Eden-Windows-v0.2.1-amd64-clang-pgo.zip
- SHA256 6c1b53ce325170a026cc0f87098380027dc6170d94ba95f913aab7596fd097cb
Overview
overview
3Static
static
3Eden-Windo...go.zip
windows10-2004-x64
1Eden-Windo...go.zip
windows10-ltsc_2021-x64
1Eden-Windo...go.zip
windows11-ltsc_2024-x64
1eden-cli.exe
windows10-2004-x64
1eden-cli.exe
windows10-ltsc_2021-x64
1eden-cli.exe
windows11-ltsc_2024-x64
1eden.exe
windows10-2004-x64
1eden.exe
windows10-ltsc_2021-x64
1eden.exe
windows11-ltsc_2024-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Eden-Windows-v0.2.1-amd64-clang-pgo.zip
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Eden-Windows-v0.2.1-amd64-clang-pgo.zip
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Eden-Windows-v0.2.1-amd64-clang-pgo.zip
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
eden-cli.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
eden-cli.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
eden-cli.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
eden.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral8
Sample
eden.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
2 signatures
150 seconds
Behavioral task
behavioral9
Sample
eden.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
11 signatures
150 seconds
General
- Target Eden-Windows-v0.2.1-amd64-clang-pgo.zip
- Size 35.2MB
- Sample261014-jdjska1vdx
- SHA256 6c1b53ce325170a026cc0f87098380027dc6170d94ba95f913aab7596fd097cb
- MD5 3eb0871ed8aebb60af9ec4e21dada7c7
- SHA1 475d1176f4ab346c66bcf1c03b96d6fd85828a4e
- SHA512 e06d3b19050bf66dc2fde5ee73d4255cbed787d89804abc6785a7bd0ffa96fb72b3ada743c3fa74234426e1630be40ae3a9a32bb7f6bf303d1f1ba67e799eb9b
- SSDEEP 786432:IgYbkPQDHzNtSFHr8v32seeJK1rpCafWBB3NLlu1iac0QJsqQyFJ6W3A9:IwAZtyL22sCrp6eQhJsqVJ6Ww9
- TLSH T1778733AACAD0D2FD9421DE7FB32EC58F59F298031905D21F48B692827D8F34E635215B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/eden-cli.exe unpack001/eden.exe
File Explorer
-
Eden-Windows-v0.2.1-amd64-clang-pgo.zip.zip 35.2MB
-
LICENSE.txt34KB
-
LICENSES/Apache-2.0.txt10KB
-
LICENSES/BSD-2-Clause.txt1KB
-
LICENSES/BSD-3-Clause.txt1KB
-
LICENSES/BSL-1.0.txt1KB
-
LICENSES/CC-BY-4.0.txt16KB
-
LICENSES/CC-BY-SA-3.0.txt21KB
-
LICENSES/CC0-1.0.txt6KB
-
LICENSES/GPL-2.0-or-later.txt16KB
-
LICENSES/GPL-3.0-or-later.txt33KB
-
LICENSES/LGPL-3.0-or-later.txt41KB
-
LICENSES/LLVM-exception.txt919B
-
LICENSES/MIT.txt1KB
-
LICENSES/MPL-2.0.txt16KB
-
LICENSES/Unlicense.txt1KB
-
LICENSES/WTFPL.txt432B
-
LICENSES/Zlib.txt838B
-
README.md4KB
-
eden-cli.exe.exe 32.8MB
-
eden.exe.exe 59.1MB
LICENSE.txt
- SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
- MD5 1ebbd3e34237af26da5dc08a4e440464
- SHA1 31a3d460bb3c7d98845187c716a30db81c44b615
- SHA512 d361e5e8201481c6346ee6a886592c51265112be550d5224f1a7a6e116255c2f1ab8788df579d9b8372ed7bfd19bac4b6e70e00b472642966ab5b319b99a2686
- SSDEEP 768:Fo1acy3LTB2VsrHG/OfvMmnBCtLmJ9A7J:Fhcycsrfrnoum
- TLSH T15FF2835FB74413B2018206A26A9F68DEE319D03A73664095785DC15C27B3E3483BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/Apache-2.0.txt
- SHA256 074e6e32c86a4c0ef8b3ed25b721ca23aca83df277cd88106ef7177c354615ff
- MD5 c846ebb396f8b174b10ded4771514fcc
- SHA1 be561fe6eb626c2566b9a6c0885554b4ee4e6b74
- SHA512 e70171654dbac4a36035a16857ff476fef9b7b54496c0125913484423ae0128879ce4236869ebd94bbfb9a5fa91220d81e5781fd152a21c4cdf8976da72b77e7
- SSDEEP 192:iaW/NVo4UTo1YEHFNnFE6GheQGC2B1CVnhOCoHqxLJbzjwokTGKH3Hv:iJhUk1Hfl9/GHbLNdkTGKH/
- TLSH T18422647F774803770AC20162BB8BA4DBF32E903D379A56645059C068236BD7583FB6DA
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/BSD-2-Clause.txt
- SHA256 017b5ee48f680e82cba79141c7895a1f02b856df2512225f5c427fe36765ef0b
- MD5 9e16594a228301089d759b4f178db91f
- SHA1 48425c0d29eec28e01be25cae932f6dce8e4e278
- SHA512 64477fff2e5e8cdae45e39692ea46a7cce7b42bd3178b00e332fcdf3c93b82480191bb49bacdaab380dfe1b4b57e77960fa5511203192bb5a3b433075456b6e7
- TLSH T1E121409B12400FE65AE21B9136A5AEC4A0CDD03D3B236D04187EF385673B12EE8BB441
- MD5 SHA1 SHA512 TLSH
LICENSES/BSD-3-Clause.txt
- SHA256 3cf06aba3588c41c514f6946bb2d757b413ff6491647d474800f55edca75dcb4
- MD5 407426fcc1a243b7b2eff6e35c56aca9
- SHA1 7d742d725c74463f26afc2c6b7433dff4296a315
- SHA512 278e6df8f500543abbe8a30e20cf02d7dc90cea07d87e99d0c015410c1b399317b5dc8cef0c1a0a68e9c43170df2a96ba9cd0287f21a9b744d4755ba286f7992
- TLSH T14E31605722840BB749E21791766ABEC4B08CD03D3B236E051C6EF388977B42ED8BB491
