AyClipper-1.0.0-win64.zip
- SHA256 26d42e22853359f9442c60001a4e853e6ae3efac0b597ec0a851e4add8da7239
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AyClipper.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AyClipper.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
AyClipper.vst3\Contents\x86_64-win\AyClipper.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
AyClipper.vst3\Contents\x86_64-win\AyClipper.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target AyClipper-1.0.0-win64.zip
- Size 4.9MB
- Sample260831-ph23lagd23
- SHA256 26d42e22853359f9442c60001a4e853e6ae3efac0b597ec0a851e4add8da7239
- MD5 ce0fc7945f7b5750be7fb4e12ffba0bc
- SHA1 bc2f4965afdfcc88060058d1f7560d8bf7a58239
- SHA512 5bb9ed7b5017432cd236383ae5334469d824ba5650beb5148c5e95433960eafad3adf9f7bbbb9f2200465bf23a0f9594f9bea7a727e2f816fe8174fe61b5f280
- SSDEEP 98304:rFuc7J2tt4FdcB33jB4m22pZK3oh9Z5HA+c00C2SyUxzuO++dXc5gQVNKnfIhCmY:rFd7JXrcB3emPZK3ohHxANvSymzk+Sgv
- TLSH T16B3633F24F665812803A018F68589F34920DDCD3DE061995CFC6F33BAE55F26ABF0A95
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/AyClipper.exe unpack001/AyClipper.vst3\Contents\x86_64-win\AyClipper.vst3
File Explorer
-
AyClipper-1.0.0-win64.zip.zip 4.9MB
-
AyClipper.exe.exe 5.6MB
-
AyClipper.vst3\Contents\Resources\moduleinfo.json1KB
-
AyClipper.vst3\Contents\x86_64-win\AyClipper.vst3.dll 5.2MB
AyClipper.exe
- IMPHASH d0201e4d266e7a121b245803838e0f1c
- SHA256 1b9231de62260e2d26092ae1dffad1e7c2f23997601fdbd8956d102f14e57cf1
- MD5 ffc0de8238fbc018c78e8c2a11fedb1e
- SHA1 f579ab58846e9fdac6a8168041acba7cb2c7581c
- SHA512 5d654a5e8ae67617ad0039adcdcfdf16b376df64e20654417a7be3b22988c9ffb56a3d2313039f7449df21630dee52651a61eef7a99265c19d0cd06ff953bf61
- SSDEEP 98304:Q+Ig8WNQ+4LbeY0w2itptaZFG25l2UBBBBlRAD:k7AQ+OSiptG5l2UBBBBlRAD
- TLSH T14656B053F2674CDAC2AAD1388563D917D771782C872287EB1590A779BF23AE04F79320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2937488
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\dev\ay-plugins\build\release\plugins\AyClipper\AyClipper_artefacts\Release\Standalone\AyClipper.pdb
dbghelp
SymInitialize
SymGetModuleBase64
SymFunctionTableAccess64
StackWalk64
SymSetOptions
SymFromAddr
kernel32
SetPriorityClass
EnterCriticalSection
FindNextFileW
WriteFile
GetModuleHandleExW
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetTempPathW
CreateMutexW
FindClose
GetLocaleInfoW
CreateFileW
GetFileAttributesW
ReleaseMutex
GetSystemDirectoryW
GetLogicalDriveStringsW
Sleep
GetFileAttributesExW
OutputDebugStringW
FindFirstFileW
GetCurrentThread
GetCurrentThreadId
QueryPerformanceFrequency
GetThreadPriority
DeleteFileW
GetNativeSystemInfo
GetCurrentDirectoryW
GlobalUnlock
ReplaceFileW
DeleteCriticalSection
ExitProcess
GetModuleHandleW
QueryPerformanceCounter
MoveFileW
GetDriveTypeW
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
GetCommandLineW
AttachConsole
GetPriorityClass
GetStartupInfoW
FreeLibrary
GlobalLock
LoadLibraryW
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
SetThreadAffinityMask
GetLogicalProcessorInformation
WaitForSingleObject
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetEnvironmentVariableA
Thread32First
Thread32Next
GetCurrentProcess
InitializeSListHead
GlobalFree
