d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780

Sharing

Copy URL Twitter E-mail

General

Target
d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780
Size 870KB
Sample260416-cxqa5ahx21
SHA256 d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780
MD5 0cbbfcf925097d7563f9a6ed93363969
SHA1 fe49117c049a5fcaf8183cdcf796384de49f2dc7
SHA512 94058880f3155818e4659c6f7a1d809037cdfe4b0f3f1cdaacbe985d00d88c4ccbf220b41acd0746c2999ced3c0644dc42b9cee939b033f7fa62d11297c474fd
SSDEEP 24576:6jn9BE4lOtZD6/kdhiAMHVo3pq84ngIEINmVnjzDS:6xBE4lO3ZdhiC084ngIEEmVz
TLSH
T130158D5BB7A502A4EC7F8138C6D69312F6B1F414232196CF16A5D6682F37DE3223EB41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780

File Explorer

d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780

.dll 870KB

d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780

IMPHASH 37edcf09fd116a26fed7f10f999f5a1d
SHA256 d8b3f6f2ba4abc61398b84c77424c42671f72dc9b1e1fd1b49af9100c058b780
MD5 0cbbfcf925097d7563f9a6ed93363969
SHA1 fe49117c049a5fcaf8183cdcf796384de49f2dc7
SHA512 94058880f3155818e4659c6f7a1d809037cdfe4b0f3f1cdaacbe985d00d88c4ccbf220b41acd0746c2999ced3c0644dc42b9cee939b033f7fa62d11297c474fd
SSDEEP 24576:6jn9BE4lOtZD6/kdhiAMHVo3pq84ngIEINmVnjzDS:6xBE4lO3ZdhiC084ngIEEmVz
TLSH
T130158D5BB7A502A4EC7F8138C6D69312F6B1F414232196CF16A5D6682F37DE3223EB41
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

446800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

d:\build\ob\bora-20735119\bora-vmsoft\build\release-x64\tools-for-windows\Win32\apps\vmtoolslib\vmtools.pdb

advapi32

GetUserNameW OpenProcessToken GetLengthSid GetTokenInformation DeregisterEventSource RegisterEventSourceW ReportEventW AllocateAndInitializeSid CopySid FreeSid InitializeSecurityDescriptor IsValidSid SetKernelObjectSecurity SetSecurityDescriptorControl SetSecurityDescriptorDacl SetSecurityDescriptorOwner SetEntriesInAclW OpenThreadToken AccessCheck DuplicateToken GetNamedSecurityInfoW GetFileSecurityW ImpersonateSelf MapGenericMask RevertToSelf LookupAccountSidW LookupAccountNameW OpenSCManagerW OpenServiceW CryptAcquireContextA CryptReleaseContext CryptGenRandom AddAccessAllowedAceEx CheckTokenMembership EqualSid GetSecurityDescriptorControl InitializeAcl LookupPrivilegeValueA RegCloseKey RegCreateKeyExW RegDeleteKeyW RegSetValueExW GetExplicitEntriesFromAclW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegLoadKeyW RegOpenKeyExW RegQueryInfoKeyW RegQueryValueExW RegUnLoadKeyW AddAccessAllowedAce SetSecurityDescriptorGroup AddAce GetAce GetAclInformation GetSecurityDescriptorDacl RegOpenKeyExA CloseServiceHandle RegQueryValueExA RegSetValueExA AdjustTokenPrivileges LookupPrivilegeValueW RegOpenCurrentUser InitiateSystemShutdownW QueryServiceStatus ControlService EnumDependentServicesW StartServiceA CreateProcessAsUserW DeleteAce

