GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Static task
static1
Behavioral task
behavioral1
Sample
d7a61bd41dad6d54267f24ac5f03b14db3fd81837567323e38960910148b9be8.dll
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d7a61bd41dad6d54267f24ac5f03b14db3fd81837567323e38960910148b9be8.dll
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
d7a61bd41dad6d54267f24ac5f03b14db3fd81837567323e38960910148b9be8
-
Size
1.8MB
-
MD5
0d5e3229b4f929157fb2bb1018ba50e9
-
SHA1
fb9b61c4711c0ccd5b04752ea5dd5de39b19ee76
-
SHA256
d7a61bd41dad6d54267f24ac5f03b14db3fd81837567323e38960910148b9be8
-
SHA512
8badc2d606353996b21f2f61367e187ea986d9c6158e2b80feba3dd98214ecc01131d4d6cedb19cc37d86880df7f78f47257a5842ca96cbd6a2052a11f3c1e17
-
SSDEEP
49152:CQW6+xsLLRLSF9VWmiO9JHv2MTpno+bLbjUg0BxYy:pLnRLSF9VPiO9Fv28pno+bLbj
Score
N/A
Malware Config
Signatures
Files
-
d7a61bd41dad6d54267f24ac5f03b14db3fd81837567323e38960910148b9be8.dll windows x86
788112cecc494bbe1f4d6df06cbb22c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
_onexit
__dllonexit
_except_handler3
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
??3@YAXPAX@Z
??0exception@@QAE@XZ
??1exception@@UAE@XZ
??_V@YAXPAX@Z
__CxxFrameHandler
??2@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
??8type_info@@QBEHABV0@@Z
_CxxThrowException
_purecall
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
memmove
__RTDynamicCast
??_U@YAPAXI@Z
free
?terminate@@YAXXZ
??1type_info@@UAE@XZ
strncpy
kernel32
Sleep
DisableThreadLibraryCalls
GetModuleHandleA
LoadLibraryExA
CreateFileA
ReadFile
CloseHandle
GetModuleFileNameA
InterlockedExchange
svx680mi
ord6935
ord6933
ord6936
ord6934
ord13338
ord13203
ord13288
ord13290
ord13277
ord13293
ord13281
ord13086
ord13289
ord13276
ord12941
ord12937
ord12942
ord13294
ord13297
ord13296
ord13298
ord12944
ord2131
ord13353
ord12959
ord12951
ord12957
ord15786
ord13323
ord12949
ord12953
ord12943
ord13315
ord12958
ord12946
ord12954
ord13674
ord13470
ord13332
ord13568
ord13421
ord13420
ord13662
ord13619
ord13617
ord13616
ord13615
ord13498
ord13614
ord13613
ord13506
ord13612
ord13610
ord13608
ord13607
ord13606
ord13605
ord13604
ord13500
ord13501
ord13603
ord13602
ord13601
ord13600
ord13599
ord13598
ord13597
ord13596
ord13595
ord13594
ord13497
ord13593
ord13592
ord13591
ord13590
ord13589
ord13588
ord13587
ord13586
ord13503
ord13502
ord13504
ord13585
ord13584
ord13583
ord13505
ord13582
ord13581
ord13580
ord13579
ord13578
ord13576
ord13575
ord13574
ord13507
ord13573
ord13572
ord13571
ord13570
ord13569
ord13083
ord13292
ord13275
ord13284
ord13351
ord13471
ord13541
ord13655
ord13396
ord13136
ord13333
ord13540
ord13418
ord13417
ord13508
ord13494
ord13544
ord13539
ord13538
ord13495
ord13537
ord13535
ord13534
ord13533
ord13532
ord13531
ord13530
ord13529
ord13528
ord13527
ord13496
ord13526
ord13525
ord13524
ord13523
ord13522
ord13521
ord13520
ord13519
ord13518
ord13517
ord13516
ord13515
ord13514
ord13513
ord13512
ord13511
ord13510
ord13509
ord13609
ord13621
ord2125
ord2129
ord2126
ord2127
ord2128
ord2123
ord2121
ord2037
ord13419
ord13611
ord13543
ord13577
ord13620
ord13445
ord15718
ord13458
ord13329
ord13352
ord13373
ord13457
ord13356
ord13412
ord13416
ord13459
ord13336
ord13337
ord13384
ord13368
ord13401
ord13456
ord13455
ord13454
ord13432
ord13349
