3a96f3edb1f378057c9e93bfb768f03d39eb1befa6024499e7b0219e9b56786b

Summary

Architecture IMAGE_FILE_MACHINE_AMD64
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
Compilation Date 2025-Mar-20 21:33:45
Detected languages English - United States
Debug artifacts C:\Users\admin\Desktop\vcpkg\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb
CompanyName The curl library, https://curl.se/
FileDescription libcurl Shared Library
FileVersion 8.12.1-DEV
InternalName libcurl
OriginalFilename libcurl.dll
ProductName The curl library
ProductVersion 8.12.1-DEV
LegalCopyright Copyright (C) Daniel Stenberg, <daniel@haxx.se>.
License https://curl.se/docs/copyright.html

Plugin Output

Info Matching compiler(s): MASM/TASM - sig1(h)
Info Interesting strings found in the binary: Contains domain names:
  • example.com
  • https://curl.se
Info Cryptographic algorithms detected in the binary: Uses constants related to SHA256
Uses constants related to SHA512
Microsoft's Cryptography API
Suspicious The PE contains functions most legitimate programs don't use. [!] The program may be hiding some of its imports:
  • LoadLibraryW
  • GetProcAddress
Uses Microsoft's cryptographic API:
  • CryptAcquireContextW
  • CryptDestroyKey
  • CryptImportKey
  • CryptEncrypt
  • CryptGetHashParam
  • CryptCreateHash
  • CryptHashData
  • CryptDestroyHash
  • CryptReleaseContext
  • CryptDecodeObjectEx
  • CryptStringToBinaryW
  • CryptQueryObject
Leverages the raw socket API to access the Internet:
  • WS2_32.dll
Interacts with the certificate store:
  • CertOpenStore
  • CertAddCertificateContextToStore
Safe VirusTotal score: 0/70 (Scanned on 2026-08-10 14:24:50) All the AVs think this file is safe.

Hashes

MD5 5c3a0512da90edc7f0d4286afc184273 🔍
SHA1 d2c04ee3063e393ad79d4f09e0d64f1388175c88 🔍
SHA256 3a96f3edb1f378057c9e93bfb768f03d39eb1befa6024499e7b0219e9b56786b 🔍
SHA3 aa1adb2e548d2597730f41a30eb186d02e84291eec0580140bf8e679cbf11eb1 🔍
SSDeep 12288:Gs+KDmRRE1h9Tlgy+Bnwzfddht2ei+T9rZO6pBHeY+MPkZ9:GjkmRR0hd4eZ52edZO6pBHeY+MPm 🔍
Imports Hash 77f6b36782989b141b8a4e59107822cd 🔍

DOS Header

e_magic MZ
e_cblp 0x90
e_cp 0x3
e_crlc 0
e_cparhdr 0x4
e_minalloc 0
e_maxalloc 0xffff
e_ss 0
e_sp 0xb8
e_csum 0
e_ip 0
e_cs 0
e_ovno 0
e_oemid 0
e_oeminfo 0
e_lfanew 0x118

PE Header

Signature PE
Machine IMAGE_FILE_MACHINE_AMD64
NumberofSections 6
TimeDateStamp 2025-Mar-20 21:33:45
PointerToSymbolTable 0
NumberOfSymbols 0
SizeOfOptionalHeader 0xf0
Characteristics IMAGE_FILE_DLL
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Image Optional Header

Magic PE32+
LinkerVersion 14.0
SizeOfCode 0x6bc00
SizeOfInitializedData 0x26800
SizeOfUninitializedData 0
AddressOfEntryPoint 0x000000000006C050 (Section: .text)
BaseOfCode 0x1000
ImageBase 0x180000000
SectionAlignment 0x1000
FileAlignment 0x200
OperatingSystemVersion 6.0
ImageVersion 0.0
SubsystemVersion 6.0
Win32VersionValue 0
SizeOfImage 0x96000
SizeOfHeaders 0x400
Checksum 0
Subsystem IMAGE_SUBSYSTEM_WINDOWS_GUI
DllCharacteristics IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
SizeofStackReserve 0x100000
SizeofStackCommit 0x1000
SizeofHeapReserve 0x100000
SizeofHeapCommit 0x1000
LoaderFlags 0
NumberOfRvaAndSizes 16

