4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3

Sharing

Copy URL Twitter E-mail

General

Target
4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3
Size 2.2MB
Sample260910-v2bmmsv1b1
SHA256 4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3
MD5 8a26d5f11838856a291853cc9d45b862
SHA1 c9282e0d6d0db653123eb48203388fe6b0f030e5
SHA512 fb90e385278ad7c65772b58c5e1383aee42572feb4053a5726da32b9772116878a87f0ea3fba529ebffe5fa150e4d5acfb46299025b3fe2b2cadf87b4911af12
SSDEEP 49152:Ehd7t8nQGeQ6yhyphkoZbUuxrw50ZqsbL18SXQ4o2xk:Eh+hV4ZbddqsbL18SXQ4o2xk
TLSH
T148B5BF15F3C825B8D567CA38CB459333D2B2B9524771A08B0AAAC3051FB7DA25B3FB15
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3

File Explorer

4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3

.dll 2.2MB

4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3

IMPHASH ad4a68e15b76b55a57953e51009ecbed
SHA256 4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3
MD5 8a26d5f11838856a291853cc9d45b862
SHA1 c9282e0d6d0db653123eb48203388fe6b0f030e5
SHA512 fb90e385278ad7c65772b58c5e1383aee42572feb4053a5726da32b9772116878a87f0ea3fba529ebffe5fa150e4d5acfb46299025b3fe2b2cadf87b4911af12
SSDEEP 49152:Ehd7t8nQGeQ6yhyphkoZbUuxrw50ZqsbL18SXQ4o2xk:Eh+hV4ZbddqsbL18SXQ4o2xk
TLSH
T148B5BF15F3C825B8D567CA38CB459333D2B2B9524771A08B0AAAC3051FB7DA25B3FB15
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

397216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

advapi32

RegQueryValueExW RegCloseKey OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegEnumKeyExW RegOpenKeyExW

bcrypt

BCryptGenRandom

kernel32

EncodePointer FlsFree LocalFree GetTickCount64 SetLastError FormatMessageW GetLastError CloseHandle GetExitCodeProcess OpenProcess K32EnumProcesses GetProcessId DuplicateHandle QueryFullProcessImageNameW GetCurrentProcess CloseThreadpoolIo GetCurrentProcessId GetStdHandle RaiseFailFastException TzSpecificLocalTimeToSystemTime SystemTimeToFileTime FileTimeToSystemTime GetSystemTime GetCurrentThread Sleep DeleteCriticalSection EnterCriticalSection SleepConditionVariableCS LeaveCriticalSection WakeConditionVariable QueryPerformanceCounter InitializeCriticalSection InitializeConditionVariable WaitForMultipleObjectsEx QueryPerformanceFrequency GetFullPathNameW GetLongPathNameW GetCPInfo WideCharToMultiByte LocalAlloc GetConsoleOutputCP GetProcAddress CreateDirectoryW CreateFileW CreateThreadpoolIo StartThreadpoolIo CancelThreadpoolIo DeleteFileW DeviceIoControl ExpandEnvironmentStringsW FindClose FindFirstFileExW FreeLibrary GetFileAttributesExW GetFileInformationByHandleEx GetFileType GetModuleFileNameW GetOverlappedResult LoadLibraryExW SetFileInformationByHandle SetThreadErrorMode GetThreadPriority SetThreadPriority GetDynamicTimeZoneInformation GetTimeZoneInformation WriteFile GetCurrentProcessorNumberEx SetEvent CreateEventExW GetEnvironmentVariableW FlushProcessWriteBuffers WaitForSingleObjectEx RtlVirtualUnwind RtlCaptureContext RtlRestoreContext AddVectoredExceptionHandler FlsAlloc FlsGetValue FlsSetValue CreateEventW SwitchToThread CreateThread GetCurrentThreadId SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualAlloc VirtualProtect VirtualFree QueryInformationJobObject GetModuleHandleW GetModuleHandleExW GetProcessAffinityMask InitializeContext GetEnabledXStateFeatures SetXStateFeaturesMask VirtualQuery InitializeCriticalSectionEx GetSystemTimeAsFileTime ResetEvent DebugBreak WaitForSingleObject SleepEx GlobalMemoryStatusEx GetSystemInfo GetLogicalProcessorInformation GetLogicalProcessorInformationEx GetLargePageMinimum VirtualUnlock VirtualAllocExNuma IsProcessInJob GetNumaHighestNodeNumber GetProcessGroupAffinity K32GetProcessMemoryInfo RaiseException RtlPcToFileHeader InterlockedFlushSList RtlUnwindEx InitializeSListHead

ole32

CoGetApartmentType CoInitializeEx CoUninitialize CoCreateGuid CoWaitForMultipleHandles

api-ms-win-crt-heap-l1-1-0

_callnewh free calloc malloc

api-ms-win-crt-math-l1-1-0

modf pow ceil

api-ms-win-crt-string-l1-1-0

strcpy_s strcmp _stricmp strlen

api-ms-win-crt-convert-l1-1-0

strtoull

api-ms-win-crt-runtime-l1-1-0

_crt_atexit abort _register_onexit_function terminate _initialize_onexit_table _cexit _initialize_narrow_environment _execute_onexit_table _initterm _initterm_e _seh_filter_dll _configure_narrow_argv

0FOeOd2Fdkn0gIFSU 0RvUFzZi51zy1fjkkhdFMAC92KGk1 0nvihNeufU6DtrtP9zOTK1S 1JhuGSzF9kWu 1vVHyElcdr 2GB5rlWQYkElkUKj9OKp 2WU8E7IfmjYU14PUQCL8Eh 2qOVwKhLXa9wxeRdjzbkMmioS 2s2TDvoYnnRearQxF3B39zc 36ceeP0Y4O 3OL9X6bMbNgc4oCVvXTUehe57hr 3wFsh798 3whEinsKs0LRkYFm3wGd 3yATMmBGS9qelITmpXzsZ9Kz 41eD2uLrMxrJNT 4FFbZwydvwut3aM 4FxfccSsBVbZr 4dDS4sGbx5BSO5WjjHvtfl6H6oCpma 53RO1hwp 5KzTwMOfcW 5UYwzPHRKHbOrUJg 6jYQ3MQsoJfBmo1byOclDf62TXAc 7A5ZvwLMZnQWYouT9CjFXEaPI44 7XwiTCXc4f4W5cHj8ugWIx4ZNRsDuL 7xSva4KXruVGkw 870sromEV 8hFPuj1E6 8ug4oeKXV13zNVxBYhXYB0Wn 958nEf1tjrzm1zfI8z 9AYgXWtCDU8S9b0zHuln3eXdzPimB6 9GwOuMMteDbuCBX5lvn3 9pY6yDmXFMZsZj48Be1N4WUBuT 9rc692mfQ4BDoKx3D5 9tgHOunDlXAEfpUFqSCS3QIifMLI ADXa3Hv8yxSMVq1GSQAHjDK4RRe4 AZKl75AHpPRM Arux9tPWL C1GmP20YWaWwnwuJuZhwFxZZuX CmqigbD8X9AyQ5nzr2jFe DEE59jFV3lG8m50KeIoqMyhlz9e8c6gk DUtvCRqMG4d1 DZ2uwSBfBMBD6EvLxAV1IukqT Do82hZ3jGnnfY1248D DuJHhV1pCfHCCp95IO6k E3iZ13K EqABrYS Fr4G8xzN44NzV0XtEBBYpoEVL8NdXyQ G2lmTA4kRUOwnR G8Z74LJ0qGQoTlpDNLEvdxMMDTFF2 HIokx0YEnyep HLNkXqoLRsOgAAL5e9qCStjpj9ypMonu HmpYjZCeGPIpPX0DZtTRUABZA IF7r5su9Vhe9yjzr6XKUMlQxdKsWgx IqPaiyMiP7StUz4nk6YE0GH J66XDBUNgIgbaCX8wT38xIZ J8qIJfW9HCYrpgIprVqIX0mU JGFdkrNgQaulz3JDNciPc191kA1jtu K8ZdO9fokLsReb0f KqJd3Xk2kLXXHGfxQW2f06IXVNfzT KxbmKgy9UxkJApas1Q4uHhRQIEZt2tH L1zEQZCV0suP7d22E3xJPZwswosuJau L2PuKAebKP4SYrvusw9shls2MdZfEJp LFt21Du36alIiI LIWKblP4b Lz8yqpa0vaLz9 Mf0NEGCtGNpxdaZtVndz9Sx Mf6XFCkR03ZPP5oQFmDR8NXNP5qU3qTo MlHt1MiaCX21TPzERTWxpoO MpAccessibilityAsyncEvent MpAddDynamicSignatureFile MpAllocMemory MpAmsiCloseSession MpAmsiNotify MpAmsiScan MpAsrSetHipsUserExclusion MpAsrSetHipsUserExclusionEx MpChangeCapability MpCheckAccessForClipboardOperation MpCheckAccessForClipboardOperationEx MpCheckAccessForClipboardOperationEx2 MpCheckAccessForCopyFile MpCheckAccessForDragDropOperation MpCheckAccessForDragDropOperation2 MpCheckAccessForPrintOperation MpCheckAccessForPrintOperation2 MpCleanControl MpCleanOpen MpCleanPrecheckStart MpCleanStart MpClientUtilExportFunctions MpClientUtilExportFunctionsSize MpClose MpConfigClose MpConfigDelValue MpConfigGetValue MpConfigGetValueAlloc MpConfigInitialize MpConfigIteratorClose MpConfigIteratorEnum MpConfigIteratorEnumV2 MpConfigIteratorOpen MpConfigOpen MpConfigQueryProtection MpConfigRefresh MpConfigRegisterForNotifications MpConfigSetValue MpConfigUninitialize MpConfigUnregisterNotifications MpConveyDlpBypass MpConveySampleSubmissionResult MpConveyUserChoiceForDlpNotification MpConveyUserChoiceForDlpNotificationEx MpConveyUserChoiceForSampleList MpCreateComInstance MpDbgAllocMemory MpDebugExportFunctions MpDefenderIsPrintAccessCheckNeeded MpDefenderPrintAccessCheck MpDefenderPrintDataProvide MpDelegateCopyFile MpDelegateCopyFileAsync MpDeleteAsrHistory MpDetectionEnumerate MpDetectionQuery MpDeviceControlAuthenticateNetworkShare MpDeviceControlQueryInformation MpDeviceControlValidateDataDuplicationRemoteLocationConfiguration MpDlpCheckAccessForBuffer MpDlpDelegateEnforcement MpDlpDispatchAccessEvent MpDlpGetEvidenceFileUrl MpDlpGetOperationEnforcmentMode MpDlpInitializeEnforcementMode MpDlpNotifyCloseDocumentFile MpDlpNotifyPostOpenDocumentFile MpDlpNotifyPostSaveAsDocument MpDlpNotifyPostStartPrint MpDlpNotifyPreOpenDocumentFile MpDlpNotifyPrePrint MpDlpNotifyPreSaveAsDocument MpDlpScanLLM MpDlpServicePingRpc MpDynamicSignatureEnumerate MpDynamicSignatureOpen MpEffectiveConfigurationReport MpElevateCleanHandle MpElevationHandleAcquire MpElevationHandleActivate MpElevationHandleAttach MpElevationHandleOpen MpErrorMessageFormat MpFastMemoryScan MpFastMemoryScanOpen MpFlushLowfiCache MpForcedReboot MpFreeFileTrustExtraInfo MpFreeMemory MpFreeTSModeInfo MpFreeUpToDateInfo MpGenerateSignature MpGenerateSignatureEx MpGenerateThreatReport MpGetASRPerRuleExclusions MpGetAsrBlockedActionInfos MpGetAsrBlockedActions MpGetAsrBlockedProcesses MpGetCallistoDetections MpGetConfigPayloadStatus MpGetConfigValue MpGetCopyAcceleratorCancellableCopyStatus MpGetCopyAcceleratorProcessStatus MpGetDevMode MpGetDevVolumesProtectionState MpGetDeviceControlSecurityPolicies MpGetDeviceControlStatus MpGetDlpEvents MpGetEngineVersion MpGetFCValue MpGetHIPSRuleInfo MpGetMAPSConnectivityStatusInfo MpGetNpSupportFile MpGetRunningMode MpGetSACInfo MpGetSCCState MpGetSampleChunk MpGetSampleListRequiringConsent MpGetTDTFeatureStatus MpGetTDTFeatureStatusEx MpGetTPStateInfo MpGetTSModeInfo MpGetTaskSchedulerStrings MpGetThreatExecutionInfo MpGetUpToDateInfo MpGetUpdatePlatformStatus MpHandleClose MpImportConfigPayload MpIsDeviceControlAvailable MpIsGivenRunningModeSupported MpIsRtpAutoEnable MpManagerDisable MpManagerEnable MpManagerOpen MpManagerStatusQuery MpManagerStatusQueryEx MpManagerVersionQuery MpManagerXBGMDisable MpManagerXBGMEnable MpMemoryScanStart MpNetworkCapture MpNotificationRegister MpOfflineScanInstall MpOfflineScanStatusQuery MpOpen MpProductGenuineCheck MpQuarantineRequest MpQueryDefaultFolderGuardList MpQueryDevVolumeProtectionState MpQueryEngineConfigDword MpQueryFileTrustByHandle MpQueryFileTrustByHandle2 MpRemapCallistoDetections MpRemoveDynamicSignatureFile MpReportClipboardOwner MpRequestSnooze MpRollbackPlatform MpSampleQuery MpSampleSubmit MpScanControl MpScanResult MpScanStart MpScanStartEx MpSendBrowserHeartbeat MpServiceLogMessage MpSetBreakTheGlassStatus MpSetTPState MpSetUacElevationDefaultWindowHandle MpShowDlpDetailsDialog MpShutdownCopyAcceleratorProcess MpSmartLockerEnable MpTelemetryAddToAverageDWORD MpTelemetryAddToStreamDWORD MpTelemetryAddToStreamDWORD64 MpTelemetryAddToStreamString MpTelemetryIncrementDWORD MpTelemetryInitialize MpTelemetryIsOptIn MpTelemetryLiteralAddToAverageDWORD MpTelemetryLiteralAddToStreamDWORD MpTelemetryLiteralAddToStreamDWORD64 MpTelemetryLiteralAddToStreamString MpTelemetryLiteralIncrementDWORD MpTelemetryLiteralSetDWORD MpTelemetryLiteralSetDWORD64 MpTelemetryLiteralSetIfMaxDWORD MpTelemetryLiteralSetIfMinDWORD MpTelemetryLiteralSetString MpTelemetrySetConsent MpTelemetrySetDWORD MpTelemetrySetDWORD64 MpTelemetrySetIfMaxDWORD MpTelemetrySetIfMinDWORD MpTelemetrySetString MpTelemetryUninitialize MpTelemetryUpdateUserConsent MpTelemetryUpload MpThreatAction MpThreatEnumerate MpThreatHistoryRequest MpThreatLocalizedInfoQuery MpThreatOpen MpThreatQuery MpThreatRollup MpTriggerErrorHeartbeatReport MpTriggerHeartbeatOnUninstall MpTriggerStatusRefreshNotification MpUnblockEngine MpUnblockPlatform MpUnblockSignatures MpUpdateBrowserActiveTab MpUpdateControl MpUpdateDevMode MpUpdateEngine MpUpdatePlatform MpUpdateServicePingRpc MpUpdateStart MpUpdateStartEx MpUpdateTSMode MpUpdateTSModeEx MpUtilsExportFunctions MpWDEnable MpXBGMEnable MpXBGMFreeEvent MpXBGMGetData MpXBGMPutData MpXBGMUpdateIV MputAddToAverageDWORD64Rpc MputAddToAverageDWORDRpc MputIncrementDWORD64Rpc MputIncrementDWORDRpc MputSetBoolRpc MputSetDWORD64Rpc MputSetDWORDRpc MputSetIfMaxDWORD64Rpc MputSetIfMaxDWORDRpc MputSetIfMinDWORD64Rpc MputSetIfMinDWORDRpc MputSetStringRpc MvtpF6blA06aA N6xHLFYanpJNjYzBWK4ghUZzJBdu NM5CHIWtytXBBp NV31zu2JLPni Nd1mvKYhYBX9aOeShm64WPnIpa NjXdJS946Wn0hpSMTuBbNnijq OcLBNfBixGvLwWoIU0HX6KX3AmlyMVn OlYGHSzO0UlAsTKEn OoEnjWd4m8Lm0YxoO7S6BFdWf Oq6L9VAyuX P9Ji9qtHGqvh5TvpiBI PRDZp64xUkbjHG0G PZG4iX0NmYZg Pcq5DtIbEwkqIfj9XkOlfMcFHHMpMUN PgespybTkG6tB5c8diww9t3UHk0jPqJ7 PvGwgIjw01KQvTDDBcQsFAsRMXetO09p QNGVR3erHYJ4gEfFcgz4XYo0 R8V0iIZydmazV4r3R9P RVXWVTjilmYvZ29yjpsGEJBdFpZX Rl35ltNwF RqlyGDz5E6W S2gJmXfTJzQ5DvK51ZGCoAB0A