Eden-Windows-v0.2.0-amd64-msvc-standard.zip
- SHA256 e32628034e8fd9653f110f73fd4f184659e05ec53da1b233f7f33d2fb65ef242
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eden-cli.exe
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
eden.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target Eden-Windows-v0.2.0-amd64-msvc-standard.zip
- Size 29.7MB
- Sample260701-vbza1scs3w
- SHA256 e32628034e8fd9653f110f73fd4f184659e05ec53da1b233f7f33d2fb65ef242
- MD5 f4d0ea21a2c3e51d895597699e45c21c
- SHA1 f3dd4b18040b9d7a3ff93c8b811952171518296b
- SHA512 5aeb716fb0bf49da5b2d2fd861241fe2fce45594cf0e360a44263c35a1614345a7fec54f6d06e61606bcbd00d6fb59ab00ef1208976cdf75037b79101781a4f5
- SSDEEP 786432:m/ukWPr0Aa5NEZS9HK3lx2S7HGciphcqL:QukWj0v4Oq3lV7HvifbL
- TLSH T13E6733C921F4BA4B90EDC70E52DBE92A3DCC1952D9B142AA45AD745E40D6320E1FEC3F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/eden-cli.exe unpack001/eden.exe
File Explorer
-
Eden-Windows-v0.2.0-amd64-msvc-standard.zip.zip 29.7MB
-
LICENSE.txt34KB
-
LICENSES/Apache-2.0.txt10KB
-
LICENSES/BSD-2-Clause.txt1KB
-
LICENSES/BSD-3-Clause.txt1KB
-
LICENSES/BSL-1.0.txt1KB
-
LICENSES/CC-BY-4.0.txt16KB
-
LICENSES/CC-BY-SA-3.0.txt21KB
-
LICENSES/CC0-1.0.txt6KB
-
LICENSES/GPL-2.0-or-later.txt16KB
-
LICENSES/GPL-3.0-or-later.txt33KB
-
LICENSES/LGPL-3.0-or-later.txt41KB
-
LICENSES/LLVM-exception.txt919B
-
LICENSES/MIT.txt1KB
-
LICENSES/MPL-2.0.txt16KB
-
LICENSES/Unlicense.txt1KB
-
LICENSES/WTFPL.txt432B
-
LICENSES/Zlib.txt838B
-
README.md4KB
-
eden-cli.exe.exe 28.8MB
-
eden.exe.exe 53.4MB
LICENSE.txt
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/Apache-2.0.txt
- SHA256 074e6e32c86a4c0ef8b3ed25b721ca23aca83df277cd88106ef7177c354615ff
- MD5 c846ebb396f8b174b10ded4771514fcc
- SHA1 be561fe6eb626c2566b9a6c0885554b4ee4e6b74
- SHA512 e70171654dbac4a36035a16857ff476fef9b7b54496c0125913484423ae0128879ce4236869ebd94bbfb9a5fa91220d81e5781fd152a21c4cdf8976da72b77e7
- SSDEEP 192:iaW/NVo4UTo1YEHFNnFE6GheQGC2B1CVnhOCoHqxLJbzjwokTGKH3Hv:iJhUk1Hfl9/GHbLNdkTGKH/
- TLSH T18422647F774803770AC20162BB8BA4DBF32E903D379A56645059C068236BD7583FB6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/BSD-2-Clause.txt
- SHA256 017b5ee48f680e82cba79141c7895a1f02b856df2512225f5c427fe36765ef0b
- MD5 9e16594a228301089d759b4f178db91f
- SHA1 48425c0d29eec28e01be25cae932f6dce8e4e278
- SHA512 64477fff2e5e8cdae45e39692ea46a7cce7b42bd3178b00e332fcdf3c93b82480191bb49bacdaab380dfe1b4b57e77960fa5511203192bb5a3b433075456b6e7
- TLSH T1E121409B12400FE65AE21B9136A5AEC4A0CDD03D3B236D04187EF385673B12EE8BB441
- MD5 SHA1 SHA512 TLSH
LICENSES/BSD-3-Clause.txt
- SHA256 3cf06aba3588c41c514f6946bb2d757b413ff6491647d474800f55edca75dcb4
- MD5 407426fcc1a243b7b2eff6e35c56aca9
- SHA1 7d742d725c74463f26afc2c6b7433dff4296a315
- SHA512 278e6df8f500543abbe8a30e20cf02d7dc90cea07d87e99d0c015410c1b399317b5dc8cef0c1a0a68e9c43170df2a96ba9cd0287f21a9b744d4755ba286f7992
- TLSH T14E31605722840BB749E21791766ABEC4B08CD03D3B236E051C6EF388977B42ED8BB491
- MD5 SHA1 SHA512 TLSH
LICENSES/BSL-1.0.txt
- SHA256 84c6ef3ea9e3254a54d0acf5d3e0c61ae011b8fef7dd6940591cf060e6380a8f
- MD5 4c66a2bad475d1a8f152667a4d0ada34
- SHA1 efdd1be8105f16a599ab99437c3054b76f5e6d0b
- SHA512 be57aca0c9e10d4b70aca43fd2b2b6af9f3668b9b31a4fa2df2c3ad9d0b1ddec3e2a28e5e7df9e07f3a83bff519824ba6d81246726365ab86c630e61bb4a6293
- TLSH T13121532D73A0073109E1171099596DD6F56F627BE3A66B88AC3CE2191332458D3FE890
- MD5 SHA1 SHA512 TLSH
LICENSES/CC-BY-4.0.txt
- SHA256 d557539df68e771cc1eedcc91d13f70fca930e508d11eedcafa4b15db49e3744
- MD5 9b33bbd06fb58995fb0e299cd38d1838
- SHA1 42d6494d51317826789dc2064c6440f0d4448376
- SHA512 4da5c72c8f14c8951e48804031b0443430393c6456806ad5de4b98674cd7076da5dbbc481db747eacda2d05aa66a49583ac36f8e28f8b2becf1f8d9ddd4da189
- SSDEEP 192:uumZNKL1wbfSskk+Msxc6g08fviCBbYD/72CjWHB+Uy6F:UkRwbaskdBe3YDzKx
- TLSH T10872006EB755137317C300A2AB5F90CBE626D12A366E4295385DC05C2FA287843BF69F
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/CC-BY-SA-3.0.txt
- SHA256 3f941b3b89cf7b8370ceb83cc76d2120d471b58735d8ca60238a751a48d7f72f
- MD5 13a870bd7f606a919042749a5f098ac2
- SHA1 fb41626a3005c2b6e14b8b3f5d9d0b19b5faaa51
