9069bbb66dfc9bb4e6b0d893b46c6c2cd5a8b7f46fbe08613694016c9002b8c7035eca45e11b08d56
SSDEEP 12288:C0zy5Ph9C0449wQzk4dT/nvSpojPa57ylLroMw413xyMF0JAc2oEMYtWsiuJeueS:2hN4V95Etz718GL/5
TLSH
T12B35F602123DE473C0F25E95F58A19225F8A212C4B6378FDD8FDC996D29284EDBF4B91
MD5 SHA1 SHA512 SSDEEP TLSH

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

Password

YIMMENULIVE

PE Signature issue

Digest

f3:cf:8e:5e:a0:f0:a7:6f:e6:c1:bd:eb:14:e7:97:1f:0d:2f:6f:11:27:bf:f5:19:98:a9:e2:a8:92:a7:35:f1:b5:dd:c3:93:f0:3c:34:8e:f4:e2:c4:7b:1b:66:33:e5:aa:69:e4:7e:50:a9:68:d6:ea:56:d0:67:e3:aa:96:45

Digest Algorithm

sha512

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

Chains

Nov 4, 2026

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

PE Signature issue

Digest

63:dc:92:c1:39:2b:da:9e:23:e2:de:ff:a3:a2:fc:cc:f2:8d:69:0e

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

Chains

Nov 4, 2026

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

Subject

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

Serial Number

17:5d:b5:93:5a:6c:49:bc:4a:2a:9f:d7:b7:59:3f:5e

Issuer

CN=ValleyPoint Setup Group AB,O=ValleyPoint Setup Group AB,L=Calgary,ST=AB,C=CA

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Sep 29, 2025 - Nov 4, 2028

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

0

Major OS version

4

Entry point

4342

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection FreeLibrary GetLastError GetModuleHandleA GetProcAddress GetStartupInfoA InitializeCriticalSection LeaveCriticalSection LoadLibraryA SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery

api-ms-win-crt-environment-l1-1-0

__p__environ __p__wenviron

api-ms-win-crt-heap-l1-1-0

_set_new_mode calloc free malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-multibyte-l1-1-0

_ismbblead

api-ms-win-crt-private-l1-1-0

__C_specific_handler strchr strstr

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv __p___wargv __p__acmdln _cexit _configure_narrow_argv _configure_wide_argv _crt_at_quick_exit _crt_atexit _exit _initialize_narrow_environment _initialize_wide_environment _initterm _set_app_type _set_invalid_parameter_handler abort exit signal

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __p__fmode __stdio_common_vfprintf __stdio_common_vfwprintf fwrite

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-time-l1-1-0

__daylight __timezone __tzname _tzset

Name

.text

Size

18KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

288B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.eh_fram

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

1024B

Virtual Size

756B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

800B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

688B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

189KB

Virtual Size

188KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Readme.txt

SHA256 9760b735a55147ba0b2c329c5ecfc22249b9f0378a6d4e793c171ac4f50246e7
MD5 9b159c1881ef3f331f132251d5d0dc87
SHA1 d6f17fe54200e462c1ea70ae20f1fcb101bd6b6e
SHA512 53d3dfc7740e45061c410e588ab8fc3fd571ea5f42cb1bd7475f89e04c7b17883bffb9bc83529667393d38e612ad8db5d170a3ff444cafeca02e983ef2c38db0
TLSH
T1F47177029E6CA15366F3E5DBF0176643C7F2C193AA17456170ACC2EC4F71198A1761F3
MD5 SHA1 SHA512 TLSH

Settings/dxcompiler.dll

IMPHASH cb1c31153b2195b8d3996116a8998d6d
SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
MD5 ef254abdb4599bf754222ab6894ba6bc
SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
TLSH
T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Password

YIMMENULIVE

Digest

7b:60:fe:27:4e:3e:1a:5d:14:87:0f:31:63:5a:1d:dd:d9:a2:0b:00:c5:c6:0a:f0:7e:a5:f4:b8:88:bf:08:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1a:a9:a0:1d:06:a0:0f:43:aa:00:01:00:00:02:1a

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

15785744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxcompiler.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringOrdinal CompareStringW CreateDirectoryW CreateFileMappingW CreateFileW CreateHardLinkW CreateThread DecodePointer DeleteCriticalSection DeleteFileW EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

UnregisterClassA

advapi32

EventRegister EventUnregister EventWriteTransfer

ole32

CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VarBstrCat VariantClear VariantCopy VariantInit

Name

.text

Size

15.4MB

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

586KB

Virtual Size

585KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Settings/icudtl.dat

SHA256 d0f4be489b2db9021c599df3a9bf60250c80812b25cf7516ddd54f9aebfeb4dd
MD5 d4da57dd6a5958018ba2993ec04d6829
SHA1 b5d66e2a9402a46beb78705779bb815da2daf320
SHA512 aef0effee0ed59edfa777645a53144a7eb64df62bd44253f38ee6169ad0ba5f89b2971368f23f46487ca48cfc5467169523f4fb36ca2740b94414053e909ecc4
SSDEEP 98304:epcBQYOo+ddly1PUsGQDQCHHiXUxO/RJk3IWhlbntjidHp8L:epcBhORoZbHiXUxO/RJk3IWhlbntjEa
TLSH
T12CC62903A2FB4EC2F9FBAF70D9F552679567BD49AE32805911042F3B1C333A08665762
MD5 SHA1 SHA512 SSDEEP TLSH

Settings/mspdf.dll

IMPHASH 8971f6ec52505de7049220663b7ba8ae
SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
MD5 925d01da4b5aa81778a3e9d84394e794
SHA1 7405341d10fef12873262919928653c4a4af433e
SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
TLSH
T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Password

YIMMENULIVE

Digest

9f:93:8b:5f:47:d8:97:7f:6d:bf:77:16:0d:e8:e7:06:0e:b0:64:d9:d6:0f:a9:d9:08:d7:da:10:10:12:6c:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

10288304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mspdf.dll.pdb

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CloseHandle CompareStringW ConvertFiberToThread ConvertThreadToFiber CreateEventA CreateEventW CreateFiber CreateFileA CreateFileMappingA CreateFileW CreateIoCompletionPort CreateThread CreateWaitableTimerW DeleteCriticalSection DeleteFiber DeviceIoControl EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetActiveProcessorCount GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeExW GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GlobalMemoryStatusEx InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFileEx MultiByteToWideChar OpenEventA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueueUserAPC RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepConditionVariableSRW SleepEx SwitchToFiber TerminateProcess TerminateThread TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

winmm

timeGetTime

ws2_32

WSACleanup WSAStartup

??0?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@$$QEAU0123@@Z ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@W4PdfFeatures@23@W4PdfVersion@23@_KIW4FormType@23@V?$single_ptr@V?$PDFVector@V?$SizeT@N@pdf_base@edge_pdf@@@pdf_base@edge_pdf@@@pdf_base@3@V?$single_ptr@V?$PDFArray@D@pdf_base@edge_pdf@@@83@55555555V?$single_ptr@V?$PDFVector@PEAVPdfDocumentCustomMetadata@datamodel@pdfcontrol@edge_pdf@@@pdf_base@edge_pdf@@@83@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@V?$SizeT@N@pdf_base@2@W4ViewRotation@infra@2@V?$RectT@N@42@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@XZ ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@$$QEAU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@XZ ??0ShapeData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0ShapeData@datamodel@edge_pdf@@QEAA@XZ ??0StampData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0StampData@datamodel@edge_pdf@@QEAA@XZ ??1PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@XZ ??1ShapeData@datamodel@edge_pdf@@QEAA@XZ ??1StampData@datamodel@edge_pdf@@QEAA@XZ ??4PdfPageMetadata@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@$$QEAU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4ShapeData@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ?MakeAnnotationRenderParameters@pdfcontrol@edge_pdf@@YA?AV?$single_ptr@VPdfAnnotRenderParameters@pdfcontrol@edge_pdf@@@pdf_base@2@V?$single_ptr@VPdfAnnotationID@pdfcontrol@edge_pdf@@@42@UPdfRenderParameters@42@NW4AppearanceType@12@W4AppearanceState@12@@Z ?do_always_noconv@?$codecvt_null@_W@archive@boost@@EEBA_NXZ ?do_encoding@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?do_max_length@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Uindex@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@QEAA_NXZ ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@QEAAXXZ ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?unlock@singleton_module@serialization@boost@@QEAAXXZ CreatePrintHandler GetCryptoFactoryFunc GetPdfControlFactory GetPlatformFactoryFunc InitializePdfControlFactory InitializePdfControlFactoryEx SetGetCryptoFactory SetPlatformFactory UninitializePdfControlFactory

Name

.text

Size

11.2MB

Virtual Size

11.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

758KB

Virtual Size

758KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

585B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/app_109.sdata

SHA256 e6f1e9fcca6921088c6251de4b30c91ef75922567511403d16059e8303334748
MD5 2e5238c696b8173f2a77ec50fdf8480f
SHA1 123057d6bd5e21628c92b0d26ffb824530f56673
SHA512 6da8aec6b1e0fbdbd9d8f75654332adb834d831e87b7f6efb9458c63548893b73dcccd53a00366a243816047dd1f13e6a9474431442fff1d0cf3371d37f2480a
SSDEEP 12288:TFfUOPZQ3x4P0nChHMplzCB8fNSpofJvM2TfhuRLvZyFm:TFc1GPJsHzCB8FXmGfOLMFm
TLSH
T1B4B4232DE568CDF8BBC9D4D0B135BA64311B1FE87F40481C115DD9022BE5BB4289EAFA
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/app_116.000

SHA256 1799c4fb2e0729e19b75bfbdcf87da5867193bfe4353287d86396f5125f86660
MD5 cccda5e5e567b77a468c31716684c8db
SHA1 20644968b5de84410f23d56bc1a8862ed5b60939
SHA512 dfa0372b9833c4fc6c3a3024ec4f06e637662115751eec37c5981fbcd1f7579fa7136e74764cc8f9905aa50ab802ebd59e6202d43f620e217e35a50f30976e92
SSDEEP 12288:thfy6uEpD0HCr/G9eOZKvBMYy8GNp8KGMpfsX3mf522Dj/g4VBqluj8:thFLr/GIRGCGNp8KGefsX3Fi/g4VBql9
TLSH
T151F4331D7D606F4D621E6E49A6DB0018BE77A3FC3CC4020D1DEDC5D96722B362950EBA
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/archive_14.dat

SHA256 1997fbd9db999ebb76f31445edf15c36214af01868c30a7c4518bcaab04dc355
MD5 0cd36618d57ff97b1f49436677a44b07
SHA1 a8595a241467876bc252f2f3f4e4dc210c6b1902
SHA512 5cf073e1f980b9b467592a622a5cc42eba56aeac44c910cd0e141ba8a2959baf75e8fb988c7236674bd9282bf0bf038e463775af2723c262212b0ca52bfe3865
SSDEEP 12288:4ios1y3V/BlRSc29VwTSUvbJTX4t88aOdKtNGpD8p8AuCzrLJ:3z1y3CcIw+Uj2CfMKDkD8JPrLJ
TLSH
T130F4233F25ABDF190DEF9BE3E91153055009B0CBF2163009279966F9F28EFEA14652E1
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/archive_60.sdata

SHA256 00c2ae47af1d9323bfaa11467b1fcac2298d02da95f69bb9ec922d59cd64d114
MD5 d9eac3efa350fe9eddce4f727af4b950
SHA1 db24c6f539b571d951b0dbd8f70b710f6c0c8dd4
SHA512 f77c59890dbbdda9509b1179fa5d4e2893ccd51a60712c975cbb9b577f3cccc2db5734dc76a51e646f6560bc4cb59318f49362b02ccae0b27c68eba4ec6af65f
SSDEEP 12288:nrq59403l5qLVx0OcuxnNYZzpOqBqHZEJ5YNFwxMRlFMjjZUYtppGpcDJyXtxeo:G5F3lkLIuNYF6UYIxMRjwJr8uU7eo
TLSH
T151F423F051A40E68194C352F8DF1D7C64472C84BF2FBBDB5DAA8B7BA479361BD42A081
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/archive_85.bin

SHA256 fc044ce36c3165de9821f230611e4ddedd9d341ce9b75cd9370fc07acf14e4c6
MD5 9172a41f347e55418bcf0503bef400e4
SHA1 bcf07bc651ce28f86e075a8ca2577af9fdd16f9d
SHA512 b17bd79a91e3dc2dcc311c77e4eaf03a34a80b2624a9fda86edf3710fcacf879012db1d4190ddfe53c15174985ccd19f47209aa4acb42c591eadc486bdb50704
SSDEEP 12288:FH/eWA1Oh7+JSqOhW67taAxfMezYMaOKQD/9jTSJD2tySePKrOlDd:Vc1OV+5OhVaAee8MaO3UJiveSrOlDd
TLSH
T16CC4233C3CD7666E11EA967C978D39964A63C3740032F0F6D79A24298E67472E1EC2D3
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/backup_122.sdat

SHA256 ff4eaa2579cb3788cc2361edeacd88f2b784cdca318a1b4a54042a7dae07a3d1
MD5 cadd38cf979dda8b2c68ce95721847ec
SHA1 a01c1e26eb624104e378a5f001d363603e0f2798
SHA512 73abefa15c19bfd6c25cf6fceb1c844f4345a4bcff07fe8290a0ee7b18c735079ca5a1e275b94bc4ae4422a0ef92424fa9949282e3fccb8b0aa4a67f225031ee
SSDEEP 12288:Ohylx8oX0gL5gKG4ta2tERibMTyR+1ILFgh8x9syQhU5KTug6cj:OhaLGKNa2tmuMTO9DAU5KTnN
TLSH
T1D4E433FB1834DBD8AEA4172854F4BC5F7AE9D8C2E154F071853F2BB68D10B2D64A19C2
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/base_51.bin

SHA256 6960417ad6ee6e5a12d58cee55a622bb2a4df9ef10113b2c70995b50c3c71fc1
MD5 113a8fa0d4a3c18502fa6e5c0c9519dd
SHA1 29b56557f6d99e40955fb2d39635804cc8a0d870
SHA512 b4654b25879269e81b1e61d60d4249a271a26ef6e19ce7f73d4b0df5cfdca70ec433cda960c4fc049c43005e358b0e58ef370a52dd0b86edaf84ff3d6f106ad1
SSDEEP 12288:fREoR8M1f2hhEzzjQd69+dbkPucOYfnbTwyyRcTgOxTqN9B4qHZi9XTIu+Nfk:5Eop1pXH+dbwbTCARcDZIXTQFk
TLSH
T141E4238D8B382785885DD5F72BD79590BDD9ED3F44AAE15F2382270C12E192A388CD1A
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/cache_29.sdat

SHA256 eaf1afa4483b61e65b5f3abbba4ffc4e127bd434218f831ecd6bd336478f9552
MD5 7ee460ed63b66d60641f023ae90bf5b1
SHA1 ae916cff30ef55314496469726ee0d9a4be7945c
SHA512 a0088fda5aae58c2a2a6f9e6d565c1ab08400a3fdf14b259ab90e6583ef76bb27055aacd0ce87785ec7de4ae6dabed67972eeff7faf3a9bb96a69de5aee7c3cd
SSDEEP 12288:pQC15o6il4Dqfd2IaBo9O0Q+GQP1TW7SVvzid/CCqtgZmJMqDjj:pQW5Cqqfd2IaK9O0Q+R3v2ZVtqDP
TLSH
T103D42323C7258F07ECB645681FBDEE51CE74088C7AA5D1F6215A9BCA020D0294DBFA5F
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/cache_46.002

