Report - lim.php

Malicious Library DLL PE64 PE File
ScreenShot
Created 2023.06.23 09:19 Machine s1_win7_x6403
Filename lim.php
Type PE32+ executable (DLL) (console) x86-64 (stripped to external PDB), for MS Windows
AI Score
2
Behavior Score
0.8
ZERO API file : malware
VT API (file)
md5 6a956b7342f7fbf9f65a969462e85772
sha256 2fd83ff86db615e87ef7f1e8a0d905aaf2d0bf4f3e2b9728004fbf94afe742dd
ssdeep 6144:rqYMp1whyZAJfpTGfltYyMpfmA3a8yqgf2bMUDH:rqYMp1HaJfpfJmA3rg+bHDH
imphash 233f3d50f8ad1fa8b6c33359ee5261c0
impfuzzy 24:gfg1JXncJ8a0meOeTHST4Ks1VqR9KyRZNiwd:gfg1dcJLeTg41VqTKAiW
  Network IP location

Signature (3cnts)

Level Description
notice The binary likely contains encrypted or compressed data indicative of a packer
info Checks if process is being debugged by a debugger
info One or more processes crashed

Rules (4cnts)

Level Name Description Collection
watch Malicious_Library_Zero Malicious_Library binaries (upload)
info IsDLL (no description) binaries (upload)
info IsPE64 (no description) binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids

PE API

IAT(Import Address Table) Library

ADVAPI32.dll
 0x6920f254 SystemFunction036
KERNEL32.dll
 0x6920f264 DeleteCriticalSection
 0x6920f26c EnterCriticalSection
 0x6920f274 GetCurrentProcess
 0x6920f27c GetCurrentProcessId
 0x6920f284 GetCurrentThreadId
 0x6920f28c GetLastError
 0x6920f294 GetModuleFileNameW
 0x6920f29c GetSystemInfo
 0x6920f2a4 GetSystemTimeAsFileTime
 0x6920f2ac GetTickCount
 0x6920f2b4 InitializeCriticalSection
 0x6920f2bc LeaveCriticalSection
 0x6920f2c4 QueryPerformanceCounter
 0x6920f2cc RtlAddFunctionTable
 0x6920f2d4 RtlCaptureContext
 0x6920f2dc RtlLookupFunctionEntry
 0x6920f2e4 RtlVirtualUnwind
 0x6920f2ec SetUnhandledExceptionFilter
 0x6920f2f4 Sleep
 0x6920f2fc TerminateProcess
 0x6920f304 TlsGetValue
 0x6920f30c UnhandledExceptionFilter
 0x6920f314 VirtualAlloc
 0x6920f31c VirtualFree
 0x6920f324 VirtualLock
 0x6920f32c VirtualProtect
 0x6920f334 VirtualQuery
 0x6920f33c VirtualUnlock
msvcrt.dll
 0x6920f34c __iob_func
 0x6920f354 _amsg_exit
 0x6920f35c _errno
 0x6920f364 _exit
 0x6920f36c _ftime
 0x6920f374 _initterm
 0x6920f37c _lock
 0x6920f384 _snwprintf
 0x6920f38c _unlock
 0x6920f394 abort
 0x6920f39c calloc
 0x6920f3a4 free
 0x6920f3ac fwprintf
 0x6920f3b4 fwrite
 0x6920f3bc malloc
 0x6920f3c4 memcpy
 0x6920f3cc memmove
 0x6920f3d4 memset
 0x6920f3dc raise
 0x6920f3e4 realloc
 0x6920f3ec signal
 0x6920f3f4 strchr
 0x6920f3fc strlen
 0x6920f404 strncmp
 0x6920f40c strrchr
 0x6920f414 vfprintf
 0x6920f41c wcscpy
 0x6920f424 _getpid
USER32.dll
 0x6920f434 MessageBoxW

EAT(Export Address Table) Library

0x691dc980 rBKDF2_SHA256
0x691cf050 rcrypto_generichash_blake2b_pick_best_implementation
0x691d18b0 rcrypto_onetimeauth_poly1305_pick_best_implementation
0x691d2720 rcrypto_pwhash_argon2_pick_best_implementation
0x691d6b10 rcrypto_scalarmult_curve25519_pick_best_implementation
0x691d8610 rcrypto_sign_ed25519_detached
0x691d85d0 rcrypto_sign_ed25519_ref10_hinit
0x691d83b0 rcrypto_sign_ed25519_verify_detached
0x691d8ac0 rcrypto_stream_chacha20_pick_best_implementation
0x691d9610 rcrypto_stream_salsa20_pick_best_implementation
0x691dac80 rsodium_alloc_init
0x691da560 rsodium_crit_init
0x691da7f0 rsodium_runtime_get_cpu_features
0x691dc880 rlloc_region
0x691d4640 rrgon2_ctx
0x691d4730 rrgon2_hash
0x691d26b0 rrgon2_pick_best_implementation
0x691d4a80 rrgon2_verify
0x691d48c0 rrgon2i_hash_encoded
0x691d4930 rrgon2i_hash_raw
0x691d4ca0 rrgon2i_verify
0x691d49a0 rrgon2id_hash_encoded
0x691d4a10 rrgon2id_hash_raw
0x691d4cb0 rrgon2id_verify
0x691eebf0 rlake2b_compress_avx2
0x691ccc90 rlake2b_compress_ref
0x691ecec0 rlake2b_compress_sse41
0x691e8cb0 rlake2b_compress_ssse3
0x691d4cc0 rlake2b_long
0x691e3200 rrypto_aead_aes256gcm_abytes
0x691df100 rrypto_aead_aes256gcm_beforenm
0x691e2db0 rrypto_aead_aes256gcm_decrypt
0x691e2110 rrypto_aead_aes256gcm_decrypt_afternm
0x691e29c0 rrypto_aead_aes256gcm_decrypt_detached
0x691e0b20 rrypto_aead_aes256gcm_decrypt_detached_afternm
0x691e2590 rrypto_aead_aes256gcm_encrypt
0x691e0aa0 rrypto_aead_aes256gcm_encrypt_afternm
