RoboCop-Win64-Shipping[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

RoboCop-Win64-Shipping.exe
Size

128.8MB
MD5

3605470a3a14a9918b50f60c7360072b
SHA1

20f12f4098afffeac117ffa7162f2c7f0a990a1a
SHA256

851f0428ff803e87a7accdd8ea27cb5c0561173fc5ef7912e077df13947d0333
SHA512

318e56173b987e3a8ce76d81af18681262b7d5ace5143259096ca6207d25d56b56286e3228f5b832133160ba48b9dc64f76d26a41ef5b7311a7037887337da2e
SSDEEP

786432:cw+6VBlNBFJ93JIbpvxNUsEiUqx2Pyu2k0G3feS0AJszv/mQf:9nDR0xNUgu29G3rnszvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RoboCop-Win64-Shipping.exe

Files

RoboCop-Win64-Shipping.exe
.exe windows:6 windows x64 arch:x64

5c7cf87b289a8abce5e6bed8d94b0652

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

tbb

?free@allocate_root_with_context_proxy@internal@tbb@@QEBAXAEAVtask@3@@Z
?allocate_via_handler_v3@internal@tbb@@YAPEAX_K@Z
?internal_try_acquire_reader@spin_rw_mutex_v3@tbb@@AEAA_NXZ
?internal_try_acquire_writer@spin_rw_mutex_v3@tbb@@AEAA_NXZ
?internal_upgrade@spin_rw_mutex_v3@tbb@@AEAA_NXZ
?internal_acquire_reader@spin_rw_mutex_v3@tbb@@AEAAXXZ
?internal_acquire_writer@spin_rw_mutex_v3@tbb@@AEAA_NXZ
?get_initial_auto_partitioner_divisor@internal@tbb@@YA_KXZ
?deallocate_via_handler_v3@internal@tbb@@YAXPEAX@Z
?note_affinity@task@tbb@@UEAAXG@Z
?init@task_group_context@tbb@@IEAAXXZ
?is_group_execution_cancelled@task_group_context@tbb@@QEBA_NXZ
??1task_group_context@tbb@@QEAA@XZ
?allocate@allocate_child_proxy@internal@tbb@@QEBAAEAVtask@3@_K@Z
?allocate@allocate_continuation_proxy@internal@tbb@@QEBAAEAVtask@3@_K@Z
?allocate@allocate_root_with_context_proxy@internal@tbb@@QEBAAEAVtask@3@_K@Z

d3d9

D3DPERF_EndEvent
D3DPERF_BeginEvent
Direct3DCreate9

dxgi

CreateDXGIFactory1
CreateDXGIFactory

d3d11

D3D11CreateDevice

xinput1_3

ord3
ord2

dsound

ord3
ord6
ord8
ord11
ord1
ord12

ws2_32

shutdown
setsockopt
sendto
send
socket
gethostname
WSAStartup
WSACleanup
WSAGetLastError
WSAIoctl
select
recvfrom
accept
bind
closesocket
connect
ioctlsocket
getpeername
recv
getsockname
ntohs
getsockopt
ntohl
htonl
htons
getaddrinfo
freeaddrinfo
getnameinfo
inet_pton
inet_addr
InetNtopW
WSASetLastError
listen
WSACloseEvent
WSACreateEvent
WSAEnumNetworkEvents
WSAEventSelect
__WSAFDIsSet

