Loader.zip
- SHA256 a89216a5a4ee93a0204ef74e8c8f371bbf7275a6d3cbb28a621062331dbc0a8d
Password
1234
Overview
overview
7Static
static
3Loader.zip
windows10-2004-x64
1Loader.zip
windows11-ltsc_2024-x64
1Loader.exe
windows10-2004-x64
1Microsoft....re.dll
windows10-2004-x64
1Microsoft....re.dll
windows11-ltsc_2024-x64
1Microsoft....pf.dll
windows10-2004-x64
1Microsoft....pf.dll
windows11-ltsc_2024-x64
1Newtonsoft.Json.dll
windows10-2004-x64
1Newtonsoft.Json.dll
windows11-ltsc_2024-x64
1Octokit.dll
windows10-2004-x64
1Octokit.dll
windows11-ltsc_2024-x64
1bin/Monaco...o.html
windows10-2004-x64
3bin/Monaco...o.html
windows11-ltsc_2024-x64
3bin/Monaco...der.js
windows10-2004-x64
3bin/Monaco...der.js
windows11-ltsc_2024-x64
3bin/Monaco...lua.js
windows10-2004-x64
3bin/Monaco...lua.js
windows11-ltsc_2024-x64
3bin/Monaco...in.css
windows10-2004-x64
7bin/Monaco...in.css
windows11-ltsc_2024-x64
3bin/Monaco...ain.js
windows10-2004-x64
3bin/Monaco...ain.js
windows11-ltsc_2024-x64
3bin/Monaco....de.js
windows10-2004-x64
3bin/Monaco....de.js
windows11-ltsc_2024-x64
3bin/Monaco....es.js
windows10-2004-x64
3bin/Monaco....es.js
windows11-ltsc_2024-x64
3bin/Monaco....fr.js
windows10-2004-x64
3bin/Monaco....fr.js
windows11-ltsc_2024-x64
3bin/Monaco....it.js
windows10-2004-x64
3bin/Monaco....it.js
windows11-ltsc_2024-x64
3bin/Monaco....ja.js
windows10-2004-x64
3bin/Monaco....ja.js
windows11-ltsc_2024-x64
3bin/Monaco...nls.js
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Loader.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Microsoft.Web.WebView2.Core.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Microsoft.Web.WebView2.Wpf.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Newtonsoft.Json.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Newtonsoft.Json.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Octokit.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Octokit.dll
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
bin/Monaco/Monaco.html
Resource
win10v2004-20260911-en
windows10-2004-x64
10 signatures
150 seconds
Behavioral task
behavioral13
Sample
bin/Monaco/Monaco.html
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
9 signatures
150 seconds
Behavioral task
behavioral14
Sample
bin/Monaco/vs/Loader.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral15
Sample
bin/Monaco/vs/Loader.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral16
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral17
Sample
bin/Monaco/vs/basic-languages/lua/lua.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral18
Sample
bin/Monaco/vs/editor/editor.main.css
Resource
win10v2004-20260911-en
windows10-2004-x64
6 signatures
150 seconds
Behavioral task
behavioral19
Sample
bin/Monaco/vs/editor/editor.main.css
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
Behavioral task
behavioral20
Sample
bin/Monaco/vs/editor/editor.main.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral21
Sample
bin/Monaco/vs/editor/editor.main.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral22
Sample
bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral23
Sample
bin/Monaco/vs/editor/editor.main.nls.de.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral24
Sample
bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral25
Sample
bin/Monaco/vs/editor/editor.main.nls.es.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral26
Sample
bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral27
Sample
bin/Monaco/vs/editor/editor.main.nls.fr.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral28
Sample
bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral29
Sample
bin/Monaco/vs/editor/editor.main.nls.it.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral30
Sample
bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral31
Sample
bin/Monaco/vs/editor/editor.main.nls.ja.js
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral32
Sample
bin/Monaco/vs/editor/editor.main.nls.js
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target Loader.zip
- Size 9.2MB
- Sample261113-pgp2msvw2n
- SHA256 a89216a5a4ee93a0204ef74e8c8f371bbf7275a6d3cbb28a621062331dbc0a8d
- MD5 49cc4c1939405e5bb8a94c902ddf0fba
- SHA1 13d14db71348942e9d3042297cac0f51f417aa69
- SHA512 bc5323253e98ca984e8e3dbbd66b76c9d43adbf400784818a91a257bf9caa50a046262768fdb1eebda9b50ced3aa03bcaf74e73c9730317184ef42541cd0a200
- SSDEEP 196608:IZYGEscaTY7NEbXHIyCHp1AK1e1yhtiLojuoHSiHrcQIRRQPkdVH:ISGJc0SNEbzsgokMuoHPLIR2PkH
- TLSH T125A633A180614329E23791B9B4E5D13918DD0FFEF5D4A98D6120C28316DBEC7CF9F68A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/Loader.exe unpack001/Octokit.dll unpack001/bin/libz3.dll unpack001/version.dll
File Explorer
-
Loader.zip.zip 9.2MB
-
Loader.exe.exe 1.3MB
-
Microsoft.Web.WebView2.Core.dll.dll 615KB
-
Microsoft.Web.WebView2.Wpf.dll.dll 80KB
-
Newtonsoft.Json.dll.dll 695KB
-
Octokit.dll.dll 1.3MB
-
bin/Monaco/Monaco.html.html .js 10KB
-
bin/Monaco/vs/Loader.js.js 27KB
-
bin/Monaco/vs/basic-languages/lua/lua.js5KB
-
bin/Monaco/vs/editor/editor.main.css171KB
-
bin/Monaco/vs/editor/editor.main.js.js 2.0MB
-
bin/Monaco/vs/editor/editor.main.nls.de.js36KB
-
bin/Monaco/vs/editor/editor.main.nls.es.js37KB
-
bin/Monaco/vs/editor/editor.main.nls.fr.js40KB
-
bin/Monaco/vs/editor/editor.main.nls.it.js38KB
-
bin/Monaco/vs/editor/editor.main.nls.ja.js41KB
-
bin/Monaco/vs/editor/editor.main.nls.js31KB
-
bin/Monaco/vs/editor/editor.main.nls.ko.js36KB
-
bin/Monaco/vs/editor/editor.main.nls.ru.js56KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js29KB
-
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js30KB
-
bin/libz3.dll.dll 14.9MB
-
runtimes/win-arm64/native/WebView2Loader.dll137KB
-
runtimes/win-x64/native/WebView2Loader.dll.dll 161KB
-
runtimes/win-x86/native/WebView2Loader.dll.dll 113KB
-
version.dll.dll 302KB
Loader.exe
- IMPHASH 76c4a4ce66421791ac1e74c6dbfdd380
- SHA256 10a2e984540fed0b994bcbbc1a06be11d8dd7355e038455fafbf002141403bfe
- MD5 20b110ea031dea9781c4cbdf8b3a84d8
- SHA1 060489edb1b615bcdfd719cccf355a99b4c9896c
- SHA512 b545cb9aceba5b6b71bdbee504574f61f7ff3b8b6582a30fdebc9b39060c0941f505783a5a41ecb3f655f9f82fe75a9ce4acba7f870b3231b4b69578e89dee47
- SSDEEP 24576:goehbK6qQeIAiGyzMQItIMXGujO/KHYej5QgjJ91s6p0F7HpEWWscw3EtiyADjvp:goehbK6qQeIAiGyzMQItbXbjO/IYej5u
- TLSH T1CB554C6D93E850D9D6BAD27885494A19FA71780D2F638FDB00B4850A3F3BFE14D39B06
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
10
Entry point
10128
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
mstsc.pdb
user32
IsRectEmpty
PtInRect
GetClassInfoW
DefDlgProcW
RegisterClassW
MessageBoxW
GetMenuItemCount
InsertMenuItemW
AllowSetForegroundWindow
CreateDialogParamW
DialogBoxParamW
LoadAcceleratorsW
MsgWaitForMultipleObjectsEx
PeekMessageW
