2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm
Size 39.8MB
Sample261023-c6al2acb42
SHA256 c7c3170c4baea59f82caa9a585d7ce950f62461f259260a29051ac95993a562f
MD5 f2ac26ad14b75f093c47c0c4ed5d1c3a
SHA1 8ca87b5a7a75f3a5f8aaa8798838d7a46e89acf2
SHA512 35316ea11c80c43d6175a6960c92ede5c77a0fac0053befbd8e099544efa29d8fe3a7aebcced29f3b247b33de9bebe55f678802a2db641e1e53e66e0f932abc6
SSDEEP 196608:bWjWbDvJu0epKJ22DdFcv/EvQlt8zkUvpLeOkJNek0F:aAJu0e8J22DU3PtkHhLBW+
TLSH
T101977C1B7590D62DC49AC638D28B8772BB32BC891632E77F01D0E6346FB26944F7D624
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Signatures

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_Binary_References_Browsers

Detects executables calling ClearMyTracksByProcess 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_ClearMyTracksByProcess

Detects executables containing SQL queries to confidential data stores. Observed in infostealers 1 IoCs

resource	yara_rule
sample	INDICATOR_SUSPICIOUS_EXE_SQLQuery_ConfidentialDataStore

Codesign digest Mismatch 1 IoCs

File was altered after it was signed.

resource
2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm

File Explorer

2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm

.exe 39.8MB

2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm

IMPHASH d66591ad427bc22f6336faea36528979
SHA256 c7c3170c4baea59f82caa9a585d7ce950f62461f259260a29051ac95993a562f
MD5 f2ac26ad14b75f093c47c0c4ed5d1c3a
SHA1 8ca87b5a7a75f3a5f8aaa8798838d7a46e89acf2
SHA512 35316ea11c80c43d6175a6960c92ede5c77a0fac0053befbd8e099544efa29d8fe3a7aebcced29f3b247b33de9bebe55f678802a2db641e1e53e66e0f932abc6
SSDEEP 196608:bWjWbDvJu0epKJ22DdFcv/EvQlt8zkUvpLeOkJNek0F:aAJu0e8J22DU3PtkHhLBW+
TLSH
T101977C1B7590D62DC49AC638D28B8772BB32BC891632E77F01D0E6346FB26944F7D624
MD5 SHA1 SHA512 SSDEEP TLSH

Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers
Detects executables calling ClearMyTracksByProcess
Detects executables containing SQL queries to confidential data stores. Observed in infostealers
Codesign digest Mismatch

File was altered after it was signed.

PE Signature issue

Digest

87:52:12:65:3d:cd:f4:5b:1f:52:a2:eb:79:93:33:e5:2a:a5:56:be:8e:21:70:7e:33:06:3c:a2:1f:8e:ef:53

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Signing Certificate

CN=Software Solutions 365 LLC,O=Software Solutions 365 LLC,L=Pervomaisky,ST=Sverdlovsk Oblast,C=RU,1.2.840.113549.1.9.1=#0c15737570706f7274406368656d7461626c652e636f6d

Chains

Oct 20, 2026

CN=Software Solutions 365 LLC,O=Software Solutions 365 LLC,L=Pervomaisky,ST=Sverdlovsk Oblast,C=RU,1.2.840.113549.1.9.1=#0c15737570706f7274406368656d7461626c652e636f6d

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:03:a1:b7:08:f8:54:ab:06:72:10:d9:04:47

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

CN=Software Solutions 365 LLC,O=Software Solutions 365 LLC,L=Pervomaisky,ST=Sverdlovsk Oblast,C=RU,1.2.840.113549.1.9.1=#0c15737570706f7274406368656d7461626c652e636f6d

Serial Number

64:97:12:68:41:c5:3a:d7:ea:d7:6e:be

Issuer

CN=GlobalSign GCC R45 CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 13, 2024 - Feb 13, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

37312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

advapi32

AdjustTokenPrivileges BuildTrusteeWithSidW ChangeServiceConfig2W ChangeServiceConfigW CloseServiceHandle ConvertSidToStringSidW ConvertStringSecurityDescriptorToSecurityDescriptorW ConvertStringSidToSidW CreateProcessAsUserW DeleteService DuplicateTokenEx EnumServicesStatusExW FreeInheritedFromArray GetEffectiveRightsFromAclW GetInheritanceSourceW GetLengthSid GetNamedSecurityInfoW GetSecurityDescriptorControl GetSecurityDescriptorDacl GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetTokenInformation GetUserNameW ImpersonateLoggedOnUser InitiateSystemShutdownExW IsValidSecurityDescriptor LookupPrivilegeValueW MapGenericMask OpenProcessToken OpenSCManagerW OpenServiceW PrivilegeCheck QueryServiceConfig2W QueryServiceConfigW QueryServiceStatusEx RegCloseKey RegConnectRegistryW RegCreateKeyExW RegDeleteKeyExW RegDeleteKeyW RegDeleteValueW RegEnumKeyExW RegEnumValueW RegFlushKey RegGetKeySecurity RegLoadKeyW RegNotifyChangeKeyValue RegOpenCurrentUser RegOpenKeyExW RegOpenUserClassesRoot RegQueryInfoKeyW RegQueryValueExW RegReplaceKeyW RegRestoreKeyW RegSaveKeyExW RegSaveKeyW RegSetKeySecurity RegSetValueExW RegUnLoadKeyW RevertToSelf SetNamedSecurityInfoW SetThreadToken SetTokenInformation StartServiceW

