63079f34-b294-4790-bfd5-bbad82995295.zip
- SHA256 2018909ea853d972659d1dee439da81b963d8addb44c87ed533ca6320112cac1
Behavioral task
behavioral1
Sample
63079f34-b294-4790-bfd5-bbad82995295/snss1.exe
Resource
win7-20240611-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
63079f34-b294-4790-bfd5-bbad82995295/snss1.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral3
Sample
63079f34-b294-4790-bfd5-bbad82995295/snss2.exe
Resource
win7-20240611-en
windows7-x64
7 signatures
150 seconds
Behavioral task
behavioral4
Sample
63079f34-b294-4790-bfd5-bbad82995295/snss2.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
9 signatures
150 seconds
General
- Target 63079f34-b294-4790-bfd5-bbad82995295.zip
- Size 4.1MB
- Sample240612-2fg1vstamb
- SHA256 2018909ea853d972659d1dee439da81b963d8addb44c87ed533ca6320112cac1
- MD5 d812765381c5cf8d7f685a7b5a91b121
- SHA1 e11309f0c4d03c3f4f2d06ed822c1059c90eaa75
- SHA512 add54e5fa7d651c35aace63dae6d3b638409a8c923401f625ee0f15a8fb80239fd373c4f34145bf776114d93daeaa6b3554e6f999d2ff87c296a06ae00439f97
- SSDEEP 98304:LGjCR6FF3OY9XegtO4wmoVt/jU778tvNSIuumgf2Ie29:L43OWXegyVx4Wv9rf2d29
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Detects HijackLoader (aka IDAT Loader) 2 IoCs
resource yara_rule static1/unpack001/63079f34-b294-4790-bfd5-bbad82995295/snss1.exe family_hijackloader static1/unpack001/63079f34-b294-4790-bfd5-bbad82995295/snss2.exe family_hijackloader - Hijackloader family
File Explorer
-
63079f34-b294-4790-bfd5-bbad82995295.zip.zip 4.1MB
-
63079f34-b294-4790-bfd5-bbad82995295/snss1.exe.exe 2.5MB
-
63079f34-b294-4790-bfd5-bbad82995295/snss2.exe.exe 5.3MB
63079f34-b294-4790-bfd5-bbad82995295/snss1.exe
- IMPHASH 6c325d16eb551b0fb806c8023a8c7fa0
- SHA256 fbce9f6897452177133b628f8dcd289564c3d28428cdcd2cbed519d9b8724b07
- MD5 000e90eccf68a55c18d556b9255e0cf7
- SHA1 4ba436301ec8511e9e45647cd3f3298df47c0f07
- SHA512 9c80be1473eade67ad2cdc034bfe3bd00fb949740c4933933dfe835c36c442a02a1aaa9c1e9a3fc2cc47e0ea02549a035e0e446685a1edc7c7049ec262f5d034
- SSDEEP 49152:Yk70vECi0ZwHlZK+cw//RM73jR3ETZFF//X9yJWgs/CgEY:Yv2FZKkRM73jJETZT9mof
- MD5 SHA1 SHA512 SSDEEP
-
Detects HijackLoader (aka IDAT Loader)
PE Signature issue
Digest
de:6f:95:9b:74:d8:87:67:6a:e1:5c:cf:af:77:2a:85:fb:72:df:f5:10:34:73:55:3c:9d:46:62:2a:0e:b8:37
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT
Chains
Apr 5, 2024
CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Irfan Skiljan,O=Irfan Skiljan,ST=Lower Austria,C=AT
Serial Number
3f:54:20:92:be:51:82:36:46:2d:c1:ac:e2:e0:7f:ae
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 2, 2023 - Aug 1, 2026
Subject
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Serial Number
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Mar 23, 2022 - Mar 22, 2037
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US
Serial Number
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Issuer
CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Jul 14, 2023 - Oct 13, 2034
Minor OS version
0
Major OS version
4
Entry point
889498
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FileTimeToSystemTime
GetNumberFormatW
GetDiskFreeSpaceExW
MoveFileW
SystemTimeToTzSpecificLocalTime
InterlockedExchange
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
SetEnvironmentVariableA
GetOEMCP
GetACP
