ForzaHorizon5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ForzaHorizon5.exe
Size

159.6MB
MD5

4ceca18230dd6ebb4870e49ebce3e9d9
SHA1

6a94b57518a6c3b923c920d569e4b0866a6aef7d
SHA256

56a1bab16c2ea61d3d18b8210cb56868b476a0c8582b3171a6be0898bdca2e74
SHA512

ddfa5d4b79a2da74d247dcbbad542273f60aa4eb3cf381b351d66e33dba7e450afea5534f03866ba5c9ae4e4d3771e85c67b0101db7d6607c49790a1f4fbdf83
SSDEEP

1572864:y2mv9UWEAGC6C0rHAEXo6Xvp4ef2z2DGsEFzjkEc5JS6G2I075T0Jm9I7hKP966a:y2w9UWEAG40rgyZHf2z2JR93QhH/

Score

1^/10

Malware Config

Signatures

Files

ForzaHorizon5.exe
.exe windows x64

367cd5e48001544169db3e3129e27f43

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

12/05/2022, 20:46

Not After

11/05/2023, 20:46

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08/07/2011, 20:59

Not After

08/07/2026, 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

68:6a:3c:86:78:5a:01:dc:b5:0b:84:bb:13:b5:01:e6:4a:1b:64:e7:be:d1:36:9a:c0:f9:24:e5:f7:3d:91:2a
Signer

Actual PE Digest

68:6a:3c:86:78:5a:01:dc:b5:0b:84:bb:13:b5:01:e6:4a:1b:64:e7:be:d1:36:9a:c0:f9:24:e5:f7:3d:91:2a

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

false

Verification

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

02/02/2023, 17:55
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

xinput1_3

ord4
ord2

vcruntime140

__current_exception
__current_exception_context
wcsrchr
__CxxFrameHandler3
strstr
_set_purecall_handler
__std_type_info_hash
_purecall
__std_terminate
__std_exception_copy
wcschr
__RTtypeid
__std_exception_destroy
_CxxThrowException
__C_specific_handler
strrchr
memcpy
memmove
__RTDynamicCast
memset
memcmp
memchr
wcsstr
__std_type_info_compare
__std_type_info_name
strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

terminate
signal
_wassert
raise
strerror_s
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_set_invalid_parameter_handler
_seh_filter_exe
_set_app_type
abort
_beginthreadex
_errno
_configure_wide_argv
_invalid_parameter_noinfo
_initialize_wide_environment
_clearfp
_control87
set_terminate
_get_wide_winmain_command_line
exit
_initterm
_initterm_e
_exit
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit

api-ms-win-crt-string-l1-1-0

strncpy_s
_strdup
strtok_s
_stricmp
isupper
strncmp
isdigit
_wcsupr
iswalpha
isalnum
wcstok_s
isalpha
iswalnum
wcsnlen
_wcslwr_s
wcsncpy
_wcslwr
strlen
_wcsnicmp
_wcsicmp
wcsncmp
toupper
towupper
wcsncpy_s
iswspace
wcspbrk
strnlen
isspace
strcat_s
strcpy_s
iswascii
strcspn
strspn
strcmp
wcscat_s
wcscpy_s
tolower
strncpy
towlower
_strnicmp

api-ms-win-crt-convert-l1-1-0

_strtoui64
_ui64toa_s
wcstombs_s
wcstoul
_itow_s
_strtoui64_l
_i64toa_s
_wcstoui64
mbstowcs
atol
strtoll
strtol
strtod
atof
atoi
strtof
wcstof
strtoul
_itoa_s
wcstoull
_wtoi
wcstol
strtoull

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf
__stdio_common_vswscanf
ftell
fseek
fopen
__p__commode
__acrt_iob_func
fopen_s
__stdio_common_vsnprintf_s
__stdio_common_vswprintf
__stdio_common_vfprintf
fputs
__stdio_common_vswprintf_s
_setmode
_fileno
fgets
_get_stream_buffer_pointers
ferror
__stdio_common_vsprintf_s
feof
_wfopen
fclose
__stdio_common_vsprintf
__stdio_common_vsscanf
_set_fmode
fflush
ungetc
setvbuf
fwrite
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc

api-ms-win-crt-math-l1-1-0

cosf
pow
fmaxf
fmodf
_fdclass
_fdpcomp
_isnan
roundf
log10
tanf
atan2
expf
exp2
exp2f
log2
atanf
__setusermatherr
log2f
round
sinhf
_finite
asinf
tanhf
sinf
powf
_fdsign
logf
_dclass
log10f
_dsign
sin
sqrt
ldexp
fmin
acos
floorf
fminf
modff
cos
log
atan2f
ceilf
acosf
fmod
ceil

api-ms-win-crt-heap-l1-1-0

_set_new_mode
realloc
calloc
_msize
_aligned_malloc
_aligned_free
malloc
free

api-ms-win-crt-utility-l1-1-0

qsort
srand
rand

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s
_unlock_file
_stat64i32
remove
_lock_file
_makepath
_makepath_s
_splitpath
_wremove

api-ms-win-crt-locale-l1-1-0

localeconv
_configthreadlocale
_create_locale

api-ms-win-crt-time-l1-1-0

_difftime64
_time64
_localtime64
_localtime64_s
_gmtime64_s
_gmtime64

concrt140

?_Internal_finish_clear@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXXZ
??1_Concurrent_queue_base_v4@details@Concurrency@@MEAA@XZ
??0_Concurrent_queue_base_v4@details@Concurrency@@IEAA@_K@Z
?_Internal_pop_if_present@_Concurrent_queue_base_v4@details@Concurrency@@IEAA_NPEAX@Z
??1_Concurrent_vector_base_v4@details@Concurrency@@IEAA@XZ
?_Internal_empty@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_NXZ
?_Internal_throw_exception@_Concurrent_queue_base_v4@details@Concurrency@@IEBAXXZ
?_Internal_grow_to_at_least_with_result@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_K_K0P6AXPEAXPEBX0@Z2@Z
?_Internal_throw_exception@_Concurrent_vector_base_v4@details@Concurrency@@IEBAX_K@Z
??1scoped_lock@critical_section@Concurrency@@QEAA@XZ
??0scoped_lock@critical_section@Concurrency@@QEAA@AEAV12@@Z
??1critical_section@Concurrency@@QEAA@XZ
??0critical_section@Concurrency@@QEAA@XZ
?_Internal_swap@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXAEAV123@@Z
?_Internal_move_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEAX@Z
?_Segment_index_of@_Concurrent_vector_base_v4@details@Concurrency@@KA_K_K@Z
?_Internal_reserve@_Concurrent_vector_base_v4@details@Concurrency@@IEAAX_K00@Z
?_Internal_capacity@_Concurrent_vector_base_v4@details@Concurrency@@IEBA_KXZ
?_Internal_push_back@_Concurrent_vector_base_v4@details@Concurrency@@IEAAPEAX_KAEA_K@Z
?_Internal_clear@_Concurrent_vector_base_v4@details@Concurrency@@IEAA_KP6AXPEAX_K@Z@Z
?_Internal_size@_Concurrent_queue_base_v4@details@Concurrency@@IEBA_KXZ
??0_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@AEBV_Concurrent_queue_base_v4@12@@Z
?_Advance@_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAAXXZ
??1_Concurrent_queue_iterator_base_v4@details@Concurrency@@IEAA@XZ
?_Internal_push@_Concurrent_queue_base_v4@details@Concurrency@@IEAAXPEBX@Z

d3d12

ord101
D3D12SerializeVersionedRootSignature

dxgi

CreateDXGIFactory2
CreateDXGIFactory1

msvcp140

?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAGXZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QEAA_N_N@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$ctype@_W@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$collate@_W@std@@2V0locale@2@A
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Cnd_register_at_thread_exit
_Cnd_unregister_at_thread_exit
?_Syserror_map@std@@YAPEBDH@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Throw_future_error@std@@YAXAEBVerror_code@1@@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
_Lock_shared_ptr_spin_lock
_Unlock_shared_ptr_spin_lock
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Random_device@std@@YAIXZ
?tellp@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Wcsxfrm
_Wcscoll
_Strxfrm
_Strcoll
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
_Thrd_hardware_concurrency
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_broadcast
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
_Xtime_get_ticks
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Query_perf_frequency
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?tolower@?$ctype@_W@std@@QEBAPEB_WPEA_WPEB_W@Z
?tolower@?$ctype@_W@std@@QEBA_W_W@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?is@?$ctype@_W@std@@QEBA_NF_W@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?_Winerror_map@std@@YAHH@Z
?classic@locale@std@@SAAEBV12@XZ
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@G@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
_Mtx_trylock
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?swap@?$basic_ostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Thrd_join
_Thrd_id
_Mtx_current_owns
_Cnd_timedwait
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?toupper@?$ctype@_W@std@@QEBA_W_W@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ

advapi32

RegCloseKey
CryptExportKey
CryptDecrypt
RegEnumKeyExW
RegOpenKeyExW
ConvertSidToStringSidW
LookupAccountNameW
CryptSignHashW
CryptEnumProvidersW
RegCreateKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegNotifyChangeKeyValue
SystemFunction036
CryptGetProvParam
RegGetValueW
RegOpenKeyExA
RegGetValueA
CryptSetHashParam
CryptDestroyKey
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
LookupAccountSidW
IsValidSid
GetTokenInformation
OpenProcessToken
RegQueryValueExW
CredFree
CredDeleteW
CredEnumerateW
CredWriteW
CryptGetUserKey

kernel32

CreateFileW
GetSystemDirectoryW
VerifyVersionInfoW
GetTimeFormatEx
GetDateFormatEx
GetUserDefaultLocaleName
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
DisassociateCurrentThreadFromCallback
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
WaitForMultipleObjectsEx
CreateDirectoryA
IsProcessorFeaturePresent
GetLargePageMinimum
GetProcessHeap
HeapFree
HeapAlloc
LocalFree
LocalAlloc
LoadLibraryExW
WerRegisterFile
GetLocalTime
RtlCaptureStackBackTrace
GetUserDefaultUILanguage
GetUserGeoID
LCIDToLocaleName
LocaleNameToLCID
VirtualFree
VirtualAlloc
ConvertThreadToFiber
CreateFiber
ConvertFiberToThread
DeleteFiber
SwitchToFiber
GetSystemCpuSetInformation
TryAcquireSRWLockShared
WideCharToMultiByte
MultiByteToWideChar
GetFileInformationByHandleEx
FileTimeToSystemTime
MoveFileExW
CopyFileW
GetOverlappedResultEx
GetOverlappedResult
SetLastError
CreateFile2
GetTempPathW
WriteFile
SetFilePointerEx
SetFilePointer
SetFileAttributesW
GlobalFree
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
SetWaitableTimer
CreateWaitableTimerW
QueueUserAPC
TerminateThread
TlsAlloc
TlsGetValue
SetEndOfFile
TlsSetValue
ReadFile
InitOnceComplete
InitOnceBeginInitialize
GetStartupInfoW
UnhandledExceptionFilter
RtlCaptureContext
InitializeSListHead
TryAcquireSRWLockExclusive
SetFileTime
SetUnhandledExceptionFilter
CloseThreadpoolIo
WaitForThreadpoolIoCallbacks
CancelThreadpoolIo
StartThreadpoolIo
CreateThreadpoolIo
FlsGetValue
FlsAlloc
SleepEx
ReleaseMutex
GetSystemInfo
K32GetProcessMemoryInfo
GetPhysicallyInstalledSystemMemory
TlsFree
FormatMessageA
GetVersionExW
GetSystemDefaultLocaleName
GetStdHandle
GetFileType
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetFileInformationByHandle
OpenProcess
K32EnumProcesses
K32EnumProcessModules
K32GetModuleFileNameExW
InitializeCriticalSectionEx
CreateSemaphoreExW
SetThreadDescription
SetThreadAffinityMask
SetThreadIdealProcessor
GetProcessAffinityMask
K32GetModuleBaseNameA
GetFullPathNameW
GetFileTime
GetFileSizeEx
GetFileSize
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceExW
FlushFileBuffers
FindNextFileW
FindNextFileA
FindFirstFileW
FindClose
DeleteFileW
DeleteFileA
CreateFileA
CreateDirectoryW
CreateSemaphoreA
VirtualQuery
VirtualProtect
SetThreadSelectedCpuSets
GetThreadContext
GetThreadId
ResumeThread
SuspendThread
GetExitCodeThread
SetThreadPriorityBoost
OpenThread
CreateThread
CreateEventA
CreateMutexA
InitializeCriticalSectionAndSpinCount
DuplicateHandle
RtlVirtualUnwind
RtlLookupFunctionEntry
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetComputerNameA
GetModuleHandleW
GetModuleHandleA
GetSystemTime
CreateProcessA
TerminateProcess
ExitProcess
GetCurrentProcessId
CreateMutexW
FileTimeToLocalFileTime
CompareFileTime
GetEnvironmentVariableW
K32GetModuleInformation
GetModuleHandleExW
GetCurrentProcess
FormatMessageW
GetLogicalProcessorInformation
GetThreadTimes
OutputDebugStringA
LoadLibraryW
GetProcAddress
GetThreadPriority
SetThreadPriority
CreateEventW
GetCurrentThread
GetLastError
IsDebuggerPresent
GetCurrentThreadId
WaitForSingleObjectEx
GetModuleFileNameW
ResetEvent
GetCommandLineW
DeleteCriticalSection
InitializeCriticalSection
CloseHandle
SetCurrentDirectoryA
SwitchToThread
GlobalMemoryStatus
AcquireSRWLockShared
ReleaseSRWLockShared
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetModuleFileNameA
ReleaseSemaphore
InitializeSRWLock
OutputDebugStringW
Sleep
WaitForSingleObject
SetEvent
LeaveCriticalSection
EnterCriticalSection
SystemTimeToFileTime
GetSystemTimeAsFileTime
GetTickCount64
WaitForMultipleObjects
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileAttributesExW
GlobalMemoryStatusEx
VerSetConditionMask
lstrlenW
InterlockedPushEntrySList
RemoveDirectoryW
FreeLibrary

