[Kimochi] ei-chan[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
[Kimochi] ei-chan.rar
Size 31.6MB
Sample260813-gt67pacl21
SHA256 522d96f97823a290fba62e8503e8e2d39e52f900805218211b3ad7d1762bddbe
MD5 dde83ca45bfeb883ca0b1ae1000638cf
SHA1 88a0a591c92d1f9ae12a08a6f0698a1ddcab3535
SHA512 b519c324f81055d38c09ce8272b3e8268d7f4543b5de825952ac3507c03a3ad88e716f7b148e0724611c6c5ff8d6a19c4438bf3aeb02a7b493ac2755ebe2231a
SSDEEP 786432:Jauf4TQrWN1cdiV+xlbVowUSrQ6yn02stM+MLyze6oPAZNWYeZ56VfIDp2f:JT4QWN1qiVAnoF6t2stMByFoykYeaVf9
TLSH
T102773384CCD697524213AA40C4EFE57F64401843FDF63769AAE88FC907AE293BB25177
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/[Kimochi] ei-chan/ei_chan_1_2.exe
unpack001/[Kimochi] ei-chan/libspine_godot.windows.template_release.x86_64.dll

File Explorer

[Kimochi] ei-chan.rar

.rar 31.6MB
[Kimochi] ei-chan/ei_chan_1_2.exe

.exe 92.2MB
[Kimochi] ei-chan/ei_chan_1_2.pck

6.8MB
[Kimochi] ei-chan/libspine_godot.windows.template_release.x86_64.dll

.dll 1.4MB

[Kimochi] ei-chan.rar

SHA256 522d96f97823a290fba62e8503e8e2d39e52f900805218211b3ad7d1762bddbe
MD5 dde83ca45bfeb883ca0b1ae1000638cf
SHA1 88a0a591c92d1f9ae12a08a6f0698a1ddcab3535
SHA512 b519c324f81055d38c09ce8272b3e8268d7f4543b5de825952ac3507c03a3ad88e716f7b148e0724611c6c5ff8d6a19c4438bf3aeb02a7b493ac2755ebe2231a
SSDEEP 786432:Jauf4TQrWN1cdiV+xlbVowUSrQ6yn02stM+MLyze6oPAZNWYeZ56VfIDp2f:JT4QWN1qiVAnoF6t2stMByFoykYeaVf9
TLSH
T102773384CCD697524213AA40C4EFE57F64401843FDF63769AAE88FC907AE293BB25177
MD5 SHA1 SHA512 SSDEEP TLSH

Password

kimochi.info

[Kimochi] ei-chan/ei_chan_1_2.exe

IMPHASH d6456f7e0a4b1fd112213c04a7ddc2aa
SHA256 852cc60d05debedf34909beca0704d80f381642d81af24ec52be252179f2a0d1
MD5 40f0fca535b24682ed8e60eb8705feda
SHA1 b0cb109ee1c25d697c727981243923bd6ed5ffaa
SHA512 2ea85111ae96c54df44ea3687730beb8d20bdca8bb7d12fea2bb30ffa838c91d6330c7823fc5cfe47ce89374f21a16749276d380d95513117ec0c51b114b3f18
SSDEEP 786432:TsXZHd3M0mrG9WTZ1xK1J5ZppGdWhuyb0L4:gpHd3ZmrGAcXpNuyb0
TLSH
T139284B07F2A370ECC46BF1309F7BA672BA71B85911386D6B5692CB302F61E10576DE18
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Password

