2026-10-22_0678476bfbf0fd2dcb754e4e46476896_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader

Sharing

Copy URL Twitter E-mail

General

Target
2026-10-22_0678476bfbf0fd2dcb754e4e46476896_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader
Size 13.2MB
Sample261024-2n85baew4m
SHA256 4e734d54b4d0aa7793b829e952def37bdc5bedd9765ceb296b6f933ec35cbfea
MD5 0678476bfbf0fd2dcb754e4e46476896
SHA1 29e4f843dc4656a0cb85e3c25fd840510fd2dba0
SHA512 448ac7a0127625e0562173c6fcc8c432335b4996b8cb5487f7fb3ef3aa04547d9edca4c51cc42c385c0c4492465092f7f133f3390d4be0d96215f02832c4cecd
SSDEEP 393216:rgDLuAc+wwFo+gtkXJ/HhwN2yoByNm8r:EuAc+wwFohUHhdyNmU
TLSH
T110D6D011B7958071F6F302B1997A9BB98939BE30573580CF52C03A6E5A31BD27E32727
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-10-22_0678476bfbf0fd2dcb754e4e46476896_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader

.exe 13.2MB

2026-10-22_0678476bfbf0fd2dcb754e4e46476896_amadey_coinminer_darkgate_elex_glassworm_luca-stealer_njrat_revil_smoke-loader

IMPHASH 55f6631ede563fa10c9e529b91a7482c
SHA256 4e734d54b4d0aa7793b829e952def37bdc5bedd9765ceb296b6f933ec35cbfea
MD5 0678476bfbf0fd2dcb754e4e46476896
SHA1 29e4f843dc4656a0cb85e3c25fd840510fd2dba0
SHA512 448ac7a0127625e0562173c6fcc8c432335b4996b8cb5487f7fb3ef3aa04547d9edca4c51cc42c385c0c4492465092f7f133f3390d4be0d96215f02832c4cecd
SSDEEP 393216:rgDLuAc+wwFo+gtkXJ/HhwN2yoByNm8r:EuAc+wwFohUHhdyNmU
TLSH
T110D6D011B7958071F6F302B1997A9BB98939BE30573580CF52C03A6E5A31BD27E32727
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Digest

5d:f6:a0:61:e9:3a:01:bb:ad:38:bf:10:97:8e:99:55:a0:fb:7b:fc:a4:1f:bf:6a:0d:0e:9f:9f:c5:e6:85:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=91330110MA2KHXUW41,CN=杭州亿格云科技有限公司,O=杭州亿格云科技有限公司,L=杭州市,ST=浙江省,C=CN,1.3.6.1.4.1.311.60.2.1.1=#130848414e475a484f55,1.3.6.1.4.1.311.60.2.1.2=#13085a48454a49414e47,1.3.6.1.4.1.311.60.2.1.3=#1302434e,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e

Chains

Sep 7, 2026

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Serial Number

01:ee:5f:16:9d:ff:97:35:2b:64:65:d6:6a

Issuer

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Sep 19, 2018 - Jan 28, 2028

Subject

CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE

Serial Number

61:29:15:27:00:00:00:00:00:2a

Issuer

CN=Microsoft Code Verification Root,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Apr 15, 2011 - Apr 15, 2021

Subject

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:03:18:42:45:70:8a:41:cf:6f:01:b8:ee:b4:a9:54

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R3,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Mar 18, 2029

Subject

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Serial Number

77:bd:0e:05:b7:59:0b:b6:1d:47:61:53:1e:3f:75:ed

Issuer

CN=GlobalSign Code Signing Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jul 28, 2020 - Jul 28, 2030

Subject

Serial Number

20:34:a7:73:a6:31:67:35:3f:f5:f3:94

Issuer

CN=GlobalSign GCC R45 EV CodeSigning CA 2020,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

May 23, 2024 - Aug 20, 2027

Subject

CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE

Serial Number

84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4

Issuer

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Oct 15, 2025 - Jan 10, 2037

Subject

CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE

Serial Number

83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f

Issuer

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jul 16, 2025 - Jul 16, 2041

Subject

CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE

Serial Number

78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Dec 9, 2020 - Dec 10, 2034

Subject

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Serial Number

45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51

Issuer

CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Dec 10, 2014 - Dec 10, 2034

