code-main.zip
- SHA256 58ee649c97ce8568fc30372dd352ee9711337e029b152cd28f4c75eed2434eda
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
code-main.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
code-main.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target code-main.zip
- Size 150.9MB
- Sample261012-yag7wszvbv
- SHA256 58ee649c97ce8568fc30372dd352ee9711337e029b152cd28f4c75eed2434eda
- MD5 4b398cfb9ba79e0cd58b9679c23a6c82
- SHA1 019f9bd1b19dcdf4b10304214bea82acca07fdba
- SHA512 e870893c43dae02e5650d36f0521699019c67835267a4f75c77f208422ed266f61fbe50c31fac8108f15996d5474e7498777add1399155db0a5f029f923c6a49
- SSDEEP 3145728:uIOpXQJAQ/JeERSg1QVa3ZfLm8m5xTEiDv/3lSNOSKNY/csZh/k6V8kAQ/89:BwXQNRe29QVAZDKC+1S8SK6csZh8GU
- TLSH T1B47833B6E398458E7138542EC1CC7A5D614568EB4626C886908FB0D207C939DB63FFEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/code-main/3Qz7AatRN_q.exe unpack001/code-main/505HFZIN80F5.exe unpack001/code-main/7M260NMM3NQF.exe unpack001/code-main/7PGV5X7885T8.exe unpack001/code-main/E4J3Q5825I7F.exe unpack001/code-main/EM1S573K9Q2C.exe unpack001/code-main/S8D70IPCZNAA.exe unpack001/code-main/W52UE52XBY31.exe unpack001/code-main/hello.exe unpack001/code-main/stage2.exe unpack001/code-main/stage_2.exe unpack001/code-main/stage_2_1.exe unpack001/code-main/y0Xc9Og1lghX.exe
File Explorer
-
code-main.zip.zip 150.9MB
-
code-main/3Qz7AatRN_q.exe.exe 93.3MB
-
code-main/505HFZIN80F5.exe.exe 2.0MB
-
code-main/7M260NMM3NQF.exe.exe 2.0MB
-
code-main/7PGV5X7885T8.exe.exe 30.9MB
-
code-main/E4J3Q5825I7F.exe.exe 31.5MB
-
code-main/EM1S573K9Q2C.exe.exe 32.0MB
-
code-main/README.md5KB
-
code-main/S8D70IPCZNAA.exe.exe .ps1 35KB
-
code-main/W52UE52XBY31.exe.exe 2.0MB
-
code-main/hello.exe.exe 8.3MB
-
code-main/stage2.exe.exe .ps1 34KB
-
code-main/stage_2.exe.exe .ps1 35KB
-
code-main/stage_2_1.exe.exe .ps1 35KB
-
code-main/y0Xc9Og1lghX.exe.exe 93.3MB
code-main/3Qz7AatRN_q.exe
- IMPHASH fd6f6d07cc33ee9a2b65bda58a07bb94
- SHA256 51fef0500bd8f1a9722740c647bfa94fc16cfc9bbf50cf6a7a35465f2aa1114f
- MD5 125a0e19b7e8643eb2d94a260f1be771
- SHA1 4f14eec57024f3a3da6b0d99bb0f280f26de29b5
- SHA512 9223c57b13fa6dbc64bcee5895d16d9a7ac728727a63f0b3dd9293bc1108e6e9cfcb9de911ed882e86dfbbdcf235b2b2e253c1066083e4d599cecbe497b830e5
- SSDEEP 1572864:xZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:xZa7hmguP2nUOnAwby
- TLSH T1D6286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
58584260
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildkite-agent\build\build\release\bun-profile.pdb
ntdll
NtAllocateVirtualMemory
NtClose
NtCreateFile
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtFreeVirtualMemory
NtLockFile
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryInformationFile
NtQueryInformationProcess
NtQueryObject
NtQueryVolumeInformationFile
NtReadFile
NtSetInformationFile
NtWriteFile
RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlDeleteFunctionTable
RtlEqualUnicodeString
RtlExitUserProcess
RtlGetFullPathName_U
RtlGetSystemTimePrecise
RtlGetVersion
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlQueryPerformanceCounter
RtlQueryPerformanceFrequency
RtlSetCurrentDirectory_U
RtlUnwind
RtlUnwindEx
RtlUpcaseUnicodeChar
RtlVirtualUnwind
RtlWaitOnAddress
RtlWakeAddressAll
RtlWakeAddressSingle
VerSetConditionMask
userenv
GetUserProfileDirectoryW
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AreFileApisANSI
AssignProcessToJobObject
BeginUpdateResourceW
CancelIo
CancelIoEx
CancelSynchronousIo
CloseHandle
ClosePseudoConsole
CompareStringEx
CompareStringOrdinal
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateFile2
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectA
CreateJobObjectW
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateProcessA
CreateProcessW
CreatePseudoConsole
CreateSemaphoreA
CreateSymbolicLinkW
CreateThread
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DiscardVirtualMemory
DuplicateHandle
EncodePointer
EndUpdateResourceW
EnterCriticalSection
EnumResourceLanguagesW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameA
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrencyFormatEx
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCurrentThreadStackLimits
GetDateFormatEx
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeClientProcessId
GetNamedPipeHandleStateA
GetNamedPipeServerProcessId
GetNativeSystemInfo
GetNumberFormatEx
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadDescription
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetTimeZoneInformationForYear
GetUserDefaultLCID
GetUserDefaultUILanguage
GetUserGeoID
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessInJob
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetModuleFileNameExA
K32GetProcessMemoryInfo
LCIDToLocaleName
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MultiByteToWideChar
NeedCurrentDirectoryForExePathW
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryMemoryResourceNotification
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReOpenFile
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResizePseudoConsole
ResolveLocaleName
ResumeThread
SearchPathA
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleW
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetThreadAffinityMask
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
UpdateProcThreadAttribute
UpdateResourceW
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleA
WriteConsoleInputW
WriteConsoleW
WriteFile
lstrlenW
user32
CloseClipboard
DispatchMessageA
GetClipboardData
GetClipboardSequenceNumber
GetMessageA
GetSystemMetrics
IsClipboardFormatAvailable
MapVirtualKeyW
OpenClipboard
RegisterClipboardFormatA
TranslateMessage
shell32
CommandLineToArgvW
SHGetKnownFolderPath
oleaut32
VariantClear
VariantInit
??0Environment@bmalloc@@QEAA@AEBV?$scoped_lock@VMutex@bmalloc@@@std@@@Z
??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0EscapableHandleScopeBase@v8@@QEAA@PEAVIsolate@1@@Z
??0HandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??1EscapableHandleScope@v8@@QEAA@XZ
??1HandleScope@v8@@QEAA@XZ
?AddEnvironmentCleanupHook@node@@YAXPEAVIsolate@v8@@P6AXPEAX@Z1@Z
?CheckCast@Array@v8@@CAXPEAVValue@2@@Z
?ContainsOnlyOneByte@String@v8@@QEBA_NXZ
?CreateHandle@HandleScope@v8@@KAPEA_KPEAVIsolate@internal@2@_K@Z
?DisposeGlobal@api_internal@v8@@YAXPEA_K@Z
?EscapeSlot@EscapableHandleScopeBase@v8@@IEAAPEA_KPEA_K@Z
?FromJustIsNothing@api_internal@v8@@YAXXZ
?FullIsFalse@Value@v8@@AEBA_NXZ
?FullIsTrue@Value@v8@@AEBA_NXZ
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@I@Z
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z
?GetCurrent@Isolate@v8@@SAPEAV12@XZ
?GetCurrentContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ
?GetFunction@FunctionTemplate@v8@@QEAA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?GetFunctionTemplateData@api_internal@v8@@YA?AV?$Local@VValue@v8@@@2@PEAVIsolate@2@V?$Local@VData@v8@@@2@@Z
?GetInternalField@Object@v8@@QEAA?AV?$Local@VData@v8@@@2@H@Z
