meccha[.]rar | Triage™

Resubmissions

01/07/2026, 03:57

260701-ehyp3ady8n8

01/07/2026, 03:53

260701-eftckafx9t6

Sharing

Copy URL Twitter E-mail

General

Target
meccha.rar
Size 69.1MB
Sample260701-eftckafx9t
SHA256 e1b56b7c2f9a8f768616db5e861cb4bd323e8003d561e0ddd240a3914f1a7bb1
MD5 a2c562b9709e710769b5f238e908a8f3
SHA1 cecab9c49828c050cc3a941fddf8da437b087fdb
SHA512 48a12c8332214b0ca9ea630ddc0c8d33718ee6150d7182be2449d09b3b60c51a6e0f19f6f79b95a6d63b074dfb7f24b4e6508d3842ea542fb28f7b3f67d67019
SSDEEP 1572864:6rD8efgKutPh6eX/kcF22Tv7iFatexjZu+KEounoUAPVBG5xprIOUfTH:6+6WkcF2KuUtIjZR4yYfTH
TLSH
T106F7334B2C47A42DD848A35F952D088325CC5DEBABA8232CE57436C4BF71C5906F9F7A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

DLL Hijacking vulnerability 1 IoCs

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.

resource
unpack001/meccha/winmm.dll

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/meccha/EOSSDK-Win64-Shipping.dll
unpack001/meccha/OnlineFix64.dll
unpack001/meccha/PenguinHotel-Win64-Shipping.exe
unpack001/meccha/PenguinHotel.exe
unpack001/meccha/winmm.dll

File Explorer

meccha.rar

.rar 69.1MB
meccha/EOSSDK-Win64-Shipping.dll

.dll 8.2MB
meccha/EOSSDK-Win64-Shipping.of

.dll 18.5MB
meccha/OnlineFix.ini

648B
meccha/OnlineFix64.dll

.dll 13.2MB
meccha/PenguinHotel-Win64-Shipping.exe

.exe 167.1MB
meccha/PenguinHotel.exe

.exe 217KB
meccha/dlllist.txt

15B
meccha/winmm.dll

.dll 490KB

meccha.rar

SHA256 e1b56b7c2f9a8f768616db5e861cb4bd323e8003d561e0ddd240a3914f1a7bb1
MD5 a2c562b9709e710769b5f238e908a8f3
SHA1 cecab9c49828c050cc3a941fddf8da437b087fdb
SHA512 48a12c8332214b0ca9ea630ddc0c8d33718ee6150d7182be2449d09b3b60c51a6e0f19f6f79b95a6d63b074dfb7f24b4e6508d3842ea542fb28f7b3f67d67019
SSDEEP 1572864:6rD8efgKutPh6eX/kcF22Tv7iFatexjZu+KEounoUAPVBG5xprIOUfTH:6+6WkcF2KuUtIjZR4yYfTH
TLSH
T106F7334B2C47A42DD848A35F952D088325CC5DEBABA8232CE57436C4BF71C5906F9F7A
MD5 SHA1 SHA512 SSDEEP TLSH

meccha/EOSSDK-Win64-Shipping.dll

IMPHASH efd4b980d0a0479ccdfebca930972f52
SHA256 b73f5e43ebf4579f17411ec26d3824adf4ff09636a4cef3cd0712c83f5eee70c
MD5 8163e2257993d4f3257998efb1b3b522
SHA1 d70ad0c9bfff7d4558fc2312e080264dec644854
SHA512 54e29c70b13e0bbf2ca90a1177dbf6cdb71c3564153aba744d77e4194e6abcbe1a482acf1f50b3373487dfbb6f5b353e793e3260367aa17ad887efd767b8dc4a
SSDEEP 196608:XLzsxxKR8LqmrsdgwLBIlPWbtpjnSXPDqClbq7KtK1o:bW1G5FIIb/jSXPxOKD
TLSH
T1368612E524D640BDD053CB30E2493FF8E5997AAA5D7A942F7FC214022A71DD2C9A1F32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8870092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

