b9e4052b310f9451eca9784a4a33bf5282d1bd07e3359eba9648be625e2e40dd
PE
Verdict: BENIGN
Local reference
Suspicious dependency
Inferred
Mal-ecule
K(Li)H₇(Cm₅Cr₁₁DbF₄Os₂Po₃Ti)Md₂(Bi₂)
↗
Size
6.1 MB
⇩ download
First seen
14 days ago
Analyzed
12 days ago
Source
malshare.com
Also detected by
2 sources
| 0xb95a1 | 4d8b6be04d8b63e8498b6bf0498b5bf8 | M.k.M.c.I.k.I.[. |
| 0xb95b1 | 498d23488b7c2408488b742410f3c353 | I.#H.|$.H.t$...S |
| 0xb95c1 | 48413120626c6f636b207472616e7366 | HA1 block transf |
| 0xb95d1 | 6f726d20666f72207838365f36342c20 | orm for x86_64, |
| 0xb95e1 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <hOpenSSL cryptographic library |
| 0xb95f1 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xb9601 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xb9611 | 90909090909090909090909090909090 | ................ |
| 0xb9621 | 90909090909090909090909090909090 | ................ |
| 0xb9631 | 90909090909090909090909090909056 | ...............V |
| 0xb9641 | 57535541544155415641579c4883ec40 | WSUATAUAVAW.H..@ |
| 0xb9651 | 498b4078498b98f80000004c8d153eb6 | I.@xI......L..>. |
| 0xb9661 | ffff4c39d30f8256010000498b809800 | ..L9...V...I.... |
| 0xb9671 | 00004c8d151fc6ffff4c39d30f833f01 | ..L......L9...?. |
| 0xb9681 | 0000488b4040488b58f8488b68f04c8b | ..H.@@H.X.H.h.L. |
| 0xb9691 | 60e84c8b68e04c8b70d8498998900000 | `.L.h.L.p.I..... |
| 0xb96a1 | 004989a8a00000004d89a0d80000004d | .I......M......M |
| 0xb96b1 | 89a8e00000004d89b0e8000000e9ff00 | ......M......... |
| 0xb96c1 | 00009090909090909090 | .......... |
| 0xc42a6 | 0c0fbae21e730a4883c019f3c34883c0 | .....s.H.....H.. |
| 0xc42b6 | 0cf3c390909090909090726334283878 | ..........rc4(8x |
| 0xc42c6 | 2c696e7429007263342838782c636861 | ,int).rc4(8x,cha |
| 0xc42d6 | 722900726334283136782c696e742900 | r).rc4(16x,int). |
| 0xc42e6 | 52433420666f72207838365f36342c20 | RC4 for x86_64, |
| 0xc42f6 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <hOpenSSL cryptographic library |
| 0xc4306 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc4316 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc4326 | 90909090909090909090909090909090 | ................ |
| 0xc4336 | 90909090909090909090565753554154 | ..........VWSUAT |
| 0xc4346 | 4155415641579c4883ec40498b407849 | AUAVAW.H..@I.@xI |
| 0xc4356 | 8b98f80000004c8d15d0f7ffff4c39d3 | ......L......L9. |
| 0xc4366 | 7238498b80980000004c8d1517feffff | r8I......L...... |
| 0xc4376 | 4c39d37325488d4018488b58f84c8b60 | L9.s%H.@.H.X.L.` |
| 0xc4386 | f04c8b68e8498998900000004d89a0d8 | .L.h.I......M... |
| 0xc4396 | 0000004d89a8e0000000 | ...M...... |
| 0xc6b26 | 38488d34244889d9e90dfeffffb80100 | 8H.4$H.......... |
| 0xc6b36 | 0000488d6424085b5d488b7c2408488b | ..H.d$.[]H.|$.H. |
| 0xc6b46 | 742410f3c3564941205061646c6f636b | t$...VIA Padlock |
| 0xc6b56 | 207838365f3634206d6f64756c652c20 | x86_64 module, |
| 0xc6b66 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <hOpenSSL cryptographic library |
| 0xc6b76 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc6b86 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc6b96 | 90909090909090909090cccccccccccc | ................ |
| 0xc6ba6 | cccccccccccccccccccccccccccccccc | ................ |
| 0xc6bb6 | cccccccccccccccccccc48897c240848 | ..........H.|$.H |
| 0xc6bc6 | 897424104889e04889cf4889d64c89c2 | .t$.H..H..H..L.. |
| 0xc6bd6 | 4c89c94c8b4424284c8b4c24304589c9 | L..L.D$(L.L$0E.. |
| 0xc6be6 | 4889e041f7c103000000752e4183f908 | H..A......u.A... |
| 0xc6bf6 | 7228448b1dc94d51004839f20f85a102 | r(D...MQ.H9..... |
| 0xc6c06 | 000041f7c1070000000f | ..A....... |
| 0xc7b89 | 8b66e8488b6ef0488b5ef8488d26488b | .f.H.n.H.^.H.&H. |
| 0xc7b99 | 7c2408488b742410f3c34d6f6e74676f | |$.H.t$...Montgo |
| 0xc7ba9 | 6d657279204d756c7469706c69636174 | mery Multiplicat |
| 0xc7bb9 | 696f6e20666f72207838365f36342c20 | ion for x86_64, |
| 0xc7bc9 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <hOpenSSL cryptographic library |
| 0xc7bd9 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc7be9 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc7bf9 | 90909090909090565753554154415541 | .......VWSUATAUA |
| 0xc7c09 | 5641579c4883ec40498b4078498b98f8 | VAW.H..@I.@xI... |
| 0xc7c19 | 000000498b71084d8b5938458b134e8d | ...I.q.M.Y8E..N. |
| 0xc7c29 | 14164c39d30f82c3000000498b809800 | ..L9.......I.... |
| 0xc7c39 | 0000458b53044e8d14164c39d30f83ab | ..E.S.N...L9.... |
| 0xc7c49 | 0000004d8b90c00000004a8b44d008eb | ...M......J.D... |
| 0xc7c59 | 5b909090909090565753554154415541 | [......VWSUATAUA |
| 0xc7c69 | 5641579c4883ec40498b | VAW.H..@I. |
| 0xd4480 | 4883d0004c8d1c0048c1f83f49d1eb48 | H...L...H..?I..H |
| 0xd4490 | f7d04883e0134929c04983d9004983da | ..H...I).I...I.. |
| 0xd44a0 | 004983db004c89074c894f084c895710 | .I...L..L.O.L.W. |
| 0xd44b0 | 4c895f18488b7c2408488b742410f3c3 | L._.H.|$.H.t$... |
| 0xd44c0 | 583235353139207072696d6974697665 | X25519 primitive |
| 0xd44d0 | 7320666f72207838365f36342c204352 | s for x86_64, CROpenSSL cryptographic library |
| 0xd44e0 | 5950544f47414d53206279203c687474 | YPTOGAMS by <htt |
| 0xd44f0 | 70733a2f2f6769746875622e636f6d2f | ps://github.com/ |
| 0xd4500 | 646f742d61736d3e0090909090909090 | dot-asm>........ |
| 0xd4510 | 5657535541544155415641579c4883ec | VWSUATAUAVAW.H.. |
| 0xd4520 | 40498b4078498b98f8000000498b7108 | @I.@xI......I.q. |
| 0xd4530 | 4d8b5938458b134e8d14164c39d30f82 | M.Y8E..N...L9... |
| 0xd4540 | 9a000000498b8098000000e98e000000 | ....I........... |
| 0xd4550 | 5657535541544155415641579c4883ec | VWSUATAUAVAW.H.. |
| 0xd4560 | 40498b4078498b98f8000000498b7108 | @I.@xI......I.q. |
| 0xd4570 | 4d8b5938458b134e8d14164c39d3725e | M.Y8E..N...L9.r^ |
| 0xd4580 | 498b809800000045 | I......E |
Well-known
| 0xb95a1 | 4d8b6be04d8b63e8498b6bf0498b5bf8 | M.k.M.c.I.k.I.[. |
| 0xb95b1 | 498d23488b7c2408488b742410f3c353 | I.#H.|$.H.t$...S |
| 0xb95c1 | 48413120626c6f636b207472616e7366 | HA1 block transf |
| 0xb95d1 | 6f726d20666f72207838365f36342c20 | orm for x86_64, |
| 0xb95e1 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <h |
| 0xb95f1 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xb9601 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xb9611 | 90909090909090909090909090909090 | ................ |
| 0xb9621 | 90909090909090909090909090909090 | ................ |