kernel32

LeaveCriticalSection GetCurrentProcessId GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue GetSystemInfo VirtualAlloc VirtualFree LoadLibraryW VirtualQuery IsBadReadPtr GetCurrentThread FindClose FindNextFileW FlushFileBuffers ReadFile SetEndOfFile SetFilePointerEx WriteFile DuplicateHandle CreateDirectoryW DeleteFileW FindFirstFileExW GetFileAttributesExW GetFileTime GetVolumeInformationW RemoveDirectoryW SetFileTime MoveFileExW GetDiskFreeSpaceExW GetDriveTypeW GetFileInformationByHandle GetProcessTimes OpenProcess InitializeCriticalSectionAndSpinCount TryEnterCriticalSection DeleteCriticalSection SetUnhandledExceptionFilter InitializeConditionVariable WakeConditionVariable WakeAllConditionVariable SleepConditionVariableCS GetEnvironmentVariableW SetEnvironmentVariableW ExpandEnvironmentStringsW GetDiskFreeSpaceW GetLogicalDriveStringsW GetShortPathNameW GetTempFileNameW QueryDosDeviceW GetTempPathW GetCompressedFileSizeW WaitNamedPipeW CreateProcessW GetComputerNameExW GetVersionExW FreeLibrary LoadLibraryA GetFullPathNameW SetFileAttributesW GetModuleFileNameW LoadLibraryExW FormatMessageW GetModuleHandleExW GetFileAttributesA OutputDebugStringW MapViewOfFile UnmapViewOfFile CreateFileMappingA GetDriveTypeA WideCharToMultiByte GetSystemTime GetSystemTimeAsFileTime GetLocalTime GetFileAttributesW GetOverlappedResult CancelIo WaitForSingleObject CreateEventA MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency GetTickCount64 VerSetConditionMask GetNativeSystemInfo GetProductInfo VerifyVersionInfoA VerifyVersionInfoW CreateToolhelp32Snapshot Process32First Process32Next GetVersionExA GetACP ExpandEnvironmentStringsA IsDebuggerPresent InitializeCriticalSection CreateFileA TerminateProcess GetSystemFirmwareTable SetFileInformationByHandle SetFilePointer GetFileSizeEx CreateDirectoryA RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter IsProcessorFeaturePresent InitializeSListHead RaiseException RtlCaptureContext LocalFree GetCurrentProcess OutputDebugStringA GetConsoleWindow FreeConsole AllocConsole GetProcAddress GetModuleHandleW InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared GetCommandLineW CheckRemoteDebuggerPresent GetExitCodeProcess GetExitCodeThread ReadProcessMemory SystemTimeToTzSpecificLocalTime FileTimeToSystemTime GetLogicalDrives GetVolumeInformationA EnterCriticalSection GetFileType GetStdHandle Sleep DeviceIoControl CloseHandle CreateFileW SetLastError GetLocaleInfoW GetLastError GetTickCount

ole32

CoInitialize CoUninitialize CoTaskMemFree CoQueryProxyBlanket CoSetProxyBlanket CoInitializeEx CoCreateInstance

oleaut32

SafeArrayCreate SysFreeString SafeArrayDestroy VariantClear VariantInit SafeArrayPutElement SysAllocString

shell32

DragQueryFileW SHGetFolderPathW

user32

TranslateMessage SetUserObjectSecurity GetProcessWindowStation DispatchMessageA PeekMessageA MsgWaitForMultipleObjects GetWindowInfo SystemParametersInfoW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW GetParent GetDesktopWindow GetUserObjectSecurity SetForegroundWindow LoadStringW GetClipboardFormatNameW MessageBoxW GetClassNameW OpenWindowStationW CloseWindowStation OpenDesktopW SetProcessWindowStation GetForegroundWindow SendInput IsWindowVisible PostMessageW SendMessageTimeoutW ExitWindowsEx CloseDesktop EnumDesktopWindows OpenInputDesktop

ws2_32

getsockname ioctlsocket accept __WSAFDIsSet WSACleanup htonl WSAGetLastError socket send recv ntohl connect closesocket bind ntohs getsockopt select setsockopt WSASetLastError GetNameInfoW WSAStartup

crypt32

CertCreateCertificateContext CryptExportPKCS8 CertGetCertificateChain CertFreeCertificateContext CertFindCertificateInStore CertCloseStore CryptAcquireCertificatePrivateKey CertAddEncodedCertificateToStore CertFreeCertificateChain CertOpenStore

