Extended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Overview
overview
10Static
static
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.ps1
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.msi
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
10Ransomware...KB.ps1
windows10-2004-x64
10Ransomware...KB.exe
windows10-2004-x64
8Ransomware...KB.exe
windows10-2004-x64
10Static task
static1
Behavioral task
behavioral1
Sample
RansomwareSamples/Babuk_20_04_2021_79KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
RansomwareSamples/BlackKingdom_23_03_2021_12460KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
RansomwareSamples/BlackMatter_02_08_2021_67KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
RansomwareSamples/Conti_22_12_2020_186KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral5
Sample
RansomwareSamples/Cuba_08_03_2021_1130KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral6
Sample
RansomwareSamples/DarkSide_01_05_2021_30KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral7
Sample
RansomwareSamples/DarkSide_16_01_2021_59KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
RansomwareSamples/DarkSide_18_11_2020_17KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
RansomwareSamples/DearCry_13_03_2021_1292KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral10
Sample
RansomwareSamples/Hades_29_03_2021_1909KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
RansomwareSamples/Hive_17_07_2021_808KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral12
Sample
RansomwareSamples/LockBit_14_02_2021_146KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral13
Sample
RansomwareSamples/MAKOP_27_10_2020_115KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
RansomwareSamples/MedusaLocker_24_04_2020_661KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
RansomwareSamples/MountLocker_20_11_2020_200KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral16
Sample
RansomwareSamples/Nefilim_31_08_2020_3061KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
RansomwareSamples/Nemty_03_02_2021_124KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral18
Sample
RansomwareSamples/NetWalker_19_10_2020_903KB.ps1
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
RansomwareSamples/Phoenix_29_03_2021_1930KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral20
Sample
RansomwareSamples/PwndLocker_04_03_2020_17KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
RansomwareSamples/Pysa_08_04_2021_500KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral22
Sample
RansomwareSamples/REvil_07_04_2021_121KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
RansomwareSamples/REvil_08_04_2021_121KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral24
Sample
RansomwareSamples/Ragnar_11_02_2020_40KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral25
Sample
RansomwareSamples/RansomEXX_14_12_2020_156KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral26
Sample
RansomwareSamples/Ranzy_20_11_2020_138KB.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
RansomwareSamples/Ryuk_21_03_2021_274KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral28
Sample
RansomwareSamples/Sekhmet_30_03_2020_364KB.msi
Resource
win10v2004-20220812-en
Behavioral task
behavioral29
Sample
RansomwareSamples/Sodinokibi_04_07_2019_253KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral30
Sample
RansomwareSamples/SunCrypt_26_01_2021_1422KB.ps1
Resource
win10v2004-20220901-en
Behavioral task
behavioral31
Sample
RansomwareSamples/Thanos_23_03_2021_91KB.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral32
Sample
RansomwareSamples/Zeppelin_08_03_2021_813KB.exe
Resource
win10v2004-20220812-en
Target
RS.7z
Size
20.5MB
MD5
2e40472330409ed96f91e8e0bb796eb4
SHA1
8fd90404184de1a627068a93482313449dbbec91
SHA256
c5741701b3866459dd1ffa2477cfd8776713612912693a5897f78aac795d23e9
SHA512
b11720cb8519fc6838161ba8bf696681b242b0789ffd5c442efbb50161d511fd65229ca88a347c856e8ff91501c077f5de7714b09e29d4400f595bfe7829189d
SSDEEP
393216:NkDF1XseDcJIrXeSG0b5mKZ1F0gvpdO8GPnqzHLP3iN5M0CptgNpAcklC0CN:GDjXseDcSra45mKt0gvT0PnMbzkNpAc/
blackmatter
1.2
512478c08dada2af19e49808fbda5b0b
https://paymenthacks.com
http://paymenthacks.com
https://mojobiden.com
http://mojobiden.com
true
true
true
true
true
mespinoza
Hi Company, Every byte on any types of your devices was encrypted. Don't try to use backups because it were encrypted too. To get all your data back contact us: [email protected] [email protected] [email protected] Also, be aware that we downloaded files from your servers and in case of non-payment we will be forced to upload them on our website, and if necessary, we will sell them on the darknet. Check out our website, we just posted there new updates for our partners: http://wqmfzni2nvbbpk25.onion/ -------------- FAQ: 1. Q: How can I make sure you don't fooling me? A: You can send us 2 files(max 2mb). 2. Q: What to do to get all data back? A: Don't restart the computer, don't move files and write us. 3. Q: What to tell my boss? A: Protect Your System Amigo.
sodinokibi
$2a$10$kmb3nsvQXC.93GYNCGKy/uq9hYHivf0e3HcajFIifr8Hf3fmnofgm
7258
gasbarre.com
all-turtles.com
rksbusiness.com
christ-michael.net
mardenherefordshire-pc.gov.uk
erstatningsadvokaterne.dk
marchand-sloboda.com
unim.su
bauertree.com
faronics.com
moveonnews.com
autopfand24.de
mountsoul.de
beaconhealthsystem.org
cerebralforce.net
aprepol.com
kaotikkustomz.com
dubnew.com
simulatebrain.com
alvinschwartz.wordpress.com
baptisttabernacle.com
corelifenutrition.com
garage-lecompte-rouen.fr
ruralarcoiris.com
nicoleaeschbachorg.wordpress.com
atmos-show.com
bodyfulls.com
satyayoga.de
fayrecreations.com
brigitte-erler.com
humanityplus.org
profectis.de
uranus.nl
partnertaxi.sk
1kbk.com.ua
id-et-d.fr
cafemattmeera.com
pomodori-pizzeria.de
parkstreetauto.net
agence-chocolat-noir.com
labobit.it
siluet-decor.ru
xn--singlebrsen-vergleich-nec.com
femxarxa.cat
ncs-graphic-studio.com
rota-installations.co.uk
vdberg-autoimport.nl
imperfectstore.com
paymybill.guru
real-estate-experts.com
icpcnj.org
tstaffing.nl
americafirstcommittee.org
autofolierung-lu.de
spsshomeworkhelp.com
tigsltd.com
nuzech.com
streamerzradio1.site
iqbalscientific.com
supportsumba.nl
castillobalduz.es
besttechie.com
mepavex.nl
ungsvenskarna.se
thewellnessmimi.com
chefdays.de
makeflowers.ru
evergreen-fishing.com
noesis.tech
sabel-bf.com
dramagickcom.wordpress.com
huissier-creteil.com
eaglemeetstiger.de
hugoversichert.de
iviaggisonciliegie.it
nhadatcanho247.com
broseller.com
kirkepartner.dk
talentwunder.com
meusharklinithome.wordpress.com
solerluethi-allart.ch
chrissieperry.com
refluxreducer.com
psa-sec.de
cirugiauretra.es
hoteledenpadova.it
southeasternacademyofprosthodontics.org
bloggyboulga.net
cranleighscoutgroup.org
finediningweek.pl
insp.bi
daniel-akermann-architektur-und-planung.ch
bingonearme.org
rehabilitationcentersinhouston.net
naswrrg.org
daklesa.de
collaborativeclassroom.org
tonelektro.nl
lachofikschiet.nl
hrabritelefon.hr
gmto.fr
ditog.fr
vickiegrayimages.com
csgospeltips.se
compliancesolutionsstrategies.com
vannesteconstruct.be
villa-marrakesch.de
candyhouseusa.com
jeanlouissibomana.com
kuntokeskusrok.fi
stemenstilte.nl
smart-light.co.uk
nancy-informatique.fr
groupe-frayssinet.fr
whittier5k.com
jorgobe.at
yamalevents.com
buroludo.nl
woodworkersolution.com
slupetzky.at
drnice.de
danskretursystem.dk
tradiematepro.com.au
plastidip.com.ar
spectrmash.ru
pivoineetc.fr
trapiantofue.it
teknoz.net
analiticapublica.es
solinegraphic.com
bbsmobler.se
financescorecard.com
rushhourappliances.com
grupocarvalhoerodrigues.com.br
xn--fn-kka.no
cursoporcelanatoliquido.online
nsec.se
bhwlawfirm.com
vesinhnha.com.vn
behavioralmedicinespecialists.com
mirjamholleman.nl
harpershologram.wordpress.com
ecoledansemulhouse.fr
simpliza.com
ouryoungminds.wordpress.com
morawe-krueger.de
rimborsobancario.net
latribuessentielle.com
quizzingbee.com
smhydro.com.pl
myhealth.net.au
lapmangfpt.info.vn
fensterbau-ziegler.de
campus2day.de
paradicepacks.com
cuspdental.com
winrace.no
gratispresent.se
liveottelut.com
homng.net
verytycs.com
igorbarbosa.com
promalaga.es
desert-trails.com
chatizel-paysage.fr
n1-headache.com
the-domain-trader.com
easytrans.com.au
hotelsolbh.com.br
lorenacarnero.com
bastutunnan.se
gantungankunciakrilikbandung.com
verifort-capital.de
kariokids.com
thomas-hospital.de
live-your-life.jp
clos-galant.com
flexicloud.hk
linnankellari.fi
y-archive.com
osterberg.fi
facettenreich27.de
enovos.de
mediaacademy-iraq.org
carrybrands.nl
celeclub.org
milltimber.aberdeen.sch.uk
xn--vrftet-pua.biz
lmtprovisions.com
cursosgratuitosnainternet.com
theletter.company
ymca-cw.org.uk
4net.guru
shonacox.com
saxtec.com
bsaship.com
steampluscarpetandfloors.com
comparatif-lave-linge.fr
nakupunafoundation.org
pierrehale.com
innote.fi
argenblogs.com.ar
stoeferlehalle.de
vermoote.de
spacecitysisters.org
trulynolen.co.uk
8449nohate.org
operaslovakia.sk
makeurvoiceheard.com
samnewbyjax.com
rafaut.com
spd-ehningen.de
kafu.ch
catholicmusicfest.com
atozdistribution.co.uk
oslomf.no
bookspeopleplaces.com
fitovitaforum.com
biapi-coaching.fr
hexcreatives.co
actecfoundation.org
12starhd.online
geekwork.pl
mrsplans.net
waermetauscher-berechnen.de
haremnick.com
atalent.fi
songunceliptv.com
peterstrobos.com
tsklogistik.eu
mbxvii.com
ftlc.es
centrospgolega.com
myzk.site
readberserk.com
carolinepenn.com
summitmarketingstrategies.com
iwelt.de
hotelzentral.at
zenderthelender.com
live-con-arte.de
puertamatic.es
pixelarttees.com
zervicethai.co.th
tenacitytenfold.com
vox-surveys.com
stingraybeach.com
senson.fi
alsace-first.com
bigasgrup.com
stampagrafica.es
funjose.org.gt
balticdermatology.lt
coding-marking.com
tennisclubetten.nl
mastertechengineering.com
marcuswhitten.site
plantag.de
ncid.bc.ca
mapawood.com
braffinjurylawfirm.com
helenekowalsky.com
muamuadolls.com
caribbeansunpoker.com
irinaverwer.com
radaradvies.nl
birnam-wood.com
beautychance.se
girlillamarketing.com
olejack.ru
markelbroch.com
maryloutaylor.com
dinslips.se
parebrise-tla.fr
sanaia.com
kadesignandbuild.co.uk
delchacay.com.ar
greenpark.ch
craigvalentineacademy.com
longislandelderlaw.com
dekkinngay.com
philippedebroca.com
extensionmaison.info
wolf-glas-und-kunst.de
fatfreezingmachines.com
id-vet.com
tuuliautio.fi
victoriousfestival.co.uk
stallbyggen.se
drugdevice.org
physiofischer.de
wychowanieprzedszkolne.pl
iyengaryogacharlotte.com
modamilyon.com
newyou.at
ctrler.cn
abl1.net
dushka.ua
knowledgemuseumbd.com
simpkinsedwards.co.uk
figura.team
montrium.com
outcomeisincome.com
theapifactory.com
kamahouse.net
hvccfloorcare.com
waveneyrivercentre.co.uk
blood-sports.net
officehymy.com
torgbodenbollnas.se
schmalhorst.de
buymedical.biz
antenanavi.com
upplandsspar.se
journeybacktolife.com
navyfederalautooverseas.com
juneauopioidworkgroup.org
charlesreger.com
mmgdouai.fr
lescomtesdemean.be
stoeberstuuv.de
mrtour.site
synlab.lt
wsoil.com.sg
ralister.co.uk
sairaku.net
zflas.com
wurmpower.at
dublikator.com
plotlinecreative.com
naturstein-hotte.de
cnoia.org
strategicstatements.com
globedivers.wordpress.com
verbisonline.com
forskolorna.org
sw1m.ru
otto-bollmann.de
werkkring.nl
myteamgenius.com
waywithwords.net
vloeren-nu.nl
bouquet-de-roses.com
jasonbaileystudio.com
projetlyonturin.fr
henricekupper.com
jobcenterkenya.com
autodujos.lt
courteney-cox.net
modestmanagement.com
kisplanning.com.au
leda-ukraine.com.ua
madinblack.com
destinationclients.fr
smokeysstoves.com
gonzalezfornes.es
aniblinova.wordpress.com
sla-paris.com
antonmack.de
ceid.info.tr
zweerscreatives.nl
narcert.com
softsproductkey.com
solhaug.tk
bestbet.com
ilso.net
musictreehouse.net
first-2-aid-u.com
tomaso.gr
noixdecocom.fr
devlaur.com
sahalstore.com
answerstest.ru
prochain-voyage.net
rebeccarisher.com
pferdebiester.de
grelot-home.com
botanicinnovations.com
boisehosting.net
kikedeoliveira.com
imaginado.de
pickanose.com
jacquin-maquettes.com
urist-bogatyr.ru
tux-espacios.com
sterlingessay.com
edv-live.de
ohidesign.com
dontpassthepepper.com
xtptrack.com
ecpmedia.vn
abogadoengijon.es
yourobgyn.net
foryourhealth.live
alfa-stroy72.com
hokagestore.com
jadwalbolanet.info
vitavia.lt
plv.media
kojima-shihou.com
chandlerpd.com
artotelamsterdam.com
digi-talents.com
lapinlviasennus.fi
wacochamber.com
jandaonline.com
shiresresidential.com
entopic.com
deprobatehelp.com
interactcenter.org
rocketccw.com
intecwi.com
gaiam.nl
balticdentists.com
101gowrie.com
polychromelabs.com
div-vertriebsforschung.de
sanyue119.com
saka.gr
berliner-versicherungsvergleich.de
groupe-cets.com
oncarrot.com
architekturbuero-wagner.net
instatron.net
filmvideoweb.com
penco.ie
danielblum.info
fotoscondron.com
mymoneyforex.com
bimnapratica.com
socstrp.org
psnacademy.in
lightair.com
comarenterprises.com
onlybacklink.com
selfoutlet.com
abitur-undwieweiter.de
thee.network
gporf.fr
jakekozmor.com
paulisdogshop.de
tanzprojekt.com
blog.solutionsarchitect.guru
walter-lemm.de
xn--rumung-bua.online
planchaavapor.net
lecantou-coworking.com
aarvorg.com
qualitus.com
advokathuset.dk
thaysa.com
baumkuchenexpo.jp
kojinsaisei.info
seagatesthreecharters.com
petnest.ir
leoben.at
strandcampingdoonbeg.com
imadarchid.com
jusibe.com
epwritescom.wordpress.com
mooreslawngarden.com
xn--logopdie-leverkusen-kwb.de
allure-cosmetics.at
krlosdavid.com
dnepr-beskid.com.ua
monark.com
surespark.org.uk
abuelos.com
zewatchers.com
quemargrasa.net
classycurtainsltd.co.uk
pubweb.carnet.hr
ziegler-praezisionsteile.de
global-kids.info
wmiadmin.com
danubecloud.com
loprus.pl
rumahminangberdaya.com
allamatberedare.se
hkr-reise.de
slimidealherbal.com
stupbratt.no
crowd-patch.co.uk
micahkoleoso.de
gw2guilds.org
ilive.lt
sportsmassoren.com
littlebird.salon
aurum-juweliere.de
crediacces.com
craftleathermnl.com
videomarketing.pro
polymedia.dk
theshungiteexperience.com.au
milsing.hr
dr-pipi.de
oneplusresource.org
abogados-en-alicante.es
mikeramirezcpa.com
portoesdofarrobo.com
tinyagency.com
www1.proresult.no
advizewealth.com
ussmontanacommittee.us
rosavalamedahr.com
delawarecorporatelaw.com
herbayupro.com
lloydconstruction.com
waynela.com
iyahayki.nl
mooshine.com
mylolis.com
hushavefritid.dk
admos-gleitlager.de
jyzdesign.com
retroearthstudio.com
notsilentmd.org
kindersitze-vergleich.de
sarbatkhalsafoundation.org
resortmtn.com
frontierweldingllc.com
nosuchthingasgovernment.com
upmrkt.co
malychanieruchomoscipremium.com
urmasiimariiuniri.ro
unetica.fr
deko4you.at
sexandfessenjoon.wordpress.com
pinkexcel.com
tastewilliamsburg.com
qlog.de
webhostingsrbija.rs
sinal.org
leather-factory.co.jp
adoptioperheet.fi
blgr.be
promesapuertorico.com
nacktfalter.de
justinvieira.com
lbcframingelectrical.com
tanzschule-kieber.de
qualitaetstag.de
copystar.co.uk
htchorst.nl
webcodingstudio.com
babcockchurch.org
kingfamily.construction
cleliaekiko.online
lusak.at
vitalyscenter.es
fiscalsort.com
romeguidedvisit.com
vihannesporssi.fi
greenfieldoptimaldentalcare.com
321play.com.hk
tomoiyuma.com
memaag.com
restaurantesszimmer.de
aselbermachen.com
takeflat.com
tandartspraktijkhartjegroningen.nl
vetapharma.fr
agence-referencement-naturel-geneve.net
sweering.fr
mindpackstudios.com
harveybp.com
boosthybrid.com.au
odiclinic.org
uimaan.fi
bunburyfreightservices.com.au
freie-gewerkschaften.de
kalkulator-oszczednosci.pl
fibrofolliculoma.info
smithmediastrategies.com
stefanpasch.me
bristolaeroclub.co.uk
skiltogprint.no
tophumanservicescourses.com
hairstylesnow.site
helikoptervluchtnewyork.nl
ulyssemarketing.com
vibethink.net
asiluxury.com
freie-baugutachterpraxis.de
veybachcenter.de
faizanullah.com
rostoncastings.co.uk
tinkoff-mobayl.ru
urclan.net
spylista.com
xn--fnsterputssollentuna-39b.se
backstreetpub.com
norpol-yachting.com
zieglerbrothers.de
sportiomsportfondsen.nl
simplyblessedbykeepingitreal.com
rieed.de
charlottepoudroux-photographie.fr
2ekeus.nl
turkcaparbariatrics.com
baustb.de
kampotpepper.gives
fairfriends18.de
bricotienda.com
gasolspecialisten.se
burkert-ideenreich.de
simoneblum.de
boompinoy.com
durganews.com
cimanchesterescorts.co.uk
diversiapsicologia.es
mbfagency.com
aminaboutique247.com
tarotdeseidel.com
purposeadvisorsolutions.com
yousay.site
poultrypartners.nl
thailandholic.com
nataschawessels.com
pmcimpact.com
denifl-consulting.at
merzi.info
bxdf.info
maratonaclubedeportugal.com
minipara.com
lukeshepley.wordpress.com
bodyforwife.com
lykkeliv.net
brevitempore.net
lubetkinmediacompanies.com
bierensgebakkramen.nl
sagadc.com
lebellevue.fr
augenta.com
fitnessingbyjessica.com
bockamp.com
norovirus-ratgeber.de
whyinterestingly.ru
wari.com.pe
work2live.de
stemplusacademy.com
serce.info.pl
finde-deine-marke.de
gadgetedges.com
trackyourconstruction.com
zimmerei-fl.de
mir-na-iznanku.com
remcakram.com
huesges-gruppe.de
milestoneshows.com
todocaracoles.com
binder-buerotechnik.at
corola.es
centuryrs.com
bildungsunderlebnis.haus
pt-arnold.de
ligiercenter-sachsen.de
theadventureedge.com
hypozentrum.com
notmissingout.com
micro-automation.de
ki-lowroermond.nl
heidelbergartstudio.gallery
reddysbakery.com
testzandbakmetmening.online
xoabigail.com
ausair.com.au
devok.info
drinkseed.com
mezhdu-delom.ru
iwr.nl
no-plans.com
tips.technology
ccpbroadband.com
x-ray.ca
michaelsmeriglioracing.com
ecopro-kanto.com
digivod.de
johnsonfamilyfarmblog.wordpress.com
acomprarseguidores.com
visiativ-industry.fr
vanswigchemdesign.com
tanciu.com
sofavietxinh.com
troegs.com
levihotelspa.fi
idemblogs.com
parkcf.nl
truenyc.co
abogadosaccidentetraficosevilla.es
ogdenvision.com
maineemploymentlawyerblog.com
wien-mitte.co.at
lillegrandpalais.com
basisschooldezonnewijzer.nl
esope-formation.fr
geoffreymeuli.com
pridoxmaterieel.nl
assurancesalextrespaille.fr
makeitcount.at
suncrestcabinets.ca
ra-staudte.de
bowengroup.com.au
employeesurveys.com
marietteaernoudts.nl
kunze-immobilien.de
creamery201.com
fax-payday-loans.com
oceanastudios.com
quickyfunds.com
cortec-neuro.com
friendsandbrgrs.com
kostenlose-webcams.com
tetinfo.in
hairnetty.wordpress.com
glennroberts.co.nz
homesdollar.com
schutting-info.nl
foretprivee.ca
tongdaifpthaiphong.net
1team.es
kmbshipping.co.uk
anybookreader.de
goodgirlrecovery.com
celularity.com
fransespiegels.nl
happyeasterimages.org
schoolofpassivewealth.com
team-montage.dk
mountaintoptinyhomes.com
danholzmann.com
campusoutreach.org
c-a.co.in
anteniti.com
levdittliv.se
carriagehousesalonvt.com
art2gointerieurprojecten.nl
geisterradler.de
igfap.com
vancouver-print.ca
offroadbeasts.com
austinlchurch.com
fotoideaymedia.es
raschlosser.de
rozemondcoaching.nl
effortlesspromo.com
apolomarcas.com
conasmanagement.de
dw-css.de
lenreactiv-shop.ru
triactis.com
personalenhancementcenter.com
iphoneszervizbudapest.hu
fannmedias.com
cheminpsy.fr
echtveilig.nl
galserwis.pl
body-armour.online
craigmccabe.fun
coursio.com
ivfminiua.com
associationanalytics.com
international-sound-awards.com
citymax-cr.com
dr-tremel-rednitzhembach.de
eadsmurraypugh.com
365questions.org
baylegacy.com
schlafsack-test.net
aco-media.nl
ravensnesthomegoods.com
mooglee.com
evangelische-pfarrgemeinde-tuniberg.de
eraorastudio.com
bouldercafe-wuppertal.de
insidegarage.pl
sojamindbody.com
ivivo.es
asgestion.com
anthonystreetrimming.com
centromarysalud.com
elimchan.com
sobreholanda.com
pasvenska.se
opatrovanie-ako.sk
servicegsm.net
deepsouthclothingcompany.com
ontrailsandboulevards.com
croftprecision.co.uk
hatech.io
alysonhoward.com
otsu-bon.com
mrsfieldskc.com
seitzdruck.com
hashkasolutindo.com
mercantedifiori.com
mank.de
onlyresultsmarketing.com
accountancywijchen.nl
blogdecachorros.com
nestor-swiss.ch
executiveairllc.com
shhealthlaw.com
new.devon.gov.uk
manifestinglab.com
kevinjodea.com
parks-nuernberg.de
webmaster-peloton.com
d1franchise.com
higadograsoweb.com
amylendscrestview.com
exenberger.at
evologic-technologies.com
hmsdanmark.dk
dareckleyministries.com
chaotrang.com
gastsicht.de
wellplast.se
hardinggroup.com
pasivect.co.uk
asteriag.com
marathonerpaolo.com
conexa4papers.trade
rollingrockcolumbia.com
heurigen-bauer.at
spargel-kochen.de
cite4me.org
schoellhammer.com
gamesboard.info
cwsitservices.co.uk
stacyloeb.com
allfortheloveofyou.com
zso-mannheim.de
highlinesouthasc.com
westdeptfordbuyrite.com
luckypatcher-apkz.com
zimmerei-deboer.de
pawsuppetlovers.com
jolly-events.com
slashdb.com
adultgamezone.com
patrickfoundation.net
associacioesportivapolitg.cat
nmiec.com
logopaedie-blomberg.de
stoneys.ch
autodemontagenijmegen.nl
karacaoglu.nl
licor43.de
dutchbrewingcoffee.com
richard-felix.co.uk
teczowadolina.bytom.pl
corona-handles.com
berlin-bamboo-bikes.org
walkingdeadnj.com
dr-seleznev.com
ampisolabergeggi.it
commonground-stories.com
nandistribution.nl
bargningavesta.se
trystana.com
smalltownideamill.wordpress.com
socialonemedia.com
joyeriaorindia.com
systemate.dk
the-virtualizer.com
travelffeine.com
airconditioning-waalwijk.nl
smogathon.com
toreria.es
elpa.se
dpo-as-a-service.com
skanah.com
lichencafe.com
consultaractadenacimiento.com
hiddencitysecrets.com.au
naturalrapids.com
edelman.jp
bptdmaluku.com
thomasvicino.com
panelsandwichmadrid.es
klimt2012.info
space.ua
hebkft.hu
toponlinecasinosuk.co.uk
c2e-poitiers.com
myhostcloud.com
shiftinspiration.com
stormwall.se
liliesandbeauties.org
4youbeautysalon.com
smejump.co.th
bradynursery.com
caribdoctor.org
precisionbevel.com
macabaneaupaysflechois.com
arteservicefabbro.com
nvwoodwerks.com
expandet.dk
transportesycementoshidalgo.es
darrenkeslerministries.com
colorofhorses.com
antiaginghealthbenefits.com
brandl-blumen.de
blossombeyond50.com
lapinvihreat.fi
judithjansen.com
sloverse.com
lynsayshepherd.co.uk
dirittosanitario.biz
sipstroysochi.ru
35-40konkatsu.net
artallnightdc.com
i-arslan.de
eco-southafrica.com
jvanvlietdichter.nl
gopackapp.com
directwindowco.com
renergysolution.com
worldhealthbasicinfo.com
commercialboatbuilding.com
ftf.or.at
smessier.com
newstap.com.ng
midmohandyman.com
edrcreditservices.nl
familypark40.com
lionware.de
ora-it.de
pv-design.de
scenepublique.net
maureenbreezedancetheater.org
crowcanyon.com
vorotauu.ru
firstpaymentservices.com
tulsawaterheaterinstallation.com
koko-nora.dk
mousepad-direkt.de
kath-kirche-gera.de
apprendrelaudit.com
seevilla-dr-sturm.at
ihr-news.jp
jenniferandersonwriter.com
pointos.com
christinarebuffetcourses.com
jobmap.at
huehnerauge-entfernen.de
nurturingwisdom.com
pocket-opera.de
naturavetal.hr
love30-chanko.com
microcirc.net
lefumetdesdombes.com
nokesvilledentistry.com
nijaplay.com
healthyyworkout.com
hhcourier.com
gemeentehetkompas.nl
better.town
jbbjw.com
proudground.org
podsosnami.ru
smale-opticiens.nl
galleryartfair.com
amerikansktgodis.se
layrshift.eu
jsfg.com
kamienny-dywan24.pl
edgewoodestates.org
pcp-nc.com
polzine.net
caffeinternet.it
hihaho.com
fizzl.ru
limassoldriving.com
haar-spange.com
itelagen.com
aakritpatel.com
leeuwardenstudentcity.nl
ahouseforlease.com
dezatec.es
coding-machine.com
fitnessbazaar.com
jiloc.com
igrealestate.com
themadbotter.com
tandartspraktijkheesch.nl
oldschoolfun.net
syndikat-asphaltfieber.de
cyntox.com
bafuncs.org
hannah-fink.de
blacksirius.de
triggi.de
milanonotai.it
eglectonk.online
run4study.com
starsarecircular.org
handi-jack-llc.com
bundabergeyeclinic.com.au
presseclub-magdeburg.de
architecturalfiberglass.org
humancondition.com
katiekerr.co.uk
izzi360.com
gymnasedumanagement.com
marketingsulweb.com
blumenhof-wegleitner.at
nativeformulas.com
katketytaanet.fi
kaliber.co.jp
mariposapropaneaz.com
appsformacpc.com
wasmachtmeinfonds.at
ceres.org.au
teresianmedia.org
ai-spt.jp
vibehouse.rw
irishmachineryauctions.com
artige.com
highimpactoutdoors.net
insigniapmg.com
koken-voor-baby.nl
completeweddingkansas.com
kissit.ca
testcoreprohealthuk.com
kosterra.com
bigler-hrconsulting.ch
praxis-management-plus.de
brawnmediany.com
havecamerawilltravel2017.wordpress.com
zzyjtsgls.com
mediaplayertest.net
ikads.org
deschl.net
siliconbeach-realestate.com
xlarge.at
lange.host
krcove-zily.eu
woodleyacademy.org
pier40forall.org
noskierrenteria.com
houseofplus.com
farhaani.com
kidbucketlist.com.au
maxadams.london
degroenetunnel.com
tampaallen.com
faroairporttransfers.net
sandd.nl
shsthepapercut.com
parking.netgateway.eu
cityorchardhtx.com
calxplus.eu
crosspointefellowship.church
forestlakeuca.org.au
stopilhan.com
jameskibbie.com
euro-trend.pl
hellohope.com
homecomingstudio.com
mdk-mediadesign.de
liikelataamo.fi
devstyle.org
sporthamper.com
herbstfeststaefa.ch
theduke.de
dlc.berlin
thenewrejuveme.com
seproc.hn
maasreusel.nl
datacenters-in-europe.com
mytechnoway.com