EOS_Achievements_AddNotifyAchievementsUnlocked EOS_Achievements_AddNotifyAchievementsUnlockedV2 EOS_Achievements_CopyAchievementDefinitionByAchievementId EOS_Achievements_CopyAchievementDefinitionByIndex EOS_Achievements_CopyAchievementDefinitionV2ByAchievementId EOS_Achievements_CopyAchievementDefinitionV2ByIndex EOS_Achievements_CopyPlayerAchievementByAchievementId EOS_Achievements_CopyPlayerAchievementByIndex EOS_Achievements_CopyUnlockedAchievementByAchievementId EOS_Achievements_CopyUnlockedAchievementByIndex EOS_Achievements_DefinitionV2_Release EOS_Achievements_Definition_Release EOS_Achievements_GetAchievementDefinitionCount EOS_Achievements_GetPlayerAchievementCount EOS_Achievements_GetUnlockedAchievementCount EOS_Achievements_PlayerAchievement_Release EOS_Achievements_QueryDefinitions EOS_Achievements_QueryPlayerAchievements EOS_Achievements_RemoveNotifyAchievementsUnlocked EOS_Achievements_UnlockAchievements EOS_Achievements_UnlockedAchievement_Release EOS_ActiveSession_CopyInfo EOS_ActiveSession_GetRegisteredPlayerByIndex EOS_ActiveSession_GetRegisteredPlayerCount EOS_ActiveSession_Info_Release EOS_ActiveSession_Release EOS_AntiCheatClient_AddExternalIntegrityCatalog EOS_AntiCheatClient_AddNotifyClientIntegrityViolated EOS_AntiCheatClient_AddNotifyMessageToPeer EOS_AntiCheatClient_AddNotifyMessageToServer EOS_AntiCheatClient_AddNotifyPeerActionRequired EOS_AntiCheatClient_AddNotifyPeerAuthStatusChanged EOS_AntiCheatClient_BeginSession EOS_AntiCheatClient_EndSession EOS_AntiCheatClient_GetModuleBuildId EOS_AntiCheatClient_GetProtectMessageOutputLength EOS_AntiCheatClient_PollStatus EOS_AntiCheatClient_ProtectMessage EOS_AntiCheatClient_ReceiveMessageFromPeer EOS_AntiCheatClient_ReceiveMessageFromServer EOS_AntiCheatClient_RegisterPeer EOS_AntiCheatClient_RemoveNotifyClientIntegrityViolated EOS_AntiCheatClient_RemoveNotifyMessageToPeer EOS_AntiCheatClient_RemoveNotifyMessageToServer EOS_AntiCheatClient_RemoveNotifyPeerActionRequired EOS_AntiCheatClient_RemoveNotifyPeerAuthStatusChanged EOS_AntiCheatClient_Reserved01 EOS_AntiCheatClient_Reserved02 EOS_AntiCheatClient_UnprotectMessage EOS_AntiCheatClient_UnregisterPeer EOS_AntiCheatServer_AddNotifyClientActionRequired EOS_AntiCheatServer_AddNotifyClientAuthStatusChanged EOS_AntiCheatServer_AddNotifyMessageToClient EOS_AntiCheatServer_BeginSession EOS_AntiCheatServer_EndSession EOS_AntiCheatServer_GetProtectMessageOutputLength EOS_AntiCheatServer_LogEvent EOS_AntiCheatServer_LogGameRoundEnd EOS_AntiCheatServer_LogGameRoundStart EOS_AntiCheatServer_LogPlayerDespawn EOS_AntiCheatServer_LogPlayerRevive EOS_AntiCheatServer_LogPlayerSpawn EOS_AntiCheatServer_LogPlayerTakeDamage EOS_AntiCheatServer_LogPlayerTick EOS_AntiCheatServer_LogPlayerUseAbility EOS_AntiCheatServer_LogPlayerUseWeapon EOS_AntiCheatServer_ProtectMessage EOS_AntiCheatServer_ReceiveMessageFromClient EOS_AntiCheatServer_RegisterClient EOS_AntiCheatServer_RegisterEvent EOS_AntiCheatServer_RemoveNotifyClientActionRequired EOS_AntiCheatServer_RemoveNotifyClientAuthStatusChanged EOS_AntiCheatServer_RemoveNotifyMessageToClient EOS_AntiCheatServer_SetClientDetails EOS_AntiCheatServer_SetClientNetworkState EOS_AntiCheatServer_SetGameSessionId EOS_AntiCheatServer_UnprotectMessage EOS_AntiCheatServer_UnregisterClient EOS_Audio_CreateNewInputStream EOS_Audio_CreateNewOutputStream EOS_Audio_DestroyInputStream EOS_Audio_DestroyOutputStream EOS_Audio_EnableCommunicationsModeOutputDevices EOS_Audio_GetInputDeviceInfo EOS_Audio_GetInputStreamInfo EOS_Audio_GetOutputDeviceInfo EOS_Audio_GetOutputStreamInfo EOS_Audio_IsInputStreamDeviceDisconnected EOS_Audio_IsInputStreamSilent EOS_Audio_QueryInputDevices EOS_Audio_QueryOutputDevices EOS_Audio_RegisterUser EOS_Audio_RemoveNotifyDevicesChanged EOS_Audio_SetFeatureEnabledForInputStream EOS_Audio_SetNotifyDevicesChanged EOS_Audio_StartInputStream EOS_Audio_StartOutputStream EOS_Audio_StopInputStream EOS_Audio_StopOutputStream EOS_Audio_UnregisterUser EOS_Auth_AddNotifyLoginStatusChanged EOS_Auth_CopyIdToken EOS_Auth_CopyUserAuthToken EOS_Auth_DeletePersistentAuth EOS_Auth_GetLoggedInAccountByIndex EOS_Auth_GetLoggedInAccountsCount EOS_Auth_GetLoginStatus EOS_Auth_GetMergedAccountByIndex EOS_Auth_GetMergedAccountsCount EOS_Auth_GetSelectedAccountId EOS_Auth_IdToken_Release EOS_Auth_LinkAccount EOS_Auth_Login EOS_Auth_Logout EOS_Auth_QueryIdToken EOS_Auth_RemoveNotifyLoginStatusChanged EOS_Auth_Token_Release EOS_Auth_VerifyIdToken EOS_Auth_VerifyUserAuth EOS_BeginScopeEvent EOS_BroadcastAudio_CreateNewInputStream EOS_BroadcastAudio_CreateNewOutputStream EOS_BroadcastAudio_DestroyInputStream EOS_BroadcastAudio_DestroyOutputStream EOS_BroadcastAudio_GetCurrentGainLevel EOS_BroadcastAudio_GetCurrentMicAmplitude EOS_BroadcastAudio_GetInputStreamInfo EOS_BroadcastAudio_GetOutputStreamInfo EOS_BroadcastAudio_PushPacketToOutputStream EOS_BroadcastAudio_SetEncoderSettings EOS_BroadcastAudio_SetMicProcessingSettings EOS_BroadcastAudio_StartInputStream EOS_BroadcastAudio_StartOutputStream EOS_BroadcastAudio_StopInputStream EOS_BroadcastAudio_StopOutputStream EOS_ByteArray_ToString EOS_Connect_AddNotifyAuthExpiration EOS_Connect_AddNotifyLoginStatusChanged EOS_Connect_CopyIdToken EOS_Connect_CopyProductUserExternalAccountByAccountId EOS_Connect_CopyProductUserExternalAccountByAccountType EOS_Connect_CopyProductUserExternalAccountByIndex EOS_Connect_CopyProductUserInfo EOS_Connect_CreateDeviceId EOS_Connect_CreateUser EOS_Connect_DeleteDeviceId EOS_Connect_ExternalAccountInfo_Release EOS_Connect_GetExternalAccountMapping EOS_Connect_GetLoggedInUserByIndex EOS_Connect_GetLoggedInUsersCount EOS_Connect_GetLoginStatus EOS_Connect_GetProductUserExternalAccountCount EOS_Connect_GetProductUserIdMapping EOS_Connect_IdToken_Release EOS_Connect_LinkAccount EOS_Connect_Login EOS_Connect_Logout EOS_Connect_QueryExternalAccountMappings EOS_Connect_QueryProductUserIdMappings EOS_Connect_RemoveNotifyAuthExpiration EOS_Connect_RemoveNotifyLoginStatusChanged EOS_Connect_TransferDeviceIdAccount EOS_Connect_UnlinkAccount EOS_Connect_VerifyIdToken EOS_ContinuanceToken_ToString EOS_CustomInvites_AcceptRequestToJoin EOS_CustomInvites_AddNotifyCustomInviteAccepted EOS_CustomInvites_AddNotifyCustomInviteReceived EOS_CustomInvites_AddNotifyCustomInviteRejected EOS_CustomInvites_AddNotifyRequestToJoinAccepted EOS_CustomInvites_AddNotifyRequestToJoinReceived EOS_CustomInvites_AddNotifyRequestToJoinRejected EOS_CustomInvites_AddNotifyRequestToJoinResponseReceived EOS_CustomInvites_AddNotifySendCustomNativeInviteRequested EOS_CustomInvites_FinalizeInvite EOS_CustomInvites_RejectRequestToJoin EOS_CustomInvites_RemoveNotifyCustomInviteAccepted EOS_CustomInvites_RemoveNotifyCustomInviteReceived EOS_CustomInvites_RemoveNotifyCustomInviteRejected EOS_CustomInvites_RemoveNotifyRequestToJoinAccepted EOS_CustomInvites_RemoveNotifyRequestToJoinReceived EOS_CustomInvites_RemoveNotifyRequestToJoinRejected EOS_CustomInvites_RemoveNotifyRequestToJoinResponseReceived EOS_CustomInvites_RemoveNotifySendCustomNativeInviteRequested EOS_CustomInvites_SendCustomInvite EOS_CustomInvites_SendRequestToJoin EOS_CustomInvites_SetCustomInvite EOS_EApplicationStatus_ToString EOS_ENetworkStatus_ToString EOS_EResult_IsOperationComplete EOS_EResult_ToString EOS_Ecom_CatalogItem_Release EOS_Ecom_CatalogOffer_Release EOS_Ecom_CatalogRelease_Release EOS_Ecom_Checkout EOS_Ecom_CopyEntitlementById EOS_Ecom_CopyEntitlementByIndex EOS_Ecom_CopyEntitlementByNameAndIndex EOS_Ecom_CopyItemById EOS_Ecom_CopyItemImageInfoByIndex EOS_Ecom_CopyItemReleaseByIndex EOS_Ecom_CopyLastRedeemEntitlementsResultByIndex EOS_Ecom_CopyLastRedeemedEntitlementByIndex EOS_Ecom_CopyOfferById EOS_Ecom_CopyOfferByIndex EOS_Ecom_CopyOfferImageInfoByIndex EOS_Ecom_CopyOfferItemByIndex EOS_Ecom_CopyTransactionById EOS_Ecom_CopyTransactionByIndex EOS_Ecom_Entitlement_Release EOS_Ecom_GetEntitlementsByNameCount EOS_Ecom_GetEntitlementsCount EOS_Ecom_GetItemImageInfoCount EOS_Ecom_GetItemReleaseCount EOS_Ecom_GetLastRedeemEntitlementsResultCount EOS_Ecom_GetLastRedeemedEntitlementsCount EOS_Ecom_GetOfferCount EOS_Ecom_GetOfferImageInfoCount EOS_Ecom_GetOfferItemCount EOS_Ecom_GetTransactionCount EOS_Ecom_KeyImageInfo_Release EOS_Ecom_QueryEntitlementToken EOS_Ecom_QueryEntitlements EOS_Ecom_QueryOffers EOS_Ecom_QueryOwnership EOS_Ecom_QueryOwnershipBySandboxIds EOS_Ecom_QueryOwnershipToken EOS_Ecom_RedeemEntitlements EOS_Ecom_SetSalesChannel EOS_Ecom_Transaction_CopyEntitlementByIndex EOS_Ecom_Transaction_GetEntitlementsCount EOS_Ecom_Transaction_GetTransactionId EOS_Ecom_Transaction_Release EOS_EndScopeEvent EOS_EpicAccountId_FromString EOS_EpicAccountId_IsValid EOS_EpicAccountId_ToString EOS_Friends_AcceptInvite EOS_Friends_AddNotifyBlockedUsersUpdate EOS_Friends_AddNotifyFriendsUpdate EOS_Friends_GetBlockedUserAtIndex EOS_Friends_GetBlockedUsersCount EOS_Friends_GetFriendAtIndex EOS_Friends_GetFriendsCount EOS_Friends_GetStatus EOS_Friends_QueryFriends EOS_Friends_RejectInvite EOS_Friends_RemoveNotifyBlockedUsersUpdate EOS_Friends_RemoveNotifyFriendsUpdate EOS_Friends_SendInvite EOS_GetVersion EOS_Initialize EOS_IntegratedPlatformOptionsContainer_Add EOS_IntegratedPlatformOptionsContainer_Release EOS_IntegratedPlatform_AddNotifyUserLoginStatusChanged EOS_IntegratedPlatform_ClearUserPreLogoutCallback EOS_IntegratedPlatform_CreateIntegratedPlatformOptionsContainer EOS_IntegratedPlatform_FinalizeDeferredUserLogout EOS_IntegratedPlatform_RemoveNotifyUserLoginStatusChanged EOS_IntegratedPlatform_SetUserLoginStatus EOS_IntegratedPlatform_SetUserPreLogoutCallback EOS_InventoryItem_CreateSubItem EOS_InventoryItem_DeleteSubItem EOS_InventoryItem_GetDoubleSetValueByIndex EOS_InventoryItem_GetInt64SetValueByIndex EOS_InventoryItem_GetKey EOS_InventoryItem_GetStringSetValueByIndex EOS_InventoryItem_GetSubItem EOS_InventoryItem_GetSubItemByIndex EOS_InventoryItem_GetSubItemsCount EOS_InventoryItem_GetValueAsBool EOS_InventoryItem_GetValueAsDouble EOS_InventoryItem_GetValueAsInt64 EOS_InventoryItem_GetValueAsString EOS_InventoryItem_GetValueAsTimestamp EOS_InventoryItem_GetValueCount EOS_InventoryItem_GetValueType EOS_InventoryItem_SetKey EOS_InventoryItem_SetValueAsBool EOS_InventoryItem_SetValueAsDouble EOS_InventoryItem_SetValueAsDoubleSet EOS_InventoryItem_SetValueAsInt64 EOS_InventoryItem_SetValueAsInt64Set EOS_InventoryItem_SetValueAsString EOS_InventoryItem_SetValueAsStringSet EOS_InventoryItem_SetValueAsTimestamp EOS_Inventory_Checkpoint EOS_Inventory_Close EOS_Inventory_Create EOS_Inventory_Open EOS_KWS_AddNotifyPermissionsUpdateReceived EOS_KWS_CopyPermissionByIndex EOS_KWS_CreateUser EOS_KWS_GetPermissionByKey EOS_KWS_GetPermissionsCount EOS_KWS_PermissionStatus_Release EOS_KWS_QueryAgeGate EOS_KWS_QueryPermissions EOS_KWS_RemoveNotifyPermissionsUpdateReceived EOS_KWS_RequestPermissions EOS_KWS_UpdateParentEmail EOS_Leaderboards_CopyLeaderboardDefinitionByIndex EOS_Leaderboards_CopyLeaderboardDefinitionByLeaderboardId EOS_Leaderboards_CopyLeaderboardRecordByIndex EOS_Leaderboards_CopyLeaderboardRecordByUserId EOS_Leaderboards_CopyLeaderboardUserScoreByIndex EOS_Leaderboards_CopyLeaderboardUserScoreByUserId EOS_Leaderboards_Definition_Release EOS_Leaderboards_GetLeaderboardDefinitionCount EOS_Leaderboards_GetLeaderboardRecordCount EOS_Leaderboards_GetLeaderboardUserScoreCount EOS_Leaderboards_LeaderboardDefinition_Release EOS_Leaderboards_LeaderboardRecord_Release EOS_Leaderboards_LeaderboardUserScore_Release EOS_Leaderboards_QueryLeaderboardDefinitions EOS_Leaderboards_QueryLeaderboardRanks EOS_Leaderboards_QueryLeaderboardUserScores EOS_LobbyDetails_CopyAttributeByIndex EOS_LobbyDetails_CopyAttributeByKey EOS_LobbyDetails_CopyInfo EOS_LobbyDetails_CopyMemberAttributeByIndex EOS_LobbyDetails_CopyMemberAttributeByKey EOS_LobbyDetails_CopyMemberInfo EOS_LobbyDetails_GetAttributeCount EOS_LobbyDetails_GetLobbyOwner EOS_LobbyDetails_GetMemberAttributeCount EOS_LobbyDetails_GetMemberByIndex EOS_LobbyDetails_GetMemberCount EOS_LobbyDetails_Info_Release EOS_LobbyDetails_MemberInfo_Release EOS_LobbyDetails_Release EOS_LobbyModification_AddAttribute EOS_LobbyModification_AddMemberAttribute EOS_LobbyModification_Release EOS_LobbyModification_RemoveAttribute EOS_LobbyModification_RemoveMemberAttribute EOS_LobbyModification_SetAllowedPlatformIds EOS_LobbyModification_SetBucketId EOS_LobbyModification_SetInvitesAllowed EOS_LobbyModification_SetMaxMembers EOS_LobbyModification_SetPermissionLevel EOS_LobbySearch_CopySearchResultByIndex EOS_LobbySearch_Find EOS_LobbySearch_GetSearchResultCount EOS_LobbySearch_Release EOS_LobbySearch_RemoveParameter EOS_LobbySearch_SetLobbyId EOS_LobbySearch_SetMaxResults EOS_LobbySearch_SetParameter EOS_LobbySearch_SetTargetUserId EOS_Lobby_AddNotifyJoinLobbyAccepted EOS_Lobby_AddNotifyLeaveLobbyRequested EOS_Lobby_AddNotifyLobbyInviteAccepted EOS_Lobby_AddNotifyLobbyInviteReceived EOS_Lobby_AddNotifyLobbyInviteRejected EOS_Lobby_AddNotifyLobbyMemberStatusReceived EOS_Lobby_AddNotifyLobbyMemberUpdateReceived EOS_Lobby_AddNotifyLobbyUpdateReceived EOS_Lobby_AddNotifyRTCRoomConnectionChanged EOS_Lobby_AddNotifySendLobbyNativeInviteRequested EOS_Lobby_Attribute_Release EOS_Lobby_CopyLobbyDetailsHandle EOS_Lobby_CopyLobbyDetailsHandleByInviteId EOS_Lobby_CopyLobbyDetailsHandleByUiEventId EOS_Lobby_CreateLobby EOS_Lobby_CreateLobbySearch EOS_Lobby_DestroyLobby EOS_Lobby_GetConnectString EOS_Lobby_GetInviteCount EOS_Lobby_GetInviteIdByIndex EOS_Lobby_GetRTCRoomName EOS_Lobby_HardMuteMember EOS_Lobby_IsRTCRoomConnected EOS_Lobby_JoinLobby EOS_Lobby_JoinLobbyById EOS_Lobby_JoinRTCRoom EOS_Lobby_KickMember EOS_Lobby_LeaveLobby EOS_Lobby_LeaveRTCRoom EOS_Lobby_ParseConnectString EOS_Lobby_PromoteMember EOS_Lobby_QueryInvites EOS_Lobby_RejectInvite EOS_Lobby_RemoveNotifyJoinLobbyAccepted EOS_Lobby_RemoveNotifyLeaveLobbyRequested EOS_Lobby_RemoveNotifyLobbyInviteAccepted EOS_Lobby_RemoveNotifyLobbyInviteReceived EOS_Lobby_RemoveNotifyLobbyInviteRejected EOS_Lobby_RemoveNotifyLobbyMemberStatusReceived EOS_Lobby_RemoveNotifyLobbyMemberUpdateReceived EOS_Lobby_RemoveNotifyLobbyUpdateReceived EOS_Lobby_RemoveNotifyRTCRoomConnectionChanged EOS_Lobby_RemoveNotifySendLobbyNativeInviteRequested EOS_Lobby_SendInvite EOS_Lobby_UpdateLobby EOS_Lobby_UpdateLobbyModification EOS_Logging_SetCallback EOS_Logging_SetLogLevel EOS_Mercury_Initialize EOS_Mercury_Shutdown EOS_Mercury_Tick EOS_Metrics_BeginPlayerSession EOS_Metrics_EndPlayerSession EOS_Mods_CopyModInfo EOS_Mods_EnumerateMods EOS_Mods_InstallMod EOS_Mods_ModInfo_Release EOS_Mods_UninstallMod EOS_Mods_UpdateMod EOS_P2P_AcceptConnection EOS_P2P_AddNotifyIncomingPacketQueueFull EOS_P2P_AddNotifyPeerConnectionClosed EOS_P2P_AddNotifyPeerConnectionEstablished EOS_P2P_AddNotifyPeerConnectionInterrupted EOS_P2P_AddNotifyPeerConnectionRequest EOS_P2P_ClearPacketQueue EOS_P2P_CloseConnection EOS_P2P_CloseConnections EOS_P2P_GetNATType EOS_P2P_GetNextReceivedPacketSize EOS_P2P_GetPacketQueueInfo EOS_P2P_GetPortRange EOS_P2P_GetRelayControl EOS_P2P_QueryNATType EOS_P2P_ReceivePacket EOS_P2P_RemoveNotifyIncomingPacketQueueFull EOS_P2P_RemoveNotifyPeerConnectionClosed EOS_P2P_RemoveNotifyPeerConnectionEstablished EOS_P2P_RemoveNotifyPeerConnectionInterrupted EOS_P2P_RemoveNotifyPeerConnectionRequest EOS_P2P_SendPacket EOS_P2P_SetPacketQueueSize EOS_P2P_SetPortRange EOS_P2P_SetRelayControl EOS_Platform_CheckForLauncherAndRestart EOS_Platform_Create EOS_Platform_GetAchievementsInterface EOS_Platform_GetActiveCountryCode EOS_Platform_GetActiveLocaleCode EOS_Platform_GetAntiCheatClientInterface EOS_Platform_GetAntiCheatServerInterface EOS_Platform_GetApplicationStatus EOS_Platform_GetAuthInterface EOS_Platform_GetConnectInterface EOS_Platform_GetCustomInvitesInterface EOS_Platform_GetDesktopCrossplayStatus EOS_Platform_GetEcomInterface EOS_Platform_GetFriendsInterface EOS_Platform_GetIntegratedPlatformInterface EOS_Platform_GetInventoryInterface EOS_Platform_GetKWSInterface EOS_Platform_GetLeaderboardsInterface EOS_Platform_GetLobbyInterface EOS_Platform_GetMetricsInterface EOS_Platform_GetModsInterface EOS_Platform_GetNetworkStatus EOS_Platform_GetOverrideCountryCode EOS_Platform_GetOverrideLocaleCode EOS_Platform_GetP2PInterface EOS_Platform_GetPlayerDataStorageInterface EOS_Platform_GetPresenceInterface EOS_Platform_GetProgressionSnapshotInterface EOS_Platform_GetRTCAdminInterface EOS_Platform_GetRTCInterface EOS_Platform_GetReceiptValidatorInterface EOS_Platform_GetReportsInterface EOS_Platform_GetSanctionsInterface EOS_Platform_GetSessionsInterface EOS_Platform_GetStatsInterface EOS_Platform_GetTitleStorageInterface EOS_Platform_GetUIInterface EOS_Platform_GetUserInfoInterface EOS_Platform_Release EOS_Platform_SetApplicationStatus EOS_Platform_SetNetworkStatus EOS_Platform_SetOverrideCountryCode EOS_Platform_SetOverrideLocaleCode EOS_Platform_Tick EOS_PlayerDataStorageFileTransferRequest_CancelRequest EOS_PlayerDataStorageFileTransferRequest_GetFileRequestState EOS_PlayerDataStorageFileTransferRequest_GetFilename EOS_PlayerDataStorageFileTransferRequest_Release EOS_PlayerDataStorage_CopyFileMetadataAtIndex EOS_PlayerDataStorage_CopyFileMetadataByFilename EOS_PlayerDataStorage_DeleteCache EOS_PlayerDataStorage_DeleteFile EOS_PlayerDataStorage_DuplicateFile EOS_PlayerDataStorage_FileMetadata_Release EOS_PlayerDataStorage_GetFileMetadataCount EOS_PlayerDataStorage_QueryFile EOS_PlayerDataStorage_QueryFileList EOS_PlayerDataStorage_ReadFile EOS_PlayerDataStorage_WriteFile EOS_PresenceModification_DeleteData EOS_PresenceModification_Release EOS_PresenceModification_SetData EOS_PresenceModification_SetJoinInfo EOS_PresenceModification_SetRawRichText EOS_PresenceModification_SetStatus EOS_PresenceModification_SetTemplateData EOS_PresenceModification_SetTemplateId EOS_Presence_AddNotifyJoinGameAccepted EOS_Presence_AddNotifyOnPresenceChanged EOS_Presence_CopyPresence EOS_Presence_CreatePresenceModification EOS_Presence_GetJoinInfo EOS_Presence_HasPresence EOS_Presence_Info_Release EOS_Presence_QueryPresence EOS_Presence_RemoveNotifyJoinGameAccepted EOS_Presence_RemoveNotifyOnPresenceChanged EOS_Presence_SetPresence EOS_ProductUserId_FromString EOS_ProductUserId_IsValid EOS_ProductUserId_ToString EOS_ProgressionSnapshot_AddProgression EOS_ProgressionSnapshot_BeginSnapshot EOS_ProgressionSnapshot_DeleteSnapshot EOS_ProgressionSnapshot_EndSnapshot EOS_ProgressionSnapshot_SubmitSnapshot EOS_RTCAdmin_CopyUserTokenByIndex EOS_RTCAdmin_CopyUserTokenByUserId EOS_RTCAdmin_Kick EOS_RTCAdmin_QueryJoinRoomToken EOS_RTCAdmin_SetParticipantHardMute EOS_RTCAdmin_UserToken_Release EOS_RTCAudio_AddNotifyAudioBeforeRender EOS_RTCAudio_AddNotifyAudioBeforeSend EOS_RTCAudio_AddNotifyAudioDevicesChanged EOS_RTCAudio_AddNotifyAudioInputState EOS_RTCAudio_AddNotifyAudioOutputState EOS_RTCAudio_AddNotifyParticipantUpdated EOS_RTCAudio_CopyInputDeviceInformationByIndex EOS_RTCAudio_CopyOutputDeviceInformationByIndex EOS_RTCAudio_GetAudioInputDeviceByIndex EOS_RTCAudio_GetAudioInputDevicesCount EOS_RTCAudio_GetAudioOutputDeviceByIndex EOS_RTCAudio_GetAudioOutputDevicesCount EOS_RTCAudio_GetInputDevicesCount EOS_RTCAudio_GetOutputDevicesCount EOS_RTCAudio_InputDeviceInformation_Release EOS_RTCAudio_OutputDeviceInformation_Release EOS_RTCAudio_QueryInputDevicesInformation EOS_RTCAudio_QueryOutputDevicesInformation EOS_RTCAudio_RegisterPlatformAudioUser EOS_RTCAudio_RegisterPlatformUser EOS_RTCAudio_RemoveNotifyAudioBeforeRender EOS_RTCAudio_RemoveNotifyAudioBeforeSend EOS_RTCAudio_RemoveNotifyAudioDevicesChanged EOS_RTCAudio_RemoveNotifyAudioInputState EOS_RTCAudio_RemoveNotifyAudioOutputState EOS_RTCAudio_RemoveNotifyParticipantUpdated EOS_RTCAudio_SendAudio EOS_RTCAudio_SetAudioInputSettings EOS_RTCAudio_SetAudioOutputSettings EOS_RTCAudio_SetInputDeviceSettings EOS_RTCAudio_SetOutputDeviceSettings EOS_RTCAudio_SetPosition EOS_RTCAudio_UnregisterPlatformAudioUser EOS_RTCAudio_UnregisterPlatformUser EOS_RTCAudio_UpdateParticipantVolume EOS_RTCAudio_UpdateReceiving EOS_RTCAudio_UpdateReceivingVolume EOS_RTCAudio_UpdateSending EOS_RTCAudio_UpdateSendingVolume EOS_RTCData_AddNotifyDataReceived EOS_RTCData_AddNotifyParticipantUpdated EOS_RTCData_RemoveNotifyDataReceived EOS_RTCData_RemoveNotifyParticipantUpdated EOS_RTCData_SendData EOS_RTCData_UpdateReceiving EOS_RTCData_UpdateSending EOS_RTCVideo_AddNotifyParticipantUpdated EOS_RTCVideo_AddNotifyVideoReceived EOS_RTCVideo_CreateOutgoingVideoFrameFormat EOS_RTCVideo_RemoveNotifyParticipantUpdated EOS_RTCVideo_RemoveNotifyVideoReceived EOS_RTCVideo_SendVideo EOS_RTCVideo_SetAdaptVideoFrameCallback EOS_RTCVideo_SetVideoAllocationCallback EOS_RTCVideo_SetVideoReleaseCallback EOS_RTCVideo_UpdateReceiving EOS_RTCVideo_UpdateSending EOS_RTC_AddNotifyDisconnected EOS_RTC_AddNotifyParticipantStatusChanged EOS_RTC_AddNotifyRoomBeforeJoin EOS_RTC_AddNotifyRoomStatisticsUpdated EOS_RTC_BlockParticipant EOS_RTC_GetAudioInterface EOS_RTC_GetDataInterface EOS_RTC_JoinRoom EOS_RTC_LeaveRoom EOS_RTC_RemoveNotifyDisconnected EOS_RTC_RemoveNotifyParticipantStatusChanged EOS_RTC_RemoveNotifyRoomBeforeJoin EOS_RTC_RemoveNotifyRoomStatisticsUpdated EOS_RTC_SetRoomSetting EOS_RTC_SetSetting EOS_ReceiptValidator_VerifyPurchase EOS_Reports_SendPlayerBehaviorReport EOS_Sanctions_CopyPlayerSanctionByIndex EOS_Sanctions_CreatePlayerSanctionAppeal EOS_Sanctions_GetPlayerSanctionCount EOS_Sanctions_PlayerSanction_Release EOS_Sanctions_QueryActivePlayerSanctions EOS_SessionDetails_Attribute_Release EOS_SessionDetails_CopyInfo EOS_SessionDetails_CopySessionAttributeByIndex EOS_SessionDetails_CopySessionAttributeByKey EOS_SessionDetails_GetSessionAttributeCount EOS_SessionDetails_Info_Release EOS_SessionDetails_Release EOS_SessionModification_AddAttribute EOS_SessionModification_Release EOS_SessionModification_RemoveAttribute EOS_SessionModification_SetAllowedPlatformIds EOS_SessionModification_SetBucketId EOS_SessionModification_SetHostAddress EOS_SessionModification_SetInvitesAllowed EOS_SessionModification_SetJoinInProgressAllowed EOS_SessionModification_SetMaxPlayers EOS_SessionModification_SetPermissionLevel EOS_SessionSearch_CopySearchResultByIndex EOS_SessionSearch_Find EOS_SessionSearch_GetSearchResultCount EOS_SessionSearch_Release EOS_SessionSearch_RemoveParameter EOS_SessionSearch_SetMaxResults EOS_SessionSearch_SetParameter EOS_SessionSearch_SetSessionId EOS_SessionSearch_SetTargetUserId EOS_Sessions_AddNotifyJoinSessionAccepted EOS_Sessions_AddNotifyLeaveSessionRequested EOS_Sessions_AddNotifySendSessionNativeInviteRequested EOS_Sessions_AddNotifySessionInviteAccepted EOS_Sessions_AddNotifySessionInviteReceived EOS_Sessions_AddNotifySessionInviteRejected EOS_Sessions_CopyActiveSessionHandle EOS_Sessions_CopySessionHandleByInviteId EOS_Sessions_CopySessionHandleByUiEventId EOS_Sessions_CopySessionHandleForPresence EOS_Sessions_CreateSessionModification EOS_Sessions_CreateSessionSearch EOS_Sessions_DestroySession EOS_Sessions_DumpSessionState EOS_Sessions_EndSession EOS_Sessions_GetInviteCount EOS_Sessions_GetInviteIdByIndex EOS_Sessions_IsUserInSession EOS_Sessions_JoinSession EOS_Sessions_QueryInvites EOS_Sessions_RegisterPlayers EOS_Sessions_RejectInvite EOS_Sessions_RemoveNotifyJoinSessionAccepted EOS_Sessions_RemoveNotifyLeaveSessionRequested EOS_Sessions_RemoveNotifySendSessionNativeInviteRequested EOS_Sessions_RemoveNotifySessionInviteAccepted EOS_Sessions_RemoveNotifySessionInviteReceived EOS_Sessions_RemoveNotifySessionInviteRejected EOS_Sessions_SendInvite EOS_Sessions_StartSession EOS_Sessions_UnregisterPlayers EOS_Sessions_UpdateSession EOS_Sessions_UpdateSessionModification EOS_Shutdown EOS_Stats_CopyStatByIndex EOS_Stats_CopyStatByName EOS_Stats_GetStatsCount EOS_Stats_IngestStat EOS_Stats_QueryStats EOS_Stats_Stat_Release EOS_TitleStorageFileTransferRequest_CancelRequest EOS_TitleStorageFileTransferRequest_GetFileRequestState EOS_TitleStorageFileTransferRequest_GetFilename EOS_TitleStorageFileTransferRequest_Release EOS_TitleStorage_CopyFileMetadataAtIndex EOS_TitleStorage_CopyFileMetadataByFilename EOS_TitleStorage_DeleteCache EOS_TitleStorage_FileMetadata_Release EOS_TitleStorage_GetFileMetadataCount EOS_TitleStorage_QueryFile EOS_TitleStorage_QueryFileList EOS_TitleStorage_ReadFile EOS_UI_AcknowledgeEventId EOS_UI_AddNotifyDisplaySettingsUpdated EOS_UI_AddNotifyMemoryMonitor EOS_UI_AddNotifyOnScreenKeyboardRequested EOS_UI_ConfigureOnScreenKeyboard EOS_UI_GetFriendsExclusiveInput EOS_UI_GetFriendsVisible EOS_UI_GetNotificationLocationPreference EOS_UI_GetToggleFriendsButton EOS_UI_GetToggleFriendsKey EOS_UI_HideFriends EOS_UI_IsSocialOverlayPaused EOS_UI_IsValidButtonCombination EOS_UI_IsValidKeyCombination EOS_UI_PauseSocialOverlay EOS_UI_PrePresent EOS_UI_RemoveNotifyDisplaySettingsUpdated EOS_UI_RemoveNotifyMemoryMonitor EOS_UI_RemoveNotifyOnScreenKeyboardRequested EOS_UI_ReportInputState EOS_UI_SetDisplayPreference EOS_UI_SetToggleFriendsButton EOS_UI_SetToggleFriendsKey EOS_UI_ShowBlockPlayer EOS_UI_ShowFriends EOS_UI_ShowNativeProfile EOS_UI_ShowReportPlayer EOS_UserInfo_BestDisplayName_Release EOS_UserInfo_CopyBestDisplayName EOS_UserInfo_CopyBestDisplayNameWithPlatform EOS_UserInfo_CopyExternalUserInfoByAccountId EOS_UserInfo_CopyExternalUserInfoByAccountType EOS_UserInfo_CopyExternalUserInfoByIndex EOS_UserInfo_CopyUserInfo EOS_UserInfo_ExternalUserInfo_Release EOS_UserInfo_GetExternalUserInfoCount EOS_UserInfo_GetLocalPlatformType EOS_UserInfo_QueryUserInfo EOS_UserInfo_QueryUserInfoByDisplayName EOS_UserInfo_QueryUserInfoByExternalAccount EOS_UserInfo_Release OnlineFix src_callback_new src_callback_read src_clone src_delete src_error src_float_to_int_array src_float_to_short_array src_get_channels src_get_description src_get_name src_get_version src_int_to_float_array src_is_valid_ratio src_new src_process src_reset src_set_ratio src_short_to_float_array src_simple src_strerror