?GetIsolate@Context@v8@@QEAAPEAVIsolate@2@XZ
?GetName@Function@v8@@QEBA?AV?$Local@VValue@v8@@@2@XZ
?GlobalizeReference@api_internal@v8@@YAPEA_KPEAVIsolate@internal@2@_K@Z
?InternalFieldCount@ObjectTemplate@v8@@QEBAHXZ
?IsArray@Value@v8@@QEBA_NXZ
?IsBigInt@Value@v8@@QEBA_NXZ
?IsBoolean@Value@v8@@QEBA_NXZ
?IsExternal@String@v8@@QEBA_NXZ
?IsExternalOneByte@String@v8@@QEBA_NXZ
?IsExternalTwoByte@String@v8@@QEBA_NXZ
?IsFalse@Value@v8@@QEBA_NXZ
?IsFunction@Value@v8@@QEBA_NXZ
?IsInt32@Value@v8@@QEBA_NXZ
?IsMap@Value@v8@@QEBA_NXZ
?IsNull@Value@v8@@QEBA_NXZ
?IsNullOrUndefined@Value@v8@@QEBA_NXZ
?IsNumber@Value@v8@@QEBA_NXZ
?IsObject@Value@v8@@QEBA_NXZ
?IsOneByte@String@v8@@QEBA_NXZ
?IsString@Value@v8@@QEBA_NXZ
?IsTrue@Value@v8@@QEBA_NXZ
?IsUint32@Value@v8@@QEBA_NXZ
?IsUndefined@Value@v8@@QEBA_NXZ
?IsolateFromNeverReadOnlySpaceObject@internal@v8@@YAPEAVIsolate@12@_K@Z
?Iterate@Array@v8@@QEAA?AV?$Maybe@X@2@V?$Local@VContext@v8@@@2@P6A?AW4CallbackResult@12@IV?$Local@VValue@v8@@@2@PEAX@Z2@Z
?Length@Array@v8@@QEBAIXZ
?Length@String@v8@@QEBAHXZ
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@H@Z
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@PEAV?$Local@VValue@v8@@@2@_K@Z
?New@Array@v8@@SA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@_KV?$function@$$A6A?AV?$MaybeLocal@VValue@v8@@@v8@@XZ@std@@@Z
?New@Boolean@v8@@SA?AV?$Local@VBoolean@v8@@@2@PEAVIsolate@2@_N@Z
?New@External@v8@@SA?AV?$Local@VExternal@v8@@@2@PEAVIsolate@2@PEAX@Z
?New@FunctionTemplate@v8@@SA?AV?$Local@VFunctionTemplate@v8@@@2@PEAVIsolate@2@P6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@V?$Local@VSignature@v8@@@2@HW4ConstructorBehavior@2@W4SideEffectType@2@PEBVCFunction@2@GGG@Z
?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@N@Z
?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z
?New@ObjectTemplate@v8@@SA?AV?$Local@VObjectTemplate@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z
?NewFromOneByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBEW4NewStringType@2@H@Z
?NewFromUtf8@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@2@H@Z
?NewInstance@ObjectTemplate@v8@@QEAA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?RemoveEnvironmentCleanupHook@node@@YAXPEAVIsolate@v8@@P6AXPEAX@Z1@Z
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@1@Z
?SetInternalField@Object@v8@@QEAAXHV?$Local@VData@v8@@@2@@Z
?SetInternalFieldCount@ObjectTemplate@v8@@QEAAXH@Z
?SetName@Function@v8@@QEAAXV?$Local@VString@v8@@@2@@Z
?SlowGetInternalField@Object@v8@@AEAA?AV?$Local@VData@v8@@@2@H@Z
?StrictEquals@Value@v8@@QEBA_NV?$Local@VValue@v8@@@2@@Z
?ToLocalEmpty@api_internal@v8@@YAXXZ
?TryGetCurrent@Isolate@v8@@SAPEAV12@XZ
?Uint32Value@Value@v8@@QEBA?AV?$Maybe@I@2@V?$Local@VContext@v8@@@2@@Z
?Utf8Length@String@v8@@QEBAHPEAVIsolate@2@@Z
?Value@Boolean@v8@@QEBA_NXZ
?Value@External@v8@@QEBAPEAXXZ
?Value@Number@v8@@QEBANXZ
?WriteUtf8@String@v8@@QEBAHPEAVIsolate@2@PEADHPEAHH@Z
?commitAlignedPhysical@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?decommitAlignedPhysical@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?disableScavenger@api@bmalloc@@YAXXZ
?enableMiniMode@api@bmalloc@@YAX_N@Z
?forceEnablePGM@api@bmalloc@@YAXG@Z
?freeLargeVirtual@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?freeOutOfLine@api@bmalloc@@YAXPEAXW4HeapKind@2@@Z
?isEnabled@api@bmalloc@@YA_NW4HeapKind@2@@Z
?isMTEEnabled@api@bmalloc@@YA_NW4HeapKind@2@@Z
?lockSlowCase@Mutex@bmalloc@@AEAAXXZ
?mallocOutOfLine@api@bmalloc@@YAPEAX_KW4CompactAllocationMode@2@W4HeapKind@2@@Z
?s_memory@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2UMemory@23@A
?s_memory@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2UMemory@23@A
?s_mutex@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2VMutex@3@A
?s_mutex@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2VMutex@3@A
?s_object@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2U?$atomic@PEAVEnvironment@bmalloc@@@std@@A
?s_object@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2U?$atomic@PEAVSystemHeap@bmalloc@@@std@@A
?scavenge@api@bmalloc@@YAXXZ
?scavengeThisThread@api@bmalloc@@YAXXZ
?systemHeapCache@bmalloc@@3PEAVSystemHeap@1@EA
?tryLargeZeroedMemalignVirtual@api@bmalloc@@YAPEAX_K0W4CompactAllocationMode@2@W4HeapKind@2@@Z
dumpBtjsTrace
g_config
icudt73_dat
llhttp_errno_name
llhttp_execute
llhttp_finish
llhttp_get_errno
llhttp_get_error_pos
llhttp_get_error_reason
llhttp_get_http_major
llhttp_get_http_minor
llhttp_get_method
llhttp_get_status_code
llhttp_get_type
llhttp_get_upgrade
llhttp_init
llhttp_message_needs_eof
llhttp_method_name
llhttp_pause
llhttp_reset
llhttp_resume
llhttp_resume_after_upgrade
llhttp_set_error_reason
llhttp_set_lenient_chunked_length
llhttp_set_lenient_data_after_close
llhttp_set_lenient_headers
llhttp_set_lenient_keep_alive
llhttp_set_lenient_optional_cr_before_lf
llhttp_set_lenient_optional_crlf_after_chunk
llhttp_set_lenient_optional_lf_after_cr
llhttp_set_lenient_spaces_after_chunk_size
llhttp_set_lenient_transfer_encoding
llhttp_set_lenient_version
llhttp_settings_init
llhttp_should_keep_alive
llhttp_status_name
napi_acquire_threadsafe_function
napi_add_async_cleanup_hook
napi_add_env_cleanup_hook
napi_add_finalizer
napi_adjust_external_memory
napi_async_destroy
napi_async_init
napi_call_function
napi_call_threadsafe_function
napi_cancel_async_work
napi_check_object_type_tag
napi_close_callback_scope
napi_close_escapable_handle_scope
napi_close_handle_scope
napi_coerce_to_bool
napi_coerce_to_number
napi_coerce_to_object
napi_coerce_to_string
napi_create_array
napi_create_array_with_length
napi_create_arraybuffer
napi_create_async_work
napi_create_bigint_int64
napi_create_bigint_uint64
napi_create_bigint_words
napi_create_buffer
napi_create_buffer_copy
napi_create_dataview
napi_create_date
napi_create_double
napi_create_error
napi_create_external
napi_create_external_arraybuffer
napi_create_external_buffer
napi_create_function
napi_create_int32
napi_create_int64
napi_create_object
napi_create_promise
napi_create_range_error
napi_create_reference
napi_create_string_latin1
napi_create_string_utf16
napi_create_string_utf8
napi_create_symbol
napi_create_threadsafe_function
napi_create_type_error
napi_create_typedarray
napi_create_uint32
napi_define_class
napi_define_properties
napi_delete_async_work
napi_delete_element
napi_delete_property
napi_delete_reference
napi_detach_arraybuffer
napi_escape_handle
napi_fatal_error
napi_fatal_exception
napi_get_all_property_names
napi_get_and_clear_last_exception
napi_get_array_length
napi_get_arraybuffer_info
napi_get_boolean
napi_get_buffer_info
napi_get_cb_info
napi_get_dataview_info
napi_get_date_value
napi_get_element
napi_get_global
napi_get_instance_data
napi_get_last_error_info
napi_get_named_property
napi_get_new_target
napi_get_node_version
napi_get_null
napi_get_property
napi_get_property_names
napi_get_prototype
napi_get_reference_value
napi_get_threadsafe_function_context
napi_get_typedarray_info
napi_get_undefined
napi_get_uv_event_loop