| 0xb9631 | 90909090909090909090909090909056 | ...............V |
| 0xb9641 | 57535541544155415641579c4883ec40 | WSUATAUAVAW.H..@ |
| 0xb9651 | 498b4078498b98f80000004c8d153eb6 | I.@xI......L..>. |
| 0xb9661 | ffff4c39d30f8256010000498b809800 | ..L9...V...I.... |
| 0xb9671 | 00004c8d151fc6ffff4c39d30f833f01 | ..L......L9...?. |
| 0xb9681 | 0000488b4040488b58f8488b68f04c8b | ..H.@@H.X.H.h.L. |
| 0xb9691 | 60e84c8b68e04c8b70d8498998900000 | `.L.h.L.p.I..... |
| 0xb96a1 | 004989a8a00000004d89a0d80000004d | .I......M......M |
| 0xb96b1 | 89a8e00000004d89b0e8000000e9ff00 | ......M......... |
| 0xb96c1 | 00009090909090909090 | .......... |
| 0xc42a6 | 0c0fbae21e730a4883c019f3c34883c0 | .....s.H.....H.. |
| 0xc42b6 | 0cf3c390909090909090726334283878 | ..........rc4(8x |
| 0xc42c6 | 2c696e7429007263342838782c636861 | ,int).rc4(8x,cha |
| 0xc42d6 | 722900726334283136782c696e742900 | r).rc4(16x,int). |
| 0xc42e6 | 52433420666f72207838365f36342c20 | RC4 for x86_64, |
| 0xc42f6 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <h |
| 0xc4306 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc4316 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc4326 | 90909090909090909090909090909090 | ................ |
| 0xc4336 | 90909090909090909090565753554154 | ..........VWSUAT |
| 0xc4346 | 4155415641579c4883ec40498b407849 | AUAVAW.H..@I.@xI |
| 0xc4356 | 8b98f80000004c8d15d0f7ffff4c39d3 | ......L......L9. |
| 0xc4366 | 7238498b80980000004c8d1517feffff | r8I......L...... |
| 0xc4376 | 4c39d37325488d4018488b58f84c8b60 | L9.s%H.@.H.X.L.` |
| 0xc4386 | f04c8b68e8498998900000004d89a0d8 | .L.h.I......M... |
| 0xc4396 | 0000004d89a8e0000000 | ...M...... |
| 0xc6b26 | 38488d34244889d9e90dfeffffb80100 | 8H.4$H.......... |
| 0xc6b36 | 0000488d6424085b5d488b7c2408488b | ..H.d$.[]H.|$.H. |
| 0xc6b46 | 742410f3c3564941205061646c6f636b | t$...VIA Padlock |
| 0xc6b56 | 207838365f3634206d6f64756c652c20 | x86_64 module, |
| 0xc6b66 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <h |
| 0xc6b76 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc6b86 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc6b96 | 90909090909090909090cccccccccccc | ................ |
| 0xc6ba6 | cccccccccccccccccccccccccccccccc | ................ |
| 0xc6bb6 | cccccccccccccccccccc48897c240848 | ..........H.|$.H |
| 0xc6bc6 | 897424104889e04889cf4889d64c89c2 | .t$.H..H..H..L.. |
| 0xc6bd6 | 4c89c94c8b4424284c8b4c24304589c9 | L..L.D$(L.L$0E.. |
| 0xc6be6 | 4889e041f7c103000000752e4183f908 | H..A......u.A... |
| 0xc6bf6 | 7228448b1dc94d51004839f20f85a102 | r(D...MQ.H9..... |
| 0xc6c06 | 000041f7c1070000000f | ..A....... |
| 0xc7b89 | 8b66e8488b6ef0488b5ef8488d26488b | .f.H.n.H.^.H.&H. |
| 0xc7b99 | 7c2408488b742410f3c34d6f6e74676f | |$.H.t$...Montgo |
| 0xc7ba9 | 6d657279204d756c7469706c69636174 | mery Multiplicat |
| 0xc7bb9 | 696f6e20666f72207838365f36342c20 | ion for x86_64, |
| 0xc7bc9 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <h |
| 0xc7bd9 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0xc7be9 | 6d2f646f742d61736d3e009090909090 | m/dot-asm>...... |
| 0xc7bf9 | 90909090909090565753554154415541 | .......VWSUATAUA |
| 0xc7c09 | 5641579c4883ec40498b4078498b98f8 | VAW.H..@I.@xI... |
| 0xc7c19 | 000000498b71084d8b5938458b134e8d | ...I.q.M.Y8E..N. |
| 0xc7c29 | 14164c39d30f82c3000000498b809800 | ..L9.......I.... |
| 0xc7c39 | 0000458b53044e8d14164c39d30f83ab | ..E.S.N...L9.... |
| 0xc7c49 | 0000004d8b90c00000004a8b44d008eb | ...M......J.D... |
| 0xc7c59 | 5b909090909090565753554154415541 | [......VWSUATAUA |
| 0xc7c69 | 5641579c4883ec40498b | VAW.H..@I. |
| 0xd4480 | 4883d0004c8d1c0048c1f83f49d1eb48 | H...L...H..?I..H |
| 0xd4490 | f7d04883e0134929c04983d9004983da | ..H...I).I...I.. |
| 0xd44a0 | 004983db004c89074c894f084c895710 | .I...L..L.O.L.W. |
| 0xd44b0 | 4c895f18488b7c2408488b742410f3c3 | L._.H.|$.H.t$... |
| 0xd44c0 | 583235353139207072696d6974697665 | X25519 primitive |
| 0xd44d0 | 7320666f72207838365f36342c204352 | s for x86_64, CR |
| 0xd44e0 | 5950544f47414d53206279203c687474 | YPTOGAMS by <htt |
| 0xd44f0 | 70733a2f2f6769746875622e636f6d2f | ps://github.com/ |
| 0xd4500 | 646f742d61736d3e0090909090909090 | dot-asm>........ |
| 0xd4510 | 5657535541544155415641579c4883ec | VWSUATAUAVAW.H.. |
| 0xd4520 | 40498b4078498b98f8000000498b7108 | @I.@xI......I.q. |
| 0xd4530 | 4d8b5938458b134e8d14164c39d30f82 | M.Y8E..N...L9... |
| 0xd4540 | 9a000000498b8098000000e98e000000 | ....I........... |
| 0xd4550 | 5657535541544155415641579c4883ec | VWSUATAUAVAW.H.. |
| 0xd4560 | 40498b4078498b98f8000000498b7108 | @I.@xI......I.q. |
| 0xd4570 | 4d8b5938458b134e8d14164c39d3725e | M.Y8E..N...L9.r^ |
| 0xd4580 | 498b809800000045 | I......E |
| 0x1006b2 | 6fabc000000066450f6fb3d000000066 | o.....fE.o.....f |
| 0x1006c2 | 450f6fbbe0000000498da3f800000048 | E.o.....I......H |
| 0x1006d2 | 8b7c2408488b742410f3c3506f6c7931 | .|$.H.t$...Poly1 |
| 0x1006e2 | 33303520666f72207838365f36342c20 | 305 for x86_64, |
| 0x1006f2 | 43525950544f47414d53206279203c68 | CRYPTOGAMS by <h |
| 0x100702 | 747470733a2f2f6769746875622e636f | ttps://github.co |
| 0x100712 | 6d2f646f742d61736d3e009090904c29 | m/dot-asm>....L) |
| 0x100722 | c24c29c14d89ca49c1e904742690f342 | .L).M..I...t&..B |
| 0x100732 | 0f6f040266410fef00f3420f7f040166 | .o..fA....B....f |
| 0x100742 | 410f7f004d8d401049ffc975e14983e2 | A...M.@.I..u.I.. |
| 0x100752 | 0f743041b9100000004d29d131c0428a | .t0A.....M).1.B. |
| 0x100762 | 0402413200428804014188004d8d4001 | ..A2.B...A..M.@. |
| 0x100772 | 49ffca75e931c04188004d8d400149ff | I..u.1.A..M.@.I. |
| 0x100782 | c975f44c89c0f3c39090909090904c29 | .u.L..........L) |
| 0x100792 | c24c29c14d89ca49c1e9 | .L).M..I.. |
Micro-behaviors
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585c78 | 65570000b6025265706f72744576656e | eW....ReportEven |
| 0x585c88 | 74570000b00147657450726f63657373 | tW....GetProcess |
| 0x585c98 | 57696e646f7753746174696f6e00da01 | WindowStation... |
| 0x585ca8 | 476574557365724f626a656374496e66 | GetUserObjectInf |
| 0x585cb8 | 6f726d6174696f6e57008b024d657373 | ormationW...Mess |
| 0x585cc8 | 616765426f7857004950484c50415049 | ageBoxW.IPHLPAPI |
| 0x585cd8 | 2e444c4c00435259505433322e646c6c | .DLL.CRYPT32.dll |
| 0x585ce8 | 005753325f33322e646c6c004b45524e | .WS2_32.dll.KERN |
| 0x585cf8 | 454c33322e646c6c0041445641504933 | EL32.dll.ADVAPI3 |
