82ac2defe9db6216f02d0950b977de259037c7cfbdd6007adfb6cc49fbf3d3f4
- IMPHASH 2ae4d912af99aff697f55adb34d266d9
- SHA256 82ac2defe9db6216f02d0950b977de259037c7cfbdd6007adfb6cc49fbf3d3f4
- MD5 3a623cc24b3d043bca5163e586c64e10
- SHA1 145ca718a91a5ad790a5ba52286dabc02d06ffbf
- SHA512 c74985956da8b86355022f663594bee13a5a48d01d6ae15566b1580edeffde5483dbe2d4bb53080f4189f193cb5a5ccbf24d5fe3650ed2a70e605fe905a101d6
- SSDEEP 6144:uR9ehVYVGgCgPNXCCtKhOfKETyFqSYVmM7:uR4hVYVGHgPEHhOfKETyLYVm2
- MD5 SHA1 SHA512 SSDEEP
Minor OS version
Major OS version
Entry point
199750
Magic Number
267
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
lz32
LZSeek
LZInit
GetExpandedNameW
LZClose
kernel32
EnumSystemLocalesA
BackupWrite
CreateMutexA
GetLongPathNameW
FindFirstFileW
GetNamedPipeHandleStateW
FlushInstructionCache
GetPrivateProfileSectionNamesW
HeapAlloc
FindNextFileW
GetNumberOfConsoleMouseButtons
GetVolumeInformationW
AddAtomW
VerLanguageNameA
FileTimeToLocalFileTime
FillConsoleOutputAttribute
EnumSystemCodePagesW
GetProcessShutdownParameters
HeapDestroy
VerLanguageNameW
GetCurrentDirectoryW
DeleteFileA
BeginUpdateResourceW
GetCurrentDirectoryA
GetPrivateProfileStringA
FindFirstChangeNotificationW
GlobalMemoryStatus
DeviceIoControl
GetThreadContext
CreateFileW
FileTimeToDosDateTime
GetProcAddress
FindNextFileA
CreateConsoleScreenBuffer
FreeConsole
GlobalAddAtomW
GetCurrentProcessId
GetCommMask
GetEnvironmentVariableW
GetStartupInfoW
FoldStringA
BackupSeek
CompareStringW
EndUpdateResourceW
HeapCompact
GlobalSize
BackupRead
GetCurrentProcess
GetStdHandle
Module32First
CreateMutexW
BuildCommDCBW
GetTimeFormatW
GetTimeFormatA
GetPrivateProfileIntW
GetTapeParameters
GetEnvironmentStringsW
GetCommTimeouts
GetProcessTimes
CreateIoCompletionPort
GetDefaultCommConfigA
FindResourceExW
FileTimeToSystemTime
GetPrivateProfileStructW
GetStringTypeExA
CreateProcessW
AllocConsole
GlobalReAlloc
AddAtomA
GetStringTypeW
CreateFileMappingA
GetModuleHandleA
GetFileAttributesW
GetCommandLineA
CreateNamedPipeW
GetCommModemStatus
ClearCommBreak
GetTempPathW
GetNumberFormatW
GetHandleInformation
GetSystemDefaultLCID
GetProcessWorkingSetSize
GetBinaryTypeA
FindResourceA
FatalAppExitA
GlobalUnlock
GetProcessPriorityBoost
GetFileType
CreateEventA
GetVersionExW
GetCurrencyFormatW
GetVolumeInformationA
GetConsoleCP
FindNextChangeNotification
GlobalAlloc
CreateEventW
FindClose
FormatMessageA
HeapLock
GetProcessHeaps
Beep
GetShortPathNameA
CreateSemaphoreA
GlobalFindAtomA
GetModuleFileNameA
Thread32First
GetDateFormatA
GetSystemTimeAsFileTime
FindResourceExA
DefineDosDeviceA
GetStringTypeA
GetPriorityClass
GetProfileIntW
HeapFree
CreateDirectoryExW
GetNumberFormatA
FindAtomA
GetBinaryTypeW
BeginUpdateResourceA
FlushFileBuffers
GetStartupInfoA
GetTapePosition
GetDiskFreeSpaceW
GetPrivateProfileStringW
EnumResourceTypesA
GetProfileSectionW
EnumCalendarInfoW
GetDateFormatW
GetLastError
GetProfileSectionA
DeleteFileW
GlobalUnWire
GetTickCount
GetDiskFreeSpaceA
GetEnvironmentStrings
HeapSize
DeleteCriticalSection
GetNamedPipeHandleStateA
EnumSystemLocalesW
GetFileAttributesExA
GetConsoleOutputCP
GetLogicalDriveStringsW
EnumDateFormatsA
FindAtomW
EnumResourceNamesA
GetSystemDirectoryA
GetCommConfig
CreateFileA
GetOEMCP
