File browser.exe

Size 1.5MB Resubmit sample
Type PE32+ executable (GUI) x86-64, for MS Windows
MD5 f7cd0bb23656737d3ebc974b8580dd86
SHA1 ca8b1f8532670a1a83ca2712091ddd95c57c5af6
SHA256 c741e4e4d81490cb3d6f8d8cf7026abfa7cc831413e2265f2c7f362b7993b769
SHA512
369b21d521af8a83eb9e3b63620d73ee9cc7282de419790813d1c9975a90cd71303de50102af5764a1f98c0aa1ec46de9fdb19c8df2303958e9720b0bb1478f3
CRC32 69980BCE
ssdeep 24576:zgPaVcpX/ePh8WbrGoraHWuRodKTU9CEP6:kP+PhjbrGoraWdKTj1
Yara
  • IsPE64 -
  • IsWindowsGUI -
  • HasOverlay - Overlay Check
  • HasDigitalSignature - DigitalSignature Check
  • PEiD_00055_Alias_PIX_Vivid_IMG_Graphics_format_ - [Alias PIX/Vivid IMG Graphics format]
  • PEiD_00497_dUP_v2_x_Patcher_____www_diablo2oo2_cjb_net_ - [dUP v2.x Patcher --> www.diablo2oo2.cjb.net]
  • PEiD_00810_FSG_v1_10__Eng_____dulek_xt_____Microsoft_Visual_C___6_0___7_0__ - [FSG v1.10 (Eng) -> dulek/xt -> (Microsoft Visual C++ 6.0 / 7.0)]
  • PEiD_01091_Microsoft_Visual_C___8_ - [Microsoft Visual C++ 8]
  • PEiD_01628_PEQuake_V0_06____forgat_ - [PEQuake V0.06 -> forgat]
  • PEiD_01693_pex_V0_99____params_ - [pex V0.99 -> params]
  • PEiD_02152_StarForce_V3_X_DLL____StarForce_Copy_Protection_System_ - [StarForce V3.X DLL -> StarForce Copy Protection System]
  • PEiD_02161_Stranik_1_3_Modula_C_Pascal_ - [Stranik 1.3 Modula/C/Pascal]
  • PEiD_03512_Xtreme_Protector_v1_05_ - [Xtreme-Protector v1.05]
  • Contains_PE_File - Detect a PE file inside a byte sequence
  • DebuggerCheck__QueryInfo -
  • DebuggerHiding__Thread -
  • DebuggerException__SetConsoleCtrl -
  • Check_OutputDebugStringA_iat -
  • anti_dbg - Checks if being debugged
  • antisb_threatExpert - Anti-Sandbox checks for ThreatExpert
  • disable_dep - Bypass DEP
  • inject_thread - Code injection with CreateRemoteThread in a remote process
  • win_mutex - Create or check mutex
  • win_registry - Affect system registries
  • win_token - Affect system token
  • win_files_operation - Affect private profile
  • contentis_base64 - This rule finds for base64 strings
  • Microsoft_Visual_Cpp_80_DLL -
  • CRC32_poly_Constant - Look for CRC32 [poly]
  • CRC32_table - Look for CRC32 table
  • MD5_Constants - Look for MD5 constants
  • RIPEMD160_Constants - Look for RIPEMD-160 constants
  • SHA1_Constants - Look for SHA1 constants
  • SHA512_Constants - Look for SHA384/SHA512 constants
  • RijnDael_AES_CHAR - RijnDael AES (check2) [char]
  • RijnDael_AES_LONG - RijnDael AES
  • maldoc_suspicious_strings -
  • Str_Win32_Http_API - Match Windows Http API call

Score

This file appears fairly benign with a score of 0.4 out of 10.

Please notice: The scoring system is currently still in development and should be considered an alpha feature.

Information on Execution

Category Started Completed Duration Logs
FILE March 13, 2019, 3:43 p.m. March 13, 2019, 3:47 p.m. 254 seconds

Machine

Name Label Started On Shutdown On
win7x64 win7x64 2019-03-13 15:43:38 2019-03-13 15:47:50

Analyzer Log

2019-03-13 08:43:37,015 [analyzer] DEBUG: Starting analyzer from: C:\okvsh
2019-03-13 08:43:37,092 [analyzer] DEBUG: Pipe server name: \\.\PIPE\uXrIAhbgeMcOyylnVRAgEadk
2019-03-13 08:43:37,092 [analyzer] DEBUG: Log pipe server name: \\.\PIPE\kBBaKskSRNyrAFtlbR
2019-03-13 08:43:39,480 [analyzer] DEBUG: Started auxiliary module Disguise
2019-03-13 08:43:39,854 [analyzer] DEBUG: Loaded monitor into process with pid 508
2019-03-13 08:43:39,854 [analyzer] DEBUG: Started auxiliary module DumpTLSMasterSecrets
2019-03-13 08:43:39,854 [analyzer] DEBUG: Started auxiliary module Human
2019-03-13 08:43:39,854 [analyzer] DEBUG: Started auxiliary module InstallCertificate
2019-03-13 08:43:39,854 [analyzer] WARNING: Cannot execute auxiliary module Reboot: [Errno 2] No such file or directory: 'C:\\okvsh\\reboot.json'
2019-03-13 08:43:40,072 [analyzer] DEBUG: Started auxiliary module RecentFiles
2019-03-13 08:43:40,072 [analyzer] DEBUG: Started auxiliary module Screenshots
2019-03-13 08:43:40,072 [analyzer] INFO: No process IDs returned by the package, running for the full timeout.
2019-03-13 08:43:40,088 [modules.auxiliary.screenshots] WARNING: Python Image Library is not installed, screenshots are disabled
2019-03-13 08:47:42,434 [analyzer] INFO: Analysis timeout hit, terminating analysis.
2019-03-13 08:47:42,434 [analyzer] INFO: Terminating remaining processes before shutdown.
2019-03-13 08:47:42,434 [analyzer] INFO: Analysis completed.

Cuckoo Log

2019-03-13 15:43:38,101 [lib.cuckoo.core.scheduler] INFO: File already exists at "/opt/cuckoo/storage/binaries/c741e4e4d81490cb3d6f8d8cf7026abfa7cc831413e2265f2c7f362b7993b769"
2019-03-13 15:43:38,118 [lib.cuckoo.core.scheduler] INFO: Task #1659: acquired machine win7x64 (label=win7x64)
2019-03-13 15:43:38,152 [modules.auxiliary.sniffer] INFO: Started sniffer with PID 7416 (interface=eth2, host=192.168.128.109, pcap=/opt/cuckoo/storage/analyses/1659/dump.pcap)
2019-03-13 15:43:43,175 [lib.cuckoo.core.guest] INFO: Starting analysis on guest (id=win7x64, ip=192.168.128.109)
2019-03-13 15:43:57,857 [modules.auxiliary.reboot] ERROR: Reboot analysis is not backwards compatible with the Old Agent, please upgrade your target machine (<Machine('1','win7x64')>) to the New Agent to use the reboot analysis capabilities.
2019-03-13 15:47:49,769 [lib.cuckoo.core.guest] INFO: win7x64: analysis completed successfully
2019-03-13 15:47:53,139 [lib.cuckoo.core.plugins] WARNING: The processing module "Suricata" returned the following error: Unable to locate Suricata binary
2019-03-13 15:47:55,855 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937f696fd0>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-13 15:47:55,856 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937f696ad0>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-13 15:47:55,856 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937f696550>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-13 15:47:55,857 [elasticsearch] WARNING: HEAD http://127.0.0.1:9200/_template/cuckoo_template [status:N/A request:0.000s]
Traceback (most recent call last):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 94, in perform_request
    response = self.pool.urlopen(method, url, body, retries=False, headers=self.headers, **kw)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 643, in urlopen
    _stacktrace=sys.exc_info()[2])
  File "/usr/local/lib/python2.7/dist-packages/urllib3/util/retry.py", line 251, in increment
    raise six.reraise(type(error), error, _stacktrace)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 594, in urlopen
    chunked=chunked)
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connectionpool.py", line 361, in _make_request
    conn.request(method, url, **httplib_request_kw)
  File "/usr/lib/python2.7/httplib.py", line 1017, in request
    self._send_request(method, url, body, headers)
  File "/usr/lib/python2.7/httplib.py", line 1051, in _send_request
    self.endheaders(body)
  File "/usr/lib/python2.7/httplib.py", line 1013, in endheaders
    self._send_output(message_body)
  File "/usr/lib/python2.7/httplib.py", line 864, in _send_output
    self.send(msg)
  File "/usr/lib/python2.7/httplib.py", line 826, in send
    self.connect()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 163, in connect
    conn = self._new_conn()
  File "/usr/local/lib/python2.7/dist-packages/urllib3/connection.py", line 147, in _new_conn
    self, "Failed to establish a new connection: %s" % e)
NewConnectionError: <urllib3.connection.HTTPConnection object at 0x7f937f696c10>: Failed to establish a new connection: [Errno 111] Connection refused
2019-03-13 15:47:55,858 [lib.cuckoo.core.plugins] ERROR: Failed to run the reporting module "ElasticSearch":
Traceback (most recent call last):
  File "/opt/cuckoo/lib/cuckoo/core/plugins.py", line 533, in process
    current.run(self.results)
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 196, in run
    self.connect()
  File "/opt/cuckoo/modules/reporting/elasticsearch.py", line 79, in connect
    if not self.es.indices.exists_template("cuckoo_template"):
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/utils.py", line 69, in _wrapped
    return func(*args, params=params, **kwargs)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/client/indices.py", line 491, in exists_template
    name), params=params)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/transport.py", line 327, in perform_request
    status, headers, data = connection.perform_request(method, url, params, body, ignore=ignore, timeout=timeout)
  File "/usr/local/lib/python2.7/dist-packages/elasticsearch/connection/http_urllib3.py", line 105, in perform_request
    raise ConnectionError('N/A', str(e), e)
ConnectionError: ConnectionError(<urllib3.connection.HTTPConnection object at 0x7f937f696c10>: Failed to establish a new connection: [Errno 111] Connection refused) caused by: NewConnectionError(<urllib3.connection.HTTPConnection object at 0x7f937f696c10>: Failed to establish a new connection: [Errno 111] Connection refused)

Signatures

This executable is signed
The executable has PE anomalies (could be a false positive) (3 events)
section .00cfg
section CPADinfo
section prot

Screenshots

No screenshots available.

Network

DNS

No domains contacted.

Hosts

No hosts contacted.

Summary

PE Compile Time

2018-12-04 12:07:02

Signing Certificate

MD5 3fff8aca56bb86d99023157e33479adb
SHA1 aa4ff56213acab4f174c4994fabddf6019662de3
Serial Number 0f96cebe828e14b0c92b5b9dbce32561
Common Name CRYPTOCOMPANY OÜ
Country EE
Locality Tartu

Version Infos

LegalCopyright Copyright 2018 The Chromium and CryptoTab Browser Authors. All rights reserved.
InternalName browser_exe
CompanyShortName The Chromium and CryptoTab Browser Authors
FileVersion 69.0.3497.100
CompanyName The Chromium and CryptoTab Browser Authors
ProductShortName CryptoTab Browser
ProductName CryptoTab Browser
LastChange 032b3ca19e9af20182f9bd03deefc0faf4695558-refs/branch-heads/3497@{#869}
ProductVersion 69.0.3497.100
FileDescription CryptoTab Browser
OriginalFilename browser.exe
Official Build 1
Translation 0x0409 0x04b0

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00001000 0x0010a30b 0x0010a400 6.56149663406
.rdata 0x0010c000 0x0003f49c 0x0003f600 5.51884719681
.data 0x0014c000 0x00007f30 0x00001000 2.61833884123
.pdata 0x00154000 0x00009894 0x00009a00 5.82876142939
.00cfg 0x0015e000 0x00000010 0x00000200 0.191963156087
.tls 0x0015f000 0x00000019 0x00000200 0.136463791656
CPADinfo 0x00160000 0x00000038 0x00000200 0.122275881259
prot 0x00161000 0x00000170 0x00000200 0.0
.rsrc 0x00162000 0x000208c8 0x00020a00 4.29618099108
.reloc 0x00183000 0x00001a8c 0x00001c00 5.35907269073

