AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DolphinTool.exe
Resource
ubuntu1804-amd64-en-20211208
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
DolphinTool.exe
Resource
debian9-armhf-20221111-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
DolphinTool.exe
Resource
debian9-mipsbe-20221125-en
debian-9-mips
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
DolphinTool.exe
Resource
debian9-mipsel-en-20211208
debian-9-mipsel
0 signatures
150 seconds
General
-
Target
DolphinTool.exe
-
Size
9.8MB
-
MD5
772572a4ac21eaf190f170209428e946
-
SHA1
df8f41a6a173130a70fea3f0d7f87f29f193de7b
-
SHA256
58db5e9bb94929a6a1badca73bb97322bc934d175126a081e389c9490c469cf2
-
SHA512
c81c4ec977d7614572c5a93a3de51b9e67dd24f889b058b9ac6d3d5521608e43782c1f1533baefd56ffb452d88d5cc0216e89c859169bda93287ee0f9365ba3a
-
SSDEEP
98304:0jHy9PG0rZnRQ8YmVtTb/IjSeFnDCyLMmlHF3j+HigIp:0utG0rZRQ8YmVtTbOxDCyYmlHcHiZp
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DolphinTool.exe
Files
-
DolphinTool.exe.exe windows x64
23c58de6c9a39902278712200e1d04b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetFileInformationByHandleEx
MoveFileExW
CopyFileW
AreFileApisANSI
SetFileInformationByHandle
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
CreateDirectoryW
GetLocaleInfoEx
InitOnceComplete
InitOnceBeginInitialize
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
GetSystemTimeAsFileTime
InitializeSListHead
CancelIoEx
DeviceIoControl
TryEnterCriticalSection
SleepConditionVariableCS
CreateIoCompletionPort
GetQueuedCompletionStatus
TerminateProcess
GlobalFree
GlobalLock
PostQueuedCompletionStatus
DeleteCriticalSection
GetVersionExA
VerifyVersionInfoA
SetWaitableTimer
CancelWaitableTimer
CreateFileA
GlobalUnlock
MapViewOfFileEx
CreateFileMappingW
LoadLibraryA
QueryPerformanceCounter
IsDebuggerPresent
SetFilePointer
VirtualFree
GlobalMemoryStatusEx
CompareStringOrdinal
GlobalAlloc
GetUserGeoID
GetGeoInfoW
TlsFree
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
TlsGetValue
GetProcessHeap
HeapFree
HeapAlloc
GetSystemDirectoryA
TlsAlloc
CreateMutexW
WaitNamedPipeW
lstrlenW
ExpandEnvironmentStringsA
PeekNamedPipe
GetFileType
SleepEx
InitializeCriticalSectionEx
GetTickCount64
WaitForMultipleObjects
VerifyVersionInfoW
LoadLibraryW
FreeLibrary
CreateEventW
WaitForSingleObject
ResetEvent
SetEvent
GetOverlappedResult
WriteFile
ReadFile
CreateFileW
QueryPerformanceFrequency
InitializeCriticalSection
LoadLibraryExW
LoadLibraryExA
GetSystemDirectoryW
CreateMutexA
ReleaseMutex
GetProcessAffinityMask
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
GetConsoleMode
GetStdHandle
GetModuleHandleA
GetCurrentThreadId
GetCurrentThread
MoveFileExA
InitializeConditionVariable
InitializeSRWLock
SleepConditionVariableSRW
WakeAllConditionVariable
WideCharToMultiByte
GetCurrentProcess
FlushInstructionCache
VirtualAlloc
VirtualProtect
GetModuleHandleW
GetProcAddress
FormatMessageW
SetLastError
GetModuleFileNameA
GetModuleHandleExW
LocalFree
GetLastError
WriteConsoleW
DebugBreak
MultiByteToWideChar
IsProcessorFeaturePresent
GetModuleFileNameW
FormatMessageA
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetCommandLineW
UnmapViewOfFile
GetProcessInformation
OutputDebugStringW
RaiseException
Sleep
WakeConditionVariable
msvcp140
?uncaught_exceptions@std@@YAHXZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?id@?$collate@D@std@@2V0locale@2@A
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
_Strxfrm
_Strcoll
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
_Mtx_trylock
_Thrd_sleep
_Cnd_timedwait
_Mtx_current_owns
_Query_perf_frequency
_Query_perf_counter
?_Winerror_map@std@@YAHH@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Xtime_get_ticks
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?toupper@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
??0task_continuation_context@Concurrency@@AEAA@XZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_IsCurrentOriginSTA@_ContextCallback@details@Concurrency@@CA_NXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
_Cnd_unregister_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_broadcast
?_Xinvalid_argument@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?classic@locale@std@@SAAEBV12@XZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Cnd_signal
_Cnd_wait
_Cnd_destroy_in_situ
_Cnd_init_in_situ
_Mtx_unlock
_Mtx_lock
_Mtx_destroy_in_situ
_Mtx_init_in_situ
_Thrd_id
_Thrd_hardware_concurrency
_Thrd_join
?_Xbad_function_call@std@@YAXXZ
?id@?$ctype@D@std@@2V0locale@2@A
?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAO@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAJ@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@D@std@@QEBADD@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
??Bid@locale@std@@QEAA_KXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
_Mbrtowc
?_Xout_of_range@std@@YAXPEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setf@ios_base@std@@QEAAHHH@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
ntdll
RtlCaptureContext
RtlVirtualUnwind
VerSetConditionMask
RtlLookupFunctionEntry
RtlInitUnicodeString
user32
MessageBoxW
MonitorFromWindow
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetDesktopWindow
ReleaseDC
GetDC
GetClientRect
advapi32
CryptAcquireContextW
RegGetValueA
RegSetKeyValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptGenRandom
CryptReleaseContext
ole32
CoTaskMemFree
shell32
SHGetKnownFolderPath
CommandLineToArgvW
ws2_32
recv
gethostname
accept
listen
getpeername
htons
ntohs
WSAStartup
WSACleanup
closesocket
WSASendTo
htonl
socket
ntohl
__WSAFDIsSet
freeaddrinfo
WSASetLastError
WSAIoctl
connect
getsockname
ioctlsocket
bind
setsockopt
WSAGetLastError
sendto
send
select
getsockopt
getaddrinfo
recvfrom
gdi32
SwapBuffers
SetPixelFormat
ChoosePixelFormat
vcruntime140
strrchr
wcsrchr
wcschr
_purecall
__std_terminate
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcmp
memcpy
memmove
memset
__std_type_info_compare
memchr
strchr
strstr
__C_specific_handler
__current_exception
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
__sys_nerr
_wassert
_invalid_parameter_noinfo_noreturn
_errno
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
terminate
_beginthreadex
abort
_configure_wide_argv
_initialize_wide_environment
_get_initial_wide_environment
_initterm
_initterm_e
_exit
strerror
__p___argc
__p___wargv
_c_exit
_register_thread_local_exe_atexit_callback
strerror_s
exit
_set_app_type
_getpid
_invalid_parameter_noinfo
api-ms-win-crt-heap-l1-1-0
_callnewh
free
_aligned_malloc
_aligned_free
realloc
_set_new_mode
calloc
malloc
_aligned_realloc
api-ms-win-crt-math-l1-1-0
_ldclass
_fdclass
log2
cosh
fabs
_fpclass
sinh
tanh
fmodf
lrintf
exp2
_dclass
hypot
pow
log
sqrt
ceilf
_dsign
exp
asinf
atan2f
copysign
cosf
sinf
sqrtf
__setusermatherr
log2f
round
modf
log10
_finite
fmod
lrint
atan2
cos
sin
llrint
ceil
acosf
trunc
frexp
fma
tan
floor
atan
asin
acos
roundf
logf
powf
scalbn
api-ms-win-crt-stdio-l1-1-0
_wsopen_s
__p__commode
ungetc
setvbuf
fsetpos
fgetc
_get_stream_buffer_pointers
fgets
_ftelli64
_fseeki64
fflush
_wfsopen
_wfopen_s
__stdio_common_vsscanf
_write
__stdio_common_vsprintf
_read
_set_fmode
_open
clearerr
_commit
_close
fseek
fopen
fclose
_isatty
feof
ferror
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
_lseeki64
fwrite
fputc
_wsopen
_sopen
__acrt_iob_func
fputs
__stdio_common_vswprintf
fread
__stdio_common_vsprintf_s
_wfopen
ftell
fgetpos
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
localeconv
_create_locale
api-ms-win-crt-string-l1-1-0
_strdup
strspn
strcspn
_wcsdup
wcsncpy
_stricmp
_wcsnicmp
isalpha
strpbrk
isalnum
wcspbrk
strcmp
isupper
islower
isprint
isgraph
strnlen
_strnicmp
isxdigit
strncmp
strncpy
strtok
tolower
toupper
iswspace
isspace
isdigit
api-ms-win-crt-convert-l1-1-0
atoi
_itoa_s
strtod
strtol
atof
strtoll
strtoul
strtoull
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_fstat64
_stat64
_wstat64
api-ms-win-crt-time-l1-1-0
_mktime64
_localtime64
_gmtime64
_mkgmtime64
clock
_gmtime64_s
_time64
_tzset
_localtime64_s
_get_timezone
_get_dstbias
api-ms-win-crt-environment-l1-1-0
getenv
bcrypt
BCryptGenRandom
BCryptOpenAlgorithmProvider
BCryptCloseAlgorithmProvider
opengl32
wglGetProcAddress
wglGetCurrentContext
wglMakeCurrent
wglDeleteContext
wglCreateContext
oleaut32
SysAllocString
GetErrorInfo
SetErrorInfo
SysFreeString
SysStringLen
api-ms-win-crt-utility-l1-1-0
bsearch
qsort
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
Exports
Exports
Sections
.text Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 385KB - Virtual size: 13.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 247KB - Virtual size: 247KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