- SHA512 2635a3dd63d647420f31346be165fe0481f9606b1676653b1201f7725e61c25c2daead810e12c3358724e24dd6b09327cd33a0ec93b3c0d47a629138e12c45e6
- SSDEEP 384:dF7O9MwSC58dJIokxhVdKDLvp75UM7qoFudXZF22L3Drv4k41WE:/O9JzrdQh6MI/FLzrh5E
- TLSH T1A5A2816EB70913731BC30166AA4B24DBE32ED03E366A55643458C0581FA7E7443FE6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/CC0-1.0.txt
- SHA256 a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499
- MD5 65d3616852dbf7b1a6d4b53b00626032
- SHA1 82da472f6d00dc5f0a651f33ebb320aa9c7b08d0
- SHA512 1eb4436f8d58766cbe99db97e5e8c0db8a706376afd291c337de1ba7a6b066d3791dc85ad034bdd54ea336bed6e6e8e7a037d8b04b2773c9c7517b9d9921d1fa
- SSDEEP 192:uk5MToKgfbxcjtv2sFtYH1Y1mzLKRL0WWJ:DAvg1cjT4ImKJ0t
- TLSH T163E1B7ABA308133616C60267511755C1F77B60783B1608A034BD81AC2B4FEB6527F7BF
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/GPL-2.0-or-later.txt
- SHA256 aaf135472f81c5b4a0dca9367e5bb5e9750032b5bebe5442b36e4c0a47430df3
- MD5 3d26203303a722dedc6bf909d95ba815
- SHA1 3cb34cfc72e87654683f2894299adf912d14b284
- SHA512 fb956f64a9d0647514d7bd868747c46842e9e3b10ad1b3ff8f18908b9986fded8928e55d3d23b43676c918e971f0d9b7f60f2fef8941fb867a43422c31bc4655
- SSDEEP 384:WFQcf4zRFSG6CQcSbVuT17BedAuMiaFPR:WGpmNAxqHUFPR
- TLSH T10972831E774543F205C302A16A4F68DBE32AD478B23E11616859C0AD236BE35C3BFAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/GPL-3.0-or-later.txt
- SHA256 b6a8bf63ae2c95b0aa256ee774680d7bd18f21f457da75466f7610b3b16acc4e
- MD5 8da5784ab1c72e63ac74971f88658166
- SHA1 e3bdbf20d43fc066a1b40a64d57d4ae5a31f177f
- SHA512 9ed9df87d5d34883dc313f51753cffa5bc45b708591e688dd0dc1d9f39377addc137f770f3c37805aeb2963385f063f3346456c8bcc61017065a3d443b756847
- SSDEEP 384:5EvHfz6yoO5Dbk/k6s1ClWlOk4IxiVtm7cRG+Xi5b5KTeOvw5mVRmVW113+mhT:5YLUO5uNWlOk4Ci27y1i5bWe9IRBzVhT
- TLSH T1FAF2755FB74413B2068202616B4FA8DEE31ED079737644A56869C15D23F2E3483BFAED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/LGPL-3.0-or-later.txt
- SHA256 996af0513df21f7496288951c41428a03c174e9e4a9d63665c57d670f845ccb1
- MD5 852ecadc0ac7e6f4d7144d5544a3815b
- SHA1 0b71159e19bef95069e18d17296291916e89b5cd
- SHA512 d1f337db40af74bffd48acb020f1ec0b6d4519f87dd5743a890d48b93fd3928b8e751cd8153fbf38f93c361aa2be3af3f15e5d372f8aec929377890d0ab6f75e
- SSDEEP 768:HdXyciC6YLUO5uNWlOk4Ci27y1i5bWe9IRBzVhT:H9ynC6fO5UkSM5b39y
- TLSH T1B913635FB74413B302C202616A4FA4CEE32EA079737645A56869C15D23B2D3493BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/LLVM-exception.txt
- SHA256 e34c58338bd89d43e709e226610d8f32b3e3c47f4ad9a99a8dc1d4ac7842488e
- MD5 f9e77a5df10adb29d0c627ae21d880fc
- SHA1 af7f77c39392e383bdf1a9f7ec70935a884bacee
- SHA512 4b658c758a70dc6b40a79a3d565317075d6e96cd3174b5edbfb5f9aef1c28343a9f5eb6e30d62b9da6bf30ddc125f2185b7a310073fabbaf9ed73ca7bc3acb50
- TLSH T11D11B12E750C637301D341816E9638C7D36EC868255470E49582C1740B37E35C1FBA9E
- MD5 SHA1 SHA512 TLSH
LICENSES/MIT.txt
- SHA256 b85dcd3e453d05982552c52b5fc9e0bdd6d23c6f8e844b984a88af32570b0cc0
- MD5 7dda4e90ded66ab88b86f76169f28663
- SHA1 adadb67a9875aeeac285309f1eab6e47d9ee08a7
- SHA512 381d3dee3d9c88a5bcc3bd6a0dd6b3086ccdd542b166e66b99b0dbdbfb10ccfd72f9ef5d66b91f6c16a9c8093278eefe1425748d967b5b7074ab6630ef95b297
- TLSH T1E411861DB260077318A6136055796CC5B26BB15F796F2784146DF344233A46CD5FBC40
- MD5 SHA1 SHA512 TLSH
LICENSES/MPL-2.0.txt
- SHA256 1f256ecad192880510e84ad60474eab7589218784b9a50bc7ceee34c2b91f1d5
- MD5 9741c346eef56131163e13b9db1241b3
- SHA1 d22157abc0fc0b4ae96380c09528e23cf77290a9
- SHA512 c1e3a0c8f5267fb5c0b65733bda037c62d914ed989bee0f510d8196b1029eec00d40f415ce1514a4996d420ba02d856d04db0915b64573ef4a36033cc5efb94e
- SSDEEP 384:na28R/9woeF6cXpMPWeXlUl5omyzQdBGYVSlVCqx2:nNw/6oj25kzQdBGXCqY
- TLSH T1B172537E3F492F330AC3C1626B4764DBE31AA03965691074705CB128279FE7447BF6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/Unlicense.txt
- SHA256 0bdebfeda07d45dada625ae1317c6f833186e798b171d0db640bcf32e92a8240
- MD5 e8e91b27aa96b3fd1efdf8af3b146284
- SHA1 433e20e05f040c80947c8bd2c2352cff051f7e37
- SHA512 ff3e13d40f70a7d1e8ad23643bc670b1c9c545d402688c5207395c8d2196776cf1e07742474751f4a6f92379dbf6ebc79e84d836854e93e0b95694512af39541