SHA256 fc04e091692c5dcd01085f2033e1914f465d021bd38296d1f00cd84b24cfb446
MD5 5f42aa6b08552682d32be6b5781336b0
SHA1 fb4a6a8addb73d6fc5aefeccaa47c687fdfd0009
SHA512 017f8f549ca48bc0f0ad1e26f531c654aa67e853e7e5992e248d63d0ca78169718cccb24766be846d2f7bed774c7db039135c29e0ffac9ddf2ada299a7beac96
SSDEEP 12288:13uyXyvx7vIDIU1GwdAWaLK2p8zsFaho1n8RaR5MsM+PJcToBiKi4cG3QkYEg1V9:1eyodO1BdvaB8AFahoJRqaiKi4F89j
TLSH
T1ACE4334696797DC4906680ADEC65590C2464F237BC2D9CAC58D4E9363FC2DCCBA43ACF
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/cache_90.sdata

SHA256 7d49371e15ce67c41f2c73af611b89e8116054c908556354a09877723218b5e1
MD5 aa8035d99a0b870ac094b084afaa176a
SHA1 577d33d04ece0e46787577281ec294f233fdd245
SHA512 79290519be158cb86f0ac7b7e548d6d9fd989171586df42c806be27cd6bbe1106e0e2d04f1441ae2e6631dee92e95b52a5ec82e5efd5ba14c36b70ecf918888c
SSDEEP 12288:q9o/cAUlq6tA/AJWQD5PdtOlFVNbhJe19/R7TC5zeOoiRLMXnpRPb7vxhtwN1l:qKUHl6Acu5PdtO3jbhJe1BVTC56GLsns
TLSH
T1ADE4238009C528FA035274F56EE07D96AF5E1C0FB854ED54FEE4C24588C22DC9BA9B39
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/config_118.sdat

SHA256 87fab9ce5c3ab31abc6e8df27ff17b0242fc5138715941063f3e996bd1ec0aa1
MD5 bec84a98548068bb82e770228cd40450
SHA1 336db6556adb75e4ea8f2e4356e7ffa2006660f8
SHA512 76db90a4104e9e299f239048dd9a03e6fd7a99ff294ce7cc0a9df412c9791de837f8e2747ab4f63b6e809675b292736173843d648e5dcc9b49c468a08b4556ec
SSDEEP 12288:38XMzPacw8a/P7W9tTclySWj24IO87d64jLguvBxJHO9YT8g:38XMzScta/P7WzQwj24Qgu7JH6YQg
TLSH
T10FD423F8EED48DA9FAA79790678C7CD69C702EEB009DB81785B6393DBE134102941706
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/config_40.000

SHA256 4ad3687ea0eda48273287aea6ccf67b9f7d1010e23cdcbbe9ca825e9cd5fa145
MD5 90ac264b5439bb55f4b3653ba79dc5b7
SHA1 fc0e6934726379f7fa2b7f62d26ab39e0bec0962
SHA512 2c6705b1a0d209452a8582bdda396f3752aa8032310a941b907188c0de04a34e4de6d862f445c365696a3dc28f8577517ec38d54cc519a3efe7e1c859fd4a2b2
SSDEEP 12288:2ANn7H8XZF6CmoT8cSpNEG/LlRH5o4hZYYJOkPNIYRp8jfn2:2gTmZFAoBSMCzcYJOWNImp8S
TLSH
T1E0D4330960E631E39477DE871FEEF6A930299EF21D5653DC01039B92AEA63780311FD8
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/core_106.data

SHA256 de0d2bb056f4b431c21893fff30d042943138288e30e055487dc5dfd327fc07a
MD5 2cea1e55db399421cf259b97f8dd4fed
SHA1 b029a006b300a19f9cd78f06fb087dc8d8d68a1a
SHA512 209c4f52d182fe24ca346beeb0a824af692a318dc03ed4f5fa56470caf44e835d6677a3705b79c109df04aa6915ad2e4382f005042fe3ee2733c1aa6cc38f0ca
SSDEEP 12288:xfqLt0xOs338ldKcyqu7xMfJjkRgKj0VysU4LemNtVoJi1wHXlAN3FT2/Ryq:xyB+8+7ufYgVysU4Lezo1wVAlFTyYq
TLSH
T1D8E43394562BF9CC619E0C9422DE0DB16B9C514C408DCE93E5BB56EE2C4A23BFCC84B7
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/core_39.000

SHA256 1a27e075fed08a81632bbbd9aa61d070e4de72194e03cd5f58f54427392df40c
MD5 f8bd1e5c99a7a1a84a3297e4a5836dfd
SHA1 5066292a35f9ad3551b5ab90d86ca7863b8a426d
SHA512 632355c868507d24e2a5943801c6e21130a1a44014ca7f073d35a82703dda1655191a9c89457a7b68af1d1abbc288e9d108763c669bf7e2c7723df9ed1182330
SSDEEP 12288:0nWa0mKNcc2CsiVjCnw5DRaGz929+BRsRHsO5xt9clrhvp+3omLRUW532QAyu/X:KENMCvjB5t/Jw+wHs0ti9+3okRUW5GQa
TLSH
T16BF4335FB299640839BEB17026116795A1E6EDE3E35C8B4D29B3195A9FFCA00433CD3C
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/core_80.002

SHA256 62c5ba87689fe7f74fa76a389172a8ae7579928f82330bb48856378a10f6e5cb
MD5 0a29ef60f24d10c8b46a9c3b7e813ec9
SHA1 6c261299f51f501ef33cc0213961a9fa96b95a03
SHA512 0834760fa7d6538823954f7afd5a38859e16b06db36e235d3485610dfca6c75e415510474d6e0faa1a50aaa5cdb63992401953eb9a1e2a2bce960b60457fb202
SSDEEP 12288:Ftq8ysgfjO2JeFiEOxNdRQN9y0iJvSlsWbbAxvuXoTLHFAuPDJ4PBO3aOsa9eMF7:/5MS2JAiEOPHQ20OalXbbABpvNJ4PBOL
TLSH
T170E4337085D82D003E567BC860940DD8CA6833DD57DE3686E7ABB19188EFEA3C572F19
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/data_56.sdata

SHA256 b14724a3f9f6c3146cf03a77110975a8dd8a4c62605a4e07ffa9e7268f30aeb0
MD5 547e14bf03837cab0864157d5b4979fb
SHA1 1f8ba4f9b1bf4e6d57bf04249202ea4bf6a13ef7
SHA512 a464cc0d207b5a011d27ea05b12946599a99d8d19fc4d011a1e3c3302c78695b340092ad43ff7b5684790ddd53092a572ad5080c9fbf0a1050937b5fe782a59b
SSDEEP 12288:cDMFGlVrGYr9JDEZLEQ1BCYCZJjk/+bNIeUHRZ2xx6P/eMtiC011I3sJux:cDvVrXDwyQ1Nnt/90I3sc
TLSH
T114E4337FB63BC005C9D18F00B4AA615F4758ED80334467EEAAFA7AC2E5E14A4355E1B3
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/info_1.sdata

SHA256 3017665e98dc971566adf5b034b19786eaece91eabd6a9a81c09ed65a8dca904
MD5 a61c49b829461cd68ecddb9d419f6962
SHA1 8f9fa5d81ef3a13a9be33c725072efe8533ef9d2
SHA512 484dec6b81af137a8be301f68b35d16d5f226d10b4c1ac71be3094d4332369998a8b73e18bad0bd19ba2a27616f7aee6d5b361d9be08d7e9fa896acc981a4c46
SSDEEP 12288:LT1Xb/VkmOyd/aN2wZ/QHhFLXh1G8tuXidL9mDn3IXuj1jQNqaq2vosgXSeGfohl:1Uu/aNyhtx1wiKlWNwmoRCfoGd6
TLSH
T120F4333C31DA373C481F6C9E9C1FE18D7A22008E0741E63A5BA19A61B8D8F15D76ED6D
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/info_38.bin

SHA256 affd4a4df138c462d44eebe371377a8835b33190e79a8c938b19870c67f5353a
MD5 04a888c923fbe1a929296376711f9efb
SHA1 119777cbf16cf8ad1b0f790ddc9ff794e5c1fcd1
SHA512 1781822a70fff8240f43e5d67b42cf732fa9a972f50e4110581dcf44335cad0c1dd568ec27fedb0fcbb94b1de1743c5e76926fe9ddcd0e52295a4243424d37aa
SSDEEP 12288:G+7PrtJLrMeA/wjdbUtevpvlC5NF8ZXgnKxqYqKAuUw6cQbA+LpOLmNEZ:vvYBwjdIt45lc8ZXgnK8fwoM+LELX
TLSH
T111C423083B2D178AF6050737A87EDFF13AA3567DB20B67D372B79C1192259BE066E500
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/info_6.dll

SHA256 da439e4984cf44b48491854f81f6219f2e1ccc29c39ffd98e77e6187fe4c4723
MD5 aa34361c6a3ead75b408750c85434105
SHA1 43868bdd830ce5c8ad9d36fd8bea4b25ec1dbd41
SHA512 94a31f7ff1020beb746b71d5dec258f977fde4259524c92e9beb52196a0c4caac2ba35b911956459e937e6544fe272113c769c3cd66e2ee0e5cae924ada890b6
SSDEEP 12288:e8EUyGkBupyPfDYN31m6SxT26B13Et95CFZC7hWc9Q45DI6Hiu/G:e8EUNxMUN31KxS6B13Et9GZCNBIZ/
TLSH
T13DE43352F617B9838D27C48387838432ECF9F9A6864929B61CB345B5E1AF742F5F3520
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/log_17.data

SHA256 4dcaed2c782422eef0be478cc45da07c2a391bdd7120e8fe6e8725e883284bbe
MD5 d7c323795b2305e71f027ce2a39a822f
SHA1 3191bc4164d11fa77da343bc8694f55732645f3f
SHA512 d10e6d52234c24004a53b3d474875f65c9f06afd747e89a0e024e8958cc1462b323b16bf72fa61a05f9322f8c3416d34b00ba9e95c012a5ebdfd9864fb172aa0
SSDEEP 12288:+eOHuHUnwOEBIT/FN0B3WKYien95zaxqpOV/k373b9GlXfJ/E:+eqKUwOE0to3BYiezIyhGlvJc
TLSH
T1E0C423194482AECD9788CB78EF2E6339DA1D1F67D60E635E8E317E9F66281C10132716
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/main_47.dat

SHA256 1dbc58975b1a2fe3775ba5753140593b77faab891b98a7655be26dcf50e5da4a
MD5 29413ccae9ba14a701868aa937e959b1
SHA1 fb2b6836bc15db9dd41a5ed07b704d0a0c689705
SHA512 8298180e4dc901d821566a340274186f4d86ea7413c19287e45cd52df2d23ac7a2eb4dded2e6b439e7b96e0ced49cf52e7ebb6aac89410966ac5062012a18ca8
SSDEEP 12288:X0/JcQR/osTg6mHHrxLjvsmgzU5Gd0ZXT41TOGFZ4CIJIJS3a6Q48:X+JDRAsTgtHHlL7gz0GGt41y3vuI8
TLSH
T19DE42333432A2F0156833549B852CA544EAC71DDE4DC2E52D38ACDA31E90E5F1BF5DAB
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/main_92.sdat

SHA256 755b4bd6f7a56c9a53b7db02bae73bfa6b60035f3e2b07291c926667301c1e9f
MD5 2cc0c2842c90a964a84c4d706effa7f9
SHA1 33dda225de90063a3ac78f742ae09c47071f29ae
SHA512 6883582898cc97dc7af0a83cd6869946737c479215069d31b89549cdd42c21afaf320818579c6a4955f7ee0cd600c531fd3ddd43b062a66f0a3d0f318e38f56d
SSDEEP 12288:RMgMt2qsc+1cC6dt91vjl6gegdcryLZKS21Nm8Krs:rM3bjvh1mrK0InQ
TLSH
T16EC4236350FB5FF945861F9CC26A96E680646FCD42FE38EF297509730E9A8F44C6208D
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/meta_42.bin

SHA256 bea76ab0759eff83d125185e14f12e606cb200de99805b572588b8007623eb9e
MD5 9a506d0fecb9eb002d185b5bf7758301
SHA1 e92b5a3d9e56fade124d2058ad5a2e8a9c7716da
SHA512 d83982f288051dae41882e6c505bc6391ec709ff296f2972d2772fca65e438b02b84ad96eda2ca4d082dd5e40c5f660bcc112af74739eadd8e832336d81cf5e6
SSDEEP 12288:0TJ2v2tRX9Iv1WxBFV/Fvlt+2Oyt/ULDKby2XU3j1fA5+bGT3QsvCPuH2zLbmdrI:0TJzRX95Hxl42lqfKbyGU3jxAkbGXcgI
TLSH
T165F423BB6F66574A90693C84991D0C4336FC990F212C33C974F9FB5A8AA477F4844FA2
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/module_127.bin

SHA256 ac1d4d21a2b0540a67b43b495bf373e54b3f66f3406f7f46ccd8a5cb951c71ff
MD5 9bd38a19f753ec01270ebc05853902a3
SHA1 952bb8852b32a502202085818ec0a29dd1cf2079
SHA512 3a865ff32481ff8a588fc84b413b99bcbe3ff93936a8b25ea223ef34ed99218de3323abd4540cbd5bcc0a5c1faf310c4c311bbebf05f8263f3c191c931a982c7
SSDEEP 12288:JcEW/7g3LiWrQT+Ql9aIfmQOWS9gVQxdZi/TGFjWf/CK1+mfNOocfhUNxELTLtw0:Jch0VEyCbfVsOVpCRWf1++ghUN2T+0
TLSH
T1B6E433F843A0DB3810F10BDB6DD893CC7A6CBC527A64B56807C1CAEF9728986671C58D
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/module_26.dat

SHA256 f42bc6adbf1a2feca0902f63182ab58ba7a4136ad795cd202df8d6ba7d57878f
MD5 fd735b96fd562be646850269a3b46c7b
SHA1 6ce9b8f3991a45589fec3e911bb71eac0ae86437
SHA512 88018bab6f34838683b09a9d8d31e867d1544a9651b1c9fde0df56bda4a9b1f694234dd592478a0c82a74e1ff99335ae6370347a63da4e2ea441d7342384a898
SSDEEP 12288:fVjGTrT2KbTN84SseoUkAJ5Npr/jbrliCDUeuTTzyKDGnI+TX3F1a7l:fVa/tfFS8U1rT1rQ17yU9+L3FsB
TLSH
T188C423890CA77650DFA0686FB86F1B1DE01A7DBB9303F2209CDECAD3157543F94846A6
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/module_74.dll

SHA256 e02958df21dea0f16700dd521f7a572db420971db830bd41bb142f5ab6fbe81f
MD5 a506e077e5c3ecc89849780b268d6948
SHA1 6ca72544535eb32dd8710f52aefbdec40ce5e5e5
SHA512 0daa67fa43bcb178d448c3d02a5e6c91f352e7d5befacb60db67a92c6a32017f40b0b8d562e06bb7696731fc3807b9f267d3244844763a325e68ad907f437529
SSDEEP 12288:plzj8C7SVa7WrtEfinEakLjAByf9zl/cvhkvRxPEym4zZ1U1tVUnO:Tj8fVa6rvnEaMjmyVMhkvTPJmnUO
TLSH
T169C42306FEFB1E59653F57812D19CA75F8930E509B9748A2CAF00D979D30372C80DAEA
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/node_25.dat

