ModFab-Studio-0[.]1[.]0-setup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ModFab-Studio-0.1.0-setup.exe
Size 4.9MB
Sample261101-wwd19act6s
SHA256 b81813048fae5a6ceefedc426df26cddfbf41ff8a3b2839db35698f0512eb8e6
MD5 8534734ea98f0e805434e173401040eb
SHA1 217af1cb9d4442f153c1216cbd4183b422799552
SHA512 79ef88b1063c86a19e923f2e008f340a94d85769ed3b64626458c26db5285defc43481d3fa7cd4f72d52634b8088eb5ac8fab6cde3274eb934d52b099fe27539
SSDEEP 98304:M5VrtseROZcuZKl/tXR64gzqlEQG247msyBBhZfTS3ae6:M3Zs6uwdJyQEmRJe3ae6
TLSH
T106363314BBD185EBD6B3DFFC9CA05F3337DB1628946A818B4F1162193A946C36A35E10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
ModFab-Studio-0.1.0-setup.exe
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/StartMenu.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/$PLUGINSDIR/nsExec.dll
unpack001/$PLUGINSDIR/nsis_tauri_utils.dll
unpack001/modfab-studio.exe
unpack001/shell-win/ModFabShell qzqzqzqzqzqzqzqz.clap
unpack001/shell-win/ModFabShell qzqzqzqzqzqzqzqz.vst3/Contents/x86_64-win/ModFabShell qzqzqzqzqzqzqzqz.vst3

File Explorer

ModFab-Studio-0.1.0-setup.exe

.exe 4.9MB
$PLUGINSDIR/NSISdl.dll

.dll 15KB
$PLUGINSDIR/StartMenu.dll

.dll 7KB
$PLUGINSDIR/System.dll

.dll 12KB
$PLUGINSDIR/modern-wizard.bmp

25KB
$PLUGINSDIR/nsDialogs.dll

.dll 9KB
$PLUGINSDIR/nsExec.dll

.dll 7KB
$PLUGINSDIR/nsis_tauri_utils.dll

.dll 33KB
modfab-studio.exe

.exe 15.2MB
shell-win/ModFabShell qzqzqzqzqzqzqzqz.clap

.dll 2.0MB
shell-win/ModFabShell qzqzqzqzqzqzqzqz.vst3/Contents/Resources/project.json

510B
shell-win/ModFabShell qzqzqzqzqzqzqzqz.vst3/Contents/x86_64-win/ModFabShell qzqzqzqzqzqzqzqz.vst3

.dll 2.6MB
shell-win/abi.txt

18B

ModFab-Studio-0.1.0-setup.exe

IMPHASH 46ce5c12b293febbeb513b196aa7f843
SHA256 b81813048fae5a6ceefedc426df26cddfbf41ff8a3b2839db35698f0512eb8e6
MD5 8534734ea98f0e805434e173401040eb
SHA1 217af1cb9d4442f153c1216cbd4183b422799552
SHA512 79ef88b1063c86a19e923f2e008f340a94d85769ed3b64626458c26db5285defc43481d3fa7cd4f72d52634b8088eb5ac8fab6cde3274eb934d52b099fe27539
SSDEEP 98304:M5VrtseROZcuZKl/tXR64gzqlEQG247msyBBhZfTS3ae6:M3Zs6uwdJyQEmRJe3ae6
TLSH
T106363314BBD185EBD6B3DFFC9CA05F3337DB1628946A818B4F1162193A946C36A35E10
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

13983

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegEnumValueW RegEnumKeyW RegQueryValueExW RegSetValueExW RegCloseKey RegDeleteValueW RegDeleteKeyW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegOpenKeyExW RegCreateKeyExW

shell32

SHGetPathFromIDListW SHBrowseForFolderW SHGetFileInfoW SHFileOperationW ShellExecuteExW

ole32

CoCreateInstance OleUninitialize OleInitialize IIDFromString CoTaskMemFree

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

user32

MessageBoxIndirectW GetDlgItemTextW SetDlgItemTextW CreatePopupMenu AppendMenuW TrackPopupMenu OpenClipboard EmptyClipboard SetClipboardData CloseClipboard IsWindowVisible CallWindowProcW GetMessagePos CheckDlgButton LoadCursorW SetCursor GetSysColor SetWindowPos GetWindowLongW IsWindowEnabled SetClassLongW GetSystemMenu EnableMenuItem GetWindowRect ScreenToClient EndDialog RegisterClassW SystemParametersInfoW CharPrevW GetClassInfoW DialogBoxParamW CharNextW ExitWindowsEx DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW FindWindowExW IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC ReleaseDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint CharNextA wsprintfA DispatchMessageW CreateWindowExW PeekMessageW GetSystemMetrics

gdi32

GetDeviceCaps SetBkColor SelectObject DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor

kernel32

RemoveDirectoryW lstrcmpiA GetTempFileNameW CreateProcessW CreateDirectoryW CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceW WideCharToMultiByte lstrcpynW lstrlenW SetErrorMode GetVersionExW GetCommandLineW GetTempPathW GetWindowsDirectoryW SetEnvironmentVariableW CopyFileW WriteFile GetCurrentProcess GetModuleFileNameW GetLastError GetFileSize CreateFileW GetTickCount Sleep SetFileAttributesW GetFileAttributesW SetCurrentDirectoryW MoveFileW GetFullPathNameW GetShortPathNameW SearchPathW CompareFileTime SetFileTime CloseHandle lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalFree GlobalAlloc GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW lstrlenA MultiByteToWideChar ReadFile SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW MulDiv lstrcpyA MoveFileExW lstrcatW GetSystemDirectoryW GetProcAddress GetModuleHandleA GetExitCodeProcess WaitForSingleObject ExitProcess

$PLUGINSDIR/NSISdl.dll

IMPHASH db80d5e142e716e818b7f4614dcade3c
SHA256 d3e61c4df837625ac0503cea5b6765a04d37fc35399899a5503b53a3108bfbf6
MD5 7c8182ee99c93fc3a1bc41a52f5007ca
SHA1 05e9155694fcb8eb928632265199a4c8b315021f
SHA512 c1d4e5f86656b945442bae1386081d8ed225b6cea8161e1d061382fff58fc77261b88fce74a4292269ee8ea5ef4c032eee700b0dce48bb35c419a5cb9317c79e
SSDEEP 384:8rSQMCOUILnCaSPy/yhJzmGSMRWyOUKi0:8rSQMCOp0yamMRWysi0
TLSH
T14C623D16B62084F5CBB2167034D73B3E6BB28F6A292848C34BF35C4E9E52307B675D85
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

9321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/StartMenu.dll

IMPHASH 646971a3aef724d6f553f40ae84fe26b
SHA256 39870682e7d1c026cd2b33ca25591db28250dde17de7eb1feec404222d534ffc
MD5 128e19d3f6bc32de40ee88a431cd4a5b
SHA1 44cdb6a3bb285d6502888bc4aaa6fa951b059d1c
SHA512 109d164db47ae525ad9361a28e9b3265977cfefef6504d456c8e0272f4b2ff70c534bbb5404ba7048a6895441b7a49012ab82a62785ec9ac45c24c6f2acaa135
SSDEEP 96:8It3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/d3lkCTcaqHCI:thE+A0+sF6piUFkABlncviI
TLSH
T1D8F1B776F3D20673F9AB437428632F231B2AF521576981A6490316CE7A61DA3FE34B11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6430

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH 509a34b3a68a773e0afb4259e68f9f82
SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
MD5 564e01f2c6edfb8475573e1b809cb5eb
SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
TLSH
T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10879

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH 3b477381217c97b22146297f93df2a92
SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
MD5 79c27de4d1c6d295fefaa70f608f1c67
SHA1 feba90c93db3fedd450a81eb2603f793332d1a83
SHA512 fbd79f3946032821584ea2fa4b559ac5809ab45fdc9107eb47c9ff3fa3229d7748a7b2ed588709e59cce16a4f8e58ed98b46cb061acf1080e78434d184f51ec7
SSDEEP 96:oQEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YbNqkzfFc:oQEvCu5e81785qHFcU0PuAw0uyBIFc
TLSH
T1E612E892A2A454B3C5D6523B35AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7527

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsExec.dll

IMPHASH 68b7023f8923dd087549802f8fa631c3
SHA256 1dee37f6abb2dec9e767bd022d29386b6b295bbd55bf316d2649b8d298f89e9d
MD5 879b0aab93b11228a27d6b2e498b95be
SHA1 f5024d0d44c37443d7c17f1ff80fba301389ed42
SHA512 427ddc4c01be77dd28a376a78714f5004edbee2df6662500cf11d2f4309fdf9a126d7632a7afd0e28712e851eabf56d9d469eb2f3b6c645923d3476275d6eff6
SSDEEP 192:JZFon9Dar9s7hdD8oZc41Zf0NQZGdH6E:RonlarK3orqf0NQZGdH
TLSH
T1FFE1E93571C02DF3D08A4A717D26B92B83F89826277741708B771AD979E0AE7FD24742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4231

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsis_tauri_utils.dll

IMPHASH 2030931b38a854dde8cdd69245a8096a
SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
SHA1 75197fee3c6a814fe035788d1c34ead39349b860
SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
TLSH
T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

nsis_tauri_utils.pdb

modfab-studio.exe

IMPHASH 08cdc0ef2502fa6bf7eff9008d9c8404
SHA256 bd1f1e1dee93d085b0c7f8ac8e51fecbe846c94b399354caa9fbcb6e7e9cbb5c
MD5 ac1efe768ab9c5ef4d8dfbd45c40dc14
SHA1 d8fdfd3583a687a7ab4463c07b5c84fcccb36f23
SHA512 5a24e3d6a10638c8b0a242435503dbe1f9a84df3d777ebc7e23255251c4fe72a6cd17dfccd729de7b79c9a9594b60932bfe1f9dfe74b6b48f240c70e80674b35
SSDEEP 196608:Ui3q/t+UcS+nJJ0wOnRMQbsCq5n0ZOtm7ZNDPreLrN:yt+UcS+nJJ0wOnRMQbA0iiZNDYR
TLSH
T1BBF629257A5A99ACD05BC4B483478663497130CB0B39B9FF54D8923C2F6ABF42F38359
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10387916

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

modfab_studio.pdb

user32

GetWindowPlacement AdjustWindowRect SetWindowPlacement ChangeDisplaySettingsExW GetMonitorInfoW MonitorFromWindow GetCursorPos SystemParametersInfoW SetCursor MonitorFromRect CloseTouchInputHandle GetTouchInputInfo TrackMouseEvent FillRect GetClientRect GetWindowLongW ScreenToClient CreateWindowExW AdjustWindowRectEx RegisterClassExW GetUpdateRect MapVirtualKeyW ValidateRect RegisterTouchWindow EnumChildWindows DefWindowProcW PostThreadMessageW PeekMessageW LoadCursorW FlashWindowEx DispatchMessageW GetMessageW SendMessageW TranslateAcceleratorW DispatchMessageA TranslateMessage GetMessageA GetForegroundWindow GetActiveWindow UpdateWindow InvalidateRect SetCursorPos InvalidateRgn SetWindowPos ClientToScreen PostMessageW DestroyWindow IsIconic RedrawWindow GetSystemMetrics PostQuitMessage DestroyMenu MonitorFromPoint GetKeyboardLayout GetRawInputData VkKeyScanW SetWindowDisplayAffinity ClipCursor GetClipCursor GetWindowTextLengthW GetWindowTextW ShowCursor SetWindowTextW SetForegroundWindow SendInput DrawTextW SetPropW SetWindowLongW SystemParametersInfoA EnumDisplayMonitors ToUnicodeEx MapVirtualKeyExW GetMenuBarInfo GetKeyState GetKeyboardState RegisterRawInputDevices RegisterWindowMessageA IsWindowVisible SetParent MapWindowPoints GetAsyncKeyState CreateIcon TrackPopupMenu SetFocus ShowWindow DestroyAcceleratorTable CreateAcceleratorTableW GetWindowRect SetWindowLongPtrW GetParent GetWindowLongPtrW FindWindowExW SetWindowRgn SetMenu DrawMenuBar CreateMenu EnableWindow IsWindowEnabled ReleaseDC CreatePopupMenu GetDC IsProcessDPIAware RemoveMenu GetMenuItemInfoW CheckMenuItem EnableMenuItem OffsetRect AppendMenuW GetWindow GetWindowDC MsgWaitForMultipleObjectsEx DestroyIcon GetIconInfo LoadImageW SetMenuItemInfoW DrawIconEx SetCapture GetMenu ReleaseCapture GetSystemMenu InsertMenuW

