xmrig-6.22.1.rar
- SHA256 d46c90d021d5330660f00a4f078a27ba0db3da7f15e0748a9b15115d8eea6dbf
Overview
overview
10Static
static
10xmrig-6.22...0).cmd
windows7-x64
1xmrig-6.22...0).cmd
windows10-2004-x64
1xmrig-6.22...1).cmd
windows7-x64
1xmrig-6.22...1).cmd
windows10-2004-x64
1xmrig-6.22...2).cmd
windows7-x64
1xmrig-6.22...2).cmd
windows10-2004-x64
1xmrig-6.22...3).cmd
windows7-x64
1xmrig-6.22...3).cmd
windows10-2004-x64
1xmrig-6.22...4).cmd
windows7-x64
1xmrig-6.22...4).cmd
windows10-2004-x64
1xmrig-6.22...5).cmd
windows7-x64
1xmrig-6.22...5).cmd
windows10-2004-x64
1xmrig-6.22...6).cmd
windows7-x64
1xmrig-6.22...6).cmd
windows10-2004-x64
1xmrig-6.22...7).cmd
windows7-x64
1xmrig-6.22...7).cmd
windows10-2004-x64
1xmrig-6.22...8).cmd
windows7-x64
1xmrig-6.22...8).cmd
windows10-2004-x64
1xmrig-6.22...9).cmd
windows7-x64
1xmrig-6.22...9).cmd
windows10-2004-x64
1xmrig-6.22...2).cmd
windows7-x64
1xmrig-6.22...2).cmd
windows10-2004-x64
1xmrig-6.22...0).cmd
windows7-x64
1xmrig-6.22...0).cmd
windows10-2004-x64
1xmrig-6.22...1).cmd
windows7-x64
1xmrig-6.22...1).cmd
windows10-2004-x64
1xmrig-6.22...2).cmd
windows7-x64
1xmrig-6.22...2).cmd
windows10-2004-x64
1xmrig-6.22...3).cmd
windows7-x64
1xmrig-6.22...3).cmd
windows10-2004-x64
1xmrig-6.22...4).cmd
windows7-x64
1xmrig-6.22...4).cmd
windows10-2004-x64
1Behavioral task
behavioral1
Sample
xmrig-6.22.1/pool_mine_example - Copy (10).cmd
Resource
win7-20240729-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral2
Sample
xmrig-6.22.1/pool_mine_example - Copy (10).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral3
Sample
xmrig-6.22.1/pool_mine_example - Copy (11).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral4
Sample
xmrig-6.22.1/pool_mine_example - Copy (11).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral5
Sample
xmrig-6.22.1/pool_mine_example - Copy (12).cmd
Resource
win7-20240708-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral6
Sample
xmrig-6.22.1/pool_mine_example - Copy (12).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral7
Sample
xmrig-6.22.1/pool_mine_example - Copy (13).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral8
Sample
xmrig-6.22.1/pool_mine_example - Copy (13).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral9
Sample
xmrig-6.22.1/pool_mine_example - Copy (14).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral10
Sample
xmrig-6.22.1/pool_mine_example - Copy (14).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral11
Sample
xmrig-6.22.1/pool_mine_example - Copy (15).cmd
Resource
win7-20241023-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral12
Sample
xmrig-6.22.1/pool_mine_example - Copy (15).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral13
Sample
xmrig-6.22.1/pool_mine_example - Copy (16).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral14
Sample
xmrig-6.22.1/pool_mine_example - Copy (16).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral15
Sample
xmrig-6.22.1/pool_mine_example - Copy (17).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral16
Sample
xmrig-6.22.1/pool_mine_example - Copy (17).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral17
Sample
xmrig-6.22.1/pool_mine_example - Copy (18).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral18
Sample
xmrig-6.22.1/pool_mine_example - Copy (18).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral19
Sample
xmrig-6.22.1/pool_mine_example - Copy (19).cmd
Resource
win7-20241023-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral20
Sample
xmrig-6.22.1/pool_mine_example - Copy (19).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral21
Sample
xmrig-6.22.1/pool_mine_example - Copy (2).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral22
Sample
xmrig-6.22.1/pool_mine_example - Copy (2).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral23
Sample
xmrig-6.22.1/pool_mine_example - Copy (20).cmd
Resource
win7-20241010-en
windows7-x64
4 signatures
1800 seconds
Behavioral task
behavioral24
Sample
xmrig-6.22.1/pool_mine_example - Copy (20).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral25
Sample
xmrig-6.22.1/pool_mine_example - Copy (21).cmd
Resource
win7-20241010-en
windows7-x64
4 signatures
1800 seconds
Behavioral task
behavioral26
Sample
xmrig-6.22.1/pool_mine_example - Copy (21).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral27
Sample
xmrig-6.22.1/pool_mine_example - Copy (22).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral28
Sample
xmrig-6.22.1/pool_mine_example - Copy (22).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral29
Sample
xmrig-6.22.1/pool_mine_example - Copy (23).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral30
Sample
xmrig-6.22.1/pool_mine_example - Copy (23).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
Behavioral task
behavioral31
Sample
xmrig-6.22.1/pool_mine_example - Copy (24).cmd
Resource
win7-20240903-en
windows7-x64
3 signatures
1800 seconds
Behavioral task
behavioral32
Sample
xmrig-6.22.1/pool_mine_example - Copy (24).cmd
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
1800 seconds
General
- Target xmrig-6.22.1.rar
- Size 2.1MB
- Sample241102-plbptatgjf
- SHA256 d46c90d021d5330660f00a4f078a27ba0db3da7f15e0748a9b15115d8eea6dbf
- MD5 8592fdd7d72d5bc52129b7488be2a3e8
- SHA1 ca46d95072c9237fb84a2d7b035bd11de496ae86
- SHA512 f3723edc6c806f8c2d6508f952ebe9e42d26efde6eec261538ded60698b5c5c4ca9db0fa426b42da04492552d511a5947c50ce702fdee28e1a87b2a56d4c6892
- SSDEEP 49152:2tIvvOlMRUvy3Y5dvBIyZ0lpyE2LRXBjd0vpMgGakYzP1eGwQyxCJOM:nHOOY5dvBHZ0qLR9rZYxeG8QOM
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
File Explorer
-
xmrig-6.22.1.rar.rar 2.1MB
-
xmrig-6.22.1/SHA256SUMS748B
-
xmrig-6.22.1/WinRing0x64.sys.sys 14KB
-
xmrig-6.22.1/config.json2KB
-
xmrig-6.22.1/pool_mine_example - Copy (10).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (11).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (12).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (13).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (14).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (15).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (16).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (17).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (18).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (19).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (2).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (20).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (21).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (22).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (23).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (24).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (25).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (26).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (27).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (28).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (29).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (3).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (30).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (31).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (32).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (33).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (34).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (35).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (36).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (37).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (4).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (5).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (6).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (7).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (8).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy (9).cmd1KB
-
xmrig-6.22.1/pool_mine_example - Copy.cmd1KB
-
xmrig-6.22.1/pool_mine_example.cmd1KB
-
xmrig-6.22.1/start.cmd44B
-
xmrig-6.22.1/xmrig.exe.exe 6.1MB
xmrig-6.22.1/SHA256SUMS
- SHA256 bbed9f4b6dc920e247a3d9f062a0d529e1675294b40cd630db59a4615bc7df4a
- MD5 8cb1d5c66f5599142e674339a603f90a
- SHA1 08f9480b5388a03fa91750e93e6b7ae3223d9db8
- SHA512 ad05b0b9b57ce4e4363fae2ed65814375f060f3e1a87e6c5120a7caec965a326965a546df163720d06b6405ff95ae61d0b3c9041e55f4f04f476a3de45885659
- MD5 SHA1 SHA512
xmrig-6.22.1/WinRing0x64.sys
- IMPHASH d41fa95d4642dc981f10de36f4dc8cd7
- SHA256 11bd2c9f9e2397c9a16e0990e4ed2cf0679498fe0fd418a3dfdac60b5c160ee5
