FlStudio20[.]9[.]2[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

FlStudio20.9.2.rar
Size

1.0MB
MD5

1254c6d1b75bb9d3fb3a80675994ad90
SHA1

f9bdad8ee5753e6363ae80470990cdae56c83675
SHA256

5edfdce13a2ac88bb24b39a74dccc4c9866ff6f0704c3ffb454d041addee4549
SHA512

5f9e4a95fec5b4d3a22eea6c3d3d02c9c6de46d5363dbaabc6f95fe54340fd5b0b282d1819d4d7eaae178d9c857b93afe4f65010577468ee9389b5c75e8ccd0e
SSDEEP

24576:K6uTsRSj43cGXHQXqcPl4yarDiDGxcf0inUQp27vAN:1uTgIZ2n2iYGxIMvAN

Score

N/A

Malware Config

Signatures

Files

FlStudio20.9.2.rar
.rar

Password: 1515
ReadMe.txt
setup.exe
.exe windows x86

Password: 1515

89766042e29aed5fce63c7340618b000

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalAlloc
CheckRemoteDebuggerPresent
CreateFileW
GetProcAddress
LoadLibraryA

user32

DestroyWindow

gdi32

GetObjectW

ole32

CoDecodeProxy
CoInitialize

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
x32.dll
.dll windows x64

Password: 1515

6a76a05db4ed2607d1661c8c35006ba5

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30/08/2022, 00:00

Not After

29/08/2023, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77
Signer

Actual PE Digest

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19/09/2022, 09:20
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

AreFileApisANSI
CloseHandle
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateFileW
CreateMutexW
DeleteCriticalSection
DeleteFileA
DeleteFileW
EnterCriticalSection
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceA
GetDiskFreeSpaceW
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameA
GetFullPathNameW
GetLastError
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTempPathW
GetTickCount
GetVersionExA
GetVersionExW
HeapAlloc
HeapCompact
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
InitializeCriticalSection
LeaveCriticalSection
LocalFree
LockFile
LockFileEx
MapViewOfFile
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
QueryPerformanceCounter
ReadFile
SetEndOfFile
SetFilePointer
Sleep
SystemTimeToFileTime
TlsGetValue
TryEnterCriticalSection
UnlockFile
UnlockFileEx
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_beginthreadex
_endthreadex
_errno
_initterm
_localtime64
_lock
_unlock
abort
acos
asin
atan
calloc
cosh
free
fwrite
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
sinh
strcmp
strcspn
strlen
strncmp
strrchr
tan
tanh
vfprintf

Exports

Exports

sqlite3_aggregate_context
sqlite3_aggregate_count
sqlite3_auto_extension
sqlite3_backup_finish
sqlite3_backup_init
sqlite3_backup_pagecount
sqlite3_backup_remaining
sqlite3_backup_step
sqlite3_bind_blob
sqlite3_bind_blob64
sqlite3_bind_double
sqlite3_bind_int
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_pointer
sqlite3_bind_text
sqlite3_bind_text16
sqlite3_bind_text64
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_bind_zeroblob64
sqlite3_blob_bytes
sqlite3_blob_close
sqlite3_blob_open
sqlite3_blob_read
sqlite3_blob_reopen
sqlite3_blob_write
sqlite3_busy_handler
sqlite3_busy_timeout
sqlite3_cancel_auto_extension
sqlite3_changes
sqlite3_clear_bindings
sqlite3_close
sqlite3_close_v2
sqlite3_collation_needed
sqlite3_collation_needed16
sqlite3_column_blob
sqlite3_column_bytes
sqlite3_column_bytes16
sqlite3_column_count
sqlite3_column_decltype
sqlite3_column_decltype16
sqlite3_column_double
sqlite3_column_int
sqlite3_column_int64
sqlite3_column_name
sqlite3_column_name16
sqlite3_column_text
sqlite3_column_text16
sqlite3_column_type
sqlite3_column_value
sqlite3_commit_hook
sqlite3_compileoption_get
sqlite3_compileoption_used
sqlite3_complete
sqlite3_complete16
sqlite3_config
sqlite3_context_db_handle
sqlite3_create_collation
sqlite3_create_collation16
sqlite3_create_collation_v2
sqlite3_create_filename
sqlite3_create_function
sqlite3_create_function16
sqlite3_create_function_v2
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_create_window_function
sqlite3_data_count
sqlite3_data_directory
sqlite3_database_file_object
sqlite3_db_cacheflush
sqlite3_db_config
sqlite3_db_filename
sqlite3_db_handle
sqlite3_db_mutex
sqlite3_db_readonly
sqlite3_db_release_memory
sqlite3_db_status
sqlite3_declare_vtab
sqlite3_drop_modules
sqlite3_enable_shared_cache
sqlite3_errcode
sqlite3_errmsg
sqlite3_errmsg16
sqlite3_errstr
sqlite3_exec
sqlite3_expanded_sql
sqlite3_expired
sqlite3_extended_errcode
sqlite3_extended_result_codes
sqlite3_file_control
sqlite3_filename_database
sqlite3_filename_journal
sqlite3_filename_wal
sqlite3_finalize
sqlite3_free
sqlite3_free_filename
sqlite3_free_table
sqlite3_fts3_may_be_corrupt
sqlite3_fts5_may_be_corrupt
sqlite3_get_autocommit
sqlite3_get_auxdata
sqlite3_get_table
sqlite3_global_recover
sqlite3_hard_heap_limit64
sqlite3_initialize
sqlite3_interrupt
sqlite3_keyword_check
sqlite3_keyword_count
sqlite3_keyword_name
sqlite3_last_insert_rowid
sqlite3_libversion
sqlite3_libversion_number
sqlite3_limit
sqlite3_log
sqlite3_malloc
sqlite3_malloc64
sqlite3_memory_alarm
sqlite3_memory_highwater
sqlite3_memory_used
sqlite3_mprintf
sqlite3_msize
sqlite3_mutex_alloc
sqlite3_mutex_enter
sqlite3_mutex_free
sqlite3_mutex_leave
sqlite3_mutex_try
sqlite3_next_stmt
sqlite3_open
sqlite3_open16
sqlite3_open_v2
sqlite3_os_end
sqlite3_os_init
sqlite3_overload_function
sqlite3_prepare
sqlite3_prepare16
sqlite3_prepare16_v2
sqlite3_prepare16_v3
sqlite3_prepare_v2
sqlite3_prepare_v3
sqlite3_profile
sqlite3_progress_handler
sqlite3_randomness
sqlite3_realloc
sqlite3_realloc64
sqlite3_release_memory
sqlite3_reset
sqlite3_reset_auto_extension
sqlite3_result_blob
sqlite3_result_blob64
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error16
sqlite3_result_error_code
sqlite3_result_error_nomem
sqlite3_result_error_toobig
sqlite3_result_int
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_pointer
sqlite3_result_subtype
sqlite3_result_text
sqlite3_result_text16
sqlite3_result_text16be
sqlite3_result_text16le
sqlite3_result_text64
sqlite3_result_value
sqlite3_result_zeroblob
sqlite3_result_zeroblob64
sqlite3_rollback_hook
sqlite3_rtree_geometry_callback
sqlite3_rtree_query_callback
sqlite3_set_authorizer
sqlite3_set_auxdata
sqlite3_set_last_insert_rowid
sqlite3_shutdown
sqlite3_sleep
sqlite3_snprintf
sqlite3_soft_heap_limit
sqlite3_soft_heap_limit64
sqlite3_sourceid
sqlite3_sql
sqlite3_status
sqlite3_status64
sqlite3_step
sqlite3_stmt_busy
sqlite3_stmt_isexplain
sqlite3_stmt_readonly
sqlite3_stmt_status
sqlite3_str_append
sqlite3_str_appendall
sqlite3_str_appendchar
sqlite3_str_appendf
sqlite3_str_errcode
sqlite3_str_finish
sqlite3_str_length
sqlite3_str_new
sqlite3_str_reset
sqlite3_str_value
sqlite3_str_vappendf
sqlite3_strglob
sqlite3_stricmp
sqlite3_strlike
sqlite3_strnicmp
sqlite3_system_errno
sqlite3_table_column_metadata
sqlite3_temp_directory
sqlite3_test_control
sqlite3_thread_cleanup
sqlite3_threadsafe
sqlite3_total_changes
sqlite3_trace
sqlite3_trace_v2
sqlite3_transfer_bindings
sqlite3_txn_state
sqlite3_update_hook
sqlite3_uri_boolean
sqlite3_uri_int64
sqlite3_uri_key
sqlite3_uri_parameter
sqlite3_user_data
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_bytes16
sqlite3_value_double
sqlite3_value_dup
sqlite3_value_free
sqlite3_value_frombind
sqlite3_value_int
sqlite3_value_int64
sqlite3_value_nochange
sqlite3_value_numeric_type
sqlite3_value_pointer
sqlite3_value_subtype
sqlite3_value_text
sqlite3_value_text16
sqlite3_value_text16be
sqlite3_value_text16le
sqlite3_value_type
sqlite3_version
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_vmprintf
sqlite3_vsnprintf
sqlite3_vtab_collation
sqlite3_vtab_config
sqlite3_vtab_nochange
sqlite3_vtab_on_conflict
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_wal_checkpoint_v2
sqlite3_wal_hook
sqlite3_win32_is_nt
sqlite3_win32_mbcs_to_utf8
sqlite3_win32_mbcs_to_utf8_v2
sqlite3_win32_set_directory
sqlite3_win32_set_directory16
sqlite3_win32_set_directory8
sqlite3_win32_sleep
sqlite3_win32_unicode_to_utf8
sqlite3_win32_utf8_to_mbcs
sqlite3_win32_utf8_to_mbcs_v2
sqlite3_win32_utf8_to_unicode
sqlite3_win32_write_debug

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
x64.dll
.dll windows x64

Password: 1515

6b086daa303d47b394d11cce9a702fb3

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

Issuer

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Not Before

18/02/2022, 00:00

Not After

17/02/2025, 23:59

Subject

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

01
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

01/01/2004, 00:00

Not After

31/12/2028, 23:59

Subject

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

Issuer

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

25/05/2021, 00:00

Not After

31/12/2028, 23:59

Subject

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

Issuer

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

Not Before

22/03/2021, 00:00

Not After

21/03/2036, 23:59

Subject

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

30/08/2022, 00:00

Not After

29/08/2023, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1b:54:87:d6:22:a5:af:a4:4d:87:63:d7:64:97:3d:1e:96:42:84:b1:cf:92:be:52:44:23:cc:ad:2e:67:9b:7d
Signer

Actual PE Digest

1b:54:87:d6:22:a5:af:a4:4d:87:63:d7:64:97:3d:1e:96:42:84:b1:cf:92:be:52:44:23:cc:ad:2e:67:9b:7d

