2026-11-11_5eee9e8b7b57d746185c35584b1db07f_darkgate_elex_glassworm_stealc_stop

Sharing

Copy URL Twitter E-mail

General

Target
2026-11-11_5eee9e8b7b57d746185c35584b1db07f_darkgate_elex_glassworm_stealc_stop
Size 11.0MB
Sample261113-nl3mvsay2s
SHA256 65bd7e50c6cbe80ea5ef1ca864aac075c241ce086948a158ec2cc6541e311fc4
MD5 5eee9e8b7b57d746185c35584b1db07f
SHA1 f2cee8809986d864f45a492a59c0e961c7e3e95f
SHA512 27e77bf564768492df4a531a9762f034137a4c6af131bf6877fd4d056fb84672e64c7f3d0da011c5f495ae55b7fbef0001aede6c4d96b3cdab7873c1cb767a3a
SSDEEP 196608:inaodvgfWewUzEDaZtH/vYmZUBrP5TnhedQZmI0fHr93AbLyLkUWmMZ:iJ3ew89VABz5D0fHrU4kAMZ
TLSH
T1DAC6BF01F2C3C075EA8725B9B16E762BE538A725071845C3F7E81E5EDAF26E06CB5183
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-11-11_5eee9e8b7b57d746185c35584b1db07f_darkgate_elex_glassworm_stealc_stop

File Explorer

2026-11-11_5eee9e8b7b57d746185c35584b1db07f_darkgate_elex_glassworm_stealc_stop

.exe 11.0MB

2026-11-11_5eee9e8b7b57d746185c35584b1db07f_darkgate_elex_glassworm_stealc_stop

IMPHASH ac1dad65919927ea8977dc7594dadcaa
SHA256 65bd7e50c6cbe80ea5ef1ca864aac075c241ce086948a158ec2cc6541e311fc4
MD5 5eee9e8b7b57d746185c35584b1db07f
SHA1 f2cee8809986d864f45a492a59c0e961c7e3e95f
SHA512 27e77bf564768492df4a531a9762f034137a4c6af131bf6877fd4d056fb84672e64c7f3d0da011c5f495ae55b7fbef0001aede6c4d96b3cdab7873c1cb767a3a
SSDEEP 196608:inaodvgfWewUzEDaZtH/vYmZUBrP5TnhedQZmI0fHr93AbLyLkUWmMZ:iJ3ew89VABz5D0fHrU4kAMZ
TLSH
T1DAC6BF01F2C3C075EA8725B9B16E762BE538A725071845C3F7E81E5EDAF26E06CB5183
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4339778

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

winmm

timeGetTime timeBeginPeriod timeEndPeriod

ws2_32

getsockopt inet_ntoa shutdown setsockopt accept ioctlsocket WSAGetLastError socket WSAStartup ntohs getsockname gethostbyname inet_addr htons connect select __WSAFDIsSet bind listen gethostname closesocket recv send htonl sendto recvfrom WSACleanup WSAIoctl getnameinfo ntohl

d3dx9_43

D3DXVec3TransformNormal D3DXMatrixRotationYawPitchRoll D3DXMatrixTranspose D3DXVec3Normalize D3DXVec4Transform D3DXVec3Transform D3DXSaveTextureToFileA D3DXVec3TransformCoord D3DXMatrixInverse D3DXMatrixRotationX D3DXMatrixRotationAxis D3DXMatrixRotationY D3DXQuaternionRotationYawPitchRoll D3DXMatrixLookAtLH D3DXQuaternionInverse D3DXQuaternionRotationMatrix D3DXMatrixRotationZ D3DXSaveSurfaceToFileInMemory D3DXMatrixRotationQuaternion D3DXMatrixDecompose D3DXVec2Normalize D3DXPlaneTransform D3DXMatrixMultiply D3DXMatrixOrthoLH D3DXMatrixOrthoOffCenterLH D3DXCreateCubeTextureFromFileInMemoryEx D3DXMatrixPerspectiveFovLH D3DXMatrixPerspectiveOffCenterLH D3DXPlaneFromPoints D3DXPlaneFromPointNormal D3DXPlaneIntersectLine D3DXQuaternionSlerp D3DXGetDeclVertexSize D3DXGetImageInfoFromFileInMemory D3DXSaveSurfaceToFileA D3DXVec3Project D3DXCreateBox D3DXCreateFontA D3DXQuaternionNormalize D3DXCompileShader D3DXMatrixScaling D3DXQuaternionMultiply D3DXSaveTextureToFileInMemory D3DXGetShaderConstantTable D3DXMatrixTranslation D3DXCreateVolumeTextureFromFileInMemoryEx D3DXMatrixMultiplyTranspose D3DXLoadSurfaceFromSurface D3DXCreateTextureFromFileInMemoryEx

