+@}%4vq;W=@E0-^1&+PWP/kXaf9POcJ1PC^<wt'e&@a7UagJsF-)]2>R&B\E~8iaGuBp|oR+c;0X[s_iKSetM@^'!0n@i6UwxIgQ>
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6.dll
Resource
win7-20240903-en
windows7-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6.dll
Resource
win10v2004-20250217-en
windows10-2004-x64
11 signatures
150 seconds
General
-
Target
57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6.exe
-
Size
7.7MB
-
MD5
7f5a2fca2a3a5af9c809823cf3d593c0
-
SHA1
3886cfb92519a7f54241efb660db17cd3c566bb1
-
SHA256
57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6
-
SHA512
00fe3d38b549617de5d204d41e6413a09a926bc0c741eae853a22a9dbcb991a6392c9ea2a1d3161488bc82e397de626916bd0944f927dfaa46e728df4bcbb4ac
-
SSDEEP
49152:KxbvjDayGjkW6qwQ3GamxRMcQAFU4uhw7WfBdKv6f/dJnUYt50Q31+20ULaCcMj5:jM63G4B6vGoqzj1agH1N/sRB7zvjU
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6.exe
Files
-
57aecd5b8581c8ff940f279053a41ae3937372959e47552769cef88bed7421e6.exe.dll windows:6 windows x64 arch:x64
a3a76263c08ae5be3acc553a063edde8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
OpenProcessToken
GetTokenInformation
LookupPrivilegeValueW
AdjustTokenPrivileges
RegEnumKeyExW
RegEnumValueW
RevertToSelf
OpenThreadToken
SetThreadToken
DuplicateTokenEx
GetSecurityDescriptorLength
CreateWellKnownSid
GetWindowsAccountDomainSid
ImpersonateLoggedOnUser
bcrypt
BCryptCreateHash
BCryptGenRandom
BCryptExportKey
BCryptEncrypt
BCryptDestroyHash
BCryptDestroyKey
BCryptCloseAlgorithmProvider
BCryptSetProperty
BCryptOpenAlgorithmProvider
BCryptImportKeyPair
BCryptImportKey
BCryptHashData
BCryptGetProperty
BCryptGenerateKeyPair
BCryptFinishHash
BCryptFinalizeKeyPair
BCryptDecrypt
crypt32
CertNameToStrW
CertGetValidUsages
CertFreeCertificateChainEngine
CertCloseStore
PFXImportCertStore
PFXExportCertStore
CryptFindOIDInfo
CryptQueryObject
CryptMsgGetParam
CryptMsgClose
CryptImportPublicKeyInfoEx2
CryptFormatObject
CryptDecodeObject
CertVerifyTimeValidity
CertSetCertificateContextProperty
CertGetNameStringW
CertSerializeCertificateStoreElement
CertSaveStore
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertAddCertificateContextToStore
CertAddCertificateLinkToStore
CertControlStore
CertCreateCertificateChainEngine
CertFindCertificateInStore
CertFindExtension
CertFreeCertificateChain
CertGetCertificateChain
CertGetIntendedKeyUsage
CertOpenStore
iphlpapi
if_nametoindex
kernel32
GetProcessHeap
RtlLookupFunctionEntry
