payload.bin
- IMPHASH 7618a1ba42e68721c08d212c88ebf23a
- SHA256 b68b39afbb69428462b033cf7504b676c4a4c5eb8e005cc7fb0e3d1593165a98
- MD5 019d47128701b07f963aeda8ed1c1db2
- SHA1 14d8017d40a1fe389065e8618eddf8647d44d666
- SHA512 438ca704c06044787d1fecc210885af353f29f14739d100ca2e8d15b6f4d33b56edf72b9bac7ffb819e740c2befed7184a9185643f5adf07ca18a5c2eccd9669
- SSDEEP 393216:dGRwNO67gNOv5HnK+2kuKiJUmJPxsWS9aD0+xOlBqMGApP2q49erm+e9:dGRavv5HnWkuJJp9
- TLSH T15E675B03F5A548E8E4AEC17086669632BB717C69472063DB1B90F7202F7AFE05B7E714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
6
Entry point
5088
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
AdjustTokenPrivileges
AllocateAndInitializeSid
ConvertSidToStringSidW
ConvertStringSidToSidW
CopySid
FreeSid
GetUserNameW
GetLengthSid
GetSecurityInfo
GetTokenInformation
IsValidSid
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
SetEntriesInAclW
SetSecurityInfo
AdjustTokenPrivileges
AllocateAndInitializeSid
ConvertSidToStringSidW
ConvertStringSidToSidW
CopySid
FreeSid
GetUserNameW
GetLengthSid
GetSecurityInfo
GetTokenInformation
IsValidSid
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
SetEntriesInAclW
SetSecurityInfo
CloseServiceHandle
ControlService
CreateServiceW
DeleteService
LsaAddAccountRights
LsaClose
LsaOpenPolicy
OpenSCManagerW
OpenServiceW
QueryServiceConfigA
QueryServiceStatus
StartServiceW
SystemFunction036
dbghelp
SymGetOptions
SymSetOptions
MiniDumpWriteDump
kernel32
AcquireSRWLockExclusive
AcquireSRWLockShared
GetProcAddress
GetModuleHandleA
LoadLibraryExA
AreFileApisANSI
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CopyFileExW
CopyFileW
CreateFileMappingW
CreateMutexW
CreateDirectoryW
CreateProcessW
CreateFileA
CreateThread
CreateFileW
CreateHardLinkW
CreateToolhelp32Snapshot
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateWaitableTimerExW
DebugBreak
CreateSemaphoreW
DeleteCriticalSection
DeleteProcThreadAttributeList
CreateSymbolicLinkW
DuplicateHandle
EnterCriticalSection
ExitProcess
DeleteFileA
FlsAlloc
DeleteFileW
FlsFree
FlsSetValue
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
DisconnectNamedPipe
GetComputerNameExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
FindClose
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetLargePageMinimum
FindFirstFileExW
GetLastError
GetLogicalProcessorInformationEx
FindFirstFileW
GetNativeSystemInfo
FindNextFileW
GetPriorityClass
GetProcessAffinityMask
FlushFileBuffers
GetProcessHandleCount
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetComputerNameA
GetStartupInfoW
GetSystemDirectoryA
GetDiskFreeSpaceA
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetDiskFreeSpaceW
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimes
GetFileAttributesA
GetFileAttributesExW
GetThreadContext
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetThreadPriority
GetFileType
GetFinalPathNameByHandleW
GetThreadTimes
GetTickCount
GetTickCount64
GetFullPathNameA
GetFullPathNameW
GetVersionExA
GetWindowsDirectoryW
GetLogicalDrives
GetLongPathNameW
GlobalMemoryStatusEx
GetNamedPipeClientProcessId
GetNamedPipeHandleStateW
GetNamedPipeInfo
HeapAlloc
GetNamedPipeServerProcessId
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSRWLock
IsThreadAFiber
GetShortPathNameW
GetTempPathA
GetTempPathW
K32GetModuleBaseNameW
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LeaveCriticalSection
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
OutputDebugStringA
OutputDebugStringW
LockFile
Process32FirstW
MoveFileExW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseFailFastException
ReadProcessMemory
PeekNamedPipe
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
QueryDosDeviceW
ReleaseSRWLockShared
ResetEvent
ResumeThread
RtlCaptureContext
ReOpenFile
RtlLookupFunctionEntry
ReleaseSemaphore
RtlVirtualUnwind
RemoveDirectoryW
SetErrorMode
SetEvent
SetHandleInformation
SetLastError
SetEndOfFile
SetPriorityClass
SetProcessAffinityMask
SetFileAttributesW
SetFileCompletionNotificationModes
SetProcessPriorityBoost
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetThreadAffinityMask
SetThreadContext
SetNamedPipeHandleState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
UnlockFile
VirtualProtect
UnregisterWaitEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
AcquireSRWLockExclusive
AcquireSRWLockShared
GetProcAddress
GetModuleHandleA
LoadLibraryExA
AreFileApisANSI
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CopyFileExW
CopyFileW
CreateFileMappingW
CreateMutexW
CreateDirectoryW
CreateProcessW
CreateFileA
CreateThread
CreateFileW
CreateHardLinkW
CreateToolhelp32Snapshot
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateWaitableTimerExW
DebugBreak
CreateSemaphoreW
DeleteCriticalSection
DeleteProcThreadAttributeList
CreateSymbolicLinkW
DuplicateHandle
EnterCriticalSection
ExitProcess
DeleteFileA
FlsAlloc
DeleteFileW
FlsFree
FlsSetValue
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
DisconnectNamedPipe
GetComputerNameExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
FindClose
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetLargePageMinimum
FindFirstFileExW
GetLastError
GetLogicalProcessorInformationEx
FindFirstFileW
GetNativeSystemInfo
FindNextFileW
GetPriorityClass
GetProcessAffinityMask
FlushFileBuffers
GetProcessHandleCount
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetComputerNameA
GetStartupInfoW
GetSystemDirectoryA
GetDiskFreeSpaceA
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetDiskFreeSpaceW
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimes
GetFileAttributesA
GetFileAttributesExW
GetThreadContext
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetThreadPriority
GetFileType
GetFinalPathNameByHandleW
GetThreadTimes
GetTickCount
GetTickCount64
GetFullPathNameA
GetFullPathNameW
GetVersionExA
GetWindowsDirectoryW
GetLogicalDrives
GetLongPathNameW
GlobalMemoryStatusEx
GetNamedPipeClientProcessId
GetNamedPipeHandleStateW
GetNamedPipeInfo
HeapAlloc
GetNamedPipeServerProcessId
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSRWLock
IsThreadAFiber
GetShortPathNameW
GetTempPathA
GetTempPathW
K32GetModuleBaseNameW
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LeaveCriticalSection
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
OutputDebugStringA
OutputDebugStringW
LockFile
Process32FirstW
MoveFileExW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseFailFastException
ReadProcessMemory
PeekNamedPipe
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
QueryDosDeviceW
ReleaseSRWLockShared
ResetEvent
ResumeThread
RtlCaptureContext
ReOpenFile
RtlLookupFunctionEntry
ReleaseSemaphore
RtlVirtualUnwind
RemoveDirectoryW
SetErrorMode
SetEvent
SetHandleInformation
SetLastError
SetEndOfFile
SetPriorityClass
SetProcessAffinityMask
SetFileAttributesW
SetFileCompletionNotificationModes
SetProcessPriorityBoost
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetThreadAffinityMask
SetThreadContext
SetNamedPipeHandleState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
UnlockFile
VirtualProtect
UnregisterWaitEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
AcquireSRWLockExclusive
AcquireSRWLockShared
GetProcAddress
GetModuleHandleA
LoadLibraryExA
AreFileApisANSI
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CopyFileExW
CopyFileW
CreateFileMappingW
CreateMutexW
CreateDirectoryW
CreateProcessW
CreateFileA
CreateThread
CreateFileW
CreateHardLinkW
CreateToolhelp32Snapshot
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateWaitableTimerExW
DebugBreak
CreateSemaphoreW
DeleteCriticalSection
DeleteProcThreadAttributeList
CreateSymbolicLinkW
DuplicateHandle
EnterCriticalSection
ExitProcess
DeleteFileA
FlsAlloc
DeleteFileW
FlsFree
FlsSetValue
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
DisconnectNamedPipe
GetComputerNameExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
FindClose
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetLargePageMinimum
FindFirstFileExW
GetLastError
GetLogicalProcessorInformationEx
FindFirstFileW
GetNativeSystemInfo
FindNextFileW
GetPriorityClass
GetProcessAffinityMask
FlushFileBuffers
GetProcessHandleCount
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetComputerNameA
GetStartupInfoW
GetSystemDirectoryA
GetDiskFreeSpaceA
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetDiskFreeSpaceW
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimes
GetFileAttributesA
GetFileAttributesExW
GetThreadContext
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetThreadPriority
GetFileType
GetFinalPathNameByHandleW
GetThreadTimes
GetTickCount
GetTickCount64
GetFullPathNameA
GetFullPathNameW
GetVersionExA
GetWindowsDirectoryW
GetLogicalDrives
GetLongPathNameW
GlobalMemoryStatusEx
GetNamedPipeClientProcessId
GetNamedPipeHandleStateW
GetNamedPipeInfo
HeapAlloc
GetNamedPipeServerProcessId
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSRWLock
IsThreadAFiber
GetShortPathNameW
GetTempPathA
GetTempPathW
K32GetModuleBaseNameW
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LeaveCriticalSection
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
OutputDebugStringA
OutputDebugStringW
LockFile
Process32FirstW
MoveFileExW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseFailFastException
ReadProcessMemory
PeekNamedPipe
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
QueryDosDeviceW
ReleaseSRWLockShared
ResetEvent
ResumeThread
RtlCaptureContext
ReOpenFile
RtlLookupFunctionEntry
ReleaseSemaphore
RtlVirtualUnwind
RemoveDirectoryW
SetErrorMode
SetEvent
SetHandleInformation
SetLastError
SetEndOfFile
SetPriorityClass
SetProcessAffinityMask
SetFileAttributesW
SetFileCompletionNotificationModes
SetProcessPriorityBoost
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetThreadAffinityMask
SetThreadContext
SetNamedPipeHandleState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
UnlockFile
VirtualProtect
UnregisterWaitEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
AcquireSRWLockExclusive
AcquireSRWLockShared
GetProcAddress
GetModuleHandleA
LoadLibraryExA
AreFileApisANSI
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CopyFileExW
CopyFileW
CreateFileMappingW
CreateMutexW
CreateDirectoryW
CreateProcessW
CreateFileA
CreateThread
CreateFileW
CreateHardLinkW
CreateToolhelp32Snapshot
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateWaitableTimerExW
DebugBreak
CreateSemaphoreW
DeleteCriticalSection
DeleteProcThreadAttributeList
CreateSymbolicLinkW
DuplicateHandle
EnterCriticalSection
ExitProcess
DeleteFileA
FlsAlloc
DeleteFileW
FlsFree
FlsSetValue
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
DisconnectNamedPipe
GetComputerNameExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
FindClose
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetLargePageMinimum
FindFirstFileExW
GetLastError
GetLogicalProcessorInformationEx
FindFirstFileW
GetNativeSystemInfo
FindNextFileW
GetPriorityClass
GetProcessAffinityMask
FlushFileBuffers
GetProcessHandleCount
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetComputerNameA
GetStartupInfoW
GetSystemDirectoryA
GetDiskFreeSpaceA
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetDiskFreeSpaceW
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimes
GetFileAttributesA
GetFileAttributesExW
GetThreadContext
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetThreadPriority
GetFileType
GetFinalPathNameByHandleW
GetThreadTimes
GetTickCount
GetTickCount64
GetFullPathNameA
GetFullPathNameW
GetVersionExA
GetWindowsDirectoryW
GetLogicalDrives
GetLongPathNameW
GlobalMemoryStatusEx
GetNamedPipeClientProcessId
GetNamedPipeHandleStateW
GetNamedPipeInfo
HeapAlloc
GetNamedPipeServerProcessId
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSRWLock
IsThreadAFiber
GetShortPathNameW
GetTempPathA
GetTempPathW
K32GetModuleBaseNameW
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LeaveCriticalSection
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
OutputDebugStringA
OutputDebugStringW
LockFile
Process32FirstW
MoveFileExW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseFailFastException
ReadProcessMemory
PeekNamedPipe
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
QueryDosDeviceW
ReleaseSRWLockShared
ResetEvent
ResumeThread
RtlCaptureContext
ReOpenFile
RtlLookupFunctionEntry
ReleaseSemaphore
RtlVirtualUnwind
RemoveDirectoryW
SetErrorMode
SetEvent
SetHandleInformation
SetLastError
SetEndOfFile
SetPriorityClass
SetProcessAffinityMask
SetFileAttributesW
SetFileCompletionNotificationModes
SetProcessPriorityBoost
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetThreadAffinityMask
SetThreadContext
SetNamedPipeHandleState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
UnlockFile
VirtualProtect
UnregisterWaitEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
AcquireSRWLockExclusive
AcquireSRWLockShared
GetProcAddress
GetModuleHandleA
LoadLibraryExA
AreFileApisANSI
AddVectoredContinueHandler
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateEventW
CopyFileExW
CopyFileW
CreateFileMappingW
CreateMutexW
CreateDirectoryW
CreateProcessW
CreateFileA
CreateThread
CreateFileW
CreateHardLinkW
CreateToolhelp32Snapshot
CreateNamedPipeA
CreateNamedPipeW
CreatePipe
CreateWaitableTimerExW
DebugBreak
CreateSemaphoreW
DeleteCriticalSection
DeleteProcThreadAttributeList
CreateSymbolicLinkW
DuplicateHandle
EnterCriticalSection
ExitProcess
DeleteFileA
FlsAlloc
DeleteFileW
FlsFree
FlsSetValue
FlushInstructionCache
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeLibrary
DisconnectNamedPipe
GetComputerNameExW
GetCurrentProcess
GetCurrentProcessId
GetCurrentProcessorNumber
GetCurrentThread
GetCurrentThreadId
FindClose
GetErrorMode
GetExitCodeProcess
GetExitCodeThread
GetLargePageMinimum
FindFirstFileExW
GetLastError
GetLogicalProcessorInformationEx
FindFirstFileW
GetNativeSystemInfo
FindNextFileW
GetPriorityClass
GetProcessAffinityMask
FlushFileBuffers
GetProcessHandleCount
GetProcessHeap
GetProcessId
GetProcessIoCounters
GetProcessTimes
GetComputerNameA
GetStartupInfoW
GetSystemDirectoryA
GetDiskFreeSpaceA
GetSystemDirectoryW
GetSystemFirmwareTable
GetSystemInfo
GetDiskFreeSpaceW
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemTimes
GetFileAttributesA
GetFileAttributesExW
GetThreadContext
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileSize
GetFileSizeEx
GetThreadPriority
GetFileType
GetFinalPathNameByHandleW
GetThreadTimes
GetTickCount
GetTickCount64
GetFullPathNameA
GetFullPathNameW
GetVersionExA
GetWindowsDirectoryW
GetLogicalDrives
GetLongPathNameW
GlobalMemoryStatusEx
GetNamedPipeClientProcessId
GetNamedPipeHandleStateW
GetNamedPipeInfo
HeapAlloc
GetNamedPipeServerProcessId
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitOnceBeginInitialize
InitOnceComplete
InitOnceExecuteOnce
InitializeConditionVariable
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSRWLock
IsThreadAFiber
GetShortPathNameW
GetTempPathA
GetTempPathW
K32GetModuleBaseNameW
K32GetPerformanceInfo
K32GetProcessMemoryInfo
LeaveCriticalSection
LocalAlloc
LocalFree
MapViewOfFile
OpenProcess
OutputDebugStringA
OutputDebugStringW
LockFile
Process32FirstW
MoveFileExW
Process32NextW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
QueueUserWorkItem
RaiseFailFastException
ReadProcessMemory
PeekNamedPipe
RegisterWaitForSingleObject
ReleaseMutex
ReleaseSRWLockExclusive
QueryDosDeviceW
ReleaseSRWLockShared
ResetEvent
ResumeThread
RtlCaptureContext
ReOpenFile
RtlLookupFunctionEntry
ReleaseSemaphore
RtlVirtualUnwind
RemoveDirectoryW
SetErrorMode
SetEvent
SetHandleInformation
SetLastError
SetEndOfFile
SetPriorityClass
SetProcessAffinityMask
SetFileAttributesW
SetFileCompletionNotificationModes
SetProcessPriorityBoost
SetFileInformationByHandle
SetFilePointer
SetFilePointerEx
SetFileTime
SetThreadAffinityMask
SetThreadContext
SetNamedPipeHandleState
SetThreadPriority
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableCS
SleepConditionVariableSRW
SleepEx
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
TryEnterCriticalSection
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualAlloc
VirtualFree
UnlockFile
VirtualProtect
UnregisterWaitEx
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WakeAllConditionVariable
WakeConditionVariable
AssignProcessToJobObject
CancelIo
CancelIoEx
CancelSynchronousIo
CompareStringOrdinal
ConnectNamedPipe
CreateIoCompletionPort
CreateJobObjectW
CreateSemaphoreA
DeviceIoControl
ExpandEnvironmentStringsW
FileTimeToSystemTime
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FreeConsole
FreeEnvironmentStringsW
GetCommandLineW
GetConsoleCursorInfo
GetConsoleMode
GetConsoleScreenBufferInfo
GetConsoleTitleW
GetConsoleWindow
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
GetHandleInformation
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleExW
GetModuleHandleW
GetNumberOfConsoleInputEvents
GetOverlappedResult
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemTimeAdjustment
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessInJob
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LockFileEx
MultiByteToWideChar
NeedCurrentDirectoryForExePathW
PostQueuedCompletionStatus
QueryInformationJobObject
RaiseException
ReadConsoleInputW
ReadConsoleW
ReadDirectoryChangesW
ReadFile
ReadFileEx
RemoveVectoredExceptionHandler
RtlUnwindEx
SetConsoleCtrlHandler
SetConsoleCursorInfo
SetConsoleCursorPosition
SetConsoleMode
SetConsoleTextAttribute
SetConsoleTitleA
SetConsoleTitleW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetInformationJobObject
SetStdHandle
SetSystemTime
SystemTimeToFileTime
TerminateJobObject
UnlockFileEx
WerGetFlags
WerSetFlags
WideCharToMultiByte
WriteConsoleInputW
WriteConsoleW
WriteFile
WriteFileEx
__C_specific_handler
lstrlenW
ntdll
NtQueryInformationProcess
RtlGetVersion
RtlNtStatusToDosError
NtCancelIoFileEx
NtCreateFile
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtOpenFile
NtReadFile
NtSetInformationFile
NtWriteFile
ole32
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
pdh
PdhAddEnglishCounterW
PdhCloseQuery
PdhCollectQueryData
PdhCollectQueryDataEx
PdhEnumObjectsW
PdhGetFormattedCounterValue
PdhOpenQueryW
PdhRemoveCounter
powrprof
CallNtPowerInformation
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
shell32
CommandLineToArgvW
SHGetKnownFolderPath
userenv
GetUserProfileDirectoryW
bcrypt
BCryptGenRandom
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
PatBlt
SelectObject
iphlpapi
ConvertInterfaceIndexToLuid
ConvertInterfaceLuidToNameW
GetAdaptersAddresses
msvcrt
___lc_codepage_func
___mb_cur_max_func
__argv
__doserrno
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_beginthreadex
_cexit
_close
_commode
_endthreadex
_errno
_filelengthi64
_fileno
_findclose
_findfirst64
_findnext64
_fmode
_fstat64
_fullpath
_get_osfhandle
_initterm
_isatty
_localtime64
_lock
_lseeki64
_onexit
_open
_open_osfhandle
_read
_setjmp
_snwprintf
_snwprintf_s
_stat64
_strdup
_stricmp
_strnicmp
_ultoa
_umask
_unlock
_vscprintf
_vsnprintf
_wchmod
_wcsdup
_wcsnicmp
_wcsrev
_wfopen
_wopen
_write
abort
atof
atoi
calloc
clock
exit
fclose
ferror
fflush
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
fseek
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
isxdigit
localeconv
longjmp
malloc
memchr
memcmp
memcpy
memmove
memset
printf
putc
putwc
qsort
rand
realloc
setlocale
setvbuf
signal
srand
strchr
strcmp
strcoll
strcpy
strcspn
strerror
strftime
strlen
strncmp
strncpy
strrchr
strspn
strstr
strtol
strtoul
strxfrm
tolower
toupper
towlower
towupper
ungetc
ungetwc
vfprintf
wcschr
wcscoll
wcscpy
wcsftime
wcslen
wcsncmp
wcsncpy
wcspbrk
wcsrchr
wcstombs
wcsxfrm
_strtoui64
_strtoi64
_write
_strdup
_read
_fileno
_fdopen
user32
BringWindowToTop
ChildWindowFromPoint
CloseDesktop
CreateDesktopW
DispatchMessageW
EnumDesktopWindows
GetClassNameW
GetDC
GetDesktopWindow
GetLastInputInfo
GetMessageW
GetParent
GetSystemMetrics
GetThreadDesktop
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
IsHungAppWindow
IsWindowVisible
MapVirtualKeyW
MenuItemFromPoint
MoveWindow
PhysicalToLogicalPoint
PostMessageW
PrintWindow
ReleaseDC
ScreenToClient
SendMessageW
SetForegroundWindow
SetProcessDPIAware
SetThreadDesktop
ShowWindow
TranslateMessage
WindowFromPhysicalPoint
WindowFromPoint
ws2_32
FreeAddrInfoW
GetAddrInfoW
WSADuplicateSocketW
WSAGetLastError
WSAGetOverlappedResult
WSAIoctl
WSAPoll
WSARecv
WSARecvFrom
WSASend
WSASendMsg
WSASendTo
WSASetLastError
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
gethostname
getpeername
getsockname
getsockopt
htonl
htons
ioctlsocket
listen
recv
recvfrom
select
send
sendto
setsockopt
shutdown
socket
SnowflakeBeginSqsAttempt
SnowflakeClose
SnowflakeDial
SnowflakeRead
SnowflakeRetireAttempt
SnowflakeSqsFailedEpoch
SnowflakeWrite
Name
.text
Size
18.4MB
Virtual Size
18.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
817KB
Virtual Size
816KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
10.5MB
Virtual Size
10.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
695KB
Virtual Size
694KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
598KB
Virtual Size
598KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
35.4MB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
250B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
22KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.CRT
Size
512B
Virtual Size
120B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
220KB
Virtual Size
220KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