kernel32

AddVectoredExceptionHandler AreFileApisANSI CancelWaitableTimer CloseHandle CompareFileTime CompareStringA CompareStringW CopyFileExW CopyFileW CreateDirectoryA CreateDirectoryW CreateEventW CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreateMutexA CreateMutexW CreateProcessA CreateProcessW CreateSemaphoreA CreateThread CreateToolhelp32Snapshot CreateWaitableTimerW DeleteCriticalSection DeleteFileA DeleteFileW DeviceIoControl DuplicateHandle EnterCriticalSection EnumCalendarInfoW EnumResourceNamesW EnumSystemLocalesW ExitProcess ExitThread ExpandEnvironmentStringsW FileTimeToDosDateTime FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindCloseChangeNotification FindFirstChangeNotificationW FindFirstFileA FindFirstFileW FindFirstVolumeW FindNextChangeNotification FindNextFileA FindNextFileW FindNextVolumeW FindResourceA FindResourceW FindVolumeClose FlushFileBuffers FlushViewOfFile FormatMessageA FormatMessageW FreeLibrary FreeResource GetACP GetCPInfo GetCPInfoExW GetCommandLineW GetComputerNameW GetConsoleMode GetCurrentDirectoryW GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatA GetDateFormatW GetDiskFreeSpaceA GetDiskFreeSpaceW GetDriveTypeW GetEnvironmentStrings GetEnvironmentStringsW GetExitCodeProcess GetExitCodeThread GetFileAttributesA GetFileAttributesExW GetFileAttributesW GetFileInformationByHandle GetFileInformationByHandleEx GetFileSize GetFileSizeEx GetFileTime GetFileType GetFinalPathNameByHandleW GetFullPathNameA GetFullPathNameW GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoW GetLogicalDriveStringsW GetLogicalDrives GetLongPathNameW GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetOEMCP GetOverlappedResult GetPrivateProfileStringW GetProcAddress GetProcessHeap GetProcessTimes GetProcessWorkingSetSize GetShortPathNameW GetStartupInfoA GetStartupInfoW GetStdHandle GetStringTypeA GetStringTypeExA GetStringTypeExW GetStringTypeW GetSystemDefaultLangID GetSystemDefaultUILanguage GetSystemDirectoryW GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetSystemWindowsDirectoryW GetTempFileNameW GetTempPathA GetTempPathW GetThreadLocale GetThreadPriority GetTickCount64 GetTickCount GetTimeZoneInformation GetUserDefaultLCID GetUserDefaultLangID GetUserDefaultUILanguage GetVersion GetVersionExA GetVersionExW GetVolumeInformationW GetVolumeNameForVolumeMountPointW GetVolumePathNameW GetVolumePathNamesForVolumeNameW GetWindowsDirectoryW GlobalAddAtomW GlobalAlloc GlobalDeleteAtom GlobalFindAtomW GlobalFree GlobalHandle GlobalLock GlobalSize GlobalUnlock HeapAlloc HeapCompact HeapCreate HeapDestroy HeapFree HeapReAlloc HeapSize HeapValidate InitializeCriticalSection InitializeCriticalSectionAndSpinCount IsDBCSLeadByteEx IsDebuggerPresent IsValidLocale K32EnumProcesses K32GetModuleFileNameExW K32GetProcessMemoryInfo LCMapStringA LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExW LoadLibraryW LoadResource LocalAlloc LocalFileTimeToFileTime LocalFree LockFile LockFileEx LockResource MapViewOfFile Module32FirstW MoveFileExW MoveFileW MulDiv MultiByteToWideChar OpenFileMappingW OpenMutexW OpenProcess OutputDebugStringA OutputDebugStringW Process32FirstW Process32NextW QueryDosDeviceW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadDirectoryChangesW ReadFile ReleaseMutex ReleaseSemaphore RemoveDirectoryA RemoveDirectoryW RemoveVectoredExceptionHandler ResetEvent ResumeThread RtlCaptureContext RtlUnwind SetConsoleCtrlHandler SetConsoleMode SetCurrentDirectoryW SetEndOfFile SetErrorMode SetEvent SetFileAttributesW SetFilePointer SetFilePointerEx SetFileTime SetHandleCount SetLastError SetProcessShutdownParameters SetThreadLocale SetThreadPriority SetWaitableTimer SizeofResource Sleep SuspendThread SwitchToThread SystemTimeToFileTime SystemTimeToTzSpecificLocalTime TerminateProcess TerminateThread Thread32First Thread32Next TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection TzSpecificLocalTimeToSystemTime UnhandledExceptionFilter UnlockFile UnlockFileEx UnmapViewOfFile VerSetConditionMask VerifyVersionInfoW VirtualAlloc VirtualFree VirtualLock VirtualProtect VirtualQuery VirtualQueryEx VirtualUnlock WaitForMultipleObjects WaitForMultipleObjectsEx WaitForSingleObject WaitForSingleObjectEx WideCharToMultiByte WriteFile WritePrivateProfileStringW lstrcmpA lstrcmpW lstrcpyW lstrcpynW lstrlenW RtlRestoreContext RtlUnwindEx