SHA256 2815089208a132fcfde85cab709a24a1242334cb0dea49e966d879274db49ee9
MD5 12076f4895ee3cdea080f4daf3ac35e5
SHA1 2790b95d7e8ca64c33b2dc57c9e19605952b4eee
SHA512 4e5c6ba153ea82029da246750c4f285b710f707c3a38b8c223a8789a9bda9ef3f012a7233a6545bdb4f945e6841413a2838d07260e324f2cb8250238c1faad99
SSDEEP 12288:DTwYJYYLQvvvp7JeC9xznUBk3aly0l4b4Q5kuenUFqY7ZKi:DU0cPxVzfaU0A4+kuJsY7ZKi
TLSH
T125C42338E48AB5D7F4DB160BA21F228081B090F58BFBC59179FC504818ACF6D97BB657
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/output_129.data

SHA256 6ed593605dbe36ac3c520ed4b8bb856b6b5af8f1c03e345ce3047d9897709b27
MD5 26802acc4aa9a9daaa7161c9e146fd25
SHA1 b739d884a2f4ce54139f8f86a56c58cbeef615dc
SHA512 afcf2bd3d4d31949dd57f061dc384178e2454b4ef581ecc24f13a1b515bc69bb05d2f6374569a02982688437054df4ec73d0c3106b3721a8ccd3cbf3da72928f
SSDEEP 12288:LOBELZxP01Dx18+WM1/PPXZuJyJp+40NOLQ1XmrMmUubHSk15vjJfjZEBkp5:fLZxPiDx18+PAJG+2M1Xe3rSk15vjvEU
TLSH
T119E433879DC14F7E7B00D91EABEF66C82EDB56053E387CC0D2719CD29A6E54E984A108
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/output_31.bin

SHA256 3f8ca1904de4ffd26936a38742289e8947a6d60cfa2064ad861e7a053c8965a6
MD5 688ba3bcdd0252b6d530b66597f9cd00
SHA1 97432287fb7ca2312cf2df2cc3afb3fbd45a7e44
SHA512 071a6c7f007e52c7a004f2f264469a73b78ae77abc08e2eec683abaa4988db0003cb5d6e3c2b72ae5d0a1fe9c73d53ffd366923d8f6f681b23be0c2cc761235a
SSDEEP 12288:gcLuZRFNOY38xJ+obz5T48IjsNUzPRL/DHB9U+8SvYa95uj:gDRF0MK+oXy8IoAPRL/bY+Bvf95uj
TLSH
T138C423A0AEE3568F15FC6A43AB4C642D80F94AC167479A98E327797EF80B4D4F10161D
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/output_58.dlm

SHA256 affdc43129e4a1f807cfdec4371f539429eae7813b2317e541a3868db1f59b1f
MD5 44731d0548c754666dda0a89a67402d4
SHA1 8351ca617425f0d477adc92d6c8b213afe8c89b4
SHA512 ffab15e3ccf97fce9442a760acf7761cb5b6ae6f5008015aff55bafaaf363716aa67a0c5e7ac6ed4114aed9fa31f38442654e373bb255098aca54e39df9d59ff
SSDEEP 12288:eYfs8Fq3dwbzdXZDpCs+CfQy4Ke/WT4eXN9nGNVmv4cXHJLQjXA2LuoQ+:eysSwORZDpCmnP9tGNVmtXOjXPKR+
TLSH
T1FCC4234B4790826E7077750EEB5F2A58B852B49D77BB8AE3F50F5E1823F4810C23568E
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/proj_10.bin

SHA256 226618df14a4c59d4b36d9f6e49ed25dc3f6a8852546f08c63e992c7e11208a2
MD5 550a958790f162a7e00ad29e1c7e397e
SHA1 9a2782f524504994f822ca60542ce74aeba95f48
SHA512 7ae4a445b1ae3dc2b5d38ff7a5b73727d731f087f0fecee7b5a27a673e1372ef780e5fdb07ebf396b979086e74d330a29108522b5e744d9821b95edc1ddcc098
SSDEEP 12288:jyHqnFRXL3gIWbU7Q1ARBf3nLuJ1rZ6DQUjxfDRb7bf5j:2eFRLTWbU0Mp3nyt6DQAf1bvf5j
TLSH
T17BC423CFD01C4828D1BE782FCE28A4337B4534380E9D42468399E715BAA66D3BD576DE
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/proj_35.data

SHA256 a9f319a0665f5d13863cf274e66f7205ef49ad0017f822ddf0cf9461ca6653a9
MD5 9a92e7b7c52362fc601a3a8a9a35d3b8
SHA1 9f4eea578e0390f27fe00768904ce619ec9660b1
SHA512 bcac037ee345371d5e531a6571eb2d30b8b8170d218ce7dcfa93365e1644478d460f32f3962cbcb505fa98fef53d84458327305338be931dab4f0c216d06c7ec
SSDEEP 12288:VJ/JhsWRRNKbJ6pNouhQBrk3GJCtV8BEbZMhCYlIp/QnllMCFxP9yJ:VaWRIqoubGTqW+mVjVyJ
TLSH
T15CD423D86D3EC58C2DBE387A42F709DA74A6E48352F4F94471E8D3390BD5BE083AA115
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/proj_73.002

SHA256 c6f9a5ac58a464d4b6dbb2b96a5b79016a02a3bbc061732e8a591623dfcc8fd4
MD5 5c5fef734fe0124cdd25ca324479cc11
SHA1 d50f7bdc1c94b9301bc13ec9cbcf622478527682
SHA512 0c7904de01d11540d0092b276fd17a5016628a161c83fa823edf6373dfcc7c2aa563961166983e9fffee3e62fc792dbe01a3d9b7a854121059b3cd962871d8a7
SSDEEP 12288:jXOQEWbRHs+nCG6/KN4jyE2roRVHOy4OVtzdJzmsjLxO0MxoN+N4h+mF3byo0YWA:rOQ7RHs+Cl/XyEsqVftV5/mYx1AmFV0C
TLSH
T106F42394044B471F0151CFEC6EA7BE16E2A36982F8181EDFA3C95894702E74D14AF2FE
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/record_0.002

SHA256 dd4c774cfcb41029777ef2add534784147dc38d3821fdcb38af1386a6162b4aa
MD5 0d826b056722f5fded1eb3592ae1d0c1
SHA1 4ba89917a1b4afa902bcc75f54e4efaf92d4a0cd
SHA512 c5157a2a883eb047d22f8eb5d50caf39f53bb1a8862d31809430e43a8be84646f9c99588351900a81f435ceabb3fad87a9abd4ab715e031498bd0e57d2e4c39f
SSDEEP 12288:EMtJtBpt2fn9jKcDsJt5AwyZZam+TO8n5GlWT2oRlFw+bL7ndqduuSg+TcPN47QZ:EMtzM/9jKfVm+TOqhT1lFfndqduuuEGm
TLSH
T117F43352B5A5098CE051B0EFDBB82B69E5AF73F02CFB940F341857ED94AF20D16901AD
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/record_11.sdat

SHA256 f9d6ea7ae9bbb9e3eb0c1b6627ccee45c1215daceba55e5df64e495f778d957e
MD5 51bb4829d3e8624778c22c07dadd32e7
SHA1 8e2151b83553100ff6150f25ed6e52db0c2074a5
SHA512 d0502ef3750119d55f9fd3c6569f854a54673e0d38b08d6f63427ae635fa749bcedfc316f451d11d3d4e741995dcb36272c4c7c0d0139abe9f6002beda93bbe1
SSDEEP 12288:osBPW6EM6fanW4UwTjKJz03cutq0hBjH60CvcURMQ77/zpuqP5:osolDSW5Ty3xq0hBbutbEqR
TLSH
T108C4237D23C84223F485B89BC592F44C485F28676A7A09DCDED22DBB85B8F0B85D6707
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/record_62.dlm

SHA256 9846dbff4bf3329f9d34be350023b4981e6279797e801edf83f860327a64851f
MD5 e6926b92acb0ac4d987976cdb2ba3239
SHA1 852f2300bae469ca40ce53e12d6d7d013f838219
SHA512 5fb01143a72e862d966fe211b5caaf7f887095cd0ac3cf2f24891011044b66d08491c897430be209a4a30f60f447cf5a5a6523edf61f0c5300e57552885ba77c
SSDEEP 12288:azCDEXQpwsg88wx22mZcFeF19Aq6RqRVM7A9wnmpDxJCdtHGrzxPoWL1+sr:nDZpwsgKz5s9KRqY7znmpvCdtHGrzloe
TLSH
T12BE4232E4388AE8585066388EE90C5EF8E99AEDF780376DDFC183571E04A38E1D71DD0
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/record_70.sdat

SHA256 84a31338b830717c6176c0e7a43f8cea9b7aa3cb187c95bf03bdca747ebd24a9
MD5 64e893f0438766b3f5fedd60781059c0
SHA1 b62796ef831fcfa69ab59940bc63a2db74e2ec32
SHA512 fd3f010fa8ec82e6b0899ebc236f9b8f89674a123b8ea133f27df7afb1b93df515866621144228da3986c356228017708b8459bbcd8452e80835cabc6e521e09
SSDEEP 12288:wUSjoAz4VbOvWRiy67Byzd967H3tBC2Uopp/qaPRLrhPeGLiVPN5taPB9oX8+JkC:fPROvWRk0d9O3/dUodNtsiB+sV+7
TLSH
T178F4333FF04F96AF28C344D2AB55E20DB73B061BAAAEF93F5614B1B5C45C684536C0A1
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/resource_121.dlm

SHA256 ca2ea16ead2762eea0bbf447a5f2c0e57ad337bba305236cd27c846f8a3629cc
MD5 c21b9b1a0105d878cd34b25762c62f89
SHA1 47a7bede83ac30bcd370d15d404902aeaa70b82b
SHA512 eaa120e95f642725aa4f5790c4445d00fda48cb7f1d5ae2ac5aa86e788b332568f014ad7b4b0edef854594acec56257f5383df110e3bfd8534c3cc668da67ca4
SSDEEP 12288:JV+gnyOYMq3cEVlJvWmnoGnHw0h8uEUnRjRKO+6eyNCcu:z+gnyAq3ccL7f8UZUO+iCcu
TLSH
T1CEE423DE67CD5ECF8E0D6954E644400EF8A863AC69A1939F77D4729EC442278F3A23C1
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/resource_53.bin

SHA256 232a56df0b4c08e235f354d71ca9f584cc4cb85237b34b72b81be4b4bd251e6d
MD5 ef8f70f6e5edb1e5e968eadb1258d381
SHA1 9b90aa76efe66bf4c30895ee9b57b53c23438b81
SHA512 a108b0682763a9362e0c60abe03016dd11ff292dbbeea294fb035a79fc6a7b75ff87f32d01e46c2c8856a013c62cdc6609abc6a6ef60ecd2b1356b1cf310850c
SSDEEP 12288:kvmD5NQMEtPT+0BJDPFAejhyaUkz+JHUJvnlOHMAyNJgYgFb:s5MW6+PFAejAaUoKHUCyNJzM
TLSH
T12EC423781351CA5A8A0B376EEAB42D311535EE616DD8C8C40FF31F562F75E30A88A935
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/resource_7.sdata

SHA256 f10dd795402d5337fc4d2639b8e3ff23a4791997b2ff74ea9a697e44111ca82a
MD5 7aaf1435a70cbf2eaffef7870e0275e5
SHA1 2372c7c2f643269bd242360e2289b4886ca15a09
SHA512 984dab20f87d12cef57c88ab1c5774d983b7dc17118aaf2d9f057448af4090c62ce4e3b09aad4209f636b8084fa9441b3749f2a5f213a8441c8c456b6f391529
SSDEEP 12288:SJTKoW3DXzoDhoSUk4gQHDVAC2tIDavwD9592xEK+RmMG4vocCgNxl0k7Gse:SJKoW3LRoQjV/2SaYG1+RmMwVyllU
TLSH
T152F423386D6A64FDACA65024B0F0A3F561117FCD7814E395D1D898420523BFBA2F36BA
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/resource_95.bin

SHA256 2c372c26d9b7cdafef65a2689cbc940b46982f2d331973aa89dd6728fd82fe1b
MD5 4a98d42f183dbfa54ac42133237f5ff9
SHA1 bc1fb39e09674f03562af0f25b75ad11966c2d4f
SHA512 410bfada21a11f4958e5b29f6775e1b54db5ff35538578b985b4f21e1332b7a388a2170eb1ab21ebf401739078b0b14e19e00f6c23243d6d3c6518f620d7e735
SSDEEP 12288:4s5yxuJK8k81fXy0KU6XV+mOJb1xo+l9GkI7uDEoylWk+:J5y78kOq0KTXV+xlo++ToyYk+
TLSH
T140C42369578CE85822601C397636D8BFB93CC8F1CE4D25925F9989123F9C701E5CAACE
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/sample_109.bin

SHA256 d0de368e953bd7645e5557c25b92082221723b4821eca61a41fbeb9deccc2a33
MD5 77c8e1bd7174abd8c41f3ea4ecf10adb
SHA1 bc38392c8f4bc8017ec31ffc7ade0b7f36fbd25c
SHA512 e182c0121f82b705a4acb1a738ded767494dd5fac215728e6680ddb90c8f56539fb72a24b8edd94533f01dbc8e5bcdaa622167c86b1e6b1d71c43b9965424c61
SSDEEP 12288:EsBSE3L80XxxEoQWJt9/mFQEGBv9i/cZS9vnB+5d7xURN:EylL8VDWn9/mFRg9RavnBE2N
TLSH
T15ED42313A68275F3F2C4A40D9F5A3BD41E5020BE219D072D0A7EBC9A764F78586E6C36
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/sample_93.data

SHA256 8d5666e05c1690ef9c89b28b48ca9386f3befc169c272b0b812619a51dcd031b
MD5 44f30fe5a26dcea400f3cc693af0138f
SHA1 578022a1af194abe960ceec7023c35af5b25779f
SHA512 238053004cdd7fe970db56e8187726ff7425f17fc51af5d40757a974bcf0219c06091b34dad63925e1c90c34c7723918d034ffb88b037db3bb8a9cc155469bf8
SSDEEP 12288:6Qf2x/nrDHiC5kiUD+7M1cWlOqfic8YtiMFiPqXyLCD+ecLfaieVPUQqpNv/mDKT:f2JrLf5rUSEOq/W8TCLCDGmiedUxTuDi
TLSH
T104F4239B07954D257B1230C0946AC73F3C9FDEB043589369CE6AFECAA1DB284052FB59
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_102.sdata

SHA256 59e44f2144fee05d76fdca49edce78902591d6632d08f81e44d8f4b9c016994d
MD5 d32f8304d04defd062f1698366a9b397
SHA1 13cedc79a5be0e5d366cb261e87a9adf6d9e7f55
SHA512 39f88575747127fcee271dafec852a2a992006d2185f3b076936d25bb9486ae869e53f607a0b47a835139fcc21a25267e479683cd6285ff1aeff625b7f63ab41
SSDEEP 12288:Nnspqm5YVAHVXu4DxRP0xeW3xc2IYUMT3C3krAtJqUCUtjthNiTFVF0coVuUgY:N4NY+ew/PqeW3xOEbC3krZUprAGV1h
TLSH
T1C8E42307E3442AD1BE966035612AC1BA413B1DFE58C75C3E745AB988CD396CAF0F7A48
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_12.dll

