2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat

Sharing

Copy URL Twitter E-mail

General

Target
2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat
Size 2.3MB
Sample260803-c3k9csbb27
SHA256 29d20f84600d0db2e04613e48bdba56c8d47e373138dff65125db1691bdea325
MD5 6581c687723961f026bdf0cddf7a2731
SHA1 fc16b4de55bc95da3f22fda3638b14b9a8702cbe
SHA512 728bc7fa48754ec07e600633429058f054643c3d8fa0f7d1a1ac1755f79ab3efab3f79f46c5ff38f7d58a4e916af867b5802674b569caad642ae7119d605eab3
SSDEEP 49152:h3Zpzuy6HzAB3r1Nwa6qFUQ+i5pDUtfGXnXrDMWnZEilpQJSPYG:VDKAZyvGnEiln
TLSH
T1DFB59E5ABB6841F4C0E6C079C9829A8BFBB174154F319BDF01A9469E1F376E18E3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat

File Explorer

2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat

.exe 2.3MB

2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat

IMPHASH 65256f42b0bb57e4abc83db65c7f4701
SHA256 29d20f84600d0db2e04613e48bdba56c8d47e373138dff65125db1691bdea325
MD5 6581c687723961f026bdf0cddf7a2731
SHA1 fc16b4de55bc95da3f22fda3638b14b9a8702cbe
SHA512 728bc7fa48754ec07e600633429058f054643c3d8fa0f7d1a1ac1755f79ab3efab3f79f46c5ff38f7d58a4e916af867b5802674b569caad642ae7119d605eab3
SSDEEP 49152:h3Zpzuy6HzAB3r1Nwa6qFUQ+i5pDUtfGXnXrDMWnZEilpQJSPYG:VDKAZyvGnEiln
TLSH
T1DFB59E5ABB6841F4C0E6C079C9829A8BFBB174154F319BDF01A9469E1F376E18E3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

845388

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\qba1\workspace\6642\SSE_Storage_Middleware\HfcDisableService\HfcDisableService\output\Release\x64\HfcDisableService.pdb

setupapi

CM_Locate_DevNodeA CM_Get_Device_ID_List_SizeW CM_Reenumerate_DevNode SetupDiRemoveDevice CM_Get_Device_ID_ListW SetupDiEnumDeviceInterfaces SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList CM_Get_DevNode_Status SetupDiGetClassDevsA SetupDiGetDeviceInterfaceDetailA CM_Locate_DevNodeW

api-ms-win-service-management-l1-1-0

OpenServiceW OpenSCManagerW CloseServiceHandle StartServiceW

api-ms-win-service-management-l2-1-0

ChangeServiceConfigW QueryServiceStatusEx

api-ms-win-core-synch-l1-1-0

InitializeCriticalSection TryEnterCriticalSection WaitForSingleObjectEx OpenEventA InitializeCriticalSectionAndSpinCount CreateMutexA ReleaseMutex DeleteCriticalSection CreateEventA LeaveCriticalSection EnterCriticalSection CreateEventW ResetEvent SetEvent WaitForSingleObject ReleaseSemaphore

api-ms-win-core-synch-l1-2-0

SignalObjectAndWait Sleep

api-ms-win-core-processthreads-l1-1-0

ExitProcess GetCurrentProcessId GetCurrentProcess GetThreadPriority GetCurrentThreadId SetThreadPriority CreateThread CreateProcessW TlsAlloc TlsGetValue GetStartupInfoW GetCurrentThread TlsFree TerminateProcess TlsSetValue GetExitCodeProcess OpenProcessToken SwitchToThread

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter GetLastError RaiseException SetLastError

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-service-core-l1-1-0

SetServiceStatus StartServiceCtrlDispatcherW

api-ms-win-eventing-classicprovider-l1-1-0

UnregisterTraceGuids RegisterTraceGuidsW GetTraceEnableLevel TraceMessage GetTraceEnableFlags GetTraceLoggerHandle

api-ms-win-service-winsvc-l1-1-0

RegisterServiceCtrlHandlerW ControlService

api-ms-win-core-registry-l1-1-0

RegQueryValueExW RegOpenKeyExA RegDeleteValueW RegCreateKeyExW RegDeleteTreeW RegQueryValueExA RegOpenKeyExW RegDeleteValueA RegSetValueExW RegCloseKey RegSetValueExA RegCreateKeyExA

api-ms-win-security-base-l1-1-0

AdjustTokenPrivileges

api-ms-win-core-atoms-l1-1-0

GlobalAddAtomW

api-ms-win-security-lsalookup-l2-1-0

LookupPrivilegeValueW

api-ms-win-ntuser-sysparams-l1-1-0

GetSystemMetrics

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime GetTimeZoneInformation

api-ms-win-core-localization-l1-2-0

FormatMessageW IsValidLocale GetCPInfo LCMapStringW GetLocaleInfoW EnumSystemLocalesW GetUserDefaultLCID IsValidCodePage GetOEMCP GetACP

api-ms-win-core-heap-l2-1-0

LocalAlloc LocalFree

api-ms-win-core-util-l1-1-0

EncodePointer DecodePointer

api-ms-win-core-file-l1-1-0

GetDiskFreeSpaceExA ReadFile FlushFileBuffers WriteFile SetFilePointerEx CreateFileA FindNextFileW CreateFileW DeleteFileW GetFinalPathNameByHandleW FindFirstFileExW GetFileType FindClose

api-ms-win-core-io-l1-1-0

DeviceIoControl

api-ms-win-core-string-obsolete-l1-1-0

lstrlenA

api-ms-win-core-com-l1-1-0

CoMarshalInterThreadInterfaceInStream CoReleaseMarshalData CoUninitialize CoGetInterfaceAndReleaseStream CoCreateInstance CoTaskMemFree CoInitializeEx StringFromGUID2

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask

api-ms-win-core-kernel32-legacy-l1-1-2

VerifyVersionInfoA

api-ms-win-devices-config-l1-1-1

CM_Get_DevNode_PropertyW

rpcrt4

RpcBindingFromStringBindingW RpcStringBindingComposeW RpcStringFreeW NdrClientCall3

api-ms-win-core-synch-ansi-l1-1-0

CreateSemaphoreA OpenMutexA

api-ms-win-core-registry-l1-1-1

RegSetKeyValueW

oleaut32

SysAllocString VariantClear SysFreeString VariantInit

api-ms-win-core-file-l2-1-1

OpenFileById

api-ms-win-core-libraryloader-l1-2-0

GetModuleHandleW GetModuleHandleExW FreeLibraryAndExitThread GetModuleHandleA LoadLibraryExW GetModuleFileNameW FreeLibrary GetProcAddress

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentStringsW GetCommandLineW GetCommandLineA SetEnvironmentVariableA SetEnvironmentVariableW FreeEnvironmentStringsW GetStdHandle SetStdHandle

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime GetLogicalProcessorInformation GetVersionExW GetTickCount

api-ms-win-service-core-l1-1-1

EnumDependentServicesW

advapi32

RegisterEventSourceW ReportEventA InitiateSystemShutdownW DeregisterEventSource ReportEventW

ole32

CoInitialize

api-ms-win-core-psapi-l1-1-0

K32GetModuleBaseNameW

api-ms-win-core-string-l1-1-0

MultiByteToWideChar GetStringTypeW CompareStringW WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-rtlsupport-l1-1-0

RtlUnwindEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind RtlPcToFileHeader

api-ms-win-core-processthreads-l1-1-1

GetThreadTimes IsProcessorFeaturePresent

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList QueryDepthSList InterlockedFlushSList InterlockedPopEntrySList InitializeSListHead

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-threadpool-legacy-l1-1-0

CreateTimerQueue ChangeTimerQueueTimer UnregisterWaitEx CreateTimerQueueTimer DeleteTimerQueueTimer

api-ms-win-core-systemtopology-l1-1-0

GetNumaHighestNodeNumber

api-ms-win-core-processtopology-obsolete-l1-1-0

SetThreadAffinityMask GetProcessAffinityMask

api-ms-win-core-kernel32-legacy-l1-1-0

UnregisterWait RegisterWaitForSingleObject

api-ms-win-core-memory-l1-1-0

VirtualProtect VirtualAlloc VirtualFree

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryW

api-ms-win-core-heap-l1-1-0

HeapFree HeapReAlloc GetProcessHeap HeapAlloc HeapSize

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

api-ms-win-core-console-l1-1-0

WriteConsoleW ReadConsoleW GetConsoleCP GetConsoleMode

??0CConsolidatedError@@QEAA@AEBV0@@Z ??0CConsolidatedError@@QEAA@W4ISDI2_ERRORS@CConsolidatedErrorGenerated@@@Z ??0CConsolidatedError@@QEAA@XZ ??0GlobalLogger@@AEAA@XZ ??0ISIAccelerateAction@@QEAA@XZ ??1CConsolidatedError@@QEAA@XZ ??1GlobalLogger@@QEAA@XZ ??1ISIAccelerateAction@@QEAA@XZ ??4CConsolidatedError@@QEAAAEAV0@AEBV0@@Z ??4CConsolidatedErrorGenerated@@QEAAAEAV0@$$QEAV0@@Z ??4CConsolidatedErrorGenerated@@QEAAAEAV0@AEBV0@@Z ??4GlobalLogger@@AEAAAEAV0@$$QEAV0@@Z ??BCConsolidatedError@@QEBA?AU_ISI_Error@@XZ ?AddDebugInformation@CConsolidatedError@@QEAAXPEBDZZ ?AddDebugInformation@CConsolidatedError@@QEAAXPEB_WZZ ?AddErrorMessage@CConsolidatedError@@QEAAXPEBDZZ ?AddErrorMessage@CConsolidatedError@@QEAAXPEB_WZZ ?CleanupIsiError@@YAXI@Z ?CleanupIsiError@@YAXPEAU_ISI_Error@@@Z ?ClearError@CConsolidatedError@@QEAAXXZ ?FreeStringResources@CConsolidatedError@@AEAAXXZ ?GetDebugInformation@CConsolidatedError@@QEBAKPEADH@Z ?GetDebugInformation@CConsolidatedError@@QEBAKPEA_WH@Z ?GetDebugInformation@CConsolidatedError@@QEBAPEBDXZ ?GetErrorCodeString@CConsolidatedError@@QEBAKPEADH@Z ?GetErrorCodeString@CConsolidatedError@@QEBAKPEA_WH@Z ?GetErrorCodeString@CConsolidatedError@@QEBAPEBDXZ ?GetErrorMessage@CConsolidatedError@@QEBAKPEADH@Z ?GetErrorMessage@CConsolidatedError@@QEBAKPEA_WH@Z ?GetErrorMessage@CConsolidatedError@@QEBAPEBDXZ ?GetSrtEolError@CConsolidatedError@@SA?AV1@XZ ?InternalAddDebugInformation@CConsolidatedError@@AEAAXPEBDPEAD@Z ?InternalAddErrorMessage@CConsolidatedError@@AEAAXPEBDPEAD@Z ?IsBusy@CConsolidatedError@@QEBA_NXZ ?IsError@CConsolidatedError@@QEBA_NXZ ?IsPending@CConsolidatedError@@QEBA_NXZ ?IsSuccessful@CConsolidatedError@@QEBA_NXZ ?MAX_ERROR_STRING_SIZE@CConsolidatedError@@2HB ?MapIsiStatus@CConsolidatedError@@AEBA?AW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@W4_ISI_Status@@@Z ?NO_ID@GlobalLogger@@2_KB ?SMALL_STRING_SIZE@CConsolidatedError@@2HB ?SetError@CConsolidatedError@@QEAAXV1@@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEBD1@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEBD@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEB_W1@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERRORS@CConsolidatedErrorGenerated@@PEB_W@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERROR_TYPE@1@KPEBD@Z ?SetError@CConsolidatedError@@QEAAXW4ISDI2_ERROR_TYPE@1@KPEB_W@Z ?SetError@CConsolidatedError@@QEAAXW4_ISI_Status@@PEBD1@Z ?SetError@CConsolidatedError@@QEAAXW4_ISI_Status@@PEB_W1@Z ?SetErrorCodeString@CConsolidatedError@@AEAAXXZ ?SetLoggingOff@GlobalLogger@@SAXXZ ?SetLoggingOn@GlobalLogger@@SAXXZ ?__autoclassinit2@CConsolidatedError@@QEAAX_K@Z ?__autoclassinit2@GlobalLogger@@QEAAX_K@Z ?_disableLogging@GlobalLogger@@0_NA ?checkIfDiskPairValid@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IIAEAW4_ISI_NgsaDiskPairStatus@@@Z ?checkIfDiskValid@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NgsaDiskConcatenationMember@@AEAW4_ISI_NgsaDiskValidForConcatenationStatus@@@Z ?clean@GlobalLogger@@QEAAX_K@Z ?configDiskAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z ?configVolumeAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z ?doClearBlockCache@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doCreateCacheVolumeTask@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?doDisassociate@ISIAccelerateAction@@UEAA?AU_ISI_Error@@AEBU_ISI_VolumeInfo@@@Z ?doNgsaAutomation@ISIAccelerateAction@@UEAA?AU_ISI_Error@@AEAI@Z ?doNgsaDisableOneStep@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doNgsaEnableOneStep@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doNgsaStartTools@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doResetVolportPerformanceCounters@ISIAccelerateAction@@UEAA?AU_ISI_Error@@XZ ?doSeparateConcatenation@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?doSeparateConcatenationNoSync@ISIAccelerateAction@@QEAA?AU_ISI_Error@@XZ ?get@GlobalLogger@@SAAEAV1@XZ ?getError@GlobalLogger@@QEAA?AVCConsolidatedError@@_K_N@Z ?getLastError@GlobalLogger@@QEAA?AVCConsolidatedError@@_N@Z ?getLastId@GlobalLogger@@QEAA_KXZ ?getMaxCacheSize@ISIAccelerateAction@@SA_K_N@Z ?getMinCacheSize@ISIAccelerateAction@@SA_K_N@Z ?getNgsaInfo@ISIAccelerateAction@@QEAA?AU_ISI_NgsaInfo@@XZ ?resetCacheToAvailable@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?setCacheVolSize@ISIAccelerateAction@@UEAAX_K@Z ?setError@GlobalLogger@@QEAA_KAEBVCConsolidatedError@@@Z ?setError@GlobalLogger@@QEAA_KAEBVCConsolidatedError@@AEAU_ISI_Error@@@Z ?setFastDisk@ISIAccelerateAction@@UEAAXI@Z ?setFileCacheSize@ISIAccelerateAction@@UEAAXI@Z ?setMigrationStart@ISIAccelerateAction@@UEAAX_K@Z ?setPreservePinningData@ISIAccelerateAction@@UEAAX_N@Z ?setSeparationSafe@ISIAccelerateAction@@UEAAX_N@Z ?setSlowDisk@ISIAccelerateAction@@UEAAXI@Z ?turnOffVolumeOrDiskAcceleration@ISIAccelerateAction@@UEAA?AU_ISI_Error@@I@Z ?waitForNvcMode@ISIAccelerateAction@@UEAA?AU_ISI_Error@@IW4_ISI_NvcMode@@@Z GetLPCId ISI_NgsaDiskPairStatusToDescription ISI_NgsaDiskValidForConcatenationStatusToDescription ISI_NgsaOperationStatusToDescription IsiAddDisksToArray IsiArraySetWriteCacheState IsiCacheVolumeCreateFromArray IsiCacheVolumeCreateFromDisks IsiDiskAssignStoragePool IsiDiskClaim IsiDiskClearMetadata IsiDiskDestroyCache IsiDiskGetPartitionTableInfos IsiDiskMarkAsFailed IsiDiskMarkAsNormal IsiDiskMarkAsSpare IsiDiskMarkOffline IsiDiskMarkOnline IsiDiskResetSmartEvent IsiDiskSetCacheBufferFlushSetting IsiDiskSetCacheMode IsiDiskSetCacheSpindownPolicy IsiDiskSetSmartEvent IsiDiskSetWriteCachingPolicySetting IsiDiskUnlock IsiDiskUnmarkAsSpare IsiExpandVolume IsiFinalize IsiGetArrayHandles IsiGetArrayHandlesByControllerHandle IsiGetArrayInfo IsiGetControllerHandles IsiGetControllerInfo IsiGetDiskIdentifyData IsiGetEndDeviceHandles IsiGetEndDeviceInfo IsiGetErrorDebugMessage IsiGetErrorMessage IsiGetIsmArrays IsiGetIsmEndDevices IsiGetIsmVolumes IsiGetLastErrorDebugMessage IsiGetLastErrorMessage IsiGetMiddlewareVersionInfo IsiGetNgsaDiskPairHandles IsiGetNgsaDiskPairInfo IsiGetNgsaHandles IsiGetNgsaInfo IsiGetNgsaInfoEx IsiGetNvCachePolicyStatInfo IsiGetNvCacheStat2Info IsiGetNvCacheStatInfo IsiGetNvCacheUnifiedStats IsiGetNvcInfo IsiGetOptaneOptimizationInfo IsiGetRaidInfo IsiGetRaidInfoHandles IsiGetRaidLevelInfo IsiGetRdpDictEndDevices IsiGetSystemInfo IsiGetVolportPerformanceCounters IsiGetVolumeHandles IsiGetVolumeInfo IsiGetVolumeMigrationRange IsiGetZpoddInfo IsiInitialize IsiNvcDisassociate IsiRaidLevelModify IsiRefreshPartitionInfo IsiRescan IsiSessionClose IsiSessionOpen IsiSetIntelHybridDiskSubClassCode IsiSetLpmStatus IsiSetReadPatrolUnit IsiToggleCoalescerPolicy IsiVdsHandlerMakeSpaceForMetadataOnSystemDisk IsiVolumeCancelVerify IsiVolumeCreate IsiVolumeCreateFromDisks IsiVolumeDelete IsiVolumeDestroyCache IsiVolumeInitialize IsiVolumeMarkAsNormal IsiVolumeRebuild IsiVolumeRename IsiVolumeSetBufferFlush IsiVolumeSetCacheMode IsiVolumeSetCachePolicy IsiVolumeSetCacheSpindownPolicy IsiVolumeSetExportPolicy IsiVolumeVerify

Name

.text

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

494KB

Virtual Size

493KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

61KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

617B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

580KB

Virtual Size

584KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-08-03_6581c687723961f026bdf0cddf7a2731_icedid_njrat

setupapi

api-ms-win-service-management-l1-1-0

api-ms-win-service-management-l2-1-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-service-core-l1-1-0

api-ms-win-eventing-classicprovider-l1-1-0

api-ms-win-service-winsvc-l1-1-0

api-ms-win-core-registry-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-atoms-l1-1-0

api-ms-win-security-lsalookup-l2-1-0

api-ms-win-ntuser-sysparams-l1-1-0

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-io-l1-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-2

api-ms-win-devices-config-l1-1-1

rpcrt4

api-ms-win-core-synch-ansi-l1-1-0

api-ms-win-core-registry-l1-1-1

oleaut32

api-ms-win-core-file-l2-1-1

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-service-core-l1-1-1

advapi32

ole32

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-threadpool-legacy-l1-1-0

api-ms-win-core-systemtopology-l1-1-0

api-ms-win-core-processtopology-obsolete-l1-1-0

api-ms-win-core-kernel32-legacy-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-heap-l1-1-0

api-ms-win-core-datetime-l1-1-0

api-ms-win-core-console-l1-1-0

generic