fda6d7887fccb176608e258dea77f0dd1949c015ef85b217eb6d9892a7daac27
- SHA256 fda6d7887fccb176608e258dea77f0dd1949c015ef85b217eb6d9892a7daac27
Static task
static1
Behavioral task
behavioral1
Sample
core/m2hm04.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
core/m2hm04.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target fda6d7887fccb176608e258dea77f0dd1949c015ef85b217eb6d9892a7daac27
- Size 15.4MB
- Sample261027-e5x22sys7n
- SHA256 fda6d7887fccb176608e258dea77f0dd1949c015ef85b217eb6d9892a7daac27
- MD5 cd75ed235fda9a05092a4878ee68831c
- SHA1 46e3232dfc122512400c9ce20075781c1f7c3565
- SHA512 37ea9bde2ae4ba5b97802430c83bc6286eb6894714d6a015f591cdd3df0c105ca7229627e10da8a69940a453ef692ace0a968f05ea10e3eb0e97cd7230d43803
- SSDEEP 393216:+lntGKd3RgD5xzYNadKGGyLoO1oRXlRlpwR/7wp4meY4sxsYS:+OW3RgD5xgadHGyLhiRVRlmRT5mrg
- TLSH T16BF6336C316FD065B724AC7888A5764F8B0438EB1FC1E9B5D7189F5EBE2108C5DE22C9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
fda6d7887fccb176608e258dea77f0dd1949c015ef85b217eb6d9892a7daac27.zip 15.4MB
-
core/m2hm04.dll.exe 15.5MB
core/m2hm04.dll
- IMPHASH 97e8034a9baee1956883079d895f24e2
- SHA256 87baae8aa40089b8ddfe2edc74c97e99c0e520fe08a916ad0807783dbf737eb6
- MD5 328c5d7b9283796c11f8416cae6845dc
- SHA1 0e830f257ccd3bb36098f39b2a3971be843c1be0
- SHA512 ddffdfed130af2bf187443e1b8528527d08182aa36c2998216362913ecfb99d87ac02f72c66240a6fc4fadd42a237ffdb6c2f8c72e01eb8435acc110d89208bd
- SSDEEP 393216:lztHmspxHs7CaotwA6yhIHz/shq0MS8qBo4W:l8exHs7Caott6yqHbz05A
- TLSH T147F6331E299FC4A9DEC05874C727B6CB33F21DEA0D924C376488618EB873A5D61761CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
93:81:19:8e:ec:df:46:ba:7e:a2:a2:66:dd:f2:43:47:c1:62:17:e6:a9:4e:48:c4:99:68:57:98:3b:fd:be:84
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN
Chains
Oct 27, 2026
CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=Guangdong Li Wei Network Technology Co.ltd.,O=Guangdong Li Wei Network Technology Co.ltd.,L=Guangzhou,ST=Guangdong Province,C=CN
Serial Number
0f:fa:21:11:1f:dc:64:83:52:e6:a9:ff:2d:3b:40:12
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Nov 11, 2025 - Nov 10, 2026
Subject
CN=Globalsign R45 TSA for CodeSign 202510,O=GlobalSign nv-sa,C=BE
Serial Number
84:72:3f:c1:95:cc:16:f1:db:2b:a2:f6:60:df:2b:e4
Issuer
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Oct 15, 2025 - Jan 10, 2037
Subject
CN=GlobalSign Offline R45 Timestamping CA 2025,O=GlobalSign nv-sa,C=BE
Serial Number
83:da:86:37:b7:9f:0c:84:0c:94:7b:84:0a:52:78:1f
Issuer
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jul 16, 2025 - Jul 16, 2041
Subject
CN=GlobalSign Timestamping Root R45,O=GlobalSign nv-sa,C=BE
Serial Number
78:4a:aa:81:73:66:9c:90:09:54:e4:21:c9:47:eb:c0
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Dec 9, 2020 - Dec 10, 2034
Subject
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Serial Number
45:e6:bb:03:83:33:c3:85:65:48:e6:ff:45:51
Issuer
CN=GlobalSign,OU=GlobalSign Root CA - R6,O=GlobalSign
Key Usages
KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Dec 10, 2014 - Dec 10, 2034
Minor OS version
0
Major OS version
6
Entry point
54555505
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB paths
D:\newyunxiao\hm04_client\m2hm04_win_cmake2_release\workspace\svn_dir\build-cmake-win32\MinSizeRel\ClientLoader.pdb
openal32
alcCloseDevice
alGetEnumValue
alcMakeContextCurrent
alcOpenDevice
alcDestroyContext
alGenSources
alBufferData
alDeleteBuffers
alGenBuffers
alGetError
alSourcePause
alSourceStop
alSourcePlay
alGetSourcei
alSourcei
alSourcef
alDeleteSources
alcCreateContext
glint
ord101
ord100
ord102
ord7
ord23
ord9
ord24
ord12
ord8
ord1
ord34
ord3
ord25
ord5
ord32
ord4
ord22
ord14
glimpl
ord33
ord31
ord40
ord44
ord52
ord53
ord64
ord131
ord208
ord303
ord305
ord314
ord36
ord50
ord10
ord12
ord20
ord210
ord269
ord13
ord14
ord15
ord16
ord17
ord19
ord28
ord42
ord47
ord48
ord49
ord89
ord92
ord93
ord97
ord100
ord102
ord104
ord142
ord196
ord203
ord279
ord319
ord321
ord6
ord22
ord23
ord25
ord51
ord95
ord111
ord180
ord194
ord204
ord206
ord320
ord101
ord103
ord105
ord115
ord276
ord277
ord70
ord188
ord190
ord191
ord193
ord8
ord83
ord39
ord43
ord61
ord46
ord187
ord192
ord255
ord315
ord317
ord62
ord72
ord54
ord91
ord106
ord109
ord41
ord141
ord37
ord29
ord209
ord2
ord3
ord21
ord26
ord27
ord34
ord55
ord56
ord58
ord65
ord66
ord68
ord69
ord71
ord77
ord90
ord99
ord112
ord113
ord114
ord116
ord117
ord118
ord119
ord120
ord121
ord122
ord123
ord124
ord125
ord126
ord127
ord128
ord129
ord130
ord1
ord4
ord5
ord7
ord32
ord30
gpdl_x32
ZmdlApi_GetVersion
ZmdlApi_ShareFile
ZmdlApi_CancelCheckHash
ZmdlApi_SetExtInfo
ZmdlApi_SetNetState
ZmdlApi_StartDownload
ZmdlApi_NotifyTaskResult
ZmdlApi_CancelDownload
ZmdlApi_UnInit
ZmdlApi_StartCheckHash
ZmdlApi_Init
libcurl
curl_easy_strerror
curl_easy_init
curl_easy_setopt
curl_slist_free_all
curl_easy_cleanup
curl_easy_getinfo
curl_global_init
curl_easy_pause
curl_easy_perform
curl_formfree
curl_slist_append
curl_formadd
libcrypto-1_1
EVP_MD_CTX_new
RSA_free
RSA_private_decrypt
RSA_public_decrypt
RSA_private_encrypt
RSA_public_encrypt
RSA_size
BIO_new_mem_buf
BIO_ctrl
BIO_free
ERR_error_string_n
ERR_get_error
EVP_aes_256_ctr
EVP_aes_192_gcm
EVP_aes_192_ctr
EVP_aes_128_gcm
EVP_DigestUpdate
EVP_aes_256_gcm
EVP_CIPHER_CTX_ctrl
EVP_CIPHER_CTX_free
EVP_CIPHER_CTX_new
EVP_DecryptFinal_ex
EVP_DecryptUpdate
EVP_DecryptInit_ex
EVP_EncryptFinal_ex
EVP_EncryptUpdate
EVP_EncryptInit_ex
EVP_CIPHER_block_size
SHA256_Init
EVP_DigestSignInit
EVP_DigestSignFinal
EVP_DigestVerifyInit
SHA256_Update
EVP_sha1
EVP_aes_128_cbc
EVP_CipherFinal
EVP_CipherUpdate
EVP_CipherInit
EVP_MD_CTX_free
SHA256_Final
EVP_sha256
EVP_sha384
EVP_sha512
EVP_PKEY_set1_RSA
EVP_PKEY_new
EVP_PKEY_free
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_RSA_PUBKEY
EVP_aes_128_ctr
PKCS5_PBKDF2_HMAC_SHA1
EVP_DigestVerifyFinal
EVP_sha224
ws2_32
getservbyname
getservbyport
gethostbyname
gethostbyaddr
socket
shutdown
setsockopt
sendto
recvfrom
ntohs
ntohl
listen
inet_ntoa
inet_addr
htons
htonl
getsockopt
getsockname
getpeername
connect
bind
WSAGetLastError
WSAAddressToStringW
WSAAddressToStringA
gethostname
WSACleanup
send
select
recv
getprotobyname
WSASetLastError
WSAEnumProtocolsW
getaddrinfo
freeaddrinfo
getnameinfo
WSAPoll
inet_pton
WSAIoctl
WSAStartup
inet_ntop
ioctlsocket
closesocket
accept
__WSAFDIsSet
opengl32
wglMakeCurrent
winmm
waveInGetNumDevs
timeEndPeriod
timeGetDevCaps
waveInClose
timeBeginPeriod
waveInOpen
waveOutGetNumDevs
mciSendCommandW
waveInPrepareHeader
waveInUnprepareHeader
waveInAddBuffer
waveInStart
timeGetTime
waveInStop
hid
HidP_GetCaps
HidP_GetButtonCaps
HidP_GetValueCaps
HidP_GetUsages
HidP_GetUsageValue
HidD_GetProductString
setupapi
SetupDiGetDevicePropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
kernel32
CreateProcessA
OpenProcess
GetModuleFileNameA
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetCommandLineA
GetTickCount
ReleaseMutex
CreateMutexA
GetCurrentThreadId
GetVersionExW
MapViewOfFile
UnmapViewOfFile
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryW
LocalFree
lstrcpynA
CreateFileMappingA
OutputDebugStringW
MultiByteToWideChar
VerSetConditionMask
GetCurrentDirectoryW
CreateFileW
QueryPerformanceCounter
QueryPerformanceFrequency
DeviceIoControl
GetProcessTimes
GetCurrentProcessId
CreateThread
GetCurrentThread
OpenThread
SleepConditionVariableSRW
SuspendThread
ResumeThread
GetSystemTimes
GlobalMemoryStatusEx
GetSystemInfo
GetLocalTime
GetVersionExA
GetNativeSystemInfo
ReadProcessMemory
GetModuleHandleW
GlobalUnlock
GlobalLock
GetProcessIoCounters
lstrcpyW
GetComputerNameW
VerifyVersionInfoW
GetSystemPowerStatus
GetLocaleInfoW
GetUserDefaultLCID
GetUserDefaultLocaleName
Thread32First
Thread32Next
FindClose
RaiseException
Sleep
GetUserDefaultUILanguage
RtlCaptureContext
IsDebuggerPresent
SetUnhandledExceptionFilter
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
CreateEventW
OpenEventW
CreateProcessW
OutputDebugStringA
FindFirstFileA
FindNextFileA
GetFileTime
LocalFileTimeToFileTime
SetFileTime
DosDateTimeToFileTime
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetModuleFileNameW
LocalAlloc
FileTimeToSystemTime
SetPriorityClass
LoadLibraryExW
GetEnvironmentVariableA
GetEnvironmentVariableW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
CreateDirectoryA
CreateDirectoryW
CreateFileA
GetExitCodeThread
DeleteFileW
FindFirstFileW
FindFirstFileExA
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExA
GetDiskFreeSpaceExW
GetFileAttributesA
WaitForSingleObject
GetFileAttributesExA
GetFileAttributesExW
GetFullPathNameW
GetFullPathNameA
RemoveDirectoryA
RemoveDirectoryW
SetFileAttributesA
SetFileAttributesW
CreateMutexW
CreateEventA
CreateFileMappingW
OpenFileMappingW
LoadLibraryExA
LoadLibraryA
OpenFileMappingA
GlobalAddAtomA
MoveFileA
MoveFileW
SetConsoleTitleA
SetConsoleTitleW
ExitProcess
GlobalAlloc
GlobalFree
VirtualAlloc
VirtualFree
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
GetStartupInfoW
GetModuleHandleExW
SetLastError
GetThreadContext
WriteFile
DuplicateHandle
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
SetEvent
ResetEvent
WaitForMultipleObjects
ReleaseSemaphore
CreateSemaphoreW
TerminateThread
GetProcessId
GetDriveTypeA
GetLogicalDrives
GetLogicalDriveStringsW
DecodePointer
InitializeCriticalSectionEx
GetLogicalDriveStringsA
K32GetProcessMemoryInfo
GetFileSize
SetEndOfFile
SetFilePointer
MapViewOfFileEx
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
IsBadStringPtrA
IsBadStringPtrW
FormatMessageW
GetLargePageMinimum
GetFileSizeEx
ReadFile
CreateSemaphoreA
FormatMessageA
GetConsoleCP
GetConsoleOutputCP
GetFileInformationByHandle
SetConsoleCtrlHandler
GetLocaleInfoEx
HeapFree
GetProcessHeap
IsDBCSLeadByte
GetModuleHandleExA
SetErrorMode
GetFileType
CreatePipe
GetExitCodeProcess
GetSystemTime
GetVersion
SystemTimeToFileTime
GenerateConsoleCtrlEvent
GetACP
GetLocaleInfoA
FlushViewOfFile
ExpandEnvironmentStringsW
GetStdHandle
HeapReAlloc
HeapSize
SetThreadAffinityMask
GetStringTypeW
InitializeConditionVariable
TryAcquireSRWLockExclusive
CreateThreadpoolWork
SubmitThreadpoolWork
WaitForThreadpoolWorkCallbacks
CloseThreadpoolWork
GetSystemTimeAsFileTime
SleepConditionVariableCS
CloseHandle
WideCharToMultiByte
VirtualQueryEx
GetCurrentProcess
WaitForSingleObjectEx
TryEnterCriticalSection
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
TerminateProcess
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
ExitThread
FreeLibraryAndExitThread
GetTimeZoneInformation
GetDriveTypeW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
GetTempPathW
WriteConsoleW
SetFilePointerEx
VirtualProtect
VirtualQuery
SetStdHandle
FlushFileBuffers
LockFileEx
UnlockFileEx
HeapCompact
TzSpecificLocalTimeToSystemTime
WakeConditionVariable
GetFileAttributesW
DeleteFileA
WakeAllConditionVariable
GetConsoleMode
ReadConsoleW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
SetThreadPriority
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
PeekConsoleInputA
GetCommandLineW
GetLastError
HeapAlloc
user32
GetPriorityClipboardFormat
IsWindowVisible
SetCapture
ReleaseCapture
InvalidateRect
CreateIconFromResource
SystemParametersInfoW
IsClipboardFormatAvailable
CharPrevA
IsWindowEnabled
GetKeyboardState
GetFocus
TrackMouseEvent
TranslateMessage
DispatchMessageW
PeekMessageW
EmptyClipboard
EnumClipboardFormats
SetClipboardData
GetKeyboardLayout
UnregisterHotKey
RegisterHotKey
LoadIconW
LoadIconA
MessageBoxW
GetMessageTime
MessageBoxA
GetWindowTextW
GetWindowTextA
SetWindowTextA
RegisterClipboardFormatW
SetDlgItemTextW
SetDlgItemTextA
CharUpperBuffA
OffsetRect
GetDesktopWindow
GetRawInputDeviceInfoW
GetRawInputData
LoadImageW
DestroyCursor
LoadCursorW
GetWindow
GetWindowLongW
PtInRect
WindowFromPoint
ClientToScreen
GetCursorPos
SetCursor
DestroyIcon
GetWindowRect
GetClientRect
SetWindowTextW
ReleaseDC
GetDC
SetActiveWindow
MapVirtualKeyW
GetAsyncKeyState
GetKeyState
GetActiveWindow
SetFocus
IsZoomed
SetWindowPos
ShowWindow
CreateWindowExW
UnregisterDeviceNotification
UnhookWindowsHookEx
UnregisterClassW
EnumDisplayDevicesW
RegisterClassW
RegisterClassExW
MoveWindow
SetWindowsHookExW
EnumWindows
FindWindowExW
FindWindowW
GetForegroundWindow
GetClipboardData
CloseClipboard
OpenClipboard
BringWindowToTop
SetForegroundWindow
wsprintfW
SendMessageW
GetWindowThreadProcessId
SetWindowLongA
GetWindowLongA
EndPaint
BeginPaint
DestroyWindow
IsWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcW
PostMessageW
SetPropW
GetPropW
EnumDisplaySettingsExW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
RegisterDeviceNotificationW
GetRawInputDeviceList
PostMessageA
KillTimer
SetTimer
PostQuitMessage
GetSystemMetrics
SetWindowLongW
ClipCursor
RemovePropW
ScreenToClient
EnableWindow
SetCursorPos
CallWindowProcW
FlashWindow
GetParent
SetParent
GetAncestor
AdjustWindowRectEx
GetMessageW
DrawTextW
gdi32
RemoveFontResourceExW
AddFontMemResourceEx
RemoveFontMemResourceEx
SelectObject
SetBkMode
SetTextColor
GetObjectW
SetDIBitsToDevice
CreateFontW
SetDeviceGammaRamp
CreateDCW
DescribePixelFormat
GetObjectA
CreateDIBSection
SelectPalette
RealizePalette
CreateDCA
CreateCompatibleBitmap
BitBlt
GetTextMetricsW
CreateSolidBrush
SetBkColor
SwapBuffers
SetPixelFormat
ChoosePixelFormat
AddFontResourceExW
GetStockObject
GetDIBits
DeleteObject
DeleteDC
CreateFontIndirectW
CreateCompatibleDC
CreateBitmap
GetDeviceCaps
GetGlyphOutlineW
shell32
DragAcceptFiles
DragQueryPoint
ShellExecuteA
ExtractIconW
DragQueryFileW
SHChangeNotify
DragQueryFileA
DragFinish
ShellExecuteW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
Shell_NotifyIconA
Shell_NotifyIconW
ole32
CoCreateInstance
CoSetProxyBlanket
CoInitializeSecurity
CoUninitialize
CoInitialize
PropVariantClear
CoTaskMemFree
ProgIDFromCLSID
oleaut32
SysAllocStringLen
VariantInit
SysAllocStringByteLen
SysStringLen
VariantClear
GetErrorInfo
SysFreeString
SysAllocString
comdlg32
GetSaveFileNameW
GetOpenFileNameW
advapi32
RegQueryValueExW
RegConnectRegistryA
CryptReleaseContext
