dllsideLoading[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
dllsideLoading.zip
Size 2.6MB
Sample260807-m5rt2atclb
SHA256 6744e4d7c358009db0643601110d7372dbe88d6c8ee2f2491db97ed345c68d19
MD5 c9656746a4982cb5c680705dc57f3134
SHA1 54b074e1da22c61b83a5f25e631bacca1bb32285
SHA512 c5f7e599faae8df39a0a87a760b8c6d8a6b347e97a0e53c51585f041bc49cf2fb2e64c985db4ff87d5a30acd50124691d7b93ae2f013ea07252ec3e4d44c9009
SSDEEP 49152:Ip9IbkP8bhVtclLa7cQduMKr1woV51iPnCj6M6IVqQ0a/92vsZeLAXXYaI2lJVnz:B08bzt4a7cQduMKBwmHiPnC2bONZGsZr
TLSH
T192C5338F51D25ADD82E3768DD8729CF8012345D8D52E1DE0AEB2AAF6150ECB3B313752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/notSecur32.dll

File Explorer

dllsideLoading.zip

.zip 2.6MB
VESSEL_PARTICULARS_PACKING_LISTpdf.exe

.exe 3.9MB
notSecur32.dll

.dll 2.1MB

dllsideLoading.zip

SHA256 6744e4d7c358009db0643601110d7372dbe88d6c8ee2f2491db97ed345c68d19
MD5 c9656746a4982cb5c680705dc57f3134
SHA1 54b074e1da22c61b83a5f25e631bacca1bb32285
SHA512 c5f7e599faae8df39a0a87a760b8c6d8a6b347e97a0e53c51585f041bc49cf2fb2e64c985db4ff87d5a30acd50124691d7b93ae2f013ea07252ec3e4d44c9009
SSDEEP 49152:Ip9IbkP8bhVtclLa7cQduMKr1woV51iPnCj6M6IVqQ0a/92vsZeLAXXYaI2lJVnz:B08bzt4a7cQduMKBwmHiPnC2bONZGsZr
TLSH
T192C5338F51D25ADD82E3768DD8729CF8012345D8D52E1DE0AEB2AAF6150ECB3B313752
MD5 SHA1 SHA512 SSDEEP TLSH

VESSEL_PARTICULARS_PACKING_LISTpdf.exe

IMPHASH d9d34563397ee789da1d5a65d773d1f6
SHA256 1fae7d654695f7c4e0f4bb8a42a4c33137652effc360b998708c6ffcac1380e6
MD5 bf62f6760a9b86f66822fa59140aef8b
SHA1 a71dc7dff873a5341ee93a254fa43e61f85298de
SHA512 f47af18705dfd6beec15109c227ca614dd314ce7a5dc4c19b10fc5388d07cd5990e5ea09128235cd88b595eef91a7c0e63e091bf8fc9947479f3d5d8167d9d31
SSDEEP 49152:eYqEK9Q8jm5Uzq0LYxjvOPg+BgAiyg8xK90g/u8KwQ61PwST3:lwQD0LYxjvWa3mz8NB3
TLSH
T1A1168C17F68903F9C09AC1749B579162F626BC2A2B3562DF364CB2141F7AEE04B7E311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:10 windows x64 arch:x64

Digest

92:71:18:20:b8:a3:40:cb:56:e3:c2:38:24:80:ad:3a:7c:c5:86:50:2a:95:dc:34:21:2e:69:f8:05:b4:06:70

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=3582691,CN=Google LLC,O=Google LLC,L=Mountain View,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Jun 6, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

Serial Number

0b:50:cf:24:6b:26:3e:fd:85:a7:29:31:51:58:f3:ff

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 8, 2024 - Apr 10, 2027

Minor OS version

Major OS version

Entry point

1588800

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

platform_experience_helper.exe.pdb

api-ms-win-core-winrt-error-l1-1-0

RoOriginateError RoOriginateErrorW

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateString WindowsDeleteString WindowsGetStringRawBuffer WindowsIsStringEmpty WindowsStringHasEmbeddedNull

api-ms-win-core-winrt-l1-1-0

RoActivateInstance RoGetActivationFactory RoInitialize RoRegisterActivationFactories RoRevokeActivationFactories RoUninitialize

