libvips-42[.]dll

Resubmissions

01/10/2023, 06:31

231001-haaj2sag39 6

Sharing

Copy URL Twitter E-mail

General

Target

libvips-42.dll
Size

19.6MB
MD5

8c4b02fb16d237b28c9799284505c661
SHA1

517e497bc02beff8b6f010e11ec6b9fe0b07f0fd
SHA256

cd534442cc4146b63034aa3be2e080c514570b0e1f607237b47eaf79e5527a86
SHA512

4d74a1633481e6a80a5fb0b1eaa6ad74ba757baf214077add5366dc4164653a89712e745efbd7cadabdefa83a3f18e7188fc46691b61e5be146685988a7f3a0b
SSDEEP

196608:K9BcPbUr5BfBJaT+ow6xQu5rAuGvpJNNPswpsT2WK:K9B0YzfBJM3w9u5rAuG9ls3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
libvips-42.dll

Files

libvips-42.dll
.dll windows:6 windows x64

e503bafcf92714df44e0dd2e4270a8be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libgobject-2.0-0

g_boxed_copy
g_boxed_free
g_boxed_type_register_static
g_byte_array_get_type
g_bytes_get_type
g_cclosure_marshal_VOID__POINTER
g_cclosure_marshal_VOID__VOID
g_cclosure_marshal_generic
g_cclosure_new
g_closure_invoke
g_closure_ref
g_closure_set_marshal
g_closure_sink
g_closure_unref
g_date_time_get_type
g_enum_get_value
g_enum_get_value_by_name
g_enum_get_value_by_nick
g_enum_register_static
g_error_get_type
g_flags_get_first_value
g_flags_get_value_by_name
g_flags_get_value_by_nick
g_flags_register_static
g_initially_unowned_get_type
g_io_condition_get_type
g_object_add_weak_pointer
g_object_class_find_property
g_object_class_install_properties
g_object_class_install_property
g_object_class_list_properties
g_object_class_override_property
g_object_freeze_notify
g_object_get
g_object_get_data
g_object_get_property
g_object_get_qdata
g_object_get_type
g_object_interface_install_property
g_object_new
g_object_new_valist
g_object_new_with_properties
g_object_newv
g_object_notify
g_object_notify_by_pspec
g_object_ref
g_object_ref_sink
g_object_remove_weak_pointer
g_object_replace_qdata
g_object_run_dispose
g_object_set
g_object_set_data
g_object_set_data_full
g_object_set_property
g_object_set_qdata
g_object_set_qdata_full
g_object_steal_qdata
g_object_thaw_notify
g_object_unref
g_object_weak_ref
g_object_weak_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_double
g_param_spec_enum
g_param_spec_flags
g_param_spec_get_blurb
g_param_spec_get_name
g_param_spec_int
g_param_spec_int64
g_param_spec_object
g_param_spec_pointer
g_param_spec_ref_sink
g_param_spec_string
g_param_spec_types
g_param_spec_uint
g_param_spec_uint64
g_param_spec_unref
g_param_spec_variant
g_param_value_set_default
g_param_value_validate
g_ptr_array_get_type
g_signal_accumulator_first_wins
g_signal_accumulator_true_handled
g_signal_connect_closure_by_id
g_signal_connect_data
g_signal_emit
g_signal_emit_by_name
g_signal_emitv
g_signal_handler_disconnect
g_signal_handler_find
g_signal_handler_is_connected
g_signal_handlers_disconnect_matched
g_signal_has_handler_pending
g_signal_lookup
g_signal_new
g_signal_set_va_marshaller
g_source_set_dummy_callback
g_strdup_value_contents
g_strv_get_type
g_type_add_class_private
g_type_add_instance_private
g_type_add_interface_static
g_type_check_class_cast
g_type_check_class_is_a
g_type_check_instance_cast
g_type_check_instance_is_a
g_type_check_instance_is_fundamentally_a
g_type_check_is_value_type
g_type_check_value_holds
g_type_children
g_type_class_adjust_private_offset
g_type_class_get_private
g_type_class_peek
g_type_class_peek_parent
g_type_class_peek_static
g_type_class_ref
g_type_class_unref
g_type_default_interface_peek
g_type_ensure
g_type_from_name
g_type_fundamental
g_type_interface_add_prerequisite
g_type_interface_peek
g_type_interface_peek_parent
g_type_is_a
g_type_module_get_type
g_type_module_unuse
g_type_module_use
g_type_name
g_type_name_from_instance
g_type_parent
g_type_register_static
g_type_register_static_simple
g_type_test_flags
g_type_value_table_peek
g_value_array_free
g_value_array_new
g_value_copy
g_value_dup_boxed
g_value_dup_object
g_value_dup_string
g_value_dup_variant
g_value_get_boolean
g_value_get_boxed
g_value_get_double
g_value_get_enum
g_value_get_flags
g_value_get_float
g_value_get_int
g_value_get_int64
g_value_get_long
g_value_get_object
g_value_get_pointer
g_value_get_schar
g_value_get_string
g_value_get_uchar
g_value_get_uint
g_value_get_uint64
g_value_get_ulong
g_value_get_variant
g_value_init
g_value_peek_pointer
g_value_register_transform_func
g_value_set_boolean
g_value_set_boxed
g_value_set_double
g_value_set_enum
g_value_set_flags
g_value_set_float
g_value_set_int
g_value_set_int64
g_value_set_object
g_value_set_pointer
g_value_set_schar
g_value_set_static_string
g_value_set_string
g_value_set_uchar
g_value_set_uint
g_value_set_uint64
g_value_set_variant
g_value_take_boxed
g_value_take_object
g_value_take_string
g_value_take_variant
g_value_transform
g_value_type_transformable
g_value_unset
g_variant_dict_get_type
g_variant_type_get_gtype
g_weak_ref_clear
g_weak_ref_get
g_weak_ref_init
g_weak_ref_set