CompareStringA
SetEndOfFile
LoadLibraryA
SetStdHandle
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetCPInfo
GetDriveTypeA
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoW
TlsGetValue
SetLastError
TlsAlloc
RaiseException
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
RtlUnwind
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GetVersion
GetStartupInfoW
CreateDirectoryW
SetCurrentDirectoryA
GetCurrentDirectoryW
SetEnvironmentVariableW
DeleteFileW
ExitThread
TlsSetValue
HeapReAlloc
HeapAlloc
HeapFree
GetModuleHandleA
GetVersionExA
CreateEventW
ExitProcess
CreateThread
SetEvent
FlushFileBuffers
SetFileTime
GetFileTime
GetTickCount
MoveFileExW
FindResourceExW
GetProfileStringW
GetFileAttributesW
GetEnvironmentVariableW
LocalFileTimeToFileTime
SetThreadExecutionState
FileTimeToLocalFileTime
CompareFileTime
SystemTimeToFileTime
GetDateFormatW
GetFullPathNameW
GetCommandLineW
SetFileAttributesW
SetCurrentDirectoryW
GetPrivateProfileSectionW
WritePrivateProfileSectionW
FreeResource
GetModuleHandleW
LocalFree
LocalAlloc
MulDiv
InterlockedDecrement
InterlockedIncrement
CompareStringW
GetLogicalDrives
FindNextFileW
GetDriveTypeW
FindFirstFileW
FindClose
CopyFileW
SetDllDirectoryW
CreateProcessW
GetLocalTime
GetPrivateProfileIntA
GetModuleFileNameW
GetTempPathW
GlobalSize
GetCurrentThreadId
ResumeThread
WaitForSingleObject
GetCurrentProcess
GetProcessAffinityMask
WritePrivateProfileStringW
GetPrivateProfileStringW
GetWindowsDirectoryW
GetSystemDirectoryW
Sleep
GlobalUnlock
WideCharToMultiByte
GetLastError
GetPrivateProfileIntW
LoadLibraryW
GetProcAddress
GetFileSize
GetShortPathNameW
GetVersionExW
MultiByteToWideChar
WriteFile
LoadLibraryExW
EnumResourceNamesW
FreeLibrary
FindResourceW
LoadResource
LockResource
SizeofResource
CreateFileW
CloseHandle
SetFilePointer
ReadFile
GlobalHandle
GlobalFree
GlobalAlloc
GlobalLock
user32
SystemParametersInfoA
IntersectRect
SetScrollInfo
GetScrollRange
ShowScrollBar
LoadAcceleratorsW
RegisterWindowMessageW
GetMessageW
TranslateAcceleratorW
IsDialogMessageW
GetWindowPlacement
UnregisterHotKey
DestroyAcceleratorTable
PostQuitMessage
HiliteMenuItem
CheckMenuItem
RegisterHotKey
AppendMenuW
GetMenuItemID
EnableMenuItem
DrawMenuBar
WinHelpW
GetDesktopWindow
SendNotifyMessageW
GetMenuItemRect
IsIconic
GetMenuState
GetMessagePos
BringWindowToTop
ShowCursor
GetScrollPos
CheckRadioButton
EmptyClipboard
SetClipboardData
GetForegroundWindow
ScreenToClient
SetWindowTextA
GetDlgItemTextA
SetDlgItemTextA
GetAsyncKeyState
MapWindowPoints
GetWindowDC
RedrawWindow
MessageBoxA
SetWindowsHookExW
MessageBoxW
UnhookWindowsHookEx
CallNextHookEx
TrackPopupMenu
DeleteMenu
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
DrawEdge
DrawTextExW
SystemParametersInfoW
OffsetRect
GetFocus
CopyRect
InflateRect
DrawFocusRect
GetDlgCtrlID
DrawFrameControl
FrameRect
EnumChildWindows
IsWindowEnabled
GetSysColor
FindWindowExW
GetKeyState
SetCapture
CloseWindow
FindWindowW
IsMenu
GetMenuStringW
SetWindowPos
SetClassLongW
GetWindowLongW
CallWindowProcW
ModifyMenuW
GetCapture
ReleaseCapture
SetCursorPos
CreatePopupMenu
GetWindow
IsChild
CreateAcceleratorTableW
CopyAcceleratorTableW
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
CharNextW
CharLowerBuffW
InsertMenuW
GetMenuBarInfo
GetSubMenu
GetWindowTextW
DialogBoxParamW