MsgWaitForMultipleObjects
MonitorFromWindow
LoadStringW
UnregisterClassA
SetProcessDPIAware
ScrollWindow
GetScrollInfo
GetDpiForWindow
CharNextW
SetScrollInfo
GetKeyboardLayout
CharLowerW
EnumDisplayDevicesW
CheckRadioButton
DrawIconEx
MapDialogRect
ScreenToClient
SubtractRect
GetMonitorInfoW
GetWindowDC
DrawFocusRect
GetFocus
DrawTextW
EnumDisplayMonitors
IsDlgButtonChecked
GetDlgItemTextW
CreateDialogIndirectParamW
EndPaint
DrawIcon
BeginPaint
SendDlgItemMessageW
GetAncestor
MapWindowPoints
ReleaseDC
GetDC
IsWindowEnabled
SetTimer
GetMenu
KillTimer
ShowWindowAsync
GetWindowTextW
GetClassNameW
GetWindow
RedrawWindow
AdjustWindowRectEx
EnumDisplaySettingsExW
FillRect
GetCursorPos
GetTitleBarInfo
SendInput
EqualRect
EnableWindow
IsWindowVisible
SetWindowRgn
SetWindowLongW
LockWindowUpdate
UpdateWindow
InvalidateRect
SetWindowTextW
MoveWindow
EnableMenuItem
CheckMenuItem
SetMenuItemInfoW
UnregisterClassW
GetClassInfoExW
ShowWindow
GetClientRect
SetWindowPlacement
GetWindowLongW
IsZoomed
LoadCursorW
SetCursor
ModifyMenuW
GetSystemMenu
GetMenuItemInfoW
DeleteMenu
CreateMenu
InsertMenuW
AppendMenuW
PostQuitMessage
IsWindow
DestroyIcon
LoadImageW
RegisterWindowMessageW
SetRect
CopyRect
GetDesktopWindow
SetWindowPos
IntersectRect
OffsetRect
SystemParametersInfoA
GetWindowRect
GetWindowPlacement
IsIconic
GetSystemMetrics
LoadIconW
SetForegroundWindow
DefWindowProcW
GetWindowLongPtrW
SetWindowLongPtrW
RegisterClassExW
IsChild
CreateWindowExW
DestroyWindow
GetDlgItem
SetFocus
SetDlgItemTextW
EndDialog
CheckDlgButton
SendMessageW
PostMessageW
PostThreadMessageW
IsDialogMessageW
TranslateAcceleratorW
DispatchMessageW
TranslateMessage
GetMessageW
CharUpperW
SystemParametersInfoW
msvcrt
ceil
_CxxThrowException
?terminate@@YAXXZ
__CxxFrameHandler3
wcstok
realloc
_errno
_onexit
__dllonexit
_unlock
_lock
_commode
_fmode
_acmdln
memset
_initterm
__setusermatherr
_ismbblead
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
pow
_ltow_s
_wcslwr_s
towlower
wcstol
iswspace
toupper
memcmp
_itow_s
wcstoul
??1exception@@UEAA@XZ
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??1type_info@@UEAA@XZ
_callnewh
wcsftime
gmtime
time
wcsncat_s
memcpy
_vsnwprintf
memcpy_s
__C_specific_handler
wcsncpy_s
malloc
free
wcscpy_s
wcscat_s
_purecall
_wcsicmp
wcstok_s
_wtol
wcsncmp
wcsrchr
_wtoi
wcsstr
swscanf_s
_vsnprintf
wcstombs_s
iswdigit
towupper
memmove
calloc
wcschr
_wcsnicmp
wcscmp
shlwapi
ord388
PathFindExtensionW
StrStrIW
PathStripPathW
PathRemoveFileSpecW
PathAppendW
PathFindFileNameW
ntdll
VerSetConditionMask
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlNtStatusToDosError
RtlInitString
api-ms-win-core-featurestaging-l1-1-0
SubscribeFeatureStateChangeNotification
RecordFeatureUsage
GetFeatureEnabledState
UnsubscribeFeatureStateChangeNotification
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
shcore
SHCreateMemStream
SHStrDupW
dwmapi
DwmGetWindowAttribute
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
WTSCloseServer
WTSOpenServerW
kernel32
GetCommandLineW
TlsSetValue
QueryPerformanceFrequency
GetSystemTime
TrySubmitThreadpoolCallback
SetThreadpoolThreadMinimum
SetThreadpoolThreadMaximum
InitializeCriticalSectionAndSpinCount
FindResourceW
LoadLibraryA
GetProcessId
TerminateThread
ProcessIdToSessionId
GetComputerNameW
InitOnceExecuteOnce
ExpandEnvironmentStringsW
CreateEventExW
LockResource
IsThreadpoolTimerSet
CloseThreadpoolCleanupGroup
CloseThreadpoolCleanupGroupMembers
SetThreadpoolWait
CreateThreadpoolWait
CreateThreadpoolCleanupGroup
CloseThreadpool
CreateThreadpool
GetOverlappedResult
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
DisconnectNamedPipe
CreateThreadpoolIo
CancelThreadpoolIo
StartThreadpoolIo
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
QueueUserWorkItem
ResetEvent
CreateSemaphoreW
FreeLibraryAndExitThread
GetExitCodeThread
WaitForMultipleObjects
CancelWaitableTimer
SetWaitableTimer
CreateWaitableTimerExW
OutputDebugStringA
GetTickCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
WideCharToMultiByte
K32GetModuleFileNameExW
CreateThreadpoolTimer
Sleep
HeapSetInformation
GetSystemDirectoryW
CreateProcessW
GetCurrentThread
GetTickCount64
WriteFile
VerifyVersionInfoW
FindClose
FindNextFileW
FindFirstFileW
GetFileAttributesExW
GetTempPathW
CompareStringW
SetFilePointer
GetACP
GetFullPathNameW
GetFileAttributesW
LocalAlloc
CompareStringOrdinal
CreateDirectoryW
SearchPathW
GetCurrentDirectoryW
LocalFree
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetStartupInfoA
lstrcmpW
GetVersionExA
MulDiv
GetVersionExW
ReadFile
GetFileSize
CreateFileW
GetDateFormatW
GetTimeFormatW
GetLocalTime
DeleteFileW
CreateThread
CreateEventW
SetEvent
InitializeCriticalSection
GetModuleHandleExA
GetModuleFileNameW
FindResourceExW
LoadResource
SystemTimeToFileTime
MapViewOfFile
CreateFileMappingW
LCIDToLocaleName
UnmapViewOfFile
GetLocaleInfoW
GetUserDefaultUILanguage
GetLocaleInfoEx
GetSystemDefaultUILanguage
HeapDestroy
HeapReAlloc
HeapSize
DelayLoadFailureHook
ResolveDelayLoadedAPI
SizeofResource
MultiByteToWideChar
lstrcmpiW
LoadLibraryExW
FreeLibrary
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
RaiseException
IsDebuggerPresent
DebugBreak
GetModuleHandleW
GetProcessHeap
GetCurrentProcessId
CreateMutexExW
GetProcAddress
HeapAlloc
SetThreadpoolTimer
CloseHandle
OpenSemaphoreW
WaitForSingleObjectEx
AcquireSRWLockExclusive
CloseThreadpoolTimer
OutputDebugStringW
ReleaseSRWLockExclusive
GetLastError
FormatMessageW
ReleaseMutex
GetCurrentThreadId
WaitForSingleObject
WaitForThreadpoolTimerCallbacks
GetModuleHandleExW
ReleaseSemaphore
SetLastError
HeapFree
CreateSemaphoreExW
GetModuleFileNameA
TlsAlloc
GetSystemInfo
SwitchToThread
TlsGetValue
TlsFree
OpenThread
normaliz
IdnToAscii
api-ms-win-core-path-l1-1-0
PathAllocCombine
PathCchRemoveExtension
Name
.text
Size
1.0MB
Virtual Size
1.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
fothk
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
200KB
Virtual Size
196KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
40KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
4KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
8KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
12KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, productName=Unmarked objects (old),
count=5, id=259, version=33138,
count=39, id=260, version=33138,
count=13, id=261, version=33138,
count=25, id=257, version=33138,
count=754, id=1, productName=Unmarked objects,
count=320, id=265, version=33138,
count=1, id=255, version=33138,
count=1, id=258, version=33138,
Microsoft.Web.WebView2.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 4a4efdf712ceea4050eb2252ec2a9136cdcf32b9bfbb3ad58d79396f36e9665d
- MD5 46a2bad2d6b66af8279bdec2feb53afe