netapi32

NetApiBufferFree NetUserGetInfo NetWkstaGetInfo

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

winspool.drv

ClosePrinter DocumentPropertiesW EnumPrintersW GetDefaultPrinterW OpenPrinterW

comctl32

DefSubclassProc FlatSB_GetScrollInfo FlatSB_GetScrollPos FlatSB_SetScrollInfo FlatSB_SetScrollPos FlatSB_SetScrollProp ImageList_Add ImageList_BeginDrag ImageList_Copy ImageList_Create ImageList_Destroy ImageList_DragEnter ImageList_DragLeave ImageList_DragMove ImageList_DragShowNolock ImageList_Draw ImageList_DrawEx ImageList_DrawIndirect ImageList_EndDrag ImageList_GetBkColor ImageList_GetDragImage ImageList_GetIcon ImageList_GetIconSize ImageList_GetImageCount ImageList_GetImageInfo ImageList_LoadImageW ImageList_Read ImageList_Remove ImageList_Replace ImageList_ReplaceIcon ImageList_SetBkColor ImageList_SetIconSize ImageList_SetImageCount ImageList_SetOverlayImage ImageList_Write InitCommonControls InitializeFlatSB LoadIconWithScaleDown PropertySheetW RemoveWindowSubclass SetWindowSubclass _TrackMouseEvent

comdlg32

FindTextW GetOpenFileNameW GetSaveFileNameW

gdi32

AbortDoc AddFontMemResourceEx AngleArc Arc ArcTo BitBlt Chord CombineRgn CopyEnhMetaFileW CreateBitmap CreateBrushIndirect CreateCompatibleBitmap CreateCompatibleDC CreateDCW CreateDIBSection CreateDIBitmap CreateFontIndirectW CreateHalftonePalette CreateHatchBrush CreateICW CreatePalette CreatePatternBrush CreatePenIndirect CreatePolygonRgn CreateRectRgn CreateRectRgnIndirect CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteEnhMetaFile DeleteObject Ellipse EndDoc EndPage EnumFontFamiliesExW EnumFontsW ExcludeClipRect ExtCreatePen ExtCreateRegion ExtFloodFill ExtTextOutW FillRgn FrameRgn GdiFlush GetBitmapBits GetBkMode GetBrushOrgEx GetClipBox GetClipRgn GetCurrentObject GetCurrentPositionEx GetDIBColorTable GetDIBits GetDeviceCaps GetEnhMetaFileBits GetEnhMetaFileDescriptionW GetEnhMetaFileHeader GetEnhMetaFilePaletteEntries GetNearestPaletteIndex GetObjectA GetObjectW GetPaletteEntries GetPixel GetRgnBox GetStockObject GetStretchBltMode GetSystemPaletteEntries GetTextColor GetTextExtentPoint32W GetTextExtentPointW GetTextMetricsW GetViewportOrgEx GetWinMetaFileBits GetWindowOrgEx IntersectClipRect LineTo MaskBlt MoveToEx OffsetRgn PatBlt Pie PlayEnhMetaFile PolyBezier PolyBezierTo PolyPolyline Polygon Polyline RealizePalette RectVisible Rectangle ResizePalette RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SelectPalette SetAbortProc SetBkColor SetBkMode SetBrushOrgEx SetDCPenColor SetDIBColorTable SetDIBits SetEnhMetaFileBits SetGraphicsMode SetMapMode SetPixel SetROP2 SetRectRgn SetStretchBltMode SetTextColor SetViewportExtEx SetViewportOrgEx SetWinMetaFileBits SetWindowExtEx SetWindowOrgEx SetWorldTransform StartDocW StartPage StretchBlt StretchDIBits TextOutW TranslateCharsetInfo UnrealizeObject

shell32

CommandLineToArgvW ExtractAssociatedIconW ExtractIconW SHAddToRecentDocs SHBrowseForFolderW SHFileOperationW SHGetDataFromIDListW SHGetDesktopFolder SHGetFileInfoW SHGetMalloc SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetSpecialFolderPathW SHQueryRecycleBinW ShellExecuteExW ShellExecuteW Shell_NotifyIconW ILFree IsUserAnAdmin SHBindToParent SHGetFolderLocation SHGetKnownFolderPath