| 0x585d08 | 322e646c6c005553455233322e646c6c | 2.dll.USER32.dll |
| 0x585d18 | 00000000000000000000000000000000 | ................ |
| 0x585d28 | 00000000000000000000000000000000 | ................ |
| 0x585d38 | 00000000000000000108030008012600 | ..............&. |
| 0x585d48 | 01600000010c07000c82083007500670 | .`.........0.P.p |
| 0x585d58 | 056004e002f00000010c07000c820830 | .`.............0 |
| 0x585d68 | 07500670056004e002f0000001040100 | .P.p.`.......... |
| 0x549f38 | 6464457874656e73696f6e7300000000 | ddExtensions.... |
| 0x549f48 | 5472757374656420436f6d707574696e | Trusted Computin |
| 0x549f58 | 672047726f7570204365727469666963 | g Group Certific |
| 0x549f68 | 61746520457874656e73696f6e730000 | ate Extensions.. |
| 0x549f78 | 53696745643235353139206e6f204564 | SigEd25519 no Ed |
| 0x549f88 | 323535313920636f6c6c6973696f6e73 | 25519 collisions |
| 0x549f98 | 0000000000000000696e76616c696420 | ........invalid |
| 0x549fa8 | 6d756c7469706c652072646e73000000 | multiple rdns... |
| 0x549fb8 | 696e636f6e73697374656e7420657874 | inconsistent ext |
| 0x549fc8 | 6d7300000000000064656661756c745f | ms......default_ |
| 0x549fd8 | 616c676f726974686d73000000000000 | algorithms...... |
| 0x549fe8 | 58353030616c676f726974686d730000 | X500algorithms.. |
| 0x549ff8 | 69642d746332362d616c676f72697468 | id-tc26-algorith |
| 0x54a008 | 6d730000000000006e6f207368617265 | ms......no share |
| 0x53f678 | 41534349490000005244490052480000 | ASCII...RDI.RH.. |
| 0x53f688 | 4849474800000000604548006b454448 | HIGH....`EH.kEDH |
| 0x53f698 | 00000000454448006b45454344480000 | ....EDH.kEECDH.. |
| 0x53f6a8 | 45454344480000004145434448000000 | EECDH...AECDH... |
| 0x53f6b8 | 45434448000000004144480044480000 | ECDH....ADH.DH.. |
| 0x53f6c8 | 5041544348000000415547004f524700 | PATCH...AUG.ORG. |
| 0x53f6d8 | 6e6f2d524e47000050494e4700000000 | no-RNG..PING.... |
| 0x53f6e8 | 434f4e46000000003123494e46000000 | CONF....1#INF... |
| 0x53f6f8 | 494e46004f464600554e444546000000 | INF.OFF.UNDEF... |
| 0x53f708 | 53534b444600000050564b4b44460000 | SSKDF...PVKKDF.. |
| 0x53f718 | 5353484b44460000484b444600000000 | SSHKDF..HKDF.... |
| 0x53f728 | 4b424b44460000004246000052534153 | KBKDF...BF..RSAS |
| 0x53f738 | 56450000545545005452554500000000 | VE..TUE.TRUE.... |
| 0x53f748 | 46414c534500000053544f5245000000 | FALSE...STORE... |
| 0x53f758 | 434f4e4e45000000534d494d45000000 | CONNE...SMIME... |
| 0x53f768 | 532f4d494d4500004b78444845000000 | S/MIME..KxDHE... |
| 0x53f778 | 6b444845000000006b45434448450000 | kDHE....kECDHE.. |
| 0x53f788 | 45434448450000004448450049454545 | ECDHE...DHE.IEEE |
| 0x53f798 | 000000005452414345000000 | ....TRACE... |
| 0x541e44 | 7065637465642063656e7472616c2067 | pected central g |
| 0x541e54 | 656e206b657900000000000065787065 | en key......expe |
| 0x541e64 | 6374696e672061207369706861736820 | cting a siphash |
| 0x541e74 | 6b6579006d697373696e6720746d7020 | key.missing tmp |
| 0x541e84 | 65636468206b6579000000006d697373 | ecdh key....miss |
| 0x541e94 | 696e6720746d70206468206b65790000 | ing tmp dh key.. |
| 0x541ea4 | 0000000063616e277420636865636b20 | ....can't check |
| 0x541eb4 | 6468206b657900000000000065787065 | dh key......expe |
| 0x541ec4 | 6374696e672061206468206b65790000 | cting a dh key.. |
| 0x541ed4 | 000000006572726f722073657474696e | ....error settin |
| 0x541ee4 | 67206b6579000000000000006c6f6720 | g key.......log |
| 0x541ef4 | 636f6e66206d697373696e67206b6579 | conf missing key |
| 0x541f04 | 00000000 | .... |
| 0x5758d8 | 69642d6d6f642d636d70323032312d38 | id-mod-cmp2021-8 |
| 0x5758e8 | 38000000000000005832353531394d4c | 8.......X25519ML |
| 0x5758f8 | 4b454d37363800005365635032353672 | KEM768..SecP256r |
| 0x575908 | 314d4c4b454d37363800000000000000 | 1MLKEM768....... |
| 0x575918 | 4d4c4b454d3736380000000000000000 | MLKEM768........ |
| 0x575928 | 69642d616c672d6d6c2d6b656d2d3736 | id-alg-ml-kem-76 |
| 0x575938 | 38000000000000004d4c2d4b454d2d37 | 8.......ML-KEM-7 |
| 0x575948 | 3638000000000000706b65795f656364 | 68......pkey_ecd |
| 0x575958 | 5f646967657374766572696679343438 | _digestverify448 |
| 0x575968 | 0000000000000000706b65795f656364 | ........pkey_ecd |
| 0x575978 | 5f6469676573747369676e3434380000 | _digestsign448.. |
| 0x575988 | 53696745643434380000000000000000 | SigEd448........ |
| 0x575998 | 6666646865323034 | ffdhe204 |
| 0x578e88 | 686d6163576974685348413531322d32 | hmacWithSHA512-2 |
| 0x578e98 | 3234000000000000583434384d4c4b45 | 24......X448MLKE |
| 0x578ea8 | 4d313032340000005365635033383472 | M1024...SecP384r |
| 0x578eb8 | 314d4c4b454d31303234000000000000 | 1MLKEM1024...... |
| 0x578ec8 | 4d4c4b454d3130323400000000000000 | MLKEM1024....... |
| 0x578ed8 | 69642d616c672d6d6c2d6b656d2d3130 | id-alg-ml-kem-10 |
| 0x578ee8 | 32340000000000004d4c2d4b454d2d31 | 24......ML-KEM-1 |
| 0x578ef8 | 303234000000000043414d454c4c4941 | 024.....CAMELLIA |
| 0x578f08 | 2d3139322d4346423a302e332e343430 | -192-CFB:0.3.440 |
| 0x578f18 | 312e352e332e312e392e323400000000 | 1.5.3.1.9.24.... |
| 0x578f28 | 534c482d4453412d534841322d323536 | SLH-DSA-SHA2-256 |
| 0x578f38 | 733a69642d736c682d6473612d736861 | s:id-slh-dsa-sha |
| 0x578f48 | 322d323536733a322e | 2-256s:2. |
| 0x57a338 | 342d776974682d736861353132000000 | 4-with-sha512... |
| 0x57a348 | 686b64662d7368613531320000000000 | hkdf-sha512..... |
| 0x57a358 | 6d645f676f737431325f353132000000 | md_gost12_512... |
| 0x57a368 | 676f7374323031325f35313200000000 | gost2012_512.... |
| 0x57a378 | 4d4c4b454d3531320000000000000000 | MLKEM512........ |
| 0x57a388 | 686d6163576974685348413531320000 | hmacWithSHA512.. |
| 0x57a398 | 6473615f776974685f53484135313200 | dsa_with_SHA512. |
| 0x57a3a8 | 65636473612d776974682d5348413531 | ecdsa-with-SHA51 |
| 0x57a3b8 | 3200000000000000534c482d4453412d | 2.......SLH-DSA- |
| 0x57a3c8 | 534841322d323536732d574954482d53 | SHA2-256s-WITH-S |
| 0x57a3d8 | 4841353132000000534c482d4453412d | HA512...SLH-DSA- |
| 0x57a3e8 | 534841322d313932732d574954482d53 | SHA2-192s-WITH-S |
| 0x57a3f8 | 4841353132000000 | HA512... |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x584e2c | 650035004365727446696e6443657274 | e.5.CertFindCert |
| 0x584e3c | 69666963617465496e53746f72650000 | ificateInStore.. |
| 0x584e4c | 40004365727446726565436572746966 | @.CertFreeCertif |