CreateDialogParamW
SetWindowLongW
PeekMessageW
TranslateMessage
DispatchMessageW
LoadImageW
LoadIconW
RegisterClassW
GetMenu
DestroyMenu
LoadMenuW
SetMenu
SetScrollRange
SetScrollPos
BeginPaint
EndPaint
GetParent
SetActiveWindow
ScrollWindow
DefWindowProcW
ShowWindow
SetWindowTextW
MoveWindow
KillTimer
InvalidateRect
UpdateWindow
SetTimer
OpenClipboard
IsClipboardFormatAvailable
GetClipboardData
CloseClipboard
ClientToScreen
IsZoomed
GetScrollInfo
GetClientRect
GetClassNameW
IsWindowVisible
GetWindowRect
IsRectEmpty
GetCursor
GetCursorPos
WindowFromPoint
AttachThreadInput
DrawIconEx
GetDC
ReleaseDC
LoadCursorW
SetCursor
MessageBeep
EndDialog
IsDlgButtonChecked
GetDlgItemTextW
GetDlgItemInt
SetFocus
SendDlgItemMessageW
SetDlgItemTextW
SetDlgItemInt
GetDlgItem
EnableWindow
GetActiveWindow
GetWindowThreadProcessId
SetForegroundWindow
PostMessageW
PostThreadMessageW
DrawTextW
DrawTextA
IsWindow
DestroyIcon
GetIconInfo
GetSystemMetrics
FillRect
DrawIcon
CreateWindowExW
DestroyWindow
wsprintfW
SendMessageW
LoadStringW
GetSysColorBrush
gdi32
GetTextMetricsW
GetStockObject
CreateFontIndirectW
GetDIBits
Ellipse
CreatePen
CreateBrushIndirect
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateDCW
CreateDIBitmap
GetSystemPaletteEntries
GetNearestPaletteIndex
TextOutA
PatBlt
SelectPalette
GetTextExtentPoint32W
GetPixel
EndPage
StretchBlt
SetDIBits
StartPage
ResetDCW
EndDoc
StartDocW
LineTo
MoveToEx
GetDCOrgEx
GetClipBox
CreateEnhMetaFileW
Rectangle
SetStretchBltMode
StretchDIBits
CloseEnhMetaFile
GetEnhMetaFilePaletteEntries
CreatePalette
GetEnhMetaFileW
GetMetaFileW
GetMetaFileBitsEx
DeleteMetaFile
SetWinMetaFileBits
GetEnhMetaFileHeader
SetTextColor
DeleteEnhMetaFile
RealizePalette
PlayEnhMetaFile
GetObjectW
DeleteObject
CreateICW
CreateCompatibleDC
GetDeviceCaps
CreateBitmap
SelectObject
CreateSolidBrush
SetBkMode
SetBkColor
comctl32
CreateStatusWindowW
ImageList_Draw
ImageList_Replace
ord17
ord410
ord412
ord413
ImageList_GetIconSize
CreateToolbarEx
ImageList_Destroy
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_AddMasked
shell32
ExtractIconW
ShellExecuteExW
SHChangeNotify
SHGetSpecialFolderLocation
DragAcceptFiles
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
SHGetMalloc
SHGetDesktopFolder
SHGetDataFromIDListW
SHGetFileInfoW
DragQueryFileW
advapi32
RegOpenKeyExA
RegSetValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
IsTextUnicode
RegQueryValueExA
Name
.text
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
277KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
855KB
Virtual Size
855KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=3, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=27, productName=Unmarked objects (old),
count=1, id=11, version=8047,
count=187, id=10, version=8047,
count=35, id=14, version=7299,
count=4, id=95, version=2190,
count=13, id=93, version=2179,
count=447, id=1, productName=Unmarked objects,
count=1, id=49, version=9044,
count=195, id=48, version=9044,
count=1, id=6, productName=VS98 (6.0) SP6 cvtres build 1736, version=1735,
63079f34-b294-4790-bfd5-bbad82995295/snss2.exe
- IMPHASH da40079afa2b790062133bb295b6395d
- SHA256 d265adb64a79f3b27e77e11e093342b2df14840266deedabf1189bc539cc58fb
- MD5 9e2eb8188c5a194014e46598cbc80c70
- SHA1 d83d68b451836928c830808a9e408c8f2cce2210