DefineDosDeviceW
Thread32Next
GetEnvironmentVariableA
comctl32
InitCommonControlsEx
CreateStatusWindowW
user32
SetUserObjectSecurity
urlmon
RegisterMediaTypeClass
URLDownloadToCacheFileA
CoInternetGetProtocolFlags
URLOpenBlockingStreamW
GetClassURL
RegisterFormatEnumerator
HlinkSimpleNavigateToMoniker
HlinkNavigateMoniker
CoInternetParseUrl
HlinkGoBack
UrlMkSetSessionOption
GetClassFileOrMime
CoInternetQueryInfo
URLOpenPullStreamA
gdi32
CloseFigure
FixBrushOrgEx
CreateColorSpaceW
PaintRgn
SetPixelV
GetEnhMetaFilePixelFormat
CreateDIBitmap
PolylineTo
EqualRgn
GetKerningPairsA
CreateMetaFileW
GetDeviceGammaRamp
SetBitmapBits
GetBkColor
CreateICW
RectInRegion
GetMetaFileW
GetTextMetricsW
SetRectRgn
GetTextFaceA
PatBlt
GetCharABCWidthsA
InvertRgn
CheckColorsInGamut
EnumFontFamiliesA
GetTextExtentExPointA
ExtTextOutW
SetDeviceGammaRamp
oleaut32
SafeArrayCreate
VarCyFromDisp
VarDecAbs
VarUI1FromBool
VarR8FromI1
SafeArrayAllocDescriptor
VariantInit
VarRound
VarBoolFromStr
CreateDispTypeInfo
VariantClear
VarAnd
SafeArrayGetElemsize
SystemTimeToVariantTime
imm32
ImmGetCandidateListW
ImmGetCandidateListCountA
ImmGetIMEFileNameA
ImmSetConversionStatus
ImmGetGuideLineW
ImmEscapeA
ImmInstallIMEA
ImmGetConversionStatus
imagehlp
SymFunctionTableAccess
SymGetSymPrev
ImageNtHeader
ImageGetCertificateData
SymGetSymFromAddr
GetImageConfigInformation
UnMapAndLoad
MakeSureDirectoryPathExists
MapFileAndCheckSumW
ReBaseImage
ImagehlpApiVersionEx
SymGetLineFromName
RemovePrivateCvSymbolic
ImagehlpApiVersion
GetTimestampForLoadedLibrary
CheckSumMappedFile
SymGetModuleBase
SymUnDName
RemovePrivateCvSymbolicEx
SymGetLineNext
wininet
InternetOpenA
GopherGetAttributeA
CommitUrlCacheEntryA
FindNextUrlCacheEntryW
InternetSetOptionExA
SetUrlCacheEntryGroup
InternetUnlockRequestFile
InternetCloseHandle
FtpGetFileW
RetrieveUrlCacheEntryStreamW
CreateUrlCacheGroup
InternetConnectA
InternetReadFileExW
GopherOpenFileA
GopherGetLocatorTypeA
FindFirstUrlCacheEntryA
ole32
CLSIDFromString
winmm
midiInClose
mmioGetInfo
waveInGetErrorTextA
timeGetTime
waveOutOpen
mciGetDeviceIDA
waveOutGetErrorTextW
midiOutGetNumDevs
waveInGetDevCapsA
mmioOpenA
joyGetNumDevs
waveInAddBuffer
mciGetDeviceIDW
midiOutShortMsg
waveInOpen
midiOutReset
midiOutCacheDrumPatches
waveOutSetPlaybackRate
midiStreamPause
waveOutGetErrorTextA
midiOutMessage
waveInMessage
midiOutLongMsg
midiInStop
mciSendCommandA
midiInGetDevCapsA
midiInOpen
timeGetDevCaps
mixerGetControlDetailsW
midiInGetNumDevs
mixerGetLineControlsW
midiInUnprepareHeader
auxGetDevCapsW
joyGetPos
waveOutGetVolume
mmioSeek
midiOutPrepareHeader
waveOutSetVolume
mmioInstallIOProcW
timeKillEvent
mmioInstallIOProcA
midiStreamRestart
advapi32
LookupSecurityDescriptorPartsA
GetTrusteeFormW
GetKernelObjectSecurity
SetPrivateObjectSecurity
GetSecurityDescriptorOwner
GetTrusteeNameW
LsaRetrievePrivateData
GetTrusteeFormA
AccessCheck
GetSecurityDescriptorControl
DuplicateTokenEx
LookupSecurityDescriptorPartsW
GetSidSubAuthorityCount
LsaEnumerateTrustedDomainsEx
OpenEventLogA
ClearEventLogW
LsaStorePrivateData
EnumServicesStatusA
GetUserNameA
RegEnumKeyW
SetSecurityDescriptorGroup
ObjectOpenAuditAlarmW
LsaSetTrustedDomainInformation
GetMultipleTrusteeOperationA
ObjectCloseAuditAlarmW
BuildTrusteeWithNameA
CreateProcessAsUserW
GetAuditedPermissionsFromAclW
OpenSCManagerW
AddAuditAccessAce
EnumDependentServicesA
LookupPrivilegeDisplayNameW
RegQueryInfoKeyA
ObjectDeleteAuditAlarmW
LogonUserW
GetMultipleTrusteeA
RegOpenKeyExW
GetNamedSecurityInfoW
BuildImpersonateExplicitAccessWithNameA
RegSetKeySecurity
DeleteService
CopySid
LookupAccountSidW
GetExplicitEntriesFromAclA
GetTrusteeTypeW
MakeSelfRelativeSD
ImpersonateNamedPipeClient
RegUnLoadKeyA
LookupAccountNameW
SetServiceObjectSecurity
winspool.drv
SetPrinterW
AddPrinterConnectionA
AddPrinterDriverA
AddMonitorA
FreePrinterNotifyInfo
EndDocPrinter
GetJobW
GetPrintProcessorDirectoryW
AddPrinterW
SetFormW
DeletePrinterConnectionW
EnumFormsW
PrinterProperties
EnumPrinterDataA
AddMonitorW
EnumPrinterKeyW
GetPrinterA
EnumMonitorsA
ClosePrinter
SetPortA
EnumPrinterDataExA
AddPortA
GetPrinterDriverW
AddFormA
pdh
PdhEnumMachinesA
rasapi32
RasSetEntryDialParamsA
RasSetEntryDialParamsW
RasGetEntryDialParamsW
RasEditPhonebookEntryW
RasHangUpA
RasGetEntryPropertiesA
RasRenameEntryW
RasEditPhonebookEntryA
RasEnumEntriesA
RasSetEntryPropertiesA
RasDialW
RasSetEntryPropertiesW
RasGetCountryInfoA
resutils
ResUtilVerifyPropertyTable
ResUtilSetPrivatePropertyList
setupapi
SetupDiSetClassInstallParamsW
SetupDiOpenClassRegKey
SetupSetDirectoryIdExA
SetupGetTargetPathA
SetupDecompressOrCopyFileA
SetupGetInfInformationA
SetupGetStringFieldW
SetupLogErrorW
SetupDiDestroyDriverInfoList
SetupQueueRenameW
SetupLogFileA
SetupDiInstallClassExA
SetupDiInstallDeviceInterfaces
SetupDiGetSelectedDriverW
SetupDiRegisterCoDeviceInstallers
SetupDiInstallDevice
SetupDiClassGuidsFromNameA
SetupDiCreateDeviceInterfaceRegKeyA
SetupQueueDefaultCopyW
SetupDiOpenDeviceInterfaceA
SetupQuerySourceListA
SetupDiDeleteDeviceInterfaceData
SetupDiGetHwProfileFriendlyNameExA
SetupTerminateFileLog
SetupQueueDeleteSectionW
SetupFindFirstLineW
SetupDiGetClassInstallParamsW
SetupDeleteErrorW
SetupDiGetHwProfileListExA
SetupDiMoveDuplicateDevice
SetupAdjustDiskSpaceListW
SetupDiBuildDriverInfoList
SetupGetFileCompressionInfoA
SetupDiSetDeviceRegistryPropertyW
SetupQueueRenameA
SetupInitDefaultQueueCallbackEx
SetupCloseFileQueue
SetupQueueRenameSectionW
SetupInstallFromInfSectionA
SetupGetSourceFileSizeW
SetupGetLineByIndexW
SetupFindNextMatchLineA
SetupDiSelectBestCompatDrv
SetupDiGetActualSectionToInstallA
SetupDiCreateDevRegKeyW
msvcrt
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
exit
__p__fmode
__set_app_type
_controlfp
_XcptFilter
_exit
_except_handler3
__p__commode
shlwapi
StrFromTimeIntervalW
StrPBrkW
PathIsSystemFolderA
StrCatW
PathQuoteSpacesA
SHRegCloseUSKey
PathBuildRootW
StrNCatA
StrToIntA
PathIsUNCW
StrDupA
PathIsSameRootA
PathIsFileSpecW
SHRegGetUSValueW
PathStripPathW
SHEnumValueA
ChrCmpIW
PathCommonPrefixW
SHRegEnumUSValueA
SHRegQueryUSValueA
PathGetDriveNumberA
PathMatchSpecA
PathUnquoteSpacesW
SHRegDeleteUSValueW
SHRegCreateUSKeyW
PathRemoveBlanksW
PathFindExtensionA
SHRegSetUSValueA
SHQueryValueExA
PathIsURLA
SHSetValueA
PathGetCharTypeA
SHRegEnumUSKeyW
SHRegQueryInfoUSKeyW
nddeapi
ord512
ord513
ord510
ord509
ord612
ord511
ord602
Name
.text
Size
191KB
Virtual Size
191KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