GlobalAlloc
GlobalSize
GetModuleFileNameA
GetLastError
FormatMessageW
InitOnceBeginInitialize
CreateDirectoryW
CreateEventW
GetModuleHandleA
CompareStringOrdinal
WaitForMultipleObjects
GetModuleFileNameW
OpenThread
CreateEventA
CreateDirectoryA
GetCurrentProcessId
GetProcAddress
GetThreadContext
GetLocalTime
ResetEvent
CloseHandle
LoadLibraryA
SetEvent
CreateFileA
GetTickCount64
GetModuleHandleExA
CreateToolhelp32Snapshot
ResumeThread
SuspendThread
TerminateThread
InitOnceComplete
user32
ReleaseCapture
InvalidateRect
GetMessageW
SendMessageTimeoutW
DispatchMessageW
SendNotifyMessageW
GetWindowTextW
ValidateRgn
ValidateRect
AttachThreadInput
GetWindowThreadProcessId
DefWindowProcW
GetSystemMenu
GetMessageExtraInfo
GetUpdateRgn
GetMessagePos
PostMessageW
MapVirtualKeyW
GetWindowRect
GetFocus
DestroyWindow
GetDC
IsWindowVisible
SetWindowPos
GetDpiForWindow
MonitorFromWindow
EnumChildWindows
SetWindowLongPtrW
EnumDisplayMonitors
CreateWindowExW
GetIconInfo
SendMessageW
CallNextHookEx
EndDialog
UnregisterClassW
SetWindowTextW
MessageBeep
GetWindowLongPtrW
RegisterClassExW
WindowFromPoint
GetWindowPlacement
GetParent
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
VkKeyScanW
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
PeekMessageW
IsChild
CreateCaret
MapWindowPoints
TrackMouseEvent
GetForegroundWindow
UnhookWindowsHookEx
EnumWindows
SystemParametersInfoW
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
TranslateMessage
GetClipboardData
LoadIconW
EnumDisplayDevicesW
LoadCursorW
DestroyCaret
SetCapture
SetWindowsHookExW
SetClipboardData
ToUnicode
SetCursor
GetSystemMetricsForDpi
GetClientRect
UpdateLayeredWindow
DrawIconEx
ShowCaret
GetDesktopWindow
EnumDisplaySettingsW
EnableMenuItem
GetAncestor
DestroyCursor
GetMessageTime
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
SendInput
gdi32
DeleteDC
CreateRectRgn
GetDeviceCaps
CreateRectRgnIndirect
StretchDIBits
StretchBlt
RestoreDC
GetObjectW
SelectObject
SaveDC
BitBlt
SetBrushOrgEx
CreateFontIndirectW
SetMapperFlags
ExcludeClipRect
DeleteObject
GetRegionData
CreateDIBSection
SetStretchBltMode
SetMapMode
CreateCompatibleDC
CombineRgn
CreateBitmap
shell32
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHParseDisplayName
SHGetKnownFolderPath
SHBrowseForFolderW
ExtractAssociatedIconW
SHGetMalloc
SHCreateShellItem
DragQueryFileW
ole32
OleInitialize
DoDragDrop
CoTaskMemFree
CoCreateInstance
PropVariantClear
CoTaskMemAlloc
OleUninitialize
RegisterDragDrop
RevokeDragDrop
CoUninitialize
CoInitializeEx
oleaut32
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayPutElement
SysAllocString
SafeArrayDestroy
SafeArrayAccessData
comdlg32
GetSaveFileNameW
GetOpenFileNameW
msvcp140
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Thrd_yield
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_unregister_at_thread_exit
_Cnd_wait
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Mtx_unlock
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_broadcast
_Query_perf_frequency
?classic@locale@std@@SAAEBV12@XZ
_Query_perf_counter
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
_Cnd_register_at_thread_exit
_Exp
??0task_continuation_context@Concurrency@@AEAA@XZ
shlwapi
PathStripToRootW
winmm
midiInOpen
midiOutGetDevCapsW