SHA256 0b57b36b95cb4f1f60afd6b8ccfa81809dd6623de85290631e64f14f8762a841
MD5 10670d4cadd6d4830bc3e46aa6a2762b
SHA1 85930d5a11d6164b5e7c3edc735ef5788142d845
SHA512 ece8656821e6e4feb6b592ddd0742b6353893ea17cb721daa6c65a7f1c3365d9cc3923cac65294a19755f8da1810244095c3d897d20bf2b5526fd53e3c498c90
SSDEEP 12288:0iaj1Quur+TEqQNcjxt0Pjaea5uaVeWscJvf2nb1AMvwybX0kCK5MVvOHLC7F/ip:VaRQZ+qcjxt0PjfaMaVFf6+QBh2VvOHh
TLSH
T163F42368C6DDC0097A613EAA68DFCB188963CDF0B22567B1F414C2B46831EA9BDF44D5
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_30.data

SHA256 fba4c3855266e087c25871b1a2655d37de7e4391e519c88fcaf32cf0a7b2ae77
MD5 31c016e29d2dc19ac8b8cfdc4babd0c5
SHA1 e01258b4a60bb490e8b436ff016c515877a55a5e
SHA512 4e96bb280bd593009dfbe48009c88fd6bebac48e4336a86d7ee70f3695756ad578a6c85dd614b8f8692abd2f98927a6cf9ce6e15d1631665bf91e7a10d4d269b
SSDEEP 12288:YiINIxjrxu3d9cauYbAYTKVs1LyyB94BF72/SqhkxmsOGlcm:4Najr07capA5qeyB94BF7shkxmZGim
TLSH
T1B8D4231EB09E624895EA21DFA550C50FCFB99993095FD3C47AB6D3135DE0D8130C27BA
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_41.bin

SHA256 ea1c9d6d70a16459c4bfbdd7f80957dc2ef3ba51978c50a6c28097e2f25f8870
MD5 5e9d9cfcd69c3f6e1adb24bf105fa068
SHA1 59324d2afff130d38b88cac04ff4d6a5b5d355b3
SHA512 44a8502b41b3dd37fcda183e82e3b384fbb4ba213e243fcf07781e3fe17428ba6d7a37b33c9064de4517febeb77130f3f2d3b0a33ae030f3d57467f0cf92011b
SSDEEP 12288:ZEs8x9EmaFx9fHSclos+lDlUhg18S+1+JUp+vj9ocEJKR92u+ETh5Ck4AP/2n1XB:ZEs8x9wkYoPyO18NV+71iu+ETakl2Bzd
TLSH
T1A205339DC64E3F4EAC1098D4BD63E532285F0EA056219CB739C5AE1974C7BF0A4DB4A2
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_57.data

SHA256 e37cb68f1837c205efa42d39532670b2e624474b1512b63e1f18ff1358f39d3a
MD5 6c2635d00638d320aa6d43f923a2c9d6
SHA1 6f5b5f50e7591c02a70e6c30e7c35f06f53a2f00
SHA512 79bc61c135bc0618043f4f26af86f0ef19be95aa578d759342e4ab2515fc39181f1a519fa21464a5bea4ec75ca139f99269c52606bc06383cec0b4f1db239431
SSDEEP 12288:agZUQPmMDIqFielT1kRDIl+zPrWPqRs5X/rjzibWDwK7BFEpo30ZAdpwf6FjXgG:lZU01IteDlDpJ/rjziQdnj30Z2pwC1f
TLSH
T11BF4337C442F0CDEB0A5A5B1ADB8A0D90B827DCD7FBD3B4DE173427AD8161B112D16A2
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_88.data

SHA256 f0238544ab849ae1633c2392d98a13f7165ff43a8259094f84053df71de29638
MD5 6c055fd2fe850b9696ad616ba438da30
SHA1 7f683d72028688079f9f63bfe556ebeb882d4911
SHA512 baaab2aed3f22082ab7f88e2af9b775c25625a7a5a6c7c9948535119cc742ac81c0e0832938f9cf3063909d1726dcbe442b5c9484c707d46262a17102687f6ba
SSDEEP 12288:Fj5QZEh6xXRJ4zOoTey7mfUmiRgot11WOjetq5ba8:kZEh6xB3oTPmJiRf1WVtUbz
TLSH
T1A0F423EEE702117EE4D4A046C350E5574BBA4BB2DF03A0FB9B8A8B90567D5937708C93
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/settings_97.sdata

SHA256 b6cb15b443246a7b8a321ee71b827e677cdf3e64b072841884ac267d66c28974
MD5 1c6c94258eac0680556beda09fd4a4b3
SHA1 d00e43033f1e4c1e854e4e6dd2b8e4646c04bd38
SHA512 d4a1f8fa542a3b2963cd5f99323cfc26258bdc966f5bcd18a1b6963b5182971a25aea08375a0f89a5eb605a68c14b6762c52fe759eecd848675c3c63af5c8943
SSDEEP 12288:agGRX/jLNzte5TfSOHS9TCLt37TZY4H5PrgF9lF5bdEFaz0P:0nNzOfSOHS9Ty35YOzgF9b5bdEZP
TLSH
T1EAE42390D9ECBF04C9CC11F54038B667B5426276DF40C778ABA4CF6C963AD1782BA4B6
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Avatar.jpg

SHA256 b9307ec780794710b1f94fdc2c4ed970c131ed0973f1a0108dc1fa3be362b04e
MD5 be97c497b134fe58230206c740238531
SHA1 df9909b8a9544347683005a75fedc49c96a2616a
SHA512 d5c5394805166bf62a9746d7208262e6940736cabe1d240ae2d3ff631f3b9ad7230873197d952eb211724c47a72c72db57f78d9acea1b66ffeaaec68c6a2f061
SSDEEP 768:4TnoJoXtnr+i5St5N+aFqxd5yxpjZ3LyYlr4OY720+p4ul3DmEXk9n9yUqRZig:4TnYo9niiY7NlQ3MxpjZ3mYlvx0UDE9G
TLSH
T1A723D1DB26A76DEBDF6C7A89827678723B2B2F2FB0231357C92D6B48181C5055120D7C
MD5 SHA1 SHA512 SSDEEP TLSH

Password

YIMMENULIVE

data/defaults/user/Settings/dxcompiler.dll

IMPHASH cb1c31153b2195b8d3996116a8998d6d
SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
MD5 ef254abdb4599bf754222ab6894ba6bc
SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
TLSH
T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Password

YIMMENULIVE

Digest

7b:60:fe:27:4e:3e:1a:5d:14:87:0f:31:63:5a:1d:dd:d9:a2:0b:00:c5:c6:0a:f0:7e:a5:f4:b8:88:bf:08:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1a:a9:a0:1d:06:a0:0f:43:aa:00:01:00:00:02:1a

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

15785744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxcompiler.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringOrdinal CompareStringW CreateDirectoryW CreateFileMappingW CreateFileW CreateHardLinkW CreateThread DecodePointer DeleteCriticalSection DeleteFileW EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

UnregisterClassA

advapi32

EventRegister EventUnregister EventWriteTransfer

ole32

CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VarBstrCat VariantClear VariantCopy VariantInit

Name

.text

Size

15.4MB

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

586KB

Virtual Size

585KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/icudtl.dat

SHA256 d0f4be489b2db9021c599df3a9bf60250c80812b25cf7516ddd54f9aebfeb4dd
MD5 d4da57dd6a5958018ba2993ec04d6829
SHA1 b5d66e2a9402a46beb78705779bb815da2daf320
SHA512 aef0effee0ed59edfa777645a53144a7eb64df62bd44253f38ee6169ad0ba5f89b2971368f23f46487ca48cfc5467169523f4fb36ca2740b94414053e909ecc4
SSDEEP 98304:epcBQYOo+ddly1PUsGQDQCHHiXUxO/RJk3IWhlbntjidHp8L:epcBhORoZbHiXUxO/RJk3IWhlbntjEa
TLSH
T12CC62903A2FB4EC2F9FBAF70D9F552679567BD49AE32805911042F3B1C333A08665762
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/include/dxcompiler.dll

IMPHASH cb1c31153b2195b8d3996116a8998d6d
SHA256 2b8f2f85788db0d80e1ce40ed414fafb8c8ee889c420192a0e7e6879bc58dfb4
MD5 ef254abdb4599bf754222ab6894ba6bc
SHA1 baa537652255d03859d19060e9fa3b23f3101eb2
SHA512 61082e988b19bbf76cd65a26ab457d1637b8e2e702267cc0c168edd75fdfadede14a15596d84932f72e091f1ba6d3d29cfcbb4830b6c012f89e561579d5f1c60
SSDEEP 196608:RzU8YRekoCaRyBOriUq2AIAZ3SMW0K+OR2Z+t1gbX8f:RI82ejyguUhZA4MWT+OgZ2ibMf
TLSH
T1B7274B032586D4DDC088C879C7678B57CA6C30E72E6BB9AFC1F412152F79EB85B29235
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Password

YIMMENULIVE

Digest

7b:60:fe:27:4e:3e:1a:5d:14:87:0f:31:63:5a:1d:dd:d9:a2:0b:00:c5:c6:0a:f0:7e:a5:f4:b8:88:bf:08:e8

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:321A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:1a:a9:a0:1d:06:a0:0f:43:aa:00:01:00:00:02:1a

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

15785744

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxcompiler.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringOrdinal CompareStringW CreateDirectoryW CreateFileMappingW CreateFileW CreateHardLinkW CreateThread DecodePointer DeleteCriticalSection DeleteFileW EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleScreenBufferInfo GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessTimes GetStartupInfoW GetStdHandle GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTempPathW GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize HeapValidate HeapWalk InitializeCriticalSection InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OutputDebugStringA OutputDebugStringW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive RemoveDirectoryW RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleTextAttribute SetEndOfFile SetEnvironmentVariableW SetFilePointerEx SetFileTime SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

UnregisterClassA

advapi32

EventRegister EventUnregister EventWriteTransfer

ole32

CoTaskMemAlloc CoTaskMemFree

oleaut32

SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString SysStringByteLen SysStringLen VarBstrCat VariantClear VariantCopy VariantInit

Name

.text

Size

15.4MB

Virtual Size

15.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.4MB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

32KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

586KB

Virtual Size

585KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

25B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

1016B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/include/gmp.h

SHA256 10e3ea336a3b8422a71cfe16e275a06d5a2b61fdb61d517cdb667c8b68d79c2b
MD5 fd70afafe6ed14c4ae916ed73837db11
SHA1 8624bf591cf657b4fc9156467ad45b202c8ec693
SHA512 311737f45ec22b27e8adb8ada061d9e69048dcfe3a7b0eba73163e83001aab65c46e5a99524f285e74be6615f3080d5f42bb5e0411149700b4a1a0e182a14a4b
SSDEEP 768:mtKm3ThBjswH4UtgczTHzAMAGKwzyJ8+Phyw+cZToydVG+7HRcpLPZoUJ2WEdNqZ:UlBjsnUvoJ8+Phyw+hpLBPJ2WE4GC
TLSH
T1F1832F2C2FCA6CD160EAD215F75BD14D4980DB2331929ADC7C4D2CD85BCB42A16EDBAC
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/include/gmpxx.h

SHA256 0011ae411a0bc1030e07d968b32fdc1343f5ac2a17b7d28f493e7976dde2ac82
MD5 ea3d21de4bcf7c696799c5c55dd3655b
SHA1 3e020a13e5ff85d6214ad56ac07395f53efa50d2
SHA512 5c102c423d0147cc7bfdb4a5fce6863605969cd3a2d914c8485b5db60d33f6efef4729cce6c63d57f81627dbd50e83438c8ab54fb525d119fe02d922ce540d97
SSDEEP 1536:ljLJi+vitB4/K8YKwUWyomDIgBxf4zj9f8LaqDyOp0e2j4DO4KV4/KX4YKztWcZk:l2xmWxg/M8OVFi2Qm
TLSH
T12DC32079208AFC919A93C031D263C5A5F650474133E8CD98B81E2678DFE3C56C7AEAF5
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/include/icudtl.dat

SHA256 d0f4be489b2db9021c599df3a9bf60250c80812b25cf7516ddd54f9aebfeb4dd
MD5 d4da57dd6a5958018ba2993ec04d6829
SHA1 b5d66e2a9402a46beb78705779bb815da2daf320
SHA512 aef0effee0ed59edfa777645a53144a7eb64df62bd44253f38ee6169ad0ba5f89b2971368f23f46487ca48cfc5467169523f4fb36ca2740b94414053e909ecc4
SSDEEP 98304:epcBQYOo+ddly1PUsGQDQCHHiXUxO/RJk3IWhlbntjidHp8L:epcBhORoZbHiXUxO/RJk3IWhlbntjEa
TLSH
T12CC62903A2FB4EC2F9FBAF70D9F552679567BD49AE32805911042F3B1C333A08665762
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/include/mspdf.dll

IMPHASH 8971f6ec52505de7049220663b7ba8ae
SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
MD5 925d01da4b5aa81778a3e9d84394e794
SHA1 7405341d10fef12873262919928653c4a4af433e
SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
TLSH
T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Password

YIMMENULIVE

Digest

9f:93:8b:5f:47:d8:97:7f:6d:bf:77:16:0d:e8:e7:06:0e:b0:64:d9:d6:0f:a9:d9:08:d7:da:10:10:12:6c:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

10288304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mspdf.dll.pdb

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CloseHandle CompareStringW ConvertFiberToThread ConvertThreadToFiber CreateEventA CreateEventW CreateFiber CreateFileA CreateFileMappingA CreateFileW CreateIoCompletionPort CreateThread CreateWaitableTimerW DeleteCriticalSection DeleteFiber DeviceIoControl EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetActiveProcessorCount GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeExW GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GlobalMemoryStatusEx InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFileEx MultiByteToWideChar OpenEventA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueueUserAPC RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepConditionVariableSRW SleepEx SwitchToFiber TerminateProcess TerminateThread TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

winmm

timeGetTime

ws2_32

WSACleanup WSAStartup

??0?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@$$QEAU0123@@Z ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@W4PdfFeatures@23@W4PdfVersion@23@_KIW4FormType@23@V?$single_ptr@V?$PDFVector@V?$SizeT@N@pdf_base@edge_pdf@@@pdf_base@edge_pdf@@@pdf_base@3@V?$single_ptr@V?$PDFArray@D@pdf_base@edge_pdf@@@83@55555555V?$single_ptr@V?$PDFVector@PEAVPdfDocumentCustomMetadata@datamodel@pdfcontrol@edge_pdf@@@pdf_base@edge_pdf@@@83@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@V?$SizeT@N@pdf_base@2@W4ViewRotation@infra@2@V?$RectT@N@42@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@XZ ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@$$QEAU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@XZ ??0ShapeData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0ShapeData@datamodel@edge_pdf@@QEAA@XZ ??0StampData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0StampData@datamodel@edge_pdf@@QEAA@XZ ??1PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@XZ ??1ShapeData@datamodel@edge_pdf@@QEAA@XZ ??1StampData@datamodel@edge_pdf@@QEAA@XZ ??4PdfPageMetadata@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@$$QEAU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4ShapeData@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ?MakeAnnotationRenderParameters@pdfcontrol@edge_pdf@@YA?AV?$single_ptr@VPdfAnnotRenderParameters@pdfcontrol@edge_pdf@@@pdf_base@2@V?$single_ptr@VPdfAnnotationID@pdfcontrol@edge_pdf@@@42@UPdfRenderParameters@42@NW4AppearanceType@12@W4AppearanceState@12@@Z ?do_always_noconv@?$codecvt_null@_W@archive@boost@@EEBA_NXZ ?do_encoding@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?do_max_length@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Uindex@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@QEAA_NXZ ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@QEAAXXZ ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?unlock@singleton_module@serialization@boost@@QEAAXXZ CreatePrintHandler GetCryptoFactoryFunc GetPdfControlFactory GetPlatformFactoryFunc InitializePdfControlFactory InitializePdfControlFactoryEx SetGetCryptoFactory SetPlatformFactory UninitializePdfControlFactory