- SHA1 76e22a752b2720ad0329b5dcf833820bb73c73c3
- SHA512 b958cdcc84885bd67328f810163c087d45113cbc995fa35920297e037d1e1dcc41e03dcf25b060be528cce53ae46dc7fb3d43d2f12390d195978579091d1fc27
- SSDEEP 12288:v6AN7ERpkbC65sPiXqXcN/gIYxmG8WD6ptvxmgHAVxQz8tAgJrP322Uc+iKmDR57:tC
- TLSH T15ED4412223F94619F5F27F79563917608BFABC96BE78C35D8698502D0D72F8099A0333
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Digest
97:fd:ed:ae:3b:1b:78:5f:b5:1e:7c:99:34:83:f0:45:88:47:97:f2:3d:8c:cf:14:f7:66:dc:62:3a:7e:9b:18
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 30, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:521A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:00:0b:d7:aa:7f:1b:2a:17:56:00:01:00:00:02:00
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
625218
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\webview2_api_writer\dotNetAPIWrapper\Microsoft.Web.WebView2.Core\bin\ReleasePackage\Microsoft.Web.WebView2.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
603KB
Virtual Size
602KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1000B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Microsoft.Web.WebView2.Wpf.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 d797f41b5b125b7f155e995808ae68377f3f3876ad4dfd86fe2b5eaaf7f8a569
- MD5 4413cecfc59cd9cc067d8e9609ffa9cf
- SHA1 a345b1b36945279d72a22adbe8653ac81b1e3b90
- SHA512 680afd0c1a0427d440833161633ed47a110af782d6b43a62006b6c13176e3a7621e199a931610772fb3e8250cca0e81c49a6e3b55f7ca9a6c0f8d9b656d559db
- SSDEEP 1536:sG8rrcaIqqE6PV7gIM2KbQy9Zy1w44ha87Y1DHfFWyEb30mpc4Jjr4YeUq+HhxUf:rud96PVY2qm4a8+DHfFC30mpc4Jjr4YI
- TLSH T1EC836D4153BC4423C6EF1BFD7DA091240BB9FA837A52DB9E2A84B1DC1C9739219193B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Digest
fa:82:f1:88:18:25:53:66:2d:63:cb:4a:bd:0e:18:21:3e:2a:be:28:63:53:60:b7:73:d7:0b:69:08:96:75:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 30, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:4C1A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:ff:12:38:7c:f7:c1:65:d6:a1:00:01:00:00:01:ff
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
4
Entry point
77738
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
D:\a\_work\1\s\third_party\edge_webview2\win\wpf_control\Microsoft.Web.WebView2.Wpf\obj\Release Stable APIs\net462\Microsoft.Web.WebView2.Wpf.pdb
mscoree
_CorDllMain
Name
.text
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
984B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Newtonsoft.Json.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 e1e27af7b07eeedf5ce71a9255f0422816a6fc5849a483c6714e1b472044fa9d
- MD5 195ffb7167db3219b217c4fd439eedd6
- SHA1 1e76e6099570ede620b76ed47cf8d03a936d49f8
- SHA512 56eb7f070929b239642dab729537dde2c2287bdb852ad9e80b5358c74b14bc2b2dded910d0e3b6304ea27eb587e5f19db0a92e1cbae6a70fb20b4ef05057e4ac
- SSDEEP 12288:GBja5bBvR8Q0TE2HB0WLmvXbsVG1Gw03RzxNHgKhwFBkjSHXP36RMGy1NqTUO:GBjk38WuBcAbwoA/BkjSHXP36RMG/
- TLSH T166E4394123F98F2BE1AF6B75B4704E1543F9F917A6B5E78F9A04D9A91C43B408E403A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Digest
38:27:11:d0:35:02:fc:58:64:ae:1e:6c:cb:c5:eb:67:eb:5d:dc:c8:86:9e:e4:59:cc:0d:02:0e:5f:d1:fc:9b
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Chains
Mar 8, 2023
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Subject
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Serial Number
06:ce:e1:31:be:6d:55:c8:07:f7:c0:c7:fb:44:e6:20
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 15, 2021 - Jan 14, 2046
Subject
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Serial Number
0a:de:32:e9:50:9b:44:aa:34:b1:da:f1:bc:0e:c8:73
Issuer
CN=DigiCert CS RSA4096 Root G5,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jul 15, 2021 - Jul 14, 2031
Subject
SERIALNUMBER=603 389 068,CN=Json.NET (.NET Foundation),O=Json.NET (.NET Foundation),L=Redmond,ST=Washington,C=US,1.3.6.1.4.1.311.60.2.1.2=#130a57617368696e67746f6e,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Serial Number
0c:d1:40:7a:5a:bd:ed:43:d5:c1:73:12:1d:38:c5:29
Issuer
CN=.NET Foundation Projects Code Signing CA2,O=.NET Foundation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 13, 2021 - Oct 29, 2024
Subject
CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US
Serial Number
0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Sep 21, 2022 - Nov 21, 2033
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
4
Entry point
704578
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
mscoree
_CorDllMain
Name
.text
Size
681KB
Virtual Size
680KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Octokit.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6a48642d6ae464b43a6cb50292618af6c73ada8d726644e50d4fa44a1783f638
- MD5 2c2a65e9cf0776fa77600d5fe3b30783
- SHA1 5b1b997e041f8235ef5b60db885bd2ca2711170b
- SHA512 8b33f2ccb33dafb1bfc29dc8c5283c1483525007b5c4e36e90ade2cf26b223b029d0e24a51e0266c7852323644f44668b26e7ff9e7d4419482e4bd0b3afcab30
- SSDEEP 24576:l8PXZv3QFVC5gcrjWYXFWjeYwqseN63pfC35Ax5zg27nYLYFHVLYh9oH:4XGmmcOYXFWjeYwqseN63pfC35Ax5zgc
- TLSH T140553B313F9C9E6AD25D3776AC60022A9BF1D58A2362EB5B0730F5263C527C69DD0273
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
4
Entry point
1404830
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
Octokit.pdb
mscoree
_CorDllMain
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
bin/Monaco/Monaco.html
- SHA256 b5e998236ced3177e44a7a35b33892751d758275b5623cc050872bab66a738c4
- MD5 6c54f348b6511858b8963c5f5bd836ac
- SHA1 7a87f9f4f7eb9c683f2ceb6766faa9af59ef0760
- SHA512 95cab71f791aa09ac10b4d300202703588fd905d3a844063b7b7fcb5dc86e775096d7f8df65b09cff5533960224a3a09dd921ac843a81a0332f1e83d6c778aca
- SSDEEP 192:aEUd3PorvYIc5FUp5keghKcCI2MCTJ3+NLSaPh/WCY/jZfOs+TIDnvnoae:8d3Potcv85keghHwjD+TIDnoae
- TLSH T10422A6B9B34E140B01D65315A8F77184FE3CC1369217489FBBDEE610E4ED499435B2BA
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/Loader.js
- SHA256 0512d9ed3e5bb3daef94aa5c16a6c3e2ee26ffed9de00d1434ffe46a027b16b9
- MD5 8a3086f6c6298f986bda09080dd003b1
- SHA1 8c7d41c586bfa015fb5cc50a2fdc547711b57c3c
- SHA512 9e586742f4e19938132e41145deec584a7b8c7e111b3c6e9254f8d11db632ebe4d66898458ed7bcfc0614d06e20eb33d5a6a8eb8b32d91110557255cf1dbf017
- SSDEEP 768:3J6C/c2x0cAu57XQxJRDRi+R/TvrCv3zM2GRl0VEj:Z6grH7qTXRvmDI
- TLSH T17DD294CEBB9474234247F8E8D43F001BE2B6955E544D842C710DD8EE5CB998AA23EF78
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/basic-languages/lua/lua.js
- SHA256 fc2d6fb52a524a56cd8ac53bfe4bad733f246e76dc73cbec4c61be32d282ac42
- MD5 8706d861294e09a1f2f7e63d19e5fcb7
- SHA1 fa5f4bdc6c2f1728f65c41fb5c539211a24b6f23
- SHA512 1f9297eb4392db612630f824069afdc9d49259aba6361fb0b87372123ada067bc27d10d0623dc1eb7494da55c82840c5521f6fef74c1ada3b0fd801755234f1f