midiOutPrepareHeader
midiOutOpen
midiInReset
midiInPrepareHeader
midiOutUnprepareHeader
midiInGetDevCapsW
midiInStart
midiInClose
midiInAddBuffer
midiOutMessage
midiInGetNumDevs
midiOutShortMsg
midiOutGetNumDevs
midiOutLongMsg
midiOutClose
midiInStop
midiInUnprepareHeader
midiInMessage
timeBeginPeriod
timeGetTime
imm32
ImmAssociateContextEx
ImmSetCandidateWindow
ImmAssociateContext
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME
comctl32
ord410
ord345
ord412
ord413
dwmapi
DwmExtendFrameIntoClientArea
d2d1
ord1
dxgi
CreateDXGIFactory2
d3d11
D3D11CreateDevice
dcomp
DCompositionCreateDevice
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
memmove
memset
_CxxThrowException
__current_exception_context
__current_exception
strchr
strstr
__C_specific_handler
longjmp
__RTtypeid
__std_type_info_compare
strrchr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
memcpy
__intrinsic_setjmp
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
_set_new_mode
realloc
free
malloc
api-ms-win-crt-runtime-l1-1-0
terminate
abort
_fpreset
_endthreadex
_beginthreadex
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_invoke_watson
_initterm
_get_narrow_winmain_command_line
_set_app_type
exit
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
api-ms-win-crt-stdio-l1-1-0
fread
ftell
fflush
fopen_s
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
fclose
__stdio_common_vfprintf
_set_fmode
__acrt_iob_func
__p__commode
fwrite
freopen_s
__stdio_common_vsprintf_s
_fileno
api-ms-win-crt-time-l1-1-0
_localtime64_s
_ftime64_s
wcsftime
api-ms-win-crt-string-l1-1-0
iswdigit
iswalpha
towupper
strncpy
iswspace
iswalnum
towlower
strncmp
strcmp
api-ms-win-crt-convert-l1-1-0
atoi
_atoi64
mbstowcs
_strtod_l
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_create_locale
api-ms-win-crt-math-l1-1-0
atanf
truncf
ceil
cos
cosf
exp
expf
floor
floorf
atan2
log
log10f
logf
pow
_dclass
atan2f
powf
acos
_hypotf
_hypot
__setusermatherr
_fdclass
roundf
sin
sinf
sqrt
sqrtf
tan
fmod
tanf
tanhf
copysign
ceilf
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
102KB
Virtual Size
107KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
132KB
Virtual Size
132KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=33145,
count=6, id=257, version=35207,
count=1, id=253, version=35207,
count=9, id=259, version=35207,
count=10, id=260, version=35207,
count=39, id=261, version=35207,
count=1, id=260, version=33145,
count=2, id=262, version=33145,
count=10, id=261, version=35228,
count=43, id=257, version=33145,
count=645, id=1, productName=Unmarked objects,
count=25, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
AyClipper.vst3\Contents\Resources\moduleinfo.json
- SHA256 097a9e675ca24fbcfae911b452932f86f6bd8b74986222a1c65b331b075d722b
- MD5 2c26fdea74a123f8054a01e63e3c5ecc
- SHA1 3bf40d85d7c9c21c068972ab15153da382a8b221
- SHA512 580eaabf280bf1cce11ac14a4a2abe5fd780db2fe55b93648fb6fba4ddbd2d4c773850d88511683504b6f95910a8111d74329b287505402a0317afc096cbafc8
- TLSH T1BD2125B7CA281DBB15BE13B497749A42F2A127BF0A801D8FB1FE655C4F72930404A90C
- MD5 SHA1 SHA512 TLSH
AyClipper.vst3\Contents\x86_64-win\AyClipper.vst3
- IMPHASH b426c8ee2fe5f5f7eaa361c75af9da4c
- SHA256 d16d9fdf5a88285013ea71a6e4239fb1309fbe032a8bada41eb76fe384f0bb58