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
UnhandledExceptionFilter
QueryPerformanceCounter
SetLastError
FormatMessageW
GetLastError
GetTickCount64
GetFileAttributesW
CreateDirectoryW
SetFileAttributesW
CreateFileW
WriteFile
CloseHandle
CreateProcessW
GetEnvironmentVariableW
WriteConsoleW
GetStdHandle
LocalFree
ExitProcess
FreeConsole
GetCPInfoExW
GetConsoleMode
GetFileType
ReadFile
ReadConsoleW
GetConsoleOutputCP
MultiByteToWideChar
WideCharToMultiByte
GetExitCodeProcess
TerminateProcess
OpenProcess
K32EnumProcesses
GetProcessId
DuplicateHandle
CreatePipe
GetCurrentProcess
GetConsoleCP
WaitNamedPipeW
CancelIoEx
OpenThread
CancelSynchronousIo
GetCurrentThreadId
LoadLibraryExW
CloseThreadpoolIo
GetCurrentProcessId
RaiseFailFastException
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTime
GetCalendarInfoEx
CompareStringOrdinal
CompareStringEx
FindNLSStringEx
GetLocaleInfoEx
ResolveLocaleName
GetUserPreferredUILanguages
FindStringOrdinal
GetCurrentThread
WaitForSingleObject
Sleep
DeleteCriticalSection
EnterCriticalSection
SleepConditionVariableCS
LeaveCriticalSection
WakeConditionVariable
InitializeCriticalSection
InitializeConditionVariable
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForMultipleObjectsEx
CreateThreadpoolWait
SetThreadpoolWait
WaitForThreadpoolWaitCallbacks
CloseThreadpoolWait
CreateThreadpoolWork
CloseThreadpoolWork
SubmitThreadpoolWork
QueryPerformanceFrequency
GetFullPathNameW
GetLongPathNameW
GetCPInfo
LocalAlloc
GetProcAddress
LocaleNameToLCID
LCMapStringEx
EnumTimeFormatsEx
EnumCalendarInfoExEx
CreateIoCompletionPort
CreateThreadpoolIo
StartThreadpoolIo
CancelThreadpoolIo
DeleteFileW
DeviceIoControl
ExpandEnvironmentStringsW
FindClose
FindFirstFileExW
FlushFileBuffers
FreeLibrary
GetCurrentDirectoryW
GetFileAttributesExW
GetFileInformationByHandleEx
GetModuleFileNameW
GetOverlappedResult
GetSystemDirectoryW
QueryUnbiasedInterruptTime
SetFileInformationByHandle
SetFilePointerEx
SetThreadErrorMode
CreateThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetDynamicTimeZoneInformation
GetTimeZoneInformation
GetCurrentProcessorNumberEx
SetEvent
ResetEvent
CreateEventExW
FlushProcessWriteBuffers
WaitForSingleObjectEx
RtlVirtualUnwind
RtlCaptureContext
RtlRestoreContext
AddVectoredExceptionHandler
FlsAlloc
FlsGetValue
FlsSetValue
CreateEventW
SwitchToThread
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualProtect
VirtualFree
QueryInformationJobObject
GetModuleHandleW
GetModuleHandleExW
GetProcessAffinityMask
InitializeContext
GetEnabledXStateFeatures
SetXStateFeaturesMask
InitializeCriticalSectionEx
VirtualQuery
GetSystemTimeAsFileTime
DebugBreak
SleepEx
GlobalMemoryStatusEx
GetSystemInfo
GetLogicalProcessorInformation
GetLogicalProcessorInformationEx
GetLargePageMinimum
VirtualUnlock
VirtualAllocExNuma
IsProcessInJob
GetNumaHighestNodeNumber
GetProcessGroupAffinity
K32GetProcessMemoryInfo
EncodePointer
DecodePointer
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
ncrypt
NCryptGetProperty
NCryptDecrypt
NCryptOpenKey
NCryptImportKey
NCryptExportKey
NCryptDeleteKey
NCryptCreatePersistedKey
NCryptFinalizeKey
NCryptFreeObject
NCryptSetProperty
NCryptEncrypt
NCryptOpenStorageProvider
ole32
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CoWaitForMultipleHandles
CoCreateGuid
CoGetApartmentType
CoInitializeEx
user32
LoadStringW
ws2_32
bind
FreeAddrInfoExW
WSACleanup
WSAStartup
GetAddrInfoExW
WSASocketW
FreeAddrInfoW
WSASend
WSARecv
getpeername
WSAGetOverlappedResult
WSAConnect
shutdown
setsockopt
send
select
GetAddrInfoW
ioctlsocket
GetNameInfoW
getsockopt
WSAIoctl
recv
closesocket
getsockname
api-ms-win-crt-heap-l1-1-0
calloc
malloc
_callnewh
free
api-ms-win-crt-math-l1-1-0
tan
modf
sin
pow
floor
cos
ceil
api-ms-win-crt-string-l1-1-0
_stricmp
strcmp
wcsncmp
strncpy_s
strcpy_s
api-ms-win-crt-convert-l1-1-0
strtoull
api-ms-win-crt-runtime-l1-1-0
terminate
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
abort
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsscanf
Exports
Exports
026OWfmKK3zOTgmKtpC2hORlEnQtkWA3
07Ori5TULGWdDKXb4lL
0JMFOnNkOv
0LOgNtGI4NCSg
0PcR305FGnSbcebiXX1uim
0QLI4LIEibAgZbq2mE5eDTNW9ygK
0UiIKnQqg0WLDCEG50M97v
0dY4tXvwigV
0k89DWO
0mecvxninbG5b35x5Ec3ntsuSeDgozq
0q8T3Yu64VaS6U
0u4rvn6J2INiz0uijKZngBa4
0w5iqnGOXysFRCYE
13R7jPmBy8kePOT
14vP6BZV89sbOd22R7
1aI56BNyTKsT8G79p7Nh
1dcnV3X
1ud2T8EuqSAoqMogML9RtJNiGniDt
20YkU4AykXvzDdqU7
27eBg8r2jANxGnc87vXl6Uo4s
2C77hkL7VfEB22NeCsbabhts
2IXZukfeXYQayjYe3yB7fpKLEmW
2RkEkzxfdE8bERKCSL
2SpM5vz2FinL2OYdv9N
2vTOICZl47vlMJ
2zAh2mTJ46TFgrOZ1phDdK
356U9dhB6LrCa0GE8A80jyP
36bA5PjWQ8mK
39mxo4HYeabUF3doQQp
3E0L7b8x0q
3T6lGAfL5rYD3VOoqyhs27
3XZL8joYgxEPfvsEiDyMe
3Zodtmswi
3cJIa9zU8JsWPyKFMrtmz5pui
3lCr1QrJ
3pMQ45khBwJ2dMLQv
400GKNpTfsyePOLMKb
403IW72x35stiSbqbRPNbx3J
40EGmhXfsVyEgjIHqOy
45CL8Wjjx5aUCGoQ
45hcIYwvNusNntRrAZPs76z