- SSDEEP 96:SD3yDUfRD5dyVdO29SvE/TMCL8CvcOAtOfxSVkxMZlMfE:nD4Ldyn7Ss/TMmUtOfxhxjE
- TLSH T11CB11ED89C9951594AE1E766879EE0A6E1544203CC3C7D74B7EC438C4F8CA4C86BE73D
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.css
- SHA256 2ec118616a1370e7c37342da85834ca1819400c28f83abfcbbb1ef50b51f7701
- MD5 233217455a3ef3604bf4942024b94f98
- SHA1 95cd3ce46f4ca65708ec25d59dddbfa3fc44e143
- SHA512 6f4cb7b88673666b7dc1beab3ec2aec4d7d353e6da9f6f14ed2fee8848c7da34ee5060d9eb34ecbb5db71b5b98e3f8582c09ef3efe4f2d9d3135dea87d497455
- SSDEEP 1536:ZxP4PUPVP0PAPeMi76Q4TVq5bbhLynlDTkDatDF8Jmmvgs0aMJkn:p2bIRkDSYmmvgs0aMJK
- TLSH T1E9041AAF96061F4F26E54423C195BFAA38FDC1B6F0128ED5E87D3B64C00D6D922961BC
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.js
- SHA256 93d28520c07fbca09e20886087f28797bb7bd0e6cf77400153aab5ae67e3ce18
- MD5 9399a8eaa741d04b0ae6566a5ebb8106
- SHA1 5646a9d35b773d784ad914417ed861c5cba45e31
- SHA512 d37ef5a848e371f7db9616a4bf8b5347449abb3e244a5527396756791583cad455802450ceeb88dce39642c47aceaf2be6b95bede23b9ed68b5d4b7b9022b9c8
- SSDEEP 24576:SmmBNDw4gCXJkB4nIg2IxhbaeZYIMsNjvit4f:wDw4gCXJk62+aeKIMsNjvit4f
- TLSH T12A95E7997155342243C7A0B6A47F050FB33A54ADE80A406CB7B8D8ED2DBE5896337F78
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.de.js
- SHA256 0dee462d5fb231f169f6cbc432465a43fd445c011fe650e29f5fb2bccc31eaae
- MD5 4d83bc1bced6f773423be6f939472cfe
- SHA1 1b42889a7f580df9f7d399c33141d38548143ed1
- SHA512 c53d522438767a15b5711099fee0acb62ff21289b62640d1a4823a90c8a7d8836bc932daae477d5188b1ba78c50c581284c4d7379efb532f37d356add97ac8e4
- SSDEEP 768:jADv7LbgRyefe80QqYax/mZgb2ET1UZ0IMlYmz7w0hxH1N1Bg93RyFGAIDB7wZ9m:jADDx80QqYax/mmb2YLIEYmz7JhxH10D
- TLSH T111F208A2AD43A13B5F8523D2A6415C377E19E1AD7A12500D48BEC52B318B9FAC3DF433
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.es.js
- SHA256 203ff3591e02eb7b55a591e53919cc337f8dea73e6446fc3493227761c0794ba
- MD5 b371235f971baa51f58f123f40c4435a
- SHA1 843d4a2d214c7d9da650cf4d0c6981ac1dab69c6
- SHA512 77d43490f1208dde16b6773551ea983cb2352455178ea0e3d4d4b2f2e05dc406cafae89738001d708b780b58882cf5448eb7a8d1c11aa7b8e87915a390da618a
- SSDEEP 384:hwuiA9wZFjNzWZQz7uDlnDEuoKZvGrkEq1EhBR3H6Sg4eUz+JWCHcxS+S9SxS9tf:Y9ZCZQOtDZSj1XJS+S9SxS9tx78teB
- TLSH T19503B83A46CC172315D343CEF193D513E144AC8AB168C2D7A1BD9BA630CCE9CD56FA66
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.fr.js
- SHA256 7fde40b2b212d274617232de09452c6cb896e8a3c6b9e0b459f067cd07f31a99
- MD5 d319e61fc6b357b9a5d8e3bbaa44ce3c
- SHA1 b1539b082b2b8290f05dfe17d6fee3d64b2ec244
- SHA512 6ba80b90242dc55ecfa1678e7f8506ed9add4bf08067b125ba63d42b8e8e4455507a86369f6fac6c9d10565d083e7364d4fc79d62e9bd460fe49957c91f598e6
- SSDEEP 768:HlKogi6Q3JbQWxxGmmrHeHPO10xSgGvJ1COIoJoZjbEMO9ms:Hl8KbQwKRavGJoZG
- TLSH T1AB03962BA6C422920EC317C3F5636593E834C48C739ED315ADAB56D912C64DCE2DFAE1
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.it.js
- SHA256 f67cec6dbf98c98c834638d20df53c5a770edada7f26ebf6d0b7dfec60f7a4ab
- MD5 a8855a662eb4d3a771fdab7ba6287def
- SHA1 a78b57810ac8e9704e97897c6168f4140d2eadf7
- SHA512 1c03f8b243701870d8a17e5565da6c65c3f1d76dfb55c88cf68578a4754434a071565da9147e7c833de588a5907b5ece07e018dec52c79d9b2914c964a48a4b5
- SSDEEP 768:4klNUuMam1xYhz2LyXSXBjlHtvnYyjMbRgD5SL2KAqI0UGmGfpspuoeu317K93Ph:5f0SL2KAqKKNpCi
- TLSH T12203DA3A458122112DCB23DFF573648AFB6668CC7E5C315614BC462C21CED98B2DE7BA
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ja.js
- SHA256 ea9f5e8993017f858cd9ee70aac3d7990ca85eaf40a052025e530fb1c300837f
- MD5 a1f3c9e940206ca310147d644305a6e1
- SHA1 005a8f7023b9d873962c7272203cc0c0d0ccc624
- SHA512 f98ad1e4c127c3aa4a4ff2fa7ed2a65b5d32644211679e42d70aae03f9c0af1da7704061c28e95cbb25ad14745b1d086c9a49492119d0f97653a0b817823bc69
- SSDEEP 384:hIDtFoY0u0ZAITlMRFG1yu9RwJUcQ8bo6CdXtK+c3YcnI+PjnN3H6Sg4dcRID9Dh:VW6RwJrQNdbc9N1aBDzTG7e2ZLlx/
- TLSH T10213937CABC0A83A0D25D3B31A8DB4E67815ED5BFC227232807DF42579B02CDD585AB5
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.js
- SHA256 fdd9d64ce5284373d1541528d15e2aa8aa3a4adc11b51b3d71d3a3953f8bcc48
- MD5 74dd2381ddbb5af80ce28aefed3068fc
- SHA1 0996dc91842ab20387e08a46f3807a3f77958902
- SHA512 8841e0823905cf3168f388a7aeaf5edd32d44902035ba2078202193354caf8cd74cb4cab920e455404575739f35e19ea5f3d88eab012c4ebefc0ccb1ed19a46e
- SSDEEP 384:h03CdtOurX25WyV1Vdf40CJjocZC6F7PKUvRjAaswHq9x3H6Sg4NFVlQlUDZpLjb:23mmysb1zVes3pxCSgwgwjhb
- TLSH T153E2B767A78813372A8302DBB2DED194BB1A597D7351034678AD943832C64F0A3BF9F5
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ko.js
- SHA256 100ca482c015571ed9aad97c2dcc5e266b270a650ce892507443b5d4f32df64f
- MD5 9ccf83d22e9a9bfafa2000f366ac47e6
- SHA1 be61e121af1a363aa66d875f46e78562a603566e
- SHA512 3d68816994abff5c528610733cc729e91d390422c2ee2259dcef3cc4db9a599c1f3800f412259fe2f9a700bf2847b942a253986c011c659868bc9edaae6c2f16
- SSDEEP 384:hS67TmO5oU1Yh4XK8ApE6/z2dHDNV1KiAaA+17tDDN3H6Sg4s/zKz8G3uyroDXYd:rmO5oGXrmi1zDB12zKzuyroKcNVk
- TLSH T1400342B379CB979825478A855AA1B675C382E677FB830080DC9ACD70CD588E3454F8FB
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.ru.js
- SHA256 fa180f7b77ee252aefe73ba5993fbe7c89f43482358d7fd32e8e2f50b3b21bed
- MD5 fd1aa66906d2b3c0c9b734b17f04d73b
- SHA1 299145469d5d5397a42274ccc908c865ebc46cfa
- SHA512 235c2ea1806c13dc0b85f06b5c9f2f811bd145968e2a0ad47c3fa1e063d408efc034dca7baf0b91942cc34e995d1274692c5556c2fb875dbb1054157da9c0132
- SSDEEP 768:CXH0AKgvFBBK1ED81Z0LVdcan9oUxPr1TPgFuEFYPm/XftWZc:CXHXNtBBK1SLVdcan9oWPgFuEFYPm/d
- TLSH T130439CA256DA50AD0201B10BDD087E497EAB86FE3FAB533605B43D7E34F3024C76D65A
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
- SHA256 ac881e6f56544ed9b8dd4fd8fd8a73f1da864fb8d79d91c45f5a51f923bd5287
- MD5 f954ac1091c6d0b640ed5f0abdcd8adb
- SHA1 43e0d5e39910d124c384549df0b119ad1ebb12b3
- SHA512 8aff4877bf97ca29dfd5555fe5078ed3f05ac99c43f12c9b1c4d77ca11b1d040a81e0769c10a46a0bb32f3ffe72ae1a223faf5276d05a11f981aa7677e140c83
- SSDEEP 768:FzMPbIhYBG5OcP2WyCzVsEJvjA1agnGMR:F8fcPN8Gw
- TLSH T195D2C7522B8C7FFA3C416396971EC0527A04A75B723B9022A3F3FD5C15A14AE47CAC72
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
- SHA256 7751df224ac12dbc2e918b12fdbaa465306b6c511e4e1587790163edac18ad46
- MD5 73031ff9956da03354038b3185222af8
- SHA1 712cbf8027cae6c422490499538ec4a0928c6a78
- SHA512 48b80e78a6751ff58eb33ae92f3ad0e31d2e719d9dc9f4926db41e44f8ca9819cea7b657196f4f96c8a1291d57c59c70ffcd64cc9f8cdffc12bc6b5ff6c50e77
- SSDEEP 768:pEOtM9oECeRbdFF0D1N+QZyzB0StZ4XUeqJ1wrv6Vl9YLz1/ewyOm:HXEJpdFF0xN+QyoUeqJ1wrv6Vl9Y8wo
- TLSH T1D2D209720FFEABF53E42B3AD731912616D0D6B0A78323121157DBEA419975CC13DA872
- MD5 SHA1 SHA512 SSDEEP TLSH
bin/libz3.dll
- IMPHASH 9b3a22510244f4d252f7e64c765edec4
- SHA256 7db664f4f0a1eb059d50327b338813cb5cfd2492f590846899e50df533fa77fb
- MD5 b0097e1ea9d0e44eee5b2d28681e57ca
- SHA1 4d432a82588f1ee37a60b88d63341619e367d862