.text

MD5 1931635cf9608d92fb499472cee6c5a3 🔍
SHA1 9c7f96b065f69feea6cdbb93463d70e0b3149a07 🔍
SHA256 f9d9e6cb29d2b02c999a5de09e5f1a20ab5cd413da93353c50d0474c08dc0976 🔍
SHA3 93216eedecb334602877ef8f87fd56efab5df7a864d5abc91a5002cb367d1132 🔍
VirtualSize 0x6bad8
VirtualAddress 0x1000
SizeOfRawData 0x6bc00
PointerToRawData 0x400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Entropy 6.31655

.rdata

MD5 c31c3d636631611ab8dfedc93cb577b5 🔍
SHA1 76d945e0a73dcdcb98180fe4b98a344a4d47d76d 🔍
SHA256 322cd49cfcc109b3669e8cf7bb36dddccc1788e38f8804f11ab8d5becf8629c8 🔍
SHA3 b6a2d5109fdb11de1c480acf7a9d64a700d8ecf5d02b173baf44c48ef44dd967 🔍
VirtualSize 0x1c4a2
VirtualAddress 0x6d000
SizeOfRawData 0x1c600
PointerToRawData 0x6c000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.58512

.data

MD5 8fac3ef285c03b037d971533ca604ac6 🔍
SHA1 d6eb74ee3ff3248878fb26d0893979b7dc9064b2 🔍
SHA256 86fae8f291a185969ea0ab3f9c1f135d3d419a4eebd9e3e55327cdf0bd19f95c 🔍
SHA3 03a196b4b93ad73a63e3e83ff10aab11cf4f10eed89859a5ad7600b1b24de023 🔍
VirtualSize 0x31c8
VirtualAddress 0x8a000
SizeOfRawData 0x2a00
PointerToRawData 0x88600
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Entropy 2.5473

.pdata

MD5 f961fccc0b73ab21060f2cb4f7efd8b8 🔍
SHA1 ea87578245b0bf1e74e34c8f85f08a474eb3a70e 🔍
SHA256 c6b8134305538a0f8c3fe29ca310097556462d6f477cb6f77b6cee5ce945234e 🔍
SHA3 feec2074dd19e79810df2f24e79ee80046ea30d8cd3eb5ed4d95864569eccb73 🔍
VirtualSize 0x5d30
VirtualAddress 0x8e000
SizeOfRawData 0x5e00
PointerToRawData 0x8b000
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 5.77151

.rsrc

MD5 0668fdf3de138e14f6a00882e6741c56 🔍
SHA1 7ffa70dc3ac3c3c5a1d88a2eb407dcab2b8289e6 🔍
SHA256 2e8e8d16b2d356a24e0f45baa884e1d780be311fabeb9ff9bda6dfd8b86c2bac 🔍
SHA3 6cfffed81ff4f22ae0d86eb31df88446260a87ecfb50cea758a2ac870bd1433f 🔍
VirtualSize 0x5d0
VirtualAddress 0x94000
SizeOfRawData 0x600
PointerToRawData 0x90e00
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Entropy 4.02448

.reloc

MD5 b756c402d67a94d19c5be8999e095282 🔍
SHA1 7026cca48e2603d08c3c9b93024dbf5118fcfa05 🔍
SHA256 ccf292ad2fe07712f0f0178829abdf5b8ba3b4adb755be6cfc705e8af03a940d 🔍
SHA3 bd5ccfc96b58b0ff15a8b1124691b72b3a67d3f2c8aeba7250aa4bc3a00dbc9f 🔍
VirtualSize 0xb20
VirtualAddress 0x95000
SizeOfRawData 0xc00
PointerToRawData 0x91400
PointerToRelocations 0
PointerToLineNumbers 0
NumberOfLineNumbers 0
NumberOfRelocations 0
Characteristics IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Entropy 5.27642

