5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9

Sharing

Copy URL Twitter E-mail

General

Target
5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9
Size 9.9MB
Sample260925-ged8csah76
SHA256 5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9
MD5 825959b85c3297e01612af6a276e76e0
SHA1 f98554a291b73e1235068733be02b8e88d8cc924
SHA512 a36730f13c16016d04ef804339cbd11c71ec2e8de159dc8c93d4b22caa51e46df0875521499aa82c391a2f7c43ffd85529b2d52c20c1263855e7d59dea493d36
SSDEEP 196608:bL5zk14h7/ygUe1F3jTwEmDD3Ww8aCWC5xy:/lk14h7/ygUe1CnX37bC
TLSH
T147A69E213A05CC31E68110F9DDBCFBAE46AD95240BF955D3B3D43EE99AA42C23A3154F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9

File Explorer

5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9

.exe 9.9MB

5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9

IMPHASH a91b87f9f64836e005f70924f99ac22c
SHA256 5ca98777eb11552a50e9215930dc5f66c7e665a9fa018b77036ebb1c4b13b4c9
MD5 825959b85c3297e01612af6a276e76e0
SHA1 f98554a291b73e1235068733be02b8e88d8cc924
SHA512 a36730f13c16016d04ef804339cbd11c71ec2e8de159dc8c93d4b22caa51e46df0875521499aa82c391a2f7c43ffd85529b2d52c20c1263855e7d59dea493d36
SSDEEP 196608:bL5zk14h7/ygUe1F3jTwEmDD3Ww8aCWC5xy:/lk14h7/ygUe1CnX37bC
TLSH
T147A69E213A05CC31E68110F9DDBCFBAE46AD95240BF955D3B3D43EE99AA42C23A3154F
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3466008

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projectos\M2Lite\M2Lite\1-Principal\2._SRC_Binario\VSFiles\UserInterface\Release\_M2Lite.pdb

kernel32

HeapQueryInformation HeapSize OutputDebugStringW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW SetStdHandle SetFileAttributesW SetCurrentDirectoryW CreateProcessW GetExitCodeProcess GetTimeZoneInformation SetConsoleCtrlHandler MoveFileExW DeleteFileW CreateDirectoryW GetFileAttributesExW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect IsThreadAFiber FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStdHandle FileTimeToSystemTime SystemTimeToTzSpecificLocalTime GetFileType CreateEventA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WaitForSingleObject SetEvent Process32Next OpenProcess Process32First SetFileAttributesA GetSystemInfo GetLastError ReadProcessMemory Module32Next GetFileInformationByHandle GetFullPathNameW GetDriveTypeW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread ExitProcess LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount Module32First InterlockedPushEntrySList RtlUnwind GetThreadTimes GetCurrentThread SetLastError SetFilePointerEx GetComputerNameA HeapFree HeapReAlloc HeapAlloc GetFileSizeEx WaitNamedPipeW PeekNamedPipe SetEndOfFile IsDebuggerPresent FindFirstFileA TerminateProcess UnhandledExceptionFilter FindResourceW FindResourceA SizeofResource LoadResource LockResource CreateFileW InterlockedDecrement GetProcessHeap HeapValidate InterlockedIncrement GetCPInfo CompareStringEx CreateSymbolicLinkW GetFileInformationByHandleEx CloseThreadpoolWait SetThreadpoolWait CreateThreadpoolWait CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks SetThreadpoolTimer CreateThreadpoolTimer GetTickCount64 GetSystemTimeAsFileTime GetCurrentProcessorNumber FlushProcessWriteBuffers CreateSemaphoreExW CreateEventExW InitOnceExecuteOnce GetTempPathW SetFileInformationByHandle QueryPerformanceFrequency LCMapStringEx GetLocaleInfoEx LocalFree DecodePointer EncodePointer InitializeCriticalSectionEx GetStringTypeW GetNativeSystemInfo SwitchToThread WaitForSingleObjectEx InitOnceComplete InitOnceBeginInitialize RaiseException IsProcessorFeaturePresent RtlCaptureStackBackTrace GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive FormatMessageA QueryPerformanceCounter CopyFileA CreateSemaphoreA ReleaseSemaphore GetWindowsDirectoryA GetLocaleInfoA CompareStringA WideCharToMultiByte lstrlenW FreeLibrary GetVersionExA GetSystemDirectoryA WriteFile SetFilePointer ReadFile LoadLibraryA GetCurrentThreadId SetUnhandledExceptionFilter GetFileSize CreateFileA CreateFileMappingA UnmapViewOfFile MapViewOfFile GetTempFileNameA GetTempPathA RemoveDirectoryA CreateDirectoryA AllocConsole WriteConsoleW GetStartupInfoW GetCurrentProcessId CreateToolhelp32Snapshot GetCurrentDirectoryW GlobalUnlock GetProcAddress SetThreadPriority FindNextFileA FindClose GetModuleFileNameA OutputDebugStringA MoveFileA GetCurrentDirectoryA lstrlenA GetPrivateProfileStringA DeleteFileA CreateMutexA InitializeSListHead ReleaseMutex GlobalFree GlobalLock GlobalAlloc MultiByteToWideChar GetModuleHandleW Sleep GetTickCount GetFileAttributesW GetModuleFileNameW GetExitCodeThread CloseHandle DuplicateHandle GetCurrentProcess GetModuleHandleA InterlockedFlushSList

user32

SendMessageW GetDesktopWindow CharPrevExA CharNextExA CharNextW GetClipboardData CloseClipboard OpenClipboard GetKeyboardLayout GetKeyboardLayoutNameA DispatchMessageA GetMessageA SetWindowLongA GetWindowLongA AdjustWindowRectEx GetWindowRect SetWindowTextA GetMenu RegisterClassA InvalidateRect LoadCursorA RegisterClassExW GetSystemMetrics CreateWindowExW PeekMessageW TranslateMessage DispatchMessageW UnregisterClassW SetWindowPos SetForegroundWindow GetDC FillRect ReleaseDC PeekMessageA ClientToScreen OffsetRect SetRect GetAsyncKeyState SetWindowDisplayAffinity GetWindowDisplayAffinity PostQuitMessage GetCursorPos ScreenToClient FindWindowA LoadIconA SystemParametersInfoA FlashWindowEx DestroyIcon SendMessageA GetKeyState LoadImageA DestroyCursor ShowCursor SetCursor SetCursorPos SetCapture ReleaseCapture ChangeDisplaySettingsA CreatePopupMenu InsertMenuA TrackPopupMenu DestroyMenu GetCapture IsIconic LoadStringA MessageBoxA LoadImageW DefWindowProcW EndPaint BeginPaint DefWindowProcA RegisterClassExA CreateWindowExA GetClientRect ShowWindow UpdateWindow SetFocus MoveWindow IsWindow DestroyWindow UnregisterClassA

gdi32

SelectObject CreateCompatibleBitmap CreateCompatibleDC EnumFontFamiliesExA GetPixel DeleteObject DeleteDC PatBlt CreateSolidBrush StretchBlt TextOutA BitBlt GetStockObject SetBkColor SetBkMode SetDIBitsToDevice SetTextColor CreateDIBSection

advapi32

RegCloseKey CryptReleaseContext CryptAcquireContextA RegSetValueExW RegCreateKeyExW RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegOpenKeyExW CryptGenRandom RegQueryValueExW

shell32

SHGetSpecialFolderPathA Shell_NotifyIconA ShellExecuteA

ole32

CoInitialize CoUninitialize CoCreateInstance CoInitializeEx CreateStreamOnHGlobal

winhttp

WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpQueryDataAvailable WinHttpConnect WinHttpOpenRequest WinHttpReadData WinHttpCrackUrl WinHttpOpen WinHttpSetTimeouts WinHttpSetOption WinHttpCloseHandle

