2026-10-16_9f2547dba78ed733178bee159b2d755e_akira_glassworm_poet-rat_qakbot

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-16_9f2547dba78ed733178bee159b2d755e_akira_glassworm_poet-rat_qakbot
Size 38.6MB
Sample261017-msyrtaxy2p
SHA256 e8a6cdb6732e02f91ea552242a0a576eb1c4c16f41d5ac60323957ca3f432b4b
MD5 9f2547dba78ed733178bee159b2d755e
SHA1 5f01c3b4c6454ebb74a40a732c458270bf68bc06
SHA512 bf9490ab0d9d229556bcb1df958adf39816e2cf80cef9a83e677edbcba1301be27b774addc47d701071a81161d9f0ae2e5d1105bf3622db1685af717f8f06f90
SSDEEP 393216:r7Mry640IE30KOI48yifJdWOZIm5pnEIo8u2ko7:W40VEKj42IGpEIo8u2ko
TLSH
T1D2979F1296CA746DCE0BC9F0924B2533E774BD8A97302EFF9149B8323E66B70563D518
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-10-16_9f2547dba78ed733178bee159b2d755e_akira_glassworm_poet-rat_qakbot

File Explorer

2026-10-16_9f2547dba78ed733178bee159b2d755e_akira_glassworm_poet-rat_qakbot

.exe 38.6MB

2026-10-16_9f2547dba78ed733178bee159b2d755e_akira_glassworm_poet-rat_qakbot

IMPHASH fcf66135ffec0a84db6ce27e00b25e9a
SHA256 e8a6cdb6732e02f91ea552242a0a576eb1c4c16f41d5ac60323957ca3f432b4b
MD5 9f2547dba78ed733178bee159b2d755e
SHA1 5f01c3b4c6454ebb74a40a732c458270bf68bc06
SHA512 bf9490ab0d9d229556bcb1df958adf39816e2cf80cef9a83e677edbcba1301be27b774addc47d701071a81161d9f0ae2e5d1105bf3622db1685af717f8f06f90
SSDEEP 393216:r7Mry640IE30KOI48yifJdWOZIm5pnEIo8u2ko7:W40VEKj42IGpEIo8u2ko
TLSH
T1D2979F1296CA746DCE0BC9F0924B2533E774BD8A97302EFF9149B8323E66B70563D518
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

20274264

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

api-ms-win-core-errorhandling-l1-1-1

AddVectoredExceptionHandler RemoveVectoredExceptionHandler

api-ms-win-core-handle-l1-1-0

CloseHandle DuplicateHandle GetHandleInformation SetHandleInformation

api-ms-win-core-synch-l1-1-0

AcquireSRWLockExclusive AcquireSRWLockShared CancelWaitableTimer CreateEventA CreateEventW CreateMutexA DeleteCriticalSection EnterCriticalSection InitializeCriticalSection InitializeCriticalSectionAndSpinCount InitializeSRWLock LeaveCriticalSection ReleaseMutex ReleaseSRWLockExclusive ReleaseSRWLockShared ReleaseSemaphore ResetEvent SetEvent SetWaitableTimer SleepEx TryEnterCriticalSection WaitForSingleObject WaitForSingleObjectEx

api-ms-win-core-memory-l1-1-7

CreateFileMapping2

api-ms-win-core-io-l1-1-0

CancelIoEx CreateIoCompletionPort DeviceIoControl GetOverlappedResult GetQueuedCompletionStatus GetQueuedCompletionStatusEx PostQueuedCompletionStatus

api-ms-win-core-processthreads-l1-1-0

CreateProcessA CreateProcessW CreateThread GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetExitCodeProcess GetProcessTimes OpenThread QueueUserAPC ResumeThread SetPriorityClass SetThreadPriority SuspendThread TerminateProcess TerminateThread TlsAlloc TlsFree TlsGetValue TlsSetValue

api-ms-win-core-localization-l1-2-0

FormatMessageA FormatMessageW GetLocaleInfoA GetLocaleInfoEx GetLocaleInfoW

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary GetModuleFileNameW GetModuleHandleA GetModuleHandleExW GetModuleHandleW GetProcAddress LoadLibraryExA LoadLibraryExW

iphlpapi

GetAdaptersAddresses GetAdaptersInfo

api-ms-win-core-console-l2-1-0

GenerateConsoleCtrlEvent GetConsoleScreenBufferInfo SetConsoleOutputCP SetConsoleTextAttribute

api-ms-win-core-errorhandling-l1-1-0

GetLastError RaiseException SetErrorMode SetLastError SetUnhandledExceptionFilter UnhandledExceptionFilter

api-ms-win-core-processenvironment-l1-1-0

FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW GetEnvironmentStringsW GetEnvironmentVariableA GetStdHandle SetEnvironmentVariableA