glib-2.0

g_log_remove_handler g_log_default_handler g_log_set_default_handler g_return_if_fail_warning g_str_has_suffix g_strchomp g_key_file_get_integer g_key_file_get_boolean g_key_file_set_string g_strjoin g_strsplit g_key_file_get_string g_strcmp0 g_io_channel_win32_new_socket g_io_channel_win32_new_fd g_io_channel_win32_new_messages g_io_add_watch g_timeout_add g_source_remove g_source_is_destroyed g_main_current_source g_slist_find g_slist_prepend g_slist_free g_direct_equal g_direct_hash g_hash_table_size g_key_file_has_key g_key_file_get_keys g_key_file_free g_hash_table_foreach_remove g_hash_table_find g_hash_table_steal g_hash_table_replace g_hash_table_new_full g_once_init_leave g_once_init_enter g_malloc g_locale_from_utf8 g_unlink g_rename g_io_channel_write_chars g_io_channel_flush g_io_channel_set_encoding g_utf16_to_utf8 g_file_test g_filename_from_utf8 g_usleep g_timeout_source_new g_idle_source_new g_source_set_callback g_source_set_priority g_source_destroy g_source_attach g_source_unref g_main_context_unref g_main_context_ref g_str_hash g_str_equal g_hash_table_lookup g_hash_table_remove g_hash_table_insert g_hash_table_destroy g_hash_table_new g_fopen g_key_file_new g_stat g_fprintf g_malloc0 g_log_set_handler g_key_file_set_value g_key_file_get_value g_key_file_has_group g_key_file_get_groups g_key_file_to_data g_key_file_load_from_file g_build_filename g_date_time_format g_date_time_get_microsecond g_date_time_new_now_utc g_date_time_unref g_rec_mutex_unlock g_rec_mutex_lock g_source_new g_rec_mutex_init g_vsnprintf g_snprintf g_get_user_name g_ptr_array_foreach g_ptr_array_add g_ptr_array_remove_index g_ptr_array_free g_ptr_array_sized_new g_ptr_array_new g_strcompress g_strdup_printf g_strdup g_log g_io_channel_new_file g_io_channel_read_line g_io_channel_unref g_utf8_to_utf16 g_malloc0_n g_free g_once_impl g_mutex_unlock g_mutex_lock g_mutex_clear g_mutex_init g_vasprintf g_clear_error g_array_sized_new g_file_error_quark g_set_error g_source_add_poll g_strfreev

vcruntime140

strrchr memset strstr memchr memcmp memmove wcschr wcsrchr wcsstr __C_specific_handler __std_type_info_destroy_list memcpy strchr

api-ms-win-crt-heap-l1-1-0

malloc realloc free calloc

api-ms-win-crt-string-l1-1-0

strcmp strncmp isspace strtok_s _stricmp isdigit _wcsdup _strnicmp _wcslwr strtok wcsncmp strncat islower _strlwr tolower _strdup strncpy _strupr strcspn towupper wcscspn wcsspn isalnum isprint

api-ms-win-crt-runtime-l1-1-0

exit _errno _cexit _beginthreadex strerror _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll abort _initterm_e _initterm _getpid

api-ms-win-crt-stdio-l1-1-0

_wopen _wfopen __stdio_common_vsscanf __stdio_common_vsprintf __acrt_iob_func __stdio_common_vfprintf fgets fclose __stdio_common_vfscanf fwrite feof _wfreopen fputs setvbuf fflush fgetc getc