Name

.text

Size

11.2MB

Virtual Size

11.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

758KB

Virtual Size

758KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

585B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/cef_100_percent.pak

SHA256 df959508b33b444926f952d14dc0a7b3a5e65da6f24fb6ea43fad9baa9569065
MD5 4219da3feb0447386fef2dd5c3b20e79
SHA1 aa2c5a3d3740d8a703966e32f9c44c63c9400ea6
SHA512 0d000f59bcfeb08fdf6f75204a5a3364c1bb65974d04d158a5006a774880ffb1576db44c583ad519ff62a91691b71dcacada3a8e326d48f8336e63ea15f746f8
SSDEEP 6144:/8MrUnuUE6f3urK6bYSTw3o8z0i9Q83LDW4IqYbBv1urwA95X6x:/8eMefh8b4qesL6x
TLSH
T18144F1E3B3B4BC3ED65A1A33B2510B37D97B423906930349C28685B57D56B80EADD34B
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/lib/x64/cef_200_percent.pak

SHA256 15f7f63f3ff7e6b0b69d059342d0f38e4b21f18a0ddf7c63fa0509829057eb07
MD5 b4ce3ed593a2a468537a0129f4ed10a2
SHA1 22896f7fe4f037c45fd5503d239a6fb3ecb43f7c
SHA512 3a5aec6c5ebfd2d91aa26946fae7c9618c7b29c488b4310425dad043ccdb17b086f9b6d7dbd7390131d83a901b772a3de5b9beaa12a1061fa589d760240804fd
SSDEEP 6144:cMrUnuUE6f3uruUQXaFeVGThjO7k1u3o8z0ILuBJeD5UV0Fmm8Rz4tPWS7vKv6AA:ceMeIK11jO7k15BMS0FmmQ+DOhGr
TLSH
T1FB9402E6F3F8AC39D9631A3352520A73DD7B143506A7030AC28A9D397D56B9489CD38F
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/lib/x64/chrome_100_percent.pak

SHA256 b41f48b151cc4beddb80b15f3209a83b8f5bcde5bcf28187638c2d0f9e71f406
MD5 d5c28e09fe5fe20bcd00e54fbc0a3305
SHA1 8e0702d3a34e0b96ab1bdba9af59e679d6fbb5b0
SHA512 e246cf397dcb1740a995ffc0cedeadc59dc61ebd87a1810a94c3478c83bcba0248821016e8e894d241fdf04ab3105a45386e4be52440504f2e6a269b6c805f34
SSDEEP 12288:fR3jWI7PsCnz3bqe24pOAV8x0jJ/QuCbJa9tHuMySq9TOtxxCJuA:1WlCzb4v+JYb+tHHySq9TMxxyJ
TLSH
T1A4D412D37375EC3DEA6B567BA22940B0FC3345194A92020A07DFE87A2E56748D8D97C3
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/lib/x64/libEGL.dll

IMPHASH 14cd5ffd5d2a5e20eb8ffa21377b813a
SHA256 fbbe65fb7725e6fde8c381c59d170bff153b87fdf99f531d46dcfd2c1e237f98
MD5 a1cd233bdfb48de54e18a074caad1f5c
SHA1 dced789ffa957951389482aa03c3da272bde114a
SHA512 22b7a5c4dae5d5220cf2179201c88371d0d24de3a4fdb709381059548bc238e892423f8dd2d3837706de6b554551651aed956526e8f69a89ddc1088974f8d164
SSDEEP 6144:y8BSlAEZQH65WlPum8AW7elHtE+pGMYgZwlxE:y8BEjQH0/m8AW7extsB3E
TLSH
T157749E40B5C0C072D46E25353A28D37C4ABDAD621F6959CB93B84DFD6F702C26A3726B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

YIMMENULIVE

Minor OS version

1

Major OS version

5

Entry point

133152

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

X:\RGL\cef-git\chromium\src\out\Release_GN_x86\libEGL.dll.pdb

kernel32

AcquireSRWLockExclusive CloseHandle CompareStringW CreateEventW CreateFileW DecodePointer DeleteCriticalSection EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess FindClose FindFirstFileExW FindNextFileW FlushFileBuffers FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID HeapAlloc HeapFree HeapReAlloc HeapSize InitializeCriticalSectionAndSpinCount InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExW LoadLibraryW MultiByteToWideChar QueryPerformanceCounter RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ResetEvent RtlUnwind SetEnvironmentVariableW SetEvent SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

eglBindAPI eglBindTexImage eglChooseConfig eglClientWaitSync eglClientWaitSyncKHR eglCopyBuffers eglCopyMetalSharedEventANGLE eglCreateContext eglCreateDeviceANGLE eglCreateImage eglCreateImageKHR eglCreateNativeClientBufferANDROID eglCreatePbufferFromClientBuffer eglCreatePbufferSurface eglCreatePixmapSurface eglCreatePlatformPixmapSurface eglCreatePlatformPixmapSurfaceEXT eglCreatePlatformWindowSurface eglCreatePlatformWindowSurfaceEXT eglCreateStreamKHR eglCreateStreamProducerD3DTextureANGLE eglCreateSync eglCreateSyncKHR eglCreateWindowSurface eglDebugMessageControlKHR eglDestroyContext eglDestroyImage eglDestroyImageKHR eglDestroyStreamKHR eglDestroySurface eglDestroySync eglDestroySyncKHR eglDupNativeFenceFDANDROID eglExportVkImageANGLE eglForceGPUSwitchANGLE eglGetCompositorTimingANDROID eglGetCompositorTimingSupportedANDROID eglGetConfigAttrib eglGetConfigs eglGetCurrentContext eglGetCurrentDisplay eglGetCurrentSurface eglGetDisplay eglGetError eglGetFrameTimestampSupportedANDROID eglGetFrameTimestampsANDROID eglGetMscRateANGLE eglGetNativeClientBufferANDROID eglGetNextFrameIdANDROID eglGetPlatformDisplay eglGetPlatformDisplayEXT eglGetProcAddress eglGetSyncAttrib eglGetSyncAttribKHR eglGetSyncValuesCHROMIUM eglHandleGPUSwitchANGLE eglInitialize eglLabelObjectKHR eglLockSurfaceKHR eglMakeCurrent eglPostSubBufferNV eglPrepareSwapBuffersANGLE eglPresentationTimeANDROID eglProgramCacheGetAttribANGLE eglProgramCachePopulateANGLE eglProgramCacheQueryANGLE eglProgramCacheResizeANGLE eglQueryAPI eglQueryContext eglQueryDebugKHR eglQueryDeviceAttribEXT eglQueryDeviceStringEXT eglQueryDisplayAttribANGLE eglQueryDisplayAttribEXT eglQueryDmaBufFormatsEXT eglQueryDmaBufModifiersEXT eglQueryStreamKHR eglQueryStreamu64KHR eglQueryString eglQueryStringiANGLE eglQuerySurface eglQuerySurface64KHR eglQuerySurfacePointerANGLE eglReacquireHighPowerGPUANGLE eglReleaseDeviceANGLE eglReleaseHighPowerGPUANGLE eglReleaseTexImage eglReleaseThread eglSetBlobCacheFuncsANDROID eglSetDamageRegionKHR eglSignalSyncKHR eglStreamAttribKHR eglStreamConsumerAcquireKHR eglStreamConsumerGLTextureExternalAttribsNV eglStreamConsumerGLTextureExternalKHR eglStreamConsumerReleaseKHR eglStreamPostD3DTextureANGLE eglSurfaceAttrib eglSwapBuffers eglSwapBuffersWithDamageKHR eglSwapBuffersWithFrameTokenANGLE eglSwapInterval eglTerminate eglUnlockSurfaceKHR eglWaitClient eglWaitGL eglWaitNative eglWaitSync eglWaitSyncKHR

Name

.text

Size

263KB

Virtual Size

262KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

62KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

145B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.voltbl

Size

512B

Virtual Size

126B

Characteristics

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

14KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libaccess_concat_plugin.dll

IMPHASH 0a4632681e630c8eebeeb93ae1bd84dc
SHA256 f28831b08aa6969c91f282668cd7fd02311e83a001fd31ad7ac6f1fe49fccdbc
MD5 486b252a5b4f4c60b70ebba8dc7cbaa3
SHA1 30e45ff8cfb6d34d6462a11373714c1668083156
SHA512 5963c7834c6dc17ac1d432564bf4c80b9c0a011de5aaf891933b9594a275763e93c8b1e1ef280ebaa8580c7ce07ab69f46bcc4d60aa8f096aa66e4ef7438ad7b
SSDEEP 768:7cLsu3hSEwFxXiVdEVOxY/ANxXiVdEVOxJu:oLseDw7yVTxIAjyVTxI
TLSH
T110237E679350AC58C91FC571B5ED8737A671B9571A61CAAA0328C2300FA0B85BBFD1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

732B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

616B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

170B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libattachment_plugin.dll

IMPHASH 842d6bc0885c1b6720a2bb513f206c6a
SHA256 37cf9f70a31fa6231e163348aeda9bbfc1eb8bd10efc4a5ca62cae568cbcdaea
MD5 021917923bb4eba130526a89030c596d
SHA1 cc8cd0413fb4da4a86944c085fc895f6654d3434
SHA512 34f8759d6960cc805e38be749b83cafaf5fd27b4ad3f0e25b23742aac9c85e56bdf76deba59e1277651b65dcf5d07084c152d8e8bc150ebb5c0d5853d536591f
SSDEEP 768:CW2Exuqnbs7wYxXiVdEVOx6ubhxXiVdEVOxtr3y:KEx9kwqyVTxJbvyVTxM
TLSH
T167137E67A650AC48C91FC57075EA8A3AAD75B9131EB1C7DB0364D2204FA0B81BBFD17C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

528B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

167B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libbluray-awt-j2se-1.3.2.jar

SHA256 f6c9188634b521b08abb1ea530ab94d222a52f67fa59ca829136422931c1b213
MD5 22ab31ce5bba1cd7069515e5d9c0d7d2
SHA1 85dc9099235470cf2ed9b9dd559e6965d8612b17
SHA512 55baa09d3a04dc72e43cf24ff5d84396e0d3af6f6a55b045e250a52d6fcb10f4c549570b96a57e6ff1247cdcbbd19e2ec35f4dd35e7c6649c84bb9c533fba524
SSDEEP 1536:NXtczIvxI2imckaqmB+BOY8AujaARNkwCqZ4bwUWiz3t0m6g7Up:xtbI2sBnYwj5RNtbabSKt0mKp
TLSH
T1BF63E13218B82077DB5FC173D09606C1351E25F498872D262DE9AED376BADBFCB06520
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned JAR

Checks for missing JAR codesign signature.

data/defaults/user/Settings/lib/x64/libbluray-j2se-1.3.2.jar

SHA256 75fd105e4581290801866538270a9e7badeb5a6b9fba7d00b14b8312123c2d22
MD5 9d76776c432194bb8ae70922eab1feca
SHA1 5c4df6fdf208dea9d0bb9f7a4f418477981b4131
SHA512 3b777731409ad23a2950081e7b8a87a53fe070e926ab2c1624669a85be41b95a238165f5d174e77f4c137418797f72fab45f3aee373c4ee177dda56fea896e0b
SSDEEP 12288:gZ8S4ERL9jxTjxOL6uz9BoaItnvcKSClnb5yelW0lZ/hy+3njEz1Mk:gZ87Ej1xO1A3VvcKSeb5ycWqd0+3mMk
TLSH
T138F4CE72E1C42931F5638177A6E38423382E04DDEA867D13A8F66AD7E472C5AEF03715
MD5 SHA1 SHA512 SSDEEP TLSH

data/defaults/user/Settings/lib/x64/libcdda_plugin.dll

IMPHASH 027f361674bdef3fbbc4f6e5a32075cf
SHA256 7a7d2c190907053f17ce7cdfad9d689cb6bcbcaa9e1e5d55f1071db137ef4e2f
MD5 28087f663eb9e5516cb788ffed7c6ea7
SHA1 f6d1b224d443e7064105b7196ae06033dc09ce19
SHA512 4ec25c5085e547f6751a539df919b2927bb9143283c967be472219e68f9a2e3f0babc8ed27f4620c5184ff630b0446fef91cc6b75c0ef11f3d9d2be6a57ceb87
SSDEEP 12288:6Vnl/u0/J8DPk9PX7OzfCHhINhaGvuy/12YK5sqcXYobT:6Vhu0KDPk9PKTshIWURRMUT
TLSH
T1AB056B5BE6A314ECC26BC13443976733B472F86612707EBF16A4D6303E12E605B6E7A4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

access_vaDirectoryControlHelper block_Alloc config_GetUserDir date_Get date_Increment date_Init date_Set es_format_Init input_item_AddOption input_item_NewExt input_item_Release input_item_SetMeta input_item_SetName input_item_node_AppendItem var_Inherit vlc_Log vlc_b64_encode_binary vlc_close vlc_fopen vlc_gettext vlc_memstream_close vlc_memstream_flush vlc_memstream_open vlc_memstream_printf vlc_meta_Delete vlc_meta_Get vlc_meta_Merge vlc_meta_New vlc_meta_Set vlc_obj_malloc vlc_open vlc_stream_Delete vlc_stream_FilterNew vlc_stream_NewURL vlc_stream_Read vlc_towc

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CreateDirectoryA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeviceIoControl DuplicateHandle EnterCriticalSection FreeLibrary GetACP GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileSize GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GetProcessTimes GetProcessWorkingSetSize GetStartupInfoA GetSystemTimeAsFileTime GetTempPathA GetThreadLocale GetThreadTimes GetTickCount GetTimeZoneInformation GetVersionExA GlobalMemoryStatus InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar OpenFileMappingA QueryPerformanceCounter ReadFile ResetEvent RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetEvent SetFilePointerEx SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