0x691e21a0 rrypto_aead_aes256gcm_encrypt_detached
0x691df460 rrypto_aead_aes256gcm_encrypt_detached_afternm
0x691e31b0 rrypto_aead_aes256gcm_is_available
0x691e31d0 rrypto_aead_aes256gcm_keybytes
0x691e3230 rrypto_aead_aes256gcm_keygen
0x691e3220 rrypto_aead_aes256gcm_messagebytes_max
0x691e31f0 rrypto_aead_aes256gcm_npubbytes
0x691e31e0 rrypto_aead_aes256gcm_nsecbytes
0x691e3210 rrypto_aead_aes256gcm_statebytes
0x691c1bb0 rrypto_aead_chacha20poly1305_abytes
0x691c1890 rrypto_aead_chacha20poly1305_decrypt
0x691c1750 rrypto_aead_chacha20poly1305_decrypt_detached
0x691c14d0 rrypto_aead_chacha20poly1305_encrypt
0x691c13b0 rrypto_aead_chacha20poly1305_encrypt_detached
0x691c1b50 rrypto_aead_chacha20poly1305_ietf_abytes
0x691c1a90 rrypto_aead_chacha20poly1305_ietf_decrypt
0x691c1920 rrypto_aead_chacha20poly1305_ietf_decrypt_detached
0x691c16b0 rrypto_aead_chacha20poly1305_ietf_encrypt
0x691c1560 rrypto_aead_chacha20poly1305_ietf_encrypt_detached
0x691c1b20 rrypto_aead_chacha20poly1305_ietf_keybytes
0x691c1b70 rrypto_aead_chacha20poly1305_ietf_keygen
0x691c1b60 rrypto_aead_chacha20poly1305_ietf_messagebytes_max
0x691c1b30 rrypto_aead_chacha20poly1305_ietf_npubbytes
0x691c1b40 rrypto_aead_chacha20poly1305_ietf_nsecbytes
0x691c1b80 rrypto_aead_chacha20poly1305_keybytes
0x691c1bd0 rrypto_aead_chacha20poly1305_keygen
0x691c1bc0 rrypto_aead_chacha20poly1305_messagebytes_max
0x691c1b90 rrypto_aead_chacha20poly1305_npubbytes
0x691c1ba0 rrypto_aead_chacha20poly1305_nsecbytes
0x691c2080 rrypto_aead_xchacha20poly1305_ietf_abytes
0x691c1fc0 rrypto_aead_xchacha20poly1305_ietf_decrypt
0x691c1e00 rrypto_aead_xchacha20poly1305_ietf_decrypt_detached
0x691c1d70 rrypto_aead_xchacha20poly1305_ietf_encrypt
0x691c1be0 rrypto_aead_xchacha20poly1305_ietf_encrypt_detached
0x691c2050 rrypto_aead_xchacha20poly1305_ietf_keybytes
0x691c20a0 rrypto_aead_xchacha20poly1305_ietf_keygen
0x691c2090 rrypto_aead_xchacha20poly1305_ietf_messagebytes_max
0x691c2060 rrypto_aead_xchacha20poly1305_ietf_npubbytes
0x691c2070 rrypto_aead_xchacha20poly1305_ietf_nsecbytes
0x691c20e0 rrypto_auth
0x691c20b0 rrypto_auth_bytes
0x691c23f0 rrypto_auth_hmacsha256
0x691c2110 rrypto_auth_hmacsha256_bytes
0x691c2390 rrypto_auth_hmacsha256_final
0x691c2150 rrypto_auth_hmacsha256_init
0x691c2120 rrypto_auth_hmacsha256_keybytes
0x691c2140 rrypto_auth_hmacsha256_keygen
0x691c2130 rrypto_auth_hmacsha256_statebytes
0x691c2380 rrypto_auth_hmacsha256_update
0x691c2450 rrypto_auth_hmacsha256_verify
0x691c28c0 rrypto_auth_hmacsha512
0x691c2a10 rrypto_auth_hmacsha512256
0x691c2970 rrypto_auth_hmacsha512256_bytes
0x691c29d0 rrypto_auth_hmacsha512256_final
0x691c29b0 rrypto_auth_hmacsha512256_init
0x691c2980 rrypto_auth_hmacsha512256_keybytes
0x691c29a0 rrypto_auth_hmacsha512256_keygen
0x691c2990 rrypto_auth_hmacsha512256_statebytes
0x691c29c0 rrypto_auth_hmacsha512256_update
0x691c2a80 rrypto_auth_hmacsha512256_verify
0x691c24a0 rrypto_auth_hmacsha512_bytes
0x691c2860 rrypto_auth_hmacsha512_final
0x691c24e0 rrypto_auth_hmacsha512_init
0x691c24b0 rrypto_auth_hmacsha512_keybytes
0x691c24d0 rrypto_auth_hmacsha512_keygen
0x691c24c0 rrypto_auth_hmacsha512_statebytes
0x691c2850 rrypto_auth_hmacsha512_update
0x691c2920 rrypto_auth_hmacsha512_verify
0x691c20c0 rrypto_auth_keybytes
0x691c2100 rrypto_auth_keygen
0x691c20d0 rrypto_auth_primitive
0x691c20f0 rrypto_auth_verify
0x691c2bc0 rrypto_box
0x691c2ba0 rrypto_box_afternm
0x691c2b90 rrypto_box_beforenm
0x691c2b00 rrypto_box_beforenmbytes
0x691c2b30 rrypto_box_boxzerobytes
0x691db500 rrypto_box_curve25519xchacha20poly1305_beforenm
0x691db7d0 rrypto_box_curve25519xchacha20poly1305_beforenmbytes
0x691db570 rrypto_box_curve25519xchacha20poly1305_detached
0x691db560 rrypto_box_curve25519xchacha20poly1305_detached_afternm
0x691db630 rrypto_box_curve25519xchacha20poly1305_easy
0x691db5f0 rrypto_box_curve25519xchacha20poly1305_easy_afternm
0x691db4d0 rrypto_box_curve25519xchacha20poly1305_keypair
0x691db7f0 rrypto_box_curve25519xchacha20poly1305_macbytes
0x691db800 rrypto_box_curve25519xchacha20poly1305_messagebytes_max