ord13313
ord13350
ord13320
ord13346
ord13345
ord13389
ord13433
ord13358
ord13383
ord2038
ord13328
ord13357
ord13342
ord13331
ord13311
ord13366
ord13397
ord13343
ord15715
ord13436
ord13452
ord13379
ord13362
ord13403
ord13363
ord13451
ord13405
ord13450
ord13378
ord13434
ord13435
ord13370
ord15716
ord13327
ord13449
ord13448
ord13387
ord13334
ord13386
ord15719
ord13476
ord13468
ord13481
ord13473
ord13425
ord13472
ord13423
ord13469
ord12929
ord12940
ord12933
ord12932
ord12931
ord12930
ord3986
ord12947
ord13280
ord13291
ord12961
ord13306
ord12955
ord15527
ord12948
ord12952
ord2036
ord2124
ord2133
ord2136
ord2075
ord2003
ord2045
ord2044
ord2043
ord2042
ord2041
ord2040
ord2039
sfx680mi
ord2949
ord2978
ord1372
ord267
ord268
ord269
ord1556
ord2642
ord2644
ord2647
ord2641
ord3290
ord3051
ord2976
ord2927
ord3289
ord2904
ord2902
ord371
ord372
ord376
ord2934
ord2826
ord2832
ord2828
ord2950
ord2981
ord2974
ord502
ord608
ord3504
ord1090
ord3062
ord3463
ord2661
ord2930
ord2929
ord2928
ord3202
ord3203
ord2960
ord2947
ord2940
ord2948
ord2955
ord3042
ord2640
ord2977
ord2989
ord2965
ord2961
ord3416
ord2966
ord2953
ord2954
ord3221
ord3222
ord3220
ord2665
ord3292
ord2635
ord1368
svt680mi
ord3628
ord3424
ord9978
ord4019
ord4021
ord3958
ord3896
ord3883
ord3897
ord3909
ord3937
ord3947
ord3915
ord3913
ord3488
ord3900
ord3890
ord3933
ord3911
ord3885
ord3540
ord3970
ord3927
ord3975
ord3906
ord3930
ord3939
ord3918
ord3968
ord3948
ord3978
ord3960
ord3959
ord3949
ord3991
ord3950
ord3893
ord3892
ord3891
ord3884
ord3605
ord3889
ord4016
ord3983
ord3997
ord3646
ord3898
ord3929
ord3928
ord3886
ord3887
ord3910
ord4015
ord4014
ord4007
ord3990
ord4006
ord2338
ord2368
ord3489
ord5748
ord5728
ord5736
ord5735
ord5731
ord5724
ord5732
ord5734
ord5738
ord5725
ord5729
ord5739
ord5737
ord5683
ord5684
ord5696
ord5695
ord5707
ord5708
ord5709
ord5704
ord5691
ord5690
ord5689
ord5688
ord5687
ord5686
ord5685
ord5703
ord5718
ord5706
ord5694
ord5623
ord5624
ord5633
ord5632
ord5643
ord5647
ord5635
ord5627
ord5626
ord5641
ord5644
ord5646
ord5657
ord5638
ord5658
ord5648
ord5628
ord5630
ord5636
ord5637
ord5631
ord5733
ord5722
ord2340
ord2105
ord2106
ord2107
ord2125
ord2124
ord2371
ord2386
ord2100
ord2393
ord2383
ord2111
ord3880
ord4024
ord4464
ord4463
ord4462
ord4491
ord4461
ord4460
ord4492
ord4458
ord4457
ord4494
ord4456
ord2407
ord4455
ord4473
ord4472
ord3552
ord3881
ord2403
ord2438
ord6116
ord2317
ord2316
ord2315
ord2113
ord2112
ord2126
ord3961
ord3602
ord3903
ord3962
ord2374
ord3816
ord5167
ord5160
ord5158
ord5157
ord5166
ord5164
ord5159
ord5172
ord5173
ord5171
ord5165
ord5176
ord6444
ord6473
ord6415
ord6416
ord6417
ord6435
ord9733
ord3288
ord6519
ord3261
ord6452
ord6492
ord6738
ord3217
ord3225
ord6686
ord6443
ord6770
ord6816
ord6475
ord6160
ord3894
ord3919
ord3966
ord3895
ord3956
ord3882
ord3955
ord3577
ord3916
ord3924
ord3578
ord3946
ord4001
ord3585
ord3914
ord3912
ord3917
ord3627
ord9611
ord3575
ord2337
ord2312
ord2372
ord2311
ord2310
ord2309
ord2308
ord2307
ord2306
ord2327
ord2352
ord2351
ord2350
ord2128
ord2127
ord2388
ord2384
ord5147
ord5144
ord5154
ord5142
ord5153
ord5135
ord5136
ord5137
ord5138
ord5141
ord5145
ord5150
ord5148
ord5140
ord4956
ord4931
ord4929
ord4928
ord3017
ord4966
ord3015
ord10096
ord4981
ord4958
ord4926
ord4960
ord4953
ord4952
