VBC FG-Grey[.]vst3

Sharing

Copy URL Twitter E-mail

General

Target

VBC FG-Grey.vst3
Size

32.4MB
MD5

0aeb8555557f84821f5f6b034e4a85a2
SHA1

dc854a84fd9a6048687f6122266ca8a7d0f71fe2
SHA256

e516cbd8c235591f498b4a686a1f46b3bc2799c0164773023f015571eb1c75bc
SHA512

bce8b293546064c0b2f81f6335dda7f60ef884a0821ab0f439dd6a5f054ffa9748efc471ea2fd1f0bae86289109f74477eca8ed3d336b69e6eb30065e16242c4
SSDEEP

196608:r2snW9np+44P3vhcok86kyZwnlHv8LtkgROg2n5AHvF6uCUhY6Dg5EIEcJk0X4gK:CsnW9n1c3ZUwntQRb2n5APFxaUZvUvS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VBC FG-Grey.vst3

Files

VBC FG-Grey.vst3
.dll windows:6 windows x64 arch:x64

b0c08197af6136bf651b3b45aea72654

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

RedrawWindow
InvalidateRect
GetUpdateRgn
EndPaint
BeginPaint
GetClientRect
GetForegroundWindow
EnableMenuItem
GetSystemMenu
ReleaseCapture
SetCapture
SetForegroundWindow
MessageBeep
GetCapture
MapVirtualKeyW
SetCursorPos
GetAsyncKeyState
GetActiveWindow
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsWindowVisible
GetWindowPlacement
SetLayeredWindowAttributes
UpdateLayeredWindow
ShowWindow
IsChild
IsWindow
DrawIconEx
GetMessageExtraInfo
MapVirtualKeyA
SetCursor
GetCursorPos
CreateCaret
DestroyCursor
ShowCaret
SetCaretPos
ScreenToClient
WindowFromPoint
GetWindowLongW
SetWindowLongW
GetParent
EnumChildWindows
FindWindowW
FindWindowExW
LoadCursorW
DestroyIcon
CreateIconIndirect
GetIconInfo
GetMonitorInfoW
EnumDisplayMonitors
GetWindowInfo
ToUnicode
VkKeyScanA
ToAscii
GetKeyboardState
SetWindowPos
SetFocus
DestroyCaret
GetMessageTime
GetMessagePos
TrackMouseEvent
EnumWindows
SetWindowLongPtrW
GetWindowLongPtrW
GetFocus
RegisterClassExW
UnregisterClassW
DefWindowProcW
PeekMessageW
AttachThreadInput
GetGUIThreadInfo
GetWindowThreadProcessId
GetKeyState
PostThreadMessageA
LoadStringA
SetWindowTextW
GetSystemMetrics
CreateWindowExW
PostMessageW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
SystemParametersInfoW
GetDesktopWindow
MessageBoxW
GetWindowRect
ReleaseDC
GetDC
EndDialog
DestroyWindow
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxA

rpcrt4

UuidCreate

wininet

InternetGetConnectedState

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetModuleHandleW
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFileTime
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DeviceIoControl
CreateDirectoryExW
CopyFileW
MoveFileExW
ResetEvent
OpenEventA
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
LoadLibraryW
WTSGetActiveConsoleSessionId
AreFileApisANSI
CreateFileA
ReadFile
GetSystemDirectoryW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetHandleInformation
InitializeCriticalSectionAndSpinCount
CreateEventW
TerminateProcess
GetExitCodeProcess
TlsGetValue
TlsSetValue
CreateProcessA
OpenProcess
Sleep
WaitNamedPipeA
OutputDebugStringA
GetTempFileNameW
SetFilePointer
WriteFile
GetTempPathW
FindFirstFileW
FindNextFileW
VirtualFree
GetModuleFileNameA
GetModuleFileNameW
GetSystemInfo
GetVersionExW
TlsFree
GetLogicalProcessorInformation
FlushFileBuffers
GetOverlappedResult
SetErrorMode
GetDriveTypeW
GetLogicalDrives
GetLogicalDriveStringsW
GetVolumeInformationW
SetEnvironmentVariableA
FreeLibrary
LoadLibraryA
LCMapStringA
GetUserDefaultLCID
GetStringTypeExA
InitializeSListHead
InitializeConditionVariable
WakeConditionVariable
SleepConditionVariableCS
GetExitCodeThread
FreeLibraryAndExitThread
GetModuleHandleExA
GetModuleHandleExW
K32GetModuleInformation
OutputDebugStringW
SetUnhandledExceptionFilter
TryEnterCriticalSection
ExitProcess
SetThreadPriority
SetPriorityClass
GlobalMemoryStatusEx
GetNativeSystemInfo
SetThreadAffinityMask
CreateSymbolicLinkW
GetLocaleInfoW
GlobalAlloc
GlobalSize
GlobalUnlock
GlobalLock
InitializeCriticalSectionEx
GetTempPathA
RaiseException
TlsAlloc
TerminateThread
QueueUserAPC
GetSystemTimeAsFileTime
WaitForMultipleObjects
WaitForSingleObjectEx
SetEvent
CreateEventA
GetLastError
LocalFree
WideCharToMultiByte
FormatMessageW
FormatMessageA
SwitchToThread
IsDebuggerPresent
DisableThreadLibraryCalls
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetProcAddress
GetModuleHandleA
VirtualProtect
VirtualAlloc
GetVersionExA
SetThreadContext
GetThreadContext
GetThreadId
ResumeThread
SuspendThread
OpenThread
GetCurrentThreadId
GetCurrentThread
CreateRemoteThread
CreateThread
GetCurrentProcessId
GetCurrentProcess
CreateMutexA
WaitForSingleObject
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapFree
HeapAlloc
GetComputerNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
CloseHandle
IsProcessorFeaturePresent
FindClose