api-ms-win-crt-time-l1-1-0

_time64 _mktime64 _ftime64

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

_strtoi64 _strtoui64 wcrtomb strtol mbtowc strtoul _ecvt_s strtod _fcvt_s

api-ms-win-crt-environment-l1-1-0

getenv _wgetenv

api-ms-win-crt-filesystem-l1-1-0

_wfullpath _wmkdir _wstat64

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-math-l1-1-0

frexp

Backdoor BackdoorChannel_New Backdoor_HbIn Backdoor_HbOut Base64_Decode Base64_DecodedLength Base64_EasyEncode Base64_Encode Base64_EncodedLength CodeSet_CurrentToUtf8 CodeSet_DontUseIcu CodeSet_GenericToGeneric CodeSet_GetAltPathName CodeSet_GetCurrentCodeSet CodeSet_Init CodeSet_JsonEscape CodeSet_Utf16leToUtf8 CodeSet_Utf8ToCurrent CodeSet_Utf8ToUtf16le CodeSet_Validate Config_GetLong CryptoHash_Compute CryptoHash_FromString CryptoHash_GetOutputSize Debug DictLL_ReadLine DictLL_WriteLine DynArray_AllocCount DynArray_Destroy DynArray_Init DynArray_SetCount DynBuf_Append DynBuf_Attach DynBuf_Copy DynBuf_Destroy DynBuf_Detach DynBuf_Enlarge DynBuf_Init DynBuf_SafeInternalAppend DynBuf_Trim DynXdr_AllocGet DynXdr_AppendRaw DynXdr_Create DynXdr_Destroy DynXdr_Get Err_ErrString Err_Errno2String Escape_Do Escape_DoString Escape_Undo FileIO_Access FileIO_Close FileIO_ErrorEnglish FileIO_GetSize FileIO_Invalidate FileIO_Open FileIO_Read FileIO_Write File_CreateDirectory File_CreateDirectoryEx File_CreateDirectoryHierarchy File_CreateDirectoryHierarchyEx File_DeleteDirectoryTree File_DeleteEmptyDirectory File_EnsureDirectory File_EnsureDirectoryEx File_Exists File_GetFilePermissions File_GetModTime File_GetPathName File_GetSafeRandomTmpDir File_GetSafeTmpDir File_GetSize File_GetSizeEx File_GetTimes File_IsDirectory File_IsEmptyDirectory File_IsFile File_IsSameFile File_IsSymLink File_ListDirectory File_MakeSafeTemp File_MakeTempEx File_MakeTempEx2 File_Move File_PathJoin File_SetFilePermissions File_SetTimes File_SplitName File_StripSlashes File_Unlink File_UnlinkDelayed File_UnlinkIfExists File_UnlinkNoFollow GuestApp_GetConfPath GuestApp_GetDefaultScript GuestApp_GetInstallPath GuestApp_GetInstallPathW GuestStoreClient_DeInit GuestStoreClient_GetContent GuestStoreClient_Init HashTable_Alloc HashTable_AllocOnce HashTable_Clear HashTable_Delete HashTable_ForEach HashTable_Free HashTable_FreeUnsafe HashTable_GetNumElements HashTable_Insert HashTable_KeyArray HashTable_Lookup HashTable_LookupAndDelete HashTable_ReplaceOrInsert HashTable_ToArray Hostinfo_GetLibraryPath Hostinfo_GetModulePath Hostinfo_GetOSDetailType Hostinfo_GetOSDetailedData Hostinfo_GetOSGuestString Hostinfo_GetOSName Hostinfo_GetOSType Hostinfo_GetSystemBitness Hostinfo_GetTimeOfDay Hostinfo_OSVersion Hostinfo_SystemTimerNS Log LogV MXUser_AcquireExclLock MXUser_AcquireForRead MXUser_AcquireForWrite MXUser_AcquireRecLock MXUser_BroadcastCondVar MXUser_CreateCondVarExclLock MXUser_CreateExclLock MXUser_CreateRWLock MXUser_CreateRecLock MXUser_CreateSingletonExclLockInt MXUser_CreateSingletonRWLockInt MXUser_CreateSingletonRecLockInt MXUser_DestroyCondVar MXUser_DestroyExclLock MXUser_DestroyRWLock MXUser_DestroyRecLock MXUser_IsCurThreadHoldingExclLock MXUser_IsCurThreadHoldingRWLock MXUser_IsCurThreadHoldingRecLock MXUser_ReleaseExclLock MXUser_ReleaseRWLock MXUser_ReleaseRecLock MXUser_SetInPanic MXUser_SignalCondVar MXUser_TimedWaitCondVarExclLock MXUser_TryAcquireExclLock MXUser_TryAcquireRecLock MXUser_WaitCondVarExclLock Message_Close Message_Open Message_Receive Message_Send NetUtil_GetPrimaryNic Panic Posix_Fopen Posix_Getenv Posix_Open Posix_Stat Preference_GetBool ProcMgr_ExecAsync ProcMgr_ExecSync ProcMgr_Free ProcMgr_FreeProcList ProcMgr_GetAsyncProcSelectable ProcMgr_GetExitCode ProcMgr_GetImpersonatedUserInfo ProcMgr_GetPid ProcMgr_IsAsyncProcRunning ProcMgr_Kill ProcMgr_KillByPid ProcMgr_ListProcesses ProcMgr_ListProcessesEx ProductState_GetName Random_Crypto Random_Quick Random_QuickSeed Registry_GetRootHKey Registry_KeyExists Registry_ReadInteger Registry_ReadMultiString Registry_ReadString Registry_SubkeysExist Registry_WriteInteger Registry_WriteString RpcChannel_BuildXdrCommand RpcChannel_Create RpcChannel_Destroy RpcChannel_Dispatch RpcChannel_Free RpcChannel_GetType RpcChannel_New RpcChannel_RegisterCallback RpcChannel_Send RpcChannel_SendOne RpcChannel_SendOnePriv RpcChannel_SendOneRaw RpcChannel_SendOneRawPriv RpcChannel_SetBackdoorOnly RpcChannel_SetRetVals RpcChannel_SetRetValsF RpcChannel_Setup RpcChannel_Start RpcChannel_Stop RpcChannel_UnregisterCallback RpcOut_Construct RpcOut_Destruct RpcOut_SendOneRaw RpcOut_send RpcOut_sendOne RpcOut_start RpcOut_stop RpcVMX_ConfigGetBool RpcVMX_ConfigGetString RpcVMX_Log StdIO_ReadNextLine StrUtil_CaselessStrstr StrUtil_DynBufPrintf StrUtil_EndsWith StrUtil_GetNextIntToken StrUtil_GetNextToken StrUtil_GetNextTokenW StrUtil_GetNextUintToken StrUtil_StartsWith StrUtil_StrToInt StrUtil_StrToInt64 StrUtil_StrToUint Str_Asprintf Str_Aswprintf Str_SafeAsprintf Str_SafeAswprintf Str_SafeVasprintf Str_SafeVaswprintf Str_Snprintf Str_Snwprintf Str_Sprintf Str_Strcat Str_Strcpy Str_Strlen Str_Strncat Str_Strncpy Str_Swprintf Str_Vasprintf Str_Vaswprintf Str_Vsnprintf Str_Wcscat Str_Wcscpy SyncDriver_CloseHandle SyncDriver_Freeze SyncDriver_Init SyncDriver_QueryStatus SyncDriver_Thaw System_DisableAndKillScreenSaver System_EnableDesktopComposition System_GetEnv System_GetNodeName System_GetServiceState System_GetTimeMonotonic System_IsSecureDesktopActive System_IsUserAdmin System_SetEnv System_SetFocusedWindow System_SetProcessPrivilege System_Shutdown System_Uptime TimeUtil_DateLowerThan TimeUtil_DaysAdd TimeUtil_NtTimeToUnixTime TimeUtil_PopulateWithCurrent TimeUtil_UnixTimeToNtTime UUID_CreateRandom Unicode_AllocWithLength Unicode_CompareRange Unicode_CopyBytes Unicode_Duplicate Unicode_EscapeBuffer Unicode_FindLastSubstrInRange Unicode_FindSubstrInRange Unicode_FoldCase Unicode_Format Unicode_GetAllocBytes Unicode_InitW Unicode_IsBufferValid Unicode_Join Unicode_LengthInBytes Unicode_LengthInCodePoints Unicode_LengthInCodeUnits Unicode_ReplaceRange Unicode_Substr Unicode_Trim Unicode_TrimLeft Unicode_TrimRight Unicode_UTF16Strdup Unicode_UTF16Strlen UtilSafeCalloc0 UtilSafeCalloc1 UtilSafeMalloc0 UtilSafeMalloc1 UtilSafeRealloc0 UtilSafeRealloc1 UtilSafeStrdup0 UtilSafeStrdup1 UtilSafeStrndup0 UtilSafeStrndup1 Util_GetCanonicalPath Util_Memcpy Util_Memdup Util_TokenHasAdminPriv VMTools_AddConfig VMTools_AttachConsole VMTools_BindTextDomain VMTools_ChangeLogFilePath VMTools_CompareConfig VMTools_ConfigGetBoolean VMTools_ConfigGetInteger VMTools_ConfigGetString VMTools_ConfigLogToStdio VMTools_ConfigLogging VMTools_CreateTimer VMTools_GetString VMTools_GetTimeAsString VMTools_GetUtf16String VMTools_LoadConfig VMTools_Log VMTools_NewHandleSource VMTools_ResumeLogIO VMTools_SetupVmxGuestLog VMTools_SuspendLogIO VMTools_TeardownVmxGuestLog VMTools_UseVmxGuestLog VMTools_VmxLog VMTools_VmxLogThrottled VMTools_WrapArray VMTools_WriteConfig VMW_SHA1Final VMW_SHA1Init VMW_SHA1Update VSockChannel_New VmCheck_GetVersion VmCheck_IsVirtualWorld W32Util_AsciiStrToWideStr W32Util_CheckGroupMembership W32Util_GetInstalledFilePath W32Util_GetModuleByAddress