0x691db7e0 rrypto_box_curve25519xchacha20poly1305_noncebytes
0x691db690 rrypto_box_curve25519xchacha20poly1305_open_detached
0x691db680 rrypto_box_curve25519xchacha20poly1305_open_detached_afternm
0x691db750 rrypto_box_curve25519xchacha20poly1305_open_easy
0x691db710 rrypto_box_curve25519xchacha20poly1305_open_easy_afternm
0x691db7b0 rrypto_box_curve25519xchacha20poly1305_publickeybytes
0x691db890 rrypto_box_curve25519xchacha20poly1305_seal
0x691db960 rrypto_box_curve25519xchacha20poly1305_seal_open
0x691db9d0 rrypto_box_curve25519xchacha20poly1305_sealbytes
0x691db7c0 rrypto_box_curve25519xchacha20poly1305_secretkeybytes
0x691db470 rrypto_box_curve25519xchacha20poly1305_seed_keypair
0x691db7a0 rrypto_box_curve25519xchacha20poly1305_seedbytes
0x691c3100 rrypto_box_curve25519xsalsa20poly1305
0x691c30e0 rrypto_box_curve25519xsalsa20poly1305_afternm
0x691c3080 rrypto_box_curve25519xsalsa20poly1305_beforenm
0x691c3230 rrypto_box_curve25519xsalsa20poly1305_beforenmbytes
0x691c3260 rrypto_box_curve25519xsalsa20poly1305_boxzerobytes
0x691c3050 rrypto_box_curve25519xsalsa20poly1305_keypair
0x691c3270 rrypto_box_curve25519xsalsa20poly1305_macbytes
0x691c3280 rrypto_box_curve25519xsalsa20poly1305_messagebytes_max
0x691c3240 rrypto_box_curve25519xsalsa20poly1305_noncebytes
0x691c3180 rrypto_box_curve25519xsalsa20poly1305_open
0x691c30f0 rrypto_box_curve25519xsalsa20poly1305_open_afternm
0x691c3210 rrypto_box_curve25519xsalsa20poly1305_publickeybytes
0x691c3220 rrypto_box_curve25519xsalsa20poly1305_secretkeybytes
0x691c2ff0 rrypto_box_curve25519xsalsa20poly1305_seed_keypair
0x691c3200 rrypto_box_curve25519xsalsa20poly1305_seedbytes
0x691c3250 rrypto_box_curve25519xsalsa20poly1305_zerobytes
0x691c2bf0 rrypto_box_detached
0x691c2be0 rrypto_box_detached_afternm
0x691c2cb0 rrypto_box_easy
0x691c2c70 rrypto_box_easy_afternm
0x691c2b80 rrypto_box_keypair
0x691c2b40 rrypto_box_macbytes
0x691c2b50 rrypto_box_messagebytes_max
0x691c2b10 rrypto_box_noncebytes
0x691c2bd0 rrypto_box_open
0x691c2bb0 rrypto_box_open_afternm
0x691c2d10 rrypto_box_open_detached
0x691c2d00 rrypto_box_open_detached_afternm
0x691c2dd0 rrypto_box_open_easy
0x691c2d90 rrypto_box_open_easy_afternm
0x691c2b60 rrypto_box_primitive
0x691c2ae0 rrypto_box_publickeybytes
0x691c2ea0 rrypto_box_seal
0x691c2f70 rrypto_box_seal_open
0x691c2fe0 rrypto_box_sealbytes
0x691c2af0 rrypto_box_secretkeybytes
0x691c2b70 rrypto_box_seed_keypair
0x691c2ad0 rrypto_box_seedbytes
0x691c2b20 rrypto_box_zerobytes
0x691dba50 rrypto_core_ed25519_add
0x691dc010 rrypto_core_ed25519_bytes
0x691dbc00 rrypto_core_ed25519_from_hash
0x691dbbf0 rrypto_core_ed25519_from_uniform
0x691dc040 rrypto_core_ed25519_hashbytes
0x691db9e0 rrypto_core_ed25519_is_valid_point
0x691dc020 rrypto_core_ed25519_nonreducedscalarbytes
0x691dbc10 rrypto_core_ed25519_random
0x691dbf10 rrypto_core_ed25519_scalar_add
0x691dbdb0 rrypto_core_ed25519_scalar_complement
0x691dbca0 rrypto_core_ed25519_scalar_invert
0x691dbe90 rrypto_core_ed25519_scalar_mul
0x691dbcd0 rrypto_core_ed25519_scalar_negate
0x691dbc50 rrypto_core_ed25519_scalar_random
0x691dbea0 rrypto_core_ed25519_scalar_reduce
0x691dbfd0 rrypto_core_ed25519_scalar_sub
0x691dc050 rrypto_core_ed25519_scalarbytes
0x691dbb20 rrypto_core_ed25519_sub
0x691dc030 rrypto_core_ed25519_uniformbytes
0x691cc1a0 rrypto_core_hchacha20
0x691cc410 rrypto_core_hchacha20_constbytes
0x691cc3f0 rrypto_core_hchacha20_inputbytes
0x691cc400 rrypto_core_hchacha20_keybytes
0x691cc3e0 rrypto_core_hchacha20_outputbytes
0x691cc420 rrypto_core_hsalsa20
0x691cc6b0 rrypto_core_hsalsa20_constbytes
0x691cc690 rrypto_core_hsalsa20_inputbytes
0x691cc6a0 rrypto_core_hsalsa20_keybytes
0x691cc680 rrypto_core_hsalsa20_outputbytes
0x691dc090 rrypto_core_ristretto255_add
0x691dc2c0 rrypto_core_ristretto255_bytes
0x691dc1f0 rrypto_core_ristretto255_from_hash
0x691dc2e0 rrypto_core_ristretto255_hashbytes
0x691dc060 rrypto_core_ristretto255_is_valid_point
0x691dc2d0 rrypto_core_ristretto255_nonreducedscalarbytes
0x691dc200 rrypto_core_ristretto255_random
0x691dc280 rrypto_core_ristretto255_scalar_add
0x691dc270 rrypto_core_ristretto255_scalar_complement