Name

.text

Size

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme0

Size

Virtual Size

4.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ofme1

Size

512B

Virtual Size

80B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme2

Size

8.2MB

Virtual Size

8.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

652B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

meccha/EOSSDK-Win64-Shipping.of

IMPHASH 81d2a5ad25200f42c9a25454da06c6d4
SHA256 9821beb84ed841d2e9bd412ad55b7982cf1fcb64edbf0fd3ef7ccac38632fff7
MD5 db899f4d83ebc488d0f87c8c965670b0
SHA1 2eee08cff7e123f316f3cd4d616f9ea699441f68
SHA512 5843643a165c4a1e18b89f69d3937ad4b328e636cb55415106d7417bc46973fecffe09a3d88f2b97e722c698ff28c6b98871f79f2a7075191dc9289eca0a590a
SSDEEP 196608:fkw3xyCMO1bhZR4eTa+d8xCCTCentNUtR:N3aMR4eTa+d8M2CWtiR
TLSH
T14917394272F40094D4BAC2BD8E67D912DB71399A1B31E6CF06A0999A1F77FF099BD310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Digest

15:08:be:6c:e9:2a:16:12:c9:e2:69:ee:fa:ee:b7:d0:6a:4a:ab:d5:e2:4e:cc:a2:96:18:0a:24:2a:84:d7:bd

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=D03752763,CN=Epic Games Inc.,OU=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jan 20, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

0f:d2:6b:28:f0:6e:7b:82:0c:6f:99:2f:37:08:a9:a3

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 15, 2025 - Feb 15, 2026

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

14974664

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

EOSSDK-Win64-Shipping.pdb

ws2_32

listen inet_pton getaddrinfo WSAStartup getpeername getsockname send socket ntohs connect gethostname recvfrom recv getsockopt htonl htons freeaddrinfo sendto shutdown getnameinfo setsockopt WSACreateEvent WSACloseEvent WSAEventSelect WSAWaitForMultipleEvents WSAEnumNetworkEvents WSAResetEvent WSASetEvent WSASetLastError gethostbyname __WSAFDIsSet inet_addr getprotobyname WSAAddressToStringW WSAStringToAddressW ntohl select inet_ntop WSAIoctl bind accept WSAGetLastError ioctlsocket WSACleanup closesocket

winmm

timeEndPeriod timeSetEvent timeKillEvent timeGetTime timeBeginPeriod

kernel32

GetFullPathNameW GetModuleFileNameW LocalAlloc CloseHandle LoadLibraryW CreateThread GetProcAddress LocalFree GetModuleHandleW SetThreadErrorMode TlsSetValue TlsAlloc TlsFree TlsGetValue HeapSetInformation SetHandleInformation WaitForSingleObject GetCurrentProcessId GetCurrentProcess CreateFileW GetFileAttributesW RaiseException CreateEventW ResetEvent SetFilePointer GetFileSizeEx FileTimeToSystemTime SystemTimeToFileTime ReOpenFile FlushFileBuffers SetEndOfFile MapViewOfFile UnmapViewOfFile GetFileAttributesExW DeleteFileW MoveFileW SetFileAttributesW SetFileTime GetFinalPathNameByHandleW CreateFileMappingW CreateDirectoryW RemoveDirectoryW FindFirstFileW FindNextFileW FindClose GlobalMemoryStatusEx K32GetProcessMemoryInfo GetSystemInfo VirtualProtect VirtualAlloc VirtualFree VerSetConditionMask VerifyVersionInfoW GetNativeSystemInfo ReleaseSRWLockShared TerminateProcess GetEnvironmentVariableW SetEnvironmentVariableW OutputDebugStringW FormatMessageW GetCurrentThread GetLogicalProcessorInformationEx GetOverlappedResult WriteFile ReadFile GetModuleHandleExW FreeLibrary CreateProcessW GetCommandLineW CreateToolhelp32Snapshot Process32FirstW Process32NextW SetThreadAffinityMask GetExitCodeProcess QueryPerformanceFrequency GetStdHandle GetCurrentDirectoryW GetTempPathW GetLongPathNameW SwitchToThread Sleep SetEvent SetThreadPriority SuspendThread ResumeThread PeekNamedPipe GetLocalTime GetSystemTime GetProcessTimes GetSystemTimeAsFileTime TryEnterCriticalSection WideCharToMultiByte OpenThread DebugBreak FormatMessageA OutputDebugStringA IsDebuggerPresent GetModuleHandleA QueueUserAPC GetThreadId MultiByteToWideChar InitializeCriticalSectionAndSpinCount SwitchToFiber DeleteFiber CreateFiber GetFileType RtlVirtualUnwind ConvertFiberToThread ConvertThreadToFiber LoadLibraryA GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW FlsAlloc FlsSetValue GetLargePageMinimum VirtualUnlock GetEnvironmentVariableA GetTickCount InitializeCriticalSectionEx GetSystemDirectoryA WaitForSingleObjectEx WaitForMultipleObjects SleepEx MoveFileExA CreateFileA GetFileSize SetFilePointerEx VirtualQuery LoadLibraryExA AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock GetCurrentThreadId QueryPerformanceCounter DeleteCriticalSection SetCriticalSectionSpinCount InitializeCriticalSection LeaveCriticalSection EnterCriticalSection InitializeSListHead IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlLookupFunctionEntry RtlCaptureContext SetLastError GetLastError AcquireSRWLockShared GetVersionExW

