51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f

Sharing

Copy URL Twitter E-mail

General

Target
51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f
Size 8.2MB
Sample260922-jgnwpaba98
SHA256 51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f
MD5 6c7930654d71d82b8263732b5f814760
SHA1 63170da59dafc8550d90e956f59412b021748416
SHA512 3e67fe1671c7b3bb2506ecbd2ff7acb45728a35c4b45048e21453a2f589006a73f2af0e7f7156cb4bcf495e2d446bb2acce2df197fbb208f3ceb25138d69d873
SSDEEP 98304:SMNRPxbLJfnLboOELQHCN4dTqHr821ZTVix8EVy:nN9xbLJfnLbqLQiNCx0ZU
TLSH
T15B965C1273E802DCF0BBD67C8A669A21D9B27C558721D6CF0254625A1F33FE48E7E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f

File Explorer

51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f

.exe 8.2MB

51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f

IMPHASH b5b71cbdaa1100f68d659889b74e96a4
SHA256 51fe6de2d5d94dec14ca282d277d6216441bddbdbdda13e1fcdcd5b7eabcb30f
MD5 6c7930654d71d82b8263732b5f814760
SHA1 63170da59dafc8550d90e956f59412b021748416
SHA512 3e67fe1671c7b3bb2506ecbd2ff7acb45728a35c4b45048e21453a2f589006a73f2af0e7f7156cb4bcf495e2d446bb2acce2df197fbb208f3ceb25138d69d873
SSDEEP 98304:SMNRPxbLJfnLboOELQHCN4dTqHr821ZTVix8EVy:nN9xbLJfnLbqLQiNCx0ZU
TLSH
T15B965C1273E802DCF0BBD67C8A669A21D9B27C558721D6CF0254625A1F33FE48E7E721
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4535152

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\jnkd\pathfinder_PSPCQA-06.50-20260609\internal\target\lib\PsPcSdkWebView\Release\PsPcSdkWebView.pdb

libcef

cef_string_utf16_set cef_time_from_basetime cef_time_to_timet cef_get_min_log_level cef_print_settings_create cef_response_create cef_v8_stack_trace_get_current cef_zip_reader_create cef_urlrequest_create cef_scroll_view_create cef_task_runner_get_for_thread cef_task_runner_get_for_current_thread cef_media_router_get_global cef_string_multimap_append cef_string_multimap_value cef_string_multimap_key cef_string_multimap_size cef_string_map_append cef_string_map_value cef_string_map_key cef_string_map_size cef_string_list_append cef_string_list_value cef_string_list_size cef_set_osmodal_loop cef_drag_data_create cef_stream_writer_create_for_handler cef_stream_writer_create_for_file cef_cookie_manager_get_global_manager cef_v8_value_create_promise cef_v8_value_create_function cef_v8_value_create_array_buffer_with_copy cef_v8_value_create_array_buffer cef_v8_value_create_array cef_v8_value_create_object cef_v8_value_create_string cef_v8_value_create_date cef_v8_value_create_double cef_v8_value_create_uint cef_v8_value_create_int cef_v8_value_create_bool cef_v8_value_create_null cef_v8_value_create_undefined cef_v8_context_in_context cef_v8_context_get_entered_context cef_v8_context_get_current_context cef_binary_value_create cef_textfield_create cef_window_create_top_level cef_panel_create cef_menu_button_create cef_menu_model_create cef_browser_view_get_for_browser cef_browser_view_create cef_dump_without_crashing cef_post_data_element_create cef_post_data_create cef_request_create cef_stream_reader_create_for_handler cef_stream_reader_create_for_data cef_stream_reader_create_for_file cef_task_manager_get cef_server_create cef_string_multimap_free cef_string_multimap_alloc cef_browser_host_get_browser_by_identifier cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_request_context_cef_create_context_shared cef_request_context_create_context cef_request_context_get_global_context cef_image_create cef_list_value_create cef_display_convert_screen_rect_from_pixels cef_display_convert_screen_rect_to_pixels cef_display_convert_screen_point_from_pixels cef_display_convert_screen_point_to_pixels cef_display_get_alls cef_display_get_count cef_display_get_matching_bounds cef_display_get_nearest_point cef_display_get_primary cef_preference_manager_get_global cef_preference_manager_get_chrome_variations_as_strings cef_preference_manager_get_chrome_variations_as_switches cef_value_create cef_shared_process_message_builder_create cef_process_message_create cef_dictionary_value_create cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_is_feature_enabled_for_tests cef_set_data_directory_for_tests cef_execute_java_script_with_user_gesture_for_tests cef_id_for_command_id_name cef_string_utf16_to_lower cef_basetime_now cef_time_now cef_time_delta cef_time_to_basetime cef_get_current_platform_thread_id cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_parse_json_buffer cef_parse_json cef_uridecode cef_uriencode cef_base64_decode cef_base64_encode cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_create_url cef_parse_url cef_resolve_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_is_rtl cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_get_exit_code cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_is_cert_status_error cef_api_hash cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_wide_to_utf8 cef_log cef_string_utf16_to_utf8 cef_string_utf8_clear cef_string_utf16_cmp cef_string_utf8_to_utf16 cef_label_button_create cef_string_utf16_clear