- SHA512 aa32f14e8aae31d93023c0ad7484039ead03914413f251a35ccfb80114fe1e542b4b29415642851472b076959701cae0cde151bfa5af6a7134a0c0f409bf4a29
- SSDEEP 393216:/E6xIyu++Qq0w3aJp9lAqcJgwVwGnudpXASLCBrJ/k+hB4l8:/WNcqB4l
- TLSH T18AF67B9B52AC10E9D1FBC2BC8A1BD917DBB13419037452EB15A44A6A2F13FF2977E700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
1234
Minor OS version
0
Major OS version
6
Entry point
12777616
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
kernel32
GlobalMemoryStatusEx
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WakeAllConditionVariable
GetTickCount64
GetCurrentThreadId
SleepConditionVariableSRW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemTimeAsFileTime
msvcp140
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?setf@ios_base@std@@QEAAHHH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEBV12@@Z
_Query_perf_counter
_Query_perf_frequency
_Thrd_join
_Thrd_yield
_Thrd_id
_Cnd_init_in_situ
_Cnd_wait
_Cnd_signal
_Cnd_do_broadcast_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Thrd_hardware_concurrency
?_Xbad_function_call@std@@YAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Id_cnt@id@locale@std@@0HA
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
??7ios_base@std@@QEBA_NXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
_Cnd_broadcast
?fail@ios_base@std@@QEBA_NXZ
?bad@ios_base@std@@QEBA_NXZ
?eof@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
_Mtx_init_in_situ
_Mtx_lock
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??Bios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
vcruntime140
__current_exception_context
__std_type_info_destroy_list
__RTtypeid
__current_exception
__C_specific_handler
__std_type_info_name
__std_type_info_compare
__RTDynamicCast
_purecall
strchr
memmove
__std_terminate
memcmp
_CxxThrowException
__std_exception_destroy
__std_exception_copy
memset
memcpy
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-string-l1-1-0
isalnum
isspace
strncmp
strlen
strcmp
isdigit
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
_msize
realloc
free
api-ms-win-crt-runtime-l1-1-0
signal
raise
exit
_errno
terminate
_set_invalid_parameter_handler
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e
_beginthreadex
_invoke_watson
api-ms-win-crt-convert-l1-1-0
atoi
strtol
api-ms-win-crt-math-l1-1-0
sqrt
ceilf
log2
ceil
exp
log
floor
pow
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__acrt_iob_func
fflush
__stdio_common_vfprintf
__stdio_common_vsprintf
_get_stream_buffer_pointers
fclose
fgetc
fgetpos
fputc
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
Z3_add_const_interp
Z3_add_func_interp
Z3_add_rec_def
Z3_algebraic_add
Z3_algebraic_div
Z3_algebraic_eq
Z3_algebraic_eval
Z3_algebraic_ge
Z3_algebraic_get_i
Z3_algebraic_get_poly
Z3_algebraic_gt
Z3_algebraic_is_neg
Z3_algebraic_is_pos
Z3_algebraic_is_value
Z3_algebraic_is_zero
Z3_algebraic_le
Z3_algebraic_lt
Z3_algebraic_mul
Z3_algebraic_neq
Z3_algebraic_power
Z3_algebraic_root
Z3_algebraic_roots
Z3_algebraic_sign
Z3_algebraic_sub
Z3_app_to_ast
Z3_append_log
Z3_apply_result_dec_ref
Z3_apply_result_get_num_subgoals
Z3_apply_result_get_subgoal
Z3_apply_result_inc_ref
Z3_apply_result_to_string
Z3_ast_map_contains
Z3_ast_map_dec_ref
Z3_ast_map_erase
Z3_ast_map_find
Z3_ast_map_inc_ref
Z3_ast_map_insert
Z3_ast_map_keys
Z3_ast_map_reset
Z3_ast_map_size
Z3_ast_map_to_string
Z3_ast_to_string
Z3_ast_vector_dec_ref
Z3_ast_vector_get
Z3_ast_vector_inc_ref
Z3_ast_vector_push
Z3_ast_vector_resize
Z3_ast_vector_set
Z3_ast_vector_size
Z3_ast_vector_to_string
Z3_ast_vector_translate
Z3_benchmark_to_smtlib_string
Z3_close_log
Z3_constructor_num_fields
Z3_datatype_update_field
Z3_dec_ref
Z3_del_config
Z3_del_constructor
Z3_del_constructor_list
Z3_del_context
Z3_disable_trace
Z3_enable_concurrent_dec_ref
Z3_enable_trace
Z3_eval_smtlib2_string
Z3_finalize_memory
Z3_fixedpoint_add_callback
Z3_fixedpoint_add_constraint
Z3_fixedpoint_add_cover
Z3_fixedpoint_add_fact
Z3_fixedpoint_add_invariant
Z3_fixedpoint_add_rule
Z3_fixedpoint_assert
Z3_fixedpoint_dec_ref
Z3_fixedpoint_from_file
Z3_fixedpoint_from_string
Z3_fixedpoint_get_answer
Z3_fixedpoint_get_assertions
Z3_fixedpoint_get_cover_delta
Z3_fixedpoint_get_ground_sat_answer
Z3_fixedpoint_get_help
Z3_fixedpoint_get_num_levels
Z3_fixedpoint_get_param_descrs
Z3_fixedpoint_get_reachable
Z3_fixedpoint_get_reason_unknown
Z3_fixedpoint_get_rule_names_along_trace
Z3_fixedpoint_get_rules
Z3_fixedpoint_get_rules_along_trace
Z3_fixedpoint_get_statistics
Z3_fixedpoint_inc_ref
Z3_fixedpoint_init
Z3_fixedpoint_query
Z3_fixedpoint_query_from_lvl
Z3_fixedpoint_query_relations
Z3_fixedpoint_register_relation
Z3_fixedpoint_set_params
Z3_fixedpoint_set_predicate_representation
Z3_fixedpoint_set_reduce_app_callback
Z3_fixedpoint_set_reduce_assign_callback
Z3_fixedpoint_to_string
Z3_fixedpoint_update_rule
Z3_fpa_get_ebits
Z3_fpa_get_numeral_exponent_bv
Z3_fpa_get_numeral_exponent_int64
Z3_fpa_get_numeral_exponent_string
Z3_fpa_get_numeral_sign
Z3_fpa_get_numeral_sign_bv
Z3_fpa_get_numeral_significand_bv
Z3_fpa_get_numeral_significand_string
Z3_fpa_get_numeral_significand_uint64
Z3_fpa_get_sbits
Z3_fpa_is_numeral_inf
Z3_fpa_is_numeral_nan
Z3_fpa_is_numeral_negative
Z3_fpa_is_numeral_normal
Z3_fpa_is_numeral_positive
Z3_fpa_is_numeral_subnormal
Z3_fpa_is_numeral_zero
Z3_func_decl_to_ast
Z3_func_decl_to_string
Z3_func_entry_dec_ref
Z3_func_entry_get_arg
Z3_func_entry_get_num_args
Z3_func_entry_get_value
Z3_func_entry_inc_ref
Z3_func_interp_add_entry
Z3_func_interp_dec_ref
Z3_func_interp_get_arity
Z3_func_interp_get_else
Z3_func_interp_get_entry
Z3_func_interp_get_num_entries
Z3_func_interp_inc_ref
Z3_func_interp_set_else
Z3_get_algebraic_number_lower
Z3_get_algebraic_number_upper
Z3_get_app_arg
Z3_get_app_decl
Z3_get_app_num_args
Z3_get_arity
Z3_get_array_sort_domain
Z3_get_array_sort_domain_n
Z3_get_array_sort_range
Z3_get_as_array_func_decl
Z3_get_ast_hash
Z3_get_ast_id
Z3_get_ast_kind
Z3_get_bool_value
Z3_get_bv_sort_size
Z3_get_datatype_sort_constructor
Z3_get_datatype_sort_constructor_accessor
Z3_get_datatype_sort_num_constructors
Z3_get_datatype_sort_recognizer
Z3_get_decl_ast_parameter
Z3_get_decl_double_parameter
Z3_get_decl_func_decl_parameter
Z3_get_decl_int_parameter
Z3_get_decl_kind
Z3_get_decl_name
Z3_get_decl_num_parameters
Z3_get_decl_parameter_kind
Z3_get_decl_rational_parameter
Z3_get_decl_sort_parameter
Z3_get_decl_symbol_parameter
Z3_get_denominator
Z3_get_depth
Z3_get_domain
Z3_get_domain_size
Z3_get_error_code
Z3_get_error_msg
Z3_get_estimated_alloc_size
Z3_get_finite_domain_sort_size
Z3_get_full_version
Z3_get_func_decl_id
Z3_get_global_param_descrs
Z3_get_implied_equalities
Z3_get_index_value
Z3_get_lstring
Z3_get_num_probes
