2026-11-12_492cfe5be3fdf6b38c6eda1158862b98_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-12_492cfe5be3fdf6b38c6eda1158862b98_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc
Size 15.1MB
Sample261113-efd8msfy6k
SHA256 6d835f09b873ddcf549d9788aee92250a37f6fdf2b9e7e78f05f763cce4c7e63
MD5 492cfe5be3fdf6b38c6eda1158862b98
SHA1 0d46d85812d8d9f24dfd112e1893f99678d49b36
SHA512 863e1bde45fb90f5213dc2be25ef19f1254f09c85e8830521ce7e563c2228125e11e05cee10ef6497bab6118325bee8506ec19807ef3fae3057bd45d32f38f4e
SSDEEP 196608:vND4JBFcFWCbw57SBTfgsQfnbuMmZe/8oIjP8vEITfao:vND4JlgBTfgsQfnsA8jjeTfao
TLSH
T107F6AF7AA2F800D8D4BAC1BCC7569523E7B17499137067EB16A086B61F27AF05F3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

2026-11-12_492cfe5be3fdf6b38c6eda1158862b98_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

.exe 15.1MB

2026-11-12_492cfe5be3fdf6b38c6eda1158862b98_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

IMPHASH 627b451422a55e170c67dbcf90152066
SHA256 6d835f09b873ddcf549d9788aee92250a37f6fdf2b9e7e78f05f763cce4c7e63
MD5 492cfe5be3fdf6b38c6eda1158862b98
SHA1 0d46d85812d8d9f24dfd112e1893f99678d49b36
SHA512 863e1bde45fb90f5213dc2be25ef19f1254f09c85e8830521ce7e563c2228125e11e05cee10ef6497bab6118325bee8506ec19807ef3fae3057bd45d32f38f4e
SSDEEP 196608:vND4JBFcFWCbw57SBTfgsQfnbuMmZe/8oIjP8vEITfao:vND4JlgBTfgsQfnsA8jjeTfao
TLSH
T107F6AF7AA2F800D8D4BAC1BCC7569523E7B17499137067EB16A086B61F27AF05F3E701
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

e7:70:02:e1:cc:d5:2a:51:7e:2b:11:bc:9c:bc:60:77:2a:b6:21:88:3b:7e:2c:d8:88:55:0e:f4:61:3e:3e:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=D03752763,CN=Epic Games Inc.,O=Epic Games Inc.,L=Cary,ST=North Carolina,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084d6172796c616e64,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Nov 8, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Digest

e7:70:02:e1:cc:d5:2a:51:7e:2b:11:bc:9c:bc:60:77:2a:b6:21:88:3b:7e:2c:d8:88:55:0e:f4:61:3e:3e:8a

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

Chains

Jun 12, 2026

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

09:8c:93:39:b5:1a:60:b6:d5:2f:36:b7:0b:5f:aa:a7

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Feb 2, 2026 - Feb 1, 2029

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US

Serial Number

0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Jun 4, 2025 - Sep 3, 2036

Subject

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Serial Number

0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

May 7, 2025 - Jan 14, 2038

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Subject

CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US

Serial Number

08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35

Issuer

CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Aug 5, 2026 - Nov 4, 2037

Minor OS version

Major OS version

Entry point

10508776

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

zenserver.pdb

user32

GetShellWindow MessageBoxW GetUserObjectInformationW GetWindowThreadProcessId GetProcessWindowStation

iphlpapi

if_nametoindex FreeMibTable GetIfTable2 GetExtendedUdpTable GetExtendedTcpTable GetAdaptersAddresses

advapi32

RegSetKeyValueW LookupPrivilegeValueW SystemFunction036 BuildExplicitAccessWithNameW ConvertStringSecurityDescriptorToSecurityDescriptorW BuildSecurityDescriptorW RegGetValueA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken GetUserNameA RegCloseKey RegOpenKeyExW InitializeSecurityDescriptor SetSecurityDescriptorDacl OpenServiceW DeleteService OpenSCManagerW CloseServiceHandle CreateServiceW StartServiceCtrlDispatcherW RegisterServiceCtrlHandlerW SetServiceStatus CryptReleaseContext CryptGetHashParam CryptDestroyHash CryptHashData CryptCreateHash CryptAcquireContextA DeregisterEventSource RegisterEventSourceW ReportEventW CryptAcquireContextW CryptGenRandom CryptDestroyKey CryptSetHashParam CryptGetProvParam CryptGetUserKey CryptExportKey CryptDecrypt CryptSignHashW CryptEnumProvidersW RegQueryValueExW

dbghelp

StackWalk64 SymFromAddr SymCleanup SymInitializeW SymFromAddrW SymFunctionTableAccess64 SymGetModuleBase64 SymGetOptions SymSetOptions SymInitialize

shell32

CommandLineToArgvW ShellExecuteExW ord680 SHGetKnownFolderPath

crypt32

CertGetIntendedKeyUsage CertOpenSystemStoreA CertEnumCertificatesInStore CertCloseStore CertOpenStore CertFindCertificateInStore CertDuplicateCertificateContext CertGetCertificateContextProperty CertOpenSystemStoreW CertGetEnhancedKeyUsage CertFreeCertificateContext

ws2_32

WSAResetEvent send WSAWaitForMultipleEvents WSAEnumNetworkEvents socket gethostname getnameinfo __WSAFDIsSet accept bind WSAIoctl ntohl shutdown inet_ntop getservbyname getservbyport gethostbyname gethostbyaddr inet_ntoa inet_addr WSASocketA recvfrom WSAEventSelect sendto recv WSACloseEvent WSACreateEvent listen WSAStringToAddressW getpeername getsockname ntohs WSAAddressToStringW WSARecv htonl htons closesocket WSASend select WSASetLastError WSASocketW getaddrinfo connect getsockopt ioctlsocket setsockopt WSAGetLastError WSACleanup WSAStartup freeaddrinfo

bcrypt

BCryptOpenAlgorithmProvider BCryptFinishHash BCryptCloseAlgorithmProvider BCryptDestroyHash BCryptHashData BCryptCreateHash BCryptEncrypt BCryptDestroyKey BCryptDecrypt BCryptSetProperty BCryptGenerateSymmetricKey BCryptGenRandom BCryptGetProperty

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpQueryHeaders WinHttpOpenRequest WinHttpCloseHandle WinHttpSendRequest WinHttpSetCredentials WinHttpConnect WinHttpCrackUrl

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

mswsock

TransmitFile GetAcceptExSockaddrs AcceptEx

httpapi

HttpCloseServerSession HttpSetRequestQueueProperty HttpSendResponseEntityBody HttpSetServiceConfiguration HttpCloseRequestQueue HttpTerminate HttpReceiveHttpRequest HttpSetUrlGroupProperty HttpCreateServerSession HttpCancelHttpRequest HttpAddUrlToUrlGroup HttpCloseUrlGroup HttpRemoveUrlFromUrlGroup HttpCreateUrlGroup HttpDeleteServiceConfiguration HttpInitialize HttpReceiveRequestEntityBody HttpCreateRequestQueue HttpSendHttpResponse

ole32

CoTaskMemFree

pdh

PdhGetFormattedCounterValue PdhAddEnglishCounterW PdhOpenQueryW PdhCloseQuery PdhCollectQueryData

api-ms-win-core-synch-l1-1-0

SetWaitableTimer InitializeCriticalSectionEx WaitForSingleObjectEx SetEvent LeaveCriticalSection InitializeSRWLock ReleaseSRWLockShared EnterCriticalSection SleepEx AcquireSRWLockShared ReleaseSRWLockExclusive TryAcquireSRWLockShared ResetEvent TryAcquireSRWLockExclusive CreateMutexA CreateEventW AcquireSRWLockExclusive OpenEventW CreateEventA ReleaseSemaphore InitializeCriticalSection WaitForSingleObject InitializeCriticalSectionAndSpinCount DeleteCriticalSection

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW WaitForMultipleObjects

api-ms-win-core-io-l1-1-0

PostQueuedCompletionStatus CreateIoCompletionPort DeviceIoControl CancelIoEx GetQueuedCompletionStatus

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter UnhandledExceptionFilter SetErrorMode RaiseException SetLastError GetLastError

api-ms-win-core-processthreads-l1-1-0

GetCurrentThread TlsGetValue GetThreadId GetProcessId GetExitCodeProcess GetCurrentProcess InitializeProcThreadAttributeList GetCurrentProcessId TerminateThread ExitProcess GetStartupInfoW TlsSetValue GetExitCodeThread ExitThread CreateProcessW SwitchToThread UpdateProcThreadAttribute ResumeThread GetCurrentThreadId ProcessIdToSessionId TerminateProcess CreateThread GetProcessTimes TlsAlloc QueueUserAPC TlsFree

api-ms-win-core-handle-l1-1-0

DuplicateHandle CloseHandle

api-ms-win-core-heap-l2-1-0

LocalFree

api-ms-win-core-localization-l1-2-0

GetLocaleInfoW FormatMessageW GetUserDefaultLCID GetLocaleInfoEx GetACP FormatMessageA GetOEMCP LCMapStringW EnumSystemLocalesW GetCPInfo LCMapStringEx IsValidCodePage IsValidLocale

api-ms-win-core-string-l1-1-0

CompareStringW GetStringTypeW WideCharToMultiByte MultiByteToWideChar

api-ms-win-core-synch-l1-2-0

SleepConditionVariableCS InitOnceComplete Sleep SleepConditionVariableSRW WakeAllConditionVariable InitializeConditionVariable InitOnceExecuteOnce WakeConditionVariable InitOnceBeginInitialize

api-ms-win-core-libraryloader-l1-2-0

FreeLibrary FreeLibraryAndExitThread GetModuleHandleA LoadLibraryExA LoadLibraryExW GetModuleHandleW GetModuleFileNameA GetModuleHandleExW GetModuleFileNameW GetProcAddress

api-ms-win-core-file-l1-1-0

GetDiskFreeSpaceExW SetFileAttributesW CompareFileTime GetFileType SetFilePointerEx GetFileAttributesExW WriteFile DeleteFileW ReadFile CreateFileW SetEndOfFile FindFirstFileExW GetFileAttributesW GetFinalPathNameByHandleW LockFileEx CreateFileA UnlockFileEx RemoveDirectoryW GetFullPathNameW GetVolumeInformationByHandleW GetDriveTypeW GetFileSize GetFileTime FlushFileBuffers FindNextFileW SetFileInformationByHandle FindFirstFileW CreateDirectoryW GetFileSizeEx FindClose GetFileInformationByHandle

api-ms-win-core-console-l2-1-0

GetConsoleScreenBufferInfo SetConsoleOutputCP

api-ms-win-core-console-l1-1-0

GetConsoleCP ReadConsoleInputW GetConsoleOutputCP SetConsoleMode GetConsoleMode WriteConsoleW GetNumberOfConsoleInputEvents WriteConsoleA ReadConsoleA ReadConsoleW SetConsoleCtrlHandler

api-ms-win-core-processenvironment-l1-1-0

GetEnvironmentStringsW GetCurrentDirectoryW GetCommandLineW FreeEnvironmentStringsW SetEnvironmentVariableW GetEnvironmentVariableA GetCommandLineA GetEnvironmentVariableW GetStdHandle SetStdHandle

api-ms-win-core-console-l1-2-0

PeekConsoleInputA

api-ms-win-core-memory-l1-1-0

VirtualQuery MapViewOfFile CreateFileMappingW VirtualFreeEx UnmapViewOfFile VirtualFree VirtualAlloc VirtualProtect OpenFileMappingW VirtualAllocEx

api-ms-win-core-processthreads-l1-1-1

IsProcessorFeaturePresent GetCurrentProcessorNumber FlushInstructionCache OpenProcess

api-ms-win-core-file-l2-1-0

CopyFileExW ReOpenFile GetFileInformationByHandleEx MoveFileExW

api-ms-win-core-threadpool-l1-2-0

StartThreadpoolIo CloseThreadpoolCleanupGroup SubmitThreadpoolWork CloseThreadpoolCleanupGroupMembers CloseThreadpool CreateThreadpool CreateThreadpoolIo SetThreadpoolThreadMinimum WaitForThreadpoolWorkCallbacks CloseThreadpoolWork CancelThreadpoolIo SetThreadpoolThreadMaximum CreateThreadpoolWork CreateThreadpoolCleanupGroup

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA LoadLibraryW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter QueryPerformanceFrequency

api-ms-win-core-namedpipe-l1-1-0

PeekNamedPipe CreatePipe WaitNamedPipeW TransactNamedPipe CreateNamedPipeW SetNamedPipeHandleState

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask GetNativeSystemInfo GetSystemTimePreciseAsFileTime

api-ms-win-core-sysinfo-l1-1-0

GetSystemInfo GetTickCount64 GetSystemDirectoryA GlobalMemoryStatusEx GetSystemTime GetSystemTimeAsFileTime GetLogicalProcessorInformationEx GetVersion GetLocalTime

api-ms-win-core-memory-l1-1-1

GetLargePageMinimum

api-ms-win-core-timezone-l1-1-0

GetTimeZoneInformation FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime

api-ms-win-core-rtlsupport-l1-1-0

RtlCaptureStackBackTrace RtlLookupFunctionEntry RtlUnwind RtlVirtualUnwind RtlUnwindEx RtlCaptureContext RtlPcToFileHeader

api-ms-win-core-debug-l1-1-0

OutputDebugStringW OutputDebugStringA IsDebuggerPresent

api-ms-win-core-psapi-l1-1-0

K32GetProcessMemoryInfo K32GetModuleFileNameExW

api-ms-win-core-console-l3-2-0

GetConsoleWindow

api-ms-win-core-heap-l1-1-0

HeapFree HeapQueryInformation HeapAlloc GetProcessHeap HeapReAlloc HeapSize HeapSetInformation

api-ms-win-core-memory-l1-1-6

VirtualAlloc2

api-ms-win-core-errorhandling-l1-1-1

AddVectoredExceptionHandler RemoveVectoredExceptionHandler

api-ms-win-core-fibers-l1-1-0

FlsFree FlsGetValue FlsSetValue FlsAlloc

api-ms-win-core-file-l1-2-0

GetTempPathW

api-ms-win-core-file-l1-2-2

AreFileApisANSI

api-ms-win-core-util-l1-1-0

DecodePointer EncodePointer

api-ms-win-core-interlocked-l1-1-0

InterlockedPushEntrySList InitializeSListHead

kernel32

GetComputerNameA Module32NextW WerRegisterRuntimeExceptionModule AssignProcessToJobObject MoveFileExA SetDllDirectoryW ConvertFiberToThread Module32FirstW SetInformationJobObject OpenMutexA GetComputerNameW MoveFileW VerifyVersionInfoW CreateJobObjectW CreateToolhelp32Snapshot ConvertThreadToFiberEx CreateSemaphoreA CreateFiberEx DeleteFiber SwitchToFiber

api-ms-win-core-datetime-l1-1-0

GetDateFormatW GetTimeFormatW

Name

.text

Size

10.6MB

Virtual Size

10.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.zcold

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.6MB

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.3MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

376KB

Virtual Size

375KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.zlog

Size

66KB

Virtual Size

66KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

CPADinfo

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

82KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

2026-11-12_492cfe5be3fdf6b38c6eda1158862b98_akira_blankgrabber_coinminer_glassworm_icedid_luca-stealer_njrat_stealc

user32

iphlpapi

advapi32

dbghelp

shell32

crypt32

ws2_32

bcrypt

winhttp

version

mswsock

httpapi

ole32

pdh

api-ms-win-core-synch-l1-1-0

api-ms-win-core-synch-l1-2-1

api-ms-win-core-io-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-console-l2-1-0

api-ms-win-core-console-l1-1-0

api-ms-win-core-processenvironment-l1-1-0

api-ms-win-core-console-l1-2-0

api-ms-win-core-memory-l1-1-0

api-ms-win-core-processthreads-l1-1-1

api-ms-win-core-file-l2-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-profile-l1-1-0

api-ms-win-core-namedpipe-l1-1-0

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-memory-l1-1-1

api-ms-win-core-timezone-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-psapi-l1-1-0

api-ms-win-core-console-l3-2-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-memory-l1-1-6

api-ms-win-core-errorhandling-l1-1-1

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-file-l1-2-0

api-ms-win-core-file-l1-2-2

api-ms-win-core-util-l1-1-0

api-ms-win-core-interlocked-l1-1-0

kernel32

api-ms-win-core-datetime-l1-1-0

generic