___lc_codepage_func __dllonexit __iob_func __mb_cur_max __setusermatherr _amsg_exit _errno _exit _fstat64 _initterm _lock _lseeki64 _onexit _open_osfhandle _stat64 _stricmp _time64 _unlock _vsnprintf abort atof atoi calloc clock fclose feof ferror fflush fgets fopen fprintf fputc fread free fseek ftell fwprintf fwrite getc getenv isalnum isalpha iscntrl islower isprint ispunct isspace isupper isxdigit localeconv malloc memchr memcmp memcpy memmove memset printf raise realloc signal sprintf sscanf strchr strcmp strcpy strcspn strerror strlen strncat strncmp strncpy strpbrk strrchr strspn strtol strtoul tolower ungetc vfprintf wcscpy wcslen _snwprintf _write _stricmp _strdup _setmode _read _open _mkdir _getpid _fileno _close _access

user32

GetActiveWindow GetCapture GetCaretPos GetClipboardOwner GetClipboardViewer GetCursorPos GetDesktopWindow GetFocus GetInputState GetMessagePos GetMessageTime GetOpenClipboardWindow GetProcessWindowStation MessageBoxW

ws2_32

connect gethostbyname getsockopt htons ioctlsocket recv select send socket

Name

.text

Size

619KB

Virtual Size

619KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

161B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libdvdnav_plugin.dll

IMPHASH ebb40a887e18180ed79c65e984c24504
SHA256 e15f2c49db514f7e7f9d51866dfd249c739832c465185c777e0955249c9639cf
MD5 4a5303dbb632f580a56627d83214227b
SHA1 4344c6f6d6687bf5c7fd480275c9a4b2a52fcd26
SHA512 335b8eddaedc57542afde15282e316eb63b22f0e07c68fa644239747aeef0d5d1bf4bad227405dcaff604d9ee61b4b33a217d17ea69e2be200d13518340b0ee4
SSDEEP 3072:IC7jGpglaVh/Y1D6FgU9GzywQFJmFgH0mVeOurFCoTGrDTnqqqGR:LSg6mefGFomg0geVrFLkXR
TLSH
T190344B56B1922CECCA2BC1308397E632F972B8560230FD7E1B64C7751F15E216B6E96C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

block_Alloc es_format_Clean es_format_Init input_Control msleep var_AddCallback var_Create var_DelCallback var_Destroy var_GetChecked var_Inherit var_SetChecked vlc_Log vlc_close vlc_dialog_display_error vlc_gettext vlc_global_mutex vlc_meta_Set vlc_mutex_destroy vlc_mutex_init vlc_mutex_lock vlc_mutex_unlock vlc_object_release vlc_open vlc_stream_Peek vlc_stream_Read vlc_stream_Seek vlc_stream_vaControl vlc_timer_create vlc_timer_destroy vlc_timer_schedule vlc_vaLog

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeviceIoControl EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDriveTypeA GetLastError GetLogicalDrives GetModuleFileNameW GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFilePointer SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__dllonexit __iob_func _amsg_exit _errno _exit _findclose _fstat64 _initterm _lock _lseeki64 _mkdir _onexit _stat64 _stricmp _strnicmp _unlock _vsnprintf _wfindfirst64 _wfindnext64 _wopen _wstat64 abort atoi calloc fprintf fputc free fwprintf fwrite getenv isprint malloc memcmp memcpy perror puts raise rand realloc signal sprintf srand sscanf strchr strerror strlen strncat strncmp strncpy strtok vfprintf wcscpy _snwprintf _write _strdup _read _open _close

shell32

SHGetFolderPathA

user32

MessageBoxW

Name

.text

Size

154KB

Virtual Size

153KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

32KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

163B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

472B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libdvdread_plugin.dll

IMPHASH b7af8b795333a0ca0174a05da5158471
SHA256 cfb94e3e21ae82f05cf85e9f8be9ee012f6b7baa084c0ecca8c30310442959ef
MD5 39d641807eab8c8e40d7eccf30960b4e
SHA1 28413be490300791eb2d340a05b12e1ac2d1d24f
SHA512 a8740bd4306e6ed495288b8af2fdc668dcfb3cb122d4e67cd79945a4045a4fc07740e7f8f0cf22698564bd2f28513d70d121dfa66fc2944b6b58f19a6ebfd208
SSDEEP 3072:Bc25hZLo008Zo6BpLFLyfo+thjCpTZqdqsY:qUt0ibL0fZ/jWwY
TLSH
T105F34B16F15268ECDA2BC23057A7EA32F97178960330BE7D5B64C3741F25A2077AD86C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

block_Alloc es_format_Clean es_format_Init var_Create var_GetChecked var_Inherit vlc_Log vlc_dialog_display_error vlc_gettext vlc_vaLog

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

CloseHandle CreateFileA DeleteCriticalSection DeviceIoControl EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDriveTypeA GetLastError GetLogicalDrives GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter ReadFile RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFilePointer SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__dllonexit __iob_func _amsg_exit _errno _exit _findclose _initterm _lock _lseeki64 _mkdir _onexit _stat64 _stricmp _strnicmp _unlock _vsnprintf _wfindfirst64 _wfindnext64 _wopen _wstat64 abort atoi calloc fprintf fputc free fwrite getenv malloc memcmp memcpy perror puts realloc signal sprintf sscanf strchr strerror strlen strncat strncmp strncpy strtok vfprintf _write _strdup _read _open _close

shell32

SHGetFolderPathA

Name

.text

Size

106KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

164B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

116B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libhttps_plugin.dll

IMPHASH f22747f7e28bb1bec4fa071091455406
SHA256 28f15014417c43e316af562b5809a54238a2b333fd048f83827d11c8518d08ba
MD5 a5d6bd737c9aedac80d6a61a67e2e641
SHA1 bab498a913367e99dbadc6e4065dc68703cc8ca3
SHA512 6e1588d801f8dc233dd730684989b69f3bcd9be5797ab94baacddbf0e48e48238ad5cc74c993aa2fc030607111924621a113afdde87ac66b9fa213d975ca9392
SSDEEP 3072:cjr8WMnJhvs/de6D8eaN7FlNic7bGXzMSl218JHdxCqkqqi:YQvJhvCdeQEFFlj/GjMl18JHDC8
TLSH
T14BF34C67E29254FDC65BC13456EA9736F831B8220730EEAE4774D6312E10F507B9E728
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

block_Alloc block_heap_Alloc var_Inherit vlc_Log vlc_UrlClean vlc_UrlParse vlc_b64_encode_binary vlc_cancel vlc_clone vlc_cond_broadcast vlc_cond_destroy vlc_cond_init vlc_cond_signal vlc_cond_wait vlc_control_cancel vlc_credential_clean vlc_credential_get vlc_credential_init vlc_credential_store vlc_getProxyUrl vlc_getaddrinfo_i22e vlc_gettext vlc_http_cookies_fetch vlc_http_cookies_store vlc_interrupt_register vlc_interrupt_unregister vlc_join vlc_memstream_close vlc_memstream_open vlc_memstream_printf vlc_memstream_write vlc_mutex_destroy vlc_mutex_init vlc_mutex_lock vlc_mutex_unlock vlc_restorecancel vlc_savecancel vlc_strerror_c vlc_testcancel vlc_tls_ClientCreate vlc_tls_ClientSessionCreate vlc_tls_Delete vlc_tls_GetLine vlc_tls_Read vlc_tls_SessionDelete vlc_tls_SocketOpenAddrInfo vlc_tls_SocketOpenTCP vlc_tls_SocketOpenTLS vlc_tls_Write vlc_uri_fixup vlc_uri_resolve vlc_vaLog

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

DeleteCriticalSection EnterCriticalSection FormatMessageW GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep SleepEx TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

___lc_codepage_func __dllonexit __iob_func __mb_cur_max _amsg_exit _errno _exit _gmtime64 _initterm _lock _onexit _stricmp _strnicmp _time64 _unlock abort calloc fputc free fwrite getc getenv islower isspace isupper isxdigit localeconv malloc memchr memcmp memcpy memmove realloc signal strchr strcmp strcspn strerror strlen strncmp strspn strstr strtol strtoul tolower ungetc vfprintf wcslen wcstombs _write _strdup _open _close

ws2_32

WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAGetLastError WSAWaitForMultipleEvents __WSAFDIsSet freeaddrinfo select

Name

.text

Size

101KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

280B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

162B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libidummy_plugin.dll

IMPHASH 1df9e74f4e9cfaa70e57d14a4542e958
SHA256 2b2bb121de5d434a8fcb9d2bad73e3d4c20fba109417969b4f901a1569364c04
MD5 3f42f3d4558afdba7fdac85b842cdb42
SHA1 99bb323d783a15ca60674367cd2167d84a997229
SHA512 56875b2514b1a2a3b61ba83481dea20666243cd43738ab7c099555de32cefe7092f0e07c4e46eff7e550bcf7ce7442f5b300f695f5afa95c37248e8062c07452
SSDEEP 768:v26oPk8nqzeeQxXiVdEVOxam9xXiVdEVOxGT8O:v26IktieCyVTx5zyVTxk8O
TLSH
T12C138E679714AC49CD0BC57074E9863AE9B5B9521AB0CBEB0364D2704FA0741BBFE1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

696B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

163B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libimem_plugin.dll

IMPHASH 5bb7568c3c7404fadffd9a95b4b48cf5
SHA256 200cff43d8b8e7f569dc37df62619f61b78cbcdd6280c3401364e4c9f5ee5619
MD5 cc2b2704a9565b5d55739c6cfda876aa
SHA1 f02774528efe749e35bda06e066f4fd718a32e70
SHA512 94d23b9e10ee9c7246e3072166c7ff105c14938d3b1b5c488dcc975c89dba3c98d1303c5a9ebcf245e1dbe14c2dab1d4bdeeef7814eda0ed4972d2dd651dca25
SSDEEP 768:+4RVUL5iEmwgxXiVdEVOxzKxXiVdEVOx7FR:+4YQJwyyVTxcyVTx7FR
TLSH
T1DE138EA7A650AC89CD0BC57075EA4A36A975B9521A71C7EF0324C2304FA07417BFD1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

684B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

536B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

161B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/liblive555_plugin.dll

IMPHASH 5e05b03185cd50c6283d344ad0352ba6
SHA256 135ab5807ccf7d2af2913a43472df2182607e9daedd073b414cfc46e462a2870
MD5 d3912ba8aa5657db2fb4df4b3ae6ba0b
SHA1 e82c998bc6ad9b45810ac7b55929ed690a0df94a
SHA512 29298b7b88b9fdf368807a85bf514e94486c8aad65e14a9f2e0c3bcc7c81cf049f20369dd61941388167a27967f094d6ebcedf08df9dabb37a92240e81c68b90
SSDEEP 6144:NXPjRXFwbpefH3OG+k84UG2XPy8Btq3Ayd/ObEpVv7IzJFMy2IUbqG/6JjjAClP4:NXVWdef+b/7L/Bbw1v9y2IUb8YTSG
TLSH
T1C2D43A57AF6328FCC627C1708277A731A731F8110228BE6E36A8C7325F59D254F66678
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

ToCharset block_Alloc es_format_Clean es_format_Init var_Create var_GetChecked var_Inherit var_SetChecked vlc_Log vlc_UrlClean vlc_UrlParse vlc_b64_decode_binary_to_buffer vlc_credential_clean vlc_credential_get vlc_credential_init vlc_credential_store vlc_demux_chained_Delete vlc_demux_chained_New vlc_demux_chained_Send vlc_dialog_display_error vlc_gettext vlc_killed vlc_mutex_destroy vlc_mutex_init vlc_mutex_lock vlc_mutex_unlock vlc_rand_bytes vlc_stream_Peek vlc_stream_Read vlc_timer_create vlc_timer_destroy vlc_timer_schedule vlc_uri_compose

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

CloseHandle CreateSemaphoreW DeleteCriticalSection EnterCriticalSection FormatMessageA GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter RaiseException ReleaseSemaphore RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetLastError SetUnhandledExceptionFilter Sleep TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WaitForSingleObject WideCharToMultiByte

msvcrt

___lc_codepage_func __dllonexit __iob_func __mb_cur_max _amsg_exit _ctime64 _errno _exit _gmtime64 _initterm _lock _onexit _snprintf _stricmp _strnicmp _time64 _unlock abort calloc fputc fputs free fwrite getc getenv islower isspace isupper isxdigit localeconv malloc memcmp memcpy memmove memset perror puts qsort realloc signal sprintf sscanf strcat strchr strcmp strcpy strcspn strerror strftime strlen strncmp strncpy strrchr strstr strtol strtoul tolower toupper ungetc vfprintf wcslen _write _strdup _open _close

ws2_32

WSACleanup WSAGetLastError WSAStartup __WSAFDIsSet accept bind closesocket connect gethostbyname gethostname getsockname getsockopt htonl htons inet_addr ioctlsocket listen ntohl ntohs recvfrom select send sendto setsockopt socket

Name

.text

Size

388KB

Virtual Size

388KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

164B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libnfs_plugin.dll

IMPHASH 6492fb72dbd3cb78d85aa6169324172c
SHA256 29b9d3e676964223cd09e8836978a2d3b7c8e2bf5a03f406a4f34b7fd1f8d2ce
MD5 6a777a460092ec80e33dc7ce8375d16d
SHA1 46b6cc6c0415f80d642c25089e3ed2c3019262d4
SHA512 f92a8e934c1faa9766ab0933bf4dab944286ace34cc6663541b344f5d7654390508ee742a756e290c807ec799d50b6862f4896d93b77214e7592433605e66661
SSDEEP 6144:xuq5iH17IkJ8nDvmZo7Oj9Vwk80vvbaBL:xl5q7F2nrmZVVwk8EvU
TLSH
T1A3540A26D69625BCC66F82308257D3327971F864D721BD7F04A5CA382D18C617BBFE28
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

access_vaDirectoryControlHelper var_Inherit vlc_Log vlc_UrlClean vlc_UrlParseFixup vlc_dialog_display_error vlc_gettext vlc_obj_calloc vlc_poll_i22e vlc_readdir_helper_additem vlc_readdir_helper_finish vlc_readdir_helper_init vlc_uri_decode_duplicate vlc_uri_encode

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetSystemTimeAsFileTime GetTickCount GetTimeZoneInformation InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

___lc_codepage_func __dllonexit __iob_func __mb_cur_max _amsg_exit _errno _exit _initterm _lock _onexit _time64 _unlock _vsnprintf abort atoi calloc fprintf fputc free fwprintf fwrite getenv localeconv malloc memcmp memcpy memset puts raise realloc signal sprintf strchr strcmp strcpy strerror strlen strncmp strncpy strrchr strstr vfprintf wcscpy wcslen _snwprintf _write _strdup _open _getpid _close

user32

MessageBoxW

ws2_32

WSAGetLastError WSAIoctl WSAStringToAddressA __WSAFDIsSet bind closesocket connect freeaddrinfo getaddrinfo getnameinfo getservbyport getsockopt htonl htons ioctlsocket ntohl recv recvfrom select send sendto setsockopt socket

Name

.text

Size

193KB

Virtual Size

193KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

228B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/librtp_plugin.dll

IMPHASH 9291532ba75483bc643b94d5fad59688
SHA256 721e0ba3a3c9bacce1a4516bfcfd8322cb37d3037650b3c36117452537ba9e50
MD5 71ad272e128d31dc7e9ad4834ca5b5d9
SHA1 4717698ae2dcd8d633a61ade99516d5028d4a56b
SHA512 5d2d132bd2cec7bc8c0fa8c58b56bf810eae34f619895e3946a2f7fb7c4f223d26238035576036f3afa679fcbdf39f27f3e966e7631fc195a78cb6bc8ee0379f
SSDEEP 6144:nYV+A66NDbZ08DXvTfFpbt3DUj3CDfyE80rvNlgLd3x5GUqJXQyDXeOTfYdqbXft:nYMJ6NDbZZpFDU7zE84L8CreoXD
TLSH
T1DAE48C57E6A320FCC62BC13183576733B471F82612B06EBF16A4D6302E66F506B5EB64
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

aout_FormatPrepare block_Alloc block_Realloc es_format_Init mdate net_Connect net_OpenDgram net_SetCSCov var_Create var_GetChecked var_Inherit vlc_Log vlc_cancel vlc_clone vlc_demux_chained_ControlVa vlc_demux_chained_Delete vlc_demux_chained_New vlc_demux_chained_Send vlc_dialog_display_error vlc_global_mutex vlc_join vlc_restorecancel vlc_savecancel vlc_strerror_c vlc_testcancel