- TLSH T14021514A738017306A9517723990B5CDF34BA59E7C2B26842456E358032F8BCE1BFA29
- MD5 SHA1 SHA512 TLSH
LICENSES/WTFPL.txt
- SHA256 13d8825a59e5e546d41e8711405d0f335a9934362a47c04a3b4280fa7932dc4a
- MD5 7993e3336259bdb618ad5a1afc872165
- SHA1 aafa8341a781a7bfd3b390c03680d4cf2e474488
- SHA512 524151dc93bd8fb2c2f930bb86fd0a29bbc36d688ec2c28a6dfd73ac365fdd31442ffa83580133f73daa51ec9489600123c34cdb489e6b1ce11544952385cbe6
- TLSH T1FAE05CA1365143F432C5068AA89BF497230484D333EEBE56241E22CD0175A0DA2EB7AE
- MD5 SHA1 SHA512 TLSH
LICENSES/Zlib.txt
- SHA256 bfb1112d49db5b1daecdfef24bd7e2f3ea0bafb33aa67aa0ab51e2bf8407c03d
- MD5 f280d30a16e2d9de7ef0e99da64c78fd
- SHA1 714675b91f8ceca1fae6cc0af95caca8fe11886d
- SHA512 6896063c741dfb164f2fb09721518fc84fab5a4d64f2e7bb5644a4194e1ae60ffedcd2af11add6d0339aea34564d0f5610d0b9a831003a7485626e30f9e1e9e9
- TLSH T17801AF1B7BD9C37214E303FD3A89CD81B7176F55F34E57D9B06D80993BAA12502314A8
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 c535c26da4ce0659e99ed1c7fa892b1a0cd9cd5f3386f1671a8ed3f6121d8d4c
- MD5 2dd51bca67cd9734a38da06c70b663df
- SHA1 8833a849f2570969397282e7aa4366caa80d2c23
- SHA512 ef04dbaa59be71f5c8fe5756d87f2c2e15cea23d639a7582b7121f855b63f588751f56b525dca9617f869dbe5feaf074bf03eed9bca025a80e391253aff47746
- SSDEEP 96:JBIIMOBjCNTRdQGhILjy1A+aWJpjLpgJb:zI/YEddQGhMj+A+aWHjLm
- TLSH T14D81A5B7A0281A1797C31182E58B39EDE72FC1AE62AD5494F08C024F7315E59C73F19B
- MD5 SHA1 SHA512 SSDEEP TLSH
eden-cli.exe
- IMPHASH 387d58dffeb9a02128fd9027a9b502a2
- SHA256 e4ca83b815b069d6cb43cddc22a16b06ddd53eed5304300364be9b3ab06e4ab3
- MD5 240254d965411c6f6b3b66d77ec15204
- SHA1 f8a97701e78fbda5d2092aa3e3916ea44f607d72
- SHA512 8b025958d73f1bc38847f62f82a792fbbdd46e8d6cbfb6dc7a3f311d09352ea6bf5a5964116f5962591ba8e85bf4deea753d61a8fe00969d50649a3af8e92c7a
- SSDEEP 393216:e5JTYOByZvXP0oB1HcLKcG2+n1nIINPixluC:evcOUIeC
- TLSH T1AA678C13BA4314EDE4AAC4B483479627FA20749A1B35BADF069552352F7ABF42F3C704
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
19962820
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AreFileApisANSI
AttachConsole
CancelIo
CancelIoEx
CancelWaitableTimer
CloseHandle
CompareStringA
ConvertFiberToThread
ConvertThreadToFiberEx
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFile2
CreateFileA
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateNamedPipeA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateWaitableTimerA
DebugBreak
DeleteCriticalSection
DeleteFiber
DeviceIoControl
EnterCriticalSection
EnumResourceNamesW
ExitProcess
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileTime
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoEx
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatus
GetStdHandle
GetStringTypeExA
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetTickCount64
GetUserDefaultLCID
GetVersionExA
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MoveFileExW
MulDiv
MultiByteToWideChar
OutputDebugStringW
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
ResetEvent
SetConsoleMode
SetConsoleTextAttribute
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetLastError
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
shell32
CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteW
msvcp140
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??0facet@locale@std@@IEAA@_K@Z
??0ios_base@std@@IEAA@XZ
??0task_continuation_context@Concurrency@@AEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??1facet@locale@std@@MEAA@XZ
??1ios_base@std@@UEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Random_device@std@@YAIXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Winerror_map@std@@YAHH@Z
?_XGetLastError@std@@YAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xruntime_error@std@@YAXPEBD@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@ios_base@std@@QEAAXH@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?do_always_noconv@?$codecvt@_SDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@_UDU_Mbstatet@@@std@@MEBA_NXZ
?do_encoding@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_in@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
?do_in@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_U3AEAPEA_U@Z
