Magic FC 27 RBCI V 1.3.rar
- SHA256 3bcc24927d564f8e77283d95720a9d2bc6c7dd061cd616f1c3e41401588c7873
Errors
Reason
scan timeout
General
- Target Magic FC 27 RBCI V 1.3.rar
- Size 227.1MB
- Sample261107-zy2rwagb86
- SHA256 3bcc24927d564f8e77283d95720a9d2bc6c7dd061cd616f1c3e41401588c7873
- MD5 b81ce28b486600bc730df6040f111063
- SHA1 0dc739ca8b5e970ad8f32193a5faaf2c95fdebf5
- SHA512 6d280a1614fb393894028f615f46bfdec1e9df191fb415cef98b8db148ea69d0980055730b68aa82a705cd897593d855e50247902caa29344aebb53ead9261ff
- SSDEEP 6291456:1FDPytrPd2lzW0EKq4SljtPpNkEL9bNxGpOHioZMWe/qt:1FDt9EPxfpNk67CSfjAI
- TLSH T12FB833B735EBFB6ADF208C5EBF6D4181C7A4EFAB341C770520C63A254D59EA0428A11D
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
-
resource yara_rule static1/unpack001/Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/pub.dll themida - Codesign digest Mismatch 2 IoCs
File was altered after it was signed.
resource unpack001/Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/FC27.exe unpack001/Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/pub.dll -
resource yara_rule static1/unpack001/Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/pub.dll upx - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/anadius64.dll
File Explorer
-
Magic FC 27 RBCI V 1.3.rar.rar 227.1MB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/FC27.exe.exe 505.0MB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/Token.ini2KB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/anadius.cfg6KB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/anadius64.dll.dll 678KB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/dbdata.dll.dll 3.1MB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/origin_helper_tools.html.html .js 87KB
-
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/pub.dll.dll 3.8MB
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/FC27.exe
- SHA256 4e9f0b158b66cb2923a92804d70c93cfd1f95ef3a69bbf411fa8bdd95722eea0
- MD5 d92e25bb4e3f780c6e4858d514e20c64
- SHA1 728c97b4ee1c98d2e8881656a463dca680245622
- SHA512 2b0e77669614c172fde7861a1b003ee7a8ee67374b952ecd9082a0aa97ab34ad387d36729a85ceeeed27d85cc27e999a2011ca3b04a215869501c78844bc3d9b
- SSDEEP 3145728:fZj6yTxGeqGvyOei5LA/OXo9WNxWjvjf4vHoIIk:fkCIVGvyALdgWPWjv0foI
- TLSH T162499DEFEAE154AAE756E070C619E23ACBA37439933C525B0143635B6D77D02582CB33
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
46:82:9b:71:81:0a:53:df:f2:6d:1c:72:0f:88:2c:c7:7d:31:57:21:d5:cf:df:6b:99:7e:6b:7c:2e:92:21:8a
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
Chains
Sep 27, 2026
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
Serial Number
02:51:27:27:12:ce:12:56:01:d9:d5:76:af:c8:e7:8b
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2026 - Apr 27, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
512062880
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
FIFAGame.Main_Win64_retail_ftt_gprot_prot.pdb
??$GetOpSchema@VAffineGrid_Onnx_ver20@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VAveragePool_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VAveragePool_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VAveragePool_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VAveragePool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VAveragePool_Onnx_ver7@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver15@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver6@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver7@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VBatchNormalization_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCastLike_Onnx_ver15@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCastLike_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCastLike_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver6@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCast_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCenterCropPad_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCol2Im_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCompress_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VCompress_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConcat_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConcat_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConcat_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConcat_Onnx_ver4@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConvInteger_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConvTranspose_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConvTranspose_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConv_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VConv_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDeformConv_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDepthToSpace_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDepthToSpace_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDepthToSpace_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver12@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver6@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VDropout_Onnx_ver7@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VFlatten_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VFlatten_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VFlatten_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VFlatten_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VFlatten_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGRU_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGatherElements_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGatherElements_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGatherND_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGatherND_Onnx_ver12@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGatherND_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGather_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGather_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGather_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGlobalAveragePool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGlobalLpPool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGlobalLpPool_Onnx_ver2@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGlobalMaxPool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGridSample_Onnx_ver16@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGridSample_Onnx_ver20@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGroupNormalization_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VGroupNormalization_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver16@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIdentity_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VInstanceNormalization_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VInstanceNormalization_Onnx_ver6@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIsInf_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIsInf_Onnx_ver20@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIsNaN_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIsNaN_Onnx_ver20@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VIsNaN_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLRN_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLRN_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLSTM_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLayerNormalization_Onnx_ver17@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLpNormalization_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLpPool_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLpPool_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLpPool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VLpPool_Onnx_ver2@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxPool_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxPool_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxPool_Onnx_ver12@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxPool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxPool_Onnx_ver8@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxRoiPool_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxUnpool_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMaxUnpool_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMeanVarianceNormalization_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VMeanVarianceNormalization_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VNonZero_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VNonZero_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VOneHot_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VOneHot_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VPad_Onnx_ver2@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VQLinearConv_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VRNN_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReshape_Onnx_ver5@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VResize_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VResize_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VResize_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VResize_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VResize_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VReverseSequence_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterElements_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterElements_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterElements_Onnx_ver16@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterElements_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterND_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterND_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterND_Onnx_ver16@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatterND_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatter_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VScatter_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShape_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShape_Onnx_ver15@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShape_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShape_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShape_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VShrink_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSize_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSize_Onnx_ver19@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSize_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSize_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSlice_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSlice_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSlice_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSlice_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSpaceToDepth_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSpaceToDepth_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSplit_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSplit_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSplit_Onnx_ver18@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSplit_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSplit_Onnx_ver2@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSqueeze_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSqueeze_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSqueeze_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VSqueeze_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTfIdfVectorizer_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTile_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTile_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTile_Onnx_ver6@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTranspose_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTranspose_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTranspose_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VTrilu_Onnx_ver14@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUnique_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUnsqueeze_Onnx_ver11@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUnsqueeze_Onnx_ver13@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUnsqueeze_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUnsqueeze_Onnx_ver21@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUpsample_Onnx_ver10@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUpsample_Onnx_ver1@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUpsample_Onnx_ver7@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VUpsample_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VWhere_Onnx_ver16@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??$GetOpSchema@VWhere_Onnx_ver9@onnx@@@onnx@@YA?AVOpSchema@0@XZ
??6onnx@@YAAEAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AEAV12@AEBVOpSchema@0@@Z
?AllowUncheckedAttributes@OpSchema@onnx@@QEAAAEAV12@XZ
?Attr@OpSchema@onnx@@QEAAAEAV12@PEBD0W4AttributeProto_AttributeType@2@AEBM@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@PEBD0W4AttributeProto_AttributeType@2@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@PEBD0W4AttributeProto_AttributeType@2@AEB_J@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@PEBD0W4AttributeProto_AttributeType@2@_N@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@UAttribute@12@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBM@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV34@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@MV?$allocator@M@std@@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@VGraphProto@onnx@@V?$allocator@VGraphProto@onnx@@@std@@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@VTensorProto@onnx@@V?$allocator@VTensorProto@onnx@@@std@@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@VTypeProto@onnx@@V?$allocator@VTypeProto@onnx@@@std@@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBV?$vector@_JV?$allocator@_J@std@@@4@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBVGraphProto@2@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBVTensorProto@2@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEBVTypeProto@2@@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@AEB_J@Z
?Attr@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0W4AttributeProto_AttributeType@2@_N@Z
?BuildContextDependentFunction@OpSchema@onnx@@QEBA_NAEBUFunctionBodyBuildContext@2@AEAVFunctionProto@2@H@Z
?BuildFunction@OpSchema@onnx@@QEBAXAEAVFunctionProto@2@@Z
?CheckInputOutputType@OpSchema@onnx@@QEBAXAEAUInferenceContext@2@@Z
?Deprecate@OpSchema@onnx@@QEAAAEAV12@XZ
?DeregisterSchema@onnx@@YAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H0@Z
?FillUsing@OpSchema@onnx@@QEAAAEAV12@AEBV?$function@$$A6AXAEAVOpSchema@onnx@@@Z@std@@@Z
?Finalize@OpSchema@onnx@@QEAAXXZ
?FunctionBody@OpSchema@onnx@@QEAAAEAV12@AEBV?$vector@VNodeProto@onnx@@V?$allocator@VNodeProto@onnx@@@std@@@std@@AEBV?$vector@VOperatorSetIdProto@onnx@@V?$allocator@VOperatorSetIdProto@onnx@@@std@@@4@H@Z
?FunctionBody@OpSchema@onnx@@QEAAAEAV12@AEBV?$vector@VNodeProto@onnx@@V?$allocator@VNodeProto@onnx@@@std@@@std@@H@Z
?FunctionBody@OpSchema@onnx@@QEAAAEAV12@PEBDH@Z
?GetDescription@FormalParameter@OpSchema@onnx@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetDifferentiationCategory@FormalParameter@OpSchema@onnx@@QEBA?AW4DifferentiationCategory@23@XZ
?GetFunction@OpSchema@onnx@@QEBAPEBVFunctionProto@2@H_N@Z
?GetIsHomogeneous@FormalParameter@OpSchema@onnx@@QEBA_NXZ
?GetLoadedSchemaVersion@OpSchemaRegistry@onnx@@SAHXZ
?GetMapWithoutEnsuringRegistration@OpSchemaRegistry@onnx@@CAAEAV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@@std@@@2@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@@std@@@2@@2@@std@@@2@@std@@XZ
?GetMinArity@FormalParameter@OpSchema@onnx@@QEBAHXZ
?GetName@FormalParameter@OpSchema@onnx@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetOption@FormalParameter@OpSchema@onnx@@QEBA?AW4FormalParameterOption@23@XZ
?GetTypeStr@FormalParameter@OpSchema@onnx@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetTypes@FormalParameter@OpSchema@onnx@@QEBAAEBV?$unordered_set@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$hash@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?Input@OpSchema@onnx@@QEAAAEAV12@HPEBD00W4FormalParameterOption@12@_NHW4DifferentiationCategory@12@@Z
?Input@OpSchema@onnx@@QEAAAEAV12@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0W4FormalParameterOption@12@_NHW4DifferentiationCategory@12@@Z
?Input@OpSchema@onnx@@QEAAAEAV12@HVFormalParameter@12@@Z
?Instance@DomainToVersionRange@OpSchemaRegistry@onnx@@SAAEAV123@XZ
?Instance@OpSchemaRegistry@onnx@@SAPEAV12@XZ
?MatMulShapeInference@utils@math@defs@onnx@@YAXAEAUInferenceContext@4@HH@Z
?MutableTypes@FormalParameter@OpSchema@onnx@@AEAAAEAV?$unordered_set@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$hash@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@PEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?NumInputs@OpSchema@onnx@@QEAAAEAV12@V?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@@Z
?NumOutputs@OpSchema@onnx@@QEAAAEAV12@V?$set@HU?$less@H@std@@V?$allocator@H@2@@std@@@Z
?Output@OpSchema@onnx@@QEAAAEAV12@HPEBD00W4FormalParameterOption@12@_NHW4DifferentiationCategory@12@@Z
?Output@OpSchema@onnx@@QEAAAEAV12@HV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV34@0W4FormalParameterOption@12@_NHW4DifferentiationCategory@12@@Z
?Output@OpSchema@onnx@@QEAAAEAV12@HVFormalParameter@12@@Z
?ParseAndSetTypes@OpSchema@onnx@@AEAAXPEAV?$vector@VFormalParameter@OpSchema@onnx@@V?$allocator@VFormalParameter@OpSchema@onnx@@@std@@@std@@@Z
?PartialDataPropagationFunction@OpSchema@onnx@@QEAAAEAV12@V?$function@$$A6AXAEAUDataPropagationContext@onnx@@@Z@std@@@Z
?RNNShapeInference@onnx@@YAXAEAUInferenceContext@1@@Z
?RegisterSchema@onnx@@YAX$$QEAVOpSchema@1@H_N1@Z
?RegisterSchema@onnx@@YAXAEBVOpSchema@1@H_N1@Z
?ReplaceAll@onnx@@YA_KAEAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEBD1@Z
?SetContextDependentFunctionBodyBuilder@OpSchema@onnx@@QEAAAEAV12@V?$function@$$A6A_NAEBUFunctionBodyBuildContext@onnx@@AEBVOpSchema@2@AEAVFunctionProto@2@@Z@std@@H@Z
?SetDomain@OpSchema@onnx@@QEAAAEAV12@PEBD@Z
?SetDomain@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetLoadedSchemaVersion@OpSchemaRegistry@onnx@@SAXH@Z
?SetLocation@OpSchema@onnx@@QEAAAEAV12@PEBDH@Z
?SetLocation@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?SetName@OpSchema@onnx@@QEAAAEAV12@PEBD@Z
?SetName@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?SetSupportLevel@OpSchema@onnx@@QEAAAEAV12@W4SupportType@12@@Z
?SinceVersion@OpSchema@onnx@@QEAAAEAV12@H@Z
?ToDataTypeString@DataTypeUtils@Utils@onnx@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
?ToType@DataTypeUtils@Utils@onnx@@SAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBV45@@Z
?ToType@DataTypeUtils@Utils@onnx@@SAPEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVTypeProto@3@@Z
?ToTypeProto@DataTypeUtils@Utils@onnx@@SAAEBVTypeProto@3@AEBQEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?TypeAndShapeInferenceFunction@OpSchema@onnx@@QEAAAEAV12@V?$function@$$A6AXAEAUInferenceContext@onnx@@@Z@std@@@Z
?TypeConstraint@OpSchema@onnx@@QEAAAEAV12@PEBDV?$initializer_list@PEBD@std@@0@Z
