jaffacakes118_not-a-virus[.]AdWare[.]Win32[.]ICLoader[.]dkxm[.]1004ecd1252c7e83e806fd5b9d7d9e63

resource
jaffacakes118_not-a-virus.AdWare.Win32.ICLoader.dkxm.1004ecd1252c7e83e806fd5b9d7d9e63
unpack001/$1/Mp3tagStuff.exe
unpack001/$3/$APPDATA/Mp3tagApp/uninstaller.exe
unpack002/$PLUGINSDIR/nsProcess.dll
unpack001/$3/Mp3tagApp.exe
unpack001/$PLUGINSDIR/nsProcess.dll
unpack001/$R1/tak_deco_lib.dll

resource
unpack001/$R1/Mp3tag.exe

jaffacakes118_not-a-virus.AdWare.Win32.ICLoader.dkxm.1004ecd1252c7e83e806fd5b9d7d9e63

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 fb16ab76f49affe64b473f88547b1dd10c15930574ce976d3468e44b55f464b6
MD5 1004ecd1252c7e83e806fd5b9d7d9e63
SHA1 9e0ff2bd63deeb79c05b8c75256acfd2dcda6dd5
SHA512 4b7aad69523b96f85281ab587ac167ef843a9b1558834ab0993fce976ab9dbab19892f1bfd1055affd72c13225ccfa7cb27171c0039e694e88c675b56893985f
SSDEEP 98304:gVfxQsmlheHL2vz1xp5fwRaK5f0GjAOamxh6QLpfU:ofrmlherqz1xT4R3KGhTpfU
TLSH
T16EF53354D9806C04EE7252B1D177F76FF38F9F24D400F80AA368B5CEBE947C19A24A69
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$1/Mp3tagStuff.exe

IMPHASH 91e06fca39ae893897bbc79082a2a558
SHA256 6eeba724169efafac2a26476f4a68b0db137fbb3327d9ca58cdd6818edac5a3f
MD5 b9dcf691fa36d76605dfaa9afd513681
SHA1 d479381b5cc554f1a3429a8e5564ca8e052bf501
SHA512 0b3ea4c6f0dab00f6c0af13280c229ac9ce5f84716ce300d444b7006a32cd9b32c4f0e12602b259d1451d19dd2a127acb59ff0c1d3b9962e29899c474ede3a21
SSDEEP 3072:OIw6zfdj1MKpcTiOiWX4mmAUKfFBCtsAg0FujhN3z/VrfvPjSgZ:3vp6ixa47PsAOxfVZ
TLSH
T131147C1075D2C4B2D172593108E5E6A56A3DFC350F658A7F67D80BAE0F741C0AA3AEB3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

22648

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress LoadLibraryExW WaitForSingleObject CreateThread WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary GetCommandLineA GetCommandLineW ReadFile HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetACP SetFilePointerEx GetConsoleMode ReadConsoleW GetFileType GetConsoleCP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle CreateFileW WriteConsoleW HeapSize

Name

.text

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

744B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

$3/$APPDATA/Mp3tagApp/uninstaller.exe

IMPHASH e2a592076b17ef8bfb48b7e03965a3fc
SHA256 b6458330bd26085a6e3c38322d70d08f0425d125a0546aa84820b2cbaee2b89b
MD5 34e498e1434b84fabb66e210cf664ecd
SHA1 b6d18866e3bcdb2a392430b54c26abf0b6703bc5
SHA512 b355c09cd6b68be860a20f24987ad009f4502f13997230a57e9cf45936a7cddde3744d54512f30758acb873511ca2c33f50366b8810f68cc2e81e7bc554268e2
SSDEEP 768:+JKOdm9o29rJYypQJ2JQJXJuKU+duC1ZHQ0D3LHSGiVNupJRnd7BL:qTdm9B9lYypfMXvugHQ0DbLiNuz7N
TLSH
T176038D0173A0C56BDAB24B712D766A7BCFFAD52125516F0703507E9D3D222C2EE1E392
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

12960

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetCurrentDirectoryW GetFileAttributesW GetFullPathNameW Sleep GetTickCount GetFileSize GetModuleFileNameW MoveFileW SetFileAttributesW GetCurrentProcess ExitProcess SetEnvironmentVariableW GetWindowsDirectoryW GetTempPathW GetCommandLineW GetVersion SetErrorMode lstrlenW WaitForSingleObject CopyFileW CompareFileTime GlobalLock CreateThread GetLastError CreateDirectoryW CreateProcessW RemoveDirectoryW lstrcmpiA CreateFileW GetTempFileNameW WriteFile lstrcpyA lstrcpyW MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GlobalFree GlobalAlloc GetShortPathNameW SearchPathW lstrcmpiW SetFileTime CloseHandle ExpandEnvironmentStringsW lstrcmpW GlobalUnlock lstrcpynW GetDiskFreeSpaceW GetExitCodeProcess FindFirstFileW FindNextFileW DeleteFileW SetFilePointer ReadFile FindClose MulDiv MultiByteToWideChar lstrlenA WideCharToMultiByte GetPrivateProfileStringW WritePrivateProfileStringW FreeLibrary LoadLibraryExW GetModuleHandleW

user32

GetSystemMenu SetClassLongW IsWindowEnabled EnableMenuItem SetWindowPos GetSysColor GetWindowLongW SetCursor LoadCursorW CheckDlgButton GetMessagePos LoadBitmapW CallWindowProcW IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard OpenClipboard wsprintfW ScreenToClient GetWindowRect GetSystemMetrics SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharPrevW CharNextA wsprintfA DispatchMessageW PeekMessageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect EndDialog RegisterClassW SystemParametersInfoW CreateWindowExW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow LoadImageW SetTimer SetWindowTextW PostQuitMessage ShowWindow GetDlgItem IsWindow SetWindowLongW FindWindowExW TrackPopupMenu AppendMenuW CreatePopupMenu DrawTextW EndPaint CreateDialogParamW SendMessageTimeoutW SetForegroundWindow

gdi32

SelectObject SetBkMode CreateFontIndirectW SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW ShellExecuteW SHFileOperationW

advapi32

RegDeleteKeyW SetFileSecurityW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegOpenKeyExW RegEnumValueW RegDeleteValueW RegCloseKey RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumKeyW

comctl32

ImageList_AddMasked ord17 ImageList_Destroy ImageList_Create

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$3/Mp3tagApp.exe

IMPHASH 18c5c78b9d74cb9bf944af923d3ac1c9
SHA256 d323b94408f55c10a286d37bb638cdc33e69983f885c090d3f7bf1a5468bbc53
MD5 3361e896234304716c5b0cc9f2ba48dd
SHA1 da6e815177aa46e7a7565fdd17d861e011dbc3ad
SHA512 16c79fc7fc1779b6fba658741a399c2f476bab100d10eaefbba1ddfdcbf9c45b4ba5fc8b796262db6548f67aa165808905aacce53e2bbbca13788e09acf1cc66
SSDEEP 6144:D76/2pyjMbK9KCh4ki+Hoonk1xG6G0lQ5m+o+hu/9MOYiFzzAO4uVLYN:D7m2pOgKcCt6oUUR5ro+qMOtzOuJYN
TLSH
T1D7A48D107AA2C036E473C8334EFCBAADA1ADBA111F1595E773D4061E9E719E1BF31126
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

89762

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DispatchMessageW TranslateMessage

advapi32

RegOpenKeyExW

kernel32

DecodePointer CreateFileW GetVersionExW GetCurrentProcess GetProcAddress LoadLibraryExW LoadLibraryW EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId QueryPerformanceCounter SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead IsDebuggerPresent GetStartupInfoW CloseHandle GetLastError SetEvent WaitForSingleObjectEx SignalObjectAndWait SwitchToThread CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject UnregisterWait EncodePointer GetCurrentThread GetThreadTimes FreeLibrary FreeLibraryAndExitThread GetModuleFileNameW GetModuleHandleA VirtualAlloc VirtualFree VirtualProtect DuplicateHandle ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx CreateTimerQueue RaiseException RtlUnwind HeapAlloc HeapFree GetStdHandle WriteFile MultiByteToWideChar ExitProcess GetModuleHandleExW GetACP GetStringTypeW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetFilePointerEx WriteConsoleW

$PLUGINSDIR/nsProcess.dll

IMPHASH 439074d1c01f7b16781bdf060930814a
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

4097

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$R1/Mp3tag.exe

IMPHASH 5f6f99e1f11166f1830c82920e52f53c
SHA256 b629e1db17488424af8bd6fdf2e364740db94fe01a8f620645679923bebf2ff5
MD5 ad010eabb44c4390230f4b92435097ab
SHA1 befe957e74018d2edb622f2a9c31469bf3880cd3
SHA512 d6f3ec8448faf615de9239929bf2ddd3008cf92094c4ca796796e2c74104980bd56c631aa7d244099585ff8f2f4d5be387878fcfc2e9ed0ace8f8e5848472cbb
SSDEEP 98304:WPYSQ3h0DOVAXzgcAyGsa5ZLNHnJ2PW/GVqAQqJKPr/TbmP3U6K:WecbzSyPa51NHnkPgnD/Tbj6K
TLSH
T1DC769E217A41C479C6A202719C2CE6AD56AEBE704F7045DBA38C3F1E3E705D26E3196F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

79:00:4b:d3:69:84:8a:37:80:1a:d2:16:80:aa:df:18:ab:8e:9b:c2:de:fe:58:8c:b5:f9:ce:35:67:57:53:e3

Digest Algorithm

sha256

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Florian Heidenreich,O=Florian Heidenreich,POSTALCODE=01097,STREET=Erlenstrasse 18,L=Dresden,ST=Saxony,C=DE

Chains

Oct 15, 2026

CN=Florian Heidenreich,O=Florian Heidenreich,POSTALCODE=01097,STREET=Erlenstrasse 18,L=Dresden,ST=Saxony,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=AddTrust External CA Root,OU=AddTrust External TTP Network,O=AddTrust AB,C=SE

CN=Florian Heidenreich,O=Florian Heidenreich,POSTALCODE=01097,STREET=Erlenstrasse 18,L=Dresden,ST=Saxony,C=DE

CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB

Minor OS version

1

Major OS version

5

Entry point

3157968

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Y:\build\mp3tag\release\Mp3tag.pdb

shlwapi

PathRelativePathToW PathSearchAndQualifyW PathIsUNCW PathQuoteSpacesW PathAddBackslashW PathFindFileNameW PathRemoveExtensionW PathFindExtensionW PathStripToRootW PathRemoveFileSpecW PathCompactPathW PathIsDirectoryW StrCmpLogicalW PathCanonicalizeW PathIsRelativeW

winhttp

WinHttpSetTimeouts WinHttpQueryHeaders WinHttpCloseHandle WinHttpReceiveResponse WinHttpSetCredentials WinHttpQueryAuthSchemes WinHttpWriteData WinHttpReadData WinHttpQueryDataAvailable WinHttpSendRequest WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpGetProxyForUrl WinHttpConnect WinHttpSetOption WinHttpOpen WinHttpSetStatusCallback

kernel32

SearchPathW GetLogicalDriveStringsW GetDiskFreeSpaceExW GetVolumeInformationW GetVersionExW LocalLock LocalUnlock VerSetConditionMask VerifyVersionInfoW GetSystemDirectoryW GetWindowsDirectoryW GetNativeSystemInfo GetFileType GetModuleHandleA FileTimeToSystemTime GetDateFormatA GetTimeFormatA SystemTimeToFileTime SetFileTime Beep GetACP OutputDebugStringA EncodePointer FreeResource LoadLibraryExW lstrcmpW LoadLibraryA GlobalFindAtomW lstrcmpA CompareStringA GetPrivateProfileIntW GetPrivateProfileStringW WritePrivateProfileStringW SuspendThread ResumeThread SystemTimeToTzSpecificLocalTime GetFullPathNameW DuplicateHandle GetStringTypeExW GetThreadLocale GetTickCount GetProfileIntW GetDiskFreeSpaceW ReplaceFileW GetUserDefaultLCID GetFileAttributesExW GetFileSizeEx LocalFileTimeToFileTime ReleaseSemaphore CreateSemaphoreW GetAtomNameW TlsAlloc TlsGetValue TlsSetValue TlsFree GlobalReAlloc GlobalHandle ExpandEnvironmentStringsW CompareStringW GetSystemDefaultUILanguage GetUserDefaultUILanguage GlobalFlags VirtualProtect SetErrorMode FindResourceExW WaitForSingleObjectEx UnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent InitializeSListHead IsDebuggerPresent GetStartupInfoW PeekNamedPipe GetConsoleCP ReadConsoleW GetConsoleMode SetFilePointerEx GetModuleHandleExW ExitThread SetStdHandle GetCommandLineA VirtualQuery GetSystemInfo HeapQueryInformation RtlUnwind FormatMessageA AreFileApisANSI WaitForMultipleObjectsEx UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList SetProcessAffinityMask VirtualFree VirtualAlloc FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation SwitchToThread SignalObjectAndWait CreateTimerQueue GetStringTypeExA LCMapStringA GetCPInfo LCMapStringW RtlCaptureStackBackTrace QueueUserWorkItem TryEnterCriticalSection GetStringTypeW OutputDebugStringW FileTimeToDosDateTime FileTimeToLocalFileTime SetThreadPriority GetCurrentThread GetThreadPriority ReadDirectoryChangesW GetQueuedCompletionStatus PostQueuedCompletionStatus CreateIoCompletionPort GetFileTime lstrcatW GetCommandLineW SetCurrentDirectoryW GetCurrentDirectoryW RemoveDirectoryW CreateDirectoryW OpenFileMappingW UnmapViewOfFile MapViewOfFile CreateFileMappingW ReleaseMutex CreateMutexW GetLongPathNameW GetShortPathNameW MoveFileW DeleteFileW SetFileAttributesW CopyFileW GetTimeFormatW GetDateFormatW GetLocalTime CreateProcessW QueryPerformanceFrequency QueryPerformanceCounter GetTempPathA GetVersionExA GetSystemTimeAsFileTime GetSystemTime WriteFile UnlockFile SetFilePointer SetEndOfFile ReadFile LockFileEx LockFile GetFullPathNameA GetFileSize GetFileAttributesA FlushFileBuffers DeleteFileA CreateFileA GetProcessHeap HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc HeapSize HeapFree GetTempFileNameW GlobalGetAtomNameW GetVersion FindClose FindNextFileW FindFirstFileW GetEnvironmentVariableW WaitForMultipleObjects LocalAlloc GetFileAttributesW MulDiv Sleep CreateThread TerminateThread lstrcpyW GlobalAlloc GlobalFree GlobalSize GlobalUnlock GlobalLock WaitForSingleObject FreeLibrary GetDriveTypeW LocalFree FormatMessageW WideCharToMultiByte lstrcmpiW InitializeCriticalSectionAndSpinCount lstrlenW EnumSystemLocalesW GetLocaleInfoW ResetEvent SetEvent GlobalDeleteAtom GlobalAddAtomW GetModuleHandleW MultiByteToWideChar DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection CreateEventW SetLastError CloseHandle GetCurrentProcess GetCurrentProcessId GetCurrentThreadId CreateFileW GetTempPathW GetProcAddress LoadLibraryW GetModuleFileNameW SetUnhandledExceptionFilter lstrcpynW GetLastError FindResourceW LoadResource LockResource SizeofResource GetStdHandle GetModuleFileNameA ExitProcess IsValidLocale GetTimeZoneInformation IsValidCodePage GetOEMCP WriteConsoleW SetConsoleCtrlHandler FindFirstFileExA FindFirstFileExW FindNextFileA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetConsoleScreenBufferInfo TzSpecificLocalTimeToSystemTime LocalReAlloc MoveFileExW

user32

LockWindowUpdate MapDialogRect RealChildWindowFromPoint CopyImage MonitorFromPoint SetParent ReuseDDElParam UnpackDDElParam GetMenuBarInfo InsertMenuItemW TranslateAcceleratorW LoadAcceleratorsW BringWindowToTop DestroyMenu GetWindowThreadProcessId GetNextDlgTabItem TabbedTextOutW GrayStringW DrawTextExW MapVirtualKeyW GetKeyNameTextW SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps ScrollWindowEx IsWindowEnabled IsDlgButtonChecked CheckRadioButton GetDlgItemInt SetDlgItemInt ShowWindow SetScrollInfo CallNextHookEx SetWindowsHookExW GetTopWindow EqualRect GetWindowTextLengthW RemovePropW GetPropW SetPropW ShowScrollBar GetScrollRange SetScrollRange GetScrollPos SetScrollPos ScrollWindow ValidateRect GetForegroundWindow SetActiveWindow TrackPopupMenuEx SetMenu GetMenu GetCapture SetWindowPlacement GetWindowPlacement IsChild GetClassInfoExW GetClassInfoW GetMessageTime LoadStringA EnableWindow SendMessageW GetFocus UnhookWindowsHookEx RemoveMenu GetMenuStringW UnregisterClassA SendDlgItemMessageA SetMenuDefaultItem LoadMenuW ModifyMenuW DeleteMenu GetMenuState GetMenuItemInfoW CreateMenu DrawIconEx CreateIconIndirect GetIconInfo SetWindowRgn CallWindowProcW IsZoomed GetScrollInfo GetWindowRgn DeferWindowPos MapWindowPoints IsMenu AdjustWindowRectEx CopyIcon DrawEdge DestroyCursor IntersectRect LoadBitmapW SetRectEmpty UnionRect PostThreadMessageW CreateWindowExW RegisterClassW DefWindowProcW DestroyWindow PostQuitMessage WaitMessage IsDialogMessageW CreateDialogIndirectParamW GetWindowTextW WinHelpW MoveWindow SetWindowPos CheckDlgButton GetSystemMenu DrawTextW LoadStringW GetDialogBaseUnits EndPaint DrawIcon BeginPaint GetActiveWindow SetRect GetClientRect InvalidateRect UpdateWindow PtInRect GetAsyncKeyState TranslateMessage DispatchMessageW GetParent MessageBoxW KillTimer SetTimer GetDlgItem SendDlgItemMessageW GetDlgItemTextW SetWindowLongW SetWindowTextW SetDlgItemTextW SetFocus GetWindowLongW EndDialog DialogBoxParamW SystemParametersInfoW GetWindowRect CreatePopupMenu AppendMenuW InsertMenuW GetWindow LoadIconW MessageBeep GetMessagePos RegisterClipboardFormatW DragDetect OpenClipboard EmptyClipboard SetClipboardData CloseClipboard GetPriorityClipboardFormat GetClipboardData PostMessageW GetDC ReleaseDC CharToOemBuffA MsgWaitForMultipleObjects CharUpperBuffW SendMessageTimeoutW GetLastActivePopup MonitorFromRect MsgWaitForMultipleObjectsEx PeekMessageW IsWindowUnicode GetMessageW GetMessageA DispatchMessageA CharUpperW CharLowerW UnregisterClassW GetDCEx ReleaseCapture RedrawWindow SetCapture GetClassLongW FillRect IsRectEmpty EndDeferWindowPos BeginDeferWindowPos GetSysColorBrush CharLowerBuffW GetKeyState OffsetRect InflateRect CopyRect GetWindowDC GetDesktopWindow IsClipboardFormatAvailable TrackPopupMenu GetCursorPos SetForegroundWindow IsIconic IsWindowVisible GetClassNameW EnableMenuItem RegisterWindowMessageW CheckMenuItem GetSystemMetrics GetSubMenu MonitorFromWindow GetMonitorInfoW ScreenToClient GetMenuItemCount GetMenuItemID ClientToScreen WindowFromPoint SetCursor LoadCursorW GetDlgCtrlID IsWindow DestroyIcon GetSysColor LoadImageW CheckMenuRadioItem ShowOwnedPopups

gdi32

EnumFontFamiliesExW StretchDIBits GetCharWidthW CreateFontW GetTextMetricsW GetBkColor LPtoDP CreateEllipticRgn DPtoLP GetMapMode ScaleWindowExtEx ScaleViewportExtEx OffsetWindowOrgEx OffsetViewportOrgEx SetWindowOrgEx SetWindowExtEx ArcTo StartDocW SetColorAdjustment ModifyWorldTransform SetWorldTransform EnumMetaFile PlayMetaFileRecord SetTextJustification SetTextAlign SetTextCharacterExtra SetROP2 SetPolyFillMode GetLayout SetLayout SetMapMode SetGraphicsMode SetMapperFlags SetBkMode SelectPalette SetViewportOrgEx SetViewportExtEx PolylineTo PolyBezierTo ExtTextOutW TextOutW MoveToEx SetArcDirection SelectClipPath CreateHatchBrush CreatePatternBrush Escape ExcludeClipRect GetClipBox GetClipRgn ExtSelectClipRgn SelectClipRgn SaveDC RestoreDC RectVisible PtVisible PlayMetaFile OffsetClipRgn LineTo IntersectClipRect GetWindowExtEx GetViewportExtEx GetObjectType GetCurrentPositionEx GetTextExtentPoint32W DeleteObject DeleteDC SelectObject SetDIBColorTable CreateCompatibleDC GetObjectW CreateDIBSection CreateCompatibleBitmap BitBlt GetDeviceCaps GetCurrentObject CreateFontIndirectW GetTextColor PatBlt CreateSolidBrush CreateDCW SetBkColor SetTextColor GetStockObject CreatePen ExtCreatePen CreateRectRgnIndirect StretchBlt SetStretchBltMode CreateRectRgn OffsetRgn SetRectRgn CombineRgn FillRgn GetWindowOrgEx CreateBitmap GetPixel CreatePolygonRgn CreateDIBitmap SetPixel Ellipse GetDIBits SetDIBits SetPixelV CopyMetaFileW CreateDIBPatternBrushPt PolyDraw

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

advapi32

RegQueryInfoKeyW RegCloseKey GetUserNameW RegDeleteKeyW RegEnumKeyExW OpenProcessToken LookupPrivilegeValueW AdjustTokenPrivileges RegQueryValueExW RegCreateKeyExW RegSetValueExW RegEnumValueW RegSetValueW RegEnumKeyW RegQueryValueW SetFileSecurityW GetFileSecurityW RegDeleteValueW RegOpenKeyExW

shell32

DragQueryFileW SHAddToRecentDocs ExtractIconW DragFinish Shell_NotifyIconW SHParseDisplayName SHCreateShellItem SHBrowseForFolderW SHGetPathFromIDListW SHGetSpecialFolderLocation SHGetDesktopFolder ShellExecuteExW SHGetMalloc SHFileOperationW FindExecutableW SHGetFileInfoW ShellExecuteW SHGetSpecialFolderPathW

comctl32

ImageList_ReplaceIcon ImageList_GetImageCount ImageList_Remove ImageList_DragLeave ImageList_EndDrag ImageList_DragMove ImageList_DragShowNolock ImageList_BeginDrag ImageList_DragEnter ImageList_GetImageInfo ImageList_AddMasked ImageList_GetIcon ImageList_Draw ImageList_SetBkColor

ole32

CoLockObjectExternal PropVariantCopy DoDragDrop OleIsCurrentClipboard OleFlushClipboard OleSetClipboard CoInitializeEx CoCreateGuid SetConvertStg OleRegGetUserType OleDuplicateData ReadFmtUserTypeStg WriteFmtUserTypeStg WriteClassStg ReadClassStg CreateBindCtx CoTreatAsClass CoTaskMemAlloc StringFromCLSID CoTaskMemFree CreateStreamOnHGlobal RegisterDragDrop CoCreateInstance ReleaseStgMedium CoUninitialize CoInitialize RevokeDragDrop OleGetClipboard CoFreeUnusedLibraries OleInitialize OleUninitialize CLSIDFromString StringFromGUID2 CoDisconnectObject CoGetClassObject CoRegisterClassObject CoRevokeClassObject CoRegisterMessageFilter CLSIDFromProgID OleRun

oleaut32

RegisterTypeLi LoadRegTypeLi LoadTypeLi VarDecFromStr VarBstrFromDec VarBstrFromDate VarBstrFromCy VarCyFromStr VarDateFromStr VariantCopy SafeArrayPtrOfIndex SafeArrayCopy SafeArrayPutElement SafeArrayGetElement SysFreeString SysStringByteLen SysAllocStringByteLen SysAllocStringLen VariantInit VariantClear VariantChangeType SysAllocString SysReAllocStringLen SysStringLen SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayAllocDescriptor SafeArrayAllocData SafeArrayCreate SafeArrayDestroyDescriptor SafeArrayDestroyData SafeArrayDestroy SafeArrayRedim SafeArrayGetDim SafeArrayGetElemsize SafeArrayGetUBound SafeArrayGetLBound SafeArrayLock SafeArrayUnlock SafeArrayAccessData SafeArrayUnaccessData

oledlg

OleUIBusyW

ws2_32

WSAGetLastError WSACleanup WSAStartup getsockname getpeername bind accept gethostname select closesocket recv send connect WSASetLastError gethostbyname inet_addr htons sendto recvfrom ntohs inet_ntoa socket WSAAsyncSelect htonl

gdiplus

GdipGetImageEncoders GdipGetImageEncodersSize GdipCreateBitmapFromHBITMAP GdipSaveImageToFile GdipCreateBitmapFromStreamICM GdipCreateBitmapFromStream GdiplusStartup GdipCreateBitmapFromFileICM GdipCreateBitmapFromFile GdipGetImagePixelFormat GdipGetImageHeight GdipDrawImageI GdipGetImageWidth GdipGetImagePaletteSize GdipGetImagePalette GdipBitmapLockBits GdipBitmapUnlockBits GdipCreateBitmapFromScan0 GdipCloneImage GdipAlloc GdipFree GdipDisposeImage GdipGetImageGraphicsContext GdipDeleteGraphics GdiplusShutdown

winmm

mciSendCommandW mciGetErrorStringW

oleacc

CreateStdAccessibleObject AccessibleObjectFromWindow LresultFromObject

tak_deco_lib

tak_SSD_GetStreamInfo tak_SSD_Valid tak_SSD_Create_FromStream tak_SSD_GetEncoderInfo tak_SSD_Destroy

uxtheme

DrawThemeText DrawThemeParentBackground IsAppThemed IsThemeBackgroundPartiallyTransparent GetThemePartSize DrawThemeBackground CloseThemeData OpenThemeData SetWindowTheme

??0_http_request@details@http@web@@QAE@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??0_http_request@details@http@web@@QAE@V?$unique_ptr@V_http_server_context@details@http@web@@U?$default_delete@V_http_server_context@details@http@web@@@std@@@std@@@Z ??0http_client@client@http@web@@QAE@ABVuri@3@@Z ??0http_client@client@http@web@@QAE@ABVuri@3@ABVhttp_client_config@123@@Z ??0http_msg_base@details@http@web@@QAE@XZ ??0scoped_c_thread_locale@details@utility@@QAE@XZ ??0uri@web@@QAE@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??0uri@web@@QAE@PB_W@Z ??0value@json@web@@QAE@$$QAV012@@Z ??0value@json@web@@QAE@ABV012@@Z ??0value@json@web@@QAE@H@Z ??0value@json@web@@QAE@I@Z ??0value@json@web@@QAE@N@Z ??0value@json@web@@QAE@PB_W@Z ??0value@json@web@@QAE@PB_W_N@Z ??0value@json@web@@QAE@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??0value@json@web@@QAE@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ??0value@json@web@@QAE@XZ ??0value@json@web@@QAE@_J@Z ??0value@json@web@@QAE@_K@Z ??0value@json@web@@QAE@_N@Z ??1scoped_c_thread_locale@details@utility@@QAE@XZ ??4value@json@web@@QAEAAV012@$$QAV012@@Z ??4value@json@web@@QAEAAV012@ABV012@@Z ??5json@web@@YAAAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@AAV23@AAVvalue@01@@Z ??6json@web@@YAAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@AAV23@ABVvalue@01@@Z ??8uri@web@@QBE_NABV01@@Z ??8value@json@web@@QBE_NABV012@@Z ??Avalue@json@web@@AAEAAV012@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??Avalue@json@web@@QAEAAV012@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ??Avalue@json@web@@QAEAAV012@I@Z ??Rzero_memory_deleter@details@web@@QBEXPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?CONNECT@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?DEL@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?GET@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?HEAD@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?MERGE@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?OPTIONS@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?PATCH@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?POST@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?PUT@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?TRCE@methods@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?_complete@http_msg_base@details@http@web@@UAEX_KABVexception_ptr@std@@@Z ?_extract_json@http_msg_base@details@http@web@@QAE?AVvalue@json@4@_N@Z ?_extract_vector@http_msg_base@details@http@web@@QAE?AV?$vector@EV?$allocator@E@std@@@std@@XZ ?_get_content_length@http_msg_base@details@http@web@@QAEIXZ ?_prepare_to_receive_data@http_msg_base@details@http@web@@QAEXXZ ?absolute_uri@_http_request@details@http@web@@QBE?AVuri@4@XZ ?accept@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?accept_charset@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?accept_encoding@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?accept_language@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?accept_ranges@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?add_chunked_delimiters@chunked_encoding@details@http@web@@YAIPAEII@Z ?age@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?allow@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?append@uri_builder@web@@QAEAAV12@ABVuri@2@@Z ?append_path@uri_builder@web@@QAEAAV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?append_query@uri_builder@web@@QAEAAV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?application_atom_xml@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_http@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_javascript@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_json@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_octetstream@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_x_www_form_urlencoded@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_xjavascript@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_xjson@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?application_xml@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?array@value@json@web@@SA?AV123@I@Z ?array@value@json@web@@SA?AV123@V?$vector@Vvalue@json@web@@V?$allocator@Vvalue@json@web@@@std@@@std@@@Z ?array@value@json@web@@SA?AV123@XZ ?as_array@value@json@web@@QAEAAVarray@23@XZ ?as_array@value@json@web@@QBEABVarray@23@XZ ?as_bool@value@json@web@@QBE_NXZ ?as_double@value@json@web@@QBENXZ ?as_integer@value@json@web@@QBEHXZ ?as_number@value@json@web@@QBEABVnumber@23@XZ ?as_object@value@json@web@@QAEAAVobject@23@XZ ?as_object@value@json@web@@QBEABVobject@23@XZ ?as_string@value@json@web@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?ascii@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?at@value@json@web@@QAEAAV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?at@value@json@web@@QAEAAV123@I@Z ?at@value@json@web@@QBEABV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?at@value@json@web@@QBEABV123@I@Z ?authority@uri@web@@QBE?AV12@XZ ?authorization@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?base_uri@http_client@client@http@web@@QBEABVuri@4@XZ ?boolean@value@json@web@@SA?AV123@_N@Z ?boundary@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?c_locale@scoped_c_thread_locale@details@utility@@SAPAU__crt_locale_pointers@@XZ ?cache_control@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?cache_control@http_headers@http@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?client_config@http_client@client@http@web@@QBEABVhttp_client_config@234@XZ ?connection@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_disposition@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_encoding@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_language@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_length@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_length@http_headers@http@web@@QBE_KXZ ?content_location@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_md5@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_range@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_type@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?content_type@http_headers@http@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?date@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?date@http_headers@http@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?decode@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z ?default_error_condition@windows_category_impl@details@utility@@UBE?AVerror_condition@std@@H@Z ?encode_data_string@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z ?encode_impl@uri@web@@CA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@ABV?$function@$$A6A_NH@Z@4@@Z ?encode_uri@uri@web@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@W4component@components@12@@Z ?erase@value@json@web@@QAEXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?erase@value@json@web@@QAEXI@Z ?etag@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?expect@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?expires@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?extract_string@http_msg_base@details@http@web@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?extract_utf16string@http_msg_base@details@http@web@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?extract_utf8string@http_msg_base@details@http@web@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?form_data@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?format@value@json@web@@ABEXAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?format@value@json@web@@ABEXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?from@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?from_string@datetime@utility@@SA?AV12@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z ?generate@nonce_generator@utility@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?host@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?if_match@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?if_modified_since@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?if_none_match@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?if_range@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?if_unmodified_since@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?is_double@value@json@web@@QBE_NXZ ?is_int32@number@json@web@@QBE_NXZ ?is_int64@number@json@web@@QBE_NXZ ?is_integer@value@json@web@@QBE_NXZ ?is_uint32@number@json@web@@QBE_NXZ ?is_valid@uri_builder@web@@QAE_NXZ ?join@uri_components@details@web@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?keep_object_element_order@json@web@@YAX_N@Z ?last_modified@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?latin1@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?latin1_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?latin1_to_utf8@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z ?location@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?ltrim_whitespace@details@http@web@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?max_forwards@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?message@windows_category_impl@details@utility@@UBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z ?message_http@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?multipart_form_data@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?null@value@json@web@@SA?AV123@XZ ?number@value@json@web@@SA?AV123@H@Z ?number@value@json@web@@SA?AV123@I@Z ?number@value@json@web@@SA?AV123@N@Z ?number@value@json@web@@SA?AV123@_J@Z ?number@value@json@web@@SA?AV123@_K@Z ?object@value@json@web@@SA?AV123@V?$vector@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vvalue@json@web@@@std@@V?$allocator@U?$pair@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@Vvalue@json@web@@@std@@@2@@std@@_N@Z ?object@value@json@web@@SA?AV123@_N@Z ?parse@value@json@web@@SA?AV123@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@@Z ?parse@value@json@web@@SA?AV123@AAV?$basic_istream@DU?$char_traits@D@std@@@std@@AAVerror_code@5@@Z ?parse@value@json@web@@SA?AV123@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@@Z ?parse@value@json@web@@SA?AV123@AAV?$basic_istream@_WU?$char_traits@_W@std@@@std@@AAVerror_code@5@@Z ?parse@value@json@web@@SA?AV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?parse@value@json@web@@SA?AV123@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVerror_code@5@@Z ?platform_category@details@utility@@YAABVerror_category@std@@XZ ?pragma@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?proxy_authenticate@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?proxy_authorization@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?range@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?referer@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?relative_uri@_http_request@details@http@web@@QBE?AVuri@4@XZ ?request@http_client@client@http@web@@QAE?AV?$task@Vhttp_response@http@web@@@Concurrency@@Vhttp_request@34@ABVcancellation_token@6@@Z ?resource@uri@web@@QBE?AV12@XZ ?retry_after@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?rtrim_whitespace@details@http@web@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?seconds_to_xml_duration@timespan@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$duration@_JU?$ratio@$00$00@std@@@chrono@4@@Z ?serialize@value@json@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?serialize@value@json@web@@QBEXAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@@Z ?serialize@value@json@web@@QBEXAAV?$basic_ostream@_WU?$char_traits@_W@std@@@std@@@Z ?server@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?set_body@http_msg_base@details@http@web@@QAEXABV?$basic_istream@E@streams@Concurrency@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?set_body@http_msg_base@details@http@web@@QAEXABV?$basic_istream@E@streams@Concurrency@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?set_body@http_msg_base@details@http@web@@QAEXABV?$basic_istream@E@streams@Concurrency@@_KABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?set_body@http_msg_base@details@http@web@@QAEXABV?$basic_istream@E@streams@Concurrency@@_KABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?set_cache_control@http_headers@http@web@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?set_content_length@http_headers@http@web@@QAEX_K@Z ?set_content_type@http_headers@http@web@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?set_date@http_headers@http@web@@QAEXABVdatetime@utility@@@Z ?set_request_uri@_http_request@details@http@web@@QAEXABVuri@4@@Z ?split_path@uri@web@@SA?AV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?split_query@uri@web@@SA?AV?$map@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@U?$less@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@V?$allocator@U?$pair@$$CBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V12@@std@@@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?string@value@json@web@@CA?AV123@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?string@value@json@web@@SA?AV123@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z ?system_type_to_datetime@datetime@utility@@CA_NPAX_KPAV12@@Z ?te@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_javascript@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_json@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_plain@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_plain_utf16@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_plain_utf16le@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_plain_utf8@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_xjavascript@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?text_xjson@mime_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?to_string@_http_request@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string@_http_response@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string@datetime@utility@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4date_format@12@@Z ?to_string@http_msg_base@details@http@web@@UBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string@uri_builder@web@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string@value@json@web@@QBE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV34@@Z ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@$$QAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z ?to_string_t@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_uri@uri_builder@web@@QAE?AVuri@2@XZ ?to_utf16string@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?to_utf16string@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V34@@Z ?to_utf8string@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?to_utf8string@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@@Z ?trailer@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?transfer_encoding@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?trim_whitespace@details@http@web@@YAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?type@value@json@web@@QBE?AW4value_type@123@XZ ?upgrade@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?usascii@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?usascii_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?user_agent@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?utc_now@datetime@utility@@SA?AV12@XZ ?utf16@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?utf16_to_utf8@conversions@utility@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z ?utf16be@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?utf16le@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?utf8@charset_types@details@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?utf8_to_utf16@conversions@utility@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z ?validate@uri@web@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?vary@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?via@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?warning@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?windows_category@details@utility@@YAABVerror_category@std@@XZ ?www_authenticate@header_names@http@web@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@B ?xml_duration_to_seconds@timespan@utility@@YA?AV?$duration@_JU?$ratio@$00$00@std@@@chrono@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@@Z opus_decode opus_decode_float opus_decoder_create opus_decoder_ctl opus_decoder_destroy opus_decoder_get_nb_samples opus_decoder_get_size opus_decoder_init opus_get_version_string opus_multistream_decode opus_multistream_decode_float opus_multistream_decoder_create opus_multistream_decoder_ctl opus_multistream_decoder_destroy opus_multistream_decoder_get_size opus_multistream_decoder_init opus_packet_get_bandwidth opus_packet_get_nb_channels opus_packet_get_nb_frames opus_packet_get_nb_samples opus_packet_get_samples_per_frame opus_packet_parse opus_pcm_soft_clip opus_strerror

Name

.text

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.2MB

Virtual Size

1.2MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

113KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

12B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

generic

count=34, id=241, version=40116,

count=204, id=243, version=40116,

count=37, id=242, version=40116,

count=13, id=261, productName=VS2015 UPD2 build 23918, version=23918,

count=6, id=199, version=41118,

count=1, id=209, version=65501,

count=2, id=261, version=23013,

count=9, id=206, version=65501,

count=1, id=207, version=65501,

count=1, id=208, version=65501,

count=28, id=259, version=24123,

count=39, id=260, version=24123,

count=241, id=261, version=24123,

count=12, id=260, productName=VS2015 UPD2 build 23918, version=23918,

count=58, id=260, productName=VS2015 UPD3.1 build 24215, version=24215,

count=9, id=261, productName=VS2015 UPD3.1 build 24215, version=24215,

count=2, id=123, productName=VS2005 build 50727, version=50727,

count=35, id=203, version=65501,

count=818, id=1, productName=Unmarked objects,

count=394, id=265, version=24215,

count=1, id=256, productName=VS2015 UPD3.1 build 24215, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

$R1/Mp3tagSetup.ini

SHA256 69602127f36c460cee541222777fe00318c1b46c0cf88a6eda99fba46e356e2c
MD5 c42d9b9b219831ca4da2e8335dc68b7e
SHA1 d8677096ef88036a59b0e10703f7ee2f4c094016
SHA512 0c4a9ffc1e6febd1e53d516f0b5f940574e158b3aaea5e9559351d7c91d782bfe0ed832ecb53d96a0c1a3b650634975ce155dcad953639a5003c4f7d50db389c
MD5 SHA1 SHA512

$R1/data/actions/CD-R.mta

SHA256 ccf92feca6bf8ea7606ba905ba36ee38627f21a101aa3af10e911e2467d79597
MD5 a6b70756a3f475b4833e82c184236a58
SHA1 e7d5b108c90ce81a7859f4f9c6536594e8f7ca1f
SHA512 cfe70cbeb56b2d16dc10f1a4edc2c9a3f6db1082300e9b7ef140b469bbd53e541b91e72a135347ce02580f995ec2b419d24520c61269149ef82997db92c39d36
TLSH
T14C012A3E629A8509C2B67883CC2CD77CB2DD1C901513816176221DE1DCFE42D963D4E8
MD5 SHA1 SHA512 TLSH

$R1/data/actions/Case conversion.mta

SHA256 9dcf4db6d968ef54c1906e22d28f3a0cfb75352526ef741546199af614684aac
MD5 487d34a6516d10cc44f5f387eeeb52b7
SHA1 bcf1b491aee17ee1bef76e3fbe33a95c04c32537
SHA512 9ff6c396ab2b1dd116fb1f0b9e178174f77ec665fa533264f2f2a2ce91783ed5b0f6bc48ac033c804454ede3b14289ded713c16ac0421e0556c958b4aa60ef60
MD5 SHA1 SHA512

$R1/data/actions/Standard.mta

SHA256 e6df2a5c8782fa3c433191ef9185529476402a45f4276f71c7979b1edad6b4d7
MD5 b93e0beddc24bd67761faeb794cedbb3
SHA1 c7adacb60953e701892041bbc1e92d4aa006496a
SHA512 5e007cd6c6fdc6acdadbe6ef045bacf5244af08f6be390bc534ebfd875e2ef4e2f5b5c0ad9b6ce8be2a6b67c878c397d175b9923cdbca25cba9babb3cff506d7
TLSH
T1A2D0C58F23E6A108C2B22416AC6097F1F9DE64983827C82473764DCCAC88528962B468
MD5 SHA1 SHA512 TLSH

$R1/data/empty.mte

SHA256 e588805e43bfe57a5bb2c18cdbf2bccede5c7d80df96cdda9e77afb58d72a6da
MD5 a6829b5fb1c1e83d538383046ff55761
SHA1 7812b8d57b9b12983842b5e5d07c9f07a9e7f039
SHA512 42b9f63f567068623570ac2fce8b13d27520507a7f732f71fc6aa4d1a4ef2b67403174983957156fd2e6feaffc216ff19937b46f6ee75d807c8bb7418f162ee3
TLSH
T159F0E19BD1ED82F05240307C731BE0F3B74DF4ECC6220512E16E562E305645445E00C4
MD5 SHA1 SHA512 TLSH

$R1/data/freedb.src

SHA256 488a944c693b8f924481f01646e3723ddfbf80205981c3d78d9f64b4ab2ca7f5
MD5 f9d51636307ae547c5a85e58483db863
SHA1 29cea2a586672bc483e946509b2a8b84f4902454
SHA512 f380e9411bfaccfe95bfa072463ba4cd41ba34b2ecc26dc22a46e7090482f96a31b820468822afbb4617c0a1f1f3d66f4b07fc428e06bd1bfe7a9bf79cef81a5
TLSH
T123D05E28F2891820F00E97EFFABC1CC989E15D33114F2984E81FF074237A82DB139642
MD5 SHA1 SHA512 TLSH

$R1/data/genres.ini

SHA256 418c66b1fb34f374f811a427b0cdf68fdcb948e92d4bd487a52d48c46a4b07f3
MD5 5c96f21682ef8a0b416519d7f57125c1
SHA1 58048f909ff039cb4865ce34a5614abdd68d8f3c
SHA512 8aa22c13a5eb5591e196f724282b2c296011fac551427757542f51cca30579b0a1e3c12995c3b115125bb00f1f5d89c5d79093851da38dafe5833325ac766a00
MD5 SHA1 SHA512

$R1/lang/English.lng

SHA256 fd378de69b76ce1a6b28d5d5fabf0dc1d0b797d15b128aea45d89fc697c3967c
MD5 184b39e9770712d960cb0ba5f9653f29
SHA1 760a151fe5bdbc1ae4de3eba76f7b1dd07d2218c
SHA512 818b1a7c36f9bb959402ccaba65d907a4a5061eea81771f7ce4665b24bdbefe7ed6544806e096681a97dc92a20b5f1bc46984d1f81af298924df2212414a8179
SSDEEP 384:Zd0RggLn+KoXyPlRXqpv078SE5Hpq4GnzHQMS0+UlSCy:segLn+XXslRAMSY7QMS0+UlSCy
TLSH
T16BC2B73DAB05397431921CC193C8A4B1AB14529C9E08C15617CA157E72AC7BBEEFE8DF
MD5 SHA1 SHA512 SSDEEP TLSH

$R1/lang/Russian.lng

SHA256 5fbc689039b31922c9aa69d9aebb45027c53b5e974c081c1b0b48652f474ddbc
MD5 47f793a9fca21da10f4396b256149b0d
SHA1 15fde9185d32b6191fb8252a2f75ea5632e01d87
SHA512 24e23375dbe2afcb1dfa80fdc9ee98ce7e029752da4e3de2c6237499d6f3eddb6e7f23a833b8ed4d1d21b1ab7990a41efb9b1e86390a27776db7d53f99d8ee74
SSDEEP 768:F1FI2p8vdepulbJW2o74TXT/cu5e09CN5S4pcV7:VRylepulb/o7owu565StV7
TLSH
T195032F30975AB8EE2041F85AD8443D093CA641FE7F6E93960B612C3F31F6235CA7D65A
MD5 SHA1 SHA512 SSDEEP TLSH

$R1/lang/Ukrainian.lng

SHA256 1fd51f761804f8e36db4c089d0aa8b5011635c148ab6a426ad16325622992657
MD5 6de3fbfd185c9ef51e49a9a6483adb89
SHA1 350bff45ea2e08d8829d7848900bc210b6ff6ddb
SHA512 43d11925612ea1b35968cc58a3bdfbc9e63c3d49ec781cd6816c5e1d4b3a2bc4c5d2378611595a805f99c26911ca05d268ebda32fa94081981b330de8c338abc
SSDEEP 384:FATAxsqm3bm1+0Vvrsz3xkML6s7SxDia0B7V18a9euF2ngC9+O6O4Vyy82MHvy9Y:F5q9kMLyk73w4VVB1HzaSg
TLSH
T15B0331799B4A78FF1100B45BE48C39043C9601FEBF668B5727953C7F21FA1248A3CA5A
MD5 SHA1 SHA512 SSDEEP TLSH

$R1/tak_deco_lib.dll

SHA256 6b48b47a291aab210d4003caba93b31dfa39a1ca759615d3d042327d65d539de
MD5 c0befabef9c73e9e523a9daba349c7e8
SHA1 f4900921865b058067b6085a183bf68a0aae9cb1
SHA512 0cd9d5ee934b317624fe665b479b579536c16a653ac3c06bc8b541f3e4705af8f5b737d7e01356c64330b9d0482f4d6a30e8092a33f048f1e8d0a244c8f849a2
SSDEEP 1536:5vq1zsdXYjZm9x+tRRWpPEKaY1K/+r61mm063SMf/hzKwOAjjIAPFhUJVrNT:QzMMgmRW1ZdkSMBKNAd909NT
TLSH
T184B38D23FA904C72D0613B388D16E374A47FFF511F2D029BA6D9995C8D391813AAD2D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

95700

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.AdWare.Win32.ICLoader.dkxm.1004ecd1252c7e83e806fd5b9d7d9e63

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$1/Mp3tagStuff.exe

kernel32

generic

$3/$APPDATA/Mp3tagApp/uninstaller.exe

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/nsProcess.dll

kernel32

user32

generic

$3/Mp3tagApp.exe

user32

advapi32

kernel32

generic

$PLUGINSDIR/nsProcess.dll

kernel32

user32

generic

$R1/Mp3tag.exe

PE Signature issue

shlwapi

winhttp

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

oleaut32

oledlg

ws2_32

gdiplus

winmm

oleacc

tak_deco_lib

uxtheme

generic

$R1/Mp3tagSetup.ini

$R1/data/actions/CD-R.mta

$R1/data/actions/Case conversion.mta

$R1/data/actions/Standard.mta

$R1/data/empty.mte

$R1/data/freedb.src

$R1/data/genres.ini

$R1/lang/English.lng

$R1/lang/Russian.lng

$R1/lang/Ukrainian.lng

$R1/tak_deco_lib.dll

generic