Extended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-08_fb1a32983e662b749fdd35d2cd1b0a55_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-08_fb1a32983e662b749fdd35d2cd1b0a55_magniber.exe
Resource
win10v2004-20240426-en
Target
2024-05-08_fb1a32983e662b749fdd35d2cd1b0a55_magniber
Size
3.5MB
MD5
fb1a32983e662b749fdd35d2cd1b0a55
SHA1
b65fd0094d7a74477dfa960efc081ea52bff6aaa
SHA256
4fa9f6dd10e8fd3bcaec44b7e5a8652f1acac23ff7bcdc4de8ccd1edd8947dab
SHA512
21ba95b9d7d14d3d4f90618c701bb8f79f66db0e6b910c789073bb180a676126f4917f59e6da3973debb7113d032946970c5ffe5bba0352afa40a88cd22159d7
SSDEEP
49152:YWuEm08AuitiXX80PSu5Lqpjpa9m7c6+dMflqOevtfySpMJmbSPK1SnCbw:PejXswSQqxpak7c64zvoJJd
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
E:\develop\projects\tt-apps\bin\Release\tt-cleaner\tt-cleaner.pdb
ReadFile
GetFileSizeEx
CreateFileA
FormatMessageA
SetLastError
WaitForSingleObjectEx
GetTickCount
QueryPerformanceCounter
ExpandEnvironmentStringsA
Sleep
VerifyVersionInfoA
GetProcAddress
GetModuleHandleA
FreeLibrary
GetSystemDirectoryA
QueryPerformanceFrequency
VerSetConditionMask
SleepEx
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
OpenProcess
WaitForSingleObject
GetCurrentThreadId
GetCurrentProcessId
LoadLibraryA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
SetStdHandle
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
CreateMutexW
GetDateFormatW
GetTimeZoneInformation
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetStdHandle
ExitProcess
GetModuleHandleExW
ExitThread
PeekNamedPipe
GetFileType
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
LoadLibraryExW
FreeLibraryAndExitThread
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
ChangeTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SignalObjectAndWait
CreateTimerQueue
GetSystemTime
LockFileEx
UnlockFile
HeapCompact
LoadLibraryW
GetSystemInfo
DeleteFileA
FlushViewOfFile
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapValidate
UnlockFileEx
SetEndOfFile
GetFullPathNameA
InitializeCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
GetThreadTimes
GetComputerNameW
GetSystemDirectoryW
GetVolumeInformationW
GetLongPathNameW
GetPrivateProfileStringW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
LocalAlloc
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFilePointer
GetCommandLineW
VirtualQuery
FlushFileBuffers
DeleteTimerQueueTimer
CreateTimerQueueTimer
VerifyVersionInfoW
AllocConsole
GetConsoleWindow
FreeConsole
GetDriveTypeW
GetWindowsDirectoryW
GetTempFileNameW
LocalFree
GetVersionExW
MoveFileW
GetFileSize
FindResourceW
LoadResource
FindResourceExW
LockResource
WriteFile
FindFirstFileW
SizeofResource
GetExitCodeProcess
CreateProcessW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
K32GetProcessImageFileNameW
GetModuleFileNameW
VirtualAlloc
lstrlenW
VirtualFree
QueryDosDeviceW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
CloseHandle
GetTimeFormatW
DecodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
FormatMessageW
DuplicateHandle
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetExitCodeThread
TryEnterCriticalSection
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
GetTempPathW
AreFileApisANSI
CopyFileW
MoveFileExW
EncodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetWindow
wsprintfW
GetClassNameW
PostMessageW
SetWindowPos
GetTopWindow
BringWindowToTop
SetForegroundWindow