| 0x584e5c | 6963617465436f6e7465787400004600 | icateContext..F. |
| 0x584e6c | 43657274476574436572746966696361 | CertGetCertifica |
| 0x584e7c | 7465436f6e7465787450726f70657274 | teContextPropert |
| 0x584e8c | 79005900436572744f70656e53746f72 | y.Y.CertOpenStor |
| 0x584e9c | 65005b00436572744f70656e53797374 | e.[.CertOpenSyst |
| 0x584eac | 656d53746f7265570000040047657441 | emStoreW....GetA |
| 0x584ebc | 646472496e666f457843616e63656c00 | ddrInfoExCancel. |
| 0x584ecc | 060047657441646472496e666f457857 | ..GetAddrInfoExW |
| 0x584edc | 00003b00575341496f63746c00004600 | ..;.WSAIoctl..F. |
| 0x584eec | 575341506f6c6c005700575341536f63 | WSAPoll.W.WSASoc |
| 0x584efc | 6b65744100005800575341536f636b65 | ketA..X.WSASocke |
| 0x584f0c | 74 | t |
| 0x5407e0 | 0000000000000000667269656e646c79 | ........friendly |
| 0x5407f0 | 436f756e7472790066696c655f6c6f61 | Country.file_loa |
| 0x540800 | 645f6469725f656e7472790000000000 | d_dir_entry..... |
| 0x540810 | 583530395f4e414d455f6164645f656e | X509_NAME_add_en |
| 0x540820 | 747279000000000063685f7265747279 | try.....ch_retry |
| 0x540830 | 0000000000000000706f72745f73656e | ........port_sen |
| 0x540840 | 645f7265747279006261642077726974 | d_retry.bad writ |
| 0x540850 | 652072657472790073686f756c642072 | e retry.should r |
| 0x540860 | 657472790000000052455452595f5343 | etry....RETRY_SC |
| 0x540870 | 4944207365 | ID se |
| 0x541ba8 | 655f6b65790000006f73736c5f64685f | e_key...ossl_dh_ |
| 0x541bb8 | 636f6d707574655f6b65790000000000 | compute_key..... |
| 0x541bc8 | 6f73736c5f656364685f73696d706c65 | ossl_ecdh_simple |
| 0x541bd8 | 5f636f6d707574655f6b657900000000 | _compute_key.... |
| 0x541be8 | 454344485f636f6d707574655f6b6579 | ECDH_compute_key |
| 0x541bf8 | 00000000000000006f73736c5f783530 | ........ossl_x50 |
| 0x541c08 | 395f636865636b5f707269766174655f | 9_check_private_ |
| 0x541c18 | 6b65790000000000583530395f636865 | key.....X509_che |
| 0x541c28 | 636b5f707269766174655f6b65790000 | ck_private_key.. |
| 0x541c38 | 6765745f7061796c6f61645f70726976 | get_payload_priv |
| 0x541c48 | 6174655f6b6579006f73736c5f6d6c5f | ate_key.ossl_ml_ |
| 0x541c58 | 6473615f67656e65726174655f6b6579 | dsa_generate_key |
| 0x541c68 | 000000000000000045435f4b45595f67 | ........EC_KEY_g |
| 0x541c78 | 656e65726174655f6b65790000000000 | enerate_key..... |
| 0x541c88 | 67656e65726174655f6b657900000000 | generate_key.... |
| 0x541c98 | 746c7331335f7570646174655f6b6579 | tls13_update_key |
| 0x541ca8 | 0000000000000000656e635f6b657900 | ........enc_key. |
| 0x541cb8 | 6765745f7061796c6f61645f7075626c | get_payload_publ |
| 0x541cc8 | 69635f6b657900007075626c69635f6b | ic_key..public_k |
| 0x541cd8 | 657900000000000044485f636865636b | ey......DH_check |
| 0x541ce8 | 5f7075625f6b65790000000000000000 | _pub_key........ |
| 0x541cf8 | 7075625f6b6579006f7373 | pub_key.oss |
| 0x542f58 | 63727970745f65780000000000000000 | crypt_ex........ |
| 0x542f68 | 504b435331325f7062655f6372797074 | PKCS12_pbe_crypt |
| 0x542f78 | 5f6578000000000055495f7365745f72 | _ex.....UI_set_r |
| 0x542f88 | 6573756c745f65780000000000000000 | esult_ex........ |
| 0x542f98 | 4556505f504b45595f6465726976655f | EVP_PKEY_derive_ |
| 0x542fa8 | 696e69745f6578004556505f5042455f | init_ex.EVP_PBE_ |
| 0x542fb8 | 436970686572496e69745f6578000000 | CipherInit_ex... |
| 0x542fc8 | 504b4353355f7062655f7365745f6578 | PKCS5_pbe_set_ex |
| 0x542fd8 | 0000000000000000504b4353355f7062 | ........PKCS5_pb |
| 0x542fe8 | 6b6466325f7365745f65780000000000 | kdf2_set_ex..... |
| 0x542ff8 | 6765745f636572745f62795f7375626a | get_cert_by_subj |
| 0x543008 | 6563745f6578000044485f636865636b | ect_ex..DH_check |
| 0x543018 | 5f706172616d735f6578000000000000 | _params_ex...... |
| 0x543028 | 52414e445f707269765f62797465735f | RAND_priv_bytes_ |
| 0x543038 | 657800000000000052414e445f627974 | ex......RAND_byt |
| 0x543048 | 65735f6578000000504b4353355f7062 | es_ex...PKCS5_pb |
| 0x543058 | 655f736574305f616c676f725f657800 | e_set0_algor_ex. |
| 0x543068 | 4556505f504b45595f6465726976655f | EVP_PKEY_derive_ |
| 0x543078 | 7365745f706565725f65780000000000 | set_peer_ex..... |
| 0x543088 | 42494f5f6c6f6f6b75705f6578000000 | BIO_lookup_ex... |
| 0x543098 | 50454d5f583530395f494e464f5f7265 | PEM_X509_INFO_re |
| 0x5430a8 | 61645f62696f5f657800000000000000 | ad_bio_ex....... |
| 0x5430b8 | 50454d5f726561645f62696f5f657800 | PEM_read_bio_ex. |
| 0x5430c8 | 6932625f50564b5f62696f5f65780000 | i2b_PVK_bio_ex.. |
| 0x5430d8 | 53534c5f4354585f7573655f73657276 | SSL_CTX_use_serv |
| 0x5430e8 | 6572696e666f5f657800000000000000 | erinfo_ex....... |
| 0x5430f8 | 45434453415f646f5f | ECDSA_do_ |
| 0x5432a8 | 7970745f6432695f6578000000000000 | ypt_d2i_ex...... |
| 0x5432b8 | 45435f47524f55505f6e65775f62795f | EC_GROUP_new_by_ |
| 0x5432c8 | 63757276655f6e616d655f6578000000 | curve_name_ex... |
| 0x5432d8 | 583530395f6c6f61645f636572745f66 | X509_load_cert_f |
| 0x5432e8 | 696c655f65780000583530395f6c6f61 | ile_ex..X509_loa |
| 0x5432f8 | 645f636572745f63726c5f66696c655f | d_cert_crl_file_ |
| 0x543308 | 6578000000000000504b4353385f7365 | ex......PKCS8_se |
| 0x543318 | 74305f7062655f657800000000000000 | t0_pbe_ex....... |
| 0x543328 | 746c7331335f686b64665f657870616e | tls13_hkdf_expan |
| 0x543338 | 645f6578000000006f73736c5f64685f | d_ex....ossl_dh_ |
| 0x543348 | 6e65775f62795f6e69645f6578 | new_by_nid_ex |
| 0x555c63 | 2d686d61632d7368613531322d65746d | -hmac-sha512-etm |
| 0x555c73 | 00000000006165732d3139322d636263 | .....aes-192-cbc |
| 0x555c83 | 2d686d61632d7368613531322d65746d | -hmac-sha512-etm |
| 0x555c93 | 00000000006165732d3132382d636263 | .....aes-128-cbc |
| 0x555ca3 | 2d686d61632d736861312d65746d0000 | -hmac-sha1-etm.. |
| 0x555cb3 | 00000000006165732d3235362d636263 | .....aes-256-cbc |
| 0x555cc3 | 2d686d61632d736861312d65746d0000 | -hmac-sha1-etm.. |
| 0x555cd3 | 00000000006165732d3139322d636263 | .....aes-192-cbc |
| 0x555ce3 | 2d686d61632d736861312d65746d0000 | -hmac-sha1-etm.. |
| 0x555cf3 | 0000000000696e76616c696420666f72 | .....invalid for |
| 0x555d03 | 6d00000000752e7632466f726d000000 | m....u.v2Form... |
| 0x555d13 | 0000000000752e7631466f726d000000 | .....u.v1Form... |
| 0x555d23 | 000000000069642d69742d | .....id-it- |
| 0x57196b | 2d484d41432d5348413531322d45544d | -HMAC-SHA512-ETM |
| 0x57197b | 00000000004145532d3139322d434243 | .....AES-192-CBC |