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext RegCloseKey RegOpenKeyExA RegQueryValueExA

kernel32

CloseHandle CreateDirectoryA CreateEventA CreateFileA CreateThread DeleteCriticalSection DeviceIoControl DuplicateHandle EnterCriticalSection FreeLibrary GetACP GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetFileSize GetLastError GetModuleFileNameW GetModuleHandleA GetProcAddress GetProcessHeap GetProcessTimes GetProcessWorkingSetSize GetStartupInfoA GetSystemTimeAsFileTime GetTempPathA GetThreadLocale GetThreadTimes GetTickCount GetTimeZoneInformation GetVersionExA GlobalMemoryStatus InitializeCriticalSection LeaveCriticalSection LoadLibraryA LocalAlloc LocalFree MapViewOfFile MultiByteToWideChar OpenFileMappingA QueryPerformanceCounter ReadFile ResetEvent RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetEvent SetFilePointerEx SetUnhandledExceptionFilter Sleep SleepEx TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection UnhandledExceptionFilter UnmapViewOfFile VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WideCharToMultiByte WriteFile

msvcrt

__dllonexit __iob_func _amsg_exit _errno _exit _fstat64 _initterm _lock _lseeki64 _onexit _open_osfhandle _stricmp _time64 _unlock _vsnprintf abort atoi calloc clock div fclose feof ferror fflush fgets fopen fprintf fputc fread free fseek ftell fwprintf fwrite getenv iscntrl isspace isxdigit malloc memchr memcmp memcpy memmove memset raise realloc signal sprintf strchr strcmp strcpy strcspn strerror strlen strncmp strpbrk strrchr strspn strtoul vfprintf wcscpy _snwprintf _write _stricmp _strdup _setmode _read _open _getpid _fileno _close _access

user32

GetActiveWindow GetCapture GetCaretPos GetClipboardOwner GetClipboardViewer GetCursorPos GetDesktopWindow GetFocus GetInputState GetMessagePos GetMessageTime GetOpenClipboardWindow GetProcessWindowStation MessageBoxW

ws2_32

WSACloseEvent WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAGetLastError WSARecv WSARecvFrom WSAWaitForMultipleEvents __WSAFDIsSet closesocket htonl htons ntohl select

Name

.text

Size

490KB

Virtual Size

490KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

17KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libscreen_plugin.dll

IMPHASH 5ed2f0d31bdcdaa437b87e63caf0c9bd
SHA256 b697e893ec8aa81b12cb84db88a2f18861231af96c5129265a2905c9ed29ebd3
MD5 c5eeeae5a9425995fdc3ff26f8a9f629
SHA1 d211c2216e72a28f41ed88714d8e6f4d82cf384d
SHA512 94ed899f8103359846cf3c128430b9a760eb3c3899976d01aa99b32dd10c39609e4218705644270ca316929eab3e73096c757311686c6a550fa2d962463c07cf
SSDEEP 768:RrFvSPSFC+qwM2xXiVdEVOxQmTxXiVdEVOxafD:RrFvSPkCfwM0yVTxZlyVTxafD
TLSH
T190338DAB92506CCCC84B89B176E95637E971BD221A71CBEB4214C1310F60B907BED6BD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

libvlccore

block_Init es_format_Init image_HandlerCreate image_HandlerDelete mdate module_need module_unneed mwait picture_Release picture_Setup var_Create var_GetChecked var_Inherit vlc_Log vlc_object_create vlc_object_release vlc_path2uri

advapi32

CryptAcquireContextA CryptGenRandom CryptReleaseContext

gdi32

BitBlt CreateCompatibleDC CreateDCW CreateDIBSection DeleteDC DeleteObject GetDeviceCaps SelectObject

kernel32

DeleteCriticalSection EnterCriticalSection GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetLastError GetModuleHandleA GetProcAddress GetSystemTimeAsFileTime GetTickCount InitializeCriticalSection LeaveCriticalSection QueryPerformanceCounter RtlAddFunctionTable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetUnhandledExceptionFilter Sleep TerminateProcess TlsGetValue UnhandledExceptionFilter VirtualProtect VirtualQuery

msvcrt

__dllonexit __iob_func _amsg_exit _exit _initterm _lock _onexit _unlock abort calloc free fwrite malloc memcpy signal strlen strncmp vfprintf _write _open _close

user32

GetCursorPos GetSystemMetrics ReleaseDC

Name

.text

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

756B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

644B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

163B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libsdp_plugin.dll

IMPHASH 278f9cb37a30ea4253a57f5ec57e360f
SHA256 b26704c95ecf4b10aaa234b0a5f9eeb9ab24149255568cda2efb5b236f49909d
MD5 8dd59ec9e74d35586f6c2e2796b5e8eb
SHA1 687c6afc69acf7339a6cd3f8083923b75a44fbf7
SHA512 ed68ec9e3d2c0471528dc52e5269af39a26e740ca0846a2568db9d8dce04f6174203521178374785e8987f66c45d70ff797978a95c9a74814dbdd0292fe61a90
SSDEEP 768:mZYNlkDJMUlwoxXiVdEVOxwX2RzxXiVdEVOxD:mZYjkDCuwayVTxOaFyVTxD
TLSH
T1C5138E67A750AC48C91BC57075E58B3AA9B5B9531E61C6EB0328C2204FA07857FFD1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

520B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libshm_plugin.dll

IMPHASH 9c336fc03aabd21c5e047c9a45bf203f
SHA256 e177d9bd2682ca0b515672c0ec9f4327cca79f262465ba09b794fcb61df9f957
MD5 5f0a149e8fa1bbebfdb286e51b0a52ab
SHA1 8c7274c96b7c7d4ad5469bd70e7198bb59e8dd68
SHA512 b0c6f90112bdf361e0ac8970d6b523bac6eccc96e7653bdd7ab3fda3408e33571e4f4a10f6c567dd4e1807cf8e0922ebdb35d8c0126fb4f0c7fde0541ff9d074
SSDEEP 768:923nJ0OjH+PAfGZsFpIxXiVdEVOxElaxXiVdEVOxboN:M3n1jGA4mp6yVTxiAyVTxU
TLSH
T1CC237D67E684EC58C90BC57075FA4636FAB1B9620D61CB9A0368C1304FA0745BBFD1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

684B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

560B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libtcp_plugin.dll

IMPHASH fd321dcea42d32f0d9419d9e770da991
SHA256 a522e4175106896b700b3dc014de9d08669206857a804fc0ac7d9b42f828cc04
MD5 e710d9fc02c23890192586facf5a1650
SHA1 875e5804c8b92e67f661aa5744133c34f45536d5
SHA512 d0a93236c3f6e5456943a5f31a7dfc198b10e259e3e3052ffee609070ef66fabcc30876d336c892859087ce1bafa6c8141c2ec48fdbd75ded9b2564bb12a9f8e
SSDEEP 768:FFAHPkO5XywfxXiVdEVOxp3xXiVdEVOx6Ne:FUPZCwJyVTxLyVTxX
TLSH
T1E9138FABA750AC48C91BCA7075EA8B3AA975B9521E71CBDB0354C1204FA07817FFD17C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

528B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

108B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/lib/x64/libudp_plugin.dll

IMPHASH e6b0e1924a89597cb890a4de7527f342
SHA256 dbf280383480e463170eea81f78bac9030186f1ff32c7c3f250763517f96c9f3
MD5 c22e2ed46403edfea1a798c65a02802d
SHA1 03a59562398c70fd1957240b991ce78b8ad4b115
SHA512 e9550c3e26b70e81c134c5f14ca4b90757f2f3243bd2b5516486bf7fff233ec6badb4237d78d10561dddc5d78e36ad040f3d3301a88db9fa6569df23b57a77fc
SSDEEP 768:w3bjnZUrHUULzpExXiVdEVOxtAxXiVdEVOxNm:w3Cr0UfpuyVTx4yVTxc
TLSH
T1C6238F67E684AC8DC91FC97175E94A36F9B579522961CBEA0324C1300FA0781BBFD1BC
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.buildid

Size

512B

Virtual Size

53B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1024B

Virtual Size

672B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

572B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

104B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

112B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/4

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/Settings/mspdf.dll

IMPHASH 8971f6ec52505de7049220663b7ba8ae
SHA256 44d2c0f7ed940a323c25d06bf7afc3afa488ed8fff09bec109258296ed84fcfa
MD5 925d01da4b5aa81778a3e9d84394e794
SHA1 7405341d10fef12873262919928653c4a4af433e
SHA512 12d626c04cdeed8287809151276ce2e4d0f9fde16678b104c17ebbaed4ee40cb3d578c21752d246c1cf2a0c68044e8c5763de983a7f2aea849aee41e711d2e88
SSDEEP 98304:GK20/CdTySbSI8/tkyTQQv/45Ok16RMBQjhWOvPy/UO0JV6xEnwjql1UntpC4X0B:GOTTQQv/45OkMK/7Y6x9bXC
TLSH
T1A5176D06BB9A49EDC04CC874934B86535E20B8CB0B75E5EF45C962192F7ABF85F3A314
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

9f:93:8b:5f:47:d8:97:7f:6d:bf:77:16:0d:e8:e7:06:0e:b0:64:d9:d6:0f:a9:d9:08:d7:da:10:10:12:6c:83

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

May 15, 2026

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:32:4e:ae:a6:30:09:6a:5e:7a:00:00:00:00:02:32

Issuer

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 16, 2026 - Apr 15, 2027

Subject

CN=Microsoft Code Signing PCA 2024,O=Microsoft Corporation,C=US

Serial Number

33:00:00:00:39:3b:b6:37:19:bf:06:1d:67:00:00:00:00:00:39

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Timespan

Aug 8, 2024 - Mar 22, 2036

Subject

CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:02:17:71:fb:2e:a5:af:01:1d:ea:00:01:00:00:02:17

Issuer

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Aug 14, 2025 - Nov 13, 2026

Subject

CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Serial Number

33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15

Issuer

CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Sep 30, 2021 - Sep 30, 2030

Minor OS version

0

Major OS version

10

Entry point

10288304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

mspdf.dll.pdb

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AreFileApisANSI CloseHandle CompareStringW ConvertFiberToThread ConvertThreadToFiber CreateEventA CreateEventW CreateFiber CreateFileA CreateFileMappingA CreateFileW CreateIoCompletionPort CreateThread CreateWaitableTimerW DeleteCriticalSection DeleteFiber DeviceIoControl EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetActiveProcessorCount GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSize GetFileSizeEx GetFileType GetLastError GetLocaleInfoW GetLogicalProcessorInformation GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeExW GetStringTypeW GetSystemInfo GetSystemTimeAsFileTime GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GlobalMemoryStatusEx InitOnceExecuteOnce InitializeCriticalSectionAndSpinCount InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList InterlockedPushEntrySList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFileEx MultiByteToWideChar OpenEventA PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueueUserAPC RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared ResetEvent RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetEvent SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SetWaitableTimer Sleep SleepConditionVariableSRW SleepEx SwitchToFiber TerminateProcess TerminateThread TlsAlloc TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

winmm

timeGetTime

ws2_32

WSACleanup WSAStartup

??0?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@QEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@IEAA@XZ ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@$$QEAU0123@@Z ??0PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@W4PdfFeatures@23@W4PdfVersion@23@_KIW4FormType@23@V?$single_ptr@V?$PDFVector@V?$SizeT@N@pdf_base@edge_pdf@@@pdf_base@edge_pdf@@@pdf_base@3@V?$single_ptr@V?$PDFArray@D@pdf_base@edge_pdf@@@83@55555555V?$single_ptr@V?$PDFVector@PEAVPdfDocumentCustomMetadata@datamodel@pdfcontrol@edge_pdf@@@pdf_base@edge_pdf@@@83@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@V?$SizeT@N@pdf_base@2@W4ViewRotation@infra@2@V?$RectT@N@42@@Z ??0PdfPageMetadata@datamodel@edge_pdf@@QEAA@XZ ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@$$QEAU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0PdfPrintParams@datamodel@edge_pdf@@QEAA@XZ ??0ShapeData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0ShapeData@datamodel@edge_pdf@@QEAA@XZ ??0StampData@datamodel@edge_pdf@@QEAA@AEBU012@@Z ??0StampData@datamodel@edge_pdf@@QEAA@XZ ??1PdfDocumentMetadata@datamodel@pdfcontrol@edge_pdf@@QEAA@XZ ??1ShapeData@datamodel@edge_pdf@@QEAA@XZ ??1StampData@datamodel@edge_pdf@@QEAA@XZ ??4PdfPageMetadata@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@$$QEAU012@@Z ??4PdfPrintParams@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ??4ShapeData@datamodel@edge_pdf@@QEAAAEAU012@AEBU012@@Z ?MakeAnnotationRenderParameters@pdfcontrol@edge_pdf@@YA?AV?$single_ptr@VPdfAnnotRenderParameters@pdfcontrol@edge_pdf@@@pdf_base@2@V?$single_ptr@VPdfAnnotationID@pdfcontrol@edge_pdf@@@42@UPdfRenderParameters@42@NW4AppearanceType@12@W4AppearanceState@12@@Z ?do_always_noconv@?$codecvt_null@_W@archive@boost@@EEBA_NXZ ?do_encoding@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?do_max_length@?$codecvt_null@_W@archive@boost@@EEBAHXZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@II@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Uindex@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Uindex@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vfont_per_unicode_range_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@serialization@boost@@@serialization@boost@@SAAEBV?$extended_type_info_typeid@Vunicode_ranges_per_font_map@font@t5@@@23@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEBV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEBV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@3@XZ ?get_const_instance@?$singleton@V?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@@serialization@boost@@SAAEBV?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@3@XZ ?get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ ?get_mutable_instance@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SAAEAV?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@3@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?get_mutable_instance@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SAAEAV?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@XZ ?is_destroyed@?$singleton@V?$map@Vtext_iarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$map@Vtext_oarchive@archive@boost@@@extra_detail@detail@archive@boost@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info@serialization@boost@@Ukey_compare@detail@23@V?$allocator@PEBVextended_type_info@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_destroyed@?$singleton@V?$multiset@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@Utype_compare@234@V?$allocator@PEBVextended_type_info_typeid_0@typeid_system@serialization@boost@@@__Cr@std@@@__Cr@std@@@serialization@boost@@SA_NXZ ?is_locked@singleton_module@serialization@boost@@QEAA_NXZ ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@U?$pair@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?load_object_data@?$iserializer@Vtext_iarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_iarchive@234@PEAXI@Z ?lock@?1??get_lock@singleton_module@serialization@boost@@AEAAAEA_NXZ@4_NA ?lock@singleton_module@serialization@boost@@QEAAXXZ ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$array@Vfont_per_unicode_range_map@font@t5@@$01@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@boost@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@II@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@U?$pair@U?$pair@II@__Cr@std@@Uindex@font@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Uindex@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$flat_set@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$less@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@23@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@container@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_map@IUindex@font@t5@@Upartial_absorber@icl@boost@@Uless@__Cr@std@@Uinplace_plus@56@Uinter_section@56@V?$right_open_interval@IUless@__Cr@std@@@56@Uallocator@3@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$interval_set@IUless@__Cr@std@@V?$right_open_interval@IUless@__Cr@std@@@icl@boost@@Uallocator@t5@@@icl@3@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@V?$vector@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@U?$allocator@V?$basic_string@DU?$char_traits@D@__Cr@std@@U?$allocator@D@t5@@@__Cr@std@@@t5@@@__Cr@std@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vfont_per_unicode_range_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?save_object_data@?$oserializer@Vtext_oarchive@archive@boost@@Vunicode_ranges_per_font_map@font@t5@@@detail@archive@boost@@UEBAXAEAVbasic_oarchive@234@PEBX@Z ?unlock@singleton_module@serialization@boost@@QEAAXXZ CreatePrintHandler GetCryptoFactoryFunc GetPdfControlFactory GetPlatformFactoryFunc InitializePdfControlFactory InitializePdfControlFactoryEx SetGetCryptoFactory SetPlatformFactory UninitializePdfControlFactory