libglib-2.0-0

g_access
g_array_append_vals
g_array_free
g_array_insert_vals
g_array_new
g_array_remove_index
g_array_remove_index_fast
g_array_set_clear_func
g_array_set_size
g_array_sized_new
g_array_sort
g_array_unref
g_ascii_dtostr
g_ascii_strcasecmp
g_ascii_strncasecmp
g_ascii_strtod
g_ascii_strtoll
g_ascii_table
g_ascii_tolower
g_ascii_xdigit_value
g_assertion_message_cmpnum
g_assertion_message_error
g_assertion_message_expr
g_atomic_rc_box_acquire
g_atomic_rc_box_alloc0
g_atomic_rc_box_release_full
g_atomic_ref_count_dec
g_atomic_ref_count_inc
g_base64_decode
g_base64_encode
g_build_filename
g_build_filename_valist
g_build_path
g_byte_array_append
g_byte_array_free
g_byte_array_new
g_byte_array_ref
g_byte_array_set_size
g_byte_array_sized_new
g_byte_array_unref
g_bytes_equal
g_bytes_get_data
g_bytes_get_size
g_bytes_hash
g_bytes_new
g_bytes_new_from_bytes
g_bytes_new_static
g_bytes_new_take
g_bytes_new_with_free_func
g_bytes_ref
g_bytes_unref
g_bytes_unref_to_data
g_canonicalize_filename
g_checksum_free
g_checksum_get_digest
g_checksum_get_string
g_checksum_new
g_checksum_update
g_chmod
g_clear_error
g_close
g_compute_checksum_for_string
g_cond_broadcast
g_cond_clear
g_cond_init
g_cond_signal
g_cond_wait
g_cond_wait_until
g_convert
g_convert_error_quark
g_convert_with_fallback
g_date_time_add
g_date_time_add_seconds
g_date_time_format_iso8601
g_date_time_get_hour
g_date_time_get_microsecond
g_date_time_get_minute
g_date_time_get_second
g_date_time_get_ymd
g_date_time_new_from_iso8601
g_date_time_new_from_unix_utc
g_date_time_new_now_local
g_date_time_new_now_utc
g_date_time_new_utc
g_date_time_ref
g_date_time_to_unix
g_date_time_unref
g_dcgettext
g_dgettext
g_dir_close
g_dir_open
g_dir_read_name
g_direct_equal
g_direct_hash
g_dngettext
g_environ_setenv
g_environ_unsetenv
g_error_copy
g_error_free
g_error_matches
g_error_new
g_error_new_literal
g_error_new_valist
g_file_error_from_errno
g_file_error_quark
g_file_get_contents
g_file_open_tmp
g_file_read_link
g_file_set_contents_full
g_file_test
g_filename_display_basename
g_filename_display_name
g_filename_from_uri
g_filename_from_utf8
g_filename_to_uri
g_filename_to_utf8
g_fopen
g_free
g_fsync
g_get_current_dir
g_get_current_time
g_get_environ
g_get_filename_charsets
g_get_home_dir
g_get_language_names
g_get_monotonic_time
g_get_num_processors
g_get_prgname
g_get_real_time
g_get_user_cache_dir
g_get_user_config_dir
g_get_user_data_dir
g_get_user_special_dir
g_getenv
g_hash_table_add
g_hash_table_contains
g_hash_table_destroy
g_hash_table_find
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_get_keys
g_hash_table_get_keys_as_array
g_hash_table_get_values
g_hash_table_insert
g_hash_table_iter_init
g_hash_table_iter_next
g_hash_table_iter_remove
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_replace
g_hash_table_size
g_hash_table_steal
g_hash_table_steal_all
g_hash_table_unref
g_hostname_is_ip_address
g_hostname_is_non_ascii
g_hostname_to_ascii
g_idle_add
g_idle_add_full
g_idle_source_new
g_int_hash
g_intern_static_string
g_intern_string
g_io_channel_new_file
g_io_channel_read_line
g_io_channel_seek_position
g_io_channel_shutdown
g_io_channel_unref
g_io_channel_write_chars
g_key_file_free
g_key_file_get_groups
g_key_file_get_keys
g_key_file_get_value
g_key_file_load_from_data
g_key_file_load_from_file
g_key_file_new
g_key_file_remove_group
g_key_file_remove_key
g_key_file_set_value
g_key_file_to_data
g_key_file_unref
g_list_append
g_list_concat
g_list_copy_deep
g_list_delete_link
g_list_find
g_list_find_custom
g_list_foreach
g_list_free
g_list_free_full
g_list_insert_before
g_list_insert_sorted
g_list_length
g_list_prepend
g_list_remove
g_list_remove_link
g_list_reverse
g_list_sort
g_list_sort_with_data
g_locale_from_utf8
g_log
g_log_set_always_fatal
g_log_set_handler
g_log_structured_array
g_log_structured_standard
g_logv
g_lstat
g_main_context_acquire
g_main_context_default
g_main_context_get_thread_default
g_main_context_invoke
g_main_context_invoke_full
g_main_context_iteration
g_main_context_new
g_main_context_pop_thread_default
g_main_context_push_thread_default
g_main_context_ref
g_main_context_ref_thread_default
g_main_context_release
g_main_context_unref
g_main_current_source
g_main_loop_new
g_main_loop_quit
g_main_loop_run
g_main_loop_unref
g_malloc
g_malloc0
g_malloc0_n
g_malloc_n
g_mapped_file_get_bytes
g_mapped_file_get_contents
g_mapped_file_get_length
g_mapped_file_new
g_mapped_file_unref
g_markup_collect_attributes
g_markup_error_quark
g_markup_parse_context_end_parse
g_markup_parse_context_free
g_markup_parse_context_get_element_stack
g_markup_parse_context_get_position
g_markup_parse_context_get_user_data
g_markup_parse_context_new
g_markup_parse_context_parse
g_markup_printf_escaped
g_memdup2
g_mkdir
g_mkdir_with_parents
g_mkstemp
g_mkstemp_full
g_mutex_clear
g_mutex_init
g_mutex_lock
g_mutex_trylock
g_mutex_unlock
g_node_children_foreach
g_node_destroy
g_node_insert_before
g_node_n_children
g_node_new
g_node_traverse
g_once_impl
g_once_init_enter
g_once_init_leave
g_open
g_option_context_add_group
g_option_context_free
g_option_context_new
g_option_context_parse_strv
g_option_context_set_description
g_option_context_set_help_enabled
g_option_context_set_ignore_unknown_options
g_option_context_set_main_group
g_option_context_set_summary
g_option_group_add_entries
g_option_group_new
g_option_group_set_translation_domain
g_option_group_unref
g_parse_debug_string
g_path_get_basename
g_path_get_dirname
g_path_is_absolute
g_path_skip_root
g_poll
g_prefix_error
g_print
g_printerr
g_private_get
g_private_replace
g_private_set
g_propagate_error
g_propagate_prefixed_error
g_ptr_array_add
g_ptr_array_copy
g_ptr_array_foreach
g_ptr_array_free
g_ptr_array_insert
g_ptr_array_new
g_ptr_array_new_full
g_ptr_array_new_with_free_func
g_ptr_array_remove
g_ptr_array_remove_index
g_ptr_array_remove_index_fast
g_ptr_array_set_size
g_ptr_array_sized_new
g_ptr_array_sort
g_ptr_array_unref
g_qsort_with_data
g_quark_from_static_string
g_quark_from_string
g_quark_to_string
g_quark_try_string
g_queue_clear
g_queue_foreach
g_queue_free
g_queue_free_full
g_queue_get_length
g_queue_init
g_queue_is_empty
g_queue_new
g_queue_peek_head
g_queue_pop_head
g_queue_pop_tail
g_queue_push_head_link
g_queue_push_tail
g_queue_remove
g_random_double
g_random_int
g_random_int_range
g_realloc
g_realloc_n
g_rec_mutex_lock
g_rec_mutex_unlock
g_ref_count_dec
g_ref_count_inc
g_ref_count_init
g_remove
g_rename
g_return_if_fail_warning
g_rmdir
g_rw_lock_reader_lock
g_rw_lock_reader_unlock
g_rw_lock_writer_lock
g_rw_lock_writer_unlock
g_scanner_destroy
g_scanner_eof
g_scanner_get_next_token
g_scanner_input_file
g_scanner_new
g_scanner_scope_add_symbol
g_sequence_free
g_sequence_get
g_sequence_get_begin_iter
g_sequence_insert_sorted
g_sequence_is_empty
g_sequence_iter_is_end
g_sequence_new
g_sequence_remove
g_sequence_sort
g_sequence_sort_changed
g_set_error
g_set_error_literal
g_set_prgname
g_setenv
g_shell_parse_argv
g_shell_quote
g_slice_alloc
g_slice_copy
g_slice_free1
g_slist_append
g_slist_concat
g_slist_copy
g_slist_delete_link
g_slist_find
g_slist_find_custom
g_slist_foreach
g_slist_free
g_slist_free_1
g_slist_free_full
g_slist_insert_sorted
g_slist_last
g_slist_length
g_slist_nth_data
g_slist_prepend
g_slist_remove
g_slist_reverse
g_slist_sort
g_snprintf
g_source_add_child_source
g_source_add_poll
g_source_attach
g_source_destroy
g_source_get_context
g_source_get_ready_time
g_source_get_time
g_source_is_destroyed
g_source_new
g_source_ref
g_source_remove
g_source_remove_poll
g_source_set_callback
g_source_set_dispose_function
g_source_set_name
g_source_set_priority
g_source_set_ready_time
g_source_set_static_name
g_source_unref
g_spawn_async
g_spawn_command_line_sync
g_stat
g_str_equal
g_str_has_prefix
g_str_has_suffix
g_str_hash
g_str_to_ascii
g_strchomp
g_strchug
g_strcmp0
g_strcompress
g_strconcat
g_strdup
g_strdup_printf
g_strdup_vprintf
g_strdupv
g_strerror
g_strfreev
g_string_append
g_string_append_len
g_string_append_printf
g_string_append_uri_escaped
g_string_erase
g_string_free
g_string_insert
g_string_insert_c
g_string_insert_len
g_string_new
g_string_prepend
g_string_prepend_c
g_string_set_size
g_string_sized_new
g_string_truncate
g_strjoin
g_strjoinv
g_strlcpy
g_strndup
g_strrstr
g_strrstr_len
g_strsplit
g_strstr_len
g_strv_length
g_thread_join
g_thread_new
g_thread_pool_free
g_thread_pool_move_to_front
g_thread_pool_new
g_thread_pool_push
g_thread_pool_set_max_threads
g_thread_pool_set_sort_function
g_thread_pool_unprocessed
g_thread_self
g_thread_try_new
g_thread_unref
g_thread_yield
g_time_zone_new_local
g_time_zone_unref
g_timeout_add
g_timeout_source_new
g_timeout_source_new_seconds
g_timer_destroy
g_timer_elapsed
g_timer_new
g_timer_start
g_tree_foreach
g_tree_insert
g_tree_lookup
g_tree_lookup_extended
g_tree_new_full
g_tree_nnodes
g_tree_remove
g_tree_unref
g_try_malloc
g_try_malloc0
g_try_malloc_n
g_try_realloc
g_unichar_break_type
g_unichar_get_script
g_unichar_isalnum
g_unichar_islower
g_unichar_iswide
g_unichar_iszerowidth
g_unichar_tolower
g_unichar_totitle
g_unichar_toupper
g_unichar_type
g_unicode_script_to_iso15924
g_unlink
g_uri_escape_string