?do_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_max_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_out@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_S1AEAPEB_SPEAD3AEAPEAD@Z
?do_out@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
?do_unshift@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?fail@ios_base@std@@QEBA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uncaught_exceptions@std@@YAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
_Cnd_broadcast
_Cnd_do_broadcast_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_unregister_at_thread_exit
_Cnd_wait
_Mtx_lock
_Mtx_trylock
_Mtx_unlock
_Query_perf_counter
_Query_perf_frequency
_Strcoll
_Strxfrm
_Thrd_detach
_Thrd_hardware_concurrency
_Thrd_id
_Thrd_join
_Thrd_yield
_Xtime_get_ticks
__crtLCMapStringA
msvcp140_atomic_wait
__std_atomic_notify_all_direct
__std_atomic_notify_one_direct
__std_atomic_wait_direct
__std_calloc_crt
__std_free_crt
__std_tzdb_delete_current_zone
__std_tzdb_delete_leap_seconds
__std_tzdb_delete_time_zones
__std_tzdb_get_current_zone
__std_tzdb_get_leap_seconds
__std_tzdb_get_time_zones
ntdll
NtDelayExecution
NtQueryTimerResolution
NtSetTimerResolution
RtlAddFunctionTable
RtlDeleteFunctionTable
VerSetConditionMask
msvcp140_codecvt_ids
?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_UDU_Mbstatet@@@std@@2V0locale@2@A
user32
AdjustWindowRectEx
AttachThreadInput
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyImage
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageW
DrawTextW
EmptyClipboard
EndDialog
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FillRect
FlashWindowEx
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageTime
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
IsIconic
KillTimer
LoadCursorW
LoadIconW
LoadStringA
MapVirtualKeyW
MessageBoxA
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
ole32
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
PropVariantClear
ws2_32
GetAddrInfoExCancel
GetAddrInfoExW
WSACleanup
WSAGetLastError
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressW
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
wsock32
ord1141
ord1142
gdi32
BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetICMProfileW
GetPixelFormat
GetTextExtentPoint32A
GetTextMetricsW
SelectObject
SetDeviceGammaRamp
SetPixelFormat
SwapBuffers
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetNumDevs
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutGetPosition
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
setupapi
CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceW
ReportEventW
iphlpapi
ConvertLengthToIpv4Mask
GetAdaptersAddresses
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
imm32
ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow
oleaut32
SysFreeString
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
crypt32
CertCloseStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertOpenSystemStoreW
CertVerifyCertificateChainPolicy
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsA
bcrypt
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
vcruntime140
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__RTtypeid
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
_purecall
memchr
memcmp
memcpy
memmove
memset
strchr
strrchr
strstr
wcsrchr
wcsstr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
_chsize_s
_fileno
_fseeki64
_get_osfhandle
_get_stream_buffer_pointers
_isatty
_set_fmode
_setmode
_wfopen
_wfopen_s
_wfsopen
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fputc
fputs
fread
freopen
fseek
fsetpos
ftell
fwrite
puts
setvbuf
ungetc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
_configthreadlocale
localeconv
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_aligned_realloc
_callnewh
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_beginthreadex
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_errno
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invoke_watson
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_abort_behavior
_set_app_type
_wassert
abort
exit
raise
signal
strerror
strerror_s
terminate