winmm

timeGetDevCaps
timeBeginPeriod
timeEndPeriod
timeGetTime
waveOutGetNumDevs

kernel32

GetProcAddress
LoadLibraryExW
LocalAlloc
SetEvent
WaitForSingleObject
CreateEventW
GetCurrentProcessId
CreateThread
FreeLibrary
GetModuleHandleExW
SetWaitableTimer
CreateWaitableTimerW
LoadLibraryW
GetUserPreferredUILanguages
TlsFree
HeapSetInformation
GetCurrentProcess
K32EnumProcessModulesEx
K32GetModuleFileNameExW
TryAcquireSRWLockExclusive
CreateDirectoryW
CreateFileW
DeleteFileW
FindNextFileW
FlushFileBuffers
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
GetFinalPathNameByHandleW
RemoveDirectoryW
SetEndOfFile
SetFileAttributesW
SetFilePointer
SetFileTime
WriteFile
RaiseException
SetUnhandledExceptionFilter
SetLastError
GetOverlappedResult
ResetEvent
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
ExitProcess
GetCurrentThread
OpenThread
SetThreadPriority
SuspendThread
ResumeThread
GetProcessId
GetThreadContext
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetDllDirectoryW
ReOpenFile
MoveFileW
FileTimeToSystemTime
SystemTimeToFileTime
CreateToolhelp32Snapshot
Thread32First
Thread32Next
RtlCaptureStackBackTrace
VerSetConditionMask
GetEnvironmentVariableW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetDiskFreeSpaceExW
GetFullPathNameW
GetLongPathNameW
GetTempPathW
OutputDebugStringW
SetThreadErrorMode
QueryPerformanceCounter
QueryPerformanceFrequency
ReleaseSemaphore
CreateSemaphoreW
GetProcessTimes
GetExitCodeProcess
GetThreadTimes
OpenProcess
GetCurrentProcessorNumber
GetThreadIdealProcessorEx
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetLocalTime
GetVersionExW
GetLogicalProcessorInformationEx
GetNativeSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
CreateMemoryResourceNotification
QueryMemoryResourceNotification
GetModuleFileNameW
LoadResource
LockResource
SizeofResource
FindResourceW
GetNumaNodeProcessorMaskEx
SetThreadGroupAffinity
OutputDebugStringA
GlobalAlloc
GlobalUnlock
GlobalLock
SetThreadAffinityMask
QueryFullProcessImageNameW
GetComputerNameW
VerifyVersionInfoW
GetSystemPowerStatus
GetNumaProcessorNodeEx
GetUserDefaultLocaleName
SetConsoleCtrlHandler
GetConsoleWindow
K32GetProcessMemoryInfo
Process32FirstW
Process32NextW
GetEnvironmentVariableA
FlsAlloc
FlsSetValue
FlsFree
GetLargePageMinimum
VirtualUnlock
GetNumaHighestNodeNumber
GetNumaProcessorNode
GetNumaNodeProcessorMask
GetProcessHandleCount
GetVersion
MulDiv
GetLocaleInfoW
AllocConsole
FreeConsole
AttachConsole
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleTextAttribute
SetConsoleWindowInfo
SetConsoleTitleW
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
InitializeCriticalSectionAndSpinCount
HeapAlloc
HeapFree
GetProcessHeap
GetFileSize
IsDebuggerPresent
WaitForSingleObjectEx
FlushViewOfFile
WideCharToMultiByte
DuplicateHandle
CreateFileMappingA
MapViewOfFileEx
CreateFileA
FormatMessageA
GetModuleHandleA
GetFileTime
CancelIo
GetOverlappedResultEx
TerminateThread
GetSystemDirectoryW
GetModuleFileNameA
lstrcmpA
WriteConsoleA
SetConsoleTitleA
SwitchToFiber
DeleteFiber
CreateFiber
MultiByteToWideChar
RtlVirtualUnwind
ConvertFiberToThread
ConvertThreadToFiber
LoadLibraryA
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
CreateFile2
lstrlenA
ReplaceFileW
GetACP
GetLocaleInfoEx
GetDynamicTimeZoneInformation
GetGeoInfoW
GetUserGeoID
LCIDToLocaleName
LocaleNameToLCID
GetNumberFormatEx
GetCurrencyFormatEx
ResolveLocaleName
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetTimeFormatEx
GetDateFormatEx
InitOnceBeginInitialize
InitOnceComplete
K32EnumProcessModules
InitializeCriticalSectionEx
WakeConditionVariable
SleepConditionVariableCS
InitializeConditionVariable
WakeAllConditionVariable
SleepEx
GetSystemDirectoryA
GetTickCount
MoveFileExA
CompareFileTime
VirtualQuery
LoadLibraryExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetCriticalSectionSpinCount
InitializeCriticalSection
DebugBreak
SetDllDirectoryW
TryEnterCriticalSection
GetLastError
FormatMessageW
TerminateProcess
CreateProcessW
PeekNamedPipe
GetModuleHandleW
CreatePipe
SetHandleInformation
CloseHandle
ReadFile
SwitchToThread
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
ReleaseSRWLockShared
AcquireSRWLockShared
LocalFree
WriteConsoleW
Sleep
SetErrorMode
GetFileType
FindFirstFileW
FindClose
GetCommandLineW
GetStdHandle
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThreadId
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
CreateEventA
CreateSemaphoreA