?TypeConstraint@OpSchema@onnx@@QEAAAEAV12@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@4@0@Z
?UpdateFunctionProtoOpsetImportVersion@OpSchema@onnx@@AEBAXAEAVFunctionProto@2@H@Z
?ValidateReferencedOpsInFuncton@OpSchema@onnx@@AEBA_NPEBVFunctionProto@2@HHPEAV?$set@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?Verify@OpSchema@onnx@@QEBAXAEBVNodeProto@2@@Z
?convPoolShapeInference@onnx@@YAXAEAUInferenceContext@1@_N1HH@Z
?convTransposeShapeInference@onnx@@YAXAEAUInferenceContext@1@@Z
?globalPoolTypeShapeInference@onnx@@YAXAEAUInferenceContext@1@@Z
?m_permLUT@PerlinHash@math@fb@@0QBEB
?map@OpSchemaRegistry@onnx@@CAAEAV?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@@std@@@2@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$unordered_map@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@U?$hash@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@U?$equal_to@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$map@HVOpSchema@onnx@@U?$less@H@std@@V?$allocator@U?$pair@$$CBHVOpSchema@onnx@@@std@@@4@@2@@std@@@2@@2@@std@@@2@@std@@XZ
AmdPowerXpressRequestHighPerformance
AvgUpdateCPUCycles
D3D12SDKPath
D3D12SDKVersion
ExportProductMetadata
GetDenuvoTicketLocation
GetDenuvoTimeTicketRequest
NvOptimusEnablement
SoftMaxNormalize
export1
export2
Name
.text1
Size
139.4MB
Virtual Size
139.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.xpdata
Size
10.0MB
Virtual Size
10.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
38.8MB
Virtual Size
38.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.trace
Size
5.8MB
Virtual Size
31.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.link
Size
7.5MB
Virtual Size
7.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.code
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.udata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.ecode
Size
5.3MB
Virtual Size
5.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.xcode
Size
3.8MB
Virtual Size
4.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.data1
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.00cfg
Size
3.3MB
Virtual Size
3.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xtext
Size
42KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.debug
Size
9.2MB
Virtual Size
9.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_MEM_READ
Name
.rodata
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
273.8MB
Virtual Size
273.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.xdata
Size
27KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_MEM_READ
Name
.didata
Size
512B
Virtual Size
192B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.sbss
Size
26KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.arch
Size
7.5MB
Virtual Size
7.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.anadius
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/Token.ini
- SHA256 9e1e0dbf64a527857c379cac5b9900f69689772d4a7bc4dfcafbda990f1145fc
- MD5 421382c1a69d8cb3220339581d3de12f
- SHA1 067603f34d75504f13680f764ccf90b9af61b842
- SHA512 e1e7232fad504f26a42ef8340593710ce8b6ab3b26d852afce875991143755d66b36dda411f8052364a43ced0385cae43c3e147a10fc487f8252e47c17d96877
- TLSH T169515B3E223E77888BE8261C23E7CD453443DE4F4E088B11FB3A854C1844DAB66F43A6
- MD5 SHA1 SHA512 TLSH
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/anadius.cfg
- SHA256 c6640aaf0a9f97b20ccfc7dbad945d06ace36f44204bf65587ffc0b1f41a57ae
- MD5 db5b637ced86cd4b274adcf8c6108bfd
- SHA1 490da6cdcbd2c061a17af711a652d8ded1f2e3a6
- SHA512 43a87555cdab8a26491a3ff909467a35c7c6250e4a23a793fa85a5f2383cd92b35c532e968e24330a1a1adb7a53e46a9d208b54a8463907ad66b14e3bff780ce
- SSDEEP 96:ZKJZa6zSwyTwQ8Ynm71RRgwkCSvq20KIM47kU/oNqZ:GaESNJ8Im715kCp20O47+wZ
- TLSH T18BD10836E519BF6016BDD22E226B8D03F88187B70A44070DB66E822C1F31A1797D8F3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/anadius64.dll
- IMPHASH 3ed1cddb6f1d9e55a2c6fb6e77a2abf6
- SHA256 78b02420f360dfc86623d7cb3981cbd2f109fb37972a3a386e507217bcfe3947
- MD5 cba08f03a4907fa8f692396ae16b62a1
- SHA1 34e521dac36711dbfd8ae27c854f1225b11ebf55
- SHA512 2c3de6fda7d3674e3c80a40a7f36fd4a827becb33958fa0f5de5b8a32a829940533cc4e826f890a25605556419f8b58530dd08901df54c6e71ba7810e2aa01e2
- SSDEEP 12288:DQLlsaVfh16n69rlIs7aq84E2utMW29i7+TR:wSa1WkHE2utMG
- TLSH T1B1E47D6A77A401BCD17BD179CD974912E7B278060361ABCF03E046AB6F1BBE05A3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
310524
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
ws2_32
ntohs
WSAStringToAddressW
WSASocketW
WSASend
WSARecv
WSAGetLastError
WSASetLastError
WSACleanup
WSAStartup
setsockopt
select
ntohl
listen
htonl
getsockname
ioctlsocket
closesocket
bind
htons
kernel32
GetFileInformationByHandle
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
FlushFileBuffers
GetConsoleOutputCP
WriteFile
ReadConsoleW
GetConsoleMode
VerSetConditionMask
VerifyVersionInfoW
CloseHandle
GetLastError
SetLastError
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CancelIoEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
WaitForSingleObject
SleepEx
CreateEventW
SetWaitableTimer
WaitForMultipleObjects
QueueUserAPC
TerminateThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LocalFree
FormatMessageA
VerifyVersionInfoA
MultiByteToWideChar
AllocConsole
AttachConsole
GetConsoleWindow
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetErrorMode
SetErrorMode
FreeLibrary
LoadLibraryW
WideCharToMultiByte
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
SetFilePointerEx
GetFileSizeEx
GetFileType
GetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
RtlUnwind
SetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
RtlPcToFileHeader
RaiseException
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
WakeAllConditionVariable
SleepConditionVariableSRW
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
LoadLibraryExW
ReadFile
ExitProcess
CreateThread
ExitThread
FreeLibraryAndExitThread
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
user32
MoveWindow
MessageBoxW
shell32
CommandLineToArgvW
mswsock
AcceptEx
GetAcceptExSockaddrs
CDX
RUNE
anadius
Name
.text
Size
501KB
Virtual Size
500KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
135KB
Virtual Size
135KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
10KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
976B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=30795,
count=183, id=261, version=30795,
count=17, id=260, version=30795,
count=1, productName=Unmarked objects (old),
count=14, id=260, version=33218,
count=18, id=259, version=33218,
count=88, id=261, version=33218,
count=216, id=1, productName=Unmarked objects,
count=11, id=257, version=30795,
count=5, id=260, version=33521,
count=28, id=261, version=33521,
count=1, id=256, version=33521,
count=1, id=255, version=33521,
count=1, id=151,
count=1, id=258, version=33521,
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/dbdata.dll
- IMPHASH 6e85a6f6acb07ee53597ad1bb7b832a9
- SHA256 0e058a8e924c2b982d25981e9ca553a1f4e303eeeaaf752b86b86f85d95ece18
- MD5 afb32c58217605675c573b9a17647479
- SHA1 0caf8e9c658aeb1eb34c5260b2e98d804d9241a6
- SHA512 d7e5e54464219755a9da8a983534dcc81153f715f8e99a227a6c7a07d28ae1cb55ba45a609ee63fb11bdc4a2a48f893590b1db49ba0c6e6e4bbe6982cbe6c2e7
- SSDEEP 49152:uVqv4++/5qXVt18AebVjcbBcU6q9ksYSTO6tk3cQFQOYi2:uc+4z6pR6tgFQ
- TLSH T13FE56B357A7880D4C03AC07959AACE41F7B238910F21B7CF1195A25E9FBBDF5127E622
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
3d:c1:9b:63:4b:25:1e:f5:fd:ad:2c:61:2f:c8:69:c9:5c:02:cb:02:cb:66:8a:87:65:44:69:a7:52:dd:50:3e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
Chains
Sep 27, 2026
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Electronic Arts\, Inc.,OU=EA Sports FC,O=Electronic Arts\, Inc.,L=Redwood City,ST=California,C=US
Serial Number
02:51:27:27:12:ce:12:56:01:d9:d5:76:af:c8:e7:8b
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 28, 2026 - Apr 27, 2027
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
1723792
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\jenkins\workspace\Origin_SDK\SDK-Tool\origin\sdk\dev\OriginSDKTool\dev\build\OriginPlatformInterface\dev\pc64-vc-tool-opt\bin\dbdata.pdb
msvcp140
_Mtx_destroy_in_situ
_Thrd_start
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_signal
_Cnd_wait
_Cnd_destroy
_Cnd_init
_Mtx_unlock
_Mtx_lock
_Mtx_destroy
_Mtx_init
_Thrd_detach
ole32
CoInitializeSecurity
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
oleaut32
VariantClear
SysFreeString
SysAllocString
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shell32
SHGetFolderPathW
kernel32
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetThreadAffinityMask
GetProcessAffinityMask
InitializeSListHead
SetThreadIdealProcessor
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
ResumeThread
GetExitCodeThread
GetCurrentProcessId
OutputDebugStringW
GetUserDefaultLangID
GetUserGeoID
InitializeCriticalSectionEx
GetGeoInfoA
GetSystemInfo
GetTickCount64
SetThreadPriorityBoost
GetCurrentThreadId
Sleep
GetCurrentProcess
TerminateProcess
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
OutputDebugStringA
GetLastError
QueryPerformanceCounter
GetModuleFileNameA
GetModuleHandleW
LocalFree
RtlCaptureContext
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
GetFileAttributesExW
GetFileSizeEx
ReadFile
RemoveDirectoryW
SetEndOfFile
SetFilePointerEx
WriteFile
GetTempPathW
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
GetWindowsDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
QueryPerformanceFrequency
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetPriorityClass
GetPriorityClass