| 0x57198b | 2d484d41432d5348413531322d45544d | -HMAC-SHA512-ETM |
| 0x57199b | 00000000004145532d3132382d434243 | .....AES-128-CBC |
| 0x5719ab | 2d484d41432d534841312d45544d0000 | -HMAC-SHA1-ETM.. |
| 0x5719bb | 00000000004145532d3235362d434243 | .....AES-256-CBC |
| 0x5719cb | 2d484d41432d534841312d45544d0000 | -HMAC-SHA1-ETM.. |
| 0x5719db | 00000000004145532d3139322d434243 | .....AES-192-CBC |
| 0x5719eb | 2d484d41432d534841312d45544d0000 | -HMAC-SHA1-ETM.. |
| 0x5719fb | 0000000000583530395f41434552545f | .....X509_ACERT_ |
| 0x571a0b | 4953535545525f5632464f524d000000 | ISSUER_V2FORM... |
| 0x571a1b | 0000000000434c49454e545f52414e44 | .....CLIENT_RAND |
| 0x571a2b | 4f4d0000004f53534c5f41 | OM...OSSL_A |
| 0x57b08d | 68613100000000000000007273615f70 | ha1........rsa_p |
| 0x57b09d | 6b6373315f6d64355f73686131000000 | kcs1_md5_sha1... |
| 0x57b0ad | 0000007273615f706b6373315f736861 | ...rsa_pkcs1_sha |
| 0x57b0bd | 31000069642d616c672d64682d736967 | 1..id-alg-dh-sig |
| 0x57b0cd | 2d686d61632d73686131006165732d31 | -hmac-sha1.aes-1 |
| 0x57b0dd | 32382d6362632d686d61632d73686131 | 28-cbc-hmac-sha1 |
| 0x57b0ed | 0000006165732d3235362d6362632d68 | ...aes-256-cbc-h |
| 0x57b0fd | 6d61632d736861310000006165732d31 | mac-sha1...aes-1 |
| 0x57b10d | 39322d6362632d686d61632d73686131 | 92-cbc-hmac-sha1 |
| 0x57b11d | 000000686d61632d7368613100000000 | ...hmac-sha1.... |
| 0x57b12d | 0000006d64352d736861310000000000 | ...md5-sha1..... |
| 0x57b13d | 00000073736c332d7368613100000000 | ...ssl3-sha1.... |
| 0x57b14d | 0000005f5f73776966745f3100000000 | ...__swift_1.... |
| 0x57b15d | 0000005253415f70616464696e675f63 | ...RSA_padding_c |
| 0x57b16d | 6865636b5f504b4353315f747970655f | heck_PKCS1_type_ |
| 0x57b17d | 3100005253415f70616464696e675f61 | 1..RSA_padding_a |
| 0x57b18d | 64645f504b4353315f747970655f3100 | dd_PKCS1_type_1. |
| 0x57b19d | 0000006e6f5f746c73315f31 | ...no_tls1_1 |
| 0x57b363 | 0000000000686d616357697468534841 | .....hmacWithSHA |
| 0x57b373 | 31000000006473615769746853484131 | 1....dsaWithSHA1 |
| 0x57b383 | 000000000065636473612d776974682d | .....ecdsa-with- |
| 0x57b393 | 53484131004145532d3132382d434243 | SHA1.AES-128-CBC |
| 0x57b3a3 | 2d484d41432d53484131000000414553 | -HMAC-SHA1...AES |
| 0x57b3b3 | 2d3235362d4342432d484d41432d5348 | -256-CBC-HMAC-SH |
| 0x57b3c3 | 41310000004145532d3139322d434243 | A1...AES-192-CBC |
| 0x57b3d3 | 2d484d41432d53484131000000484d41 | -HMAC-SHA1...HMA |
| 0x57b3e3 | 432d5348413100000000000000525341 | C-SHA1.......RSA |
| 0x57b3f3 | 2d534841310000000000000000445341 | -SHA1........DSA |
| 0x57b403 | 2d5348413100000000000000004d4435 | -SHA1........MD5 |
| 0x57b413 | 2d534841310000000000000000525341 | -SHA1........RSA |
| 0x57b423 | 2b534841310000000000000000454344 | +SHA1........ECD |
| 0x57b433 | 53412b53484131000000000000445341 | SA+SHA1......DSA |
| 0x57b443 | 2b53484131000000000000000043414d | +SHA1........CAM |
| 0x57b453 | 454c4c49412d3235362d4543423a302e | ELLIA-256-ECB:0. |
| 0x57b463 | 332e34343031 | 3.4401 |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x5415d0 | 69635f76657269667900000000000000 | ic_verify....... |
| 0x5415e0 | 706b65795f7273615f76657269667900 | pkey_rsa_verify. |
| 0x5415f0 | 6f73736c5f7273615f76657269667900 | ossl_rsa_verify. |
| 0x541600 | 7273615f766572696679000000000000 | rsa_verify...... |
| 0x541610 | 4556505f504b45595f76657269667900 | EVP_PKEY_verify. |
| 0x541620 | 5343545f4354585f7665726966790000 | SCT_CTX_verify.. |
| 0x541630 | 45434453415f76657269667900000000 | ECDSA_verify.... |
| 0x541640 | 656432353531395f7665726966790000 | ed25519_verify.. |
| 0x541650 | 65643434385f76657269667900000000 | ed448_verify.... |
| 0x541660 | 62696e64657220646f6573206e6f7420 | binder does not |
| 0x541670 | 76657269667900006e6f206365727420 | verify..no cert |
| 0x541680 | 73657420666f7220757320746f207665 | set for us to ve |
| 0x541690 | 7269667900000000 | rify.... |
| 0x542373 | 2061207075626c6963206b6579000000 | a public key... |
| 0x542383 | 00000000006973737565722063657274 | .....issuer cert |
| 0x542393 | 6966696361746520646f65736e277420 | ificate doesn't |
| 0x5423a3 | 686176652061207075626c6963206b65 | have a public ke |
| 0x5423b3 | 7900000000657870656374696e672061 | y....expecting a |
| 0x5423c3 | 6e206563206b65790000000000657870 | n ec key.....exp |
| 0x5423d3 | 656374696e6720616e20686d6163206b | ecting an hmac k |
| 0x5423e3 | 657900000064696765737420746f6f20 | ey...digest too |
| 0x5423f3 | 62696720666f7220727361206b657900 | big for rsa key. |
| 0x542403 | 0000000000657870656374696e672061 | .....expecting a |
| 0x542413 | 6e20727361206b657900000000657870 | n rsa key....exp |
| 0x542423 | 656374696e67206120647361206b6579 | ecting a dsa key |
| 0x542433 | 00000000005468652070617373656420 | .....The passed |
| 0x542443 | 4556505f504b4559206d757374206265 | EVP_PKEY must be |
| 0x542453 | 2061737369676e65642061206b657900 | assigned a key. |
| 0x542463 | 0000000000525341206b657900657870 | .....RSA key.exp |
| 0x542473 | 656374696e67206120706f6c79313330 | ecting a poly130 |
| 0x542483 | 35206b6579000000000000000076616c | 5 key........val |
| 0x542493 | 75652e62794b6579000000000069642d | ue.byKey.....id- |
| 0x5424a3 | 7265674374726c2d70726f746f636f6c | regCtrl-protocol |
| 0x5424b3 | 456e63724b6579000000000000707269 | EncrKey......pri |
| 0x5424c3 | 766174654b657900 | vateKey. |
| 0x542f58 | 63727970745f65780000000000000000 | crypt_ex........ |
| 0x542f68 | 504b435331325f7062655f6372797074 | PKCS12_pbe_crypt |
| 0x542f78 | 5f6578000000000055495f7365745f72 | _ex.....UI_set_r |
| 0x542f88 | 6573756c745f65780000000000000000 | esult_ex........ |
| 0x542f98 | 4556505f504b45595f6465726976655f | EVP_PKEY_derive_ |
| 0x542fa8 | 696e69745f6578004556505f5042455f | init_ex.EVP_PBE_ |
| 0x542fb8 | 436970686572496e69745f6578000000 | CipherInit_ex... |
| 0x542fc8 | 504b4353355f7062655f7365745f6578 | PKCS5_pbe_set_ex |
| 0x542fd8 | 0000000000000000504b4353355f7062 | ........PKCS5_pb |
| 0x542fe8 | 6b6466325f7365745f65780000000000 | kdf2_set_ex..... |
| 0x542ff8 | 6765745f636572745f62795f7375626a | get_cert_by_subj |
| 0x543008 | 6563745f6578000044485f636865636b | ect_ex..DH_check |
| 0x543018 | 5f706172616d735f6578000000000000 | _params_ex...... |
| 0x543028 | 52414e445f707269765f62797465735f | RAND_priv_bytes_ |
| 0x543038 | 657800000000000052414e445f627974 | ex......RAND_byt |
| 0x543048 | 65735f6578000000504b4353355f7062 | es_ex...PKCS5_pb |
| 0x543058 | 655f736574305f616c676f725f657800 | e_set0_algor_ex. |
| 0x543068 | 4556505f504b45595f6465726976655f | EVP_PKEY_derive_ |
| 0x543078 | 7365745f706565725f65780000000000 | set_peer_ex..... |
| 0x543088 | 42494f5f6c6f6f6b75705f6578000000 | BIO_lookup_ex... |
| 0x543098 | 50454d5f583530395f494e464f5f7265 | PEM_X509_INFO_re |
| 0x5430a8 | 61645f62696f5f657800000000000000 | ad_bio_ex....... |
| 0x5430b8 | 50454d5f726561645f62696f5f657800 | PEM_read_bio_ex. |
| 0x5430c8 | 6932625f50564b5f62696f5f65780000 | i2b_PVK_bio_ex.. |
| 0x5430d8 | 53534c5f4354585f7573655f73657276 | SSL_CTX_use_serv |
| 0x5430e8 | 6572696e666f5f657800000000000000 | erinfo_ex....... |
| 0x5430f8 | 45434453415f646f5f | ECDSA_do_ |
| 0x543824 | 5f696e7374616e63655f6e6577000000 | _instance_new... |
| 0x543834 | 000000004f4353505f636572745f6964 | ....OCSP_cert_id |
| 0x543844 | 5f6e657700000000000000006b64665f | _new........kdf_ |
| 0x543854 | 6172676f6e3269645f6e657700000000 | argon2id_new.... |
| 0x543864 | 0000000061736e315f6974656d5f656d | ....asn1_item_em |
| 0x543874 | 6265645f6e657700000000006b64665f | bed_new.....kdf_ |
| 0x543884 | 6172676f6e32645f6e65770073656564 | argon2d_new.seed |
| 0x543894 | 5f7372635f6e6577000000006f73736c | _src_new....ossl |
| 0x5438a4 | 5f717569635f6e65770000006f73736c | _quic_new...ossl |
| 0x5438b4 | 5f706f6c6963795f646174615f6e6577 | _policy_data_new |
| 0x5438c4 | 000000004556505f504b45595f6e6577 | ....EVP_PKEY_new |
| 0x5438d4 | 00000000583530395f504b45595f6e65 | ....X509_PKEY_ne |
| 0x5438e4 | 770000004556505f4b44465f4354585f | w...EVP_KDF_CTX_ |
| 0x5438f4 | 6e6577004556505f52414e445f435458 | new.EVP_RAND_CTX |
| 0x543904 | 5f6e657700000000000000004556505f | _new........EVP_ |
| 0x543914 | 4d41435f4354585f6e65770045435f50 | MAC_CTX_new.EC_P |
| 0x543924 | 4f494e545f6e65770000000053534c5f | OINT_new....SSL_ |
| 0x543934 | 6e657700424e5f424c494e44494e475f | new.BN_BLINDING_ |
| 0x543944 | 6e657700583530395f53544f52455f6e | new.X509_STORE_n |
| 0x543954 | 65770000454e47494e455f6e65770000 | ew..ENGINE_new.. |
| 0x543964 | 0000000042494f5f70617273655f686f | ....BIO_parse_ho |
| 0x543974 | 7374736572760000000000006f73736c | stserv......ossl |
| 0x543984 | 5f6465636f6465725f696e7374616e63 | _decoder_instanc |
| 0x543994 | 655f6e65775f666f7270726f76000000 | e_new_forprov... |
| 0x5439a4 | 00000000746c736976 | ....tlsiv |
| 0x544da0 | 31322d706172616d5365745465737400 | 12-paramSetTest. |
| 0x544db0 | 424e5f6d6f645f737172740000000000 | BN_mod_sqrt..... |
| 0x544dc0 | 6d6c785f6b656d5f6578706f72740000 | mlx_kem_export.. |
| 0x544dd0 | 6d6c5f6b656d5f6578706f7274000000 | ml_kem_export... |
| 0x544de0 | 4556505f504b45595f6578706f727400 | EVP_PKEY_export. |
| 0x544df0 | 6e6f74206b6579207472616e73706f72 | not key transpor |
| 0x544e00 | 740000000000000074666f206e6f206b | t.......tfo no k |
| 0x544e10 | 65726e656c20737570706f7274000000 | ernel support... |
| 0x544e20 | 44796e616d696320656e67696e65206c | Dynamic engine l |
| 0x544e30 | 6f6164696e6720737570706f72740000 | oading support.. |
| 0x544e40 | 536f66747761726520656e67696e6520 | Software engine |
| 0x544e50 | 737570706f7274006576705f6b65796d | support.evp_keym |
| 0x544e60 | 676d745f7574696c | gmt_util |
| 0x577a88 | 2e3431302e3230303034362e312e312e | .410.200046.1.1. |
| 0x577a98 | 31350000000000006368616368613230 | 15......chacha20 |
| 0x577aa8 | 2d706f6c793133303500000000000000 | -poly1305....... |
| 0x577ab8 | 706f6c79313330350000000000000000 | poly1305........ |
| 0x577ac8 | 43686143686132302d506f6c79313330 | ChaCha20-Poly130 |
| 0x577ad8 | 3500000000000000506f6c7931333035 | 5.......Poly1305 |
| 0x577ae8 | 000000000000000045434448452d5053 | ........ECDHE-PS |
| 0x577af8 | 4b2d43484143484132302d504f4c5931 | K-CHACHA20-POLY1 |
| 0x577b08 | 33303500000000004448452d50534b2d | 305.....DHE-PSK- |
| 0x577b18 | 43484143484132302d504f4c59313330 | CHACHA20-POLY130 |
| 0x577b28 | 35000000000000005253412d50534b2d | 5.......RSA-PSK- |
| 0x577b38 | 43484143484132302d504f4c59313330 | CHACHA20-POLY130 |
| 0x577b48 | 350000000000000050534b2d43484143 | 5.......PSK-CHAC |
| 0x577b58 | 48 | H |
| 0x4fbbc0 | 10000000100000001000000010000000 | ................ |
| 0x4fbbd0 | 10000000100000001000000010000000 | ................ |
| 0x4fbbe0 | 10000000100000001000000010000000 | ................ |
| 0x4fbbf0 | 10000000100000001000000010000000 | ................ |
| 0x4fbc00 | 657870616e642033322d62797465206b | expand 32-byte k |
| 0x4fbc10 | 00436861436861323020666f72207838 | .ChaCha20 for x8 |
| 0x4fbc20 | 365f36342c2043525950544f47414d53 | 6_64, CRYPTOGAMS |
| 0x4fbc30 | 206279203c68747470733a2f2f676974 | by <https://git |
| 0x4fbc40 | 6875622e636f6d2f646f742d61736d3e | hub.com/dot-asm> |
| 0x4fbc50 | 00000000000000000000000000000000 | ................ |
| 0x4fbc60 | 00000000000000000000000000000000 | ................ |
| 0x4fbc70 | 00000000000000000000000000000000 | ................ |
| 0x4fbc80 | ffffff0000000000ffffff0000000000 | ................ |
| 0x4fbc90 | ffffff0000000000ff | ......... |
| 0x54d6f8 | 74720000000000006165732d3132382d | tr......aes-128- |
| 0x54d708 | 6374720000000000617269612d313238 | ctr.....aria-128 |
| 0x54d718 | 2d6374720000000063616d656c6c6961 | -ctr....camellia |
| 0x54d728 | 2d3132382d6374720000000000000000 | -128-ctr........ |
| 0x54d738 | 6165732d3235362d6374720000000000 | aes-256-ctr..... |
| 0x54d748 | 617269612d3235362d63747200000000 | aria-256-ctr.... |
| 0x54d758 | 63616d656c6c69612d3235362d637472 | camellia-256-ctr |
| 0x54d768 | 0000000000000000736d342d63747200 | ........sm4-ctr. |
| 0x54d778 | 6165732d3139322d6374720000000000 | aes-192-ctr..... |
| 0x54d788 | 617269612d3139322d63747200000000 | aria-192-ctr.... |
| 0x54d798 | 63616d656c6c69612d3139322d637472 | camellia-192-ctr |
| 0x54d7a8 | 00000000000000007463672d61742d70 | ........tcg-at-p |
| 0x54d7b8 | 6c6174666f726d4d616e75 | latformManu |
| 0x571010 | 2d544253000000004145532d3132382d | -TBS....AES-128- |
| 0x571020 | 4354520000000000415249412d313238 | CTR.....ARIA-128 |
| 0x571030 | 2d4354520000000043414d454c4c4941 | -CTR....CAMELLIA |
| 0x571040 | 2d3132382d4354520000000000000000 | -128-CTR........ |