- MD5 SHA1 SHA512 TLSH
LICENSES/BSL-1.0.txt
- SHA256 84c6ef3ea9e3254a54d0acf5d3e0c61ae011b8fef7dd6940591cf060e6380a8f
- MD5 4c66a2bad475d1a8f152667a4d0ada34
- SHA1 efdd1be8105f16a599ab99437c3054b76f5e6d0b
- SHA512 be57aca0c9e10d4b70aca43fd2b2b6af9f3668b9b31a4fa2df2c3ad9d0b1ddec3e2a28e5e7df9e07f3a83bff519824ba6d81246726365ab86c630e61bb4a6293
- TLSH T13121532D73A0073109E1171099596DD6F56F627BE3A66B88AC3CE2191332458D3FE890
- MD5 SHA1 SHA512 TLSH
LICENSES/CC-BY-4.0.txt
- SHA256 d557539df68e771cc1eedcc91d13f70fca930e508d11eedcafa4b15db49e3744
- MD5 9b33bbd06fb58995fb0e299cd38d1838
- SHA1 42d6494d51317826789dc2064c6440f0d4448376
- SHA512 4da5c72c8f14c8951e48804031b0443430393c6456806ad5de4b98674cd7076da5dbbc481db747eacda2d05aa66a49583ac36f8e28f8b2becf1f8d9ddd4da189
- SSDEEP 192:uumZNKL1wbfSskk+Msxc6g08fviCBbYD/72CjWHB+Uy6F:UkRwbaskdBe3YDzKx
- TLSH T10872006EB755137317C300A2AB5F90CBE626D12A366E4295385DC05C2FA287843BF69F
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/CC-BY-SA-3.0.txt
- SHA256 3f941b3b89cf7b8370ceb83cc76d2120d471b58735d8ca60238a751a48d7f72f
- MD5 13a870bd7f606a919042749a5f098ac2
- SHA1 fb41626a3005c2b6e14b8b3f5d9d0b19b5faaa51
- SHA512 2635a3dd63d647420f31346be165fe0481f9606b1676653b1201f7725e61c25c2daead810e12c3358724e24dd6b09327cd33a0ec93b3c0d47a629138e12c45e6
- SSDEEP 384:dF7O9MwSC58dJIokxhVdKDLvp75UM7qoFudXZF22L3Drv4k41WE:/O9JzrdQh6MI/FLzrh5E
- TLSH T1A5A2816EB70913731BC30166AA4B24DBE32ED03E366A55643458C0581FA7E7443FE6EE
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/CC0-1.0.txt
- SHA256 a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499
- MD5 65d3616852dbf7b1a6d4b53b00626032
- SHA1 82da472f6d00dc5f0a651f33ebb320aa9c7b08d0
- SHA512 1eb4436f8d58766cbe99db97e5e8c0db8a706376afd291c337de1ba7a6b066d3791dc85ad034bdd54ea336bed6e6e8e7a037d8b04b2773c9c7517b9d9921d1fa
- SSDEEP 192:uk5MToKgfbxcjtv2sFtYH1Y1mzLKRL0WWJ:DAvg1cjT4ImKJ0t
- TLSH T163E1B7ABA308133616C60267511755C1F77B60783B1608A034BD81AC2B4FEB6527F7BF
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/GPL-2.0-or-later.txt
- SHA256 aaf135472f81c5b4a0dca9367e5bb5e9750032b5bebe5442b36e4c0a47430df3
- MD5 3d26203303a722dedc6bf909d95ba815
- SHA1 3cb34cfc72e87654683f2894299adf912d14b284
- SHA512 fb956f64a9d0647514d7bd868747c46842e9e3b10ad1b3ff8f18908b9986fded8928e55d3d23b43676c918e971f0d9b7f60f2fef8941fb867a43422c31bc4655
- SSDEEP 384:WFQcf4zRFSG6CQcSbVuT17BedAuMiaFPR:WGpmNAxqHUFPR
- TLSH T10972831E774543F205C302A16A4F68DBE32AD478B23E11616859C0AD236BE35C3BFAD9
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/GPL-3.0-or-later.txt
- SHA256 b6a8bf63ae2c95b0aa256ee774680d7bd18f21f457da75466f7610b3b16acc4e
- MD5 8da5784ab1c72e63ac74971f88658166
- SHA1 e3bdbf20d43fc066a1b40a64d57d4ae5a31f177f
- SHA512 9ed9df87d5d34883dc313f51753cffa5bc45b708591e688dd0dc1d9f39377addc137f770f3c37805aeb2963385f063f3346456c8bcc61017065a3d443b756847
- SSDEEP 384:5EvHfz6yoO5Dbk/k6s1ClWlOk4IxiVtm7cRG+Xi5b5KTeOvw5mVRmVW113+mhT:5YLUO5uNWlOk4Ci27y1i5bWe9IRBzVhT
- TLSH T1FAF2755FB74413B2068202616B4FA8DEE31ED079737644A56869C15D23F2E3483BFAED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/LGPL-3.0-or-later.txt
- SHA256 996af0513df21f7496288951c41428a03c174e9e4a9d63665c57d670f845ccb1
- MD5 852ecadc0ac7e6f4d7144d5544a3815b
- SHA1 0b71159e19bef95069e18d17296291916e89b5cd
- SHA512 d1f337db40af74bffd48acb020f1ec0b6d4519f87dd5743a890d48b93fd3928b8e751cd8153fbf38f93c361aa2be3af3f15e5d372f8aec929377890d0ab6f75e
- SSDEEP 768:HdXyciC6YLUO5uNWlOk4Ci27y1i5bWe9IRBzVhT:H9ynC6fO5UkSM5b39y
- TLSH T1B913635FB74413B302C202616A4FA4CEE32EA079737645A56869C15D23B2D3493BFBED
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/LLVM-exception.txt
- SHA256 e34c58338bd89d43e709e226610d8f32b3e3c47f4ad9a99a8dc1d4ac7842488e
- MD5 f9e77a5df10adb29d0c627ae21d880fc
- SHA1 af7f77c39392e383bdf1a9f7ec70935a884bacee
- SHA512 4b658c758a70dc6b40a79a3d565317075d6e96cd3174b5edbfb5f9aef1c28343a9f5eb6e30d62b9da6bf30ddc125f2185b7a310073fabbaf9ed73ca7bc3acb50
- TLSH T11D11B12E750C637301D341816E9638C7D36EC868255470E49582C1740B37E35C1FBA9E
- MD5 SHA1 SHA512 TLSH
LICENSES/MIT.txt
- SHA256 b85dcd3e453d05982552c52b5fc9e0bdd6d23c6f8e844b984a88af32570b0cc0
- MD5 7dda4e90ded66ab88b86f76169f28663
- SHA1 adadb67a9875aeeac285309f1eab6e47d9ee08a7
- SHA512 381d3dee3d9c88a5bcc3bd6a0dd6b3086ccdd542b166e66b99b0dbdbfb10ccfd72f9ef5d66b91f6c16a9c8093278eefe1425748d967b5b7074ab6630ef95b297
- TLSH T1E411861DB260077318A6136055796CC5B26BB15F796F2784146DF344233A46CD5FBC40
