Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
wbemcomn.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
wbemcomn.dll
Resource
win10-20220812-en
Behavioral task
behavioral3
Sample
wbemcomn.dll
Resource
win10v2004-20220901-en
Target
wbemcomn.dll
Size
493KB
MD5
e24fd21c861ec8ee5c325c144934f6a5
SHA1
0da5a8f54ed98cc30df1dafd3bffd5e354bd9201
SHA256
4582104825dd1a0b83432ac030e0422d6b9fce7b3bfd7c8338de0c20f8c262f0
SHA512
dbddaa28b42638a54cf98a40c7e485b0ea0d5ecb8d457b706ab7fb27f14ae382ef7c39697b0b72e43a96ca8d4c199053705d808c12064befdd8646c60a3c469e
SSDEEP
6144:JaqNYwDL3wTn/b23sl4gLcB53rWZ+5YNkr4bnkvH4sDESb2zcw2n8/3Mt5u:EqhLGT28l4SVZaD4KH4sDESy72nvg
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=win.rar GmbH,O=win.rar GmbH,POSTALCODE=10117,STREET=Marienstrasse 12,L=Berlin,ST=Berlin,C=DE
CN=COMODO RSA Code Signing CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
CN=COMODO RSA Certification Authority,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
MultiByteToWideChar
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameA
VirtualAlloc
VirtualFree
VirtualProtect
GetModuleHandleA
LoadLibraryExA
GetProcAddress
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
IsDebuggerPresent
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlPcToFileHeader
EncodePointer
RtlUnwindEx
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetCurrentProcess
TerminateProcess
ExitProcess
GetModuleHandleExW
WideCharToMultiByte
HeapFree
HeapAlloc
LCMapStringW
HeapSize
HeapReAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
WriteConsoleW
wsprintfW
??0?$CLockableFlexArray@VCStaticCritSec@@@@QEAA@$$QEAV0@@Z
??0?$CLockableFlexArray@VCStaticCritSec@@@@QEAA@AEAV0@@Z
??0?$CLockableFlexArray@VCStaticCritSec@@@@QEAA@XZ
??0?$SZLess@PEBG@@QEAA@AEBU0@@Z
??0?$SZLess@PEBG@@QEAA@XZ
??0C9XAce@@QEAA@AEBV0@@Z
??0C9XAce@@QEAA@KKKPEAG@Z
??0C9XAce@@QEAA@XZ
??0CAbstractQl1Parser@@QEAA@AEBV0@@Z
??0CAbstractQl1Parser@@QEAA@PEAVCGenLexSource@@@Z
??0CArena@@QEAA@$$QEAV0@@Z
??0CArena@@QEAA@AEBV0@@Z
??0CArena@@QEAA@XZ
??0CBaseAce@@QEAA@AEBV0@@Z
??0CBaseAce@@QEAA@XZ
??0CBasicUnloadInstruction@@IEAA@XZ
??0CBasicUnloadInstruction@@QEAA@AEBV0@@Z
??0CBasicUnloadInstruction@@QEAA@VCWbemInterval@@@Z
??0CBuffer@@QEAA@AEBV0@@Z
??0CBuffer@@QEAA@PEAEKH@Z
??0CCheckedInCritSec@@QEAA@PEAVCCritSec@@@Z
??0CCircularQueue@@QEAA@XZ
??0CClientOpsNode@@QEAA@XZ
??0CContainerControl@@QEAA@$$QEAV0@@Z
??0CContainerControl@@QEAA@AEBV0@@Z
??0CContainerControl@@QEAA@PEAUIUnknown@@@Z
??0CCritSec@@QEAA@XZ
??0CDMTFParser@@QEAA@PEBG@Z
??0CDatePart@@QEAA@XZ
??0CDateTimeParser@@IEAA@XZ
??0CDateTimeParser@@QEAA@PEBG@Z
??0CEnterWbemCriticalSection@@QEAA@PEAVCWbemCriticalSection@@K@Z
??0CEventLog@@QEAA@AEBV0@@Z
??0CEventLog@@QEAA@PEBGAEBU_GUID@@K@Z
??0CEventLogRecord@@QEAA@AEAV0@@Z
??0CEventLogRecord@@QEAA@GAEBU_EVENT_DESCRIPTOR@@VCInsertionString@@111111111@Z
??0CExecQueue@@QEAA@AEAV0@@Z
??0CExecQueue@@QEAA@XZ
??0CExecRequest@@QEAA@AEBV0@@Z
??0CExecRequest@@QEAA@XZ
??0CFlexArray@@QEAA@AEAV0@@Z
??0CFlexArray@@QEAA@HH@Z
??0CFlexQueue@@QEAA@H@Z
??0CHaltable@@QEAA@AEBV0@@Z
??0CHaltable@@QEAA@XZ
??0CHex@@QEAA@J@Z
??0CIdentitySecurity@@QEAA@AEBV0@@Z
??0CIdentitySecurity@@QEAA@_N@Z
??0CIdentityTest@@QEAA@AEBV0@@Z
??0CIdentityTest@@QEAA@PEAVCTimerInstruction@@@Z
??0CInCritSec@@QEAA@PEAU_RTL_CRITICAL_SECTION@@@Z
??0CInsertionString@@QEAA@$$QEAV0@@Z
??0CInsertionString@@QEAA@AEBV0@@Z
??0CInsertionString@@QEAA@J@Z
??0CInsertionString@@QEAA@PEBD@Z
??0CInsertionString@@QEAA@PEBG@Z
??0CInsertionString@@QEAA@VCHex@@@Z
??0CInsertionString@@QEAA@XZ
??0CInstructionQueue@@QEAA@XZ
??0CInstructionTest@@QEAA@$$QEAV0@@Z
??0CInstructionTest@@QEAA@AEBV0@@Z
??0CInstructionTest@@QEAA@XZ
??0CLifeControl@@QEAA@$$QEAV0@@Z
??0CLifeControl@@QEAA@AEBV0@@Z
??0CLifeControl@@QEAA@XZ
??0CLike@@QEAA@AEBV0@@Z
??0CLike@@QEAA@PEBGG@Z
??0CLike@@QEAA@XZ
??0CLimitControl@@QEAA@AEBV0@@Z
??0CLimitControl@@QEAA@XZ
??0CMRCICompression@@QEAA@XZ
??0CMRCIControl@@QEAA@XZ
??0CMUILocaleList@@QEAA@XZ
??0CMemoryLog@@QEAA@XZ
??0CMinMaxLimitControl@@QEAA@$$QEAV0@@Z
??0CMinMaxLimitControl@@QEAA@AEBV0@@Z
??0CMinMaxLimitControl@@QEAA@HPEBG@Z
??0CNtAce@@QEAA@AEBV0@@Z
??0CNtAce@@QEAA@KKKAEAVCNtSid@@@Z
??0CNtAce@@QEAA@KKKPEAG@Z
??0CNtAce@@QEAA@PEAU_ACCESS_ALLOWED_ACE@@@Z
??0CNtAce@@QEAA@XZ
??0CNtAcl@@QEAA@AEBV0@@Z
??0CNtAcl@@QEAA@K@Z
??0CNtAcl@@QEAA@PEAU_ACL@@@Z
??0CNtSecurityDescriptor@@QEAA@AEAV0@@Z
??0CNtSecurityDescriptor@@QEAA@PEAX@Z
??0CNtSecurityDescriptor@@QEAA@XZ
??0CNtSid@@QEAA@AEBV0@@Z
??0CNtSid@@QEAA@PEAG@Z
??0CNtSid@@QEAA@PEAX@Z
??0CNtSid@@QEAA@W4SidType@0@@Z
??0CNtSid@@QEAA@XZ
??0CPropertyName@@QEAA@AEBV0@@Z
??0CPropertyName@@QEAA@XZ
??0CQl1ParseSink@@QEAA@$$QEAV0@@Z
??0CQl1ParseSink@@QEAA@AEBV0@@Z
??0CQl1ParseSink@@QEAA@XZ
??0CRegistryMinMaxLimitControl@@QEAA@$$QEAV0@@Z
??0CRegistryMinMaxLimitControl@@QEAA@AEBV0@@Z
??0CRegistryMinMaxLimitControl@@QEAA@HPEBG0000@Z
??0CSafeArray@@QEAA@AEAV0@@Z
??0CSafeArray@@QEAA@HHHH@Z
??0CSafeArray@@QEAA@PEAUtagSAFEARRAY@@HHH@Z
??0CStaticCritSec@@QEAA@XZ
??0CTextTemplate@@QEAA@AEBV0@@Z
??0CTextTemplate@@QEAA@PEBG@Z
??0CTimerGenerator@@QEAA@AEBV0@@Z
??0CTimerGenerator@@QEAA@XZ
??0CTimerInstruction@@QEAA@AEBV0@@Z
??0CTimerInstruction@@QEAA@XZ
??0CTraceSessionControl@@QEAA@XZ
??0CUnk@@QEAA@AEBV0@@Z
??0CUnk@@QEAA@PEAVCLifeControl@@PEAUIUnknown@@@Z
??0CUnkInternal@@QEAA@AEBV0@@Z
??0CUnkInternal@@QEAA@PEAVCLifeControl@@@Z
??0CVar@@QEAA@AEBV0@@Z
??0CVar@@QEAA@D@Z
??0CVar@@QEAA@E@Z
??0CVar@@QEAA@F@Z
??0CVar@@QEAA@FH@Z
??0CVar@@QEAA@G@Z
??0CVar@@QEAA@HPEAG@Z
??0CVar@@QEAA@HPEAUtagSAFEARRAY@@@Z
??0CVar@@QEAA@HVauto_bstr@@@Z
??0CVar@@QEAA@J@Z
??0CVar@@QEAA@K@Z
??0CVar@@QEAA@M@Z
??0CVar@@QEAA@N@Z
??0CVar@@QEAA@PEADH@Z
??0CVar@@QEAA@PEAGH@Z
??0CVar@@QEAA@PEAU_FILETIME@@@Z
??0CVar@@QEAA@PEAU_GUID@@H@Z
??0CVar@@QEAA@PEAUtagBLOB@@H@Z
??0CVar@@QEAA@PEAUtagVARIANT@@@Z
??0CVar@@QEAA@PEAVCVarVector@@H@Z
??0CVar@@QEAA@XZ
??0CVarVector@@QEAA@AEAV0@@Z
??0CVarVector@@QEAA@HHH@Z
??0CVarVector@@QEAA@HPEAUtagSAFEARRAY@@H@Z
??0CVarVector@@QEAA@XZ
??0CWMITraceSettings@@QEAA@XZ
??0CWQLScanner@@QEAA@AEAV0@@Z
??0CWQLScanner@@QEAA@PEAVCGenLexSource@@@Z
??0CWStringArray@@QEAA@AEAV0@@Z
??0CWStringArray@@QEAA@HH@Z
??0CWbemCallSecurity@@AEAA@AEBV0@@Z
??0CWbemCallSecurity@@AEAA@XZ
??0CWbemCriticalSection@@QEAA@XZ
??0CWbemInstallObject@@QEAA@XZ
??0CWbemInterval@@IEAA@K@Z
??0CWbemInterval@@QEAA@XZ
??0CWbemTime@@IEAA@_J@Z
??0CWbemTime@@QEAA@AEBV0@@Z
??0CWbemTime@@QEAA@XZ
??0CWbemTimeSpan@@QEAA@HHHHHHH@Z
??0CWin32DefaultArena@@QEAA@AEBV0@@Z
??0CWin32DefaultArena@@QEAA@XZ
??0QL1_Parser@@QEAA@AEBV0@@Z
??0QL1_Parser@@QEAA@PEAVCGenLexSource@@@Z
??0QL_LEVEL_1_RPN_EXPRESSION@@QEAA@AEBU0@@Z
??0QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ
??0QL_LEVEL_1_TOKEN@@QEAA@AEBU0@@Z
??0QL_LEVEL_1_TOKEN@@QEAA@XZ
??0Registry@@QEAA@PEAUHKEY__@@KKPEBG@Z
??0Registry@@QEAA@PEAUHKEY__@@KPEBG@Z
??0Registry@@QEAA@PEBGK@Z
??0Registry@@QEAA@XZ
??0WString2@@QEAA@AEBV0@@Z
??0WString2@@QEAA@KPEAUHINSTANCE__@@@Z
??0WString2@@QEAA@PEAGH@Z
??0WString2@@QEAA@PEBD@Z
??0WString2@@QEAA@PEBG@Z
??0WString2@@QEAA@XZ
??0WString2@@QEAA@_K@Z
??0WString@@QEAA@AEBV0@@Z
??0WString@@QEAA@KPEAUHINSTANCE__@@@Z
??0WString@@QEAA@PEAGH@Z
??0WString@@QEAA@PEBD@Z
??0WString@@QEAA@PEBG@Z
??0WString@@QEAA@XZ
??1?$CLockableFlexArray@VCStaticCritSec@@@@QEAA@XZ
??1?$SZLess@PEBG@@UEAA@XZ
??1C9XAce@@UEAA@XZ
??1CAbstractQl1Parser@@UEAA@XZ
??1CBaseAce@@UEAA@XZ
??1CBasicUnloadInstruction@@UEAA@XZ
??1CBuffer@@QEAA@XZ
??1CCheckedInCritSec@@QEAA@XZ
??1CClientOpsNode@@QEAA@XZ
??1CCritSec@@QEAA@XZ
??1CDMTFParser@@QEAA@XZ
??1CDatePart@@QEAA@XZ
??1CDateTimeParser@@QEAA@XZ
??1CEnterWbemCriticalSection@@QEAA@XZ
??1CEventLog@@QEAA@XZ
??1CEventLogRecord@@QEAA@XZ
??1CExecQueue@@QEAA@XZ
??1CExecRequest@@UEAA@XZ
??1CFlexArray@@QEAA@XZ
??1CFlexQueue@@QEAA@XZ
??1CHaltable@@UEAA@XZ
??1CIdentitySecurity@@QEAA@XZ
??1CIdentityTest@@QEAA@XZ
??1CInCritSec@@QEAA@XZ
??1CInsertionString@@QEAA@XZ
??1CInstructionQueue@@QEAA@XZ
??1CLike@@QEAA@XZ
??1CLimitControl@@UEAA@XZ
??1CMRCICompression@@QEAA@XZ
??1CMUILocaleList@@QEAA@XZ
??1CMinMaxLimitControl@@UEAA@XZ
??1CNtAce@@UEAA@XZ
??1CNtAcl@@QEAA@XZ
??1CNtSecurityDescriptor@@QEAA@XZ
??1CNtSid@@QEAA@XZ
??1CPropertyName@@QEAA@XZ
??1CPublishWMIOperationEvent@@QEAA@XZ
??1CRegistryMinMaxLimitControl@@UEAA@XZ
??1CSafeArray@@QEAA@XZ
??1CStaticCritSec@@QEAA@XZ
??1CTextTemplate@@QEAA@XZ
??1CTimerGenerator@@UEAA@XZ
??1CTimerInstruction@@UEAA@XZ
??1CUnk@@UEAA@XZ
??1CUnkInternal@@UEAA@XZ
??1CVar@@QEAA@XZ
??1CVarVector@@QEAA@XZ
??1CWQLScanner@@QEAA@XZ
??1CWStringArray@@QEAA@XZ
??1CWbemCallSecurity@@AEAA@XZ
??1CWbemCriticalSection@@QEAA@XZ
??1CWbemInstallObject@@QEAA@XZ
??1CWin32DefaultArena@@QEAA@XZ
??1QL1_Parser@@UEAA@XZ
??1QL_LEVEL_1_RPN_EXPRESSION@@QEAA@XZ
??1QL_LEVEL_1_TOKEN@@QEAA@XZ
??1Registry@@QEAA@XZ
??1WString2@@QEAA@XZ
??1WString@@QEAA@XZ
??4?$CLockableFlexArray@VCStaticCritSec@@@@QEAAAEAV0@$$QEAV0@@Z
??4?$CLockableFlexArray@VCStaticCritSec@@@@QEAAAEAV0@AEAV0@@Z
??4?$SZLess@PEBG@@QEAAAEAU0@AEBU0@@Z
??4C9XAce@@QEAAAEAV0@AEBV0@@Z
??4CAbstractQl1Parser@@QEAAAEAV0@AEBV0@@Z
??4CArena@@QEAAAEAV0@$$QEAV0@@Z
??4CArena@@QEAAAEAV0@AEBV0@@Z
??4CBaseAce@@QEAAAEAV0@AEBV0@@Z
??4CBaseMrciCompression@@QEAAAEAV0@$$QEAV0@@Z
??4CBaseMrciCompression@@QEAAAEAV0@AEBV0@@Z
??4CBasicUnloadInstruction@@QEAAAEAV0@AEBV0@@Z
??4CBuffer@@QEAAAEAV0@AEBV0@@Z
??4CCheckedInCritSec@@QEAAAEAV0@AEBV0@@Z
??4CCircularQueue@@QEAAAEAV0@$$QEAV0@@Z
??4CCircularQueue@@QEAAAEAV0@AEBV0@@Z
??4CClientOpsNode@@QEAAAEAV0@AEBV0@@Z
??4CContainerControl@@QEAAAEAV0@$$QEAV0@@Z
??4CContainerControl@@QEAAAEAV0@AEBV0@@Z
??4CCritSec@@QEAAAEAV0@AEBV0@@Z
??4CDMTFParser@@QEAAAEAV0@AEBV0@@Z
??4CDatePart@@QEAAAEAV0@AEBV0@@Z
??4CDateTimeParser@@QEAAAEAV0@AEBV0@@Z
??4CEnterWbemCriticalSection@@QEAAAEAV0@AEBV0@@Z
??4CExecQueue@@QEAAAEAV0@AEAV0@@Z
??4CExecRequest@@QEAAAEAV0@AEBV0@@Z
??4CFlexArray@@QEAAAEAV0@AEAV0@@Z
??4CFlexQueue@@QEAAAEAV0@AEBV0@@Z
??4CHaltable@@QEAAAEAV0@AEBV0@@Z
??4CHex@@QEAAAEAV0@$$QEAV0@@Z
??4CHex@@QEAAAEAV0@AEBV0@@Z
??4CIdentitySecurity@@QEAAAEAV0@AEBV0@@Z
??4CIdentityTest@@QEAAAEAV0@AEBV0@@Z
??4CInCritSec@@QEAAAEAV0@AEBV0@@Z
??4CInsertionString@@QEAAAEAV0@$$QEAV0@@Z
??4CInsertionString@@QEAAAEAV0@AEBV0@@Z
??4CInstructionQueue@@QEAAAEAV0@AEBV0@@Z
??4CInstructionTest@@QEAAAEAV0@$$QEAV0@@Z
??4CInstructionTest@@QEAAAEAV0@AEBV0@@Z
??4CLifeControl@@QEAAAEAV0@$$QEAV0@@Z
??4CLifeControl@@QEAAAEAV0@AEBV0@@Z
??4CLike@@QEAAAEAV0@AEBV0@@Z
??4CLimitControl@@QEAAAEAV0@AEBV0@@Z
??4CMRCICompression@@QEAAAEAV0@AEBV0@@Z
??4CMRCIControl@@QEAAAEAV0@$$QEAV0@@Z
??4CMRCIControl@@QEAAAEAV0@AEBV0@@Z
??4CMUILocale@@QEAAAEAV0@$$QEAV0@@Z
??4CMUILocale@@QEAAAEAV0@AEBV0@@Z
??4CMUILocaleList@@QEAAAEAV0@AEBV0@@Z
??4CMemoryLog@@QEAAAEAV0@$$QEAV0@@Z
??4CMemoryLog@@QEAAAEAV0@AEBV0@@Z
??4CMinMaxLimitControl@@QEAAAEAV0@$$QEAV0@@Z
??4CMinMaxLimitControl@@QEAAAEAV0@AEBV0@@Z
??4CNtAce@@QEAAAEAV0@AEBV0@@Z
??4CNtAcl@@QEAAAEAV0@AEBV0@@Z
??4CNtSecurity@@QEAAAEAV0@$$QEAV0@@Z
??4CNtSecurity@@QEAAAEAV0@AEBV0@@Z
??4CNtSecurityDescriptor@@QEAAAEAV0@AEAV0@@Z
??4CNtSid@@QEAAAEAV0@AEBV0@@Z
??4CPersistentConfig@@QEAAAEAV0@$$QEAV0@@Z
??4CPersistentConfig@@QEAAAEAV0@AEBV0@@Z
??4CPropertyName@@QEAAXAEBU_tag_WbemPropertyName@@@Z
??4CPropertyName@@QEAAXAEBV0@@Z
??4CPublishWMIOperationEvent@@QEAAAEAV0@AEBV0@@Z
??4CQl1ParseSink@@QEAAAEAV0@$$QEAV0@@Z
??4CQl1ParseSink@@QEAAAEAV0@AEBV0@@Z
??4CRegistryMinMaxLimitControl@@QEAAAEAV0@$$QEAV0@@Z
??4CRegistryMinMaxLimitControl@@QEAAAEAV0@AEBV0@@Z
??4CSafeArray@@QEAAAEAV0@AEAV0@@Z
??4CSmallArrayBlob@@QEAAAEAV0@$$QEAV0@@Z
??4CSmallArrayBlob@@QEAAAEAV0@AEBV0@@Z
??4CStaticCritSec@@QEAAAEAV0@AEBV0@@Z
??4CTextTemplate@@QEAAAEAV0@AEBV0@@Z
??4CTimerGenerator@@QEAAAEAV0@AEBV0@@Z
??4CTimerInstruction@@QEAAAEAV0@AEBV0@@Z
??4CTraceSessionControl@@QEAAAEAV0@$$QEAV0@@Z
??4CTraceSessionControl@@QEAAAEAV0@AEBV0@@Z
??4CUnk@@QEAAAEAV0@AEBV0@@Z
??4CUnkInternal@@QEAAAEAV0@AEBV0@@Z
??4CVar@@QEAAAEAV0@AEBV0@@Z
??4CVarVector@@QEAAAEAV0@AEAV0@@Z
??4CWMITraceSettings@@QEAAAEAV0@$$QEAV0@@Z
??4CWMITraceSettings@@QEAAAEAV0@AEBV0@@Z
??4CWQLScanner@@QEAAAEAV0@AEAV0@@Z
??4CWStringArray@@QEAAAEAV0@AEAV0@@Z
??4CWbemCallSecurity@@AEAAAEAV0@AEBV0@@Z
??4CWbemCriticalSection@@QEAAAEAV0@AEBV0@@Z
??4CWbemInstallObject@@QEAAAEAV0@AEBV0@@Z
??4CWbemInterval@@QEAAAEAV0@$$QEAV0@@Z
??4CWbemInterval@@QEAAAEAV0@AEBV0@@Z
??4CWbemTime@@QEAAXAEBV0@@Z
??4CWbemTimeSpan@@QEAAAEAV0@$$QEAV0@@Z
??4CWbemTimeSpan@@QEAAAEAV0@AEBV0@@Z
??4CWin32DefaultArena@@QEAAAEAV0@AEBV0@@Z
??4MD5@@QEAAAEAV0@$$QEAV0@@Z
??4MD5@@QEAAAEAV0@AEBV0@@Z
??4QL1_Parser@@QEAAAEAV0@AEBV0@@Z
??4QL_LEVEL_1_RPN_EXPRESSION@@QEAAAEAU0@AEBU0@@Z
??4QL_LEVEL_1_TOKEN@@QEAAAEAU0@AEBU0@@Z
??4QL_LEVEL_1_TOKEN@@QEAAAEAU0@AEBU_tag_WbemQl1Token@@@Z
??4Registry@@QEAAAEAV0@AEBV0@@Z
??4SHA256@@QEAAAEAV0@$$QEAV0@@Z
??4SHA256@@QEAAAEAV0@AEBV0@@Z
??4WString2@@QEAAAEAV0@AEBV0@@Z
??4WString2@@QEAAAEAV0@PEBG@Z
??4WString@@QEAAAEAV0@AEBV0@@Z
??4WString@@QEAAAEAV0@PEBG@Z
??8CEventLogRecord@@QEAAHAEBV0@@Z
??8CNtSid@@QEAAHAEAV0@@Z
??8CPropertyName@@QEAAHAEBU_tag_WbemPropertyName@@@Z
??8CVar@@QEAAHAEAV0@@Z
??8CVarVector@@QEAAHAEAV0@@Z
??ACFlexArray@@QEAAAEAPEAXH@Z
??ACFlexArray@@QEBAPEAXH@Z
??ACSmallArrayBlob@@QEBAPEAXH@Z
??ACVarVector@@QEAAAEAVCVar@@H@Z
??ACWStringArray@@QEBAPEAGH@Z
??AWString2@@QEBAGH@Z
??AWString@@QEBAGH@Z
??BCHex@@QEAAJXZ
??BCVar@@QEAA?AU_FILETIME@@XZ
??BCVar@@QEAADXZ
??BCVar@@QEAAEXZ
??BCVar@@QEAAFXZ
??BCVar@@QEAAGXZ
??BCVar@@QEAAJXZ
??BCVar@@QEAAKXZ
??BCVar@@QEAAMXZ
??BCVar@@QEAANXZ
??BCVar@@QEAAPEADXZ
??BCVar@@QEAAPEAGXZ
??BCVar@@QEAAPEAU_GUID@@XZ
??BCVar@@QEAAPEAUtagBLOB@@XZ
??BCVar@@QEAAPEAVCVarVector@@XZ
??BWString2@@QEAAPEAGXZ
??BWString2@@QEBAPEBGXZ
??BWString@@QEAAPEAGXZ
??BWString@@QEBAPEBGXZ
??DCWbemInterval@@QEBA?AV0@N@Z
??GCWbemTime@@QEBA?AV0@AEBVCWbemTimeSpan@@@Z
??GCWbemTime@@QEBA?AVCWbemInterval@@AEBV0@@Z
??HCWbemInterval@@QEBA?AV0@V0@@Z
??HCWbemTime@@QEBA?AV0@AEBVCWbemInterval@@@Z
??HCWbemTime@@QEBA?AV0@AEBVCWbemTimeSpan@@@Z
??MCWbemInterval@@QEAAHV0@@Z
??MCWbemTime@@QEBAHAEBV0@@Z
??MWString2@@QEBAHPEBG@Z
??MWString@@QEBAHPEBG@Z
??NCWbemTime@@QEBAHAEBV0@@Z
??NWString2@@QEBAHPEBG@Z
??NWString@@QEBAHPEBG@Z
??OCWbemInterval@@QEAAHV0@@Z
??OCWbemTime@@QEBAHAEBV0@@Z
??OWString2@@QEBAHPEBG@Z
??OWString@@QEBAHPEBG@Z
??PCWbemTime@@QEBAHAEBV0@@Z
??PWString2@@QEBAHPEBG@Z
??PWString@@QEBAHPEBG@Z
??R?$SZLess@PEBG@@QEBA_NAEBQEBG0@Z
??RCIdentityTest@@UEAAHPEAVCTimerInstruction@@@Z
??RWString2@@QEBA?AV0@HH@Z
??RWString@@QEBA?AV0@HH@Z
??YCWbemInterval@@QEAAXV0@@Z
??YWString2@@QEAAAEAV0@AEBV0@@Z
??YWString2@@QEAAAEAV0@G@Z
??YWString2@@QEAAAEAV0@PEBG@Z
??YWString@@QEAAAEAV0@AEBV0@@Z
??YWString@@QEAAAEAV0@G@Z
??YWString@@QEAAAEAV0@PEBG@Z
??_7?$SZLess@PEBG@@6B@
??_7C9XAce@@6B@
??_7CAbstractQl1Parser@@6B@
??_7CArena@@6B@
??_7CBaseAce@@6B@
??_7CBasicUnloadInstruction@@6B@
??_7CBuffer@@6B@
??_7CContainerControl@@6B@
??_7CExecQueue@@6B@
??_7CExecRequest@@6B@
??_7CHaltable@@6B@
??_7CIdentityTest@@6B@
??_7CInstructionTest@@6B@
??_7CLifeControl@@6B@
??_7CLimitControl@@6B@
??_7CMinMaxLimitControl@@6B@
??_7CNtAce@@6B@
??_7CQl1ParseSink@@6B@
??_7CRegistryMinMaxLimitControl@@6B@
??_7CTimerGenerator@@6B@
??_7CTimerInstruction@@6B@
??_7CUnk@@6B@
??_7CUnkInternal@@6B@
??_7CWbemCallSecurity@@6B@
??_7CWin32DefaultArena@@6B@
??_7QL1_Parser@@6B@
??_7QL_LEVEL_1_RPN_EXPRESSION@@6B@
??_FCBuffer@@QEAAXXZ
??_FCEventLog@@QEAAXXZ
??_FCFlexArray@@QEAAXXZ
??_FCFlexQueue@@QEAAXXZ
??_FCNtAcl@@QEAAXXZ
??_FCTextTemplate@@QEAAXXZ
??_FCUnk@@QEAAXXZ
??_FCWStringArray@@QEAAXXZ
?AbortCompression@CMRCIControl@@QEAAXXZ
?AbortRequested@CMRCIControl@@QEAAHXZ
?Access@CSafeArray@@QEAAJPEAPEAX@Z
?AccessCheck@CIdentitySecurity@@QEAAHXZ
?AccessRawArray@CVarVector@@QEAAJPEAPEAX@Z
?Add@CFlexArray@@QEAAHPEAX@Z
?Add@CMinMaxLimitControl@@UEAAJKKPEAK@Z
?Add@CVarVector@@QEAAHAEAVCVar@@@Z
?Add@CVarVector@@QEAAHPEAVCVar@@@Z
?Add@CWStringArray@@QEAAHPEBG@Z
?AddAce@CNtAcl@@QEAAHPEAVCNtAce@@@Z
?AddAggregationProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z
?AddAllAggregationProperties@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXXZ
?AddAllProperties@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXXZ
?AddAppropriateToken@CAbstractQl1Parser@@IEAAXAEBU_tag_WbemQl1Token@@@Z
?AddBSTR@CSafeArray@@QEAAHPEAG@Z
?AddBool@CSafeArray@@QEAAHF@Z
?AddByte@CSafeArray@@QEAAHE@Z
?AddChild@CClientOpsNode@@QEAAXPEAV1@@Z
?AddCulture@CMUILocaleList@@AEAAJPEBGW4LocaleType@CMUILocale@@K@Z
?AddDispatch@CSafeArray@@QEAAHPEAUIDispatch@@@Z
?AddDouble@CSafeArray@@QEAAHN@Z
?AddElement@CPropertyName@@QEAAXPEBG@Z
?AddEnvironmentValue@CWbemInstallObject@@SAJPEBG0@Z
?AddFloat@CSafeArray@@QEAAHM@Z
?AddHavingToken@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBU_tag_WbemQl1Token@@@Z
?AddInsertionString@CEventLogRecord@@IEAAXAEAVCInsertionString@@@Z
?AddLocale@CMUILocaleList@@AEAAJPEBGW4LocaleType@CMUILocale@@K@Z
?AddLong@CSafeArray@@QEAAHJ@Z
?AddMember@CLimitControl@@UEAAJXZ
?AddProperty@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBVCPropertyName@@@Z
?AddRecord@CEventLog@@IEAAHPEAVCEventLogRecord@@@Z
?AddRef@CBasicUnloadInstruction@@UEAAXXZ
?AddRef@CBuffer@@UEAAKXZ
?AddRef@CContainerControl@@UEAAXPEAUIUnknown@@@Z
?AddRef@CExecQueue@@QEAAXXZ
?AddRef@CUnk@@UEAAKXZ
?AddRef@CUnkInternal@@UEAAKXZ
?AddRef@CWbemCallSecurity@@UEAAKXZ
?AddRef@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXXZ
?AddScalar@CSafeArray@@AEAAHTSA_ArrayScalar@@@Z
?AddShort@CSafeArray@@QEAAHF@Z
?AddToken@QL_LEVEL_1_RPN_EXPRESSION@@QEAAXAEBUQL_LEVEL_1_TOKEN@@@Z
?AddToken@QL_LEVEL_1_RPN_EXPRESSION@@UEAAXAEBU_tag_WbemQl1Token@@@Z
?AddUnknown@CSafeArray@@QEAAHPEAUIUnknown@@@Z
?AddVariant@CSafeArray@@QEAAHPEAUtagVARIANT@@@Z
?AdjustInitialPriority@CExecQueue@@MEAAXPEAVCExecRequest@@@Z
?AdjustPriorityForPassing@CExecQueue@@MEAAXPEAVCExecRequest@@@Z
?Advance@CBuffer@@QEAAJK@Z
?AliasToTable@CWQLScanner@@QEAAQEAGPEAG@Z
?Alloc@CWin32DefaultArena@@UEAAPEAX_K@Z
?AllocAmPm@CDateTimeParser@@IEAAPEAGXZ
?AppendBuffer@WString2@@AEAAXPEBG_K@Z
?AppendCulture@CMUILocaleList@@AEAAJPEBG@Z
?AppendLocale@CMUILocaleList@@AEAAJPEBG@Z
?Apply@CTextTemplate@@QEAAPEAGPEAUIWbemClassObject@@@Z
?Bind@CFlexArray@@QEAAXAEAV1@@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