AyCompressor-1.0.0-win64.zip
- SHA256 258e8643095e69a7317fa9c1561034c6100dce9fdbaa26a680b22121a3da12fc
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AyCompressor.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
AyCompressor.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
AyCompressor.vst3\Contents\x86_64-win\AyCompressor.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
AyCompressor.vst3\Contents\x86_64-win\AyCompressor.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target AyCompressor-1.0.0-win64.zip
- Size 4.7MB
- Sample260831-qgkmlaaq21
- SHA256 258e8643095e69a7317fa9c1561034c6100dce9fdbaa26a680b22121a3da12fc
- MD5 a81550dd6988766bcd0a0c4d886a7f34
- SHA1 6c899dca20a24e69b8942528c2f61bce5ded8aae
- SHA512 0a409525f50e11038ddc767ee04bd2d3f740c597d28f3c46f5c8a28647e487f8df81d386c5e6cd19e489a892d12851b46a2a92d08fb3854a2fbc0ec7d77a6bd0
- SSDEEP 98304:PpjBqp9fvOLWLDCTkxAiUznrlyPhUvTEponUO93kMh9LjzBg+j50477:NBMvLDCTznrlyQqEN3rzB/j6a
- TLSH T12C3633AE32CB1D5BC8979CEF2527F0A95F21102E9E5DFCC4CB35226ED6A430436391A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/AyCompressor.exe unpack001/AyCompressor.vst3\Contents\x86_64-win\AyCompressor.vst3
File Explorer
-
AyCompressor-1.0.0-win64.zip.zip 4.7MB
-
AyCompressor.exe.exe 5.6MB
-
AyCompressor.vst3\Contents\Resources\moduleinfo.json1KB
-
AyCompressor.vst3\Contents\x86_64-win\AyCompressor.vst3.dll 4.6MB
AyCompressor.exe
- IMPHASH c194800704465673491fda91fab85c16
- SHA256 a91cd280589b3299a98387ae671d900452b36944f5acd948f76aa987420b4bfa
- MD5 9e0e7004c3f794bb9d11604cea5c2b71
- SHA1 547c3f7e06c51e6551dcde3a9d5d23a24ce1c1c6
- SHA512 187f7bc620993d9b6342930f68e2a49e6d0732221b333bbb7796a7ee1d4521a038749cb1e6b9e5f749edf88a212ae35f808de0ad5320e06040aa67a48594a10e
- SSDEEP 98304:6M7mpUp69t81eY0w2itptaZFGzyWl2UBBBBlg18:pSp669BiptDVl2UBBBBl0
- TLSH T18856AE93F26B48CAD2A9D1388653D516D7717C2C471297DB19A0A379BF23AE01E7E330
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2923120
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
F:\dev\ay-plugins\build\release\plugins\AyCompressor\AyCompressor_artefacts\Release\Standalone\AyCompressor.pdb
dbghelp
SymSetOptions
StackWalk64
SymFunctionTableAccess64
SymInitialize
SymFromAddr
SymGetModuleBase64
kernel32
SetPriorityClass
EnterCriticalSection
FindNextFileW
WriteFile
GetModuleHandleExW
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
SetFilePointer
GetTempPathW
CreateMutexW
FindClose
GetLocaleInfoW
CreateFileW
GetFileAttributesW
ReleaseMutex
GetSystemDirectoryW
GetLogicalDriveStringsW
Sleep
GetFileAttributesExW
FindFirstFileW
GetLogicalProcessorInformation
GetCurrentThread
CreateDirectoryW
QueryPerformanceFrequency
GetThreadPriority
DeleteFileW
GetNativeSystemInfo
GetCurrentDirectoryW
ReplaceFileW
DeleteCriticalSection
ExitProcess
GetModuleHandleW
QueryPerformanceCounter
MoveFileW
GetDriveTypeW
IsDebuggerPresent
SetUnhandledExceptionFilter
FlushFileBuffers
GetCommandLineW
AttachConsole
GetPriorityClass
IsProcessorFeaturePresent
GlobalUnlock
GetVolumeInformationW
TryEnterCriticalSection
ReadFile
OutputDebugStringW
SetThreadAffinityMask
GetSystemTimeAsFileTime
UnhandledExceptionFilter
GetStartupInfoW
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSListHead
InitOnceComplete
InitOnceBeginInitialize
FreeLibrary
GlobalLock
LoadLibraryW
GlobalFree
GlobalAlloc
GlobalSize
GetLastError
FormatMessageW
CreateEventW
GetModuleHandleA
CompareStringOrdinal
WaitForMultipleObjects
GetModuleFileNameW
OpenThread
CreateEventA
CreateDirectoryA
GetCurrentProcessId
GetProcAddress
GetThreadContext
GetLocalTime
ResetEvent
CloseHandle
LoadLibraryA
SetEvent
CreateFileA
GetTickCount64
GetModuleHandleExA
CreateToolhelp32Snapshot
ResumeThread
SuspendThread
GetCurrentThreadId
WaitForSingleObject
GetEnvironmentVariableA
Thread32First
Thread32Next
GetCurrentProcess
GetModuleFileNameA
TerminateThread
user32
GetMessageW
SendMessageTimeoutW
DispatchMessageW
SendNotifyMessageW
GetWindowTextW
ValidateRgn
ValidateRect
AttachThreadInput
GetWindowThreadProcessId
DefWindowProcW
GetSystemMenu
GetMessageExtraInfo
GetUpdateRgn
GetMessagePos
PostMessageW
MapVirtualKeyW
GetWindowRect
GetFocus
DestroyWindow
GetDC
IsWindowVisible
SetWindowPos
GetDpiForWindow
MonitorFromWindow
EnumChildWindows
SetWindowLongPtrW
EnumDisplayMonitors
CreateWindowExW
GetIconInfo
SendMessageW
CallNextHookEx
UnregisterClassW
SetWindowTextW
MessageBeep
GetWindowLongPtrW
RegisterClassExW
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
VkKeyScanW
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
PeekMessageW
IsChild
CreateCaret
MapWindowPoints
TrackMouseEvent
GetForegroundWindow
UnhookWindowsHookEx
EnumWindows
GetMessageTime
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
TranslateMessage
GetClipboardData
LoadIconW
EnumDisplayDevicesW
LoadCursorW
DestroyCaret
SetCapture
SetWindowsHookExW
SetClipboardData
ToUnicode
SetCursor
GetSystemMetricsForDpi
GetClientRect
UpdateLayeredWindow
DrawIconEx
ShowCaret
GetDesktopWindow
EnumDisplaySettingsW
EnableMenuItem
ReleaseCapture
GetParent
EndDialog
InvalidateRect
GetAncestor
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
SendInput
SystemParametersInfoW
gdi32
GetObjectW
StretchDIBits
StretchBlt
CreateCompatibleDC
CreateDIBSection
SelectObject
SaveDC
BitBlt
CreateRectRgn
CreateFontIndirectW
SetMapperFlags
ExcludeClipRect
SetStretchBltMode
RestoreDC
DeleteObject
SetMapMode
CreateBitmap
CombineRgn
DeleteDC
GetDeviceCaps
SetBrushOrgEx
GetRegionData
CreateRectRgnIndirect
shell32
SHCreateShellItem
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHParseDisplayName
SHGetKnownFolderPath
SHBrowseForFolderW
ExtractAssociatedIconW
SHGetMalloc
DragQueryFileW
ole32
OleInitialize
DoDragDrop
CoTaskMemFree
RegisterDragDrop
CoTaskMemAlloc
OleUninitialize
CoInitializeEx
RevokeDragDrop
PropVariantClear
CoCreateInstance
CoUninitialize
oleaut32
SafeArrayDestroy
SysAllocString
SafeArrayPutElement
SafeArrayAccessData
SafeArrayCreateVector
SafeArrayUnaccessData
comdlg32
GetSaveFileNameW
GetOpenFileNameW
msvcp140
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
_Thrd_yield
?__ExceptionPtrCreate@@YAXPEAX@Z
_Cnd_unregister_at_thread_exit
??0task_continuation_context@Concurrency@@AEAA@XZ
?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z
?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ
?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ
?_Syserror_map@std@@YAPEBDH@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ
?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Mtx_unlock
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_wait
_Cnd_broadcast
_Query_perf_frequency
?classic@locale@std@@SAAEBV12@XZ
_Query_perf_counter
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
shlwapi
PathStripToRootW
winmm
midiInOpen
midiInMessage
midiOutPrepareHeader
midiOutOpen
midiInReset
midiInPrepareHeader
midiOutUnprepareHeader
midiInGetDevCapsW