gdi32

DeleteObject CreateRectRgn CreateSolidBrush DeleteDC CreateDIBSection SetBkMode GetDIBits SetTextColor BitBlt GetDeviceCaps SelectObject CreateCompatibleDC CombineRgn

bcryptprimitives

ProcessPrng

advapi32

CredFree CredReadW RegCloseKey RegQueryValueExW CredWriteW CredDeleteW EventRegister EventSetInformation EventWriteTransfer EventUnregister RegGetValueW RegOpenKeyExW

ntdll

NtOpenFile NtWriteFile RtlNtStatusToDosError NtCreateNamedPipeFile RtlGetVersion NtReadFile

kernel32

UnmapViewOfFile MapViewOfFile GetCurrentThreadId LCIDToLocaleName LoadLibraryW GetLastError GetProcAddress MultiByteToWideChar GetUserDefaultUILanguage GetModuleHandleW FormatMessageW GetFileSize GetFileAttributesW GetFileInformationByHandle GetConsoleMode GetUserPreferredUILanguages lstrlenW LoadLibraryExA RtlPcToFileHeader RaiseException EncodePointer TlsAlloc TlsGetValue SetHandleInformation TlsSetValue TlsFree LocalFree LoadLibraryA FormatMessageA GetCurrentProcessId ReleaseSRWLockExclusive GetLocaleInfoEx AcquireSRWLockExclusive FindFirstFileW GetFileAttributesExW AreFileApisANSI SetEvent CloseHandle IsDebuggerPresent MoveFileExW Sleep GetModuleHandleA WakeAllConditionVariable SleepConditionVariableSRW IsProcessorFeaturePresent FreeLibrary LoadLibraryExW GetSystemTimeAsFileTime HeapAlloc HeapFree OutputDebugStringA OutputDebugStringW GetModuleFileNameW GetProcessHeap GetEnvironmentVariableW SetThreadPriority WaitForMultipleObjectsEx CreateEventW WaitForSingleObject CompareStringOrdinal FreeEnvironmentStringsW SetLastError GetFullPathNameW SetFileInformationByHandle GetStdHandle GetCurrentProcess DuplicateHandle CopyFileExW HeapReAlloc QueryPerformanceCounter CreateThread ReadFileEx SleepEx WriteFileEx ReadFile GetOverlappedResult CreateFileW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind GetSystemTimePreciseAsFileTime CancelIo SetFileTime GetFileInformationByHandleEx GetSystemDirectoryW GetWindowsDirectoryW CreateProcessW TerminateProcess GetEnvironmentStringsW GetExitCodeProcess CreateDirectoryW SetFilePointerEx SetThreadStackGuarantee GetCurrentThread CreateFileMappingA CreateFileA AddVectoredExceptionHandler InitializeCriticalSectionAndSpinCount DeleteCriticalSection RtlUnwindEx InitializeSListHead SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentDirectoryW GetCommandLineW FindFirstFileExW FindClose ExitProcess GetSystemInfo SwitchToThread WideCharToMultiByte WaitForSingleObjectEx CreateMutexA ReleaseMutex GetFinalPathNameByHandleW DeleteFileW SetEnvironmentVariableW WriteConsoleW GetConsoleOutputCP CreateWaitableTimerExW SetWaitableTimer FlsFree FlsAlloc GetModuleHandleExW IsThreadAFiber FlsSetValue WaitForMultipleObjects GetTempPathW QueryPerformanceFrequency FindNextFileW GetFileSizeEx CreateEventA

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

ole32

PropVariantClear OleInitialize RevokeDragDrop CoInitializeEx CoUninitialize RegisterDragDrop CoCreateInstance

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

comctl32

TaskDialogIndirect SetWindowSubclass RemoveWindowSubclass DefSubclassProc

combase

CoTaskMemAlloc CoCreateFreeThreadedMarshaler CoTaskMemFree

shell32

ShellExecuteW SHGetKnownFolderPath SHGetStockIconInfo SHCreateItemFromParsingName DragQueryFileW SHAppBarMessage DragFinish

imm32

ImmGetContext ImmReleaseContext ImmGetCompositionStringW

oleaut32

SysFreeString SetErrorInfo GetErrorInfo SysStringLen

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

ws2_32

WSAGetLastError setsockopt ioctlsocket WSASocketW closesocket recv send accept WSADuplicateSocketW bind listen connect WSAStartup

winmm

midiInGetDevCapsW midiInGetNumDevs midiInMessage midiInClose midiInOpen midiInPrepareHeader midiInAddBuffer midiInStart midiInUnprepareHeader midiInStop midiInReset

api-ms-win-crt-math-l1-1-0

__setusermatherr ceilf cosf log log10f ldexp tan log2 atan2 hypot exp2 copysign tanhf sin cos logf atan remainderf pow powf sqrt tanf nearbyintf expf sinf round floorf atan2f lrintf exp2f roundf _dclass sqrtf floor trunc exp _fdclass _dsign lround fmodf lroundf

api-ms-win-crt-string-l1-1-0

strncmp _strnicmp strlen strncpy strcpy_s isalpha wcsncmp isxdigit strncat isspace _strdup isdigit strcmp isalnum _wcsicmp _stricmp wcscmp tolower wcslen strtok_s

api-ms-win-crt-runtime-l1-1-0

_c_exit _register_thread_local_exe_atexit_callback __p___argv abort _errno _invoke_watson _beginthreadex terminate __p___argc _set_app_type _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _seh_filter_exe _initialize_onexit_table _register_onexit_function _cexit _crt_atexit

api-ms-win-crt-heap-l1-1-0

realloc free _set_new_mode calloc malloc

api-ms-win-crt-convert-l1-1-0

_ultow_s strtoull wcstol strtoll strtod strtoul atoi _wtoi strtol

api-ms-win-crt-stdio-l1-1-0

_fseeki64 fsetpos fread fputc fgetpos fgetc fflush fclose _get_stream_buffer_pointers setvbuf ungetc __p__commode _set_fmode fwrite ferror fopen_s ftell fseek fopen __stdio_common_vsprintf

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale localeconv

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-utility-l1-1-0

rand bsearch qsort

msvcp140

?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Throw_Cpp_error@std@@YAXH@Z _Mtx_unlock _Mtx_lock ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Xbad_function_call@std@@YAXXZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A _Thrd_join _Thrd_id _Mtx_trylock _Cnd_wait _Cnd_broadcast _Cnd_signal _Cnd_do_broadcast_at_thread_exit ?uncaught_exceptions@std@@YAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

shell-win/ModFabShell qzqzqzqzqzqzqzqz.clap

IMPHASH 9b41011627dc15f5494bbf8ebc6db231
SHA256 e381e2a42f98e6b057524b3f2b5e2e5e6d07b55aeb3e70cc136067978f3c5e11
MD5 9f98decc28a1a0f4be4e2e7d2c514bcc
SHA1 7fcff6977e91db8422756eb5b9f2deacb278fe81
SHA512 427fd9eae14b9d19f6657412928d6ca43cc5b7530436361aa58c00765880350668c5fab5f9e75c6b152c5d8c33baaada2c11ec9f9505b1bc0a9e49028b5d9b67
SSDEEP 24576:BTGdGIsWAi3tGnb+Tmsvhp5v0Kdhi5I0J7z2jZsM/vcPVdj:BTGGvi3tGdKhp5v0ei5n6jZN3En
TLSH
T1F3A58D16729801FCD1BBD178CA5BA907E77278050330A6FF17E04A965F67BE04ABB712
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1318708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

RegisterClassExW CreateWindowExW DestroyWindow ShowWindow SetWindowPos DialogBoxIndirectParamW EndDialog GetDlgItem SetDlgItemTextW KillTimer SendDlgItemMessageW SetFocus GetKeyState GetCapture SetCapture ReleaseCapture CreatePopupMenu DestroyMenu AppendMenuW DefWindowProcW GetDlgItemTextW TrackPopupMenu GetAncestor LoadCursorW SetWindowLongPtrW GetWindowLongPtrW ScreenToClient ClientToScreen SetCursor MessageBoxW GetClientRect InvalidateRect EndPaint BeginPaint SetTimer

gdi32

StretchDIBits

shell32

ShellExecuteW

ws2_32

closesocket WSAGetLastError WSAStartup socket send recv ioctlsocket connect

advapi32

RegGetValueW

winhttp

WinHttpCloseHandle WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpQueryDataAvailable WinHttpReadData WinHttpCrackUrl WinHttpConnect WinHttpOpen

kernel32

HeapSize SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW WriteConsoleW GetFileSizeEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers GetStdHandle EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect SetFilePointerEx SetEndOfFile FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc ExitProcess ReadFile FreeLibraryAndExitThread GetFileType ExitThread CreateThread LoadLibraryExW FreeLibrary TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList CreateDirectoryW GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetUserDefaultLocaleName CreateFileA GetFileSize CloseHandle MapViewOfFile UnmapViewOfFile CreateFileMappingA GetComputerNameExW GetModuleFileNameW GetLastError GetProcAddress LoadLibraryW ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceFrequency LocalFree FormatMessageA GetLocaleInfoEx WaitForSingleObjectEx Sleep GetExitCodeThread TryAcquireSRWLockExclusive RtlUnwind CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFinalPathNameByHandleW GetFullPathNameW SetFileInformationByHandle AreFileApisANSI MoveFileExW GetFileInformationByHandleEx WakeConditionVariable EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlPcToFileHeader RaiseException RtlUnwindEx

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

425KB

Virtual Size

424KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

27KB

Virtual Size

35KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

65KB

Virtual Size

64KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

shell-win/ModFabShell qzqzqzqzqzqzqzqz.vst3/Contents/x86_64-win/ModFabShell qzqzqzqzqzqzqzqz.vst3

IMPHASH 0d0feb7293cb1e22d07dfefa07e79953
SHA256 66b1e3143f51ebf2846bcb329eab7af8da6f6d6d4f766370af994ecd80f2143a
MD5 e22e62918b3fd046c170301b97a9da17
SHA1 6d44564635e6ac5e739694b287f65cd834ac9434
SHA512 b8b778cc26f7b87dad0ae2a6766e4e5c00aeda0b0730f8b6c7617efa771a1be8b2afeea0f68c3eece628c74cf502c8e713e320821e7075a8d4ba528888e5c6ae
SSDEEP 49152:0UmfBAmg1OBoZklJaYc4KFbrJPdZ9O89j:MTgzqT89j
TLSH
T132D58D16B2A801FCD07BD178CA5B9A07E7B138450370A6EF03E186661F67BE25A7F711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1626044