user32

DestroyAcceleratorTable
SetWindowTextW
GetClientRect
GetWindowRect
ScreenToClient
GetSysColorBrush
FillRect
LoadAcceleratorsW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetDlgItemTextW
GetDlgItem
CreateDialogParamW
TranslateAcceleratorW
IsWindowVisible
SetWindowPos
ShowWindow
GetSystemMetrics
IsChild
PostQuitMessage
SendMessageW
GetWindowLongW
SetWindowLongW
GetWindowLongPtrW
SetWindowLongPtrW
GetTopWindow
IsDialogMessageW
PeekMessageW
EnumDisplayDevicesA
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA
GetDesktopWindow
SetWindowDisplayAffinity
GetWindowDisplayAffinity
ChangeDisplaySettingsExW
ChangeDisplaySettingsW
DrawTextW
SetForegroundWindow
BeginPaint
EndPaint
DestroyWindow
InvalidateRect
GetRawInputDeviceList
RegisterRawInputDevices
GetRawInputDeviceInfoA
DispatchMessageW
GetWindowInfo
MonitorFromRect
MonitorFromPoint
SystemParametersInfoW
CreateIconIndirect
DrawIconEx
LoadImageW
LoadIconW
LoadCursorFromFileW
LoadCursorW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
EnumChildWindows
GetParent
GetClassLongPtrW
PtInRect
GetSysColor
ClipCursor
WindowFromPoint
MapWindowPoints
EnumDisplaySettingsW
ClientToScreen
GetClipCursor
GetCursorPos
SetCursor
SetCursorPos
ShowCursor
MessageBoxW
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RedrawWindow
SetWindowRgn
ReleaseDC
GetDCEx
GetDC
SetActiveWindow
UpdateWindow
DrawStateW
InsertMenuItemW
TrackPopupMenu
DeleteMenu
TranslateMessage
GetMessageW
AllowSetForegroundWindow
GetWindowThreadProcessId
GetForegroundWindow
PostMessageW
RegisterWindowMessageW
EnableMenuItem
CreatePopupMenu
GetSystemMenu
IsWindowEnabled
EnableWindow
MsgWaitForMultipleObjects
ReleaseCapture
SetCapture
GetCapture
RegisterTouchWindow
CloseTouchInputHandle
GetTouchInputInfo
SendInput
GetAsyncKeyState
GetKeyState
GetFocus
GetActiveWindow
SetFocus
GetClipboardData
GetDlgItemTextW
IsZoomed
IsIconic
SetWindowPlacement
GetWindowPlacement
MoveWindow
FlashWindowEx
SetLayeredWindowAttributes
IsWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
RegisterClassW
DefWindowProcW
GetMessageExtraInfo
TrackMouseEvent
DisableProcessWindowsGhosting
GetKeyboardLayout
GetKeyboardLayoutList
ActivateKeyboardLayout
MapVirtualKeyW
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromWindow
EnumDisplayDevicesW
GetRawInputData

gdi32

SetPixelFormat
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
ChoosePixelFormat
CreateRectRgn
CreatePen
Polygon
ExtTextOutW
TextOutW
MoveToEx
GetObjectW
CreateDIBSection
SetTextAlign
SetBkColor
RoundRect
Rectangle
PtInRegion
LineTo
GetStockObject
GetDeviceCaps
SwapBuffers
CreateFontW
CreateFontIndirectW
CreateBitmap
CombineRgn
SetBkMode
SelectObject
GetTextExtentPoint32W
DeleteDC
SetTextColor
CreateCompatibleDC