api-ms-win-crt-math-l1-1-0
__setusermatherr
_dclass
_dsign
_fdsign
acos
asin
atan
atan2
atan2f
atanf
ceil
ceilf
copysign
cos
cosf
cosh
exp
exp2
exp2f
fabs
floor
fmaf
fmod
frexp
hypot
ldexp
llrint
llround
log
log10f
log2
log2f
lrintf
lround
pow
powf
round
scalbn
sin
sinf
sinh
sqrt
sqrtf
tan
tanh
trunc
api-ms-win-crt-time-l1-1-0
_gmtime64
_localtime64
_mkgmtime64
_mktime64
_time64
clock
strftime
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_stat64i32
_unlock_file
_wstat64
api-ms-win-crt-string-l1-1-0
_memccpy
_strdup
_stricmp
_wcsdup
isalnum
isdigit
isspace
isxdigit
strcat_s
strcmp
strcpy
strcpy_s
strcspn
strlen
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
tolower
toupper
wcscmp
wcscpy
wcslen
wcsncpy_s
api-ms-win-crt-convert-l1-1-0
atoi
strtod
strtof
strtol
strtoll
strtoul
strtoull
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
_byteswap_uint64
_byteswap_ulong
abs
bsearch
llabs
qsort
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
19.0MB
Virtual Size
19.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
7.8MB
Virtual Size
7.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
455KB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
787KB
Virtual Size
787KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
559KB
Virtual Size
558KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
126KB
Virtual Size
126KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
eden.exe
- IMPHASH ac89978e37e71f04c19adee08a158d79
- SHA256 5f675f6745b46d1977757a0568ab7ed30d62bfcb802690c4ddb95cba12efe394
- MD5 e10561f2a680da01ad26406a55d384a9
- SHA1 54a7e00af38b5b215d89e6529fe79d3b01d78e47
- SHA512 ac435e99b5aba92d59ce5e67af246d2c8376fee7d235561a40c694841df09502184c3110f875646d7b74582f88373b2ad57956d02aa0cfd17ce23baa25f282b0
- SSDEEP 393216:D8GJwSsDpjhMO14vIARUjoUv2NKFY98+BS1jBiIr0HpdnT8Gl/RTOXgmG0KUmokC:YuYrMOyk1hJJkQ+aKTg
- TLSH T1CFC79D13B6A614AAE4BBC470C7578527EB71788A1B34AADF029462752F37BF05E3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
34622292
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
ws2_32
GetAddrInfoExCancel
GetAddrInfoExW
WSAAsyncSelect
WSACleanup
WSAGetLastError
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressW
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
dwmapi
DwmDefWindowProc
DwmEnableBlurBehindWindow
DwmExtendFrameIntoClientArea
DwmSetWindowAttribute
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AllocConsole
AreFileApisANSI
AttachConsole
CancelIo
CancelIoEx
CancelWaitableTimer
CheckRemoteDebuggerPresent
CloseHandle
CompareStringA
CompareStringEx
CompareStringW
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFile2
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFile2
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateProcessA
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
CreateSymbolicLinkW
CreateThread
CreateWaitableTimerA
DebugBreak
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceNamesW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeConsole
FreeLibrary
GetACP
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoEx
GetLocaleInfoW
GetLogicalDrives
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatus
GetStartupInfoW
GetStdHandle
GetStringTypeExA
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadPriority
GetTickCount
GetTickCount64
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
GetVersionExA
GetVolumeInformationW
GetVolumePathNamesForVolumeNameW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
K32GetModuleFileNameExW
LCMapStringA
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
LocaleNameToLCID
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserAPC
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlDeleteFunctionTable
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetThreadDescription
SetThreadExecutionState
SetThreadInformation
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualFreeEx
VirtualProtect
VirtualQuery
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrcmpW
lstrlenW
crypt32
CertCloseStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertOpenSystemStoreW
CertVerifyCertificateChainPolicy
msvcp140