4EEPG4X1WcbEOC6BA
4dGbwCE0hO
4dK1nD8JQNvsgTnLTBi4cY26
4liSVQAYLdXuAaxb
4owSdrTFSf19ll0KBDlVceMB1s3mI
4q3Gc5FXC2i
4ttxKqtTQfWS4KnGM3M5l
5ASFWq1TNWQre2y6HWr8bEMPbxxIVVt
5GFcyyj1PLOI3jT9FjgbO55uIEI1gaf
5GgcTJMitX8SQOJbzxIAcCSwqTH6a
5MSAtTISM8AdRY6Kc0
5NGqdKYiYvOIHadDaz9Glfd
5W9LVbSmsfNs1tKdJdGvdXSJ8E
5c7frk5cA8NdFzYz6cObLmg
5u7Ila6W6KqsXaoUnsbgmc6h9V9MXS
66hzGVzQqAX86T4
6DJnwYHu412ESwkxLJ4h3B
6TCagB74Wloem57e4o1sWWMg4N3oU
6eJOWOq7gU
6wV7FuobihkyVDfuQ7YNFubrCYgImk
77kVZeuIgi
7BVytBbJz5ODhQJN
7JV56zwKzN
7JgsmW7PVficxBCb7Oqt
7NqTcHc1ywYSBH
7cHW5axKAsLCLXiNnD
7cqEfLUDVvFi1wttOBiL79
7oW6zZi2W2Cx15yPVKksHv4
7pSE00iJ75m
7xGdoCHGCFepf8XPmSE2ipbdRGr4
7yKVxCLrBOmFDKO
80bt5hzHyloALHOJ6ctCeyUSp
8AABTm8Yfa8C8odu
8LY3XVooq
8Qbn5zPHcGHXBbc6cU
8ix64bBJxTnfy6oQTExQjv4jWScMI6Zc
8mD6NJTaya
961CyVmj9qEGozm6v2zvyVEBs8i7G
9D1GDLrX2TikU9Tt
9OfeKXyRVT
9i5ounqIKRBAGgNBs
9ml5HIKk
9zTj3u1CJYRQ2207B1JjwejLS689l
??0CCommandLineParam@@QEAA@PEBD0@Z
??0CGaussianRandomStream@@QEAA@PEAVIUniformRandomStream@@@Z
??0CUniformRandomStream@@QEAA@$$QEAV0@@Z
??0CUniformRandomStream@@QEAA@AEBV0@@Z
??0CUniformRandomStream@@QEAA@XZ
??1CCommandLineParam@@QEAA@XZ
??4CGaussianRandomStream@@QEAAAEAV0@$$QEAV0@@Z
??4CGaussianRandomStream@@QEAAAEAV0@AEBV0@@Z
??4CStringNormalization@@QEAAAEAV0@$$QEAV0@@Z
??4CStringNormalization@@QEAAAEAV0@AEBV0@@Z
??4CURLUtils@@QEAAAEAV0@$$QEAV0@@Z
??4CURLUtils@@QEAAAEAV0@AEBV0@@Z
??4CUniformRandomStream@@QEAAAEAV0@$$QEAV0@@Z
??4CUniformRandomStream@@QEAAAEAV0@AEBV0@@Z
??BCCommandLineParam@@QEBAPEAUOpaqueHParamType@@XZ
??_7CUniformRandomStream@@6B@
??_FCGaussianRandomStream@@QEAAXXZ
?AttachToStream@CGaussianRandomStream@@QEAAXPEAVIUniformRandomStream@@@Z
?Exists@CCommandLineParam@@QEBA_NXZ
?FixupSeparatorScheme@CURLUtils@@SAXAEAVCUtlString@@@Z
?Fold@CStringNormalization@@SAHPEBGPEAGH@Z
?GenerateRandomNumber@CUniformRandomStream@@AEAAHXZ
?GetHParam@CCommandLineParam@@QEBAPEAUOpaqueHParamType@@XZ
?GetValue@CCommandLineParam@@QEBAPEBDPEBD@Z
?Initialize@CStringNormalization@@SAXXZ
?IsTLD@CURLUtils@@SA_NPEBD@Z
?Normalize@CStringNormalization@@SAH_NPEBDPEADH@Z
?Normalize@CStringNormalization@@SAH_NPEBGPEAGH@Z
?RandomChar@CUniformRandomStream@@UEAADXZ
?RandomFillMemory@CUniformRandomStream@@UEAAXPEAX_K@Z
?RandomFloat@CGaussianRandomStream@@QEAAMMM@Z
?RandomFloat@CUniformRandomStream@@UEAAMMM@Z
?RandomInt@CUniformRandomStream@@UEAAHHH@Z
?SetSeed@CUniformRandomStream@@UEAAXH@Z