- SHA512 3ff5fa8c0f1eb5bd7bf46a5a27392fb0865d61d8c09549f9d7f29306e30275a5b3436c520f82142dc7d3780c468aab2e7c79361457f7c5aa11a132c1ec49c009
- SSDEEP 98304:PlW75lC85H0kxwkL+Wd5Cz1ljuDDCNlSM:Pwhr+45CzvjBlh
- MD5 SHA1 SHA512 SSDEEP
-
Detects HijackLoader (aka IDAT Loader)
PE Signature issue
Digest
02:fa:a9:75:8d:d7:f3:65:13:a0:b7:b7:ee:30:6c:0b:12:03:f7:79:0d:13:1e:0f:39:57:d5:51:6b:ff:13:d9
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Outerspace Software,O=Outerspace Software,L=Rotterdam,ST=Zuid-Holland,C=NL
Chains
Jun 12, 2024
CN=Outerspace Software,O=Outerspace Software,L=Rotterdam,ST=Zuid-Holland,C=NL
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Subject
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Serial Number
1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27
Issuer
CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 31, 2021 - Sep 17, 2029
Subject
CN=Certum Timestamp 2023,O=Asseco Data Systems S.A.,C=PL
Serial Number
09:c5:cc:f8:bb:66:7d:71:37:aa:c1:59:80:06:cb:31
Issuer
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Nov 2, 2023 - Oct 30, 2034
Subject
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL
Serial Number
e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87
Issuer
CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
May 19, 2021 - May 18, 2036
Subject
CN=Outerspace Software,O=Outerspace Software,L=Rotterdam,ST=Zuid-Holland,C=NL
Serial Number
51:34:49:39:c0:2e:9e:8a:d2:44:61:40:2a:8f:89:c9
Issuer
CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Apr 28, 2024 - Apr 28, 2025
Minor OS version
0
Major OS version
6
Entry point
3240544
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetLogicalDrives
GetACP
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
GetStringTypeW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
GetStdHandle
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
SetLastError
RtlPcToFileHeader
RtlUnwindEx
GetVersionExW
GetTickCount
GetThreadPriority
SetThreadPriority
GetCurrentThread
CreateThread
MulDiv
LocalFree
FreeLibrary
lstrcmpW
ResetEvent
InitializeCriticalSection
RaiseException
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetProcAddress
GetModuleHandleW
WaitForSingleObject
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetFileTime
MoveFileW
GetSystemTime
CopyFileW
SystemTimeToFileTime
DeleteFileW
GetDiskFreeSpaceExW
SetFileAttributesW
GetFileAttributesW
FindClose
GetModuleFileNameW
RemoveDirectoryW
FindNextFileW
FindFirstFileW
CompareFileTime
GetVolumeInformationW
CreateDirectoryW
GetLocalTime
FlushFileBuffers
GetFileSize
SetFilePointer
Sleep
SetEvent
CreateEventW
LeaveCriticalSection
GetSystemTimeAsFileTime
SleepConditionVariableSRW
WakeAllConditionVariable
QueryPerformanceCounter
GetNativeSystemInfo
GetCurrentThreadId
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetComputerNameW
WaitForMultipleObjects
EnterCriticalSection
DeleteCriticalSection
OutputDebugStringW
InitializeCriticalSectionEx
SetFilePointerEx
CloseHandle
GetLastError
CreateFileW
WriteFile
GetFileInformationByHandleEx
LoadLibraryW
ReadFile
user32
DestroyWindow
GetWindowTextW
CreateDialogParamW
CharLowerBuffW
DrawTextW
MsgWaitForMultipleObjects
RegisterWindowMessageW
GetQueueStatus
PostThreadMessageW
UpdateWindow
EndDialog
GetDlgItem
DialogBoxParamW
GetSysColor
GetDC
ReleaseDC