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryA GetSystemInfo GetSystemTimeAdjustment GetSystemTimeAsFileTime GetTickCount GetTickCount64 GetVersionExA GlobalMemoryStatusEx

api-ms-win-core-sysinfo-l1-2-0

GetSystemTimePreciseAsFileTime VerSetConditionMask

api-ms-win-core-processthreads-l1-1-3

GetThreadDescription SetThreadDescription

api-ms-win-core-processthreads-l1-1-1

GetThreadTimes IsProcessorFeaturePresent OpenProcess

api-ms-win-core-timezone-l1-1-0

FileTimeToSystemTime GetTimeZoneInformation SystemTimeToFileTime SystemTimeToTzSpecificLocalTime

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent OutputDebugStringW

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA LoadLibraryW

api-ms-win-core-heap-l2-1-0

GlobalAlloc GlobalFree LocalFree

api-ms-win-core-memory-l1-1-6

MapViewOfFile3 VirtualAlloc2

api-ms-win-core-string-l1-1-0

MultiByteToWideChar WideCharToMultiByte

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-file-l1-1-0

CreateDirectoryW CreateFileA CreateFileW DeleteFileW FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlushFileBuffers GetDiskFreeSpaceExW GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetFullPathNameW GetLogicalDrives ReadFile RemoveDirectoryW SetFileInformationByHandle SetFilePointer SetFilePointerEx WriteFile

api-ms-win-core-registry-l1-1-0

RegCloseKey RegCreateKeyExW RegOpenKeyExW RegQueryValueExW RegSetValueExW

api-ms-win-core-memory-l1-1-5

UnmapViewOfFile2

rpcrt4

UuidCreate

api-ms-win-core-memory-l1-1-0

VirtualAlloc VirtualFree VirtualFreeEx VirtualProtect VirtualProtectEx VirtualQuery

ws2_32

WSACleanup WSAGetLastError WSAIoctl WSAStartup accept bind closesocket connect freeaddrinfo getaddrinfo getpeername getsockname getsockopt htonl htons inet_addr inet_ntoa inet_ntop inet_pton ioctlsocket listen ntohl ntohs recv recvfrom select send sendto setsockopt socket

api-ms-win-core-synch-l1-2-1

CreateSemaphoreW WaitForMultipleObjects

kernel32

CompareStringA CreateSemaphoreA CreateWaitableTimerA GetProcessAffinityMask GetSystemPowerStatus GlobalLock GlobalSize GlobalUnlock MoveFileExA MulDiv SetFileCompletionNotificationModes SetThreadExecutionState VerifyVersionInfoA VerifyVersionInfoW lstrlenW

shell32

CommandLineToArgvW DragAcceptFiles DragFinish DragQueryFileW SHBrowseForFolderW SHGetFolderPathA SHGetFolderPathW SHGetPathFromIDListW ShellExecuteW Shell_NotifyIconW

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ??0_Locinfo@std@@QEAA@PEBD@Z ??0_Lockit@std@@QEAA@H@Z ??0facet@locale@std@@IEAA@_K@Z ??0ios_base@std@@IEAA@XZ ??0task_continuation_context@Concurrency@@AEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ??1_Locinfo@std@@QEAA@XZ ??1_Lockit@std@@QEAA@XZ ??1facet@locale@std@@MEAA@XZ ??1ios_base@std@@UEAA@XZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z ??_8?$basic_ostream@DU?$char_traits@D@std@@@std@@7B@ ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Id_cnt@id@locale@std@@0HA ?_Incref@facet@locale@std@@UEAAXXZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Winerror_map@std@@YAHH@Z ?_Xbad_alloc@std@@YAXXZ ?_Xbad_function_call@std@@YAXXZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z ?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCurrentException@@YAXPEAX@Z ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrRethrow@@YAXPEBX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?classic@locale@std@@SAAEBV12@XZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?clear@ios_base@std@@QEAAXH@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?eof@ios_base@std@@QEBA_NXZ ?fail@ios_base@std@@QEBA_NXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?getloc@ios_base@std@@QEBA?AVlocale@2@XZ ?good@ios_base@std@@QEBA_NXZ ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$collate@D@std@@2V0locale@2@A ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$numpunct@D@std@@2V0locale@2@A ?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A ?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?init@?$basic_ios@DU?$char_traits@D@std@@@std@@IEAAXPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@_N@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@DD@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z ?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?uncaught_exceptions@std@@YAHXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z _Cnd_broadcast _Cnd_do_broadcast_at_thread_exit _Cnd_register_at_thread_exit _Cnd_signal _Cnd_unregister_at_thread_exit _Cnd_wait _Mtx_lock _Mtx_trylock _Mtx_unlock _Query_perf_counter _Query_perf_frequency _Strcoll _Strxfrm _Thrd_detach _Thrd_hardware_concurrency _Thrd_id _Thrd_join _Thrd_yield _Xtime_get_ticks