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetModuleFileNameW
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
DuplicateHandle
RaiseException
InitializeCriticalSection
TryEnterCriticalSection
ReleaseMutex
CreateMutexA
vcruntime140
memcpy
_CxxThrowException
__std_exception_destroy
__std_exception_copy
strstr
__intrinsic_setjmp
__C_specific_handler
longjmp
strchr
memmove
memset
_purecall
__std_type_info_destroy_list
__std_type_info_compare
__std_terminate
memcmp
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_errno
_beginthreadex
abort
terminate
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
api-ms-win-crt-string-l1-1-0
isalnum
isspace
tolower
isprint
strncpy
isupper
strncmp
toupper
isdigit
isalpha
api-ms-win-crt-convert-l1-1-0
atoi
_fcvt_s
_strtoi64
_ecvt
strtol
strtod
mbstowcs
api-ms-win-crt-heap-l1-1-0
free
malloc
_aligned_malloc
_aligned_free
_callnewh
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsscanf
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
_get_tzname
_time64
_localtime64
_gmtime64
_tzset
strftime
api-ms-win-crt-filesystem-l1-1-0
_splitpath_s
api-ms-win-crt-math-l1-1-0
ceilf
advapi32
RegOpenKeyExA
RegQueryValueExA
crypt32
CryptUnprotectData
CryptProtectData
bcrypt
BCryptGenRandom
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
winmm
timeGetTime
iphlpapi
GetAdaptersAddresses
ws2_32
getsockopt
getsockname
select
send
sendto
setsockopt
shutdown
freeaddrinfo
getaddrinfo
WSAWaitForMultipleEvents
WSASocketW
recv
ioctlsocket
WSARecvFrom
WSARecv
WSAIoctl
WSAGetOverlappedResult
WSACreateEvent
WSACloseEvent
getpeername
WSAGetLastError
WSACleanup
WSAStartup
WSASetEvent
gethostname
socket
recvfrom
__WSAFDIsSet
bind
closesocket
connect
WSAResetEvent
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
848KB
Virtual Size
847KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
157KB
Virtual Size
283KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
86KB
Virtual Size
86KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=262, version=25203,
count=1, id=199, version=41118,
count=3, id=259, version=26706,
count=26, id=261, version=26706,
count=8, id=260, version=26706,
count=5, id=257, version=26706,
count=37, id=260, productName=VS2017 v15.8.0 build 26726, version=26726,
count=8, id=260, version=27045,
count=24, id=257, version=25203,
count=355, id=1, productName=Unmarked objects,
count=44, id=261, productName=VS2017 v15.8.0 build 26726, version=26726,
count=1, id=256, productName=VS2017 v15.8.0 build 26726, version=26726,
count=1, id=255, productName=VS2017 v15.8.0 build 26726, version=26726,
count=1, id=151,
count=1, id=258, productName=VS2017 v15.8.0 build 26726, version=26726,
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/origin_helper_tools.html
- SHA256 6391c0c895f92a1581c397bf9bc48634871ccefbd77c5554d046a216de4a9027
- MD5 1c7040322be03019ee2a8467bafe7270
- SHA1 f92720b80faf433472f27c77fbf0437195c502fd
- SHA512 98fb73fdc6bb9d59a25af771c15e5856880d39848a412ab0c29f1700a635de5aced730ae81b89b0596938d468e155964e8eaddfe7cc34f5413a3af9d4a8fadbb
- SSDEEP 1536:5tKxdGMdX5ifoCVEk/RvtP244k7oHo7d9bJ9au62YOOGoGPufEu8nNMWwcdf7NCg:TSGMdX5ifoUEhu61GPuf8wsuU
- TLSH T135933AA971F2247113BB609D118F640372329007350DCC94BAACF8547FBDA6AD6E7BAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Magic FC 27 RBCI V 1.3/Magic FC 27 RB_ci V 1.3/pub.dll
- IMPHASH b49baaf1338fde00bab3881dea207986
- SHA256 20c0b9b082276206dac3799bea7ffd742e166057f6eb8f5673d54ff3c3a24cc8
- MD5 80a8ac4d25d72f9f8742422700a55a32
- SHA1 1f488bb9e346951b4629ce1511357337a02aa261
- SHA512 2b6807ebf41c51908ea8ab726081bb1b8f12f02558f10d11c128f654e5f6c504c55e505089932c3452d28fbddb632cd30e67a7864ebe937f7255931934a3a83e
- SSDEEP 98304:yh7xLG8qCMQsL61uIIz67nLQ8qPOQsL21PSbrPgc:ytNG7on1uI8aLQ7V+
- TLSH T16006E0D964D10AB8C9828634C18927E9F391361A8F7A490F7FDA65002F73D46CDF5B3A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
2c:21:73:53:f3:c3:9a:b5:14:d3:08:44:9f:05:85:ff:a8:d1:2d:4e:ae:be:38:6e:de:db:a8:f6:63:71:4c:bd
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Pub x EMPTERROR
Chains
Sep 29, 2026
CN=Pub x EMPTERROR
Subject
CN=Pub x EMPTERROR
Serial Number
2d:36:ff:81:d2:33:5a:97:4b:82:b3:e0:a2:08:6c:a8
Issuer
CN=Pub x EMPTERROR
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 29, 2026 - Sep 2, 2035
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
67302
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
CloseHandle
PreloadAntiCheat
Name
.text
Size
62KB
Virtual Size
62KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.securom
Size
1.6MB
Virtual Size
1.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.themida
Size
512B
Virtual Size
64B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
UPX0
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.xdata
Size
1024B
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