Z3_get_num_simplifiers
Z3_get_num_tactics
Z3_get_numeral_binary_string
Z3_get_numeral_decimal_string
Z3_get_numeral_double
Z3_get_numeral_int
Z3_get_numeral_int64
Z3_get_numeral_rational_int64
Z3_get_numeral_small
Z3_get_numeral_string
Z3_get_numeral_uint
Z3_get_numeral_uint64
Z3_get_numerator
Z3_get_pattern
Z3_get_pattern_num_terms
Z3_get_probe_name
Z3_get_quantifier_body
Z3_get_quantifier_bound_name
Z3_get_quantifier_bound_sort
Z3_get_quantifier_id
Z3_get_quantifier_no_pattern_ast
Z3_get_quantifier_num_bound
Z3_get_quantifier_num_no_patterns
Z3_get_quantifier_num_patterns
Z3_get_quantifier_pattern_ast
Z3_get_quantifier_skolem_id
Z3_get_quantifier_weight
Z3_get_range
Z3_get_re_sort_basis
Z3_get_relation_arity
Z3_get_relation_column
Z3_get_seq_sort_basis
Z3_get_simplifier_name
Z3_get_sort
Z3_get_sort_id
Z3_get_sort_kind
Z3_get_sort_name
Z3_get_string
Z3_get_string_contents
Z3_get_string_length
Z3_get_symbol_int
Z3_get_symbol_kind
Z3_get_symbol_string
Z3_get_tactic_name
Z3_get_tuple_sort_field_decl
Z3_get_tuple_sort_mk_decl
Z3_get_tuple_sort_num_fields
Z3_get_version
Z3_global_param_get
Z3_global_param_reset_all
Z3_global_param_set
Z3_goal_assert
Z3_goal_convert_model
Z3_goal_dec_ref
Z3_goal_depth
Z3_goal_formula
Z3_goal_inc_ref
Z3_goal_inconsistent
Z3_goal_is_decided_sat
Z3_goal_is_decided_unsat
Z3_goal_num_exprs
Z3_goal_precision
Z3_goal_reset
Z3_goal_size
Z3_goal_to_dimacs_string
Z3_goal_to_string
Z3_goal_translate
Z3_inc_ref
Z3_interrupt
Z3_is_algebraic_number
Z3_is_app
Z3_is_as_array
Z3_is_char_sort
Z3_is_eq_ast
Z3_is_eq_func_decl
Z3_is_eq_sort
Z3_is_ground
Z3_is_lambda
Z3_is_numeral_ast
Z3_is_quantifier_exists
Z3_is_quantifier_forall
Z3_is_re_sort
Z3_is_seq_sort
Z3_is_string
Z3_is_string_sort
Z3_is_well_sorted
Z3_mk_abs
Z3_mk_add
Z3_mk_and
Z3_mk_app
Z3_mk_array_default
Z3_mk_array_ext
Z3_mk_array_sort
Z3_mk_array_sort_n
Z3_mk_as_array
Z3_mk_ast_map
Z3_mk_ast_vector
Z3_mk_atleast
Z3_mk_atmost
Z3_mk_bit2bool
Z3_mk_bool_sort
Z3_mk_bound
Z3_mk_bv2int
Z3_mk_bv_numeral
Z3_mk_bv_sort
Z3_mk_bvadd
Z3_mk_bvadd_no_overflow
Z3_mk_bvadd_no_underflow
Z3_mk_bvand
Z3_mk_bvashr
Z3_mk_bvlshr
Z3_mk_bvmul
Z3_mk_bvmul_no_overflow
Z3_mk_bvmul_no_underflow
Z3_mk_bvnand
Z3_mk_bvneg
Z3_mk_bvneg_no_overflow
Z3_mk_bvnor
Z3_mk_bvnot
Z3_mk_bvor
Z3_mk_bvredand
Z3_mk_bvredor
Z3_mk_bvsdiv
Z3_mk_bvsdiv_no_overflow
Z3_mk_bvsge
Z3_mk_bvsgt
Z3_mk_bvshl
Z3_mk_bvsle
Z3_mk_bvslt
Z3_mk_bvsmod
Z3_mk_bvsrem
Z3_mk_bvsub
Z3_mk_bvsub_no_overflow
Z3_mk_bvsub_no_underflow
Z3_mk_bvudiv
Z3_mk_bvuge
Z3_mk_bvugt
Z3_mk_bvule
Z3_mk_bvult
Z3_mk_bvurem
Z3_mk_bvxnor
Z3_mk_bvxor
Z3_mk_char
Z3_mk_char_from_bv
Z3_mk_char_is_digit
Z3_mk_char_le
Z3_mk_char_sort
Z3_mk_char_to_bv
Z3_mk_char_to_int
Z3_mk_concat
Z3_mk_config
Z3_mk_const
Z3_mk_const_array
Z3_mk_constructor
Z3_mk_constructor_list
Z3_mk_context
Z3_mk_context_rc
Z3_mk_datatype
Z3_mk_datatype_sort
Z3_mk_datatypes
Z3_mk_distinct
Z3_mk_div
Z3_mk_divides
Z3_mk_empty_set
Z3_mk_enumeration_sort
Z3_mk_eq
Z3_mk_exists
Z3_mk_exists_const
Z3_mk_ext_rotate_left
Z3_mk_ext_rotate_right
Z3_mk_extract
Z3_mk_false
Z3_mk_finite_domain_sort
Z3_mk_fixedpoint
Z3_mk_forall
Z3_mk_forall_const
Z3_mk_fpa_abs
Z3_mk_fpa_add
Z3_mk_fpa_div
Z3_mk_fpa_eq
Z3_mk_fpa_fma
Z3_mk_fpa_fp
Z3_mk_fpa_geq
Z3_mk_fpa_gt
Z3_mk_fpa_inf
Z3_mk_fpa_is_infinite
Z3_mk_fpa_is_nan
Z3_mk_fpa_is_negative
Z3_mk_fpa_is_normal
Z3_mk_fpa_is_positive
Z3_mk_fpa_is_subnormal
Z3_mk_fpa_is_zero
Z3_mk_fpa_leq
Z3_mk_fpa_lt
Z3_mk_fpa_max
Z3_mk_fpa_min
Z3_mk_fpa_mul
Z3_mk_fpa_nan
Z3_mk_fpa_neg
Z3_mk_fpa_numeral_double
Z3_mk_fpa_numeral_float
Z3_mk_fpa_numeral_int
Z3_mk_fpa_numeral_int64_uint64
Z3_mk_fpa_numeral_int_uint
Z3_mk_fpa_rem
Z3_mk_fpa_rna
Z3_mk_fpa_rne
Z3_mk_fpa_round_nearest_ties_to_away
Z3_mk_fpa_round_nearest_ties_to_even
Z3_mk_fpa_round_to_integral
Z3_mk_fpa_round_toward_negative
Z3_mk_fpa_round_toward_positive
Z3_mk_fpa_round_toward_zero
Z3_mk_fpa_rounding_mode_sort
Z3_mk_fpa_rtn
Z3_mk_fpa_rtp
Z3_mk_fpa_rtz
Z3_mk_fpa_sort
Z3_mk_fpa_sort_128
Z3_mk_fpa_sort_16
Z3_mk_fpa_sort_32
Z3_mk_fpa_sort_64
Z3_mk_fpa_sort_double
Z3_mk_fpa_sort_half
Z3_mk_fpa_sort_quadruple
Z3_mk_fpa_sort_single
Z3_mk_fpa_sqrt
Z3_mk_fpa_sub
Z3_mk_fpa_to_fp_bv
Z3_mk_fpa_to_fp_float
Z3_mk_fpa_to_fp_int_real
Z3_mk_fpa_to_fp_real
Z3_mk_fpa_to_fp_signed
Z3_mk_fpa_to_fp_unsigned
Z3_mk_fpa_to_ieee_bv
Z3_mk_fpa_to_real
Z3_mk_fpa_to_sbv
Z3_mk_fpa_to_ubv
Z3_mk_fpa_zero
Z3_mk_fresh_const
Z3_mk_fresh_func_decl
Z3_mk_full_set
Z3_mk_func_decl
Z3_mk_ge
Z3_mk_goal
Z3_mk_gt
Z3_mk_iff
Z3_mk_implies
Z3_mk_int
Z3_mk_int2bv
Z3_mk_int2real
Z3_mk_int64
Z3_mk_int_sort
Z3_mk_int_symbol
Z3_mk_int_to_str
Z3_mk_is_int
Z3_mk_ite
Z3_mk_lambda
Z3_mk_lambda_const
Z3_mk_le
Z3_mk_linear_order
Z3_mk_list_sort
Z3_mk_lstring
Z3_mk_lt
Z3_mk_map
Z3_mk_mod
Z3_mk_model
Z3_mk_mul
Z3_mk_not
Z3_mk_numeral
Z3_mk_optimize
Z3_mk_or
Z3_mk_params
Z3_mk_parser_context
Z3_mk_partial_order
Z3_mk_pattern
Z3_mk_pbeq
Z3_mk_pbge
Z3_mk_pble
Z3_mk_piecewise_linear_order
Z3_mk_power
Z3_mk_probe
Z3_mk_quantifier
Z3_mk_quantifier_const
Z3_mk_quantifier_const_ex
Z3_mk_quantifier_ex
Z3_mk_re_allchar
Z3_mk_re_complement
Z3_mk_re_concat
Z3_mk_re_diff
Z3_mk_re_empty
Z3_mk_re_full
Z3_mk_re_intersect
Z3_mk_re_loop
Z3_mk_re_option
Z3_mk_re_plus
Z3_mk_re_power
Z3_mk_re_range
Z3_mk_re_sort
Z3_mk_re_star
Z3_mk_re_union
Z3_mk_real
Z3_mk_real2int
Z3_mk_real_int64
Z3_mk_real_sort
Z3_mk_rec_func_decl
Z3_mk_rem
Z3_mk_repeat
Z3_mk_rotate_left
Z3_mk_rotate_right
Z3_mk_sbv_to_str
Z3_mk_select
Z3_mk_select_n
Z3_mk_seq_at
Z3_mk_seq_concat
Z3_mk_seq_contains
Z3_mk_seq_empty
Z3_mk_seq_extract
Z3_mk_seq_foldl
Z3_mk_seq_foldli
Z3_mk_seq_in_re
Z3_mk_seq_index
Z3_mk_seq_last_index
Z3_mk_seq_length
Z3_mk_seq_map
Z3_mk_seq_mapi
Z3_mk_seq_nth
Z3_mk_seq_prefix
Z3_mk_seq_replace
Z3_mk_seq_sort
Z3_mk_seq_suffix
Z3_mk_seq_to_re
Z3_mk_seq_unit
Z3_mk_set_add
Z3_mk_set_complement
Z3_mk_set_del
Z3_mk_set_difference
Z3_mk_set_has_size
Z3_mk_set_intersect
Z3_mk_set_member
Z3_mk_set_sort
Z3_mk_set_subset
Z3_mk_set_union
Z3_mk_sign_ext
Z3_mk_simple_solver
Z3_mk_simplifier
Z3_mk_solver
Z3_mk_solver_for_logic
Z3_mk_solver_from_tactic
Z3_mk_store
Z3_mk_store_n
Z3_mk_str_le
Z3_mk_str_lt
Z3_mk_str_to_int
Z3_mk_string
Z3_mk_string_from_code
Z3_mk_string_sort
Z3_mk_string_symbol
Z3_mk_string_to_code
Z3_mk_sub
Z3_mk_tactic
Z3_mk_transitive_closure
Z3_mk_tree_order
Z3_mk_true
Z3_mk_tuple_sort
Z3_mk_type_variable
Z3_mk_u32string
Z3_mk_ubv_to_str
Z3_mk_unary_minus
Z3_mk_uninterpreted_sort
Z3_mk_unsigned_int
Z3_mk_unsigned_int64
Z3_mk_xor
Z3_mk_zero_ext
Z3_model_dec_ref
Z3_model_eval
Z3_model_extrapolate
Z3_model_get_const_decl
Z3_model_get_const_interp
Z3_model_get_func_decl
Z3_model_get_func_interp
Z3_model_get_num_consts
Z3_model_get_num_funcs
Z3_model_get_num_sorts
Z3_model_get_sort
Z3_model_get_sort_universe