?Test_BValidateStructures@CStringNormalization@@SA_NXZ
?V_ConvertStringToUUID@@YA_NPEBDW4EUUIDStringFlags@@PEAUV_UUID@@@Z
?V_ConvertStringToUUID@@YA_NPEBGW4EUUIDStringFlags@@PEAUV_UUID@@@Z
?V_ConvertUUIDToString@@YA_NPEBUV_UUID@@W4EUUIDStringFlags@@PEADH@Z
?V_ConvertUUIDToString@@YA_NPEBUV_UUID@@W4EUUIDStringFlags@@PEAGH@Z
?V_EscapeShellArgumentAndAppend@@YA_KPEAD_KPEBD@Z
?V_EscapeShellArgumentAndAppend@@YA_KPEAVCUtlStringBuilder@@PEBD_N@Z
?V_EscapeShellArgumentAndAppendPOSIX@@YA_KPEAD_KPEBD@Z
?V_EscapeShellArgumentAndAppendWin32@@YA_KPEAD_KPEBD@Z
?V_JoinNumbers@@YA?AVCUtlString@@DAEBV?$CUtlVector@HV?$CUtlMemory@H@@@@@Z
?V_JoinNumbersUint64@@YA?AVCUtlString@@DAEBV?$CUtlVector@_KV?$CUtlMemory@_K@@@@@Z
?V_JoinNumbersUint@@YA?AVCUtlString@@DAEBV?$CUtlVector@IV?$CUtlMemory@I@@@@@Z
?V_JoinStrings@@YA?AVCUtlString@@AEBV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@PEBD@Z
?V_ParseShellCommandLine@@YAXPEBDAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@HPEAPEBD@Z
?V_ParseShellCommandLinePOSIX@@YAXPEBDAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@HPEAPEBD@Z
?V_ParseShellCommandLineWin32@@YAXPEBDAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@HPEAPEBD@Z
?V_SplitString3@@YAXPEBDPEBQEBDHAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@2@Z
?V_SplitStringInternal@@YAXPEBDPEBQEBDQEAPEBDHAEAV?$CUtlVector@VCUtlString@@V?$CUtlMemory@VCUtlString@@@@@@_N@Z
?V_UnicodeAdvance@@YAPEADPEADH@Z
?V_UnicodeAdvance@@YAPEAGPEAGH@Z
?V_UnicodeAdvance@@YAPEAIPEAIH@Z
?V_UnicodeCaseConvert@@YAHAEAV?$CUtlVector@GV?$CUtlMemory@G@@@@HW4EStringConvertErrorPolicy@@@Z
?V_UnicodeCaseConvert@@YAHAEAVCUtlString@@HW4EStringConvertErrorPolicy@@@Z
?V_UnicodeCaseConvert@@YAHAEAVCUtlStringBuilder@@HW4EStringConvertErrorPolicy@@@Z
?V_UnicodeCaseConvert@@YAHPEBDPEADHHW4EStringConvertErrorPolicy@@@Z
?V_UnicodeCaseConvert@@YAHPEBGPEAGHHW4EStringConvertErrorPolicy@@@Z
?V_UnicodeCaseConvert@@YAHPEBIPEAIHHW4EStringConvertErrorPolicy@@@Z
?V_UnicodeLength@@YAHPEBD@Z
?V_UnicodeLength@@YAHPEBG@Z
?V_UnicodeLength@@YAHPEBI@Z
?V_UnicodeRepair@@YAHPEADW4EStringConvertErrorPolicy@@@Z
?V_UnicodeRepair@@YAHPEAGW4EStringConvertErrorPolicy@@@Z
?V_UnicodeRepair@@YAHPEAIW4EStringConvertErrorPolicy@@@Z
?V_UnicodeValidate@@YA_NPEBD@Z
?V_UnicodeValidate@@YA_NPEBG@Z
?V_UnicodeValidate@@YA_NPEBI@Z
?V_atoui128@@YA?AVuint128@@PEBD@Z
?V_stristr@@YAPEBDPEBD0@Z
?ValidateStatics@CStringNormalization@@SAXAEAVCValidator@@PEBD@Z