W32Util_GetVmwareCommonAppDataFilePath W32Util_OpenProductRegKey W32Util_QueryServiceRunningStatus W32Util_ReadFileTimeout W32Util_StartService W32Util_StopService W32Util_WriteFileTimeout WMI_EnableDHCP WMI_EnableStatic WMI_GetWMINicConfiguration Warning WarningToGuest WarningToHost Win32U_AllocString Win32U_DragQueryFile Win32U_EnumKeyExpandBuffer Win32U_EnumValueExpandBuffer Win32U_ExpandEnvironmentStrings Win32U_ExpandEnvironmentStringsEx Win32U_FindFirstFileW Win32U_FormatMessage Win32U_GetClassName Win32U_GetClipboardFormatName Win32U_GetComputerName Win32U_GetComputerNameEx Win32U_GetDiskFreeSpaceEx Win32U_GetDriveType Win32U_GetEnvironmentVariable Win32U_GetFileAttributes Win32U_GetLogicalDriveStrings Win32U_GetModuleFileName Win32U_GetModuleHandle Win32U_GetUserName Win32U_GetVolumeInformation Win32U_LoadLibrary Win32U_LookupAccountSid Win32U_LookupSidForAccount Win32U_PathUnExpandEnvStrings Win32U_RecurseDeleteKeyEx Win32U_RegCreateKeyEx Win32U_RegDeleteValue Win32U_RegEnumKeyEx Win32U_RegOpenKeyEx Win32U_RegQueryValueEx Win32U_RegSetValueEx Win32U_SHCopyKey Win32U_SHDeleteKey Win32U_SHGetFolderPath Win32U_SHSetFolderPath Win32U_SetEnvironmentVariable Win32U_SetFileAttributes WinReg_DeleteValue WinReg_EnumerateSubkeys WinReg_EnumerateValues WinReg_GetDWORD WinReg_GetSZ WinReg_GetSZEx WinReg_LoadHiveU WinReg_SetDWORD WinReg_SetSZ WinReg_SetSZEx WinReg_UnloadHiveU WiperPartition_Close WiperPartition_Open WiperSinglePartition_Close WiperSinglePartition_GetSpace Wiper_Cancel Wiper_Init Wiper_IsWipeSupported Wiper_Next Wiper_Start XdrUtil_ArrayAppend XdrUtil_Deserialize _loglevel_offset_user getopt getopt_long jsmn_init jsmn_parse logLevelPtr optarg optind uriComposeQueryCharsRequiredA uriComposeQueryMallocA uriDissectQueryMallocA uriEscapeA uriFreeQueryListA uriFreeUriMembersA uriParseUriA uriUnescapeInPlaceA uriUriStringToWindowsFilenameA uriWindowsFilenameToUriStringA vm_free xdr_DnsConfigInfo xdr_GHIDisplaysDPIInfo xdr_GuestNic xdr_GuestNicList xdr_GuestNicProto xdr_NicInfoV3 xdr_array xdr_bool xdr_bytes xdr_char xdr_double xdr_enum xdr_float xdr_free xdr_int xdr_int16_t xdr_int32_t xdr_int64_t xdr_long xdr_netobj xdr_opaque xdr_pointer xdr_reference xdr_short xdr_string xdr_u_char xdr_u_int xdr_u_int16_t xdr_u_int32_t xdr_u_int64_t xdr_u_long xdr_u_short xdr_union xdr_vector xdr_void xdr_wrapstring xdrmem_create

Name

.text

Size

508KB

Virtual Size

512KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

223KB

Virtual Size

224KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

93KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

27KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

11KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=26, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=257, version=30034,

count=5, id=253, version=28518,

count=2, id=257, productName=VS2017 v15.8.4 build 26729, version=26729,

count=13, id=261, version=30034,

count=8, id=260, version=30034,

count=4, id=259, version=30034,

count=2, id=260, version=28900,

count=19, id=257, version=28900,

count=648, id=1, productName=Unmarked objects,

count=2, id=259, productName=VS2019 v16.11.1 build 30133, version=30133,

count=4, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,

count=198, id=260, productName=VS2019 v16.11.1 build 30133, version=30133,

count=1, id=256, productName=VS2019 v16.11.1 build 30133, version=30133,

count=1, id=255, productName=VS2019 v16.11.1 build 30133, version=30133,

count=1, id=151,

count=1, id=258, productName=VS2019 v16.11.1 build 30133, version=30133,