api-ms-win-crt-convert-l1-1-0

_strtod_l
_strtoi64_l
_strtoui64_l
atof
atoi
atol
mbrtowc
mbsrtowcs
mbstowcs
strtod
strtol
strtoul
wcrtomb
wcrtomb_s
wcstol
wcstombs
wcstoul

api-ms-win-crt-filesystem-l1-1-0

_access
_chmod
_findclose
_findfirst64
_findnext64
_fstat64
_fullpath
_lock_file
_mkdir
_rmdir
_stat64
_umask
_unlink
_unlock_file
_wstat64
remove
rename

api-ms-win-crt-heap-l1-1-0

_aligned_free
_aligned_malloc
_set_new_mode
calloc
free
malloc
realloc

api-ms-win-crt-math-l1-1-0

__setusermatherr
_fdopen
_hypot
acos
asin
atan
cosh
frexp
log10
sinh
tan
tanh

api-ms-win-crt-private-l1-1-0

__intrinsic_setjmpex
longjmp
memchr
memcmp
memcpy
memmove
strchr
strrchr
strstr
wcschr
wcsrchr

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
__p___wargv
__sys_nerr
_assert
_beginthreadex
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_errno
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initialize_wide_environment
_initterm
_register_onexit_function
abort
exit
perror
raise
strerror
strerror_s