napi_get_value_bigint_int64
napi_get_value_bigint_uint64
napi_get_value_bigint_words
napi_get_value_bool
napi_get_value_double
napi_get_value_external
napi_get_value_int32
napi_get_value_int64
napi_get_value_string_latin1
napi_get_value_string_utf16
napi_get_value_string_utf8
napi_get_value_uint32
napi_get_version
napi_has_element
napi_has_named_property
napi_has_own_property
napi_has_property
napi_instanceof
napi_is_array
napi_is_arraybuffer
napi_is_buffer
napi_is_dataview
napi_is_date
napi_is_detached_arraybuffer
napi_is_error
napi_is_exception_pending
napi_is_promise
napi_is_typedarray
napi_make_callback
napi_module_register
napi_new_instance
napi_object_freeze
napi_object_seal
napi_open_callback_scope
napi_open_escapable_handle_scope
napi_open_handle_scope
napi_queue_async_work
napi_ref_threadsafe_function
napi_reference_ref
napi_reference_unref
napi_reject_deferred
napi_release_threadsafe_function
napi_remove_async_cleanup_hook
napi_remove_env_cleanup_hook
napi_remove_wrap
napi_resolve_deferred
napi_run_script
napi_set_element
napi_set_instance_data
napi_set_named_property
napi_set_property
napi_strict_equals
napi_throw
napi_throw_error
napi_throw_range_error
napi_throw_type_error
napi_type_tag_object
napi_typeof
napi_unref_threadsafe_function
napi_unwrap
napi_wrap
node_api_create_buffer_from_arraybuffer
node_api_create_external_string_latin1
node_api_create_external_string_utf16
node_api_create_property_key_latin1
node_api_create_property_key_utf16
node_api_create_property_key_utf8
node_api_create_syntax_error
node_api_get_module_file_name
node_api_post_finalizer
node_api_symbol_for
node_api_throw_syntax_error
node_module_register
pas_system_heap_free
pas_system_heap_is_enabled
pas_system_heap_malloc
pas_system_heap_malloc_compact
pas_system_heap_memalign
pas_system_heap_memalign_compact
pas_system_heap_realloc
pas_system_heap_realloc_compact
pas_system_heap_should_supplant_bmalloc
uv_accept
uv_addr_ip4_any_
uv_addr_ip6_any_
uv_async_init
uv_async_send
uv_available_parallelism
uv_backend_fd
uv_backend_timeout
uv_barrier_destroy
uv_barrier_init
uv_barrier_wait
uv_buf_init
uv_cancel
uv_chdir
uv_check_init
uv_check_start
uv_check_stop
uv_clock_gettime
uv_close
uv_cond_broadcast
uv_cond_destroy
uv_cond_init
uv_cond_signal
uv_cond_timedwait
uv_cond_wait
uv_cpu_info
uv_cpumask_size
uv_cwd
uv_default_loop
uv_directory_watcher_buffer_size
uv_disable_stdio_inheritance
uv_dlclose
uv_dlerror
uv_dlopen
uv_dlsym
uv_err_name
uv_err_name_r
uv_exepath
uv_fatal_error
uv_fileno
uv_free_cpu_info
uv_free_interface_addresses
uv_freeaddrinfo
uv_fs_access
uv_fs_chmod
uv_fs_chown
uv_fs_close
uv_fs_closedir
uv_fs_copyfile
uv_fs_event_getpath
uv_fs_event_init
uv_fs_event_start
uv_fs_event_stop
uv_fs_fchmod
uv_fs_fchown
uv_fs_fdatasync
uv_fs_fstat
uv_fs_fsync
uv_fs_ftruncate
uv_fs_futime
uv_fs_get_path
uv_fs_get_ptr
uv_fs_get_result
uv_fs_get_statbuf
uv_fs_get_system_error
uv_fs_get_type
uv_fs_lchown
uv_fs_link
uv_fs_lstat
uv_fs_lutime
uv_fs_mkdir
uv_fs_mkdtemp
uv_fs_mkstemp
uv_fs_open
uv_fs_opendir
uv_fs_poll_getpath
uv_fs_poll_init
uv_fs_poll_start
uv_fs_poll_stop
uv_fs_read
uv_fs_readdir
uv_fs_readlink
uv_fs_realpath
uv_fs_rename
uv_fs_req_cleanup
uv_fs_rmdir
uv_fs_scandir
uv_fs_scandir_next
uv_fs_sendfile
uv_fs_stat
uv_fs_statfs
uv_fs_symlink
uv_fs_unlink
uv_fs_utime
uv_fs_write
uv_get_available_memory
uv_get_constrained_memory
uv_get_free_memory
uv_get_osfhandle
uv_get_process_title
uv_get_total_memory
uv_getaddrinfo
uv_getnameinfo
uv_getrusage
uv_gettimeofday
uv_guess_handle
uv_handle_get_data
uv_handle_get_loop
uv_handle_get_type
uv_handle_set_data
uv_handle_size
uv_handle_type_name
uv_has_ref
uv_hrtime
uv_idle_init
uv_idle_start
uv_idle_stop
uv_if_indextoiid
uv_if_indextoname
uv_inet_ntop
uv_inet_pton
uv_interface_addresses
uv_ip4_addr
uv_ip4_name
uv_ip6_addr
uv_ip6_name
uv_ip_name
uv_is_active
uv_is_closing
uv_is_readable
uv_is_writable
uv_key_create
uv_key_delete
uv_key_get
uv_key_set
uv_kill
uv_library_shutdown
uv_listen
uv_loadavg
uv_loop_alive
uv_loop_close
uv_loop_configure
uv_loop_delete
uv_loop_fork
uv_loop_get_data
uv_loop_init
uv_loop_new
uv_loop_set_data
uv_loop_size
uv_metrics_idle_time
uv_metrics_info
uv_mutex_destroy
uv_mutex_init
uv_mutex_init_recursive
uv_mutex_lock
uv_mutex_trylock
uv_mutex_unlock
uv_now
uv_once
uv_open_osfhandle
uv_os_environ
uv_os_free_environ
uv_os_free_group
uv_os_free_passwd
uv_os_get_group
uv_os_get_passwd
uv_os_get_passwd2
uv_os_getenv
uv_os_gethostname
uv_os_getpid
uv_os_getppid
uv_os_getpriority
uv_os_homedir
uv_os_setenv
uv_os_setpriority
uv_os_tmpdir
uv_os_uname
uv_os_unsetenv
uv_pipe
uv_pipe_bind
uv_pipe_bind2
uv_pipe_chmod
uv_pipe_connect
uv_pipe_connect2
uv_pipe_getpeername
uv_pipe_getsockname
uv_pipe_init
uv_pipe_open
uv_pipe_pending_count
uv_pipe_pending_instances
uv_pipe_pending_type
uv_poll_init
uv_poll_init_socket
uv_poll_start
uv_poll_stop
uv_prepare_init
uv_prepare_start
uv_prepare_stop
uv_print_active_handles
uv_print_all_handles
uv_process_get_pid
uv_process_kill
uv_process_tty_read_line_req
uv_process_tty_read_raw_req
uv_queue_work
uv_random
uv_read_start
uv_read_stop
uv_recv_buffer_size
uv_ref
uv_replace_allocator
uv_req_get_data
uv_req_get_type
uv_req_set_data
uv_req_size
uv_req_type_name
uv_resident_set_memory
uv_run
uv_rwlock_destroy
uv_rwlock_init
uv_rwlock_rdlock
uv_rwlock_rdunlock
uv_rwlock_tryrdlock
uv_rwlock_trywrlock
uv_rwlock_wrlock
uv_rwlock_wrunlock
uv_sem_destroy
uv_sem_init
uv_sem_post
uv_sem_trywait
uv_sem_wait
uv_send_buffer_size
uv_set_process_title
uv_setup_args
uv_shutdown
uv_signal_init
uv_signal_start
uv_signal_start_oneshot
uv_signal_stop
uv_simultaneous_server_accepts
uv_sleep
uv_socketpair
uv_spawn
uv_stop
uv_stream_get_write_queue_size
uv_stream_set_blocking
uv_strerror
uv_strerror_r
uv_tcp_bind
uv_tcp_close_reset
uv_tcp_connect
uv_tcp_getpeername
uv_tcp_getsockname
uv_tcp_init
uv_tcp_init_ex
uv_tcp_keepalive
uv_tcp_nodelay
uv_tcp_non_ifs_lsp_ipv4
uv_tcp_non_ifs_lsp_ipv6
uv_tcp_open
uv_tcp_simultaneous_accepts
uv_thread_create
uv_thread_create_ex
uv_thread_equal
uv_thread_getaffinity
uv_thread_getcpu
uv_thread_join
uv_thread_self
uv_thread_setaffinity
uv_timer_again
uv_timer_get_due_in
uv_timer_get_repeat
uv_timer_init
uv_timer_set_repeat
uv_timer_start
uv_timer_stop
uv_translate_sys_error
uv_try_write
uv_try_write2
uv_tty_get_vterm_state
uv_tty_get_winsize
uv_tty_init
uv_tty_reset_mode
uv_tty_set_mode
uv_tty_set_vterm_state
uv_udp_bind
uv_udp_connect
uv_udp_get_send_queue_count
uv_udp_get_send_queue_size
uv_udp_getpeername
uv_udp_getsockname
uv_udp_init
uv_udp_init_ex
uv_udp_open
uv_udp_recv_start
uv_udp_recv_stop
uv_udp_send
uv_udp_set_broadcast
uv_udp_set_membership
uv_udp_set_multicast_interface
uv_udp_set_multicast_loop
uv_udp_set_multicast_ttl
uv_udp_set_source_membership
uv_udp_set_ttl
uv_udp_try_send
uv_udp_using_recvmmsg
uv_unref
uv_update_time
uv_uptime
uv_version
uv_version_string
uv_walk
uv_write
uv_write2
Name
.text
Size
56.3MB
Virtual Size