?ValidateStatics@CURLUtils@@SAXAEAVCValidator@@PEBD@Z
A2ki7rq
AJnbsftpGdJtyqbCNHlV
AKqW1eQacAZIGevxLWGqhFra80jG
AOCZof5zOGvkZDM
ASS8H90e4KrtxKxy7dt6aofnKbFvT4c
Abao68dHQQ
AllVol5S991JhoxFdqT1928Y
AyWhodtS8LyKdN
B8QVFEWPFt8kPhH
BG1UMN2qnMPvvdxRSEZx
BHanIdeograph
BNoJmvDPRQhSHwkYqAEHiJGqqHu3N4Cz
BOj8xkjS4TAzhBW
BzlmayVeQrHuTzJGQvFVuYQkmGTKXcV
C14HTSrkxv
C1fptGwMpd2y9S2VsTPmmAM
CFDbVIrekZu0eJdIHC2R6KtDRcfCw3P
CMPX0TFocjS4y
CanBeginLine
CanBreakBetween
CanBreakRepeated
CanEndLine
CdUHoNphIs7rQOskrZi6
CfVHzsJW4vYwInMSY4u1GSFQpVQ
Cho16tEjIW23if1KuuPZk1P
Cmptp3SkjrKaTNeZInMovxxN4ofrqUa
CommandLine
Coroutine_Cancel
Coroutine_Continue
Coroutine_Create
Coroutine_DebugBreak
Coroutine_GetCurrentlyActive
Coroutine_GetStackDepth
Coroutine_IsActive
Coroutine_IsAddressInOurStack
Coroutine_ReleaseThreadMemory
Coroutine_Test
Coroutine_ValidateGlobals
Coroutine_YieldToMain
CqjnuMcsO4IQfP
CreateInterface
Cs9BBiXTSPosvuuTW0qzgH
CwOw0iGbVFI0ZbVvM
Czh3uNOAFw0eu58YhD6I
D99BgiDEDNxxCE0QISjOeW
DN3r7lrnprjeHO4SP5a
DUL4va1voTngDkBM0zx9v5p
DebugStatsSystem
DoxdVBU
DpKUVjEFsGPR690Xa2dGF9hCSo7fE7U
E3NTr5I
E83iX9hxUbe4I
EeFiZHj4XS
EeR7ueiOOIcaNgQJ8f0DBq3
EetAiACtXw2ekswRJLywYE1MFGXpw
EpuhSL7b
EwDQ6Bjuggwz8mEWrZH
F6syrWz
F6uU4zjYTdx34YavZp9BI19xX
F75olga0tvY4QNP8v8nZ6ml2G61h
FAwk9DbJ47
FFrCSYlfXkuxXFhATPsG1dGUT
FHaYYPGUknaHYIzK8ci
FPGbjZPr97A6UaLHTRE
FUlw10ZKd8wSLU9x8P88RDhd
FeLajsNhDrU
FezK8fdkXwqqWgCpz1YJfZOD6HSWtn
FnrrCm5FZmULxjAMJG5kpowJvBH6e
FqYit9sLsL3mKne6GYuSfVWbwhwg
Fr0iRQS87d9jsbZepXhXRwphzYYS9mt
FyD3EgMSEQFiofZaMhkwpToCio
G9pCsU2P3Xz2gmXWsmmM980h3aw
GAPfQbJmsXlFtP3XNV
GD4ydZXQ7OnCUDMC2sI0
GOPB9Xdbb7c
GQnFAEYOqfNSRcixobVBsYUw7IQ0HSiL
GWWL9Qj70TG9qNhM3vPTiCQu
GcQjfgPYaTQ
GetNameFromOSType
GetOSDetailString
GetOSType
GetPlatformFromOS
GetPlatformName
GetPlatformNameFromEPlatformType
GetPortableOsVersionInformation
Gfnrpnu3MxLK
GkJvMLQzvPhIFesROZCM7ZyJW4rnwOj
GnMYEsdKpP583xXS
GpP4PSp8O5SRQIT03yO
Gs9lOoYv6xWVQbUjJ0BScn9l1bILK
H5IhA8FuSnoyznvRnOmkRCgIxe
HA4CCOkCnlcVAlpa
HI4zUrt4Z
HVRDkhvvCK4eHGmR
HVof7GwP
Hiq3UDYi
HnOW8B7VtIZTzxTfh
HzPskhPlB23bB
IDP246LhWM8cs6uHie2
IFoRpEBLC3S1Kf0BeD2pve0DOMln
IW1ROVIYh1Gp6lVNlhow1l
IiuNJ2xxzAEqQ7b
IkxG88UHBhrK3Kcb9EXBy0ws0
IlgDFTZNPKWwxptZ1TWPqo26M6H
Inqb7klf0avBXFieJz
InstallUniformRandomStream
IqVWLiC41LwNCOXIP
IwXrhO4SPbF6atSR
JAOHEXWYYHbkXCL9woX0T
JDGRiPEf2
JOfrOtZDWzy
JWERMzULtUjeo8CT3O6A3pfg3V2fiypY
JXupmG9F28FuLtvxe5lVfRu
JaXDllWvh
Jmjok52zVGN
K0KSOBJfpq