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vfprintf
__stdio_common_vfscanf
__stdio_common_vfwprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_close
_dup
_fileno
_fseeki64
_get_osfhandle
_getcwd
_lseek
_lseeki64
_open
_read
_setmaxstdio
_setmode
_sopen
_wfopen
_wopen
_write
fclose
feof
ferror
fflush
fgetc
fgetwc
fopen
fputc
fputs
fread
freopen
fseek
ftell
fwrite
getc
putchar
puts
rewind
ungetc
ungetwc

api-ms-win-crt-string-l1-1-0

_isctype_l
_iswlower_l
_strdup
_stricmp
_wcsdup
_wcsicmp
_wcsnicmp
isalpha
islower
isprint
isspace
isupper
iswctype
isxdigit
mbrlen
memset
strcat
strcmp
strcpy
strcspn
strlen
strncat
strncmp
strncpy
strpbrk
strspn
tolower
toupper
towlower
wcscat
wcscmp
wcscpy
wcslen

api-ms-win-crt-time-l1-1-0

__daylight
__timezone
__tzname
_ctime64
_gmtime64_s
_localtime64_s
_strftime_l
_time64
_tzset
_utime64

api-ms-win-crt-utility-l1-1-0

bsearch
qsort
rand
rand_s
srand

kernel32

AcquireSRWLockExclusive
AllocConsole
CancelIo
CloseHandle
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateMemoryResourceNotification
CreateMutexA
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlushFileBuffers
FormatMessageA
FreeLibrary
GetConsoleMode
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLogicalDrives
GetLongPathNameA
GetLongPathNameW
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleW
GetNativeSystemInfo
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemWow64DirectoryW
GetTempPathA
GetTickCount
GetVolumeInformationW
GetVolumePathNameW
GetWindowsDirectoryA
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionEx
InitializeSRWLock
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MapViewOfFile
MapViewOfFileEx
Module32First
Module32Next
MultiByteToWideChar
OpenFileMappingA
OpenProcess
QueryMemoryResourceNotification
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadDirectoryChangesW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetConsoleTitleW
SetEndOfFile
SetEvent
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetThreadErrorMode
SetThreadPriority
SetThreadStackGuarantee
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SwitchToThread
SystemTimeToFileTime
TlsAlloc
TlsGetValue
TlsSetValue
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
WriteConsoleW
WriteFile

bcrypt

BCryptGenRandom

api-ms-win-crt-environment-l1-1-0

__p__environ
__p__wenviron
getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr
_mbtowc_l

advapi32

ConvertSidToStringSidA
CopySid
GetCurrentHwProfileA
GetFileSecurityW
GetLengthSid
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
GetTokenInformation
IsValidSid
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegLoadMUIStringW
RegNotifyChangeKeyValue
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW

shell32

SHBindToParent
SHCreateShellItemArrayFromIDLists
SHFileOperationW
SHGetDesktopFolder
SHParseDisplayName

shlwapi

SHLoadIndirectString
StrRetToStrW

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

ws2_32

WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
WSAGetLastError
WSAIoctl
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSAStartup
WSAWaitForMultipleEvents
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohs
recv
select
send
setsockopt
shutdown
socket

iphlpapi

CancelMibChangeNotify2
GetAdaptersAddresses
GetIpForwardTable2
NotifyRouteChange2
if_nametoindex

user32

DispatchMessageA
GetMessageA
PostQuitMessage
TranslateMessage

api-ms-win-crt-conio-l1-1-0

_getch

dnsapi

DnsFree
DnsQuery_A

Exports

Exports

DllMain
_vips__argument_id
build_scan_properties
cbrt_table
g_action_activate
g_action_change_state
g_action_get_enabled
g_action_get_name
g_action_get_parameter_type
g_action_get_state
g_action_get_state_hint
g_action_get_state_type
g_action_get_type
g_action_group_action_added
g_action_group_action_enabled_changed
g_action_group_action_removed
g_action_group_action_state_changed
g_action_group_activate_action
g_action_group_change_action_state
g_action_group_get_action_enabled
g_action_group_get_action_parameter_type
g_action_group_get_action_state
g_action_group_get_action_state_hint
g_action_group_get_action_state_type
g_action_group_get_type
g_action_group_has_action
g_action_group_list_actions
g_action_group_query_action
g_action_map_add_action
g_action_map_add_action_entries
g_action_map_get_type
g_action_map_lookup_action
g_action_map_remove_action
g_action_name_is_valid
g_action_parse_detailed_name
g_action_print_detailed_name
g_app_info_add_supports_type
g_app_info_can_delete
g_app_info_can_remove_supports_type
g_app_info_create_flags_get_type
g_app_info_create_from_commandline
g_app_info_delete
g_app_info_dup
g_app_info_equal
g_app_info_get_all
g_app_info_get_all_for_type
g_app_info_get_commandline
g_app_info_get_default_for_type
g_app_info_get_default_for_uri_scheme
g_app_info_get_description
g_app_info_get_display_name
g_app_info_get_executable
g_app_info_get_fallback_for_type
g_app_info_get_icon
g_app_info_get_id
g_app_info_get_name
g_app_info_get_recommended_for_type
g_app_info_get_supported_types
g_app_info_get_type
g_app_info_launch
g_app_info_launch_default_for_uri
g_app_info_launch_default_for_uri_async
g_app_info_launch_default_for_uri_finish
g_app_info_launch_uris
g_app_info_launch_uris_async
g_app_info_launch_uris_finish
g_app_info_monitor_get
g_app_info_monitor_get_type
g_app_info_remove_supports_type
g_app_info_reset_type_associations
g_app_info_set_as_default_for_extension
g_app_info_set_as_default_for_type
g_app_info_set_as_last_used_for_type
g_app_info_should_show
g_app_info_supports_files
g_app_info_supports_uris
g_app_launch_context_get_display
g_app_launch_context_get_environment
g_app_launch_context_get_startup_notify_id
g_app_launch_context_get_type
g_app_launch_context_launch_failed
g_app_launch_context_new
g_app_launch_context_setenv
g_app_launch_context_unsetenv
g_application_activate
g_application_add_main_option
g_application_add_main_option_entries
g_application_add_option_group
g_application_bind_busy_property
g_application_command_line_create_file_for_arg
g_application_command_line_get_arguments
g_application_command_line_get_cwd
g_application_command_line_get_environ
g_application_command_line_get_exit_status
g_application_command_line_get_is_remote
g_application_command_line_get_options_dict
g_application_command_line_get_platform_data
g_application_command_line_get_stdin
g_application_command_line_get_type
g_application_command_line_getenv
g_application_command_line_print
g_application_command_line_printerr
g_application_command_line_set_exit_status
g_application_flags_get_type
g_application_get_application_id
g_application_get_dbus_connection
g_application_get_dbus_object_path
g_application_get_default
g_application_get_flags
g_application_get_inactivity_timeout
g_application_get_is_busy
g_application_get_is_registered
g_application_get_is_remote
g_application_get_resource_base_path
g_application_get_type
g_application_hold
g_application_id_is_valid
g_application_mark_busy
g_application_new
g_application_open
g_application_quit
g_application_register
g_application_release
g_application_run
g_application_send_notification
g_application_set_action_group
g_application_set_application_id
g_application_set_default
g_application_set_flags
g_application_set_inactivity_timeout
g_application_set_option_context_description
g_application_set_option_context_parameter_string
g_application_set_option_context_summary
g_application_set_resource_base_path
g_application_unbind_busy_property
g_application_unmark_busy
g_application_withdraw_notification
g_ask_password_flags_get_type
g_async_initable_get_type
g_async_initable_init_async
g_async_initable_init_finish
g_async_initable_new_async
g_async_initable_new_finish
g_async_initable_new_valist_async
g_async_initable_newv_async
g_async_result_get_source_object
g_async_result_get_type
g_async_result_get_user_data
g_async_result_is_tagged
g_async_result_legacy_propagate_error
g_buffered_input_stream_fill
g_buffered_input_stream_fill_async
g_buffered_input_stream_fill_finish
g_buffered_input_stream_get_available
g_buffered_input_stream_get_buffer_size
g_buffered_input_stream_get_type
g_buffered_input_stream_new
g_buffered_input_stream_new_sized
g_buffered_input_stream_peek
g_buffered_input_stream_peek_buffer
g_buffered_input_stream_read_byte
g_buffered_input_stream_set_buffer_size
g_bus_get
g_bus_get_finish
g_bus_get_sync
g_bus_name_owner_flags_get_type
g_bus_name_watcher_flags_get_type
g_bus_type_get_type
g_bus_unwatch_name
g_bus_watch_name
g_bus_watch_name_on_connection
g_bus_watch_name_on_connection_with_closures
g_bus_watch_name_with_closures
g_bytes_icon_get_bytes
g_bytes_icon_get_type
g_bytes_icon_new
g_cancellable_cancel
g_cancellable_connect
g_cancellable_disconnect
g_cancellable_get_current
g_cancellable_get_fd
g_cancellable_get_type
g_cancellable_is_cancelled
g_cancellable_make_pollfd
g_cancellable_new
g_cancellable_pop_current
g_cancellable_push_current
g_cancellable_release_fd
g_cancellable_reset
g_cancellable_set_error_if_cancelled
g_cancellable_source_new
g_content_type_can_be_executable
g_content_type_equals
g_content_type_from_mime_type
g_content_type_get_description
g_content_type_get_generic_icon_name
g_content_type_get_icon
g_content_type_get_mime_dirs
g_content_type_get_mime_type
g_content_type_get_symbolic_icon
g_content_type_guess
g_content_type_guess_for_tree
g_content_type_is_a
g_content_type_is_mime_type
g_content_type_is_unknown
g_content_type_set_mime_dirs
g_content_types_get_registered
g_converter_convert
g_converter_flags_get_type
g_converter_get_type
g_converter_input_stream_get_converter
g_converter_input_stream_get_type
g_converter_input_stream_new
g_converter_reset
g_converter_result_get_type
g_credentials_get_native
g_credentials_get_type
g_credentials_is_same_user
g_credentials_new
g_credentials_set_native
g_credentials_to_string
g_credentials_type_get_type
g_data_input_stream_get_byte_order
g_data_input_stream_get_newline_type
g_data_input_stream_get_type
g_data_input_stream_new
g_data_input_stream_read_byte
g_data_input_stream_read_int16
g_data_input_stream_read_int32
g_data_input_stream_read_int64
g_data_input_stream_read_line
g_data_input_stream_read_line_async
g_data_input_stream_read_line_finish
g_data_input_stream_read_line_finish_utf8
g_data_input_stream_read_line_utf8
g_data_input_stream_read_uint16
g_data_input_stream_read_uint32
g_data_input_stream_read_uint64
g_data_input_stream_read_until
g_data_input_stream_read_until_async
g_data_input_stream_read_until_finish
g_data_input_stream_read_upto
g_data_input_stream_read_upto_async
g_data_input_stream_read_upto_finish
g_data_input_stream_set_byte_order
g_data_input_stream_set_newline_type
g_data_output_stream_get_byte_order
g_data_output_stream_get_type
g_data_output_stream_new
g_data_output_stream_put_byte
g_data_output_stream_put_int16
g_data_output_stream_put_int32
g_data_output_stream_put_int64
g_data_output_stream_put_string
g_data_output_stream_put_uint16