kimochi.info

Minor OS version

Major OS version

Entry point

12480

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

api-ms-win-core-synch-l1-2-0

WaitOnAddress WakeByAddressAll WakeByAddressSingle

kernel32

DuplicateHandle LoadLibraryExA AcquireSRWLockExclusive AcquireSRWLockShared AddDllDirectory AddVectoredExceptionHandler AttachConsole CancelIo CloseHandle CompareFileTime CompareStringOrdinal ConnectNamedPipe CreateDirectoryW CreateEventA CreateEventW CreateFileA CreateFileMappingA CreateFileW CreateMutexA CreateNamedPipeW CreatePipe CreateProcessW CreateSemaphoreA CreateSemaphoreW CreateSymbolicLinkW CreateThread CreateToolhelp32Snapshot DeleteCriticalSection DeleteFileW DeleteProcThreadAttributeList DeviceIoControl EnterCriticalSection ExitProcess FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers FormatMessageA FormatMessageW FreeEnvironmentStringsW FreeLibrary GetACP GetCommandLineW GetConsoleMode GetConsoleOutputCP GetConsoleProcessList GetConsoleScreenBufferInfo GetConsoleWindow GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDiskFreeSpaceExW GetDynamicTimeZoneInformation GetEnvironmentStringsW GetEnvironmentVariableA GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetGeoInfoW GetHandleInformation GetLargePageMinimum GetLastError GetLocalTime GetLocaleInfoEx GetLocaleInfoW GetLogicalDrives GetLongPathNameW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetNativeSystemInfo GetOverlappedResult GetProcAddress GetProcessAffinityMask GetProcessHeap GetProcessTimes GetShortPathNameW GetStdHandle GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempFileNameA GetTempPathA GetTempPathW GetThreadContext GetThreadId GetThreadPriority GetTickCount GetTickCount64 GetTimeZoneInformation GetUserDefaultUILanguage GetUserGeoID GetVolumeInformationW GlobalAlloc GlobalLock GlobalMemoryStatusEx GlobalSize GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeProcThreadAttributeList InitializeSRWLock IsDBCSLeadByteEx IsDebuggerPresent IsProcessorFeaturePresent K32GetPerformanceInfo K32GetProcessMemoryInfo LCIDToLocaleName LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LocalFree LocaleNameToLCID MapViewOfFile Module32FirstW Module32NextW MoveFileExA MoveFileW MultiByteToWideChar OpenMutexW OpenProcess OutputDebugStringA OutputDebugStringW PeekNamedPipe PowerClearRequest PowerCreateRequest PowerSetRequest QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadFile ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore RemoveDirectoryW RemoveDllDirectory RemoveVectoredExceptionHandler ReplaceFileW ResetEvent ResumeThread RtlUnwindEx SetConsoleCP SetConsoleCtrlHandler SetConsoleMode SetConsoleOutputCP SetConsoleTextAttribute SetCurrentDirectoryW SetEnvironmentVariableA SetEnvironmentVariableW SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetFilePointerEx SetHandleInformation SetLastError SetNamedPipeHandleState SetPriorityClass SetProcessAffinityMask SetStdHandle SetThreadAffinityMask SetThreadContext SetThreadIdealProcessor SetThreadPriority SetUnhandledExceptionFilter Sleep SleepConditionVariableCS SleepConditionVariableSRW SuspendThread SwitchToThread SystemTimeToFileTime TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive TryEnterCriticalSection UnmapViewOfFile UpdateProcThreadAttribute VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WakeConditionVariable WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler lstrlenW

ntdll

RtlNtStatusToDosError NtQueryInformationFile NtWriteFile RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

ole32

CoCreateFreeThreadedMarshaler CoCreateInstance CoInitializeEx CoTaskMemFree CoUninitialize OleInitialize OleUninitialize PropVariantClear RegisterDragDrop ReleaseStgMedium RevokeDragDrop

oleaut32

GetErrorInfo SafeArrayCreateVector SafeArrayPutElement SetErrorInfo SysAllocStringLen SysStringLen VariantClear SysAllocString SysFreeString VariantInit

uiautomationcore

UiaGetReservedNotSupportedValue UiaHostProviderFromHwnd UiaLookupId UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaReturnRawElementProvider

user32

ActivateKeyboardLayout AdjustWindowRectEx AllowSetForegroundWindow CallNextHookEx CallWindowProcW ClientToScreen ClipCursor CreateCaret CreateIconFromResource CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DestroyCaret DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EndDialog EnumChildWindows EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClientRect GetCursorPos GetDC GetDCEx GetDlgItem GetDoubleClickTime GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardState GetMenuItemCount GetMenuItemInfoW GetMenuItemRect GetMessageExtraInfo GetMessageTime GetMessageW GetMonitorInfoA GetMonitorInfoW GetParent GetPropW GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrA GetWindowLongPtrW GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuItemW IsIconic IsProcessDPIAware IsWindowVisible IsZoomed KillTimer LoadCursorA LoadIconA MapVirtualKeyA MapVirtualKeyExA MessageBoxW MonitorFromWindow MoveWindow MsgWaitForMultipleObjects PeekMessageW PostMessageA PostThreadMessageW RegisterClassExA RegisterClassExW RegisterClassW RegisterDeviceNotificationW RegisterRawInputDevices ReleaseCapture ReleaseDC RemoveMenu RemovePropW ScreenToClient SendInput SendMessageA SendMessageW SetCapture SetCaretPos SetCursor SetCursorPos SetFocus SetForegroundWindow SetMenuInfo SetMenuItemInfoW SetPropW SetTimer SetWindowDisplayAffinity SetWindowLongPtrA SetWindowLongPtrW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExA ShowWindow SystemParametersInfoA ToUnicodeEx TrackMouseEvent TrackPopupMenuEx TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification WindowFromPoint AttachThreadInput CloseClipboard CloseTouchInputHandle DisplayConfigGetDeviceInfo EmptyClipboard GetClipboardData GetDisplayConfigBufferSizes GetPointerPenInfo GetPointerType GetTouchInputInfo IsClipboardFormatAvailable IsWindow LogicalToPhysicalPointForPerMonitorDPI MessageBeep OpenClipboard PhysicalToLogicalPointForPerMonitorDPI QueryDisplayConfig RegisterClipboardFormatA RegisterTouchWindow SetClipboardData WindowFromDC

advapi32

AdjustTokenPrivileges GetCurrentHwProfileA GetSidSubAuthority GetSidSubAuthorityCount GetTokenInformation LookupPrivilegeValueW OpenProcessToken RegCloseKey RegEnumKeyExW RegEnumValueW RegGetValueW RegOpenKeyExW RegOpenKeyW RegQueryInfoKeyW RegQueryValueExW RegSetValueExW

avrt

AvSetMmThreadCharacteristicsW AvSetMmThreadPriority

bcrypt

BCryptGenRandom

crypt32

CertCloseStore CertEnumCertificatesInStore CertGetCertificateContextProperty CertOpenSystemStoreA CryptBinaryToStringA

dwmapi

DwmEnableBlurBehindWindow DwmGetWindowAttribute DwmSetWindowAttribute

dwrite

DWriteCreateFactory

dxgi

CreateDXGIFactory1

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDIBSection CreatePolygonRgn CreateRectRgn CreateSolidBrush DeleteDC DeleteObject GetDIBits GetDeviceCaps GetPixel GetTextExtentPoint32W SelectObject SetDIBitsToDevice SetPixelFormat SwapBuffers

imm32

ImmAssociateContext ImmGetCompositionStringW ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

iphlpapi

GetAdaptersAddresses GetBestInterfaceEx

msvcrt

fwprintf ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _aligned_free _aligned_malloc _amsg_exit _assert _beginthreadex _cexit _chsize _commode _endthreadex _errno _filelengthi64 _fileno _fmode _fstat64 _get_osfhandle _getmaxstdio _getpid _gmtime64 _hypot _initterm _itoa_s _lock _lseeki64 _onexit _putenv_s _set_error_mode _setjmp _setmaxstdio _strdup _stricmp _vsnprintf_s _wfopen_s freopen_s strcat_s strcpy_s _time64 _timezone _tzname _tzset _unlock _vscprintf _vsnprintf _wchdir _wfopen _wfsopen _wgetcwd abort acos asin atan atof atoi bsearch calloc cosh exit fclose feof ferror fflush fgetpos fgets fopen fprintf fputc fputs fputwc fread free fseek fsetpos ftell fwrite getc getenv getwc isalnum isalpha ispunct isspace iswctype isxdigit localeconv log10 longjmp malloc mbstowcs memchr memcmp memcpy memmove memset perror printf putc putwc qsort rand realloc remove rewind setbuf setlocale setvbuf signal sinh srand strcat strchr strcmp strcoll strcpy strcspn strerror strftime strlen strncat strncmp strncpy strpbrk strrchr strstr strtol strtoul strxfrm tan tanh tolower toupper towlower towupper ungetc ungetwc vfprintf wcscmp wcscoll wcscpy wcscpy_s wcsftime wcslen wcstol wcstombs wcsxfrm _vsnprintf_s _strtoui64 _strtoi64 _nextafter _write _stricmp _strdup _read _memicmp _fileno _fdopen

shcore

GetDpiForMonitor SetProcessDpiAwareness

shell32

CommandLineToArgvW DragAcceptFiles DragQueryFileW SHCreateItemFromParsingName SHFileOperationW SHGetKnownFolderPath SHGetPropertyStoreForWindow SetCurrentProcessExplicitAppUserModelID ShellExecuteW Shell_NotifyIconGetRect Shell_NotifyIconW

shlwapi

QISearch SHLoadIndirectString SHStrDupW

winmm

midiInClose midiInGetDevCapsA midiInGetErrorTextA midiInGetNumDevs midiInOpen midiInStart midiInStop timeBeginPeriod timeEndPeriod timeGetDevCaps

ws2_32

WSAConnect freeaddrinfo getaddrinfo getnameinfo inet_pton

wsock32

WSACleanup WSAGetLastError WSAStartup __WSAFDIsSet accept bind closesocket connect getsockname htonl htons inet_addr ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt socket

Name

.text

Size

72.4MB

Virtual Size

72.4MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

907KB

Virtual Size

906KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

14.6MB

Virtual Size

14.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

pck

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

1.8MB

Virtual Size

1.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

180B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

120B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

95KB

Virtual Size

95KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

368KB

Virtual Size

367KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

[Kimochi] ei-chan/libspine_godot.windows.template_release.x86_64.dll

IMPHASH 72924649036824cf606f26c24fdb8ce7
SHA256 854d827b8926b00ba6459093033bf0c0898efa2b6e1c85eb0abc78ca153ea58c
MD5 ff37981d7a15f17bba4be2f36c4ef8f7
SHA1 a88970a28ab84d5054a4e67424475f5433c307c6
SHA512 559c122f1b3d6e311dacb47132f355cd7fc041e970e19106806693ae204298f0d46d62c05413d198f12e49f2e7ff5753c4366d9a392863a290a2356858906ab0
SSDEEP 24576:p+lLRUvRWvPcPj82iZM3B1yMRHBk37rHA18GFlGkutBdy:p+lLRUvRWv0PiZMx1ZHK37rgifkutBM
TLSH
T152655B1AB3A882F8C17AD27DC247050BE2F13894A3759FE707A6064D5F27BE1167EE11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

kimochi.info

Minor OS version

Major OS version

Entry point

907496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId QueryPerformanceCounter InitializeCriticalSectionEx GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess GetCurrentProcessId InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree HeapAlloc HeapReAlloc CloseHandle GetConsoleMode SetFilePointerEx GetStdHandle GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree VirtualProtect LCMapStringW FlushFileBuffers WriteFile GetConsoleOutputCP GetFileSizeEx FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStringTypeW SetStdHandle CreateFileW HeapSize WriteConsoleW

Name

.text

Size

1019KB

Virtual Size

1018KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

279KB

Virtual Size

278KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

44KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

48KB

Virtual Size

48KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

304B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

[Kimochi] ei-chan.rar

[Kimochi] ei-chan/ei_chan_1_2.exe

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

ole32

oleaut32

uiautomationcore

user32

advapi32

avrt

bcrypt

crypt32

dwmapi

dwrite

dxgi

gdi32

imm32

iphlpapi

msvcrt

shcore

shell32

shlwapi

winmm

ws2_32

wsock32

generic

[Kimochi] ei-chan/ei_chan_1_2.pck

[Kimochi] ei-chan/libspine_godot.windows.template_release.x86_64.dll

kernel32

generic