RegQueryValueExA
RegQueryInfoKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
AllocateAndInitializeSid
GetUserNameW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegQueryInfoKeyW
RegOpenKeyExA
CryptGenRandom
CryptAcquireContextW
RegSetValueExA
RegSetValueA
RegSaveKeyA
RegQueryValueA
RegLoadKeyA
RegFlushKey
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegEnumValueA
RegEnumKeyExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
iphlpapi
GetBestInterface
GetAdaptersInfo
GetAdaptersAddresses
psapi
GetProcessMemoryInfo
wininet
InternetGetConnectedState
imm32
ImmAssociateContext
ImmGetCandidateListW
ImmSetCompositionFontW
ImmGetCompositionWindow
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
wtsapi32
WTSUnRegisterSessionNotification
WTSRegisterSessionNotification
dbghelp
MiniDumpWriteDump
crypt32
CryptUnprotectData
CryptProtectData
version
GetFileVersionInfoW
GetFileVersionInfoA
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
VerQueryValueA
VerQueryValueW
msacm32
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamSize
acmStreamOpen
acmFormatSuggest
powrprof
PowerReadDCValue
PowerSetActiveScheme
PowerWriteDCValueIndex
PowerGetActiveScheme
PowerEnumerate
PowerWriteACValueIndex
PowerReadACValue
imshareutil
ord19
ord18
ord17
ord16
ord15
ord14
ord13
ord12
ord11
ord10
ord9
ord8
ord7
ord6
ord24
ord5
ord4
ord20
ord2
ord50
ord1
ord40
ord41
ord42
ord43
ord44
ord45
ord46
ord47
ord21
ord25
ord26
ord27
ord28
ord29
ord30
ord31
ord22
ord3
ord23
ord32
ord33
ord34
ord35
ord36
ord37
ord38
ord49
ord39
AccessDelay
AccessDestroy
AccessRequest
AccessResponse
AmdPowerXpressRequestHighPerformance
EchoControl
EchoRealServerControl
GetAddress
GetDGWVersion
GetDelay
GetParam
GetStatus
GetTargetServers
HttpSend
InitUdp
NvOptimusEnablement
SetLogInfo
SetStatus
SetSwitchDataChannelCallback
StartEcho
StartUdp
StopEcho
StopUdp
SwitchControl
SwitchDataChannel
UdpRecvFrom
UdpSendTo
UnInitUDP
Update
Name
.text
Size
Virtual Size
19.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
13.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fP`
Size
Virtual Size
4.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.]|!
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.EHT
Size
15.4MB
Virtual Size
15.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
145KB
Virtual Size
144KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=65, id=259, version=27412,
count=257, id=261, version=27412,
count=24, id=253, version=28518,
count=21, id=260, version=30034,
count=29, id=259, version=30034,
count=118, id=261, version=30034,
count=1, id=263, version=27412,
count=54, id=260, version=27412,
count=5, id=262, version=27412,
count=46, id=257, version=27412,
count=13, id=261, version=27031,
count=2, id=221, productName=VS2013 UPD4 build 31101, version=31101,
count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,
count=8, id=257, version=30143,
count=2, id=203, productName=VS2012 UPD4 build 61030, version=61030,
count=24, id=206, version=61219,
count=23, id=261, productName=VS2019 v16.11.1 build 30133, version=30133,
count=43, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=92, id=260, productName=VS2019 v16.11.1 build 30133, version=30133,
count=3, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,
count=963, id=1, productName=Unmarked objects,
count=363, id=260, version=30143,
count=1271, id=261, version=30143,
count=1, id=256, version=30143,
count=1, id=255, version=30143,
count=1, id=151,
count=1, id=258, version=30143,