Imports

Library chrome_elf.dll:
0x140144c50 GetInstallDetailsPayload
0x140144c54 SignalChromeElf
Library KERNEL32.dll:
0x140144c70 AcquireSRWLockExclusive
0x140144c74 AssignProcessToJobObject
0x140144c78 CloseHandle
0x140144c7c CompareStringW
0x140144c80 ConnectNamedPipe
0x140144c84 CreateDirectoryW
0x140144c88 CreateEventW
0x140144c8c CreateFileMappingW
0x140144c90 CreateFileW
0x140144c94 CreateIoCompletionPort
0x140144c98 CreateJobObjectW
0x140144c9c CreateMutexW
0x140144ca0 CreateNamedPipeW
0x140144ca4 CreateProcessW
0x140144ca8 CreateRemoteThread
0x140144cac CreateSemaphoreW
0x140144cb0 CreateThread
0x140144cb4 DebugBreak
0x140144cb8 DecodePointer
0x140144cbc DeleteCriticalSection
0x140144cc0 DeleteFileW
0x140144cc4 DisconnectNamedPipe
0x140144cc8 DuplicateHandle
0x140144ccc EncodePointer
0x140144cd0 EnterCriticalSection
0x140144cd4 EnumSystemLocalesEx
0x140144cd8 EnumSystemLocalesW
0x140144cdc ExitProcess
0x140144ce4 FileTimeToSystemTime
0x140144ce8 FindClose
0x140144cec FindFirstFileExW
0x140144cf0 FindNextFileW
0x140144cf4 FlushFileBuffers
0x140144cf8 FlushViewOfFile
0x140144cfc FormatMessageA
0x140144d00 FreeEnvironmentStringsW
0x140144d04 FreeLibrary
0x140144d08 GetACP
0x140144d0c GetCPInfo
0x140144d10 GetCommandLineA
0x140144d14 GetCommandLineW
0x140144d18 GetComputerNameExW
0x140144d1c GetConsoleCP
0x140144d20 GetConsoleMode
0x140144d24 GetCurrentDirectoryW
0x140144d28 GetCurrentProcess
0x140144d2c GetCurrentProcessId
0x140144d30 GetCurrentThread
0x140144d34 GetCurrentThreadId
0x140144d38 GetDriveTypeW
0x140144d3c GetEnvironmentStringsW
0x140144d40 GetExitCodeProcess
0x140144d44 GetFileAttributesW
0x140144d50 GetFileSizeEx
0x140144d54 GetFileType
0x140144d58 GetFullPathNameW
0x140144d5c GetLastError
0x140144d60 GetLocalTime
0x140144d64 GetLocaleInfoW
0x140144d68 GetLongPathNameW
0x140144d6c GetModuleFileNameW
0x140144d70 GetModuleHandleA
0x140144d74 GetModuleHandleExW
0x140144d78 GetModuleHandleW
0x140144d7c GetNativeSystemInfo
0x140144d80 GetOEMCP
0x140144d84 GetProcAddress
0x140144d88 GetProcessHandleCount
0x140144d8c GetProcessHeaps
0x140144d90 GetProcessId
0x140144d94 GetProcessTimes
0x140144d9c GetStartupInfoW
0x140144da0 GetStdHandle
0x140144da4 GetStringTypeW
0x140144da8 GetSystemDefaultLCID
0x140144dac GetSystemDirectoryW
0x140144db0 GetSystemInfo
0x140144db4 GetSystemTimeAsFileTime
0x140144db8 GetTempPathW
0x140144dbc GetThreadContext
0x140144dc0 GetThreadId
0x140144dc4 GetThreadLocale
0x140144dc8 GetThreadTimes
0x140144dcc GetTickCount
0x140144dd0 GetTimeZoneInformation
0x140144dd4 GetUserDefaultLCID
0x140144dd8 GetUserDefaultLangID
0x140144ddc GetUserDefaultLocaleName
0x140144de0 GetVersion
0x140144de4 GetVersionExW
0x140144de8 GetWindowsDirectoryW
0x140144dec HeapAlloc
0x140144df0 HeapCreate
0x140144df4 HeapDestroy
0x140144df8 HeapFree
0x140144dfc HeapReAlloc
0x140144e00 HeapSetInformation
0x140144e04 HeapSize
0x140144e08 InitOnceExecuteOnce
0x140144e14 InitializeSListHead
0x140144e18 IsDebuggerPresent
0x140144e20 IsValidCodePage
0x140144e24 IsValidLocale
0x140144e28 IsWow64Process
0x140144e2c LCMapStringW
0x140144e30 LeaveCriticalSection
0x140144e34 LoadLibraryExA
0x140144e38 LoadLibraryExW
0x140144e3c LoadLibraryW
0x140144e40 LocalFree
0x140144e44 LockFileEx
0x140144e48 MapViewOfFile
0x140144e4c MoveFileW
0x140144e50 MultiByteToWideChar
0x140144e54 OpenProcess
0x140144e58 OutputDebugStringA
0x140144e5c OutputDebugStringW
0x140144e60 PeekNamedPipe
0x140144e68 ProcessIdToSessionId
0x140144e6c QueryDosDeviceW
0x140144e70 QueryPerformanceCounter
0x140144e78 RaiseException
0x140144e7c ReadConsoleW
0x140144e80 ReadFile
0x140144e84 ReadProcessMemory
0x140144e8c ReleaseSRWLockExclusive
0x140144e90 ReleaseSemaphore
0x140144e94 RemoveDirectoryW
0x140144e98 ReplaceFileW
0x140144e9c ResetEvent
0x140144ea0 ResumeThread
0x140144ea4 RtlCaptureContext
0x140144ea8 RtlCaptureStackBackTrace
0x140144eac RtlLookupFunctionEntry
0x140144eb0 RtlPcToFileHeader
0x140144eb4 RtlUnwind
0x140144eb8 RtlUnwindEx
0x140144ebc RtlVirtualUnwind
0x140144ec0 SearchPathW
0x140144ec4 SetConsoleCtrlHandler
0x140144ec8 SetCurrentDirectoryW
0x140144ecc SetEndOfFile
0x140144ed0 SetEnvironmentVariableW
0x140144ed4 SetEvent
0x140144ed8 SetFileAttributesW
0x140144edc SetFilePointerEx
0x140144ee0 SetHandleInformation
0x140144ee4 SetInformationJobObject
0x140144ee8 SetLastError
0x140144eec SetNamedPipeHandleState
0x140144ef4 SetStdHandle
0x140144efc SignalObjectAndWait
0x140144f00 Sleep
0x140144f04 SleepEx
0x140144f08 SuspendThread
0x140144f0c SwitchToThread
0x140144f14 TerminateJobObject
0x140144f18 TerminateProcess
0x140144f1c TlsAlloc
0x140144f20 TlsFree
0x140144f24 TlsGetValue
0x140144f28 TlsSetValue
0x140144f2c TransactNamedPipe
0x140144f34 UnhandledExceptionFilter
0x140144f38 UnlockFileEx
0x140144f3c UnmapViewOfFile
0x140144f40 UnregisterWaitEx
0x140144f44 VirtualAlloc
0x140144f48 VirtualAllocEx
0x140144f4c VirtualFree
0x140144f50 VirtualFreeEx
0x140144f54 VirtualProtect
0x140144f58 VirtualProtectEx
0x140144f5c VirtualQuery
0x140144f60 VirtualQueryEx
0x140144f64 WaitForSingleObject
0x140144f68 WaitForSingleObjectEx
0x140144f6c WaitNamedPipeW
0x140144f70 WideCharToMultiByte
0x140144f74 Wow64GetThreadContext
0x140144f78 WriteConsoleW
0x140144f7c WriteFile
0x140144f80 WriteProcessMemory
0x140144f84 lstrlenW
Library SHELL32.dll:
0x1401452a8 CommandLineToArgvW
0x1401452ac SHGetFolderPathW
0x1401452b0 SHGetKnownFolderPath
Library PSAPI.DLL:
0x1401452c8 GetPerformanceInfo
0x1401452cc GetProcessMemoryInfo
0x1401452d0 QueryWorkingSetEx
Library VERSION.dll:
0x1401452e8 GetFileVersionInfoSizeW
0x1401452ec GetFileVersionInfoW
0x1401452f0 VerQueryValueW
Library SHLWAPI.dll:
0x140145308 PathMatchSpecW
Library USER32.dll:
0x140145318 AllowSetForegroundWindow
0x14014531c CloseDesktop
0x140145320 CloseWindowStation
0x140145324 CreateDesktopW
0x140145328 CreateWindowExW
0x14014532c CreateWindowStationW
0x140145330 DefWindowProcW
0x140145334 DestroyWindow
0x140145338 DispatchMessageW
0x14014533c FindWindowExW
0x140145340 GetMessageW
0x140145344 GetProcessWindowStation
0x140145348 GetThreadDesktop
0x140145350 GetWindowLongPtrW
0x140145354 GetWindowThreadProcessId
0x140145358 IsWindow
0x14014535c PostMessageW
0x140145360 RegisterClassW
0x140145364 SendMessageTimeoutW
0x140145368 SetProcessDPIAware
0x14014536c SetProcessWindowStation
0x140145370 SetWindowLongPtrW
0x140145374 TranslateMessage
0x140145378 UnregisterClassW
0x14014537c wsprintfW
Library ADVAPI32.dll:
0x1401453f0 AccessCheck
0x1401453f4 ConvertSidToStringSidW
0x1401453fc ConvertStringSidToSidW
0x140145400 CopySid
0x140145404 CreateProcessAsUserW
0x140145408 CreateRestrictedToken
0x14014540c CreateWellKnownSid
0x140145410 DuplicateToken
0x140145414 DuplicateTokenEx
0x140145418 EqualSid
0x14014541c FreeSid
0x140145420 GetAce
0x140145424 GetKernelObjectSecurity
0x140145428 GetLengthSid
0x14014542c GetNamedSecurityInfoW
0x140145434 GetSecurityInfo
0x140145438 GetSidSubAuthority
0x14014543c GetTokenInformation
0x140145440 ImpersonateLoggedOnUser
0x140145448 InitializeSid
0x14014544c IsValidSid
0x140145450 LookupPrivilegeValueW
0x140145454 MapGenericMask
0x140145458 OpenProcessToken
0x14014545c RegCloseKey
0x140145460 RegCreateKeyExW
0x140145464 RegDeleteValueW
0x14014546c RegOpenKeyExW
0x140145470 RegQueryValueExW
0x140145474 RegSetValueExW
0x140145478 RevertToSelf
0x14014547c SetEntriesInAclW
0x140145480 SetKernelObjectSecurity
0x140145484 SetSecurityInfo
0x140145488 SetThreadToken
0x14014548c SetTokenInformation
0x140145490 SystemFunction036
Library WINMM.dll:
0x140145540 timeGetTime
Library WINHTTP.dll:
0x140145550 WinHttpAddRequestHeaders
0x140145554 WinHttpCloseHandle
0x140145558 WinHttpConnect
0x14014555c WinHttpCrackUrl
0x140145560 WinHttpOpen
0x140145564 WinHttpOpenRequest
0x140145568 WinHttpQueryHeaders
0x14014556c WinHttpReadData
0x140145570 WinHttpReceiveResponse
0x140145574 WinHttpSendRequest
0x140145578 WinHttpSetTimeouts
0x14014557c WinHttpWriteData

Exports

Ordinal Address Name
1 0x140042360 GetHandleVerifier
2 0x14004d06c IsSandboxedProcess
0 0x140000000 None
!This program cannot be run in DOS mode.$
`.rdata
@.data
.pdata
@.00cfg
CPADinfo8
@.rsrc
@.reloc
UAWAVAUATVWSH
EpH;ExtPL
[_^A\A]A^A_]
AWAVATVWUSH
@[]_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
8[_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
X[_^A^
AVVWSH
x[_^A^
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVATVWSH
H9t$xL
[_^A\A^A_
AWAVATVWUSH
L9d$xv
[]_^A\A^A_
AWAVATVWUSH
@[]_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
([_^A^
AWAVVWUSH
[]_^A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVVWSH
[_^A^A_
[_^A^A_
AWAVVWSH
[_^A^A_
CXD)8H
[_^A^A_
AWAVVWSH
G8L98u
0[_^A^A_
AVVWSH
8[_^A^
AWAVVWSH
@[_^A^A_
AWAVVWSH
CPHc0H
[_^A^A_
AWAVVWSH
CXHc0H
[_^A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
8[_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
FXH9~Hu
AVVWSH
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVATVWUSH
0[]_^A\A^A_
AWAVVWSH
[_^A^A_
AWAVVWUSH
[]_^A^A_
AWAVAUATVWUSH
H9l$pH
[]_^A\A]A^A_
AWAVAUATVWUSH
H9l$pH
[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
)D$PI9
[]_^A\A]A^A_
AVVWSH
H[_^A^
AVVWUSH
0[]_^A^
AWAVVWUSH
([]_^A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
\$8u*I
|$(uOH
)D$PM9
|$8t)H
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
8[_^A^
AVVWSH
H[_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
x[_^A^
AVVWSH
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
D$ vqH
([]_^A\A]A^A_
([]_^A\A]A^A_
AVVWSH
([_^A^H
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
X[_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
|$(H;{
8[_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
4Gf;tE
h[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVVWSH
[_^A^A_
[_^A^A_
AWAVVWUSH
x[]_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
l$0u#H
[]_^A\A]A^A_
AWAVATVWSH
H[_^A\A^A_
unknown
AVVWUSH
`[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
FHH+F8H
D$@H9F u
D$8H9F(u
D$0H9F0t
AWAVAUATVWUSH
h[]_^A\A]A^A_
AVVWUSH
[]_^A^
AVVWSH
X[_^A^
NHH9N@t
AWAVAUATVWUSH
tCH;B H
H;E(ucH
L$0H;M0uXH
[]_^A\A]A^A_
QHH9Q@t
A0H9P(u
A0H9P(u
IhL;IXt
P(H;Qpu
AVVWSH
H[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
L$4D;N
@[]_^A^
AWAVAUATVWUSH
I;E@t8I
H[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AVVWSH
([_^A^
AVVWUSH
[]_^A^
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
ss-phaseH
process-H
L$`H;L$@t
[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWUSH
([]_^A^A_
AWAVVWSH
P[_^A^A_
AWAVVWSH
0[_^A^A_
0[_^A^A_H
0[_^A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVVWUSH
8[]_^A^A_
AVVWSH
h[_^A^
AWAVVWUSH
([]_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWSH
D$8H;D$(uN
4yf;4zu1H
4xf;4zu
[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
AWAVAUATVWUSH
8[]_^A\A]A^A_
UAWAVATVWSH
p[_^A\A^A_]
AWAVVWSH
H9D$8uMH
<Vf;<Qu
P[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
0[]_^A^
AWAVVWSH
P[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVVWSH
`[_^A^A_
AVVWSH
8[_^A^
AVVWUSH
`[]_^A^
AVVWSH
8[_^A^
AVVWUSH
@[]_^A^
AVVWSH
h[_^A^
D$(H+D$0H=
AWAVATVWUSH
[]_^A\A^A_
UAVVWSH
[_^A^]
UAWAVAUATVWSH
[_^A\A]A^A_]
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
p[]_^A\A]A^A_
AVVWSH
([_^A^
AVVWUSH
GhH;G@s
0[]_^A^
AWAVVWSH
[_^A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVATVWSH
8[_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVVWUSH
([]_^A^A_
AVVWUSL
[]_^A^
AWAVVWSH
0[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
0[_^A\A]A^A_
AVVWUSH
[]_^A^
T$ H;QhH
AWAVAUATVWSH
[_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWSH
`[_^A\A]A^A_
AWAVAUATVWUSH
\$0r"H
H[]_^A\A]A^A_
AVVWSH
8[_^A^
AWAVAUATVWUSH
\$(r"H
H[]_^A\A]A^A_
AWAVAUATVWSH
0[_^A\A]A^A_
D$(H+D$0H=
AWAVAUATVWUSH
"""""""
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
tOH;t
H[_^A^
AWAVVWUSH
([]_^A^A_
AVVWSH
([_^A^
AVVWSH
8[_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
t\H;t
H[_^A^
AWAVVWUSH
effffff
([]_^A^A_
AWAVATVWSH
8[_^A\A^A_
H9P u9H
L9V tM
AWAVVWSH
tZI;2t
H9G uFH
@[_^A^A_
AWAVVWSH
@[_^A^A_
L9V |K
L9V } H
AWAVVWSH
t\H;7t
@[_^A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVATVWSH
([_^A\A^A_
AVVWSH
AVVWSH
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
([_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
d_memoryH
shared_mH
[]_^A\A]A^A_
AWAVATVWSH
[_^A\A^A_
AVVWSH
X[_^A^
AVVWSH
([_^A^
AVVWUSH
[]_^A^
AVVWUSH
[]_^A^
AVVWSH
AVVWSH
x[_^A^
AWAVAUATVWUSH
H[]_^A\A]A^A_
AVVWSH
X[_^A^
AWAVATVWUSH
[]_^A\A^A_
D$0<br>
AWAVAUATVWUSH
L9|$hr5
d$8L9|$hsa1
[]_^A\A]A^A_
AWAVVWSH
@[_^A^A_
AVVWUSH
0[]_^A^
HISTOGRAH
UNKNOWN
ISTOGRAMH
DUMMY_HIH
AWAVAUATVWUSH
h[]_^A\A]A^A_
AVVWSH
x[_^A^
AVVWUSH
[]_^A^
AWAVATVWSH
h[_^A\A^A_
AWAVATVWSH
h[_^A\A^A_
AVVWSH
H[_^A^
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVAUATVWUSH
t,;O |'
X[]_^A\A]A^A_
D9V |M
D9V } H
AWAVVWSH
t_H;7t
@[_^A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
D$XvfM
|$Hx&H
x[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
L$0I;}
H[]_^A\A]A^A_
AWAVVWUSH
([]_^A^A_
AWAVVWSH
[_^A^A_
UAWAVVWSH
x[_^A^A_]
UAWAVATVWSH
P[_^A\A^A_]
AVVWSH
8[_^A^
AWAVAUATVWUSH
|$8tyH
X[]_^A\A]A^A_
AWAVVWUSH
8[]_^A^A_
AVVWUSH
[]_^A^
AWAVAUATVWSH
@[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
D$x1U!S
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
([_^A^
AVVWSH
.UsedPctH
.Errors
AWAVAUATVWUSH
|$(t#I
H[]_^A\A]A^A_
AWAVVWSH
D$(H;AHt#H
`[_^A^A_
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVAUATVWSH
)D$0E1
[_^A\A]A^A_
AWAVATVWSH
-active
[_^A\A^A_
AVVWUSH
[]_^A^
AVVWSH
8[_^A^
UAWAVVWSH
([_^A^A_]
AWAVATVWSH
([_^A\A^A_
AVVWUSH
[]_^A^
AVVWSH
([_^A^
AVVWSH
tb9y H
8[_^A^
8[_^A^
t!A9Q M
AWAVAUATVWUSH
tQ;J I
D$4A9G
H[]_^A\A]A^A_
AWAVAUATVWUSH
t#HcT$<H
H;L$0u+
H[]_^A\A]A^A_
AVVWUSH
@[]_^A^
AWAVAUATVWUSH
HcD$DH
X[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
L+|$ 1
H[]_^A\A]A^A_
AVVWSH
X[_^A^
AWAVAUATVWSH
@[_^A\A]A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
D$0<br>
AWAVAUATVWUSH
H9\$hr?
H9\$hsV1
[]_^A\A]A^A_
UAWAVATVWSH
[_^A\A^A_]
AVVWSH
tELc3M
([_^A^
AWAVVWUSH
8[]_^A^A_
AWAVAUATVWSH
P[_^A\A]A^A_
AVVWSH
T$(H;PHt
8[_^A^
AVVWSH
X[_^A^
AWAVVWUSH
x[]_^A^A_
\$0I#OxI
x[]_^A^A_
AVVWUSH
[]_^A^
AWAVATVWSH
[_^A\A^A_
AVVWSH
8[_^A^
AVVWSH
H[_^A^
AVVWSH
H[_^A^
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
H+D$(H
[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWSL
[_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
,Zf;,XH
AWAVAUATVWUSH
t$8s5L
h[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
L9V rK
L9V s H
TUUUUUU
AWAVVWSH
t\H;7t
@[_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
8[]_^A\A]A^A_
D9V |M
D9V } H
TUUUUUU
AVVWSH
H[_^A^
effffff
AVVWSH
H[_^A^
AWAVAUATVWUSH
effffff
8[]_^A\A]A^A_
AWAVAUATVWUSH
L$ t"H
H[]_^A\A]A^A_
AWAVAUATVWUSH
T$ t!H
tSL9c u
([]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
8[_^A^
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
D$(|z1
X[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWSH
@[_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
X[_^A\A^A_
AWAVAUATVWUSH
D$(I;F
H[]_^A\A]A^A_
AVVWUS
[]_^A^H
[]_^A^
UAWAVVWSH
([_^A^A_]
UAVVWS
[_^A^]
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
D$XvfM
|$Hx&H
x[]_^A\A]A^A_
AWAVAUATVWUSH
L$0H;
H[]_^A\A]A^A_
L9V rK
L9V s H
AVVWSH
H[_^A^
AWAVAUATVWUSH
H[]_^A\A]A^A_
F0H+F H
AWAVVWUSH
8[]_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
H[_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
@[_^A\A]A^A_
AVVWSH
AWAVATVWUSH
0[]_^A\A^A_
AWAVVWUSH
discardeH
X[]_^A^A_
D$ H;F
D$ H;C
AWAVAUATVWSH
`[_^A\A]A^A_
AWAVVWUSH
8[]_^A^A_
AVVWSH
h[_^A^
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVVWSH
0[_^A^A_
UAVVWSH
`[_^A^]
AVVWSH
([_^A^
AWAVAUATVWUSH
|$0r(H
8[]_^A\A]A^A_
AWAVVWSH
p[_^A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
H[_^A^
AWAVVWUSH
effffff
([]_^A^A_
AWAVAUATVWUSH
L$0H;
H[]_^A\A]A^A_
L9V rK
L9V s H
AWAVAUATVWUSH
H;|$(t>L
8[]_^A\A]A^A_
AWAVAUATVWUSH
H;|$PteH
h[]_^A\A]A^A_
AWAVATVWSH
X[_^A\A^A_
AWAVAUATVWUSH
fffffff
|$ r)H
([]_^A\A]A^A_
AWAVAUATVWSH
fffffff
[_^A\A]A^A_
UAWAVATVWSH
`[_^A\A^A_]
AVVWSH
H[_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
UAWAVAUATVWSH
[_^A\A]A^A_]
UAWAVAUATVWSH
[_^A\A]A^A_]
UAWAVVWSH
[_^A^A_]
AVVWSH
H[_^A^
AVVWSH
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
UAVVWSH
0[_^A^]
AWAVATVWUSH
p[]_^A\A^A_
AWAVVWSH
gfffffffH
gfffffffH
@[_^A^A_
gfffffffH
AuthentiH32
AVVWSH
8[_^A^
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
[_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVVWUSH
[]_^A^A_
AWAVAUATVWUSH
|$ v-H
[]_^A\A]A^A_
AVVWSH
h[_^A^
AVVWSH
([_^A^
AWAVATVWSH
8[_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVVWUSH
([]_^A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
([]_^A\A]A^A_
AWAVVWUSH
([]_^A^A_
([]_^A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
AWAVATVWUSH
[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
<rfA;<qH
AVVWUSH
0[]_^A^
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
H+t$ H
([]_^A\A]A^A_
u(HcH<
UAVVWSH
[_^A^]
AWAVATVWUSH
[]_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
Lct$dL
[_^A^A_
AWAVATVWUSH
[]_^A\A^A_
AVVWUSH
0[]_^A^
AVVWSH
([_^A^
AWAVVWSH
@[_^A^A_
AWAVATVWUSH
HcL$`H
B;T$dt
D$hHcL$`
[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVVWSH
[_^A^A_
AVVWUSH
0[]_^A^
AVVWSH
([_^A^
AWAVVWUSH
([]_^A^A_
([]_^A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSPL
[]_^A\A]A^A_
AWAVVWSIc
[_^A^A_
AWAVATVWUSD
[]_^A\A^A_
AWAVATVWUSE
[]_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVATVWSH
4_f94Zu
([_^A\A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AVVWUSH
[]_^A^
AWAVVWSH
`[_^A^A_
AWAVVWUSH
8[]_^A^A_
AWAVVWUSH
[]_^A^A_
AWAVATVWSH
[_^A\A^A_
AWAVAUATVWUSH
l$ r(H
([]_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
H;9t$H
UAWAVAUATVWSH
t1H;EXt+H
[_^A\A]A^A_]
AVVWSH
([_^A^
AWAVATVWSH
t/I;1t
H[_^A\A^A_
AWAVATVWUSH
H91u%L
t}H;.u
[]_^A\A^A_
AVVWUSH
@[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
UUUUUUU
[_^A^A_
[_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVATVWSH
D$8)D$@A
x[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
([_^A^
AVVWSH
H[_^A^
AWAVAUATVWUSH
D$H)D$P
[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVATVWSH
[_^A\A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
AWAVAUATVWUSH
G(HcO
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
p[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
AWAVAUATVWUSH
G(HcO
G@HcO8
D$X)D$`
[]_^A\A]A^A_
AWAVAUATVWSH
@[_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWSH
x[_^A\A^A_
AVVWSH
x[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
AWAVAUATVWUSH
G(HcO
G@HcO8
GxHcOp
[]_^A\A]A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
L$ tbE1
H[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
@[_^A^A_
AWAVATVWSH
8[_^A\A^A_
L$(I;H
AWAVATVWSH
8[_^A\A^A_
AVVWSH
([_^A^
AWAVVWSH
0[_^A^A_
AWAVATVWSH
([_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWSH
0[_^A\A]A^A_
AWAVATVWUSH
0[]_^A\A^A_
AWAVATVWSH
([_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
([_^A^
AVVWSH
([_^A^
AWAVVWUSH
8[]_^A^A_
AWAVVWSH
p[_^A^A_
AVVWSH
H[_^A^
AWAVVWSH
0[_^A^A_
AWAVVWSH
P[_^A^A_
AWAVATVWUSH
P[]_^A\A^A_
AVVWUSH
@[]_^A^
AWAVATVWSH
H[_^A\A^A_
AWAVVWUSH
H[]_^A^A_
AWAVATVWUSH
H91u%L
t}H;.u
[]_^A\A^A_
AWAVVWSH
P[_^A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
E(HcM
E@HcM8
G@I;G8
M(IcU
G@I+G8I
E(IcM
N@HcV8
[]_^A\A]A^A_
AWAVAUATVWUSH
MxIcUp
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVVWUSH
[]_^A^A_
AWAVATVWSH
[_^A\A^A_
AVVWSH
h[_^A^
AWAVVWSH
p[_^A^A_
AVVWSH
([_^A^
AWAVATVWUSH
`[]_^A\A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
|$ht(H
l$HH+|$@L
l$Hx$Ic
AWAVAUATVWUSH
H9n uo
[]_^A\A]A^A_
AWAVAUATVWUSH
E0M9e8v
EPM9eXv
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AVVWSH
([_^A^
AVVWSH
h[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
"""""""
T$0I9\$8t/M
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
"""""""
T$Hr*H
L9l$`tuH
AWAVAUATVWUSH
[]_^A\A]A^A_
\$8I+\$0H
l$PrGH
Lkt$H8M
xH;|$h
AWAVVWSH
P[_^A^A_
AVVWSH
([_^A^
AWAVATVWSH
X[_^A\A^A_
AWAVVWUSH
8[]_^A^A_
AWAVVWUSH
8[]_^A^A_
AWAVVWSH
[_^A^A_
)t$ L9
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWSH
H;\$(u
[_^A\A]A^A_
AVVWSH
h[_^A^
AWAVAUATVWUSH
E0I9]8v
EPI9]Xv
T$HH;T$`
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
([_^A^
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
HkD$0pI
[]_^A\A]A^A_
AWAVAUATVWUSH
J;D3P~
H9D3P~6H
H;D7P~
t$H~&L
FpH;NPt
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
D7PL;d$(
D/PI;EP
X[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
AWAVATVWSH
t/I;1t
H[_^A\A^A_
AWAVATVWUSH
effffff
H91u%L
t}H;.u
[]_^A\A^A_
AWAVVWUSH
[]_^A^A_
AWAVATVWSH
[_^A\A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWSH
[_^A\A^A_
AVVWSH
H[_^A^
AVVWSH
8[_^A^
8[_^A^
AWAVVWSH
[_^A^A_
Q(LcA,L
AVVWSH
x[_^A^
HcL$,H
AVVWUSH
[]_^A^
F0+N,9
AVVWSH
([_^A^
AVVWSH
([_^A^
F4;F8}
AWAVVWSH
C4;C8}
P[_^A^A_
AVVWSH
([_^A^H
([_^A^H
AWAVAUATVWUSH
I I+,$I
[]_^A\A]A^A_
AWAVVWSH
`[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWUSH
@[]_^A\A^A_
AWAVAUATVWUSH
;D$8tJD
X[]_^A\A]A^A_
AVVWSH
AWAVVWSH
[_^A^A_
AWAVATVWSH
[_^A\A^A_
AVVWSH
AWAVVWSH
[_^A^A_
AWAVAUATVWSH
P[_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVVWSH
H9D$Hv
[_^A^A_
AWAVAUATVWUSH
D$`H9|$hL
[]_^A\A]A^A_
AWAVAUATVWSH
@[_^A\A]A^A_
AVVWSH
AWAVVWUSH
([]_^A^A_
AVVWSH
([_^A^
AVVWUSH
[]_^A^
AWAVVWUSH
([]_^A^A_
AVVWSH
H[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWSH
H[_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
AVVWSH
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AVVWSH
H[_^A^
AWAVATVWSH
I9L$ tI1
8[_^A\A^A_
AWAVVWSH
[_^A^A_
[_^A^A_
AWAVAUATVWUSH
L9l$8r
\$@L9l$8@
h[]_^A\A]A^A_
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVAUATVWUSH
L$HH+L$@
|$0L;>tqI
[]_^A\A]A^A_
AVVWSH
([_^A^
AWAVVWSH
0[_^A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVVWSH
0[_^A^A_
AVVWSH
H[_^A^
AWAVAUATVWSH
D$@H9A
P[_^A\A]A^A_
AWAVATVWUSH
2333333
t}H;7u
[]_^A\A^A_
AWAVATVWUSH
P[]_^A\A^A_
AWAVVWUSH
H[]_^A^A_
AWAVATVWUSH
H91u%L
t}H;.u
[]_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWUSH
u&H9v(u
[]_^A^
UAWAVAUATVWSH
H[_^A\A]A^A_]
AWAVATVWSH
x[_^A\A^A_H
D$PH;D$hr;H
d$0yQH
x[_^A\A^A_
UAWAVATVWSH
[_^A\A^A_]
AWAVVWSH
@[_^A^A_
UAVVWSH
[_^A^]
AWAVVWUSH
([]_^A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVVWSH
@[_^A^A_
AWAVVWSH
@[_^A^A_
>sdPCuW@
AWAVATVWSH
D$@H9t$HL
[_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
[]_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
"H9T$0t
[]_^A\A]A^A_
ApH;AxuQH
AWAVAUATVWSH
UUUUUUU
[_^A\A]A^A_
AWAVAUATVWUSH
|$(r"H
H[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
([]_^H
AWAVAUATVWUSH
|$(r"H
H[]_^A\A]A^A_
AWAVAUATVWSH
0[_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
([]_^H
([]_^H
([]_^H
AVVWSH
([_^A^H
AWAVATVWSH
D$pL9d$xL
[_^A\A^A_
UAWAVATVWSH
@[_^A\A^A_]
AVVWSH
AVVWSH
AVVWSH
AWAVVWUSH
[]_^A^A_
AVVWSH
AWAVVWUSH
h[]_^A^A_
AWAVAUATVWUSH
V(H;V0
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
8[_^A^
AWAVAUATVWSH
[_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
X[_^A^
AVVWSH
([_^A^
AWAVATVWSH
D$HH9A
A9A s`I
A;A s%
X[_^A\A^A_
AWAVATVWUSH
TUUUUUU
t}H;7u
[]_^A\A^A_
AWAVAUATVWSH
t4I;1t
P[_^A\A]A^A_
AWAVAUATVWSH
t4I;1t
P[_^A\A]A^A_
AWAVATVWUSH
effffff
t}H;7u
[]_^A\A^A_
AWAVAUATVWUSH
EPM9uXv
[]_^A\A]A^A_
AVVWSH
AWAVVWUSH
H[]_^A^A_
AWAVATVWUSH
H91u%L
t}H;.u
[]_^A\A^A_
AVVWSH
8[_^A^
AVVWSH
H[_^A^
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVAUATVWSH
P[_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
D$(H9O
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
AWAVVWSH
0[_^A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AVVWSH
H[_^A^
AVVWSH
H[_^A^
AWAVAUATVWSH
D$@H9A
P[_^A\A]A^A_
AWAVATVWUSH
t}H;7u
[]_^A\A^A_
AWAVATVWUSH
P[]_^A\A^A_
AWAVAUATVWUS
I9GXv9I
[]_^A\A]A^A_
AVVWSH
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVATVWSH
8[_^A\A^A_
AWAVATVWUSH
[]_^A\A^A_
AWAVVWSH
@[_^A^A_
AWAVATVWUSH
@[]_^A\A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWSH
[_^A\A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
T$XL9t$`v
[_^A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVATVWUSH
p[]_^A\A^A_
AWAVAUATVWUSH
|$(r"H
H[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
|$(r"H
H[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
GHMDMPH
[_^A^A_
wpH+whH
ApH+AhH
AWAVVWSH
P[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
ffffff.
SUATAUAVAWH
ffffff.
ffffff.
ffffff.
SUATAUAVAWH
SUATAUAVAWH
SUATAUAVAWR
SUATAUAVAW
ffffff.
T$(3D$@3\$D3L$H3T$LM
T$(3D$@3\$D3L$H3T$LM
ffffff.
T`00P`00P
V++}V++}
L&&jL&&jl66Zl66Z~??A~??A
Oh44\h44\Q
sb11Sb11S*
RF##eF##e
&N''iN''i
X,,tX,,t4
v;;Mv;;M
R)){R)){
>^//q^//q
,@ `@ `
r99Kr99K
f33Uf33U
x<<Dx<<D%
p88Hp88H
uB!!cB!!c
z==Gz==G
D""fD""fT**~T**~;
;d22Vd22Vt::Nt::N
H$$lH$$l
Cn77Yn77Y
J%%oJ%%o\..r\..r8
>!>!
|>>B|>>Bq
j55_j55_
P((xP((x
Z--wZ--w
P~AeS~AeS
pHhXpHhX
lZrNlZrN
6-9'6-9'
$6.:$6.:
ZwKiZwKi
T~FbT~Fb
*?#1*?#1
>8$4,8$4,
pHl\tHl\t
AES for x86_64, CRYPTOGAMS by <appro@openssl.org>
fffff.
VWSUATAUAVAW
VWSUATAUAVAW
VWSUATAUAVAW
A_A^A]A\][_^
fffff.
ffffff.
ffffff.
ffffff.
(d$ fD
(l$0fD
(t$@fD
ol$ fA
ot$0fD
o|$@fD
oD$`fE
ffffff.
fffff.
oL$`fA
ffffff.
fffff.
fffff.
ffffff.
ffffff.
oL$`fA
ffffff.
fffff.
fffff.
ffffff.
$SUATAUAVH
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
$SUATAUAVH
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
AES for Intel AES-NI, CRYPTOGAMS by <appro@openssl.org>
ffffff.
ffffff.
ffffff.
VWSUATAUAVAW
VWSUATAUAVAW
VWSUATAUAVAW
VWSUATAUAVAW
A_A^A]A\][_^
SUATAUAVAWI
ffffff.
SUATAUAVAWI
fffff.
SUATAUAVAWE
ffffff.
ffffff.
fffff.
SUATAUAVAWA
ffffff.
fffff.
ffffff.
Montgomery Multiplication for x86_64, CRYPTOGAMS by <appro@openssl.org>
ffffff.
VWSUATAUAVAW
VWSUATAUAVAW
A_A^A]A\][_^
$SUATAUAVAW
ffffff.
ffffff.
ffffff.
A~ou8gI
A~o](I
A~oUHI
A~ouhI
ffffff.
ffffff.
$SUATAUAVAW
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
VWSUATAUAVAW
A_A^A]A\][_^
nl$8SUATAUAVAWI
oT$ fA
o\$0fA
oT$ fA
oD$@fA
oL$PfA
oT$`fA
ffffff.
SUATAUAVAWgA
oT$ fA
o\$0fA
ffffff.
oT$ fA
oD$@fA
oL$PfA
oT$`fA
SUATAUAVAWA
ffffff.
ffffff.
ffffff.
ffffff.
fffff.
ffffff.
ffffff.
fffff.
ffffff.
ffffff.
fffff.
SUATAUAVAWA
ffffff.
ffffff.
SUATAUAVAWA
ffffff.
ffffff.
ffffff.
SUATAUAVAWA
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
fffff.
fffff.
Montgomery Multiplication with scatter/gather for x86_64, CRYPTOGAMS by <appro@openssl.org>
VWSUATAUAVAW
A_A^A]A\][_^
fffff.
ffffff.
ffffff.
fffff.
USATAUAVAWH
ot$pfD
oL$ fA
oT$0fA
o\$@fA
od$PfA
ol$`fA
ot$pfA
ol$`fD
oL$ fA
oT$0fA
o\$@fA
od$PfA
ot$`fA
oL$ fA
oT$0fA
o\$@fA
ot$PfA
oL$ fA
oT$0fA
ot$@fA
oL$ fA
ot$0fA
ot$ fA
USATAUAVAWH
oL$ fA
oT$0fA
o\$@fA
od$PfA
ol$`fA
USATAUAVAWH
oL$ fA
oT$0fA
o\$@fA
od$PfA
ol$`fA
ot$pfE
ol$`fA
fffff.
fffff.
USATAUAVAWH
oL$ fA
oT$0fA
o\$@fA
od$PfA
ol$`fA
ot$pfE
ol$`fA
fffff.
fffff.
UUUUUUUUUUUUUUUU3333333333333333
ccccccccccccccccBit-sliced AES for x86_64/SSSE3, Emilia K
sper, Peter Schwabe, Andy Polyakov
ffffff.
VWSUATAUAVAW
A_A^A]A\][_^
USATAVAWH
QZ^&A!
VWSUATAUAVAW
A_A^A]A\][_^
SUATAUAVAWH
SUATAUAVAWH
ffffff.
fffff.
ffffff.
ffffff.
ffffff.
ffffff.
fffff.
ffffff.
ffffff.
ffffff.
ffffff.
GHASH for x86_64, CRYPTOGAMS by <appro@openssl.org>
VWSUATAUAVAW
A_A^A]A\][_^
$SUATAUAVAWH
fffff.
$SUATAUAVAWH
AES-NI GCM module for x86_64, CRYPTOGAMS by <appro@openssl.org>
ffffff.
ffffff.
ffffff.
VWSUATAUAVAW
A_A^A]A\][_^
SUATAUAVI
D3t$$!
3T$(D!
3l$,D!
D3t$0D!
3l$ D1
D3t$$1
D3t$<F
3l$,D1
D3t$0D1
3T$4D1
D3t$4D
D3t$<1
D3t$ F
D3t$ 1
D3t$8F
3l$(D1
D3t$$D
D3t$,D!
D3t$8D!
3T$<D!
D3t$<D
D3t$4F
3T$ D!
3l$$D!
D3t$ D
D3t$(D!
D3t$4D!
3T$8D!
3l$<D1
D34$D1
D3t$0F
3l$ D1
D3t$$D1
D3t$<F
3T$(D1
D3t$(D
D3t$01
3T$4D1
3l$8D1
D3t$<D1
SUATAUAVH
SUATAUAVH
ffffff.
fffff.
SHA1 block transform for x86_64, CRYPTOGAMS by <appro@openssl.org>
VWSUATAUAVAW
VWSUATAUAVAW
A_A^A]A\][_^
SUATAUAVAWH
ffffff.
SHA256 block transform for x86_64, CRYPTOGAMS by <appro@openssl.org>
ffffff.
SUATAUAVAWH
ffffff.
fffff.
SUATAUAVAWH
VWSUATAUAVAW
A_A^A]A\][_^
SUATAUAVAWH
ffffff.
ffffff.
ffffff.
D7q/;M
SHA512 block transform for x86_64, CRYPTOGAMS by <appro@openssl.org>
ffffff.
SUATAUAVAWH
ffffff.
ffffff.
ffffff.
ffffff.
SUATAUAVAWH
ffffff.
VWSUATAUAVAW
A_A^A]A\][_^
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
ffffff.
*p[[[[[[[[[[[[[[[[
Vector Permutation AES for x86_64/SSSE3, Mike Hamburg (Stanford University)
ffffff.
ffffff.
VWSUATAUAVAW
A_A^A]A\][_^
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AVVWUSH
H;t'H
[]_^A^
AWAVATVWSH
t9H9|$(u2H
8[_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVVWUSH
8[]_^A^A_
AWAVVWUSH
H[]_^A^A_
AWAVATVWUSH
2333333
H91u%L
t}H;.u
[]_^A\A^A_
AWAVVWUSH
H[]_^A^A_
AWAVATVWUSH
H91u%L
t}H;.u
[]_^A\A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
0H9T$@H
h[]_^A\A]A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
H[_^A^
AWAVATVWSH
D$HH9A
A9A s`I
A;A s%
X[_^A\A^A_
AWAVATVWUSH
t}H;7u
[]_^A\A^A_
AWAVAUATVWSH
t?I;1t
P[_^A\A]A^A_
AVVWUSH
[]_^A^
AVVWSH
H[_^A^
AWAVVWSH
@[_^A^A_
AVVWSH
h[_^A^
AWAVVWUSH
[]_^A^A_
AWAVATVWUSH
`[]_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWUSH
`[]_^A\A^A_
AVVWSH
H[_^A^
AVVWSH
X[_^A^
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
[]_^A^A_
AVVWUSH
P[]_^A^
AWAVVWUSH
X[]_^A^A_
AWAVAUATVWUSH
)D$`E1
[]_^A\A]A^A_
AWAVVWSH
@[_^A^A_
@[_^A^A_H
AVVWSH
AWAVATVWSH
[_^A\A^A_
AWAVATVWSH
[_^A\A^A_
UAVVWSH
[_^A^]
UAWAVATVWSH
[_^A\A^A_]
AWAVVWUSH
[]_^A^A_
AVVWUSH
[]_^A^
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
[]_^A^A_
AVVWSH
AVVWSH
AWAVVWUSH
[]_^A^A_H
[]_^A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVVWSH
[_^A^A_
AVVWSH
8[_^A^
AWAVATVWSH
X[_^A\A^A_
AWAVAUATVWUSH
L96toL
[]_^A\A]A^A_
AWAVVWSH
H9|$0u
@[_^A^A_
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVAUATVWUSH
T$HHcZ
T$HHcB
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
8[]_^A\A]A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWSH
8[_^A\A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AVVWUSH
[]_^A^
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
[]_^A^A_
AVVWUSH
[]_^A^
AWAVVWUSH
[]_^A^A_
AWAVVWSH
P[_^A^A_
AWAVVWSH
[_^A^A_
AWAVATVWSH
t4L9 uoL
[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
l$ r(H
([]_^A\A]A^A_
AVVWSH
([_^A^
AVVWUSH
[]_^A^
AWAVATVWSH
[_^A\A^A_
AWAVATVWSH
[_^A\A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWSH
[_^A\A^A_
AWAVATVWSH
[_^A\A^A_
AWAVATVWSH
t/H;0t
H(I;L$
H[_^A\A^A_
AWAVATVWUSH
TUUUUUU
H91u%L
t}H;.u
[]_^A\A^A_
AWAVAUATVWUSH
([]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
([_^A^H
([_^A^
AWAVATVWSH
H[_^A\A^A_
UAWAVAUATVWSH
W H;W(tKH
[_^A\A]A^A_]
AWAVATVWSH
[_^A\A^A_
UAWAVAUATVWSH
[_^A\A]A^A_]
AWAVAUATVWSH
HcT$XH
[_^A\A]A^A_
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AWAVAUATVWUSH
ApH;Ax
L$0H;L$ t+
X[]_^A\A]A^A_
AWAVAUATVWUSH
QxH+QpH
L;t$(t*
X[]_^A\A]A^A_
AWAVATVWSH
([_^A\A^A_
UAWAVVWSH
[_^A^A_]
AWAVVWSH
0[_^A^A_
AWAVVWSH
P[_^A^A_
AWAVAUATVWUSH
L$8|RH
L;|$(tBI
d$ L;|$(
X[]_^A\A]A^A_
AWAVAUATVWUSH
|$ u?H
8[]_^A\A]A^A_H
8[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
@[_^A^A_
AWAVAUATVWUSH
x[]_^A\A]A^A_
w`H+wXH
A`H+AXH
AWAVVWSH
0[_^A^A_
AWAVVWSH
P[_^A^A_
AVVWSH
8[_^A^
AVVWSH
X[_^A^
AWAVATVWSH
CHRSDSH
X[_^A\A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
w`H+wXH
A`H+AXH
AWAVVWSH
P[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
w`H+wXH
A`H+AXH
AWAVVWSH
P[_^A^A_
AWAVVWSH
[_^A^A_
AVVWSH
([_^A^
FpH+FhH
AWAVVWSH
P[_^A^A_
AWAVAUATVWSH
UUUUUUU
[_^A\A]A^A_
AVVWSH
([_^A^
AVVWSH
([_^A^
AWAVAUATVWUSH
t$@L9v
[]_^A\A]A^A_
wpH+whH
ApH+AhH
AWAVVWSH
0[_^A^A_
AWAVVWSH
P[_^A^A_
AWAVVWSH
[_^A^A_
[_^A^A_
AVVWSH
([_^A^
AWAVAUATVWSH
D$@H9A
P[_^A\A]A^A_
AWAVATVWUSH
t}H;7u
[]_^A\A^A_
AWAVATVWUSH
P[]_^A\A^A_
UAWAVAUATVWSH
([_^A\A]A^A_]
D$X9Q`vU
AWAVVWSH
[_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVATVWUSH
[]_^A\A^A_
AVVWUSH
[]_^A^
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
.fB;\-
[]_^A\A]A^A_
AWAVAUATVWUSH
H9D$Hv
t$0H9A
[]_^A\A]A^A_
AVVWUSH
`[]_^A^
AVVWSH
x[_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWUSH
[]_^A^A_
AWAVVWUSH
8[]_^A^A_
AWAVAUATVWUSH
h[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWUSH
[]_^A\A^A_
AVVWSH
8[_^A^
AWAVVWSH
0[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
[_^A^A_
AWAVVWS
[_^A^A_
AWAVVWSH
`[_^A^A_
AWAVVWSH
0[_^A^A_
AVVWSH
([_^A^
AVVWSH
X[_^A^
AVVWSH
([_^A^
AWAVATVWSH
D$HH9A
I9A scI
I;A s%
X[_^A\A^A_
AWAVATVWUSH
TUUUUUU
t}H;7u
[]_^A\A^A_
AWAVAUATVWSH
t?I;1t
P[_^A\A]A^A_
AWAVVWUSH
([]_^A^A_
AVVWSH
([_^A^
AWAVAUATVWUSH
X[]_^A\A]A^A_
AWAVVWUSH
H[]_^A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AVVWUSH
`[]_^A^
AWAVVWUSH
H[]_^A^A_
AWAVVWSH
[_^A^A_
TH9T$0u
LH9T$8u
|$:%u=
AWAVVWSH
|$0 u+H
P[_^A^A_
AWAVATVWUSH
0[]_^A\A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AWAVAUATVWUSH
X[]_^A\A]A^A_
AVVWSH
x[_^A^
AWAVATVWSH
[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
VUUUUUU
AVVWSH
([_^A^
AWAVATVWSH
([_^A\A^A_
)t$ L9
AWAVAUATVWUSH
8[]_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AWAVVWSH
[_^A^A_
AVVWSH
AVVWSH
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
GPH9_hr
APH;AX
AWAVAUATVWUSH
x[]_^A\A]A^A_
AWAVAUATVWSH
t4I;1t
P[_^A\A]A^A_
AWAVVWSH
0[_^A^A_
AWAVVWSH
H;FHt(H
@[_^A^A_
AWAVVWSH
0[_^A^A_
AWAVATVWSH
X[_^A\A^A_
AVVWSH
X[_^A^
AWAVATVWSH
([_^A\A^A_
AWAVATVWSH
X[_^A\A^A_
AWAVAUATVWUSH
H[]_^A\A]A^A_
AHH;AP
UAWAVVWSH
APH+AHH
[_^A^A_]
AWAVVWSH
0[_^A^A_
AWAVAUATVWSH
UUUUUUU
[_^A\A]A^A_
expand 32-byte k
ffffff.
ChaCha20 for x86_64, CRYPTOGAMS by <appro@openssl.org>
SUATAUAVAWH
ffffff.
ffffff.
oF D3f0D3n4D3v8D3~<H
ffffff.
ffffff.
ffffff.
fffff.
ffffff.
ffffff.
ffffff.
oD$@fD
oL$PfD
oT$`fD
o\$pfD
ffffff.
ffffff.
ol$0fE
oD$ fD
oL$0fE
ffffff.
fffff.
ffffff.
ffffff.
ffffff.
}od$ H
VWSUATAUAVAW
A_A^A]A\][_^
VWSUATAUAVAW
VWSUATAUAVAW
AVVWUSH
p[]_^A^
UAWAVAUATVWSH
X[_^A\A]A^A_]
AWAVVWSH
[_^A^A_
[_^A^A_H
AVVWUSH
[]_^A^H
AWAVVWUSH
([]_^A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
UAWAVATVWSH
[_^A\A^A_]
AWAVAUATVWUSH
[]_^A\A]A^A_
UAWAVATVWSH
[_^A\A^A_]
AWAVVWSH
[_^A^A_
UAWAVATVWSH
0[_^A\A^A_]
AWAVVWSH
[_^A^A_
UAWAVATVWSH
[_^A\A^A_]
AWAVVWUSH
H[]_^A^A_
AVVWUSH
[]_^A^
AVVWSH
AVVWUSH
[]_^A^
AVVWSH
AVVWUSH
[]_^A^
AVVWUSH
[]_^A^
AWAVATVWSH
[_^A\A^A_
UAWAVATVWSH
0[_^A\A^A_]
AWAVAUATVWUSH
[]_^A\A]A^A_
UAWAVAUATVWSH
[_^A\A]A^A_]
AVVWUSH
[]_^A^
AWAVAUATVWUSH
[]_^A\A]A^A_
UAWAVATVWSH
[_^A\A^A_]
AWAVATVWUSH
[]_^A\A^A_
UAWAVATVWSH
[_^A\A^A_]
UAWAVATVWSH
[_^A\A^A_]
UAWAVATVWSH
[_^A\A^A_]
AWAVVWUSH
[]_^A^A_
AWAVVWSH
[_^A^A_
AWAVATVWSH
[_^A\A^A_
AVVWSH
AWAVATVWUSH
[]_^A\A^A_
AVVWUSH
[]_^A^
AWAVVWSH
[_^A^A_
AVVWUSH
[]_^A^
AWAVATVWSH
[_^A\A^A_
AVVWSH
AVVWUSH
@[]_^A^
AVVWSH
UAWAVATVWSH
[_^A\A^A_]
AWAVVWSH
[_^A^A_
UAWAVATVWSH
0[_^A\A^A_]
UAWAVATVWSH
[_^A\A^A_]
UAWAVATVWSH
[_^A\A^A_]
AWAVATVWSH
[_^A\A^A_
AWAVAUATVWUSH
[]_^A\A]A^A_
AWAVAUATVWSH
[_^A\A]A^A_
AVVWSH
X[_^A^
AVVWUSH
[]_^A^
AWAVVWSH
T$PH;T$Xt%
H9T$@t
[_^A^A_
AWAVVWUSH
[]_^A^A_
AWAVVWSH
[_^A^A_
_XH+_PH
AXH+APH
AWAVVWSH
0[_^A^A_
FXH+FPH
VXH+VPH
AXH+APH
AVVWSH
qXL+qPL
GPH9GXt$1
([_^A^
AWAVVWSH
YXH+YPH
P[_^A^A_
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
RSWVQH
Y^_[ZH
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
PWRSVQH
Y^[Z_XH
_^A_A^A]A\H
ATAUAVAWI
PWRSVQH
Y^[Z_XH
_^A_A^A]A\H
ATAUAVAWI
PWRSVQH
Y^[Z_XH
_^A_A^A]A\H
fffff.
ATAUAVAWI
PWRSVQH
Y^[Z_XH
_^A_A^A]A\H
ATAUAVAWI
PWRSVQH
~'Y^[Z_XH
_^A_A^A]A\H
fffff.
ATAUAVAWI
PWRSVQH
~7Y^[Z_XH
_^A_A^A]A\H
fffff.
ATAUAVAWI
PWRSVQH
~7Y^[Z_XH
_^A_A^A]A\H
fffff.
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
?PQWVH
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
XY_^[ZH
XY_^[Z[
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\]
ffffff.
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
fffff.
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\]
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
ATAUAVAWI
_^A_A^A]A\H
wXH+wPH
l$ VWAVH
u0HcH<H
x ATAVAWH
0A_A^A\
@UAVAWH
H!T$0D
!T$(H!T$
WAVAWH
A_A^_
H3\$HH
D$DDtRH
@USVWATAUAVAWH
t'HcG<
H;|80u
xA_A^A]A\_^[]
H3E H3E
WATAUAVAWH
A_A^A]A\_
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
@A_A^A]A\_^]
H;xXu5
fffffff
t<ffff
A:8ueI
t&A88t
s WATAUAVAWH
D$h9t$P
A_A^A]A\_
x ATAUAVH
L9l$pu
0A^A]A\
WATAVH
0A^A\_
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
x ATAVAWH
A_A^A\
CA< t(<#t
fB9<@}eH
D$@H;G
<htn<jt^<lt6<tt&<wt
!,X< w
t$ WAVAWH
s4+sP+
0A_A^_
WAVAWH
A_A^_
D8t$8t
CA< t(<#t
<htn<jt^<lt6<tt&<wt
!,X< w
t$ WAVAWH
s(+{PL
0A_A^_
WAVAWH
A_A^_
|$ AVH
D$0H;G
t$ WATAUAVAWH
A_A^A]A\_
s(+sPH
WAVAWH
A_A^_
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
@USVWATAVAWH
D8d$Xt
A_A^A\_^[]
CA< t(<#t
u3HcH<H
@USVWATAUAVAWH
A_A^A]A\_^[]
?Cu2fD9
fD94Xu
t$8f9L$`
f9M`tVH
fD97t&
L$ SUVWH
WAVAWH
fE98t'
0A_A^_
\$ UVWATAUAVAWH
A_A^A]A\_^]
f9t$bu
H9L$Ht?H
WATAUAVAWH
0A_A^A]A\_
\$ UVWATAUAVAWH
fD9,Au
A_A^A]A\_^]
UVWAVAWH
0A_A^_^]
x ATAVAWH
A_A^A\
WATAUAVAWH
A_A^A]A\_
:u-f9Q
usfD9I
tlfD9A
fD94Gu
UWATAVAWH
A_A^A\_]
UVWAVAWH
A_A^_^]
WAVAWH
0A_A^_
WAVAWH
fA94@u
fA94nu
0A_A^_
@8l$Pt
WATAUAVAWH
A_A^A]A\_
AUAVAWH
A_A^A]
UVWATAUAVAWH
@8t(8}nH
@8t(8}
@8t$HtrL
`A_A^A]A\_^]
x ATAVAWH
D88Ht;I
0A_A^A\
\$ UVWATAUAVAWH
DD8T$pu
D8T$pt
0A_A^A]A\_^]
@SUVWATAUAVAWH
8A_A^A]A\_^][
UWATAVAWH
A_A^A\_]
UWATAVAWH
A_A^A\_]
VWATAVAWH
?D8d$8
t'D8d$8t
SD8d$8t
D8d$8t
A_A^A\_^
@USVWH
E(f95D3
t$ UWAUAVAWH
U8D8;A
0A_A^A]_]
T$xD;D$x
p WAVAWH
@8l$8t
D8t$8t
8]tAH
WATAUAVAWH
A_A^A]A\_
\$ UVWATAUAVAWH
H!D$ H
`A_A^A]A\_^]
UVWATAUAVAWH
fD94H}0L
A_A^A]A\_^]
VWATAVAW
A_A^A\_^
fffffff
ffffff
ffffff
>ffffff
ffffff
fffffff
L$ VWAVH
L$ UVWATAUAVAWH
0A_A^A]A\_^]
T$ D)s
t$ WATAUAVAW
A_A^A]A\_
UVWATAUAVAWH
A_A^A]A\_^]
t$ WATAUAVAWH
A_A^A]A\_
fffffff
ffffff
fffffff
fffffff
fffffff
fffffff
fffffff
ffffff
fffffff
fffffff
fffffff
fffffff
ffffff
ffffff
ffffff
ATAUAVH
L$ fff
L$ |+L;
A^A]A\
t$ UWAUAVAWH
A_A^A]_]
\$ VWATAUAVH
D!l$xA
@A^A]A\_^
fffffff
fffffff
fffffff
.ffffff
fffffff
^8U)zj
0ffffff
fffffff
@USVWATAVAWH
A_A^A\_^[]
u HcA<H
LcA<E3
SVWATAUAVAWH
0A_A^A]A\_^[
@SVWATAUAVAWH
L!|$(L!
D$0HcH
pA_A^A]A\_^[
B(I9A(u
WATAUAVAWH
A_A^A]A\_
ri9O vdH
AUAVAWH
;I9}(tiH
0A_A^A]
UVWATAUAVAWH
A_A^A]A\_^]
VWATAVAWH
A_A^A\_^
UVWATAUAVAWH
A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
ATAVAWH
D8d$8t
@A_A^A\
UWATAVAWH
D8&t4H
A_A^A\_]
WATAUAVAWH
A_A^A]A\_
@SUVWATAVAWH
A_A^A\_^][
@UAVAWH
e0A_A^]
@UATAUAVAWH
e0A_A^A]A\]
@UATAUAVAWH
H!T$0D
ue!T$(H!T$
A_A^A]A\]
fD9t$b
UVWATAUAVAWH
L$&8\$&t,8Y
@A_A^A]A\_^]
@8l$Ht
WATAUAVAWH
gfffffffH
D8l$ht
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
WATAUAVAWH
A_A^A]A\_
UATAUAVAWH
A_A^A]A\]
x ATAVAWH
fG9$Ou
0A_A^A\
x ATAVAWH
A_A^A\
fB9<@u
fB9,Nu
fB9,Nu
fB9,Nu
fA9,Au
f9)uUH
f9)u H
fB9<Bu
fB94Ou
fB9<Hu
@USVWATAVAWH
tyfD9 tsH
tQfD9 tK
fD9$Hu
@A_A^A\_^[]
WAVAWH
A_A^_
fB9<Hu
fB9<@u
WAVAWH
fD9<Au
fF9<qu
fB9<Bu
tSf91tNH
S;\$0tH
UVWATAUAVAWH
fA9<Bu
fC9<hu
A_A^A]A\_^]
WATAUAVAWH
0A_A^A]A\_
H9>u+A
\$ UVWAVAWH
A_A^_^]
f9|$^t&f
f9|$`t
|$":us
@USVWATAUAVAWH
A_A^A]A\_^[]
fD94Fu
UVWATAUAVAWH
xWI96tRI
0A_A^A]A\_^]
USVWAVH
A^_^[]
USVWAVH
A^_^[]
t$ UWAVH
u1!D$0H
UVWATAUAVAWH
0A_A^A]A\_^]
ffffff
@ffffff
UVWATAUAVAWH
@A_A^A]A\_^]
WATAUAVAWH
A_A^A]A\_
x AVAWE3
|$0A_A^
@USVWATAUAVAWH
D+d$8H
D8l$ht
A_A^A]A\_^[]
u(8J(t
@USVWATAUAVAWH
e8A_A^A]A\_^[]
UVWAVAWH
@A_A^_^]
QRAPAQH
HAYAXZY
QRAPAQH
HAYAXZY
QRAPAQH
HAYAXZY
../../chrome/app/chrome_exe_main_win.cc
About to load main DLL.
string too long
ios_base::badbit set
ios_base::failbit set
ios_base::eofbit set
iostream
iostream stream error
unknown exception
main-thread-id
on-initialized-event-handle
parent-handle
../../chrome/app/main_dll_loader_win.cc
Cannot find module
Failed to load Chrome DLL from
ChromeMain
RelaunchChromeBrowserWithNewCommandLineIfNeeded
Could not find exported function
RelaunchChromeBrowserWithNewCommandLineIfNeeded
process)
invalid string position
WatcherMain
bad locale name
vector<T> too long
list<T> too long
discardable
malloc
Binsufficient memory
1.2.11
need dictionary
version
map/set<T> too long
0Ethread
Unknown
Copyright 2017 The Crashpad Authors
Crashpad
%ls (%s) %s
https://crashpad.chromium.org/
https://crashpad.chromium.org/bug/new
Report %ls bugs to
%s home page: <%s>
%ls: %s
Try '%ls --help' for more information.
ActivityTracker.ThreadTrackers.MemLimitTrackerCount
ActivityTracker.ThreadTrackers.Count
.\../../base/debug/activity_tracker.cc
RecordProcessExit
File::Initialize
DeleteFile.Recursive
DeleteFile.NonRecursive
File::Close
File::Seek
File::Read
File::ReadAtCurrentPos
File::Write
File::WriteAtCurrentPos
File::GetLength
PlatformFile.UnknownErrors.Windows
%08x-%04x-%04x-%04x-%012llx
VERBOSE
(0x%lX)
Error (0x%lX) while retrieving error. (0x%lX)
ActivityTracker.Collect.AnalyzerCreationError
CloseHandle
kernel32.dll
Windows.PostOperationState.
Windows.FilesystemError.
UNKNOWN
WARNING
SharedMemoryTracker
virtual_size
Qkkbal
-Histogram.MismatchedConstructionArguments
Histogram.BadConstructionArguments
</PRE>
Histogram: %s recorded %d samples
, mean = %.1f
(flags = 0x%x)
{%3.1f%%}
bucket_count
LINEAR_HISTOGRAM
BOOLEAN_HISTOGRAM
CUSTOM_HISTOGRAM
SPARSE_HISTOGRAM
(%d = %3.1f%%)
dummy_histogram
UMA.NegativeSamples.Reason
UMA.NegativeSamples.Increment
UMA.NegativeSamples.Histogram
-active
-spare
.UsedPct
UMA.PersistentAllocator.
.Errors
.\../../base/metrics/persistent_memory_allocator.cc
Corruption detected in shared-memory segment.
Collections of histograms for %s
Collections of all histograms
.\../../base/metrics/statistics_recorder.cc
.\../../base/run_loop.cc
QuitWhenIdle
(null)
000000000000
( ) / _
NtQueryInformationThread
SetThreadDescription
.\../../base/threading/thread.cc
StopSoon
@malloc/metadata_fragmentation_caches
Malloc
global/
shared_memory/
.\../../base/trace_event/process_memory_dump.cc
CountResidentBytes failed. The resident size is invalid
%016llX%016llX
android::ResourceManagerImpl
AutocompleteController
BlinkGC
BlinkObjectCounters
BlobStorageContext
ClientDiscardableSharedMemoryManager
DOMStorage
DownloadService
DiscardableSharedMemoryManager
gpu::BufferManager
gpu::RenderbufferManager
gpu::TextureManager
FontCaches
HistoryReport
IPCChannel
IndexedDBBackingStore
InMemoryURLIndex
JavaHeap
LevelDB
LeveldbValueStore
LocalStorage
MemoryCache
MojoHandleTable
MojoLevelDB
MojoMessages
PartitionAlloc
ProcessMemoryMetrics
RenderProcessHost
URLRequestContext
V8Isolate
SyncDirectory
TabRestoreServiceHelper
blink_gc
blink_gc/allocated_objects
blink_objects/AdSubframe
blink_objects/AudioHandler
blink_objects/DetachedScriptState
blink_objects/Document
blink_objects/Frame
blink_objects/JSEventListener
blink_objects/LayoutObject
blink_objects/MediaKeySession
blink_objects/MediaKeys
blink_objects/Node
blink_objects/Resource
blink_objects/RTCPeerConnection
blink_objects/ScriptPromise
blink_objects/PausableObject
blink_objects/V8PerContextData
blink_objects/WorkerGlobalScope
blink_objects/UACSSResource
blink_objects/ResourceFetcher
components/download/controller_0x?
discardable/child_0x?
extensions/value_store/Extensions.Database.Open.Settings/0x?
extensions/value_store/Extensions.Database.Open.Rules/0x?
extensions/value_store/Extensions.Database.Open.State/0x?
extensions/value_store/Extensions.Database.Open/0x?
extensions/value_store/Extensions.Database.Restore/0x?
extensions/value_store/Extensions.Database.Value.Restore/0x?
font_caches/font_platform_data_cache
font_caches/shape_caches
gpu/gl/buffers/share_group_0x?
gpu/gl/renderbuffers/share_group_0x?
gpu/gl/textures/share_group_0x?
history/delta_file_service/leveldb_0x?
history/usage_reports_buffer/leveldb_0x?
java_heap
java_heap/allocated_objects
leveldatabase
leveldatabase/block_cache/browser
leveldatabase/block_cache/in_memory
leveldatabase/block_cache/unified
leveldatabase/block_cache/web
leveldatabase/db_0x?
leveldatabase/db_0x?/block_cache
leveldatabase/memenv_0x?
malloc/allocated_objects
mojo/data_pipe_consumer
mojo/data_pipe_producer
mojo/invitation
mojo/messages
mojo/message_pipe
mojo/platform_handle
mojo/queued_ipc_channel_message/0x?
mojo/render_process_host/0x?
mojo/shared_buffer
mojo/unknown
mojo/watcher
net/http_network_session_0x?
net/http_network_session_0x?/quic_stream_factory
net/http_network_session_0x?/socket_pool
net/http_network_session_0x?/spdy_session_pool
net/http_network_session_0x?/stream_factory
net/ssl_session_cache
net/url_request_context
net/url_request_context/app_request
net/url_request_context/app_request/0x?
net/url_request_context/app_request/0x?/cookie_monster
net/url_request_context/app_request/0x?/cookie_monster/cookies
net/url_request_context/app_request/0x?/cookie_monster/tasks_pending_global
net/url_request_context/app_request/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/app_request/0x?/http_cache
net/url_request_context/app_request/0x?/http_cache/memory_backend
net/url_request_context/app_request/0x?/http_cache/simple_backend
net/url_request_context/app_request/0x?/http_network_session
net/url_request_context/extensions
net/url_request_context/extensions/0x?
net/url_request_context/extensions/0x?/cookie_monster
net/url_request_context/extensions/0x?/cookie_monster/cookies
net/url_request_context/extensions/0x?/cookie_monster/tasks_pending_global
net/url_request_context/extensions/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/extensions/0x?/http_cache
net/url_request_context/extensions/0x?/http_cache/memory_backend
net/url_request_context/extensions/0x?/http_cache/simple_backend
net/url_request_context/extensions/0x?/http_network_session
net/url_request_context/isolated_media
net/url_request_context/isolated_media/0x?
net/url_request_context/isolated_media/0x?/cookie_monster
net/url_request_context/isolated_media/0x?/cookie_monster/cookies
net/url_request_context/isolated_media/0x?/cookie_monster/tasks_pending_global
net/url_request_context/isolated_media/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/isolated_media/0x?/http_cache
net/url_request_context/isolated_media/0x?/http_cache/memory_backend
net/url_request_context/isolated_media/0x?/http_cache/simple_backend
net/url_request_context/isolated_media/0x?/http_network_session
net/url_request_context/main
net/url_request_context/main/0x?
net/url_request_context/main/0x?/cookie_monster
net/url_request_context/main/0x?/cookie_monster/cookies
net/url_request_context/main/0x?/cookie_monster/tasks_pending_global
net/url_request_context/main/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/main/0x?/http_cache
net/url_request_context/main/0x?/http_cache/memory_backend
net/url_request_context/main/0x?/http_cache/simple_backend
net/url_request_context/main/0x?/http_network_session
net/url_request_context/main_media
net/url_request_context/main_media/0x?
net/url_request_context/main_media/0x?/cookie_monster
net/url_request_context/main_media/0x?/cookie_monster/cookies
net/url_request_context/main_media/0x?/cookie_monster/tasks_pending_global
net/url_request_context/main_media/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/main_media/0x?/http_cache
net/url_request_context/main_media/0x?/http_cache/memory_backend
net/url_request_context/main_media/0x?/http_cache/simple_backend
net/url_request_context/main_media/0x?/http_network_session
net/url_request_context/proxy
net/url_request_context/proxy/0x?
net/url_request_context/proxy/0x?/cookie_monster
net/url_request_context/proxy/0x?/cookie_monster/cookies
net/url_request_context/proxy/0x?/cookie_monster/tasks_pending_global
net/url_request_context/proxy/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/proxy/0x?/http_cache
net/url_request_context/proxy/0x?/http_cache/memory_backend
net/url_request_context/proxy/0x?/http_cache/simple_backend
net/url_request_context/proxy/0x?/http_network_session
net/url_request_context/safe_browsing
net/url_request_context/safe_browsing/0x?
net/url_request_context/safe_browsing/0x?/cookie_monster
net/url_request_context/safe_browsing/0x?/cookie_monster/cookies
net/url_request_context/safe_browsing/0x?/cookie_monster/tasks_pending_global
net/url_request_context/safe_browsing/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/safe_browsing/0x?/http_cache
net/url_request_context/safe_browsing/0x?/http_cache/memory_backend
net/url_request_context/safe_browsing/0x?/http_cache/simple_backend
net/url_request_context/safe_browsing/0x?/http_network_session
net/url_request_context/system
net/url_request_context/system/0x?
net/url_request_context/system/0x?/cookie_monster
net/url_request_context/system/0x?/cookie_monster/cookies
net/url_request_context/system/0x?/cookie_monster/tasks_pending_global
net/url_request_context/system/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/system/0x?/http_cache
net/url_request_context/system/0x?/http_cache/memory_backend
net/url_request_context/system/0x?/http_cache/simple_backend
net/url_request_context/system/0x?/http_network_session
net/url_request_context/unknown
net/url_request_context/unknown/0x?
net/url_request_context/unknown/0x?/cookie_monster
net/url_request_context/unknown/0x?/cookie_monster/cookies
net/url_request_context/unknown/0x?/cookie_monster/tasks_pending_global
net/url_request_context/unknown/0x?/cookie_monster/tasks_pending_for_key
net/url_request_context/unknown/0x?/http_cache
net/url_request_context/unknown/0x?/http_cache/memory_backend
net/url_request_context/unknown/0x?/http_cache/simple_backend
net/url_request_context/unknown/0x?/http_network_session
omnibox/autocomplete_controller/0x?
omnibox/in_memory_url_index/0x?
web_cache/Image_resources
web_cache/CSS stylesheet_resources
web_cache/Script_resources
web_cache/XSL stylesheet_resources
web_cache/Font_resources
web_cache/Other_resources
partition_alloc/allocated_objects
partition_alloc/partitions
partition_alloc/partitions/array_buffer
partition_alloc/partitions/buffer
partition_alloc/partitions/fast_malloc
partition_alloc/partitions/layout
skia/sk_glyph_cache
skia/sk_resource_cache
sqlite
ui/resource_manager_0x?/default_resource/0x?
ui/resource_manager_0x?/tinted_resource
v8/isolate_0x?/contexts/detached_context
v8/isolate_0x?/contexts/native_context
v8/isolate_0x?/heap_spaces
v8/isolate_0x?/heap_spaces/code_space
v8/isolate_0x?/heap_spaces/large_object_space
v8/isolate_0x?/heap_spaces/map_space
v8/isolate_0x?/heap_spaces/new_space
v8/isolate_0x?/heap_spaces/new_large_object_space
v8/isolate_0x?/heap_spaces/old_space
v8/isolate_0x?/heap_spaces/read_only_space
v8/isolate_0x?/malloc
v8/isolate_0x?/zapped_for_debug
site_storage/blob_storage/0x?
site_storage/index_db/db_0x?
site_storage/index_db/memenv_0x?
site_storage/localstorage/0x?/cache_size
site_storage/localstorage/0x?/leveldb
site_storage/session_storage/0x?
site_storage/session_storage/0x?/cache_size
sync/0x?/kernel
sync/0x?/store
sync/0x?/model_type/APP
sync/0x?/model_type/APP_LIST
sync/0x?/model_type/APP_NOTIFICATION
sync/0x?/model_type/APP_SETTING
sync/0x?/model_type/ARC_PACKAGE
sync/0x?/model_type/ARTICLE
sync/0x?/model_type/AUTOFILL
sync/0x?/model_type/AUTOFILL_PROFILE
sync/0x?/model_type/AUTOFILL_WALLET
sync/0x?/model_type/BOOKMARK
sync/0x?/model_type/DEVICE_INFO
sync/0x?/model_type/DICTIONARY
sync/0x?/model_type/EXPERIMENTS
sync/0x?/model_type/EXTENSION
sync/0x?/model_type/EXTENSION_SETTING
sync/0x?/model_type/FAVICON_IMAGE
sync/0x?/model_type/FAVICON_TRACKING
sync/0x?/model_type/HISTORY_DELETE_DIRECTIVE
sync/0x?/model_type/MANAGED_USER