user32

SetRect
ClientToScreen
ShowCursor
AdjustWindowRect
GetWindowRect
GetClientRect
SetWindowTextW
EndPaint
BeginPaint
SetForegroundWindow
UpdateWindow
EnableMenuItem
GetSystemMenu
GetSystemMetrics
GetKeyNameTextW
MapVirtualKeyW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterWindowMessageW
EnumDisplaySettingsW
MonitorFromPoint
GetDoubleClickTime
SetWindowLongPtrW
GetProcessWindowStation
GetUserObjectInformationW
LoadCursorW
SetWindowLongW
GetWindowLongPtrW
GetWindowTextW
GetParent
MsgWaitForMultipleObjectsEx
GetAsyncKeyState
IsZoomed
IsIconic
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
PostQuitMessage
DefWindowProcW
PostMessageW
MessageBoxIndirectA
GetMonitorInfoW
GetActiveWindow
GetKeyState
SetCapture
ReleaseCapture
SetCursor
SystemParametersInfoW
SendMessageW
GetClassInfoExW
ShowWindowAsync
AdjustWindowRectExForDpi
CopyRect
LoadImageW
MonitorFromRect
MessageBoxW
EnumWindows
GetWindowThreadProcessId
GetClassLongPtrW
GetDpiForWindow
MonitorFromWindow

ws2_32

ntohl
WSAStringToAddressW
getsockname
WSASetLastError
getpeername
getsockopt
htonl
WSARecv
WSASend
WSAAddressToStringW
inet_pton
closesocket
connect
htons
inet_addr
recv
send
socket
gethostbyaddr
gethostbyname
__WSAFDIsSet
accept
bind
ioctlsocket
listen
ntohs
sendto
setsockopt
shutdown
WSAStartup
WSACleanup
WSAGetLastError
WSAIoctl
WSARecvFrom
WSASendTo
WSASocketW
getaddrinfo
freeaddrinfo
getnameinfo
select

mfplat

MFStartup
MFShutdown

api-ms-win-core-version-l1-1-0

GetFileVersionInfoSizeExW
GetFileVersionInfoExW
VerQueryValueW

api-ms-win-core-com-l1-1-0

CoUninitialize
CoCreateInstanceEx
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoCreateGuid
CoIncrementMTAUsage
CoCreateFreeThreadedMarshaler

bcrypt

BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptSetProperty
BCryptFinalizeKeyPair
BCryptSignHash
BCryptGenerateSymmetricKey
BCryptEncrypt
BCryptDecrypt
BCryptDestroyKey
BCryptCreateHash
BCryptGenRandom
BCryptDestroyHash
BCryptHashData
BCryptImportKeyPair
BCryptCloseAlgorithmProvider
BCryptGenerateKeyPair
BCryptExportKey
BCryptFinishHash