Z3_model_has_interp
Z3_model_inc_ref
Z3_model_to_string
Z3_model_translate
Z3_open_log
Z3_optimize_assert
Z3_optimize_assert_and_track
Z3_optimize_assert_soft
Z3_optimize_check
Z3_optimize_dec_ref
Z3_optimize_from_file
Z3_optimize_from_string
Z3_optimize_get_assertions
Z3_optimize_get_help
Z3_optimize_get_lower
Z3_optimize_get_lower_as_vector
Z3_optimize_get_model
Z3_optimize_get_objectives
Z3_optimize_get_param_descrs
Z3_optimize_get_reason_unknown
Z3_optimize_get_statistics
Z3_optimize_get_unsat_core
Z3_optimize_get_upper
Z3_optimize_get_upper_as_vector
Z3_optimize_inc_ref
Z3_optimize_maximize
Z3_optimize_minimize
Z3_optimize_pop
Z3_optimize_push
Z3_optimize_register_model_eh
Z3_optimize_set_initial_value
Z3_optimize_set_params
Z3_optimize_to_string
Z3_param_descrs_dec_ref
Z3_param_descrs_get_documentation
Z3_param_descrs_get_kind
Z3_param_descrs_get_name
Z3_param_descrs_inc_ref
Z3_param_descrs_size
Z3_param_descrs_to_string
Z3_params_dec_ref
Z3_params_inc_ref
Z3_params_set_bool
Z3_params_set_double
Z3_params_set_symbol
Z3_params_set_uint
Z3_params_to_string
Z3_params_validate
Z3_parse_smtlib2_file
Z3_parse_smtlib2_string
Z3_parser_context_add_decl
Z3_parser_context_add_sort
Z3_parser_context_dec_ref
Z3_parser_context_from_string
Z3_parser_context_inc_ref
Z3_pattern_to_ast
Z3_pattern_to_string
Z3_polynomial_subresultants
Z3_probe_and
Z3_probe_apply
Z3_probe_const
Z3_probe_dec_ref
Z3_probe_eq
Z3_probe_ge
Z3_probe_get_descr
Z3_probe_gt
Z3_probe_inc_ref
Z3_probe_le
Z3_probe_lt
Z3_probe_not
Z3_probe_or
Z3_qe_lite
Z3_qe_model_project
Z3_qe_model_project_skolem
Z3_qe_model_project_with_witness
Z3_query_constructor
Z3_rcf_add
Z3_rcf_coefficient
Z3_rcf_del
Z3_rcf_div
Z3_rcf_eq
Z3_rcf_extension_index
Z3_rcf_ge
Z3_rcf_get_numerator_denominator
Z3_rcf_gt
Z3_rcf_infinitesimal_name
Z3_rcf_interval
Z3_rcf_inv
Z3_rcf_is_algebraic
Z3_rcf_is_infinitesimal
Z3_rcf_is_rational
Z3_rcf_is_transcendental
Z3_rcf_le
Z3_rcf_lt
Z3_rcf_mk_e
Z3_rcf_mk_infinitesimal
Z3_rcf_mk_pi
Z3_rcf_mk_rational
Z3_rcf_mk_roots
Z3_rcf_mk_small_int
Z3_rcf_mul
Z3_rcf_neg
Z3_rcf_neq
Z3_rcf_num_coefficients
Z3_rcf_num_sign_condition_coefficients
Z3_rcf_num_sign_conditions
Z3_rcf_num_to_decimal_string
Z3_rcf_num_to_string
Z3_rcf_power
Z3_rcf_sign_condition_coefficient
Z3_rcf_sign_condition_sign
Z3_rcf_sub
Z3_rcf_transcendental_name
Z3_reset_memory
Z3_set_ast_print_mode
Z3_set_error
Z3_set_error_handler
Z3_set_param_value
Z3_simplifier_and_then
Z3_simplifier_dec_ref
Z3_simplifier_get_descr
Z3_simplifier_get_help
Z3_simplifier_get_param_descrs
Z3_simplifier_inc_ref
Z3_simplifier_using_params
Z3_simplify
Z3_simplify_ex
Z3_simplify_get_help
Z3_simplify_get_param_descrs
Z3_solver_add_simplifier
Z3_solver_assert
Z3_solver_assert_and_track
Z3_solver_check
Z3_solver_check_assumptions
Z3_solver_congruence_explain
Z3_solver_congruence_next
Z3_solver_congruence_root
Z3_solver_cube
Z3_solver_dec_ref
Z3_solver_from_file
Z3_solver_from_string
Z3_solver_get_assertions
Z3_solver_get_consequences
Z3_solver_get_help
Z3_solver_get_levels
Z3_solver_get_model
Z3_solver_get_non_units
Z3_solver_get_num_scopes
Z3_solver_get_param_descrs
Z3_solver_get_proof
Z3_solver_get_reason_unknown
Z3_solver_get_statistics
Z3_solver_get_trail
Z3_solver_get_units
Z3_solver_get_unsat_core
Z3_solver_import_model_converter
Z3_solver_inc_ref
Z3_solver_interrupt
Z3_solver_next_split
Z3_solver_pop
Z3_solver_propagate_consequence
Z3_solver_propagate_created
Z3_solver_propagate_decide
Z3_solver_propagate_declare
Z3_solver_propagate_diseq
Z3_solver_propagate_eq
Z3_solver_propagate_final
Z3_solver_propagate_fixed
Z3_solver_propagate_init
Z3_solver_propagate_register
Z3_solver_propagate_register_cb
Z3_solver_push
Z3_solver_register_on_clause
Z3_solver_reset
Z3_solver_set_initial_value
Z3_solver_set_params
Z3_solver_solve_for
Z3_solver_to_dimacs_string
Z3_solver_to_string
Z3_solver_translate
Z3_sort_to_ast
Z3_sort_to_string
Z3_stats_dec_ref
Z3_stats_get_double_value
Z3_stats_get_key
Z3_stats_get_uint_value
Z3_stats_inc_ref
Z3_stats_is_double
Z3_stats_is_uint
Z3_stats_size
Z3_stats_to_string
Z3_substitute
Z3_substitute_funs
Z3_substitute_vars
Z3_tactic_and_then
Z3_tactic_apply
Z3_tactic_apply_ex
Z3_tactic_cond
Z3_tactic_dec_ref
Z3_tactic_fail
Z3_tactic_fail_if
Z3_tactic_fail_if_not_decided
Z3_tactic_get_descr
Z3_tactic_get_help
Z3_tactic_get_param_descrs
Z3_tactic_inc_ref
Z3_tactic_or_else
Z3_tactic_par_and_then
Z3_tactic_par_or
Z3_tactic_repeat
Z3_tactic_skip
Z3_tactic_try_for
Z3_tactic_using_params
Z3_tactic_when
Z3_to_app
Z3_to_func_decl
Z3_toggle_warning_messages
Z3_translate
Z3_update_param_value
Z3_update_term
Name
.text
Size
12.5MB
Virtual Size
12.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
163KB
Virtual Size
167KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
399KB
Virtual Size
399KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
38KB
Virtual Size
38KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=8, id=260, version=35207,
count=29, id=261, version=35207,
count=6, id=257, version=35207,
count=3, id=257, version=33140,
count=243, id=1, productName=Unmarked objects,
count=828, id=261, version=35209,
count=1, id=256, version=35209,
count=1, id=255, version=35209,
count=1, id=258, version=35209,
runtimes/win-arm64/native/WebView2Loader.dll
- SHA256 1785c10eeaf9ebf1bd7647f12196e6946d68ce517bf7bababbfad8faf6951456
- MD5 2b320fdb55f249f0d73817a66c202bd8
- SHA1 969e7c8e321436d28208a42c83fb10c8bb6e54b4
- SHA512 672f6eb2cdb5adb56a394904e40a71026f7b5925c6b40568c82b956f6570ab6652c4a6a136a6fd8f3c405008117e5e6117ed8b08aa5e1a0c235d9164e1706a84
- SSDEEP 3072:EErPYj4/4cFuFDmPZ4MPz6OSZT96TEtJCgQ9c2sd:EErPX4cF0DgpTEtJv6M
- TLSH T159D32B8326DD1443D6D3EB7CD9678950232BBAB88530CA4B7153410EDF6FBC1DEA4A26
- MD5 SHA1 SHA512 SSDEEP TLSH
runtimes/win-x64/native/WebView2Loader.dll
- IMPHASH f6946d311bccc86e2042a388e375de41
- SHA256 1970ae5e398666304483203dae64f8bc3327811114ae38bb3484ecbce1386b41
- MD5 075e4272f2815b3b6bc7caf0ebcc65ae
- SHA1 6ba407862fedc14fde92d4f4093249d2ba371ea6
- SHA512 6481605b96e4eb61443ae4bf0b51f4a9dc7c792742385e15418c9d06f136247fb2e81f632d30357cd0cde988a64c264a1bb8384cdf4a7d1fb94b78990636b692
- SSDEEP 3072:Wz49om6TlTRTEAzThTNTmA9r6b3oohrjmx9kAiACZ5AalK9TIjEtJ5/a3k:WswTlTRTEAzThTNTmAETRnmx9kAFCHEz
- TLSH T120F35B5772E9007BE16A8274C9A34A12E777741107509BEF03A4477A1F23BD8EE3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Digest
14:64:92:2c:37:79:b7:1a:6b:16:82:fb:3c:46:1a:3d:ae:d2:b6:21:7c:64:13:76:26:f6:99:29:32:bb:81:8e
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 30, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft Ireland Operations Limited+OU=nShield TSS ESN:571A-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:01:fb:cb:cb:6c:37:67:e5:30:95:00:01:00:00:01:fb