advapi32

CryptDestroyHash
RegCreateKeyExW
GetUserNameW
ReportEventW
RegQueryValueExW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
AllocateLocallyUniqueId
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
RegisterEventSourceW
CryptSignHashW
CryptEnumProvidersW
DeregisterEventSource
EventWriteTransfer
EventUnregister
EventRegister
RegOpenKeyExW
RegEnumValueW
RegCloseKey

shell32

CommandLineToArgvW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteExW
ShellExecuteW

ole32

StringFromGUID2
CoInitializeEx
OleInitialize
CoCreateInstance
CoInitialize
OleUninitialize
ReleaseStgMedium
RevokeDragDrop
CoUninitialize
PropVariantClear
PropVariantCopy
IIDFromString
CoTaskMemFree
RegisterDragDrop
CoCreateGuid

oleaut32

VariantCopy
SafeArrayCreateVector
SafeArrayPutElement
SysFreeString
SysAllocString

iphlpapi

IcmpCloseHandle
IcmpCreateFile
GetAdaptersAddresses
GetAdaptersInfo
IcmpSendEcho

setupapi

SetupDiGetDeviceRegistryPropertyW
CM_Get_Device_ID_List_SizeW
CM_Locate_DevNodeW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
CM_Get_Device_ID_ListW
SetupDiOpenDevRegKey
SetupDiGetClassDevsExW
SetupDiGetDevicePropertyW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
CM_Get_Device_IDW
SetupGetInfDriverStoreLocationW

dwmapi

DwmFlush
DwmSetWindowAttribute
DwmGetCompositionTimingInfo
DwmIsCompositionEnabled

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmNotifyIME
ImmGetCompositionStringW
ImmAssociateContext
ImmReleaseContext
ImmGetContext
ImmDestroyContext
ImmCreateContext
ImmGetProperty
ImmGetIMEFileNameW
ImmGetDescriptionW

uiautomationcore

UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaClientsAreListening
UiaReturnRawElementProvider
UiaHostProviderFromHwnd

hid

HidD_GetProductString
HidD_GetManufacturerString
HidD_SetFeature
HidD_GetFeature
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetHidGuid
HidD_GetAttributes
HidP_GetValueCaps
HidP_GetCaps
HidD_GetSerialNumberString

dxva2

DXVA2CreateDirect3DDeviceManager9

winhttp

WinHttpSetOption
WinHttpReadData
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpQueryOption
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpOpen
WinHttpOpenRequest
WinHttpConnect
WinHttpReceiveResponse
WinHttpSetStatusCallback
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryHeaders
WinHttpGetDefaultProxyConfiguration

crypt32

CertEnumCertificatesInStore
CertOpenSystemStoreA
CertGetIntendedKeyUsage
CertGetEnhancedKeyUsage
CertGetCertificateContextProperty
CertFreeCertificateContext
CertGetNameStringW
CertDuplicateCertificateContext
CertFindCertificateInStore
CertOpenStore
CertOpenSystemStoreW
CertCloseStore

cfgmgr32

CM_MapCrToWin32Err
CM_Get_DevNode_PropertyW

opengl32

wglGetCurrentContext
wglDeleteContext
wglGetCurrentDC
wglCreateContext
wglGetProcAddress
wglMakeCurrent

msvcp140

?uncaught_exception@std@@YA_NXZ
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?setf@ios_base@std@@QEAAHHH@Z
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??Bid@locale@std@@QEAA_KXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
_Thrd_join
_Thrd_yield
_Thrd_id
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_do_broadcast_at_thread_exit
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Syserror_map@std@@YAPEBDH@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?widen@?$ctype@D@std@@QEBAPEBDPEBD0PEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?xalloc@ios_base@std@@SAHXZ
?iword@ios_base@std@@QEAAAEAJH@Z
?pword@ios_base@std@@QEAAAEAPEAXH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
?_Xbad_alloc@std@@YAXXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Random_device@std@@YAIXZ
?id@?$ctype@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?setiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?precision@ios_base@std@@QEAA_J_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z
_Cnd_broadcast
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z