| 0x571050 | 4145532d3235362d4354520000000000 | AES-256-CTR..... |
| 0x571060 | 415249412d3235362d43545200000000 | ARIA-256-CTR.... |
| 0x571070 | 43414d454c4c49412d3235362d435452 | CAMELLIA-256-CTR |
| 0x571080 | 0000000000000000534d342d43545200 | ........SM4-CTR. |
| 0x571090 | 4145532d3139322d4354520000000000 | AES-192-CTR..... |
| 0x5710a0 | 415249412d3139322d43545200000000 | ARIA-192-CTR.... |
| 0x5710b0 | 43414d454c4c49412d3139322d435452 | CAMELLIA-192-CTR |
| 0x5710c0 | 00000000000000004f53534c5f415454 | ........OSSL_ATT |
| 0x5710d0 | 5249425554455f44455343 | RIBUTE_DESC |
| 0x4b5080 | 824141c3824141c3299999b0299999b0 | .AA..AA.)...)... |
| 0x4b5090 | 5a2d2d775a2d2d771e0f0f111e0f0f11 | Z--wZ--w........ |
| 0x4b50a0 | 7bb0b0cb7bb0b0cba85454fca85454fc | {...{....TT..TT. |
| 0x4b50b0 | 6dbbbbd66dbbbbd62c16163a2c16163a | m...m...,..:,..: |
| 0x4b50c0 | 637c777bf26b6fc53001672bfed7ab76 | c|w{.ko.0.g+...v |
| 0x4b50d0 | ca82c97dfa5947f0add4a2af9ca472c0 | ...}.YG.......r. |
| 0x4b50e0 | b7fd9326363ff7cc34a5e5f171d83115 | ...&6?..4...q.1. |
| 0x4b50f0 | 04c723c31896059a071280e2eb27b275 | ..#..........'.u |
| 0x4b5100 | 09832c1a1b6e5aa0523bd6b329e32f84 | ..,..nZ.R;..)./. |
| 0x4b5110 | 53d100ed20fcb15b6acbbe394a4c58cf | S... ..[j..9JLX. |
| 0x4b5120 | d0efaafb434d338545f9027f503c9fa8 | ....CM3.E...P<.. |
| 0x4b5130 | 51a3408f929d38f5bcb6da2110fff3d2 | Q.@...8....!.... |
| 0x4b5140 | cd0c13ec5f974417c4a77e3d645d1973 | ...._.D...~=d].s |
| 0x4b5150 | 60814fdc222a90 | `.O."*. |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
-
0x0
4d 5a 78 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 09 00 80 91 4b 6a 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 00 00 00 46 00 00 d0 1b 00 00 00 00 00 c8 b3 42 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 62 00 00 04 00 [email protected]...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Kj.........." ......F...........B......................................`b....
| 0x584f3c | b700696e65745f70746f6e0000004163 | ..inet_pton...Ac |
| 0x584f4c | 71756972655352574c6f636b4578636c | quireSRWLockExcl |
| 0x584f5c | 75736976650001004163717569726553 | usive...AcquireS |
| 0x584f6c | 52574c6f636b53686172656400009400 | RWLockShared.... |
| 0x584f7c | 436c6f736548616e646c6500a800436f | CloseHandle...Co |
| 0x584f8c | 6d70617265537472696e67457800aa00 | mpareStringEx... |
| 0x584f9c | 436f6d70617265537472696e67570000 | CompareStringW.. |
| 0x584fac | b000436f6e766572744669626572546f | ..ConvertFiberTo |
| 0x584fbc | 5468726561640000b400436f6e766572 | Thread....Conver |
| 0x584fcc | 74546872656164546f46696265724578 | tThreadToFiberEx |
| 0x584fdc | 0000bc00436f707946696c655700c900 | ....CopyFileW... |
| 0x584fec | 4372656174654469726563746f727957 | CreateDirectoryW |
| 0x584ffc | 0000ce0043726561746545 | ....CreateE |
| 0x585a6e | 5352574c6f636b4578636c7573697665 | SRWLockExclusive |
| 0x585a7e | 0000e605556e68616e646c6564457863 | ....UnhandledExc |
| 0x585a8e | 657074696f6e46696c7465720000e905 | eptionFilter.... |
| 0x585a9e | 556e6d6170566965774f6646696c6500 | UnmapViewOfFile. |
| 0x585aae | 02065669727475616c46726565001006 | ..VirtualFree... |
| 0x585abe | 57616974466f7253696e676c654f626a | WaitForSingleObj |
| 0x585ace | 65637400110657616974466f7253696e | ect...WaitForSin |
| 0x585ade | 676c654f626a65637445780018065761 | gleObjectEx...Wa |
| 0x585aee | 6b65416c6c436f6e646974696f6e5661 | keAllConditionVa |
| 0x585afe | 726961626c650000190657616b65436f | riable....WakeCo |
| 0x585b0e | 6e646974696f6e5661726961626c6500 | nditionVariable. |
| 0x585b1e | 37065769646543686172546f4d756c74 | 7.WideCharToMult |
| 0x585b2e | 6942797465004a065772697465436f6e | iByte.J.WriteCon |
| 0x585b3e | 736f6c6557004b06577269746546696c | soleW.K.WriteFil |
| 0x585b4e | 6500c200437279707441637175697265 | e...CryptAcquire |
| 0x585b5e | 436f6e74657874570000c40043727970 | ContextW....Cryp |
| 0x585b6e | 744372656174654861736800c5004372 | tCreateHash...Cr |
| 0x585b7e | 797074446563727970740000c7004372 | yptDecrypt....Cr |
| 0x585b8e | 79707444657374726f79486173680000 | yptDestroyHash.. |
| 0x585b9e | c800437279707444657374726f794b65 | ..CryptDestroyKe |
| 0x585bae | 7900cf004372797074456e756d50726f | y...CryptEnumPro |
| 0x585bbe | 7669646572735700d000437279707445 | vidersW...CryptE |
| 0x585bce | 78706f72744b65790000d20043727970 | xportKey....Cryp |
| 0x585bde | 7447656e52616e646f6d0000d7004372 | tGenRandom....Cr |
| 0x585bee | 79707447657450726f76506172616d00 | yptGetProvParam. |
| 0x585bfe | d8004372797074476574557365724b65 | ..CryptGetUserKe |
| 0x585c0e | 7900dc00437279707452656c65617365 | y...CryptRelease |
| 0x585c1e | 436f6e7465787400dd00437279707453 | Context...CryptS |
| 0x585c2e | 657448617368506172616d00e5004372 | etHashParam...Cr |
| 0x585c3e | 7970745369676e486173 | yptSignHas |
| 0x53e6e4 | 686f737400000000656d636f73740000 | host....emcost.. |
| 0x53e6f4 | 65717565737400006469676573740000 | equest..digest.. |
| 0x53e704 | 69676573740000006361737400000000 | igest...cast.... |
| 0x53e714 | 73717274000000006365727400000000 | sqrt....cert.... |
| 0x53e724 | 537461727400000069642d7174000000 | Start...id-qt... |
| 0x53e734 | 73637279707400005f6879706f740000 | scrypt.._hypot.. |
| 0x53e744 | 70696c6f74000000636c69656e740000 | pilot...client.. |
| 0x53e754 | 6e7374616e7400006d676d7400000000 | nstant..mgmt.... |
| 0x53e764 | 73616c7400000000616c7400696e6974 | salt....alt.init |
| 0x53e774 | 000000006c696d697400000069642d69 | ....limit...id-i |
| 0x53e784 | 740000006f6666736574000069642d73 | t...offset..id-s |
| 0x53e794 | 65740000736574007365637265740000 | et..set.secret.. |
| 0x53e7a4 | 6372657400 | cret. |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
| 0x585260 | db014765744350496e666f00f0014765 | ..GetCPInfo...Ge |
| 0x585270 | 74436f6d6d616e644c696e654100f101 | tCommandLineA... |
| 0x585280 | 476574436f6d6d616e644c696e655700 | GetCommandLineW. |
| 0x585290 | 1602476574436f6e736f6c654d6f6465 | ..GetConsoleMode |
| 0x5852a0 | 00001a02476574436f6e736f6c654f75 | ....GetConsoleOu |
| 0x5852b0 | 74707574435000002b02476574437572 | tputCP..+.GetCur |
| 0x5852c0 | 72656e744469726563746f7279570000 | rentDirectoryW.. |
| 0x5852d0 | 320247657443757272656e7450726f63 | 2.GetCurrentProc |
| 0x5852e0 | 65737300330247657443757272656e74 | ess.3.GetCurrent |
| 0x5852f0 | 50726f63657373496400370247657443 | ProcessId.7.GetC |
| 0x585300 | 757272656e7454687265616449640000 | urrentThreadId.. |
| 0x585310 | 3d0247657444617465466f726d617457 | =.GetDateFormatW |
| 0x585320 | 00004b02476574447269766554797065 | ..K.GetDriveType |
| 0x585330 | 57005302476574456e7669726f6e6d65 | W.S.GetEnvironme |
| 0x585340 | 6e74537472696e677357000055024765 | ntStringsW..U.Ge |
| 0x585350 | 74456e7669726f6e6d656e7456617269 | tEnvironmentVari |
| 0x585360 | 61626c65570059024765744578697443 | ableW.Y.GetExitC |
| 0x585370 | 6f6465546872656164005e0247657446 | odeThread.^.GetF |
| 0x585380 | 696c6541747472696275746573457857 | ileAttributesExW |
| 0x585390 | 0000630247657446696c65496e666f72 | ..c.GetFileInfor |
| 0x5853a0 | 6d6174696f6e427948616e646c650000 | mationByHandle.. |
| 0x5853b0 | 640247657446696c65496e666f726d61 | d.GetFileInforma |
| 0x5853c0 | 74696f6e427948616e646c6545780000 | tionByHandleEx.. |
| 0x5853d0 | 680247657446696c6553697a65457800 | h.GetFileSizeEx. |
| 0x5853e0 | 6a0247657446696c6554797065007502 | j.GetFileType.u. |
| 0x5853f0 | 47657446756c6c506174684e616d6557 | GetFullPathNameW |
| 0x585400 | 00007d024765744c6173744572726f72 | ..}.GetLastError |
| 0x585410 | 000080024765744c6f63616c65496e66 | ....GetLocaleInf |
| 0x585420 | 6f45780081024765744c6f63616c6549 | oEx...GetLocaleI |
| 0x585430 | 6e666f57000091024765744d6f64756c | nfoW....GetModul |
| 0x585440 | 6546696c654e616d6557000094024765 | eFileNameW....Ge |
| 0x585450 | 744d6f64756c6548616e646c65457857 | tModuleHandleExW |
| 0x585460 | 000095024765744d6f64756c6548616e | ....GetModuleHan |
| 0x585470 | 646c65570000a2024765744e61746976 | dleW....GetNativ |
| 0x585480 | 6553797374656d496e666f00b6024765 | eSystemInfo...Ge |
| 0x585490 | 744f454d43500000b7024765744f7665 | tOEMCP....GetOve |
| 0x5854a0 | 726c6170706564526573756c7400cd02 | rlappedResult... |
| 0x5854b0 | 47657450726f63416464726573730000 | GetProcAddress.. |
| 0x5854c0 | d40247657450726f6365737348656170 | ..GetProcessHeap |
| 0x5854d0 | 0000f10247657453746172747570496e | ....GetStartupIn |
| 0x5854e0 | 666f5700f30247657453746448616e64 | foW...GetStdHand |
| 0x5854f0 | 6c650000f802476574537472696e6754 | le....GetStringT |
| 0x585500 | 79706557000000034765745379737465 | ypeW....GetSyste |
| 0x585510 | 6d4469726563746f7279410008034765 | mDirectoryA...Ge |
| 0x585520 | 7453797374656d54696d65000a034765 | tSystemTime...Ge |
| 0x585530 | 7453797374656d54696d65417346696c | tSystemTimeAsFil |
| 0x585540 | 6554696d6500310347657454696d6546 | eTime.1.GetTimeF |
| 0x585550 | 6f726d6174570000330347657454696d | ormatW..3.GetTim |
Metadata
-
0x0
4d 5a 78 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 09 00 80 91 4b 6a 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 00 00 00 46 00 00 d0 1b 00 00 00 00 00 c8 b3 42 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 62 00 00 04 00 [email protected]...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Kj.........." ......F...........B......................................`b....×2
-
0x0
4d 5a 78 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 24 00 00 50 45 00 00 64 86 09 00 80 91 4b 6a 00 00 00 00 00 00 00 00 f0 00 22 20 0b 02 0e 00 00 00 46 00 00 d0 1b 00 00 00 00 00 c8 b3 42 00 00 10 00 00 00 00 00 80 01 00 00 00 00 10 00 00 00 02 00 00 04 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 60 62 00 00 04 00 [email protected]...........!..L.!This program cannot be run in DOS mode.$..PE..d.....Kj.........." ......F...........B......................................`b....
| 0x4a2ca0 | 10103180010000007010318001000000 | ..1.....p.1..... |
| 0x4a2cb0 | 000000000000000010eb288001000000 | ..........(..... |
| 0x4a2cc0 | 000000000000000030ec288001000000 | ........0.(..... |
| 0x4a2cd0 | 40ed2880010000000000000000000000 | @.(............. |
| 0x4a2ce0 | 36363636363636363636363636363636 | 6666666666666666 |
| 0x4a2cf0 | 36363636363636363636363636363636 | 6666666666666666 |
| 0x4a2d00 | 36363636363636363636363636363636 | 6666666666666666 |
| 0x4a2d10 | 5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c | \\\\\\\\\\\\\\\\ |
| 0x4a2d20 | 5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c | \\\\\\\\\\\\\\\\ |
| 0x4a2d30 | 5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c5c | \\\\\\\\\\\\\\\\ |
| 0x4a2d40 | 00123180010000004017318001000000 | ..1.....@.1..... |
| 0x4a2d50 | 8020318001000000b0dd288001000000 | . 1.......(..... |
| 0x4a2d60 | d0cf28800100000010d3288001000000 | ..(.......(..... |
| 0x4a2d70 | c0dd28800100 | ..(... |
| 0x5705c0 | 4f53534c5f41415f444953545f504f49 | OSSL_AA_DIST_POI |
| 0x5705d0 | 4e54000000000000504b4353375f454e | NT......PKCS7_EN |
| 0x5705e0 | 435f434f4e54454e5400000000000000 | C_CONTENT....... |
| 0x5705f0 | 424f4f4c20414253454e540000000000 | BOOL ABSENT..... |
| 0x570600 | 25732025326420253032643a25303264 | %s %2d %02d:%02d |
| 0x570610 | 3a253032642e252e2a7320256420474d | :%02d.%.*s %d GM |
| 0x570620 | 54000000000000002573202532642025 | T.......%s %2d % |
| 0x570630 | 3032643a253032643a25303264202564 | 02d:%02d:%02d %d |
| 0x570640 | 20474d5400000000434f4d504c454d45 | GMT....COMPLEME |
| 0x570650 | 4e544f4644454641554c540000000000 | NTOFDEFAULT..... |
| 0x570660 | 44454641554c5400544c535f474f5354 | DEFAULT.TLS_GOST |
| 0x570670 | 523334313030315f574954485f323831 | R341001_WITH_281 |
| 0x570680 | 34375f434e545f494d49540000000000 | 47_CNT_IMIT..... |
| 0x570690 | 4558504c494349540000000000000000 | EXPLICIT........ |
| 0x5706a0 | 494d504c494349540000000000000000 | IMPLICIT........ |
| 0x5706b0 | 7273614f414550456e6372797074696f | rsaOAEPEncryptio |
| 0x5706c0 | 6e534554000000004541524c595f4558 | nSET....EARLY_EX |
| 0x5706d0 | 504f525445525f534543524554000000 | PORTER_SECRET... |
| 0x5706e0 | 4558504f52544552 | EXPORTER |
20 of 37 traits shown
Identity
| SHA-256 | b9e4052b310f9451eca9784a4a33bf5282d1bd07e3359eba9648be625e2e40dd |
|---|---|
| Filename | upload |
| Package | b9e4052b310f9451eca9784a4a33bf5282d1bd07e3359eba9648be625e2e40dd |
Origin
| Source | harvest |
|---|---|
| Feed | malshare |
| Domain | malshare.com |
Timeline
| First seen | 10 Aug 2026 06:18 UTC |
|---|---|
| First analyzed | 10 Aug 2026 08:03 UTC |
| Last analyzed | 12 Aug 2026 00:43 UTC |
| Last updated | 12 Aug 2026 00:43 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 73866 |
Not seeing what you expected? Let us know