app.pdb
Overview
overview
8Static
static
3Release Va...pc.exe
windows7-x64
1Release Va...pc.exe
windows10-2004-x64
1Release Va...dex.js
windows7-x64
3Release Va...dex.js
windows10-2004-x64
3Release Va..._fr.js
windows7-x64
3Release Va..._fr.js
windows10-2004-x64
3Release Va...e.json
windows7-x64
3Release Va...e.json
windows10-2004-x64
3Release Va...ll.exe
windows7-x64
7Release Va...ll.exe
windows10-2004-x64
8$PLUGINSDI...LL.dll
windows7-x64
3$PLUGINSDI...LL.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Release Valorant RPC v1.0.3/Valorant rpc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Release Valorant RPC v1.0.3/Valorant rpc.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
Release Valorant RPC v1.0.3/build/Release/index.js
Resource
win7-20240704-en
Behavioral task
behavioral4
Sample
Release Valorant RPC v1.0.3/build/Release/index.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
Release Valorant RPC v1.0.3/build/Release/index_fr.js
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
Release Valorant RPC v1.0.3/build/Release/index_fr.js
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
Release Valorant RPC v1.0.3/build/Release/package.json
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
Release Valorant RPC v1.0.3/build/Release/package.json
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
Release Valorant RPC v1.0.3/uninstall.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
Release Valorant RPC v1.0.3/uninstall.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/LangDLL.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20240802-en
General
-
Target
Release Valorant RPC 1.0.3.zip
-
Size
6.3MB
-
MD5
50600372f381e4b1669e0d4c8969e787
-
SHA1
f7e98e243c532cee45221fdfaa4129c31a5c450a
-
SHA256
bebf7734c62d4cce38032bf86f210aa23d5a45fe391a9d4d58a8f1b1ba78321f
-
SHA512
8130b5b3cddaa5138341dc9cb1b0114659f563c02f25740a45ec4c1fc852020cf17e5815e7692af4efd4df2a93dbb60a25960d5a8d2e30024c3508af748b779e
-
SSDEEP
196608:3iO/wdqxPd63uzWXTprxOLCk9XM/QQlgZYu2RqEe/:yiEqxPdjwTRELCk9c/ZiZipO
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/Release Valorant RPC v1.0.3/Valorant rpc.exe unpack001/Release Valorant RPC v1.0.3/uninstall.exe unpack002/$PLUGINSDIR/LangDLL.dll unpack002/$PLUGINSDIR/System.dll unpack002/$PLUGINSDIR/nsis_tauri_utils.dll
Files
-
Release Valorant RPC 1.0.3.zip.zip
-
Release Valorant RPC v1.0.3/Valorant rpc.exe.exe windows:6 windows x64 arch:x64
5007c62618912dfa101234d3227c00d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
bcryptprimitives
ProcessPrng
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
kernel32
SetUnhandledExceptionFilter
GetModuleHandleW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
GetModuleHandleA
GetProcAddress
GetSystemInfo
GetNativeSystemInfo
SleepConditionVariableSRW
UnhandledExceptionFilter
GetCurrentThreadId
FreeLibrary
LoadLibraryW
OpenProcess
GetSystemTimeAsFileTime
CreateMutexA
WaitForSingleObjectEx
GetTempPathW
GetFullPathNameW
CreateThread
WriteConsoleW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
CloseHandle
LoadLibraryExA
IsDebuggerPresent
GetWindowsDirectoryW
GetSystemDirectoryW
WaitForMultipleObjects
ReadFileEx
IsProcessorFeaturePresent
ExitProcess
LCIDToLocaleName
CancelIo
CopyFileExW
GetFinalPathNameByHandleW
GetUserDefaultUILanguage
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
CreateFileW
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
FindClose
GetLastError
FindNextFileW
ReleaseMutex
LoadLibraryExW
HeapReAlloc
GetEnvironmentVariableW
QueryPerformanceFrequency
HeapAlloc
HeapFree
CreatePipe
GetProcessId
TerminateProcess
GetExitCodeProcess
SleepEx
WriteFileEx
GetCurrentProcessId
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetProcessHeap
SetFilePointerEx
GlobalFree
RtlUnwindEx
RtlPcToFileHeader
FormatMessageW
GetCurrentThread
InitializeSListHead
RaiseException
GlobalAlloc
GlobalUnlock
GlobalSize
GlobalLock
EncodePointer
LoadLibraryA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
GetUserPreferredUILanguages
TlsSetValue
SetFileInformationByHandle
WaitForSingleObject
lstrlenW
CreateEventW
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentStringsW
CreateNamedPipeW
GetQueuedCompletionStatusEx
GetCurrentDirectoryW
GetCurrentProcess
DuplicateHandle
SetLastError
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
SwitchToThread
SetThreadStackGuarantee
AddVectoredExceptionHandler
SetHandleInformation
CompareStringOrdinal
DeleteProcThreadAttributeList
FreeEnvironmentStringsW
GetConsoleMode
GetFileInformationByHandle
Sleep
SetFileCompletionNotificationModes
GetOverlappedResult
ReadFile
CreateIoCompletionPort
TlsFree
PostQueuedCompletionStatus
psapi
EnumProcesses
GetModuleFileNameExW
user32
OpenClipboard
IsClipboardFormatAvailable
DispatchMessageA
GetMessageA
UnregisterHotKey
RegisterHotKey
VkKeyScanW
GetAsyncKeyState
GetKeyboardState
IsProcessDPIAware
PostQuitMessage
AppendMenuW
CreateMenu
SetMenuItemInfoW
GetClipboardData
SetClipboardData
GetDC
CreateAcceleratorTableW
ToUnicodeEx
GetKeyState
MapVirtualKeyExW
GetKeyboardLayout
SendInput
SetForegroundWindow
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
GetRawInputData
CloseClipboard
SystemParametersInfoA
IsWindowVisible
AdjustWindowRectEx
GetWindowRect
MonitorFromPoint
EnumDisplayMonitors
ValidateRect
CreateIcon
GetWindowLongPtrW
RegisterClipboardFormatW
EnumChildWindows
RegisterWindowMessageA
SetWindowDisplayAffinity
RegisterClassExW
RegisterRawInputDevices
MsgWaitForMultipleObjectsEx
SetWindowLongPtrW
GetMenu
DestroyWindow
GetClientRect
ShowCursor
ClipCursor
GetClipCursor
SetWindowLongW
PostMessageW
GetMonitorInfoW
MonitorFromWindow
RedrawWindow
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
TrackMouseEvent
MonitorFromRect
GetWindowLongW
SetMenu
GetUpdateRect
GetActiveWindow
IsIconic
MapVirtualKeyW
SendMessageW
GetSystemMenu
ShowWindow
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
CheckMenuItem
GetForegroundWindow
SetCursorPos
SetCursor
LoadCursorW
InvalidateRgn
SetWindowPos
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
ClientToScreen
ReleaseCapture
GetCursorPos
FlashWindowEx
EnableMenuItem
DestroyAcceleratorTable
DefWindowProcW
PostThreadMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetAncestor
GetMessageW
DestroyIcon
SetCapture
EmptyClipboard
comctl32
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
TaskDialogIndirect
gdi32
DeleteObject
GetDeviceCaps
CreateRectRgn
dwmapi
DwmEnableBlurBehindWindow
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
CoTaskMemFree
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoTaskMemAlloc
CreateStreamOnHGlobal
CoIncrementMTAUsage
shell32
ShellExecuteW
DragFinish
DragQueryFileW
SHCreateItemFromParsingName
SHGetKnownFolderPath
SHAppBarMessage
advapi32
RevertToSelf
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegCloseKey
RegGetValueW
SystemFunction036
RegQueryValueExW
RegOpenKeyExW
ImpersonateAnonymousToken
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
oleaut32
SysFreeString
SysStringLen
GetErrorInfo
SetErrorInfo
uxtheme
SetWindowTheme
ntdll
NtReadFile
RtlGetVersion
NtDeviceIoControlFile
NtCreateFile
NtWriteFile
RtlNtStatusToDosError
NtCancelIoFileEx
bcrypt
BCryptGenRandom
secur32
DeleteSecurityContext
QueryContextAttributesW
AcquireCredentialsHandleA
ApplyControlToken
FreeCredentialsHandle
DecryptMessage
FreeContextBuffer
InitializeSecurityContextW
AcceptSecurityContext
EncryptMessage
ws2_32
getsockopt
send
ioctlsocket
connect
bind
shutdown
WSASend
WSASocketW
WSACleanup
getsockname
getaddrinfo
getpeername
recv
freeaddrinfo
closesocket
WSAStartup
setsockopt
WSAIoctl
WSAGetLastError
crypt32
CertEnumCertificatesInStore
CertAddCertificateContextToStore
CertOpenStore
CertCloseStore
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertDuplicateCertificateChain
CertFreeCertificateChain
api-ms-win-crt-math-l1-1-0
trunc
floor
__setusermatherr
round
pow
api-ms-win-crt-string-l1-1-0
wcslen
wcsncmp
_wcsicmp
strlen
strcpy_s
api-ms-win-crt-runtime-l1-1-0
_seh_filter_exe
_register_onexit_function
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_crt_atexit
__p___argc
strerror
_initialize_onexit_table
_c_exit
__p___argv
_cexit
terminate
abort
_register_thread_local_exe_atexit_callback
api-ms-win-crt-convert-l1-1-0
_ultow_s
wcstol
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
calloc
_set_new_mode
malloc
_callnewh
Sections
.text Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Release Valorant RPC v1.0.3/build/Release/index.js.js
-
Release Valorant RPC v1.0.3/build/Release/index_fr.js.js
-
Release Valorant RPC v1.0.3/build/Release/package.json
-
Release Valorant RPC v1.0.3/uninstall.exe.exe windows:4 windows x86 arch:x86
61259b55b8912888e90f516ca08dc514
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
SetFileSecurityW
RegOpenKeyExW
RegEnumValueW
shell32
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
SHGetFileInfoW
ole32
OleInitialize
OleUninitialize
CoCreateInstance
IIDFromString
CoTaskMemFree
comctl32
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
user32
GetClientRect
EndPaint
DrawTextW
IsWindowEnabled
DispatchMessageW
wsprintfA
CharNextA
CharPrevW
MessageBoxIndirectW
GetDlgItemTextW
SetDlgItemTextW
GetSystemMetrics
FillRect
AppendMenuW
TrackPopupMenu
OpenClipboard
SetClipboardData
CloseClipboard
IsWindowVisible
CallWindowProcW
GetMessagePos
CheckDlgButton
LoadCursorW
SetCursor
GetSysColor
SetWindowPos
GetWindowLongW
PeekMessageW
SetClassLongW
GetSystemMenu
EnableMenuItem
GetWindowRect
ScreenToClient
EndDialog
RegisterClassW
SystemParametersInfoW
CreateWindowExW
GetClassInfoW
DialogBoxParamW
CharNextW
ExitWindowsEx
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
FindWindowExW
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
ReleaseDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
EmptyClipboard
CreatePopupMenu
gdi32
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
kernel32
GetExitCodeProcess
WaitForSingleObject
GetModuleHandleA
GetProcAddress
GetSystemDirectoryW
lstrcatW
Sleep
lstrcpyA
WriteFile
GetTempFileNameW
lstrcmpiA
RemoveDirectoryW
CreateProcessW
CreateDirectoryW
GetLastError
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
WideCharToMultiByte
lstrcpynW
lstrlenW
SetErrorMode
GetVersionExW
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
SetEnvironmentVariableW
CopyFileW
ExitProcess
GetCurrentProcess
GetModuleFileNameW
GetFileSize
CreateFileW
GetTickCount
MulDiv
SetFileAttributesW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
CloseHandle
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalFree
GlobalAlloc
GetModuleHandleW
LoadLibraryExW
MoveFileExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
lstrlenA
MultiByteToWideChar
ReadFile
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: - Virtual size: 176KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/LangDLL.dll.dll windows:4 windows x86 arch:x86
3e8d18bb71c7ebbda2ddc2a4bb03547b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
lstrlenW
GlobalFree
lstrcpynW
lstrcmpW
GlobalAlloc
MulDiv
GetModuleHandleW
lstrcpyW
user32
DialogBoxParamW
SetDlgItemTextW
SendDlgItemMessageW
EndDialog
SetWindowTextW
LoadIconW
ShowWindow
SendMessageW
GetDC
gdi32
GetDeviceCaps
CreateFontIndirectW
DeleteObject
Exports
Exports
LangDialog
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 681B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/System.dll.dll windows:4 windows x86 arch:x86
fc0224e99e736751432961db63a41b76
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetModuleHandleW
GlobalFree
GlobalSize
lstrcpynW
lstrcpyW
GetProcAddress
WideCharToMultiByte
VirtualFree
FreeLibrary
lstrlenW
LoadLibraryW
GlobalAlloc
MultiByteToWideChar
VirtualAlloc
VirtualProtect
GetLastError
user32
wsprintfW
ole32
StringFromGUID2
CLSIDFromString
Exports
Exports
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 867B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 662B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
$PLUGINSDIR/nsis_tauri_utils.dll.dll windows:6 windows x86 arch:x86
17cb20871354b907f678c7c220e4ca60
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
nsis_tauri_utils.pdb
Imports
kernel32
OpenProcess
ExitProcess
HeapAlloc
CloseHandle
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
HeapFree
TerminateProcess
GetProcessHeap
GlobalFree
InitializeProcThreadAttributeList
GetLastError
UpdateProcThreadAttribute
CreateProcessW
HeapReAlloc
GlobalAlloc
lstrcpyW
advapi32
GetTokenInformation
OpenProcessToken
EqualSid
user32
GetShellWindow
GetWindowThreadProcessId
Exports
Exports
DllMain
FindProcess
FindProcessCurrentUser
KillProcess
KillProcessCurrentUser
RunAsUser
SemverCompare
memcmp
memcpy
memset
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