- MD5 SHA1 SHA512 TLSH
LICENSES/MPL-2.0.txt
- SHA256 1f256ecad192880510e84ad60474eab7589218784b9a50bc7ceee34c2b91f1d5
- MD5 9741c346eef56131163e13b9db1241b3
- SHA1 d22157abc0fc0b4ae96380c09528e23cf77290a9
- SHA512 c1e3a0c8f5267fb5c0b65733bda037c62d914ed989bee0f510d8196b1029eec00d40f415ce1514a4996d420ba02d856d04db0915b64573ef4a36033cc5efb94e
- SSDEEP 384:na28R/9woeF6cXpMPWeXlUl5omyzQdBGYVSlVCqx2:nNw/6oj25kzQdBGXCqY
- TLSH T1B172537E3F492F330AC3C1626B4764DBE31AA03965691074705CB128279FE7447BF6A9
- MD5 SHA1 SHA512 SSDEEP TLSH
LICENSES/Unlicense.txt
- SHA256 0bdebfeda07d45dada625ae1317c6f833186e798b171d0db640bcf32e92a8240
- MD5 e8e91b27aa96b3fd1efdf8af3b146284
- SHA1 433e20e05f040c80947c8bd2c2352cff051f7e37
- SHA512 ff3e13d40f70a7d1e8ad23643bc670b1c9c545d402688c5207395c8d2196776cf1e07742474751f4a6f92379dbf6ebc79e84d836854e93e0b95694512af39541
- TLSH T14021514A738017306A9517723990B5CDF34BA59E7C2B26842456E358032F8BCE1BFA29
- MD5 SHA1 SHA512 TLSH
LICENSES/WTFPL.txt
- SHA256 13d8825a59e5e546d41e8711405d0f335a9934362a47c04a3b4280fa7932dc4a
- MD5 7993e3336259bdb618ad5a1afc872165
- SHA1 aafa8341a781a7bfd3b390c03680d4cf2e474488
- SHA512 524151dc93bd8fb2c2f930bb86fd0a29bbc36d688ec2c28a6dfd73ac365fdd31442ffa83580133f73daa51ec9489600123c34cdb489e6b1ce11544952385cbe6
- TLSH T1FAE05CA1365143F432C5068AA89BF497230484D333EEBE56241E22CD0175A0DA2EB7AE
- MD5 SHA1 SHA512 TLSH
LICENSES/Zlib.txt
- SHA256 bfb1112d49db5b1daecdfef24bd7e2f3ea0bafb33aa67aa0ab51e2bf8407c03d
- MD5 f280d30a16e2d9de7ef0e99da64c78fd
- SHA1 714675b91f8ceca1fae6cc0af95caca8fe11886d
- SHA512 6896063c741dfb164f2fb09721518fc84fab5a4d64f2e7bb5644a4194e1ae60ffedcd2af11add6d0339aea34564d0f5610d0b9a831003a7485626e30f9e1e9e9
- TLSH T17801AF1B7BD9C37214E303FD3A89CD81B7176F55F34E57D9B06D80993BAA12502314A8
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 c535c26da4ce0659e99ed1c7fa892b1a0cd9cd5f3386f1671a8ed3f6121d8d4c
- MD5 2dd51bca67cd9734a38da06c70b663df
- SHA1 8833a849f2570969397282e7aa4366caa80d2c23
- SHA512 ef04dbaa59be71f5c8fe5756d87f2c2e15cea23d639a7582b7121f855b63f588751f56b525dca9617f869dbe5feaf074bf03eed9bca025a80e391253aff47746
- SSDEEP 96:JBIIMOBjCNTRdQGhILjy1A+aWJpjLpgJb:zI/YEddQGhMj+A+aWHjLm
- TLSH T14D81A5B7A0281A1797C31182E58B39EDE72FC1AE62AD5494F08C024F7315E59C73F19B
- MD5 SHA1 SHA512 SSDEEP TLSH
eden-cli.exe
- IMPHASH 8e27c2ac08adc145a979fab73b486bf1
- SHA256 82a5b8cf2e9bec4a17b6ac505ab847a98e0c97f27f374b7a3c8d5a63cea29160
- MD5 ce46a1c308efd6d27fe9bf83011959ec
- SHA1 5c16e4bc919f63d6d74fac7ae46019b30eb0febc
- SHA512 232477d2720504c8c721892cc8dc2f61bcd10274b7e2bcfad7299dc5542378971f36104c76daedadd34f670ea3ca8cd7ef57480acce58e497d5b3a21ad5a1ee2
- SSDEEP 393216:AfCdIYFQPa5TO+TNoVgKz5Mg54NIwJUHXsYq1q:NB5O+JlKt1M0Lq1q
- TLSH T187776B47F29220EDC56FC170875BA732F931BC5943307EAB15649B322E75AE05B3EA24
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1106016
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegisterEventSourceW
ReportEventW
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsA
bcrypt
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
crypt32
CertCloseStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertOpenSystemStoreW
CertVerifyCertificateChainPolicy
gdi32
BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
ExtTextOutW
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetICMProfileW
GetPixelFormat
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextMetricsW
Rectangle
SelectObject
SetBkMode
SetDeviceGammaRamp
SetPixelFormat
SetTextColor
SwapBuffers
imm32
ImmAssociateContext
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetIMEFileNameA
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow
iphlpapi
ConvertLengthToIpv4Mask
GetAdaptersAddresses
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AreFileApisANSI
AttachConsole
CancelIo
CancelIoEx
CancelWaitableTimer
CloseHandle
CompareStringA
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFileExW
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFileA
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateMutexA
CreateNamedPipeA
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateWaitableTimerA
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceNamesW
ExitProcess
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDiskFreeSpaceExW
GetDynamicTimeZoneInformation
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeThread
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocaleInfoA
GetLogicalProcessorInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessTimes
GetQueuedCompletionStatus
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeZoneInformation
GetUserGeoID
GetVersion
GetVersionExA
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalUnlock
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalFree
MoveFileExW
MulDiv
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
SetConsoleMode
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadExecutionState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToFiber
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualFreeEx
VirtualLock
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
msvcrt
___lc_codepage_func
___mb_cur_max_func
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthreadex
_cexit
_chsize
_close
_commit
_commode
_endthreadex
_errno
_exit
_fdopen
_filelengthi64
_fileno
_fileno
_findclose
_fmode
_fstat64
_get_osfhandle
_gmtime64
_hypot
_i64toa
_initterm
_isatty
_isatty
_isctype
_itoa
_localtime64
_lock
_lseek
_lseeki64
_lseeki64
_ltoa
_memccpy
_mkgmtime64
_mktime64
_msize
_read
_setjmp
_setmode
_snprintf_s
_sopen
_stat
_strdup
_strdup
_stricmp
_stricmp
_strlwr
_strnicmp
_strrev
_strtoi64
_strtoui64
_strupr
_telli64
_time32
_time64
_ui64toa
_ultoa
_unlock
_vscprintf
_vsnprintf
_vsnprintf_s
_vsnwprintf
_wchdir
_wchmod
_wcsdup
_wcsicmp
_wcsnicmp
_wfindfirst
_wfindnext
_wfopen
_wfopen_s
_wfsopen
_wfullpath
_wgetcwd
_wmkdir
_wopen
_write
_write
_wsopen
_wstat64
_wutime64
abort
acos
asin
atan
atexit
atof
atoi
bsearch
calloc
clock
cosh
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
freopen
fseek
fsetpos
ftell
fwrite
getc
getenv
getwc
isalnum
isalpha
iscntrl
isdigit
isgraph
islower
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
log10
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
putc
puts
putwc
qsort
raise
rand
realloc
setlocale
setvbuf
signal
sinh
sprintf
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtok
strtoul
strxfrm
system
tan
tanh
tolower
toupper
towupper
ungetwc
towlower
ungetc
vfprintf
wcscat
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcsncpy_s
wcsrchr
wcsstr
wcstombs
wcsxfrm
mswsock
AcceptEx
GetAcceptExSockaddrs
ntdll
NtDelayExecution
NtQueryTimerResolution
NtSetTimerResolution
RtlAddFunctionTable
RtlCaptureContext
RtlDeleteFunctionTable
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
VerSetConditionMask
ole32
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
PropVariantClear
oleaut32
SysFreeString
setupapi
CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceRegistryPropertyA
shell32
CommandLineToArgvW
DragAcceptFiles
DragFinish
DragQueryFileW
SHGetFolderPathW
SHGetKnownFolderPath
ShellExecuteW
user32
AdjustWindowRectEx
AttachThreadInput
CallNextHookEx
CallWindowProcW
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CopyImage
CreateIconFromResource
CreateIconIndirect
CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageW
DrawTextW
EmptyClipboard
EndDialog
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
FillRect
FlashWindowEx
GetAsyncKeyState
GetClassInfoExW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardSequenceNumber
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageExtraInfo
GetMessageTime
GetMessageW
GetMonitorInfoW
GetParent
GetProcessWindowStation
GetPropW
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSystemMetrics
GetUpdateRect
GetUserObjectInformationW
GetWindowLongPtrW
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
IntersectRect
InvalidateRect
IsClipboardFormatAvailable
IsIconic
KillTimer
LoadCursorW
LoadIconW
MapVirtualKeyW
MessageBoxA
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterDeviceNotificationW
RegisterRawInputDevices
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetPropW
SetTimer
SetWindowLongPtrW
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicode
TrackMouseEvent
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
ValidateRect
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
winmm
timeBeginPeriod
timeEndPeriod
timeGetTime
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetNumDevs
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutGetPosition
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
ws2_32
GetAddrInfoExW
WSACleanup
WSAGetLastError
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressA
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
jump_fcontext
make_fcontext
ontop_fcontext
opus_custom_decode
opus_custom_decode24
opus_custom_decode_float
opus_custom_decoder_create
opus_custom_decoder_ctl
opus_custom_decoder_destroy
opus_custom_decoder_get_size
opus_custom_decoder_init
opus_custom_mode_create
opus_custom_mode_destroy
opus_decode
opus_decode24
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_dred_decode
opus_decoder_dred_decode24
opus_decoder_dred_decode_float
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_dred_alloc
opus_dred_decoder_create
opus_dred_decoder_ctl
opus_dred_decoder_destroy
opus_dred_decoder_get_size
opus_dred_decoder_init
opus_dred_free
opus_dred_get_size
opus_dred_parse
opus_dred_process
opus_get_version_string
opus_multistream_decode
opus_multistream_decode24
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_has_lbrr
opus_packet_parse
opus_pcm_soft_clip
opus_strerror
Name
.text
Size
22.7MB
Virtual Size
22.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8.9MB
Virtual Size
8.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
136KB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
678KB
Virtual Size
677KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
337KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
128KB
Virtual Size
128KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
eden.exe
- IMPHASH 0e27cb9bfc7ed2d26b14d69c03ac9c89
- SHA256 df08b0fe90ec07988e9bfbe598b32a6dbda3e4e81e35ed2120793e42dd67f565
- MD5 471561349d19a0da9413f84694ca4991
- SHA1 cf6960d642bceff568fb156397b97f807d632bbf
- SHA512 0c7e8397fcd836a6f509ee6eef5077626b74c2a6e38d1300cfe86ce155e55d1d874e7d75add1811fb7bf2e4ab8d11a8d146f18d41cf03890578c957c5a8e6660
- SSDEEP 393216:yXg9+MdDGPifJor5BMAIXEOYuOoq1qGCLNIwsP6BkKFdu9CwJsv6tOZx9WufCq1q:ysdq6G5Bjp7uNq1qZG6BHZxbfCq1q
- TLSH T121D77C03E29250E9D4BFD231875BE732FA31B8895734AB9F1554D7212E31EA06B3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
1668368
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
advapi32
AddAccessAllowedAceEx
AddAccessDeniedAceEx
AllocateAndInitializeSid
CopySid
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
DuplicateToken
FreeSid
GetLengthSid
GetNamedSecurityInfoW
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
LookupAccountSidW
OpenProcessToken
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegFlushKey
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterEventSourceW
ReportEventW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SystemFunction036
authz
AuthzAccessCheck
AuthzFreeContext
AuthzFreeResourceManager
AuthzInitializeContextFromSid
AuthzInitializeContextFromToken
AuthzInitializeResourceManager
avrt
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsA
bcrypt
BCryptCloseAlgorithmProvider
BCryptGenRandom
BCryptOpenAlgorithmProvider
comdlg32
GetOpenFileNameW
GetSaveFileNameW
crypt32
CertCloseStore
CertCreateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateChain
CertFreeCertificateContext
CertGetCertificateChain
CertOpenSystemStoreW
CertVerifyCertificateChainPolicy
d3d11
D3D11CreateDevice
d3d12
D3D12CreateDevice
D3D12GetDebugInterface
D3D12SerializeVersionedRootSignature
d3d9
Direct3DCreate9
dwmapi
DwmDefWindowProc
DwmEnableBlurBehindWindow
DwmExtendFrameIntoClientArea
DwmSetWindowAttribute
dwrite
DWriteCreateFactory
dxgi
CreateDXGIFactory2
gdi32
AddFontMemResourceEx
AddFontResourceExW
BitBlt
ChoosePixelFormat
CombineRgn
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateFontW
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
DescribePixelFormat
EnumFontFamiliesExW
ExtTextOutW
GdiFlush
GetBitmapBits
GetCharABCWidthsFloatW
GetCharABCWidthsW
GetCharWidthI
GetDIBits
GetDeviceCaps
GetDeviceGammaRamp
GetFontData
GetGlyphOutlineW
GetICMProfileW
GetObjectW
GetOutlineTextMetricsW
GetPixelFormat
GetRegionData
GetStockObject
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextFaceW
GetTextMetricsW
OffsetRgn
Rectangle
RemoveFontMemResourceEx
RemoveFontResourceExW
SelectClipRgn
SelectObject
SetBkMode
SetDeviceGammaRamp
SetGraphicsMode
SetLayout
SetPixelFormat
SetTextAlign
SetTextColor
SetWorldTransform
SwapBuffers
imm32
ImmAssociateContext
ImmAssociateContextEx
ImmGetCandidateListW
ImmGetCompositionStringW
ImmGetContext
ImmGetDefaultIMEWnd
ImmGetIMEFileNameA
ImmGetOpenStatus
ImmGetVirtualKey
ImmNotifyIME
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionStringW
ImmSetCompositionWindow
iphlpapi