bcrypt

BCryptGenRandom

uxtheme

SetWindowTheme

vcruntime140

memcmp
strrchr
wcsrchr
memcpy
__intrinsic_setjmp
memset
__current_exception_context
memmove
__current_exception
wcschr
__std_type_info_compare
longjmp
__RTtypeid
memchr
__RTDynamicCast
_CxxThrowException
__std_type_info_name
__std_exception_destroy
__std_exception_copy
wcsstr
__std_terminate
__CxxFrameHandler3
strstr
_purecall
_set_purecall_handler
__C_specific_handler
strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_endthread
__sys_nerr
_seh_filter_exe
_wassert
_invalid_parameter_noinfo
_errno
terminate
_endthreadex
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
strerror
signal
_getpid
abort
strerror_s
_register_thread_local_exe_atexit_callback
_beginthreadex
_exit
_c_exit
_invoke_watson
_invalid_parameter_noinfo_noreturn
raise
exit
_set_invalid_parameter_handler
_set_app_type
_get_narrow_winmain_command_line
_initterm_e
__sys_errlist
_initterm
_beginthread

api-ms-win-crt-utility-l1-1-0

qsort
rand
srand
rand_s
bsearch
div

api-ms-win-crt-string-l1-1-0

strcpy_s
isalpha
isdigit
wcscat_s
_wcsdup
_wcsicmp
isalnum
_strnicmp
strspn
strnlen
strncat
toupper
_stricmp
iswlower
_wcsnicmp
_wcsupr
iswxdigit
strpbrk
_strdup
iswspace
wcsncmp
tolower
wcsncpy
strncpy_s
iswupper
strncpy
isprint
strcmp
iswalpha
iswdigit
iswalnum
isspace
strcspn
strncmp
wcscpy_s
wcsncpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s
fflush
ftell
__stdio_common_vfwprintf
__acrt_iob_func
fgets
_wfopen
fseek
fopen_s
_open
_set_fmode
_lseeki64
__stdio_common_vswprintf
ferror
feof
__stdio_common_vfprintf
__p__commode
ungetc
_fileno
_setmode
__stdio_common_vsscanf
fwrite
__stdio_common_vfprintf_s
__stdio_common_vsprintf_s
_fseeki64
fsetpos
fread
fputc
fopen
__stdio_common_vswprintf_s
fgetpos
fgetc
puts
fclose
_get_stream_buffer_pointers
_read
fputs
_wfsopen
_write
_close
tmpnam
setvbuf
__stdio_common_vsprintf

api-ms-win-crt-convert-l1-1-0

strtol
strtoll
_wcstoui64
_wcstoi64
wcstoul
_wtof
_strtoi64
_wtoi64
strtoul
_wtoi
strtod
wcstombs
wcstod
atoi
wcstombs_s
atof

api-ms-win-crt-math-l1-1-0

fmodf
fmod
_fdclass
modf
ldexp
logbf
asin
asinf
_finite
logf
powf
nextafterf
sinhf
exp2
atan
sqrtf
sqrt
modff
trunc
acos
expf
truncf
floorf
atanf
cos
sin
tan
_dclass
ceilf
_isnan
floor
__setusermatherr
ceil
sinf
acosf
cosf
frexp
pow
exp
_dsign
log10
atan2f
atan2
log
exp2f
roundf
_dtest
log2
round
log2f
tanf

api-ms-win-crt-heap-l1-1-0

free
_aligned_realloc
_get_heap_handle
_aligned_free
realloc
malloc
_heapchk
_set_new_mode
calloc
_aligned_malloc

api-ms-win-crt-time-l1-1-0

_tzset
__tzname
_localtime64_s
__timezone
_gmtime64
_gmtime64_s
strftime
_time64
clock