SvN07tPR SwG6PH885uIfEZimArF Sx61zuaE2M5Si9 T4pepY1gj6q6BI7NGXfwUzk TCcT0waPYQlXpeVnK6 TL8qKjlPH8Rm1q8E5enoF4K4aVAd0 TU4rlDy9gitUhTfcLWc Ty2gzeMAd4e7Rt32 U0ELv6fbOr0lXEho UVNSh68KdFnjgqDH5Vjv3Sd9dN Uj955oGuLqWHFEIlRSGFXLqf89atCB VoYT3WrRIYNGIZEknQjmQLFn W2lNSguT4gRZ9p8vdI3MKpI WDEnable WDStatus WSjSMcLqn8tu3IGTdLuW WevUaswH8 WmEdOZ4KUQDjv03cC6rRnnWaUVOQ2 WmF0UQ1bba5nVUlsM WpYmUDUNQQGzsObuicZJN X0jGysZJFO XNaPuKncoxUdA4 XZgIH98nCT59m5WrnmMfl XeKozVBWXUW YCadaaY YGO24Zf9ZQMU YkykhE9bMHOUXb4Bgx67gv7PH6ZCeg1 ZO832UQVjkDoyPwiGVOkqQoP a05pHb9Nn2SR4MV aPVqNiaqZsuemKGt2VfE7VcB aw3JF6Qb9mD2v4sXccdKFQOp9E87y bLNqDZWg608VECPvhP669TCiFUFI2pMS bm6f8Ls c1y5t09vBsrVYwRFMsbTdNBOEBQ6Sc1M cG8CF8Q2Rff1l3ibbVFP0xWoqvFJ0 cW0rizBUcDi d8DqYI576UOW dFsIwX6N4KFE dzTlvLrYAE eBIwT33bDu5Tv eOsRZlMMiQOmXeq31HVKTV31 eyyaZMePOY6D f5wEpsc0ZN fceY0czgUbkrKE9ihxBRbqz g9AqxsBL4M7BtpHBI gZESGpDz6S h2zFi6ScjkulMd hF0tqHNUSpbMd hMIYyWOEkEnpl96Dklv3OImcm hPW2tbc0T6xPoCR hYVYDr34Qb0B9U9 hkMT3I0JIjRz iV7brBokz9sPkz2XITWiRASy1jxiF7 iYSfq2qLp2mO6jy159dWIjIgwU0B2Sk idCCxN5v6uH7Zl j6RBTmdn4sYw j6s7Htlx jgniAJkK5eYtRDmlWQJty7 jj1VN5LzRy7N4RHlUdsWD33oYH3q kETbZbZ6TCfV khpCcBZnpvnR8pNrDyDJ0l l8JUTbqZ6MUMX lJLA18WYjxGabdWyfUDpaxJpnSUWs8 lXlCkva5OUsj5MJFejotcd5si mds1GROA1Mo315zmi mwLxv4kn67RQXQODlp9uQgk65bpxINZj n0gNt9PsAcGjdcNJcz8roq nM3KtT1p1vkNW1xhVjyU nqu87ob45 oIPXFi6H oYr68fa0opeILUfScJcMu4QI4c6 oeHLu9P oi2hWWxPg p9IX79hNt1uOfPixphsWRp98ReG pU2kn6bCRaxErKGQLJyiWxywK0wlb pcSDMOOFlY1Hehuy poCkY5ITvKmUXMaglZjF7 qFQDLZ3XT2 qJmxSCkqJtVLQlUmJ9URO5KfTZ qLgJjw6svwzL95UduCM0 qT48DytXyOcvuOmO62KlwFupx rsXCnIRHk4oN5l s5ChonyM1p slJXdJaw7GHfDCBKdBkvo25ZPayNgvw svMK9pc69VV swnN6Nr6Bb0A t6Osnozj4 uTlL6jNbfGzqre9E utPfUUlyvw621Pn6VHngTCpAcDB uyRoiUJzyyOpH0WHTJJE vAVXs6nibQIBh2GnLg vTFUZ2RKxJmRyINdZ wnA5IxXYmg wzAt3QT9IbkaH1WASoS17uGBlwo0A0 x39jNI8uzBd xhn8yaPXDwXNgcvg6Kcw xrySJtVp yb8JfhSyDommwbLQuQlzT yufDMB5gpm

Name

.text

Size

405KB

Virtual Size

408KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.managed

Size

695KB

Virtual Size

696KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

hydrated

Size

Virtual Size

316KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

504KB

Virtual Size

508KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

60KB

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

70KB

Virtual Size

72KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

517KB

Virtual Size

520KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

4dffc152ee39869b74880935e2cb63fb9ad63bf7b6e4972d6a4935c5e3d2c2f3

advapi32

bcrypt

kernel32

ole32

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

generic