msvcp140_atomic_wait

__std_atomic_notify_all_direct __std_atomic_notify_one_direct __std_atomic_wait_direct __std_atomic_wait_get_deadline __std_atomic_wait_get_remaining_timeout

api-ms-win-core-console-l1-1-0

GetConsoleMode WriteConsoleW

user32

AdjustWindowRectEx AttachThreadInput BeginPaint CallNextHookEx CallWindowProcW ChangeDisplaySettingsExW CheckMenuItem ClientToScreen ClipCursor CloseClipboard CreateIconFromResource CreateIconFromResourceEx CreateIconIndirect CreatePopupMenu CreateWindowExA CreateWindowExW DefWindowProcW DeleteMenu DestroyCursor DestroyIcon DestroyMenu DestroyWindow DialogBoxIndirectParamW DispatchMessageW DrawTextW EmptyClipboard EnableMenuItem EnableWindow EndDialog EndPaint EnumClipboardFormats EnumDisplayDevicesW EnumDisplayMonitors EnumDisplaySettingsW EnumWindows FillRect FlashWindowEx GetAsyncKeyState GetClassInfoExW GetClientRect GetClipCursor GetClipboardData GetClipboardFormatNameA GetClipboardSequenceNumber GetCursorPos GetDC GetDesktopWindow GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetKeyState GetKeyboardLayout GetKeyboardState GetMenu GetMenuItemInfoW GetMessageA GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetPropW GetQueueStatus GetRawInputBuffer GetRawInputData GetRawInputDeviceInfoA GetRawInputDeviceList GetSystemMetrics GetUpdateRect GetWindowLongPtrW GetWindowLongW GetWindowPlacement GetWindowRect GetWindowTextLengthW GetWindowTextW GetWindowThreadProcessId InsertMenuW IntersectRect IsClipboardFormatAvailable IsIconic IsWindow IsZoomed KillTimer LoadCursorW LoadIconW MapVirtualKeyW MessageBoxA MonitorFromPoint MonitorFromWindow MsgWaitForMultipleObjects OpenClipboard PeekMessageW PostMessageW PostThreadMessageW PtInRect RegisterClassExA RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterRawInputDevices RegisterWindowMessageA RegisterWindowMessageW ReleaseCapture ReleaseDC RemovePropW ScreenToClient SendMessageW SetActiveWindow SetCapture SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetLayeredWindowAttributes SetMenuItemInfoW SetParent SetPropW SetRectEmpty SetTimer SetWindowLongPtrW SetWindowLongW SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowWindow SystemParametersInfoA SystemParametersInfoW ToUnicode TrackMouseEvent TrackPopupMenu TranslateMessage UnhookWindowsHookEx UnregisterClassA UnregisterClassW UnregisterDeviceNotification ValidateRect

imm32

ImmAssociateContext ImmGetCandidateListW ImmGetCompositionFontW ImmGetCompositionStringW ImmGetContext ImmGetIMEFileNameA ImmNotifyIME ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionStringW ImmSetCompositionWindow

api-ms-win-core-synch-l1-2-0

InitOnceBeginInitialize InitOnceComplete InitOnceExecuteOnce InitializeConditionVariable Sleep SleepConditionVariableCS SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable

oleaut32

SysAllocString SysFreeString VariantClear

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-file-l2-1-2

CopyFileW

api-ms-win-core-file-l2-1-0

CopyFileExW CreateHardLinkW CreateSymbolicLinkW GetFileInformationByHandleEx MoveFileExW