- MD5 0c0195c48b6b8582fa6f6373032118da
- SHA1 d25340ae8e92a6d29f599fef426a2bc1b5217299
- SHA512 ab28e99659f219fec553155a0810de90f0c5b07dc9b66bda86d7686499fb0ec5fddeb7cd7a3c5b77dccb5e865f2715c2d81f4d40df4431c92ac7860c7e01720d
- SSDEEP 192:nqjKhp+GQvzj3i+5T9oGYJh1wAoxhSF6OOoe068jSJUbueq1H2PIP0:qjKL+v/y+5TWGYOf2OJ06dUb+pQ
- MD5 SHA1 SHA512 SSDEEP
PE Signature issue
Digest
26:68:21:a3:91:74:d2:9f:6f:87:91:cf:9f:44:f1:a1:f3:43:9d:da
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Noriyuki MIYAZAKI,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f
Chains
Jul 26, 2008
Subject
CN=Noriyuki MIYAZAKI,C=JP,1.2.840.113549.1.9.1=#0c196869796f6869796f406372797374616c6d61726b2e696e666f
Serial Number
01:00:00:00:00:01:15:37:24:21:a8
Issuer
CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageContentCommitment, KeyUsageKeyEncipherment, KeyUsageDataEncipherment
Timespan
Sep 24, 2007 - Sep 24, 2008
Subject
CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:00:f9:7f:aa:2e:1e
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Dec 16, 2003 - Jan 27, 2014
Subject
CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:08:d9:61:1c:d6
Issuer
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 28, 1999 - Jan 27, 2014
Subject
CN=GlobalSign Time Stamping Authority,O=GlobalSign,1.2.840.113549.1.9.1=#0c1c74696d657374616d70696e666f40676c6f62616c7369676e2e636f6d
Serial Number
04:00:00:00:00:01:10:92:eb:82:95
Issuer
CN=GlobalSign RootSign Partners CA,OU=RootSign Partners CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Timespan
Feb 5, 2007 - Jan 27, 2014
Subject
CN=GlobalSign ObjectSign CA,OU=ObjectSign CA,O=GlobalSign nv-sa,C=BE
Serial Number
04:00:00:00:00:01:08:d9:61:24:48
Issuer
CN=GlobalSign Primary Object Publishing CA,OU=Primary Object Publishing CA,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Timespan
Jan 22, 2004 - Jan 27, 2014
Subject
CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE
Serial Number
61:0b:7f:6b:00:00:00:00:00:19
Issuer
CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
May 23, 2006 - May 23, 2016
Minor OS version
0
Major OS version
6
Entry point
20488
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d:\hotproject\winring0\source\dll\sys\lib\amd64\WinRing0.pdb
ntoskrnl.exe
IoDeleteSymbolicLink
RtlInitUnicodeString
IoDeleteDevice
IoCreateDevice
MmMapIoSpace
KeBugCheckEx
IoCreateSymbolicLink
MmUnmapIoSpace
IofCompleteRequest
__C_specific_handler
hal
HalSetBusDataByOffset
HalGetBusDataByOffset
Name
.text
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
512B
Virtual Size
380B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
276B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
INIT
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=1, productName=Unmarked objects,
count=5, id=123, productName=VS2005 build 50727, version=50727,
count=1, id=125, productName=VS2005 build 50727, version=50727,
count=3, id=109, productName=VS2005 build 50727, version=50727,
count=1, id=113, version=50727,
count=1, id=124, productName=VS2005 build 50727, version=50727,
count=1, id=120, productName=VS2005 build 50727, version=50727,
xmrig-6.22.1/config.json
- SHA256 2b03943244871ca75e44513e4d20470b8f3e0f209d185395de82b447022437ec
- MD5 66f38c96a4901e7b345787c447842b3e
- SHA1 2aa9b4d1bd2edd5d81bd9725e9318edaee67531f
- SHA512 71757fad29d6d2a257362ed28cde9f249cc8a14e646dee666c9029ea97c72de689cdf8ed5cf0365195a6a6831fe77d82efe5e2fa555c6cc5078f1f29ae8dd68f
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (10).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (11).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (12).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (13).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (14).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (15).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (16).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (17).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (18).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (19).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (2).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (20).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (21).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (22).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (23).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (24).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (25).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (26).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (27).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (28).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (29).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (3).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (30).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (31).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (32).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (33).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (34).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (35).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (36).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (37).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (4).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (5).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (6).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (7).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (8).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy (9).cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example - Copy.cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/pool_mine_example.cmd
- SHA256 864117ff26ba29a6d9f8653448942ac23cdae066bbe5607d481ee979cb8e737c
- MD5 490f14d7b7f8fe144083888c4469e4e2
- SHA1 efed53892ba4b0f2bea49415f763c4ff8882c452
- SHA512 f8695e502c7177992377a8896dfbd46f32505414f65709061d10c74cd2926a046e0e0a1c04e2fb9787084f75ed586c30440b8a9ef264cd35315744bbaf540eca
- MD5 SHA1 SHA512
xmrig-6.22.1/start.cmd
- SHA256 8e70ef38fe14a2ee2848df3d6f7e260d1caf8cfc15de694d678b8af151d62333
- MD5 eaf3a00cc0465f8af471b849ada29843
- SHA1 3042e97874706189aa9704d77c9e74a94e519106
- SHA512 56b9f3991ae4bad5e06097d095931e746e6b2ac955649a5c793d9f4f6861c6ffc9316b063c34d7a8079af201354c87bf3008bc0fd4321e59b27e1d8120b078cf
- MD5 SHA1 SHA512
xmrig-6.22.1/xmrig.exe
- IMPHASH a18fc2f25c6acc165a4bd1c9e694f93e
- SHA256 b58481853cf26dccde549d444ced515f9335415c3bd7ff63abbd49906ebe4b78
- MD5 7ccbc7378579b787a08a3b7e88474ac7
- SHA1 63abca64118e7f0b32c3165e442e53143a5679e0
- SHA512 3a9cbcf489eea8f438fc04fc5f714d35659cf089e814cda51e7b778d4bc10c6e72deb04603cf3b20fe7c7295b0fb82c75f8c4b922535fcd3c69072bd8b7a7596
- SSDEEP 98304:fna+bVUzI0QuI08+PCKAbbracKO/J9E86MnTSbcqUaKL2JZj8/x62+TDnyE:zbVUFliXEKnObcHL2JxYD+TDnyE
- MD5 SHA1 SHA512 SSDEEP
-
XMRig Miner payload
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4108500
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
ws2_32
WSASetLastError
send
recv
ntohs
htons
htonl
inet_addr
inet_ntoa
gethostbyaddr
WSAGetLastError
WSAIoctl
gethostbyname
WSARecvFrom
WSASocketW
WSASend
WSARecv
gethostname
WSADuplicateSocketW
getpeername
FreeAddrInfoW
GetAddrInfoW
shutdown
socket
setsockopt
listen
connect
closesocket
bind
WSACleanup
WSAStartup
select
getsockopt
getsockname
ioctlsocket
getservbyname
getservbyport
iphlpapi
GetAdaptersAddresses
userenv
GetUserProfileDirectoryW
crypt32
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertGetCertificateContextProperty
CertDuplicateCertificateContext
kernel32
GetStringTypeW
InitializeCriticalSectionAndSpinCount
CreateEventW
WriteConsoleW
SetConsoleTitleA
GetStdHandle
SetConsoleMode
GetConsoleMode
QueryPerformanceFrequency
QueryPerformanceCounter
SizeofResource
LockResource
LoadResource
FindResourceW
ExpandEnvironmentStringsA
GetConsoleWindow
GetSystemFirmwareTable
HeapFree
HeapAlloc
GetProcessHeap
MultiByteToWideChar
SetPriorityClass
GetCurrentProcess
SetThreadPriority
GetSystemPowerStatus
GetCurrentThread
GetProcAddress
GetModuleHandleW
GetTickCount
CloseHandle
FreeConsole
VirtualProtect
VirtualFree
VirtualAlloc
GetLargePageMinimum
LocalAlloc
GetLastError
LocalFree
FlushInstructionCache
GetCurrentThreadId
AddVectoredExceptionHandler
DeviceIoControl
GetModuleFileNameW
CreateFileW
SetLastError
GetSystemTime
SystemTimeToFileTime
GetModuleHandleExW
Sleep
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemInfo
SwitchToFiber
DeleteFiber
CreateFiberEx
FindClose