Imports

zlib1.dll zlibVersion
inflateInit2_
inflateInit_
inflateEnd
inflate
WS2_32.dll WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
listen
gethostname
freeaddrinfo
getaddrinfo
inet_ntop
WSAEventSelect
WSASetLastError
socket
setsockopt
recv
ntohs
htons
getsockopt
getsockname
inet_pton
WSAResetEvent
WSASetEvent
WSAWaitForMultipleEvents
ioctlsocket
htonl
__WSAFDIsSet
select
WSAStartup
WSACleanup
recvfrom
sendto
getpeername
closesocket
WSAIoctl
send
WSAGetLastError
accept
connect
bind
bcrypt.dll BCryptGenRandom
ADVAPI32.dll CryptAcquireContextW
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptReleaseContext
CRYPT32.dll CertFreeCertificateContext
CryptDecodeObjectEx
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CryptStringToBinaryW
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringW
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFindCertificateInStore
CertFreeCertificateChain
KERNEL32.dll GetModuleHandleW
GetSystemDirectoryW
QueryPerformanceFrequency
FormatMessageW
SetLastError
GetLastError
GetCurrentProcessId
MoveFileExW
Sleep
LoadLibraryW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObjectEx
CloseHandle
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
GetFullPathNameW
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
QueryPerformanceCounter
GetTickCount
VerSetConditionMask
VerifyVersionInfoW
CreateFileW
GetFileSizeEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetEnvironmentVariableA
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
VCRUNTIME140.dll __std_type_info_destroy_list
__C_specific_handler
strstr
wcschr
memcmp
strrchr
memmove
memset
memchr
strchr
memcpy
api-ms-win-crt-string-l1-1-0.dll wcspbrk
strncmp
strspn
_strdup
wcsncmp
_wcsdup
strpbrk
strcmp
strcspn
wcsncpy
api-ms-win-crt-stdio-l1-1-0.dll __acrt_iob_func
_write
ftell
feof
fflush
__stdio_common_vsprintf
fputc
fseek
fputs
_wopen
fwrite
_fseeki64
fread
_lseeki64
_wfopen
fclose
_read
_fileno
_close
fgets
api-ms-win-crt-convert-l1-1-0.dll strtoul
strtol
atoi
wcstombs
strtoll
api-ms-win-crt-time-l1-1-0.dll strftime
_gmtime64
_time64
api-ms-win-crt-runtime-l1-1-0.dll _cexit
_execute_onexit_table
_beginthreadex
_initialize_narrow_environment
_errno
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initialize_onexit_table
_initterm
__sys_errlist
__sys_nerr
api-ms-win-crt-utility-l1-1-0.dll qsort
api-ms-win-crt-filesystem-l1-1-0.dll _unlink
_wstat64
_fstat64
_fullpath
api-ms-win-crt-heap-l1-1-0.dll free
malloc
calloc
realloc
api-ms-win-crt-math-l1-1-0.dll _fdopen