gdi32

GetTextMetricsW
GetDeviceCaps
DeleteObject
CreateCompatibleDC
GetObjectW
CreateDIBSection
StretchDIBits
SaveDC
RestoreDC
GetRegionData
ExcludeClipRect
CreateRectRgnIndirect
CreateRectRgn
CreateBitmap
CombineRgn
GetKerningPairsW
SetMapMode
SetMapperFlags
RemoveFontMemResourceEx
GetGlyphIndicesW
GetOutlineTextMetricsW
GetGlyphOutlineW
CreateFontIndirectW
SelectObject
DeleteDC

shell32

SHGetSpecialFolderPathA
SHParseDisplayName
SHBrowseForFolderW
SHCreateShellItem
ExtractAssociatedIconW
SHGetSpecialFolderPathW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
ShellExecuteA
Shell_NotifyIconW

ole32

OleUninitialize
OleInitialize
RevokeDragDrop
CoTaskMemAlloc
CoTaskMemFree
RegisterDragDrop
DoDragDrop
CoCreateGuid
CoCreateInstance

oleaut32

VariantClear

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
CloseServiceHandle
OpenSCManagerW
OpenServiceA
QueryServiceConfigA

msvcp140

?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_join
_Query_perf_frequency
_Query_perf_counter
?write@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@PEB_W_J@Z
_Mtx_current_owns
_Cnd_timedwait
?clear@ios_base@std@@QEAAXH_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAG@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAI@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAM@Z
?sgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?in_avail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JXZ
?readsome@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_JPEAD_J@Z
_Thrd_sleep
_Thrd_yield
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
?_Xout_of_range@std@@YAXPEBD@Z
_Xtime_get_ticks
?_Random_device@std@@YAIXZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?uncaught_exception@std@@YA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?good@ios_base@std@@QEBA_NXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?_Syserror_map@std@@YAPEBDH@Z
?pubimbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
?pubsync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
_Thrd_id
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@V?$fpos@U_Mbstatet@@@2@@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?c_str@?$_Yarn@D@std@@QEBAPEBDXZ
??0facet@locale@std@@IEAA@_K@Z
??1facet@locale@std@@MEAA@XZ
?classic@locale@std@@SAAEBV12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?toupper@?$ctype@D@std@@QEBADD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$ctype@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
_Strcoll
_Strxfrm
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$collate@D@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?widen@?$ctype@D@std@@QEBADD@Z
?narrow@?$ctype@D@std@@QEBADDD@Z
?exceptions@ios_base@std@@QEAAXH@Z
?imbue@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAA?AVlocale@2@AEBV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@G@Z
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?imbue@ios_base@std@@QEAA?AVlocale@2@AEBV32@@Z
?_Getcat@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??1?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEAA@XZ
??0?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEAA@_K@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?put@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QEBA?AV?$ostreambuf_iterator@DU?$char_traits@D@std@@@2@V32@AEAVios_base@2@DPEBUtm@@PEBD3@Z
?_Getcat@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAG@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAI@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAJ@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAK@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAM@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAN@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAO@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEAPEAX@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_J@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_K@Z
?do_get@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@MEBA?AV?$istreambuf_iterator@DU?$char_traits@D@std@@@2@V32@0AEAVios_base@2@AEAHAEA_N@Z
?id@?$num_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?_Winerror_map@std@@YAHH@Z
?_Winerror_message@std@@YAKKPEADK@Z
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAXXZ
_Cnd_init_in_situ
_Cnd_destroy_in_situ
_Cnd_wait
_Cnd_broadcast
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@F@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAF@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAN@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z

ws2_32

htons
WSAStartup
WSACleanup
htonl
ntohs
ntohl

shlwapi

PathStripToRootW

wtsapi32

WTSSendMessageW

imm32

ImmNotifyIME
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow

vcruntime140

longjmp
_CxxThrowException
memset
__std_terminate
memchr
__RTtypeid
memcmp
__std_type_info_compare
__RTDynamicCast
strstr
__CxxFrameHandler3
strrchr
__C_specific_handler
__std_exception_destroy
__std_exception_copy
memcpy
__current_exception
memmove
strchr
_purecall
__current_exception_context
__std_type_info_destroy_list
__intrinsic_setjmp
__std_type_info_name

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit
strerror
terminate
_beginthreadex
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn
_endthreadex
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_fpreset
_cexit

api-ms-win-crt-heap-l1-1-0

_aligned_free
calloc
_aligned_malloc
_callnewh
free
malloc
realloc

api-ms-win-crt-math-l1-1-0

atan2
truncf
tanf
sinf
powf
cosf
_dclass
nextafter
ldexp
copysign
tan
sqrt
sin
_fdclass
round
floorf
atan2f
_hypot
floor
ceil
fmod
log
acos
logf
sqrtf
ceilf
log10f
expf
modff
pow
log10
cos
exp
_hypotf

api-ms-win-crt-string-l1-1-0

isdigit
isspace
strncmp
strcmp
ispunct
strncpy
wcsncpy
strncat
_stricmp
iswdigit
iswspace
iswalpha
iswalnum
towlower
towupper
tolower

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswscanf
ftell
fseek
fclose
__stdio_common_vswprintf
tmpnam
__stdio_common_vsscanf
__stdio_common_vfprintf
__acrt_iob_func
_ftelli64
_wfopen_s
ungetc
setvbuf
_fseeki64
fsetpos
fread
fputc
fgetpos
fgetc
fflush
_get_stream_buffer_pointers
__stdio_common_vsprintf
fwrite
fopen

api-ms-win-crt-time-l1-1-0

strftime
_utime64
_localtime64_s
_ftime64_s
_ctime64
_mktime64
_localtime64
_time64
clock
wcsftime
_gmtime64

api-ms-win-crt-utility-l1-1-0

srand
rand
qsort

api-ms-win-crt-filesystem-l1-1-0

_lock_file
_unlock_file

api-ms-win-crt-locale-l1-1-0

_create_locale
localeconv

api-ms-win-crt-convert-l1-1-0

_atoi64
_strtod_l
strtol
atoi

api-ms-win-crt-environment-l1-1-0

getenv

psapi

EnumProcessModules
GetModuleInformation

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW

imagehlp

ImageGetCertificateData
ImageAddCertificate
ImageEnumerateCertificates
ImageGetCertificateHeader

