C:\sources\cecil\symbols\mdb\obj\net_3_5_Release\Mono.Cecil.Mdb.pdb
Overview
overview
3Static
static
3BepInEx v5...20.zip
windows7-x64
1BepInEx v5...20.zip
windows10-2004-x64
1BepInEx/co...ny.dll
windows7-x64
1BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ony.js
windows7-x64
3BepInEx/co...ony.js
windows10-2004-x64
3BepInEx/co...20.dll
windows7-x64
1BepInEx/co...20.dll
windows10-2004-x64
1BepInEx/co...ny.dll
windows7-x64
1BepInEx/co...ny.dll
windows10-2004-x64
1BepInEx/co...ny.xml
windows7-x64
1BepInEx/co...ny.xml
windows10-2004-x64
1BepInEx/co...er.dll
windows7-x64
1BepInEx/co...er.dll
windows10-2004-x64
1BepInEx/co...er.xml
windows7-x64
1BepInEx/co...er.xml
windows10-2004-x64
1BepInEx/co...Ex.dll
windows7-x64
1BepInEx/co...Ex.dll
windows10-2004-x64
1BepInEx/co...Ex.xml
windows7-x64
1BepInEx/co...Ex.xml
windows10-2004-x64
1BepInEx/co...op.dll
windows7-x64
1BepInEx/co...op.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows7-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...db.dll
windows7-x64
1BepInEx/co...db.dll
windows10-2004-x64
1BepInEx/co...ks.dll
windows7-x64
1BepInEx/co...ks.dll
windows10-2004-x64
1BepInEx/co...il.dll
windows7-x64
1BepInEx/co...il.dll
windows10-2004-x64
1BepInEx/co...ur.dll
windows7-x64
1BepInEx/co...ur.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
BepInEx v5.4.22 x64 (64-bit)-42-5-4-2200-1701822820.zip
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
BepInEx v5.4.22 x64 (64-bit)-42-5-4-2200-1701822820.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
BepInEx/core/0Harmony.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
BepInEx/core/0Harmony.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
BepInEx/core/0Harmony.js
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
BepInEx/core/0Harmony.js
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
BepInEx/core/0Harmony20.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
BepInEx/core/0Harmony20.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
BepInEx/core/BepInEx.Harmony.dll
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
BepInEx/core/BepInEx.Harmony.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral11
Sample
BepInEx/core/BepInEx.Harmony.xml
Resource
win7-20231129-en
Behavioral task
behavioral12
Sample
BepInEx/core/BepInEx.Harmony.xml
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
BepInEx/core/BepInEx.Preloader.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
BepInEx/core/BepInEx.Preloader.xml
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
BepInEx/core/BepInEx.Preloader.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
BepInEx/core/BepInEx.dll
Resource
win7-20240220-en
Behavioral task
behavioral18
Sample
BepInEx/core/BepInEx.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral19
Sample
BepInEx/core/BepInEx.xml
Resource
win7-20240508-en
Behavioral task
behavioral20
Sample
BepInEx/core/BepInEx.xml
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
BepInEx/core/HarmonyXInterop.dll
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
BepInEx/core/HarmonyXInterop.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral23
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win7-20240611-en
Behavioral task
behavioral24
Sample
BepInEx/core/Mono.Cecil.Mdb.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
BepInEx/core/Mono.Cecil.Pdb.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral27
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win7-20240419-en
Behavioral task
behavioral28
Sample
BepInEx/core/Mono.Cecil.Rocks.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win7-20240508-en
Behavioral task
behavioral30
Sample
BepInEx/core/Mono.Cecil.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
BepInEx/core/MonoMod.RuntimeDetour.dll
Resource
win10v2004-20240508-en
General
-
Target
BepInEx v5.4.22 x64 (64-bit)-42-5-4-2200-1701822820.zip
-
Size
607KB
-
MD5
e9ecf053f598ac0acfbad3e548c16ca1
-
SHA1
cb65de50b9856d190d15bb71c522e1f63df75f54
-
SHA256
4c149960673f0a387ba7c016c837096ab3a41309d9140f88590bb507c59eda3f
-
SHA512
329688f60fb0210963e988dbcd3767300961418838ca9bb224971f3c4f1452c276d7abd34c78a00322d6101c5a4c7b948e68c28555c27d3a3206b56cba5f0c96
-
SSDEEP
12288:+7COKOsozSXDcycym7700/fdMFrQ1nB7K+LmBThyyU1oEgJt33x1Kh4tjif73kZn:PZOsOSXze/Nf8wvmB4yU1iJt33xE4BiC
Malware Config
Signatures
-
Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/BepInEx/core/0Harmony.dll unpack001/BepInEx/core/0Harmony20.dll unpack001/BepInEx/core/BepInEx.Harmony.dll unpack001/BepInEx/core/BepInEx.Preloader.dll unpack001/BepInEx/core/BepInEx.dll unpack001/BepInEx/core/HarmonyXInterop.dll unpack001/BepInEx/core/Mono.Cecil.Mdb.dll unpack001/BepInEx/core/Mono.Cecil.Pdb.dll unpack001/BepInEx/core/Mono.Cecil.Rocks.dll unpack001/BepInEx/core/Mono.Cecil.dll unpack001/BepInEx/core/MonoMod.RuntimeDetour.dll unpack001/BepInEx/core/MonoMod.Utils.dll unpack001/winhttp.dll