Delayed Imports

curl_easy_cleanup

Ordinal 1
Address 0x18c30

curl_easy_duphandle

Ordinal 2
Address 0x18c60

curl_easy_escape

Ordinal 3
Address 0x19ca0

curl_easy_getinfo

Ordinal 4
Address 0x19040

curl_easy_header

Ordinal 5
Address 0x23b00

curl_easy_init

Ordinal 6
Address 0x19070

curl_easy_nextheader

Ordinal 7
Address 0x23d10

curl_easy_option_by_id

Ordinal 8
Address 0x19a40

curl_easy_option_by_name

Ordinal 9
Address 0x19a70

curl_easy_option_next

Ordinal 10
Address 0x19ad0

curl_easy_pause

Ordinal 11
Address 0x190e0

curl_easy_perform

Ordinal 12
Address 0x19260

curl_easy_recv

Ordinal 13
Address 0x19270

curl_easy_reset

Ordinal 14
Address 0x19350

curl_easy_send

Ordinal 15
Address 0x193f0

curl_easy_setopt

Ordinal 16
Address 0x45df0

curl_easy_ssls_export

Ordinal 17
Address 0x194e0

curl_easy_ssls_import

Ordinal 18
Address 0x194e0

curl_easy_strerror

Ordinal 19
Address 0x50670

curl_easy_unescape

Ordinal 20
Address 0x19e00

curl_easy_upkeep

Ordinal 21
Address 0x194f0

curl_escape

Ordinal 22
Address 0x19f30

curl_formadd

Ordinal 23
Address 0x1b620

curl_formfree

Ordinal 24
Address 0x1b650

curl_formget

Ordinal 25
Address 0x1b6c0

curl_free

Ordinal 26
Address 0x22f0

curl_getdate

Ordinal 27
Address 0x3d4b0

curl_getenv

Ordinal 28
Address 0x21f50

curl_global_cleanup

Ordinal 29
Address 0x19540

curl_global_init

Ordinal 30
Address 0x195a0

curl_global_init_mem

Ordinal 31
Address 0x195e0

curl_global_sslset

Ordinal 32
Address 0x196d0

curl_global_trace

Ordinal 33
Address 0x19730

curl_maprintf

Ordinal 34
Address 0x355e0

curl_mfprintf

Ordinal 35
Address 0x35610

curl_mime_addpart

Ordinal 36
Address 0x33d50

curl_mime_data

Ordinal 37
Address 0x33e10

curl_mime_data_cb

Ordinal 38
Address 0x33ed0

curl_mime_encoder

Ordinal 39
Address 0x33f50

curl_mime_filedata

Ordinal 40
Address 0x33ff0

curl_mime_filename

Ordinal 41
Address 0x341a0

curl_mime_free

Ordinal 42
Address 0x34220

curl_mime_headers

Ordinal 43
Address 0x34280

curl_mime_init

Ordinal 44
Address 0x34320

curl_mime_name

Ordinal 45
Address 0x343c0

curl_mime_subparts

Ordinal 46
Address 0x34440

curl_mime_type

Ordinal 47
Address 0x34560

curl_mprintf

Ordinal 48
Address 0x35640

curl_msnprintf

Ordinal 49
Address 0x35690

curl_msprintf

Ordinal 50
Address 0x35700

curl_multi_add_handle

Ordinal 51
Address 0x38c80

curl_multi_assign

Ordinal 52
Address 0x38e40

curl_multi_cleanup

Ordinal 53
Address 0x38ea0

curl_multi_fdset

Ordinal 54
Address 0x390b0

curl_multi_get_handles

Ordinal 55
Address 0x39250

curl_multi_info_read

Ordinal 56
Address 0x392e0

curl_multi_init

Ordinal 57
Address 0x39380

curl_multi_perform

Ordinal 58
Address 0x39560

curl_multi_poll

Ordinal 59
Address 0x39750

curl_multi_remove_handle

Ordinal 60
Address 0x39780

curl_multi_setopt

Ordinal 61
Address 0x399b0

curl_multi_socket

Ordinal 62
Address 0x39b20

curl_multi_socket_action

Ordinal 63
Address 0x39b50

curl_multi_socket_all

Ordinal 64
Address 0x39b80

curl_multi_strerror

Ordinal 65
Address 0x50af0

curl_multi_timeout

Ordinal 66
Address 0x39bc0

curl_multi_wait

Ordinal 67
Address 0x39c00

curl_multi_waitfds

Ordinal 68
Address 0x39c30

curl_multi_wakeup

Ordinal 69
Address 0x39d50

curl_mvaprintf

Ordinal 70
Address 0x35740

curl_mvfprintf

Ordinal 71
Address 0x357e0

curl_mvprintf

Ordinal 72
Address 0x35800

curl_mvsnprintf

Ordinal 73
Address 0x35840

curl_mvsprintf

Ordinal 74
Address 0x358a0

curl_pushheader_byname

Ordinal 75
Address 0x2510

curl_pushheader_bynum

Ordinal 76
Address 0x2510