Digest Algorithm

sha256

PE Digest Matches

true

Signature Validations

Trusted

true

Verification

Signing Certificate

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

19/09/2022, 09:20
Valid: true

Chain 1

CN=Tim Kosse,O=Tim Kosse,ST=Nordrhein-Westfalen,C=DE

CN=Sectigo Public Code Signing CA R36,O=Sectigo Limited,C=GB

CN=Sectigo Public Code Signing Root R46,O=Sectigo Limited,C=GB

CN=AAA Certificate Services,O=Comodo CA Limited,L=Salford,ST=Greater Manchester,C=GB

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

libgcc_s_seh-1

_GCC_specific_handler
_Unwind_DeleteException
_Unwind_GetDataRelBase
_Unwind_GetIPInfo
_Unwind_GetLanguageSpecificData
_Unwind_GetRegionStart
_Unwind_GetTextRelBase
_Unwind_RaiseException
_Unwind_Resume
_Unwind_Resume_or_Rethrow
_Unwind_SetGR
_Unwind_SetIP
__popcountdi2

kernel32

CloseHandle
CreateFileW
CreateHardLinkW
CreateSemaphoreW
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
FreeLibrary
GetCurrentThreadId
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileInformationByHandle
GetFileSizeEx
GetFileType
GetFullPathNameW
GetLastError
GetModuleHandleExW
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTempPathW
GetTimeZoneInformation
GetVolumeInformationW
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryW
MultiByteToWideChar
ReleaseSemaphore
RemoveDirectoryW
SetEndOfFile
SetFilePointer
SetLastError
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_close
_errno
_filelengthi64
_fileno
_findclose
_fstat64
_get_osfhandle
_initterm
_lock
_lseeki64
_strnicmp
_telli64
_unlock
_wchdir
_wchmod
_wfindfirst64
_wfindnext64
_wfopen
_wfullpath
_wgetcwd
_wmkdir
_wopen
_wrename
_wstat64
_wutime64
abort
calloc
fclose
fflush
fgetpos
fopen
fputc
fputs
fread
free
fsetpos
fwrite
getc
getenv
getwc
isspace
iswctype
localeconv
malloc
memchr
memcmp
memcpy
memmove
memset
putc
putwc
realloc
setlocale
setvbuf
sprintf
strchr
strcmp
strcoll
strerror
strftime
strlen
strncmp
strtoul
strxfrm
towlower
towupper
ungetc
ungetwc
vfprintf
wcscat
wcscmp
wcscoll
wcscpy
wcsftime
wcslen
wcsxfrm
_write
_read
_fileno
_fdopen
_close

Exports

Exports

_ZGTtNKSt13bad_exception4whatEv
_ZGTtNKSt13bad_exceptionD1Ev
_ZGTtNKSt9exception4whatEv
_ZGTtNKSt9exceptionD1Ev
_ZGVNSt10moneypunctIcLb0EE2idE
_ZGVNSt10moneypunctIcLb1EE2idE
_ZGVNSt10moneypunctIwLb0EE2idE
_ZGVNSt10moneypunctIwLb1EE2idE
_ZGVNSt11__timepunctIcE2idE
_ZGVNSt11__timepunctIwE2idE
_ZGVNSt7__cxx1110moneypunctIcLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIcLb1EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb0EE2idE
_ZGVNSt7__cxx1110moneypunctIwLb1EE2idE
_ZGVNSt7__cxx117collateIcE2idE
_ZGVNSt7__cxx117collateIwE2idE
_ZGVNSt7__cxx118messagesIcE2idE
_ZGVNSt7__cxx118messagesIwE2idE
_ZGVNSt7__cxx118numpunctIcE2idE
_ZGVNSt7__cxx118numpunctIwE2idE
_ZGVNSt7__cxx118time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx118time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7__cxx119money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7__cxx119money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7collateIcE2idE
_ZGVNSt7collateIwE2idE
_ZGVNSt7num_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt7num_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt7num_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8messagesIcE2idE
_ZGVNSt8messagesIwE2idE
_ZGVNSt8numpunctIcE2idE
_ZGVNSt8numpunctIwE2idE
_ZGVNSt8time_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt8time_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt8time_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_getIcSt19istreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_getIwSt19istreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZGVNSt9money_putIcSt19ostreambuf_iteratorIcSt11char_traitsIcEEE2idE
_ZGVNSt9money_putIwSt19ostreambuf_iteratorIwSt11char_traitsIwEEE2idE
_ZN10__cxxabiv116__enum_type_infoD0Ev
_ZN10__cxxabiv116__enum_type_infoD1Ev
_ZN10__cxxabiv116__enum_type_infoD2Ev
_ZN10__cxxabiv117__array_type_infoD0Ev
_ZN10__cxxabiv117__array_type_infoD1Ev
_ZN10__cxxabiv117__array_type_infoD2Ev
_ZN10__cxxabiv117__class_type_infoD0Ev
_ZN10__cxxabiv117__class_type_infoD1Ev
_ZN10__cxxabiv117__class_type_infoD2Ev
_ZN10__cxxabiv117__pbase_type_infoD0Ev
_ZN10__cxxabiv117__pbase_type_infoD1Ev
_ZN10__cxxabiv117__pbase_type_infoD2Ev
_ZN10__cxxabiv119__pointer_type_infoD0Ev
_ZN10__cxxabiv119__pointer_type_infoD1Ev
_ZN10__cxxabiv119__pointer_type_infoD2Ev
_ZN10__cxxabiv120__function_type_infoD0Ev
_ZN10__cxxabiv120__function_type_infoD1Ev
_ZN10__cxxabiv120__function_type_infoD2Ev
_ZN10__cxxabiv120__si_class_type_infoD0Ev
_ZN10__cxxabiv120__si_class_type_infoD1Ev
_ZN10__cxxabiv120__si_class_type_infoD2Ev
_ZN10__cxxabiv121__vmi_class_type_infoD0Ev
_ZN10__cxxabiv121__vmi_class_type_infoD1Ev
_ZN10__cxxabiv121__vmi_class_type_infoD2Ev
_ZN10__cxxabiv123__fundamental_type_infoD0Ev
_ZN10__cxxabiv123__fundamental_type_infoD1Ev
_ZN10__cxxabiv123__fundamental_type_infoD2Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD0Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD1Ev
_ZN10__cxxabiv129__pointer_to_member_type_infoD2Ev
_ZN11__gnu_debug19_Safe_iterator_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base16_M_detach_singleEv
_ZN11__gnu_debug19_Safe_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug19_Safe_iterator_base9_M_detachEv
_ZN11__gnu_debug19_Safe_sequence_base12_M_get_mutexEv
_ZN11__gnu_debug19_Safe_sequence_base13_M_detach_allEv
_ZN11__gnu_debug19_Safe_sequence_base18_M_detach_singularEv
_ZN11__gnu_debug19_Safe_sequence_base22_M_revalidate_singularEv
_ZN11__gnu_debug19_Safe_sequence_base7_M_swapERS0_
_ZN11__gnu_debug25_Safe_local_iterator_base16_M_attach_singleEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_attachEPNS_19_Safe_sequence_baseEb
_ZN11__gnu_debug25_Safe_local_iterator_base9_M_detachEv
_ZN11__gnu_debug30_Safe_unordered_container_base13_M_detach_allEv
_ZN11__gnu_debug30_Safe_unordered_container_base7_M_swapERS0_
_ZN14__gnu_parallel9_Settings3getEv
_ZN14__gnu_parallel9_Settings3setERS0_
_ZN9__gnu_cxx12__atomic_addEPVii
_ZN9__gnu_cxx17__pool_alloc_base12_M_get_mutexEv
_ZN9__gnu_cxx17__pool_alloc_base16_M_get_free_listEy
_ZN9__gnu_cxx17__pool_alloc_base9_M_refillEy
_ZN9__gnu_cxx18__exchange_and_addEPVii
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsgetnEPcx
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE6xsputnEPKcx
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE8overflowEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9pbackfailEi
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIcSt11char_traitsIcEEaSEOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4fileEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE4syncEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE5uflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsgetnEPwx
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE6xsputnEPKwx
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekoffExSt12_Ios_SeekdirSt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE7seekposESt4fposIiESt13_Ios_Openmode
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE8overflowEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9pbackfailEt
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEE9underflowEv
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC1EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EOS3_
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEC2EP6_iobuf
