synapse_cracked_v0[.]3[.]rar

Resubmissions

11/03/2023, 22:40

230311-2lwq7sde4z 3

11/03/2023, 22:31

230311-2fs35abe79 8

11/03/2023, 22:12

230311-14k7radc9w 8

11/03/2023, 22:06

230311-11j6aadc8y 7

Sharing

Copy URL Twitter E-mail

General

Target

synapse_cracked_v0.3.rar
Size

142.1MB
MD5

640b860139f86307bf26f10647d9691d
SHA1

ca69e87f298a740e72ff0640275026f6b3eb6c92
SHA256

02314161d9a6ff1d1a5a24f2a7d4f3158320a27bcedad98a94d2a41cac2e8994
SHA512

5306f0c40f912eabdb3dd73ed83614837ced9b3c4c5c2cfc48bf5c5eb388a922d4aa8b8b946ae60517080ebc98ceb650e7913b1ee5d7bcebc48768d56993c6d7
SSDEEP

3145728:3YWNe5IqG4ITAEEAx06BwPQy5veB4vCNLxKiN31CqzbqJs3M/CUiRxaE:ICescEEy5BwoyTvCNjTCowsuCjx7

Score

3^/10

pyinstaller

Malware Config

Signatures

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/SynapseX Cracked.exe	pyinstaller

Files

synapse_cracked_v0.3.rar
.rar
AccessibleHandler.dll
.dll regsvr32 windows x64

115947cf0e8a5cfd3f0a0e8fb660e681

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ole32

CoCreateGuid
CoCreateInstance
CoGetApartmentType
CoGetClassObject
CoGetStdMarshalEx
CoInitializeEx
CoInitializeSecurity
CoRegisterClassObject
CoRegisterPSClsid
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CreateStreamOnHGlobal
StringFromGUID2

oleaut32

BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
CreateStdDispatch
LoadTypeLibEx
SysAllocStringLen
SysFreeString
SysStringLen
VARIANT_UserFree
VARIANT_UserMarshal
VARIANT_UserSize
VARIANT_UserUnmarshal
VariantClear
VariantCopy

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
MesDecodeBufferHandleCreate
MesEncodeDynBufferHandleCreate
MesHandleFree
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrMesTypeAlignSize2
NdrMesTypeDecode2
NdrMesTypeEncode2
NdrMesTypeFree2
NdrOleAllocate
NdrOleFree

oleacc

ObjectFromLresult

user32

GetClassNameW
GetParent
NotifyWinEvent
SendMessageW

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_set_new_mode
calloc
free
malloc
realloc

api-ms-win-crt-private-l1-1-0

memchr
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
_assert
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_exit
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort

api-ms-win-crt-string-l1-1-0

isxdigit
memset
strcmp
strlen
strncmp
wcscat_s
wcscmp
wcscpy_s

kernel32

AcquireSRWLockExclusive
ActivateActCtx
AddRefActCtx
CloseHandle
CreateActCtxW
DeactivateActCtx
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
FlsAlloc
FlsGetValue
FlsSetValue
FreeLibrary
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetThreadId
GetTickCount
GlobalAlloc
GlobalFree
InitOnceExecuteOnce
InitializeCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseActCtx
ReleaseSRWLockExclusive
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
Sleep
SleepConditionVariableSRW
SwitchToThread
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VerSetConditionMask
VerifyVersionInfoW
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable

shlwapi

PathAppendW
PathRemoveFileSpecW
SHCreateMemStream

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfwprintf
__stdio_common_vsprintf
_close
_open
_write
fflush
fputc
fputs
fwrite

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_tzset

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
GetProxyDllInfo
RegisterMsix

Sections

.text
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapseX Cracked.exe
.exe windows x64

a6cec5b1a631d592d80900ab7e1de8df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW

comctl32

ord380

kernel32

IsValidCodePage
GetStringTypeW
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetCurrentDirectoryW
GetACP
GetOEMCP
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
GetCPInfo
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
SetConsoleCtrlHandler
FindClose
FindFirstFileExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
WriteConsoleW
SetEndOfFile
SetEnvironmentVariableW
RtlUnwindEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
RaiseException
RtlPcToFileHeader
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindNextFileW
SetStdHandle
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW

advapi32

OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW

gdi32

SelectObject
DeleteObject
CreateFontIndirectW

Sections

.text
Size: 162KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
application.ini
css/app.css
css/bootstrap/bootstrap.min.css
css/bootstrap/bootstrap.min.css.map
css/log/login.css
css/log/mainwindow.css
css/log/settings.css
css/open-iconic/FONT-LICENSE
css/open-iconic/ICON-LICENSE
css/open-iconic/README.md
css/open-iconic/font/css/open-iconic-bootstrap.min.css
css/open-iconic/font/fonts/open-iconic.eot
css/open-iconic/font/fonts/open-iconic.otf
css/open-iconic/font/fonts/open-iconic.svg
.xml
css/open-iconic/font/fonts/open-iconic.ttf
css/open-iconic/font/fonts/open-iconic.woff
lang/Estonian.ini
lang/albanian.ini
lang/arabic.ini
lang/armenian.ini
lang/azerbaijani.ini
lang/bengali.ini
lang/bulgarian.ini
lang/czech.ini
lang/danish.ini
lang/dutch.ini
lang/english.ini
lang/finnish.ini
lang/french.ini
lang/german.ini
lang/gujarati.ini
lang/hebrew.ini
lang/hellenic.ini
lang/hindi.ini
lang/hrvatski.ini
lang/hungarian.ini
lang/indonesian.ini
lang/italiano.ini
lang/japanese.ini
lang/korean.ini
lang/kurdish.ini
lang/macedonian.ini
lang/norwegian.ini
lang/persian.ini
lang/polish.ini
lang/portuguese.ini
lang/portuguese_standard.ini
lang/portuguesebrazil.ini
lang/romanian.ini
lang/russian.ini
lang/serbian.ini
lang/serbianLatin.ini
lang/simplifiedchinese.ini
lang/slovak.ini
lang/slovenian.ini
lang/spanish.ini
lang/swedish.ini
lang/thai.ini
lang/traditionalchinese.ini
lang/turkish.ini
lang/ukrainian.ini
lang/vietnamese.ini
readme.txt
settings.ini
xul.dll
.dll windows x64

060a273877020f72a54ed87d23788ef3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

nss3

CERT_AddCertToListHead
CERT_AddCertToListTail
CERT_AsciiToName
CERT_ChangeCertTrust
CERT_CompareName
CERT_CreateCertificate
CERT_CreateCertificateRequest
CERT_CreateSubjectCertList
CERT_CreateValidity
CERT_DecodeAuthInfoAccessExtension
CERT_DecodeCertPackage
CERT_DecodeTrustString
CERT_DerNameToAscii
CERT_DestroyCertList
CERT_DestroyCertificate
CERT_DestroyCertificateList
CERT_DestroyCertificateRequest
CERT_DestroyName
CERT_DestroyValidity
CERT_DupCertificate
CERT_ExtractPublicKey
CERT_FilterCertListByUsage
CERT_FilterCertListForUserCerts
CERT_FindCertByIssuerAndSN
CERT_FindCertByNickname
CERT_FindKeyUsageExtension
CERT_GetCertIsPerm
CERT_GetCertTrust
CERT_GetCertificateDer
CERT_GetCommonName
CERT_GetCountryName
CERT_GetDefaultCertDB
CERT_GetFirstEmailAddress
CERT_GetImposedNameConstraints
CERT_GetLocalityName
CERT_GetNextEmailAddress
CERT_GetNextGeneralName
CERT_GetOrgName
CERT_GetOrgUnitName
CERT_GetStateName
CERT_Hexify
CERT_IsCACert
CERT_MakeCANickname
CERT_NewCertList
CERT_NewTempCertificate
CERT_RemoveCertListNode
DER_DecodeTimeChoice
DSAU_DecodeDerSigToLen
DSAU_EncodeDerSigWithLen
HASH_Begin
HASH_Create
HASH_Destroy
HASH_End
HASH_GetType
HASH_ResultLenByOidTag
HASH_Update
NSSSMIME_GetVersion
NSSSSL_GetVersion
NSSUTIL_GetVersion
NSS_CMSContentInfo_GetContent
NSS_CMSContentInfo_GetContentTypeTag
NSS_CMSContentInfo_SetContent_SignedData
NSS_CMSEncoder_Finish
NSS_CMSEncoder_Start
NSS_CMSMessage_ContentLevel
NSS_CMSMessage_Create
NSS_CMSMessage_CreateFromDER
NSS_CMSMessage_Destroy
NSS_CMSMessage_GetContentInfo
NSS_CMSMessage_IsSigned
NSS_CMSSignedData_AddCertificate
NSS_CMSSignedData_CreateCertsOnly
NSS_CMSSignedData_Destroy
NSS_CMSSignedData_GetSignerInfo
NSS_CMSSignedData_SignerInfoCount
NSS_CMSSignerInfo_GetSigningCertificate
NSS_CMSSignerInfo_Verify
NSS_FindCertKEAType
NSS_GetAlgorithmPolicy
NSS_GetVersion
NSS_Get_CERT_CertificateTemplate
NSS_Get_CERT_SubjectPublicKeyInfoTemplate
NSS_Get_SECOID_AlgorithmIDTemplate
NSS_InitContext
NSS_Initialize
NSS_IsInitialized
NSS_NoDB_Init
NSS_OptionSet
NSS_SecureMemcmp
NSS_SetAlgorithmPolicy
NSS_SetDomesticPolicy
NSS_Shutdown
NSS_ShutdownContext
NSS_VersionCheck
PK11SDR_Decrypt
PK11SDR_Encrypt
PK11_AEADOp
PK11_Authenticate
PK11_ChangePW
PK11_CheckUserPassword
PK11_CipherOp
PK11_ConvertSessionSymKeyToTokenSymKey
PK11_CreateContextBySymKey
PK11_CreateDigestContext
PK11_CreateGenericObject
PK11_CreatePBEV2AlgorithmID
PK11_Decrypt
PK11_DeleteTokenCertAndKey
PK11_DeleteTokenSymKey
PK11_Derive
PK11_DeriveWithFlags
PK11_DestroyContext
PK11_DestroyGenericObject
PK11_DestroyObject
PK11_DigestBegin
PK11_DigestFinal
PK11_DigestOp
PK11_DoesMechanism
PK11_Encrypt
PK11_ExportDERPrivateKeyInfo
PK11_ExtractKeyValue
PK11_FindCertFromNickname
PK11_FindEncodedCertInSlot
PK11_FindKeyByAnyCert
PK11_FindKeyByDERCert
PK11_FindKeyByKeyID
PK11_FindRawCertsWithSubject
PK11_FreeSlot
PK11_FreeSymKey
PK11_GenerateKeyPair
PK11_GenerateRandom
PK11_GenerateRandomOnSlot
PK11_GetBestSlot
PK11_GetBlockSize
PK11_GetCertsMatchingPrivateKey
PK11_GetInternalKeySlot
PK11_GetInternalSlot
PK11_GetKeyData
PK11_GetMechanism
PK11_GetNextSymKey
PK11_GetPrivateModulusLen
PK11_GetSlotInfo
PK11_GetSlotName
PK11_GetSlotSeries
PK11_GetTokenInfo
PK11_GetTokenName
PK11_HPKE_Deserialize
PK11_HPKE_DestroyContext
PK11_HPKE_ExportSecret
PK11_HPKE_GetEncapPubKey
PK11_HPKE_NewContext
PK11_HPKE_Seal
PK11_HPKE_SetupS
PK11_HPKE_ValidateParameters
PK11_HasAttributeSet
PK11_HasRootCerts
PK11_HashBuf
PK11_ImportCert
PK11_ImportCertForKey
PK11_ImportDERPrivateKeyInfoAndReturnKey
PK11_ImportDataKey
PK11_ImportPublicKey
PK11_ImportSymKey
PK11_InitPin
PK11_IsDisabled
PK11_IsFIPS
PK11_IsFriendly
PK11_IsInternal
PK11_IsInternalKeySlot
PK11_IsLoggedIn
PK11_IsPresent
PK11_IsReadOnly
PK11_KeyForCertExists
PK11_KeyGen
PK11_ListCerts
PK11_ListCertsInSlot
PK11_ListFixedKeysInSlot
PK11_ListPrivKeysInSlot
PK11_Logout
PK11_LogoutAll
PK11_MapSignKeyType
PK11_NeedLogin
PK11_NeedUserInit
PK11_PBEKeyGen
PK11_ParamFromIV
PK11_PrivDecrypt
PK11_ProtectedAuthenticationPath
PK11_PubDeriveWithKDF
PK11_PubEncrypt
PK11_ReadRawAttribute
PK11_ReferenceSlot
PK11_ReferenceSymKey
PK11_ResetToken
PK11_SetPasswordFunc
PK11_SetSymKeyNickname
PK11_SignWithMechanism
PK11_SignatureLen
PK11_TokenKeyGenWithFlags
PK11_UnwrapPrivKey
PK11_UnwrapSymKey
PK11_VerifyWithMechanism
PK11_WrapPrivKey
PK11_WrapSymKey
PL_Base64Decode
PL_Base64Encode
PL_strcasecmp
PL_strcasestr
PL_strcmp
PL_strncasecmp
PL_strncpyz
PORT_ArenaAlloc
PORT_ArenaZAlloc
PORT_Free
PORT_FreeArena
PORT_GetError
PORT_NewArena
PORT_SetUCS2_ASCIIConversionFunction
PORT_UCS2_UTF8Conversion
PR_Accept
PR_Available
PR_Available64
PR_Bind
PR_CallOnce
PR_ChangeFileDescNativeHandle
PR_Close
PR_CloseFileMap
PR_Connect
PR_ConnectContinue
PR_ConvertIPv4AddrToIPv6
PR_CreateFileMap
PR_CreateIOLayerStub
PR_CreatePipe
PR_CreateThread
PR_Delete
PR_DestroyCondVar
PR_DestroyLock
PR_DestroyMonitor
PR_EnterMonitor
PR_EnumerateAddrInfo
PR_ErrorInstallTable
PR_ErrorToName
PR_ErrorToString
PR_ExitMonitor
PR_ExplodeTime
PR_FileDesc2NativeHandle
PR_FindFunctionSymbol
PR_FindSymbol
PR_FormatTime
PR_FormatTimeUSEnglish
PR_Free
PR_FreeAddrInfo
PR_GMTParameters
PR_GetAddrInfoByName
PR_GetCanonNameFromAddrInfo
PR_GetCurrentThread
PR_GetDefaultIOMethods
PR_GetDescType
PR_GetDirectorySeparator
PR_GetEnv
PR_GetEnvSecure
PR_GetError
PR_GetErrorText
PR_GetErrorTextLength
PR_GetFileInfo64
PR_GetIdentitiesLayer
PR_GetLayersIdentity
PR_GetLibraryFilePathname
PR_GetMemMapAlignment
PR_GetNumberOfProcessors
PR_GetOSError
PR_GetOpenFileInfo
PR_GetOpenFileInfo64
PR_GetPageShift
PR_GetPageSize
PR_GetPeerName
PR_GetPhysicalMemorySize
PR_GetSockName
PR_GetSocketOption
PR_GetSpecialFD
PR_GetSystemInfo
PR_GetThreadID
PR_GetThreadName
PR_GetThreadPrivate
PR_GetUniqueIdentity
PR_GetVersion
PR_ImplodeTime
PR_ImportFile
PR_InitializeNetAddr
PR_IntervalNow
PR_IntervalToMicroseconds
PR_IntervalToMilliseconds
PR_IntervalToSeconds
PR_IsNetAddrType
PR_JoinThread
PR_Listen
PR_LoadLibraryWithFlags
PR_LocalTimeParameters
PR_Lock
PR_LogPrint
PR_MemMap
PR_MemUnmap
PR_MicrosecondsToInterval
PR_MillisecondsToInterval
PR_NetAddrToString
PR_NewCondVar
PR_NewLock
PR_NewMonitor
PR_NewTCPSocketPair
PR_NewThreadPrivateIndex
PR_NormalizeTime
PR_Notify
PR_NotifyAll
PR_NotifyCondVar
PR_Now
PR_Open
PR_OpenTCPSocket
PR_OpenUDPSocket
PR_ParseTimeString
PR_Poll
PR_PopIOLayer
PR_PushIOLayer
PR_Read
PR_Recv
PR_RecvFrom
PR_Rename
PR_SecondsToInterval
PR_Seek
PR_Seek64
PR_SendTo
PR_SetCurrentThreadName
PR_SetEnv
PR_SetError
PR_SetFDInheritable
PR_SetNetAddr
PR_SetSocketOption
PR_SetThreadPriority
PR_SetThreadPrivate
PR_Sleep
PR_StringToNetAddr
PR_Sync
PR_TicksPerSecond
PR_UnloadLibrary
PR_Unlock
PR_Wait
PR_WaitCondVar
PR_Write
PR_dtoa
PR_fprintf
PR_htonl
PR_htons
PR_ntohl
PR_ntohs
PR_sscanf
PR_strtod
PR_vsnprintf
SECITEM_AllocItem
SECITEM_AllocItem_Util
SECITEM_CopyItem
SECITEM_DupItem
SECITEM_FreeItem
SECITEM_FreeItem_Util
SECITEM_ItemsAreEqual
SECITEM_ZfreeItem
SECKEY_ConvertToPublicKey
SECKEY_CopyPrivateKey
SECKEY_CopyPublicKey
SECKEY_CreateSubjectPublicKeyInfo
SECKEY_DecodeDERSubjectPublicKeyInfo
SECKEY_DestroyPrivateKey
SECKEY_DestroyPrivateKeyList
SECKEY_DestroyPublicKey
SECKEY_DestroySubjectPublicKeyInfo
SECKEY_ExtractPublicKey
SECKEY_GetPublicKeyType
SECKEY_ImportDERPublicKey
SECKEY_PublicKeyStrength
SECKEY_SignatureLen
SECMOD_AddNewModule
SECMOD_CanDeleteInternalModule
SECMOD_DeleteInternalModule
SECMOD_DeleteModule
SECMOD_DestroyModule
SECMOD_FindModule
SECMOD_GetDeadModuleList
SECMOD_GetDefaultModuleList
SECMOD_GetDefaultModuleListLock
SECMOD_GetInternalModule
SECMOD_GetReadLock
SECMOD_LoadUserModule
SECMOD_LockedModuleHasRemovableSlots
SECMOD_PubCipherFlagstoInternal
SECMOD_PubMechFlagstoInternal
SECMOD_ReferenceModule
SECMOD_ReleaseReadLock
SECMOD_UnloadUserModule
SECMOD_UpdateSlotList
SECOID_DestroyAlgorithmID
SECOID_FindOID
SECOID_FindOIDByTag
SECOID_FindOIDTag
SECOID_SetAlgorithmID
SEC_ASN1EncodeItem
SEC_CertNicknameConflict
SEC_DeletePermCertificate
SEC_DerSignData
SEC_PKCS12AddCertAndKey
SEC_PKCS12AddPasswordIntegrity
SEC_PKCS12CreateExportContext
SEC_PKCS12CreatePasswordPrivSafe
SEC_PKCS12CreateUnencryptedSafe
SEC_PKCS12DecoderFinish
SEC_PKCS12DecoderImportBags
SEC_PKCS12DecoderStart
SEC_PKCS12DecoderUpdate
SEC_PKCS12DecoderValidateBags
SEC_PKCS12DecoderVerify
SEC_PKCS12DestroyExportContext
SEC_PKCS12EnableCipher
SEC_PKCS12Encode
SEC_PKCS12IsEncryptionAllowed
SEC_PKCS12SetPreferredCipher
SEC_SignData
SEC_StringToOID
SGN_CreateDigestInfo
SGN_DestroyDigestInfo
SSL_AlertSentCallback
SSL_AuthCertificateComplete
SSL_AuthCertificateHook
SSL_CipherPrefSet
SSL_CipherPrefSetDefault
SSL_ClearSessionCache
SSL_ConfigSecureServer
SSL_ForceHandshake
SSL_GetChannelInfo
SSL_GetCipherSuiteInfo
SSL_GetClientAuthDataHook
SSL_GetExperimentalAPI
SSL_GetImplementedCiphers
SSL_GetNextProto
SSL_GetNumImplementedCiphers
SSL_GetPreliminaryChannelInfo
SSL_HandshakeCallback
SSL_HandshakeNegotiatedExtension
SSL_ImplementedCiphers
SSL_ImportFD
SSL_NamedGroupConfig
SSL_NumImplementedCiphers
SSL_OptionGet
SSL_OptionSet
SSL_OptionSetDefault
SSL_PeerCertificate
SSL_PeerCertificateChain
SSL_PeerSignedCertTimestamps
SSL_PeerStapledOCSPResponses
SSL_ResetHandshake
SSL_SendAdditionalKeyShares
SSL_SetCanFalseStartCallback
SSL_SetDowngradeCheckVersion
SSL_SetNextProtoNego
SSL_SetPKCS11PinArg
SSL_SetSockPeerID
SSL_SetURL
SSL_SignatureSchemePrefSet
SSL_VersionRangeGet
SSL_VersionRangeGetDefault
SSL_VersionRangeGetSupported
SSL_VersionRangeSet
SSL_VersionRangeSetDefault
VFY_Begin
VFY_CreateContext
VFY_DestroyContext
VFY_End
VFY_Update
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_zeroblob
sqlite3_busy_timeout
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_config

lgpllibs

_ZN10soundtouch10SoundTouch10setSettingEii
_ZN10soundtouch10SoundTouch11setChannelsEj
_ZN10soundtouch10SoundTouch13setSampleRateEj
_ZN10soundtouch10SoundTouch5flushEv
_ZN10soundtouch10SoundTouch7setRateEd
_ZN10soundtouch10SoundTouch8setPitchEd
_ZN10soundtouch10SoundTouch8setTempoEd
_ZN10soundtouch19createSoundTouchObjEv
_ZN10soundtouch20destroySoundTouchObjEPNS_10SoundTouchE

mozglue

HeapAlloc
HeapFree
MOZ_CrashPrintf
MozDescribeCodeAddress
MozFormatCodeAddress
MozFormatCodeAddressDetails
MozStackWalk
MozWalkTheStack
_Z18MozStackWalkThreadPFvjPvS_S_EjS_S_P8_CONTEXT
_Z19mozalloc_handle_oomy
_Z21RegisterJitCodeRegionPhy
_Z23UnregisterJitCodeRegionPhy
_Z24DllBlocklist_CheckStatusv
_Z31DllBlocklist_SetFullDllServicesPN7mozilla4glue6detail15DllServicesBaseE
_Z32DllBlocklist_SetBasicDllServicesPN7mozilla4glue6detail15DllServicesBaseE
_ZN17double_conversion23DoubleToStringConverter13DoubleToAsciiEdNS0_8DtoaModeEiPciPbPiS4_
_ZN17double_conversion23DoubleToStringConverter19EcmaScriptConverterEv
_ZN24AutoSuppressStackWalkingC1Ev
_ZN24AutoSuppressStackWalkingD1Ev
_ZN5blink7Decimal10fromDoubleEd
_ZN5blink7Decimal10fromStringERKNSt3__112basic_stringIcNS1_11char_traitsIcEENS1_9allocatorIcEEEE
_ZN5blink7Decimal3nanEv
_ZN5blink7DecimalC1ERKS0_
_ZN5blink7DecimalC1Ei
_ZN5blink7DecimalaSERKS0_
_ZN5blink7DecimalmIERKS0_
_ZN5blink7DecimalpLERKS0_
_ZN7mozilla11Compression26LZ4FrameCompressionContext14EndCompressingEv
_ZN7mozilla11Compression26LZ4FrameCompressionContext16BeginCompressingENS_4SpanIcLy18446744073709551615EEE
_ZN7mozilla11Compression26LZ4FrameCompressionContext19ContinueCompressingENS_4SpanIKcLy18446744073709551615EEE
_ZN7mozilla11Compression26LZ4FrameCompressionContextC1Eiybb
_ZN7mozilla11Compression26LZ4FrameCompressionContextD1Ev
_ZN7mozilla11Compression28LZ4FrameDecompressionContext10DecompressENS_4SpanIcLy18446744073709551615EEENS2_IKcLy18446744073709551615EEE
_ZN7mozilla11Compression28LZ4FrameDecompressionContextC1Eb
_ZN7mozilla11Compression28LZ4FrameDecompressionContextD1Ev
_ZN7mozilla11Compression3LZ410decompressEPKcyPcyPy
_ZN7mozilla11Compression3LZ417decompressPartialEPKcyPcyPy
_ZN7mozilla11Compression3LZ48compressEPKcyPc
_ZN7mozilla11sse_private11aes_enabledE
_ZN7mozilla11sse_private11avx_enabledE
_ZN7mozilla11sse_private12avx2_enabledE
_ZN7mozilla11sse_private12sse3_enabledE
_ZN7mozilla11sse_private13sse4a_enabledE
_ZN7mozilla11sse_private13ssse3_enabledE
_ZN7mozilla11sse_private14sse4_1_enabledE
_ZN7mozilla11sse_private14sse4_2_enabledE
_ZN7mozilla11sse_private16has_constant_tscE
_ZN7mozilla12PrintfTarget12appendIntDecEi
_ZN7mozilla12PrintfTarget12appendIntDecEj
_ZN7mozilla12PrintfTarget12appendIntDecEx
_ZN7mozilla12PrintfTarget12appendIntDecEy
_ZN7mozilla12PrintfTarget12appendIntHexEj
_ZN7mozilla12PrintfTarget12appendIntHexEy
_ZN7mozilla12PrintfTarget12appendIntOctEj
_ZN7mozilla12PrintfTarget12appendIntOctEy
_ZN7mozilla12PrintfTarget5printEPKcz
_ZN7mozilla12PrintfTarget6vprintEPKcPc
_ZN7mozilla12PrintfTargetC2Ev
_ZN7mozilla12RandomUint64Ev
_ZN7mozilla12baseprofiler13profiler_stopEv
_ZN7mozilla12baseprofiler14ProfilingStack18ensureCapacitySlowEv
_ZN7mozilla12baseprofiler17AutoProfilerLabel17GetProfilingStackEv
_ZN7mozilla12baseprofiler17UniqueJSONStrings13GetOrAddIndexERKNS_4SpanIKcLy18446744073709551615EEE
_ZN7mozilla12baseprofiler17UniqueJSONStrings25SpliceStringTableElementsERNS0_20SpliceableJSONWriterE
_ZN7mozilla12baseprofiler17UniqueJSONStringsC1ENS_10JSONWriter15CollectionStyleE
_ZN7mozilla12baseprofiler17UniqueJSONStringsC1ERKS1_NS_14ProgressLoggerENS_10JSONWriter15CollectionStyleE
_ZN7mozilla12baseprofiler17UniqueJSONStringsD1Ev
_ZN7mozilla12baseprofiler23profiler_main_thread_idEv
_ZN7mozilla12baseprofiler24profiler_get_core_bufferEv
_ZN7mozilla12baseprofiler26profiler_current_thread_idEv
_ZN7mozilla12baseprofiler27profiler_current_process_idEv
_ZN7mozilla12baseprofiler28GetProfilingCategoryPairInfoENS0_21ProfilingCategoryPairE
_ZN7mozilla12baseprofiler28InitializeWin64ProfilerHooksEv
_ZN7mozilla12baseprofiler28profiler_init_main_thread_idEv
_ZN7mozilla12baseprofiler31profiler_capture_backtrace_intoERNS_20ProfileChunkedBufferENS_19StackCaptureOptionsE
_ZN7mozilla12baseprofiler6detail12RacyFeatures8IsActiveEv
_ZN7mozilla12baseprofiler6detail25GetThreadRegistrationTimeEv
_ZN7mozilla12baseprofiler6detail31ExtractBaseProfilerChunkManagerEv
_ZN7mozilla12baseprofiler9AddMarkerINS0_7markers10TextMarkerEJNSt3__112basic_stringIcNS4_11char_traitsIcEENS4_9allocatorIcEEEEEEENS_23ProfileBufferBlockIndexERKNS_18ProfilerStringViewIcEERKNS_14MarkerCategoryEONS_13MarkerOptionsET_DpRKT0_
_ZN7mozilla14AwakeTimeStamp8NowLoResEv
_ZN7mozilla14TimeStampValueC1Eyyb
_ZN7mozilla15ProcessUptimeMsEv
_ZN7mozilla16IsEafPlusEnabledEv
_ZN7mozilla17RandomUint64OrDieEv
_ZN7mozilla18IsWin32kLockedDownEv
_ZN7mozilla19GetCachedNtDllThunkEv
_ZN7mozilla22IsFloat32RepresentableEd
_ZN7mozilla25GenerateRandomBytesFromOSEPvy
_ZN7mozilla26GetPreXULSkeletonUIEnabledEv
_ZN7mozilla26SetPreXULSkeletonUIThemeIdENS_9ThemeModeE
_ZN7mozilla27GetPreXULSkeletonUIWasShownEv
_ZN7mozilla28WasPreXULSkeletonUIMaximizedEv
_ZN7mozilla28base_profiler_markers_detail34EnsureBufferForMainThreadAddMarkerEv
_ZN7mozilla28base_profiler_markers_detail35ReleaseBufferForMainThreadAddMarkerEv
_ZN7mozilla28base_profiler_markers_detail38GetClearedBufferForMainThreadAddMarkerEv
_ZN7mozilla28base_profiler_markers_detail9Streaming18DeserializerForTagEh
_ZN7mozilla28base_profiler_markers_detail9Streaming24MarkerTypeFunctionsArrayEv
_ZN7mozilla28base_profiler_markers_detail9Streaming25TagForMarkerTypeFunctionsEPFvRNS_24ProfileBufferEntryReaderERNS_12baseprofiler20SpliceableJSONWriterEEPFNS_4SpanIKcLy18446744073709551615EEEvEPFNS_12MarkerSchemaEvE
_ZN7mozilla29BaseTimeDurationPlatformUtils17ResolutionInTicksEv
_ZN7mozilla29BaseTimeDurationPlatformUtils18ToSecondsSigDigitsEx
_ZN7mozilla29BaseTimeDurationPlatformUtils21TicksFromMillisecondsEd
_ZN7mozilla29BaseTimeDurationPlatformUtils9ToSecondsEx
_ZN7mozilla29ConsumePreXULSkeletonUIHandleEv
_ZN7mozilla29PersistPreXULSkeletonUIValuesERKNS_18SkeletonUISettingsE
_ZN7mozilla30GetPreXULSkeletonUIErrorReasonEv
_ZN7mozilla30NotePreXULSkeletonUIRestartingEv
_ZN7mozilla30RegisterProfilerLabelEnterExitEPFPvPKcS2_S0_EPFvS0_E
_ZN7mozilla31ProcessUptimeExcludingSuspendMsEv
_ZN7mozilla35SetPreXULSkeletonUIEnabledIfAllowedEb
_ZN7mozilla5mscom14ActCtxResource24GetAccessibilityResourceEv
_ZN7mozilla5mscom14ActCtxResource26GetAccessibilityResourceIdEv
_ZN7mozilla5mscom14ActCtxResource26SetAccessibilityResourceIdEt
_ZN7mozilla5mscom6detail21EndProcessRuntimeInitEv
_ZN7mozilla5mscom6detail23BeginProcessRuntimeInitEv
_ZN7mozilla6detail10RWLockImpl10readUnlockEv
_ZN7mozilla6detail10RWLockImpl11writeUnlockEv
_ZN7mozilla6detail10RWLockImpl8readLockEv
_ZN7mozilla6detail10RWLockImpl9writeLockEv
_ZN7mozilla6detail10RWLockImplC2Ev
_ZN7mozilla6detail10RWLockImplD2Ev
_ZN7mozilla6detail14gChaosFeaturesE
_ZN7mozilla6detail15gTwoCharEscapesE
_ZN7mozilla6detail17FileHandleDeleterclENS0_16FileHandleHelperE
_ZN7mozilla6detail17gChaosModeCounterE
_ZN7mozilla6detail21ConditionVariableImpl10notify_allEv
_ZN7mozilla6detail21ConditionVariableImpl10notify_oneEv
_ZN7mozilla6detail21ConditionVariableImpl4waitERNS0_9MutexImplE
_ZN7mozilla6detail21ConditionVariableImpl8wait_forERNS0_9MutexImplERKNS_16BaseTimeDurationINS_27TimeDurationValueCalculatorEEE
_ZN7mozilla6detail21ConditionVariableImplC1Ev
_ZN7mozilla6detail21ConditionVariableImplD1Ev
_ZN7mozilla6detail23InvalidArrayIndex_CRASHEyy
_ZN7mozilla6detail9MutexImpl4lockEv
_ZN7mozilla6detail9MutexImpl6unlockEv
_ZN7mozilla6detail9MutexImpl7tryLockEv
_ZN7mozilla6detail9MutexImplC2Ev
_ZN7mozilla6detail9MutexImplD2Ev
_ZN7mozilla6xgetbvEj
_ZN7mozilla7SHA1Sum6finishERA20_h
_ZN7mozilla7SHA1Sum6updateEPKvj
_ZN7mozilla7SHA1SumC1Ev
_ZN7mozilla8profiler6detail12FilterHasPidEPKcNS_12baseprofiler21BaseProfilerProcessIdE
_ZN7mozilla8profiler6detail17FiltersExcludePidENS_4SpanIKPKcLy18446744073709551615EEENS_12baseprofiler21BaseProfilerProcessIdE
_ZN7mozilla9HashBytesEPKvy
_ZN7mozilla9TimeStamp14FirstTimeStampEv
_ZN7mozilla9TimeStamp15ProcessCreationEv
_ZN7mozilla9TimeStamp20RecordProcessRestartEv
_ZN7mozilla9TimeStamp3NowEb
_ZN7mozilla9TimeStamp7StartupEv
_ZNK17double_conversion23DoubleToStringConverter11ToPrecisionEdiPNS_13StringBuilderE
_ZNK17double_conversion23DoubleToStringConverter13ToExponentialEdiPNS_13StringBuilderE
_ZNK17double_conversion23DoubleToStringConverter20ToShortestIeeeNumberEdPNS_13StringBuilderENS0_8DtoaModeE
_ZNK17double_conversion23DoubleToStringConverter7ToFixedEdiPNS_13StringBuilderE
_ZNK5blink7Decimal5floorEv
_ZNK5blink7Decimal5roundEv
_ZNK5blink7Decimal8toDoubleEv
_ZNK5blink7Decimal8toStringEPcy
_ZNK5blink7DecimaldvERKS0_
_ZNK5blink7DecimaleqERKS0_
_ZNK5blink7DecimalgeERKS0_
_ZNK5blink7DecimalgtERKS0_
_ZNK5blink7DecimalleERKS0_
_ZNK5blink7DecimalltERKS0_
_ZNK5blink7DecimalmiERKS0_
_ZNK5blink7DecimalmlERKS0_
_ZNK5blink7DecimalneERKS0_
_ZNK5blink7DecimalngEv
_ZNK5blink7DecimalplERKS0_
_ZNK7mozilla14AwakeTimeStampmiERKS0_
_ZNK7mozilla14TimeStampValuemiERKS0_
_ZNK7mozilla17AwakeTimeDuration9ToSecondsEv
_ZNO7mozilla12MarkerSchema6StreamERNS_10JSONWriterERKNS_4SpanIKcLy18446744073709551615EEE
_aligned_free
_aligned_malloc
_strdup
_wcsdup
calloc
free
gMozCrashReason
gMozillaPoisonValue
jemalloc_free_dirty_pages
jemalloc_ptr_info
jemalloc_stats_internal
jemalloc_stats_num_bins
jemalloc_thread_local_arena
malloc
malloc_good_size
moz_arena_calloc
moz_arena_malloc
moz_arena_realloc
moz_create_arena_with_params
moz_dispose_arena
moz_malloc_size_of
moz_malloc_usable_size
moz_xcalloc
moz_xmalloc
moz_xmemdup
moz_xrealloc
moz_xstrdup
mozalloc_abort
posix_memalign
realloc
strdup
wcsdup

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
MesEncodeDynBufferHandleCreate
MesHandleFree
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrMesTypeAlignSize2
NdrMesTypeDecode2
NdrMesTypeEncode2
NdrMesTypeFree2
NdrOleAllocate
NdrOleFree
RpcStringFreeA
RpcStringFreeW
UuidCreate
UuidFromStringW
UuidToStringA
UuidToStringW

ntdll

NtCancelIoFileEx
NtDeviceIoControlFile
NtOpenDirectoryObject
NtQueryDirectoryObject
NtQueryInformationProcess
NtQueryObject
NtQuerySystemInformation
RtlCaptureContext
RtlCompareMemory
RtlFreeHeap
RtlFreeUnicodeString
RtlInitUnicodeString
RtlInstallFunctionTableCallback
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
VerSetConditionMask

bcrypt

BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptGenRandom
BCryptHashData
BCryptOpenAlgorithmProvider

crypt32

CertCloseStore
CertFindCertificateInStore
CertFreeCertificateChain
CertGetCertificateChain
CertOpenStore
CryptBinaryToStringW

propsys

PropVariantToString

advapi32

AllocateAndInitializeSid
AllocateLocallyUniqueId
CheckTokenMembership
CloseServiceHandle
ConvertSidToStringSidW
CreateProcessAsUserW
CreateWellKnownSid
CredDeleteA
CredFree
CredReadA
CredWriteA
CryptAcquireContextA
CryptAcquireContextW
CryptCreateHash
CryptDestroyHash
CryptGenRandom
CryptGetHashParam
CryptHashData
CryptReleaseContext
DuplicateToken
EqualSid
FreeSid
GetNamedSecurityInfoW
GetTokenInformation
GetTraceLoggerHandle
GetUserNameW
InitializeAcl
InitializeSecurityDescriptor
LookupAccountNameW
LsaNtStatusToWinError
OpenProcessToken
OpenSCManagerW
OpenServiceW
OpenThreadToken
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegGetValueW
RegNotifyChangeKeyValue
RegOpenKeyExA
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
RevertToSelf
SetEntriesInAclW
SetNamedSecurityInfoW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetThreadToken
SystemFunction036
TraceEvent
UnregisterTraceGuids

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

ws2_32

WSAIoctl
WSCEnumProtocols
WSCGetProviderInfo
WSCGetProviderPath
gethostname
getnameinfo
htonl
htons
ioctlsocket
ntohl
ntohs
shutdown

wintrust

WTHelperProvDataFromStateData
WinVerifyTrust

api-ms-win-crt-convert-l1-1-0

_strtod_l
_strtoi64
_strtoi64_l
_strtoui64
_strtoui64_l
_wcstoi64
_wtoi
atof
atoi
atol
mbrtowc
mbsrtowcs
mbstowcs
strtod
strtol
strtoul
wcrtomb
wcrtomb_s
wcstod
wcstol
wcstombs
wcstoul

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
_putenv_s
_wgetcwd
_wgetdcwd
_wgetenv
getenv

api-ms-win-crt-filesystem-l1-1-0

_access
_fstat64
_fullpath
_getdrives
_lock_file
_mkdir
_stat64
_unlock_file
_waccess
_wchdir
_wchmod
_wfullpath
_wmkdir
_wstat64
remove

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr
_fdopen
_hypot
_isnan
acos
asin
atan
cosh
frexp
log10
sinh
tan
tanh

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmpex
longjmp
memchr
memcmp
memcpy
memmove
strchr
strrchr
strstr
wcschr
wcsrchr
wcsstr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
__sys_nerr
_assert
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_controlfp_s
_crt_at_quick_exit
_crt_atexit
_endthreadex
_errno
_execute_onexit_table
_exit
_fpreset
_getpid
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
_register_thread_local_exe_atexit_callback
_wassert
abort
exit
perror
raise
strerror
strerror_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vsnprintf_s
__stdio_common_vsnwprintf_s
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_close
_dup
_dup2
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_getc_nolock
_isatty
_lseeki64
_mktemp_s
_open
_open_osfhandle
_read
_setmode
_wfopen
_wfopen_s
_wfsopen
_wmktemp_s
_wopen
_write
fclose
feof
ferror
fflush
fgetc
fgets
fopen
fputc
fputs
fputwc
fread
freopen
fseek
ftell
fwrite
getc
putchar
puts
rewind
setbuf
setvbuf
ungetc

api-ms-win-crt-string-l1-1-0

_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_stricmp
_strnicmp
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsicmp
_wcslwr
_wcsnicmp
_wcsxfrm_l
isalnum
isalpha
islower
isprint
isspace
isupper
iswalpha
iswctype
iswspace
isxdigit
mbrlen
memset
strcat
strcmp
strcpy
strcpy_s
strcspn
strlen
strncat
strncmp
strncpy
strpbrk
strspn
tolower
toupper
wcscat_s
wcscmp
wcscpy
wcscpy_s
wcslen
wcsncat
wcsncmp
wcsncpy
wcsncpy_s
wcspbrk
wcstok_s

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_difftime64
_gmtime64
_gmtime64_s
_localtime64
_localtime64_s
_mktime64
_strftime_l
_time64
_tzset
clock
strftime

api-ms-win-crt-utility-l1-1-0

bsearch
div
qsort
rand
rand_s
srand

kernel32

AcquireSRWLockExclusive
AcquireSRWLockShared
ActivateActCtx
AddRefActCtx
AddVectoredExceptionHandler
AllocConsole
AttachConsole
CancelIo
CancelIoEx
CancelSynchronousIo
CloseHandle
CompareFileTime
CompareStringOrdinal
ConnectNamedPipe
CopyFileExW
CreateActCtxW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMemoryResourceNotification
CreateMutexA
CreateMutexW
CreateNamedPipeW
CreateProcessW
CreateRemoteThread
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateToolhelp32Snapshot
DeactivateActCtx
DebugBreak
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EncodePointer
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlsAlloc
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetApplicationRestartSettings
GetCommandLineW
GetComputerNameExA
GetComputerNameW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrencyFormatEx
GetCurrentActCtx
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatEx
GetDiskFreeSpaceExW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetGeoInfoW
GetHandleInformation
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalDriveStringsW
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetNumberFormatEx
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessId
GetProcessIdOfThread
GetProcessTimes
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetSystemDefaultLangID
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadGroupAffinity
GetThreadId
GetThreadPriority
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeFormatA
GetTimeFormatEx
GetTimeZoneInformation
GetUserDefaultLangID
GetUserGeoID
GetUserPreferredUILanguages
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GetVolumePathNameW
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalMemoryStatusEx
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapLock
HeapSetInformation
HeapUnlock
HeapWalk
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessInJob
IsWow64Process
K32EnumProcessModules
K32GetMappedFileNameW
K32GetProcessImageFileNameW
K32GetProcessMemoryInfo
K32QueryWorkingSet
LCIDToLocaleName
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
MapViewOfFile
MapViewOfFileEx
Module32FirstW
Module32NextW
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenEventA
OpenFileMappingA
OpenFileMappingW
OpenMutexA
OpenMutexW
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
PostQueuedCompletionStatus
PowerClearRequest
PowerCreateRequest
PowerSetRequest
ProcessIdToSessionId
QueryActCtxW
QueryDosDeviceW
QueryFullProcessImageNameW
QueryInformationJobObject
QueryPerformanceCounter
QueryPerformanceFrequency
QueryProcessCycleTime
QueryThreadCycleTime
QueueUserAPC
RaiseException
ReadFile
ReadProcessMemory
RegisterApplicationRestart
RegisterWaitForSingleObject
ReleaseActCtx
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ReplaceFileA
ReplaceFileW
ResetEvent
ResolveLocaleName
ResumeThread
SetConsoleMode
SetConsoleTextAttribute
SetCriticalSectionSpinCount
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetProcessShutdownParameters
SetStdHandle
SetThreadErrorMode
SetThreadExecutionState
SetThreadIdealProcessor
SetThreadPriority
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SignalObjectAndWait
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterApplicationRestart
UnregisterWait
UnregisterWaitEx
VerifyVersionInfoW
VirtualAlloc
VirtualAllocEx
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualProtectEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteProcessMemory
lstrcatW
lstrcmpiW
lstrlenW

api-ms-win-crt-multibyte-l1-1-0

_mbtowc_l

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Exports

Exports

DumpCompleteHeap
DumpJSStack
GIFFT_TimingDistributionAccumulateRawMillis
GIFFT_TimingDistributionCancel
GIFFT_TimingDistributionStart
GIFFT_TimingDistributionStopAndAccumulate
VR_RuntimePath
XRE_GetBootstrap
mozilla_dump_image
workerlz4_compress
workerlz4_decompress
workerlz4_maxCompressedSize

Sections

.text
Size: 95.8MB - Virtual size: 95.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.9MB - Virtual size: 19.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.buildid
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 14.4MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 864KB - Virtual size: 863KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

115947cf0e8a5cfd3f0a0e8fb660e681

Headers

DLL Characteristics

File Characteristics

Imports

ole32

oleaut32

rpcrt4

oleacc

user32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

kernel32

shlwapi

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 213KB - Virtual size: 212KB

.rdata Size: 95KB - Virtual size: 94KB

.buildid Size: 512B - Virtual size: 160B

.data Size: 1024B - Virtual size: 1KB

.pdata Size: 9KB - Virtual size: 9KB

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

a6cec5b1a631d592d80900ab7e1de8df

Headers

DLL Characteristics

File Characteristics

Imports

user32

comctl32

kernel32

advapi32

gdi32

Sections

.text Size: 162KB - Virtual size: 161KB

.rdata Size: 75KB - Virtual size: 74KB

.data Size: 3KB - Virtual size: 64KB

.pdata Size: 8KB - Virtual size: 8KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 61KB - Virtual size: 61KB

.reloc Size: 2KB - Virtual size: 1KB

060a273877020f72a54ed87d23788ef3

Headers

DLL Characteristics

File Characteristics

Imports

nss3

lgpllibs

mozglue

rpcrt4

ntdll

bcrypt

crypt32

propsys

advapi32

version

ws2_32

wintrust

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

.text
Size: 213KB - Virtual size: 212KB

.rdata
Size: 95KB - Virtual size: 94KB

.buildid
Size: 512B - Virtual size: 160B

.data
Size: 1024B - Virtual size: 1KB

.pdata
Size: 9KB - Virtual size: 9KB

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 162KB - Virtual size: 161KB

.rdata
Size: 75KB - Virtual size: 74KB

.data
Size: 3KB - Virtual size: 64KB

.pdata
Size: 8KB - Virtual size: 8KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 61KB - Virtual size: 61KB

.reloc
Size: 2KB - Virtual size: 1KB

.text
Size: 95.8MB - Virtual size: 95.8MB

.rdata
Size: 19.9MB - Virtual size: 19.9MB

.buildid
Size: 512B - Virtual size: 141B

.data
Size: 267KB - Virtual size: 1.1MB

.pdata
Size: 2.6MB - Virtual size: 2.6MB

.rodata
Size: 2KB - Virtual size: 2KB

.rodata
Size: 14.4MB - Virtual size: 14.4MB

.tls
Size: 512B - Virtual size: 296B

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 864KB - Virtual size: 863KB