api-ms-win-core-memory-l1-1-3

VirtualAllocFromApp

api-ms-win-core-winrt-string-l1-1-0

WindowsPromoteStringBuffer
WindowsDeleteStringBuffer
WindowsPreallocateStringBuffer
WindowsGetStringRawBuffer
WindowsDeleteString
WindowsCreateString
WindowsCreateStringReference

api-ms-win-gaming-tcui-l1-1-0

ShowPlayerPickerUI
ShowProfileCardUI
ProcessPendingGameUI

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

amd_ags_x64

agsInitialize
agsDriverExtensionsDX12_CreateDevice

winhttp

WinHttpOpen
WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpConnect
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpQueryOption
WinHttpSetOption
WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest

crypt32

CertGetCertificateChain
CertEnumCertificatesInStore
CertCreateCertificateContext
CertFindChainInStore
CertFreeCertificateChain
CertFreeCertificateContext
CertOpenStore
CertOpenSystemStoreW
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertCloseStore
CertFindCertificateInStore

shlwapi

PathFileExistsA

comctl32

ord345

bink2w64

BinkRegisterFrameBuffers
BinkOpen
BinkGetFrameBuffersInfo
BinkUtilMalloc
BinkNextFrame
BinkWait
BinkClose
BinkPause
BinkGetPlatformInfo
BinkUtilFree
BinkShouldSkip
BinkSetOSFileCallbacks
BinkSetSpeakerVolumes
BinkStartAsyncThread
BinkDoFrameAsync
BinkDoFrameAsyncWait
BinkRequestStopAsyncThread
BinkWaitStopAsyncThread
BinkGetRealtime
BinkSetSoundTrack
BinkSetSoundSystem2
BinkOpenXAudio2
BinkSetWillLoop

gdi32

SelectObject
GetStockObject
DeleteObject
CreateCompatibleDC
GetObjectW
BitBlt

shell32

ShellExecuteW
ShellExecuteExW
SHGetKnownFolderPath

ole32

CoWaitForMultipleHandles
PropVariantClear
StringFromGUID2
CoGetApartmentType

partywin

ord101
ord59
ord141
ord90
ord62
ord60
ord93
ord61
ord91
ord109
ord108
ord65
ord110
ord112
ord131
ord125
ord111
ord117
ord53
ord45
ord47
ord42
ord24
ord63
ord136
ord144
ord146
ord145
ord49
ord28
ord41
ord56
ord25
ord32
ord50
ord46
ord55
ord57
ord58

partyxboxlive

PartyXblChatUserGetXboxUserId
PartyXblChatUserSetCustomContext
PartyXblLocalChatUserGetAccessibilitySettings
PartyXblLocalChatUserGetRequiredChatPermissionInfo
PartyXblCleanup
PartyXblGetEntityIdsFromXboxLiveUserIds
PartyXblLoginToPlayFab
PartyXblGetChatUsers
PartyXblDestroyChatUser
PartyXblCreateRemoteChatUser
PartyXblCreateLocalChatUser
PartyXblCompleteGetTokenAndSignatureRequest
PartyXblFinishProcessingStateChanges
PartyXblStartProcessingStateChanges
PartyXblInitialize

steam_api64

SteamAPI_UnregisterCallback
SteamInternal_ContextInit
SteamAPI_RestartAppIfNecessary
SteamAPI_Init
SteamInternal_CreateInterface
SteamAPI_ReleaseCurrentThreadMemory
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamAPI_GetHSteamUser
SteamInternal_FindOrCreateUserInterface
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_Shutdown

webview2loader

CompareBrowserVersions
GetAvailableCoreWebView2BrowserVersionString
CreateCoreWebView2EnvironmentWithOptions

api-ms-win-crt-environment-l1-1-0

getenv

winmm

timeGetTime

api-ms-win-core-version-l1-1-1

GetFileVersionInfoW

version

GetFileVersionInfoSizeW

api-ms-win-core-winrt-error-l1-1-0

GetRestrictedErrorInfo
SetRestrictedErrorInfo

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

oleaut32

SysFreeString
SysStringLen

Exports

Exports

CentreGainGetDSPDescription
CompressorGetDSPDescription
D3D12SDKPath
D3D12SDKVersion
FmodGainGetDSPDescription
SaturatorGetDSPDescription
SurroundGainGetDSPDescription
Turn10GainGetDSPDescription
ffxFsr2ContextCreate
ffxFsr2ContextDestroy
ffxFsr2ContextDispatch
ffxFsr2ContextGenerateReactiveMask
ffxFsr2GetInterfaceDX12
ffxFsr2GetJitterOffset
ffxFsr2GetJitterPhaseCount
ffxFsr2GetRenderResolutionFromQualityMode
ffxFsr2GetScratchMemorySizeDX12
ffxFsr2GetUpscaleRatioFromQualityMode
ffxFsr2ResourceIsNull
ffxGetCommandListDX12
ffxGetDX12ResourcePtr
ffxGetDeviceDX12
ffxGetResourceDX12
tm_api_close_device
tm_api_exit
tm_api_force_config_effect
tm_api_force_set_effect_state
tm_api_get_device_count
tm_api_get_device_info
tm_api_get_device_status
tm_api_get_input_state
tm_api_get_properties
tm_api_init
tm_api_open_device
tm_api_read_input_states
tm_api_set_properties
tm_api_update
tm_sdk_installer_begin
tm_sdk_installer_check_access
tm_sdk_installer_end
tm_sdk_installer_get_error_str
tm_sdk_installer_get_pid_info
tm_sdk_installer_query_timeout
tm_sdk_installer_register_changes
tm_sdk_installer_unregister_changes

Sections

.text
Size: 97.9MB - Virtual size: 97.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38.3MB - Virtual size: 38.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16.0MB - Virtual size: 19.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5.2MB - Virtual size: 5.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.detourd
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

367cd5e48001544169db3e3129e27f43

Code Sign

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:ccCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

68:6a:3c:86:78:5a:01:dc:b5:0b:84:bb:13:b5:01:e6:4a:1b:64:e7:be:d1:36:9a:c0:f9:24:e5:f7:3d:91:2aSigner

Signature Validations

Verification

02/02/2023, 17:55 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

xinput1_3

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

concrt140

d3d12

dxgi

msvcp140

advapi32

kernel32

user32

ws2_32

mfplat

api-ms-win-core-version-l1-1-0

api-ms-win-core-com-l1-1-0

bcrypt

api-ms-win-core-memory-l1-1-3

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-gaming-tcui-l1-1-0

api-ms-win-shcore-scaling-l1-1-1

amd_ags_x64

winhttp

crypt32

shlwapi

comctl32

bink2w64

gdi32

shell32

ole32

partywin

partyxboxlive

steam_api64

webview2loader

api-ms-win-crt-environment-l1-1-0

winmm

api-ms-win-core-version-l1-1-1

version

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-error-l1-1-1

oleaut32

Exports

Exports

Sections

.text Size: 97.9MB - Virtual size: 97.9MB

.rdata Size: 38.3MB - Virtual size: 38.3MB

.data Size: 16.0MB - Virtual size: 19.9MB

.pdata Size: 5.2MB - Virtual size: 5.2MB

.detourc Size: 8KB - Virtual size: 8KB

.detourd Size: 512B - Virtual size: 24B

_RDATA Size: 69KB - Virtual size: 69KB

.rsrc Size: 6KB - Virtual size: 6KB

33:00:00:02:cc:8e:b5:96:a6:bd:d1:c9:4e:00:00:00:00:02:cc
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

68:6a:3c:86:78:5a:01:dc:b5:0b:84:bb:13:b5:01:e6:4a:1b:64:e7:be:d1:36:9a:c0:f9:24:e5:f7:3d:91:2a
Signer

02/02/2023, 17:55
Valid: false

.text
Size: 97.9MB - Virtual size: 97.9MB

.rdata
Size: 38.3MB - Virtual size: 38.3MB

.data
Size: 16.0MB - Virtual size: 19.9MB

.pdata
Size: 5.2MB - Virtual size: 5.2MB

.detourc
Size: 8KB - Virtual size: 8KB

.detourd
Size: 512B - Virtual size: 24B

_RDATA
Size: 69KB - Virtual size: 69KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 2.1MB - Virtual size: 2.1MB