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED0Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEED1Ev
_ZN9__gnu_cxx18stdio_sync_filebufIwSt11char_traitsIwEEaSEOS3_
_ZN9__gnu_cxx27__verbose_terminate_handlerEv
_ZN9__gnu_cxx6__poolILb0EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb0EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb0EE16_M_reclaim_blockEPcy
_ZN9__gnu_cxx6__poolILb0EE16_M_reserve_blockEyy
_ZN9__gnu_cxx6__poolILb1EE10_M_destroyEv
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEPFvPvE
_ZN9__gnu_cxx6__poolILb1EE13_M_initializeEv
_ZN9__gnu_cxx6__poolILb1EE16_M_get_thread_idEv
_ZN9__gnu_cxx6__poolILb1EE16_M_reclaim_blockEPcy
_ZN9__gnu_cxx6__poolILb1EE16_M_reserve_blockEyy
_ZN9__gnu_cxx6__poolILb1EE21_M_destroy_thread_keyEPv
_ZN9__gnu_cxx9__freeresEv
_ZN9__gnu_cxx9free_list6_M_getEy
_ZN9__gnu_cxx9free_list8_M_clearEv
_ZNK10__cxxabiv117__class_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PKvRNS0_15__upcast_resultE
_ZNK10__cxxabiv117__class_type_info11__do_upcastEPKS0_PPv
_ZNK10__cxxabiv117__class_type_info12__do_dyncastExNS0_10__sub_kindEPKS0_PKvS3_S5_RNS0_16__dyncast_resultE
_ZNK10__cxxabiv117__class_type_info20__do_find_public_srcExPKvPKS0_S2_
_ZNK10__cxxabiv117__pbase_type_info10__do_catchEPKSt9type_infoPPvj
_ZNK10__cxxabiv117__pbase_type_info15__pointer_catchEPKS0_PPvj
_ZNK10__cxxabiv119__pointer_type_info14__is_pointer_pEv
_ZNK10__cxxabiv119__pointer_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK10__cxxabiv120__function_type_info15__is_function_pEv
_ZNK10__cxxabiv120__si_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv120__si_class_type_info12__do_dyncastExNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv120__si_class_type_info20__do_find_public_srcExPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv121__vmi_class_type_info11__do_upcastEPKNS_17__class_type_infoEPKvRNS1_15__upcast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info12__do_dyncastExNS_17__class_type_info10__sub_kindEPKS1_PKvS4_S6_RNS1_16__dyncast_resultE
_ZNK10__cxxabiv121__vmi_class_type_info20__do_find_public_srcExPKvPKNS_17__class_type_infoES2_
_ZNK10__cxxabiv129__pointer_to_member_type_info15__pointer_catchEPKNS_17__pbase_type_infoEPPvj
_ZNK11__gnu_debug16_Error_formatter10_M_messageENS_13_Debug_msg_idE
_ZNK11__gnu_debug16_Error_formatter10_Parameter14_M_print_fieldEPKS0_PKc
_ZNK11__gnu_debug16_Error_formatter10_Parameter20_M_print_descriptionEPKS0_
_ZNK11__gnu_debug16_Error_formatter13_M_print_wordEPKc
_ZNK11__gnu_debug16_Error_formatter15_M_print_stringEPKc
_ZNK11__gnu_debug16_Error_formatter17_M_get_max_lengthEv
_ZNK11__gnu_debug16_Error_formatter8_M_errorEv
_ZNK11__gnu_debug19_Safe_iterator_base11_M_singularEv
_ZNK11__gnu_debug19_Safe_iterator_base14_M_can_compareERKS0_
_ZNKSbIwSt11char_traitsIwESaIwEE11_M_disjunctEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE12find_last_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE13find_first_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE13get_allocatorEv
_ZNKSbIwSt11char_traitsIwESaIwEE15_M_check_lengthEyyPKc
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE16find_last_not_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE17find_first_not_ofEwy
_ZNKSbIwSt11char_traitsIwESaIwEE2atEy
_ZNKSbIwSt11char_traitsIwESaIwEE3endEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_leakedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4_Rep12_M_is_sharedEv
_ZNKSbIwSt11char_traitsIwESaIwEE4backEv
_ZNKSbIwSt11char_traitsIwESaIwEE4cendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4copyEPwyy
_ZNKSbIwSt11char_traitsIwESaIwEE4dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE4findEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE4findERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE4findEwy
_ZNKSbIwSt11char_traitsIwESaIwEE4rendEv
_ZNKSbIwSt11char_traitsIwESaIwEE4sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE5beginEv
_ZNKSbIwSt11char_traitsIwESaIwEE5c_strEv
_ZNKSbIwSt11char_traitsIwESaIwEE5crendEv
_ZNKSbIwSt11char_traitsIwESaIwEE5emptyEv
_ZNKSbIwSt11char_traitsIwESaIwEE5frontEv
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEPKwyy
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindERKS2_y
_ZNKSbIwSt11char_traitsIwESaIwEE5rfindEwy
_ZNKSbIwSt11char_traitsIwESaIwEE6_M_repEv
_ZNKSbIwSt11char_traitsIwESaIwEE6cbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6lengthEv
_ZNKSbIwSt11char_traitsIwESaIwEE6rbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE6substrEyy
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_dataEv
_ZNKSbIwSt11char_traitsIwESaIwEE7_M_iendEv
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareERKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyPKw
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyPKwy
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyRKS2_
_ZNKSbIwSt11char_traitsIwESaIwEE7compareEyyRKS2_yy
_ZNKSbIwSt11char_traitsIwESaIwEE7crbeginEv
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_checkEyPKc
_ZNKSbIwSt11char_traitsIwESaIwEE8_M_limitEyy
_ZNKSbIwSt11char_traitsIwESaIwEE8capacityEv
_ZNKSbIwSt11char_traitsIwESaIwEE8max_sizeEv
_ZNKSbIwSt11char_traitsIwESaIwEE9_M_ibeginEv
_ZNKSbIwSt11char_traitsIwESaIwEEcvSt17basic_string_viewIwS0_EEv
_ZNKSbIwSt11char_traitsIwESaIwEEixEy
_ZNKSi6gcountEv
_ZNKSi6sentrycvbEv
_ZNKSo6sentrycvbEv
_ZNKSs11_M_disjunctEPKc
_ZNKSs12find_last_ofEPKcy
_ZNKSs12find_last_ofEPKcyy
_ZNKSs12find_last_ofERKSsy
_ZNKSs12find_last_ofEcy
_ZNKSs13find_first_ofEPKcy
_ZNKSs13find_first_ofEPKcyy
_ZNKSs13find_first_ofERKSsy
_ZNKSs13find_first_ofEcy
_ZNKSs13get_allocatorEv
_ZNKSs15_M_check_lengthEyyPKc
_ZNKSs16find_last_not_ofEPKcy
_ZNKSs16find_last_not_ofEPKcyy
_ZNKSs16find_last_not_ofERKSsy
_ZNKSs16find_last_not_ofEcy
_ZNKSs17find_first_not_ofEPKcy
_ZNKSs17find_first_not_ofEPKcyy
_ZNKSs17find_first_not_ofERKSsy
_ZNKSs17find_first_not_ofEcy
_ZNKSs2atEy
_ZNKSs3endEv
_ZNKSs4_Rep12_M_is_leakedEv
_ZNKSs4_Rep12_M_is_sharedEv
_ZNKSs4backEv
_ZNKSs4cendEv
_ZNKSs4copyEPcyy
_ZNKSs4dataEv
_ZNKSs4findEPKcy
_ZNKSs4findEPKcyy
_ZNKSs4findERKSsy
_ZNKSs4findEcy
_ZNKSs4rendEv
_ZNKSs4sizeEv
_ZNKSs5beginEv
_ZNKSs5c_strEv
_ZNKSs5crendEv
_ZNKSs5emptyEv
_ZNKSs5frontEv
_ZNKSs5rfindEPKcy
_ZNKSs5rfindEPKcyy
_ZNKSs5rfindERKSsy
_ZNKSs5rfindEcy
_ZNKSs6_M_repEv
_ZNKSs6cbeginEv
_ZNKSs6lengthEv
_ZNKSs6rbeginEv
_ZNKSs6substrEyy
_ZNKSs7_M_dataEv
_ZNKSs7_M_iendEv
_ZNKSs7compareEPKc
_ZNKSs7compareERKSs
_ZNKSs7compareEyyPKc
_ZNKSs7compareEyyPKcy
_ZNKSs7compareEyyRKSs
_ZNKSs7compareEyyRKSsyy
_ZNKSs7crbeginEv
_ZNKSs8_M_checkEyPKc
_ZNKSs8_M_limitEyy
_ZNKSs8capacityEv
_ZNKSs8max_sizeEv
_ZNKSs9_M_ibeginEv
_ZNKSscvSt17basic_string_viewIcSt11char_traitsIcEEEv
_ZNKSsixEy
_ZNKSt10bad_typeid4whatEv
_ZNKSt10error_code23default_error_conditionEv
_ZNKSt10filesystem16filesystem_error4whatEv
_ZNKSt10filesystem16filesystem_error5path1Ev
_ZNKSt10filesystem16filesystem_error5path2Ev
_ZNKSt10filesystem18directory_iteratordeEv
_ZNKSt10filesystem28recursive_directory_iterator17recursion_pendingEv
_ZNKSt10filesystem28recursive_directory_iterator5depthEv
_ZNKSt10filesystem28recursive_directory_iterator7optionsEv
_ZNKSt10filesystem28recursive_directory_iteratordeEv
_ZNKSt10filesystem4path11parent_pathEv
_ZNKSt10filesystem4path12has_filenameEv
_ZNKSt10filesystem4path13has_root_nameEv
_ZNKSt10filesystem4path13has_root_pathEv
_ZNKSt10filesystem4path13relative_pathEv
_ZNKSt10filesystem4path14root_directoryEv
_ZNKSt10filesystem4path15has_parent_pathEv
_ZNKSt10filesystem4path16lexically_normalEv
_ZNKSt10filesystem4path17_M_find_extensionEv
_ZNKSt10filesystem4path17has_relative_pathEv
_ZNKSt10filesystem4path18has_root_directoryEv
_ZNKSt10filesystem4path18lexically_relativeERKS0_
_ZNKSt10filesystem4path19lexically_proximateERKS0_
_ZNKSt10filesystem4path5_List13_Impl_deleterclEPNS1_5_ImplE
_ZNKSt10filesystem4path5_List3endEv
_ZNKSt10filesystem4path5_List5beginEv
_ZNKSt10filesystem4path7compareERKS0_
_ZNKSt10filesystem4path7compareESt17basic_string_viewIwSt11char_traitsIwEE
_ZNKSt10filesystem4path9root_nameEv
_ZNKSt10filesystem4path9root_pathEv
_ZNKSt10filesystem7__cxx1116filesystem_error4whatEv
_ZNKSt10filesystem7__cxx1116filesystem_error5path1Ev
_ZNKSt10filesystem7__cxx1116filesystem_error5path2Ev
_ZNKSt10filesystem7__cxx1118directory_iteratordeEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator17recursion_pendingEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator5depthEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iterator7optionsEv
_ZNKSt10filesystem7__cxx1128recursive_directory_iteratordeEv
_ZNKSt10filesystem7__cxx114path11parent_pathEv
_ZNKSt10filesystem7__cxx114path12has_filenameEv
_ZNKSt10filesystem7__cxx114path13has_root_nameEv
_ZNKSt10filesystem7__cxx114path13has_root_pathEv
_ZNKSt10filesystem7__cxx114path13relative_pathEv
_ZNKSt10filesystem7__cxx114path14root_directoryEv
_ZNKSt10filesystem7__cxx114path15has_parent_pathEv
_ZNKSt10filesystem7__cxx114path16lexically_normalEv
_ZNKSt10filesystem7__cxx114path17_M_find_extensionEv
_ZNKSt10filesystem7__cxx114path17has_relative_pathEv
_ZNKSt10filesystem7__cxx114path18has_root_directoryEv
_ZNKSt10filesystem7__cxx114path18lexically_relativeERKS1_
_ZNKSt10filesystem7__cxx114path19lexically_proximateERKS1_
_ZNKSt10filesystem7__cxx114path5_List13_Impl_deleterclEPNS2_5_ImplE
_ZNKSt10filesystem7__cxx114path5_List3endEv
_ZNKSt10filesystem7__cxx114path5_List5beginEv
_ZNKSt10filesystem7__cxx114path7compareERKS1_
_ZNKSt10filesystem7__cxx114path7compareESt17basic_string_viewIwSt11char_traitsIwEE
_ZNKSt10filesystem7__cxx114path9root_nameEv
_ZNKSt10filesystem7__cxx114path9root_pathEv
_ZNKSt10istrstream5rdbufEv
_ZNKSt10moneypunctIcLb0EE10neg_formatEv
_ZNKSt10moneypunctIcLb0EE10pos_formatEv
_ZNKSt10moneypunctIcLb0EE11curr_symbolEv
_ZNKSt10moneypunctIcLb0EE11do_groupingEv
_ZNKSt10moneypunctIcLb0EE11frac_digitsEv
_ZNKSt10moneypunctIcLb0EE13decimal_pointEv
_ZNKSt10moneypunctIcLb0EE13do_neg_formatEv
_ZNKSt10moneypunctIcLb0EE13do_pos_formatEv
_ZNKSt10moneypunctIcLb0EE13negative_signEv
_ZNKSt10moneypunctIcLb0EE13positive_signEv
_ZNKSt10moneypunctIcLb0EE13thousands_sepEv
_ZNKSt10moneypunctIcLb0EE14do_curr_symbolEv
_ZNKSt10moneypunctIcLb0EE14do_frac_digitsEv
_ZNKSt10moneypunctIcLb0EE16do_decimal_pointEv
_ZNKSt10moneypunctIcLb0EE16do_negative_signEv
_ZNKSt10moneypunctIcLb0EE16do_positive_signEv
_ZNKSt10moneypunctIcLb0EE16do_thousands_sepEv
_ZNKSt10moneypunctIcLb0EE8groupingEv
_ZNKSt10moneypunctIcLb1EE10neg_formatEv
_ZNKSt10moneypunctIcLb1EE10pos_formatEv
_ZNKSt10moneypunctIcLb1EE11curr_symbolEv
_ZNKSt10moneypunctIcLb1EE11do_groupingEv
_ZNKSt10moneypunctIcLb1EE11frac_digitsEv
_ZNKSt10moneypunctIcLb1EE13decimal_pointEv
_ZNKSt10moneypunctIcLb1EE13do_neg_formatEv
_ZNKSt10moneypunctIcLb1EE13do_pos_formatEv
_ZNKSt10moneypunctIcLb1EE13negative_signEv
_ZNKSt10moneypunctIcLb1EE13positive_signEv
_ZNKSt10moneypunctIcLb1EE13thousands_sepEv
_ZNKSt10moneypunctIcLb1EE14do_curr_symbolEv
_ZNKSt10moneypunctIcLb1EE14do_frac_digitsEv
_ZNKSt10moneypunctIcLb1EE16do_decimal_pointEv
_ZNKSt10moneypunctIcLb1EE16do_negative_signEv
_ZNKSt10moneypunctIcLb1EE16do_positive_signEv
_ZNKSt10moneypunctIcLb1EE16do_thousands_sepEv
_ZNKSt10moneypunctIcLb1EE8groupingEv
_ZNKSt10moneypunctIwLb0EE10neg_formatEv
_ZNKSt10moneypunctIwLb0EE10pos_formatEv
_ZNKSt10moneypunctIwLb0EE11curr_symbolEv
_ZNKSt10moneypunctIwLb0EE11do_groupingEv
_ZNKSt10moneypunctIwLb0EE11frac_digitsEv
_ZNKSt10moneypunctIwLb0EE13decimal_pointEv
_ZNKSt10moneypunctIwLb0EE13do_neg_formatEv
_ZNKSt10moneypunctIwLb0EE13do_pos_formatEv
_ZNKSt10moneypunctIwLb0EE13negative_signEv
_ZNKSt10moneypunctIwLb0EE13positive_signEv
_ZNKSt10moneypunctIwLb0EE13thousands_sepEv
_ZNKSt10moneypunctIwLb0EE14do_curr_symbolEv
_ZNKSt10moneypunctIwLb0EE14do_frac_digitsEv
_ZNKSt10moneypunctIwLb0EE16do_decimal_pointEv
_ZNKSt10moneypunctIwLb0EE16do_negative_signEv
_ZNKSt10moneypunctIwLb0EE16do_positive_signEv
_ZNKSt10moneypunctIwLb0EE16do_thousands_sepEv
_ZNKSt10moneypunctIwLb0EE8groupingEv
_ZNKSt10moneypunctIwLb1EE10neg_formatEv
_ZNKSt10moneypunctIwLb1EE10pos_formatEv
_ZNKSt10moneypunctIwLb1EE11curr_symbolEv
_ZNKSt10moneypunctIwLb1EE11do_groupingEv
_ZNKSt10moneypunctIwLb1EE11frac_digitsEv
_ZNKSt10moneypunctIwLb1EE13decimal_pointEv
_ZNKSt10moneypunctIwLb1EE13do_neg_formatEv
_ZNKSt10moneypunctIwLb1EE13do_pos_formatEv
_ZNKSt10moneypunctIwLb1EE13negative_signEv
_ZNKSt10moneypunctIwLb1EE13positive_signEv
_ZNKSt10moneypunctIwLb1EE13thousands_sepEv
_ZNKSt10moneypunctIwLb1EE14do_curr_symbolEv
_ZNKSt10moneypunctIwLb1EE14do_frac_digitsEv
_ZNKSt10moneypunctIwLb1EE16do_decimal_pointEv
_ZNKSt10moneypunctIwLb1EE16do_negative_signEv
_ZNKSt10moneypunctIwLb1EE16do_positive_signEv
_ZNKSt10moneypunctIwLb1EE16do_thousands_sepEv
_ZNKSt10moneypunctIwLb1EE8groupingEv
_ZNKSt10ostrstream5rdbufEv
_ZNKSt10ostrstream6pcountEv
_ZNKSt11__timepunctIcE15_M_am_pm_formatEPKc
_ZNKSt11__timepunctIcE15_M_date_formatsEPPKc
_ZNKSt11__timepunctIcE15_M_time_formatsEPPKc
_ZNKSt11__timepunctIcE19_M_days_abbreviatedEPPKc
_ZNKSt11__timepunctIcE20_M_date_time_formatsEPPKc
_ZNKSt11__timepunctIcE21_M_months_abbreviatedEPPKc
_ZNKSt11__timepunctIcE6_M_putEPcyPKcPK2tm
_ZNKSt11__timepunctIcE7_M_daysEPPKc
_ZNKSt11__timepunctIcE8_M_am_pmEPPKc
_ZNKSt11__timepunctIcE9_M_monthsEPPKc
_ZNKSt11__timepunctIwE15_M_am_pm_formatEPKw
_ZNKSt11__timepunctIwE15_M_date_formatsEPPKw
_ZNKSt11__timepunctIwE15_M_time_formatsEPPKw
_ZNKSt11__timepunctIwE19_M_days_abbreviatedEPPKw
_ZNKSt11__timepunctIwE20_M_date_time_formatsEPPKw
_ZNKSt11__timepunctIwE21_M_months_abbreviatedEPPKw
_ZNKSt11__timepunctIwE6_M_putEPwyPKwPK2tm
_ZNKSt11__timepunctIwE7_M_daysEPPKw
_ZNKSt11__timepunctIwE8_M_am_pmEPPKw
_ZNKSt11__timepunctIwE9_M_monthsEPPKw
_ZNKSt11logic_error4whatEv
_ZNKSt12__basic_fileIcE7is_openEv
_ZNKSt12bad_weak_ptr4whatEv
_ZNKSt12future_error4whatEv
_ZNKSt12strstreambuf6pcountEv
_ZNKSt13bad_exception4whatEv
_ZNKSt13basic_filebufIcSt11char_traitsIcEE7is_openEv
_ZNKSt13basic_filebufIwSt11char_traitsIwEE7is_openEv
_ZNKSt13basic_fstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt13basic_fstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt13basic_fstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt13basic_fstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt13basic_istreamIwSt11char_traitsIwEE6gcountEv
_ZNKSt13basic_istreamIwSt11char_traitsIwEE6sentrycvbEv
_ZNKSt13basic_ostreamIwSt11char_traitsIwEE6sentrycvbEv
_ZNKSt13random_device13_M_getentropyEv
_ZNKSt13runtime_error4whatEv
_ZNKSt14basic_ifstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt14basic_ifstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt14basic_ifstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt14basic_ifstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt14basic_ofstreamIcSt11char_traitsIcEE5rdbufEv
_ZNKSt14basic_ofstreamIcSt11char_traitsIcEE7is_openEv
_ZNKSt14basic_ofstreamIwSt11char_traitsIwEE5rdbufEv
_ZNKSt14basic_ofstreamIwSt11char_traitsIwEE7is_openEv
_ZNKSt14error_category10equivalentERKSt10error_codei
_ZNKSt14error_category10equivalentEiRKSt15error_condition
_ZNKSt14error_category23default_error_conditionEi
_ZNKSt15__exception_ptr13exception_ptr20__cxa_exception_typeEv
_ZNKSt15__exception_ptr13exception_ptrcvMS0_FvvEEv
_ZNKSt15__exception_ptr13exception_ptrntEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE4gptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE4pptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5ebackEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5egptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5epptrEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE5pbaseEv
_ZNKSt15basic_streambufIcSt11char_traitsIcEE6getlocEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE4gptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE4pptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5ebackEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5egptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5epptrEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE5pbaseEv
_ZNKSt15basic_streambufIwSt11char_traitsIwEE6getlocEv
_ZNKSt15basic_stringbufIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt15basic_stringbufIwSt11char_traitsIwESaIwEE3strEv

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 1515

Password: 1515

89766042e29aed5fce63c7340618b000

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 10KB - Virtual size: 10KB

.data Size: - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 4B

Password: 1515

6a76a05db4ed2607d1661c8c35006ba5

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6Certificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7Certificate

Extended Key Usages

Key Usages

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77Signer

Signature Validations

Verification

19/09/2022, 09:20 Valid: true

Chain 1

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 1.0MB - Virtual size: 1.0MB

.data Size: 14KB - Virtual size: 13KB

.rdata Size: 86KB - Virtual size: 85KB

.pdata Size: 23KB - Virtual size: 23KB

.xdata Size: 27KB - Virtual size: 27KB

.bss Size: - Virtual size: 1KB

.edata Size: 8KB - Virtual size: 8KB

.idata Size: 4KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 3KB - Virtual size: 2KB

Password: 1515

6b086daa303d47b394d11cce9a702fb3

Code Sign

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6Certificate

Extended Key Usages

Key Usages

01Certificate

Key Usages

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16Certificate

Extended Key Usages

Key Usages

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0aCertificate

Extended Key Usages

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 10KB - Virtual size: 10KB

.data
Size: - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

ed:34:3e:b8:ff:c3:52:22:c4:8e:65:da:d9:29:70:f4:aa:18:30:3d:63:72:94:f0:64:14:52:d0:be:44:a0:77
Signer

19/09/2022, 09:20
Valid: true

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 14KB - Virtual size: 13KB

.rdata
Size: 86KB - Virtual size: 85KB

.pdata
Size: 23KB - Virtual size: 23KB

.xdata
Size: 27KB - Virtual size: 27KB

.bss
Size: - Virtual size: 1KB

.edata
Size: 8KB - Virtual size: 8KB

.idata
Size: 4KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 3KB - Virtual size: 2KB

31:83:0c:37:0a:d7:e4:97:63:3b:6e:b3:a0:2d:69:e6
Certificate

01
Certificate

48:fc:93:b4:60:55:94:8d:36:a7:c9:8a:89:d6:94:16
Certificate

62:1d:6d:0c:52:01:9e:3b:90:79:15:20:89:21:1c:0a
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

03:cb:34:fd:3d:ff:12:11:33:9f:f0:7c:4b:21:57:c7
Certificate

1b:54:87:d6:22:a5:af:a4:4d:87:63:d7:64:97:3d:1e:96:42:84:b1:cf:92:be:52:44:23:cc:ad:2e:67:9b:7d
Signer

19/09/2022, 09:20
Valid: true

.text
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 14KB - Virtual size: 14KB

.rdata
Size: 93KB - Virtual size: 93KB

.pdata
Size: 60KB - Virtual size: 59KB

.xdata
Size: 91KB - Virtual size: 90KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 332KB - Virtual size: 331KB

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 8KB - Virtual size: 7KB