midiInStart
midiInClose
midiInAddBuffer
midiOutMessage
midiInGetNumDevs
midiOutShortMsg
midiOutGetNumDevs
midiOutLongMsg
midiOutClose
midiInStop
timeBeginPeriod
timeGetTime
midiInUnprepareHeader
midiOutGetDevCapsW
imm32
ImmNotifyIME
ImmSetCandidateWindow
ImmAssociateContext
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
comctl32
ord412
ord410
ord413
ord345
dwmapi
DwmExtendFrameIntoClientArea
d2d1
ord1
dxgi
CreateDXGIFactory2
d3d11
D3D11CreateDevice
dcomp
DCompositionCreateDevice
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_compare
strrchr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
memmove
__intrinsic_setjmp
__RTtypeid
memcpy
__C_specific_handler
strstr
strchr
__current_exception
__current_exception_context
_CxxThrowException
memset
memcmp
longjmp
api-ms-win-crt-heap-l1-1-0
calloc
_callnewh
realloc
free
malloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_endthreadex
terminate
abort
_cexit
_beginthreadex
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_initterm_e
_invoke_watson
_initterm
_get_narrow_winmain_command_line
_set_app_type
exit
_seh_filter_exe
_fpreset
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment
api-ms-win-crt-stdio-l1-1-0
fread
fclose
fflush
ftell
fopen_s
__stdio_common_vsscanf
__stdio_common_vsnprintf_s
__acrt_iob_func
_set_fmode
freopen_s
__stdio_common_vfprintf
__stdio_common_vsprintf_s
__p__commode
_fileno
__stdio_common_vsprintf
fwrite
api-ms-win-crt-time-l1-1-0
_localtime64_s
wcsftime
_ftime64_s
api-ms-win-crt-string-l1-1-0
iswdigit
iswalpha
towupper
iswspace
iswalnum
towlower
strcmp
strncmp
strncpy
api-ms-win-crt-convert-l1-1-0
atoi
_atoi64
_strtod_l
mbstowcs
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
_create_locale
api-ms-win-crt-math-l1-1-0
ceil
ceilf
cos
cosf
exp
floor
floorf
fmod
truncf
log10f
logf
pow
powf
atan2f
atanf
atan2
acos
_hypotf
_hypot
__setusermatherr
_fdclass
roundf
sin
sinf
sqrt
sqrtf
tan
log
tanf
_dclass
expf
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-utility-l1-1-0
qsort
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
101KB
Virtual Size
106KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
32KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=33145,
count=6, id=257, version=35207,
count=1, id=253, version=35207,
count=9, id=259, version=35207,
count=10, id=260, version=35207,
count=39, id=261, version=35207,
count=1, id=260, version=33145,
count=2, id=262, version=33145,
count=10, id=261, version=35228,
count=43, id=257, version=33145,
count=634, id=1, productName=Unmarked objects,
count=24, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,
AyCompressor.vst3\Contents\Resources\moduleinfo.json
- SHA256 72bd7c9ea081599d70c76f4172e29f61afee3c738796a9af015905459123602f
- MD5 d093bdafcefcdb00cbcf6813a3f80097
- SHA1 ded96563d69a6dc2527f5a617605fbf4658d7399
- SHA512 91281dca758fcfbd293b5ede3acb97f3a2c40e80303594646672be07030dd5f4a81b5e6131e103c1b5d734c6b68d9eac979c2734f1b5081252b333b1aad8a531
- TLSH T149212977DA281DBB26BE63B49764EA56F2A12B7F1A801C8F71BE651C0F729340046D4C
- MD5 SHA1 SHA512 TLSH
AyCompressor.vst3\Contents\x86_64-win\AyCompressor.vst3
- IMPHASH 0706227d359c9c34c697de527fa5ddca
- SHA256 627ddccf0a7a64c62a03b5751a442c126842d6fa95647769d48a3fbff9431587
- MD5 88a25829c427884ad7357f0ea8274917
- SHA1 18e9318d8c3580933ec368e532d1765d491e1992
- SHA512 85accfc1d9778b1223e18cc28a36b056f3818ae89c8992a0089c6f5a2cf73b3c0c52eca8a12624d1483504f435845a893abf45e7bcade92a34fcb70399e2addc
- SSDEEP 98304:6QGB9OzKXHR6mY0w2itptaZFGblUB2Blx:6xnOeXx7iptrlUB2Bl
- TLSH T11226AE43F2BA45C8D17AC1388AA79A07D3B274114B2197DB15E1977DAF27BF10E7A320
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2577600
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\dev\ay-plugins\build\release\plugins\AyCompressor\AyCompressor_artefacts\Release\VST3\AyCompressor.pdb
dbghelp
SymFromAddr
SymFunctionTableAccess64
SymInitialize
SymGetModuleBase64
SymSetOptions
StackWalk64
kernel32
TerminateProcess
RemoveDirectoryW
GetFinalPathNameByHandleW
GetModuleFileNameW
WaitForMultipleObjects
SetThreadPriority
SetFilePointer
FindClose
GetLocaleInfoW
CreateFileW
GetFileAttributesW
GetModuleHandleA
CreateEventW
Sleep
FormatMessageW
GetLastError
GetFileAttributesExW
OutputDebugStringW
GetLogicalProcessorInformation
WriteFile
TerminateThread
QueryPerformanceFrequency
DeleteFileW
GetNativeSystemInfo
LoadLibraryW
GetCurrentDirectoryW
ReplaceFileW
ExitProcess
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
MoveFileW
SetUnhandledExceptionFilter
FlushFileBuffers
CompareStringOrdinal
GlobalSize
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
ReleaseSRWLockExclusive
GetModuleHandleExW
FindNextFileW
SetPriorityClass
FindFirstFileW
GetCurrentThread
TryEnterCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
ReadFile
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
MultiByteToWideChar
AcquireSRWLockExclusive
DeleteCriticalSection
WideCharToMultiByte
IsDebuggerPresent
GetModuleFileNameA
GetCurrentProcess
Thread32Next
Thread32First
GetEnvironmentVariableA
WaitForSingleObject
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetModuleHandleExA
GetTickCount64
CreateFileA
SetEvent
LoadLibraryA
CloseHandle
ResetEvent
GetLocalTime
GetThreadContext
GetProcAddress
GetCurrentProcessId
CreateDirectoryA
CreateEventA
OpenThread
CreateDirectoryW
SetThreadAffinityMask
user32
GetSystemMenu
GetMessageExtraInfo
GetMessagePos
MapVirtualKeyW
GetWindowRect
GetDC
IsWindowVisible
SetWindowPos
GetDpiForWindow
EnumChildWindows
EnumDisplayMonitors
SendMessageW
CallNextHookEx
SetWindowTextW
MessageBeep
WindowFromPoint
GetWindowPlacement
DestroyCursor
GetKeyboardState
SetCaretPos
GetActiveWindow
ShowWindow
IsWindow
GetAsyncKeyState
OpenClipboard
GetCapture
RedrawWindow
DestroyIcon
VkKeyScanW
GetWindowInfo
GetMonitorInfoW
CreateIconIndirect
CloseClipboard
EmptyClipboard
CreateCaret
MapWindowPoints
TrackMouseEvent
GetForegroundWindow
UnhookWindowsHookEx
GetMessageTime
SetLayeredWindowAttributes
BringWindowToTop
GetClipboardData
EnumDisplayDevicesW
LoadCursorW
DestroyCaret
SetCapture
SetWindowsHookExW
SetClipboardData
ToUnicode
SetCursor
GetSystemMetricsForDpi
GetClientRect
UpdateLayeredWindow
ShowCaret
GetDesktopWindow
EnumDisplaySettingsW
EnableMenuItem
GetParent
ReleaseCapture
InvalidateRect
GetAncestor
SetCursorPos
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
DefWindowProcW
PostMessageW
GetFocus
DestroyWindow
SetWindowLongPtrW
CreateWindowExW
UnregisterClassW
GetWindowLongPtrW
RegisterClassExW
PeekMessageW
EnumWindows
SetFocus
SendNotifyMessageW
TranslateMessage
GetUpdateRgn
AttachThreadInput
GetWindowThreadProcessId
SystemParametersInfoW
ValidateRect
ValidateRgn
MonitorFromWindow
IsChild
gdi32
SetBrushOrgEx
BitBlt
SaveDC
CreateDIBSection
StretchDIBits
CreateRectRgnIndirect
GetDeviceCaps
ExcludeClipRect
SetStretchBltMode
RestoreDC
CreateBitmap
CombineRgn
SelectObject
CreateCompatibleDC
CreateRectRgn
DeleteDC
SetMapperFlags
GetRegionData
DeleteObject
SetMapMode
CreateFontIndirectW
StretchBlt
shell32
SHGetSpecialFolderPathW
ExtractAssociatedIconW
DragQueryFileW
ole32
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoCreateInstance
CoCreateGuid
RevokeDragDrop
RegisterDragDrop
DoDragDrop
oleaut32
SysAllocString
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayDestroy
msvcp140
_Query_perf_counter
_Cnd_wait
?classic@locale@std@@SAAEBV12@XZ
_Query_perf_frequency
_Thrd_yield
_Mtx_unlock
_Thrd_join
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
_Mtx_lock
?_Xbad_function_call@std@@YAXXZ
?_Throw_Cpp_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPEAX@Z
?__ExceptionPtrCopyException@@YAXPEAXPEBX1@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Syserror_map@std@@YAPEBDH@Z
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
_Cnd_register_at_thread_exit
_Cnd_broadcast
winmm
timeGetTime
timeBeginPeriod
d2d1
ord1
dxgi
CreateDXGIFactory2
d3d11
D3D11CreateDevice
dcomp
DCompositionCreateDevice
imm32
ImmAssociateContextEx
ImmSetCandidateWindow
ImmAssociateContext
ImmGetCompositionStringW
ImmReleaseContext
ImmGetContext
ImmNotifyIME
comctl32
ord413
ord410
ord412
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memcmp
__intrinsic_setjmp
__std_type_info_destroy_list
memset
_CxxThrowException
__current_exception_context
__current_exception
strchr
strstr
__C_specific_handler
__RTtypeid
longjmp
__std_type_info_compare
strrchr
__std_terminate
_purecall
__std_exception_copy
__std_exception_destroy
__RTDynamicCast
memmove
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
fflush
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
fclose
__stdio_common_vsnprintf_s
fwrite
__stdio_common_vsprintf
fopen_s
__stdio_common_vsprintf_s
ftell
api-ms-win-crt-heap-l1-1-0
free
calloc
_callnewh
malloc
realloc
api-ms-win-crt-string-l1-1-0
towupper
iswalnum
iswspace
strcmp
iswdigit
towlower
iswalpha
strncmp
strncpy
api-ms-win-crt-runtime-l1-1-0
_invoke_watson
_endthreadex
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
terminate
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_fpreset
_beginthreadex
api-ms-win-crt-convert-l1-1-0
mbstowcs
_strtod_l
_atoi64
atoi
api-ms-win-crt-math-l1-1-0
cos
cosf
ceil
exp
expf
floor
floorf
atan2f
log
log10f
logf
powf
roundf
truncf
ceilf
atan2
acos
_hypotf
_hypot
sin
sinf
sqrt
_fdclass
fmod
sqrtf
_dclass
tan
tanf
pow
api-ms-win-crt-time-l1-1-0
_ftime64_s
api-ms-win-crt-locale-l1-1-0
_create_locale
api-ms-win-crt-environment-l1-1-0
getenv
ExitDll
GetPluginFactory
InitDll
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
73KB
Virtual Size
84KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
114KB
Virtual Size
113KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
48B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=18, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=261, version=33145,
count=6, id=257, version=35207,
count=3, id=253, version=35207,
count=9, id=259, version=35207,
count=8, id=260, version=35207,
count=31, id=261, version=35207,
count=1, id=260, version=33145,
count=2, id=262, version=33145,
count=10, id=261, version=35228,
count=43, id=257, version=33145,
count=631, id=1, productName=Unmarked objects,
count=21, id=265, version=35228,
count=1, id=256, version=35228,
count=1, id=255, version=35228,
count=1, id=151,
count=1, id=258, version=35228,