Files
-
BepInEx v5.4.22 x64 (64-bit)-42-5-4-2200-1701822820.zip.zip
-
BepInEx/core/0Harmony.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/0Harmony.xml.js .xml polyglot
-
BepInEx/core/0Harmony20.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 107KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/BepInEx.Harmony.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/BepInEx.Harmony.xml.xml
-
BepInEx/core/BepInEx.Preloader.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 964B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/BepInEx.Preloader.xml.xml
-
BepInEx/core/BepInEx.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 122KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/BepInEx.xml.xml
-
BepInEx/core/HarmonyXInterop.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/Mono.Cecil.Mdb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/Mono.Cecil.Pdb.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\sources\cecil\symbols\pdb\obj\net_3_5_Release\Mono.Cecil.Pdb.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/Mono.Cecil.Rocks.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\sources\cecil\rocks\obj\net_3_5_Release\Mono.Cecil.Rocks.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/Mono.Cecil.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\sources\cecil\obj\net_3_5_Release\Mono.Cecil.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/MonoMod.RuntimeDetour.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\1\s\MonoMod.RuntimeDetour\obj\Release\net35\MonoMod.RuntimeDetour.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/MonoMod.RuntimeDetour.xml.xml
-
BepInEx/core/MonoMod.Utils.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\1\s\MonoMod.Utils\obj\Release\net35\MonoMod.Utils.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BepInEx/core/MonoMod.Utils.xml.xml
-
changelog.txt
-
doorstop_config.ini
-
winhttp.dll.dll windows:6 windows x64 arch:x64
26aaf6d092b2094f4d3bc0710b708de0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
GetCommandLineW
GetEnvironmentVariableW
GetFileAttributesW
GetFullPathNameW
HeapFree
LocalFree
lstrcmpiW
GetPrivateProfileStringW
HeapAlloc
GetStdHandle
GetCommandLineA
SetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetLastError
GetProcessHeap
ExitProcess
GetSystemDirectoryW
VirtualProtect
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryW
lstrcmpA
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
user32
MessageBoxW
wsprintfW
shell32
CommandLineToArgvW
Exports
Exports
GetFileVersionInfoA
GetFileVersionInfoByHandle
GetFileVersionInfoExA
GetFileVersionInfoExW
GetFileVersionInfoSizeA
GetFileVersionInfoSizeExA
GetFileVersionInfoSizeExW
GetFileVersionInfoSizeW
GetFileVersionInfoW
Private1
SvchostPushServiceGlobals
VerFindFileA
VerFindFileW
VerInstallFileA
VerInstallFileW
VerLanguageNameA
VerLanguageNameW
VerQueryValueA
VerQueryValueW
WinHttpAddRequestHeaders
WinHttpAutoProxySvcMain
WinHttpCheckPlatform
WinHttpCloseHandle
WinHttpConnect
WinHttpConnectionDeletePolicyEntries
WinHttpConnectionDeleteProxyInfo
WinHttpConnectionFreeNameList
WinHttpConnectionFreeProxyInfo
WinHttpConnectionFreeProxyList
WinHttpConnectionGetNameList
WinHttpConnectionGetProxyInfo
WinHttpConnectionGetProxyList
WinHttpConnectionSetPolicyEntries
WinHttpConnectionSetProxyInfo
WinHttpConnectionUpdateIfIndexTable
WinHttpCrackUrl
WinHttpCreateProxyResolver
WinHttpCreateUrl
WinHttpDetectAutoProxyConfigUrl
WinHttpFreeProxyResult
WinHttpFreeProxyResultEx
WinHttpFreeProxySettings
WinHttpGetDefaultProxyConfiguration
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpGetProxyForUrlEx
WinHttpGetProxyForUrlEx2
WinHttpGetProxyForUrlHvsi
WinHttpGetProxyResult
WinHttpGetProxyResultEx
WinHttpGetProxySettingsVersion
WinHttpGetTunnelSocket
WinHttpOpen
WinHttpOpenRequest
WinHttpPacJsWorkerMain
WinHttpProbeConnectivity
WinHttpQueryAuthSchemes
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpQueryOption
WinHttpReadData
WinHttpReadProxySettings
WinHttpReadProxySettingsHvsi
WinHttpReceiveResponse
WinHttpResetAutoProxy
WinHttpSaveProxyCredentials
WinHttpSendRequest
WinHttpSetCredentials
WinHttpSetDefaultProxyConfiguration
WinHttpSetOption
WinHttpSetStatusCallback
WinHttpSetTimeouts
WinHttpTimeFromSystemTime
WinHttpTimeToSystemTime
WinHttpWebSocketClose
WinHttpWebSocketCompleteUpgrade
WinHttpWebSocketQueryCloseStatus
WinHttpWebSocketReceive
WinHttpWebSocketSend
WinHttpWebSocketShutdown
WinHttpWriteData
WinHttpWriteProxySettings
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 300B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