wintrust

WinVerifyTrust

winmm

timeGetTime
timeBeginPeriod

Exports

Exports

?dvs_0x00bb1367_mfort6317_@@3PAIA
?dvs_0x010650bc_mfort6317_@@3PAIA
?dvs_0x01724ee7_mfort6317_@@3PAIA
?dvs_0x01edd8d2_mfort6317_@@3PAIA
?dvs_0x02985a14_mfort6317_@@3PAIA
?dvs_0x0356f96e_mfort6317_@@3PAIA
?dvs_0x035e38dd_mfort6317_@@3PAIA
?dvs_0x053014e2_mfort6317_@@3PAIA
?dvs_0x07800957_mfort6317_@@3PAIA
?dvs_0x07e4e4dd_mfort6317_@@3PAIA
?dvs_0x08434d7d_mfort6317_@@3PAIA
?dvs_0x08cce860_mfort6317_@@3PAIA
?dvs_0x0940fa9d_mfort6317_@@3PAIA
?dvs_0x097d782b_mfort6317_@@3PAIA
?dvs_0x0a229fbb_mfort6317_@@3PAIA
?dvs_0x0a56b9f5_mfort6317_@@3PAIA
?dvs_0x0b6aa927_mfort6317_@@3PAIA
?dvs_0x0bd65aa9_mfort6317_@@3PAIA
?dvs_0x0c57ab84_mfort6317_@@3PAIA
?dvs_0x0cc856ac_mfort6317_@@3PAIA
?dvs_0x0d82fb94_mfort6317_@@3PAIA
?dvs_0x0e228e6f_mfort6317_@@3PAIA
?dvs_0x0e33b9b9_mfort6317_@@3PAIA
?dvs_0x0e4228af_mfort6317_@@3PAIA
?dvs_0x0e827e67_mfort6317_@@3PAIA
?dvs_0x0f212a37_mfort6317_@@3PAIA
?dvs_0x0fd79092_mfort6317_@@3PAIA
?dvs_0x1106b1a7_mfort6317_@@3PAIA
?dvs_0x114fc19a_mfort6317_@@3PAIA
?dvs_0x117bf1d4_mfort6317_@@3PAIA
?dvs_0x119134f2_mfort6317_@@3PAIA
?dvs_0x11f92309_mfort6317_@@3PAIA
?dvs_0x120ba9a4_mfort6317_@@3PAIA
?dvs_0x1433e6c5_mfort6317_@@3PAIA
?dvs_0x148b6e6d_mfort6317_@@3PAIA
?dvs_0x14c30a65_mfort6317_@@3PAIA
?dvs_0x15000e1f_mfort6317_@@3PAIA
?dvs_0x1538427e_mfort6317_@@3PAIA
?dvs_0x15c9f517_mfort6317_@@3PAIA
?dvs_0x1652ce95_mfort6317_@@3PAIA
?dvs_0x16cf1550_mfort6317_@@3PAIA
?dvs_0x17b9d4dc_mfort6317_@@3PAIA
?dvs_0x1811c709_mfort6317_@@3PAIA
?dvs_0x18e3cb5e_mfort6317_@@3PAIA
?dvs_0x198ed7f6_mfort6317_@@3PAIA
?dvs_0x1a716057_mfort6317_@@3PAIA
?dvs_0x1b6f57b4_mfort6317_@@3PAIA
?dvs_0x1c396c2e_mfort6317_@@3PAIA
?dvs_0x1d6b18ee_mfort6317_@@3PAIA
?dvs_0x1e13b7d8_mfort6317_@@3PAIA
?dvs_0x1eaa105e_mfort6317_@@3PAIA
?dvs_0x1ed760d8_mfort6317_@@3PAIA
?dvs_0x202317f5_mfort6317_@@3PAIA
?dvs_0x212b04bc_mfort6317_@@3PAIA
?dvs_0x21fa126d_mfort6317_@@3PAIA
?dvs_0x22029775_mfort6317_@@3PAIA
?dvs_0x23497223_mfort6317_@@3PAIA
?dvs_0x24a039ef_mfort6317_@@3PAIA
?dvs_0x24a6bd2c_mfort6317_@@3PAIA
?dvs_0x251c4b17_mfort6317_@@3PAIA
?dvs_0x26601dc2_mfort6317_@@3PAIA
?dvs_0x26a13697_mfort6317_@@3PAIA
?dvs_0x27f974e4_mfort6317_@@3PAIA
?dvs_0x283c30f9_mfort6317_@@3PAIA
?dvs_0x288d4365_mfort6317_@@3PAIA
?dvs_0x289d688c_mfort6317_@@3PAIA
?dvs_0x2920343a_mfort6317_@@3PAIA
?dvs_0x2ab63690_mfort6317_@@3PAIA
?dvs_0x2b7fea5b_mfort6317_@@3PAIA
?dvs_0x2cadbd6e_mfort6317_@@3PAIA
?dvs_0x2cd9d17a_mfort6317_@@3PAIA
?dvs_0x2d0e666c_mfort6317_@@3PAIA
?dvs_0x2d80e5e4_mfort6317_@@3PAIA
?dvs_0x2e587adb_mfort6317_@@3PAIA
?dvs_0x30f7155a_mfort6317_@@3PAIA
?dvs_0x321fe249_mfort6317_@@3PAIA
?dvs_0x3227e973_mfort6317_@@3PAIA
?dvs_0x3420c388_mfort6317_@@3PAIA
?dvs_0x3461b2e1_mfort6317_@@3PAIA
?dvs_0x349aff13_mfort6317_@@3PAIA
?dvs_0x35a44047_mfort6317_@@3PAIA
?dvs_0x36ddb30b_mfort6317_@@3PAIA
?dvs_0x372e8643_mfort6317_@@3PAIA
?dvs_0x37c34b42_mfort6317_@@3PAIA
?dvs_0x3b063fcf_mfort6317_@@3PAIA
?dvs_0x3b721b85_mfort6317_@@3PAIA
?dvs_0x3c097e11_mfort6317_@@3PAIA
?dvs_0x3c6e8c88_mfort6317_@@3PAIA
?dvs_0x3d5f90b1_mfort6317_@@3PAIA
?dvs_0x3d6b0982_mfort6317_@@3PAIA
?dvs_0x3dabe3d2_mfort6317_@@3PAIA
?dvs_0x3dd44626_mfort6317_@@3PAIA
?dvs_0x3e361558_mfort6317_@@3PAIA
?dvs_0x3e7f753c_mfort6317_@@3PAIA
?dvs_0x3f86dc63_mfort6317_@@3PAIA
?dvs_0x3fa481f3_mfort6317_@@3PAIA
?dvs_0x4044010a_mfort6317_@@3PAIA
?dvs_0x4121a0b3_mfort6317_@@3PAIA
?dvs_0x41236cb2_mfort6317_@@3PAIA
?dvs_0x42761f78_mfort6317_@@3PAIA
?dvs_0x443fb526_mfort6317_@@3PAIA
?dvs_0x446266c4_mfort6317_@@3PAIA
?dvs_0x45847dac_mfort6317_@@3PAIA
?dvs_0x4656e78e_mfort6317_@@3PAIA
?dvs_0x46f2cbca_mfort6317_@@3PAIA
?dvs_0x473cb050_mfort6317_@@3PAIA
?dvs_0x4a3ba6b1_mfort6317_@@3PAIA
?dvs_0x4b28ad17_mfort6317_@@3PAIA
?dvs_0x4c26ff63_mfort6317_@@3PAIA
?dvs_0x4d68aca9_mfort6317_@@3PAIA
?dvs_0x4eac9467_mfort6317_@@3PAIA
?dvs_0x4f05d372_mfort6317_@@3PAIA
?dvs_0x4f2c6061_mfort6317_@@3PAIA
?dvs_0x4f657ca2_mfort6317_@@3PAIA
?dvs_0x509ea0b2_mfort6317_@@3PAIA
?dvs_0x5187f308_mfort6317_@@3PAIA
?dvs_0x536a531b_mfort6317_@@3PAIA
?dvs_0x553993a6_mfort6317_@@3PAIA
?dvs_0x55d2d475_mfort6317_@@3PAIA
?dvs_0x55d6dbef_mfort6317_@@3PAIA
?dvs_0x5754d5d3_mfort6317_@@3PAIA
?dvs_0x57c59017_mfort6317_@@3PAIA
?dvs_0x582aa87d_mfort6317_@@3PAIA
?dvs_0x5a238452_mfort6317_@@3PAIA
?dvs_0x5a287a77_mfort6317_@@3PAIA
?dvs_0x5a6ff453_mfort6317_@@3PAIA
?dvs_0x5abc64e3_mfort6317_@@3PAIA
?dvs_0x5d255b81_mfort6317_@@3PAIA
?dvs_0x5d9a9a63_mfort6317_@@3PAIA
?dvs_0x5e34e165_mfort6317_@@3PAIA
?dvs_0x5f04f646_mfort6317_@@3PAIA
?dvs_0x5f43674e_mfort6317_@@3PAIA
?dvs_0x5f8c0eb5_mfort6317_@@3PAIA
?dvs_0x60845842_mfort6317_@@3PAIA
?dvs_0x60b74b78_mfort6317_@@3PAIA
?dvs_0x612c92a5_mfort6317_@@3PAIA
?dvs_0x61613e66_mfort6317_@@3PAIA
?dvs_0x61b7e3d4_mfort6317_@@3PAIA
?dvs_0x61fafba5_mfort6317_@@3PAIA
?dvs_0x63279ce7_mfort6317_@@3PAIA
?dvs_0x6378bb9e_mfort6317_@@3PAIA
?dvs_0x63df79ef_mfort6317_@@3PAIA
?dvs_0x668e8d96_mfort6317_@@3PAIA
?dvs_0x67027001_mfort6317_@@3PAIA
?dvs_0x67d3d738_mfort6317_@@3PAIA
?dvs_0x68395097_mfort6317_@@3PAIA
?dvs_0x69b90e96_mfort6317_@@3PAIA
?dvs_0x69dab7bb_mfort6317_@@3PAIA
?dvs_0x6a44d764_mfort6317_@@3PAIA
?dvs_0x6b243cf3_mfort6317_@@3PAIA
?dvs_0x6c1a090e_mfort6317_@@3PAIA
?dvs_0x6e7a06d4_mfort6317_@@3PAIA
?dvs_0x6f32d6fa_mfort6317_@@3PAIA
?dvs_0x6fc18458_mfort6317_@@3PAIA
?dvs_0x6ffc7bde_mfort6317_@@3PAIA
?dvs_0x704fbbf4_mfort6317_@@3PAIA
?dvs_0x70dcbf97_mfort6317_@@3PAIA
?dvs_0x70ddb791_mfort6317_@@3PAIA
?dvs_0x7259f161_mfort6317_@@3PAIA
?dvs_0x7299ac08_mfort6317_@@3PAIA
?dvs_0x7471a6c6_mfort6317_@@3PAIA
?dvs_0x74d1648d_mfort6317_@@3PAIA
?dvs_0x74e04033_mfort6317_@@3PAIA
?dvs_0x75561e82_mfort6317_@@3PAIA
?dvs_0x7563e608_mfort6317_@@3PAIA
?dvs_0x75f29e26_mfort6317_@@3PAIA
?dvs_0x78daafbd_mfort6317_@@3PAIA
?dvs_0x78fb4a62_mfort6317_@@3PAIA
?dvs_0x7bd4252c_mfort6317_@@3PAIA
?dvs_0x7ca627a2_mfort6317_@@3PAIA
?dvs_0x7d25e3f2_mfort6317_@@3PAIA
?dvs_0x7e640cb7_mfort6317_@@3PAIA
?dvs_0x7ea38a27_mfort6317_@@3PAIA
?dvs_0x7f3e1a87_mfort6317_@@3PAIA
?dvs_0x8085c74f_mfort6317_@@3PAIA
?dvs_0x80d4f60f_mfort6317_@@3PAIA
?dvs_0x824b4308_mfort6317_@@3PAIA
?dvs_0x82ef6c6c_mfort6317_@@3PAIA
?dvs_0x836027a5_mfort6317_@@3PAIA
?dvs_0x84e0a378_mfort6317_@@3PAIA
?dvs_0x85cb187f_mfort6317_@@3PAIA
?dvs_0x86d4eedf_mfort6317_@@3PAIA
?dvs_0x8829889e_mfort6317_@@3PAIA
?dvs_0x88549499_mfort6317_@@3PAIA
?dvs_0x889d8bb9_mfort6317_@@3PAIA
?dvs_0x8958b5d5_mfort6317_@@3PAIA
?dvs_0x8a5e24cd_mfort6317_@@3PAIA
?dvs_0x8ad7563f_mfort6317_@@3PAIA
?dvs_0x8ad96f21_mfort6317_@@3PAIA
?dvs_0x8b0a1668_mfort6317_@@3PAIA
?dvs_0x8bae0ca3_mfort6317_@@3PAIA
?dvs_0x8d6c37a6_mfort6317_@@3PAIA
?dvs_0x8ed77b92_mfort6317_@@3PAIA
?dvs_0x8f5d2b52_mfort6317_@@3PAIA
?dvs_0x9000d6d0_mfort6317_@@3PAIA
?dvs_0x90512055_mfort6317_@@3PAIA
?dvs_0x90c18377_mfort6317_@@3PAIA
?dvs_0x9191721c_mfort6317_@@3PAIA
?dvs_0x91e6c1a1_mfort6317_@@3PAIA
?dvs_0x931246f2_mfort6317_@@3PAIA
?dvs_0x93931ad2_mfort6317_@@3PAIA
?dvs_0x93d671af_mfort6317_@@3PAIA
?dvs_0x93fe90eb_mfort6317_@@3PAIA
?dvs_0x949e0bbf_mfort6317_@@3PAIA
?dvs_0x9509be1a_mfort6317_@@3PAIA
?dvs_0x950a471c_mfort6317_@@3PAIA
?dvs_0x95378de6_mfort6317_@@3PAIA
?dvs_0x9549a9e1_mfort6317_@@3PAIA
?dvs_0x9848ac6d_mfort6317_@@3PAIA
?dvs_0x997e8cd2_mfort6317_@@3PAIA
?dvs_0x99e44818_mfort6317_@@3PAIA
?dvs_0x9a20021d_mfort6317_@@3PAIA
?dvs_0x9a77a6e4_mfort6317_@@3PAIA
?dvs_0x9b0be1a7_mfort6317_@@3PAIA
?dvs_0x9c1367bb_mfort6317_@@3PAIA
?dvs_0x9c896eb8_mfort6317_@@3PAIA
?dvs_0x9d32edbe_mfort6317_@@3PAIA
?dvs_0x9ebfbcc8_mfort6317_@@3PAIA
?dvs_0x9f1e8bdb_mfort6317_@@3PAIA
?dvs_0x9f5befa6_mfort6317_@@3PAIA
?dvs_0xa0d123ce_mfort6317_@@3PAIA
?dvs_0xa2229096_mfort6317_@@3PAIA
?dvs_0xa2698e2a_mfort6317_@@3PAIA
?dvs_0xa3cd04d2_mfort6317_@@3PAIA
?dvs_0xa419b5be_mfort6317_@@3PAIA
?dvs_0xa5fafea8_mfort6317_@@3PAIA
?dvs_0xa6199d5f_mfort6317_@@3PAIA
?dvs_0xa71a42b9_mfort6317_@@3PAIA
?dvs_0xa770db85_mfort6317_@@3PAIA
?dvs_0xa9bc4553_mfort6317_@@3PAIA
?dvs_0xa9de100a_mfort6317_@@3PAIA
?dvs_0xaa330a12_mfort6317_@@3PAIA
?dvs_0xaacde997_mfort6317_@@3PAIA
?dvs_0xaae866ee_mfort6317_@@3PAIA
?dvs_0xab0162b3_mfort6317_@@3PAIA
?dvs_0xae25da1c_mfort6317_@@3PAIA
?dvs_0xae835155_mfort6317_@@3PAIA
?dvs_0xaf9e4f86_mfort6317_@@3PAIA
?dvs_0xb01cedea_mfort6317_@@3PAIA
?dvs_0xb31d47b9_mfort6317_@@3PAIA
?dvs_0xb3276bac_mfort6317_@@3PAIA
?dvs_0xb4ad5650_mfort6317_@@3PAIA
?dvs_0xb58c41e7_mfort6317_@@3PAIA
?dvs_0xb822ec39_mfort6317_@@3PAIA
?dvs_0xbaa0304e_mfort6317_@@3PAIA
?dvs_0xbb32bf79_mfort6317_@@3PAIA
?dvs_0xbb353c81_mfort6317_@@3PAIA
?dvs_0xbbb77273_mfort6317_@@3PAIA
?dvs_0xbbc5f31a_mfort6317_@@3PAIA
?dvs_0xbc248654_mfort6317_@@3PAIA
?dvs_0xbdb8437a_mfort6317_@@3PAIA
?dvs_0xc06e53ec_mfort6317_@@3PAIA
?dvs_0xc1a2901f_mfort6317_@@3PAIA
?dvs_0xc23228c9_mfort6317_@@3PAIA
?dvs_0xc27a0d79_mfort6317_@@3PAIA
?dvs_0xc31938d4_mfort6317_@@3PAIA
?dvs_0xc3287508_mfort6317_@@3PAIA
?dvs_0xc394658a_mfort6317_@@3PAIA
?dvs_0xc4af745b_mfort6317_@@3PAIA
?dvs_0xc4ccaffb_mfort6317_@@3PAIA
?dvs_0xc757fa32_mfort6317_@@3PAIA
?dvs_0xc77b7987_mfort6317_@@3PAIA
?dvs_0xcad64f8d_mfort6317_@@3PAIA
?dvs_0xcc041c7b_mfort6317_@@3PAIA
?dvs_0xcc54032a_mfort6317_@@3PAIA
?dvs_0xcc76f548_mfort6317_@@3PAIA
?dvs_0xcf0e8de9_mfort6317_@@3PAIA
?dvs_0xcf4f3119_mfort6317_@@3PAIA
?dvs_0xd1e0e47b_mfort6317_@@3PAIA
?dvs_0xd2fa3b39_mfort6317_@@3PAIA
?dvs_0xd496d99b_mfort6317_@@3PAIA
?dvs_0xd550432f_mfort6317_@@3PAIA
?dvs_0xd6aaaf7d_mfort6317_@@3PAIA
?dvs_0xd6e5eb13_mfort6317_@@3PAIA
?dvs_0xd732ad92_mfort6317_@@3PAIA
?dvs_0xd8752997_mfort6317_@@3PAIA
?dvs_0xd958d337_mfort6317_@@3PAIA
?dvs_0xda8c51a2_mfort6317_@@3PAIA
?dvs_0xdaf5da14_mfort6317_@@3PAIA
?dvs_0xdb40cc02_mfort6317_@@3PAIA
?dvs_0xdcd3c822_mfort6317_@@3PAIA
?dvs_0xdcec33fe_mfort6317_@@3PAIA
?dvs_0xde04b73a_mfort6317_@@3PAIA
?dvs_0xde7ae919_mfort6317_@@3PAIA
?dvs_0xdec09530_mfort6317_@@3PAIA
?dvs_0xdef0b71e_mfort6317_@@3PAIA
?dvs_0xdfb48968_mfort6317_@@3PAIA
?dvs_0xe01d6f76_mfort6317_@@3PAIA
?dvs_0xe15a99eb_mfort6317_@@3PAIA
?dvs_0xe18dda7d_mfort6317_@@3PAIA
?dvs_0xe1b83af7_mfort6317_@@3PAIA
?dvs_0xe2a054f8_mfort6317_@@3PAIA
?dvs_0xe4881b85_mfort6317_@@3PAIA
?dvs_0xe593f662_mfort6317_@@3PAIA
?dvs_0xe6d88747_mfort6317_@@3PAIA
?dvs_0xe6fdffd4_mfort6317_@@3PAIA
?dvs_0xe82aa50d_mfort6317_@@3PAIA
?dvs_0xe8740051_mfort6317_@@3PAIA
?dvs_0xe8a574ad_mfort6317_@@3PAIA
?dvs_0xe9c0a2be_mfort6317_@@3PAIA
?dvs_0xe9f41209_mfort6317_@@3PAIA
?dvs_0xeb96ff4b_mfort6317_@@3PAIA
?dvs_0xec20b309_mfort6317_@@3PAIA
?dvs_0xec25601b_mfort6317_@@3PAIA
?dvs_0xecba5606_mfort6317_@@3PAIA
?dvs_0xee2a88c4_mfort6317_@@3PAIA
?dvs_0xeecd0f8a_mfort6317_@@3PAIA
?dvs_0xeede9486_mfort6317_@@3PAIA
?dvs_0xef4d2ad1_mfort6317_@@3PAIA
?dvs_0xefeb05f7_mfort6317_@@3PAIA
?dvs_0xf0027a79_mfort6317_@@3PAIA
?dvs_0xf059e77e_mfort6317_@@3PAIA
?dvs_0xf0c718d1_mfort6317_@@3PAIA
?dvs_0xf0de4ade_mfort6317_@@3PAIA
?dvs_0xf0fa54b7_mfort6317_@@3PAIA
?dvs_0xf139c48d_mfort6317_@@3PAIA
?dvs_0xf16f847f_mfort6317_@@3PAIA
?dvs_0xf199732c_mfort6317_@@3PAIA
?dvs_0xf1c683e8_mfort6317_@@3PAIA
?dvs_0xf2114f8c_mfort6317_@@3PAIA
?dvs_0xf380aa4d_mfort6317_@@3PAIA
?dvs_0xf3a93fdc_mfort6317_@@3PAIA
?dvs_0xf3e5f513_mfort6317_@@3PAIA
?dvs_0xf3ebf335_mfort6317_@@3PAIA
?dvs_0xf40c419d_mfort6317_@@3PAIA
?dvs_0xf4291db3_mfort6317_@@3PAIA
?dvs_0xf4aaf0f4_mfort6317_@@3PAIA
?dvs_0xf5ad0cb6_mfort6317_@@3PAIA
?dvs_0xf5bd5baa_mfort6317_@@3PAIA
?dvs_0xf649b8b3_mfort6317_@@3PAIA
?dvs_0xf65bb973_mfort6317_@@3PAIA
?dvs_0xf81e7f54_mfort6317_@@3PAIA
?dvs_0xf945b776_mfort6317_@@3PAIA
?dvs_0xf985f2cd_mfort6317_@@3PAIA
?dvs_0xf99c9c33_mfort6317_@@3PAIA
?dvs_0xf9d3dc85_mfort6317_@@3PAIA
?dvs_0xfa35f16a_mfort6317_@@3PAIA
?dvs_0xfa653461_mfort6317_@@3PAIA
?dvs_0xfaa7b1b7_mfort6317_@@3PAIA
?dvs_0xfb2b1ab0_mfort6317_@@3PAIA
?dvs_0xfcc80ec6_mfort6317_@@3PAIA
?dvs_0xfcf641df_mfort6317_@@3PAIA
?dvs_0xffab9178_mfort6317_@@3PAIA
ACFCanUnloadNow
ACFGetClassFactory
ACFGetSDKVersion
ACFRegisterComponent
ACFRegisterPlugin
ACFShutdown
ACFStartup
BadCodeHostFnPtr_DefaultBadCode_mfort6317_
ExitDll
GetPluginFactory
InitDll
VSTPluginMain

Sections

.text
Size: 27.5MB - Virtual size: 27.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IPPCODE
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.1MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 498KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 314KB - Virtual size: 76.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mfrt
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dummy1
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dummy2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dummy3
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dummy4
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IPPDATA
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 121KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc64
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R2R64
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b0c08197af6136bf651b3b45aea72654

Headers

DLL Characteristics

File Characteristics

Imports

user32

rpcrt4

wininet

version

kernel32

gdi32

shell32

ole32

oleaut32

comdlg32

advapi32

msvcp140

ws2_32

shlwapi

wtsapi32

imm32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-environment-l1-1-0

psapi

setupapi

imagehlp

wintrust

winmm

Exports

Exports

Sections

.text Size: 27.5MB - Virtual size: 27.5MB

IPPCODE Size: 480KB - Virtual size: 480KB

.rdata Size: 3.1MB - Virtual size: 3.1MB

.data Size: 498KB - Virtual size: 3.6MB

.pdata Size: 314KB - Virtual size: 76.6MB

.mfrt Size: 512B - Virtual size: 4KB

dummy1 Size: 512B - Virtual size: 4KB

dummy2 Size: 512B - Virtual size: 4KB

dummy3 Size: 512B - Virtual size: 4KB

dummy4 Size: 512B - Virtual size: 4KB

IPPDATA Size: 3KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 4KB

.reloc Size: 121KB - Virtual size: 124KB

.reloc64 Size: 477KB - Virtual size: 480KB

.R2R64 Size: 512B - Virtual size: 4KB

.text
Size: 27.5MB - Virtual size: 27.5MB

IPPCODE
Size: 480KB - Virtual size: 480KB

.rdata
Size: 3.1MB - Virtual size: 3.1MB

.data
Size: 498KB - Virtual size: 3.6MB

.pdata
Size: 314KB - Virtual size: 76.6MB

.mfrt
Size: 512B - Virtual size: 4KB

dummy1
Size: 512B - Virtual size: 4KB

dummy2
Size: 512B - Virtual size: 4KB

dummy3
Size: 512B - Virtual size: 4KB

dummy4
Size: 512B - Virtual size: 4KB

IPPDATA
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 4KB

.reloc
Size: 121KB - Virtual size: 124KB

.reloc64
Size: 477KB - Virtual size: 480KB

.R2R64
Size: 512B - Virtual size: 4KB