gdi32

RemoveFontResourceExA AddFontResourceExA CreateFontIndirectA GetTextMetricsA CreateFontIndirectW CreateCompatibleDC GetStockObject BitBlt GetDeviceCaps SetRectRgn PtInRegion DeleteObject CreateRectRgn CreateFontW CombineRgn CreateSolidBrush SwapBuffers SetPixelFormat ChoosePixelFormat CreatePolygonRgn OffsetRgn DeleteDC SetTextColor SetBkMode SetViewportOrgEx CreateCompatibleBitmap SelectObject FillRgn

d3d11

D3D11CreateDevice

imm32

ImmGetCompositionStringW ImmAssociateContextEx ImmGetContext ImmSetCandidateWindow ImmReleaseContext ImmNotifyIME

oleacc

AccessibleObjectFromWindow LresultFromObject

advapi32

CryptReleaseContext CryptHashData CryptCreateHash CryptAcquireContextW SetSecurityDescriptorDacl InitializeSecurityDescriptor SetEntriesInAclW BuildTrusteeWithSidW AddMandatoryAce InitializeAcl IsValidAcl RegSetValueExW RegDeleteValueW RegEnumKeyExW RegDeleteKeyExW RegEnumValueW RegQueryInfoKeyW RegQueryValueExW RegCreateKeyExW RegNotifyChangeKeyValue AccessCheck MapGenericMask MakeSelfRelativeSD ConvertSecurityDescriptorToStringSecurityDescriptorW SetSecurityInfo SetNamedSecurityInfoW ConvertStringSecurityDescriptorToSecurityDescriptorW GetSecurityInfo GetNamedSecurityInfoW GetSecurityDescriptorSacl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorControl IsValidSecurityDescriptor GetAce EqualSid ConvertSidToStringSidW ConvertStringSidToSidW GetLengthSid CryptDestroyHash RevertToSelf RegOpenKeyExW RegCloseKey RegDisablePredefinedCache CreateProcessAsUserW SetThreadToken LookupPrivilegeNameW GetTokenInformation OpenProcessToken DuplicateTokenEx OpenThreadToken GetSidSubAuthorityCount GetSidSubAuthority SetTokenInformation IsTokenRestricted CheckTokenMembership LookupPrivilegeValueW CreateRestrictedToken AdjustTokenPrivileges FreeSid IsValidSid CryptGetHashParam

dbghelp

SymSetSearchPathW SymFunctionTableAccess64 SymGetSearchPathW SymCleanup SymSetOptions SymGetModuleBase64 StackWalk64 SymFromAddr SymGetLineFromAddr64 SymInitialize

ntdll

RtlUnwind RtlPcToFileHeader NtQueryInformationThread NtQuerySystemInformation RtlCaptureStackBackTrace NtDeleteKey NtQueryObject RtlInitUnicodeString RtlUnwindEx RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext VerSetConditionMask