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
_unlock_file
_lock_file
_access
_fstat64
_unlink
_stat64

api-ms-win-crt-environment-l1-1-0

_putenv
getenv

api-ms-win-crt-conio-l1-1-0

_cputs

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-multibyte-l1-1-0

_mbspbrk

Exports

Exports

AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
NVSDK_NGX_D3D11_AllocateParameters
NVSDK_NGX_D3D11_CreateFeature
NVSDK_NGX_D3D11_DestroyParameters
NVSDK_NGX_D3D11_EvaluateFeature
NVSDK_NGX_D3D11_EvaluateFeature_C
NVSDK_NGX_D3D11_GetCapabilityParameters
NVSDK_NGX_D3D11_GetFeatureRequirements
NVSDK_NGX_D3D11_GetParameters
NVSDK_NGX_D3D11_GetScratchBufferSize
NVSDK_NGX_D3D11_ReleaseFeature
NVSDK_NGX_D3D11_Shutdown
NVSDK_NGX_D3D11_Shutdown1
NVSDK_NGX_D3D12_AllocateParameters
NVSDK_NGX_D3D12_CreateFeature
NVSDK_NGX_D3D12_DestroyParameters
NVSDK_NGX_D3D12_EvaluateFeature
NVSDK_NGX_D3D12_EvaluateFeature_C
NVSDK_NGX_D3D12_GetCapabilityParameters
NVSDK_NGX_D3D12_GetFeatureRequirements
NVSDK_NGX_D3D12_GetParameters
NVSDK_NGX_D3D12_GetScratchBufferSize
NVSDK_NGX_D3D12_ReleaseFeature
NVSDK_NGX_D3D12_Shutdown
NVSDK_NGX_D3D12_Shutdown1
NVSDK_NGX_Parameter_GetD
NVSDK_NGX_Parameter_GetD3d11Resource
NVSDK_NGX_Parameter_GetD3d12Resource
NVSDK_NGX_Parameter_GetF
NVSDK_NGX_Parameter_GetI
NVSDK_NGX_Parameter_GetUI
NVSDK_NGX_Parameter_GetULL
NVSDK_NGX_Parameter_GetVoidPointer
NVSDK_NGX_Parameter_SetD
NVSDK_NGX_Parameter_SetD3d11Resource
NVSDK_NGX_Parameter_SetD3d12Resource
NVSDK_NGX_Parameter_SetF
NVSDK_NGX_Parameter_SetI
NVSDK_NGX_Parameter_SetUI
NVSDK_NGX_Parameter_SetULL
NVSDK_NGX_Parameter_SetVoidPointer
NVSDK_NGX_UpdateFeature
NVSDK_NGX_VULKAN_AllocateParameters
NVSDK_NGX_VULKAN_CreateFeature
NVSDK_NGX_VULKAN_CreateFeature1
NVSDK_NGX_VULKAN_DestroyParameters
NVSDK_NGX_VULKAN_EvaluateFeature
NVSDK_NGX_VULKAN_EvaluateFeature_C
NVSDK_NGX_VULKAN_GetCapabilityParameters
NVSDK_NGX_VULKAN_GetFeatureDeviceExtensionRequirements
NVSDK_NGX_VULKAN_GetFeatureInstanceExtensionRequirements
NVSDK_NGX_VULKAN_GetFeatureRequirements
NVSDK_NGX_VULKAN_GetParameters
NVSDK_NGX_VULKAN_GetScratchBufferSize
NVSDK_NGX_VULKAN_Init
NVSDK_NGX_VULKAN_ReleaseFeature
NVSDK_NGX_VULKAN_RequiredExtensions
NVSDK_NGX_VULKAN_Shutdown
NVSDK_NGX_VULKAN_Shutdown1
NvOptimusEnablement
agsCheckDriverVersion
agsDeInitialize
agsDriverExtensionsDX11_BeginUAVOverlap
agsDriverExtensionsDX11_CreateDevice
agsDriverExtensionsDX11_CreateFromDevice
agsDriverExtensionsDX11_Destroy
agsDriverExtensionsDX11_DestroyDevice
agsDriverExtensionsDX11_EndUAVOverlap
agsDriverExtensionsDX11_GetMaxClipRects
agsDriverExtensionsDX11_IASetPrimitiveTopology
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect
agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirect
agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect
agsDriverExtensionsDX11_NumPendingAsyncCompileJobs
agsDriverExtensionsDX11_SetClipRects
agsDriverExtensionsDX11_SetDepthBounds
agsDriverExtensionsDX11_SetDiskShaderCacheEnabled
agsDriverExtensionsDX11_SetMaxAsyncCompileThreadCount
agsDriverExtensionsDX11_SetViewBroadcastMasks
agsDriverExtensionsDX11_WriteBreadcrumb
agsDriverExtensionsDX12_CreateDevice
agsDriverExtensionsDX12_CreateFromDevice
agsDriverExtensionsDX12_Destroy
agsDriverExtensionsDX12_DestroyDevice
agsDriverExtensionsDX12_PopMarker
agsDriverExtensionsDX12_PushMarker
agsDriverExtensionsDX12_SetMarker
agsGetVersionNumber
agsInitialize
agsSetDisplayMode
ffxAssertReport
ffxAssertSetPrintingCallback
ffxFsr2ContextCreate
ffxFsr2ContextDestroy
ffxFsr2ContextDispatch
ffxFsr2ContextGenerateReactiveMask
ffxFsr2GetInterfaceDX12
ffxFsr2GetInterfaceVK
ffxFsr2GetJitterOffset
ffxFsr2GetJitterPhaseCount
ffxFsr2GetRenderResolutionFromQualityMode
ffxFsr2GetScratchMemorySizeDX12
ffxFsr2GetScratchMemorySizeVK
ffxFsr2GetUpscaleRatioFromQualityMode
ffxFsr2ResourceIsNull
ffxFsr2UEGetInterfaceVK
ffxGetBufferResourceVK
ffxGetCommandListDX12
ffxGetCommandListVK
ffxGetDX12ResourcePtr
ffxGetDeviceDX12
ffxGetDeviceVK
ffxGetResourceDX12
ffxGetTextureResourceVK
ffxGetVkImage
ffxGetVkImageLayout
ffxGetVkImageView
png_access_version_number
png_benign_error
png_build_grayscale_palette
png_calloc
png_chunk_benign_error
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_read_struct
png_create_read_struct_2
png_create_write_struct
png_create_write_struct_2
png_data_freer
png_destroy_info_struct
png_destroy_read_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_free_default
png_get_IHDR
png_get_PLTE
png_get_bKGD
png_get_bit_depth
png_get_cHRM
png_get_cHRM_fixed
png_get_channels
png_get_chunk_cache_max
png_get_chunk_malloc_max
png_get_color_type
png_get_compression_buffer_size
png_get_compression_type
png_get_copyright
png_get_current_pass_number
png_get_current_row_number
png_get_error_ptr
png_get_filter_type
png_get_gAMA
png_get_gAMA_fixed
png_get_hIST
png_get_header_ver
png_get_header_version
png_get_iCCP
png_get_image_height
png_get_image_width
png_get_int_32
png_get_interlace_type
png_get_io_chunk_name
png_get_io_chunk_type
png_get_io_ptr
png_get_io_state
png_get_libpng_ver
png_get_mem_ptr
png_get_oFFs
png_get_pCAL
png_get_pHYs
png_get_pHYs_dpi
png_get_pixel_aspect_ratio
png_get_pixel_aspect_ratio_fixed
png_get_pixels_per_inch
png_get_pixels_per_meter
png_get_rgb_to_gray_status
png_get_rowbytes
png_get_rows
png_get_sBIT
png_get_sCAL
png_get_sCAL_fixed
png_get_sCAL_s
png_get_sPLT
png_get_sRGB
png_get_signature
png_get_tIME
png_get_tRNS
png_get_text
png_get_uint_16
png_get_uint_31
png_get_uint_32
png_get_unknown_chunks
png_get_user_chunk_ptr
png_get_user_height_max
png_get_user_transform_ptr
png_get_user_width_max
png_get_valid
png_get_x_offset_inches
png_get_x_offset_inches_fixed
png_get_x_offset_microns
png_get_x_offset_pixels
png_get_x_pixels_per_inch
png_get_x_pixels_per_meter
png_get_y_offset_inches
png_get_y_offset_inches_fixed
png_get_y_offset_microns
png_get_y_offset_pixels
png_get_y_pixels_per_inch
png_get_y_pixels_per_meter
png_handle_as_unknown
png_info_init_3
png_init_io
png_longjmp
png_malloc
png_malloc_default
png_malloc_warn
png_permit_mng_features
png_read_end
png_read_image
png_read_info
png_read_png
png_read_row
png_read_rows
png_read_update_info
png_reset_zstream
png_save_int_32
png_save_uint_16
png_save_uint_32
png_set_IHDR
png_set_PLTE
png_set_add_alpha
png_set_bKGD
png_set_background
png_set_background_fixed
png_set_benign_errors
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_chunk_cache_max
png_set_chunk_malloc_max
png_set_compression_buffer_size
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_crc_action
png_set_error_fn
png_set_expand
png_set_expand_16
png_set_expand_gray_1_2_4_to_8
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_filter_heuristics_fixed
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_gamma
png_set_gamma_fixed
png_set_gray_to_rgb
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invalid
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_longjmp_fn
png_set_mem_fn
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_palette_to_rgb
png_set_quantize
png_set_read_fn
png_set_read_status_fn
png_set_read_user_chunk_fn
png_set_read_user_transform_fn
png_set_rgb_to_gray
png_set_rgb_to_gray_fixed
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sCAL_fixed
png_set_sCAL_s
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_strip_16
png_set_strip_alpha
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_tRNS_to_alpha
png_set_text
png_set_unknown_chunk_location
png_set_unknown_chunks
png_set_user_limits
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_cmp
png_start_read_image
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_write_sig
src_callback_new
src_callback_read
src_clone
src_delete
src_error
src_float_to_int_array
src_float_to_short_array
src_get_channels
src_get_description
src_get_name
src_get_version
src_int_to_float_array
src_is_valid_ratio
src_new
src_process
src_reset
src_set_ratio
src_short_to_float_array
src_simple
src_strerror

Sections

.text
Size: 85.9MB - Virtual size: 85.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33.0MB - Virtual size: 33.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.5MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 202KB - Virtual size: 202KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5c7cf87b289a8abce5e6bed8d94b0652

Headers

DLL Characteristics

File Characteristics

Imports

tbb

d3d9

dxgi

d3d11

xinput1_3

dsound

ws2_32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

iphlpapi

setupapi

dwmapi

imm32

uiautomationcore

hid

dxva2

winhttp

crypt32

cfgmgr32

opengl32

msvcp140

bcrypt

uxtheme

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

Exports

Exports

Sections

.text Size: 85.9MB - Virtual size: 85.9MB

.rodata Size: 2KB - Virtual size: 1KB

.rdata Size: 33.0MB - Virtual size: 33.0MB

.data Size: 2.5MB - Virtual size: 6.1MB

.pdata Size: 4.6MB - Virtual size: 4.6MB

.msvcjmc Size: 512B - Virtual size: 8B

_RDATA Size: 374KB - Virtual size: 373KB

.rsrc Size: 122KB - Virtual size: 122KB

.reloc Size: 2.1MB - Virtual size: 2.1MB

.bind Size: 202KB - Virtual size: 202KB

.text
Size: 85.9MB - Virtual size: 85.9MB

.rodata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 33.0MB - Virtual size: 33.0MB

.data
Size: 2.5MB - Virtual size: 6.1MB

.pdata
Size: 4.6MB - Virtual size: 4.6MB

.msvcjmc
Size: 512B - Virtual size: 8B

_RDATA
Size: 374KB - Virtual size: 373KB

.rsrc
Size: 122KB - Virtual size: 122KB

.reloc
Size: 2.1MB - Virtual size: 2.1MB

.bind
Size: 202KB - Virtual size: 202KB