General

Malware Config

Signatures

Files

• a9fd3c4ad086d2a5d0584f22ed2f6187c7003d7520ab677e4cf93507ed31624a

  .exe windows x86

  4a04e93ac10a85839a4ef61252d8d938

  
  

  Code Sign

  42:53:94:bd:93:e3:f4:83:49:a2:3f:c6:ac:f5:9f:b3

  Certificate

  Issuer

  CN=LQcC4oXnP33DiMJ

  Not Before

  09-04-2012 06:02

  Not After

  31-12-2039 23:59

  Subject

  CN=LQcC4oXnP33DiMJ

  Extended Key Usages

  ExtKeyUsageCodeSigning

  3f:7d:fc:61:dd:e7:3a:a7:c2:95:f7:db:bf:4b:3f:75:fd:6b:54:f8

  Signer

  Actual PE Digest

  3f:7d:fc:61:dd:e7:3a:a7:c2:95:f7:db:bf:4b:3f:75:fd:6b:54:f8

  Digest Algorithm

  sha1

  PE Digest Matches

  true

  Signature Validations

  Trusted

  false

  Verification

  Signing Certificate

  CN=LQcC4oXnP33DiMJ

  01-12-2022 14:34

  Valid: false

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  InterlockedDecrement

  GetTimeFormatA

  VirtualUnlock

  CancelWaitableTimer

  LoadLibraryExW

  SetVolumeLabelW

  CallNamedPipeA

  OpenWaitableTimerA

  HeapFree

  EnumResourceLanguagesA

  WaitForMultipleObjectsEx

  MulDiv

  GetCurrentDirectoryW

  SetLocaleInfoW

  FindFirstVolumeMountPointW

  GetTempFileNameW

  FindResourceExW

  LocalReAlloc

  GetThreadLocale

  GetNamedPipeHandleStateA

  SetConsoleScreenBufferSize

  FindFirstChangeNotificationA

  MapUserPhysicalPages

  SwitchToFiber

  CreateEventA

  SetCommConfig

  VirtualAllocEx

  GetCPInfoExA

  GetSystemTimeAdjustment

  GetTapePosition

  TransactNamedPipe

  DisableThreadLibraryCalls

  WriteProfileSectionW

  GetComputerNameExA

  QueryDosDeviceA

  GetPrivateProfileStructW

  FindClose

  FillConsoleOutputCharacterW

  IsDBCSLeadByte

  IsBadReadPtr

  ScrollConsoleScreenBufferA

  ReadConsoleOutputW

  GetLongPathNameW

  FileTimeToSystemTime

  DeleteAtom

  ReadConsoleOutputAttribute

  UnlockFileEx

  ReadConsoleA

  GetLocaleInfoW

  InitAtomTable

  EnumResourceNamesW

  GetDefaultCommConfigW

  GetMailslotInfo

  GetProcessPriorityBoost

  ClearCommError

  GetStringTypeExW

  DeleteVolumeMountPointA

  SetThreadExecutionState

  QueueUserWorkItem

  QueryDosDeviceW

  IsDebuggerPresent

  GlobalAddAtomA

  GetEnvironmentStringsW

  Sleep

  GetNamedPipeHandleStateW

  ClearCommBreak

  CreateSemaphoreA

  CreateIoCompletionPort

  EnumDateFormatsExW

  SetHandleInformation

  HeapSize

  FindCloseChangeNotification

  PostQueuedCompletionStatus

  GetTickCount

  VirtualProtect

  FreeUserPhysicalPages

  EnumResourceLanguagesW

  SetThreadPriority

  TlsAlloc

  lstrcpyW

  GetSystemTimeAsFileTime

  Thread32First

  ReadConsoleOutputA

  LoadModule

  PurgeComm

  TryEnterCriticalSection

  LCMapStringW

  GetVolumeInformationW

  SetFileApisToOEM

  OpenMutexW

  FindResourceW

  TransmitCommChar

  Heap32First

  GlobalFree

  GetConsoleMode

  LeaveCriticalSection

  GetConsoleAliasExesLengthW

  GetCommandLineW

  FindFirstFileExW

  GetModuleFileNameW

  SetSystemPowerState

  EnumLanguageGroupLocalesW

  PeekNamedPipe

  BuildCommDCBAndTimeoutsW

  GetThreadPriorityBoost

  GetDefaultCommConfigA

  QueueUserAPC

  WritePrivateProfileStringW

  FindNextChangeNotification

  GetCurrentProcessId

  RtlUnwind

  GlobalFindAtomW

  SetProcessPriorityBoost

  SetConsoleCursor

  GetProcessVersion

  VerifyVersionInfoW

  WritePrivateProfileStructA

  FatalAppExitA

  GetCompressedFileSizeA

  GetSystemInfo

  GetCurrentThreadId

  HeapUnlock

  InterlockedIncrement

  IsProcessorFeaturePresent

  GetFileType

  HeapReAlloc

  ResumeThread

  CreateToolhelp32Snapshot

  GetEnvironmentVariableA

  SetProcessShutdownParameters

  SetHandleCount

  DnsHostnameToComputerNameW

  ReadDirectoryChangesW

  IsSystemResumeAutomatic

  ReadFileScatter

  GetSystemDefaultLangID

  SetEnvironmentVariableA

  Process32Next

  GetConsoleScreenBufferInfo

  GetEnvironmentVariableW

  GetCommState

  IsBadHugeReadPtr

  CreateDirectoryA

  FindNextVolumeA

  DosDateTimeToFileTime

  Toolhelp32ReadProcessMemory

  WriteFileGather

  GetFileAttributesA

  GetDateFormatW

  GetStringTypeA

  DeleteTimerQueueEx

  WriteTapemark

  GetCommModemStatus

  GetLogicalDriveStringsW

  SleepEx

  IsBadStringPtrW

  GetBinaryType

  GetWriteWatch

  GetStdHandle

  GetThreadPriority

  FindFirstVolumeMountPointA

  GetProcessAffinityMask

  SetInformationJobObject

  GetCurrencyFormatA

  SystemTimeToTzSpecificLocalTime

  GetConsoleOutputCP

  CreateWaitableTimerA

  HeapValidate

  GetCompressedFileSizeW

  Module32FirstW

  SetProcessWorkingSetSize

  ExpandEnvironmentStringsA

  SetCommState

  FindFirstVolumeA

  GetSystemPowerStatus

  TlsFree

  lstrlen

  lstrcmpW

  InterlockedExchange

  Module32Next

  GetLocaleInfoA

  RaiseException

  lstrcatA

  FindResourceA

  GetCurrentThread

  GetHandleInformation

  GetEnvironmentStrings

  ReadConsoleOutputCharacterA

  GetLargestConsoleWindowSize

  CreateHardLinkW

  GetModuleHandleA

  ResetWriteWatch

  ConvertThreadToFiber

  GetStringTypeW

  ConvertDefaultLocale

  HeapWalk

  LocalLock

  FreeEnvironmentStringsA

  MapViewOfFileEx

  DeleteFiber

  FreeLibraryAndExitThread

  GetVersionExA

  VirtualAlloc

  LoadLibraryW

  GetProcAddress

  LoadLibraryA

  user32

  CreatePopupMenu

  DdeAccessData

  ChildWindowFromPointEx

  DialogBoxParamA

  DdeCreateStringHandleW

  LoadImageW

  TabbedTextOutA

  DlgDirListComboBoxA

  CharLowerW

  LoadIconW

  UserHandleGrantAccess

  BlockInput

  GetMenuStringA

  TranslateAcceleratorA

  UnionRect

  CreateDesktopW

  SendIMEMessageExW

  RegisterDeviceNotificationW

  EnumPropsA

  SetRectEmpty

  SetPropW

  GetScrollBarInfo

  WinHelpW

  DdeFreeStringHandle

  DdeSetUserHandle

  SetWinEventHook

  GrayStringA

  GetMenuStringW

  DdeCreateDataHandle

  ChangeClipboardChain

  DdeKeepStringHandle

  SetWindowsHookExW

  MonitorFromWindow

  EnumDisplayMonitors

  SetClipboardData

  IsWindowVisible

  CreateIcon

  OpenDesktopA

  DdeGetLastError

  OemToCharW

  wsprintfW

  RegisterClipboardFormatW

  DrawIcon

  FlashWindow

  DdeCreateStringHandleA

  SystemParametersInfoA

  GetScrollRange

  IsCharAlphaA

  GetWindowContextHelpId

  OpenWindowStationA

  GetNextDlgGroupItem

  IsIconic

  CharPrevExA

  SetCaretPos

  DestroyIcon

  GetWindowTextLengthA

  ToUnicode

  MessageBoxA

  SendNotifyMessageW

  IsHungAppWindow

  GetTabbedTextExtentW

  DefMDIChildProcW

  GetClassInfoExW

  InternalGetWindowText

  GetInputState

  GetAsyncKeyState

  IsWindow

  GetSubMenu

  LookupIconIdFromDirectoryEx

  ChangeMenuA

  wvsprintfA

  DdeUnaccessData

  OemToCharBuffW

  DispatchMessageA

  CopyAcceleratorTableW

  GetMessageW

  OemToCharBuffA

  InvalidateRect

  AllowSetForegroundWindow

  GetKeyboardLayout

  DlgDirSelectComboBoxExW

  MonitorFromPoint

  ValidateRgn

  SetParent

  ImpersonateDdeClientWindow

  ScreenToClient

  GetAltTabInfo

  IsWindowEnabled

  GetAltTabInfoA

  GetWindowLongW

  CallWindowProcA

  SetDoubleClickTime

  IsWindowUnicode

  SwapMouseButton

  GetKeyboardLayoutList

  TranslateAccelerator

  MapVirtualKeyExA

  UnregisterHotKey

  EnumDisplaySettingsExA

  GetLastInputInfo

  GetMenuItemRect

  GetParent

  GetCursorPos

  SetTimer

  ToAsciiEx

  GetWindowTextA

  FindWindowW

  CharUpperBuffW

  CharUpperW

  MessageBoxExW

  CreateDialogParamA

  EnumWindowStationsA

  SetMessageQueue

  GetDCEx

  SetScrollRange

  EnumDesktopsA

  GetDlgItemInt

  TranslateMessage

  DrawFrame

  CascadeChildWindows

  CreateCursor

  OpenClipboard

  GetSystemMenu

  CloseDesktop

  GetWindowModuleFileName

  IsCharLowerA

  GetLastActivePopup

  AppendMenuW

  CharNextA

  IMPSetIMEW

  GetKeyboardLayoutNameW

  ReleaseCapture

  GetClipboardFormatNameW

  SendIMEMessageExA

  GetClientRect

  PostThreadMessageA

  CharUpperA

  LoadKeyboardLayoutW

  CreateWindowExA

  ReuseDDElParam

  OpenDesktopW

  DefFrameProcA

  RemovePropA

  SetMenuInfo

  IntersectRect

  DrawEdge

  SetWindowTextW

  GetClassNameW

  EnumThreadWindows

  PostQuitMessage

  GetWindowModuleFileNameW

  RealGetWindowClassW

  DrawFocusRect

  GetUpdateRgn

  EnableScrollBar

  BroadcastSystemMessage

  GetKeyState

  SetProcessDefaultLayout

  ReleaseDC

  GetScrollInfo

  CharPrevW

  CheckDlgButton

  SetWindowsHookExA

  PeekMessageW

  FrameRect

  MsgWaitForMultipleObjects

  DialogBoxIndirectParamW

  CallNextHookEx

  DdeQueryConvInfo

  CreateMenu

  DrawStateA

  GetProcessWindowStation

  IsDialogMessageW

  NotifyWinEvent

  PostThreadMessageW

  ShowWindowAsync

  GetActiveWindow

  GetMonitorInfoA

  ShowScrollBar

  GetDlgItem

  DdeFreeDataHandle

  GetMouseMovePointsEx

  PtInRect

  LoadAcceleratorsW

  DefDlgProcA

  CreateWindowStationW

  MapVirtualKeyExW

  LoadIconA

  PostMessageA

  EnumWindows

  IsCharAlphaNumericW

  InsertMenuItemA

  SetWindowsHookW

  CheckMenuItem

  GetWindowRgn

  CloseWindowStation

  SetPropA

  WINNLSEnableIME

  RegisterWindowMessageW

  GetSysColor

  TrackMouseEvent

  GetMenuItemID

  LockWorkStation

  UnregisterClassW

  ScrollWindow

  BroadcastSystemMessageW

  SetMenu

  EndTask

  UnhookWindowsHook

  GetMenuItemInfoA

  GetKeyNameTextW

  SetMenuItemBitmaps

  SetMenuContextHelpId

  WaitMessage

  InsertMenuA

  SetUserObjectInformationW

  GetMessagePos

  DdeClientTransaction

  BeginPaint

  CallMsgFilterW

  GetUpdateRect

  AnimateWindow

  GetAncestor

  MessageBoxIndirectA

  LoadImageA

  PeekMessageA

  RegisterClassExA

  EnableWindow

  TrackPopupMenu

  IMPQueryIMEW

  WindowFromDC

  SetDlgItemTextA

  DdeEnableCallback

  GetMessageExtraInfo

  GrayStringW

  CharLowerBuffW

  InflateRect

  GetCapture

  EqualRect

  GetKBCodePage

  GetQueueStatus

  LoadStringW

  WindowFromPoint

  GetMessageTime

  PackDDElParam

  CreateIconIndirect

  KillTimer

  EditWndProc

  CopyAcceleratorTableA

  SetMenuItemInfoA

  IsCharUpperW

  GetThreadDesktop

  DdeQueryStringW

  GetComboBoxInfo

  RedrawWindow

  CharUpperBuffA

  TranslateMDISysAccel

  GetWindowRect

  SetMenuItemInfoW

  RegisterHotKey

  SetSystemCursor

  GetDlgCtrlID

  DdeNameService

  GetWindowTextW

  CloseWindow

  TranslateAcceleratorW

  GetCursor

  SetWindowLongA

  GetScrollPos

  LoadBitmapA

  RealChildWindowFromPoint

  MessageBoxIndirectW

  IsCharAlphaW

  DrawCaption

  SendMessageA

  GetClassInfoExA

  gdi32

  SetDCBrushColor

  GdiCreateLocalMetaFilePict

  GdiEntry6

  GetTextColor

  GdiGetSpoolMessage

  GetTextFaceAliasW

  SetGraphicsMode

  DescribePixelFormat

  UpdateColors

  PlayEnhMetaFile

  RemoveFontMemResourceEx

  GdiRealizationInfo

  GetColorSpace

  GdiStartDocEMF

  PolyTextOutW

  CreateICW

  SetRelAbs

  UnrealizeObject

  GdiEntry11

  CreatePalette

  GetDIBits

  CreateDiscardableBitmap

  EndDoc

  SelectPalette

  GdiComment

  GetKerningPairs

  GetDIBColorTable

  OffsetRgn

  SelectBrushLocal

  GetWorldTransform

  GdiPlayJournal

  CreateBrushIndirect

  GetEUDCTimeStamp

  CreateEllipticRgn

  SetBrushOrgEx

  RestoreDC

  GdiConvertToDevmodeW

  EnumMetaFile

  EngAssociateSurface

  DrawEscape

  CLIPOBJ_bEnum

  CreateFontIndirectW

  SetMetaRgn

  GetTextExtentPointW

  GetGlyphIndicesA

  EngGetPrinterDataFileName

  GetPixel

  EngCopyBits

  EngWideCharToMultiByte

  AddFontResourceTracking

  CreateFontIndirectA

  GetBitmapBits

  GetTextAlign

  GetColorAdjustment

  SetSystemPaletteUse

  StartDocA

  PathToRegion

  GdiConvertPalette

  SetBkColor

  XLATEOBJ_cGetPalette

  ScaleViewportExtEx

  STROBJ_dwGetCodePage

  ExtFloodFill

  ExtSelectClipRgn

  FloodFill

  RectInRegion

  EngCreateClip

  GetEUDCTimeStampExW

  GdiEntry13

  AbortDoc

  GetSystemPaletteEntries

  GetCharABCWidthsI

  GetGraphicsMode

  CloseFigure

  CreatePen

  CreateFontIndirectExW

  GdiTransparentBlt

  CancelDC

  SetWorldTransform

  SwapBuffers

  SetBitmapBits

  StartPage

  StartFormPage

  InvertRgn

  ModifyWorldTransform

  FONTOBJ_cGetGlyphs

  GetDCBrushColor

  EngUnicodeToMultiByteN

  GetCharWidthInfo

  SetStretchBltMode

  GdiAlphaBlend

  CreateColorSpaceA

  CreateBitmapIndirect

  GetFontAssocStatus

  GetRelAbs

  RemoveFontResourceExW

  CreateEllipticRgnIndirect

  GetTextFaceW

  SetBoundsRect

  SetMetaFileBitsEx

  ExtTextOutA

  GdiDescribePixelFormat

  CreateRectRgn

  PlayMetaFile

  GetMapMode

  PlayEnhMetaFileRecord

  SetDIBitsToDevice

  GdiIsMetaFileDC

  Polygon

  UnloadNetworkFonts

  EudcUnloadLinkW

  GetStringBitmapA

  RectVisible

  GetMiterLimit

  GdiEntry12

  SetMagicColors

  SetViewportExtEx

  GetWindowExtEx

  FlattenPath

  FrameRgn

  ExtCreatePen

  GetClipBox

  LineTo

  SetLayout

  AngleArc

  GetTextExtentExPointWPri

  GdiSetServerAttr

  GdiProcessSetup

  GetHFONT

  cGetTTFFromFOT

  GetWindowOrgEx

  EngLineTo

  AddFontResourceExA

  GdiAddGlsRecord

  AnimatePalette

  GdiEntry10

  GdiDeleteLocalDC

  GetTextExtentPoint32A

  PtVisible

  BitBlt

  GetRandomRgn

  GdiValidateHandle

  PlgBlt

  GetCharWidthFloatA

  SetArcDirection

  Escape

  GetPolyFillMode

  GdiConvertEnhMetaFile

  XLATEOBJ_hGetColorTransform

  ResetDCA

  GetPaletteEntries

  EngEraseSurface

  WidenPath

  BRUSHOBJ_ulGetBrushColor

  SetDIBits

  GetEnhMetaFileDescriptionA

  TranslateCharsetInfo

  SetDIBColorTable

  GdiCleanCacheDC

  GdiEndPageEMF

  GetCharABCWidthsFloatW

  EnumFontsA

  CloseMetaFile

  CreateDIBSection

  SetMiterLimit

  FONTOBJ_cGetAllGlyphHandles

  DeviceCapabilitiesExW

  CreateScalableFontResourceW

  FONTOBJ_pifi

  PATHOBJ_vEnumStartClipLines

  SetICMMode

  EnableEUDC

  SelectFontLocal

  FONTOBJ_pvTrueTypeFontFile

  RemoveFontResourceTracking

  GetTextMetricsW

  AddFontResourceA

  SetRectRgn

  SelectClipPath

  EngAcquireSemaphore

  GetCharABCWidthsW

  CreateDIBitmap

  SetColorSpace

  GetMetaRgn

  GetTextCharacterExtra

  GdiPlayDCScript

  ExtTextOutW

  DPtoLP

  GetCharABCWidthsA

  StretchDIBits

  UpdateICMRegKeyA

  RemoveFontResourceA

  EnumObjects

  GetCharABCWidthsFloatA

  Polyline

  SetPixelV

  GdiResetDCEMF

  TextOutA

  GdiGetLocalFont

  SetDCPenColor

  GetTextExtentExPointI

  RemoveFontResourceW

  EudcLoadLinkW

  GetTextCharsetInfo

  GdiEntry15

  GetObjectW

  GetRegionData

  EngGetCurrentCodePage

  CopyMetaFileA

  GetMetaFileBitsEx

  CreateScalableFontResourceA

  SetVirtualResolution

  DeleteColorSpace

  PlayMetaFileRecord

  GdiPlayPageEMF

  EndFormPage

  FONTOBJ_pQueryGlyphAttrs

  GdiDllInitialize

  GetCharWidthFloatW

  EngMarkBandingSurface

  EndPage

  CreateHalftonePalette

  MaskBlt

  GdiEntry16

  LineDDA

  GdiEntry7

  GetEnhMetaFileA

  EnumEnhMetaFile

  GdiQueryTable

  StrokePath

  GetStringBitmapW

  GetEnhMetaFileW

  EngStretchBlt

  GetViewportOrgEx

  msvcrt

  memcpy

  comdlg32

  GetFileTitleA

  GetOpenFileNameW

  ReplaceTextW

  GetSaveFileNameW

  FindTextW

  PageSetupDlgW

  PrintDlgA

  ChooseColorA

  advapi32

  BuildImpersonateExplicitAccessWithNameW

  SetEntriesInAuditListA

  AddAuditAccessObjectAce

  ConvertStringSidToSidW

  LockServiceDatabase

  RegSetValueExW

  DestroyPrivateObjectSecurity

  AbortSystemShutdownA

  CryptAcquireContextA

  AccessCheckByTypeResultListAndAuditAlarmByHandleW

  CryptGetProvParam

  FileEncryptionStatusW

  ObjectPrivilegeAuditAlarmA

  RegisterServiceCtrlHandlerExA