powrprof

PowerDeterminePlatformRoleEx

propsys

InitPropVariantFromCLSID VariantCompare

setupapi

CM_Get_Device_IDW SetupDiGetClassDevsW SetupDiEnumDeviceInfo SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInterfaces SetupDiGetDeviceRegistryPropertyW SetupDiGetDeviceInterfaceDetailW

shell32

ShellExecuteA SHQueryUserNotificationState DragQueryFileW DragFinish SHGetKnownFolderPath CommandLineToArgvW ord680 SHGetFolderPathW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness GetDpiForMonitor

userenv

DeriveAppContainerSidFromAppContainerName

version

GetFileVersionInfoA VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoW GetFileVersionInfoSizeW VerQueryValueW

api-ms-win-core-processenvironment-l1-1-0

GetCommandLineA GetCommandLineW SetStdHandle GetCurrentDirectoryW GetEnvironmentVariableW ExpandEnvironmentStringsW SetEnvironmentVariableW GetStdHandle FreeEnvironmentStringsW SetCurrentDirectoryW GetEnvironmentStringsW

api-ms-win-core-synch-l1-1-0

WaitForSingleObjectEx WaitForSingleObject ReleaseMutex CreateMutexW CreateSemaphoreExW ReleaseSRWLockExclusive CreateEventW CreateMutexA TryAcquireSRWLockExclusive InitializeCriticalSectionEx ResetEvent TryEnterCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection CreateEventA SetEvent OpenEventA CreateEventExW InitializeCriticalSection ReleaseSemaphore DeleteCriticalSection AcquireSRWLockExclusive

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary LockResource GetModuleHandleExW LoadStringW GetProcAddress GetModuleHandleW LoadResource GetModuleFileNameA FreeLibraryAndExitThread GetModuleHandleExA SetDefaultDllDirectories LoadLibraryExW LoadLibraryExA GetModuleHandleA GetModuleFileNameW SizeofResource

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-errorhandling-l1-1-0

RaiseException SetLastError GetLastError UnhandledExceptionFilter SetUnhandledExceptionFilter

api-ms-win-core-libraryloader-l1-2-1

FindResourceW LoadLibraryW

api-ms-win-core-heap-l2-1-0

LocalAlloc GlobalAlloc LocalFree

api-ms-win-core-heap-obsolete-l1-1-0

GlobalUnlock GlobalLock GlobalSize

api-ms-win-core-com-l1-1-0

CoInitializeEx CoUninitialize CoTaskMemAlloc CoTaskMemFree CoInitializeSecurity PropVariantClear CoCreateInstance CoSetProxyBlanket CoGetObjectContext CoCreateFreeThreadedMarshaler CoGetApartmentType

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-ntuser-sysparams-l1-1-0

SystemParametersInfoW GetMonitorInfoW GetSystemMetrics EnumDisplayMonitors

api-ms-win-core-synch-l1-2-0

SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable InitializeConditionVariable InitOnceExecuteOnce SleepConditionVariableCS Sleep

api-ms-win-core-profile-l1-1-0

QueryPerformanceFrequency QueryPerformanceCounter

api-ms-win-core-localization-l1-2-0

FormatMessageA EnumSystemLocalesW GetThreadUILanguage FormatMessageW IsValidLocale GetLocaleInfoW IsValidCodePage GetACP LCMapStringW GetCPInfo GetUserDefaultLangID GetUserDefaultLCID LCMapStringEx GetUserDefaultLocaleName GetOEMCP GetLocaleInfoEx

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus GetOverlappedResult CreateIoCompletionPort GetQueuedCompletionStatus CancelIoEx DeviceIoControl

api-ms-win-core-processthreads-l1-1-0

CreateProcessW InitializeProcThreadAttributeList DeleteProcThreadAttributeList TerminateThread CreateThread ExitProcess SetThreadPriority CreateProcessA TerminateProcess GetCurrentThread TlsGetValue SwitchToThread TlsSetValue TlsFree ProcessIdToSessionId GetExitCodeThread GetCurrentThreadId TlsAlloc ExitThread CreateRemoteThread GetProcessTimes OpenThread UpdateProcThreadAttribute GetStartupInfoW ResumeThread GetThreadId SetThreadPriorityBoost GetThreadPriorityBoost SuspendThread SetPriorityClass GetPriorityClass GetExitCodeProcess GetProcessId GetThreadPriority GetCurrentProcess GetCurrentProcessId FlushProcessWriteBuffers

api-ms-win-core-job-l2-1-0

SetInformationJobObject CreateJobObjectW

api-ms-win-core-sysinfo-l1-1-0

GetLocalTime GetVersionExW GlobalMemoryStatusEx GetLogicalProcessorInformation GetSystemTimeAsFileTime GetSystemInfo GetWindowsDirectoryW GetLogicalProcessorInformationEx GetTickCount64 GetSystemTime GetSystemDirectoryW GetTickCount

api-ms-win-core-kernel32-legacy-l1-1-0

GetComputerNameA CreateFileMappingA MoveFileW RegisterWaitForSingleObject FindResourceA

api-ms-win-core-threadpool-legacy-l1-1-0

UnregisterWaitEx

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW OutputDebugStringA DebugBreak

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle SetHandleInformation

api-ms-win-core-processthreads-l1-1-2

SetThreadInformation

api-ms-win-core-file-l1-1-0

GetDriveTypeW WriteFile FindFirstFileA GetFileAttributesW SetFileAttributesW RemoveDirectoryW CreateDirectoryW FindFirstFileExA GetFinalPathNameByHandleW GetLogicalDriveStringsW GetFileAttributesExW FindNextFileA ReadFile GetVolumePathNameW GetVolumeInformationW DeleteFileW GetFileInformationByHandle FindFirstFileW GetFileType GetLongPathNameW GetFullPathNameW CreateFileW SetFilePointerEx GetFileSizeEx SetEndOfFile SetFileTime LockFileEx UnlockFileEx SetFileInformationByHandle FlushFileBuffers FindClose FindNextFileW FindFirstFileExW GetDiskFreeSpaceExW

api-ms-win-core-memory-l1-1-0

ReadProcessMemory VirtualQuery VirtualAlloc VirtualFree VirtualProtect MapViewOfFile VirtualProtectEx VirtualAllocEx FlushViewOfFile WriteProcessMemory VirtualFreeEx UnmapViewOfFile CreateFileMappingW

api-ms-win-core-heap-l1-1-0

HeapCreate HeapQueryInformation GetProcessHeap HeapSetInformation HeapAlloc HeapDestroy HeapReAlloc HeapSize GetProcessHeaps HeapFree

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetProcessHandleCount GetThreadContext GetCurrentProcessorNumber OpenProcess GetProcessMitigationPolicy SetProcessMitigationPolicy

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime GetProductInfo GetNativeSystemInfo

api-ms-win-core-wow64-l1-1-0

IsWow64Process

api-ms-win-core-processtopology-obsolete-l1-1-0

SetThreadAffinityMask

api-ms-win-core-localization-l1-2-1

EnumSystemLocalesEx

api-ms-win-mm-time-l1-1-0

timeEndPeriod timeBeginPeriod timeGetTime timeGetDevCaps

api-ms-win-core-timezone-l1-1-0

SystemTimeToTzSpecificLocalTime TzSpecificLocalTimeToSystemTime GetTimeZoneInformation FileTimeToSystemTime SystemTimeToFileTime

api-ms-win-core-realtime-l1-1-1

QueryUnbiasedInterruptTimePrecise

api-ms-win-core-realtime-l1-1-0

QueryUnbiasedInterruptTime QueryThreadCycleTime

api-ms-win-core-string-l2-1-0

CharUpperW

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory RoInitialize RoUninitialize

api-ms-win-core-processthreads-l1-1-3

SetThreadDescription GetProcessInformation SetProcessInformation

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiA

api-ms-win-core-file-l2-1-0

CreateSymbolicLinkW GetFileInformationByHandleEx ReplaceFileW MoveFileExW CreateDirectoryExW CreateHardLinkW

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l2-1-2

CopyFileW

ws2_32

ioctlsocket

api-ms-win-core-winrt-string-l1-1-0

WindowsDeleteString WindowsGetStringRawBuffer WindowsCreateString

api-ms-win-core-synch-l1-2-1

WaitForMultipleObjects CreateSemaphoreW

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo K32GetModuleInformation

api-ms-win-core-string-l1-1-0

CompareStringEx MultiByteToWideChar CompareStringW GetStringTypeW WideCharToMultiByte

kernel32

K32EnumProcessModules QueryDosDeviceW PrefetchVirtualMemory TerminateJobObject QueryProcessCycleTime K32GetPerformanceInfo QueryInformationJobObject

user32

SetClassLongPtrW GetWindowLongW PtInRect SetRect ClientToScreen GetClientRect InvalidateRect GetFocus SendInput ShowCursor NotifyWinEvent SetForegroundWindow RegisterClassExA SetWindowLongPtrA UnregisterClassA CreateWindowExA DefWindowProcA MoveWindow GetWindowInfo GetCursorInfo LoadCursorA UnregisterClassW SetLayeredWindowAttributes wsprintfW DrawTextW GetDpiForWindow FillRect RegisterClipboardFormatW IntersectRect GetWindowDC SystemParametersInfoA GetWindowLongPtrA GetDpiForSystem DestroyCaret ScreenToClient IsDialogMessageW TranslateAcceleratorW LoadAcceleratorsW DestroyWindow CreateWindowExW RegisterClassExW PostQuitMessage DefWindowProcW PostMessageW DispatchMessageW TranslateMessage GetMessageW RegisterWindowMessageW SetParent GetWindowLongPtrW IsWindowVisible SetWindowPos SetCaretPos IsWindow GetDC ReleaseDC GetKeyboardLayout TrackMouseEvent GetMessageTime GetParent GetKeyboardLayoutNameW GetMonitorInfoA ShowWindow CreateCaret GetMessageExtraInfo FindWindowExW MsgWaitForMultipleObjectsEx PeekMessageW GetQueueStatus RegisterPointerDeviceNotifications GetPointerDevices GetPointerDevice GetUserObjectInformationW SetProcessDPIAware QueryDisplayConfig SendMessageW GetDisplayConfigBufferSizes CreateDesktopW SetProcessWindowStation GetThreadDesktop CreateWindowStationW GetProcessWindowStation CloseWindowStation CloseDesktop GetKeyState KillTimer SetTimer GetAncestor MonitorFromRect SetWindowPlacement GetWindowRect IsIconic SetWindowLongPtrW AdjustWindowRectEx SetWindowTextW RemovePropW GetPropW SetPropW UpdateWindow RemoveMenu GetSubMenu SetMenu GetMenu IsWindowEnabled EnableWindow EndDialog GetDoubleClickTime DialogBoxParamW EndDeferWindowPos DeferWindowPos SetFocus VkKeyScanExW BeginDeferWindowPos GetWindowPlacement CallWindowProcW LoadIconW LoadCursorW GetTouchInputInfo WindowFromPoint GetCursorPos SetCursor EndPaint BeginPaint ReleaseCapture SetCapture GetCapture RegisterTouchWindow CloseTouchInputHandle

ole32

CoRegisterInitializeSpy RevokeDragDrop RegisterDragDrop ReleaseStgMedium DoDragDrop CoRevokeInitializeSpy

comdlg32

FindTextW

shlwapi

UrlUnescapeW ord437 PathMatchSpecW PathStripPathA PathRemoveFileSpecA UrlEscapeW

usp10

ScriptShape ScriptGetCMap ScriptPlace ScriptTextOut ScriptItemize ScriptFreeCache

api-ms-win-core-threadpool-l1-2-0

CloseThreadpoolWait SetThreadpoolWait FreeLibraryWhenCallbackReturns CreateThreadpoolTimer SetThreadpoolTimer CloseThreadpoolTimer TrySubmitThreadpoolCallback CreateThreadpoolWait WaitForThreadpoolTimerCallbacks

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InterlockedFlushSList InitializeSListHead

api-ms-win-core-console-l1-1-0

SetConsoleCtrlHandler GetConsoleOutputCP WriteConsoleW GetConsoleMode ReadConsoleW

api-ms-win-core-fibers-l1-1-0

FlsFree FlsAlloc FlsSetValue FlsGetValue

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

hid

HidD_GetSerialNumberString HidD_GetProductString HidD_GetManufacturerString HidD_SetFeature HidD_GetFeature HidD_GetPreparsedData HidP_GetCaps HidD_GetHidGuid HidD_FreePreparsedData HidD_GetAttributes HidP_GetValueCaps

rpcrt4

RpcStringBindingComposeA UuidToStringA RpcBindingFree RpcBindingSetAuthInfoExA RpcStringFreeA UuidCreate RpcBindingFromStringBindingA RpcMgmtIsServerListening RpcServerRegisterAuthInfoA RpcBindingInqObject RpcServerUnregisterIf RpcServerRegisterIf2 NdrClientCall3 NdrServerCallAll RpcServerInqCallAttributesA RpcServerListen RpcBindingSetObject RpcServerUseProtseqEpA RpcMgmtStopServerListening NdrServerCall2

ntdsapi

DsFreeSpnArrayA DsGetSpnA DsMakeSpnA

bcrypt

BCryptImportKeyPair BCryptOpenAlgorithmProvider BCryptDestroyKey BCryptCloseAlgorithmProvider BCryptVerifySignature

crypt32

CryptProtectData CryptUnprotectData

ncrypt

NCryptExportKey NCryptDeleteKey NCryptOpenStorageProvider NCryptCreatePersistedKey NCryptFreeObject NCryptSignHash NCryptFinalizeKey

comctl32

ord410 ord413

api-ms-win-core-file-l1-2-2

AreFileApisANSI GetTempFileNameA

api-ms-win-core-kernel32-legacy-l1-1-2

OpenFileMappingA

xinputuap

XInputGetState

api-ms-win-core-io-l1-1-1

GetOverlappedResultEx

unifiedtelemetry.model

utCreateEventFromJson

unifiedtelemetry.client

utDestroyClient utDispatch utSetClientTransport utCreateClient utInitClient utUserDispatch

winhttp

WinHttpSetOption WinHttpOpenRequest WinHttpSetTimeouts WinHttpReadData WinHttpCloseHandle WinHttpWriteData WinHttpQueryHeaders WinHttpAddRequestHeaders WinHttpOpen WinHttpSetStatusCallback WinHttpReceiveResponse WinHttpConnect WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpSendRequest

Name

.text

Size

5.1MB

Virtual Size

5.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.6MB

Virtual Size

1.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

41KB

Virtual Size

383KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

275KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

prot

Size

512B

Virtual Size

137B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

minATL

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

memcpy_

Size

512B

Virtual Size

264B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

512B

Virtual Size

500B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

293KB

Virtual Size

292KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

35KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.grfn10

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.grfn20

Size

276KB

Virtual Size

275KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.grfn11

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.grfn22

Size

568KB

Virtual Size

572KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=23, id=259, version=30795,

count=207, id=261, version=30795,

count=1, id=253, version=33030,

count=19, id=260, version=33030,

count=18, id=259, version=33030,

count=12, id=257, version=27412,

count=8, id=261, version=30159,

count=205, id=265, version=33133,

count=4, id=257, version=30159,

count=42, id=260, version=30795,

count=114, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=262, version=30795,

count=110, id=261, version=33030,

count=42, id=257, version=30795,

count=356, productName=Unmarked objects (old),

count=910, id=1, productName=Unmarked objects,

count=248, id=261, version=33133,

count=1, id=256, version=33133,

count=1, id=255, version=33133,

count=1, id=151,

count=1, id=258, version=33133,