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 25, 2024 - Oct 22, 2025
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
18272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwindEx
RtlVirtualUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
87KB
Virtual Size
87KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.gxfg
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
runtimes/win-x86/native/WebView2Loader.dll
- IMPHASH 72229ff546c74d09d9030ca49ce61b31
- SHA256 1064ab1c2cdc0746b100f021514d591043da7cc1583b450dd071d291080c53ef
- MD5 4e5905898ae2075676abbe34ffbbc511
- SHA1 3383c05de93e41ba6ad68b3fc52dd2f0eb9057cc
- SHA512 e481a444ccee4d41ba5a8a547f69492e315123a8bbe5309dea573a71239c68203bab9b15835da16b23d50a1efdb0fd5d044143f77759fd5544834a4670dde348
- SSDEEP 3072:q5S+1NJzO6ecBL2McQ+l1PgqeNZvTzqEtJZAl3TCJ4fmdv:qrNJzTBgbl6mEtJSdGJ2mN
- TLSH T1FBB36B5176D08072E5BE0A380574EB655B3FBA61DFA09DEB279409A94F307C0CE35E2B
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
Digest
de:34:9a:d7:47:6a:0f:d5:bf:ea:e6:6d:b2:41:d9:04:5b:e4:60:b8:67:c0:7b:01:17:50:14:ab:03:6d:89:d5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Chains
Mar 30, 2025
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Subject
CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:03:fd:36:44:39:73:0d:dc:02:28:00:00:00:00:03:fd
Issuer
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 22, 2024 - Aug 20, 2025
Subject
CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
61:0e:90:d2:00:00:00:00:00:03
Issuer
CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jul 8, 2011 - Jul 8, 2026
Subject
CN=Microsoft Time-Stamp Service,OU=Microsoft America Operations+OU=nShield TSS ESN:3303-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:02:0f:57:9a:47:14:40:e6:46:e6:00:01:00:00:02:0f
Issuer
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jan 30, 2025 - Apr 22, 2026
Subject
CN=Microsoft Time-Stamp PCA 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:15:c5:e7:6b:9e:02:9b:49:99:00:00:00:00:00:15
Issuer
CN=Microsoft Root Certificate Authority 2010,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Sep 30, 2021 - Sep 30, 2030
Minor OS version
0
Major OS version
10
Entry point
16032
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
WebView2Loader.dll.pdb
kernel32
AcquireSRWLockExclusive
CloseHandle
CreateFileW
DecodePointer
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileAttributesW
GetFileType
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InterlockedFlushSList
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
RaiseException
ReleaseSRWLockExclusive
RtlUnwind
SetFilePointerEx
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SleepConditionVariableSRW
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
CompareBrowserVersions
CreateCoreWebView2Environment
CreateCoreWebView2EnvironmentWithOptions
GetAvailableCoreWebView2BrowserVersionString
GetAvailableCoreWebView2BrowserVersionStringWithOptions
Name
.text
Size
63KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
29KB
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
9B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
version.dll
- IMPHASH 02360d634338812a58190d10300865e1
- SHA256 c737db959e9342b0f7391f8f0012e19335d3afea339e87f1e98590d38e418a9d
- MD5 bc87e4cf85da4eb7f1d2070012618a0c
- SHA1 fe31177e32bd2bd9692d328f7e0d8eeb3145ca58
- SHA512 44efc86b3847dc70f14b7be44f3dc9be6bef9cc321a5da2ddcd7d75d0a12c68e7fd2c9e752cc6163978b1b3fc2d8ab44062edfff8732ffb779acc738a6612c26
- SSDEEP 6144:b1sdqD5yzf9VaUXvQfWUq+g7UkN0gjblCw1durrbcp:bCdq8IfV8blLdC
- TLSH T15B645B22F69104B9E497C07882678572B7B374891B21E9EF13A442283F6BFE15F3D764
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
147992
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
version.pdb
gdiplus
GdipDrawLines
GdipDeletePen
GdipCreateSolidFill
GdipFillEllipse
GdipDeleteBrush
GdipCreateFromHDC
GdipSetSmoothingMode
GdipDrawRectangle
GdipFillRectangle
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdiplusShutdown
GdiplusStartup
GdipCreateHICONFromBitmap
GdipDeleteGraphics
GdipDisposeImage
GdipCreatePen1
kernel32
FlsFree
FlsSetValue
FlsGetValue
CloseHandle
WaitForSingleObject
GetExitCodeProcess
GetProcAddress
GetConsoleWindow
FreeConsole
GetModuleHandleW
VirtualProtect
CreateThread
GetCurrentProcess
GetCurrentProcessId
LoadLibraryExW
ExitProcess
GetSystemDirectoryW
GetModuleHandleA
LoadLibraryA
FlsAlloc
GetCPInfo
GetOEMCP
WriteFile
IsValidCodePage
GetModuleHandleExW
RtlPcToFileHeader
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
EncodePointer
InterlockedFlushSList
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
LCMapStringW
GetStringTypeW
HeapSize
GetCommandLineA
SetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetACP
GetFullPathNameW
FindNextFileW
GetTempPathW
FormatMessageW
GetFileType
Sleep
SetWaitableTimer
CreateWaitableTimerExW
GetConsoleOutputCP
GetConsoleMode
WriteConsoleW
MultiByteToWideChar
GetModuleFileNameW
HeapAlloc
DeleteFileW
ReleaseMutex
CreateMutexA
WaitForSingleObjectEx
WideCharToMultiByte
FindClose
FindFirstFileExW
CopyFileExW
lstrlenW
GetCommandLineW
GetEnvironmentVariableW
GetCurrentDirectoryW
GetCurrentThread
GetLastError
FreeEnvironmentStringsW
SetLastError
GetCurrentThreadId
SetFileInformationByHandle
CreateFileW
SetFileTime
GetProcessHeap
HeapFree
HeapReAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
FlushFileBuffers
GetSystemTimePreciseAsFileTime
GetFileInformationByHandle
GetFileInformationByHandleEx
TerminateProcess
GetEnvironmentStringsW
GetStdHandle
CreateDirectoryW
SetFilePointerEx
SetThreadStackGuarantee
user32
DispatchMessageW
SetTimer
PostQuitMessage
BeginPaint
TranslateMessage
DefWindowProcW
EndPaint
CreateWindowExW
AdjustWindowRect
RegisterClassW
GetMessageW
GetClientRect
LoadCursorW
DrawTextW
FillRect
MessageBoxW
InvalidateRect
GetClassNameW
GetWindowThreadProcessId
EnumWindows
ShowWindow
SendMessageW
gdi32
CreateFontW
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
advapi32
OpenProcessToken
GetTokenInformation
shell32
ShellExecuteW
ntdll
NtWriteFile
RtlVirtualUnwind
RtlCaptureContext
RtlNtStatusToDosError
RtlLookupFunctionEntry
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
Name
.text
Size
200KB
Virtual Size
200KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
85KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=259, version=30795,
count=134, id=261, version=30795,
count=10, id=260, version=30795,
count=9, id=259, version=34321,
count=14, id=260, version=34321,
count=34, id=261, version=34321,
count=19, id=257, version=30795,
count=239, id=1, productName=Unmarked objects,
count=24, productName=Unmarked objects (old),
count=1, id=256, version=34435,
count=1, id=258, version=34435,