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??0facet@locale@std@@IEAA@_K@Z
??0ios_base@std@@IEAA@XZ
??0task_continuation_context@Concurrency@@AEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??1facet@locale@std@@MEAA@XZ
??1ios_base@std@@UEAA@XZ
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?_Incref@facet@locale@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?_Random_device@std@@YAIXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Winerror_map@std@@YAHH@Z
?_XGetLastError@std@@YAXXZ
?_Xbad_alloc@std@@YAXXZ
?_Xbad_function_call@std@@YAXXZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?_Xruntime_error@std@@YAXPEBD@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?classic@locale@std@@SAAEBV12@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@ios_base@std@@QEAAXH@Z
?do_always_noconv@?$codecvt@_SDU_Mbstatet@@@std@@MEBA_NXZ
?do_always_noconv@?$codecvt@_UDU_Mbstatet@@@std@@MEBA_NXZ
?do_encoding@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_encoding@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_in@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_S3AEAPEA_S@Z
?do_in@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_U3AEAPEA_U@Z
?do_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEBD1_K@Z
?do_max_length@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHXZ
?do_max_length@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHXZ
?do_out@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_S1AEAPEB_SPEAD3AEAPEAD@Z
?do_out@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEB_U1AEAPEB_UPEAD3AEAPEAD@Z
?do_unshift@?$codecvt@_SDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?do_unshift@?$codecvt@_UDU_Mbstatet@@@std@@MEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?eof@ios_base@std@@QEBA_NXZ
?fail@ios_base@std@@QEBA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?get@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHPEAUtm@@PEBD4@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?good@ios_base@std@@QEBA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$numpunct@D@std@@2V0locale@2@A
?id@?$time_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?swap@?$basic_istream@DU?$char_traits@D@std@@@std@@IEAAXAEAV12@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uncaught_exception@std@@YA_NXZ
?uncaught_exceptions@std@@YAHXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
_Cnd_broadcast
_Cnd_do_broadcast_at_thread_exit
_Cnd_register_at_thread_exit
_Cnd_signal
_Cnd_unregister_at_thread_exit
_Cnd_wait
_Mtx_lock
_Mtx_trylock
_Mtx_unlock
_Query_perf_counter
_Query_perf_frequency
_Strcoll
_Strxfrm
_Thrd_detach
_Thrd_hardware_concurrency
_Thrd_id
_Thrd_join
_Thrd_yield
_Xtime_get_ticks
__crtLCMapStringA
msvcp140_atomic_wait
__std_atomic_notify_all_direct
__std_atomic_notify_one_direct
__std_atomic_wait_direct
__std_calloc_crt
__std_free_crt
__std_tzdb_delete_current_zone
__std_tzdb_delete_leap_seconds
__std_tzdb_delete_time_zones
__std_tzdb_get_current_zone
__std_tzdb_get_leap_seconds
__std_tzdb_get_time_zones
shell32
CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHCreateItemFromIDList
SHCreateItemFromParsingName
ord6
SHGetFileInfoW
SHGetFolderPathW
ord727
SHGetKnownFolderIDList
SHGetKnownFolderPath
SHGetMalloc
SHGetPathFromIDListW
SHGetStockIconInfo
ShellExecuteW
Shell_NotifyIconGetRect
Shell_NotifyIconW
ole32
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleUninitialize
PropVariantClear
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2
ntdll
NtDelayExecution
NtQueryTimerResolution
NtSetTimerResolution
msvcp140_codecvt_ids
?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
?id@?$codecvt@_UDU_Mbstatet@@@std@@2V0locale@2@A
iphlpapi
ConvertLengthToIpv4Mask
GetAdaptersAddresses
user32
AddClipboardFormatListener
AdjustWindowRectEx
AdjustWindowRectExForDpi
AppendMenuW
AreDpiAwarenessContextsEqual
AttachThreadInput
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
ChangeDisplaySettingsExW
ChangeWindowMessageFilter
ChangeWindowMessageFilterEx
CharPrevExA
ChildWindowFromPointEx
ClientToScreen
ClipCursor
CloseClipboard
CopyImage
CreateCaret
CreateCursor
CreateIconFromResource
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageW
DisplayConfigGetDeviceInfo
DrawIconEx
DrawMenuBar
DrawTextW
EmptyClipboard
EnableMenuItem
EnableNonClientDpiScaling
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FillRect
FindWindowA
FlashWindowEx
GetAncestor
GetAsyncKeyState
GetCapture
GetCaretBlinkTime
GetClassInfoExW
GetClassInfoW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardFormatNameW
GetClipboardSequenceNumber
GetCursor
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDisplayConfigBufferSizes
GetDlgItem
GetDoubleClickTime
GetDpiForWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetMenu
GetMenuItemInfoW
GetMessageExtraInfo
GetMessageTime
GetMessageW
GetMonitorInfoW
GetParent
GetPointerDeviceRects
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerInfo
GetPointerPenInfo
GetPointerPenInfoHistory
GetPointerType
GetProcessWindowStation
GetPropW
GetQueueStatus
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSysColor
GetSystemMenu
GetSystemMetrics
GetSystemMetricsForDpi
GetThreadDpiAwarenessContext
GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowDpiAwarenessContext
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HiliteMenuItem
InsertMenuW
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
IsHungAppWindow
IsIconic
IsTouchWindow
IsValidDpiAwarenessContext
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
LoadStringA
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
QueryDisplayConfig
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterPowerSettingNotification
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveClipboardFormatListener
RemoveMenu
RemovePropW
ScreenToClient
SendInput
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetClipboardViewer
SetCoalescableTimer
SetCursor
SetCursorPos
SetDisplayAutoRotationPreferences
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetProcessDpiAwarenessContext
SetPropW
SetTimer
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowWindow
SkipPointerFrameMessages
SystemParametersInfoA
SystemParametersInfoForDpi
SystemParametersInfoW
ToAscii
ToUnicode
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
UnregisterPowerSettingNotification
UnregisterTouchWindow
UpdateLayeredWindow
UpdateLayeredWindowIndirect
ValidateRect
WindowFromPoint
msvcp140_1
_Aligned_get_default_resource
advapi32
AddAccessAllowedAceEx
AddAccessDeniedAceEx
AllocateAndInitializeSid
CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
DuplicateToken
FreeSid
GetLengthSid
GetNamedSecurityInfoW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SystemFunction036
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
wsock32
ord1141
ord1142
winmm
PlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetNumDevs
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutGetPosition
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
gdi32
AddFontMemResourceEx
AddFontResourceExW
BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesExW
ExtTextOutW
GdiFlush
GetBitmapBits
GetCharABCWidthsFloatW
GetCharABCWidthsI
GetCharABCWidthsW
GetCharWidthI
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetFontData
GetGlyphOutlineW
GetICMProfileW
GetObjectW
GetOutlineTextMetricsW
GetPixelFormat
GetRegionData
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
OffsetRgn
RemoveFontMemResourceEx
RemoveFontResourceExW
SelectClipRgn
SelectObject
SetBkMode
SetDeviceGammaRamp
SetGraphicsMode
SetLayout
SetPixelFormat
SetTextAlign
SetTextColor
SetWorldTransform
SwapBuffers
uxtheme
CloseThemeData
DrawThemeBackground
ord47
DrawThemeTextEx
GetCurrentThemeName
GetThemeBackgroundRegion
GetThemeBool
GetThemeColor
GetThemeEnumValue
GetThemeInt
GetThemeMargins
GetThemePartSize
GetThemePropertyOrigin
GetThemeSysFont
GetThemeTransitionDuration
IsAppThemed
IsThemeActive
IsThemeBackgroundPartiallyTransparent
OpenThemeData
SetWindowTheme
SetWindowThemeAttribute
netapi32
NetApiBufferFree
NetShareEnum
authz
AuthzAccessCheck
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeContextFromSid
AuthzInitializeContextFromToken
AuthzInitializeResourceManager
userenv
GetUserProfileDirectoryW
dxgi
CreateDXGIFactory2
dwrite
DWriteCreateFactory