beyondmarcomdotcom.wordpress.com
transliminaltribe.wordpress.com
modelmaking.nl
praxis-foerderdiagnostik.de
pcprofessor.com
ausbeverage.com.au
educar.org
slimani.net
xltyu.com
kenhnoithatgo.com
sachnendoc.com
roadwarrior.app
roygolden.com
people-biz.com
i-trust.dk
wraithco.com
twohourswithlena.wordpress.com
pelorus.group
sevenadvertising.com
launchhubl.com
ianaswanson.com
lucidinvestbank.com
mdacares.com
filmstreamingvfcomplet.be
DupontSellsHomes.com
web.ion.ag
miraclediet.fun
spinheal.ru
biortaggivaldelsa.com
falcou.fr
fundaciongregal.org
em-gmbh.ch
cuppacap.com
argos.wityu.fund
schraven.de
rerekatu.com
cactusthebrand.com
boldcitydowntown.com
deltacleta.cat
vyhino-zhulebino-24.ru
corendonhotels.com
vietlawconsultancy.com
manijaipur.com
ateliergamila.com
sportverein-tambach.de
body-guards.it
pogypneu.sk
psc.de
bargningharnosand.se
neuschelectrical.co.za
controldekk.com
theclubms.com
saarland-thermen-resort.com
despedidascostablanca.es
luxurytv.jp
klusbeter.nl
platformier.com
miriamgrimm.de
oneheartwarriors.at
rhinosfootballacademy.com
d2marketing.co.uk
lascuola.nl
chavesdoareeiro.com
nachhilfe-unterricht.com
bigbaguettes.eu
dutchcoder.nl
baronloan.org
manutouchmassage.com
extraordinaryoutdoors.com
creative-waves.co.uk
thedad.com
sotsioloogia.ee
kedak.de
withahmed.com
mylovelybluesky.com
dubscollective.com
bee4win.com
connectedace.com
almosthomedogrescue.dog
boulderwelt-muenchen-west.de
zonamovie21.net
sauschneider.info
embracinghiscall.com
shadebarandgrillorlando.com
ledmes.ru
calabasasdigest.com
mrxermon.de
punchbaby.com
importardechina.info
drfoyle.com
darnallwellbeing.org.uk
latestmodsapks.com
ventti.com.ar
perbudget.com
pmc-services.de
porno-gringo.com
revezlimage.com
jerling.de
mirkoreisser.de
aodaichandung.com
heliomotion.com
bayoga.co.uk
bogdanpeptine.ro
abogadosadomicilio.es
slwgs.org
piajeppesen.dk
ladelirante.fr
coffreo.biz
seminoc.com
aunexis.ch
ilcdover.com
xn--thucmctc-13a1357egba.com
greenko.pl
oemands.dk
yassir.pro
bridgeloanslenders.com
alten-mebel63.ru
dsl-ip.de
bouncingbonanza.com
coastalbridgeadvisors.com
kao.at
allentownpapershow.com
joseconstela.com
bordercollie-nim.nl
phantastyk.com
andersongilmour.co.uk
tecnojobsnet.com
julis-lsa.de
deoudedorpskernnoordwijk.nl
kaminscy.com
pay4essays.net
denovofoodsgroup.com
symphonyenvironmental.com
blewback.com
ino-professional.ru
alhashem.net
thedresserie.com
aglend.com.au
mediaclan.info
you-bysia.com.au
ostheimer.at
camsadviser.com
securityfmm.com
smartypractice.com
carlosja.com
123vrachi.ru
ncuccr.org
thefixhut.com
true
$2a$10$kmb3nsvQXC.93GYNCGKy/uq9hYHivf0e3HcajFIifr8Hf3fmnofgm
outlook
agntsvc
infopath
sqbcoreservice
steam
firefox
ocomm
ocssd
mydesktopqos
oracle
powerpnt
wordpad
synctime
sql
thebat
onenote
excel
visio
encsvc
winword
mydesktopservice
dbsnmp
isqlplussvc
tbirdconfig
mspub
msaccess
thunderbird
ocautoupds
xfssvccon
dbeng50
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] Data leak [+] First of all we have uploaded more then 70 GB archived data from your file server and SQL server Example of data: - Accounting - Finance - Personal Data - Banking data - Confidential files And more other... Our blog: http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/ Read what happens to those who do not pay. We are ready: - To provide you the evidence of stolen data - To give you universal decrypting tool for all encrypted files. - To delete all the stolen data. [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decoder.re/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
7258
svc$
vss
sophos
mepocs
backup
sql
memtas
veeam
sodinokibi
$2a$10$dfjpLrXuDytfF.kmYtQ1ROgsXjTJEe8EmQT65ftxlTpJtXPZrhsAq
7178
kamahouse.net
bridgeloanslenders.com
abitur-undwieweiter.de
live-your-life.jp
xn--rumung-bua.online
anteniti.com
marcuswhitten.site
ostheimer.at
joseconstela.com
deepsouthclothingcompany.com
dr-seleznev.com
ecpmedia.vn
aunexis.ch
anthonystreetrimming.com
pocket-opera.de
mooreslawngarden.com
osterberg.fi
extraordinaryoutdoors.com
kamienny-dywan24.pl
fitovitaforum.com
carlosja.com
klusbeter.nl
zflas.com
lenreactiv-shop.ru
notmissingout.com
fiscalsort.com
hugoversichert.de
operaslovakia.sk
stopilhan.com
spacecitysisters.org
drfoyle.com
jenniferandersonwriter.com
thomas-hospital.de
wmiadmin.com
worldhealthbasicinfo.com
321play.com.hk
meusharklinithome.wordpress.com
hushavefritid.dk
spargel-kochen.de
wien-mitte.co.at
notsilentmd.org
pickanose.com
sw1m.ru
verytycs.com
fibrofolliculoma.info
balticdermatology.lt
zimmerei-deboer.de
licor43.de
cnoia.org
mylolis.com
parking.netgateway.eu
mirjamholleman.nl
kadesignandbuild.co.uk
ledmes.ru
mrsplans.net
sanaia.com
koko-nora.dk
1team.es
associationanalytics.com
unetica.fr
onlyresultsmarketing.com
easytrans.com.au
iphoneszervizbudapest.hu
gaiam.nl
paradicepacks.com
travelffeine.com
phantastyk.com
werkkring.nl
glennroberts.co.nz
burkert-ideenreich.de
transliminaltribe.wordpress.com
ruralarcoiris.com
copystar.co.uk
kuntokeskusrok.fi
purposeadvisorsolutions.com
nataschawessels.com
vox-surveys.com
4youbeautysalon.com
partnertaxi.sk
bauertree.com
tomaso.gr
dutchbrewingcoffee.com
modestmanagement.com
hashkasolutindo.com
lynsayshepherd.co.uk
thewellnessmimi.com
peterstrobos.com
run4study.com
odiclinic.org
almosthomedogrescue.dog
praxis-foerderdiagnostik.de
ussmontanacommittee.us
smejump.co.th
cafemattmeera.com
lubetkinmediacompanies.com
bodyfulls.com
boompinoy.com
nosuchthingasgovernment.com
ki-lowroermond.nl
aakritpatel.com
iqbalscientific.com
nandistribution.nl
thenewrejuveme.com
allfortheloveofyou.com
fatfreezingmachines.com
autodemontagenijmegen.nl
higadograsoweb.com
layrshift.eu
jandaonline.com
grelot-home.com
lapinvihreat.fi
geekwork.pl
conasmanagement.de
selfoutlet.com
hebkft.hu
skanah.com
pixelarttees.com
katketytaanet.fi
stefanpasch.me
biortaggivaldelsa.com
ausair.com.au
tanciu.com
micahkoleoso.de
oceanastudios.com
asgestion.com
prochain-voyage.net
ilive.lt
trapiantofue.it
manijaipur.com
crediacces.com
tstaffing.nl
urmasiimariiuniri.ro
presseclub-magdeburg.de
bordercollie-nim.nl
tarotdeseidel.com
bargningavesta.se
forskolorna.org
tomoiyuma.com
mank.de
zzyjtsgls.com
kedak.de
csgospeltips.se
nestor-swiss.ch
insigniapmg.com
thomasvicino.com
lloydconstruction.com
shsthepapercut.com
hotelsolbh.com.br
ouryoungminds.wordpress.com
jorgobe.at
verbisonline.com
kenhnoithatgo.com
bildungsunderlebnis.haus
stampagrafica.es
lachofikschiet.nl
gastsicht.de
senson.fi
karacaoglu.nl
tophumanservicescourses.com
chaotrang.com
coursio.com
answerstest.ru
happyeasterimages.org
walkingdeadnj.com
tsklogistik.eu
hannah-fink.de
fotoideaymedia.es
irinaverwer.com
the-virtualizer.com
ecoledansemulhouse.fr
homesdollar.com
petnest.ir
portoesdofarrobo.com
qualitus.com
hypozentrum.com
craigmccabe.fun
mariposapropaneaz.com
rimborsobancario.net
kosterra.com
tigsltd.com
zweerscreatives.nl
pasivect.co.uk
visiativ-industry.fr
groupe-cets.com
whyinterestingly.ru
directwindowco.com
eaglemeetstiger.de
rhinosfootballacademy.com
lichencafe.com
arteservicefabbro.com
connectedace.com
summitmarketingstrategies.com
rushhourappliances.com
mrsfieldskc.com
hhcourier.com
quickyfunds.com
i-arslan.de
antenanavi.com
gw2guilds.org
kath-kirche-gera.de
wsoil.com.sg
fannmedias.com
baustb.de
kmbshipping.co.uk
iwr.nl
andersongilmour.co.uk
filmvideoweb.com
eco-southafrica.com
collaborativeclassroom.org
vannesteconstruct.be
haremnick.com
moveonnews.com
solinegraphic.com
helenekowalsky.com
schoolofpassivewealth.com
jasonbaileystudio.com
live-con-arte.de
sairaku.net
milanonotai.it
shhealthlaw.com
woodworkersolution.com
humanityplus.org
candyhouseusa.com
piajeppesen.dk
baptisttabernacle.com
x-ray.ca
polzine.net
healthyyworkout.com
pivoineetc.fr
drinkseed.com
sobreholanda.com
ceid.info.tr
marketingsulweb.com
stupbratt.no
makeurvoiceheard.com
schraven.de
firstpaymentservices.com
maratonaclubedeportugal.com
mikeramirezcpa.com
body-armour.online
corendonhotels.com
tulsawaterheaterinstallation.com
quemargrasa.net
opatrovanie-ako.sk
blog.solutionsarchitect.guru
wari.com.pe
leoben.at
zonamovie21.net
rksbusiness.com
miraclediet.fun
coding-machine.com
turkcaparbariatrics.com
monark.com
victoriousfestival.co.uk
nativeformulas.com
berlin-bamboo-bikes.org
farhaani.com
craftleathermnl.com
jeanlouissibomana.com
mezhdu-delom.ru
alvinschwartz.wordpress.com
sporthamper.com
securityfmm.com
body-guards.it
poultrypartners.nl
div-vertriebsforschung.de
ctrler.cn
fensterbau-ziegler.de
serce.info.pl
fransespiegels.nl
ausbeverage.com.au
asteriag.com
binder-buerotechnik.at
aarvorg.com
slupetzky.at
punchbaby.com
pmcimpact.com
lykkeliv.net
suncrestcabinets.ca
faizanullah.com
mapawood.com
saarland-thermen-resort.com
sterlingessay.com
tanzprojekt.com
shadebarandgrillorlando.com
gemeentehetkompas.nl
id-et-d.fr
gporf.fr
highlinesouthasc.com
vietlawconsultancy.com
blumenhof-wegleitner.at
waywithwords.net
buymedical.biz
wychowanieprzedszkolne.pl
kalkulator-oszczednosci.pl
ivivo.es
uimaan.fi
charlottepoudroux-photographie.fr
i-trust.dk
heliomotion.com
smalltownideamill.wordpress.com
hotelzentral.at
alysonhoward.com
sarbatkhalsafoundation.org
huehnerauge-entfernen.de
outcomeisincome.com
waveneyrivercentre.co.uk
sevenadvertising.com
apolomarcas.com
juneauopioidworkgroup.org
waermetauscher-berechnen.de
executiveairllc.com
pubweb.carnet.hr
madinblack.com
ogdenvision.com
toreria.es
365questions.org
nancy-informatique.fr
zso-mannheim.de
naturalrapids.com
latestmodsapks.com
siliconbeach-realestate.com
croftprecision.co.uk
birnam-wood.com
galserwis.pl
fundaciongregal.org
platformier.com
bptdmaluku.com
kaliber.co.jp
shiftinspiration.com
caribbeansunpoker.com
aco-media.nl
satyayoga.de
renergysolution.com
longislandelderlaw.com
narcert.com
strandcampingdoonbeg.com
kafu.ch
rostoncastings.co.uk
foryourhealth.live
spd-ehningen.de
lionware.de
milsing.hr
lebellevue.fr
atozdistribution.co.uk
ncuccr.org
atalent.fi
shonacox.com
alsace-first.com
stallbyggen.se
ralister.co.uk
eraorastudio.com
sojamindbody.com
songunceliptv.com
bouquet-de-roses.com
comparatif-lave-linge.fr
bigbaguettes.eu
esope-formation.fr
smart-light.co.uk
rebeccarisher.com
cortec-neuro.com
financescorecard.com
idemblogs.com
biapi-coaching.fr
izzi360.com
oneplusresource.org
plotlinecreative.com
walter-lemm.de
12starhd.online
olejack.ru
navyfederalautooverseas.com
freie-gewerkschaften.de
levdittliv.se
plantag.de
vibehouse.rw
instatron.net
qlog.de
vdberg-autoimport.nl
blgr.be
durganews.com
deltacleta.cat
35-40konkatsu.net
ceres.org.au
physiofischer.de
parks-nuernberg.de
pmc-services.de
tanzschule-kieber.de
sandd.nl
stemplusacademy.com
boulderwelt-muenchen-west.de
mousepad-direkt.de
bouncingbonanza.com
dekkinngay.com
socialonemedia.com
rocketccw.com
advokathuset.dk
architecturalfiberglass.org
vorotauu.ru
lapmangfpt.info.vn
asiluxury.com
lbcframingelectrical.com
pcp-nc.com
imaginado.de
starsarecircular.org
vickiegrayimages.com
maineemploymentlawyerblog.com
xtptrack.com
all-turtles.com
nsec.se
bristolaeroclub.co.uk
gantungankunciakrilikbandung.com
penco.ie
galleryartfair.com
maxadams.london
web.ion.ag
citymax-cr.com
tinkoff-mobayl.ru
vesinhnha.com.vn
kojinsaisei.info
mepavex.nl
takeflat.com
mrtour.site
accountancywijchen.nl
rota-installations.co.uk
devok.info
first-2-aid-u.com
girlillamarketing.com
lescomtesdemean.be
iwelt.de
otto-bollmann.de
smessier.com
webmaster-peloton.com
mmgdouai.fr
beyondmarcomdotcom.wordpress.com
personalenhancementcenter.com
innote.fi
sla-paris.com
craigvalentineacademy.com
geoffreymeuli.com
maureenbreezedancetheater.org
desert-trails.com
deoudedorpskernnoordwijk.nl
marietteaernoudts.nl
pawsuppetlovers.com
skiltogprint.no
dramagickcom.wordpress.com
ymca-cw.org.uk
wacochamber.com
mooshine.com
jyzdesign.com
zieglerbrothers.de
xn--singlebrsen-vergleich-nec.com
xltyu.com
grupocarvalhoerodrigues.com.br
amerikansktgodis.se
theapifactory.com
fairfriends18.de
noskierrenteria.com
ncs-graphic-studio.com
neuschelectrical.co.za
jusibe.com
insp.bi
whittier5k.com
naswrrg.org
jiloc.com
importardechina.info
seevilla-dr-sturm.at
caffeinternet.it
space.ua
greenko.pl
miriamgrimm.de
adultgamezone.com
hmsdanmark.dk
refluxreducer.com
socstrp.org
evangelische-pfarrgemeinde-tuniberg.de
calabasasdigest.com
mardenherefordshire-pc.gov.uk
baumkuchenexpo.jp
ateliergamila.com
drugdevice.org
naturstein-hotte.de
nuzech.com
trackyourconstruction.com
ihr-news.jp
myteamgenius.com
onlybacklink.com
parkstreetauto.net
retroearthstudio.com
noixdecocom.fr
restaurantesszimmer.de
woodleyacademy.org
nhadatcanho247.com
hardinggroup.com
mrxermon.de
thedresserie.com
ccpbroadband.com
promalaga.es
handi-jack-llc.com
garage-lecompte-rouen.fr
allentownpapershow.com
raschlosser.de
porno-gringo.com
figura.team
love30-chanko.com
xn--logopdie-leverkusen-kwb.de
krlosdavid.com
elpa.se
rafaut.com
denifl-consulting.at
jerling.de
quizzingbee.com
bargningharnosand.se
littlebird.salon
americafirstcommittee.org
maasreusel.nl
twohourswithlena.wordpress.com
lightair.com
wurmpower.at
creamery201.com
ravensnesthomegoods.com
henricekupper.com
kaminscy.com
otsu-bon.com
seagatesthreecharters.com
musictreehouse.net
pinkexcel.com
daklesa.de
falcou.fr
pierrehale.com
vloeren-nu.nl
facettenreich27.de
minipara.com
bayoga.co.uk
koken-voor-baby.nl
zervicethai.co.th
rumahminangberdaya.com
team-montage.dk
stingraybeach.com
cyntox.com
cityorchardhtx.com
calxplus.eu
simulatebrain.com
global-kids.info
polymedia.dk
pv-design.de
aniblinova.wordpress.com
corelifenutrition.com
theadventureedge.com
imadarchid.com
enovos.de
seitzdruck.com
carrybrands.nl
troegs.com
hairnetty.wordpress.com
epwritescom.wordpress.com
completeweddingkansas.com
appsformacpc.com
gymnasedumanagement.com
brevitempore.net
ilcdover.com
withahmed.com
tradiematepro.com.au
macabaneaupaysflechois.com
thaysa.com
work2live.de
imperfectstore.com
edv-live.de
groupe-frayssinet.fr
tenacitytenfold.com
dinslips.se
agence-chocolat-noir.com
brawnmediany.com
1kbk.com.ua
mirkoreisser.de
centrospgolega.com
urist-bogatyr.ru
cheminpsy.fr
y-archive.com
knowledgemuseumbd.com
profectis.de
mymoneyforex.com
myhealth.net.au
psa-sec.de
shiresresidential.com
resortmtn.com
liliesandbeauties.org
airconditioning-waalwijk.nl
norovirus-ratgeber.de
nacktfalter.de
heurigen-bauer.at
oneheartwarriors.at
rosavalamedahr.com
spectrmash.ru
yousay.site
backstreetpub.com
dpo-as-a-service.com
daniel-akermann-architektur-und-planung.ch
lmtprovisions.com
real-estate-experts.com
dnepr-beskid.com.ua
greenpark.ch
courteney-cox.net
aodaichandung.com
edgewoodestates.org
testzandbakmetmening.online
analiticapublica.es
cursosgratuitosnainternet.com
artotelamsterdam.com
people-biz.com
xoabigail.com
ecopro-kanto.com
fitnessingbyjessica.com
echtveilig.nl
dubnew.com
kariokids.com
faronics.com
cursoporcelanatoliquido.online
nurturingwisdom.com
compliancesolutionsstrategies.com
kaotikkustomz.com
beaconhealthsystem.org
pelorus.group
gopackapp.com
diversiapsicologia.es
offroadbeasts.com
villa-marrakesch.de
triggi.de
sauschneider.info
alfa-stroy72.com
systemate.dk
xlarge.at
danielblum.info
sanyue119.com
bradynursery.com
streamerzradio1.site
mountsoul.de
muamuadolls.com
kidbucketlist.com.au
morawe-krueger.de
unim.su
lefumetdesdombes.com
pasvenska.se
qualitaetstag.de
romeguidedvisit.com
vanswigchemdesign.com
commercialboatbuilding.com
ncid.bc.ca
jakekozmor.com
bigasgrup.com
cuspdental.com
newyou.at
eadsmurraypugh.com
abuelos.com
lecantou-coworking.com
syndikat-asphaltfieber.de
manutouchmassage.com
trulynolen.co.uk
deschl.net
igrealestate.com
klimt2012.info
kindersitze-vergleich.de
blossombeyond50.com
employeesurveys.com
bricotienda.com
michaelsmeriglioracing.com
paymybill.guru
tastewilliamsburg.com
bundabergeyeclinic.com.au
tuuliautio.fi
richard-felix.co.uk
lapinlviasennus.fi
simplyblessedbykeepingitreal.com
jameskibbie.com
the-domain-trader.com
edrcreditservices.nl
bafuncs.org
fayrecreations.com
urclan.net
eglectonk.online
servicegsm.net
zewatchers.com
lillegrandpalais.com
ikads.org
verifort-capital.de
campusoutreach.org
igfap.com
carolinepenn.com
smartypractice.com
clos-galant.com
aglend.com.au
broseller.com
southeasternacademyofprosthodontics.org
todocaracoles.com
paulisdogshop.de
comarenterprises.com
forestlakeuca.org.au
abogados-en-alicante.es
bimnapratica.com
finde-deine-marke.de
limassoldriving.com
despedidascostablanca.es
homng.net
sinal.org
globedivers.wordpress.com
blacksirius.de
highimpactoutdoors.net
mytechnoway.com
brigitte-erler.com
devlaur.com
stoneys.ch
lorenacarnero.com
projetlyonturin.fr
yassir.pro
mbfagency.com
myhostcloud.com
sportiomsportfondsen.nl
rerekatu.com
ampisolabergeggi.it
vibethink.net
pogypneu.sk
smogathon.com
roygolden.com
ligiercenter-sachsen.de
kisplanning.com.au
samnewbyjax.com
tips.technology
promesapuertorico.com
crowd-patch.co.uk
balticdentists.com
kirkepartner.dk
bsaship.com
celeclub.org
fizzl.ru
hihaho.com
tonelektro.nl
synlab.lt
harpershologram.wordpress.com
surespark.org.uk
hkr-reise.de
jolly-events.com
winrace.no
spylista.com
agence-referencement-naturel-geneve.net
journeybacktolife.com
fitnessbazaar.com
huissier-creteil.com
wolf-glas-und-kunst.de
ivfminiua.com
baronloan.org
blewback.com
charlesreger.com
xn--vrftet-pua.biz
dlc.berlin
tux-espacios.com
slashdb.com
pferdebiester.de
dw-css.de
plastidip.com.ar
dutchcoder.nl
iviaggisonciliegie.it
pointos.com
ventti.com.ar
hoteledenpadova.it
stoeberstuuv.de
stemenstilte.nl
theshungiteexperience.com.au
micro-automation.de
fotoscondron.com
smithmediastrategies.com
commonground-stories.com
boldcitydowntown.com
chavesdoareeiro.com
jbbjw.com
sachnendoc.com
latribuessentielle.com
artallnightdc.com
stoeferlehalle.de
dushka.ua
basisschooldezonnewijzer.nl
darrenkeslerministries.com
ai-spt.jp
argenblogs.com.ar
ungsvenskarna.se
officehymy.com
liveottelut.com
devstyle.org
reddysbakery.com
tandartspraktijkhartjegroningen.nl
kunze-immobilien.de
tongdaifpthaiphong.net
augenta.com
geisterradler.de
euro-trend.pl
spsshomeworkhelp.com
schutting-info.nl
sahalstore.com
2ekeus.nl
remcakram.com
datacenters-in-europe.com
lusak.at
coffreo.biz
webhostingsrbija.rs
effortlesspromo.com
judithjansen.com
precisionbevel.com
deprobatehelp.com
mbxvii.com
schoellhammer.com
abogadosadomicilio.es
gonzalezfornes.es
bowengroup.com.au
rehabilitationcentersinhouston.net
123vrachi.ru
sabel-bf.com
besttechie.com
dr-pipi.de
midmohandyman.com
caribdoctor.org
destinationclients.fr
wellplast.se
bee4win.com
danubecloud.com
parebrise-tla.fr
nakupunafoundation.org
nachhilfe-unterricht.com
havecamerawilltravel2017.wordpress.com
anybookreader.de
kikedeoliveira.com
rollingrockcolumbia.com
educar.org
darnallwellbeing.org.uk
ulyssemarketing.com
toponlinecasinosuk.co.uk
ftf.or.at
lukeshepley.wordpress.com
vitalyscenter.es
bigler-hrconsulting.ch
sagadc.com
mooglee.com
faroairporttransfers.net
botanicinnovations.com
art2gointerieurprojecten.nl
theduke.de
levihotelspa.fi
nokesvilledentistry.com
webcodingstudio.com
saxtec.com
krcove-zily.eu
steampluscarpetandfloors.com
amylendscrestview.com
schmalhorst.de
mindpackstudios.com
bingonearme.org
philippedebroca.com
ianaswanson.com
funjose.org.gt
sotsioloogia.ee
jvanvlietdichter.nl
nmiec.com
schlafsack-test.net
gasbarre.com
perbudget.com
gadgetedges.com
sportsmassoren.com
logopaedie-blomberg.de
hvccfloorcare.com
frontierweldingllc.com
jobmap.at
4net.guru
cerebralforce.net
blogdecachorros.com
femxarxa.cat
lucidinvestbank.com
leda-ukraine.com.ua
justinvieira.com
oldschoolfun.net
centromarysalud.com
luxurytv.jp
kostenlose-webcams.com
videomarketing.pro
campus2day.de
exenberger.at
joyeriaorindia.com
autofolierung-lu.de
elimchan.com
blood-sports.net
pier40forall.org
yourobgyn.net
markelbroch.com
pay4essays.net
vihannesporssi.fi
tandartspraktijkheesch.nl
babcockchurch.org
abl1.net
slimani.net
brandl-blumen.de
leeuwardenstudentcity.nl
upplandsspar.se
puertamatic.es
kampotpepper.gives
slimidealherbal.com
westdeptfordbuyrite.com
erstatningsadvokaterne.dk
braffinjurylawfirm.com
iyengaryogacharlotte.com
herbstfeststaefa.ch
controldekk.com
bunburyfreightservices.com.au
danskretursystem.dk
waynela.com
jacquin-maquettes.com
edelman.jp
gratispresent.se
heidelbergartstudio.gallery
c2e-poitiers.com
dontpassthepepper.com
you-bysia.com.au
ftlc.es
adoptioperheet.fi
thee.network
tetinfo.in
deko4you.at
theletter.company
actecfoundation.org
radaradvies.nl
entopic.com
jadwalbolanet.info
familypark40.com
yamalevents.com
itelagen.com
artige.com
christinarebuffetcourses.com
aurum-juweliere.de
freie-baugutachterpraxis.de
launchhubl.com
microcirc.net
chandlerpd.com
catholicmusicfest.com
scenepublique.net
huesges-gruppe.de
interactcenter.org
bbsmobler.se
101gowrie.com
irishmachineryauctions.com
modamilyon.com
xn--thucmctc-13a1357egba.com
associacioesportivapolitg.cat
patrickfoundation.net
sweering.fr
crosspointefellowship.church
spinheal.ru
torgbodenbollnas.se
smale-opticiens.nl
kao.at
polychromelabs.com
beautychance.se
creative-waves.co.uk
embracinghiscall.com
camsadviser.com
triactis.com
ditog.fr
myzk.site
no-plans.com
antonmack.de
allure-cosmetics.at
vermoote.de
filmstreamingvfcomplet.be
pomodori-pizzeria.de
ilso.net
igorbarbosa.com
atmos-show.com
loprus.pl
teknoz.net
advizewealth.com
cwsitservices.co.uk
hiddencitysecrets.com.au
helikoptervluchtnewyork.nl
hatech.io
goodgirlrecovery.com
montrium.com
leather-factory.co.jp
better.town
themadbotter.com
ora-it.de
upmrkt.co
crowcanyon.com
autodujos.lt
sofavietxinh.com
jsfg.com
evologic-technologies.com
aselbermachen.com
flexicloud.hk
berliner-versicherungsvergleich.de
n1-headache.com
kissit.ca
marchand-sloboda.com
expandet.dk
merzi.info
corola.es
psc.de
homecomingstudio.com
seproc.hn
jobcenterkenya.com
zenderthelender.com
conexa4papers.trade
gamesboard.info
pt-arnold.de
vitavia.lt
bxdf.info
assurancesalextrespaille.fr
acomprarseguidores.com
8449nohate.org
ladelirante.fr
em-gmbh.ch
siluet-decor.ru
nvwoodwerks.com
houseofplus.com
coding-marking.com
corona-handles.com
international-sound-awards.com
vancouver-print.ca
julis-lsa.de
htchorst.nl
bestbet.com
dezatec.es
xn--fnsterputssollentuna-39b.se
celularity.com
aprepol.com
hellohope.com
foretprivee.ca
hexcreatives.co
zimmerei-fl.de
memaag.com
linnankellari.fi
sexandfessenjoon.wordpress.com
veybachcenter.de
cranleighscoutgroup.org
trystana.com
abogadosaccidentetraficosevilla.es
pcprofessor.com
softsproductkey.com
mylovelybluesky.com
humancondition.com
simpkinsedwards.co.uk
talentwunder.com
sloverse.com
bookspeopleplaces.com
naturavetal.hr
planchaavapor.net
proudground.org
boisehosting.net
centuryrs.com
sportverein-tambach.de
katiekerr.co.uk
pridoxmaterieel.nl
dsl-ip.de
wraithco.com
lascuola.nl
dareckleyministries.com
dubscollective.com
mercantedifiori.com
delchacay.com.ar
delawarecorporatelaw.com
dr-tremel-rednitzhembach.de
newstap.com.ng
smhydro.com.pl
milltimber.aberdeen.sch.uk
mediaplayertest.net
vyhino-zhulebino-24.ru
makeitcount.at
mdk-mediadesign.de
gasolspecialisten.se
mdacares.com
cactusthebrand.com
wasmachtmeinfonds.at
mastertechengineering.com
simpliza.com
argos.wityu.fund
ahouseforlease.com
revezlimage.com
kojima-shihou.com
luckypatcher-apkz.com
testcoreprohealthuk.com
cite4me.org
bodyforwife.com
bhwlawfirm.com
abogadoengijon.es
architekturbuero-wagner.net
hokagestore.com
saka.gr
tennisclubetten.nl
lange.host
malychanieruchomoscipremium.com
castillobalduz.es
evergreen-fishing.com
ohidesign.com
antiaginghealthbenefits.com
maryloutaylor.com
behavioralmedicinespecialists.com
apprendrelaudit.com
teczowadolina.bytom.pl
icpcnj.org
www1.proresult.no
vetapharma.fr
oslomf.no
mediaacademy-iraq.org
mediaclan.info
dirittosanitario.biz
finediningweek.pl
makeflowers.ru
aminaboutique247.com
cleliaekiko.online
stormwall.se
strategicstatements.com
c-a.co.in
roadwarrior.app
solerluethi-allart.ch
norpol-yachting.com
id-vet.com
rozemondcoaching.nl
oemands.dk
harveybp.com
hairstylesnow.site
seminoc.com
kingfamily.construction
transportesycementoshidalgo.es
cuppacap.com
thedad.com
chrissieperry.com
oncarrot.com
labobit.it
bastutunnan.se
baylegacy.com
consultaractadenacimiento.com
johnsonfamilyfarmblog.wordpress.com
parkcf.nl
podsosnami.ru
teresianmedia.org
plv.media
mir-na-iznanku.com
praxis-management-plus.de
boosthybrid.com.au
chatizel-paysage.fr
d1franchise.com
manifestinglab.com
carriagehousesalonvt.com
coastalbridgeadvisors.com
nijaplay.com
modelmaking.nl
nicoleaeschbachorg.wordpress.com
slwgs.org
bierensgebakkramen.nl
friendsandbrgrs.com
readberserk.com
bouldercafe-wuppertal.de
herbayupro.com
stacyloeb.com
ino-professional.ru
colorofhorses.com
iyahayki.nl
new.devon.gov.uk
alhashem.net
tinyagency.com
smokeysstoves.com
dublikator.com
noesis.tech
alten-mebel63.ru
DupontSellsHomes.com
cirugiauretra.es
buroludo.nl
denovofoodsgroup.com
xn--fn-kka.no
cimanchesterescorts.co.uk
milestoneshows.com
ra-staudte.de
uranus.nl
austinlchurch.com
simoneblum.de
bogdanpeptine.ro
degroenetunnel.com
rieed.de
chefdays.de
tampaallen.com
theclubms.com
ontrailsandboulevards.com
truenyc.co
tecnojobsnet.com
allamatberedare.se
gmto.fr
digi-talents.com
ziegler-praezisionsteile.de
solhaug.tk
thefixhut.com
drnice.de
bockamp.com
kevinjodea.com
sipstroysochi.ru
extensionmaison.info
intecwi.com
supportsumba.nl
danholzmann.com
mountaintoptinyhomes.com
classycurtainsltd.co.uk
bloggyboulga.net
liikelataamo.fi
insidegarage.pl
digivod.de
panelsandwichmadrid.es
greenfieldoptimaldentalcare.com
marathonerpaolo.com
admos-gleitlager.de
d2marketing.co.uk
autopfand24.de
hrabritelefon.hr
fax-payday-loans.com
christ-michael.net
haar-spange.com
psnacademy.in
thailandholic.com
symphonyenvironmental.com
false
$2a$10$dfjpLrXuDytfF.kmYtQ1ROgsXjTJEe8EmQT65ftxlTpJtXPZrhsAq
avgadmsv
BackupUpdater
ocautoupds
synctime
thebat
excel
isqlplussvc
ccSetMgr
SPBBCSvc
Sage.NA.AT_AU.SysTray
lmibackupvssservice
CarboniteUI
powerpnt
BackupMaint
onenote
klnagent
sql
Rtvscan
xfssvccon
Smc
mspub
encsvc
LogmeInBackupService
kavfsscs
ccSvcHst
BackupExtender
NSCTOP
outlook
dbsnmp
mydesktopservice
tbirdconfig
ShadowProtectSvc
msaccess
wordpad
mydesktopqos
BackupAgent
visio
kavfswp
ocssd
thunderbird
infopath
agntsvc
sqbcoreservice
steam
AmitiAvSrv
dlomaintsvcu
Microsoft.exchange.store.worker.exe
winword
dbeng50
firefox
TSSchBkpService
DLOAdminSvcu
kavfs
ocomm
oracle
All of your files are encrypted! Find {EXT}-readme.txt and follow instuctions
---=== Welcome. Again. ===--- [+] Whats Happen? [+] Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}. By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER). [+] Attention!!! [+] Also your private data was downloaded. We will publish it in case you will not get in touch with us asap. [+] What guarantees? [+] Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money. [+] How to get access on website? [+] You have two ways: 1) [Recommended] Using a TOR browser! a) Download and install TOR browser from this site: https://torproject.org/ b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID} 2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this: a) Open your any browser (Chrome, Firefox, Opera, IE, Edge) b) Open our secondary website: http://decoder.re/{UID} Warning: secondary website can be blocked, thats why first variant much better and more available. When you open our website, put the following data in the input form: Key: {KEY} ----------------------------------------------------------------------------------------- !!! DANGER !!! DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data. !!! !!! !!! ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere. !!! !!! !!!
7178
ssistelemetry
adsync
svc$
msseces
mbamservice
ssastelemetry
altaro
sbamsvc
ds_notifier
ntrtscan
ofcservice
code42service
macmnsvc
memtas
auservice
telemetryserver
tmccsf
psqlwge
sppsvc
viprepplsvc
azurea
ds_monitor
swi_filter
protectedstorage
mfemms
mfevtp
kaseyaagentendpoint
ltservice
dssvc
altiback
masvc
huntressagent
mcafee
kaendchips
kavfs
reportserver
savservice
altiftpuploader
sophos
svcgenerichost
altiphoneserv
klnagent
mepocs
ds_agent
threadlocker
sql
vss
tmlisten
backup
tmbmserver
savadminservice
vipreaapsvc
mfewc
altictproxy
ltsvcmon
altivrm
huntressupdater
kaseyaagent
teamviewer
msdtsserver
amsp
storagecraft
veeam
bedbg
Processes:
resource | yara_rule |
---|---|
static1/unpack001/RansomwareSamples/MedusaLocker_24_04_2020_661KB.exe | family_medusalocker |
Processes:
resource | yara_rule |
---|---|
static1/unpack001/RansomwareSamples/Hades_29_03_2021_1909KB.exe | cryptone |
static1/unpack001/RansomwareSamples/Phoenix_29_03_2021_1930KB.exe | cryptone |
Processes:
resource | yara_rule |
---|---|
static1/unpack001/RansomwareSamples/DarkSide_01_05_2021_30KB.exe | upx |
static1/unpack001/RansomwareSamples/DarkSide_18_11_2020_17KB.exe | upx |
static1/unpack001/RansomwareSamples/Hive_17_07_2021_808KB.exe | upx |
static1/unpack001/RansomwareSamples/Sodinokibi_04_07_2019_253KB.exe | upx |
Processes:
resource | yara_rule |
---|---|
static1/unpack001/RansomwareSamples/BlackKingdom_23_03_2021_12460KB.exe | pyinstaller |
Processes:
resource | yara_rule |
---|---|
static1/unpack001/RansomwareSamples/MAKOP_27_10_2020_115KB.exe | nsis_installer_1 |
static1/unpack001/RansomwareSamples/MAKOP_27_10_2020_115KB.exe | nsis_installer_2 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ReadFile
GetFileSizeEx
GetFileAttributesW
SetFileAttributesW
SetFilePointerEx
MoveFileExW
FindFirstFileW
FindNextFileW
GetEnvironmentVariableW
FindClose
GetShortPathNameA
ReleaseMutex
GetUserDefaultLCID
GetCurrentThread
GetThreadContext
IsDebuggerPresent
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
GetCurrentProcess
GetTickCount
OpenMutexW
CopyFileW
CreateProcessW
GetProcessHeap
HeapAlloc
CloseHandle
Process32FirstW
Process32NextW
GetLastError
Sleep
CreateToolhelp32Snapshot
OpenProcess
CreateFileW
CreateMutexW
GetModuleFileNameW
TerminateProcess
HeapFree
WideCharToMultiByte
MultiByteToWideChar
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindVolumeClose
SetVolumeMountPointW
FindFirstVolumeW
WriteConsoleW
SetEndOfFile
HeapSize
ReadConsoleW
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
ReleaseSemaphore
DuplicateHandle
VirtualFree
VirtualProtect
VirtualAlloc
IsValidCodePage
GetVersionExW
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
UnregisterWaitEx
WaitForSingleObject
WriteFile
FindFirstFileExW
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetStdHandle
DeleteFileW
GetFileType
EnumSystemLocalesW
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
QueryDosDeviceW
GetLogicalDrives
GetStdHandle
FreeLibrary
ExitProcess
RtlUnwind
LoadLibraryW
RaiseException
GetCurrentThreadId
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
FormatMessageW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
WaitForSingleObjectEx
EncodePointer
DecodePointer
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetEvent
ResetEvent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
LocalFree
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
GetKeyboardLayout
SystemParametersInfoW
ControlService
OpenServiceW
CryptSetKeyParam
CryptDestroyKey
CryptAcquireContextW
CryptEncrypt
CryptDuplicateKey
CryptExportKey
CryptImportKey
CryptGenKey
CryptReleaseContext
OpenProcessToken
GetTokenInformation
RegCloseKey
CloseServiceHandle
OpenSCManagerW
DeleteService
RegCreateKeyW
EnumDependentServicesW
RegSetValueExW
StartServiceW
RegOpenKeyExW
QueryServiceStatusEx
SHGetSpecialFolderPathA
SHEmptyRecycleBinW
CoUninitialize
CoInitializeEx
CoInitialize
IIDFromString
CLSIDFromString
CoGetObject
CoCreateInstance
CoInitializeSecurity
SysFreeString
VariantInit
SysAllocStringByteLen
SysAllocString
VariantClear
SysStringByteLen
WNetGetConnectionW
NetShareEnum
NetApiBufferFree
SendARP
WSACleanup
gethostbyname
WSAStartup
inet_addr
gethostname
inet_ntoa
RmRegisterResources
RmGetList
RmStartSession
RmShutdown
RmEndSession
CryptStringToBinaryA
InternetConnectW
HttpOpenRequestW
InternetCloseHandle
HttpSendRequestW
InternetReadFile
HttpSendRequestA
InternetOpenW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CryptDecodeObjectEx
CryptBinaryToStringA
CryptStringToBinaryA
CryptEncodeObjectEx
CryptImportPublicKeyInfo
RmGetList
RmEndSession
RmStartSession
RmRegisterResources
GetConsoleWindow
FormatMessageA
GetLastError
CreateMutexA
GlobalAlloc
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
QueryPerformanceFrequency
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetProcAddress
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
RtlUnwind
RaiseException
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
WriteFile
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetCurrentThread
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
HeapReAlloc
GetTimeZoneInformation
GetFileSizeEx
SetFilePointerEx
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
CreateFileW
WriteConsoleW
SetEvent
GetThreadTimes
ShowWindow
CryptImportKey
CryptGenRandom
CryptEncrypt
CryptAcquireContextA
CryptDestroyKey
CryptGenKey
CryptAcquireContextW
CryptReleaseContext
CryptExportKey
WNetOpenEnumA
WNetCloseEnum
WNetEnumResourceA
WNetAddConnection2A
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sleep
GetCurrentProcess
TerminateProcess
OpenProcess
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
GlobalAlloc
lstrcmpW
lstrlenA
lstrlenW
SetVolumeMountPointW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
GetEnvironmentVariableW
CreateFileW
FindClose
FindFirstFileW
GetLastError
FlushFileBuffers
GetFileSizeEx
GetLogicalDrives
SetFileAttributesW
WriteFile
WaitForSingleObject
WaitForMultipleObjects
GetCurrentProcessId
ExitProcess
CreateThread
SetProcessShutdownParameters
GetSystemInfo
MapViewOfFile
UnmapViewOfFile
lstrcmpA
lstrcmpiW
lstrcpyW
lstrcatW
CreateFileMappingA
MoveFileExW
HeapAlloc
HeapFree
GetProcessHeap
SetUnhandledExceptionFilter
CloseHandle
GetVolumePathNamesForVolumeNameW
GetDriveTypeW
FindVolumeClose
FindNextVolumeW
FindNextFileW
FindFirstVolumeW
UnhandledExceptionFilter
IsProcessorFeaturePresent
OpenServiceA
OpenSCManagerA
EnumDependentServicesA
ControlService
CloseServiceHandle
QueryServiceStatusEx
SHEmptyRecycleBinA
ShellExecuteW
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
WNetGetConnectionW
RmStartSession
RmEndSession
RmRegisterResources
RmGetList
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
OpenProcess
GetTickCount
GetModuleHandleA
GetProcAddress
LoadLibraryA
lstrcmpW
lstrlenW
SetVolumeMountPointW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
CreateFileW
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
lstrlenA
GetCommandLineW
FindClose
FindFirstFileW
FindNextFileW
GetFileSizeEx
GetCurrentProcess
ReadFile
SetFileAttributesW
SetFilePointerEx
WaitForSingleObject
CreateMutexA
WaitForMultipleObjects
GetCurrentProcessId
ExitProcess
CreateThread
ExitThread
SetProcessShutdownParameters
GetSystemInfo
lstrcmpiW
lstrcpyW
lstrcatW
OpenMutexA
MoveFileExW
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
ReleaseSemaphore
CreateSemaphoreA
TerminateProcess
Sleep
GetLastError
CloseHandle
GetVolumePathNamesForVolumeNameW
GetDriveTypeW
FindVolumeClose
FindNextVolumeW
GetLogicalDrives
FindFirstVolumeW
wsprintfA
QueryServiceStatusEx
OpenSCManagerA
EnumDependentServicesA
ControlService
CloseServiceHandle
CryptAcquireContextW
CryptReleaseContext
CryptGenRandom
OpenServiceA
SHEmptyRecycleBinA
CommandLineToArgvW
ShellExecuteW
NetShareEnum
NetApiBufferFree
RmGetList
RmStartSession
RmEndSession
RmRegisterResources
WNetCloseEnum
WNetEnumResourceW
WNetOpenEnumW
WNetGetConnectionW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
MessageBoxW
MessageBoxA
HeapReAlloc
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
GetTempPathW
SetEndOfFile
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
LoadLibraryExW
CreateDirectoryW
FormatMessageW
LoadLibraryA
MultiByteToWideChar
WideCharToMultiByte
WaitForSingleObject
GetDriveTypeW
HeapSize
GetTimeZoneInformation
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetCommandLineA
ReadFile
CreateFileW
RaiseException
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
SetConsoleCtrlHandler
DeleteFileW
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleCP
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
SetEnvironmentVariableA
GetFileAttributesExW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
GetProcessHeap
WriteConsoleW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ntohl
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SelectPalette
GetTextCharset
GetDeviceCaps
CreateSolidBrush
CreateFontW
DefWindowProcW
GetClassNameW
GetDlgItem
GetDlgItemTextW
IsDlgButtonChecked
LoadImageW
LoadMenuW
CreateMenu
CreateDialogParamW
EndDialog
SetLastError
GetModuleHandleA
GetFileAttributesW
GetCommandLineW
GetCommandLineA
FormatMessageW
GetAtomNameW
FreeLibrary
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
wsprintfW
WSAGetLastError
htons
inet_ntoa
ExitProcess
DecodePointer
EncodePointer
WriteConsoleW
SetFilePointerEx
GetConsoleMode
LoadLibraryA
GetProcAddress
CloseHandle
GetLocalTime
lstrlenW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RaiseException
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
SetStdHandle
GetFileType
GetStringTypeW
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetUnhandledExceptionFilter
SizeofResource
Sleep
SleepEx
SuspendThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoA
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
SetThreadPriority
WaitForMultipleObjects
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WriteConsoleOutputW
WriteConsoleW
WriteFile
WritePrivateProfileSectionA
WritePrivateProfileStringA
WriteProcessMemory
_lclose
_llseek
lstrcatA
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
SetThreadContext
SetStdHandle
SetProcessWorkingSetSize
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetFileAttributesA
SetEvent
SetErrorMode
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryW
SetCurrentDirectoryA
SetCriticalSectionSpinCount
SetConsoleMode
SetConsoleCtrlHandler
SearchPathA
RtlUnwind
ResumeThread
ResetEvent
ReplaceFileA
RemoveDirectoryA
ReleaseSemaphore
ReleaseMutex
ReleaseActCtx
ReadFile
ReadConsoleInputA
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
PeekNamedPipe
PeekConsoleInputA
OutputDebugStringA
OpenFile
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileA
MapViewOfFile
LockResource
LockFile
LocalUnlock
LocalSize
LocalReAlloc
LocalLock
LocalFree
LocalFlags
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
IsProcessorFeaturePresent
IsDebuggerPresent
IsDBCSLeadByteEx
IsDBCSLeadByte
IsBadWritePtr
IsBadStringPtrA
IsBadReadPtr
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapWalk
HeapValidate
HeapSize
HeapSetInformation
HeapReAlloc
HeapQueryInformation
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
Heap32ListNext
Heap32First
GlobalUnlock
GlobalSize
GlobalReAlloc
GlobalMemoryStatusEx
GlobalMemoryStatus
GlobalLock
GlobalHandle
GlobalGetAtomNameW
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GlobalAddAtomA
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationW
GetVolumeInformationA
GetVersionExW
GetVersionExA
GetVersion
GetUserDefaultUILanguage
GetUserDefaultLCID
GetTimeZoneInformation
GetTimeFormatW
GetTimeFormatA
GetTickCount
GetThreadTimes
GetThreadLocale
GetThreadContext
GetTempPathA
GetTempFileNameA
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDirectoryA
GetSystemDefaultUILanguage
GetStringTypeW
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameW
GetShortPathNameA
GetProfileStringW
GetProfileStringA
GetProfileIntA
GetProcessTimes
GetProcessShutdownParameters
GetProcessHeap
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileIntA
GetOEMCP
GetNumberOfConsoleInputEvents
GetNumberFormatA
GetModuleFileNameW
GetModuleFileNameA
GetLongPathNameW
GetLongPathNameA
GetLogicalDriveStringsW
GetLogicalDriveStringsA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileSizeEx
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExA
GetFileAttributesA
GetExitCodeProcess
GetEnvironmentVariableW
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
GetDriveTypeW
GetDriveTypeA
GetDiskFreeSpaceExA
GetDiskFreeSpaceA
GetDateFormatW
GetDateFormatA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
GetConsoleWindow
GetConsoleMode
GetConsoleCP
GetComputerNameA
GetCommandLineW
GetCommandLineA
GetCPInfoExW
GetCPInfoExA
GetCPInfo
GetAtomNameA
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeConsole
FormatMessageA
FoldStringA
FlushInstructionCache
FlushFileBuffers
FlushConsoleInputBuffer
FindResourceW
FindResourceExW
FindResourceA
FindNextFileW
FindNextFileA
FindFirstFileW
FindFirstFileExW
FindFirstFileExA
FindFirstFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalAppExitA
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
GetProcAddress
EnumSystemLocalesA
EnumSystemCodePagesW
EnumSystemCodePagesA
EnumResourceLanguagesA
EnterCriticalSection
EncodePointer
DuplicateHandle
DeleteVolumeMountPointA
DeleteFileW
DeleteFileA
DeleteCriticalSection
DecodePointer
DeactivateActCtx
CreateWaitableTimerA
CreateThread
CreateSemaphoreA
CreateProcessA
CreatePipe
CreateMutexA
CreateFileW
CreateFileMappingA
CreateFileA
CreateEventA
CreateDirectoryW
CreateDirectoryA
CreateActCtxW
CopyFileA
ConvertDefaultLocale
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
ActivateActCtx
VirtualAlloc
GetModuleHandleW
LoadLibraryA
GetModuleHandleA
ExitProcess
WaitForDebugEvent
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
SetWindowsHookExW
ShowCaret
ShowCursor
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoA
TabbedTextOutA
TileWindows
ToAscii
ToAsciiEx
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnpackDDElParam
UnregisterClassA
UpdateLayeredWindow
UpdateWindow
ValidateRect
WINNLSGetIMEHotkey
WaitMessage
WinHelpA
WindowFromDC
WindowFromPoint
keybd_event
wsprintfA
PtInRect
PostThreadMessageW
PostThreadMessageA
PostQuitMessage
PostMessageA
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
OemToCharBuffA
NotifyWinEvent
MsgWaitForMultipleObjectsEx
MsgWaitForMultipleObjects
MoveWindow
MonitorFromWindow
MonitorFromPoint
ModifyMenuW
ModifyMenuA
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyExA
MapVirtualKeyA
MapDialogRect
LockWindowUpdate
LoadStringW
LoadStringA
LoadMenuW
LoadMenuIndirectA
LoadMenuA
LoadKeyboardLayoutW
LoadImageW
LoadImageA
LoadIconW
LoadCursorW
LoadCursorA
LoadBitmapW
LoadBitmapA
LoadAcceleratorsA
KillTimer
IsZoomed
IsWindowUnicode
IsWindowEnabled
IsRectEmpty
IsIconic
IsDlgButtonChecked
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
IsCharLowerA
IsCharAlphaW
IsCharAlphaNumericW
IsCharAlphaA
InvertRect
InvalidateRgn
InvalidateRect
IntersectRect
InsertMenuItemA
InsertMenuA
InflateRect
InSendMessage
HideCaret
GrayStringA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowLongA
GetWindowDC
GetWindow
GetUserObjectInformationW
GetUpdateRect
GetTabbedTextExtentW
GetTabbedTextExtentA
GetSystemMenu
GetSysColorBrush
GetSysColor
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetQueueStatus
GetPropW
GetPropA
GetProcessWindowStation
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMonitorInfoA
GetMessageW
GetMessageTime
GetMessagePos
GetMessageA
GetMenuStringW
GetMenuStringA
GetMenuState
GetMenuItemInfoA
GetMenuItemID
GetMenuItemCount
GetMenuInfo
GetMenuDefaultItem
GetMenuCheckMarkDimensions
GetMenuBarInfo
GetKeyboardState
GetKeyNameTextA
SetWindowPlacement
GetForegroundWindow
GetDlgItemTextW
GetDlgItemTextA
GetDlgItemInt
GetDlgItem
GetDesktopWindow
GetDCEx
GetCursorPos
GetComboBoxInfo
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassNameA
GetClassLongA
GetClassInfoW
GetClassInfoExA
GetClassInfoA
GetCaretPos
GetAsyncKeyState
GetAncestor
GetAltTabInfoW
GetActiveWindow
FreeDDElParam
FrameRect
FlashWindowEx
FindWindowW
FindWindowExA
FindWindowA
FillRect
EqualRect
EnumDisplayMonitors
EnumDesktopWindows
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExA
DrawTextA
DrawStateA
DrawIconEx
DrawIcon
DrawFrameControl
DrawFocusRect
DrawEdge
DrawCaption
DlgDirListComboBoxW
DispatchMessageW
DispatchMessageA
DialogBoxParamA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DestroyAcceleratorTable
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
DdeReconnect
DdeFreeStringHandle
CreateWindowExW
CreateWindowExA
CreateMenu
CreateDialogIndirectParamA
CreateCaret
CreateAcceleratorTableA
CopyRect
CopyImage
CopyAcceleratorTableA
CloseClipboard
ClientToScreen
ChildWindowFromPointEx
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperBuffA
CharToOemBuffA
CharLowerBuffW
CharLowerBuffA
ChangeDisplaySettingsExW
CallWindowProcW
CallWindowProcA
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AttachThreadInput
AppendMenuW
AppendMenuA
AdjustWindowRectEx
GetDC
GetTopWindow
GetWindowTextLengthW
CharLowerW
GetSystemMetrics
GetMessageExtraInfo
CharNextA
CharNextW
IsCharUpperA
IsMenu
GetKeyboardLayout
GetCapture
IsCharUpperW
CloseWindow
CopyIcon
AnyPopup
GetClipboardOwner
GetKBCodePage
LoadCursorFromFileW
VkKeyScanW
EnumClipboardFormats
GetDoubleClickTime
GetLastActivePopup
CreatePopupMenu
IsCharLowerW
IsWindow
GetKeyState
SetWindowLongW
SetWindowLongA
SetWindowContextHelpId
SetTimer
SetThreadDesktop
SetScrollRange
SetScrollPos
SetScrollInfo
SetRectEmpty
SetRect
SetPropW
SetPropA
SetParent
SetMenuItemBitmaps
SetMenuInfo
SetMenuDefaultItem
SetMenu
SetLayeredWindowAttributes
SetKeyboardState
SetForegroundWindow
SetFocus
SetDlgItemTextA
SetDlgItemInt
SetCursorPos
SetCursor
SetClipboardData
SetClassLongA
SetCaretPos
SetCapture
SetActiveWindow
GetClipboardSequenceNumber
LoadIconA
GetMenu
GetWindowTextLengthA
DrawMenuBar
GetDialogBaseUnits
GetFocus
OpenIcon
GetCursor
GetDlgCtrlID
IsWindowVisible
CloseDesktop
LoadCursorFromFileA
IsCharAlphaNumericA
GetKeyboardType
CloseWindowStation
CharUpperA
IsGUIThread
CharLowerA
SendNotifyMessageA
SendMessageW
SendMessageA
SendIMEMessageExA
SendDlgItemMessageA
ScrollWindowEx
ScrollWindow
ScrollDC
ScreenToClient
ReuseDDElParam
RemovePropW
RemovePropA
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassW
RegisterClassExA
RegisterClassA
RedrawWindow
GetIconInfo
RealChildWindowFromPoint
LoadAcceleratorsW
ExtFloodFill
ExtSelectClipRgn
ExtTextOutA
ExtTextOutW
FillRgn
FrameRgn
GdiConvertEnhMetaFile
GdiTransparentBlt
GetBitmapBits
GetBoundsRect
GetCharWidth32A
GetCharWidth32W
GetCharWidthA
GetCharacterPlacementA
GetCharacterPlacementW
GetClipBox
GetClipRgn
GetCurrentObject
GetCurrentPositionEx
GetDIBits
GetDeviceCaps
GetFontData
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetRgnBox
GetStretchBltMode
GetSystemPaletteEntries
GetTextCharsetInfo
GetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextMetricsA
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
IntersectClipRect
LPtoDP
LineTo
ModifyWorldTransform
MoveToEx
OffsetClipRgn
OffsetRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
PATHOBJ_vEnumStartClipLines
PatBlt
PlayEnhMetaFile
ExtCreateRegion
PlayMetaFileRecord
PolyBezierTo
PolyDraw
PolyTextOutW
Polygon
Polyline
PolylineTo
PtInRegion
PtVisible
RealizePalette
RectVisible
Rectangle
RemoveFontMemResourceEx
RestoreDC
RoundRect
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipPath
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetArcDirection
SetBkColor
SetBkMode
SetBrushOrgEx
SetColorAdjustment
SetDIBColorTable
SetGraphicsMode
SetLayout
SetMapMode
SetMapperFlags
SetMetaFileBitsEx
SetPaletteEntries
SetPixel
SetPixelV
SetPolyFillMode
SetROP2
SetRectRgn
SetStretchBltMode
SetTextAlign
SetTextCharacterExtra
SetTextColor
SetTextJustification
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetWorldTransform
StartDocA
StartPage
StretchBlt
StretchDIBits
TextOutA
UnrealizeObject
ExtCreatePen
ExcludeClipRect
Escape
EnumMetaFile
EnumFontFamiliesExA
EnumFontFamiliesA
EnumEnhMetaFile
Ellipse
DeleteObject
DPtoLP
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreatePolygonRgn
CreatePenIndirect
CreatePen
CreatePalette
CreateMetaFileA
CreateHatchBrush
CreateFontIndirectA
CreateFontA
CreateEllipticRgn
CreateDIBitmap
CreateDIBSection
CreateDIBPatternBrushPt
CreateDCA
CreateCompatibleBitmap
CreateBrushIndirect
CreateBitmap
CopyMetaFileA
CombineRgn
BitBlt
ArcTo
DeleteMetaFile
GetBkColor
CreateHalftonePalette
BeginPath
GdiFlush
AddFontResourceW
EndPage
WidenPath
DeleteColorSpace
CloseMetaFile
GetEnhMetaFileW
GetPolyFillMode
GetDCPenColor
CancelDC
CloseEnhMetaFile
GetLayout
GetBkMode
CloseFigure
GetStockObject
EndPath
SaveDC
EndDoc
DeleteDC
GetFontLanguageInfo
CreateCompatibleDC
GetTextAlign
FillPath
DeleteEnhMetaFile
GetROP2
StrokePath
AbortDoc
SwapBuffers
GetPixelFormat
GetTextCharset
PlayMetaFile
CreatePatternBrush
RegDeleteValueW
AllocateAndInitializeSid
BuildTrusteeWithSidA
CopySid
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
DeregisterEventSource
EqualSid
FreeSid
GetAclInformation
GetEffectiveRightsFromAclA
GetFileSecurityA
GetLengthSid
SetSecurityDescriptorDacl
SetFileSecurityA
ReportEventA
RegisterEventSourceA
RegSetValueExW
RegSetValueExA
RegSetValueA
RegSetKeySecurity
RegQueryValueExW
RegQueryValueExA
RegQueryValueA
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegGetKeySecurity
RegEnumValueA
RegEnumKeyW
RegEnumKeyExA
RegEnumKeyA
AddAccessAllowedAce
RegDeleteValueA
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyW
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupAccountNameA
IsTextUnicode
InitializeSecurityDescriptor
InitializeAcl
GetUserNameW
GetUserNameA
GetTokenInformation
GetSidSubAuthorityCount
GetSidSubAuthority
GetSecurityInfo
GetSecurityDescriptorOwner
GetSecurityDescriptorDacl
DragQueryFileA
ShellExecuteW
ShellExecuteExW
ShellExecuteExA
ShellExecuteA
SHPathPrepareForWriteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetPathFromIDListA
SHGetMalloc
SHGetFolderPathA
SHGetFileInfoW
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
SHCreateDirectoryExW
SHCreateDirectoryExA
SHChangeNotify
SHBrowseForFolderA
SHBindToParent
SHAppBarMessage
SHAddToRecentDocs
CommandLineToArgvW
DragAcceptFiles
DragFinish
Shell_NotifyIconA
DragQueryFileW
ExtractIconA
ExtractIconEx
OleInitialize
OleIsCurrentClipboard
OleIsRunning
OleLoad
OleLockRunning
OleQueryCreateFromData
OleQueryLinkFromData
OleRegEnumVerbs
OleRegGetMiscStatus
OleRegGetUserType
OleRun
OleSave
OleSaveToStream
OleSetClipboard
OleSetContainedObject
OleSetMenuDescriptor
OleTranslateAccelerator
OleUninitialize
PropVariantCopy
ReadClassStg
ReadFmtUserTypeStg
RegisterDragDrop
ReleaseStgMedium
RevokeDragDrop
SetConvertStg
StgCreateDocfile
StgCreateDocfileOnILockBytes
StgIsStorageFile
StgOpenStorage
StgOpenStorageOnILockBytes
StringFromCLSID
StringFromGUID2
WriteClassStg
WriteClassStm
WriteFmtUserTypeStg
OleGetClipboard
OleFlushClipboard
OleDuplicateData
OleDestroyMenuDescriptor
OleCreateStaticFromData
OleCreateMenuDescriptor
OleCreateLinkToFile
OleCreateLinkFromData
OleCreateFromFile
OleCreateFromData
OleCreate
IsAccelerator
GetRunningObjectTable
GetHGlobalFromILockBytes
DoDragDrop
CreateStreamOnHGlobal
CreateOleAdviseHolder
CreateItemMoniker
CreateILockBytesOnHGlobal
CreateGenericComposite
CreateFileMoniker
CreateDataAdviseHolder
CreateBindCtx
CoUninitialize
CoTreatAsClass
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterMessageFilter
CoRegisterClassObject
CoLockObjectExternal
CoInitializeSecurity
CoInitializeEx
CoInitialize
CoGetMalloc
CoGetClassObject
CoFreeUnusedLibraries
CoDisconnectObject
CoCreateInstance
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
OleGetIconOfClass
StrStrIW
StrStrIA
StrRChrA
StrChrIW
StrChrIA
SHDeleteValueA
SHDeleteKeyA
SHAutoComplete
PathStripToRootA
PathRemoveFileSpecW
PathRemoveExtensionA
PathRelativePathToW
PathRelativePathToA
PathMatchSpecA
PathIsUNCA
PathIsRelativeA
PathIsNetworkPathW
PathIsNetworkPathA
PathFindFileNameA
PathFindExtensionA
ColorAdjustLuma
PathCompactPathExW
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ImageList_Draw
ImageList_DrawEx
ImageList_Duplicate
ImageList_GetIcon
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Remove
ImageList_ReplaceIcon
InitCommonControlsEx
_TrackMouseEvent
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
ImmSetCompositionWindow
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
LoadLibraryA
ExitProcess
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcessId
CloseHandle
LoadLibraryA
VirtualAlloc
GetProcAddress
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InterlockedCompareExchange
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedExchangeAdd
GetModuleHandleW
GetVersion
MultiByteToWideChar
WriteFile
GetFileType
GetStdHandle
GetSystemTimeAsFileTime
DeleteFiber
GetTickCount
QueryPerformanceCounter
GlobalMemoryStatus
WideCharToMultiByte
ConvertFiberToThread
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetEnvironmentVariableW
LoadLibraryW
HeapFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLastError
DeleteFileA
Sleep
ExitProcess
GetCommandLineA
HeapReAlloc
SetConsoleCtrlHandler
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
GetFullPathNameA
GetCurrentDirectoryA
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
SetFilePointer
ReadFile
RtlUnwind
GetConsoleCP
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
SetLastError
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
FlushFileBuffers
SetStdHandle
HeapSize
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
CompareStringA
CompareStringW
SetEnvironmentVariableA
CreateFileW
SetEndOfFile
GetProcessHeap
VirtualFree
GetCurrentProcess
FreeLibrary
CreateFileA
FindNextFileA
FindClose
GetLogicalDriveStringsA
FindFirstFileA
lstrcatA
GetFileAttributesA
GetDriveTypeA
GetLogicalDrives
HeapAlloc
lstrcpynA
OpenServiceA
CryptDecrypt
CryptCreateHash
CryptSetHashParam
CryptSignHashW
CryptDestroyHash
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptDestroyKey
CryptEnumProvidersW
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
RegisterEventSourceW
ReportEventW
DeregisterEventSource
CloseServiceHandle
StartServiceCtrlDispatcherA
DeleteService
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenSCManagerA
closesocket
recv
WSASetLastError
send
WSAGetLastError
WSACleanup
GetProcessWindowStation
MessageBoxW
GetUserObjectInformationW
CertCloseStore
CertFreeCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertOpenStore
CertGetCertificateContextProperty
CertDuplicateCertificateContext
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetMenuCheckMarkDimensions
IsCharAlphaA
ShowCaret
GetDesktopWindow
GetForegroundWindow
GetLastActivePopup
GetQueueStatus
CloseWindow
CharNextW
GetAsyncKeyState
VkKeyScanW
IsCharUpperA
GetCapture
GetKeyboardLayout
GetDialogBaseUnits
GetOpenClipboardWindow
LoadIconA
GetDC
GdiFlush
GetTextCharacterExtra
CreateMetaFileA
AddFontResourceA
GetTextCharset
SaveDC
AbortDoc
EndDoc
GetColorSpace
DeleteMetaFile
GetMapMode
GetStretchBltMode
CreateMetaFileW
RegQueryValueExW
RegOpenKeyW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
NetApiBufferFree
NetShareEnum
GetAdaptersInfo
WSAGetLastError
htons
connect
socket
inet_addr
WSAStartup
select
closesocket
__WSAFDIsSet
WSACleanup
ioctlsocket
CryptBinaryToStringA
GdipGetImageEncodersSize
GdipDeleteGraphics
GdipDeleteStringFormat
GdipGetImageGraphicsContext
GdipDeleteFont
GdipCreateBitmapFromScan0
GdipSetStringFormatAlign
GdipSaveImageToFile
GdipCloneBrush
GdipDrawString
GdipFree
GdipDeleteBrush
GdipAlloc
GdipDisposeImage
GdipCreateLineBrushFromRect
GdipSetStringFormatLineAlign
GdipCreateFont
GdiplusStartup
GdipGetGenericFontFamilySansSerif
GdipCreateStringFormat
GdipDeleteFontFamily
GdipGetImageEncoders
GdipFillRectangle
GdipCreateFontFamilyFromName
PathAddBackslashW
PathFindExtensionW
PathRemoveBackslashW
PathRemoveExtensionA
StrFormatByteSize64A
PathRemoveFileSpecW
WNetCloseEnum
WNetOpenEnumW
WNetEnumResourceW
WNetGetConnectionW
WNetAddConnection2W
RtlEnterCriticalSection
RtlLeaveCriticalSection
RtlDeleteCriticalSection
RtlInitializeCriticalSection
NtSetInformationThread
NtAdjustPrivilegesToken
NtOpenProcessToken
NtQueryInformationToken
RtlGetAce
NtOpenProcess
RtlQueryInformationAcl
RtlAllocateAndInitializeSid
RtlAddAce
RtlLengthSid
NtClose
RtlAdjustPrivilege
RtlFreeSid
RtlAddAccessDeniedAce
NtSetInformationProcess
RtlCreateAcl
NtWaitForSingleObject
NtSetInformationFile
RtlDosPathNameToNtPathName_U
NtCreateIoCompletion
NtRemoveIoCompletion
NtQueryInformationFile
RtlInterlockedPushEntrySList
RtlInitializeSListHead
RtlInterlockedPopEntrySList
RtlInterlockedFlushSList
RtlInitUnicodeString
NtAllocateVirtualMemory
LdrEnumerateLoadedModules
RtlAcquirePebLock
RtlReleasePebLock
malloc
calloc
free
GetLocalTime
GetProcAddress
SetThreadUILanguage
GetConsoleMode
GetWindowsDirectoryW
GetCurrentProcess
GlobalFree
GlobalAlloc
ReadFile
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
GetModuleHandleA
SetProcessShutdownParameters
SetConsoleMode
WriteFile
GetConsoleWindow
SetConsoleTitleA
FindVolumeClose
SetVolumeMountPointW
FindFirstVolumeW
QueryDosDeviceW
GetVersion
CreateProcessA
lstrcmpiA
GetCurrentProcessId
MoveFileExW
Process32Next
CreateToolhelp32Snapshot
OpenProcess
GetUserDefaultUILanguage
TerminateProcess
GetSystemDefaultUILanguage
Process32First
LoadLibraryA
OpenMutexA
CreateMutexA
GetTickCount
Sleep
GetTempFileNameW
GetTempPathW
GetDriveTypeW
lstrcmpiW
ExitProcess
CreateThread
CloseHandle
DeleteFileW
GetDiskFreeSpaceExW
SetFileAttributesW
ExitThread
GetFileAttributesW
CreateFileW
FindClose
SetConsoleTextAttribute
WaitForMultipleObjects
FindNextFileW
FindFirstFileExW
GetLogicalDrives
AllocConsole
SetConsoleCtrlHandler
wsprintfW
GetMessageW
GetSystemMenu
SystemParametersInfoW
DeleteMenu
wsprintfA
CharUpperA
SetWindowLongA
PeekMessageW
GetWindowLongA
wvsprintfA
RegisterHotKey
FlashWindow
SetLayeredWindowAttributes
EnableMenuItem
MessageBoxA
GetSystemMetrics
GetShellWindow
GetWindowThreadProcessId
IsWindowVisible
ShowWindow
CharLowerBuffW
CloseServiceHandle
RegQueryValueExW
RegDeleteValueW
RegSetValueExA
RegSetValueExW
RegCreateKeyExA
RegQueryValueExA
OpenProcessToken
DuplicateToken
OpenThreadToken
GetTokenInformation
SetSecurityInfo
RegOpenKeyA
RegCloseKey
GetSecurityInfo
EnumDependentServicesA
SetThreadToken
OpenSCManagerA
ControlService
QueryServiceStatusEx
OpenServiceA
SetFileSecurityW
CryptAcquireContextW
SetSecurityDescriptorOwner
CryptGenRandom
LookupPrivilegeValueA
CreateWellKnownSid
CheckTokenMembership
InitializeSecurityDescriptor
CryptReleaseContext
SHEmptyRecycleBinW
ShellExecuteW
SHGetFolderPathW
ShellExecuteExA
ShellExecuteExW
CommandLineToArgvW
CoGetObject
CoUninitialize
CoInitializeEx
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
SetFileSecurityA
RegOpenKeyExA
RegEnumValueA
SHGetFileInfoA
SHFileOperationA
SHGetPathFromIDListA
ShellExecuteExA
SHGetSpecialFolderLocation
SHBrowseForFolderA
IIDFromString
OleInitialize
OleUninitialize
CoCreateInstance
CoTaskMemFree
ord17
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
SetClipboardData
CharPrevA
CallWindowProcA
PeekMessageA
DispatchMessageA
MessageBoxIndirectA
GetDlgItemTextA
SetDlgItemTextA
GetSystemMetrics
CreatePopupMenu
AppendMenuA
TrackPopupMenu
FillRect
EmptyClipboard
LoadCursorA
GetMessagePos
CheckDlgButton
GetSysColor
SetCursor
GetWindowLongA
SetClassLongA
SetWindowPos
IsWindowEnabled
GetWindowRect
GetSystemMenu
EnableMenuItem
RegisterClassA
ScreenToClient
EndDialog
GetClassInfoA
SystemParametersInfoA
CreateWindowExA
ExitWindowsEx
DialogBoxParamA
CharNextA
SetTimer
DestroyWindow
CreateDialogParamA
SetForegroundWindow
SetWindowTextA
PostQuitMessage
SendMessageTimeoutA
ShowWindow
wsprintfA
GetDlgItem
FindWindowExA
IsWindow
GetDC
SetWindowLongA
LoadImageA
InvalidateRect
ReleaseDC
EnableWindow
BeginPaint
SendMessageA
DefWindowProcA
DrawTextA
GetClientRect
EndPaint
IsWindowVisible
CloseClipboard
OpenClipboard
SetBkMode
SetBkColor
GetDeviceCaps
CreateFontIndirectA
CreateBrushIndirect
DeleteObject
SetTextColor
SelectObject
GetExitCodeProcess
WaitForSingleObject
GetProcAddress
GetSystemDirectoryA
WideCharToMultiByte
MoveFileExA
ReadFile
GetTempFileNameA
WriteFile
RemoveDirectoryA
CreateProcessA
CreateFileA
GetLastError
CreateThread
CreateDirectoryA
GlobalUnlock
GetDiskFreeSpaceA
GlobalLock
SetErrorMode
GetVersion
lstrcpynA
GetCommandLineA
GetTempPathA
lstrlenA
SetEnvironmentVariableA
ExitProcess
GetWindowsDirectoryA
GetCurrentProcess
GetModuleFileNameA
CopyFileA
GetTickCount
Sleep
GetFileSize
GetFileAttributesA
SetCurrentDirectoryA
SetFileAttributesA
GetFullPathNameA
GetShortPathNameA
MoveFileA
CompareFileTime
SetFileTime
SearchPathA
lstrcmpiA
lstrcmpA
CloseHandle
GlobalFree
GlobalAlloc
ExpandEnvironmentStringsA
LoadLibraryExA
FreeLibrary
lstrcpyA
lstrcatA
FindClose
MultiByteToWideChar
WritePrivateProfileStringA
GetPrivateProfileStringA
SetFilePointer
GetModuleHandleA
FindNextFileA
FindFirstFileA
DeleteFileA
MulDiv
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WriteConsoleW
GetCurrentProcess
CopyFileW
GetTickCount
CreateProcessW
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
OpenProcess
WaitForSingleObject
TerminateProcess
FindClose
GetEnvironmentVariableW
GetLogicalDrives
MoveFileW
GetProcessHeap
SetFilePointerEx
HeapAlloc
CloseHandle
GetLastError
CreateFileW
WriteFile
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
GetFileType
GetTimeZoneInformation
EnumSystemLocalesW
HeapFree
GetFileSizeEx
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetStdHandle
ReadFile
OpenMutexW
Sleep
CreateMutexW
GetModuleFileNameW
SetEnvironmentVariableW
EncodePointer
DecodePointer
RaiseException
GetCurrentThreadId
IsProcessorFeaturePresent
QueueUserWorkItem
GetModuleHandleExW
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
QueryPerformanceCounter
QueryPerformanceFrequency
FormatMessageW
WideCharToMultiByte
MultiByteToWideChar
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
WaitForSingleObjectEx
GetStringTypeW
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
LocalFree
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
DuplicateHandle
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW
RtlUnwind
ExitProcess
CryptDestroyKey
RegCreateKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
CryptReleaseContext
CryptGenKey
CryptImportKey
OpenProcessToken
GetTokenInformation
CloseServiceHandle
OpenSCManagerW
DeleteService
ControlService
EnumDependentServicesW
StartServiceW
OpenServiceW
QueryServiceStatusEx
CryptExportKey
CryptAcquireContextW
CryptEncrypt
CryptDuplicateKey
RegDeleteValueW
SHEmptyRecycleBinW
CLSIDFromString
IIDFromString
CoInitializeEx
CoGetObject
CoInitialize
CoUninitialize
CoCreateInstance
CoInitializeSecurity
SysAllocStringByteLen
VariantClear
SysAllocString
SysStringByteLen
VariantInit
SysFreeString
CryptStringToBinaryA
WNetGetConnectionW
NetApiBufferFree
NetShareEnum
IcmpSendEcho
IcmpCloseHandle
GetAdaptersInfo
IcmpCreateFile
inet_addr
RmShutdown
RmRegisterResources
RmStartSession
RmGetList
RmEndSession
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
__vbaVarSub
__vbaVarTstGt
__vbaStrI2
__vbaI2Sgn
_CIcos
_adj_fptan
__vbaVarMove
__vbaStrI4
__vbaVarVargNofree
__vbaAryMove
__vbaFreeVar
ord588
__vbaStrVarMove
ord589
__vbaEnd
__vbaFreeVarList
_adj_fdiv_m64
__vbaRaiseEvent
__vbaFreeObjList
ord516
_adj_fprem1
__vbaCopyBytes
__vbaStrCat
ord660
ord553
__vbaSetSystemError
ord662
__vbaHresultCheckObj
ord557
_adj_fdiv_m32
__vbaAryDestruct
__vbaExitProc
ord593
ord594
__vbaOnError
__vbaObjSet
ord595
_adj_fdiv_m16i
__vbaObjSetAddref
_adj_fdivr_m16i
__vbaVarIndexLoad
ord598
__vbaBoolVar
__vbaVarTstLt
_CIsin
__vbaErase
ord632
__vbaChkstk
EVENT_SINK_AddRef
__vbaVarTstEq
__vbaDateR8
__vbaR4Str
__vbaObjVar
ord561
__vbaPrintObj
DllFunctionCall
__vbaVarLateMemSt
__vbaFpUI1
__vbaStrR4
__vbaLbound
__vbaRedimPreserve
_adj_fpatan
__vbaR4Var
__vbaRedim
EVENT_SINK_Release
ord601
_CIsqrt
__vbaObjIs
EVENT_SINK_QueryInterface
__vbaStrUI1
__vbaVarMul
__vbaExceptHandler
_adj_fprem
_adj_fdivr_m64
ord608
__vbaFPException
__vbaInStrVar
ord319
__vbaStrVarVal
__vbaUbound
__vbaVarCat
ord535
__vbaI2Var
ord537
ord538
_CIlog
__vbaR8Str
__vbaVar2Vec
__vbaNew2
_adj_fdiv_m32i
_adj_fdivr_m32i
__vbaStrCopy
__vbaI4Str
__vbaFreeStrList
_adj_fdivr_m32
__vbaR8Var
_adj_fdiv_r
ord685
ord100
__vbaVarTstNe
__vbaI4Var
ord610
__vbaLateMemCall
__vbaVarAdd
__vbaAryLock
ord320
__vbaStrToAnsi
__vbaVarDup
ord321
__vbaFpI2
__vbaVarLateMemCallLd
__vbaVarTstGe
__vbaVarCopy
__vbaFpI4
ord617
_CIatan
__vbaI2ErrVar
__vbaStrMove
ord619
__vbaR8IntI4
ord542
_allmul
__vbaVarLateMemCallSt
ord545
_CItan
ord546
__vbaAryUnlock
__vbaFPInt
_CIexp
__vbaI4ErrVar
__vbaFreeStr
__vbaFreeObj
ord581
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=DES SP Z O O,O=DES SP Z O O,POSTALCODE=30-053,STREET=Ul. Kronikarza Galla 5/1,L=Krakow,C=PL
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
timeEndPeriod
timeBeginPeriod
WSAGetOverlappedResult
WriteFile
WriteConsoleW
WaitForSingleObject
VirtualFree
VirtualAlloc
SwitchToThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
LoadLibraryA
LoadLibraryW
GetSystemInfo
GetStdHandle
GetQueuedCompletionStatus
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
CN=S.O.M GmbH,O=S.O.M GmbH,POSTALCODE=8490,STREET=Gewerbepark A 1,L=Bad Radkersburg,ST=Steiermark,C=AT
CN=Sectigo RSA Code Signing CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
ReadFile
FindFirstFileW
GetFileSizeEx
SetLastError
FindNextFileW
WriteFile
FindClose
WaitForSingleObject
CreateFileW
Sleep
GetLastError
lstrcatW
CloseHandle
CreateThread
SetFilePointerEx
lstrcpyW
MoveFileW
GetDriveTypeW
GetCommandLineW
ExitProcess
HeapFree
CreateMutexA
GetFileAttributesW
GlobalAlloc
HeapAlloc
GetProcessHeap
LoadLibraryA
LoadLibraryW
GetProcAddress
WriteConsoleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
GetCommandLineA
CompareStringW
LCMapStringW
GetFileType
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
DecodePointer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
GetProcAddress
SetErrorMode
LoadLibraryA
GetModuleHandleA
GetClipboardData
GetMenuContextHelpId
IsCharUpperW
GetOpenClipboardWindow
CloseWindow
GetDialogBaseUnits
CloseDesktop
GetListBoxInfo
IsWindow
InSendMessage
GetWindowTextLengthA
GetSystemMetrics
GetMessageExtraInfo
GetActiveWindow
IsCharLowerA
GetWindowDC
LoadIconA
IsWindowVisible
GetEnhMetaFileW
GetGraphicsMode
GdiGetBatchLimit
CreateHalftonePalette
GetPixelFormat
CloseFigure
CloseMetaFile
WidenPath
CreateCompatibleDC
FillPath
GetDCBrushColor
RegQueryValueExW
RegOpenKeyW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CreateThread
ExitProcess
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
GetShortPathNameA
LoadLibraryA
RtlZeroMemory
Sleep
lstrcatA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateFileA
GetFileAttributesExW
FindFirstFileW
FindNextFileW
ReleaseMutex
CreateMutexA
OpenMutexA
FreeConsole
HeapAlloc
HeapFree
GetProcessHeap
GetTempPathA
CreateThread
WaitForMultipleObjects
GetLastError
SetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileW
ReadConsoleW
WriteConsoleW
GetDriveTypeW
GetModuleFileNameA
GetLogicalDriveStringsW
CloseHandle
FindClose
ExitProcess
WriteFile
SetStdHandle
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
InitializeSListHead
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
InterlockedPushEntrySList
RaiseException
RtlUnwind
FreeLibrary
LoadLibraryExW
MoveFileExW
HeapReAlloc
GetModuleHandleExW
GetStdHandle
GetCommandLineA
GetCommandLineW
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
HeapSize
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEndOfFile
wsprintfW
wsprintfA
CryptReleaseContext
CryptAcquireContextA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
CryptGenRandom
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
WaitForSingleObject
lstrcmpiW
lstrlenW
VerSetConditionMask
VerifyVersionInfoW
lstrcmpA
SetThreadPriority
MessageBoxW
SysAllocString
SysFreeString
VariantInit
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CloseHandle
WaitForSingleObject
lstrcmpiW
lstrlenW
VerSetConditionMask
VerifyVersionInfoW
lstrcmpA
SetThreadPriority
MessageBoxW
SysAllocString
SysFreeString
VariantInit
VariantClear
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetTickCount
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcatW
lstrlenA
lstrlenW
CreateEventW
LoadLibraryW
CreateProcessW
GetStartupInfoW
GetDriveTypeW
GetSystemDirectoryW
GetWindowsDirectoryW
GetFullPathNameW
CreateFileW
SetFileAttributesW
CloseHandle
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
GetVolumeInformationA
GetVolumeInformationW
GetComputerNameW
FindFirstVolumeA
FindNextVolumeA
FindVolumeClose
SetVolumeMountPointA
GetVolumePathNamesForVolumeNameA
WTSGetActiveConsoleSessionId
MultiByteToWideChar
GetLocaleInfoW
GetNativeSystemInfo
FindClose
SetFilePointerEx
ReadFile
DeviceIoControl
WriteFile
GetFileSizeEx
UnlockFile
LockFile
GetLogicalDrives
Sleep
WaitForSingleObject
GetLastError
TerminateProcess
ExitProcess
GetCurrentProcess
GetProcessHeap
HeapFree
HeapAlloc
VirtualFree
VirtualAlloc
LocalFree
GetFileAttributesW
GetProcAddress
wsprintfA
wsprintfW
CryptGenRandom
CryptReleaseContext
QueryServiceStatusEx
OpenServiceA
OpenSCManagerA
EnumServicesStatusA
EnumDependentServicesA
ControlService
CloseServiceHandle
CryptEncrypt
CryptDestroyKey
CryptAcquireContextW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
DuplicateTokenEx
CreateProcessAsUserW
GetUserNameW
SetTokenInformation
OpenProcessToken
SHGetSpecialFolderPathW
StrStrIA
PathFindExtensionW
StrToIntA
CryptDecodeObjectEx
CryptStringToBinaryW
CryptBinaryToStringA
CryptImportPublicKeyInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateEventA
LeaveCriticalSection
FileTimeToSystemTime
EnterCriticalSection
FindClose
SetThreadPriorityBoost
GetSystemInfo
WaitForMultipleObjects
FindNextFileW
SetThreadAffinityMask
SetProcessShutdownParameters
GetSystemTime
ReadFile
Process32FirstW
Process32NextW
CreateToolhelp32Snapshot
GetSystemWindowsDirectoryA
CreateFileW
SetFileAttributesW
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
DecodePointer
TerminateProcess
HeapFree
TlsGetValue
TlsSetValue
InterlockedIncrement
GetModuleHandleW
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
IsProcessorFeaturePresent
HeapAlloc
HeapReAlloc
MultiByteToWideChar
LoadLibraryW
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
SetFilePointer
GetModuleFileNameA
WriteConsoleW
SetStdHandle
GetCurrentThread
SetEvent
WaitForSingleObject
GetLogicalDriveStringsW
SystemTimeToTzSpecificLocalTime
FindFirstFileW
GetProcessHandleCount
GetProcessTimes
CloseHandle
GetSystemTimes
SwitchToThread
SetLastError
GetStdHandle
FlushFileBuffers
WriteFile
lstrlenA
GetSystemWindowsDirectoryW
GetEnvironmentVariableW
GetCurrentProcessId
GetLastError
Sleep
SetProcessPriorityBoost
GetTickCount
GetCurrentProcess
CreateMutexW
MoveFileW
DeleteFileA
lstrcpynA
Process32First
OpenProcess
Process32Next
GetModuleHandleA
GetComputerNameA
GetNativeSystemInfo
SetErrorMode
GetSystemDirectoryW
GetVolumeInformationA
GetVersionExW
GetEnvironmentVariableA
CreateThread
GetProcessHeap
MoveFileExA
SetFilePointerEx
GetFileSizeEx
FindFirstFileA
RemoveDirectoryA
SetFileAttributesA
FindNextFileA
ExitProcess
wsprintfW
CharLowerA
CharUpperA
CryptGetHashParam
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptHashData
OpenProcessToken
GetTokenInformation
SetKernelObjectSecurity
GetUserNameA
RegQueryValueExA
CryptAcquireContextW
CryptGenRandom
ControlService
OpenSCManagerA
QueryServiceStatusEx
OpenServiceW
CloseServiceHandle
CryptReleaseContext
SHGetFolderPathW
ShellExecuteExW
StringFromGUID2
GetModuleFileNameExW
PathAddBackslashA
PathFindFileNameA
SHRegSetUSValueA
PathAppendA
PathIsDirectoryA
PathFindFileNameW
StrCpyNW
StrCpyW
PathFileExistsW
StrCatW
wvnsprintfA
StrCmpW
StrCmpIW
StrStrIW
PathFindExtensionW
StrStrIA
StrCatBuffA
StrNCatW
wnsprintfA
WNetEnumResourceW
WNetOpenEnumW
WNetCloseEnum
NetApiBufferFree
NetWkstaGetInfo
NetServerGetInfo
ZwQueryInformationProcess
ZwUnmapViewOfSection
?ReflectiveLoader@@YGKPAX@Z
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetCurrentProcess
TerminateProcess
CreateMutexA
WaitForSingleObject
OpenProcess
CreateToolhelp32Snapshot
Sleep
OpenMutexA
Process32NextW
GetCurrentThread
Process32FirstW
GetThreadContext
CreateProcessA
GetLogicalDrives
IsDebuggerPresent
CheckRemoteDebuggerPresent
GetQueuedCompletionStatus
GetSystemInfo
CreateThread
CreateIoCompletionPort
WriteConsoleW
GetConsoleMode
PostQueuedCompletionStatus
FindClose
FindNextFileW
FindFirstFileW
GetProcessHeap
MoveFileExW
SetFilePointerEx
HeapAlloc
GetLastError
SetFileAttributesW
GetFileAttributesW
HeapFree
GetFileSizeEx
ReadFile
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
GetModuleHandleW
CloseHandle
HeapReAlloc
HeapSize
MultiByteToWideChar
CreateFileW
GetUserDefaultLocaleName
GetTickCount
WriteFile
GetStringTypeW
SetStdHandle
DecodePointer
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
LCMapStringW
LoadStringW
EnumDependentServicesW
CryptGenKey
CryptImportKey
CryptSetKeyParam
CryptGenRandom
CryptEncrypt
CryptAcquireContextW
CloseServiceHandle
OpenSCManagerW
ControlService
CryptReleaseContext
OpenServiceW
QueryServiceStatusEx
CryptDestroyKey
SHEmptyRecycleBinW
CryptStringToBinaryA
WNetGetConnectionW
IcmpCloseHandle
GetAdaptersInfo
IcmpCreateFile
IcmpSendEcho
NetShareEnum
NetDfsEnum
NetApiBufferFree
htons
WSACleanup
WSAStartup
inet_addr
getnameinfo
RmStartSession
RmShutdown
RmEndSession
RmGetList
RmRegisterResources
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE