v1.7.5.rar
- SHA256 0c36adc4095704905de77be3841bf27506a18d96721bad7be5fa6c4116be332c
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
v1.7.5.rar
Resource
win10v2004-20260513-en
windows10-2004-x64
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
v1.7.5.rar
Resource
win11ltsc2024-20260629-en
windows11-ltsc_2024-x64
4 signatures
900 seconds
General
- Target v1.7.5.rar
- Size 29.3MB
- Sample260706-rewgraf19v
- SHA256 0c36adc4095704905de77be3841bf27506a18d96721bad7be5fa6c4116be332c
- MD5 24602ed5cad97061499967172306ab31
- SHA1 5135bd212dc6b55079f9feae1934cd9d02a59ab5
- SHA512 6b09b43eb2861bc80232a74ed94bcf9315ba239cc360f77cae5f2922637456cc13a275380a756d862260a95b768bb28ee88e12733a34e6d8f48bb40e7f0473e3
- SSDEEP 786432:AZMyuVTiJ0i+BXzmzV55BJpAaNxETZZycFRwLciP2FJahb18:by0TiJ0i+BXzsAa3EucFR8gs58
- TLSH T11E673376EE9B8F85B42A19BCDB94F70C9A352C10FA5D094E3111F1E6089FE118F763A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/v1.7.5/Exitlag.dll unpack001/v1.7.5/exitloader.exe
File Explorer
-
v1.7.5.rar.rar 29.3MB
-
v1.7.5/CMD.txt31B
-
v1.7.5/Exitlag.dll.dll 493KB
-
v1.7.5/auto_signup_updated.py10KB
-
v1.7.5/exitloader.exe.exe 497KB
-
v1.7.5/python-3.14.6-amd64.exe.exe 29.3MB
-
v1.7.5/requirements.txt50B
v1.7.5/CMD.txt
- SHA256 f634394e6be6cb445c6bc8191ae89e2f0de21f2214dc16b9cd2e080ad660b1dc
- MD5 ed479ebacddedec77a46c27cc0e6a94d
- SHA1 7b1855527317d0124ebeb726defa838d54e9b663
- SHA512 41fd6db1b319fceac0d1796b4183cec97e40ddd6ac919cce89bbd531e4e0153e7d607732177359d4e2719170b495cb70cefac806d3c90975cb85eab10bcd8fda
- MD5 SHA1 SHA512
v1.7.5/Exitlag.dll
- IMPHASH 0806b461f99c0a17052b993124784789
- SHA256 1aa42f8b571b4295965e9ac8da929bb96a02f39304e0c8979621dc2b7b9fa9b9
- MD5 8fcacf9b6b13362ba68e7e47645bff8b
- SHA1 a6059c995e8417c8a1ce9a25d7f20f0018ec2b3c
- SHA512 85421814bcc514f8f4d996f58d33493abc1bda07e3601b685b01349924e4c4a520acea7bae60c3f962fde6fa1ce3b4aa22e2de6ef4a2f525e651e46eac249f9a
- SSDEEP 6144:Q7XqOKjrVC6xH2R0NvNhHDyjEMcU03duX/Yf+sFq:0qO8VCmH2R0Nv3HLUGOYc
- TLSH T1F6B47D1673A503F5E0B7D139CA568E86F6B2B8150B20A7C703E496B52F237E1563F326
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
14088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\wrld\source\repos\exitdll - Copy\x64\Release\exitdll.pdb
kernel32
CreateFileW
ReadFile
CloseHandle
Sleep
CreateThread
DisableThreadLibraryCalls
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WriteConsoleW
OutputDebugStringW
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
RtlPcToFileHeader
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetCurrentThread
GetStdHandle
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetTempPathW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
IsThreadAFiber
InitializeCriticalSectionEx
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
SetConsoleCtrlHandler
GetFileSizeEx
SetFilePointerEx
GetStringTypeW
SetStdHandle
HeapSize
FlushFileBuffers
RtlUnwind
oleaut32
SysFreeString
SysAllocString
shell32
SHGetFolderPathW
Name
.text
Size
388KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
77KB
Virtual Size
76KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=137, id=261, version=33145,
count=12, id=260, version=33145,
count=8, id=259, version=33145,
count=9, id=259, version=35207,
count=14, id=260, version=35207,
count=32, id=261, version=35207,
count=4, id=264, version=35224,
count=7, id=257, version=33145,
count=114, id=1, productName=Unmarked objects,
count=2, id=261, version=35224,
count=1, id=255, version=35224,
count=1, id=258, version=35224,
v1.7.5/auto_signup_updated.py
- SHA256 ab43d25119556159d5d372fb181418913bd21903203de4516bd76ac42f459da4
- MD5 46342d907f2554390332f39ec9cf0ead
- SHA1 fa8b85d231fb4afadd453b9be9105649d6d236c8
- SHA512 e272944651f4b230aeb4947c86297d40aa5441fca2283b936c7498eaa34910af89389b2868e1e5e65309bb20c7aff9bd17e4043c64e8d2da7e2080a2e81c2a5b
- SSDEEP 192:mDTo6csobflFbtUXagQfTShaQYEcgt6ivqLLF/xej+i:mKtj1TYa8cESLR/xOv
- TLSH T19522303268451C90B353CD1C98B64C91292ABD23FB663864B5ACB2D45FFCC36CDA19BD
- MD5 SHA1 SHA512 SSDEEP TLSH
v1.7.5/exitloader.exe
- IMPHASH 3a32bb98ecb82e74443055614ef0e7b0
- SHA256 6bf864d78758b19d855291bf6e9425de87b3971bd19780707399b2da228045ab
- MD5 fe58b8562534a02c4fb479f646e71e28
- SHA1 2c876ae15d44cbbbea540174d1a872e11966bf4d
- SHA512 a7019115b8fd5371a767cfa8754df3837b4a2847d354aa1a1e09bc29c01475269fea7e0e9a2c434a0b1302e5df706f36d07927a7b2882fde2ae9ea93b7df4a1a
- SSDEEP 3072:kP5WfGOMiRwUM4WOKHsEM9GvMWbNPZYC1zN6zFq5i:kPkfGWi49KHi6tZN
- TLSH T160B43A26E949D59AD1854DF68E72CCA28772BF564FAC1A5B37F13FAE0E342C04A14D03
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
46032
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
GetTokenInformation
CryptReleaseContext
CheckTokenMembership
FreeSid
OpenProcessToken
AllocateAndInitializeSid
CryptGenRandom
CryptAcquireContextW
kernel32
FillConsoleOutputCharacterA
FindFirstFileW
WriteProcessMemory
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
EnterCriticalSection
FindNextFileW
GetCurrentProcess
SetConsoleScreenBufferSize
GetStdHandle
WriteConsoleA
WriteFile
RemoveDirectoryW
GetModuleFileNameW
SetConsoleWindowInfo
GetProcessId
LeaveCriticalSection
InitializeCriticalSection
GetEnvironmentVariableW
FindClose
WaitForSingleObject
CreateFileW
GetFileAttributesW
ReadFile
GetModuleHandleA
OpenProcess
MultiByteToWideChar
Sleep
GlobalAlloc
DeleteFileW
CloseHandle
CreateThread
K32EnumProcesses
FillConsoleOutputAttribute
GetProcAddress
GlobalLock
VirtualAllocEx
GetFileSize
DeleteCriticalSection
WideCharToMultiByte
GetConsoleWindow
CreateRemoteThread
QueryFullProcessImageNameW
VirtualFreeEx
SetConsoleCursorPosition
GlobalUnlock
RtlLookupFunctionEntry
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
CreateDirectoryW
ReadConsoleA
IsProcessorFeaturePresent
TerminateProcess
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlCaptureContext
user32
CloseClipboard
EmptyClipboard
OpenClipboard
ShowWindow
SetClipboardData
SetForegroundWindow
BringWindowToTop
comdlg32
GetOpenFileNameW
shell32
ShellExecuteExW
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
__current_exception_context
__current_exception
__std_exception_destroy
_CxxThrowException
__C_specific_handler
memset
memcpy
memcmp
memmove
wcsrchr
api-ms-win-crt-runtime-l1-1-0
_cexit
_initialize_onexit_table
_register_onexit_function
_c_exit
terminate
_wsystem
system
__p___argv
_invoke_watson
_seh_filter_exe
_crt_atexit
__p___argc
_set_app_type
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_register_thread_local_exe_atexit_callback
api-ms-win-crt-string-l1-1-0
_wcsicmp
strcmp
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Name
.text
Size
45KB
Virtual Size
45KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
423KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
108B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=12, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35207,
count=10, id=260, version=35207,
count=27, id=261, version=35207,
count=6, id=257, version=35207,
count=11, id=257, version=33145,
count=131, id=1, productName=Unmarked objects,
count=1, id=265, version=35224,
count=1, id=255, version=35224,
count=1, id=151,
count=1, id=258, version=35224,
v1.7.5/python-3.14.6-amd64.exe
- IMPHASH e277f1464e7729ad9df5ec047611738a
- SHA256 14b3e9a710a3fcf0bd9b55ab6b60412bd91227563f813fc49040cabc0209e0bd
- MD5 6622da2223676eb6f258a5a617f57970
- SHA1 f95758c1fe6f75cc33d8e65640b074676ab88cb3
- SHA512 9192887db69ebe72936e739d443636bba101bfeca36c83f85cee14d4b65955fdc85ef9b7bf3c75e8f21194986b090089dd94268910253f62d0e97172fdfde231
- SSDEEP 786432:cqrSKIg6z2upXzHn/i2S9ntK7neL+nOq80pKhTanalwPpfoPQ:lOKKFX22SP4eL+nR80pKhTMUwRfoPQ
- TLSH T1F5673333A4A68233E2F11132B614B9747D7CED396700C9BDA3C8F85816394D3677B699
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
11:48:8e:f4:c5:ca:36:cf:59:23:3e:c6:ed:02:e7:24:48:10:81:ae:7b:ba:4e:54:f1:bb:1c:bb:6a:d3:3f:60
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
Chains
Jun 10, 2026
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Serial Number
54:98:d2:d1:d4:5b:19:95:48:13:79:c8:11:c0:87:99
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Timespan
Apr 16, 2020 - Apr 16, 2045
Subject
CN=Python Software Foundation,O=Python Software Foundation,L=Beaverton,ST=Oregon,C=US
Serial Number
33:00:01:c8:85:97:81:db:fe:9e:90:0f:a2:00:00:00:01:c8:85
Issuer
CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Jun 9, 2026 - Jun 12, 2026
Subject
CN=Microsoft ID Verified CS EOC CA 04,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:17:27:45:09:0b:8b:87:af:c6:00:00:00:00:00:17
Issuer
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Mar 26, 2026 - Mar 26, 2031
Subject
CN=Microsoft ID Verified Code Signing PCA 2021,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:07:87:a3:34:a3:7b:a5:8e:1c:00:00:00:00:00:07
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Apr 1, 2021 - Apr 1, 2036
Subject
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Serial Number
33:00:00:00:05:e5:cf:0f:ff:66:2e:c9:87:00:00:00:00:00:05
Issuer
CN=Microsoft Identity Verification Root Certificate Authority 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Nov 19, 2020 - Nov 19, 2035
Subject
CN=Microsoft Public RSA Time Stamping Authority,OU=Microsoft America Operations+OU=nShield TSS ESN:7A00-05E0-D947,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US
Serial Number
33:00:00:00:58:65:cd:eb:3f:a1:d7:fc:d2:00:00:00:00:00:58
Issuer
CN=Microsoft Public RSA Timestamping CA 2020,O=Microsoft Corporation,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 23, 2025 - Oct 22, 2026
Minor OS version
0
Major OS version
6
Entry point
197349
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
PDB paths
C:\agent\_work\36\s\wix\build\ship\x86\burn.pdb
advapi32
RegCloseKey
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
InitiateSystemShutdownExW
GetUserNameW
CloseEventLog
OpenEventLogW
ReportEventW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateWellKnownSid
InitializeAcl
DecryptFileW
SetEntriesInAclW
ChangeServiceConfigW
CloseServiceHandle
ControlService
OpenSCManagerW
OpenServiceW
QueryServiceStatus
SetNamedSecurityInfoW
CheckTokenMembership
AllocateAndInitializeSid
SetEntriesInAclA
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetTokenInformation
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
QueryServiceConfigW
user32
PeekMessageW
PostMessageW
IsWindow
WaitForInputIdle
PostQuitMessage
GetMessageW
TranslateMessage
MsgWaitForMultipleObjects
PostThreadMessageW
GetMonitorInfoW
MonitorFromPoint
IsDialogMessageW
LoadCursorW
LoadBitmapW
SetWindowLongW
GetWindowLongW
GetCursorPos
MessageBoxW
CreateWindowExW
UnregisterClassW
RegisterClassW
DefWindowProcW
DispatchMessageW
oleaut32
VariantInit
SysAllocString
VariantClear
SysFreeString
gdi32
DeleteDC
DeleteObject
SelectObject
StretchBlt
GetObjectW
CreateCompatibleDC
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteExW
ole32
CoUninitialize
CoInitializeEx
CoInitialize
StringFromGUID2
CoCreateInstance
CoTaskMemFree
CoInitializeSecurity
CLSIDFromProgID
kernel32
GetFileType
GetStdHandle
EncodePointer
InitializeCriticalSectionAndSpinCount
SetLastError
RtlUnwind
CreateFileW
CloseHandle
ExitProcess
CreateFileA
SetFilePointer
WriteFile
GetLastError
GetCurrentProcessId
GetSystemDirectoryW
LoadLibraryW
lstrlenA
HeapSetInformation
GetModuleHandleW
GetProcAddress
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetTempFileNameW
RemoveDirectoryW
SetFileAttributesW
GetTempPathW
MoveFileExW
FormatMessageW
lstrlenW
MultiByteToWideChar
IsValidCodePage
LCMapStringW
ExpandEnvironmentStringsW
GetFileSizeEx
GetFullPathNameW
ReadFile
SetFilePointerEx
SetFileTime
Sleep
GlobalAlloc
GlobalFree
CopyFileW
GetLocalTime
GetModuleFileNameW
CompareStringW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
FreeLibrary
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
GetCurrentProcess
FindFirstFileExW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateProcessW
GetVersionExW
VerSetConditionMask
GetVolumePathNameW
EnterCriticalSection
LeaveCriticalSection
GetSystemTime
GetWindowsDirectoryW
GetNativeSystemInfo
GetSystemWow64DirectoryW
GetModuleHandleExW
GetComputerNameW
VerifyVersionInfoW
GetDateFormatW
GetUserDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLangID
GetStringTypeW
DuplicateHandle
LoadLibraryExW
CreateEventW
ProcessIdToSessionId
ConnectNamedPipe
SetNamedPipeHandleState
CreateNamedPipeW
WaitForSingleObject
GetProcessId
OpenProcess
CreateThread
GetExitCodeThread
SetEvent
WaitForMultipleObjects
LocalFileTimeToFileTime
SetEndOfFile
ResetEvent
DosDateTimeToFileTime
CompareStringA
GetExitCodeProcess
SetThreadExecutionState
CopyFileExW
CreateMutexW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetThreadLocale
GetStartupInfoW
IsDebuggerPresent
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
DecodePointer
WriteConsoleW
GetModuleHandleA
VirtualAlloc
VirtualFree
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetCurrentThreadId
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
RaiseException
GetTimeZoneInformation
rpcrt4
UuidCreate
Name
.text
Size
307KB
Virtual Size
306KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
126KB
Virtual Size
125KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.wixburn
Size
512B
Virtual Size
56B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
89KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
16KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=259, version=28900,
count=145, id=261, version=28900,
count=19, id=260, version=26706,
count=19, id=259, version=26706,
count=44, id=261, version=26706,
count=23, id=260, version=28900,
count=2, id=262, version=28900,
count=17, id=257, version=28900,
count=334, id=1, productName=Unmarked objects,
count=75, id=261, version=27051,
count=1, id=255, version=27051,
count=2, id=151,
count=1, id=258, version=27051,
v1.7.5/requirements.txt
- SHA256 1304c882058fe13339c20f0c43bda1e63cb55c67e0f6e75ae9a5cc45189d93a4
- MD5 191d72a59b2611988a309a06a18cf34b
- SHA1 4b4d793a858c8bbb6f71402647a8d4bf6ca24716
- SHA512 f30229a166d1bd4d70baaa3b9f505bc5020a2061d9d8b2feaf41c10417c38770314691e19682b9fa70a0fd2d65ffc7850f52cab781e17d719b1c8f3513369d64
- TLSH T1BA900209414984C08D101D430C88829201176F1016326868500430DC240004C6786319
- MD5 SHA1 SHA512 TLSH