ConvertLengthToIpv4Mask
GetAdaptersAddresses
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
AllocConsole
AreFileApisANSI
AttachConsole
CancelIo
CancelIoEx
CancelWaitableTimer
CheckRemoteDebuggerPresent
CloseHandle
CloseThreadpoolWait
CompareStringA
CompareStringEx
CompareStringW
ConnectNamedPipe
ConvertFiberToThread
ConvertThreadToFiberEx
CopyFileExW
CopyFileW
CreateDirectoryExW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFiberEx
CreateFileA
CreateFileMappingW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateMutexA
CreateMutexW
CreateNamedPipeA
CreateNamedPipeW
CreateProcessA
CreateProcessW
CreateSemaphoreA
CreateSemaphoreW
CreateThread
CreateThreadpoolWait
CreateWaitableTimerA
DeleteCriticalSection
DeleteFiber
DeleteFileW
DeviceIoControl
DuplicateHandle
EnterCriticalSection
EnumResourceNamesW
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileExW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleWindow
GetCurrencyFormatW
GetCurrentDirectoryW
GetCurrentPackageFullName
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDiskFreeSpaceExW
GetDriveTypeW
GetDynamicTimeZoneInformation
GetEnvironmentStringsW
GetEnvironmentVariableA
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetGeoInfoW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLogicalDrives
GetLogicalProcessorInformation
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
GetModuleHandleW
GetNativeSystemInfo
GetOverlappedResult
GetProcAddress
GetProcessAffinityMask
GetProcessId
GetProcessTimes
GetQueuedCompletionStatus
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAdjustment
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultLocaleName
GetUserGeoID
GetUserPreferredUILanguages
GetVersion
GetVersionExA
GetVolumeInformationW
GetVolumePathNamesForVolumeNameW
GetWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalMemoryStatusEx
GlobalSize
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InitializeSListHead
InitializeSRWLock
InterlockedFlushSList
InterlockedPopEntrySList
InterlockedPushEntrySList
IsDBCSLeadByte
IsDebuggerPresent
IsProcessorFeaturePresent
K32GetModuleFileNameExW
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
LocaleNameToLCID
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
OpenProcess
OutputDebugStringA
OutputDebugStringW
PeekNamedPipe
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
RaiseFailFastException
ReadConsoleA
ReadConsoleW
ReadFile
ReleaseMutex
ReleaseSRWLockExclusive
ReleaseSRWLockShared
ReleaseSemaphore
RemoveDirectoryW
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlDeleteFunctionTable
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleMode
SetConsoleOutputCP
SetConsoleTextAttribute
SetCurrentDirectoryW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFileAttributesW
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetLastError
SetProcessAffinityMask
SetSystemTime
SetThreadAffinityMask
SetThreadContext
SetThreadDescription
SetThreadExecutionState
SetThreadInformation
SetThreadPriority
SetThreadpoolWait
SetUnhandledExceptionFilter
SetWaitableTimer
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
TzSpecificLocalTimeToSystemTime
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualFreeEx
VirtualLock
VirtualProtect
VirtualQuery
WTSGetActiveConsoleSessionId
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitForSingleObjectEx
WaitForThreadpoolWaitCallbacks
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleW
WriteFile
__C_specific_handler
lstrcmpW
lstrlenW
msvcrt
___lc_codepage_func
___mb_cur_max_func
__argc
__argv
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_acmdln
_aligned_free
_aligned_malloc
_aligned_realloc
_amsg_exit
_assert
_beginthreadex
_cexit
_chsize
_close
_commit
_commode
_close
_endthreadex
_errno
_exit
_fdopen
_filelengthi64
_fileno
_fileno
_findclose
_fmode
_fstat64
_get_osfhandle
_getdrive
_gmtime64
_hypot
_i64toa
_initterm
_isatty
_isatty
_isctype
_itoa
_localtime64
_lock
_lseek
_lseeki64
_lseeki64
_ltoa
_memccpy
_mkgmtime64
_mktime64
_msize
_open
_open_osfhandle
_putenv
_read
_setjmp
_setmaxstdio
_setmode
_setmode
_snprintf_s
_snwprintf
_sopen
_stat
_strdup
_strdup
_stricmp
_stricmp
_strlwr
_strnicmp
_strrev
_strtoi64
_strtoui64
_strupr
_telli64
_time32
_time64
_tzname
_tzset
_ui64toa
_ultoa
_unlock
_vscprintf
_vsnprintf
_vsnprintf_s
_vsnwprintf
_waccess
_wchdir
_wchmod
_wcsdup
_wcsicmp
_wcsnicmp
_wfindfirst
_wfindnext