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

UnregisterClassW RegisterClassExW CreateWindowExW CharLowerA DestroyWindow SetTimer KillTimer SetWindowLongW DefWindowProcW ShowWindow SetWindowPos CharLowerW EndDialog GetDlgItem SetDlgItemTextW GetDlgItemTextW SendDlgItemMessageW SetFocus GetKeyState GetCapture SetCapture ReleaseCapture CreatePopupMenu DestroyMenu AppendMenuW DialogBoxIndirectParamW TrackPopupMenu GetAncestor LoadCursorW SetWindowLongPtrW GetWindowLongPtrW ScreenToClient ClientToScreen SetCursor MessageBoxW GetClientRect InvalidateRect EndPaint BeginPaint DefWindowProcA

gdi32

StretchDIBits

shell32

ShellExecuteW SHGetKnownFolderPath

ws2_32

closesocket WSAGetLastError WSAStartup socket send recv ioctlsocket connect

advapi32

RegGetValueW

winhttp

WinHttpReadData WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpQueryDataAvailable WinHttpConnect WinHttpCrackUrl WinHttpOpen WinHttpCloseHandle

kernel32

HeapSize SetStdHandle GetTimeZoneInformation GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage HeapReAlloc ReadConsoleW SetFilePointerEx GetFileSizeEx WriteConsoleW GetConsoleOutputCP WriteFile FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue GetConsoleMode SetEndOfFile FlsGetValue FlsAlloc HeapFree HeapAlloc ExitProcess ReadFile FreeLibraryAndExitThread ExitThread CreateThread GetStdHandle LocalFree LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError InterlockedFlushSList RtlUnwindEx RaiseException RtlPcToFileHeader GetLastError GetTickCount64 GetModuleFileNameW GetModuleHandleExW CreateDirectoryW MultiByteToWideChar WideCharToMultiByte GetUserDefaultLocaleName CreateFileA GetFileSize CloseHandle MapViewOfFile UnmapViewOfFile CreateFileMappingA GetComputerNameExW GetProcAddress LoadLibraryW OutputDebugStringA InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection DeleteCriticalSection GetEnvironmentVariableW FreeLibrary GetCPInfo CompareStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind FormatMessageA GetLocaleInfoEx CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFinalPathNameByHandleW GetFullPathNameW SetFileInformationByHandle AreFileApisANSI MoveFileExW GetFileInformationByHandleEx WaitForSingleObjectEx Sleep GetExitCodeThread TryAcquireSRWLockExclusive QueryPerformanceFrequency WakeConditionVariable GetStringTypeW InitializeCriticalSectionEx EncodePointer DecodePointer LCMapStringEx

ole32

CoTaskMemFree CoCreateGuid

Name

.text

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

520KB

Virtual Size

519KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

85KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ModFab-Studio-0.1.0-setup.exe

advapi32

shell32

ole32

comctl32

user32

gdi32

kernel32

generic

$PLUGINSDIR/NSISdl.dll

advapi32

wsock32

user32

kernel32

generic

$PLUGINSDIR/StartMenu.dll

kernel32

user32

gdi32

shell32

ole32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/nsExec.dll

advapi32

user32

kernel32

generic

$PLUGINSDIR/nsis_tauri_utils.dll

kernel32

advapi32

user32

shell32

generic

modfab-studio.exe

user32

gdi32

bcryptprimitives

advapi32

ntdll

kernel32

api-ms-win-core-synch-l1-2-0

ole32

dwmapi

shlwapi

comctl32

combase

shell32

imm32

oleaut32

api-ms-win-core-winrt-error-l1-1-0

ws2_32

winmm

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0