g_data_output_stream_put_uint32
g_data_output_stream_put_uint64
g_data_output_stream_set_byte_order
g_data_stream_byte_order_get_type
g_data_stream_newline_type_get_type
g_datagram_based_condition_check
g_datagram_based_condition_wait
g_datagram_based_create_source
g_datagram_based_get_type
g_datagram_based_receive_messages
g_datagram_based_send_messages
g_dbus_action_group_get
g_dbus_action_group_get_type
g_dbus_address_escape_value
g_dbus_address_get_for_bus_sync
g_dbus_address_get_stream
g_dbus_address_get_stream_finish
g_dbus_address_get_stream_sync
g_dbus_annotation_info_get_type
g_dbus_annotation_info_lookup
g_dbus_annotation_info_ref
g_dbus_annotation_info_unref
g_dbus_arg_info_get_type
g_dbus_arg_info_ref
g_dbus_arg_info_unref
g_dbus_auth_observer_allow_mechanism
g_dbus_auth_observer_authorize_authenticated_peer
g_dbus_auth_observer_get_type
g_dbus_auth_observer_new
g_dbus_call_flags_get_type
g_dbus_capability_flags_get_type
g_dbus_connection_add_filter
g_dbus_connection_call
g_dbus_connection_call_finish
g_dbus_connection_call_sync
g_dbus_connection_close
g_dbus_connection_close_finish
g_dbus_connection_close_sync
g_dbus_connection_emit_signal
g_dbus_connection_export_action_group
g_dbus_connection_flags_get_type
g_dbus_connection_flush
g_dbus_connection_flush_finish
g_dbus_connection_flush_sync
g_dbus_connection_get_capabilities
g_dbus_connection_get_exit_on_close
g_dbus_connection_get_flags
g_dbus_connection_get_guid
g_dbus_connection_get_last_serial
g_dbus_connection_get_peer_credentials
g_dbus_connection_get_stream
g_dbus_connection_get_type
g_dbus_connection_get_unique_name
g_dbus_connection_is_closed
g_dbus_connection_new
g_dbus_connection_new_finish
g_dbus_connection_new_for_address
g_dbus_connection_new_for_address_finish
g_dbus_connection_new_for_address_sync
g_dbus_connection_new_sync
g_dbus_connection_register_object
g_dbus_connection_register_object_with_closures
g_dbus_connection_register_subtree
g_dbus_connection_remove_filter
g_dbus_connection_send_message
g_dbus_connection_send_message_with_reply
g_dbus_connection_send_message_with_reply_finish
g_dbus_connection_send_message_with_reply_sync
g_dbus_connection_set_exit_on_close
g_dbus_connection_signal_subscribe
g_dbus_connection_signal_unsubscribe
g_dbus_connection_start_message_processing
g_dbus_connection_unexport_action_group
g_dbus_connection_unregister_object
g_dbus_connection_unregister_subtree
g_dbus_error_encode_gerror
g_dbus_error_get_remote_error
g_dbus_error_get_type
g_dbus_error_is_remote_error
g_dbus_error_new_for_dbus_error
g_dbus_error_quark
g_dbus_error_register_error
g_dbus_error_register_error_domain
g_dbus_error_set_dbus_error
g_dbus_error_set_dbus_error_valist
g_dbus_error_strip_remote_error
g_dbus_error_unregister_error
g_dbus_escape_object_path
g_dbus_escape_object_path_bytestring
g_dbus_generate_guid
g_dbus_gvalue_to_gvariant
g_dbus_gvariant_to_gvalue
g_dbus_interface_dup_object
g_dbus_interface_get_info
g_dbus_interface_get_object
g_dbus_interface_get_type
g_dbus_interface_info_cache_build
g_dbus_interface_info_cache_release
g_dbus_interface_info_generate_xml
g_dbus_interface_info_get_type
g_dbus_interface_info_lookup_method
g_dbus_interface_info_lookup_property
g_dbus_interface_info_lookup_signal
g_dbus_interface_info_ref
g_dbus_interface_info_unref
g_dbus_interface_set_object
g_dbus_interface_skeleton_export
g_dbus_interface_skeleton_flags_get_type
g_dbus_interface_skeleton_flush
g_dbus_interface_skeleton_get_connection
g_dbus_interface_skeleton_get_connections
g_dbus_interface_skeleton_get_flags
g_dbus_interface_skeleton_get_info
g_dbus_interface_skeleton_get_object_path
g_dbus_interface_skeleton_get_properties
g_dbus_interface_skeleton_get_type
g_dbus_interface_skeleton_get_vtable
g_dbus_interface_skeleton_has_connection
g_dbus_interface_skeleton_set_flags
g_dbus_interface_skeleton_unexport
g_dbus_interface_skeleton_unexport_from_connection
g_dbus_is_address
g_dbus_is_error_name
g_dbus_is_guid
g_dbus_is_interface_name
g_dbus_is_member_name
g_dbus_is_name
g_dbus_is_supported_address
g_dbus_is_unique_name
g_dbus_message_byte_order_get_type
g_dbus_message_bytes_needed
g_dbus_message_copy
g_dbus_message_flags_get_type
g_dbus_message_get_arg0
g_dbus_message_get_body
g_dbus_message_get_byte_order
g_dbus_message_get_destination
g_dbus_message_get_error_name
g_dbus_message_get_flags
g_dbus_message_get_header
g_dbus_message_get_header_fields
g_dbus_message_get_interface
g_dbus_message_get_locked
g_dbus_message_get_member
g_dbus_message_get_message_type
g_dbus_message_get_num_unix_fds
g_dbus_message_get_path
g_dbus_message_get_reply_serial
g_dbus_message_get_sender
g_dbus_message_get_serial
g_dbus_message_get_signature
g_dbus_message_get_type
g_dbus_message_header_field_get_type
g_dbus_message_lock
g_dbus_message_new
g_dbus_message_new_from_blob
g_dbus_message_new_method_call
g_dbus_message_new_method_error
g_dbus_message_new_method_error_literal
g_dbus_message_new_method_error_valist
g_dbus_message_new_method_reply
g_dbus_message_new_signal
g_dbus_message_print
g_dbus_message_set_body
g_dbus_message_set_byte_order
g_dbus_message_set_destination
g_dbus_message_set_error_name
g_dbus_message_set_flags
g_dbus_message_set_header
g_dbus_message_set_interface
g_dbus_message_set_member
g_dbus_message_set_message_type
g_dbus_message_set_num_unix_fds
g_dbus_message_set_path
g_dbus_message_set_reply_serial
g_dbus_message_set_sender
g_dbus_message_set_serial
g_dbus_message_set_signature
g_dbus_message_to_blob
g_dbus_message_to_gerror
g_dbus_message_type_get_type
g_dbus_method_info_get_type
g_dbus_method_info_ref
g_dbus_method_info_unref
g_dbus_method_invocation_get_connection
g_dbus_method_invocation_get_interface_name
g_dbus_method_invocation_get_message
g_dbus_method_invocation_get_method_info
g_dbus_method_invocation_get_method_name
g_dbus_method_invocation_get_object_path
g_dbus_method_invocation_get_parameters
g_dbus_method_invocation_get_property_info
g_dbus_method_invocation_get_sender
g_dbus_method_invocation_get_type
g_dbus_method_invocation_get_user_data
g_dbus_method_invocation_return_dbus_error
g_dbus_method_invocation_return_error
g_dbus_method_invocation_return_error_literal
g_dbus_method_invocation_return_error_valist
g_dbus_method_invocation_return_gerror
g_dbus_method_invocation_return_value
g_dbus_method_invocation_take_error
g_dbus_node_info_generate_xml
g_dbus_node_info_get_type
g_dbus_node_info_lookup_interface
g_dbus_node_info_new_for_xml
g_dbus_node_info_ref
g_dbus_node_info_unref
g_dbus_object_get_interface
g_dbus_object_get_interfaces
g_dbus_object_get_object_path
g_dbus_object_get_type
g_dbus_object_manager_client_flags_get_type
g_dbus_object_skeleton_add_interface
g_dbus_object_skeleton_flush
g_dbus_object_skeleton_get_type
g_dbus_object_skeleton_new
g_dbus_object_skeleton_remove_interface
g_dbus_object_skeleton_remove_interface_by_name
g_dbus_object_skeleton_set_object_path
g_dbus_property_info_flags_get_type
g_dbus_property_info_get_type
g_dbus_property_info_ref
g_dbus_property_info_unref
g_dbus_proxy_call
g_dbus_proxy_call_finish
g_dbus_proxy_call_sync
g_dbus_proxy_flags_get_type
g_dbus_proxy_get_cached_property
g_dbus_proxy_get_cached_property_names
g_dbus_proxy_get_connection
g_dbus_proxy_get_default_timeout
g_dbus_proxy_get_flags
g_dbus_proxy_get_interface_info
g_dbus_proxy_get_interface_name
g_dbus_proxy_get_name
g_dbus_proxy_get_name_owner
g_dbus_proxy_get_object_path
g_dbus_proxy_get_type
g_dbus_proxy_new
g_dbus_proxy_new_finish
g_dbus_proxy_new_for_bus
g_dbus_proxy_new_for_bus_finish
g_dbus_proxy_new_for_bus_sync
g_dbus_proxy_new_sync

Sections

.text
Size: 14.5MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 423KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 257KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 708B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.
Size: 512B - Virtual size: 47B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Hash
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ast
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.fmt
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0Drawing
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

0eE
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

17hb3bc4
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1ddE
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

20
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

2ebc0c26
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

3444f611
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

48d49ad0
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4core3fm
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

53f5410f
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

560e7d49
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5aea0994
Size: 512B - Virtual size: 27B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5e0dE
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5parse16
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6Vec
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6af02c44
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

6create1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7h27e076
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7h75e613
Size: 512B - Virtual size: 15B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

82777fbc
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

840689e6
Size: 512B - Virtual size: 39B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

84a7c0f3
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

95082cdE
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

98884068
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9a1d1981
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9ddE
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Default
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

FeSpecul
Size: 512B - Virtual size: 51B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

LT
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N12regex
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N3std11c
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N7librsv
Size: 512B - Virtual size: 153B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

N7librsv
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RawEncod
Size: 512B - Virtual size: 131B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

T
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ZN12rege
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ZN4core3
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ZN82_
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_encodin
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_num_or_
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

a
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

abc18dfc
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ageSurfa
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

arseValu
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

arsers
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ata
Size: 512B - Virtual size: 49B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

beam_deq
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

bedc5288
Size: 512B - Virtual size: 75B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

brsvg
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

c_api6ha
Size: 512B - Virtual size: 225B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ce
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

cedb2ebb
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

coder
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

core
Size: 512B - Virtual size: 27B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

core3ptr
Size: 512B - Virtual size: 43B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

d
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

dE
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 512B - Virtual size: 31B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

deque21V
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

e2eE
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ec19RawV
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ence14No
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ent21Ele
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ext
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f1291c55
Size: 512B - Virtual size: 19B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

f5507fdE
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

face66Im
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fmt17hd4
Size: 512B - Virtual size: 26B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

func_r17
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

g
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ick
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ilter_ma
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

index_si
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

istry8Re
Size: 512B - Virtual size: 180B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

librsvg7
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

mut
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

nglebyte
Size: 512B - Virtual size: 65B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ntax7uni
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

num_or_p
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

operties
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

or
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

pdata
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ple5fiel
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ptr80dro
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rI
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

read_loc
Size: 512B - Virtual size: 149B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rs
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

s
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

se
Size: - Virtual size: 1B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sleep5Sl
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

st
Size: 1024B - Virtual size: 620B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

sure
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

svg5c_ap
Size: 512B - Virtual size: 53B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

svgEleme
Size: 512B - Virtual size: 5B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

t
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

teDecode
Size: 512B - Virtual size: 39B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

terator
Size: 512B - Virtual size: 95B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

to17h3ec
Size: 512B - Virtual size: 59B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

tr56drop
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

tr73drop
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

tr81drop
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

transiti
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

u20
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

uilder5b
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

vg
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

x
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

xdata
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

y9Static
Size: 512B - Virtual size: 37B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

yn
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

yon_core
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

e503bafcf92714df44e0dd2e4270a8be

Headers

DLL Characteristics

File Characteristics

Imports

libgobject-2.0-0

libglib-2.0-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-private-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

kernel32

bcrypt

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

advapi32

shell32

shlwapi

ole32

ws2_32

iphlpapi

user32

api-ms-win-crt-conio-l1-1-0

dnsapi

Exports

Exports

Sections

.text Size: 14.5MB - Virtual size: 14.5MB

.rdata Size: 4.4MB - Virtual size: 4.4MB

.data Size: 423KB - Virtual size: 2.5MB

.pdata Size: 257KB - Virtual size: 256KB

Size: 1024B - Virtual size: 708B

. Size: 512B - Virtual size: 47B

.Hash Size: 512B - Virtual size: 37B

.ast Size: 512B - Virtual size: 14B

.fmt Size: 512B - Virtual size: 14B

.tls Size: 512B - Virtual size: 400B

.xdata Size: 512B - Virtual size: 42B

0Drawing Size: 512B - Virtual size: 59B

0eE Size: 512B - Virtual size: 13B

17hb3bc4 Size: 512B - Virtual size: 13B

1ddE Size: 512B - Virtual size: 36B

20 Size: 512B - Virtual size: 53B

2ebc0c26 Size: 512B - Virtual size: 52B

3444f611 Size: 512B - Virtual size: 36B

48d49ad0 Size: 512B - Virtual size: 79B

4core3fm Size: 512B - Virtual size: 175B

53f5410f Size: 512B - Virtual size: 13B

560e7d49 Size: 512B - Virtual size: 23B

5aea0994 Size: 512B - Virtual size: 27B

5e0dE Size: 512B - Virtual size: 79B

5parse16 Size: 512B - Virtual size: 79B

6Vec Size: 1024B - Virtual size: 732B

6af02c44 Size: 512B - Virtual size: 82B

6create1 Size: 512B - Virtual size: 28B

7h27e076 Size: 512B - Virtual size: 175B

7h75e613 Size: 512B - Virtual size: 15B

82777fbc Size: 512B - Virtual size: 65B

840689e6 Size: 512B - Virtual size: 39B

84a7c0f3 Size: 512B - Virtual size: 53B

95082cdE Size: 512B - Virtual size: 65B

98884068 Size: 512B - Virtual size: 148B

9a1d1981 Size: 512B - Virtual size: 14B

9ddE Size: 512B - Virtual size: 37B

Default Size: 512B - Virtual size: 28B

FeSpecul Size: 512B - Virtual size: 51B

LT Size: 512B - Virtual size: 92B

.text
Size: 14.5MB - Virtual size: 14.5MB

.rdata
Size: 4.4MB - Virtual size: 4.4MB

.data
Size: 423KB - Virtual size: 2.5MB

.pdata
Size: 257KB - Virtual size: 256KB

.
Size: 512B - Virtual size: 47B

.Hash
Size: 512B - Virtual size: 37B

.ast
Size: 512B - Virtual size: 14B

.fmt
Size: 512B - Virtual size: 14B

.tls
Size: 512B - Virtual size: 400B

.xdata
Size: 512B - Virtual size: 42B

0Drawing
Size: 512B - Virtual size: 59B

0eE
Size: 512B - Virtual size: 13B

17hb3bc4
Size: 512B - Virtual size: 13B

1ddE
Size: 512B - Virtual size: 36B

20
Size: 512B - Virtual size: 53B

2ebc0c26
Size: 512B - Virtual size: 52B

3444f611
Size: 512B - Virtual size: 36B

48d49ad0
Size: 512B - Virtual size: 79B

4core3fm
Size: 512B - Virtual size: 175B

53f5410f
Size: 512B - Virtual size: 13B

560e7d49
Size: 512B - Virtual size: 23B

5aea0994
Size: 512B - Virtual size: 27B

5e0dE
Size: 512B - Virtual size: 79B

5parse16
Size: 512B - Virtual size: 79B

6Vec
Size: 1024B - Virtual size: 732B

6af02c44
Size: 512B - Virtual size: 82B

6create1
Size: 512B - Virtual size: 28B

7h27e076
Size: 512B - Virtual size: 175B

7h75e613
Size: 512B - Virtual size: 15B

82777fbc
Size: 512B - Virtual size: 65B

840689e6
Size: 512B - Virtual size: 39B

84a7c0f3
Size: 512B - Virtual size: 53B

95082cdE
Size: 512B - Virtual size: 65B

98884068
Size: 512B - Virtual size: 148B

9a1d1981
Size: 512B - Virtual size: 14B

9ddE
Size: 512B - Virtual size: 37B

Default
Size: 512B - Virtual size: 28B

FeSpecul
Size: 512B - Virtual size: 51B

LT
Size: 512B - Virtual size: 92B

N12regex
Size: 512B - Virtual size: 49B

N3std11c
Size: 512B - Virtual size: 20B

N7librsv
Size: 512B - Virtual size: 153B

N7librsv
Size: 512B - Virtual size: 14B

RawEncod
Size: 512B - Virtual size: 131B

T
Size: 512B - Virtual size: 52B

ZN12rege
Size: 512B - Virtual size: 141B

ZN4core3
Size: 512B - Virtual size: 14B

ZN82_
Size: 512B - Virtual size: 28B

_encodin
Size: 512B - Virtual size: 8B

_num_or_
Size: 512B - Virtual size: 8B

a
Size: 512B - Virtual size: 50B

abc18dfc
Size: 512B - Virtual size: 5B

ageSurfa
Size: 512B - Virtual size: 148B

arseValu
Size: 512B - Virtual size: 82B

arsers
Size: 512B - Virtual size: 26B

ata
Size: 512B - Virtual size: 49B

beam_deq
Size: 512B - Virtual size: 22B

bedc5288
Size: 512B - Virtual size: 75B

brsvg
Size: 512B - Virtual size: 37B

c
Size: 512B - Virtual size: 42B

c_api6ha
Size: 512B - Virtual size: 225B

ce
Size: 512B - Virtual size: 16B

cedb2ebb
Size: 512B - Virtual size: 21B

coder
Size: 512B - Virtual size: 37B

core
Size: 512B - Virtual size: 27B

core3ptr
Size: 512B - Virtual size: 43B

d
Size: 512B - Virtual size: 8B

dE
Size: 512B - Virtual size: 148B

data
Size: 512B - Virtual size: 31B

deque21V
Size: 512B - Virtual size: 48B

e2eE
Size: 512B - Virtual size: 141B

ec19RawV
Size: 512B - Virtual size: 5B

ence14No
Size: 512B - Virtual size: 37B

ent21Ele
Size: 512B - Virtual size: 14B

ext
Size: 512B - Virtual size: 37B

f1291c55
Size: 512B - Virtual size: 19B

f5507fdE
Size: 512B - Virtual size: 26B

face66Im
Size: 512B - Virtual size: 14B

fmt17hd4
Size: 512B - Virtual size: 26B

func_r17
Size: 512B - Virtual size: 36B