user32

SetWindowTextW GetTopWindow GetWindowRect SetDlgItemTextW SetWindowPos GetDlgItem GetSystemMetrics ScreenToClient SetForegroundWindow RegisterHotKey UnregisterHotKey EndDialog DialogBoxParamW MessageBoxW EnumDisplayDevicesW PeekMessageW GetDesktopWindow GetUserObjectInformationW GetProcessWindowStation SetTimer KillTimer DispatchMessageW TranslateMessage MsgWaitForMultipleObjectsEx PostThreadMessageW

gdi32

DeleteDC GetTextExtentPoint32W CreateCompatibleDC

advapi32

GetUserNameW RegQueryValueExW RegOpenKeyExW RegCloseKey RegSetValueExW CryptAcquireContextW CryptReleaseContext CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey RegCreateKeyExW CryptExportKey CryptDecrypt CryptCreateHash CryptDestroyHash CryptSignHashW CryptEnumProvidersW OpenProcessToken CredDeleteW CredFree CredReadW CredWriteW RegisterEventSourceW ReportEventW DeregisterEventSource LookupPrivilegeValueA CryptEncrypt CryptImportKey CryptHashData CryptGetHashParam CryptAcquireContextA AdjustTokenPrivileges

shell32

ShellExecuteW CommandLineToArgvW SHGetKnownFolderPath

ole32

CoTaskMemFree CoInitialize PropVariantClear CoCreateInstance CoCreateGuid CoUninitialize

iphlpapi

GetAdaptersAddresses

crypt32

CryptStringToBinaryA CertFreeCertificateChain CertFreeCertificateContext CryptQueryObject CryptMsgGetParam CertFindCertificateInStore CertGetNameStringW CertOpenSystemStoreW CertEnumCertificatesInStore CertCloseStore CertOpenStore CertDuplicateCertificateContext CertGetCertificateContextProperty PFXImportCertStore CryptDecodeObjectEx CertAddCertificateContextToStore CertFindExtension CertGetNameStringA CertCreateCertificateChainEngine CertFreeCertificateChainEngine CertGetCertificateChain

wintrust

WinVerifyTrust

secur32

CompleteAuthToken AcquireCredentialsHandleA InitializeSecurityContextA FreeCredentialsHandle DeleteSecurityContext

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpGetDefaultProxyConfiguration

msvcp140

?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA _Query_perf_frequency _Query_perf_counter ?_Xout_of_range@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??1ios_base@std@@UEAA@XZ ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_timedwait _Mtx_current_owns ?_Xlength_error@std@@YAXPEBD@Z _Xtime_get_ticks _Cnd_wait _Thrd_id ?_Throw_C_error@std@@YAXH@Z _Mtx_unlock _Cnd_broadcast _Mtx_init_in_situ _Cnd_init_in_situ _Cnd_destroy_in_situ _Mtx_destroy_in_situ _Mtx_lock

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

bcrypt

BCryptGenRandom

vcruntime140

__std_type_info_destroy_list _purecall wcsstr strrchr wcschr strstr wcsrchr memset memcpy memmove memcmp memchr __C_specific_handler strchr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm _invoke_watson _initterm_e strerror __sys_errlist _crt_atexit signal __sys_nerr _execute_onexit_table _beginthreadex _endthreadex _cexit _exit _invalid_parameter_noinfo_noreturn strerror_s abort _seh_filter_dll exit _register_onexit_function _initialize_onexit_table _errno _configure_narrow_argv raise _initialize_narrow_environment

api-ms-win-crt-string-l1-1-0

strpbrk strncmp iswdigit strncat iswalnum isspace wcsncmp _strdup strcspn _strnicmp iswalpha _stricmp iswxdigit isalnum wcsncpy strncpy isprint iswspace strlen wcslen strcmp strnlen tolower islower strspn isalpha toupper

api-ms-win-crt-convert-l1-1-0

strtoll strtof _wtoi strtoull _wtoi64 atoi strtol _wcstoi64 strtoul _wcstoui64 _wtof wcstoul wcstombs _strtoi64 atoll wcstod

api-ms-win-crt-math-l1-1-0

_isnan log10 log2f expm1 asin sin trunc cos log lrint exp2f sinf _dpcomp tanf expf sqrtf pow sqrt exp nan _fdopen llround tanhf powf floorf floor roundf ceilf log10f ceil round modf _finite _dclass logf cosf

api-ms-win-crt-utility-l1-1-0

rand srand qsort

api-ms-win-crt-heap-l1-1-0

calloc realloc free malloc _get_heap_handle _heapchk

api-ms-win-crt-stdio-l1-1-0

feof fread __stdio_common_vsprintf _isatty fgets fflush ftell _fileno fseek __stdio_common_vfwprintf _wfopen ferror __stdio_common_vfprintf _close fopen __acrt_iob_func fwrite fclose fputs _lseeki64 __stdio_common_vsscanf _write _read __stdio_common_vswprintf fputc _setmode _fseeki64 _open

api-ms-win-crt-time-l1-1-0

__timezone __daylight _mktime64 _tzset _ftime64 _localtime64 _gmtime64 clock strftime _gmtime64_s _time64

api-ms-win-crt-filesystem-l1-1-0

_stat32i64 rename _unlink _stat64 _stat64i32 _access _fstat64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-conio-l1-1-0

_cputs

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcmp _mbschr _mbsnbcpy _mbspbrk

EOS_Achievements_AddNotifyAchievementsUnlocked EOS_Achievements_AddNotifyAchievementsUnlockedV2 EOS_Achievements_CopyAchievementDefinitionByAchievementId EOS_Achievements_CopyAchievementDefinitionByIndex EOS_Achievements_CopyAchievementDefinitionV2ByAchievementId EOS_Achievements_CopyAchievementDefinitionV2ByIndex EOS_Achievements_CopyPlayerAchievementByAchievementId EOS_Achievements_CopyPlayerAchievementByIndex EOS_Achievements_CopyUnlockedAchievementByAchievementId EOS_Achievements_CopyUnlockedAchievementByIndex EOS_Achievements_DefinitionV2_Release EOS_Achievements_Definition_Release EOS_Achievements_GetAchievementDefinitionCount EOS_Achievements_GetPlayerAchievementCount EOS_Achievements_GetUnlockedAchievementCount EOS_Achievements_PlayerAchievement_Release EOS_Achievements_QueryDefinitions EOS_Achievements_QueryPlayerAchievements EOS_Achievements_RemoveNotifyAchievementsUnlocked EOS_Achievements_UnlockAchievements EOS_Achievements_UnlockedAchievement_Release EOS_ActiveSession_CopyInfo EOS_ActiveSession_GetRegisteredPlayerByIndex EOS_ActiveSession_GetRegisteredPlayerCount EOS_ActiveSession_Info_Release EOS_ActiveSession_Release EOS_AntiCheatClient_AddExternalIntegrityCatalog EOS_AntiCheatClient_AddNotifyClientIntegrityViolated EOS_AntiCheatClient_AddNotifyMessageToPeer EOS_AntiCheatClient_AddNotifyMessageToServer EOS_AntiCheatClient_AddNotifyPeerActionRequired EOS_AntiCheatClient_AddNotifyPeerAuthStatusChanged EOS_AntiCheatClient_BeginSession EOS_AntiCheatClient_EndSession EOS_AntiCheatClient_GetModuleBuildId EOS_AntiCheatClient_GetProtectMessageOutputLength EOS_AntiCheatClient_PollStatus EOS_AntiCheatClient_ProtectMessage EOS_AntiCheatClient_ReceiveMessageFromPeer EOS_AntiCheatClient_ReceiveMessageFromServer EOS_AntiCheatClient_RegisterPeer EOS_AntiCheatClient_RemoveNotifyClientIntegrityViolated EOS_AntiCheatClient_RemoveNotifyMessageToPeer EOS_AntiCheatClient_RemoveNotifyMessageToServer EOS_AntiCheatClient_RemoveNotifyPeerActionRequired EOS_AntiCheatClient_RemoveNotifyPeerAuthStatusChanged EOS_AntiCheatClient_Reserved01 EOS_AntiCheatClient_Reserved02 EOS_AntiCheatClient_UnprotectMessage EOS_AntiCheatClient_UnregisterPeer EOS_AntiCheatServer_AddNotifyClientActionRequired EOS_AntiCheatServer_AddNotifyClientAuthStatusChanged EOS_AntiCheatServer_AddNotifyMessageToClient EOS_AntiCheatServer_BeginSession EOS_AntiCheatServer_EndSession EOS_AntiCheatServer_GetProtectMessageOutputLength EOS_AntiCheatServer_LogEvent EOS_AntiCheatServer_LogGameRoundEnd EOS_AntiCheatServer_LogGameRoundStart EOS_AntiCheatServer_LogPlayerDespawn EOS_AntiCheatServer_LogPlayerRevive EOS_AntiCheatServer_LogPlayerSpawn EOS_AntiCheatServer_LogPlayerTakeDamage EOS_AntiCheatServer_LogPlayerTick EOS_AntiCheatServer_LogPlayerUseAbility EOS_AntiCheatServer_LogPlayerUseWeapon EOS_AntiCheatServer_ProtectMessage EOS_AntiCheatServer_ReceiveMessageFromClient EOS_AntiCheatServer_RegisterClient EOS_AntiCheatServer_RegisterEvent EOS_AntiCheatServer_RemoveNotifyClientActionRequired EOS_AntiCheatServer_RemoveNotifyClientAuthStatusChanged EOS_AntiCheatServer_RemoveNotifyMessageToClient EOS_AntiCheatServer_SetClientDetails EOS_AntiCheatServer_SetClientNetworkState EOS_AntiCheatServer_SetGameSessionId EOS_AntiCheatServer_UnprotectMessage EOS_AntiCheatServer_UnregisterClient EOS_Audio_CreateNewInputStream EOS_Audio_CreateNewOutputStream EOS_Audio_DestroyInputStream EOS_Audio_DestroyOutputStream EOS_Audio_EnableCommunicationsModeOutputDevices EOS_Audio_GetInputDeviceInfo EOS_Audio_GetInputStreamInfo EOS_Audio_GetOutputDeviceInfo EOS_Audio_GetOutputStreamInfo EOS_Audio_IsInputStreamDeviceDisconnected EOS_Audio_IsInputStreamSilent EOS_Audio_QueryInputDevices EOS_Audio_QueryOutputDevices EOS_Audio_RegisterUser EOS_Audio_RemoveNotifyDevicesChanged EOS_Audio_SetFeatureEnabledForInputStream EOS_Audio_SetNotifyDevicesChanged EOS_Audio_StartInputStream EOS_Audio_StartOutputStream EOS_Audio_StopInputStream EOS_Audio_StopOutputStream EOS_Audio_UnregisterUser EOS_Auth_AddNotifyLoginStatusChanged EOS_Auth_CopyIdToken EOS_Auth_CopyUserAuthToken EOS_Auth_DeletePersistentAuth EOS_Auth_GetLoggedInAccountByIndex EOS_Auth_GetLoggedInAccountsCount EOS_Auth_GetLoginStatus EOS_Auth_GetMergedAccountByIndex EOS_Auth_GetMergedAccountsCount EOS_Auth_GetSelectedAccountId EOS_Auth_IdToken_Release EOS_Auth_LinkAccount EOS_Auth_Login EOS_Auth_Logout EOS_Auth_QueryIdToken EOS_Auth_RemoveNotifyLoginStatusChanged EOS_Auth_Token_Release EOS_Auth_VerifyIdToken EOS_Auth_VerifyUserAuth EOS_BeginScopeEvent EOS_BroadcastAudio_CreateNewInputStream EOS_BroadcastAudio_CreateNewOutputStream EOS_BroadcastAudio_DestroyInputStream EOS_BroadcastAudio_DestroyOutputStream EOS_BroadcastAudio_GetCurrentGainLevel EOS_BroadcastAudio_GetCurrentMicAmplitude EOS_BroadcastAudio_GetInputStreamInfo EOS_BroadcastAudio_GetOutputStreamInfo EOS_BroadcastAudio_PushPacketToOutputStream EOS_BroadcastAudio_SetEncoderSettings EOS_BroadcastAudio_SetMicProcessingSettings EOS_BroadcastAudio_StartInputStream EOS_BroadcastAudio_StartOutputStream EOS_BroadcastAudio_StopInputStream EOS_BroadcastAudio_StopOutputStream EOS_ByteArray_ToString EOS_Connect_AddNotifyAuthExpiration EOS_Connect_AddNotifyLoginStatusChanged EOS_Connect_CopyIdToken EOS_Connect_CopyProductUserExternalAccountByAccountId EOS_Connect_CopyProductUserExternalAccountByAccountType EOS_Connect_CopyProductUserExternalAccountByIndex EOS_Connect_CopyProductUserInfo EOS_Connect_CreateDeviceId EOS_Connect_CreateUser EOS_Connect_DeleteDeviceId EOS_Connect_ExternalAccountInfo_Release EOS_Connect_GetExternalAccountMapping EOS_Connect_GetLoggedInUserByIndex EOS_Connect_GetLoggedInUsersCount EOS_Connect_GetLoginStatus EOS_Connect_GetProductUserExternalAccountCount EOS_Connect_GetProductUserIdMapping EOS_Connect_IdToken_Release EOS_Connect_LinkAccount EOS_Connect_Login EOS_Connect_Logout EOS_Connect_QueryExternalAccountMappings EOS_Connect_QueryProductUserIdMappings EOS_Connect_RemoveNotifyAuthExpiration EOS_Connect_RemoveNotifyLoginStatusChanged EOS_Connect_TransferDeviceIdAccount EOS_Connect_UnlinkAccount EOS_Connect_VerifyIdToken EOS_ContinuanceToken_ToString EOS_CustomInvites_AcceptRequestToJoin EOS_CustomInvites_AddNotifyCustomInviteAccepted EOS_CustomInvites_AddNotifyCustomInviteReceived EOS_CustomInvites_AddNotifyCustomInviteRejected EOS_CustomInvites_AddNotifyRequestToJoinAccepted EOS_CustomInvites_AddNotifyRequestToJoinReceived EOS_CustomInvites_AddNotifyRequestToJoinRejected EOS_CustomInvites_AddNotifyRequestToJoinResponseReceived EOS_CustomInvites_AddNotifySendCustomNativeInviteRequested EOS_CustomInvites_FinalizeInvite EOS_CustomInvites_RejectRequestToJoin EOS_CustomInvites_RemoveNotifyCustomInviteAccepted EOS_CustomInvites_RemoveNotifyCustomInviteReceived EOS_CustomInvites_RemoveNotifyCustomInviteRejected EOS_CustomInvites_RemoveNotifyRequestToJoinAccepted EOS_CustomInvites_RemoveNotifyRequestToJoinReceived EOS_CustomInvites_RemoveNotifyRequestToJoinRejected EOS_CustomInvites_RemoveNotifyRequestToJoinResponseReceived EOS_CustomInvites_RemoveNotifySendCustomNativeInviteRequested EOS_CustomInvites_SendCustomInvite EOS_CustomInvites_SendRequestToJoin EOS_CustomInvites_SetCustomInvite EOS_EApplicationStatus_ToString EOS_ENetworkStatus_ToString EOS_EResult_IsOperationComplete EOS_EResult_ToString EOS_Ecom_CatalogItem_Release EOS_Ecom_CatalogOffer_Release EOS_Ecom_CatalogRelease_Release EOS_Ecom_Checkout EOS_Ecom_CopyEntitlementById EOS_Ecom_CopyEntitlementByIndex EOS_Ecom_CopyEntitlementByNameAndIndex EOS_Ecom_CopyItemById EOS_Ecom_CopyItemImageInfoByIndex EOS_Ecom_CopyItemReleaseByIndex EOS_Ecom_CopyLastRedeemEntitlementsResultByIndex EOS_Ecom_CopyLastRedeemedEntitlementByIndex EOS_Ecom_CopyOfferById EOS_Ecom_CopyOfferByIndex EOS_Ecom_CopyOfferImageInfoByIndex EOS_Ecom_CopyOfferItemByIndex EOS_Ecom_CopyTransactionById EOS_Ecom_CopyTransactionByIndex EOS_Ecom_Entitlement_Release EOS_Ecom_GetEntitlementsByNameCount EOS_Ecom_GetEntitlementsCount EOS_Ecom_GetItemImageInfoCount EOS_Ecom_GetItemReleaseCount EOS_Ecom_GetLastRedeemEntitlementsResultCount EOS_Ecom_GetLastRedeemedEntitlementsCount EOS_Ecom_GetOfferCount EOS_Ecom_GetOfferImageInfoCount EOS_Ecom_GetOfferItemCount EOS_Ecom_GetTransactionCount EOS_Ecom_KeyImageInfo_Release EOS_Ecom_QueryEntitlementToken EOS_Ecom_QueryEntitlements EOS_Ecom_QueryOffers EOS_Ecom_QueryOwnership EOS_Ecom_QueryOwnershipBySandboxIds EOS_Ecom_QueryOwnershipToken EOS_Ecom_RedeemEntitlements EOS_Ecom_Transaction_CopyEntitlementByIndex EOS_Ecom_Transaction_GetEntitlementsCount EOS_Ecom_Transaction_GetTransactionId EOS_Ecom_Transaction_Release EOS_EndScopeEvent EOS_EpicAccountId_FromString EOS_EpicAccountId_IsValid EOS_EpicAccountId_ToString EOS_Friends_AcceptInvite EOS_Friends_AddNotifyBlockedUsersUpdate EOS_Friends_AddNotifyFriendsUpdate EOS_Friends_GetBlockedUserAtIndex EOS_Friends_GetBlockedUsersCount EOS_Friends_GetFriendAtIndex EOS_Friends_GetFriendsCount EOS_Friends_GetStatus EOS_Friends_QueryFriends EOS_Friends_RejectInvite EOS_Friends_RemoveNotifyBlockedUsersUpdate EOS_Friends_RemoveNotifyFriendsUpdate EOS_Friends_SendInvite EOS_GetVersion EOS_Initialize EOS_IntegratedPlatformOptionsContainer_Add EOS_IntegratedPlatformOptionsContainer_Release EOS_IntegratedPlatform_AddNotifyUserLoginStatusChanged EOS_IntegratedPlatform_ClearUserPreLogoutCallback EOS_IntegratedPlatform_CreateIntegratedPlatformOptionsContainer EOS_IntegratedPlatform_FinalizeDeferredUserLogout EOS_IntegratedPlatform_RemoveNotifyUserLoginStatusChanged EOS_IntegratedPlatform_SetUserLoginStatus EOS_IntegratedPlatform_SetUserPreLogoutCallback EOS_KWS_AddNotifyPermissionsUpdateReceived EOS_KWS_CopyPermissionByIndex EOS_KWS_CreateUser EOS_KWS_GetPermissionByKey EOS_KWS_GetPermissionsCount EOS_KWS_PermissionStatus_Release EOS_KWS_QueryAgeGate EOS_KWS_QueryPermissions EOS_KWS_RemoveNotifyPermissionsUpdateReceived EOS_KWS_RequestPermissions EOS_KWS_UpdateParentEmail EOS_Leaderboards_CopyLeaderboardDefinitionByIndex EOS_Leaderboards_CopyLeaderboardDefinitionByLeaderboardId EOS_Leaderboards_CopyLeaderboardRecordByIndex EOS_Leaderboards_CopyLeaderboardRecordByUserId EOS_Leaderboards_CopyLeaderboardUserScoreByIndex EOS_Leaderboards_CopyLeaderboardUserScoreByUserId EOS_Leaderboards_Definition_Release EOS_Leaderboards_GetLeaderboardDefinitionCount EOS_Leaderboards_GetLeaderboardRecordCount EOS_Leaderboards_GetLeaderboardUserScoreCount EOS_Leaderboards_LeaderboardDefinition_Release EOS_Leaderboards_LeaderboardRecord_Release EOS_Leaderboards_LeaderboardUserScore_Release EOS_Leaderboards_QueryLeaderboardDefinitions EOS_Leaderboards_QueryLeaderboardRanks EOS_Leaderboards_QueryLeaderboardUserScores EOS_LobbyDetails_CopyAttributeByIndex EOS_LobbyDetails_CopyAttributeByKey EOS_LobbyDetails_CopyInfo EOS_LobbyDetails_CopyMemberAttributeByIndex EOS_LobbyDetails_CopyMemberAttributeByKey EOS_LobbyDetails_CopyMemberInfo EOS_LobbyDetails_GetAttributeCount EOS_LobbyDetails_GetLobbyOwner EOS_LobbyDetails_GetMemberAttributeCount EOS_LobbyDetails_GetMemberByIndex EOS_LobbyDetails_GetMemberCount EOS_LobbyDetails_Info_Release EOS_LobbyDetails_MemberInfo_Release EOS_LobbyDetails_Release EOS_LobbyModification_AddAttribute EOS_LobbyModification_AddMemberAttribute EOS_LobbyModification_Release EOS_LobbyModification_RemoveAttribute EOS_LobbyModification_RemoveMemberAttribute EOS_LobbyModification_SetAllowedPlatformIds EOS_LobbyModification_SetBucketId EOS_LobbyModification_SetInvitesAllowed EOS_LobbyModification_SetMaxMembers EOS_LobbyModification_SetPermissionLevel EOS_LobbySearch_CopySearchResultByIndex EOS_LobbySearch_Find EOS_LobbySearch_GetSearchResultCount EOS_LobbySearch_Release EOS_LobbySearch_RemoveParameter EOS_LobbySearch_SetLobbyId EOS_LobbySearch_SetMaxResults EOS_LobbySearch_SetParameter EOS_LobbySearch_SetTargetUserId EOS_Lobby_AddNotifyJoinLobbyAccepted EOS_Lobby_AddNotifyLeaveLobbyRequested EOS_Lobby_AddNotifyLobbyInviteAccepted EOS_Lobby_AddNotifyLobbyInviteReceived EOS_Lobby_AddNotifyLobbyInviteRejected EOS_Lobby_AddNotifyLobbyMemberStatusReceived EOS_Lobby_AddNotifyLobbyMemberUpdateReceived EOS_Lobby_AddNotifyLobbyUpdateReceived EOS_Lobby_AddNotifyRTCRoomConnectionChanged EOS_Lobby_AddNotifySendLobbyNativeInviteRequested EOS_Lobby_Attribute_Release EOS_Lobby_CopyLobbyDetailsHandle EOS_Lobby_CopyLobbyDetailsHandleByInviteId EOS_Lobby_CopyLobbyDetailsHandleByUiEventId EOS_Lobby_CreateLobby EOS_Lobby_CreateLobbySearch EOS_Lobby_DestroyLobby EOS_Lobby_GetConnectString EOS_Lobby_GetInviteCount EOS_Lobby_GetInviteIdByIndex EOS_Lobby_GetRTCRoomName EOS_Lobby_HardMuteMember EOS_Lobby_IsRTCRoomConnected EOS_Lobby_JoinLobby EOS_Lobby_JoinLobbyById EOS_Lobby_JoinRTCRoom EOS_Lobby_KickMember EOS_Lobby_LeaveLobby EOS_Lobby_LeaveRTCRoom EOS_Lobby_ParseConnectString EOS_Lobby_PromoteMember EOS_Lobby_QueryInvites EOS_Lobby_RejectInvite EOS_Lobby_RemoveNotifyJoinLobbyAccepted EOS_Lobby_RemoveNotifyLeaveLobbyRequested EOS_Lobby_RemoveNotifyLobbyInviteAccepted EOS_Lobby_RemoveNotifyLobbyInviteReceived EOS_Lobby_RemoveNotifyLobbyInviteRejected EOS_Lobby_RemoveNotifyLobbyMemberStatusReceived EOS_Lobby_RemoveNotifyLobbyMemberUpdateReceived EOS_Lobby_RemoveNotifyLobbyUpdateReceived EOS_Lobby_RemoveNotifyRTCRoomConnectionChanged EOS_Lobby_RemoveNotifySendLobbyNativeInviteRequested EOS_Lobby_SendInvite EOS_Lobby_UpdateLobby EOS_Lobby_UpdateLobbyModification EOS_Logging_SetCallback EOS_Logging_SetLogLevel EOS_Mercury_Initialize EOS_Mercury_Shutdown EOS_Mercury_Tick EOS_Metrics_BeginPlayerSession EOS_Metrics_EndPlayerSession EOS_Mods_CopyModInfo EOS_Mods_EnumerateMods EOS_Mods_InstallMod EOS_Mods_ModInfo_Release EOS_Mods_UninstallMod EOS_Mods_UpdateMod EOS_P2P_AcceptConnection EOS_P2P_AddNotifyIncomingPacketQueueFull EOS_P2P_AddNotifyPeerConnectionClosed EOS_P2P_AddNotifyPeerConnectionEstablished EOS_P2P_AddNotifyPeerConnectionInterrupted EOS_P2P_AddNotifyPeerConnectionRequest EOS_P2P_ClearPacketQueue EOS_P2P_CloseConnection EOS_P2P_CloseConnections EOS_P2P_GetNATType EOS_P2P_GetNextReceivedPacketSize EOS_P2P_GetPacketQueueInfo EOS_P2P_GetPortRange EOS_P2P_GetRelayControl EOS_P2P_QueryNATType EOS_P2P_ReceivePacket EOS_P2P_RemoveNotifyIncomingPacketQueueFull EOS_P2P_RemoveNotifyPeerConnectionClosed EOS_P2P_RemoveNotifyPeerConnectionEstablished EOS_P2P_RemoveNotifyPeerConnectionInterrupted EOS_P2P_RemoveNotifyPeerConnectionRequest EOS_P2P_SendPacket EOS_P2P_SetPacketQueueSize EOS_P2P_SetPortRange EOS_P2P_SetRelayControl EOS_Platform_CheckForLauncherAndRestart EOS_Platform_Create EOS_Platform_GetAchievementsInterface EOS_Platform_GetActiveCountryCode EOS_Platform_GetActiveLocaleCode EOS_Platform_GetAntiCheatClientInterface EOS_Platform_GetAntiCheatServerInterface EOS_Platform_GetApplicationStatus EOS_Platform_GetAuthInterface EOS_Platform_GetConnectInterface EOS_Platform_GetCustomInvitesInterface EOS_Platform_GetDesktopCrossplayStatus EOS_Platform_GetEcomInterface EOS_Platform_GetFriendsInterface EOS_Platform_GetIntegratedPlatformInterface EOS_Platform_GetKWSInterface EOS_Platform_GetLeaderboardsInterface EOS_Platform_GetLobbyInterface EOS_Platform_GetMetricsInterface EOS_Platform_GetModsInterface EOS_Platform_GetNetworkStatus EOS_Platform_GetOverrideCountryCode EOS_Platform_GetOverrideLocaleCode EOS_Platform_GetP2PInterface EOS_Platform_GetPlayerDataStorageInterface EOS_Platform_GetPresenceInterface EOS_Platform_GetProgressionSnapshotInterface EOS_Platform_GetRTCAdminInterface EOS_Platform_GetRTCInterface EOS_Platform_GetReportsInterface EOS_Platform_GetSanctionsInterface EOS_Platform_GetSessionsInterface EOS_Platform_GetStatsInterface EOS_Platform_GetTitleStorageInterface EOS_Platform_GetUIInterface EOS_Platform_GetUserInfoInterface EOS_Platform_Release EOS_Platform_SetApplicationStatus EOS_Platform_SetNetworkStatus EOS_Platform_SetOverrideCountryCode EOS_Platform_SetOverrideLocaleCode EOS_Platform_Tick EOS_PlayerDataStorageFileTransferRequest_CancelRequest EOS_PlayerDataStorageFileTransferRequest_GetFileRequestState EOS_PlayerDataStorageFileTransferRequest_GetFilename EOS_PlayerDataStorageFileTransferRequest_Release EOS_PlayerDataStorage_CopyFileMetadataAtIndex EOS_PlayerDataStorage_CopyFileMetadataByFilename EOS_PlayerDataStorage_DeleteCache EOS_PlayerDataStorage_DeleteFile EOS_PlayerDataStorage_DuplicateFile EOS_PlayerDataStorage_FileMetadata_Release EOS_PlayerDataStorage_GetFileMetadataCount EOS_PlayerDataStorage_QueryFile EOS_PlayerDataStorage_QueryFileList EOS_PlayerDataStorage_ReadFile EOS_PlayerDataStorage_WriteFile EOS_PresenceModification_DeleteData EOS_PresenceModification_Release EOS_PresenceModification_SetData EOS_PresenceModification_SetJoinInfo EOS_PresenceModification_SetRawRichText EOS_PresenceModification_SetStatus EOS_PresenceModification_SetTemplateData EOS_PresenceModification_SetTemplateId EOS_Presence_AddNotifyJoinGameAccepted EOS_Presence_AddNotifyOnPresenceChanged EOS_Presence_CopyPresence EOS_Presence_CreatePresenceModification EOS_Presence_GetJoinInfo EOS_Presence_HasPresence EOS_Presence_Info_Release EOS_Presence_QueryPresence EOS_Presence_RemoveNotifyJoinGameAccepted EOS_Presence_RemoveNotifyOnPresenceChanged EOS_Presence_SetPresence EOS_ProductUserId_FromString EOS_ProductUserId_IsValid EOS_ProductUserId_ToString EOS_ProgressionSnapshot_AddProgression EOS_ProgressionSnapshot_BeginSnapshot EOS_ProgressionSnapshot_DeleteSnapshot EOS_ProgressionSnapshot_EndSnapshot EOS_ProgressionSnapshot_SubmitSnapshot EOS_RTCAdmin_CopyUserTokenByIndex EOS_RTCAdmin_CopyUserTokenByUserId EOS_RTCAdmin_Kick EOS_RTCAdmin_QueryJoinRoomToken EOS_RTCAdmin_SetParticipantHardMute EOS_RTCAdmin_UserToken_Release EOS_RTCAudio_AddNotifyAudioBeforeRender EOS_RTCAudio_AddNotifyAudioBeforeSend EOS_RTCAudio_AddNotifyAudioDevicesChanged EOS_RTCAudio_AddNotifyAudioInputState EOS_RTCAudio_AddNotifyAudioOutputState EOS_RTCAudio_AddNotifyParticipantUpdated EOS_RTCAudio_CopyInputDeviceInformationByIndex EOS_RTCAudio_CopyOutputDeviceInformationByIndex EOS_RTCAudio_GetAudioInputDeviceByIndex EOS_RTCAudio_GetAudioInputDevicesCount EOS_RTCAudio_GetAudioOutputDeviceByIndex EOS_RTCAudio_GetAudioOutputDevicesCount EOS_RTCAudio_GetInputDevicesCount EOS_RTCAudio_GetOutputDevicesCount EOS_RTCAudio_InputDeviceInformation_Release EOS_RTCAudio_OutputDeviceInformation_Release EOS_RTCAudio_QueryInputDevicesInformation EOS_RTCAudio_QueryOutputDevicesInformation EOS_RTCAudio_RegisterPlatformAudioUser EOS_RTCAudio_RegisterPlatformUser EOS_RTCAudio_RemoveNotifyAudioBeforeRender EOS_RTCAudio_RemoveNotifyAudioBeforeSend EOS_RTCAudio_RemoveNotifyAudioDevicesChanged EOS_RTCAudio_RemoveNotifyAudioInputState EOS_RTCAudio_RemoveNotifyAudioOutputState EOS_RTCAudio_RemoveNotifyParticipantUpdated EOS_RTCAudio_SendAudio EOS_RTCAudio_SetAudioInputSettings EOS_RTCAudio_SetAudioOutputSettings EOS_RTCAudio_SetInputDeviceSettings EOS_RTCAudio_SetOutputDeviceSettings EOS_RTCAudio_UnregisterPlatformAudioUser EOS_RTCAudio_UnregisterPlatformUser EOS_RTCAudio_UpdateParticipantVolume EOS_RTCAudio_UpdateReceiving EOS_RTCAudio_UpdateReceivingVolume EOS_RTCAudio_UpdateSending EOS_RTCAudio_UpdateSendingVolume EOS_RTCData_AddNotifyDataReceived EOS_RTCData_AddNotifyParticipantUpdated EOS_RTCData_RemoveNotifyDataReceived EOS_RTCData_RemoveNotifyParticipantUpdated EOS_RTCData_SendData EOS_RTCData_UpdateReceiving EOS_RTCData_UpdateSending EOS_RTC_AddNotifyDisconnected EOS_RTC_AddNotifyParticipantStatusChanged EOS_RTC_AddNotifyRoomBeforeJoin EOS_RTC_AddNotifyRoomStatisticsUpdated EOS_RTC_BlockParticipant EOS_RTC_GetAudioInterface EOS_RTC_GetDataInterface EOS_RTC_JoinRoom EOS_RTC_LeaveRoom EOS_RTC_RemoveNotifyDisconnected EOS_RTC_RemoveNotifyParticipantStatusChanged EOS_RTC_RemoveNotifyRoomBeforeJoin EOS_RTC_RemoveNotifyRoomStatisticsUpdated EOS_RTC_SetRoomSetting EOS_RTC_SetSetting EOS_Reports_SendPlayerBehaviorReport EOS_Sanctions_CopyPlayerSanctionByIndex EOS_Sanctions_CreatePlayerSanctionAppeal EOS_Sanctions_GetPlayerSanctionCount EOS_Sanctions_PlayerSanction_Release EOS_Sanctions_QueryActivePlayerSanctions EOS_SessionDetails_Attribute_Release EOS_SessionDetails_CopyInfo EOS_SessionDetails_CopySessionAttributeByIndex EOS_SessionDetails_CopySessionAttributeByKey EOS_SessionDetails_GetSessionAttributeCount EOS_SessionDetails_Info_Release EOS_SessionDetails_Release EOS_SessionModification_AddAttribute EOS_SessionModification_Release EOS_SessionModification_RemoveAttribute EOS_SessionModification_SetAllowedPlatformIds EOS_SessionModification_SetBucketId EOS_SessionModification_SetHostAddress EOS_SessionModification_SetInvitesAllowed EOS_SessionModification_SetJoinInProgressAllowed EOS_SessionModification_SetMaxPlayers EOS_SessionModification_SetPermissionLevel EOS_SessionSearch_CopySearchResultByIndex EOS_SessionSearch_Find EOS_SessionSearch_GetSearchResultCount EOS_SessionSearch_Release EOS_SessionSearch_RemoveParameter EOS_SessionSearch_SetMaxResults EOS_SessionSearch_SetParameter EOS_SessionSearch_SetSessionId EOS_SessionSearch_SetTargetUserId EOS_Sessions_AddNotifyJoinSessionAccepted EOS_Sessions_AddNotifyLeaveSessionRequested EOS_Sessions_AddNotifySendSessionNativeInviteRequested EOS_Sessions_AddNotifySessionInviteAccepted EOS_Sessions_AddNotifySessionInviteReceived EOS_Sessions_AddNotifySessionInviteRejected EOS_Sessions_CopyActiveSessionHandle EOS_Sessions_CopySessionHandleByInviteId EOS_Sessions_CopySessionHandleByUiEventId EOS_Sessions_CopySessionHandleForPresence EOS_Sessions_CreateSessionModification EOS_Sessions_CreateSessionSearch EOS_Sessions_DestroySession EOS_Sessions_DumpSessionState EOS_Sessions_EndSession EOS_Sessions_GetInviteCount EOS_Sessions_GetInviteIdByIndex EOS_Sessions_IsUserInSession EOS_Sessions_JoinSession EOS_Sessions_QueryInvites EOS_Sessions_RegisterPlayers EOS_Sessions_RejectInvite EOS_Sessions_RemoveNotifyJoinSessionAccepted EOS_Sessions_RemoveNotifyLeaveSessionRequested EOS_Sessions_RemoveNotifySendSessionNativeInviteRequested EOS_Sessions_RemoveNotifySessionInviteAccepted EOS_Sessions_RemoveNotifySessionInviteReceived EOS_Sessions_RemoveNotifySessionInviteRejected EOS_Sessions_SendInvite EOS_Sessions_StartSession EOS_Sessions_UnregisterPlayers EOS_Sessions_UpdateSession EOS_Sessions_UpdateSessionModification EOS_Shutdown EOS_Stats_CopyStatByIndex EOS_Stats_CopyStatByName EOS_Stats_GetStatsCount EOS_Stats_IngestStat EOS_Stats_QueryStats EOS_Stats_Stat_Release EOS_TitleStorageFileTransferRequest_CancelRequest EOS_TitleStorageFileTransferRequest_GetFileRequestState EOS_TitleStorageFileTransferRequest_GetFilename EOS_TitleStorageFileTransferRequest_Release EOS_TitleStorage_CopyFileMetadataAtIndex EOS_TitleStorage_CopyFileMetadataByFilename EOS_TitleStorage_DeleteCache EOS_TitleStorage_FileMetadata_Release EOS_TitleStorage_GetFileMetadataCount EOS_TitleStorage_QueryFile EOS_TitleStorage_QueryFileList EOS_TitleStorage_ReadFile EOS_UI_AcknowledgeEventId EOS_UI_AddNotifyDisplaySettingsUpdated EOS_UI_AddNotifyMemoryMonitor EOS_UI_AddNotifyOnScreenKeyboardRequested EOS_UI_ConfigureOnScreenKeyboard EOS_UI_GetFriendsExclusiveInput EOS_UI_GetFriendsVisible EOS_UI_GetNotificationLocationPreference EOS_UI_GetToggleFriendsButton EOS_UI_GetToggleFriendsKey EOS_UI_HideFriends EOS_UI_IsSocialOverlayPaused EOS_UI_IsValidButtonCombination EOS_UI_IsValidKeyCombination EOS_UI_PauseSocialOverlay EOS_UI_PrePresent EOS_UI_RemoveNotifyDisplaySettingsUpdated EOS_UI_RemoveNotifyMemoryMonitor EOS_UI_RemoveNotifyOnScreenKeyboardRequested EOS_UI_ReportInputState EOS_UI_SetDisplayPreference EOS_UI_SetToggleFriendsButton EOS_UI_SetToggleFriendsKey EOS_UI_ShowBlockPlayer EOS_UI_ShowFriends EOS_UI_ShowNativeProfile EOS_UI_ShowReportPlayer EOS_UserInfo_BestDisplayName_Release EOS_UserInfo_CopyBestDisplayName EOS_UserInfo_CopyBestDisplayNameWithPlatform EOS_UserInfo_CopyExternalUserInfoByAccountId EOS_UserInfo_CopyExternalUserInfoByAccountType EOS_UserInfo_CopyExternalUserInfoByIndex EOS_UserInfo_CopyUserInfo EOS_UserInfo_ExternalUserInfo_Release EOS_UserInfo_GetExternalUserInfoCount EOS_UserInfo_GetLocalPlatformType EOS_UserInfo_QueryUserInfo EOS_UserInfo_QueryUserInfoByDisplayName EOS_UserInfo_QueryUserInfoByExternalAccount EOS_UserInfo_Release

Name

.text

Size

14.3MB

Virtual Size

14.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

123KB

Virtual Size

851KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

716KB

Virtual Size

715KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

154KB

Virtual Size

154KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

86KB

Virtual Size

86KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=24, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=12, id=253, version=28518,

count=8, id=260, version=30034,

count=24, id=259, version=30034,

count=6, id=257, version=30034,

count=2, id=260, version=26715,

count=2, id=262, version=26715,

count=35, id=257, version=26715,

count=21, id=261, version=30034,

count=669, id=1, productName=Unmarked objects,

count=134, id=260, version=27031,

count=30, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=122, id=260, version=34823,

count=11, id=261, productName=VS2017 v15.9.11 build 27030, version=27030,

count=556, id=260, version=24234,

count=1089, productName=Unmarked objects (old),

count=83, id=265, version=30154,

count=1, id=256, version=30154,

count=1, id=255, version=30154,

count=1, id=151,

count=1, id=258, version=30154,

meccha/OnlineFix64.dll

IMPHASH 10c1b70987e42d05f256c6e82924ec7e
SHA256 27a1c596c4b1de1e6672cb7e7fba2ba3d3124999493ff82a504beb6f6145e88f
MD5 00813d08c8a0cdf3420bd38fd72c80e8
SHA1 992119b11b5067959776b18f609c594c6c888bb9
SHA512 a842617f0fc320fa90661a7b7a7809252a5b935ce4249a79f3fe520565a02db6c55ec80b9eb581aac1b4b29ad5954adf6f29bcf1d3624ddd86a5b8b03ad929bc
SSDEEP 196608:OrATka029FenZW3Q8YrVNnZv9/F91mWsz0kg4kAHh3Zkghk0XV4YPNOLOOKj:KeLIJ5d9/FjxsGTiJ1hk+HPNTj
TLSH
T1D3D6129925D4937CC4408138F5451AF9F0D97C888CFD8826FFC749127AB1DA9C8BABB6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16432826

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

594KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

314KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme0

Size

Virtual Size

7.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.ofme1

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ofme2

Size

13.2MB

Virtual Size

13.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

664B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

176B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

meccha/PenguinHotel-Win64-Shipping.exe

IMPHASH 40a9a7df6e92807713a273f784a9edc1
SHA256 8f6e26cfe9763dc8a467b642bf13d926373332e434e23fdca4d7f4a93f5cd6b7
MD5 fae9ef64d9b9c08d64cf04183769fb14
SHA1 c420540cb8fa7e2a1940a64a1c269f4b592d3c84
SHA512 f088172b00ed58c6a6a3ace6bf8f9232f08895286d1705c025c9aac8978ca47b945dde87dcb2bd4119e3a7f190ec4ee2f99d72418278b1d871d2d57f5938ed58
SSDEEP 786432:7kQqVdue6BZYMcQ0sRzTli2eIvsHEqXI90OJl333v/Ax1e9Q9Y8fl:7kQqVdue89cXqTs2eWqfI90UnvC7Tfl
TLSH
T1E8887C47B7E504D8F07AC1758A3A5606EBB1387A0720A7DF15B045891F3BFE499BEB20
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

126780416

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

PenguinHotel-Win64-Shipping.pdb

dxgi

CreateDXGIFactory1 CreateDXGIFactory

dsound

ord11 ord12 ord1 ord3 ord6 ord8

ws2_32

recvfrom recv ntohs ntohl listen htons htonl getsockopt getsockname socket ioctlsocket connect closesocket select accept gethostname WSAStartup WSACleanup WSAGetLastError WSAIoctl getaddrinfo freeaddrinfo inet_ntop getprotobyname WSAAddressToStringW WSAStringToAddressW getnameinfo send sendto setsockopt bind shutdown inet_pton __WSAFDIsSet inet_addr InetNtopW WSAPoll WSASetLastError gethostbyname WSACloseEvent WSAWaitForMultipleEvents WSACreateEvent WSAEnumNetworkEvents WSAEventSelect WSAResetEvent WSASetEvent getpeername

winmm

timeEndPeriod timeBeginPeriod waveOutGetNumDevs

kernel32

GetCurrentDirectoryW CreateDirectoryW CreateFileW DeleteFileW FindNextFileW FlushFileBuffers GetDiskFreeSpaceExW GetFileAttributesW GetFileAttributesExW GetFileSizeEx GetFinalPathNameByHandleW GetFullPathNameW GetLongPathNameW RemoveDirectoryW SetEndOfFile SetFileAttributesW SetFilePointer SetFileTime GetTempPathW OutputDebugStringW CloseHandle RaiseException SetUnhandledExceptionFilter GetLastError SetLastError SetThreadErrorMode PeekNamedPipe QueryPerformanceFrequency SetEvent ResetEvent ReleaseSemaphore ReleaseMutex WaitForSingleObject CreateMutexW CreateEventW Sleep WaitForMultipleObjects CreateSemaphoreW GetCurrentProcessId ExitProcess TerminateProcess GetExitCodeProcess SwitchToThread CreateThread GetCurrentThread OpenThread SetThreadPriority SuspendThread ResumeThread CreateProcessW GetProcessId FlushProcessWriteBuffers GetThreadContext OpenProcess GetCurrentProcessorNumber GetThreadIdealProcessorEx GlobalMemoryStatusEx GetSystemInfo GetVersionExW GetLogicalProcessorInformationEx GetNativeSystemInfo VirtualAlloc VirtualProtect VirtualFree CreateFileMappingW MapViewOfFile UnmapViewOfFile CreateMemoryResourceNotification QueryMemoryResourceNotification IsProcessInJob CreateJobObjectW SetInformationJobObject QueryInformationJobObject FreeLibrary GetModuleFileNameW GetModuleHandleW GetModuleHandleExW GetProcAddress LoadResource LockResource SizeofResource FindResourceW LoadLibraryW GetNumaNodeProcessorMaskEx GlobalAlloc GlobalUnlock GlobalLock SetProcessAffinityMask SetThreadAffinityMask FormatMessageW QueryFullProcessImageNameW GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW SetDllDirectoryW GetDllDirectoryW ReOpenFile MoveFileW GetComputerNameW VerifyVersionInfoW FileTimeToSystemTime SystemTimeToFileTime GetSystemPowerStatus GetNumaProcessorNodeEx GetUserPreferredUILanguages GetUserDefaultLocaleName SetConsoleCtrlHandler SetConsoleOutputCP SetEnvironmentVariableW K32GetProcessMemoryInfo CreateToolhelp32Snapshot Process32FirstW Process32NextW Thread32First Thread32Next GetProcessTimes GetThreadTimes GetSystemTime GetSystemTimeAsFileTime GetLocalTime SetThreadGroupAffinity GetEnvironmentVariableA FlsAlloc FlsSetValue FlsFree GetLargePageMinimum VirtualUnlock GetNumaHighestNodeNumber GetNumaProcessorNode GetNumaNodeProcessorMask SetWaitableTimer CreateWaitableTimerW MulDiv AllocConsole FreeConsole AttachConsole GetConsoleScreenBufferInfo SetConsoleScreenBufferSize SetConsoleTextAttribute SetConsoleWindowInfo SetConsoleTitleW GetProcessHandleCount GetVersion GetLocaleInfoW DeviceIoControl AddVectoredExceptionHandler RemoveVectoredExceptionHandler InitializeCriticalSectionAndSpinCount HeapAlloc HeapFree GetProcessHeap GetFileSize IsDebuggerPresent FlushViewOfFile CreateIoCompletionPort SetErrorMode LocalFree WideCharToMultiByte TryAcquireSRWLockShared VirtualQueryEx SetFilePointerEx MultiByteToWideChar LoadLibraryA GetACP GetLocaleInfoEx GetDynamicTimeZoneInformation GetGeoInfoW GetUserGeoID LCIDToLocaleName LocaleNameToLCID GetNumberFormatEx GetCurrencyFormatEx ResolveLocaleName SystemTimeToTzSpecificLocalTime GetTimeZoneInformation GetTimeFormatEx GetDateFormatEx OutputDebugStringA DuplicateHandle GetThreadId QueryUnbiasedInterruptTime InitializeConditionVariable SleepConditionVariableCS WakeAllConditionVariable InitOnceExecuteOnce VirtualQuery CreateFile2 LocalAlloc FormatMessageA lstrlenA ReplaceFileW SwitchToFiber DeleteFiber ConvertFiberToThread ConvertThreadToFiber GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW InitializeCriticalSectionEx GetSystemDirectoryA GetModuleHandleA SleepEx GetTickCount MoveFileExA WaitForSingleObjectEx CompareFileTime GetModuleFileNameA LoadLibraryExW K32EnumProcessModules GetSystemDirectoryW CreateProcessA GetCommandLineA GetTempPathA GetTempFileNameA DebugBreak GetThreadPriority WakeConditionVariable LoadLibraryExA GetEnvironmentVariableW SleepConditionVariableSRW RtlCaptureContext UnhandledExceptionFilter SetCurrentDirectoryW GetCommandLineW VerSetConditionMask RtlCaptureStackBackTrace ReadFile WriteFile GetConsoleWindow GetOverlappedResult IsProcessorFeaturePresent InitializeSListHead GetStartupInfoW CreateFiber CreateSemaphoreA GetFileTime InitializeCriticalSection SetCriticalSectionSpinCount EnterCriticalSection LeaveCriticalSection DeleteCriticalSection QueryPerformanceCounter GetCurrentThreadId TlsAlloc TlsGetValue TlsSetValue TlsFree TryEnterCriticalSection InitializeSRWLock AcquireSRWLockShared ReleaseSRWLockShared AcquireSRWLockExclusive ReleaseSRWLockExclusive HeapSetInformation RtlLookupFunctionEntry RtlVirtualUnwind GetCurrentProcess K32EnumProcessModulesEx K32GetModuleFileNameExW TryAcquireSRWLockExclusive GetStdHandle GetFileType SetHandleInformation CreatePipe WriteConsoleW FindClose FindFirstFileW

user32

DestroyAcceleratorTable LoadAcceleratorsW EmptyClipboard SetClipboardData OpenClipboard SetDlgItemTextW GetDlgItem CreateDialogParamW IsWindowVisible SetWindowPos ShowWindow DestroyWindow IsChild PostQuitMessage SendMessageW PeekMessageW DispatchMessageW TranslateMessage GetMessageW TranslateAcceleratorW CloseClipboard GetSystemMetrics EnumDisplayDevicesA GetUserObjectInformationW GetProcessWindowStation GetRawInputDeviceInfoW GetDesktopWindow SetWindowDisplayAffinity GetWindowDisplayAffinity ChangeDisplaySettingsExW ChangeDisplaySettingsW MonitorFromPoint CreateIconIndirect LoadImageW LoadCursorFromFileW GetClassLongPtrW SetCursor SetCursorPos SetWindowRgn GetForegroundWindow SetActiveWindow DrawStateW DeleteMenu EnableMenuItem GetSystemMenu IsWindowEnabled EnableWindow RegisterTouchWindow SendInput GetFocus GetActiveWindow AddClipboardFormatListener GetClipboardData IsZoomed SetWindowPlacement FlashWindowEx SetLayeredWindowAttributes PrintWindow IsWindow GetKeyboardLayout GetKeyboardLayoutList ActivateKeyboardLayout GetRawInputDeviceList RegisterRawInputDevices GetRawInputDeviceInfoA GetRawInputData GetWindowInfo MonitorFromRect SystemParametersInfoW DrawIconEx LoadIconW LoadCursorW CallNextHookEx UnhookWindowsHookEx SetWindowsHookExW EnumChildWindows GetParent PtInRect GetSysColor ClipCursor WindowFromPoint MapWindowPoints ClientToScreen GetClipCursor GetCursorPos ShowCursor MessageBoxW AdjustWindowRectEx GetWindowTextLengthW GetWindowTextW RedrawWindow ReleaseDC GetDCEx GetDC UpdateWindow InsertMenuItemW TrackPopupMenu CreatePopupMenu MsgWaitForMultipleObjects ReleaseCapture SetCapture GetCapture CloseTouchInputHandle GetTouchInputInfo GetAsyncKeyState GetKeyState SetFocus GetDlgItemTextW IsIconic GetWindowPlacement MoveWindow CreateWindowExW RegisterClassExW UnregisterClassW RegisterClassW DefWindowProcW PostMessageW GetMessageExtraInfo TrackMouseEvent DisableProcessWindowsGhosting MapVirtualKeyW EnumDisplayMonitors GetMonitorInfoW MonitorFromWindow EnumDisplayDevicesW EnumDisplaySettingsW IsDialogMessageW GetWindowThreadProcessId GetTopWindow SetWindowLongPtrW GetWindowLongPtrW SetWindowLongW GetWindowLongW FillRect GetSysColorBrush ScreenToClient GetWindowRect GetClientRect SetWindowTextW InvalidateRect EndPaint BeginPaint AllowSetForegroundWindow SetForegroundWindow DrawTextW

gdi32

SelectObject GetTextExtentPoint32W DeleteDC SetBkMode CombineRgn CreateFontIndirectW CreateFontW CreatePen CreateRectRgn CreateSolidBrush DeleteObject GetDeviceCaps SwapBuffers SetPixelFormat ChoosePixelFormat GetObjectW CreateDIBSection SetTextAlign PtInRegion GetPixel GetDIBits CreateRoundRectRgn CreateCompatibleBitmap CreateBitmap Polygon ExtTextOutW TextOutW MoveToEx SetTextColor SetBkColor RoundRect Rectangle LineTo GetStockObject CreateCompatibleDC

advapi32

RegQueryValueExW CryptDestroyKey DeregisterEventSource RegisterEventSourceW ReportEventW GetUserNameW RegCloseKey RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegOpenKeyExW CryptSetHashParam RegSetValueExW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW CryptGetProvParam AllocateLocallyUniqueId CryptReleaseContext CryptGetUserKey CryptExportKey CryptDecrypt CryptCreateHash CryptDestroyHash CryptSignHashW CryptEnumProvidersW CryptAcquireContextW

shell32

SHGetFolderPathW SHGetKnownFolderPath CommandLineToArgvW ShellExecuteExW ShellExecuteW

ole32

ReleaseStgMedium RevokeDragDrop RegisterDragDrop CoInitialize OleUninitialize PropVariantClear CoTaskMemFree CoCreateGuid PropVariantCopy CoCreateInstance CoInitializeEx CoUninitialize IIDFromString OleInitialize StringFromGUID2

oleaut32

SysAllocString SafeArrayPutElement SafeArrayCreateVector VariantCopy SysFreeString

iphlpapi

IcmpCloseHandle IcmpSendEcho GetIfTable2 FreeMibTable IcmpCreateFile GetAdaptersInfo GetAdaptersAddresses

setupapi

SetupDiGetDevicePropertyW CM_Get_Device_IDW SetupDiGetClassDevsW SetupDiDestroyDeviceInfoList SetupDiGetClassDevsExW SetupDiOpenDevRegKey SetupDiEnumDeviceInfo

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressSingle

dwmapi

DwmFlush DwmIsCompositionEnabled DwmSetWindowAttribute DwmGetCompositionTimingInfo

imm32

ImmSetCompositionWindow ImmNotifyIME ImmGetCompositionStringW ImmAssociateContext ImmSetCandidateWindow ImmGetContext ImmDestroyContext ImmCreateContext ImmGetProperty ImmGetDescriptionW ImmReleaseContext ImmGetIMEFileNameW

uiautomationcore

UiaRaiseAutomationPropertyChangedEvent UiaHostProviderFromHwnd UiaReturnRawElementProvider UiaRaiseAutomationEvent UiaClientsAreListening

crypt32

CertOpenSystemStoreA CertGetIntendedKeyUsage CertGetEnhancedKeyUsage CertGetCertificateContextProperty CertFreeCertificateContext CertDuplicateCertificateContext CertFindCertificateInStore CertOpenStore CertGetNameStringW CertCloseStore CertEnumCertificatesInStore CertOpenSystemStoreW

winhttp

WinHttpGetIEProxyConfigForCurrentUser WinHttpGetDefaultProxyConfiguration

opengl32

wglGetCurrentContext wglDeleteContext wglCreateContext wglMakeCurrent wglGetCurrentDC wglGetProcAddress

msvcp140

??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z _Mtx_destroy_in_situ _Mtx_init_in_situ ?_Xbad_function_call@std@@YAXXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?width@ios_base@std@@QEAA_J_J@Z ?width@ios_base@std@@QEBA_JXZ ?flags@ios_base@std@@QEBAHXZ ?good@ios_base@std@@QEBA_NXZ ?uncaught_exceptions@std@@YAHXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ??Bid@locale@std@@QEAA_KXZ ?_Xout_of_range@std@@YAXPEBD@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?id@?$ctype@D@std@@2V0locale@2@A ??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z _Cnd_init_in_situ _Cnd_destroy_in_situ _Thrd_join _Thrd_id _Cnd_do_broadcast_at_thread_exit ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z _Cnd_broadcast ?_Throw_C_error@std@@YAXH@Z ?_Syserror_map@std@@YAPEBDH@Z ??7ios_base@std@@QEBA_NXZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?classic@locale@std@@SAAEBV12@XZ ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z ?swap@?$basic_iostream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ?setf@ios_base@std@@QEAAHHH@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ?eof@ios_base@std@@QEBA_NXZ ?unsetf@ios_base@std@@QEAAXH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ _Thrd_yield ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?precision@ios_base@std@@QEAA_J_J@Z _Strcoll _Strxfrm ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??0facet@locale@std@@IEAA@_K@Z ?_Throw_Cpp_error@std@@YAXH@Z _Cnd_wait _Mtx_unlock _Mtx_lock ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ?putback@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z ??1facet@locale@std@@MEAA@XZ ?tolower@?$ctype@D@std@@QEBADD@Z ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ??Bios_base@std@@QEBA_NXZ ?fail@ios_base@std@@QEBA_NXZ ?swap@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ _Query_perf_frequency _Query_perf_counter ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?id@?$collate@D@std@@2V0locale@2@A ?_Xinvalid_argument@std@@YAXPEBD@Z ?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z _Lock_shared_ptr_spin_lock _Unlock_shared_ptr_spin_lock ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Incref@facet@locale@std@@UEAAXXZ

bcrypt

BCryptGenRandom

uxtheme

SetWindowTheme

vcruntime140

strrchr wcschr memcmp wcsrchr _set_purecall_handler __C_specific_handler memchr __std_terminate __std_exception_copy __std_exception_destroy longjmp _CxxThrowException wcsstr __RTDynamicCast __CxxFrameHandler3 __RTtypeid __std_type_info_name __intrinsic_setjmp __current_exception strstr _purecall memset memmove memcpy __current_exception_context strchr __std_type_info_compare

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

free _set_new_mode calloc _heapchk _aligned_realloc _aligned_malloc _aligned_free malloc realloc _get_heap_handle

api-ms-win-crt-convert-l1-1-0

_strtoui64 _strtol_l _strtoi64 _wcstoui64 _wtoi64 strtoll wcstod _wtoi strtoul strtod _strtof_l _strtod_l mbstowcs atoll wcstombs _wcstoi64 wcstoul wcstol atoi strtol _wtof atof

api-ms-win-crt-math-l1-1-0

sin frexp cosf atan2 _dtest acos _finite modff _dsign fmod floor ceil fmodf __setusermatherr logbf ldexp cos asinf _fdclass asin expf truncf tanhf lroundf _fdopen sinf log _isnan atan2f pow sqrtf tanf sqrt trunc floorf tan ceilf round exp copysignf _dclass hypot fabs roundf log2 exp2f acosf copysign _fdsign logf modf nextafterf atan sinhf atanf log2f log10 log10f exp2 powf

api-ms-win-crt-string-l1-1-0

iswdigit iswupper strnlen iswalpha isupper isspace _wcsicmp _wcsnicmp strcspn strcat_s wcscpy_s isxdigit iscntrl strcpy_s strspn strpbrk wcsncmp strncmp iswspace strncpy_s strcmp isprint _strdup isdigit _strnicmp wcsncpy _stricmp isalpha iswalnum strncat toupper iswlower isalnum tolower strncpy wcsnlen iswxdigit strlen

api-ms-win-crt-stdio-l1-1-0

_read ferror _dup __stdio_common_vfprintf feof _creat _set_fmode __stdio_common_vsnprintf_s fclose fopen __stdio_common_vfwprintf fread __acrt_iob_func _fileno _setmode _write fseek ftell _wfopen _close fputs fflush __stdio_common_vsscanf fopen_s fgets puts _open _get_stream_buffer_pointers __p__commode _open_osfhandle _lseeki64 _isatty fgetc fgetpos fputc fsetpos __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vswprintf _fseeki64 fwrite setvbuf _dup2 ungetc _getcwd

api-ms-win-crt-utility-l1-1-0

bsearch srand rand_s qsort rand div

api-ms-win-crt-runtime-l1-1-0

_endthreadex _wassert _invalid_parameter_noinfo _configure_narrow_argv _initialize_narrow_environment strerror_s _invoke_watson _initialize_onexit_table _register_onexit_function _beginthreadex _crt_atexit _set_invalid_parameter_handler _cexit terminate abort __sys_nerr __sys_errlist _seh_filter_exe _set_app_type strerror _get_narrow_winmain_command_line _errno signal _initterm _invalid_parameter_noinfo_noreturn exit _initterm_e raise _getpid _exit _c_exit _register_thread_local_exe_atexit_callback

api-ms-win-crt-locale-l1-1-0

setlocale __initialize_lconv_for_unsigned_char _free_locale _configthreadlocale _create_locale

api-ms-win-crt-environment-l1-1-0

getenv _wgetenv_s getenv_s _putenv_s __p__wenviron

api-ms-win-crt-conio-l1-1-0

_cputs

api-ms-win-crt-filesystem-l1-1-0

rename _stat64i32 _wstat64i32 _waccess _fstat64 _stat32i64 _fullpath _stat64 _unlink remove _unlock_file _lock_file

api-ms-win-crt-time-l1-1-0

_mktime64 _localtime64 strftime _gmtime64_s _time64 __daylight _gmtime64 _localtime64_s _tzset __tzname __timezone

api-ms-win-crt-multibyte-l1-1-0

_mbsnbcmp _mbspbrk

AmdPowerXpressRequestHighPerformance D3D12SDKPath D3D12SDKVersion INTC_D3D11_XessCreateContext INTC_D3D11_XessDestroyContext INTC_D3D11_XessExecute INTC_D3D11_XessForceLegacyScaleFactors INTC_D3D11_XessGetExposureMultiplier INTC_D3D11_XessGetInitParams INTC_D3D11_XessGetInputResolution INTC_D3D11_XessGetIntelXeFXVersion INTC_D3D11_XessGetJitterScale INTC_D3D11_XessGetOptimalInputResolution INTC_D3D11_XessGetProfilingData INTC_D3D11_XessGetVelocityScale INTC_D3D11_XessGetVersion INTC_D3D11_XessInit INTC_D3D11_XessIsOptimalDriver INTC_D3D11_XessSelectNetworkModel INTC_D3D11_XessSetExposureMultiplier INTC_D3D11_XessSetJitterScale INTC_D3D11_XessSetLoggingCallback INTC_D3D11_XessSetVelocityScale INTC_D3D12_GetApplicationInfo INTC_D3D12_GetGpuCrashDumpBufferInfo INTC_D3D12_GpuCrashDumpOnCommandListCreate INTC_D3D12_GpuCrashDumpOnCommandListDestroy INTC_D3D12_GpuCrashDumpOnDeviceDestroy INTC_D3D12_RegisterDriverCallbacks NvOptimusEnablement agsCheckDriverVersion agsDeInitialize agsDriverExtensionsDX11_BeginUAVOverlap agsDriverExtensionsDX11_CreateDevice agsDriverExtensionsDX11_CreateFromDevice agsDriverExtensionsDX11_Destroy agsDriverExtensionsDX11_DestroyDevice agsDriverExtensionsDX11_EndUAVOverlap agsDriverExtensionsDX11_GetMaxClipRects agsDriverExtensionsDX11_IASetPrimitiveTopology agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirect agsDriverExtensionsDX11_MultiDrawIndexedInstancedIndirectCountIndirect agsDriverExtensionsDX11_MultiDrawInstancedIndirect agsDriverExtensionsDX11_MultiDrawInstancedIndirectCountIndirect agsDriverExtensionsDX11_NumPendingAsyncCompileJobs agsDriverExtensionsDX11_SetClipRects agsDriverExtensionsDX11_SetDepthBounds agsDriverExtensionsDX11_SetDiskShaderCacheEnabled agsDriverExtensionsDX11_SetMaxAsyncCompileThreadCount agsDriverExtensionsDX11_SetViewBroadcastMasks agsDriverExtensionsDX11_WriteBreadcrumb agsDriverExtensionsDX12_CreateDevice agsDriverExtensionsDX12_CreateFromDevice agsDriverExtensionsDX12_Destroy agsDriverExtensionsDX12_DestroyDevice agsDriverExtensionsDX12_PopMarker agsDriverExtensionsDX12_PushMarker agsDriverExtensionsDX12_SetMarker agsGetVersionNumber agsInitialize agsSetDisplayMode nsvgCreateRasterizer nsvgDelete nsvgDeleteRasterizer nsvgDuplicatePath nsvgParse nsvgParseFromFile nsvgParseTransform nsvgRasterize nsvgRasterizeFull src_callback_new src_callback_read src_clone src_delete src_error src_float_to_int_array src_float_to_short_array src_get_channels src_get_description src_get_name src_get_version src_int_to_float_array src_is_valid_ratio src_new src_process src_reset src_set_ratio src_short_to_float_array src_simple src_strerror

Name

.text

Size

122.6MB

Virtual Size

122.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

33.6MB

Virtual Size

33.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.8MB

Virtual Size

5.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

6.2MB

Virtual Size

6.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.msvcjmc

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rodata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

374KB

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=6, id=257, version=33030,

count=17, id=253, version=33030,

count=10, id=260, version=33030,

count=77, id=259, version=33030,

count=2, id=261, version=30795,

count=2, id=259, version=30795,

count=1, id=262, version=30795,

count=44, id=257, version=30795,

count=12, id=260, version=30795,

count=41, id=261, version=33030,

count=183, id=260, version=34123,

count=39, id=261, version=32215,

count=1, id=261, version=27034,

count=30, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=3, id=261, version=30151,

count=5, id=261, version=34436,

count=5, id=260, version=34436,

count=1, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=205, id=261, version=34120,

count=7, id=261, version=27044,

count=2, id=261, version=27412,

count=2, id=257, version=27412,

count=134, id=260, version=27031,

count=1, id=260, version=27034,

count=145, id=260, version=34435,

count=592, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=34, id=260, productName=VS2019 v16.9.0 build 29910, version=29910,

count=110, id=260, version=30151,

count=38, id=260, version=33144,

count=77, id=261, version=33144,

count=1, id=261, version=33141,

count=39, id=260, version=34120,

count=3, id=257, version=33143,

count=1768, id=1, productName=Unmarked objects,

count=79, id=261, version=30156,

count=4, id=259, version=30145,

count=3, id=260, version=30145,

count=347, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=9, id=260, version=33133,

count=2, id=260, version=33130,

count=459, productName=Unmarked objects (old),

count=69, id=261, version=33145,

count=974, id=261, version=33130,

count=1, id=256, version=33145,

count=1, id=255, version=33145,

count=2, id=151,

count=1, id=258, version=33145,

meccha/PenguinHotel.exe

IMPHASH a8ff415d7b5164307cdba18944ae4f5d
SHA256 4584159e0ed79b5303e698e53948de6b804bfdf693c1805620b3e6d67aafdc09
MD5 6c36642d0c6623abfe08a31beeb95152
SHA1 9e797051d7330f84975204ddc82a2cf89f821ed7
SHA512 fb253373ba0c8277a4781b017964c7611edb67e391db81278a63a8df2c46f8342addd23c57d3a58c977355192e8c53ab475a47544460ed35fb1f712415e66a27
SSDEEP 6144:mvudZJp30u31EwZGIMs2Qpra2WjvsCr5bJ8:mvudzp3hlVZGIM9r5bJ8
TLSH
T14B24AF07B2A030F9E577873888615656E773B8314B24DBAF0794867A1F232D1DE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

WaitForSingleObject GetCurrentProcess GetExitCodeProcess CreateProcessW FreeLibrary GetModuleFileNameW GetModuleHandleW GetProcAddress GetLastError LockResource SizeofResource FindResourceW LoadLibraryW WriteConsoleW CreateFileW CloseHandle GetFileAttributesW LoadResource GetEnvironmentVariableW GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx GetProcessHeap LCMapStringW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW EncodePointer GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree

user32

MessageBoxW wsprintfW

advapi32

RegOpenKeyExW RegCloseKey RegQueryValueExW

shell32

ShellExecuteExW

shlwapi

PathCanonicalizeW PathRemoveFileSpecW PathCombineW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

Name

.text

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

45KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

79KB

Virtual Size

78KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

meccha/winmm.dll

IMPHASH c7d3c3e834878fd77f3d30f3c94ec7ef
SHA256 61d071e40fb1136da66bf12213062a47eccadd7556171b97381fbc937e978b0d
MD5 5587d78c2c051ef9076ad19f42624064
SHA1 ed11f49303128e9453566d83bee62f1779bd7a28
SHA512 42fc22d08ee963eed7b42db48e5a396db98fabd72df120ba94e863f122fabda230a79b11d952157c73b8506be647ab7a71993deabf477ec5d72442abbc3042a1
SSDEEP 6144:eo0EcwoNZhIE/adO00WkCUxgtF9Eaa+slRp0YHLFhNpgcHxbEvyW:j/cwoNNat0JuarlR/HLFh8W1S
TLSH
T1A3B48F19A2A842B9E567E07CC9434A07E7B1BC464761D7CF03E09ABB2F277E0563E351
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

DLL Hijacking vulnerability

Signed PE file loads submitted unsigned PE file, allowing DLL hijacking/sideloading/preloading.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

194276

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

GetModuleFileNameW GetSystemDirectoryW GetCommandLineA GetLastError LoadLibraryW GetProcAddress ExitProcess SetEndOfFile WriteConsoleW HeapSize MultiByteToWideChar GetStringTypeW WideCharToMultiByte EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer GetLocaleInfoEx LCMapStringEx CompareStringEx GetCPInfo HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle HeapAlloc GetThreadContext GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread VirtualFree VirtualAlloc GetSystemInfo VirtualQuery SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree IsProcessorFeaturePresent TerminateProcess FreeLibrary GetModuleHandleExW FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter GetFileSizeEx SetFilePointerEx GetStdHandle GetFileType LoadLibraryExW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW ReadFile GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap SetStdHandle ReadConsoleW CreateFileW RtlUnwind

user32

MessageBoxA MessageBoxW

CloseDriver DefDriverProc DriverCallback DrvGetModuleHandle GetDriverModuleHandle NotifyCallbackData OnlineFix OpenDriver PlaySound PlaySoundA PlaySoundW SendDriverMessage WOW32DriverCallback WOW32ResolveMultiMediaHandle WOWAppExit aux32Message auxGetDevCapsA auxGetDevCapsW auxGetNumDevs auxGetVolume auxOutMessage auxSetVolume joy32Message joyConfigChanged joyGetDevCapsA joyGetDevCapsW joyGetNumDevs joyGetPos joyGetPosEx joyGetThreshold joyReleaseCapture joySetCapture joySetThreshold mci32Message mciDriverNotify mciDriverYield mciExecute mciFreeCommandResource mciGetCreatorTask mciGetDeviceIDA mciGetDeviceIDFromElementIDA mciGetDeviceIDFromElementIDW mciGetDeviceIDW mciGetDriverData mciGetErrorStringA mciGetErrorStringW mciGetYieldProc mciLoadCommandResource mciSendCommandA mciSendCommandW mciSendStringA mciSendStringW mciSetDriverData mciSetYieldProc mid32Message midiConnect midiDisconnect midiInAddBuffer midiInClose midiInGetDevCapsA midiInGetDevCapsW midiInGetErrorTextA midiInGetErrorTextW midiInGetID midiInGetNumDevs midiInMessage midiInOpen midiInPrepareHeader midiInReset midiInStart midiInStop midiInUnprepareHeader midiOutCacheDrumPatches midiOutCachePatches midiOutClose midiOutGetDevCapsA midiOutGetDevCapsW midiOutGetErrorTextA midiOutGetErrorTextW midiOutGetID midiOutGetNumDevs midiOutGetVolume midiOutLongMsg midiOutMessage midiOutOpen midiOutPrepareHeader midiOutReset midiOutSetVolume midiOutShortMsg midiOutUnprepareHeader midiStreamClose midiStreamOpen midiStreamOut midiStreamPause midiStreamPosition midiStreamProperty midiStreamRestart midiStreamStop mixerClose mixerGetControlDetailsA mixerGetControlDetailsW mixerGetDevCapsA mixerGetDevCapsW mixerGetID mixerGetLineControlsA mixerGetLineControlsW mixerGetLineInfoA mixerGetLineInfoW mixerGetNumDevs mixerMessage mixerOpen mixerSetControlDetails mmDrvInstall mmGetCurrentTask mmTaskBlock mmTaskCreate mmTaskSignal mmTaskYield mmioAdvance mmioAscend mmioClose mmioCreateChunk mmioDescend mmioFlush mmioGetInfo mmioInstallIOProcA mmioInstallIOProcW mmioOpenA mmioOpenW mmioRead mmioRenameA mmioRenameW mmioSeek mmioSendMessage mmioSetBuffer mmioSetInfo mmioStringToFOURCCA mmioStringToFOURCCW mmioWrite mmsystemGetVersion mod32Message mxd32Message sndPlaySoundA sndPlaySoundW tid32Message timeBeginPeriod timeEndPeriod timeGetDevCaps timeGetSystemTime timeGetTime timeKillEvent timeSetEvent waveInAddBuffer waveInClose waveInGetDevCapsA waveInGetDevCapsW waveInGetErrorTextA waveInGetErrorTextW waveInGetID waveInGetNumDevs waveInGetPosition waveInMessage waveInOpen waveInPrepareHeader waveInReset waveInStart waveInStop waveInUnprepareHeader waveOutBreakLoop waveOutClose waveOutGetDevCapsA waveOutGetDevCapsW waveOutGetErrorTextA waveOutGetErrorTextW waveOutGetID waveOutGetNumDevs waveOutGetPitch waveOutGetPlaybackRate waveOutGetPosition waveOutGetVolume waveOutMessage waveOutOpen waveOutPause waveOutPrepareHeader waveOutReset waveOutRestart waveOutSetPitch waveOutSetPlaybackRate waveOutSetVolume waveOutUnprepareHeader waveOutWrite wid32Message wod32Message

Name

.text

Size

352KB

Virtual Size

352KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

105KB

Virtual Size

105KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1024B

Virtual Size

648B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

meccha.rar

meccha/EOSSDK-Win64-Shipping.dll

kernel32

user32

generic

meccha/EOSSDK-Win64-Shipping.of

ws2_32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

iphlpapi

crypt32

wintrust

secur32

winhttp

msvcp140

version

bcrypt

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-conio-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

generic

meccha/OnlineFix.ini

meccha/OnlineFix64.dll

kernel32

user32

shell32

ws2_32

wldap32

advapi32

generic

meccha/PenguinHotel-Win64-Shipping.exe

dxgi

dsound

ws2_32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

iphlpapi

setupapi

api-ms-win-core-synch-l1-2-0

dwmapi

imm32

uiautomationcore

crypt32

winhttp

opengl32

msvcp140

bcrypt

uxtheme

vcruntime140

vcruntime140_1

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0