Minor OS version

Major OS version

Entry point

4681237

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\jenkins\dev\yunshu-windows-app\Release\CcBrizoo.pdb

winhttp

WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpSetTimeouts WinHttpQueryDataAvailable WinHttpReadData WinHttpOpen WinHttpConnect WinHttpCloseHandle WinHttpOpenRequest

comctl32

_TrackMouseEvent InitCommonControlsEx ord17

ws2_32

getsockname WSASetLastError WSARecv WSASend WSASocketW WSAAddressToStringW recvfrom sendto __WSAFDIsSet accept select WSAIoctl setsockopt ntohs listen htons htonl getsockopt getpeername ioctlsocket closesocket bind gethostname getnameinfo getaddrinfo freeaddrinfo WSACleanup shutdown inet_addr send connect inet_ntoa recv inet_pton socket gethostbyname WSAStartup WSAStringToAddressW WSAGetLastError ntohl

kernel32

GetWindowsDirectoryW MoveFileExW GetFileSize GetSystemInfo VerSetConditionMask CreateIoCompletionPort GetQueuedCompletionStatus CancelIoEx InitializeCriticalSectionAndSpinCount SleepEx SetWaitableTimer CreateWaitableTimerW QueueUserAPC TlsGetValue TlsSetValue GetSystemTimeAsFileTime GetModuleHandleA VerifyVersionInfoW OutputDebugStringA SetCurrentDirectoryW GetCurrentDirectoryW FreeResource MulDiv CreateDirectoryW LocalFileTimeToFileTime SetFileTime SystemTimeToFileTime lstrcpynW GetFullPathNameW GetLongPathNameW ExpandEnvironmentStringsW GetShortPathNameW GetFinalPathNameByHandleW K32GetModuleFileNameExW K32GetProcessImageFileNameW DuplicateHandle ReadProcessMemory GetFileType GetVersionExA lstrcmpiA OpenEventW DeviceIoControl SetFilePointerEx GetExitCodeProcess SetEndOfFile UnmapViewOfFile GetFileInformationByHandle GetFileAttributesExW CreateFileMappingW MapViewOfFile FlushFileBuffers AreFileApisANSI TryEnterCriticalSection HeapCreate GetDiskFreeSpaceW LockFile GetFullPathNameA UnlockFileEx HeapValidate GetTempPathA GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile LoadLibraryA DeleteFileA HeapCompact UnlockFile GetVolumePathNameW QueryPerformanceCounter OpenMutexW GetSystemPowerStatus ExpandEnvironmentStringsA FileTimeToDosDateTime CloseThreadpool QueryDosDeviceW SetThreadpoolThreadMinimum CloseThreadpoolCleanupGroup CloseThreadpoolCleanupGroupMembers SetThreadpoolThreadMaximum CreateThreadpoolCleanupGroup SubmitThreadpoolWork CreateThreadpoolWork OpenFileMappingW CancelIo GetHandleInformation CreateNamedPipeW GetNamedPipeClientProcessId ResumeThread DisconnectNamedPipe GetOverlappedResult WaitNamedPipeW ConnectNamedPipe DosDateTimeToFileTime VirtualProtect AddVectoredExceptionHandler SetUnhandledExceptionFilter QueryPerformanceFrequency GetStdHandle PeekNamedPipe GetConsoleMode SetConsoleMode ReadConsoleA ReadConsoleW SwitchToFiber DeleteFiber CreateFiber ConvertFiberToThread ConvertThreadToFiber WriteConsoleW FlsFree FlsSetValue FlsGetValue FlsAlloc GetStringTypeW AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock LoadLibraryExA VirtualFree VirtualAlloc IsProcessorFeaturePresent FlushInstructionCache InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead EncodePointer FreeEnvironmentStringsW GetEnvironmentStringsW FindFirstFileExW SetFileAttributesW GetTempFileNameW GetDiskFreeSpaceExW SetEnvironmentVariableW GetEnvironmentVariableW GetThreadContext RtlCaptureContext FormatMessageA TlsFree TlsAlloc LockFileEx IsWow64Process Wow64RevertWow64FsRedirection Wow64DisableWow64FsRedirection CompareFileTime LockResource FindResourceExW HeapSize HeapReAlloc HeapDestroy GetTickCount WaitForMultipleObjects K32GetProcessMemoryInfo Thread32Next Thread32First GetSystemTimes GetProcessHandleCount GetProcessTimes lstrlenW PostQueuedCompletionStatus lstrcpyW CreateThreadpool IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW lstrcmpA CompareStringW GetTimeFormatW WTSGetActiveConsoleSessionId GetComputerNameExW GlobalFree GlobalAlloc FileTimeToSystemTime QueryFullProcessImageNameW LocalAlloc TerminateProcess GetCurrentProcess RemoveDirectoryW GetFileTime lstrcmpiW LoadLibraryW FindResourceW SizeofResource LoadResource LoadLibraryExW FreeLibrary SetProcessShutdownParameters SetErrorMode DecodePointer GetCommandLineW GetACP GetUserDefaultUILanguage GetLocaleInfoA CreateFileA LocalFree ExitProcess OpenProcess CreateSemaphoreExW CreateMutexExW OpenSemaphoreW WaitForSingleObjectEx ReleaseSemaphore OutputDebugStringW IsDebuggerPresent FormatMessageW GetProcAddress GetModuleHandleExW GetModuleHandleW GetModuleFileNameA GetProcessHeap HeapFree HeapAlloc DebugBreak GlobalLock GlobalUnlock InitializeCriticalSectionEx RaiseException Process32NextW Process32FirstW CreateToolhelp32Snapshot GetVersionExW WideCharToMultiByte MoveFileW CopyFileW GetLocalTime GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection SetLastError WriteFile SetFilePointer GetFileSizeEx FindNextFileW FindFirstFileW FindClose CreateFileW ProcessIdToSessionId TerminateThread CreateThread Sleep CreateEventW CreateMutexW ReleaseMutex SetEvent GetOEMCP MultiByteToWideChar GetSystemDirectoryW GetDateFormatW CreateProcessW WaitForSingleObject SetNamedPipeHandleState CloseHandle GetTempPathW ReadFile GetFileAttributesW DeleteFileW GetSystemTime GetLastError GetModuleFileNameW GetTickCount64 GetCurrentProcessId LCMapStringEx CompareStringEx GetCPInfo ResetEvent UnhandledExceptionFilter GetStartupInfoW RtlUnwind SetConsoleCtrlHandler ExitThread FreeLibraryAndExitThread VirtualQuery GetDriveTypeW SystemTimeToTzSpecificLocalTime SetStdHandle GetCommandLineA GetTimeZoneInformation GetConsoleOutputCP CreateDirectoryA