0x691dc250 rrypto_core_ristretto255_scalar_invert
0x691dc2a0 rrypto_core_ristretto255_scalar_mul
0x691dc260 rrypto_core_ristretto255_scalar_negate
0x691dc240 rrypto_core_ristretto255_scalar_random
0x691dc2b0 rrypto_core_ristretto255_scalar_reduce
0x691dc290 rrypto_core_ristretto255_scalar_sub
0x691dc2f0 rrypto_core_ristretto255_scalarbytes
0x691dc140 rrypto_core_ristretto255_sub
0x691cca00 rrypto_core_salsa20
0x691cca60 rrypto_core_salsa2012
0x691ccab0 rrypto_core_salsa2012_constbytes
0x691cca90 rrypto_core_salsa2012_inputbytes
0x691ccaa0 rrypto_core_salsa2012_keybytes
0x691cca80 rrypto_core_salsa2012_outputbytes
0x691ccac0 rrypto_core_salsa208
0x691ccb10 rrypto_core_salsa208_constbytes
0x691ccaf0 rrypto_core_salsa208_inputbytes
0x691ccb00 rrypto_core_salsa208_keybytes
0x691ccae0 rrypto_core_salsa208_outputbytes
0x691cca50 rrypto_core_salsa20_constbytes
0x691cca30 rrypto_core_salsa20_inputbytes
0x691cca40 rrypto_core_salsa20_keybytes
0x691cca20 rrypto_core_salsa20_outputbytes
0x691ccba0 rrypto_generichash
0x691cee80 rrypto_generichash_blake2b
0x691cec90 rrypto_generichash_blake2b__blake2b
0x691ced40 rrypto_generichash_blake2b__blake2b_salt_personal
0x691cea30 rrypto_generichash_blake2b__final
0x691ce460 rrypto_generichash_blake2b__init
0x691ce700 rrypto_generichash_blake2b__init_key
0x691ce870 rrypto_generichash_blake2b__init_key_salt_personal
0x691ce3a0 rrypto_generichash_blake2b__init_param
0x691ce4e0 rrypto_generichash_blake2b__init_salt_personal
0x691cee10 rrypto_generichash_blake2b__pick_best_implementation
0x691ce590 rrypto_generichash_blake2b__update
0x691ccc10 rrypto_generichash_blake2b_bytes
0x691ccc00 rrypto_generichash_blake2b_bytes_max
0x691ccbf0 rrypto_generichash_blake2b_bytes_min
0x691cf000 rrypto_generichash_blake2b_final
0x691cef00 rrypto_generichash_blake2b_init
0x691cef70 rrypto_generichash_blake2b_init_salt_personal
0x691ccc40 rrypto_generichash_blake2b_keybytes
0x691ccc30 rrypto_generichash_blake2b_keybytes_max
0x691ccc20 rrypto_generichash_blake2b_keybytes_min
0x691ccc80 rrypto_generichash_blake2b_keygen
0x691ccc60 rrypto_generichash_blake2b_personalbytes
0x691ceec0 rrypto_generichash_blake2b_salt_personal
0x691ccc50 rrypto_generichash_blake2b_saltbytes
0x691ccc70 rrypto_generichash_blake2b_statebytes
0x691ceff0 rrypto_generichash_blake2b_update
0x691ccb40 rrypto_generichash_bytes
0x691ccb30 rrypto_generichash_bytes_max
0x691ccb20 rrypto_generichash_bytes_min
0x691ccbd0 rrypto_generichash_final
0x691ccbb0 rrypto_generichash_init
0x691ccb70 rrypto_generichash_keybytes
0x691ccb60 rrypto_generichash_keybytes_max
0x691ccb50 rrypto_generichash_keybytes_min
0x691ccbe0 rrypto_generichash_keygen
0x691ccb80 rrypto_generichash_primitive
0x691ccb90 rrypto_generichash_statebytes
0x691ccbc0 rrypto_generichash_update
0x691cf070 rrypto_hash
0x691cf060 rrypto_hash_bytes
0x691cf080 rrypto_hash_primitive
0x691d0040 rrypto_hash_sha256
0x691cf090 rrypto_hash_sha256_bytes
0x691cfed0 rrypto_hash_sha256_final
0x691cfe80 rrypto_hash_sha256_init
0x691cf0a0 rrypto_hash_sha256_statebytes
0x691cfeb0 rrypto_hash_sha256_update
0x691d1260 rrypto_hash_sha512
0x691d00a0 rrypto_hash_sha512_bytes
0x691d1100 rrypto_hash_sha512_final
0x691d1090 rrypto_hash_sha512_init
0x691d00b0 rrypto_hash_sha512_statebytes
0x691d10e0 rrypto_hash_sha512_update
0x691d1300 rrypto_kdf_blake2b_bytes_max
0x691d12f0 rrypto_kdf_blake2b_bytes_min
0x691d1310 rrypto_kdf_blake2b_contextbytes
0x691d1330 rrypto_kdf_blake2b_derive_from_key
0x691d1320 rrypto_kdf_blake2b_keybytes
0x691d13e0 rrypto_kdf_bytes_max
0x691d13d0 rrypto_kdf_bytes_min
0x691d13f0 rrypto_kdf_contextbytes
0x691d1410 rrypto_kdf_derive_from_key
0x691d1400 rrypto_kdf_keybytes
0x691d1420 rrypto_kdf_keygen
0x691d13c0 rrypto_kdf_primitive
0x691d14b0 rrypto_kx_client_session_keys
0x691d1480 rrypto_kx_keypair
0x691d1770 rrypto_kx_primitive
0x691d1730 rrypto_kx_publickeybytes
0x691d1740 rrypto_kx_secretkeybytes
0x691d1430 rrypto_kx_seed_keypair
0x691d1750 rrypto_kx_seedbytes
0x691d15f0 rrypto_kx_server_session_keys
0x691d1760 rrypto_kx_sessionkeybytes
0x691d17b0 rrypto_onetimeauth