Name

.text

Size

11.2MB

Virtual Size

11.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4.7MB

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.7MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

758KB

Virtual Size

758KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

585B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

193B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

data/defaults/user/level.txt

SHA256 6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
MD5 c4ca4238a0b923820dcc509a6f75849b
SHA1 356a192b7913b04c54574d18c28d46e6395428ab
SHA512 4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a
MD5 SHA1 SHA512

data/defaults/user/login.cfg

SHA256 c5b3cf05ed6e2a79e8d7305b3af7ccb5ed02918ddc7624b330ed97f41e066f02
MD5 a88082a7664be4f56db07c5e5112d163
SHA1 2271f7061d8e3c3f7b5f4b25b8eb09b4f92b7657
SHA512 f2be5ddf15d61348f71da98148f2f4739d0d7025db8c3e596d502d4e9dd8427adb776554607b31365202949ac6d39c87df82d8074f1f2b2adf4d053854adb5ed
MD5 SHA1 SHA512

data/defaults/user/nickname.txt

SHA256 3ac7b1a5e63ed517f0902c8c51f4474c4e4e0ffc03c519a48e9137083e337ff8
MD5 043579f720143ae4801b30b16b83919f
SHA1 324f6ab2a047a612b59685b33713300f22d5ae07
SHA512 0a86b46d9ae2ad6f9612744daabf34a7c52bc4e890b40a83472e255d0761881f9b58b4e6ed9f04831e57d4e627f5940b4daa4c983e2b8139f1b82cc38217fbf3
MD5 SHA1 SHA512

data/defaults/utils_112.sdat

SHA256 9f10df24eb85ab77509326b7f403f398815f795bef72210db965e136bc7decb2
MD5 042d0a7397e0b3f35caf1264c84fc01d
SHA1 679cfbfbd1418cefdaa2f878d279673650082459
SHA512 2faa6c6d89de3f8d2d99501a0e5fb85dd953d711cc23ab846b6933fbde41f1b32546162d8586681c25e219a80987ee2e4a4f66a875d948413661d8bad683d10e
SSDEEP 12288:xGItV8QQvH8S6o8j3+LDyEWYQYMWTXmlpuB5OzDR0TKlBOLd5w/s:xGIVxEcS6o86LWurTXmTy0pB2
TLSH
T1C0F423639BC9F3E1ACA29A8393F4BAA0543174F1468D0412E6DCE5EF4E9611F911F43B
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_1.bin

SHA256 890d7d1da9f9e376c0a40128ce286077f0f685380502d9687a4c0460fb2280cb
MD5 08ae385c97b2fd5dabd382186bee7898
SHA1 bd675f89135404c2dc55499a4c6852e9d760ba39
SHA512 c306be45b020de7a6fe31afeb4f848a274e31b04cb74e9d729004d5dd3f72ceacb0bc0544392c789707d3508efe460a60433cf32adc09b5784721d64c6f963e3
SSDEEP 12288:TnpMP3oDxtdP6fvqnuokRSeSZW5kDKQxSnFJRz1UYiYgqh92J+dmXzMxh:TnSMHgKo2UkD1SFrbFtdFxh
TLSH
T18815237FFD45F8607112DAF6F962A025D193060CB4E56033363A4B4F8DD9BA34868D9B
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_104.dlm

SHA256 fa970b62cdbbd8227fb8a76d60250de7572f08ca73811408aa75881ce9e9dcf8
MD5 113ba73c4b349432deaf6e3b39785af6
SHA1 3356362e5b808f8cbe3e8c263fc567967da74259
SHA512 0ac15ef84c19453e439e44c3ae1b92cbc095c1221abd02deab170c79cb5b615f1b2aa6dfe1dcec6f5e1484e89311e1386dc0242c950380feabbeeccbf9e8ba26
SSDEEP 24576:BYoAPq0GEnxEDePi7W0A8LvFl+Mfs97AoSZT5MI2Ke:BYoAP24E6Pi7vL/+YE545f2/
TLSH
T16D1533099D6A7130F5BD13EB25A6B30BF840254794E8387E5E1F9EE865967BCE0B0313
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_112.dll

SHA256 da4933eaf624d6a59a849f04a6661913377deb641c6d6971d85d130788f4ea05
MD5 f7671979c092d3d027f53bdaf79c73e2
SHA1 4f8708581a1b9c845492cf4f56ae4ea9ba872de2
SHA512 3c620b518ea222d075ed0d6dc2966716b6417cde63ae29c6819caa3931a3bdaa8446d2d96737d149a02298c11656cadaf531398d9b6d3c1032e676201a50b01d
SSDEEP 24576:mQmq2XSAQD5LeKOi2egjcl8Wo4TZIRDGLVNZcJ4LKeLFa:vdGPQFLeKBgKi4+RDGLVNiJuJa
TLSH
T10E153396598A903207FC30DA79341707A3EB1B197958276E237017B6871A3E8CF4FB76
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_51.data

SHA256 ac3cb9a8fe83746872e190ae6dbd604442513ac4e7bf6ae3cbeb6df157fcd594
MD5 f32ba983657935122f82ff2f7ea6d11b
SHA1 73fb53a42851a3d26ac462839d44860c76150fb8
SHA512 9af0635417e92154417939023d2d06181704909890029e2327f5a404ef4f633522928da6e9fffcfc83a3fec3d079cd9ceba36bb679aaeda1ab05cf01b3cb9569
SSDEEP 24576:xwK8mw6fldvoy7iNiZL80YTrhgiHV/+aIve5oLYpn3:ZvJfldwyGbRTrKk+nLYl
TLSH
T19325333B8A4C7F7A31286F9DA2C32F4251E6E1AFD0A9D27153DD85C2B4D907A5F41231
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_8.dll

SHA256 dec7676514d8b95643854abe2c1ec8367a1cdef289c6baf985ab3fd0715bbd10
MD5 079a5ef35a607690dcddfe06c1e176a3
SHA1 97a3f86e3a96b26c3e6a61e6937b3dacec8d5eb2
SHA512 7681d2cb533e80de62260328586dc4608e9317944c624f99e9b2d3afbbef61a3b826631f5194038552b4d6ad54034540542e9214b7c1bfbb424b56c9f9318009
SSDEEP 12288:0tlmW3XjnvrMEjDacNJb26tCLVAPJqe8Mq+8AisQ9fdJi4M7/Xsfka:0tb3TnvrMK1NJV6AgetiPZ3ZRka
TLSH
T1EBE433D1169BA8576BDC98E23DF099FEE204A98719907271DC3D316E71A7607C3E0CCA
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/resource_88.bin

SHA256 e4f212447843ef177bc5c758301fd78c86d4508873ff00e4d50aabe9301cfd4a
MD5 4e25ef9500532d3e846c2298fcc6c9e9
SHA1 83c350f21ecc543457ae2f1ee6ab2d8268142d0b
SHA512 dd7445ff430dbaa0c30c24b9571f9eac0053b83f79395473ca144a2dc1247f2fcc75523c90f057db5b02e4818ab4970d9d7e76bdfd861e585bf720b2c770d7c6
SSDEEP 24576:OvtwXVk/qj9V1QuIkzJrIYYxc84sNphvxIkpaC/G:OFWVyQ31QuIWrIYYxQy3xRpw
TLSH
T1AC153373346B13918AC542D9903DFF87192479DAEBBD9A918DC608C2A53C293B13F4DB
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/sample_2.dlm

SHA256 3a70b7abbe36ad09a4dd9e027f058e02f5ca86144c74c99c68cc1dd47f2b741b
MD5 020eeb55427d2103e2223e7ef9172656
SHA1 0ad54a6cb5ed189b0c6e3d5f93c76071d88aa249
SHA512 6bb5ee2f31ae0500353ab13f91b03b059f61fff2ca2440b9314aa6788cc367d95af50e06f38c46c5f96b53aa0468f82106b8a816331bb1b9b2af0361ef5a7a5c
SSDEEP 12288:yWLifPsC0c7pNrD9jQSd1EhAoep9jbRRdS1zeNCkm/TWWhP9JoRL4hfN7lE91qWO:y5PsvS7xdShAocOzeAGuoNYfnmrTm
TLSH
T11FF423961100FAFF1D41CABA37CAA44503C7344DA4A8D29B5292F4332F6259B96FF7E4
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/sample_32.001

SHA256 44e21195b21bd9b2471f96df451149f9a002566a398f838cb39a79220c315df5
MD5 aa68f9bae98cd236e36646c0af1cab67
SHA1 9851c6c7612b649e2b2a5b2aafed23fe74d58176
SHA512 7a82136f8f587e12cd246632005dc8a3cac3eb3b6a9ee1153ef4ec1c80a7ad44931be9811b874519b50114898ed76ca60c98d4fd0c7dafdb95ef97c49786d694
SSDEEP 24576:FZlSYU7CpG8Q2q6/2mudWkr+7XurCAXiR6f6z+EXqU/ZSBCt:FZl9U7r8J/2muk/7oC8RacUhN
TLSH
T12515334C2E6B1ADA215B2A275C5CFDAD0870CCF76808ED931A8ED17FC7D142835D1AA7
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/sample_35.data

SHA256 f5c5443b4b004d2c30d1df8b29d126c3e0e15ab877d82901f05726fee80a8557
MD5 bcac14c2364d2757cfe56f0556020c6d
SHA1 24abe639306fbf0e62fc09f21f832fe5c9f958d8
SHA512 1f705af0f8ece4232c913811624f5aa8770f48c7ca6aadec5995acdd11d0c66d24824cba9f37b6556e9c021925f3c69b89cd50dd68ffccd5061c1dfab016f7c7
SSDEEP 24576:jIBrEVgiVwibR2MFas3Tk8/YqOh6KcYmUpN:DhwkR2sjHYp+YNf
TLSH
T17C1533551110B6272B4980D2F2C79FFEA56CC8F72406E485EE0ECF7226636E538A5FB1
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/sample_57.000

SHA256 fdfdbcf61f6da72a400d3e8136118dab5e674496ac931fa2f142a1cc5f9387a3
MD5 3bf271175ab85f26207b4155ad0aae63
SHA1 5678a6f0d951032f705ce4eebfb23a547cfadb99
SHA512 13b470df737ac2b890cf53b86a76c7065e72e76ce0048eddccc10e7a5d33e43a5a61ebd9c181291fd01f8d4e0f2dfe94f8f3ebdb39ff8cb7dca4053df209f453
SSDEEP 6144:NiifMI0wLBsXt8bCMYUSSvc6EotMC1TuBmXpbSVVi61+q4FGiLa1dSB2XqyBQdl8:NiOichPZcH6MjfXz4FGiLWdSBQQ8EkSg
TLSH
T10BC423768F36FC256BAC7FC105EA943BA25CAA578971DC90FA309DCA151045A7EC3332
MD5 SHA1 SHA512 SSDEEP TLSH

data/themes/sample_73.data

SHA256 f63cb6ef66b54326ebd43819616c021ebfabc42ee4f98d57ae14a19ac1b73f42
MD5 e4d92a25479d582db2f9458316034640
SHA1 03b82e28bd25bbd3c5fb25a59e9b97942688bece
SHA512 733e70aae48b4d680d6577ed8d1a09dfd2850c6a7640f05b896fbfefb3734055ef8b3acc96584b46ef4e5ff13c5c16cc933fa4fd63d53ec5bb9f6b6996474a75
SSDEEP 12288:ughhphf6Kgd21kNJqSLEsd2uimddVlXpB0tkYTqgxClA9lymusyRutm6wxWr:rhhphCKgdsk/qC2ezlZBVYH3CUyR2m6z
TLSH
T1F2F4335778BA49A627FC46934DB6372D70D44AB24AB3C77089C44EC38C26E674932DB3
MD5 SHA1 SHA512 SSDEEP TLSH

localcache.dat

SHA256 42c008196d585bae680bc9d3d693ea02bb577cdce7a811e8e377a8d686f91d25
MD5 f8921ef358ca0914f1005236565215e5
SHA1 b755ba08f7a93a07e15545ef50402878b518b046
SHA512 0f443a9bff1495a41ae86ca01088e70bd76335ad35b16fff5579168beaee9e7ee91d745f279cb18dc25bada8c289f62bea28ffbf43a292f8ef4da3190d92f4e5
SSDEEP 12288:O0LbwjzyvXQ8XzoPYqPTArOBsGKbdsKOWTKQoNR:O0wsBjoPYsTArOBd0dzOWTKQoNR
TLSH
T18F84234A0F81CCF0A7FEC2A1D92491FFD51EC0EE7DEF105899BEC91AA8064D3D599254
MD5 SHA1 SHA512 SSDEEP TLSH

version.dll

IMPHASH 606d9fc89f0857035d199f8f9a4e9905
SHA256 92c4cf2f86b9925094ef89c0eb687bb6d2dabe1f32d62ea68d7e975677b0b769
MD5 86f60d411556017bb5d2e10bb1963e06
SHA1 061815a46f94d34d3bb848cfe7e16de6338ad899
SHA512 b2b33d72e0d6fbd7a8a48bfd0810d7f027c610aecc78cbebcfc1b7b569ad1af277016ab24bf8b355d7ab0de30d7777902090eb4d37c0f66224a433b3d87efe3f
SSDEEP 3072:ynYz1ofl+VOa7cCPP1kWhu48sC1fxgKTZ/3u8QMbvckVPxIiTg53U:qOO4911hu4B
TLSH
T1A7B35C1772E500BBE5764738C8A34A09EB71B8514760DFAF03A442AA2F677D14E3EF61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

15724

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

version.pdb

kernel32

GetNativeSystemInfo GetModuleHandleA GetProcAddress lstrcpynA GetComputerNameA HeapAlloc HeapFree GetProcessHeap GetModuleFileNameW CreateFileA GetFileSizeEx ReadFile GlobalMemoryStatusEx CloseHandle VirtualAlloc VirtualFree GetModuleFileNameA GetModuleHandleExA Sleep GetSystemDirectoryW LoadLibraryW lstrcatW WriteConsoleW CreateFileW DisableThreadLibraryCalls GetWindowsDirectoryW GetTickCount SetFilePointer GetSystemInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx

user32

EnumDisplayDevicesA

advapi32

RegOpenKeyExA RegCloseKey GetUserNameA RegQueryValueExA

Name

.text

Size

54KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

40KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

Errors

General

Malware Config

Signatures

File Explorer