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
setupapi
CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiOpenDeviceInterfaceW
d3d11
D3D11CreateDevice
d3d12
ord101
ord102
D3D12SerializeVersionedRootSignature
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsA
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
d3d9
Direct3DCreate9
api-ms-win-shcore-scaling-l1-1-1
GetDpiForMonitor
shlwapi
AssocQueryStringW
imm32
ImmAssociateContext
ImmAssociateContextEx
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetDefaultIMEWnd
ImmGetIMEFileNameA
ImmGetOpenStatus
ImmGetVirtualKey
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow
uiautomationcore
UiaClientsAreListening
UiaHostProviderFromHwnd
UiaRaiseAutomationEvent
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseNotificationEvent
UiaReturnRawElementProvider
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SysFreeString
VariantClear
VariantInit
comdlg32
GetOpenFileNameW
GetSaveFileNameW
bcrypt
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
vcruntime140
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__RTDynamicCast
__RTtypeid
__current_exception
__current_exception_context
__intrinsic_setjmp
__std_exception_copy
__std_exception_destroy
__std_terminate
__std_type_info_compare
_purecall
longjmp
memchr
memcmp
memcpy
memmove
memset
strchr
strrchr
strstr
wcsrchr
wcsstr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
__stdio_common_vswprintf
__stdio_common_vswprintf_s
_chsize_s
_close
_fileno
_fseeki64
_ftelli64
_get_osfhandle
_get_stream_buffer_pointers
_isatty
_lseeki64
_open
_open_osfhandle
_read
_set_fmode
_setmaxstdio
_setmode
_wfopen
_wfopen_s
_wfsopen
_wopen
_write
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fputc
fputs
fread
freopen_s
fseek
fsetpos
ftell
fwrite
puts
setvbuf
ungetc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___lc_collate_cp_func
___lc_locale_name_func
_configthreadlocale
localeconv
setlocale
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_beginthreadex
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_endthreadex
_errno
_exit
_get_narrow_winmain_command_line
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invoke_watson
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_abort_behavior
_set_app_type
_wassert
abort
exit
raise
signal
strerror
strerror_s
system
terminate
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_aligned_realloc
_callnewh
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
_dclass
_dsign
_dtest
_fdsign
_fdtest
_hypotf
acos
acosf
asin
atan
atan2
atan2f
atanf
ceil
ceilf
copysign
cos
cosf
cosh
exp
exp2
exp2f
expf
fabs
floor
floorf
fmaf
fmod
frexp
hypot
ldexp
llrint
llround
log
log10
log10f
log2
log2f
logf
lrintf
lround
pow
powf
round
scalbn
sin
sinf
sinh
sqrt
sqrtf
tan
tanf
tanh
trunc
api-ms-win-crt-time-l1-1-0
_get_tzname
_gmtime64
_localtime64
_localtime64_s
_mkgmtime64
_mktime64
_time64
_tzset
clock
strftime
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_stat64i32
_unlock_file
_waccess
_wchmod
_wstat64
api-ms-win-crt-string-l1-1-0
_memccpy
_strdup
_stricmp
_wcsdup
isalnum
isdigit
isspace
isxdigit
strcat
strcat_s
strcmp
strcpy
strcpy_s
strcspn
strlen
strncat
strncmp
strncpy
strncpy_s
strnlen
strpbrk
strspn
strtok
tolower
toupper
wcscmp
wcscpy
wcslen
wcsncmp
wcsncpy_s
api-ms-win-crt-environment-l1-1-0
_wgetenv_s
getenv
getenv_s
api-ms-win-crt-convert-l1-1-0
atoi
strtod
strtof
strtol
strtoll
strtoul
strtoull
wcstombs
api-ms-win-crt-utility-l1-1-0
_byteswap_uint64
_byteswap_ulong
_byteswap_ushort
_rotl
_rotl64
abs
bsearch
llabs
qsort
rand
rand_s
srand
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
Name
.text
Size
33.1MB
Virtual Size
33.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
17.5MB
Virtual Size
17.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
731KB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.3MB
Virtual Size
1.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmimed
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
559KB
Virtual Size
558KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
233KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