0x691d1790 rrypto_onetimeauth_bytes
0x691d17f0 rrypto_onetimeauth_final
0x691d17d0 rrypto_onetimeauth_init
0x691d17a0 rrypto_onetimeauth_keybytes
0x691d1810 rrypto_onetimeauth_keygen
0x691d1820 rrypto_onetimeauth_poly1305
0x691d1870 rrypto_onetimeauth_poly1305_bytes
0x691f8040 rrypto_onetimeauth_poly1305_donna_implementation
0x691d1860 rrypto_onetimeauth_poly1305_final
0x691d1840 rrypto_onetimeauth_poly1305_init
0x691d1880 rrypto_onetimeauth_poly1305_keybytes
0x691d18a0 rrypto_onetimeauth_poly1305_keygen
0x691f8140 rrypto_onetimeauth_poly1305_sse2_implementation
0x691d1890 rrypto_onetimeauth_poly1305_statebytes
0x691d1850 rrypto_onetimeauth_poly1305_update
0x691d1830 rrypto_onetimeauth_poly1305_verify
0x691d1800 rrypto_onetimeauth_primitive
0x691d1780 rrypto_onetimeauth_statebytes
0x691d17e0 rrypto_onetimeauth_update
0x691d17c0 rrypto_onetimeauth_verify
0x691d5a20 rrypto_pwhash
0x691d58e0 rrypto_pwhash_alg_argon2i13
0x691d58f0 rrypto_pwhash_alg_argon2id13
0x691d5900 rrypto_pwhash_alg_default
0x691d5240 rrypto_pwhash_argon2i
0x691d5120 rrypto_pwhash_argon2i_alg_argon2i13
0x691d5140 rrypto_pwhash_argon2i_bytes_max
0x691d5130 rrypto_pwhash_argon2i_bytes_min
0x691d51f0 rrypto_pwhash_argon2i_memlimit_interactive
0x691d51d0 rrypto_pwhash_argon2i_memlimit_max
0x691d51c0 rrypto_pwhash_argon2i_memlimit_min
0x691d5210 rrypto_pwhash_argon2i_memlimit_moderate
0x691d5230 rrypto_pwhash_argon2i_memlimit_sensitive
0x691d51e0 rrypto_pwhash_argon2i_opslimit_interactive
0x691d51b0 rrypto_pwhash_argon2i_opslimit_max
0x691d51a0 rrypto_pwhash_argon2i_opslimit_min
0x691d5200 rrypto_pwhash_argon2i_opslimit_moderate
0x691d5220 rrypto_pwhash_argon2i_opslimit_sensitive
0x691d5160 rrypto_pwhash_argon2i_passwd_max
0x691d5150 rrypto_pwhash_argon2i_passwd_min
0x691d5170 rrypto_pwhash_argon2i_saltbytes
0x691d5350 rrypto_pwhash_argon2i_str
0x691d54f0 rrypto_pwhash_argon2i_str_needs_rehash
0x691d5480 rrypto_pwhash_argon2i_str_verify
0x691d5180 rrypto_pwhash_argon2i_strbytes
0x691d5190 rrypto_pwhash_argon2i_strprefix
0x691d5630 rrypto_pwhash_argon2id
0x691d5510 rrypto_pwhash_argon2id_alg_argon2id13
0x691d5530 rrypto_pwhash_argon2id_bytes_max
0x691d5520 rrypto_pwhash_argon2id_bytes_min
0x691d55e0 rrypto_pwhash_argon2id_memlimit_interactive
0x691d55c0 rrypto_pwhash_argon2id_memlimit_max
0x691d55b0 rrypto_pwhash_argon2id_memlimit_min
0x691d5600 rrypto_pwhash_argon2id_memlimit_moderate
0x691d5620 rrypto_pwhash_argon2id_memlimit_sensitive
0x691d55d0 rrypto_pwhash_argon2id_opslimit_interactive
0x691d55a0 rrypto_pwhash_argon2id_opslimit_max
0x691d5590 rrypto_pwhash_argon2id_opslimit_min
0x691d55f0 rrypto_pwhash_argon2id_opslimit_moderate
0x691d5610 rrypto_pwhash_argon2id_opslimit_sensitive
0x691d5550 rrypto_pwhash_argon2id_passwd_max
0x691d5540 rrypto_pwhash_argon2id_passwd_min
0x691d5560 rrypto_pwhash_argon2id_saltbytes
0x691d5740 rrypto_pwhash_argon2id_str
0x691d5500 rrypto_pwhash_argon2id_str_needs_rehash
0x691d5870 rrypto_pwhash_argon2id_str_verify
0x691d5570 rrypto_pwhash_argon2id_strbytes
0x691d5580 rrypto_pwhash_argon2id_strprefix
0x691d5920 rrypto_pwhash_bytes_max
0x691d5910 rrypto_pwhash_bytes_min
0x691d59d0 rrypto_pwhash_memlimit_interactive
0x691d59b0 rrypto_pwhash_memlimit_max
0x691d59a0 rrypto_pwhash_memlimit_min
0x691d59f0 rrypto_pwhash_memlimit_moderate
0x691d5a10 rrypto_pwhash_memlimit_sensitive
0x691d59c0 rrypto_pwhash_opslimit_interactive
0x691d5990 rrypto_pwhash_opslimit_max
0x691d5980 rrypto_pwhash_opslimit_min
0x691d59e0 rrypto_pwhash_opslimit_moderate
0x691d5a00 rrypto_pwhash_opslimit_sensitive
0x691d5940 rrypto_pwhash_passwd_max
0x691d5930 rrypto_pwhash_passwd_min
0x691d5bb0 rrypto_pwhash_primitive
0x691d5950 rrypto_pwhash_saltbytes
0x691dce80 rrypto_pwhash_scryptsalsa208sha256
0x691dcda0 rrypto_pwhash_scryptsalsa208sha256_bytes_max
0x691dcd90 rrypto_pwhash_scryptsalsa208sha256_bytes_min
0x691dc7d0 rrypto_pwhash_scryptsalsa208sha256_ll
0x691dce50 rrypto_pwhash_scryptsalsa208sha256_memlimit_interactive
0x691dce30 rrypto_pwhash_scryptsalsa208sha256_memlimit_max
0x691dce20 rrypto_pwhash_scryptsalsa208sha256_memlimit_min
0x691dce70 rrypto_pwhash_scryptsalsa208sha256_memlimit_sensitive
0x691dce40 rrypto_pwhash_scryptsalsa208sha256_opslimit_interactive
0x691dce10 rrypto_pwhash_scryptsalsa208sha256_opslimit_max
0x691dce00 rrypto_pwhash_scryptsalsa208sha256_opslimit_min
0x691dce60 rrypto_pwhash_scryptsalsa208sha256_opslimit_sensitive
0x691dcdc0 rrypto_pwhash_scryptsalsa208sha256_passwd_max
0x691dcdb0 rrypto_pwhash_scryptsalsa208sha256_passwd_min
0x691dcdd0 rrypto_pwhash_scryptsalsa208sha256_saltbytes
0x691dcf60 rrypto_pwhash_scryptsalsa208sha256_str
0x691dd190 rrypto_pwhash_scryptsalsa208sha256_str_needs_rehash
0x691dd0a0 rrypto_pwhash_scryptsalsa208sha256_str_verify
0x691dcde0 rrypto_pwhash_scryptsalsa208sha256_strbytes
0x691dcdf0 rrypto_pwhash_scryptsalsa208sha256_strprefix
0x691d5a70 rrypto_pwhash_str
0x691d5a80 rrypto_pwhash_str_alg
0x691d5b30 rrypto_pwhash_str_needs_rehash
0x691d5ab0 rrypto_pwhash_str_verify
0x691d5960 rrypto_pwhash_strbytes
0x691d5970 rrypto_pwhash_strprefix
0x691d5be0 rrypto_scalarmult
0x691d5bd0 rrypto_scalarmult_base
0x691d2340 rrypto_scalarmult_bytes
0x691d6a90 rrypto_scalarmult_curve25519
0x691d6ae0 rrypto_scalarmult_curve25519_base
0x691d6af0 rrypto_scalarmult_curve25519_bytes
0x691f8090 rrypto_scalarmult_curve25519_ref10_implementation
0x691d6b00 rrypto_scalarmult_curve25519_scalarbytes
0x691ddc10 rrypto_scalarmult_ed25519
0x691ddc30 rrypto_scalarmult_ed25519_base
0x691ddc40 rrypto_scalarmult_ed25519_base_noclamp
0x691ddc50 rrypto_scalarmult_ed25519_bytes
0x691ddc20 rrypto_scalarmult_ed25519_noclamp
0x691ddc60 rrypto_scalarmult_ed25519_scalarbytes
0x691d5bc0 rrypto_scalarmult_primitive
0x691ddc70 rrypto_scalarmult_ristretto255
0x691ddd00 rrypto_scalarmult_ristretto255_base
0x691ddd70 rrypto_scalarmult_ristretto255_bytes
0x691ddd80 rrypto_scalarmult_ristretto255_scalarbytes
0x691d5c00 rrypto_scalarmult_scalarbytes
0x691d6ba0 rrypto_secretbox
0x691d6b60 rrypto_secretbox_boxzerobytes
0x691d6bd0 rrypto_secretbox_detached
0x691d6dc0 rrypto_secretbox_easy
0x691d6b30 rrypto_secretbox_keybytes
0x691d6bc0 rrypto_secretbox_keygen
0x691d6b70 rrypto_secretbox_macbytes
0x691d6b80 rrypto_secretbox_messagebytes_max
0x691d6b40 rrypto_secretbox_noncebytes
0x691d6bb0 rrypto_secretbox_open
0x691d6e00 rrypto_secretbox_open_detached
0x691d6fb0 rrypto_secretbox_open_easy
0x691d6b90 rrypto_secretbox_primitive
0x691ddd90 rrypto_secretbox_xchacha20poly1305_detached
0x691ddf80 rrypto_secretbox_xchacha20poly1305_easy
0x691de1b0 rrypto_secretbox_xchacha20poly1305_keybytes
0x691de1d0 rrypto_secretbox_xchacha20poly1305_macbytes
0x691de1e0 rrypto_secretbox_xchacha20poly1305_messagebytes_max
0x691de1c0 rrypto_secretbox_xchacha20poly1305_noncebytes
0x691ddfc0 rrypto_secretbox_xchacha20poly1305_open_detached
0x691de170 rrypto_secretbox_xchacha20poly1305_open_easy
0x691d6ff0 rrypto_secretbox_xsalsa20poly1305
0x691d7130 rrypto_secretbox_xsalsa20poly1305_boxzerobytes
0x691d7100 rrypto_secretbox_xsalsa20poly1305_keybytes
0x691d7160 rrypto_secretbox_xsalsa20poly1305_keygen
0x691d7140 rrypto_secretbox_xsalsa20poly1305_macbytes
0x691d7150 rrypto_secretbox_xsalsa20poly1305_messagebytes_max
0x691d7110 rrypto_secretbox_xsalsa20poly1305_noncebytes
0x691d7050 rrypto_secretbox_xsalsa20poly1305_open
0x691d7120 rrypto_secretbox_xsalsa20poly1305_zerobytes
0x691d6b50 rrypto_secretbox_zerobytes
0x691d7810 rrypto_secretstream_xchacha20poly1305_abytes
0x691d7820 rrypto_secretstream_xchacha20poly1305_headerbytes
0x691d71e0 rrypto_secretstream_xchacha20poly1305_init_pull
0x691d7180 rrypto_secretstream_xchacha20poly1305_init_push
0x691d7830 rrypto_secretstream_xchacha20poly1305_keybytes
0x691d7170 rrypto_secretstream_xchacha20poly1305_keygen
0x691d7840 rrypto_secretstream_xchacha20poly1305_messagebytes_max
0x691d7530 rrypto_secretstream_xchacha20poly1305_pull
0x691d72e0 rrypto_secretstream_xchacha20poly1305_push
0x691d7220 rrypto_secretstream_xchacha20poly1305_rekey
0x691d7800 rrypto_secretstream_xchacha20poly1305_statebytes
0x691d7880 rrypto_secretstream_xchacha20poly1305_tag_final
0x691d7850 rrypto_secretstream_xchacha20poly1305_tag_message
0x691d7860 rrypto_secretstream_xchacha20poly1305_tag_push
0x691d7870 rrypto_secretstream_xchacha20poly1305_tag_rekey
0x691d78c0 rrypto_shorthash
0x691d7890 rrypto_shorthash_bytes
0x691d78a0 rrypto_shorthash_keybytes
0x691d78d0 rrypto_shorthash_keygen
0x691d78b0 rrypto_shorthash_primitive
0x691d7900 rrypto_shorthash_siphash24
0x691d78e0 rrypto_shorthash_siphash24_bytes
0x691d78f0 rrypto_shorthash_siphash24_keybytes
0x691de210 rrypto_shorthash_siphashx24
0x691de1f0 rrypto_shorthash_siphashx24_bytes
0x691de200 rrypto_shorthash_siphashx24_keybytes
0x691d7c10 rrypto_sign
0x691d7b90 rrypto_sign_bytes
0x691d7c30 rrypto_sign_detached
0x691d8880 rrypto_sign_ed25519
0x691d7ca0 rrypto_sign_ed25519_bytes
0x691d8860 rrypto_sign_ed25519_detached
0x691d7e90 rrypto_sign_ed25519_keypair
0x691d7ce0 rrypto_sign_ed25519_messagebytes_max
0x691d8520 rrypto_sign_ed25519_open
0x691d7ee0 rrypto_sign_ed25519_pk_to_curve25519
0x691d7cc0 rrypto_sign_ed25519_publickeybytes
0x691d7cd0 rrypto_sign_ed25519_secretkeybytes
0x691d7e00 rrypto_sign_ed25519_seed_keypair
0x691d7cb0 rrypto_sign_ed25519_seedbytes
0x691d8340 rrypto_sign_ed25519_sk_to_curve25519
0x691d7d10 rrypto_sign_ed25519_sk_to_pk
0x691d7cf0 rrypto_sign_ed25519_sk_to_seed
0x691d8500 rrypto_sign_ed25519_verify_detached
0x691d7d50 rrypto_sign_ed25519ph_final_create
0x691d7db0 rrypto_sign_ed25519ph_final_verify
0x691d7d30 rrypto_sign_ed25519ph_init
0x691d7c90 rrypto_sign_ed25519ph_statebytes
0x691d7d40 rrypto_sign_ed25519ph_update
0x691de5d0 rrypto_sign_edwards25519sha512batch
0x691de560 rrypto_sign_edwards25519sha512batch_keypair
0x691de770 rrypto_sign_edwards25519sha512batch_open
0x691d7c70 rrypto_sign_final_create
0x691d7c80 rrypto_sign_final_verify
0x691d7c50 rrypto_sign_init
0x691d7c00 rrypto_sign_keypair
0x691d7bd0 rrypto_sign_messagebytes_max
0x691d7c20 rrypto_sign_open
0x691d7be0 rrypto_sign_primitive
0x691d7bb0 rrypto_sign_publickeybytes
0x691d7bc0 rrypto_sign_secretkeybytes
0x691d7bf0 rrypto_sign_seed_keypair
0x691d7ba0 rrypto_sign_seedbytes
0x691d7b80 rrypto_sign_statebytes
0x691d7c60 rrypto_sign_update
0x691d7c40 rrypto_sign_verify_detached
0x691d9550 rrypto_stream
0x691d8980 rrypto_stream_chacha20
0x691f81c0 rrypto_stream_chacha20_dolbeau_avx2_implementation
0x691f81a0 rrypto_stream_chacha20_dolbeau_ssse3_implementation
0x691d89f0 rrypto_stream_chacha20_ietf
0x691d89d0 rrypto_stream_chacha20_ietf_ext
0x691d89e0 rrypto_stream_chacha20_ietf_ext_xor_ic
0x691d8950 rrypto_stream_chacha20_ietf_keybytes
0x691d8ab0 rrypto_stream_chacha20_ietf_keygen
0x691d8970 rrypto_stream_chacha20_ietf_messagebytes_max
0x691d8960 rrypto_stream_chacha20_ietf_noncebytes
0x691d8a60 rrypto_stream_chacha20_ietf_xor
0x691d8a20 rrypto_stream_chacha20_ietf_xor_ic
0x691d8920 rrypto_stream_chacha20_keybytes
0x691d8aa0 rrypto_stream_chacha20_keygen
0x691d8940 rrypto_stream_chacha20_messagebytes_max
0x691d8930 rrypto_stream_chacha20_noncebytes
0x691f80c0 rrypto_stream_chacha20_ref_implementation
0x691d89a0 rrypto_stream_chacha20_xor
0x691d8990 rrypto_stream_chacha20_xor_ic
0x691d9510 rrypto_stream_keybytes
0x691d9570 rrypto_stream_keygen
0x691d9530 rrypto_stream_messagebytes_max
0x691d9520 rrypto_stream_noncebytes
0x691d9540 rrypto_stream_primitive
0x691d95b0 rrypto_stream_salsa20
0x691de910 rrypto_stream_salsa2012
0x691debd0 rrypto_stream_salsa2012_keybytes
0x691dec00 rrypto_stream_salsa2012_keygen
0x691debf0 rrypto_stream_salsa2012_messagebytes_max
0x691debe0 rrypto_stream_salsa2012_noncebytes
0x691dea50 rrypto_stream_salsa2012_xor
0x691dec10 rrypto_stream_salsa208
0x691deed0 rrypto_stream_salsa208_keybytes
0x691def00 rrypto_stream_salsa208_keygen
0x691deef0 rrypto_stream_salsa208_messagebytes_max
0x691deee0 rrypto_stream_salsa208_noncebytes
0x691ded50 rrypto_stream_salsa208_xor
0x691d9580 rrypto_stream_salsa20_keybytes
0x691d9600 rrypto_stream_salsa20_keygen
0x691d95a0 rrypto_stream_salsa20_messagebytes_max
0x691d9590 rrypto_stream_salsa20_noncebytes
0x691f80f0 rrypto_stream_salsa20_ref_implementation
0x691f81e0 rrypto_stream_salsa20_xmm6int_avx2_implementation
0x691f8180 rrypto_stream_salsa20_xmm6int_sse2_implementation
0x691d95d0 rrypto_stream_salsa20_xor
0x691d95c0 rrypto_stream_salsa20_xor_ic
0x691def40 rrypto_stream_xchacha20
0x691def10 rrypto_stream_xchacha20_keybytes
0x691df030 rrypto_stream_xchacha20_keygen
0x691def30 rrypto_stream_xchacha20_messagebytes_max
0x691def20 rrypto_stream_xchacha20_noncebytes
0x691df000 rrypto_stream_xchacha20_xor
0x691def90 rrypto_stream_xchacha20_xor_ic
0x691d9560 rrypto_stream_xor
0x691d9660 rrypto_stream_xsalsa20
0x691d9770 rrypto_stream_xsalsa20_keybytes
0x691d97a0 rrypto_stream_xsalsa20_keygen
0x691d9790 rrypto_stream_xsalsa20_messagebytes_max
0x691d9780 rrypto_stream_xsalsa20_noncebytes
0x691d9740 rrypto_stream_xsalsa20_xor
0x691d96c0 rrypto_stream_xsalsa20_xor_ic
0x691d97e0 rrypto_verify_16
0x691d97b0 rrypto_verify_16_bytes
0x691d9860 rrypto_verify_32
0x691d97c0 rrypto_verify_32_bytes
0x691d9920 rrypto_verify_64
0x691d97d0 rrypto_verify_64_bytes
0x691d28a0 recode_string
0x691d2b20 rncode_string
0x691dc930 rscrypt_free_local
0x691dc650 rscrypt_gensalt_r
0x691dc910 rscrypt_init_local
0x691dd600 rscrypt_kdf_nosse
0x691e73c0 rscrypt_kdf_sse
0x691dc430 rscrypt_parse_setting
0x691dc4c0 rscrypt_r
0x691c4ba0 re25519_frombytes
0x691c5450 re25519_invert
0x691c4bf0 re25519_tobytes
0x691d2440 rill_first_blocks
0x691d22a0 rill_memory_blocks
0x691f0030 rill_segment_avx2
0x691f4870 rill_segment_avx512f
0x691d43b0 rill_segment_ref
0x691eb220 rill_segment_ssse3
0x691d2180 rinalize
0x691d2100 rree_instance
0x691dc970 rree_region
0x691c5670 re25519_add
0x691c6860 re25519_double_scalarmult_vartime
0x691cb660 re25519_from_hash
0x691cb5d0 re25519_from_uniform
0x691c5810 re25519_frombytes
0x691c5b40 re25519_frombytes_negate_vartime
0x691c7710 re25519_has_small_order
0x691c76c0 re25519_is_canonical
0x691c7320 re25519_is_on_curve
0x691c7450 re25519_is_on_main_subgroup
0x691c5e50 re25519_p1p1_to_p2
0x691c5ea0 re25519_p1p1_to_p3
0x691c5f00 re25519_p3_to_cached
0x691c5fa0 re25519_p3_tobytes
0x691c6e20 re25519_scalarmult
0x691c7150 re25519_scalarmult_base
0x691c6650 re25519_sub
0x691c67d0 re25519_tobytes
0x691d2550 rnitial_hash
0x691d2570 rnitialize
0x691d9c20 randombytes
0x691d9b50 randombytes_buf
0x691d9bb0 randombytes_buf_deterministic
0x691d9bf0 randombytes_close
0x691d9a30 randombytes_implementation_name
0x691f8200 randombytes_internal_implementation
0x691d9a60 randombytes_random
0x691d9be0 randombytes_seedbytes
0x691d9a20 randombytes_set_implementation
0x691d9a90 randombytes_stir
0x691f8100 randombytes_sysrandom_implementation
0x691d9ae0 randombytes_uniform
0x691cc070 ristretto255_from_hash
0x691cb800 ristretto255_frombytes
0x691cbc10 ristretto255_p3_tobytes
0x691ca400 rc25519_invert
0x691cb560 rc25519_is_canonical
0x691c77f0 rc25519_mul
0x691c8d40 rc25519_muladd
0x691caa30 rc25519_reduce
0x691dac00 rodium_add
0x691daeb0 rodium_allocarray
0x691da200 rodium_base642bin
0x691d9f80 rodium_base64_encoded_len
0x691d9ff0 rodium_bin2base64
0x691d9d10 rodium_bin2hex
0x691daaf0 rodium_compare
0x691da5e0 rodium_crit_enter
0x691da710 rodium_crit_leave
0x691daef0 rodium_free
0x691d9dc0 rodium_hex2bin
0x691dabd0 rodium_increment
0x691da650 rodium_init
0x691dab90 rodium_is_zero
0x691db190 rodium_library_minimal
0x691db170 rodium_library_version_major
0x691db180 rodium_library_version_minor
0x691dad20 rodium_malloc
0x691daa80 rodium_memcmp
0x691daa40 rodium_memzero
0x691da750 rodium_misuse
0x691dacd0 rodium_mlock
0x691dafb0 rodium_mprotect_noaccess
0x691dafc0 rodium_mprotect_readonly
0x691dafd0 rodium_mprotect_readwrite
0x691dacf0 rodium_munlock
0x691dafe0 rodium_pad
0x691da950 rodium_runtime_has_aesni
0x691da910 rodium_runtime_has_avx
0x691da920 rodium_runtime_has_avx2
0x691da930 rodium_runtime_has_avx512f
0x691da8c0 rodium_runtime_has_neon
0x691da940 rodium_runtime_has_pclmul
0x691da960 rodium_runtime_has_rdrand
0x691da8d0 rodium_runtime_has_sse2
0x691da8e0 rodium_runtime_has_sse3
0x691da900 rodium_runtime_has_sse41
0x691da8f0 rodium_runtime_has_ssse3
0x691da7a0 rodium_set_misuse_handler
0x691daa50 rodium_stackzero
0x691dac40 rodium_sub
0x691db0b0 rodium_unpad
0x691db160 rodium_version_string
0x691d5bf0 vcab


Similarity measure (PE file only) - Checking for service failure