56.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35.3MB
Virtual Size
35.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
179KB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
912KB
Virtual Size
911KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
__DATA,_
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
__DATA,_
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.bun
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
code-main/505HFZIN80F5.exe
- IMPHASH 47727555ff6fee55bad9bac6b93ec1ff
- SHA256 ee224045a89b4bb62af10c017ec15fe966b72fc23de2f6fa13b79cf232a31958
- MD5 0fe80231969c64222b8eed137d97147f
- SHA1 e83c0cafe5a3f37f9079149bafb68bb72b2083f3
- SHA512 8faddc0496e8dc7e276b5296613114f1b76e431e993814150d44ebf95dc0f7c0615e570ce48345121a60aab718b26b1e40fb78807ed5ccb6aec09aaa55527338
- SSDEEP 49152:81pjnGv4stEsoTE0+gzd9lOvlCVwsLNMvgVo:4GvfEsowrgzdcsLNM
- TLSH T158A52353398195DDF86949308164B0A2AD7438EA0B25A8FF43C580B43F71BDA9F79E37
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
91504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
kernel32
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
CloseHandle
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
GetModuleHandleW
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
__current_exception_context
__current_exception
memcpy
memset
__CxxFrameHandler3
memmove
memcmp
__C_specific_handler
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
exit
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
656B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/7M260NMM3NQF.exe
- IMPHASH 47727555ff6fee55bad9bac6b93ec1ff
- SHA256 0a5c86ee3956ef4bf3349adaef85208809b41de2f98aefd7956645e7e9ea5342
- MD5 8c38f114c35ae695523323a4426b46bb
- SHA1 0b49a55cb65fe1fa79e77dbd72c0f3655f09d07f
- SHA512 3628b7158ddb117ea4a62671d056b6386a3b2db6758e6099fa9533c026ca5eb9a2d5dc235d43148e1fea94aa3cead8f3f84cd1d450b6e5116049b7bfbd48eb64
- SSDEEP 49152:fpCwVsjsUblrco696fJQyzhVdoKMI/Dybivnihau7Ujc1jyntQZ/:Q4xcb+6d9ML+PU7Ujc1jyKZ
- TLSH T15DA523533A8165F8C88A80B87351B8629A713DD61F7362FB63C045A82F6DAF45F70787
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
91504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
kernel32
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
CloseHandle
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
GetModuleHandleW
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
__current_exception_context
__current_exception
memcpy
memset
__CxxFrameHandler3
memmove
memcmp
__C_specific_handler
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
exit
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
656B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/7PGV5X7885T8.exe
- IMPHASH 0bc1b1e557f4a4387777840b7c7925ef
- SHA256 b8b9ced404e0952dd3b5b453bdd290f5666d554b6312f2f3e1e7038eb57900b3
- MD5 3d274f5da6f4691ff4684f6278027fef
- SHA1 01a47be77a8fca8990b30411cdbe8175b4b5c130
- SHA512 ed32660a810bc41bfd16a7cf5f07c118bb52618e8a7146665547ba9e96902aeb9e309c34d33f1983f8af553dfc09fe436ade69d35a93cca3956ef4af90c1d988
- SSDEEP 393216:G58k/JcIMpSiEcNJECDECs5iYCOLYgCig8sQeNut5AVnDii6Ss1DT9SfhVEBhz:u8k/jAICahDLBtVbD1DT9SfhMhz
- TLSH T199670168024CE388745F4635F394FC3FF2E8359A7376E8A9BC3991DA64522C2C279587
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FindResourceA
GetLastError
GetTickCount64
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcmp
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_exit
_fpreset
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
Name
.text
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
30.6MB
Virtual Size
30.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
568B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/E4J3Q5825I7F.exe
- IMPHASH 0bc1b1e557f4a4387777840b7c7925ef
- SHA256 83da0e8a179cf390198e2576f2c2a0046367e8f5b5bfa02835ba9cdaca50be97
- MD5 168e1a936c2d9b1fcfa99c190fcc27ca
- SHA1 504b85bb48ca13b8182199fb222ba317eb30f24f
- SHA512 44feee8d1e3f227b6c35d8370dabe1aad5136bd46a96d98a7f94015d535cf41ddba53fb2369e59e238fbd0ad865560a0d90e507870becbeb5c8b575cb43582e0
- SSDEEP 393216:GSCoG0h5BBIgKRLtgIbs5iYCOLYgCig8sQeNut5AVnDii6Ss1DT9SfhVEBhz:GPV0hxyLtgIbahDLBtVbD1DT9SfhMhz
- TLSH T1D077F118024CE384799F463AF3D8F83FE3DC25693776E8A9BC39D5DAA411295C279183
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FindResourceA
GetLastError
GetTickCount64
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcmp
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_exit
_fpreset
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
Name
.text
Size
186KB
Virtual Size
185KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
6KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31.3MB
Virtual Size
31.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
568B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/EM1S573K9Q2C.exe
- IMPHASH 0bc1b1e557f4a4387777840b7c7925ef
- SHA256 3224bd9e353ac59908f6b49ba5687a5da6a376608ec95f12259d89fb2d3c2203
- MD5 91c21d6246ead90659f934b25b72fcbf
- SHA1 e4bf2d8659ae156da7b4b7cae11e0299eacde694
- SHA512 9e974513b73ed6a4f6991f3c466db8b93a58ab3c305480d802155a3b77f450d1a33a15b5b3ab43ef912b4e8eeb5745ca3415df2e9eef619059c0e9edde262131
- SSDEEP 393216:hSSnP2ODApGnepSiEcNJECDECs5iYCOLYgCig8sQeNut5AVnDii6Ss1DT9SfhVEj:hP2ODApdICahDLBtVbD1DT9SfhMhz
- TLSH T17B77E05C024CD388799F053AF3D8F83FE3DC26643776E869BC75D1AAA812294C279593
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5072
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
kernel32
DeleteCriticalSection
EnterCriticalSection
FindResourceA
GetLastError
GetTickCount64
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockResource
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-environment-l1-1-0
__p__environ
__p__wenviron
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memcmp
memcpy
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
__p___wargv
_cexit
_configure_narrow_argv
_configure_wide_argv
_crt_at_quick_exit
_crt_atexit
_exit
_fpreset
_initialize_narrow_environment
_initialize_wide_environment
_initterm
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vfwprintf
fwrite
api-ms-win-crt-string-l1-1-0
memset
strlen
strncmp
api-ms-win-crt-time-l1-1-0
__daylight
__timezone
__tzname
_tzset
Name
.text
Size
187KB
Virtual Size
187KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
208B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
5KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
448B
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
96B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31.8MB
Virtual Size
31.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
1024B
Virtual Size
568B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/README.md
- SHA256 8e6055e6c2800714ba26adbefec77cf0bfdae5c9ebcf03a9dcee6f2998ba19f0
- MD5 31a8a0ed433f5e9bfd4894227c7b53c8
- SHA1 d2b64dff722419e90ee59a8b995037ea52984c69
- SHA512 6ba7cfba2bfc4e4dc134be75c687363d17fdad541fe7a44c7f00362b6403156b158a97228d0f3f6bc18598b65174c2bba2d5bf6a44dd327ced0cd8556101d424
- SSDEEP 96:M3fanRzcgrF4KL0upVmxozc2s/mEtYSjfnVt6oFWGaMnuEoJ5Mem7FtKlU:GeQxKL0Txoi/mEtYAfnNW89
- TLSH T14AC1C91BF310973847870261BE19BEECEB2BE16C03C560EB58BCD51C53A92A341775A9
- MD5 SHA1 SHA512 SSDEEP TLSH
code-main/S8D70IPCZNAA.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 518a7198ec4de6d56e4aae6c9fcd9e66f9313bc0107c6f0ccf2fb5e638492354
- MD5 bda8050959189d97c0f89f752f8d2d8d
- SHA1 f043ba3e3d0a42cbaf99bef4f53a0a222dbb68c5
- SHA512 14271cba6f85569762203b8bda80bca6153327e873e6cb11b6aeac20f992766c5beb8fa6a9576cef87f3191f7df2f1768a8ab2da54cc0d0520393d492c72fd64
- SSDEEP 768:gmQZqx1lYcTYbFyf8qPIRF8jnbaoXbYC10koj:g0lYiPIRF8jRbPoj
- TLSH T1EEF23A487B58C12BDBAF0E7D75621A11167297521203CBD93ECC24EEFFA37058612B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
code-main/W52UE52XBY31.exe
- IMPHASH 47727555ff6fee55bad9bac6b93ec1ff
- SHA256 8daf63d256788702648f1699d1909d7a862bb9859ca93bbf96fd73f70bc107a9
- MD5 8b8437eab9e8d2db15976fd895a07d7c
- SHA1 46d76968389c0fb8482cfde6603c2dcdbae85634
- SHA512 e9a09bcaabf70809ca43a81d6d163bc7fde04fe8b1e3beb5f798f2a0e5ce67fe97b19d7f9bf043c4b3a42b7b49afdc61239a4fc008478df9259a2af96293c62f
- SSDEEP 49152:8JShofikO5GAmXawUl8qM5+/keT0U9oKr0G0eDD/:8JShVkahmXaN875+voU9XO2D/
- TLSH T13FA52362731428F1FC86C87882559636BB3B70972FA555FB63A511A12F34FE01F78A23
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
91504
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
api-ms-win-core-synch-l1-2-0
WakeByAddressSingle
WakeByAddressAll
WaitOnAddress
kernel32
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
GetProcessHeap
HeapFree
HeapReAlloc
GetCurrentThreadId
GetLastError
SetLastError
GetEnvironmentVariableW
GetCurrentDirectoryW
RtlCaptureContext
GetCurrentProcess
RtlLookupFunctionEntry
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
lstrlenW
GetCurrentProcessId
CreateMutexA
CloseHandle
ReleaseMutex
WideCharToMultiByte
RtlVirtualUnwind
GetModuleHandleW
FormatMessageW
GetStdHandle
GetConsoleMode
GetConsoleOutputCP
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
HeapAlloc
GetModuleHandleA
ExitProcess
QueryPerformanceCounter
ntdll
NtWriteFile
RtlNtStatusToDosError
vcruntime140
__current_exception_context
__current_exception
memcpy
memset
__CxxFrameHandler3
memmove
memcmp
__C_specific_handler
api-ms-win-crt-string-l1-1-0
strlen
api-ms-win-crt-runtime-l1-1-0
exit
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
Name
.text
Size
91KB
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
656B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
592B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/hello.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 0af69f4befc8e461da46f5ea8352e84ff797b27a38154b436d7ad4e9fb3e90d0
- MD5 06f5ec9866854e9a8641973d0727e376
- SHA1 00f9028502d47ffa8b1bf2997f139c3b1fdf7ed6
- SHA512 9d1b502dac5af9adb3044a2c081df67723d7b3d5bff8fd6573f7c6c97422ee820a96ac28d3555c5833c4469a1fe65205895b73a056c4b363b018d79eb6a0ae00
- SSDEEP 98304:JxJBHSwqt2hAdEuNI4NgJ9LIEGpenYqrMgoXHnGvAdZixk:JI26dEW7adGpYYqrM9XH9Qxk
- TLSH T11A967C03ECA155E9C1A9A230C9A79253BB71BC491B3223D32B90F7392F767D46E79350
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
506368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.8MB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
365KB
Virtual Size
709KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
61KB
Virtual Size
61KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
/4
Size
512B
Virtual Size
340B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/19
Size
497KB
Virtual Size
496KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/32
Size
101KB
Virtual Size
100KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/46
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/65
Size
798KB
Virtual Size
798KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/78
Size
474KB
Virtual Size
474KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/95
Size
195KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
/112
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
52KB
Virtual Size
52KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
426KB
Virtual Size
425KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
code-main/stage2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 a694ae53379ab825bab8058a518a57394d5367f736a58064c54049f5640f4a83
- MD5 077a73750aee7d14b4983cc0f6abe1b9
- SHA1 00486407a2c81191146c6e56ec434a0e9b53b042
- SHA512 90d4e59f1c8be8086869bd220b25c77278465cf8567b2840a216dfefe9e5df18e9e1b7ce9e010e11562786f92541c7f79f08d56bb3309a616eca13798d1c34a8
- SSDEEP 768:xmQZqx1lYcTYbFyf8q9eQgjnbaoXbYC10koF:x0lYi9eQgjRbPoF
- TLSH T1D1F22A096B5CC22BDBAF4E7D79621A101671D7521203CBD53ECC25EEFEA77048612B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
40606
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
code-main/stage_2.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 ffe41fc861960cee3f0d74c1f28a308fc80536420d2109efffe42e6503526c9d
- MD5 9df8f093727a61b26021d2fdd22f7d48
- SHA1 dccffba05c81e6fae5bcf9242ac2364e764cad88
- SHA512 2954d03696301e1ec8f8dbb0154f121fe844446a2eb231d39332a9b3a504af0f3368ad796ca9315115e915d36694ba122ef8b92f2e18171966a032be87aed7b4
- SSDEEP 768:ZmQZqx1lYcTYbFyf8qrIRF8jnbaoXbYC10koI:Z0lYirIRF8jRbPoI
- TLSH T16BF23A087B5CC12BDBAF0E7D65621A51167297521203CBD53ECC64EEFFA37058612B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
code-main/stage_2_1.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 518a7198ec4de6d56e4aae6c9fcd9e66f9313bc0107c6f0ccf2fb5e638492354
- MD5 bda8050959189d97c0f89f752f8d2d8d
- SHA1 f043ba3e3d0a42cbaf99bef4f53a0a222dbb68c5
- SHA512 14271cba6f85569762203b8bda80bca6153327e873e6cb11b6aeac20f992766c5beb8fa6a9576cef87f3191f7df2f1768a8ab2da54cc0d0520393d492c72fd64
- SSDEEP 768:gmQZqx1lYcTYbFyf8qPIRF8jnbaoXbYC10koj:g0lYiPIRF8jRbPoj
- TLSH T1EEF23A487B58C12BDBAF0E7D75621A11167297521203CBD93ECC24EEFFA37058612B8B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
41646
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
.text
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
code-main/y0Xc9Og1lghX.exe
- IMPHASH fd6f6d07cc33ee9a2b65bda58a07bb94
- SHA256 093654d182e8054657908aa08a0ca5c2abafc6852a7458091d86b85382b2ae16
- MD5 ca3781edd9cfa6cc1eae8482726c572d
- SHA1 c9f5e70d615f008e75d281b66da19291552394d8
- SHA512 947677176fbbf2f017049d32bbe658105669e15d46d275c260580efdd1ad5df43df67cd369701ad0cfdc0829b27cc22a32f3a92cb91df939e54b6c5f77f2dcdf
- SSDEEP 1572864:wZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:wZa7hmguP2nUOnAwby
- TLSH T1F4286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
58584260
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildkite-agent\build\build\release\bun-profile.pdb
ntdll
NtAllocateVirtualMemory
NtClose
NtCreateFile
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtFreeVirtualMemory
NtLockFile
NtQueryAttributesFile
NtQueryDirectoryFile
NtQueryInformationFile
NtQueryInformationProcess
NtQueryObject
NtQueryVolumeInformationFile
NtReadFile
NtSetInformationFile
NtWriteFile
RtlAddFunctionTable
RtlCaptureContext
RtlCaptureStackBackTrace
RtlDeleteFunctionTable
RtlEqualUnicodeString
RtlExitUserProcess
RtlGetFullPathName_U
RtlGetSystemTimePrecise
RtlGetVersion
RtlLookupFunctionEntry
RtlNtStatusToDosError
RtlPcToFileHeader
RtlQueryPerformanceCounter
RtlQueryPerformanceFrequency
RtlSetCurrentDirectory_U
RtlUnwind
RtlUnwindEx
RtlUpcaseUnicodeChar
RtlVirtualUnwind
RtlWaitOnAddress
RtlWakeAddressAll
RtlWakeAddressSingle
VerSetConditionMask
userenv
GetUserProfileDirectoryW
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AddVectoredExceptionHandler
AreFileApisANSI
AssignProcessToJobObject
BeginUpdateResourceW
CancelIo
CancelIoEx
CancelSynchronousIo
CloseHandle
ClosePseudoConsole
CompareStringEx
CompareStringOrdinal
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateFile2
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateJobObjectA
CreateJobObjectW
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateProcessA
CreateProcessW
CreatePseudoConsole
CreateSemaphoreA
CreateSymbolicLinkW
CreateThread
DebugBreak
DecodePointer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteProcThreadAttributeList
DeviceIoControl
DiscardVirtualMemory
DuplicateHandle
EncodePointer
EndUpdateResourceW
EnterCriticalSection
EnumResourceLanguagesW
EnumResourceNamesW
EnumSystemLocalesW
ExitProcess
ExitThread
ExpandEnvironmentStringsA
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FindClose
FindFirstFileExW
FindFirstFileW
FindNextFileW
FindResourceExW
FindResourceW
FlsAlloc
FlsFree
FlsGetValue
FlsSetValue
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetComputerNameA
GetConsoleCP
GetConsoleCursorInfo
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetCurrencyFormatEx
GetCurrentDirectoryA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
GetCurrentThreadStackLimits
GetDateFormatEx
GetDateFormatW
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameA
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocaleInfoEx
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNamedPipeClientProcessId
GetNamedPipeHandleStateA
GetNamedPipeServerProcessId
GetNativeSystemInfo
GetNumberFormatEx
GetNumberOfConsoleInputEvents
GetOEMCP
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessAffinityMask
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetQueuedCompletionStatus
GetQueuedCompletionStatusEx
GetShortPathNameW
GetStartupInfoW
GetStdHandle
GetStringTypeW
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadDescription
GetThreadTimes
GetTickCount
GetTickCount64
GetTimeFormatEx
GetTimeFormatW
GetTimeZoneInformation
GetTimeZoneInformationForYear
GetUserDefaultLCID
GetUserDefaultUILanguage
GetUserGeoID
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapQueryInformation
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeCriticalSectionEx
InitializeProcThreadAttributeList
InitializeSListHead
InitializeSRWLock
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessInJob
IsProcessorFeaturePresent
IsValidCodePage
IsValidLocale
K32EnumProcessModules
K32GetModuleBaseNameW
K32GetModuleFileNameExA
K32GetProcessMemoryInfo
LCIDToLocaleName
LCMapStringEx
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalFree
LocaleNameToLCID
LockFile
LockFileEx
LockResource
MapViewOfFile
MoveFileExW
MultiByteToWideChar
NeedCurrentDirectoryForExePathW
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryMemoryResourceNotification
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseException
ReOpenFile
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
RemoveVectoredExceptionHandler
ResetEvent
ResizePseudoConsole
ResolveLocaleName
ResumeThread
SearchPathA
SetConsoleCP
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetConsoleTitleW
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableW
SetErrorMode
SetEvent
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetHandleInformation
SetInformationJobObject
SetLastError
SetNamedPipeHandleState
SetPriorityClass
SetStdHandle
SetThreadAffinityMask
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SuspendThread
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UnmapViewOfFile
UnregisterWait
UnregisterWaitEx
UpdateProcThreadAttribute
UpdateResourceW
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleA
WriteConsoleInputW
WriteConsoleW
WriteFile
lstrlenW
user32
CloseClipboard
DispatchMessageA
GetClipboardData
GetClipboardSequenceNumber
GetMessageA
GetSystemMetrics
IsClipboardFormatAvailable
MapVirtualKeyW
OpenClipboard
RegisterClipboardFormatA
TranslateMessage
shell32
CommandLineToArgvW
SHGetKnownFolderPath
oleaut32
VariantClear
VariantInit
??0Environment@bmalloc@@QEAA@AEBV?$scoped_lock@VMutex@bmalloc@@@std@@@Z
??0EscapableHandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??0EscapableHandleScopeBase@v8@@QEAA@PEAVIsolate@1@@Z
??0HandleScope@v8@@QEAA@PEAVIsolate@1@@Z
??1EscapableHandleScope@v8@@QEAA@XZ
??1HandleScope@v8@@QEAA@XZ
?AddEnvironmentCleanupHook@node@@YAXPEAVIsolate@v8@@P6AXPEAX@Z1@Z
?CheckCast@Array@v8@@CAXPEAVValue@2@@Z
?ContainsOnlyOneByte@String@v8@@QEBA_NXZ
?CreateHandle@HandleScope@v8@@KAPEA_KPEAVIsolate@internal@2@_K@Z
?DisposeGlobal@api_internal@v8@@YAXPEA_K@Z
?EscapeSlot@EscapableHandleScopeBase@v8@@IEAAPEA_KPEA_K@Z
?FromJustIsNothing@api_internal@v8@@YAXXZ
?FullIsFalse@Value@v8@@AEBA_NXZ
?FullIsTrue@Value@v8@@AEBA_NXZ
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@I@Z
?Get@Object@v8@@QEAA?AV?$MaybeLocal@VValue@v8@@@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@@Z
?GetCurrent@Isolate@v8@@SAPEAV12@XZ
?GetCurrentContext@Isolate@v8@@QEAA?AV?$Local@VContext@v8@@@2@XZ
?GetFunction@FunctionTemplate@v8@@QEAA?AV?$MaybeLocal@VFunction@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?GetFunctionTemplateData@api_internal@v8@@YA?AV?$Local@VValue@v8@@@2@PEAVIsolate@2@V?$Local@VData@v8@@@2@@Z
?GetInternalField@Object@v8@@QEAA?AV?$Local@VData@v8@@@2@H@Z
?GetIsolate@Context@v8@@QEAAPEAVIsolate@2@XZ
?GetName@Function@v8@@QEBA?AV?$Local@VValue@v8@@@2@XZ
?GlobalizeReference@api_internal@v8@@YAPEA_KPEAVIsolate@internal@2@_K@Z
?InternalFieldCount@ObjectTemplate@v8@@QEBAHXZ
?IsArray@Value@v8@@QEBA_NXZ
?IsBigInt@Value@v8@@QEBA_NXZ
?IsBoolean@Value@v8@@QEBA_NXZ
?IsExternal@String@v8@@QEBA_NXZ
?IsExternalOneByte@String@v8@@QEBA_NXZ
?IsExternalTwoByte@String@v8@@QEBA_NXZ
?IsFalse@Value@v8@@QEBA_NXZ
?IsFunction@Value@v8@@QEBA_NXZ
?IsInt32@Value@v8@@QEBA_NXZ
?IsMap@Value@v8@@QEBA_NXZ
?IsNull@Value@v8@@QEBA_NXZ
?IsNullOrUndefined@Value@v8@@QEBA_NXZ
?IsNumber@Value@v8@@QEBA_NXZ
?IsObject@Value@v8@@QEBA_NXZ
?IsOneByte@String@v8@@QEBA_NXZ
?IsString@Value@v8@@QEBA_NXZ
?IsTrue@Value@v8@@QEBA_NXZ
?IsUint32@Value@v8@@QEBA_NXZ
?IsUndefined@Value@v8@@QEBA_NXZ
?IsolateFromNeverReadOnlySpaceObject@internal@v8@@YAPEAVIsolate@12@_K@Z
?Iterate@Array@v8@@QEAA?AV?$Maybe@X@2@V?$Local@VContext@v8@@@2@P6A?AW4CallbackResult@12@IV?$Local@VValue@v8@@@2@PEAX@Z2@Z
?Length@Array@v8@@QEBAIXZ
?Length@String@v8@@QEBAHXZ
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@H@Z
?New@Array@v8@@SA?AV?$Local@VArray@v8@@@2@PEAVIsolate@2@PEAV?$Local@VValue@v8@@@2@_K@Z
?New@Array@v8@@SA?AV?$MaybeLocal@VArray@v8@@@2@V?$Local@VContext@v8@@@2@_KV?$function@$$A6A?AV?$MaybeLocal@VValue@v8@@@v8@@XZ@std@@@Z
?New@Boolean@v8@@SA?AV?$Local@VBoolean@v8@@@2@PEAVIsolate@2@_N@Z
?New@External@v8@@SA?AV?$Local@VExternal@v8@@@2@PEAVIsolate@2@PEAX@Z
?New@FunctionTemplate@v8@@SA?AV?$Local@VFunctionTemplate@v8@@@2@PEAVIsolate@2@P6AXAEBV?$FunctionCallbackInfo@VValue@v8@@@2@@ZV?$Local@VValue@v8@@@2@V?$Local@VSignature@v8@@@2@HW4ConstructorBehavior@2@W4SideEffectType@2@PEBVCFunction@2@GGG@Z
?New@Number@v8@@SA?AV?$Local@VNumber@v8@@@2@PEAVIsolate@2@N@Z
?New@Object@v8@@SA?AV?$Local@VObject@v8@@@2@PEAVIsolate@2@@Z
?New@ObjectTemplate@v8@@SA?AV?$Local@VObjectTemplate@v8@@@2@PEAVIsolate@2@V?$Local@VFunctionTemplate@v8@@@2@@Z
?NewFromOneByte@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBEW4NewStringType@2@H@Z
?NewFromUtf8@String@v8@@SA?AV?$MaybeLocal@VString@v8@@@2@PEAVIsolate@2@PEBDW4NewStringType@2@H@Z
?NewInstance@ObjectTemplate@v8@@QEAA?AV?$MaybeLocal@VObject@v8@@@2@V?$Local@VContext@v8@@@2@@Z
?RemoveEnvironmentCleanupHook@node@@YAXPEAVIsolate@v8@@P6AXPEAX@Z1@Z
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@IV?$Local@VValue@v8@@@2@@Z
?Set@Object@v8@@QEAA?AV?$Maybe@_N@2@V?$Local@VContext@v8@@@2@V?$Local@VValue@v8@@@2@1@Z
?SetInternalField@Object@v8@@QEAAXHV?$Local@VData@v8@@@2@@Z
?SetInternalFieldCount@ObjectTemplate@v8@@QEAAXH@Z
?SetName@Function@v8@@QEAAXV?$Local@VString@v8@@@2@@Z
?SlowGetInternalField@Object@v8@@AEAA?AV?$Local@VData@v8@@@2@H@Z
?StrictEquals@Value@v8@@QEBA_NV?$Local@VValue@v8@@@2@@Z
?ToLocalEmpty@api_internal@v8@@YAXXZ
?TryGetCurrent@Isolate@v8@@SAPEAV12@XZ
?Uint32Value@Value@v8@@QEBA?AV?$Maybe@I@2@V?$Local@VContext@v8@@@2@@Z
?Utf8Length@String@v8@@QEBAHPEAVIsolate@2@@Z
?Value@Boolean@v8@@QEBA_NXZ
?Value@External@v8@@QEBAPEAXXZ
?Value@Number@v8@@QEBANXZ
?WriteUtf8@String@v8@@QEBAHPEAVIsolate@2@PEADHPEAHH@Z
?commitAlignedPhysical@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?decommitAlignedPhysical@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?disableScavenger@api@bmalloc@@YAXXZ
?enableMiniMode@api@bmalloc@@YAX_N@Z
?forceEnablePGM@api@bmalloc@@YAXG@Z
?freeLargeVirtual@api@bmalloc@@YAXPEAX_KW4HeapKind@2@@Z
?freeOutOfLine@api@bmalloc@@YAXPEAXW4HeapKind@2@@Z
?isEnabled@api@bmalloc@@YA_NW4HeapKind@2@@Z
?isMTEEnabled@api@bmalloc@@YA_NW4HeapKind@2@@Z
?lockSlowCase@Mutex@bmalloc@@AEAAXXZ
?mallocOutOfLine@api@bmalloc@@YAPEAX_KW4CompactAllocationMode@2@W4HeapKind@2@@Z
?s_memory@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2UMemory@23@A
?s_memory@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2UMemory@23@A
?s_mutex@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2VMutex@3@A
?s_mutex@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2VMutex@3@A
?s_object@Storage@?$StaticPerProcessStorageTraits@VEnvironment@bmalloc@@@bmalloc@@2U?$atomic@PEAVEnvironment@bmalloc@@@std@@A
?s_object@Storage@?$StaticPerProcessStorageTraits@VSystemHeap@bmalloc@@@bmalloc@@2U?$atomic@PEAVSystemHeap@bmalloc@@@std@@A
?scavenge@api@bmalloc@@YAXXZ
?scavengeThisThread@api@bmalloc@@YAXXZ
?systemHeapCache@bmalloc@@3PEAVSystemHeap@1@EA
?tryLargeZeroedMemalignVirtual@api@bmalloc@@YAPEAX_K0W4CompactAllocationMode@2@W4HeapKind@2@@Z
dumpBtjsTrace
g_config
icudt73_dat
llhttp_errno_name
llhttp_execute
llhttp_finish
llhttp_get_errno
llhttp_get_error_pos
llhttp_get_error_reason
llhttp_get_http_major
llhttp_get_http_minor
llhttp_get_method
llhttp_get_status_code
llhttp_get_type
llhttp_get_upgrade
llhttp_init
llhttp_message_needs_eof
llhttp_method_name
llhttp_pause
llhttp_reset
llhttp_resume
llhttp_resume_after_upgrade
llhttp_set_error_reason
llhttp_set_lenient_chunked_length
llhttp_set_lenient_data_after_close
llhttp_set_lenient_headers
llhttp_set_lenient_keep_alive
llhttp_set_lenient_optional_cr_before_lf
llhttp_set_lenient_optional_crlf_after_chunk
llhttp_set_lenient_optional_lf_after_cr
llhttp_set_lenient_spaces_after_chunk_size
llhttp_set_lenient_transfer_encoding
llhttp_set_lenient_version
llhttp_settings_init
llhttp_should_keep_alive
llhttp_status_name
napi_acquire_threadsafe_function
napi_add_async_cleanup_hook
napi_add_env_cleanup_hook
napi_add_finalizer
napi_adjust_external_memory
napi_async_destroy
napi_async_init
napi_call_function
napi_call_threadsafe_function
napi_cancel_async_work
napi_check_object_type_tag
napi_close_callback_scope
napi_close_escapable_handle_scope
napi_close_handle_scope
napi_coerce_to_bool
napi_coerce_to_number
napi_coerce_to_object
napi_coerce_to_string
napi_create_array
napi_create_array_with_length
napi_create_arraybuffer
napi_create_async_work
napi_create_bigint_int64
napi_create_bigint_uint64
napi_create_bigint_words
napi_create_buffer
napi_create_buffer_copy
napi_create_dataview
napi_create_date
napi_create_double
napi_create_error
napi_create_external
napi_create_external_arraybuffer
napi_create_external_buffer
napi_create_function
napi_create_int32
napi_create_int64
napi_create_object
napi_create_promise
napi_create_range_error
napi_create_reference
napi_create_string_latin1
napi_create_string_utf16
napi_create_string_utf8
napi_create_symbol
napi_create_threadsafe_function
napi_create_type_error
napi_create_typedarray
napi_create_uint32
napi_define_class
napi_define_properties
napi_delete_async_work
napi_delete_element
napi_delete_property
napi_delete_reference
napi_detach_arraybuffer
napi_escape_handle
napi_fatal_error
napi_fatal_exception
napi_get_all_property_names
napi_get_and_clear_last_exception
napi_get_array_length
napi_get_arraybuffer_info
napi_get_boolean
napi_get_buffer_info
napi_get_cb_info
napi_get_dataview_info
napi_get_date_value
napi_get_element
napi_get_global
napi_get_instance_data
napi_get_last_error_info
napi_get_named_property
napi_get_new_target
napi_get_node_version
napi_get_null
napi_get_property
napi_get_property_names
napi_get_prototype
napi_get_reference_value
napi_get_threadsafe_function_context
napi_get_typedarray_info
napi_get_undefined
napi_get_uv_event_loop
napi_get_value_bigint_int64
napi_get_value_bigint_uint64
napi_get_value_bigint_words
napi_get_value_bool
napi_get_value_double
napi_get_value_external
napi_get_value_int32
napi_get_value_int64
napi_get_value_string_latin1
napi_get_value_string_utf16
napi_get_value_string_utf8
napi_get_value_uint32
napi_get_version
napi_has_element
napi_has_named_property
napi_has_own_property
napi_has_property
napi_instanceof
napi_is_array
napi_is_arraybuffer
napi_is_buffer
napi_is_dataview
napi_is_date
napi_is_detached_arraybuffer
napi_is_error
napi_is_exception_pending
napi_is_promise
napi_is_typedarray
napi_make_callback
napi_module_register
napi_new_instance
napi_object_freeze
napi_object_seal
napi_open_callback_scope
napi_open_escapable_handle_scope
napi_open_handle_scope
napi_queue_async_work
napi_ref_threadsafe_function
napi_reference_ref
napi_reference_unref
napi_reject_deferred
napi_release_threadsafe_function
napi_remove_async_cleanup_hook
napi_remove_env_cleanup_hook
napi_remove_wrap
napi_resolve_deferred
napi_run_script
napi_set_element
napi_set_instance_data
napi_set_named_property
napi_set_property
napi_strict_equals
napi_throw
napi_throw_error
napi_throw_range_error
napi_throw_type_error
napi_type_tag_object
napi_typeof
napi_unref_threadsafe_function
napi_unwrap
napi_wrap
node_api_create_buffer_from_arraybuffer
node_api_create_external_string_latin1
node_api_create_external_string_utf16
node_api_create_property_key_latin1
node_api_create_property_key_utf16
node_api_create_property_key_utf8
node_api_create_syntax_error
node_api_get_module_file_name
node_api_post_finalizer
node_api_symbol_for
node_api_throw_syntax_error
node_module_register
pas_system_heap_free
pas_system_heap_is_enabled
pas_system_heap_malloc
pas_system_heap_malloc_compact
pas_system_heap_memalign
pas_system_heap_memalign_compact
pas_system_heap_realloc
pas_system_heap_realloc_compact
pas_system_heap_should_supplant_bmalloc
uv_accept
uv_addr_ip4_any_
uv_addr_ip6_any_
uv_async_init
uv_async_send
uv_available_parallelism
uv_backend_fd
uv_backend_timeout
uv_barrier_destroy
uv_barrier_init
uv_barrier_wait
uv_buf_init
uv_cancel
uv_chdir
uv_check_init
uv_check_start
uv_check_stop
uv_clock_gettime
uv_close
uv_cond_broadcast
uv_cond_destroy
uv_cond_init
uv_cond_signal
uv_cond_timedwait
uv_cond_wait
uv_cpu_info
uv_cpumask_size
uv_cwd
uv_default_loop
uv_directory_watcher_buffer_size
uv_disable_stdio_inheritance
uv_dlclose
uv_dlerror
uv_dlopen
uv_dlsym
uv_err_name
uv_err_name_r
uv_exepath
uv_fatal_error
uv_fileno
uv_free_cpu_info
uv_free_interface_addresses
uv_freeaddrinfo
uv_fs_access
uv_fs_chmod
uv_fs_chown
uv_fs_close
uv_fs_closedir
uv_fs_copyfile
uv_fs_event_getpath
uv_fs_event_init
uv_fs_event_start
uv_fs_event_stop
uv_fs_fchmod
uv_fs_fchown
uv_fs_fdatasync
uv_fs_fstat
uv_fs_fsync
uv_fs_ftruncate
uv_fs_futime
uv_fs_get_path
uv_fs_get_ptr
uv_fs_get_result
uv_fs_get_statbuf
uv_fs_get_system_error
uv_fs_get_type
uv_fs_lchown
uv_fs_link
uv_fs_lstat
uv_fs_lutime
uv_fs_mkdir
uv_fs_mkdtemp
uv_fs_mkstemp
uv_fs_open
uv_fs_opendir
uv_fs_poll_getpath
uv_fs_poll_init
uv_fs_poll_start
uv_fs_poll_stop
uv_fs_read
uv_fs_readdir
uv_fs_readlink
uv_fs_realpath
uv_fs_rename
uv_fs_req_cleanup
uv_fs_rmdir
uv_fs_scandir
uv_fs_scandir_next
uv_fs_sendfile
uv_fs_stat
uv_fs_statfs
uv_fs_symlink
uv_fs_unlink
uv_fs_utime
uv_fs_write
uv_get_available_memory
uv_get_constrained_memory
uv_get_free_memory
uv_get_osfhandle
uv_get_process_title
uv_get_total_memory
uv_getaddrinfo
uv_getnameinfo
uv_getrusage
uv_gettimeofday
uv_guess_handle
uv_handle_get_data
uv_handle_get_loop
uv_handle_get_type
uv_handle_set_data
uv_handle_size
uv_handle_type_name
uv_has_ref
uv_hrtime
uv_idle_init
uv_idle_start
uv_idle_stop
uv_if_indextoiid
uv_if_indextoname
uv_inet_ntop
uv_inet_pton
uv_interface_addresses
uv_ip4_addr
uv_ip4_name
uv_ip6_addr
uv_ip6_name
uv_ip_name
uv_is_active
uv_is_closing
uv_is_readable
uv_is_writable
uv_key_create
uv_key_delete
uv_key_get
uv_key_set
uv_kill
uv_library_shutdown
uv_listen
uv_loadavg
uv_loop_alive
uv_loop_close
uv_loop_configure
uv_loop_delete
uv_loop_fork
uv_loop_get_data
uv_loop_init
uv_loop_new
uv_loop_set_data
uv_loop_size
uv_metrics_idle_time
uv_metrics_info
uv_mutex_destroy
uv_mutex_init
uv_mutex_init_recursive
uv_mutex_lock
uv_mutex_trylock
uv_mutex_unlock
uv_now
uv_once
uv_open_osfhandle
uv_os_environ
uv_os_free_environ
uv_os_free_group
uv_os_free_passwd
uv_os_get_group
uv_os_get_passwd
uv_os_get_passwd2
uv_os_getenv
uv_os_gethostname
uv_os_getpid
uv_os_getppid
uv_os_getpriority
uv_os_homedir
uv_os_setenv
uv_os_setpriority
uv_os_tmpdir
uv_os_uname
uv_os_unsetenv
uv_pipe
uv_pipe_bind
uv_pipe_bind2
uv_pipe_chmod
uv_pipe_connect
uv_pipe_connect2
uv_pipe_getpeername
uv_pipe_getsockname
uv_pipe_init
uv_pipe_open
uv_pipe_pending_count
uv_pipe_pending_instances
uv_pipe_pending_type
uv_poll_init
uv_poll_init_socket
uv_poll_start
uv_poll_stop
uv_prepare_init
uv_prepare_start
uv_prepare_stop
uv_print_active_handles
uv_print_all_handles
uv_process_get_pid
uv_process_kill
uv_process_tty_read_line_req
uv_process_tty_read_raw_req
uv_queue_work
uv_random
uv_read_start
uv_read_stop
uv_recv_buffer_size
uv_ref
uv_replace_allocator
uv_req_get_data
uv_req_get_type
uv_req_set_data
uv_req_size
uv_req_type_name
uv_resident_set_memory
uv_run
uv_rwlock_destroy
uv_rwlock_init
uv_rwlock_rdlock
uv_rwlock_rdunlock
uv_rwlock_tryrdlock
uv_rwlock_trywrlock
uv_rwlock_wrlock
uv_rwlock_wrunlock
uv_sem_destroy
uv_sem_init
uv_sem_post
uv_sem_trywait
uv_sem_wait
uv_send_buffer_size
uv_set_process_title
uv_setup_args
uv_shutdown
uv_signal_init
uv_signal_start
uv_signal_start_oneshot
uv_signal_stop
uv_simultaneous_server_accepts
uv_sleep
uv_socketpair
uv_spawn
uv_stop
uv_stream_get_write_queue_size
uv_stream_set_blocking
uv_strerror
uv_strerror_r
uv_tcp_bind
uv_tcp_close_reset
uv_tcp_connect
uv_tcp_getpeername
uv_tcp_getsockname
uv_tcp_init
uv_tcp_init_ex
uv_tcp_keepalive
uv_tcp_nodelay
uv_tcp_non_ifs_lsp_ipv4
uv_tcp_non_ifs_lsp_ipv6
uv_tcp_open
uv_tcp_simultaneous_accepts
uv_thread_create
uv_thread_create_ex
uv_thread_equal
uv_thread_getaffinity
uv_thread_getcpu
uv_thread_join
uv_thread_self
uv_thread_setaffinity
uv_timer_again
uv_timer_get_due_in
uv_timer_get_repeat
uv_timer_init
uv_timer_set_repeat
uv_timer_start
uv_timer_stop
uv_translate_sys_error
uv_try_write
uv_try_write2
uv_tty_get_vterm_state
uv_tty_get_winsize
uv_tty_init
uv_tty_reset_mode
uv_tty_set_mode
uv_tty_set_vterm_state
uv_udp_bind
uv_udp_connect
uv_udp_get_send_queue_count
uv_udp_get_send_queue_size
uv_udp_getpeername
uv_udp_getsockname
uv_udp_init
uv_udp_init_ex
uv_udp_open
uv_udp_recv_start
uv_udp_recv_stop
uv_udp_send
uv_udp_set_broadcast
uv_udp_set_membership
uv_udp_set_multicast_interface
uv_udp_set_multicast_loop
uv_udp_set_multicast_ttl
uv_udp_set_source_membership
uv_udp_set_ttl
uv_udp_try_send
uv_udp_using_recvmmsg
uv_unref
uv_update_time
uv_uptime
uv_version
uv_version_string
uv_walk
uv_write
uv_write2
Name
.text
Size
56.3MB
Virtual Size
56.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
35.3MB
Virtual Size
35.3MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
179KB
Virtual Size
2.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
912KB
Virtual Size
911KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
72KB
Virtual Size
71KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
_RDATA
Size
512B
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
__DATA,_
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
__DATA,_
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
266KB
Virtual Size
265KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
183KB
Virtual Size
183KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.bun
Size
103KB
Virtual Size
103KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