K2Hn9Ihx8hB
KZkOh0yK
KdTR6PhNth4jzL3uxn
KeLDqC07JrwJtCN1cuY
KeyValuesSystemSteam
Kkd1Jlf0NAK
KrtUROWYZN9lIWzLgDAmB
LBtnIBQ6s5gq5k8H64moznFA1BS
LCZTeiGBUuXHACMTBR
LIqBvN82HVnz3qcIeIBdg
LMAtASvgYcT5faWaPBtU3Y704TMuDi7j
LbEVm7r4U1Ksyxa6BhxfKn6KX
LckQtgYfF6
LeZzyZ5gaDPHYeKIy9jqofxW
LoirVW1qjpTsyV
LyXhkPp6DI
MQgxxhnjLCg1nNy1ZfbdH
MRDm28F0bOeWmcBr3St1hgyYaxf2myc
MaVq9beeTwYrxZthTyltKgQ
MgwfyqDe7yCkStW5JnTpxThCtXs4qYzI
MkLalk8TF0PKIyXtQ8n4hvWaulhzhRg
N2bukOUGMF
N9HgUp1faA78g6QQHQaNZ
NBeCFyTdcrdE5Pk1lRSVx
NDQFo2R05msg5J0mlvSCw
NFdp4xI38ngBUiZFU2SloC
NK4ck4FeX7jf8nETCCgHhloG
NP01tVcb
NQetqUxZiEvbaq5VF
NZCQJUHFZDx88jqhevAKShGSoaJH
NgSK8Uv8lBXEPjmbvfKs4
NjW1icJNYYXqdKqmmk8w1Uct
NrD9qAnZcqtV
NyYiRwVwbVArHPqBrXHOhOrzQ
O571cXBr6
O8kMyj1B
O9O3Kywh
OFWRKKzmGkbkMfOpIHD2
OSIsCompatible
OSTypesAreCompatible
OUV8CJa3x95QiyhHC8rV0oRD4
OWNffJFzi6yTknq
Oc9hmwBqBP2NjkGeUyH6YBv3wqF3AcX
OmA2wYu
OoQi08h7ojjOwJkMhwoDUfsOSsGda4J
P6Z6HTjK1q3vxT0
P6gzBWrKotB
PI4G1itaoPIsHulZdNVPGm2dx8UF
PL3XltlGRf3rAevsFk
PLhoI6SOVaPAlji
PPmGNfIRtuncMvbgx
PXpz9OBxp6TJnns91
PaS0qtBIgYmawOoAefDnd
Pcjnc07Oas0t89Yx0Qz1oo1a
PeOuOfadeYnOclloH
Pf5kQ7aY7159KKv7d6cuqRsyL4T
PmY1MegocBo
PpkJz4iv5hiKo
Q8rqHOUoYLVUjktIG6akqnzA
Q9W23d3hSKr4m2rTn2VesK4
QA3hzX74sowSS5UpXSRXqBvrJ4
QAEil573yF2yR5deBRMQBM1py8JU
QBAcM4adFtVc
QIdLh6wq6FucM6
QUkR8YlQABlhm6AlzTSZiYGyMiX9
QlorEbxOnSMo
RAlPg7JhkBuJ
RDJhS5au
RJY9mDSh5vx3Kd9tpnYC45imOHn3
RLPq2bnMxhKFHNDCP6
RVwZh79M5c
RXwpfwpg
RZptahEz9
RfiU7q5X3cTaLubxEc4W6TFdBhs0EW5G
RjiV6KvKx
RmBCZ1XBQt5YvoUxUIbEpktIVeCskWO
RrfaVSrTtsa
RtpV96B1iiJSvwrryv0pK43y0679UJT
S2ddhcjk9gLtT
S9eo0ZQVHOzz4sy5v
SAzXudB0hbYPlUlUfCvEqdJSjB8oTq
SEL4ZGywlwQ9gml
SMF5n89om9P
SP9yq544DUF6ZrEkn6Am7p4aH
SR0K4n6yjuv6PF1mp78JpjQ
ST1x4TcacYK
Seb2uRd90XddGI38SZ64MNe181X7q0W
Sqhkcyt34zjXQ
StmnJP1iA2qdgvoN0nMtxK
StringAfterPrefix
StringAfterPrefixCaseSensitive
StringFindSuffix
T7T8lEZp
TAW1KJ2spZgTtT
TF1HMCYl0rYUyfKcKvKP4VunvXug
TL6h5XVi4iFYZ8S7jf6DAF
TLVm7fvKFZN0
Ta9GxebripPi
TpN87WO8Px
Tr0rxYdLpUdMkbUT
TwBz3WDhARiHBa0Z
TyN2ysTp
U1PWqoVrKxSRzAOzPPV5rqe0Oc2KCFv
U26fPP4LT
UExt6aZgraL2BxU79Cl
UR90uMRcL5HC
UULARZECZRlp78lwDDCx
UcEzqYrT
Un3Sit0CiTtSU
UxEpnaM75FxYMd5SQnOxEKpk
V6SKzBSXjWWNIbD4WPAE
VRMMn5Gck9z7qNsu4Dt5kRrEl0Z
VStdLib_GetICVarFactory
VYQrMM8MI72QKEK0csMElIt0S88L
VZCIW3X2lGS0xTYhz
V_AggressiveStripPrecedingAndTrailingWhitespace
V_AggressiveStripPrecedingAndTrailingWhitespaceW
V_AppendParamToURL
V_AppendSlash
V_BasicHtmlEntityEncode