_wfopen
_wfopen_s
_wfsopen
_wfullpath
_wgetcwd
_wgetdcwd
_wgetenv_s
_wmkdir
_wopen
_write
_write
_wsopen
_wstat64
_wutime64
abort
acos
asin
atan
atexit
atof
atoi
bsearch
calloc
clock
cosh
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fputwc
fread
free
freopen_s
fseek
fsetpos
fwprintf
ftell
fwrite
getc
getenv
getwc
isalnum
isalpha
iscntrl
isdigit
isgraph
islower
ispunct
isspace
isupper
iswctype
isxdigit
localeconv
log10
longjmp
malloc
mbstowcs
memchr
memcmp
memcpy
memmove
memset
putc
puts
putwc
qsort
raise
rand
realloc
remove
setlocale
setvbuf
signal
sinh
sprintf
srand
strcat
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncat
strncmp
strncpy
strpbrk
strrchr
strspn
strstr
strtol
strtok
strtoul
strxfrm
swprintf_s
system
tan
tanh
tolower
toupper
towupper
ungetwc
towlower
ungetc
vfprintf
wcscat
wcschr
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcsncpy_s
wcsrchr
wcsstr
wcstombs
wcsxfrm
mswsock
AcceptEx
GetAcceptExSockaddrs
netapi32
NetApiBufferFree
NetShareEnum
ntdll
NtDelayExecution
NtQueryTimerResolution
NtSetTimerResolution
ole32
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoGetMalloc
CoInitialize
CoInitializeEx
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
DoDragDrop
OleFlushClipboard
OleGetClipboard
OleInitialize
OleIsCurrentClipboard
OleSetClipboard
OleUninitialize
PropVariantClear
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
StringFromGUID2
oleaut32
SafeArrayCreateVector
SafeArrayPutElement
SysAllocString
SysFreeString
VariantClear
VariantInit
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
api-ms-win-core-winrt-string-l1-1-0
WindowsCreateStringReference
setupapi
CM_Get_Device_IDA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiOpenDeviceInterfaceW
shcore
CommandLineToArgvW
GetDpiForMonitor
shell32
DragAcceptFiles
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHCreateItemFromIDList
SHCreateItemFromParsingName
SHDefExtractIconW
SHGetFileInfoW
SHGetFolderPathW
SHGetImageList
SHGetKnownFolderIDList
SHGetKnownFolderPath
SHGetMalloc
SHGetPathFromIDListW
SHGetStockIconInfo
ShellExecuteExW
ShellExecuteW
Shell_NotifyIconGetRect
Shell_NotifyIconW
shlwapi
AssocQueryStringW
api-ms-win-core-synch-l1-2-0
InitOnceBeginInitialize
InitOnceComplete
InitializeConditionVariable
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
WaitOnAddress
WakeAllConditionVariable
WakeByAddressAll
WakeByAddressSingle
WakeConditionVariable
user32
AddClipboardFormatListener
AdjustWindowRectEx
AdjustWindowRectExForDpi
AppendMenuW
AreDpiAwarenessContextsEqual
AttachThreadInput
BeginPaint
BringWindowToTop
CallNextHookEx
CallWindowProcW
ChangeClipboardChain
ChangeDisplaySettingsExW
ChangeWindowMessageFilter
ChangeWindowMessageFilterEx
CharPrevExA
ChildWindowFromPointEx
ClientToScreen
ClipCursor
CloseClipboard
CopyImage
CreateCaret
CreateCursor
CreateIconFromResource
CreateIconIndirect
CreateMenu
CreatePopupMenu
CreateWindowExA
CreateWindowExW
DefWindowProcW
DestroyCaret
DestroyCursor
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxIndirectParamW
DispatchMessageW
DisplayConfigGetDeviceInfo
DrawIconEx
DrawMenuBar
DrawTextW
EmptyClipboard
EnableMenuItem
EnableNonClientDpiScaling
EndDialog
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsW
EnumWindows
FillRect
FindWindowA
FlashWindowEx
GetAncestor
GetAsyncKeyState
GetCapture
GetCaretBlinkTime
GetClassInfoExW
GetClassInfoW
GetClientRect
GetClipCursor
GetClipboardData
GetClipboardFormatNameW
GetClipboardSequenceNumber
GetCursor
GetCursorInfo
GetCursorPos
GetDC
GetDesktopWindow
GetDisplayAutoRotationPreferences
GetDisplayConfigBufferSizes
GetDlgItem
GetDoubleClickTime
GetDpiForWindow
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyState
GetKeyboardLayout
GetKeyboardLayoutList
GetKeyboardState
GetMenu
GetMenuItemInfoW
GetMessageExtraInfo
GetMessageTime
GetMessageW
GetMonitorInfoW
GetParent
GetPointerDeviceRects
GetPointerFrameTouchInfo
GetPointerFrameTouchInfoHistory
GetPointerInfo
GetPointerPenInfo
GetPointerPenInfoHistory
GetPointerType
GetProcessWindowStation
GetPropW
GetQueueStatus
GetRawInputData
GetRawInputDeviceInfoA
GetRawInputDeviceList
GetSysColor
GetSystemMenu
GetSystemMetrics
GetSystemMetricsForDpi
GetThreadDpiAwarenessContext
GetUpdateRect
GetUserObjectInformationW
GetWindow
GetWindowDpiAwarenessContext
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
HiliteMenuItem
InsertMenuW
IntersectRect
InvalidateRect
IsChild