propsys

InitPropVariantFromCLSID

secur32

GetUserNameExW

wtsapi32

WTSFreeMemory WTSQuerySessionInformationW

advapi32

BuildExplicitAccessWithNameW BuildSecurityDescriptorW BuildTrusteeWithSidW CheckTokenMembership ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW CreateProcessAsUserW GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetTokenInformation IsValidAcl IsValidSecurityDescriptor IsValidSid RegCloseKey RegCreateKeyExW RegDeleteKeyW RegOpenKeyExW RegQueryValueExW RegSetKeyValueW RegSetValueExW SetEntriesInAclW SetNamedSecurityInfoW SetSecurityInfo

dbghelp

SymCleanup SymFromAddr SymGetLineFromAddr64 SymGetModuleInfo64 SymGetSearchPathW SymInitialize SymSetOptions SymSetSearchPathW

oleaut32

SysAllocString SysAllocStringByteLen SysAllocStringLen SysFreeString VariantClear

shell32

CommandLineToArgvW SHChangeNotify SHGetFolderPathW SHGetKnownFolderPath ShellExecuteExW ShellExecuteW

shlwapi

PathMatchSpecW

user32

AllowSetForegroundWindow CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageW EnumWindows GetActiveWindow GetAncestor GetClassNameW GetDesktopWindow GetQueueStatus GetWindowLongW GetWindowThreadProcessId KillTimer LoadStringW MsgWaitForMultipleObjectsEx PeekMessageW PostMessageW PostQuitMessage RegisterClassExW SetTimer TranslateMessage UnregisterClassW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winmm

timeBeginPeriod timeEndPeriod timeGetTime

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AllocConsole AssignProcessToJobObject AttachConsole CloseHandle CompareStringW CopyFileW CreateDirectoryW CreateEventW CreateFileW CreateIoCompletionPort CreateNamedPipeW CreateProcessW CreateThread DecodePointer DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DiscardVirtualMemory DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExpandEnvironmentStringsW FileTimeToSystemTime FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCPInfo GetCommandLineA GetCommandLineW GetComputerNameExW GetConsoleMode GetConsoleOutputCP GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetDriveTypeW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSizeEx GetFileTime GetFileType GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoW GetLogicalProcessorInformation GetLongPathNameW GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetProcessTimes GetProductInfo GetQueuedCompletionStatus GetStartupInfoW GetStdHandle GetStringTypeW GetSystemDirectoryW GetSystemInfo GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetThreadPriorityBoost GetTickCount GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserGeoID GetVersionExW GetWindowsDirectoryW GlobalMemoryStatusEx HeapLock HeapUnlock HeapWalk InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionEx InitializeProcThreadAttributeList InitializeSListHead InitializeSRWLock IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale IsWow64Process K32GetModuleFileNameExW K32GetModuleInformation K32QueryWorkingSetEx LCMapStringW LeaveCriticalSection LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree LockFileEx MapViewOfFile MoveFileExW MoveFileW MultiByteToWideChar OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PostQueuedCompletionStatus QueryPerformanceCounter QueryPerformanceFrequency QueryThreadCycleTime RaiseException ReadConsoleW ReadDirectoryChangesW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared RemoveDirectoryW RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlCaptureContext RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetConsoleCtrlHandler SetEndOfFile SetEnvironmentVariableW SetEvent SetFileAttributesW SetFileInformationByHandle SetFilePointerEx SetHandleInformation SetInformationJobObject SetLastError SetNamedPipeHandleState SetStdHandle SetThreadInformation SetThreadPriority SetThreadPriorityBoost SetThreadUILanguage SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SleepEx SuspendThread SwitchToThread SystemTimeToTzSpecificLocalTime TerminateProcess TlsAlloc TlsFree TlsGetValue TlsSetValue TransactNamedPipe TryAcquireSRWLockExclusive UnhandledExceptionFilter UnlockFileEx UnmapViewOfFile UnregisterWaitEx UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitNamedPipeW WakeAllConditionVariable WakeConditionVariable WerRegisterRuntimeExceptionModule WideCharToMultiByte WriteConsoleW WriteFile lstrcmpiW

ole32

CoAddRefServerProcess CoCreateInstance CoInitializeEx CoRegisterClassObject CoRegisterInitializeSpy CoReleaseServerProcess CoResumeClassObjects CoRevokeClassObject CoRevokeInitializeSpy CoTaskMemAlloc CoTaskMemFree CoUninitialize PropVariantClear StringFromCLSID

ntdll

NtClose NtOpenKeyEx NtQueryValueKey RtlFormatCurrentUserKeyPath RtlFreeUnicodeString RtlInitUnicodeString

userenv

CreateEnvironmentBlock DestroyEnvironmentBlock

Name

.text

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

72KB

Virtual Size

207KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

1024B

Virtual Size

681B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

LZMADEC

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

malloc_h

Size

512B

Virtual Size

265B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

240KB

Virtual Size

239KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

notSecur32.dll

IMPHASH 109f73cc95228e3eacd82c151b1a5e6f
SHA256 f8a7fd3580f7a79db3be7feb8f1519e38058977a7b50cae698260a487e815475
MD5 02708ef0a52d8113a1d90fb968e2f82c
SHA1 691282680760876e2182db92e9c97c68e913db75
SHA512 e8dd26ad1e23fd57234e22ca0db2e9031708bbf445e48f806133878ba13859bf33e512508c6b3e722dbf335ea8a5da91bf1d1cd7ea846be62d7fbcb64849e8c9
SSDEEP 49152:l4CmA3CtjZND/EBJj1GMxyAgU3KH4MfIu06ihgNto4tCOICNsdtZa:5CtbAXgl4MfIu06ihgNto4tCOICNsdtU
TLSH
T101A59E55B3C05AA9D116C934CB179632C2B2F8120B75D1CBAEA6E70E6E37F814F39B11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

812340

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegisterEventSourceW ReportEventW OpenProcessToken AdjustTokenPrivileges LookupPrivilegeValueW DeregisterEventSource

bcrypt

BCryptGenRandom

kernel32

InitializeCriticalSectionEx EncodePointer CloseHandle CreateEventExW CreateThread DuplicateHandle FormatMessageW FreeConsole GetCPInfo GetConsoleOutputCP GetCurrentProcess GetCurrentProcessorNumberEx GetCurrentThread GetEnvironmentVariableW GetLastError GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress GetStdHandle GetThreadPriority GetTickCount64 LoadLibraryA LocalAlloc LocalFree MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency RaiseFailFastException ResumeThread SetEvent SetLastError SetThreadPriority Sleep VirtualAlloc VirtualFree WaitForMultipleObjectsEx WaitForSingleObject WideCharToMultiByte WriteFile RaiseException AddVectoredExceptionHandler RtlVirtualUnwind RtlCaptureContext RtlRestoreContext VerSetConditionMask FlsAlloc FlsGetValue FlsSetValue ResetEvent WaitForSingleObjectEx CreateEventW GetCurrentProcessId SwitchToThread GetCurrentThreadId SuspendThread FlushProcessWriteBuffers GetThreadContext SetThreadContext GetSystemTimeAsFileTime CreateMemoryResourceNotification QueryInformationJobObject GetModuleHandleExW LoadLibraryExW GetProcessAffinityMask VerifyVersionInfoW InitializeContext GetEnabledXStateFeatures LocateXStateFeature SetXStateFeaturesMask VirtualQuery DebugBreak SleepEx GlobalMemoryStatusEx GetSystemInfo GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLargePageMinimum VirtualUnlock VirtualAllocExNuma IsProcessInJob GetNumaHighestNodeNumber GetProcessGroupAffinity K32GetProcessMemoryInfo IsDebuggerPresent InitializeCriticalSection EnterCriticalSection LeaveCriticalSection DeleteCriticalSection FlsFree RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx InitializeSListHead

ole32

CoWaitForMultipleHandles CoGetApartmentType CoUninitialize CoInitializeEx CoCreateGuid

api-ms-win-crt-math-l1-1-0

log ceil

api-ms-win-crt-heap-l1-1-0

free malloc calloc _callnewh

api-ms-win-crt-string-l1-1-0

_stricmp strlen strcmp strcpy_s strcpy

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnprintf_s

api-ms-win-crt-runtime-l1-1-0

terminate _cexit abort _seh_filter_dll _crt_atexit _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _initterm_e _initterm