curl_share_cleanup

Ordinal 77
Address 0x490c0

curl_share_init

Ordinal 78
Address 0x491b0

curl_share_setopt

Ordinal 79
Address 0x49200

curl_share_strerror

Ordinal 80
Address 0x50bd0

curl_slist_append

Ordinal 81
Address 0x49630

curl_slist_free_all

Ordinal 82
Address 0x496f0

curl_strequal

Ordinal 83
Address 0x4fa80

curl_strnequal

Ordinal 84
Address 0x4faf0

curl_unescape

Ordinal 85
Address 0x19f40

curl_url

Ordinal 86
Address 0x21ba0

curl_url_cleanup

Ordinal 87
Address 0x5b230

curl_url_dup

Ordinal 88
Address 0x5b260

curl_url_get

Ordinal 89
Address 0x5b3d0

curl_url_set

Ordinal 90
Address 0x5bc10

curl_url_strerror

Ordinal 91
Address 0x50c40

curl_version

Ordinal 92
Address 0x5da70

curl_version_info

Ordinal 93
Address 0x5dba0

curl_ws_meta

Ordinal 94
Address 0x2510

curl_ws_recv

Ordinal 95
Address 0x194e0

curl_ws_send

Ordinal 96
Address 0x194e0

1

Type RT_VERSION
Language UNKNOWN
Codepage UNKNOWN
Size 0x3ac
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 3.45335
MD5 c4d31064b3ae7bfa8ab0be4c08d1eadd 🔍
SHA1 96a30dda0f77a4b05db6bd07b59bd9e4d2c13264 🔍
SHA256 b391f96c066b9f2ab936c89491d221d22c6a1be597296334377662da5108fcdc 🔍
SHA3 a1f1f844471d08db9774bc78744493dca1ca29345752517a84a1850450b411b4 🔍

2

Type RT_MANIFEST
Language English - United States
Codepage UNKNOWN
Size 0x17d
TimeDateStamp 1980-Jan-01 00:00:00
Entropy 4.91161
MD5 1e4a89b11eae0fcf8bb5fdd5ec3b6f61 🔍
SHA1 4260284ce14278c397aaf6f389c1609b0ab0ce51 🔍
SHA256 4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df 🔍
SHA3 4bb9e8b5a714cae82782f3831cc2d45f4bf4a50a755fe584d2d1893129d68353 🔍

Version Info

Signature 0xfeef04bd
StructVersion 0x10000
FileVersion 8.12.1.0
ProductVersion 8.12.1.0
FileFlags (EMPTY)
FileOs VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
FileType VFT_DLL
Language English - United States
CompanyName The curl library, https://curl.se/
FileDescription libcurl Shared Library
FileVersion (#2) 8.12.1-DEV
InternalName libcurl
OriginalFilename libcurl.dll
ProductName The curl library
ProductVersion (#2) 8.12.1-DEV
LegalCopyright Copyright (C) Daniel Stenberg, <daniel@haxx.se>.
License https://curl.se/docs/copyright.html
Resource LangID UNKNOWN

IMAGE_DEBUG_TYPE_CODEVIEW

Characteristics 0
TimeDateStamp 2025-Mar-20 21:33:45
Version 0.0
SizeofData 107
AddressOfRawData 0x80a98
PointerToRawData 0x7fa98
Referenced File C:\Users\admin\Desktop\vcpkg\vcpkg\buildtrees\curl\x64-windows-rel\lib\libcurl.pdb

IMAGE_DEBUG_TYPE_VC_FEATURE

Characteristics 0
TimeDateStamp 2025-Mar-20 21:33:45
Version 0.0
SizeofData 20
AddressOfRawData 0x80b04
PointerToRawData 0x7fb04

IMAGE_DEBUG_TYPE_POGO

Characteristics 0
TimeDateStamp 2025-Mar-20 21:33:45
Version 0.0
SizeofData 600
AddressOfRawData 0x80b18
PointerToRawData 0x7fb18

TLS Callbacks

Load Configuration

Size 0x140
TimeDateStamp 1970-Jan-01 00:00:00
Version 0.0
GlobalFlagsClear (EMPTY)
GlobalFlagsSet (EMPTY)
CriticalSectionDefaultTimeout 0
DeCommitFreeBlockThreshold 0
DeCommitTotalFreeThreshold 0
LockPrefixTable 0
MaximumAllocationSize 0
VirtualMemoryThreshold 0
ProcessAffinityMask 0
ProcessHeapFlags (EMPTY)
CSDVersion 0
Reserved1 0
EditList 0
SecurityCookie 0x18008c800

RICH Header

XOR Key 0xd5d43197
Unmarked objects 0
Imports (VS2008 SP1 build 30729) 18
Imports (34321) 2
253 (34321) 8
ASM objects (34321) 4
C objects (34321) 8
C++ objects (34321) 13
Imports (33140) 10
Imports (34808) 3
Total imports 196
C objects (34808) 173
Exports (34808) 1
Resource objects (34808) 1
151 1
Linker (34808) 1

Errors

Leave a comment

No comments yet.