V_BasicHtmlEntityEncodeBuffer
V_BuildSortTitle
V_CP437CharsToUTF8
V_ComposeFileName
V_CopyAndFixSlashes
V_DefaultExtension
V_EscapeStringForPHP
V_ExtractDomainFromURL
V_ExtractFileExtension
V_ExtractFilePath
V_FileBase
V_FixDoubleSlashes
V_FixSlashes
V_FixupPathName
V_FormatAndAppend
V_FormatAndAppendTail
V_FormatAndAppendV
V_Get2LDFromDomainName
V_GetCurrentDirectory
V_GetFileExtension
V_HtmlEntityDecodeToUTF8
V_IsAbsolutePath
V_IsDeprecatedW
V_IsInCommaDelimitedList
V_IsMeanSpaceW
V_IsSteamCloseProtocol
V_IsTLD
V_IsValidDomainNameCharacter
V_IsValidUChar32
V_IsValidURLCharacter
V_JoinNumbers
V_JoinNumbersUint
V_JoinNumbersUint64
V_LevenshteinDistance
V_LocaleSpecificANSIToUTF8
V_MakeAbsolutePath
V_MakeFileSafeName
V_MakeRelativePath
V_MatchWildcardDNSName
V_MatchWildcardString
V_NormalizeUTF8
V_NormalizeUTF8Old
V_ParseSteamOpenURLExternalProtocol
V_ParseURLQueryString
V_RemoveChar
V_RemoveDotSlashes
V_ReplaceBadFilenameCharacters
V_ReplaceBadFilenameCharactersInPlace
V_SetCurrentDirectory
V_SetExtension
V_SetURLParam
V_SplitNumbers
V_SplitNumbersUint
V_SplitStringInternal
V_StrLeft
V_StrReplaceChar
V_StrRight
V_StrSkipArticles
V_StrSlice
V_StrSubst
V_StrSubstInPlace
V_StrTrim
V_StrTrimAsciiSpaceChar
V_StripAndPreserveHTML
V_StripAndPreserveHTMLCore
V_StripBBCode
V_StripExtension
V_StripFilename
V_StripLastDir
V_StripPrecedingAndTrailingWhitespace
V_StripPrecedingAndTrailingWhitespaceW
V_StripTrailingSlash
V_StripTrailingWhitespaceASCII
V_StripUnprintable
V_StripUnprintableW
V_TruncateAbsolutePathToDiskIdentity
V_UChar32ToUTF16
V_UChar32ToUTF16Len
V_UChar32ToUTF8
V_UChar32ToUTF8Len
V_URLContainsDomain
V_URLCracker
V_URLDecode
V_URLDecodeRaw
V_URLEncode
V_URLEncodeRaw
V_URLEncodeToUtlString
V_URLParse
V_URLPartsToString
V_UTF16ToUChar32
V_UTF16ToUTF32
V_UTF16ToUTF8
V_UTF32CharsToUTF16
V_UTF32CharsToUTF8
V_UTF32ToUTF16
V_UTF32ToUTF8
V_UTF8ToUChar32
V_UTF8ToUTF16
V_UTF8ToUTF32
V_UnqualifiedFileName
V_WcsSkipArticles
V_Windows1252CharsToUTF8
V_atof
V_atoi
V_atoui64
V_binarytohex
Sections
.text Size: 523KB - Virtual size: 523KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.managed Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
hydrated Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 147KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 328KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 772B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