ord4921
ord4920
ord4935
ord4917
ord4934
ord4932
ord4969
ord4970
ord4980
ord9932
ord9942
ord9931
ord9930
ord2709
ord3629
ord2836
ord2775
ord2773
ord9939
ord6864
ord6865
ord6882
ord6248
ord6276
ord10036
ord10037
ord6646
ord6713
ord6727
ord3280
ord6737
ord6496
ord7794
ord7672
ord7660
ord7798
ord7249
ord7297
ord7801
ord7721
ord7600
ord7607
ord7655
ord7692
ord7799
ord7162
ord7237
ord7213
ord8654
ord8718
ord8771
ord8890
ord7868
ord8632
ord8601
ord8774
ord8933
ord8667
ord8664
ord8665
ord8608
ord8610
ord8913
ord8784
ord8855
ord8662
ord8936
ord8652
ord7618
ord7616
ord7617
ord7129
ord7127
ord7619
ord7610
ord7689
ord7245
ord7161
ord7244
ord7130
ord7144
ord7669
ord7620
ord7253
ord7247
ord7693
ord7623
ord7659
ord7730
ord7735
ord2385
ord6283
ord6288
ord6250
ord6261
ord6257
ord6291
ord6450
ord6637
ord6793
ord6648
ord6437
ord6649
ord6438
ord6604
ord6605
ord6643
ord6518
ord6777
ord6629
ord6780
ord2771
ord2772
ord2811
ord2812
ord3010
ord3011
ord3012
ord3013
ord3014
ord6673
ord6672
ord9706
ord9711
ord9607
ord9606
ord9605
ord9604
ord9603
ord9709
ord9708
ord9707
ord9705
ord9704
ord9703
ord9710
ord9713
ord9702
ord9701
ord9700
ord9699
ord9608
ord9602
ord9712
ord9698
ord9697
ord9696
ord5459
ord5460
ord5461
ord5462
ord5463
ord5464
ord5465
ord5466
ord5467
ord5468
ord5469
ord5470
ord5512
ord6792
ord6692
ord6721
ord3262
ord6791
ord6606
ord6608
ord6765
ord6464
ord6666
ord9935
ord6887
ord6876
ord6869
ord6884
ord6866
ord6872
ord6875
ord6499
ord6313
ord6305
ord10146
ord6296
ord3428
ord5507
ord7856
ord7835
ord7852
ord7853
ord7854
ord7855
ord7857
ord7859
ord7851
ord7844
ord7805
ord7807
ord7829
ord7833
ord7818
ord7806
ord7822
ord7814
ord7811
ord6607
ord6620
ord6706
ord6639
ord3845
ord3846
ord3847
ord3848
ord3849
ord3850
ord3851
ord3871
ord3844
ord3549
ord3520
ord3675
ord3676
ord3877
ord3677
ord3678
ord3679
ord3680
ord3923
ord3461
ord3921
ord6857
ord6822
ord6823
ord6824
ord6825
ord6826
ord6827
ord6828
ord6829
ord6830
ord6831
ord6832
tk680mi
ord622
ord324
ord608
ord446
ord447
ord448
ord449
ord450
ord453
ord454
ord455
ord456
ord457
ord458
ord459
ord665
ord666
ord667
ord668
ord669
ord670
ord460
ord461
ord462
ord463
ord464
ord465
ord466
ord467
ord468
ord469
ord470
ord471
ord472
ord473
ord474
ord475
ord476
ord440
ord439
ord477
ord478
ord479
ord480
ord481
ord483
ord484
ord485
ord486
ord487
ord488
ord671
ord672
ord438
ord491
ord437
ord492
ord664
ord663
ord662
ord505
ord445
ord508
ord503
ord140
ord141
ord142
ord143
ord144
ord145
ord146
ord723
ord724
ord725
ord300
ord269
ord268
ord265
ord267
ord266
ord264
ord263
ord262
ord301
ord302
ord261
ord259
ord294
ord303
ord258
ord257
ord256
ord292
ord255
ord254
ord253
ord250
ord249
ord248
ord247
ord305
ord291
ord306
ord716
ord308
ord275
ord274
ord273
ord272
ord271
ord270
ord290
ord289
ord288
ord287
ord286
ord285
ord284
ord283
ord282
ord281
ord280
ord279
ord246
ord245
ord244
ord243
ord242
ord278
ord277
ord109
ord105
ord103
ord115
ord101
ord100
ord99
ord98
ord97
ord96
ord93
ord112
ord104
ord90
ord87
ord119
ord107
ord108
ord120
ord113
ord82
ord83
ord134
ord121
ord118
ord114
ord102
ord116
ord95
ord94
ord117
ord296
ord297
ord298
ord299
ord260
ord252
ord251
ord307
ord309
ord55
ord54
ord310
ord295
ord730
ord293
ord304
ord616
ord615
vcl680mi
ord5965
ord5964
ord5963
ord5825
ord5824
ord5961
ord5960
ord5959
ord5958
ord5823
ord5822
ord5821
ord5820
ord5915
ord7417
ord5819
ord5818
ord5927
ord5817
ord7859
ord5816
ord5919
ord7424
ord7425
ord7358
ord7429
ord7359
ord7366
ord7420
ord7360
ord7437
ord7361
ord7421
ord7436
ord7435
ord7422
ord7423
ord7430
ord7432
ord5814
ord7362
ord7363
ord7364
ord7365
ord7418
ord7427
ord7428
ord5813
ord5812
ord5811
ord5948
ord5952
ord5938
ord1357
ord5939
ord1355
ord5949
ord1353
ord1352
ord1351
ord5951
ord5950
ord4670
ord4645
ord5194
ord5503
ord5502
ord5505
ord5504
ord404
ord4664
ord5609
ord366
ord5183
ord4875
ord2205
ord2206
ord2207
ord2212
ord2213
ord2216
ord2221
ord2220
ord2222
ord2226
ord2227
ord2217
ord2186
ord2229
ord3243
ord4956
ord807
ord3513
ord5742
ord5726
ord5729
ord4207
ord5743
ord1247
ord1248
ord5698
ord7644
ord4131
ord6475
ord4142
ord5447
ord4150
ord4129
ord4128
ord4127
ord4214
ord6483
ord6478
ord5723
ord5966
ord5905
ord5810
ord7426
ord5953
ord5954
ord7860
ord5955
ord5956
ord5957
ord5962
ord5944
ord5992
ord5839
ord5237
ord5880
ord5845
ord5841
ord5771
ord7858
ord5776
ord5085
ord1031
ord5367
ord4583
ord4587
ord4585
ord5672
ord1267
ord4960
ord2419
ord2457
ord1724
ord6620
ord6644
ord5239
ord5240
ord5673
ord5781
ord4544
ord5848
ord5779
ord5775
ord5844
ord2415
ord2163
ord2360
ord4999
ord5108
ord5039
ord5027
ord4412
ord5514
ord5025
ord2380
ord2378
ord6491
ord3242
ord5745
ord5712
ord5664
ord6084
ord6260
ord6777
ord6692
ord6682
ord6635
ord6636
ord6669
ord4211
ord5535
ord963
ord6925
ord4532
ord4425
ord4401
ord4404
ord70
ord1171
ord5757
ord5611
ord5758
ord1148
ord808
ord3488
ord4365
ord4360
ord4344
ord4343
ord4342
ord4341
ord7346
ord4340
ord7383
ord7382
ord7381
ord4339
ord4338
ord4337
ord4336
ord4335
ord4334
ord4333
ord4332
ord4331
ord4330
ord4329
ord806
ord775
ord826
ord813
ord832
ord4203
ord4548
ord5291
ord4215
ord3430
ord6437
ord5562
ord5224
ord5256
ord3700
ord4892
ord4893
ord4545
ord4547
ord4202
ord5184
ord2233
ord2171
ord3429
ord6654
ord5705
ord5707
ord5708
ord5751
ord5709
ord5668
ord5750
ord5749
ord5706
ord5710
ord5669
ord5670
ord7857
ord5748
ord5671
ord4910
ord6085
ord6076
ord5682
ord5684
ord5685
ord5686
ord5687
ord5639
ord5640
ord5716
ord5683
ord5641
ord5642
ord5643
ord7855
ord5715
ord5604
ord5636
ord5644
ord7712
ord7711
ord4921
ord6766
ord6765
ord6764
ord6763
ord6762
ord6761
ord6760
ord5719
ord5753
ord5000
ord5713
ord667
ord6668
ord5930
ord2177
ord3225
ord5187
ord5444
ord5718
ord5626
ord5628
ord5614
ord2423
ord5720
ord5788
ord962
ord964
ord4549
ord1246
ord4196
ord4195
ord4194
ord4873
ord4193
ord4192
ord4870
ord4869
ord4868
ord4867
ord7660
ord5477
ord5181
ord3514
ord2456
ord2430
ord2426
ord4571
ord6470
ord4568
ord4569
ord4566
ord2596
ord3230
ord2598
ord3231
ord1336
ord1339
ord5221
ord5556
ord5508
ord5223
ord5222
ord1342
ord5554
ord1340
ord1341
ord5304
ord5553
ord6750
ord5207
ord5567
ord768
ord823
ord6751
ord5405
ord6779
ord3236
ord5418
ord6756
ord6781
ord6749
ord5248
ord6785
ord6753
ord6754
ord2482
ord2469
ord6490
ord5186
ord2425
ord6471
ord2462
ord6461
ord4535
ord4541
ord4533
ord5501
ord5432
ord2232
ord5559
ord5533
ord5431
ord2167
ord2187
ord3444
ord2231
ord5560
ord3481
ord2428
ord5542
ord5305
ord399
ord3335
ord1142
ord3675
ord3306
ord3702
ord3428
ord1210
ord1224
ord5087
ord3679
ord5082
ord2466
ord5260
ord4589
ord1032
ord5507
ord4575
ord4560
ord1029
ord1034
ord5309
ord5578
ord5371
ord1127
ord4550
ord6480
ord6441
ord6442
ord6443
ord5778
ord5777
ord6444
ord6445
ord5774
ord5773
ord5772
ord7863
ord6481
ord5397
ord5399
ord5164
ord5388
ord5364
ord5351
ord5366
ord5174
ord5290
ord5288
ord3337
ord5363
ord3328
ord3309
ord3302
ord3304
ord1214
ord1144
ord5336
ord5350
ord5115
ord5377
ord4141
ord4138
ord4152
ord4153
ord4191
ord5443
ord7407
ord7405
ord7406
ord7393
ord7355
ord7354
ord7356
ord5165
ord5166
ord5167
ord5168
ord5287
ord5169
ord5170
ord5171
ord5289
ord5172
ord5173
ord5387
ord5257
ord7396
ord5374
ord7394
ord7397
ord7408
ord7395
ord7404
ord7403
ord7400
ord7399
ord7398
ord5339
ord5231
ord5232
ord5233
ord5342
ord5312
ord4236
go680mi
ord1840
ord1898
ord1831
ord1782
ord1887
ord1778
svl680mi
ord76
ord1343
ord876
ord878
ord724
ord1078
ord888
ord887
ord886
ord882
ord885
ord883
ord803
ord802
ord801
ord800
ord799
ord797
ord795
ord794
ord793
ord986
ord1620
ord1453
ord1463
ord1454
ord1461
ord1178
ord1158
ord1152
ord1151
ord1133
ord806
ord875
ord1069
ord1083
ord925
ord1087
ord1177
ord96
ord302
ord303
ord9558
ord100
ord124
ord9543
ord263
ord9552
ord1342
ord1341
ord1335
ord1080
ord989
ord1150
ord981
ord966
ord987
ord1068
ord920
ord1162
ord821
ord1072
ord1160
ord1159
ord1157
ord1156
ord1155
ord1154
ord1153
ord818
ord817
ord816
ord815
ord814
ord812
ord810
ord809
ord808
ord706
ord715
ord702
ord701
ord700
ord699
ord714
ord713
ord698
ord697
ord696
ord734
ord733
ord732
ord731
ord730
ord728
ord726
ord725
ord965
ord967
ord983
ord982
ord971
ord972
ord1127
ord1109
ord1065
ord1064
ord1063
ord1062
ord1061
ord1060
ord1059
ord1058
ord1057
ord1056
ord1055
ord1054
ord1053
ord1052
ord1051
ord1050
ord1049
ord92
ord71
ord9533
ord301
sot680mi
ord285
ord278
ord279
ord280
ord281
ord282
ord283
ord284
ord120
ord81
ord125
ord277
ord296
ord286
ord92
utl680mi
ord588
ord592
ord589
ord170
ord717
ord716
ord425
ord453
ord464
ord447
ord630
ord626
ord625
ord628
ord283
ord594
ord599
ord469
ord459
ord433
ord152
ord524
ord280
ord285
ord282
ord284
ord525
ord715
ord714
tl680mi
ord1319
ord748
ord1484
ord1529
ord734
ord482
ord788
ord1532
ord464
ord460
ord479
ord465
ord33
ord478
ord645
ord476
ord468
ord470
ord673
ord823
ord842
ord852
ord249
ord790
ord755
ord1764
ord1766
ord741
ord840
ord1793
ord695
ord690
ord1761
ord36
ord1760
ord1794
ord273
ord703
ord1797
ord753
ord752
ord780
ord770
ord825
ord782
ord1544
ord1716
ord1727
ord1728
ord247
ord637
ord644
ord781
ord1366
ord1302
ord1545
ord1508
ord1301
ord1531
ord1506
ord1530
ord743
ord829
ord731
ord429
ord766
ord976
ord978
ord877
ord879
ord873
ord737
ord732
ord444
ord2018
ord2041
ord807
ord1999
ord1546
ord1745
ord425
ord832
ord1862
ord982
ord980
ord983
ord965
ord52
ord971
ord969
ord827
ord248
ord760
ord847
ord774
ord431
ord441
ord1778
ord1814
ord1785
ord1789
ord1815
ord1796
ord1507
ord1306
ord1367
ord1300
ord837
ord812
ord739
ord764
ord417
ord442
ord2040
ord822
ord828
ord816
ord434
ord433
ord730
ord424
ord423
ord422
ord640
ord705
ord648
ord643
ord2030
ord2029
ord390
ord736
ord793
ord846
ord55
ord791
ord740
ord419
ord432
ord421
ord163
ord38
ord792
ord749
ord811
ord729
ord735
ucbhelper4msc
ord604
ord638
ord629
ord609
ord634
ord627
ord628
ord575
ord589
ord561
ord567
ord608
ord585
ord569
ord606
ord562
dbtools680mi
ord4721
ord4722
ord4669
ord4712
ord4684
ord4675
ord4719
ord4681
ord4665
ord4668
ord4708
ord4677
ord5347
ord5356
ord5348
ord5343
ord5364
ord4907
ord5301
ord5177
ord5403
ord5353
ord5352
ord5327
ord16133
ord5395
ord5178
ord11291
ord3182
ord3178
ord11903
ord4679
ord12402
ord16128
ord16134
ord12411
ord12401
ord2150
ord2188
ord2838
ord2197
ord2774
ord2785
ord25803
ord3188
ord12394
ord3675
ord4730
ord4738
ord3135
ord3137
ord2798
ord12639
ord5217
ord5227
ord5256
ord5375
ord12545
ord5418
ord16136
ord25198
ord5166
ord5088
ord25197
ord3097
ord2828
ord25807
ord12416
ord2772
ord2832
ord3177
ord3136
ord8724
ord3154
ord12395
ord3124
ord3126
ord15738
ord2905
ord4800
ord4796
ord3128
ord12479
ord12481
ord12474
ord3148
ord12409
ord12475
ord2837
ord2871
ord12393
ord3125
ord12415
ord3129
ord3127
ord3130
ord25741
ord3138
ord3139
ord3149
ord11828
ord4785
ord15925
ord4787
ord4795
ord12392
comphelp4msc
ord1295
ord1064
ord1060
ord1077
ord1296
ord421
ord422
ord1140
ord1141
ord1137
ord1387
ord1305
ord1307
ord1301
ord425
ord1287
ord1310
ord420
ord418
ord408
ord1291
ord1080
ord1079
ord1062
ord1063
ord1068
ord1059
ord1061
ord426
ord607
ord605
ord1550
ord1548
ord387
ord381
ord388
ord207
ord206
ord208
ord205
ord238
ord237
ord166
ord243
ord244
ord434
ord436
ord1494
ord980
ord1286
ord437
ord23
ord22
ord38
ord33
ord44
ord432
ord748
cppuhelper3msc
??1OImplementationId@cppu@@QAE@XZ
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
??1OWeakObject@cppu@@MAE@XZ
??0OInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??0OWeakObject@cppu@@QAE@XZ
??0OPropertyArrayHelper@cppu@@QAE@ABV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@E@Z
?acquire@OWeakObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
??1OInterfaceContainerHelper@cppu@@QAE@XZ
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
?disposeAndClear@OInterfaceContainerHelper@cppu@@QAAXABUEventObject@lang@star@sun@com@@@Z
?getImplementationId@OImplementationId@cppu@@QBA?AV?$Sequence@C@uno@star@sun@com@@XZ
?removeInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addInterface@OInterfaceContainerHelper@cppu@@QAAJABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?get@WeakReferenceHelper@uno@star@sun@com@@QBA?AV?$Reference@VXInterface@uno@star@sun@com@@@2345@XZ
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV?$Reference@VXInterface@uno@star@sun@com@@@1234@@Z
??4WeakReferenceHelper@uno@star@sun@com@@QAAAAV01234@ABV01234@@Z
??0WeakReferenceHelper@uno@star@sun@com@@QAE@ABV01234@@Z
??1WeakReferenceHelper@uno@star@sun@com@@QAE@XZ
?ImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakComponentImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakComponentImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVWeakComponentImplHelperBase@1@@Z
??0WeakComponentImplHelperBase@cppu@@IAE@AAVMutex@osl@@@Z
?removeEventListener@WeakComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?addEventListener@WeakComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?dispose@WeakComponentImplHelperBase@cppu@@UAAXXZ
?release@WeakComponentImplHelperBase@cppu@@UAAXXZ
?acquire@WeakComponentImplHelperBase@cppu@@UAAXXZ
?createPropertySetInfo@OPropertySetHelper@cppu@@SA?AV?$Reference@VXPropertySetInfo@beans@star@sun@com@@@uno@star@sun@com@@AAVIPropertyArrayHelper@2@@Z
?getCaughtException@cppu@@YA?AVAny@uno@star@sun@com@@XZ
?WeakAggImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakAggImplHelper_queryAgg@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakAggObject@1@@Z
?queryAggregation@OWeakAggObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?release@OWeakAggObject@cppu@@UAAXXZ
?acquire@OWeakAggObject@cppu@@UAAXXZ
?queryInterface@OWeakAggObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??1OWeakAggObject@cppu@@MAE@XZ
?queryInterface@OWeakObject@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?disposing@OPropertySetHelper@cppu@@QAAXXZ
?fire@OPropertySetHelper@cppu@@IAAXPAJPBVAny@uno@star@sun@com@@1JE@Z
?queryInterface@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?WeakAggComponentImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakAggComponentImplHelper_queryAgg@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVWeakAggComponentImplHelperBase@1@@Z
?disposing@WeakAggComponentImplHelperBase@cppu@@MAAXXZ
?dispose@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
?addEventListener@WeakAggComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?removeEventListener@WeakAggComponentImplHelperBase@cppu@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?queryInterface@WeakAggComponentImplHelperBase@cppu@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0WeakAggComponentImplHelperBase@cppu@@IAE@AAVMutex@osl@@@Z
?release@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
?acquire@WeakAggComponentImplHelperBase@cppu@@UAAXXZ
??0OMultiTypeInterfaceContainerHelper@cppu@@QAE@AAVMutex@osl@@@Z
??1WeakAggComponentImplHelperBase@cppu@@UAE@XZ
??1OMultiTypeInterfaceContainerHelper@cppu@@QAE@XZ
?getLength@OInterfaceContainerHelper@cppu@@QBAJXZ
?setDelegator@OWeakAggObject@cppu@@UAAXABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?ImplInhHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@ABV23456@@Z
?ImplHelper_queryNoXInterface@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAX@Z
?remove@OInterfaceIteratorHelper@cppu@@QAAXXZ
??0OInterfaceIteratorHelper@cppu@@QAE@AAVOInterfaceContainerHelper@1@@Z
?next@OInterfaceIteratorHelper@cppu@@QAAPAVXInterface@uno@star@sun@com@@XZ
??1OInterfaceIteratorHelper@cppu@@QAE@XZ
?setPropertyValues@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Sequence@VAny@uno@star@sun@com@@@4567@@Z
?getPropertyValues@OPropertySetHelper@cppu@@UAA?AV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@VOUString@rtl@@@4567@@Z
?addPropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?removePropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?firePropertiesChangeEvent@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?getFastPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@J@Z
?setPropertyValue@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
?getPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?addPropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removePropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removeVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
??1WeakComponentImplHelperBase@cppu@@UAE@XZ
cppu3
typelib_static_type_getByTypeClass
uno_any_construct
uno_type_any_construct
uno_any_destruct
typelib_static_sequence_type_init
uno_type_destructData
typelib_typedescriptionreference_assign
uno_type_any_assign
uno_type_assignData
cppu_unsatisfied_iquery_msg
uno_type_sequence_construct
uno_type_sequence_reference2One
uno_type_sequence_realloc
uno_type_equalData
uno_type_sequence_assign
cppu_unsatisfied_iset_msg
uno_any_clear
typelib_typedescriptionreference_equals
typelib_typedescriptionreference_release
typelib_typedescriptionreference_acquire
typelib_typedescriptionreference_getDescription
typelib_typedescription_release
typelib_static_type_init
vos3msc
ord729
ord727
ord735
ord738
ord445
ord744
ord759
sal3
rtl_str_getLength
osl_executeProcess
osl_createSuspendedThread
osl_joinProcess
osl_getFunctionSymbol
osl_unloadModule
osl_loadModule
osl_scheduleThread
osl_isThreadRunning
osl_joinWithThread
osl_terminateThread
osl_resumeThread
osl_suspendThread
osl_destroyThread
osl_getEnvironment
rtl_uString_newToAsciiUpperCase
rtl_isOctetTextEncoding
rtl_uString_newTrim
osl_getSystemPathFromFileURL
rtl_str_valueOfInt32
rtl_string_newConcat
rtl_string_assign
rtl_string_release
rtl_uString2String
rtl_string_newFromStr
rtl_string_newFromStr_WithLength
rtl_string_new
osl_getFileURLFromSystemPath
osl_getThreadTextEncoding
rtl_ustr_ascii_compareIgnoreAsciiCase_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_toInt32
rtl_compareMemory
rtl_createUuid
rtl_uString_getToken
osl_decrementInterlockedCount
rtl_ustr_hashCode_WithLength
rtl_uString_newReplaceStrAt
rtl_ustr_indexOfAscii_WithLength
rtl_uString_new
rtl_uString_acquire
rtl_uString_release
rtl_uString_assign
rtl_ustr_compare_WithLength
osl_acquireMutex
osl_releaseMutex
osl_getGlobalMutex
rtl_freeMemory
rtl_string2UString
rtl_ustr_reverseCompare_WithLength
rtl_ustr_ascii_compare_WithLength
rtl_ustr_indexOfStr_WithLength
rtl_uString_newFromAscii
osl_createMutex
osl_destroyMutex
osl_incrementInterlockedCount
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_uString_newConcat
rtl_uString_newFromStr_WithLength
rtl_ustr_valueOfInt32
rtl_allocateMemory
rtl_ustr_compareIgnoreAsciiCase
rtl_ustr_compare
rtl_uString_newFromStr
rtl_ustr_shortenedCompare_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_ustr_lastIndexOfChar_WithLength
rtl_uString_new_WithLength
rtl_uStringbuffer_insert
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_newFromStr_WithLength
ole32
CoInitialize
CoCreateInstance
CoUninitialize
stlport_vc7145
?get_allocator@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QBE?AV?$allocator@PAX@2@XZ
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@IABQAXABV?$allocator@PAX@1@@Z
?swap@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXAAV12@@Z
??1?$allocator@PAX@_STL@@QAE@XZ
?reserve@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXI@Z
?_M_fill_insert@?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAEXPAPAXIABQAX@Z
??1?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@XZ
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
??0?$vector@PAXV?$allocator@PAX@_STL@@@_STL@@QAE@ABV?$allocator@PAX@1@@Z
?_Rebalance_for_erase@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@AAPAU32@11@Z
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?__stl_throw_out_of_range@_STL@@YAXPBD@Z
Exports
Exports
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 396KB - Virtual size: 393KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 148KB - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