  ConvertSecurityDescriptorToAccessNamedA

  LsaSetQuotasForAccount

  RegLoadKeyA

  LsaGetUserName

  SetFileSecurityW

  CloseEventLog

  QueryRecoveryAgentsOnEncryptedFile

  ElfBackupEventLogFileW

  AccessCheckByTypeResultListAndAuditAlarmW

  FileEncryptionStatusA

  CryptHashSessionKey

  BuildTrusteeWithObjectsAndSidA

  GetCurrentHwProfileA

  ConvertSDToStringSDRootDomainW

  CryptEncrypt

  SetSecurityInfo

  GetSecurityDescriptorRMControl

  OpenSCManagerW

  SetAclInformation

  LsaSetTrustedDomainInformation

  GetSecurityDescriptorLength

  RegFlushKey

  SystemFunction012

  ElfOpenEventLogA

  DeleteService

  LsaSetSecurityObject

  CryptGetHashParam

  GetTraceLoggerHandle

  RegQueryValueA

  SetSecurityDescriptorGroup

  CryptReleaseContext

  LsaSetInformationPolicy

  OpenProcessToken

  SetNamedSecurityInfoExW

  RegQueryInfoKeyW

  CryptDestroyKey

  SystemFunction004

  CommandLineFromMsiDescriptor

  BuildSecurityDescriptorA

  ObjectOpenAuditAlarmA

  ChangeServiceConfigW

  SetEntriesInAclW

  RegisterEventSourceW

  BuildImpersonateExplicitAccessWithNameA

  SetServiceBits

  LookupPrivilegeNameW

  ElfReportEventW

  QueryUsersOnEncryptedFile

  BuildImpersonateTrusteeA

  AddAccessAllowedAce

  FindFirstFreeAce

  NotifyBootConfigStatus

  CryptDecrypt

  CryptGenKey

  LsaEnumeratePrivilegesOfAccount

  LsaClose

  GetAce

  RegisterServiceCtrlHandlerExW

  LsaLookupNames

  GetEffectiveRightsFromAclW

  QueryServiceLockStatusA

  RegEnumKeyExA

  ElfOldestRecord

  GetTrusteeNameW

  RegDisablePredefinedCache

  LsaRemoveAccountRights

  AccessCheckAndAuditAlarmW

  QueryServiceLockStatusW

  RegOpenKeyW

  SystemFunction019

  CreateProcessAsUserA

  LookupAccountNameA

  ConvertStringSDToSDRootDomainW

  RegCreateKeyExA

  ClearEventLogW

  ChangeServiceConfigA

  RegSaveKeyA

  AccessCheckByTypeResultList

  RegOverridePredefKey

  ObjectCloseAuditAlarmA

  AdjustTokenPrivileges

  LookupPrivilegeValueW

  GetMultipleTrusteeA

  GetNumberOfEventLogRecords

  StartTraceW

  PrivilegeCheck

  SystemFunction034

  LookupSecurityDescriptorPartsA

  ControlTraceA

  LsaEnumerateTrustedDomains

  GetSecurityDescriptorGroup

  GetEventLogInformation

  QueryAllTracesW

  GetCurrentHwProfileW

  TraceEventInstance

  LsaEnumeratePrivileges

  RegSetValueA

  RegReplaceKeyW

  shell32

  SHBrowseForFolder

  ShellExecuteExW

  ExtractIconExA

  DragQueryPoint

  WOWShellExecute

  ShellAboutW

  FindExecutableW

  SHGetFileInfoW

  DuplicateIcon

  SHGetSpecialFolderPathW

  DragFinish

  ShellAboutA

  SHGetSpecialFolderPathA

  SHBrowseForFolderA

  SHPathPrepareForWriteA

  ExtractIconExW

  ShellExecuteExA

  SHCreateDirectoryExA

  SHFreeNameMappings

  SHFileOperation

  SHGetSettings

  SHAppBarMessage

  ExtractAssociatedIconExW

  ole32

  CoCreateGuid

  HACCEL_UserUnmarshal

  HGLOBAL_UserSize

  GetConvertStg

  OleGetIconOfFile

  CoLockObjectExternal

  HMENU_UserMarshal

  HPALETTE_UserSize

  SNB_UserUnmarshal

  OleRegEnumVerbs

  CreateFileMoniker

  ReadClassStg

  CoUnmarshalHresult

  CoIsHandlerConnected

  MonikerCommonPrefixWith

  GetRunningObjectTable

  CreateDataCache

  CoSetProxyBlanket

  HENHMETAFILE_UserSize

  SetConvertStg

  STGMEDIUM_UserSize

  DllDebugObjectRPCHook

  CLIPFORMAT_UserFree

  CoTaskMemFree

  GetDocumentBitStg

  CoGetInstanceFromFile

  HACCEL_UserFree

  OleIsRunning

  BindMoniker

  StgGetIFillLockBytesOnILockBytes

  HMETAFILEPICT_UserFree

  HMENU_UserUnmarshal

  OleQueryCreateFromData

  HMENU_UserSize

  OpenOrCreateStream

  StgIsStorageILockBytes

  StgCreatePropSetStg

  StgOpenStorageOnILockBytes

  CoQueryAuthenticationServices

  HDC_UserMarshal

  CreateDataAdviseHolder

  CoGetInstanceFromIStorage

  CoDeactivateObject

  CoInitialize

  WriteFmtUserTypeStg

  HDC_UserFree

  OleBuildVersion

  HACCEL_UserSize

  HGLOBAL_UserFree

  CreateStreamOnHGlobal

  CoRegisterClassObject

  HMETAFILE_UserMarshal

  CoMarshalInterface

  StgIsStorageFile

  OleCreateLink

  OleConvertOLESTREAMToIStorage

  CreateStdProgressIndicator

  CoCreateObjectInContext

  StgOpenStorage

  SNB_UserMarshal

  GetClassFile

  StgCreatePropStg

  CoGetCallContext

  OleGetIconOfClass

  StgOpenAsyncDocfileOnIFillLockBytes

  OleConvertIStorageToOLESTREAM

  HMETAFILEPICT_UserUnmarshal

  CoFileTimeNow

  CreateObjrefMoniker

  ReleaseStgMedium

  CoAllowSetForegroundWindow

  OleCreateFromFileEx

  HICON_UserMarshal

  DoDragDrop

  UtConvertDvtd32toDvtd16

  OleCreateFromData

  PropVariantClear

  EnableHookObject

  CoIsOle1Class

  CLSIDFromProgIDEx

  CoImpersonateClient

  ReadFmtUserTypeStg

  OleMetafilePictFromIconAndLabel

  OleInitialize

  HICON_UserFree

  IIDFromString

  OleCreateLinkToFile

  CoGetCurrentProcess

  HDC_UserUnmarshal

  HMETAFILEPICT_UserSize

  CoTestCancel

  CoUninitialize

  SetDocumentBitStg

  OleRegEnumFormatEtc

  HWND_UserUnmarshal

  oleaut32

  VarUI1FromCy

  VariantInit

  VarDateFromBool

  BSTR_UserMarshal

  SysStringByteLen

  GetAltMonthNames

  VarI2FromI1

  VarDecCmpR8

  VarIdiv

  VectorFromBstr

  VarBoolFromCy

  VarUI4FromBool

  OleLoadPictureFile

  VarR4FromDate

  LoadTypeLibEx

  DispInvoke

  VarR8FromI1

  VarUI2FromBool

  VarCyFix

  VarCyRound

  VarI2FromDate

  SysAllocStringByteLen

  VarI1FromDec

  VarBoolFromI1

  VarDateFromI4

  VarBoolFromR8

  SafeArrayDestroyDescriptor

  OleLoadPicture

  SafeArrayCreateEx

  VarDateFromUI1

  VarDecFromI1

  VarMod

  VarR8Round

  VarUI2FromI2

  VarDecAbs

  VarOr

  SafeArrayAllocDescriptorEx

  VarBoolFromDate

  VarNot

  VarBstrFromCy

  VarUI2FromCy

  VarUI1FromDec

  VarDecCmp

  LPSAFEARRAY_Unmarshal

  RevokeActiveObject

  VarI1FromCy

  VarBstrFromDisp

  VarUI1FromDisp

  VarBoolFromStr

  VarAdd

  SafeArrayAllocData

  VarR4FromBool

  VarI1FromR4

  VarI1FromUI1

  VarCyFromUI1

  VARIANT_UserFree

  VarCySu

  VarFormatFromTokens

  VariantCopyInd

  VarBoolFromUI1

  VarBoolFromUI4

  VarUI4FromStr

  VarI1FromBool

  SafeArrayLock

  SafeArrayUnaccessData

  DosDateTimeToVariantTime

  VarCyMulI4

  VarCyNeg

  VarI2FromR8

  VarBstrFromUI2

  VarDecFromUI1

  VarCyFromStr

  RegisterActiveObject

  VarR4CmpR8

  VarI4FromI2

  SafeArrayDestroyData

  VARIANT_UserMarshal

  VarMonthName

  VarUI4FromI2

  VarUI2FromDisp

  VariantTimeToDosDateTime

  VarI2FromDec

  VarUI1FromBool

  SysAllocStringLen

  VarR4FromDisp

  VarUI1FromUI2

  BSTR_UserUnmarshal

  SafeArrayPtrOfIndex

  VarI4FromUI4

  VarI4FromCy

  VarDecFix

  VarDateFromDec

  ClearCustData

  VarUI4FromR8

  VarR8FromI4

  VarImp

  OleCreatePropertyFrame

  BstrFromVector

  SafeArrayRedim

  VarUI4FromUI2

  VarI4FromR8

  VarUI4FromDate

  VarDecFromBool

  VarFormatNumber

  VarBstrFromI4

  LPSAFEARRAY_UserFree

  VarAbs

  VarCyFromR8

  VarDecFromR8

  VarDateFromCy

  VarR8FromBool

  VarDecFromUI4

  VarR8FromDate

  SysStringLen

  VarUI2FromUI1

  VarR4FromR8

  SafeArrayGetDim

  VarUI2FromR4

  VarR4FromI2

  LHashValOfNameSys

  SafeArrayUnlock

  SafeArrayAccessData

  OleCreatePropertyFrameIndirect

  VarDecFromUI2

  SafeArrayCopy

  VarUI2FromI1

  VariantChangeType

  VarCyFromI4

  VarUdateFromDate

  VarBstrFromI1

  VarDecFromR4

  SafeArrayGetIID

  VarDateFromR4

  VarI1FromI4

  VarDateFromUI2

  VarInt

  SafeArrayPutElement

  VarR8FromStr

  VarNumFromParseNum

  VarBoolFromDec

  SafeArrayGetUBound

  VarI2FromI4

  VarBstrFromDate

  VarFormatPercent

  VarUI4FromCy

  VarR4FromCy

  VarR8FromDec

  VarDateFromUdate

  OleLoadPicturePath

  VARIANT_UserSize

  VarUI1FromUI4

  VarAnd

  VarDecFromI2

  SysReAllocString

  VarBoolFromR4

  VarUI1FromDate

  VariantCopy

  LPSAFEARRAY_UserUnmarshal

  RegisterTypeLi

  VarDecRound

  VarDecFromCy

  BSTR_UserFree

  VarBstrCat

  SafeArrayCreate

  OleTranslateColor

  VarUI4FromDisp

  DispCallFunc

  VariantChangeTypeEx

  VarTokenizeFormatString

  VarI1FromI2

  LPSAFEARRAY_Marshal

  VarCyFromUI2

  VarI1FromUI2

  VarDecAdd

  VarDecFromDisp

  VarUI1FromR8

  VarNeg

  LoadRegTypeLi

  VarDecFromDate

  OleCreateFontIndirect

  LPSAFEARRAY_UserSize

  VarXor

  VarR4FromDec

  VarDateFromStr

  OleCreatePictureIndirect

  GetErrorInfo

  VarR8FromUI2

  VarI4FromI1

  VarCyAdd

  VarUI2FromR8

  VarBoolFromI4

  VarBoolFromI2

  VarI4FromDisp

  OleSavePictureFile

  VarR8FromCy

  VarUI2FromI4

  VarDateFromI2

  VarDecFromStr

  shlwapi

  StrRChrIA

  comctl32

  ImageList_DragMove

  PropertySheetW

  DrawStatusText

  ImageList_LoadImageA

  InitializeFlatSB

  ImageList_AddMasked

  ImageList_Merge

  ImageList_Create

  ord16

  PropertySheet

  InitMUILanguage

  ord5

  ord15

  ImageList_DragShowNolock

  ImageList_Destroy

  InitCommonControlsEx

  ImageList_Copy

  ord7

  FlatSB_ShowScrollBar

  FlatSB_GetScrollProp

  ord17

  ImageList_SetFilter

  UninitializeFlatSB

  Sections

  .text

  Size: 55KB - Virtual size: 55KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 29KB - Virtual size: 29KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 3KB - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 5KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