IsClipboardFormatAvailable
IsHungAppWindow
IsIconic
IsTouchWindow
IsValidDpiAwarenessContext
IsWindow
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadCursorW
LoadIconW
LoadImageW
MapVirtualKeyW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MoveWindow
MsgWaitForMultipleObjects
MsgWaitForMultipleObjectsEx
OpenClipboard
PeekMessageW
PostMessageW
PostThreadMessageW
PtInRect
QueryDisplayConfig
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatW
RegisterDeviceNotificationW
RegisterPowerSettingNotification
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
RegisterWindowMessageW
ReleaseCapture
ReleaseDC
RemoveClipboardFormatListener
RemoveMenu
RemovePropW
ScreenToClient
SendInput
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetCaretPos
SetClipboardData
SetClipboardViewer
SetCoalescableTimer
SetCursor
SetCursorPos
SetDisplayAutoRotationPreferences
SetFocus
SetForegroundWindow
SetLayeredWindowAttributes
SetMenu
SetMenuDefaultItem
SetMenuItemInfoW
SetParent
SetProcessDpiAwarenessContext
SetPropW
SetTimer
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextW
SetWindowsHookExW
ShowCaret
ShowWindow
SkipPointerFrameMessages
SystemParametersInfoA
SystemParametersInfoForDpi
SystemParametersInfoW
ToAscii
ToUnicode
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UnregisterDeviceNotification
UnregisterPowerSettingNotification
UnregisterTouchWindow
UpdateLayeredWindow
UpdateLayeredWindowIndirect
ValidateRect
WindowFromPoint
userenv
GetUserProfileDirectoryW
uxtheme
CloseThemeData
DrawThemeBackground
DrawThemeBackgroundEx
DrawThemeTextEx
GetCurrentThemeName
GetThemeBackgroundRegion
GetThemeBool
GetThemeColor
GetThemeEnumValue
GetThemeInt
GetThemeMargins
GetThemePartSize
GetThemePropertyOrigin
GetThemeSysFont
GetThemeTransitionDuration
IsAppThemed
IsThemeActive
IsThemeBackgroundPartiallyTransparent
OpenThemeData
SetWindowTheme
SetWindowThemeAttribute
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueA
VerQueryValueW
winmm
PlaySoundW
timeBeginPeriod
timeEndPeriod
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetNumDevs
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextW
waveOutGetNumDevs
waveOutGetPosition
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutUnprepareHeader
waveOutWrite
wlanapi
WlanCloseHandle
WlanEnumInterfaces
WlanFreeMemory
WlanOpenHandle
WlanQueryInterface
ws2_32
GetAddrInfoExW
WSAAsyncSelect
WSACleanup
WSAGetLastError
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendTo
WSASetLastError
WSASocketA
WSASocketW
WSAStartup
WSAStringToAddressA
__WSAFDIsSet
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostbyaddr
gethostbyname
getnameinfo
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
inet_ntop
inet_pton
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
wtsapi32
WTSFreeMemory
WTSQuerySessionInformationW
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
jump_fcontext
make_fcontext
ontop_fcontext
opus_custom_decode
opus_custom_decode24
opus_custom_decode_float
opus_custom_decoder_create
opus_custom_decoder_ctl
opus_custom_decoder_destroy
opus_custom_decoder_get_size
opus_custom_decoder_init
opus_custom_mode_create
opus_custom_mode_destroy
opus_decode
opus_decode24
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_dred_decode
opus_decoder_dred_decode24
opus_decoder_dred_decode_float
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_dred_alloc
opus_dred_decoder_create
opus_dred_decoder_ctl
opus_dred_decoder_destroy
opus_dred_decoder_get_size
opus_dred_decoder_init
opus_dred_free
opus_dred_get_size
opus_dred_parse
opus_dred_process
opus_get_version_string
opus_multistream_decode
opus_multistream_decode24
opus_multistream_decode_float
opus_multistream_decoder_create
opus_multistream_decoder_ctl
opus_multistream_decoder_destroy
opus_multistream_decoder_get_size
opus_multistream_decoder_init
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_has_lbrr
opus_packet_parse
opus_pcm_soft_clip
opus_strerror
Name
.text
Size
37.2MB
Virtual Size
37.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
19.4MB
Virtual Size
19.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
412KB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1.4MB
Virtual Size
1.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.qtmimed
Size
48KB
Virtual Size
48KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
337KB
Virtual Size
337KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