user32

ActivateKeyboardLayout AdjustWindowRectEx BeginDeferWindowPos BeginPaint BringWindowToTop CallNextHookEx CallWindowProcW CharLowerBuffA CharLowerBuffW CharLowerW CharNextW CharUpperBuffA CharUpperBuffW CharUpperW CheckMenuItem ChildWindowFromPoint ClientToScreen CloseClipboard CopyIcon CopyImage CountClipboardFormats CreateAcceleratorTableW CreateCaret CreateIcon CreateIconFromResourceEx CreateIconIndirect CreateMenu CreatePopupMenu CreateWindowExW DefFrameProcW DefMDIChildProcW DefWindowProcW DeferWindowPos DeleteMenu DestroyCaret DestroyCursor DestroyIcon DestroyMenu DestroyWindow DispatchMessageA DispatchMessageW DrawEdge DrawFocusRect DrawFrameControl DrawIcon DrawIconEx DrawMenuBar DrawTextExW DrawTextW EmptyClipboard EnableMenuItem EnableScrollBar EnableWindow EndDeferWindowPos EndMenu EndPaint EnumChildWindows EnumClipboardFormats EnumDisplayMonitors EnumThreadWindows EnumWindows ExitWindowsEx FillRect FindWindowExW FindWindowW FrameRect GetActiveWindow GetAsyncKeyState GetCapture GetCaretPos GetClassInfoExW GetClassInfoW GetClassNameW GetClientRect GetClipboardData GetComboBoxInfo GetCursor GetCursorPos GetDC GetDCEx GetDesktopWindow GetDlgCtrlID GetDlgItem GetDoubleClickTime GetFocus GetForegroundWindow GetIconInfo GetKeyNameTextW GetKeyState GetKeyboardLayout GetKeyboardLayoutList GetKeyboardLayoutNameW GetKeyboardState GetLastActivePopup GetMenu GetMenuItemCount GetMenuItemID GetMenuItemInfoW GetMenuItemRect GetMenuState GetMenuStringW GetMessageExtraInfo GetMessagePos GetMessageTime GetMessageW GetMonitorInfoW GetParent GetPropW GetScrollBarInfo GetScrollInfo GetScrollPos GetScrollRange GetShellWindow GetSubMenu GetSysColor GetSysColorBrush GetSystemMenu GetSystemMetrics GetTopWindow GetUpdateRect GetWindow GetWindowDC GetWindowLongW GetWindowPlacement GetWindowRect GetWindowRgn GetWindowTextW GetWindowThreadProcessId HideCaret InflateRect InsertMenuItemW InsertMenuW IntersectRect InvalidateRect IsCharAlphaNumericW IsCharAlphaW IsCharUpperW IsChild IsClipboardFormatAvailable IsDialogMessageA IsDialogMessageW IsIconic IsRectEmpty IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed KillTimer LoadBitmapW LoadCursorW LoadIconW LoadImageW LoadKeyboardLayoutW LoadStringA LoadStringW LockWindowUpdate MapVirtualKeyW MapWindowPoints MessageBeep MessageBoxW MonitorFromPoint MonitorFromRect MonitorFromWindow MoveWindow MsgWaitForMultipleObjects MsgWaitForMultipleObjectsEx OffsetRect OpenClipboard PeekMessageA PeekMessageW PostMessageA PostMessageW PostQuitMessage PostThreadMessageW PtInRect RedrawWindow RegisterClassExW RegisterClassW RegisterClipboardFormatW RegisterDeviceNotificationW RegisterWindowMessageW ReleaseCapture ReleaseDC RemoveMenu RemovePropW ReplyMessage ScreenToClient ScrollWindow ScrollWindowEx SendInput SendMessageA SendMessageTimeoutW SendMessageW SetActiveWindow SetCapture SetCaretPos SetClipboardData SetCursor SetCursorPos SetFocus SetForegroundWindow SetKeyboardState SetLayeredWindowAttributes SetMenu SetMenuItemInfoW SetParent SetPropW SetRect SetRectEmpty SetScrollInfo SetScrollPos SetScrollRange SetTimer SetWindowLongW SetWindowPlacement SetWindowPos SetWindowRgn SetWindowTextW SetWindowsHookExW ShowCaret ShowOwnedPopups ShowScrollBar ShowWindow SubtractRect SystemParametersInfoW TrackMouseEvent TrackPopupMenu TranslateMDISysAccel TranslateMessage UnhookWindowsHookEx UnregisterClassW UnregisterDeviceNotification UpdateLayeredWindow UpdateLayeredWindowIndirect UpdateWindow ValidateRect WaitForInputIdle WaitMessage WindowFromPoint GetClassLongPtrW GetWindowLongPtrW SetClassLongPtrW SetWindowLongPtrW wsprintfA wsprintfW

winmm

timeGetTime

ole32

CLSIDFromProgID CLSIDFromString CoCreateGuid CoCreateInstance CoFreeUnusedLibraries CoInitialize CoInitializeEx CoInitializeSecurity CoSetProxyBlanket CoTaskMemAlloc CoTaskMemFree CoUninitialize IsEqualGUID OleInitialize OleUninitialize PropVariantClear StringFromCLSID

oleaut32

CreateErrorInfo GetActiveObject GetErrorInfo SafeArrayAccessData SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetVartype SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SafeArrayUnaccessData SetErrorInfo SysAllocString SysAllocStringLen SysFreeString SysReAllocStringLen SysStringLen VariantChangeType VariantClear VariantCopy VariantCopyInd VariantInit

urlmon

URLDownloadToFileW

wininet

FindCloseUrlCache FindFirstUrlCacheEntryW FindNextUrlCacheEntryW HttpQueryInfoA HttpQueryInfoW InternetCloseHandle InternetGetConnectedState InternetOpenUrlA InternetOpenW InternetQueryOptionW InternetReadFile

gdiplus

GdipCreateEffect GdipDeleteEffect GdipDrawImageFX GdipSetEffectParameters

uxtheme

CloseThemeData DrawThemeBackground GetThemeRect GetThemeSysSize IsThemeActive OpenThemeData

wtsapi32

WTSEnumerateProcessesW WTSFreeMemory

crypt32

CryptDecodeObject CryptMsgClose CryptMsgGetParam CryptQueryObject

ws2_32

WSACleanup WSAGetLastError WSALookupServiceBeginW WSALookupServiceEnd WSALookupServiceNextW WSASetServiceW WSAStartup __WSAFDIsSet accept bind closesocket connect getsockname listen recv select send setsockopt socket

shlwapi

PathCanonicalizeW PathIsRelativeW SHCreateMemStream SHRegGetPathW StrCmpLogicalW StrRetToBufW StrRetToStrW StrToInt64ExW UrlEscapeW UrlUnescapeW

winhttp

WinHttpAddRequestHeaders WinHttpCloseHandle WinHttpConnect WinHttpGetIEProxyConfigForCurrentUser WinHttpGetProxyForUrl WinHttpOpen WinHttpOpenRequest WinHttpQueryAuthSchemes WinHttpQueryDataAvailable WinHttpQueryHeaders WinHttpQueryOption WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetCredentials WinHttpSetOption WinHttpSetStatusCallback WinHttpSetTimeouts WinHttpWriteData

aclui

CreateSecurityPage

msi

MsiConfigureProductW MsiEnumProductsExW MsiGetProductInfoW MsiQueryProductStateW MsiSetExternalUIW MsiSetInternalUI