0U0QFEnZkpg 1lxQRDBf4775WoxUzall8Qq1 3aYzUVoVJSr74KdkXLsB 3gk2U0F0fovi4UjpPUTpHwXn8MT2QLM 5PCfbkRAa0pl0sy298lU599tGMr0AE 5V94J5CTf 5b3JXaTykKKExr1 5psYC7pSEYW3G3Av 73vYxitJ7guaAcBV 7kFy8J8 9WAEoX5E3UCZ8ZKJ8Vz AcaE626iPt4OpM6lSBdNkbp8 AcceptSecurityContext AcquireCredentialsHandleA AcquireCredentialsHandleW AddCredentialsA AddCredentialsW AddSecurityPackageA AddSecurityPackageW ApplyControlToken AzsYEc36JVICClFvLBPcQazswudiAMS Azv2Rt5gIQiBB2JDIzR8A0bM6u CJOBylmj7PPqONM CeJHc4QMQnNcUpYPxeX7E2DlUT ChangeAccountPasswordA ChangeAccountPasswordW CompleteAuthToken CredMarshalTargetInfo CredUnmarshalTargetInfo D2IXZNwMohjXqyxaM8j9xPKz77z DICQpUtmfOeqPEpp DKMH27xHvesN0mjaONopkF DecryptMessage DeleteSecurityContext DeleteSecurityPackageA DeleteSecurityPackageW E4XCWSh2T9oUQ724xf EncryptMessage EnumerateSecurityPackagesA EnumerateSecurityPackagesW ExportSecurityContext FK5F09cxaTnZ6Fl6lRDlX FreeContextBuffer FreeCredentialsHandle GUApnM7MJrc GetComputerObjectNameA GetComputerObjectNameW GetSecurityUserInfo GetUserNameExA GetUserNameExW GigR87zwaa8U2DKb7qPWYJa H3RzVbuKMth6hv H6LNO2O3YWJxLVIoyN H7TiGOPb5jd3RTKE4CH ImpersonateSecurityContext ImportSecurityContextA ImportSecurityContextW InitSecurityInterfaceA InitSecurityInterfaceW InitializeSecurityContextA InitializeSecurityContextW JIz7ljNrv0lOpQFE7Wgf0BQpvaH7XquY JJF9qPlsay2lmuxlZMD6Njs5 K8dncDWKsM7tehL74F4s8PY K9Pz4jPsNJgH KCzF1DTVrOlq L0Q4070tTJbIDRbmt9l LBQqWbkNODeggqo7 LpuRTASl5Nbq1q7ROVs LsaCallAuthenticationPackage LsaConnectUntrusted LsaDeregisterLogonProcess LsaEnumerateLogonSessions LsaFreeReturnBuffer LsaGetLogonSessionData LsaLogonUser LsaLookupAuthenticationPackage LsaRegisterLogonProcess LsaRegisterPolicyChangeNotification LsaUnregisterPolicyChangeNotification LyY1yMAkPlE MGsuSMe3drpCcbQ MakeSignature MbixaSg2vF5lUVIq MhzL8W2P O7rDJniiEDT3od1RpNLz OJfJwNwYz4H4MJ1t1ZK2fq OTF603uDLPHm2Ro4Njlp1HLcTZHnmtgs Q9IEfhnsEKBIHBWG8TMX79i QNWFQ3cKwOTMsUlSHvVv4aTRtC QuCPHKJw4m90XCI8OmbaAsDN QueryContextAttributesA QueryContextAttributesW QueryCredentialsAttributesA QueryCredentialsAttributesW QuerySecurityContextToken QuerySecurityPackageInfoA QuerySecurityPackageInfoW RevertSecurityContext RpZThX1jNTntlIaU10uSmzSjVslGg4G S7SXAPzUWII0yyiMcKYPUQcH3 SHxb8BZa0ZyAtyAJxzS2eSUwFCymZTeh SIdaWC2umwVXC6t4i9tKpAApJRkw SaslAcceptSecurityContext SaslEnumerateProfilesA SaslEnumerateProfilesW SaslGetContextOption SaslGetProfilePackageA SaslGetProfilePackageW SaslIdentifyPackageA SaslIdentifyPackageW SaslInitializeSecurityContextA SaslInitializeSecurityContextW SaslSetContextOption Sd3rzvRaYSBmWQt2n SealMessage SeciAllocateAndSetCallFlags SeciAllocateAndSetIPAddress SeciFreeCallContext SecpFreeMemory SecpTranslateName SecpTranslateNameEx SetContextAttributesA SetContextAttributesW SetCredentialsAttributesA SetCredentialsAttributesW SspiCompareAuthIdentities SspiCopyAuthIdentity SspiDecryptAuthIdentity SspiEncodeAuthIdentityAsStrings SspiEncodeStringsAsAuthIdentity SspiEncryptAuthIdentity SspiExcludePackage SspiFreeAuthIdentity SspiGetTargetHostName SspiIsAuthIdentityEncrypted SspiLocalFree SspiMarshalAuthIdentity SspiPrepareForCredRead SspiPrepareForCredWrite SspiUnmarshalAuthIdentity SspiValidateAuthIdentity SspiZeroAuthIdentity SvEjruLov7WVSEfhoxcIyZt1 TdOFpLs6UGKxh6yPv74cTnEKVXiZuS TqqvNW0gepSVfQG5Ux1wj2dXP TranslateNameA TranslateNameW UO3s10ChupUizKNgp UnsealMessage VerifySignature WTUxjMNfQiHrgucQZialO WVDqJMsZc8N2v59eVREWAo1O We1sfJM0bnEiFkO Wy4Wd0snKwOImyUVYzhqnaVJE X8HYI8LF4PX8DyFjpmJUmeEBkC XRiGmYNEh5MzScZWXwVzL XqWd6XbSQrzEVcD ZZ0N66oH40jkrFNZ49X a9DHVq3A0YBw98egHsLA8V cMCYRPZgO6ZsSFYJ52S e92j0XPtu8ExH94L5I fVwxFjI0v53LJVo fwjmti0rX0cQEC1pXbsEHnn g1C5rbnHC g6VHRXruTyHsPp1n hKYgv9IOYADHsaLY3E0x2GyAEm hiwbilfqYiqdDpxCDfk7 iB65jjv5ewM j7j2nwfX6mLFeERR9mvh jOXooJg8J2D0pN35KNJLe jOvOca2s1ivqANlaOwIxgeNbEQ kDWKrjqx7Mx532IlhY kYPWZKoDOXUcD2S62Gh8CE7bR5 lZn3NyfRFHb4klFMtm86PwlQGtqRZsE ngJKnQTnysuIGF njPKbgsazYGFbufaeEkmd4 nwZHNnPHNmgpl2 o1eNP3cmQF oeXPbGeVfMk oiAwt7UEyuVAxCCPvMM13eDH2k4sVc p67So0IdmIhxZSr73mLy pDtDoxTLSCFdLBgUkDqhI pdvCRAoXnfvoPj3Rd4zVG9u1gsZe pwfzV0Ui2y q0qmAi1EA7ze4qvOoHMvAsmZxu6PVGz qM82JtlLp qQNTagkWPrUzoWqgWLL qwQl67NSLNdowv rBgmhdFdn4z49wJp2Dk t4IwA4E7U1x2T tc9R8xZ00V tikJ1Htsw62B8iu54iGNjS17 tjD77fhltegeqwxWo2o6eEguGYFfO twacfU6EVxa3pXobxd txCXQZZW uRqbYC5pOfjemPcdVzy uS1UhWofsPItC41WOYmAoscDcbso uWaINohm7YfdIK876wPO upgz8PCE8q09smOK6ZOge9RUmj vXjqrfJfc8KmbiHi5QFayiWumyU vj00ewMGzgQFy0X6iiUljP5v wdzeENy6xmtNL4vJtamQ x5y7hhYub y1JVm3uXqx yHbSwYjsSStHTKhq7ZNVpLr yckTRz43UKqB zib9J7Mtse7Ikf

dllsideLoading.zip

VESSEL_PARTICULARS_PACKING_LISTpdf.exe

api-ms-win-core-winrt-error-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-winrt-l1-1-0

propsys

secur32

wtsapi32

advapi32

dbghelp

oleaut32

shell32

shlwapi

user32

version

winmm

kernel32

ole32

ntdll

userenv

generic

notSecur32.dll

advapi32

bcrypt

kernel32

ole32

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic