2026-10-02_ee57ff384aeb01557bc353cf570ddf16_akira_cobalt-strike_coinminer_glassworm_poet-rat_qakbot_remcos

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-02_ee57ff384aeb01557bc353cf570ddf16_akira_cobalt-strike_coinminer_glassworm_poet-rat_qakbot_remcos
Size 64.3MB
Sample261002-21plfavdlb
SHA256 2ea6e9bb795ef53a396c9b2e055ce5dee7387445a1d034b3e84a3f5c4a3c5b98
MD5 ee57ff384aeb01557bc353cf570ddf16
SHA1 3a3954d7ad95f0613a20cc9ef54a0686328de106
SHA512 5093c66157b6852187af128031ecf69340236be5d78d75991aeb58e35c7d24e3af58965b356e29548635d21373a91dcece70bad883a1e58d86232935a5ba81c1
SSDEEP 786432:2RDWNxkQWpTWfyZ/vccaKU818c3en84YQLCIiZ9bhB7I5gFd:uDWNxJWpT6OMcay858/QLaa8
TLSH
T17AE7BF12668930AECF55C5B4828B2513E934BCCE873469FF914DB5363E67AF02A3DE14
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-02_ee57ff384aeb01557bc353cf570ddf16_akira_cobalt-strike_coinminer_glassworm_poet-rat_qakbot_remcos

File Explorer

2026-10-02_ee57ff384aeb01557bc353cf570ddf16_akira_cobalt-strike_coinminer_glassworm_poet-rat_qakbot_remcos

.exe 64.3MB

2026-10-02_ee57ff384aeb01557bc353cf570ddf16_akira_cobalt-strike_coinminer_glassworm_poet-rat_qakbot_remcos

IMPHASH 4bd13f662fbece3ea4d588aeab00326d
SHA256 2ea6e9bb795ef53a396c9b2e055ce5dee7387445a1d034b3e84a3f5c4a3c5b98
MD5 ee57ff384aeb01557bc353cf570ddf16
SHA1 3a3954d7ad95f0613a20cc9ef54a0686328de106
SHA512 5093c66157b6852187af128031ecf69340236be5d78d75991aeb58e35c7d24e3af58965b356e29548635d21373a91dcece70bad883a1e58d86232935a5ba81c1
SSDEEP 786432:2RDWNxkQWpTWfyZ/vccaKU818c3en84YQLCIiZ9bhB7I5gFd:uDWNxJWpT6OMcay858/QLaa8
TLSH
T17AE7BF12668930AECF55C5B4828B2513E934BCCE873469FF914DB5363E67AF02A3DE14
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28720128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-errorhandling-l1-1-1

AddVectoredExceptionHandler RemoveVectoredExceptionHandler

crypt32

CertCloseStore CertCreateCertificateContext CertEnumCertificatesInStore CertFreeCertificateChain CertFreeCertificateContext CertGetCertificateChain CertOpenSystemStoreW CertVerifyCertificateChainPolicy

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle GetHandleInformation SetHandleInformation

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive AcquireSRWLockShared CancelWaitableTimer CreateEventA CreateEventW CreateMutexA DeleteCriticalSection EnterCriticalSection InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSRWLock LeaveCriticalSection ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore ResetEvent SetEvent SetWaitableTimer SleepEx TryEnterCriticalSection WaitForSingleObject WaitForSingleObjectEx

api-ms-win-core-memory-l1-1-7

CreateFileMapping2

api-ms-win-core-io-l1-1-0

CancelIoEx CreateIoCompletionPort DeviceIoControl GetOverlappedResult GetQueuedCompletionStatus GetQueuedCompletionStatusEx PostQueuedCompletionStatus

api-ms-win-core-processthreads-l1-1-0

CreateProcessW CreateThread ExitProcess ExitThread GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetProcessTimes GetThreadPriority OpenThread QueueUserAPC ResumeThread SetPriorityClass SetThreadPriority SuspendThread TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue

api-ms-win-core-localization-l1-2-0

FormatMessageA FormatMessageW GetLocaleInfoA GetLocaleInfoEx GetLocaleInfoW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress LoadLibraryExA LoadLibraryExW

iphlpapi

FreeMibTable GetAdaptersAddresses GetAdaptersInfo GetBestInterface GetIpForwardTable2

api-ms-win-core-errorhandling-l1-1-0

GetLastError RaiseException SetErrorMode SetLastError SetUnhandledExceptionFilter

api-ms-win-core-sysinfo-l1-1-0

GetLogicalProcessorInformation GetSystemDirectoryA GetSystemInfo GetSystemTime GetSystemTimeAdjustment GetSystemTimeAsFileTime GetTickCount GetTickCount64 GetVersionExA GlobalMemoryStatusEx

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime VerSetConditionMask

api-ms-win-core-processthreads-l1-1-3

GetThreadDescription SetThreadDescription

api-ms-win-core-processthreads-l1-1-1

GetThreadTimes OpenProcess

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime GetTimeZoneInformation SystemTimeToFileTime SystemTimeToTzSpecificLocalTime

api-ms-win-core-debug-l1-1-0

DebugBreak IsDebuggerPresent OutputDebugStringA OutputDebugStringW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA LoadLibraryW

api-ms-win-core-heap-l2-1-0

GlobalAlloc GlobalFree LocalFree

api-ms-win-core-memory-l1-1-6

MapViewOfFile3 VirtualAlloc2

api-ms-win-core-string-l1-1-0

MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-file-l1-1-0

CreateDirectoryW CreateFileA CreateFileW DeleteFileW FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers GetDiskFreeSpaceExW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLogicalDrives ReadFile RemoveDirectoryW SetFileInformationByHandle SetFilePointer SetFilePointerEx WriteFile

api-ms-win-core-registry-l1-1-0

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

api-ms-win-core-console-l2-1-0

GenerateConsoleCtrlEvent GetConsoleScreenBufferInfo SetConsoleOutputCP SetConsoleTextAttribute

api-ms-win-core-memory-l1-1-5

UnmapViewOfFile2

rpcrt4

UuidCreate

api-ms-win-core-memory-l1-1-0

MapViewOfFile UnmapViewOfFile VirtualAlloc VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSAPoll WSASetLastError WSASocketW WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getnameinfo getpeername getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt shutdown socket

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW WaitForMultipleObjects

kernel32

CompareStringA CreateFileMappingA CreateSemaphoreA CreateWaitableTimerA GetLogicalDriveStringsA GetProcessAffinityMask GetSystemPowerStatus GlobalLock GlobalSize GlobalUnlock MoveFileExA MulDiv SetFileCompletionNotificationModes SetThreadExecutionState VerifyVersionInfoA VerifyVersionInfoW lstrlenW

user32

AdjustWindowRectEx AttachThreadInput BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW CheckMenuItem ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint EnumClipboardFormats EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuItemInfoW GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongA GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW IntersectRect IsClipboardFormatAvailable IsIconic IsWindow IsZoomed KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetMenuItemInfoW SetParent SetPropW SetRectEmpty SetTimer SetWindowLongA SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect

shell32

CommandLineToArgvW DragAcceptFiles DragFinish DragQueryFileW SHBrowseForFolderW SHGetFolderPathA SHGetFolderPathW SHGetKnownFolderPath SHGetPathFromIDListW ShellExecuteW Shell_NotifyIconW

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??0_Locinfo@std@@QEAA@PEBD@Z ??0_Lockit@std@@QEAA@H@Z ??0facet@locale@std@@IEAA@_K@Z ??0ios_base@std@@IEAA@XZ ??0task_continuation_context@Concurrency@@AEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ??1_Locinfo@std@@QEAA@XZ ??1_Lockit@std@@QEAA@XZ ??1facet@locale@std@@MEAA@XZ ??1ios_base@std@@UEAA@XZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEBX@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Incref@facet@locale@std@@UEAAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ ?_Random_device@std@@YAIXZ ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?classic@locale@std@@SAAEBV12@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?eof@ios_base@std@@QEBA_NXZ ?exceptions@ios_base@std@@QEAAXH@Z ?fail@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEAAHH@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$collate@D@std@@2V0locale@2@A ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$numpunct@D@std@@2V0locale@2@A ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?id@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@2V0locale@2@A ?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?imbue@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?init@?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAAXPEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@2@_N@Z ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z ?put@?$time_put@_WV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@_WU?$char_traits@_W@std@@@2@V32@AEAVios_base@2@_WPEBUtm@@PEB_W4@Z ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@PEAV32@@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z ?setf@ios_base@std@@QEAAHH@Z ?setf@ios_base@std@@QEAAHHH@Z ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ ?uncaught_exceptions@std@@YAHXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z _Cnd_broadcast _Cnd_do_broadcast_at_thread_exit _Cnd_init_in_situ _Cnd_register_at_thread_exit _Cnd_signal _Cnd_unregister_at_thread_exit _Cnd_wait _Mtx_init_in_situ _Mtx_lock _Mtx_trylock _Mtx_unlock _Query_perf_counter _Query_perf_frequency _Strcoll _Strxfrm _Thrd_detach _Thrd_hardware_concurrency _Thrd_id _Thrd_join _Thrd_yield _Xtime_get_ticks __crtLCMapStringA

msvcp140_atomic_wait

__std_atomic_notify_all_direct __std_atomic_notify_one_direct __std_atomic_wait_direct

api-ms-win-core-processenvironment-l1-1-0

FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableA GetStdHandle SetEnvironmentVariableA

api-ms-win-core-console-l1-1-0

GetConsoleMode SetConsoleMode WriteConsoleA WriteConsoleW

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionFontW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable Sleep SleepConditionVariableCS SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable

oleaut32

SysAllocString SysFreeString VariantClear

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

api-ms-win-core-file-l1-2-0

CreateFile2 GetTempPathW

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-0

CopyFile2 CopyFileExW CreateHardLinkW CreateSymbolicLinkW GetFileInformationByHandleEx MoveFileExW

api-ms-win-core-console-l1-2-0

AttachConsole

winmm

timeBeginPeriod timeEndPeriod

ole32

OleInitialize OleUninitialize RegisterDragDrop ReleaseStgMedium RevokeDragDrop

api-ms-win-core-wow64-l1-1-0

IsWow64Process

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat GetDIBits GetDeviceCaps GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextMetricsW SelectObject SetPixel SetPixelFormat SwapBuffers

api-ms-win-core-libraryloader-l1-2-2

EnumResourceNamesW

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapAlloc HeapFree HeapReAlloc

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-com-l1-1-0

CLSIDFromString CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoTaskMemFree CoUninitialize PropVariantClear

avrt

AvRevertMmThreadCharacteristics AvSetMmThreadCharacteristicsW

api-ms-win-core-namedpipe-l1-1-0

CreatePipe PeekNamedPipe SetNamedPipeHandleState WaitNamedPipeW

api-ms-win-devices-config-l1-1-2

CM_Get_Device_IDA CM_Locate_DevNodeA

api-ms-win-devices-config-l1-1-1

CM_Get_Parent

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

hid

HidD_FreePreparsedData HidD_GetAttributes HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps

dbghelp

SymFromAddr

vcruntime140

_CxxThrowException __C_specific_handler __CxxFrameHandler3 __RTDynamicCast __RTtypeid __current_exception __current_exception_context __intrinsic_setjmp __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_name _purecall longjmp memchr memcmp memcpy memmove memset strchr strrchr strstr wcsstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vswprintf _chsize_s _close _fileno _fseeki64 _ftelli64 _fwrite_nolock _get_osfhandle _get_stream_buffer_pointers _isatty _lseeki64 _pclose _popen _read _set_fmode _sopen _wfopen _wfopen_s _wfreopen_s _wfsopen _write _wsopen fclose feof ferror fflush fgetc fgetpos fgets fopen fopen_s fputc fputs fread fseek fsetpos ftell fwrite puts setvbuf ungetc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func ___lc_collate_cp_func ___lc_locale_name_func _configthreadlocale localeconv setlocale

api-ms-win-crt-time-l1-1-0

__daylight __dstbias __timezone _gmtime64 _gmtime64_s _localtime64 _localtime64_s _mkgmtime64 _mktime64 _time64 _tzset clock strftime

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc _callnewh _set_new_mode calloc free malloc realloc

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _beginthreadex _c_exit _cexit _configure_narrow_argv _crt_at_quick_exit _crt_atexit _endthreadex _errno _exit _get_initial_narrow_environment _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _invalid_parameter_noinfo _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_abort_behavior _set_app_type _wassert abort exit perror quick_exit set_terminate signal strerror strerror_s terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr _dsign _fdsign _hypotf _ldsign acos acosf asin asinf atan atan2 atan2f atanf cbrt cbrtf ceil cos cosf cosh exp exp2 exp2f expf fabs floor fmod fmodf frexp hypot ldexp llrint llrintf log log10 log10f log2 log2f logf lrint lrintf lround lroundf modf modff pow powf rint round scalbn scalbnf sin sinf sinh sinhf sqrt sqrtf tan tanf tanh trunc

api-ms-win-crt-environment-l1-1-0

_dupenv_s _wgetenv getenv

api-ms-win-crt-convert-l1-1-0

_i64toa _itoa _itoa_s _ltoa _ui64toa _ultoa atof atoi mbstowcs strtod strtof strtol strtold strtoll strtoul strtoull wcstol wcstombs_s

api-ms-win-crt-filesystem-l1-1-0

_fstat64 _lock_file _stat64 _stat64i32 _unlock_file _wstat64

api-ms-win-crt-string-l1-1-0

_memicmp _strdup _stricmp _strrev isalnum isalpha isblank isgraph islower isprint isspace isupper isxdigit strcat strcat_s strcmp strcpy strcpy_s strcspn strlen strncat strncmp strncpy strncpy_s strnlen strpbrk strspn strtok tolower toupper towupper wcscat wcscmp wcscpy wcslen wcsncmp wcsnlen

api-ms-win-crt-utility-l1-1-0

bsearch qsort rand rand_s srand

??0Battery@hwinfo@@QEAA@AEBV01@@Z ??0CPU@hwinfo@@AEAA@XZ ??0CPU@hwinfo@@QEAA@AEBV01@@Z ??0Disk@hwinfo@@AEAA@XZ ??0Disk@hwinfo@@QEAA@AEBV01@@Z ??0GPU@hwinfo@@AEAA@XZ ??0GPU@hwinfo@@QEAA@AEBV01@@Z ??0MainBoard@hwinfo@@QEAA@AEBV01@@Z ??0Memory@hwinfo@@QEAA@AEBV01@@Z ??0Memory@hwinfo@@QEAA@XZ ??0Network@hwinfo@@AEAA@XZ ??0Network@hwinfo@@QEAA@AEBV01@@Z ??0OS@hwinfo@@QEAA@AEBV01@@Z ??0OS@hwinfo@@QEAA@XZ ??1Battery@hwinfo@@QEAA@XZ ??1CPU@hwinfo@@QEAA@XZ ??1Disk@hwinfo@@QEAA@XZ ??1GPU@hwinfo@@QEAA@XZ ??1MainBoard@hwinfo@@QEAA@XZ ??1Memory@hwinfo@@QEAA@XZ ??1Network@hwinfo@@QEAA@XZ ??1OS@hwinfo@@QEAA@XZ ??4Battery@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4CPU@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Disk@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4GPU@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4MainBoard@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Memory@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Network@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4OS@hwinfo@@QEAAAEAV01@AEBV01@@Z ?L1CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?L2CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?L3CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?available_Bytes@Memory@hwinfo@@QEBA_JXZ ?currentClockSpeed_MHz@CPU@hwinfo@@QEBA?AV?$vector@_JV?$allocator@_J@std@@@std@@XZ ?currentClockSpeed_MHz@CPU@hwinfo@@QEBA_JH@Z ?currentUtilisation@CPU@hwinfo@@QEBANXZ ?flags@CPU@hwinfo@@QEBAAEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?free_Bytes@Memory@hwinfo@@QEBA_JXZ ?g_eboot_address@MemoryPatcher@@3_KA ?id@CPU@hwinfo@@QEBAHXZ ?is32bit@OS@hwinfo@@QEBA_NXZ ?is64bit@OS@hwinfo@@QEBA_NXZ ?isBigEndian@OS@hwinfo@@QEBA_NXZ ?isLittleEndian@OS@hwinfo@@QEBA_NXZ ?kernel@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?maxClockSpeed_MHz@CPU@hwinfo@@QEBA_JXZ ?modelName@CPU@hwinfo@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?modules@Memory@hwinfo@@QEBAAEBV?$vector@UModule@Memory@hwinfo@@V?$allocator@UModule@Memory@hwinfo@@@std@@@std@@XZ ?name@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?numLogicalCores@CPU@hwinfo@@QEBAHXZ ?numPhysicalCores@CPU@hwinfo@@QEBAHXZ ?regularClockSpeed_MHz@CPU@hwinfo@@QEBA_JXZ ?threadUtilisation@CPU@hwinfo@@QEBANH@Z ?threadsUtilisation@CPU@hwinfo@@QEBA?AV?$vector@NV?$allocator@N@std@@@std@@XZ ?total_Bytes@Memory@hwinfo@@QEBA_JXZ ?vendor@CPU@hwinfo@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?version@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ IGFD_ClearFilesStyle IGFD_CloseDialog IGFD_Create IGFD_Destroy IGFD_DisplayDialog IGFD_GetCurrentFileName IGFD_GetCurrentFilter IGFD_GetCurrentPath IGFD_GetFilePathName IGFD_GetFileStyle IGFD_GetSelection IGFD_GetUserDatas IGFD_IsKeyOpened IGFD_IsOk IGFD_IsOpened IGFD_OpenDialog IGFD_OpenDialog2 IGFD_OpenDialogWithPane IGFD_OpenDialogWithPane2 IGFD_Selection_DestroyContent IGFD_Selection_Get IGFD_Selection_Pair_DestroyContent IGFD_Selection_Pair_Get IGFD_SetFileStyle IGFD_SetFileStyle2 IGFD_WasKeyOpenedThisFrame IGFD_WasOpenedThisFrame SetLocales

Name

.text

Size

27.6MB

Virtual Size

27.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

34.4MB

Virtual Size

34.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

750KB

Virtual Size

20.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

839KB

Virtual Size

838KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

malloc_h

Size

512B

Virtual Size

364B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

403KB

Virtual Size

402KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

478KB

Virtual Size

478KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