user32

GetClassInfoExW wsprintfW IsRectEmpty GetUpdateRect GetKeyState IsWindowVisible UnionRect InflateRect GetLastInputInfo SendMessageTimeoutW PeekMessageW RemovePropW MapWindowPoints RegisterWindowMessageW ClientToScreen KillTimer WindowFromPoint SetTimer PostQuitMessage PostThreadMessageW GetGuiResources PtInRect SetRectEmpty FillRect DrawFocusRect GetSysColor GetCursorPos GetWindowTextLengthW EndPaint BeginPaint UpdateWindow IsWindowEnabled ReleaseCapture SetCapture GetCapture GetFocus TrackMouseEvent GetActiveWindow GetPropW ReleaseDC GetDC DrawTextW LoadIconW LoadCursorW SetCursor SetRect EqualRect wsprintfA DrawTextA CreateAcceleratorTableW InvalidateRgn GetGUIThreadInfo GetKeyboardLayout GetKeyNameTextW DestroyMenu DrawIconEx SetClipboardData ExitWindowsEx EnableMenuItem GetDlgCtrlID MessageBeep GetMonitorInfoW MonitorFromWindow MonitorFromPoint MessageBoxW SetWindowRgn IsZoomed PostMessageW GetWindowTextW EnumWindows GetClassNameW SendMessageW AttachThreadInput CallWindowProcW ShowWindow MoveWindow SetWindowPos IsIconic BringWindowToTop SetFocus EnableWindow GetForegroundWindow AppendMenuW CharNextW DefDlgProcW SetLayeredWindowAttributes GetClassInfoW EmptyClipboard TrackPopupMenu CreateCaret GetCaretBlinkTime HideCaret ShowCaret SetCaretPos GetCaretPos CopyRect UpdateLayeredWindow GetWindowRgn RegisterClassW EnumChildWindows MessageBoxA SetForegroundWindow InvalidateRect SetWindowTextW GetClientRect GetWindowRect CloseClipboard OpenClipboard DestroyWindow IsWindow CreateWindowExW RegisterClassExW ScreenToClient IntersectRect OffsetRect CreatePopupMenu MapVirtualKeyExW GetWindowLongW SetWindowLongW GetParent GetWindowThreadProcessId GetWindow SystemParametersInfoW UnregisterClassW DialogBoxParamW EndDialog GetDlgItem SetDlgItemTextW GetProcessWindowStation GetUserObjectInformationW CharPrevW SendDlgItemMessageW GetSystemMetrics LoadImageW SetPropW GetMessageW TranslateMessage DispatchMessageW DefWindowProcW

gdi32

CloseEnhMetaFile CreateEnhMetaFileW GetEnhMetaFileHeader PlayEnhMetaFile SetWindowOrgEx CreatePatternBrush CreateDIBSection GetDIBColorTable SetDIBColorTable SetViewportOrgEx CreateRectRgn PtInRegion CombineRgn SaveDC CreateRectRgnIndirect GetCharABCWidthsW GetClipBox LineTo SelectClipRgn ExtSelectClipRgn SetBkColor GetObjectA MoveToEx TextOutW GdiFlush GetTextExtentPointA GetBitmapBits SetBitmapBits RestoreDC Rectangle RemoveFontMemResourceEx AddFontMemResourceEx CreatePen CreateDIBitmap GetStockObject GetObjectW GetTextMetricsW SetStretchBltMode StretchBlt SelectObject GetTextExtentPoint32W GetDeviceCaps DeleteDC CreateFontIndirectW CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject CreateRoundRectRgn SetTextColor CreatePenIndirect CreateSolidBrush SetBkMode

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegOpenKeyExW RegEnumKeyExW RegDeleteValueW RegDeleteKeyW RegCreateKeyExW RegCloseKey LookupAccountSidW GetTokenInformation OpenProcessToken SetSecurityDescriptorDacl InitializeSecurityDescriptor SetSecurityDescriptorOwner SetKernelObjectSecurity CryptDestroyKey CryptAcquireContextW CryptEncrypt CryptDecrypt CryptCreateHash CryptDeriveKey CryptHashData CryptDestroyHash CryptReleaseContext RegUnLoadKeyA RegLoadKeyA DeregisterEventSource RegisterServiceCtrlHandlerExW UnlockServiceDatabase SetServiceStatus StartServiceCtrlDispatcherW RegisterEventSourceW ReportEventW LookupAccountNameW SetFileSecurityW SetEntriesInAclW EqualSid SetTokenInformation AllocateAndInitializeSid FreeSid CreateProcessAsUserW DuplicateTokenEx RegEnumValueW CreateServiceW QueryServiceStatus RegQueryValueExA DeleteService ControlService RegSetValueExA StartServiceW RegOpenKeyExA RegCreateKeyW ChangeServiceConfigW OpenServiceA GetUserNameW ConvertSidToStringSidW RegQueryInfoKeyW RegSetValueExW AdjustTokenPrivileges LookupPrivilegeValueW LsaFreeMemory LsaClose LsaOpenPolicy LsaQueryInformationPolicy LsaNtStatusToWinError RegQueryValueExW RegDeleteKeyExW RegFlushKey CloseServiceHandle OpenSCManagerW OpenServiceW QueryServiceStatusEx RegDeleteTreeW EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW ImpersonateLoggedOnUser RevertToSelf

shell32

ord155 ord680 ord165 DragQueryFileW Shell_NotifyIconW CommandLineToArgvW SHGetKnownFolderPath SHCreateDirectoryExW SHGetFolderPathW SHGetSpecialFolderPathW SHBrowseForFolderW SHGetPathFromIDListW SHFileOperationW SHGetSpecialFolderLocation ShellExecuteW ShellExecuteA ShellExecuteExW

ole32

ReleaseStgMedium CLSIDFromString CLSIDFromProgID OleLockRunning DoDragDrop CoTaskMemFree CoUninitialize CoCreateInstance CoTaskMemAlloc CoTaskMemRealloc OleDuplicateData CoSetProxyBlanket CoInitializeEx CoInitializeSecurity PropVariantClear CreateStreamOnHGlobal OleUninitialize OleInitialize CoInitialize

oleaut32

SysAllocString VariantClear SysFreeString VariantInit VarUI4FromStr

shlwapi

PathFileExistsA PathRemoveFileSpecW PathAppendW PathRemoveBackslashW UrlUnescapeW PathAddBackslashW PathFileExistsW PathIsRelativeW

msimg32

TransparentBlt AlphaBlend

gdiplus

GdipRotateMatrix GdipTranslateMatrix GdipGetImagePalette GdipGetImagePaletteSize GdipCreateBitmapFromScan0 GdipDeleteMatrix GdipCreateMatrix GdipAddPathArc GdipAddPathLine GdipStringFormatGetGenericTypographic GdipDeletePath GdipCreatePath GdipCloneBrush GdipDeleteBrush GdipCreateSolidFill GdipCreatePen1 GdipDeletePen GdipSetPenMode GdipLoadImageFromStream GdipLoadImageFromStreamICM GdipCreateImageAttributes GdipDisposeImageAttributes GdipSetImageAttributesColorMatrix GdipCreateFromHDC GdipReleaseDC GdipBitmapLockBits GdipBitmapUnlockBits GdipGetImagePixelFormat GdipGetImageGraphicsContext GdipCreateHBITMAPFromBitmap GdipCreateBitmapFromFile GdipGetImageHeight GdipGetImageWidth GdipDisposeImage GdipCloneImage GdipFree GdipAlloc GdiplusShutdown GdiplusStartup GdipSetSmoothingMode GdipSetTextRenderingHint GdipSetInterpolationMode GdipSetWorldTransform GdipResetWorldTransform GdipDrawRectangleI GdipDrawPath GdipFillRectangleI GdipFillPath GdipDrawImageRectRect GdipCreateFontFromDC GdipDeleteFont GdipDrawString GdipMeasureString GdipRotateWorldTransform GdipDeleteGraphics GdipTranslateWorldTransform GdipDrawImageRectI GdipGetPropertyItem GdipGetPropertyItemSize GdipImageSelectActiveFrame GdipImageGetFrameCount GdipImageGetFrameDimensionsList GdipImageGetFrameDimensionsCount GdipSetStringFormatTrimming GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipCloneStringFormat GdipDeleteStringFormat GdipDrawImageI GdipCreateFontFromLogfontA

imm32

ImmReleaseContext ImmSetCompositionWindow ImmGetContext

wldap32

ord133 ord79 ord142 ord167 ord147 ord301 ord127 ord27 ord26 ord118 ord41 ord208 ord145 ord219 ord46 ord14 ord216

crypt32

CryptUnprotectData CryptStringToBinaryA CryptQueryObject CertGetNameStringW CertOpenStore CertFindCertificateInStore CertCloseStore CryptMsgGetParam CryptMsgClose CertCreateCertificateContext CertAddCertificateContextToStore CryptStringToBinaryW CryptMsgUpdate CryptMsgOpenToDecode CertFreeCertificateContext

rpcrt4

UuidFromStringW UuidToStringW RpcStringFreeW

iphlpapi

GetBestInterface GetAdaptersInfo GetTcpTable GetNetworkParams GetAdaptersAddresses

secur32

GetUserNameExW

ntdll

NtQuerySystemInformation NtQueryObject NtSuspendProcess NtResumeProcess

mswsock

AcceptEx GetAcceptExSockaddrs

bcrypt

BCryptGenRandom

winmm

timeGetTime

wtsapi32

WTSQuerySessionInformationW WTSFreeMemory WTSEnumerateSessionsW WTSQueryUserToken

wintrust

WinVerifyTrust

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

Name

.text

Size

4.9MB

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

325KB

Virtual Size

366KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

6.4MB

Virtual Size

6.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

229KB

Virtual Size

229KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=25, id=259, version=33145,

count=222, id=261, version=33145,

count=11, id=260, productName=VS2019 v16.11.5 build 30136, version=30136,

count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=11, id=253, version=28518,

count=18, id=260, version=30034,

count=27, id=259, version=30034,

count=1, id=263, version=33145,

count=103, id=261, version=30034,

count=45, id=260, version=33145,

count=2, id=262, version=33145,

count=558, id=260, version=30147,

count=94, id=260, version=30151,

count=75, id=265, version=30159,

count=65, id=257, version=33145,

count=910, id=1, productName=Unmarked objects,

count=27, productName=Unmarked objects (old),

count=2, id=260, version=30159,

count=220, id=261, version=30159,

count=1, id=255, version=30159,

count=1, id=151,

count=1, id=258, version=30159,