sync/0x?/model_type/MANAGED_USER_SETTING
sync/0x?/model_type/MANAGED_USER_SHARED_SETTING
sync/0x?/model_type/MANAGED_USER_WHITELIST
sync/0x?/model_type/MOUNTAIN_SHARE
sync/0x?/model_type/NIGORI
sync/0x?/model_type/PASSWORD
sync/0x?/model_type/PREFERENCE
sync/0x?/model_type/PRINTER
sync/0x?/model_type/PRIORITY_PREFERENCE
sync/0x?/model_type/READING_LIST
sync/0x?/model_type/SEARCH_ENGINE
sync/0x?/model_type/SESSION
sync/0x?/model_type/SYNCED_NOTIFICATION
sync/0x?/model_type/SYNCED_NOTIFICATION_APP_INFO
sync/0x?/model_type/THEME
sync/0x?/model_type/TYPED_URL
sync/0x?/model_type/USER_CONSENT
sync/0x?/model_type/USER_EVENT
sync/0x?/model_type/WALLET_METADATA
sync/0x?/model_type/WIFI_CREDENTIAL
tab_restore/service_helper_0x?/entries
tab_restore/service_helper_0x?/entries/tab_0x?
tab_restore/service_helper_0x?/entries/window_0x?
tracing/heap_profiler_blink_gc/AllocationRegister
tracing/heap_profiler_malloc/AllocationRegister
tracing/heap_profiler_partition_alloc/AllocationRegister
GetHandleVerifier
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
GetProductInfo
IsWow64Process
GetProcessMitigationPolicy
SetProcessDpiAwarenessInternal
GetLogicalProcessorInformation
NtQuerySection
AuthenticAMD
WidevineCdm
widevinecdm
SHGetKnownFolderPath
crashpad-handler
fallback-handler
/prefetch:7
database
SetUnhandledExceptionFilter
no-sandbox
test-child-process
69.0.3497.100
service
fast-start
original-process-start-time
profile-directory
show-app-list
user-data-dir
watcher
Qkkbal
[-&LMb#{'
w+OQvr
INSKyu
)\ZEo^m/
H*0"ZOW
mj>zjZ
IiGM>nw
ewh/?y
OZw3(?
V_:X1:
stream end
file error
stream error
data error
buffer error
incompatible version
::SHGetSpecialFolderPathW
::GetUserNameW
::WTSQuerySessionInformationW
::WTSFreeMemory
UserDataDir
SetDefaultDllDirectories
SetProcessMitigationPolicy
InitializeConditionVariable
SleepConditionVariableCS
WakeAllConditionVariable
Unknown exception
unknown error
address family not supported
address in use
address not available
already connected
argument list too long
argument out of domain
bad address
bad file descriptor
bad message
broken pipe
connection aborted
connection already in progress
connection refused
connection reset
cross device link
destination address required
device or resource busy
directory not empty
executable format error
file exists
file too large
filename too long
function not supported
host unreachable
identifier removed
illegal byte sequence
inappropriate io control operation
interrupted
invalid argument
invalid seek
io error
is a directory
message size
network down
network reset
network unreachable
no buffer space
no child process
no link
no lock available
no message available
no message
no protocol option
no space on device
no stream resources
no such device or address
no such device
no such file or directory
no such process
not a directory
not a socket
not a stream
not connected
not enough memory
not supported
operation canceled
operation in progress
operation not permitted
operation not supported
operation would block
owner dead
permission denied
protocol error
protocol not supported
read only file system
resource deadlock would occur
resource unavailable try again
result out of range
state not recoverable
stream timeout
text file busy
timed out
too many files open in system
too many files open
too many links
too many symbolic link levels
value too large
wrong protocol type
bad allocation
Windows NT
%d.%d.%d
_platform_specific
exception-pointers
process
channel
canary
ProcessPrivateUsage
ProcessPeakWorkingSetSize
ProcessPeakPagefileUsage
SystemCommitRemaining
SystemCommitLimit
ActivityTracker.CollectCrash.Status
annotation
initial-client-data
metrics-dir
monitor-self
monitor-self-annotation
monitor-self-argument
no-identify-client-via-url
no-periodic-tasks
no-rate-limit
no-upload-gzip
pipe-name
--annotation
failed to parse --initial-client-data
--monitor-self-annotation
--initial-client-data or --pipe-name is required
--initial-client-data and --pipe-name are incompatible
--database is required
../../third_party/crashpad/crashpad/handler/handler_main.cc
SetProcessShutdownParameters
CrashpadMetrics
requires KEY=VALUE
has duplicate key
, discarding value
Usage: %ls [OPTION]...
Crashpad's exception handler server.
--annotation=KEY=VALUE set a process annotation in each crash report
--database=PATH store the crash report database at PATH
--initial-client-data=HANDLE_request_crash_dump,
HANDLE_request_non_crash_dump,
HANDLE_non_crash_dump_completed,
HANDLE_pipe,
HANDLE_client_process,
Address_crash_exception_information,
Address_non_crash_exception_information,
Address_debug_critical_section
use precreated data to register initial client
--metrics-dir=DIR store metrics files in DIR (only in Chromium)
--monitor-self run a second handler to catch crashes in the first
--monitor-self-annotation=KEY=VALUE
set a module annotation in the handler
--monitor-self-argument=ARGUMENT
provide additional arguments to the second handler
--no-identify-client-via-url
when uploading crash report, don't add
client-identifying arguments to URL
--no-periodic-tasks don't scan for new reports or prune the database
--no-rate-limit don't rate limit crash uploads
--no-upload-gzip don't use gzip compression when uploading
--pipe-name=PIPE communicate with the client over PIPE
--url=URL send crash reports to this Breakpad server URL,
only if uploads are enabled for the database
--help display this help and exit
--version output version information and exit
--monitor-self
--monitor-self-argument=--monitor-self is not supported
--no-identify-client-via-url
--no-periodic-tasks
--no-rate-limit
--no-upload-gzip
--monitor-self-annotation=%s=%s
RtlInitUnicodeString
NtCreateKey
NtOpenKeyEx
NtClose
NtCreateLowBoxToken
NtCreateDirectoryObject
BrokerEvent
bad array new length
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
CreateSemaphoreW
CreateSemaphoreExW
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
FlushProcessWriteBuffers
FreeLibraryWhenCallbackReturns
GetCurrentProcessorNumber
CreateSymbolicLinkW
GetCurrentPackageId
GetTickCount64
GetFileInformationByHandleEx
SetFileInformationByHandle
GetSystemTimePreciseAsFileTime
WakeConditionVariable
InitializeSRWLock
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SleepConditionVariableSRW
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CompareStringEx
GetLocaleInfoEx
LCMapStringEx
ActivityTracker.CollectCrash.Event
gen/components/browser_watcher/stability_report.pb.cc
browser_watcher.SystemState
browser_watcher.CodeModule
browser_watcher.TypedValue.Reference
browser_watcher.TypedValue
browser_watcher.Activity
browser_watcher.Exception
browser_watcher.ThreadState
browser_watcher.ProcessState.MemoryState.WindowsMemory
browser_watcher.ProcessState.MemoryState
browser_watcher.ProcessState
browser_watcher.FieldTrial
browser_watcher.SystemMemoryState.WindowsMemory
browser_watcher.SystemMemoryState
browser_watcher.StabilityReport
../../third_party/protobuf/src\google/protobuf/map_entry_lite.h
CHECK failed: default_instance_ != NULL:
Stability
%ld-%lld
FieldTrial.
%08X%zx
%08X%04X%04X%02X%02X%02X%02X%02X%02X%02X%02X%x
(cannot determine missing fields for lite message)
../../third_party/protobuf/src/google/protobuf/message_lite.cc
CHECK failed: !coded_out.HadError():
Exceeded maximum protobuf size of 2GB:
CHECK failed: (byte_size_before_serialization) == (byte_size_after_serialization):
was modified concurrently during serialization.
CHECK failed: (bytes_produced_by_serialization) == (byte_size_before_serialization):
Byte size calculation and serialization were inconsistent. This may indicate a bug in protocol buffers or it may be caused by concurrent modification of
This shouldn't be called if all the sizes are equal.
../../third_party/protobuf/src/google/protobuf/arena.cc
CHECK failed: (n) <= (std::numeric_limits<size_t>::max() - kHeaderSize):
../../third_party/crashpad/crashpad/util/win/initial_client_data.cc
expected 8 comma separated arguments
0x%x,0x%x,0x%x,0x%x,0x%x,0x%I64x,0x%I64x,0x%I64x
could not convert '
' to HANDLE
' to WinVMAddress
POSIXLY_CORRECT
%s: option `%s' is ambiguous (could be `--%s' or `--%s')
%s: invalid option -- `-%c'
%s: argument required for option `
../../third_party/crashpad/crashpad/util/misc/paths_win.cc
GetModuleFileName
../../third_party/crashpad/crashpad/client/crashpad_client_win.cc
CreateThread
WaitForSingleObject
SetEvent
\\.\pipe\crashpad_%lu_
OpenProcess
--initial-client-data=
::InitializeProcThreadAttributeList
::UpdateProcThreadAttribute
InitializeProcThreadAttributeList (size) succeeded, expected failure
InitializeProcThreadAttributeList (size)
CreateProcess
CloseHandle thread
CloseHandle process
::DeleteProcThreadAttributeList
crash server failed to launch, self-terminating
crash server did not respond, self-terminating
../../third_party/crashpad/crashpad/client/crash_report_database_win.cc
DeleteFile
CreateDirectory
GetFileAttributes
: not a directory
LockFileEx
failed to rewind to read
failed to read header
unexpected header
record size out of range
failed to read records
bad string table
invalid string table index
UnlockFileEx
failed to rewind to write
failed to truncate
failed to write header
expected to start with
failed to write records
failed to write string table
upload_file_minidump
../../third_party/crashpad/crashpad/handler/crash_report_upload_thread.cc
reserved key
application/octet-stream
product
%c%s=%s
../../third_party/crashpad/crashpad/handler/win/crash_report_exception_handler.cc
PrepareNewCrashReport failed
WriteEverything failed
FinishedWritingCrashReport failed
../../third_party/crashpad/crashpad/client/prune_crash_reports.cc
PruneCrashReportDatabase: Failed to get pending reports
PruneCrashReportDatabase: Failed to get completed reports
Database Pruning: Failed to remove report
../../third_party/crashpad/crashpad/util/win/exception_handler_server.cc
GetFileInformationByHandleEx
forged shutdown request, got:
unhandled message type:
unexpected version. got:
expecting:
forged client pid, real pid:
, got:
ImpersonateNamedPipeClient
failed to open
ConnectNamedPipe
RegisterWaitForSingleObject crash dump requested
RegisterWaitForSingleObject non-crash dump requested
RegisterWaitForSingleObject process end
::GetNamedPipeClientProcessId
Crashpad.CrashReportPending
Crashpad.CrashReportSize
Crashpad.CrashUpload.AttemptSuccessful
Crashpad.CrashUpload.Skipped
Crashpad.ExceptionCaptureResult
Crashpad.ExceptionCode.Win
Crashpad.HandlerLifetimeMilestone
Crashpad.HandlerCrash.ExceptionCode.Win
Crashpad.ExceptionEncountered
../../third_party/crashpad/crashpad/util/win/session_end_watcher.cc
CreateEvent
PostMessage
RegisterClass
CreateWindow
GetMessage
GetWindowLongPtr
SetWindowLongPtr
UnregisterClass
DestroyWindow
../../third_party/protobuf/src/google/protobuf/stubs/common.cc
This program requires version
of the Protocol Buffer runtime library, but the installed version is
. Please update your library. If you compiled the program yourself, make sure that your headers are from the same version of Protocol Buffers as your link-time library. (Version verification failed in "
This program was compiled against version
of the Protocol Buffer runtime library, which is not compatible with the installed version (
). Contact the program author for an update. If you compiled the program yourself, make sure that your headers are from the same version of Protocol Buffers as your link-time library. (Version verification failed in "
[libprotobuf %s %s:%d] %s
../../third_party/protobuf/src/google/protobuf/io/zero_copy_stream_impl_lite.cc
CHECK failed: (last_returned_size_) > (0):
BackUp() can only be called after a successful Next().
CHECK failed: (count) <= (last_returned_size_):
CHECK failed: (count) >= (0):
CHECK failed: target_ != NULL:
Cannot allocate buffer larger than kint32max for
StringOutputStream.
CHECK failed: (count) <= (target_->size()):
'callback' must not be NULL
../../third_party/protobuf/src\google/protobuf/stubs/logging.h
../../third_party/protobuf/src/google/protobuf/io/coded_stream.cc
A protocol message was rejected because it was too big (more than
bytes). To increase the limit (or to disable these warnings), see CodedInputStream::SetTotalBytesLimit() in google/protobuf/io/coded_stream.h.
CHECK failed: (buffer_size) >= (0):
../../third_party/protobuf/src/google/protobuf/wire_format_lite.cc
CHECK failed: (value.size()) <= (kint32max):
RtlDeriveCapabilitySidsFromName
NtQueryObject
RtlNtStatusToDosError
NtQueryInformationProcess
../../sandbox/win/src/sandbox_policy_base.cc
Failed to add sandbox rule.
error =
, subsystem =
, semantics =
, pattern = '
g_shared_delayed_integrity_level
g_shared_delayed_mitigations
CreateAppContainerProfile
DeriveAppContainerSidFromAppContainerName
GetAppContainerRegistryLocation
GetAppContainerFolderPath
NtSetInformationProcess
0123456789abcdefghijklmnopqrstuvwxyz
0123456789abcdefghijklmnopqrstuvwxyz
../../third_party/crashpad/crashpad/client/settings.cc
Settings magic is not
Settings version is not
Invalid file handle
channel
platform
product
start-timestamp
version
../../third_party/crashpad/crashpad/util/win/scoped_handle.cc
../../third_party/crashpad/crashpad/util/win/registration_protocol_win.cc
CreateFile
WaitNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
TransactNamedPipe: expected
, observed
::InitializeCriticalSectionEx
../../third_party/crashpad/crashpad/util/win/critical_section_with_debug_info.cc
InitializeCriticalSectionEx
../../third_party/crashpad/crashpad/util/win/process_info.cc
VirtualQueryEx
RegionSize == 0
UncheckedAllocate
NtQuerySystemInformation SystemExtendedHandleInformation
GetProcessBasicInformation failed
ReadProcessData failed
ReadMemoryInfo failed
range at 0x%llx, size 0x%llx fully unreadable
range at 0x%llx, size 0x%llx partially unreadable
::IsWow64Process
NtQueryInformationProcess incorrect size
::NtQueryInformationProcess
peb address 0x%llx out of range
ReadProcessMemory
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::PEB<crashpad::process_types::internal::Traits64>]
incorrect size
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::RTL_USER_PROCESS_PARAMETERS<crashpad::process_types::internal::Traits64>]
ReadProcessMemory UNICODE_STRING
ReadProcessMemory UNICODE_STRING incorrect size
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::PEB_LDR_DATA<crashpad::process_types::internal::Traits64>]
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::LDR_DATA_TABLE_ENTRY<crashpad::process_types::internal::Traits64>]
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::PEB<crashpad::process_types::internal::Traits32>]
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::RTL_USER_PROCESS_PARAMETERS<crashpad::process_types::internal::Traits32>]
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::PEB_LDR_DATA<crashpad::process_types::internal::Traits32>]
bool __cdecl crashpad::(anonymous namespace)::ReadStruct(HANDLE, crashpad::WinVMAddress, T *) [T = crashpad::process_types::LDR_DATA_TABLE_ENTRY<crashpad::process_types::internal::Traits32>]
../../third_party/crashpad/crashpad/util/win/scoped_process_suspend.cc
NtSuspendProcess
NtResumeProcess
::NtQuerySystemInformation
::NtQueryInformationThread
::NtQueryObject
::NtSuspendProcess
::NtResumeProcess
::RtlGetUnloadEventTraceEx
::NtOpenThread
(0x%08lx)
<failed to retrieve error message (0x%lx)>
../../third_party/crashpad/crashpad/util/file/file_io_win.cc
CreateFile
SetFilePointerEx
SetEndOfFile
../../third_party/crashpad/crashpad/util/file/file_io.cc
ReadExactly: expected
WriteFile
ReadFile
%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x
../../third_party/crashpad/crashpad/util/file/file_seeker.cc
SeekSet(): expected
../../third_party/crashpad/crashpad/snapshot/minidump/process_snapshot_minidump.cc
minidump signature mismatch
minidump version mismatch
duplicate streams for type
crashpad_info size mismatch
crashpad_info version mismatch
module_list size mismatch
module_crashpad_info_list size mismatch
duplicate module_crashpad_info_list minidump_module_list_index
../../third_party/crashpad/crashpad/handler/minidump_to_upload_parameters.cc
duplicate key
duplicate annotation name
list_annotations
; filename="%s"%s
Content-Type: %s%s
multipart/form-data; boundary=%s
Content-Type
Content-Encoding
---MultipartBoundary-
0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz
%%%02x
--%s%sContent-Disposition: form-data; name="%s"
../../third_party/crashpad/crashpad/util/net/http_transport_win.cc
WinHttpOpen
WinHttpSetTimeouts
WinHttpCrackUrl
WinHttpConnect
WinHttpOpenRequest
Content-Length
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpWriteData
WinHttpReceiveResponse
WinHttpQueryHeaders
HTTP status %lu
WinHttpReadData
%s/%s WinHTTP
/%lu.%lu.%lu.%lu
Windows_NT/%lu.%lu.%lu.%lu (
; WoW64
%s: error 0x%lx while retrieving error 0x%lx
%s: %s (0x%lx)
WinHttpCloseHandle
%%%02X
../../third_party/crashpad/crashpad/snapshot/win/process_snapshot_win.cc
ReadMemory ExceptionInformation failed
reading unloaded modules across bitness not currently supported
unexpected unloaded module list element size
failed to read target address
failed to read unloaded module data
ReadMemory PEB
ReadMemory PEB_LDR_DATA
ReadMemory RTL_USER_PROCESS_PARAMETERS
failed to read RTL_CRITICAL_SECTION
../../third_party/crashpad/crashpad/snapshot/crashpad_info_client_options.cc
unknown TriState
../../third_party/crashpad/crashpad/minidump/minidump_file_writer.cc
discarding duplicate stream of type
stream_count
out of range
offset
../../third_party/crashpad/crashpad/handler/user_stream_data_source.cc
AddUserExtensionStream failed
../../third_party/crashpad/crashpad/util/thread/thread_win.cc
../../third_party/crashpad/crashpad/util/win/scoped_set_event.cc
../../third_party/protobuf/src/google/protobuf/io/zero_copy_stream.cc
This ZeroCopyOutputStream doesn't support aliasing. Reaching here usually means a ZeroCopyOutputStream implementation bug.
g_handles_to_close
NtQueryAttributesFile
NtQueryFullAttributesFile
NtSetInformationFile
NtCreateFile
NtOpenThread
NtOpenProcess
NtOpenProcessToken
NtOpenProcessTokenEx
NtOpenKey
NtOpenDirectoryObject
NtQuerySymbolicLinkObject
NtOpenSymbolicLinkObject
NtCreateEvent
NtOpenEvent
:EnumDisplayMonitors
GetMonitorInfoW
GetSuggestedOPMProtectedOutputArraySize
CreateOPMProtectedOutputs
GetCertificateSize
GetCertificate
GetCertificateSizeByHandle
GetCertificateByHandle
GetOPMRandomNumber
SetOPMSigningKeyAndSequenceNumbers
ConfigureOPMProtectedOutput
GetOPMInformation
DestroyOPMProtectedOutput
g_interceptions
NtMapViewOfSection
NtUnmapViewOfSection
g_originals
NtAllocateVirtualMemory
NtDuplicateObject
NtFreeVirtualMemory
NtProtectVirtualMemory
NtQueryVirtualMemory
RtlAllocateHeap
RtlAnsiStringToUnicodeString
RtlCompareUnicodeString
RtlCreateHeap
RtlCreateUserThread
RtlDestroyHeap
RtlFreeHeap
_strnicmp
strlen
wcslen
memcpy
NtSetInformationThread
NtOpenThreadToken
NtOpenThreadTokenEx
../../third_party/crashpad/crashpad/util/file/file_writer.cc
WriteIoVec(): no iovecs
../../third_party/crashpad/crashpad/util/file/file_reader.cc
ReadFile
../../third_party/crashpad/crashpad/util/synchronization/semaphore_win.cc
../../third_party/crashpad/crashpad/snapshot/minidump/minidump_simple_string_dictionary_reader.cc
simple_string_dictionary size mismatch
../../third_party/crashpad/crashpad/snapshot/minidump/module_snapshot_minidump.cc
minidump_module_crashpad_info size mismatch
minidump_module_crashpad_info version mismatch
../../third_party/crashpad/crashpad/util/net/http_body_gzip.cc
deflateInit2:
deflate:
deflateEnd:
../../third_party/crashpad/crashpad/util/win/module_version.cc
GetFileVersionInfoSize:
GetFileVersionInfo:
VerQueryValue
../../third_party/crashpad/crashpad/snapshot/win/system_snapshot_win.cc
GetVersionEx
%s %u.%u.%u.%s%s
dwNumberOfProcessors exceeds uint8_t storage
Debug,
Patched,
Prerelease,
Private,
Special,
../../third_party/crashpad/crashpad/snapshot/win/process_reader_win.cc
ReadMemory at 0x
bytes failed
range at 0x%llx, size 0x%llx completely inaccessible
start of range at 0x%llx, size 0x%llx inaccessible
GetProcessTimes
couldn't retrieve modules
invalid stack range:
NtQuerySystemInformation
process
not found
SuspendThread
Wow64GetThreadContext
GetThreadContext
ResumeThread
../../third_party/crashpad/crashpad/snapshot/win/exception_snapshot_win.cc
thread ID
not found in process
EXCEPTION_POINTERS read failed
null ExceptionRecord
ExceptionRecord
thread
dropping chained ExceptionRecord
ContextRecord
../../third_party/crashpad/crashpad/snapshot/win/module_snapshot_win.cc
could not read simple address_ranges from
could not read user data stream entry from
../../third_party/crashpad/crashpad\snapshot/memory_snapshot.h
different process_reader_ for snapshots
../../third_party/crashpad/crashpad/minidump/minidump_writable.cc
../../third_party/crashpad/crashpad/minidump/minidump_writer_util.cc
timestamp
string
cannot be converted to UTF-16 losslessly
UTF-16 length
will be truncated to UTF-16 length
crashpad
%s.%s,%s,%s
../../third_party/crashpad/crashpad\util/numeric/in_range_cast.h
value
%s; %s
../../third_party/crashpad/crashpad/minidump/minidump_memory_writer.cc
memory_region_count
../../third_party/crashpad/crashpad/minidump/minidump_thread_writer.cc
thread_count
../../third_party/crashpad/crashpad/minidump/minidump_module_writer.cc
module_count
../../third_party/crashpad/crashpad/minidump/minidump_unloaded_module_writer.cc
unloaded_module_count
../../third_party/crashpad/crashpad/minidump/minidump_handle_writer.cc
handle_count
NtOpenFile
CreateNamedPipeW
CreateProcessW
CreateProcessA
GdiDllInitialize
GetStockObject
RegisterClassW
EnumDisplayDevicesA
GetMonitorInfoA
SchedulerKind
MaxConcurrency
MinConcurrency
TargetOversubscriptionFactor
LocalContextCacheSize
ContextStackSize
ContextPriority
SchedulingProtocol
DynamicProgressFeedback
WinRTInitialization
MaxPolicyElementKey
../../third_party/crashpad/crashpad/util/file/filesystem_win.cc
RemoveDirectory
../../third_party/crashpad/crashpad/snapshot/minidump/minidump_string_list_reader.cc
string_list size mismatch
../../third_party/crashpad/crashpad/snapshot/minidump/minidump_annotation_reader.cc
annotation list size mismatch
annotation object size mismatch
%s (%d)
../../third_party/crashpad/crashpad/snapshot/capture_memory.cc
unaligned range
ReadMemory
../../third_party/crashpad/crashpad/snapshot/win/cpu_context_win.cc
non-x64 context
non-x86 context
../../third_party/crashpad/crashpad/snapshot/win/pe_image_reader.cc
could not read data directory from
CodeView debug entry of unexpected size in
could not read debug directory from
encountered non-7.0 CodeView debug record in
version info size
too small for structure of size
could not read version info from
unexpected VS_VERSIONINFO in
unexpected VS_FIXEDFILEINFO in
CPADinfo
small crashpad info section size
could not read crashpad info from
unexpected crashpad info signature 0x%x, version %u in %s
crashpad info struct size
large for section size
large crashpad info size
could not read dos header from
invalid e_magic in dos header of
could not read nt headers from
invalid signature in nt headers of
supplied section name too long
could not read section
from
0x%llx + 0x%llx (%s)
../../third_party/crashpad/crashpad/snapshot/win/pe_image_annotations_reader.cc
could not read simple annotations from
duplicate simple annotation
could not read annotations list object in
could not read annotation at index
could not read annotation name at index
could not read annotation value at index
../../third_party/crashpad/crashpad/snapshot/memory_snapshot.cc
invalid empty range at 0x%llx
invalid range at 0x%llx, size %Iu
ranges not overlapping or abutting: (0x%llx, size %Iu) and (0x%llx, size %Iu)
../../third_party/crashpad/crashpad/minidump/minidump_string_writer.cc
string_bytes
../../third_party/crashpad/crashpad/minidump/minidump_context_writer.cc
unknown context architecture
pstate truncation
../../third_party/crashpad/crashpad/minidump/minidump_simple_string_dictionary_writer.cc
entry_count
../../third_party/crashpad/crashpad/minidump/minidump_module_crashpad_info_writer.cc
minidump_module_list_index
GetUserDefaultLocaleName
verifier.dll
kernel32.dll
bad exception
../../third_party/crashpad/crashpad/snapshot/win/process_subrange_reader.cc
range
outside of range
invalid read range
attempt to read outside of
range
at range
invalid range
resources
../../third_party/crashpad/crashpad/snapshot/win/pe_image_resource_reader.cc
could not read resource data entry from
expected
directory for entry id
expected non-directory for entry language
expected non-directory for entry in
could not read resource directory from
could not read resource directory named entries from
could not read resource directory ID entries from
../../third_party/crashpad/crashpad/minidump/minidump_rva_list_writer.cc
child_count
../../third_party/crashpad/crashpad/minidump/minidump_annotation_writer.cc
annotation list size
is out of range
@-@-@-@-@-@-@-@-
Z@v@v@v@v@v@v@v@v
@E@E@E@E@E@E@E@E
../../third_party/crashpad/crashpad/minidump/minidump_byte_array_writer.cc
data size
 !"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~
`h````
xpxxxx
`h`hhh
xwpwpp
[aOni*{
~ $s%r
@b;zO]
v2!L.2
CorExitProcess
 !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~
UUUUUU
?UUUUUU
?UUUUUU
?UUUUUU
?UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUUUUU
UUUUUU
"e?<<<<<<l?
Il?333333c?
.i?0@I
d?000000`?
)|B?d!
L?UUUUUUU?
&?PPPPPPP?
0X8b?~
%GoU?*
(T?j?Y
Zod(^?
D W?{W
qS>g?h3
c?FA@s}
UUUUUU
UUUUUU
UUUUUU
?UUUUUU
?kxG2)
?TY,>5
?!5WOo
?E=$% B
?49HoKC
?UUUUUU
?UUUUUU
?UUUUUU
?UUUUUU
?UUUUUU
AUUUUUU
__based(
__cdecl
__pascal
__stdcall
__thiscall
__fastcall
__vectorcall
__clrcall
__eabi
__swift_1
__swift_2
__ptr64
__restrict
__unaligned
restrict(
delete
operator
`vftable'
`vbtable'
`vcall'
`typeof'
`local static guard'
`string'
`vbase destructor'
`vector deleting destructor'
`default constructor closure'
`scalar deleting destructor'
`vector constructor iterator'
`vector destructor iterator'
`vector vbase constructor iterator'
`virtual displacement map'
`eh vector constructor iterator'
`eh vector destructor iterator'
`eh vector vbase constructor iterator'
`copy constructor closure'
`udt returning'
`local vftable'
`local vftable constructor closure'
new[]
delete[]
`omni callsig'
`placement delete closure'
`placement delete[] closure'
`managed vector constructor iterator'
`managed vector destructor iterator'
`eh vector copy constructor iterator'
`eh vector vbase copy constructor iterator'
`dynamic initializer for '
`dynamic atexit destructor for '
`vector copy constructor iterator'
`vector vbase copy constructor iterator'
`managed vector copy constructor iterator'
`local static thread guard'
operator ""
operator co_await
Type Descriptor'
Base Class Descriptor at (
Base Class Array'
Class Hierarchy Descriptor'
Complete Object Locator'
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
AreFileApisANSI
CompareStringEx
EnumSystemLocalesEx
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
GetDateFormatEx
GetLocaleInfoEx
GetSystemTimePreciseAsFileTime
GetTimeFormatEx
IsValidLocaleName
LCMapStringEx
LCIDToLocaleName
LocaleNameToLCID
AppPolicyGetProcessTerminationMethod
NAN(SNAN)
nan(snan)
NAN(IND)
nan(ind)
UUUUUU
UUUUUU
@^8U)zj
8Csinf
UUUUUU
UUUUUU
?8bunz8
?@En[vP
[*ncd>0
S>$hkDh$h>[2
UA>N0Wl
9>expf
_hypot
_nextafter
A03>A|
Q5rHg,>
Hk=>:
j>>A?1
.>PJ;I:qE>
:>t6k'
])6M>&
CWD>~3
_oD>Kg
N>O=I9
F>qUxv
/2GG>!B
zY;>u:m
P>q_Y~
0><[cZUg^>
Y>kX>M
H[><y5
?UUUUUU
?7zQ6$
=imb;D
/>58d%
VM>cQ6
>jtm}S
)>6{1n
+f)>0'
;H9>&X
*StO9>T
n03>Pu
K~Je#>!
bp(=>?g
BC?>6t9^
K&>.yC
.xJ>Hf
y\PD>!
|b=})>
c [1>H'
uzKs@>
3>N;kU
kE>fvw
V6E>`"(5
1#QNAN
1#SNAN
CoTaskMemFree
MiniDumpWriteDump
CallNtPowerInformation
ole32.dll
dbghelp.dll
POWRPROF.dll
browser.exe
GetHandleVerifier
IsSandboxedProcess
GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
AcquireSRWLockExclusive
AssignProcessToJobObject
CloseHandle
CompareStringW
ConnectNamedPipe
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateJobObjectW
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreW
CreateThread
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
EnumSystemLocalesEx
EnumSystemLocalesW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameExW
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOEMCP
GetProcAddress
GetProcessHandleCount
GetProcessHeaps
GetProcessId
GetProcessTimes
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDefaultLCID
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadId
GetThreadLocale
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetVersion
GetVersionExW
GetWindowsDirectoryW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSetInformation
HeapSize
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
IsWow64Process
LCMapStringW
LeaveCriticalSection
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
LockFileEx
MapViewOfFile
MoveFileW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
ProcessIdToSessionId
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleW
ReadFile
ReadProcessMemory
RegisterWaitForSingleObject
ReleaseSRWLockExclusive
ReleaseSemaphore
RemoveDirectoryW
ReplaceFileW
ResetEvent
ResumeThread
RtlCaptureContext
RtlCaptureStackBackTrace
RtlLookupFunctionEntry
RtlPcToFileHeader
RtlUnwind
RtlUnwindEx
RtlVirtualUnwind
SearchPathW
SetConsoleCtrlHandler
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetEvent
SetFileAttributesW
SetFilePointerEx
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetProcessShutdownParameters
SetStdHandle
SetUnhandledExceptionFilter
SignalObjectAndWait
SleepEx
SuspendThread
SwitchToThread
SystemTimeToTzSpecificLocalTime
TerminateJobObject
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransactNamedPipe
TryAcquireSRWLockExclusive
UnhandledExceptionFilter
UnlockFileEx
UnmapViewOfFile
UnregisterWaitEx
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
Wow64GetThreadContext
WriteConsoleW
WriteFile
WriteProcessMemory
lstrlenW
CommandLineToArgvW
SHGetFolderPathW
SHGetKnownFolderPath
GetPerformanceInfo
GetProcessMemoryInfo
QueryWorkingSetEx
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
PathMatchSpecW
AllowSetForegroundWindow
CloseDesktop
CloseWindowStation
CreateDesktopW
CreateWindowExW
CreateWindowStationW
DefWindowProcW
DestroyWindow
DispatchMessageW
FindWindowExW
GetMessageW
GetProcessWindowStation
GetThreadDesktop
GetUserObjectInformationW
GetWindowLongPtrW
GetWindowThreadProcessId
IsWindow
PostMessageW
RegisterClassW
SendMessageTimeoutW
SetProcessDPIAware
SetProcessWindowStation
SetWindowLongPtrW
TranslateMessage
UnregisterClassW
wsprintfW
AccessCheck
ConvertSidToStringSidW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertStringSidToSidW
CopySid
CreateProcessAsUserW
CreateRestrictedToken
CreateWellKnownSid
DuplicateToken
DuplicateTokenEx
EqualSid
FreeSid
GetAce
GetKernelObjectSecurity
GetLengthSid
GetNamedSecurityInfoW
GetSecurityDescriptorSacl
GetSecurityInfo
GetSidSubAuthority
GetTokenInformation
ImpersonateLoggedOnUser
ImpersonateNamedPipeClient
InitializeSid
IsValidSid
LookupPrivilegeValueW
MapGenericMask
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegDisablePredefinedCache
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RevertToSelf
SetEntriesInAclW
SetKernelObjectSecurity
SetSecurityInfo
SetThreadToken
SetTokenInformation
SystemFunction036
timeGetTime
WinHttpAddRequestHeaders
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpWriteData
chrome_elf.dll
KERNEL32.dll
SHELL32.dll
PSAPI.DLL
VERSION.dll
SHLWAPI.dll
USER32.dll
ADVAPI32.dll
WINMM.dll
WINHTTP.dll
Copyright (c) by P.J. Plauger, licensed by Dinkumware, Ltd. ALL RIGHTS RESERVED.
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
abcdefghijklmnopqrstuvwxyz
ABCDEFGHIJKLMNOPQRSTUVWXYZ
.?AVtype_info@@
.?AVexception@std@@
.?AV_Facet_base@std@@
.?AV_Locimp@locale@std@@
.?AVfacet@locale@std@@
.?AU_Crt_new_delete@std@@
.?AVbad_alloc@std@@
.?AVlogic_error@std@@
.?AVlength_error@std@@
.?AVout_of_range@std@@
.?AVbad_array_new_length@std@@
.?AVbad_exception@std@@
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity></dependentAssembly></dependency><dependency><dependentAssembly><assemblyIdentity type="win32" name="69.0.3497.100" version="69.0.3497.100" language="*"></assemblyIdentity></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>(
F@dQQ\
WyP2)/
j`^<=:x
6W`}M#
l3|Ilj5
dm[Vw\N
$w&~ZR
J1mCuSL
m_qN0`
}]=<q8
l%u"Y[>TJ
Pg1mmz
G(%k~<
BJ?;^9
lsf&@/`
FSP9jp
rDI&(Z
h1n~F%7
&kMIlAA
uq#<B\
|\AvDU
fff---fffffffffIIIEEEbbbfff
lllAAAiii
mmmeeePPP
eeeccc
cccfff
bbbMMM___ccceeeeeefffffffffeeedddaaaTTT
#5CPah]I9'
XIDATx^
(VUV_*;
ZO'"""
gggOhhhciiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiigiiighhhhhhhdgggO___
aaadddi
cccj```
3U59UV
{1:6.~
H{o*\/
z@4pAQ F:
uiqkw
f5pH+c
'~HQ7a
0phqN{
Ig5pH;;}fX]
*|5Y~h
v9ooe^
J;"A*3
C~5iGt"
|||@@@
nnnmKKK
nnnmKKK
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180509000000Z
210513120000Z0
Private Organization1
144487671
Tartu1
CRYPTOCOMPANY O
CRYPTOCOMPANY O
l<oW\E
EE-144487670
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
141022000000Z
241022000000Z0G1
DigiCert1%0#
DigiCert Timestamp Responder0
https://www.digicert.com/CPS0
2http://crl3.digicert.com/DigiCertAssuredIDCA-1.crl08
2http://crl4.digicert.com/DigiCertAssuredIDCA-1.crl0w
http://ocsp.digicert.com0A
5http://cacerts.digicert.com/DigiCertAssuredIDCA-1.crt0
iW!]4/q
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
061110000000Z
211110000000Z0b1
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-10
.http://www.digicert.com/ssl-cps-repository.htm0
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
DigiCert Inc1
www.digicert.com1!0
DigiCert Assured ID CA-1
181204172018Z0#
7HK>12
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
180509000000Z
210513120000Z0
Private Organization1
144487671
Tartu1
CRYPTOCOMPANY O
CRYPTOCOMPANY O
l<oW\E
EE-144487670
1http://crl3.digicert.com/EVCodeSigningSHA2-g1.crl07
1http://crl4.digicert.com/EVCodeSigningSHA2-g1.crl0K
https://www.digicert.com/CPS0
http://ocsp.digicert.com0H
<http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert High Assurance EV Root CA0
120418120000Z
270418120000Z0l1
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)0
+.+1Xf
http://ocsp.digicert.com0I
=http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
:http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
:http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
.http://www.digicert.com/ssl-cps-repository.htm0
DigiCert Inc1
www.digicert.com1+0)
"DigiCert EV Code Signing CA (SHA2)
*ok8;!_
20181204172022Z
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
170104000000Z
280118000000Z0L1
DigiCert1*0(
!DigiCert SHA2 Timestamp Responder0
https://www.digicert.com/CPS0
,http://crl3.digicert.com/sha2-assured-ts.crl02
,http://crl4.digicert.com/sha2-assured-ts.crl0
http://ocsp.digicert.com0O
Chttp://cacerts.digicert.com/DigiCertSHA2AssuredIDTimestampingCA.crt0
DigiCert Inc1
www.digicert.com1$0"
DigiCert Assured ID Root CA0
160107120000Z
310107120000Z0r1
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA0
fnVa')
http://ocsp.digicert.com0C
7http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0
4http://crl4.digicert.com/DigiCertAssuredIDRootCA.crl0:
4http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0P
https://www.digicert.com/CPS0
8aMbF$
V3"/"6
DigiCert Inc1
www.digicert.com110/
(DigiCert SHA2 Assured ID Timestamping CA
181204172022Z0/
Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
WIN4SP5
WIN2000
WINXPSP2
WINXPSP3
VISTARTM
VISTASP1
VISTASP2
WIN7RTM
WINSRV03SP1
WINSRV08SP1
WIN8RTM
chrome_watcher.dll
n\BrowserExitCodes
https://
cryptotab://
tProductShortName
ProductVersion
SpecialBuild
Official Build
user32.dll
kernel32.dll
\VarFileInfo\Translation
debug.log
ntdll.dll
nKernel32.dll
Chrome_MessageWindow
Microsoft
Internet Explorer
Quick Launch
User Pinned
TaskBar
ImplicitAppShortcuts
SOFTWARE\Microsoft\Windows NT\CurrentVersion
kernel32
Crashpad
Diagnostics
resources
inspector
Dictionaries
PepperFlash
script.log
internal-nacl-plugin
mresources.pak
SupervisedUserInstalledWhitelists
test_data
chrome
extensions
default_apps
SOFTWARE\Macromedia\FlashPlayerPepper
PlayerPath
Downloads
shell32.dll
chrome.dll
chrome_child.dll
GCM Store
Local State
pepflashplayer.dll
User Data
lSoftware\
Chrome
0.0.0.0-devel
-devel
\StringFileInfo\%04hx%04hx\%ls
advapi32.dll
${user_name}
${machine_name}
Wwtsapi32.dll
${client_name}
${session_name}
${windows}
${program_files}
${global_app_data}
${profile}
${local_app_data}
${roaming_app_data}
${documents}
SOFTWARE\Policies\Chromium
api-ms-win-core-synch-l1-2-0.dll
kernel32.dll
s --thread=
CryptoTab Browser
SeChangeNotifyPrivilege
S-1-16-16384
S-1-16-12288
S-1-16-8192
S-1-16-6144
S-1-16-4096
S-1-16-2048
S-1-16-0
n\Sessions\%d\AppContainerNamedObjects\%ls
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
reports
settings.dat
ymetadata
x\\.\pipe
ecrashpad_SessionEndWatcher
ntdll.dll
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_PERFORMANCE_TEXT
HKEY_PERFORMANCE_NLSTEXT
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
\Device\
\Device\HarddiskVolume
ntdll.dll
ALPC Port
Profile for Chrome Sandbox
Chrome Sandbox
euserenv
h\\.\pipe\%ls\%ls
sEvent
vrfcore.dll
zh-CHS
az-AZ-Latn
uz-UZ-Latn
kok-IN
syr-SY
div-MV
quz-BO
sr-SP-Latn
az-AZ-Cyrl
uz-UZ-Cyrl
quz-EC
sr-SP-Cyrl
quz-PE
smj-NO
bs-BA-Latn
smj-SE
sr-BA-Latn
sma-NO
sr-BA-Cyrl
sma-SE
sms-FI
smn-FI
zh-CHT
az-az-cyrl
az-az-latn
bs-ba-latn
div-mv
kok-in
quz-bo
quz-ec
quz-pe
sma-no
sma-se
smj-no
smj-se
smn-fi
sms-fi
sr-ba-cyrl
sr-ba-latn
sr-sp-cyrl
sr-sp-latn
syr-sy
uz-uz-cyrl
uz-uz-latn
zh-chs
zh-cht
Transfer-Encoding: chunked
winhttp.dll
sbox_alternate_desktop_
local_winstation_
\Device\
\/?/?\*
\/?/?\
\Sessions\BNOLINKS
egdi32.dll
ntdll.dll
ntdll.dll
ntdll.dll
kernel32.dll
ERROR : Unable to initialize critical section in CAtlBaseModule
kernel32.dll
ntdll.dll
kernel32.dll
kernel32.dll
ntdll.dll
ntdll.dll
ntdll.dll
VS_VERSION_INFO
KERNEL32.DLL
((((( H
((((( H
(
(null)
mscoree.dll
LC_ALL
LC_COLLATE
LC_CTYPE
LC_MONETARY
LC_NUMERIC
LC_TIME
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-synch-l1-2-0
kernel32
api-ms-
ext-ms-
Sunday
Monday
Tuesday
Wednesday
Thursday
Friday
Saturday
January
February
August
September
October
November
December
MM/dd/yy
dddd, MMMM dd, yyyy
HH:mm:ss
api-ms-win-core-datetime-l1-1-1
api-ms-win-core-fibers-l1-1-1
api-ms-win-core-file-l1-2-2
api-ms-win-core-localization-l1-2-1
api-ms-win-core-localization-obsolete-l1-2-0
api-ms-win-core-processthreads-l1-1-2
api-ms-win-core-string-l1-1-0
api-ms-win-core-synch-l1-2-0
api-ms-win-core-sysinfo-l1-2-1
api-ms-win-core-winrt-l1-1-0
api-ms-win-core-xstate-l2-1-0
api-ms-win-rtcore-ntuser-window-l1-1-0
api-ms-win-security-systemfunctions-l1-1-0
ext-ms-win-ntuser-dialogbox-l1-1-0
ext-ms-win-ntuser-windowstation-l1-1-0
advapi32
api-ms-win-appmodel-runtime-l1-1-2
user32
api-ms-
ext-ms-
american
american english
american-english
australian
belgian
canadian
chinese
chinese-hongkong
chinese-simplified
chinese-singapore
chinese-traditional
dutch-belgian
english-american
english-aus
english-belize
english-can
english-caribbean
english-ire
english-jamaica
english-nz
english-south africa
english-trinidad y tobago
english-uk
english-us
english-usa
french-belgian
french-canadian
french-luxembourg
french-swiss
german-austrian
german-lichtenstein
german-luxembourg
german-swiss
irish-english
italian-swiss
norwegian
norwegian-bokmal
norwegian-nynorsk
portuguese-brazilian
spanish-argentina
spanish-bolivia
spanish-chile
spanish-colombia
spanish-costa rica
spanish-dominican republic
spanish-ecuador
spanish-el salvador
spanish-guatemala
spanish-honduras
spanish-mexican
spanish-modern
spanish-nicaragua
spanish-panama
spanish-paraguay
spanish-peru
spanish-puerto rico
spanish-uruguay
spanish-venezuela
swedish-finland
america
britain
england
great britain
holland
hong-kong
new-zealand
pr china
pr-china
puerto-rico
slovak
south africa
south korea
south-africa
south-korea
trinidad & tobago
united-kingdom
united-states
CONOUT$
IDR_MAINFRAME
IDR_X001_APP_LIST
IDR_X003_INCOGNITOGOOGLEUPDATEAPPLICATIONCOMMANDS
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
/ P6pL
,/KPip
/-P?pR
VS_VERSION_INFO
StringFileInfo
040904b0
CompanyName
The Chromium and CryptoTab Browser Authors
FileDescription
CryptoTab Browser
FileVersion
69.0.3497.100
InternalName
browser_exe
LegalCopyright
Copyright 2018 The Chromium and CryptoTab Browser Authors. All rights reserved.
OriginalFilename
browser.exe
ProductName
CryptoTab Browser
ProductVersion
69.0.3497.100
CompanyShortName
The Chromium and CryptoTab Browser Authors
ProductShortName
CryptoTab Browser
LastChange
032b3ca19e9af20182f9bd03deefc0faf4695558-refs/branch-heads/3497@{#869}
Official Build
VarFileInfo
Translation
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
RAny use of this Certificate constitutes acceptance of the DigiCert CP/CPS and the Relying Party Agreement which limit liability and are incorporated herein by reference
Antivirus Signature
Bkav Clean
MicroWorld-eScan Clean
CMC Clean
CAT-QuickHeal Clean
McAfee Clean
Malwarebytes Clean
Zillya Clean
TheHacker Clean
BitDefender Clean
K7GW Clean
K7AntiVirus Clean
TrendMicro Clean
Baidu Clean
F-Prot Clean
Symantec Clean
TotalDefense Clean
TrendMicro-HouseCall Clean
Paloalto Clean
ClamAV Clean
Kaspersky Clean
Alibaba Clean
NANO-Antivirus Clean
ViRobot Clean
AegisLab Clean
Rising Clean
Ad-Aware Clean
Trustlook Clean
Emsisoft Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
VIPRE Clean
Invincea Clean
McAfee-GW-Edition Clean
Trapmine Clean
Sophos Clean
SentinelOne Clean
Cyren Clean
Jiangmin Clean
Webroot Clean
Avira Clean
Antiy-AVL Clean
Kingsoft Clean
Microsoft Clean
Endgame Clean
Arcabit Clean
SUPERAntiSpyware Clean
ZoneAlarm Clean
Avast-Mobile Clean
GData Clean
TACHYON Clean
AhnLab-V3 Clean
ALYac Clean
AVware Clean
MAX Clean
VBA32 Clean
Cylance Clean
Panda Clean
Zoner Clean
ESET-NOD32 Clean
Tencent Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet Clean
AVG Clean
Cybereason Clean
Avast Clean
CrowdStrike Clean
Qihoo-360 Clean

Process Tree


Deprecation note: While processing this analysis you did not have the httpreplay Python library installed. Installing this library (i.e., pip install httpreplay) will allow Cuckoo to do more proper PCAP analysis including but not limited to showing full HTTP and HTTPS (!) requests and responses. It is recommended that you install this library and possibly reprocess any interesting analysis tasks.

Hosts

No hosts contacted.

DNS

No domains contacted.

TCP

No TCP connections recorded.

UDP

Source Source Port Destination Destination Port
192.168.128.109 138 192.168.128.255 138

HTTP & HTTPS Requests

No HTTP requests performed.

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts

Sorry! No dropped files.
Sorry! No dropped buffers.
Task ID 1659
Mongo ID 5c895e6c11d30812ab72178c
Cuckoo release 2.0-dev