winmm

timeGetDevCaps timeGetTime timeEndPeriod timeBeginPeriod

d3d8

Direct3DCreate8

python27

PyString_FromString PyList_Append PyTuple_Size PyDict_GetItemString PyLong_AsLong PyLong_FromLongLong PyImport_AddModule Py_BuildValue PyString_AsString PyList_SetItem PyDict_New PyDict_SetItem PyList_Size PyList_GetItem PyDict_Size PyDict_Next PyDict_Keys PyDict_Values PyLong_AsUnsignedLong PyDict_GetItem PyLong_AsLongLong PyArg_ParseTuple _PyInt_AsInt PyTuple_New PyTuple_SetItem _Py_NoneStruct PyInt_FromLong Py_IsInitialized PyImport_ImportModule PyString_InternFromString PyObject_GetAttr PyCallable_Check PyFloat_AsDouble PyInt_AsLong PyErr_BadArgument PyErr_Print PyObject_CallObject PyNumber_Check PyDict_SetItemString PyModule_GetDict PyErr_Fetch Py_SetProgramName Py_Initialize Py_Finalize PyRun_StringFlags Py_CompileStringFlags PyEval_SetTrace Py_FlushLine PyImport_GetMagicNumber PyObject_AsCharBuffer PyCode_Addr2Line PyEval_EvalCode Py_OptimizeFlag PyCode_Type PyList_New _PyLong_FromByteArray PyFloat_FromDouble PyComplex_FromCComplex PyString_FromStringAndSize PyErr_Occurred PyErr_NoMemory PyEval_GetRestricted PyCode_New PyMarshal_ReadObjectFromString _PyLong_New _Py_EllipsisObject PyExc_StopIteration PyExc_EOFError PyExc_ValueError PyTuple_GetItem PyExc_RuntimeError PyErr_SetString PyModule_AddIntConstant PyErr_Clear Py_InitModule4 PyObject_GetAttrString PyUnicodeUCS2_DecodeUTF8

gdiplus

GdipGetImageWidth GdipCloneImage GdipCreateFont GdipDeleteFontFamily GdipCreateFontFamilyFromName GdipDrawString GdipFillPath GdipDrawPath GdipDrawEllipseI GdipDrawLineI GdipDrawLine GdipSetPixelOffsetMode GdipSetSmoothingMode GdipSetTextRenderingHint GdipAddPathLineI GdipClosePathFigure GdipDeletePath GdipCreatePath GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipDeleteStringFormat GdipDeleteFont GdipLoadImageFromFileICM GdipDrawImageRectI GdipFillRectangleI GdipDeletePen GdipCreateFromHDC GdipDeleteGraphics GdipSetInterpolationMode GdipDrawRectangleI GdipGraphicsClear GdipLoadImageFromStream GdipCreateStringFormat GdipSetPenLineJoin GdipCreateLineBrushI GdiplusShutdown GdiplusStartup GdipGetImageHeight GdipCreatePen1 GdipDisposeImage GdipCreateSolidFill GdipCloneBrush GdipDeleteBrush GdipAlloc GdipFree GdipLoadImageFromFile GdipLoadImageFromStreamICM GdipFillEllipseI

devil

ilInit ilSetPixels ilEnable ilTexImage ilBindImage ilSave ilShutDown ilDeleteImages ilOriginFunc ilLoad ilGetInteger ilGenImages ilConvertImage ilCopyPixels

imm32

ImmGetContext ImmReleaseContext ImmAssociateContext ImmGetCompositionStringW ImmSetCompositionStringW ImmGetCandidateListW ImmGetConversionStatus ImmSetConversionStatus ImmGetOpenStatus ImmNotifyIME ImmIsIME ImmGetIMEFileNameA

wininet

InternetCloseHandle InternetOpenA InternetOpenUrlA InternetReadFile

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

granny2

_GrannyEndControlledAnimation@4 _GrannyFreeControlOnceUnused@4 _GrannyCompleteControlAt@8 _GrannyControlIsComplete@4 _GrannyFreeControlIfComplete@4 _GrannyGetControlLoopCount@4 _GrannySetControlLoopCount@8 _GrannySetLogCallback@4 _GrannyGetMaterialTextureByType@8 _GrannyFindMatchingMember@16 _GrannyConvertSingleObject@20 _GrannyReadEntireFileFromMemory@8 _GrannyGetControlSpeed@4 _GrannySetControlSpeed@8 _GrannyGetControlLocalDuration@4 _GrannySetControlEaseIn@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseOutCurve@28 _GrannyGetControlRawLocalClock@4 _GrannySetControlRawLocalClock@8 _GrannyPlayControlledAnimation@12 _GrannyBeginControlledAnimation@8 _GrannySetTrackGroupTarget@12 _GrannySetTrackGroupLOD@16 _GrannyGetMeshTriangleGroupCount@4 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 _GrannyDeformVertices@24 GrannyPNT332VertexType _GrannyFindTrackGroupForModel@12 _GrannyGetSourceModel@4 _GrannyGetMeshIndexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetWorldPose4x4@8 _GrannyFreeWorldPose@4 _GrannyNewWorldPose@4 _GrannyFindBoneByName@12 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyFreeModelInstance@4 _GrannyInstantiateModel@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyFreeFileSection@8 _GrannyFreeControl@4

mss32

_AIL_mem_free_lock@4 _AIL_file_read@8 _AIL_set_file_callbacks@16 _AIL_WAV_info@8 _AIL_decompress_ASI@24 _AIL_decompress_ADPCM@12 _AIL_file_type@8 _AIL_open_digital_driver@16 _AIL_open_stream@12 _AIL_close_digital_driver@4 _AIL_enumerate_3D_providers@12 _AIL_open_3D_provider@4 _AIL_close_3D_provider@4 _AIL_open_3D_listener@4 _AIL_close_3D_listener@4 _AIL_set_3D_position@16 _AIL_set_3D_velocity@20 _AIL_set_3D_orientation@28 _AIL_startup@0 _AIL_shutdown@0 _AIL_set_redist_directory@4 _AIL_close_stream@4 _AIL_start_stream@4 _AIL_update_3D_position@8 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_3D_sample_volume@4 _AIL_3D_sample_status@4 _AIL_set_3D_sample_loop_count@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_file@8 _AIL_stream_status@4 _AIL_last_error@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_sample_volume_pan@12 _AIL_allocate_3D_sample_handle@4 _AIL_release_3D_sample_handle@4 _AIL_start_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_end_3D_sample@4 _AIL_auto_update_3D_position@8

speedtreert

?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetLeafLightingAdjustment@CSpeedTreeRT@@QBEMXZ ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreeSize@CSpeedTreeRT@@QBEXAAM0@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?DeleteTransientData@CSpeedTreeRT@@QAEXXZ ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ??3CSpeedTreeRT@@SAXPAX@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ??2CSpeedTreeRT@@SAPAXI@Z ??1CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ

dinput8

DirectInput8Create

ws2_32

ioctlsocket recv select setsockopt connect send socket WSAGetLastError WSAStartup __WSAFDIsSet closesocket WSACleanup htonl htons inet_addr ntohl gethostbyname gethostname ntohs

ddraw

DirectDrawCreate

iphlpapi

GetAdaptersInfo

voice_chat_core_release_win32

??1VoiceChat@amun@@UAE@XZ ?setPlaybackDelay@VoiceChat@amun@@QAEXI@Z ?init@VoiceChat@amun@@QAE_NIE@Z ?destroy@VoiceChat@amun@@QAEXXZ ?startRecording@VoiceChat@amun@@QAE_NXZ ?stopRecording@VoiceChat@amun@@QAEXXZ ?getSampleRate@VoiceChat@amun@@QBEIXZ ??0VoiceChat@amun@@QAE@XZ ?setVolume@VoiceChat@amun@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@M@Z ?decode@VoiceChat@amun@@QAEABV?$vector@FV?$allocator@F@std@@@std@@PBDI@Z ?addSamples@VoiceChat@amun@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBFI@Z ?encode@VoiceChat@amun@@QAEABV?$vector@DV?$allocator@D@std@@@std@@PBFI@Z ?calculateSoundPressureLevel@VoiceChat@amun@@QBEMPBFI@Z ?normalizeAmplitude@VoiceChat@amun@@QAEXPAFIMM@Z ?isReady@VoiceChat@amun@@QBE_NXZ ?getChannelCount@VoiceChat@amun@@QBEEXZ

libcef

cef_binary_value_create cef_browser_host_create_browser_sync cef_browser_host_create_browser cef_command_line_get_global cef_command_line_create cef_string_map_free cef_string_map_alloc cef_v8context_in_context cef_v8context_get_entered_context cef_v8context_get_current_context cef_string_wide_to_utf8 cef_log cef_api_hash cef_execute_java_script_with_user_gesture_for_tests cef_register_widevine_cdm cef_is_web_plugin_unstable cef_register_web_plugin_crash cef_unregister_internal_web_plugin cef_refresh_web_plugins cef_visit_web_plugin_info cef_now_from_system_trace_time cef_end_tracing cef_begin_tracing cef_launch_process cef_get_path cef_write_json cef_parse_jsonand_return_error cef_parse_json_buffer cef_parse_json cef_uridecode cef_uriencode cef_base64decode cef_string_list_size cef_get_extensions_for_mime_type cef_get_mime_type cef_format_url_for_security_display cef_create_url cef_parse_url cef_clear_cross_origin_whitelist cef_remove_cross_origin_whitelist_entry cef_add_cross_origin_whitelist_entry cef_load_crlsets_file cef_zip_directory cef_delete_file cef_directory_exists cef_create_temp_directory_in_directory cef_create_new_temp_directory cef_get_temp_directory cef_create_directory cef_set_crash_key_value cef_crash_reporting_enabled cef_enable_highdpi_support cef_set_osmodal_loop cef_quit_message_loop cef_run_message_loop cef_do_message_loop_work cef_shutdown cef_initialize cef_execute_process cef_clear_scheme_handler_factories cef_register_scheme_handler_factory cef_register_extension cef_post_delayed_task cef_post_task cef_currently_on cef_is_cert_status_error cef_string_list_free cef_string_list_alloc cef_string_userfree_utf16_free cef_string_utf16_set cef_string_list_value cef_string_list_append cef_string_map_size cef_string_map_key cef_string_map_value cef_string_map_append cef_string_multimap_size cef_string_multimap_key cef_string_multimap_value cef_string_multimap_append cef_task_runner_get_for_current_thread cef_task_runner_get_for_thread cef_v8value_create_undefined cef_v8value_create_null cef_v8value_create_bool cef_v8value_create_int cef_v8value_create_uint cef_v8value_create_double cef_v8value_create_date cef_v8value_create_string cef_v8value_create_object cef_v8value_create_array cef_v8value_create_array_buffer cef_v8value_create_function cef_dictionary_value_create cef_drag_data_create cef_request_context_get_global_context cef_value_create cef_request_context_create_context cef_create_context_shared cef_string_list_clear cef_string_multimap_alloc cef_string_multimap_free cef_request_create cef_process_message_create cef_urlrequest_create cef_list_value_create cef_image_create cef_stream_writer_create_for_file cef_stream_writer_create_for_handler cef_string_ascii_to_utf16 cef_cookie_manager_get_global_manager cef_media_router_get_global cef_v8stack_trace_get_current cef_response_create cef_post_data_create cef_menu_model_create cef_print_settings_create cef_post_data_element_create cef_stream_reader_create_for_file cef_stream_reader_create_for_data cef_stream_reader_create_for_handler cef_string_utf8_to_utf16 cef_string_utf16_clear cef_string_utf8_clear cef_string_utf16_to_utf8 cef_string_utf16_cmp cef_base64encode

xerguard

?CheckAttackspeed@@YA_NMM_N0@Z ?CheckMovespeed@@YA_NM@Z ?GetXerGuardCaptcha@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?InitializeXerGuard@@YA?AU_XerGuardData@@K@Z ?xerguardCharName@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?GetH@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?XerGuardClose@@YAXXZ ?CheckMove@@YA_N_N0MM@Z ?XerGuardIsBlockThreatPresent@@YA_NPADI@Z ?xerguardLanguage@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?GetXerGuardLoginKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD@Z ?CheckValues@@YA_NXZ ?xerguardClientCode@@3KA ?xerguardReport@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A ?xerguardWin@@3EA ?GenKey@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_NK@Z ?GenData@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

oleaut32

VariantClear SysFreeString

Name

.text

Size

5.7MB

Virtual Size

5.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

210KB

Virtual Size

1004KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

256KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=49, id=259, version=33145,

count=51, id=260, productName=VS2019 v16.8.4 build 29336, version=29336,

count=2, id=257, version=35228,

count=167, id=261, productName=VS2019 v16.8.4 build 29336, version=29336,

count=2, id=257, version=34435,

count=3, id=261, productName=VS2019 v16.11.5 build 30136, version=30136,

count=2, id=260, productName=VS2019 v16.8.3 build 29335, version=29335,

count=224, id=261, version=33145,

count=2, id=262, version=33145,

count=1, id=48, version=9044,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=27, id=260, version=35228,

count=5, id=261, version=33133,

count=60, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=2, id=253, version=35207,

count=20, id=260, version=35207,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=28, version=9178,

count=75, id=29, version=9178,

count=1, id=18, version=8444,

count=10, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=31, id=259, version=35207,

count=105, id=261, version=35207,

count=215, id=261, version=35228,

count=38, id=260, version=33145,

count=33, id=257, version=33145,

count=806, id=1, productName=Unmarked objects,

count=127, id=265, version=35228,

count=1, id=255, version=35228,

count=1, id=151,

count=1, id=258, version=35228,