api-ms-win-core-console-l1-2-0

AttachConsole

winmm

timeBeginPeriod timeEndPeriod

ole32

OleInitialize OleUninitialize RegisterDragDrop ReleaseStgMedium RevokeDragDrop

api-ms-win-core-wow64-l1-1-0

IsWow64Process

setupapi

SetupDiDestroyDeviceInfoList SetupDiEnumDeviceInfo SetupDiEnumDeviceInterfaces SetupDiGetClassDevsA SetupDiGetDeviceInstanceIdA SetupDiGetDeviceInterfaceDetailA SetupDiGetDeviceRegistryPropertyW

gdi32

BitBlt ChoosePixelFormat CombineRgn CreateBitmap CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateFontIndirectW CreateRectRgn CreateSolidBrush DeleteDC DeleteObject DescribePixelFormat GetDIBits GetDeviceCaps GetICMProfileW GetPixelFormat GetTextExtentPoint32A GetTextMetricsW SelectObject SetPixel SetPixelFormat SwapBuffers

api-ms-win-core-libraryloader-l1-2-2

EnumResourceNamesW

api-ms-win-core-heap-l1-1-0

GetProcessHeap HeapAlloc HeapFree

api-ms-win-core-io-l1-1-1

CancelIo

api-ms-win-core-namedpipe-l1-1-0

CreatePipe PeekNamedPipe SetNamedPipeHandleState WaitNamedPipeW

api-ms-win-core-com-l1-1-0

CLSIDFromString CoCreateInstance CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoTaskMemFree CoUninitialize PropVariantClear

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind

api-ms-win-devices-config-l1-1-2

CM_Get_Device_IDA CM_Locate_DevNodeA

api-ms-win-devices-config-l1-1-1

CM_Get_Parent

version

GetFileVersionInfoA GetFileVersionInfoSizeA VerQueryValueA

hid

HidD_FreePreparsedData HidD_GetAttributes HidD_GetHidGuid HidD_GetPreparsedData HidP_GetCaps

bcrypt

BCryptCloseAlgorithmProvider BCryptGenRandom BCryptOpenAlgorithmProvider

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead

vcruntime140

_CxxThrowException __C_specific_handler __CxxFrameHandler3 __current_exception __current_exception_context __intrinsic_setjmp __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare _purecall longjmp memchr memcmp memcpy memmove memset strchr strrchr strstr wcsstr

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __p__commode __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsprintf_s __stdio_common_vsscanf __stdio_common_vswprintf _chsize_s _close _fileno _fseeki64 _ftelli64 _get_osfhandle _get_stream_buffer_pointers _isatty _lseeki64 _pclose _popen _read _set_fmode _sopen _wfopen _wfopen_s _wfreopen_s _wfsopen _write _wsopen fclose ferror fflush fgetc fgetpos fgets fputc fputs fread fseek fsetpos ftell fwrite puts setvbuf ungetc

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale localeconv setlocale

api-ms-win-crt-time-l1-1-0

__daylight __dstbias __timezone _gmtime64 _localtime64 _localtime64_s _mktime64 _time64 _tzset clock strftime

api-ms-win-crt-heap-l1-1-0

_aligned_free _aligned_malloc _aligned_realloc _callnewh _set_new_mode calloc free malloc realloc

api-ms-win-crt-runtime-l1-1-0

__p___argc __p___argv _beginthreadex _c_exit _cexit _configure_narrow_argv _crt_at_quick_exit _crt_atexit _endthreadex _errno _exit _get_initial_narrow_environment _initialize_narrow_environment _initialize_onexit_table _initterm _initterm_e _invalid_parameter_noinfo _invoke_watson _register_onexit_function _register_thread_local_exe_atexit_callback _seh_filter_exe _set_app_type abort exit quick_exit signal strerror terminate

api-ms-win-crt-math-l1-1-0

__setusermatherr _dsign _fdsign _ldsign acos acosf asin asinf atan atan2 atan2f atanf cbrt cbrtf ceil cos cosf cosh exp exp2 exp2f expf fabs floor fmod fmodf frexp hypot ldexp llrint llrintf log log10 log10f log2 log2f logf lrint lrintf lround lroundf modf modff pow powf rint round scalbn scalbnf sin sinf sinh sqrt sqrtf tan tanf tanh trunc

api-ms-win-crt-environment-l1-1-0

_dupenv_s getenv

api-ms-win-crt-convert-l1-1-0

_i64toa _itoa _itoa_s _ltoa _ui64toa _ultoa atof atoi mbstowcs strtod strtof strtol strtold strtoll strtoul strtoull wcstol wcstombs_s