rstrtmgr

RmEndSession RmGetList RmRegisterResources RmRestart RmShutdown RmStartSession

hardwareconstant

GetHardwareConstant

AboutForm AddToFavoritesAndCommentsEditingForm ApplicationsDeletedForm ApplicationsDidYouKnowTipsData ApplicationsExternalDeleteModule ApplicationsFrame ApplicationsLogCreateForm ApplicationsLogNotationsForm ApplicationsLogViewForm ApplicationsRemovalToolsForm ApplicationsRevertLogResultForm ApplicationsUninstallForm ArticlesFrame BackgroundTasksModule BinaryValueForm CleanupBrowsersModule CleanupCloudPartsModule CleanupCommunityData CleanupDiskModule CleanupFrame CleanupInfrastructureModule CleanupRegistryModule CleanupScheduledForm CommonTextStringsDataModule CreateRegistrySnapshotForm DidYouKnowCenterForm DidYouKnowCenterTipsData EntryChangingForm FindAppUninstallKeyByFileDataModule Form27 Form30 Form43 IgnoreListsFileMasksDataModule ImportantRegistryPartsFrame IntegerValueForm InterfaceHintsDataModule ItemsForCleanupViewingForm KeyPropertiesForm LicenseKeysDataModule LicensingKeyEnteringForm LicensingNagScreenForm LicensingOldKeysForm LicensingSubscriptionExpiredForm LicensingSubscriptionReminderForm LockedImageControlDataModule MainForm MultiLanguageSupportForm MultiStringValueForm NewIgnoreListItemForm NewStartupItemForm NonModaInformersDataModule NotificationsDataModule ProgressFrame RegistryFavoritesRemoveForm RegistryOptimizationForm RegistrySearchProfileForm RegistrySnapshotsForm SearchMatchForm SettingsForm SharedAndDependentDataModule SilentUpdatesCheckDataModule StartupGearDataModule StartupLoadTimesForm StartupManagerFrame StringEnteringForm StringValueForm TaskDialogFrame TweaksChangeStateForm TweaksCreateTweakForm TweaksDocDataModule TweaksForm TweaksManagementForm TweaksRegistryValueEditingForm UndoingChangesCenterForm UniqueFunctionsDataModule UpdateThisAppForm VisualElementsDataModule _ZTR10TAboutForm _ZTR11TTweaksForm _ZTR12DesktopShade _ZTR12THiddingForm _ZTR12THintAnimate _ZTR13TCleanupFrame _ZTR13TSettingsForm _ZTR14TArticlesFrame _ZTR14TPageControlEx _ZTR14TProgressFrame _ZTR14TTimeoutThread _ZTR15TDownloadThread _ZTR15TSilentMaskEdit _ZTR16TAppTracesThread _ZTR16TBinaryValueForm _ZTR16TCloudDataThread _ZTR16TSearchMatchForm _ZTR16TStringValueForm _ZTR16TTaskDialogFrame _ZTR17TCleanupPartsScan _ZTR17TIntegerValueForm _ZTR18TApplicationsFrame _ZTR18TCleanupCleanFound _ZTR18TCleanupDiskModule _ZTR18TEntryChangingForm _ZTR18TKeyPropertiesForm _ZTR18TUpdateThisAppForm _ZTR19TNewStartupItemForm _ZTR19TStringEnteringForm _ZTR20TCloseProgramWaiting _ZTR20TOnShowActionsThread _ZTR20TPageControlExHelper _ZTR20TReloadStartupThread _ZTR20TStartupManagerFrame _ZTR20TTweaksDocDataModule _ZTR21TCleanupCommunityData _ZTR21TCleanupScheduledForm _ZTR21TDidYouKnowCenterForm _ZTR21TLicensingOldKeysForm _ZTR21TMultiStringValueForm _ZTR21TRarelyUsedAppsThread _ZTR21TStartupLoadTimesForm _ZTR21TTweaksManagementForm _ZTR21TUCStartupItemsThread _ZTR22TBackgroundTasksModule _ZTR22TCleanupBrowsersModule _ZTR22TCleanupRegistryModule _ZTR22TClickableLabelControl _ZTR22TLicenseKeysDataModule _ZTR22TNewIgnoreListItemForm _ZTR22TRegistrySnapshotsForm _ZTR22TStartupGearDataModule _ZTR22TTweaksChangeStateForm _ZTR22TTweaksCreateTweakForm _ZTR23TLicensingNagScreenForm _ZTR23TPasscodeActivateThread _ZTR24TApplicationsDeletedForm _ZTR24TApplicationsLogViewForm _ZTR24TCleanupCloudPartsModule _ZTR24TNotificationsDataModule _ZTR24TProcessCompletionWaiter _ZTR24TRatingTranslationThread _ZTR25TDidYouKnowCenterTipsData _ZTR25TInterfaceHintsDataModule _ZTR25TLicensingKeyEnteringForm _ZTR25TMultiLanguageSupportForm _ZTR25TRegistryOptimizationForm _ZTR25TToastTaskDialogFrameForm _ZTR25TUndoingChangesCenterForm _ZTR25TVisualElementsDataModule _ZTR26TApplicationsLogCreateForm _ZTR26TApplicationsUninstallForm _ZTR26TCleanupScanNextQueuedPart _ZTR26TRegistrySearchProfileForm _ZTR26TUniqueFunctionsDataModule _ZTR27TBottomPanelShowIfNecessary _ZTR27TCreateRegistrySnapshotForm _ZTR27TItemsForCleanupViewingForm _ZTR27TNonModaInformersDataModule _ZTR28TCleanupInfrastructureModule _ZTR28TCommonTextStringsDataModule _ZTR28TImportantRegistryPartsFrame _ZTR28TRegistryFavoritesRemoveForm _ZTR28TRegistrySearchReplaceThread _ZTR28TStartupItemsGatheringThread _ZTR29TApplicationsLogNotationsForm _ZTR29TApplicationsRemovalToolsForm _ZTR29TCorrectTerminatedCheckThread _ZTR29TLockedImageControlDataModule _ZTR29TSearchReplaceResultsListView _ZTR29TSharedAndDependentDataModule _ZTR29TSilentUpdatesCheckDataModule _ZTR30TCheckForMultiLangEventsThread _ZTR30TProcessCompletionWaiterHelper _ZTR31TApplicationsDidYouKnowTipsData _ZTR31TDeletedAppsRevertChangesThread _ZTR31TIgnoreListsFileMasksDataModule _ZTR31TSecondaryItemsPropertiesThread _ZTR31TTweaksRegistryValueEditingForm _ZTR32TApplicationsRevertLogResultForm _ZTR32TBifactorialProgressUpdateThread _ZTR32TCleanupCleanFoundProgressUpdate _ZTR33TApplicationsExternalDeleteModule _ZTR33TLicensingSubscriptionExpiredForm _ZTR34TGetDownloadableTranslationsThread _ZTR34TLicensingSubscriptionReminderForm _ZTR34TRestoringSystemRestorePointThread _ZTR36TFindAppUninstallKeyByFileDataModule _ZTR37TAddToFavoritesAndCommentsEditingForm _ZTR37TGetDocumentThread_ThreadsListSupport _ZTR37TGetRecommendedDelayCalculationThread _ZTR40TIsTranslationAvailableOnTheServerThread _ZTR7TForm27 _ZTR7TForm30 _ZTR7TForm43 _ZTR8IUnknown _ZTR9THintForm _ZTR9TMainForm _ZTRN11SciterStuff17TSciterHostWindowE _ZTRN11debug_stuff8internal12TIdleHandlerE _ZTRN12ArticlesFeed18TGetArticlesThreadE _ZTRN12_GLOBAL__N_114TSaveKeyThreadE _ZTRN12expresscheck17TCleanupBlockShowE _ZTRN12expresscheck17TDriversBlockShowE _ZTRN12expresscheck17TPrivacyBlockShowE _ZTRN12expresscheck17TStartupBlockShowE _ZTRN12expresscheck18TSecurityBlockShowE _ZTRN12expresscheck19TAppTracesBlockShowE _ZTRN13CloudDatabase17TTaskRunnerThreadE _ZTRN13Notifications16DoNotDisturbMode19TWaitUntilOffThreadE _ZTRN13Notifications16DoNotDisturbMode24TWaitUntilOffAsyncThreadE _ZTRN14CacheWebHelper12TFindUpdates11TWorkThreadE _ZTRN14CacheWebHelper12TFindUpdates15TGetLinksThreadE _ZTRN14CacheWebHelper18TGetAppsPropertiesE _ZTRN14CacheWebHelper22TInWorkUpdateInstallerE _ZTRN14CacheWebHelper23TInWorkUpdateDownloaderE _ZTRN14SciterControls14TAppIconLoader5TImplE _ZTRN14WindowsUpdates19TUpdateSearchHelperE _ZTRN15BackgroundTasks13TEventsThreadE _ZTRN15LogViewInternal19TChangeTreeExpanderE _ZTRN15NS_Interactions15UserStartupItemE _ZTRN15NS_Interactions16InteractionsSoapE _ZTRN15NS_Interactions16UserStartupItem2E _ZTRN15NS_Interactions19CoreUserStartupItemE _ZTRN15NS_Interactions19IMultiWebHelperSOAPE _ZTRN15NS_Interactions21UserIndicatorAndValueE _ZTRN15NS_Interactions24StartupItemProperties_V1E _ZTRN15RegistryTracing10TRegNotify5TImplE _ZTRN15RegistryTracing17TRegSnapShotAsync5TImplE _ZTRN15RegistryTracing20TProgressObservation5TImplE _ZTRN15RegistryTracing22TSeparateThreadCapture5TImplE _ZTRN16CleanupCommunity24TGetPartsInfoAsyncThreadE _ZTRN16CleanupScheduled15TScanningThreadE _ZTRN16CleanupScheduled22TCleanFromNotificationE _ZTRN16DidYouKnowCenter8Internal23TIsActualContinueThreadE _ZTRN16LicensingOldKeys19TExchangeKeysThreadE _ZTRN17StartupStatistics19TStartupMeasurement19TMeasurementProcessE _ZTRN17StartupStatistics19TStartupMeasurement20TMeasurementObserverE _ZTRN18AppsExternalDelete7TNotify18TCommonDataRefreshE _ZTRN18AppsExternalDelete7TNotify19TAppDataRememberingE _ZTRN18AppsExternalDelete7TNotify20TUninstallKeyChangesE _ZTRN18AppsExternalDelete7TNotify25TDeletedCreatedKeyActionsE _ZTRN18LowCleanupBrowsers19TIEExitDialogCloserE _ZTRN19ApplicationsDeleted18TPreliminaryLookupE _ZTRN19ApplicationsDeleted21TDeepCheckDeletedAppsE _ZTRN19ApplicationsDeleted34TAreNewInstalledAppsAppearedThreadE _ZTRN19ApplicationsDeleted36TRevealAndSendThePrimaryTracesThreadE _ZTRN19UninstallerAppsData13TGetWinRTAppsE _ZTRN19UninstallerAppsData15TFileTracesFindE _ZTRN19UninstallerAppsData16TUpdateSomeItemsE _ZTRN19UninstallerAppsData23TItemsManagerCoreThreadE _ZTRN19UninstallerAppsData23TRemovalToolsLinkThreadE _ZTRN19UninstallerAppsData25TIsFilteredWinRTAppExistsE _ZTRN20NS_InteractionsCache13AppPropertiesE _ZTRN20NS_InteractionsCache13AppUpdateLinkE _ZTRN20NS_InteractionsCache13AppWithUpdateE _ZTRN20NS_InteractionsCache15AppUpdateLinkExE _ZTRN20NS_InteractionsCache15AppWithUpdateExE _ZTRN20NS_InteractionsCache16InteractionsSoapE _ZTRN20NS_InteractionsCache18UserUpdateCheckAppE _ZTRN21ApplicationsUninstall17TSaveTracesToFileE _ZTRN21ApplicationsUninstall17TTracesFindThreadE _ZTRN21ApplicationsUninstall20TChangeLogLoadThreadE _ZTRN21ApplicationsUninstall20TUndoChangeLogThreadE _ZTRN21ApplicationsUninstall29TSaveTracesToFileAndLogsMergeE _ZTRN21TRunProcessesParallel5TImplE _ZTRN24NS_DeletedAppsWebService15AppDataFromUserE _ZTRN24NS_DeletedAppsWebService16InteractionsSoapE _ZTRN25TTaskDialogFrameFormToast11TWorkThreadE _ZTRN26TApplicationsUninstallForm29TStandardUninstallWin32ThreadE _ZTRN28TStandardCleanupPartsFactory18TCreatePartsThreadE _ZTRN29TUnlockAndRemoveRegistryItems5TImplE _ZTRN6System10IInterfaceE _ZTRN6System10IInvokableE _ZTRN6System12DynamicArrayINS_13UnicodeStringEEE _ZTRN6System12DynamicArrayIPN15NS_Interactions15UserStartupItemEEE _ZTRN6System12DynamicArrayIPN15NS_Interactions16UserStartupItem2EEE _ZTRN6System12DynamicArrayIPN15NS_Interactions21UserIndicatorAndValueEEE _ZTRN6System12DynamicArrayIPN15NS_Interactions24StartupItemProperties_V1EEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache13AppPropertiesEEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache13AppUpdateLinkEEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache13AppWithUpdateEEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache15AppUpdateLinkExEEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache15AppWithUpdateExEEE _ZTRN6System12DynamicArrayIPN20NS_InteractionsCache18UserUpdateCheckAppEEE _ZTRN6System12DynamicArrayIiEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN11debug_stuff20TDebugDataFuncWriter5TImplclEPKwEUlvE_MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN12THintAnimate15ActionUpdatePosEvEUlvE_MS4_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN12THintAnimate15SetTransparencyEhEUlvE_MS4_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN15BackgroundTasks13TEventsThread9OnExecuteERN5boost8optionalIbEEE3$_7MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN15RegistryTracing20TProgressObservation11EndProgressEvEUlvE_MS5_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN16CleanupScheduled22TCleanFromNotification9OnExecuteERN5boost8optionalIbEEE4$_18MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN16CleanupScheduled22TCleanFromNotification9OnExecuteERN5boost8optionalIbEEE4$_19MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN16CleanupScheduled22TCleanFromNotification9OnExecuteERN5boost8optionalIbEEE4$_21MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEE4$_30MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEE4$_33MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEE4$_34MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN18TCleanupCleanFound9OnExecuteERN5boost8optionalIbEEE4$_49MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN25TTaskDialogFrameFormToast11TWorkThread25WindowMovingWithAnimationEbEUlvE_MS5_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN25TTaskDialogFrameFormToast11TWorkThread9OnExecuteERSt8optionalIbEEUlvE0_MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN25TTaskDialogFrameFormToast11TWorkThread9OnExecuteERSt8optionalIbEEUlvE1_MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN25TTaskDialogFrameFormToast11TWorkThread9OnExecuteERSt8optionalIbEEUlvE2_MS8_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN26TApplicationsUninstallForm32OnCompleteUninstallWinRTCallbackEPKwE4$_38MS6_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZN9THintForm19OnHintAnimateActionE18THintAnimateActionhEUlvE_MS5_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN13CloudDatabase3TDbIN16CleanupCommunity17TWinapp2DbContentELb1EE8GetAsyncEN5boost8functionIFvNS8_8optionalIS6_EEEEERKNS_13UnicodeStringEbiENKUlT_NS8_9function0IbEEE_clISB_EEDaSH_SJ_EUlvE_MSN_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN13CloudDatabase3TDbISt6vectorIN12RemovalTools5TToolESaIS7_EELb0EE8GetAsyncEN5boost8functionIFvNSB_8optionalIS9_EEEEERKNS_13UnicodeStringEbiENKUlT_NSB_9function0IbEEE_clISE_EEDaSK_SM_EUlvE_MSQ_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN13CloudDatabase3TDbISt6vectorIN17CleanupCloudParts17TCloudPartProfileESaIS7_EELb0EE8GetAsyncEN5boost8functionIFvNSB_8optionalIS9_EEEEERKNS_13UnicodeStringEbiENKUlT_NSB_9function0IbEEE_clISE_EEDaSK_SM_EUlvE_MSQ_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN16CleanupScheduled15TScanningThread9OnExecuteERN5boost8optionalIbEEENK3$_5clEvEUlvE_MSA_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEENK4$_27clEsEUlvE_MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEENK4$_28clERKNS_13UnicodeStringEbEUlvE0_MSC_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN17TCleanupPartsScan9OnExecuteERN5boost8optionalIbEEENK4$_28clERKNS_13UnicodeStringEbEUlvE_MSC_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN18TCleanupCleanFound9OnExecuteERN5boost8optionalIbEEENK4$_48clEsEUlvE_MS9_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN21ApplicationsUninstall17TTracesFindThread9OnExecuteERN5boost8optionalIbEEENK3$_8clEiEUlvE_MSA_KFvvEEE _ZTRN6System13InvokeWrapperINS_7Classes16TThreadProcedureEZZN37TGetDocumentThread_ThreadsListSupport9OnExecuteERN5boost8optionalIbEEENK3$_0clEixEUlvE_MS9_KFvvEEE _ZTRN6System20TCppInterfacedObjectINS_7Classes16TThreadProcedureE8IUnknownNS_10IInterfaceEEE _ZTRN6System7Classes16TThreadProcedureE _ZTRN7Startup14TChangesNotify13TDetectThreadE _ZTRN7Startup14TChangesNotify17TItemRevealThreadE _ZTRN7Startup19TGetAllStartupItemsE _ZTRN9Telemetry21TSaveIndicatorsThreadE _ZTRN9Telemetry8Internal11TSendThreadE _ZTRN9apptraces16TRunThreadHelperE _ZTRN9apptraces17TCommonDataHolder14TRefreshThreadE _ZTRU9__closurePFvPN6System7TObjectEE _ZTRZL29StartCreateWinRTAppsChangeLogP18TApplicationsFrameRKN6System13UnicodeStringERK17TWinRTPackageInfoE21TWinRTAppTracesThread _ZTRZN13TCleanupFrame16RestoreToDefaultEP20TCleanupPartsFactoryE15TPartsGetThread _ZTRZN19UninstallerAppsDataL15RunUninstallersERKSt6vectorIN6System13UnicodeStringESaIS2_EEN5boost8functionIFvbEEEE13THelperThread _ZTRZN20TStartupManagerFrame20LoadTimesPanelUpdateERKNS_19TLoadTimesPanelInfoEE35TWaitGoodTimeToStartAnimationThread __CPPdebugHook

Name

.text

Size

17.3MB

Virtual Size

17.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rodata

Size

4.6MB

Virtual Size

4.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

3.0MB

Virtual Size

3.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

900KB

Virtual Size

899KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rdata

Size

512B

Virtual Size

40B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

18KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

4.2MB

Virtual Size

4.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

652KB

Virtual Size

651KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-10-22_f2ac26ad14b75f093c47c0c4ed5d1c3a_acrstealer_amadey_glassworm

PE Signature issue

advapi32

kernel32

netapi32

version

winspool.drv

comctl32

comdlg32

gdi32

shell32

user32

winmm

ole32

oleaut32

urlmon

wininet

gdiplus

uxtheme

wtsapi32

crypt32

ws2_32

shlwapi

winhttp

aclui

msi

rstrtmgr

hardwareconstant

generic