GetClientRect
MessageBoxW
CharUpperBuffW
EnableWindow
DefWindowProcW
RegisterClassExW
LoadAcceleratorsW
DispatchMessageW
DestroyAcceleratorTable
PeekMessageW
TranslateAcceleratorW
TranslateMessage
LoadIconW
PostQuitMessage
SetRect
IsIconic
IsWindowVisible
LoadMenuW
GetMenu
SetMenu
SetWindowLongW
ShowCursor
CallWindowProcW
SetWindowLongPtrW
CreatePopupMenu
TrackPopupMenu
ClientToScreen
TrackMouseEvent
DestroyMenu
GetCursorPos
GetMenuItemID
IsWindow
SetCapture
ReleaseCapture
BeginPaint
EndPaint
GetWindowTextLengthW
SetScrollInfo
ModifyMenuW
GetWindowRect
GetFocus
SetWindowPos
MonitorFromWindow
GetMenuItemCount
CreateWindowExW
DeleteMenu
ScreenToClient
SendMessageW
GetSystemMetrics
SetWindowTextW
GetSubMenu
ShowWindow
GetAsyncKeyState
RedrawWindow
GetMonitorInfoW
GetDlgItemTextW
SendDlgItemMessageW
IsWindowEnabled
MoveWindow
IsDlgButtonChecked
SetFocus
GetMenuStringW
LoadCursorW
DrawMenuBar
SetCursor
GetComboBoxInfo
CheckMenuItem
CheckDlgButton
GetSysColorBrush
EnableMenuItem
LoadImageW
AppendMenuW
gdi32
DeleteDC
CreateCompatibleDC
SetTextColor
SetBkMode
CreatePen
Rectangle
DeleteObject
CreateFontW
CreateDIBSection
GetKerningPairsW
GetCharABCWidthsI
GetGlyphOutlineW
EnumFontFamiliesExW
GetStockObject
GetCharacterPlacementW
GetGlyphIndicesW
SetTextAlign
GetPixel
GetObjectW
CreateFontIndirectW
GetCurrentObject
BitBlt
SelectObject
CreateSolidBrush
comdlg32
ChooseColorW
GetOpenFileNameW
GetSaveFileNameW
shell32
DragAcceptFiles
DragQueryFileW
ShellExecuteExW
CommandLineToArgvW
ShellExecuteW
SHGetKnownFolderPath
SHFileOperationW
SHGetFolderPathW
SHCreateItemFromParsingName
DragFinish
ole32
CoUninitialize
CoFreeUnusedLibraries
CoInitializeEx
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
PropVariantClear
oleaut32
VariantClear
VariantInit
OleCreatePropertyFrame
shlwapi
ord219
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
timeKillEvent
timeSetEvent
comctl32
InitCommonControlsEx
windowscodecs
WICConvertBitmapSource
wininet
InternetReadFile
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
d2d1
ord1
dwrite
DWriteCreateFactory
d3d11
D3D11CreateDevice
dxgi
CreateDXGIFactory1
glu32
gluTessEndContour
gluTessBeginPolygon
gluTessBeginContour
gluTessVertex
gluTessProperty
gluTessNormal
gluTessEndPolygon
gluDeleteTess
gluNewTess
gluTessCallback
mfplat
MFStartup
MFCreateSourceResolver
MFCreateAttributes
MFShutdown
mf
MFCreateTranscodeProfile
MFCreateTranscodeTopology
MFCreateMediaSession
Name
.text
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
707KB
Virtual Size
706KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
43KB
Virtual Size
158KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
80KB
Virtual Size
79KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
9KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=23, id=259, version=27412,
count=1, id=260, version=26715,
count=10, id=261, productName=VS2019 v16.5.5 build 28614, version=28614,
count=151, id=261, version=27412,
count=9, id=259, version=33731,
count=17, id=260, version=33731,
count=67, id=261, version=33731,
count=41, id=260, version=27412,
count=1, id=262, version=27412,
count=39, id=257, version=27412,
count=341, id=1, productName=Unmarked objects,
count=290, id=265, version=33811,
count=1, id=255, version=33811,
count=1, id=151,
count=1, id=258, version=33811,