api-ms-win-crt-filesystem-l1-1-0

_fstat64 _lock_file _stat64 _unlock_file _wstat64

api-ms-win-crt-string-l1-1-0

_strdup _stricmp _strrev isalnum isblank isgraph islower isprint isspace isupper strcat strcat_s strcmp strcpy strcpy_s strcspn strlen strncat strncmp strncpy strncpy_s strnlen strpbrk strspn strtok tolower toupper wcscat wcscmp wcscpy wcslen wcsncmp wcsnlen

api-ms-win-crt-utility-l1-1-0

bsearch qsort rand srand

??0Battery@hwinfo@@QEAA@AEBV01@@Z ??0CPU@hwinfo@@AEAA@XZ ??0CPU@hwinfo@@QEAA@AEBV01@@Z ??0Disk@hwinfo@@AEAA@XZ ??0Disk@hwinfo@@QEAA@AEBV01@@Z ??0GPU@hwinfo@@AEAA@XZ ??0GPU@hwinfo@@QEAA@AEBV01@@Z ??0MainBoard@hwinfo@@QEAA@AEBV01@@Z ??0Memory@hwinfo@@QEAA@AEBV01@@Z ??0Memory@hwinfo@@QEAA@XZ ??0Network@hwinfo@@AEAA@XZ ??0Network@hwinfo@@QEAA@AEBV01@@Z ??0OS@hwinfo@@QEAA@AEBV01@@Z ??0OS@hwinfo@@QEAA@XZ ??1Battery@hwinfo@@QEAA@XZ ??1CPU@hwinfo@@QEAA@XZ ??1Disk@hwinfo@@QEAA@XZ ??1GPU@hwinfo@@QEAA@XZ ??1MainBoard@hwinfo@@QEAA@XZ ??1Memory@hwinfo@@QEAA@XZ ??1Network@hwinfo@@QEAA@XZ ??1OS@hwinfo@@QEAA@XZ ??4Battery@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4CPU@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Disk@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4GPU@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4MainBoard@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Memory@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4Network@hwinfo@@QEAAAEAV01@AEBV01@@Z ??4OS@hwinfo@@QEAAAEAV01@AEBV01@@Z ?L1CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?L2CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?L3CacheSize_Bytes@CPU@hwinfo@@QEBA_JXZ ?available_Bytes@Memory@hwinfo@@QEBA_JXZ ?currentClockSpeed_MHz@CPU@hwinfo@@QEBA?AV?$vector@_JV?$allocator@_J@std@@@std@@XZ ?currentClockSpeed_MHz@CPU@hwinfo@@QEBA_JH@Z ?currentUtilisation@CPU@hwinfo@@QEBANXZ ?flags@CPU@hwinfo@@QEBAAEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ ?free_Bytes@Memory@hwinfo@@QEBA_JXZ ?g_eboot_address@MemoryPatcher@@3_KA ?id@CPU@hwinfo@@QEBAHXZ ?is32bit@OS@hwinfo@@QEBA_NXZ ?is64bit@OS@hwinfo@@QEBA_NXZ ?isBigEndian@OS@hwinfo@@QEBA_NXZ ?isLittleEndian@OS@hwinfo@@QEBA_NXZ ?kernel@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?maxClockSpeed_MHz@CPU@hwinfo@@QEBA_JXZ ?modelName@CPU@hwinfo@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?modules@Memory@hwinfo@@QEBAAEBV?$vector@UModule@Memory@hwinfo@@V?$allocator@UModule@Memory@hwinfo@@@std@@@std@@XZ ?name@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?numLogicalCores@CPU@hwinfo@@QEBAHXZ ?numPhysicalCores@CPU@hwinfo@@QEBAHXZ ?regularClockSpeed_MHz@CPU@hwinfo@@QEBA_JXZ ?threadUtilisation@CPU@hwinfo@@QEBANH@Z ?threadsUtilisation@CPU@hwinfo@@QEBA?AV?$vector@NV?$allocator@N@std@@@std@@XZ ?total_Bytes@Memory@hwinfo@@QEBA_JXZ ?vendor@CPU@hwinfo@@QEBAAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?version@OS@hwinfo@@QEBA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ

Name

.text

Size

19.5MB

Virtual Size

19.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

17.7MB

Virtual Size

17.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

258KB

Virtual Size

18.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

417KB

Virtual Size

417KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

403KB

Virtual Size

402KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

423KB

Virtual Size

422KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