FindFirstFileW
FindNextFileW
WideCharToMultiByte
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
FormatMessageA
GetFileType
WriteFile
GetEnvironmentVariableW
GetACP
ConvertFiberToThread
ConvertThreadToFiberEx
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
ReadConsoleA
ReadConsoleW
PostQueuedCompletionStatus
CreateFileA
DuplicateHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
QueueUserWorkItem
RegisterWaitForSingleObject
UnregisterWait
GetNumberOfConsoleInputEvents
ReadConsoleInputW
FillConsoleOutputCharacterW
FillConsoleOutputAttribute
GetConsoleCursorInfo
SetConsoleCursorInfo
GetConsoleScreenBufferInfo
SetConsoleCursorPosition
SetConsoleTextAttribute
WriteConsoleInputW
CreateDirectoryW
FlushFileBuffers
GetDiskFreeSpaceW
GetFileAttributesW
RtlCaptureContext
RtlLookupFunctionEntry
GetFinalPathNameByHandleW
GetFullPathNameW
ReadFile
RemoveDirectoryW
SetFilePointerEx
SetFileTime
MapViewOfFile
FlushViewOfFile
UnmapViewOfFile
CreateFileMappingA
ReOpenFile
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
ReleaseSemaphore
ResumeThread
GetNativeSystemInfo
GetProcessAffinityMask
SetThreadAffinityMask
CreateSemaphoreA
SetConsoleCtrlHandler
RtlUnwind
GetLongPathNameW
GetShortPathNameW
CreateIoCompletionPort
ReadDirectoryChangesW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetCurrentDirectoryW
GetTempPathW
GlobalMemoryStatusEx
FileTimeToSystemTime
K32GetProcessMemoryInfo
SetHandleInformation
CancelIoEx
CancelIo
SwitchToThread
SetFileCompletionNotificationModes
LoadLibraryExW
SetErrorMode
GetQueuedCompletionStatus
ConnectNamedPipe
SetNamedPipeHandleState
PeekNamedPipe
CreateNamedPipeW
GetOverlappedResult
CancelSynchronousIo
GetNamedPipeHandleStateA
GetNamedPipeClientProcessId
GetNamedPipeServerProcessId
TerminateProcess
GetExitCodeProcess
UnregisterWaitEx
DebugBreak
GetModuleHandleA
LoadLibraryExA
GetStartupInfoW
GetModuleFileNameA
GetVersionExA
SetProcessAffinityMask
GetComputerNameA
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCPInfo
RtlVirtualUnwind
GetFileSizeEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetStdHandle
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
ExitProcess
GetFileAttributesExW
SetFileAttributesW
GetConsoleOutputCP
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetTimeZoneInformation
HeapSize
SetEndOfFile
FindFirstFileExW
IsValidCodePage
GetOEMCP
GetFileInformationByHandle
GetCurrentDirectoryW
CompareStringEx
LCMapStringEx
InitializeCriticalSectionEx
WaitForSingleObjectEx
GetExitCodeThread
SleepConditionVariableSRW
EncodePointer
DecodePointer
user32
GetLastInputInfo
MessageBoxW
GetProcessWindowStation
TranslateMessage
GetUserObjectInformationW
ShowWindow
DispatchMessageA
GetSystemMetrics
MapVirtualKeyW
GetMessageA
shell32
SHGetSpecialFolderPathA
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
advapi32
SystemFunction036
GetUserNameW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW
CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptReleaseContext
CryptAcquireContextW
CreateServiceW
QueryServiceStatus
CloseServiceHandle
OpenSCManagerW
QueryServiceConfigA
DeleteService
ControlService
StartServiceW
OpenServiceW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
LsaOpenPolicy
LsaAddAccountRights
LsaClose
GetTokenInformation
bcrypt
BCryptGenRandom
Name
.text
Size
4.1MB
Virtual Size
4.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
65KB
Virtual Size
2.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
170KB
Virtual Size
170KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RANDOMX
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
_TEXT_CN
Size
10KB
Virtual Size
9KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
_TEXT_CN
Size
4KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=259, version=30795,
count=203, id=261, version=30795,
count=19, id=260, version=30034,
count=10, id=259, version=30034,
count=94, id=261, version=30034,
count=25, id=260, version=30795,
count=18, id=260, version=30156,
count=388, id=1, productName=Unmarked objects,
count=23, id=257, version=30795,
count=800, id=260, version=34123,
count=265, id=265, version=30156,
count=3, id=259, version=30156,
count=1, id=255, version=30156,
count=1, id=151,
count=1, id=258, version=30156,