GetWindowThreadProcessId
MessageBoxW
GetForegroundWindow
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
CryptAcquireContextW
OpenProcessToken
GetLengthSid
InitializeAcl
AddAce
IsValidSid
InitializeSid
CopySid
SetNamedSecurityInfoW
GetSidLengthRequired
GetSidSubAuthority
GetTokenInformation
ConvertSidToStringSidW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
OpenServiceW
SystemFunction036
LookupAccountNameW
EnumServicesStatusExW
QueryServiceConfigW
QueryServiceConfig2W
CloseServiceHandle
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
RegDeleteKeyW
OpenSCManagerW
RegGetValueW
RegEnumValueW
RegQueryValueExW
ShellExecuteW
SHGetFolderPathW
CommandLineToArgvW
SHGetDesktopFolder
SHGetKnownFolderPath
inflateInit_
inflateEnd
inflate
zlibVersion
inflateInit2_
?focusInEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?focusNextPrevChild@QWidget@@MAE_N_N@Z
?focusOutEvent@QWidget@@MAEXPAVQFocusEvent@@@Z
?hasHeightForWidth@QWidget@@UBE_NXZ
?heightForWidth@QWidget@@UBEHH@Z
?initPainter@QWidget@@MBEXPAVQPainter@@@Z
?inputMethodEvent@QWidget@@MAEXPAVQInputMethodEvent@@@Z
?inputMethodQuery@QWidget@@UBE?AVQVariant@@W4InputMethodQuery@Qt@@@Z
?keyReleaseEvent@QWidget@@MAEXPAVQKeyEvent@@@Z
?leaveEvent@QWidget@@MAEXPAVQEvent@@@Z
?metric@QWidget@@MBEHW4PaintDeviceMetric@QPaintDevice@@@Z
?mouseDoubleClickEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?moveEvent@QWidget@@MAEXPAVQMoveEvent@@@Z
?nativeEvent@QWidget@@MAE_NABVQByteArray@@PAXPAJ@Z
?devType@QWidget@@UBEHXZ
?paintEvent@QWidget@@MAEXPAVQPaintEvent@@@Z
?redirected@QWidget@@MBEPAVQPaintDevice@@PAVQPoint@@@Z
?resizeEvent@QWidget@@MAEXPAVQResizeEvent@@@Z
?setVisible@QWidget@@UAEX_N@Z
?sharedPainter@QWidget@@MBEPAVQPainter@@XZ
?tabletEvent@QWidget@@MAEXPAVQTabletEvent@@@Z
?wheelEvent@QWidget@@MAEXPAVQWheelEvent@@@Z
?winId@QWidget@@QBEIXZ
?width@QWidget@@QBEHXZ
?height@QWidget@@QBEHXZ
?rect@QWidget@@QBE?AVQRect@@XZ
?windowState@QWidget@@QBE?AV?$QFlags@W4WindowState@Qt@@@@XZ
?setWindowState@QWidget@@QAEXV?$QFlags@W4WindowState@Qt@@@@@Z
?changeEvent@QWidget@@MAEXPAVQEvent@@@Z
?actionEvent@QWidget@@MAEXPAVQActionEvent@@@Z
?move@QWidget@@QAEXABVQPoint@@@Z
?qt_metacall@QDialog@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?enterEvent@QWidget@@MAEXPAVQEvent@@@Z
?qt_metacast@QDialog@@UAEPAXPBD@Z
?staticMetaObject@QMainWindow@@2UQMetaObject@@B
?isMinimized@QWidget@@QBE_NXZ
?setGeometry@QWidget@@QAEXABVQRect@@@Z
?setGeometry@QWidget@@QAEXHHHH@Z
?staticMetaObject@QDialog@@2UQMetaObject@@B
?showNormal@QWidget@@QAEXXZ
?showMinimized@QWidget@@QAEXXZ
?setFixedSize@QWidget@@QAEXHH@Z
?setFont@QWidget@@QAEXABVQFont@@@Z
?setCursor@QWidget@@QAEXABVQCursor@@@Z
?setStyleSheet@QWidget@@QAEXABVQString@@@Z
?activateWindow@QWidget@@QAEXXZ
?setFocusPolicy@QWidget@@QAEXW4FocusPolicy@Qt@@@Z
?paintEngine@QWidget@@UBEPAVQPaintEngine@@XZ
?staticMetaObject@QAbstractButton@@2UQMetaObject@@B
?timerEvent@QAbstractButton@@MAEXPAVQTimerEvent@@@Z
?sizeHint@QPushButton@@UBE?AVQSize@@XZ
?sizeHint@QLabel@@UBE?AVQSize@@XZ
?sizeHint@QDialog@@UBE?AVQSize@@XZ
?showEvent@QWidget@@MAEXPAVQShowEvent@@@Z
?showEvent@QDialog@@MAEXPAVQShowEvent@@@Z
?setVisible@QDialog@@UAEX_N@Z
?resizeEvent@QDialog@@MAEXPAVQResizeEvent@@@Z
?qt_metacast@QPushButton@@UAEPAXPBD@Z
?qt_metacast@QLabel@@UAEPAXPBD@Z
?qt_metacall@QPushButton@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?qt_metacall@QLabel@@UAEHW4Call@QMetaObject@@HPAPAX@Z
?paintEvent@QPushButton@@MAEXPAVQPaintEvent@@@Z
?paintEvent@QLabel@@MAEXPAVQPaintEvent@@@Z
?open@QDialog@@UAEXXZ
?nextCheckState@QAbstractButton@@MAEXXZ
?mouseReleaseEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseReleaseEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mousePressEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QWidget@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QLabel@@MAEXPAVQMouseEvent@@@Z
?mouseMoveEvent@QAbstractButton@@MAEXPAVQMouseEvent@@@Z
?minimumSizeHint@QPushButton@@UBE?AVQSize@@XZ
?minimumSizeHint@QLabel@@UBE?AVQSize@@XZ
?minimumSizeHint@QDialog@@UBE?AVQSize@@XZ
?metaObject@QPushButton@@UBEPBUQMetaObject@@XZ
?metaObject@QLabel@@UBEPBUQMetaObject@@XZ
?keyReleaseEvent@QAbstractButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QPushButton@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QLabel@@MAEXPAVQKeyEvent@@@Z
?keyPressEvent@QDialog@@MAEXPAVQKeyEvent@@@Z
?hitButton@QAbstractButton@@MBE_NABVQPoint@@@Z
?hideEvent@QWidget@@MAEXPAVQHideEvent@@@Z
?heightForWidth@QLabel@@UBEHH@Z
?focusOutEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusOutEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?focusNextPrevChild@QLabel@@MAE_N_N@Z
?focusInEvent@QPushButton@@MAEXPAVQFocusEvent@@@Z
?focusInEvent@QLabel@@MAEXPAVQFocusEvent@@@Z
?exec@QDialog@@UAEHXZ
?eventFilter@QDialog@@MAE_NPAVQObject@@PAVQEvent@@@Z
?event@QWidget@@MAE_NPAVQEvent@@@Z
?parentWidget@QWidget@@QBEPAV1@XZ
?event@QPushButton@@MAE_NPAVQEvent@@@Z
?event@QLabel@@MAE_NPAVQEvent@@@Z
?dropEvent@QWidget@@MAEXPAVQDropEvent@@@Z
?dragMoveEvent@QWidget@@MAEXPAVQDragMoveEvent@@@Z
?dragLeaveEvent@QWidget@@MAEXPAVQDragLeaveEvent@@@Z
?dragEnterEvent@QWidget@@MAEXPAVQDragEnterEvent@@@Z
?done@QDialog@@UAEXH@Z
?contextMenuEvent@QWidget@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QLabel@@MAEXPAVQContextMenuEvent@@@Z
?contextMenuEvent@QDialog@@MAEXPAVQContextMenuEvent@@@Z
?closeEvent@QWidget@@MAEXPAVQCloseEvent@@@Z
?closeEvent@QDialog@@MAEXPAVQCloseEvent@@@Z
?checkStateSet@QAbstractButton@@MAEXXZ
?changeEvent@QLabel@@MAEXPAVQEvent@@@Z
?changeEvent@QAbstractButton@@MAEXPAVQEvent@@@Z
?setMovie@QLabel@@QAEXPAVQMovie@@@Z
?setWordWrap@QLabel@@QAEX_N@Z
??1QLabel@@UAE@XZ
??0QLabel@@QAE@ABVQString@@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
??0QLabel@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
??1QPushButton@@UAE@XZ
??0QPushButton@@QAE@PAVQWidget@@@Z
?clicked@QAbstractButton@@QAEX_N@Z
?reject@QDialog@@UAEXXZ
?accept@QDialog@@UAEXXZ
??1QDialog@@UAE@XZ
??0QDialog@@QAE@PAVQWidget@@V?$QFlags@W4WindowType@Qt@@@@@Z
?setWindowFlags@QWidget@@QAEXV?$QFlags@W4WindowType@Qt@@@@@Z
?hide@QWidget@@QAEXXZ
??0QEvent@@QAE@W4Type@0@@Z
??1QEvent@@UAE@XZ
?exit@QCoreApplication@@SAXH@Z
?postEvent@QCoreApplication@@SAXPAVQObject@@PAVQEvent@@H@Z
??1Connection@QMetaObject@@QAE@XZ
?fromStdWString@QString@@SA?AV1@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??0QByteArray@@QAE@XZ
?array@QJsonDocument@@QBE?AVQJsonArray@@XZ
?object@QJsonDocument@@QBE?AVQJsonObject@@XZ
?toJson@QJsonDocument@@QBE?AVQByteArray@@W4JsonFormat@1@@Z
?toJson@QJsonDocument@@QBE?AVQByteArray@@XZ
?fromJson@QJsonDocument@@SA?AV1@ABVQByteArray@@PAUQJsonParseError@@@Z
??1QJsonDocument@@QAE@XZ
?height@QRect@@QBEHXZ
??0QJsonDocument@@QAE@ABVQJsonObject@@@Z
??0QString@@QAE@ABVQByteArray@@@Z
?toUtf8@QString@@QHAE?AVQByteArray@@XZ
??1QByteArray@@QAE@XZ
?eventFilter@QObject@@UAE_NPAV1@PAVQEvent@@@Z
?event@QObject@@UAE_NPAVQEvent@@@Z
??AQJsonObject@@QBE?AVQJsonValue@@ABVQString@@@Z
?width@QRect@@QBEHXZ
?center@QRect@@QBE?AVQPoint@@XZ
?y@QRect@@QBEHXZ
?x@QRect@@QBEHXZ
??0QRect@@QAE@HHHH@Z
?height@QSize@@QBEHXZ
?width@QSize@@QBEHXZ
?connectImpl@QObject@@CA?AVConnection@QMetaObject@@PBV1@PAPAX01PAVQSlotObjectBase@QtPrivate@@W4ConnectionType@Qt@@PBHPBU3@@Z
??1QString@@QAE@XZ
?fromAscii_helper@QString@@CAPAU?$QTypedArrayData@G@@PBDH@Z
??0QJsonValue@@QAE@PBD@Z
??1QJsonValue@@QAE@XZ
??4QJsonValueRef@@QAEAAV0@ABVQJsonValue@@@Z
??0QJsonObject@@QAE@XZ
??1QJsonObject@@QAE@XZ
??AQJsonObject@@QAE?AVQJsonValueRef@@ABVQString@@@Z
?staticMetaObject@QObject@@2UQMetaObject@@B
?dynamicMetaObject@QObjectData@@QBEPAUQMetaObject@@XZ
??0QJsonObject@@QAE@$$QAV0@@Z
?end@QJsonArray@@QBE?AVconst_iterator@1@XZ
?begin@QJsonArray@@QBE?AVconst_iterator@1@XZ
?at@QJsonArray@@QBE?AVQJsonValue@@H@Z
?toString@QJsonValue@@QBE?AVQString@@XZ
?toInt@QJsonValue@@QBEHH@Z
?toStdWString@QString@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?toStdString@QString@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?fromStdString@QString@@SA?AV1@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??8QString@@QBE_NPBD@Z
?timerEvent@QObject@@MAEXPAVQTimerEvent@@@Z
?disconnectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?customEvent@QObject@@MAEXPAVQEvent@@@Z
?connectNotify@QObject@@MAEXABVQMetaMethod@@@Z
?childEvent@QObject@@MAEXPAVQChildEvent@@@Z
?activate@QMetaObject@@SAXPAVQObject@@PBU1@HPAPAX@Z
??4QJsonObject@@QAEAAV0@$$QAV0@@Z
??4QJsonArray@@QAEAAV0@$$QAV0@@Z
??0QJsonDocument@@QAE@ABVQJsonArray@@@Z
??1QJsonArray@@QAE@XZ
??0QJsonArray@@QAE@XZ
??0QJsonValue@@QAE@ABVQString@@@Z
?staticMetaObject@QWebEngineView@@2UQMetaObject@@B
?metaObject@QMovie@@UBEPBUQMetaObject@@XZ
?start@QMovie@@QAEXXZ
??1QMovie@@UAE@XZ
??0QMovie@@QAE@ABVQString@@ABVQByteArray@@PAVQObject@@@Z
?size@QImageReader@@QBE?AVQSize@@XZ
??1QImageReader@@QAE@XZ
??0QImageReader@@QAE@ABVQString@@ABVQByteArray@@@Z
?availableGeometry@QScreen@@QBE?AVQRect@@XZ
?qt_metacall@QMovie@@UAEHW4Call@QMetaObject@@HPAPAX@Z
??1QCursor@@QAE@XZ
??0QCursor@@QAE@W4CursorShape@Qt@@@Z
?setPixelSize@QFont@@QAEXH@Z
??1QFont@@QAE@XZ
??0QFont@@QAE@ABVQString@@HH_N@Z
?primaryScreen@QGuiApplication@@SAPAVQScreen@@XZ
?qt_metacast@QMovie@@UAEPAXPBD@Z
getsockopt
WSASetLastError
WSAIoctl
getsockname
WSACleanup
getpeername
connect
closesocket
bind
send
recv
socket
setsockopt
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
ntohs
gethostbyname
inet_ntoa
htons
WSAStartup
WSAGetLastError
ioctlsocket
CertCloseStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertOpenStore
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
InternetGetCookieW
InternetSetCookieW
InternetCrackUrlW
WinHttpCloseHandle
WinHttpSetOption
WinHttpSendRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpSetTimeouts
WinHttpSetStatusCallback
WinHttpConnect
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpOpen
WinHttpReceiveResponse
CLSIDFromProgID
CoSetProxyBlanket
CLSIDFromString
CoInitialize
CoInitializeEx
CoCreateInstance
CoTaskMemFree
OleRun
CoUninitialize
SysFreeString
GetErrorInfo
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysStringLen
UnloadUserProfile
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