- MD5 79e3d744e36ffe02ea8d3ddecd1df85a
- SHA1 96e47bf3bcf8aba8c1bbcbc25f0520325d7840a0
- SHA512 c115dc50168cf51115832b9e4d2de31b4632d747505b16cdd53e3c473424e2ba5e47cb02b379b7dec640025661dc9dcc15d470e1abf594fb97c3a56932529244
- SSDEEP 98304:9sNEjNkRAENEIY0w2itptaZFGAKlUB2BlPajxi:+GjwAEZiptwKlUB2Bli
- TLSH T125469E03F2A75996D2A9C2348663D926D371386C871247EF25D067BDBF63BE01E79320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2659536
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\dev\ay-plugins\build\release\plugins\AyClipper\AyClipper_artefacts\Release\VST3\AyClipper.pdb
dbghelp
SymInitialize
SymFromAddr
SymFunctionTableAccess64
StackWalk64
SymSetOptions
SymGetModuleBase64
kernel32
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
GetModuleFileNameW
WaitForMultipleObjects
SetThreadPriority
SetFilePointer
FindClose
GetLocaleInfoW
CreateFileW
GetFileAttributesW
GetModuleHandleA
CreateEventW
Sleep
FormatMessageW
GetLastError
GetFileAttributesExW
OutputDebugStringW
GetLogicalProcessorInformation
GetCurrentThread
TerminateThread
QueryPerformanceFrequency
DeleteFileW
GetNativeSystemInfo
LoadLibraryW
GetCurrentDirectoryW
ReplaceFileW
ExitProcess
GetModuleHandleW
GetModuleHandleExW
QueryPerformanceCounter
MoveFileW
SetUnhandledExceptionFilter
FlushFileBuffers
CompareStringOrdinal
GlobalSize
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReleaseSRWLockExclusive
WriteFile
FindNextFileW
SetPriorityClass
FindFirstFileW
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MultiByteToWideChar
DeleteCriticalSection
ReadFile
InitializeSListHead
GetSystemTimeAsFileTime
WideCharToMultiByte
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
IsDebuggerPresent
GetModuleFileNameA
GetCurrentProcess
Thread32Next
Thread32First
GetEnvironmentVariableA
FreeLibrary
WaitForSingleObject
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetModuleHandleExA
GetTickCount64
CreateFileA
SetEvent
LoadLibraryA
CloseHandle
ResetEvent
GetLocalTime
GetThreadContext
GetProcAddress
GetCurrentProcessId
CreateDirectoryA
CreateEventA
OpenThread
CreateDirectoryW
SetThreadAffinityMask
user32
GetSystemMenu
GetMessageExtraInfo
GetMessagePos
MapVirtualKeyW
GetWindowRect
GetDC
IsWindowVisible
SetWindowPos
GetDpiForWindow
EnumChildWindows
EnumDisplayMonitors
SendMessageW
CallNextHookEx
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
VkKeyScanW
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
CreateCaret
MapWindowPoints
TrackMouseEvent
GetForegroundWindow
UnhookWindowsHookEx
GetMessageTime
SetLayeredWindowAttributes
BringWindowToTop
GetClipboardData
EnumDisplayDevicesW
LoadCursorW
DestroyCaret
SetCapture
SetWindowsHookExW
SetClipboardData
ToUnicode
SetCursor
GetSystemMetricsForDpi
GetClientRect
UpdateLayeredWindow
ShowCaret
GetDesktopWindow
EnumDisplaySettingsW
EnableMenuItem
GetParent
ReleaseCapture
InvalidateRect
GetAncestor
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
DefWindowProcW
PostMessageW
GetFocus
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
GetWindowLongPtrW
RegisterClassExW
PeekMessageW
EnumWindows
SetFocus
SendNotifyMessageW
TranslateMessage
GetUpdateRgn
AttachThreadInput
GetWindowThreadProcessId
SystemParametersInfoW
ValidateRect
ValidateRgn
MonitorFromWindow
IsChild
gdi32
SetBrushOrgEx
BitBlt
SaveDC
StretchBlt
StretchDIBits
CreateRectRgnIndirect
GetDeviceCaps
ExcludeClipRect
SetStretchBltMode
RestoreDC
CreateBitmap
CombineRgn
SelectObject
CreateCompatibleDC
CreateRectRgn
DeleteDC
SetMapperFlags
GetRegionData
DeleteObject
SetMapMode
CreateFontIndirectW
CreateDIBSection
shell32
ExtractAssociatedIconW
DragQueryFileW
SHGetSpecialFolderPathW
ole32
CoTaskMemAlloc
CoCreateInstance
CoCreateGuid
RevokeDragDrop
DoDragDrop
OleUninitialize
OleInitialize
RegisterDragDrop
oleaut32
SysAllocString
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
msvcp140
_Cnd_broadcast
_Query_perf_counter
_Cnd_wait
?classic@locale@std@@SAAEBV12@XZ
_Query_perf_frequency
_Thrd_yield
_Mtx_unlock
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Exp
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
winmm
timeGetTime
timeBeginPeriod
d2d1
ord1
dxgi
CreateDXGIFactory2
d3d11
D3D11CreateDevice
dcomp
DCompositionCreateDevice
imm32
ImmAssociateContextEx
ImmSetCandidateWindow
ImmAssociateContext
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME
comctl32
ord412
ord410
ord413
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
memcpy
__std_type_info_destroy_list
memset
_CxxThrowException
__current_exception_context
__current_exception
strchr
strstr
__C_specific_handler
__RTtypeid
longjmp
__std_type_info_compare
strrchr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__intrinsic_setjmp
memmove
__RTDynamicCast
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
__stdio_common_vsprintf_s
fclose
fflush
ftell
__stdio_common_vsscanf
fread
fwrite
__stdio_common_vsprintf
__acrt_iob_func
fopen_s
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
malloc
free
realloc
api-ms-win-crt-string-l1-1-0
iswspace
towupper
iswalnum
strcmp
iswdigit
strncpy
towlower
iswalpha
strncmp
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_invoke_watson
_initialize_narrow_environment
_configure_narrow_argv
_fpreset
_seh_filter_dll
exit
_endthreadex
_beginthreadex
terminate
api-ms-win-crt-convert-l1-1-0
mbstowcs
_atoi64
atoi
_strtod_l
api-ms-win-crt-math-l1-1-0
ceilf
cos
truncf
cosf
exp
expf
floorf
fmod
log
log10f
logf
pow
powf
roundf
atanf
atan2f
_dclass
ceil
atan2
acos
_hypotf
_hypot
sinf
sqrt
sqrtf
copysign
_fdclass
tan
sin
tanf
tanhf
floor
api-ms-win-crt-time-l1-1-0
_ftime64_s
api-ms-win-crt-locale-l1-1-0
_create_locale
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
ExitDll
GetPluginFactory
InitDll
Name
.text
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.4MB
Virtual Size
2.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
75KB
Virtual Size
85KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
117KB
Virtual Size
116KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
27KB
Virtual Size
26KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=33145,
count=6, id=257, version=35207,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=8, id=260, version=35207,
count=31, id=261, version=35207,
count=1, id=260, version=33145,
count=2, id=262, version=33145,
count=10, id=261, version=35228,
count=43, id=257, version=33145,
count=647, id=1, productName=Unmarked objects,
count=23, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,