d3d9

Direct3DCreate9 D3DPERF_BeginEvent D3DPERF_SetOptions D3DPERF_EndEvent

iphlpapi

IcmpCreateFile IcmpSendEcho GetAdaptersInfo IcmpCloseHandle

crypt32

CryptMsgControl CryptMsgGetParam CryptMsgClose CryptMsgUpdate CryptMsgOpenToDecode CryptDecryptMessage CryptEncodeObject CryptEncryptMessage CertGetSubjectCertificateFromStore CertDuplicateCertificateContext CertFreeCertificateContext CertNameToStrW CryptStringToBinaryA CertSetCertificateContextProperty CryptDecodeObject CertGetCertificateContextProperty CertCreateCertificateContext CertEnumCertificatesInStore CertCloseStore CertOpenStore

kernel32

SetEvent WaitForSingleObject GetLastError InitializeCriticalSection DeleteCriticalSection TerminateThread InitializeCriticalSectionAndSpinCount TryEnterCriticalSection IsBadReadPtr GlobalLock GlobalUnlock InterlockedExchangeAdd InterlockedCompareExchange CreateFileA UnmapViewOfFile FlushFileBuffers CreateFileMappingA GetTempPathA LocalFree GetACP GetOEMCP GetComputerNameA FormatMessageA GetModuleFileNameA GetFullPathNameW GetFullPathNameA GetCurrentDirectoryW GetCurrentDirectoryA GetTempPathW MoveFileW MoveFileA CopyFileW DeleteFileW DeleteFileA SetFilePointer GetFileAttributesW CreateDirectoryW SetFileAttributesW SetFileAttributesA GetFileAttributesA FileTimeToSystemTime SystemTimeToFileTime GlobalAlloc GetSystemTime GetModuleHandleA GetFileTime SetFileTime ReadFile WriteFile GetFileSize GetVersionExA CreateFileW FindFirstFileW SetEndOfFile MapViewOfFile ResetEvent OutputDebugStringA QueryPerformanceFrequency IsDebuggerPresent WideCharToMultiByte QueryPerformanceCounter DuplicateHandle GetCurrentThread GetCurrentProcess OpenEventA SetLastError HeapSize ExitProcess SwitchToThread SetHandleCount GetConsoleCP CloseHandle LoadLibraryA GetLocalTime GetProcAddress MultiByteToWideChar GetTickCount FreeLibrary EnterCriticalSection LeaveCriticalSection Sleep InterlockedExchange FindNextFileA FindClose FindFirstFileA CreateDirectoryA GetCurrentThreadId GlobalMemoryStatusEx TerminateProcess CreateThread CreateEventA GetDiskFreeSpaceA GetSystemInfo InterlockedIncrement InterlockedDecrement MulDiv GetExitCodeThread WaitForMultipleObjects GetCurrentProcessId VirtualFree VirtualAlloc WaitForSingleObjectEx GetConsoleMode GetCPInfo IsValidCodePage LCMapStringA LCMapStringW GetTimeZoneInformation FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GetLocaleInfoW GetLocaleInfoA GetStringTypeA GetStringTypeW GetUserDefaultLCID EnumSystemLocalesA IsValidLocale CompareStringA CompareStringW TlsFree SetEnvironmentVariableA GetCommandLineW VirtualQuery CreateProcessW UpdateProcThreadAttribute SetThreadPriority HeapFree HeapAlloc UnhandledExceptionFilter SetUnhandledExceptionFilter GetSystemTimeAsFileTime FileTimeToLocalFileTime GetDriveTypeA ExitThread GetModuleHandleW GetCommandLineA GetStartupInfoA RtlUnwind GetFileInformationByHandle PeekNamedPipe GetFileType GetProcessHeap HeapReAlloc RaiseException HeapCreate InitializeProcThreadAttributeList OpenFileMappingA ResumeThread GetNativeSystemInfo VirtualProtect CreateSemaphoreA CreateMutexA ReleaseSemaphore ReleaseMutex SuspendThread SetThreadAffinityMask SetErrorMode GetStdHandle TlsGetValue TlsAlloc TlsSetValue GetDriveTypeW

user32

BeginPaint SendMessageA PostQuitMessage CloseClipboard InvalidateRect IsClipboardFormatAvailable GetClipboardData EmptyClipboard EndPaint GetKeyState SetWindowLongA SetClipboardData SetCursorPos GetAsyncKeyState mouse_event LoadIconA SetFocus MessageBoxA ShowWindow MoveWindow GetWindowDC GetWindowInfo ReleaseDC CreateWindowExA wsprintfW OpenClipboard AdjustWindowRect DispatchMessageA SetWindowPos GetDesktopWindow PeekMessageW GetWindowLongA SetRect TranslateMessage GetMonitorInfoA GetMessageW GetWindowRect GetSystemMetrics ClipCursor GetClientRect ClientToScreen GetCursorPos ShowCursor ScreenToClient RegisterClassA SetClipboardViewer ChangeClipboardChain LoadCursorA UpdateWindow GetActiveWindow DefWindowProcA

gdi32

GetStockObject GetDeviceCaps CreateICA MoveToEx GetTextExtentPoint32A SetTextColor CreateDCA ExtTextOutA SetTextAlign CreatePen SetMapMode SetBkColor BitBlt DeleteDC GetDIBits DeleteObject SelectObject CreateCompatibleDC CreateCompatibleBitmap ExtEscape LineTo CreateDIBSection CreateFontA

advapi32

CryptReleaseContext RegQueryValueExA RegOpenKeyExA RegDeleteValueA RegCloseKey RegSetValueExA RegCreateKeyExA GetUserNameA CryptAcquireContextA CryptExportKey CryptDestroyKey CryptGetUserKey CryptEnumProvidersA CryptGenRandom CryptGetProvParam CryptAcquireContextW

shell32

ShellExecuteA SHGetFolderPathA

fmodex

?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SOUND_FORMAT@@HHW4FMOD_DSP_RESAMPLER@@@Z ?setDSPBufferSize@System@FMOD@@QAG?AW4FMOD_RESULT@@IH@Z ?setFileSystem@System@FMOD@@QAG?AW4FMOD_RESULT@@P6G?AW43@PBDHPAIPAPAX2@ZP6G?AW43@PAX4@ZP6G?AW43@44I14@ZP6G?AW43@4I4@ZP6G?AW43@PAUFMOD_ASYNCREADINFO@@4@Z5H@Z ?setSpeakerMode@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_SPEAKERMODE@@@Z ?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z ?getDriverCaps@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAIPAHPAW4FMOD_SPEAKERMODE@@@Z ?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z ?setReverbAmbientProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_REVERB_PROPERTIES@@@Z ?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ ?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z ?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@@Z ?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z ?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z

fmod_event

?getInfo@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAPADPAUFMOD_EVENT_INFO@@@Z ?getState@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z ?getParentGroup@Event@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVEventGroup@2@@Z ?getParameter@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventParameter@2@@Z ?getPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z ?setPropertyByIndex@Event@FMOD@@QAG?AW4FMOD_RESULT@@HPAX_N@Z ?stop@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z ?start@Event@FMOD@@QAG?AW4FMOD_RESULT@@XZ ?release@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z ?keyOff@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@XZ ?setValue@EventParameter@FMOD@@QAG?AW4FMOD_RESULT@@M@Z ?setPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z ?set3DAttributes@Event@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z ?init@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HIPAXI@Z ?release@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ ?update@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@XZ ?setMediaPath@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBD@Z ?getSystemObject@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z ?load@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_EVENT_LOADINFO@@PAPAVEventProject@2@@Z ?getCategory@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVEventCategory@2@@Z ?getEvent@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAPAVEvent@2@@Z ?getReverbPreset@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAUFMOD_REVERB_PROPERTIES@@PAH@Z ?createReverb@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVEventReverb@2@@Z ?set3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z ?get3DListenerAttributes@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@HPAUFMOD_VECTOR@@000@Z ?preloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDHPAVSound@2@_N@Z ?unloadFSB@EventSystem@FMOD@@QAG?AW4FMOD_RESULT@@PBDH@Z FMOD_EventSystem_Create ?getPaused@Event@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z

fmod_event_net

?NetEventSystem_Update@FMOD@@YG?AW4FMOD_RESULT@@XZ ?NetEventSystem_Shutdown@FMOD@@YG?AW4FMOD_RESULT@@XZ

physx3_x86

PxCreateBasePhysics PxRegisterHeightFields ?createShape@PxRigidActorShapeCollectionHelper@physx@@QBEPAVPxShape@2@PAVPxRigidActor@2@ABVPxGeometry@2@PBQAVPxMaterial@2@IABVPxTransform@2@@Z PxRegisterArticulations PxGetSDKMetaData ??0PxTolerancesScaleGeneratedInfo@physx@@QAE@XZ ??0PxParticleSystemGeneratedInfo@physx@@QAE@XZ ??0PxParticleFluidGeneratedInfo@physx@@QAE@XZ ??0PxMaterialGeneratedInfo@physx@@QAE@XZ ??0PxPlaneGeometryGeneratedInfo@physx@@QAE@XZ ??0PxCapsuleGeometryGeneratedInfo@physx@@QAE@XZ ??0PxBoxGeometryGeneratedInfo@physx@@QAE@XZ ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxTriangleMeshGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxConvexMeshGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxHeightFieldGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxBoxGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxCapsuleGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxSphereGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QBE_NPBVPxShape@2@AAVPxPlaneGeometry@2@@Z ??0PxHeightFieldDescGeneratedInfo@physx@@QAE@XZ ??0PxAggregateGeneratedInfo@physx@@QAE@XZ ??0PxConvexMeshGeometryGeneratedInfo@physx@@QAE@XZ ??0PxTriangleMeshGeometryGeneratedInfo@physx@@QAE@XZ ??0PxHeightFieldGeometryGeneratedInfo@physx@@QAE@XZ ??0PxRigidStaticGeneratedInfo@physx@@QAE@XZ ??0PxShapeGeneratedInfo@physx@@QAE@XZ ??0PxMeshScaleGeneratedInfo@physx@@QAE@XZ ??0PxRigidDynamicGeneratedInfo@physx@@QAE@XZ ??0PxClothFabricGeneratedInfo@physx@@QAE@XZ ??0PxClothGeneratedInfo@physx@@QAE@XZ ??0PxArticulationJointGeneratedInfo@physx@@QAE@XZ ??0PxArticulationLinkGeneratedInfo@physx@@QAE@XZ ??0PxArticulationGeneratedInfo@physx@@QAE@XZ ??0PxSphereGeometryGeneratedInfo@physx@@QAE@XZ

physx3cooking_x86

PxCreateCooking

physx3common_x86

?incRefCount@Foundation@shdfnd@physx@@SAXXZ ?allocate@Allocator@shdfnd@physx@@QAEPAXIPBDH@Z ?distanceSegmentSegmentSquaredOLD@Gu@physx@@YAMABVPxVec3@2@000PAM1@Z ?CompleteBoxPruning@Gu@physx@@YA_NPBVPxBounds3@2@IAAV?$Array@IV?$ReflectionAllocator@I@shdfnd@physx@@@shdfnd@2@ABVAxes@12@@Z ?raycast_capsule@Gu@physx@@YAIABVPxGeometry@2@ABVPxTransform@2@ABVPxVec3@2@2MV?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@IPIAUPxRaycastHit@2@_NP6A_NAAU72@PAX@Z7@Z ?raycast_box@Gu@physx@@YAIABVPxGeometry@2@ABVPxTransform@2@ABVPxVec3@2@2MV?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@IPIAUPxRaycastHit@2@_NP6A_NAAU72@PAX@Z7@Z ??1MutexImpl@shdfnd@physx@@QAE@XZ ?lock@MutexImpl@shdfnd@physx@@QAE_NXZ ?unlock@MutexImpl@shdfnd@physx@@QAE_NXZ ??0MutexImpl@shdfnd@physx@@QAE@XZ ?getSize@MutexImpl@shdfnd@physx@@SAABIXZ ?getId@Thread@shdfnd@physx@@SAIXZ ?getCurrentCounterValue@Time@shdfnd@physx@@SA_KXZ ??0RenderOutput@Cm@physx@@QAE@AAVRenderBuffer@12@@Z ??0Box@Gu@physx@@QAE@XZ ??1Box@Gu@physx@@QAE@XZ ?intersectOBBOBB@Gu@physx@@YA_NABVPxVec3@2@0ABVPxMat33@2@001_N@Z ?distanceSegmentBoxSquared@Gu@physx@@YAMABVPxVec3@2@000ABVPxMat33@2@PAMPAV32@@Z ?sweep@GeometryQuery@Gu@physx@@SA_NABVPxVec3@3@MABVPxGeometry@3@ABVPxTransform@3@IPBVPxTriangle@3@AAUPxSweepHit@3@V?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@3@PBIM@Z ??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@W4Enum@PxSerialFlag@1@@Z ??0Thread@shdfnd@physx@@QAE@XZ ?quitIsSignalled@Thread@shdfnd@physx@@QAE_NXZ ?quit@Thread@shdfnd@physx@@QAEXXZ ?setAffinityMask@Thread@shdfnd@physx@@UAEII@Z ??1Thread@shdfnd@physx@@UAE@XZ ?wait@Sync@shdfnd@physx@@QAE_NI@Z ?findOverlapHeightField@PxMeshQuery@physx@@SAIABVPxGeometry@2@ABVPxTransform@2@ABVPxHeightFieldGeometry@2@1PAIIIAA_N@Z ?findOverlapTriangleMesh@PxMeshQuery@physx@@SAIABVPxGeometry@2@ABVPxTransform@2@ABVPxTriangleMeshGeometry@2@1PAIIIAA_N@Z ??0FPUGuard@shdfnd@physx@@QAE@XZ ??1FPUGuard@shdfnd@physx@@QAE@XZ ??0Sync@shdfnd@physx@@QAE@XZ ?getDefaultStackSize@Thread@shdfnd@physx@@SAIXZ ?decRefCount@Foundation@shdfnd@physx@@SAXXZ ?setName@Thread@shdfnd@physx@@QAEXPBD@Z ?signalQuit@Thread@shdfnd@physx@@QAEXXZ ?waitForQuit@Thread@shdfnd@physx@@QAE_NXZ ??1Sync@shdfnd@physx@@QAE@XZ ?getSize@SListImpl@shdfnd@physx@@SAABIXZ ??0SListImpl@shdfnd@physx@@QAE@XZ ??1SListImpl@shdfnd@physx@@QAE@XZ ?pop@SListImpl@shdfnd@physx@@QAEPAVSListEntry@23@XZ ?push@SListImpl@shdfnd@physx@@QAEXPAVSListEntry@23@@Z ?reset@Sync@shdfnd@physx@@QAEXXZ ?set@Sync@shdfnd@physx@@QAEXXZ ?addToStringTable@Cm@physx@@YAIAAV?$Array@DV?$ReflectionAllocator@D@shdfnd@physx@@@shdfnd@2@PBD@Z ??I?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE?AV01@W4Enum@PxSerialFlag@1@@Z ??B?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE_NXZ ??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@ABV01@@Z ??0?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAE@XZ ??_4?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QAEAAV01@ABV01@@Z ??S?$PxFlags@W4Enum@PxSerialFlag@physx@@G@physx@@QBE?AV01@XZ ?allocate@TempAllocator@shdfnd@physx@@QAEPAXIPBDH@Z ?PxDiagonalize@physx@@YA?AVPxVec3@1@ABVPxMat33@1@AAVPxQuat@1@@Z ?deallocate@TempAllocator@shdfnd@physx@@QAEXPAX@Z ?error@Foundation@shdfnd@physx@@QAAXW4Enum@PxErrorCode@3@PBDH1ZZ ??6RenderOutput@Cm@physx@@QAEAAV012@ABVPxTransform@2@@Z ??6RenderOutput@Cm@physx@@QAEAAV012@I@Z ?outputCapsule@RenderOutput@Cm@physx@@QAEAAV123@MMABVMatrix34@23@@Z ??6Cm@physx@@YAAAVRenderOutput@01@AAV201@ABUDebugBox@01@@Z ??0SIMDGuard@shdfnd@physx@@QAE@XZ ??1SIMDGuard@shdfnd@physx@@QAE@XZ ?getAllocator@shdfnd@physx@@YAAAVPxAllocatorCallback@2@XZ ?sweep@PxGeometryQuery@physx@@SA_NABVPxVec3@2@MABVPxGeometry@2@ABVPxTransform@2@12AAUPxSweepHit@2@V?$PxFlags@W4Enum@PxSceneQueryFlag@physx@@I@2@M@Z ?PxTransformFromSegment@physx@@YA?AVPxTransform@1@ABVPxVec3@1@0PAM@Z ?deallocate@Allocator@shdfnd@physx@@QAEXPAX@Z PxCreateFoundation PxGetFoundation ?intersectTriangleBox@Gu@physx@@YAHABVPxVec3@2@0000@Z ?getTriangle@PxMeshQuery@physx@@SAXABVPxHeightFieldGeometry@2@ABVPxTransform@2@IAAVPxTriangle@2@PAI3@Z ?getTriangle@PxMeshQuery@physx@@SAXABVPxTriangleMeshGeometry@2@ABVPxTransform@2@IAAVPxTriangle@2@PAI3@Z ?start@Thread@shdfnd@physx@@QAEXI@Z ?getInstance@Foundation@shdfnd@physx@@SAAAV123@XZ

ts3client_win32

ts3client_createIdentity ts3client_openCaptureDevice ts3client_destroyClientLib ts3client_getDefaultPlaybackDevice ts3client_openPlaybackDevice ts3client_getErrorMessage ts3client_destroyServerConnectionHandler ts3client_getCaptureDeviceList ts3client_spawnNewServerConnectionHandler ts3client_systemset3DListenerAttributes ts3client_startConnection ts3client_getDefaultCaptureDevice ts3client_stopConnection ts3client_flushClientSelfUpdates ts3client_closePlaybackDevice ts3client_getDefaultCaptureMode ts3client_requestUnmuteClients ts3client_initClientLib ts3client_setClientSelfVariableAsInt ts3client_getPlaybackDeviceList ts3client_freeMemory ts3client_requestMuteClients ts3client_setPlaybackConfigValue ts3client_channelset3DAttributes ts3client_getDefaultPlayBackMode ts3client_closeCaptureDevice ts3client_setPreProcessorConfigValue ts3client_getClientID ts3client_getClientVariableAsString

crashrpt1403

ord9 ord7 ord11 ord16 ord12 ord24

psapi

GetModuleFileNameExW

bcrypt

BCryptOpenAlgorithmProvider BCryptGenerateSymmetricKey BCryptCloseAlgorithmProvider BCryptGetProperty BCryptDestroyKey BCryptSetProperty BCryptDecrypt

wininet

InternetOpenW HttpQueryInfoA InternetOpenUrlA InternetReadFile InternetCloseHandle InternetSetOptionA

dinput8

DirectInput8Create

xinput1_3

ord2

Name

.text

Size

7.5MB

Virtual Size

7.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.6MB

Virtual Size

9.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

81KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

459KB

Virtual Size

459KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=1, id=110, productName=VS2005 build 50727, version=50727,

count=1, id=96, productName=VS2003 (.NET) build 3077, version=3077,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=8, id=156, productName=VS2010 SP1 build 40219, version=40219,

count=15, id=150, version=20413,

count=69, id=149, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=109, productName=VS2005 build 50727, version=50727,

count=642, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, productName=VS2010 build 30319, version=30319,

count=1, id=171, productName=VS2010 build 30319, version=30319,

count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=272, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=2, id=156, version=21202,

count=33, id=123, productName=VS2005 build 50727, version=50727,

count=647, id=1, productName=Unmarked objects,

count=385, id=138, version=30729,

count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=148, productName=VS2008 build 21022, version=21022,

count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,