007b0ed9561b2455d8be792bb768a172

Sharing

Copy URL Twitter E-mail

General

Target

007b0ed9561b2455d8be792bb768a172
Size

9.7MB
MD5

007b0ed9561b2455d8be792bb768a172
SHA1

1c964f56115c8e8882a848352d0e7f487b18ca11
SHA256

cc97f1d0fa214beaf1b7337cdd39b3ddcf9c567006d9af5f7516a06f4016a67d
SHA512

c92365186c899b78b456aea149b694267ef94d4201f1c0e784a4f6b8087444379e3ca7e0eb0ae7084592737ae87c119d26eb7684f9abcdf0875ae7d97c86e2e6
SSDEEP

196608:ouO442LiWfT13wb4OTcOZzYbSAZn8RVIwLxIZWIl87kILsU0hKak5GhLXCQJaCzk:nblvfT1gb3cOZIZnL7tKhkuJx07rk

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Mapx30.ocx.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Midlg30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Midlin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Migm30.exe.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Mitmdl30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Mitmin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/Mxintl30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
unpack001/migmin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E

Files

007b0ed9561b2455d8be792bb768a172
.cab
Asia.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Asia.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Asia.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Asia.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Asia.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Asia.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Asiacaps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Asiacaps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Asiacaps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Asiacaps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Asiacaps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Asicty79.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Asicty79.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Asicty79.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Asicty79.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Asicty79.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Au_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Au_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Au_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Au_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty417.DAT.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty417.ID.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty417.IND.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty417.MAP.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty417.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty_4k.DAT.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty_4k.ID.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty_4k.IND.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty_4k.MAP.8579F016_2E80_11D3_B333_00A0C9DA500E
Aucty_4k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Aushiway.DAT.8579F016_2E80_11D3_B333_00A0C9DA500E
Aushiway.ID.8579F016_2E80_11D3_B333_00A0C9DA500E
Aushiway.MAP.8579F016_2E80_11D3_B333_00A0C9DA500E
Aushiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Austcaps.DAT.8579F016_2E80_11D3_B333_00A0C9DA500E
Austcaps.ID.8579F016_2E80_11D3_B333_00A0C9DA500E
Austcaps.IND.8579F016_2E80_11D3_B333_00A0C9DA500E
Austcaps.MAP.8579F016_2E80_11D3_B333_00A0C9DA500E
Austcaps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Austrlia.DAT.8579F016_2E80_11D3_B333_00A0C9DA500E
Austrlia.ID.8579F016_2E80_11D3_B333_00A0C9DA500E
Austrlia.IND.8579F016_2E80_11D3_B333_00A0C9DA500E
Austrlia.MAP.8579F016_2E80_11D3_B333_00A0C9DA500E
Austrlia.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Be_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Be_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Be_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Be_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Belgium.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Belgium.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Belgium.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Belgium.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Belgium.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Can_caps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Can_caps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Can_caps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Can_caps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Can_caps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Canada.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Canhiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Canhiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Canhiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Canhiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_2k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_2k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_2k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_2k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_2k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_5k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_5k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_5k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_5k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Chcty_5k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
China.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
China.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
China.id.8579F016_2E80_11D3_B333_00A0C9DA500E
China.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
China.map.8579F016_2E80_11D3_B333_00A0C9DA500E
China.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Chinahwy.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Chinahwy.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Chinahwy.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Chinahwy.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Chincaps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Chincaps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Chincaps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Chincaps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Chincaps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty223.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty223.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty223.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty223.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty223.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty_3k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty_3k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty_3k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty_3k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Cncty_3k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Denmark.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Denmark.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Denmark.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Denmark.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Denmark.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Dk_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Dk_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Dk_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Dk_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty11k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty11k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty11k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty11k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty11k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty_6k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty_6k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty_6k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty_6k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Eucty_6k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Eur_caps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Eur_caps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Eur_caps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Eur_caps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Eur_caps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Eurhiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Eurhiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Eurhiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Eurhiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Europe.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Fi_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Fi_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Fi_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Fi_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Finland.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Finland.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Finland.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Finland.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Finland.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Fr_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Fr_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Fr_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Fr_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
France.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
France.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
France.id.8579F016_2E80_11D3_B333_00A0C9DA500E
France.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
France.map.8579F016_2E80_11D3_B333_00A0C9DA500E
France.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty274.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty274.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty274.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty274.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty274.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty609.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty609.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty609.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty609.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Frcty609.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
G_regbez.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
G_regbez.id.8579F016_2E80_11D3_B333_00A0C9DA500E
G_regbez.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
G_regbez.map.8579F016_2E80_11D3_B333_00A0C9DA500E
G_regbez.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_plz2.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_plz2.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_plz2.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_plz2.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ge_plz2.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
GeoDict.DCT.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Germany.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Gr_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Gr_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Gr_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Gr_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Greece.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Greece.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Greece.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Greece.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Greece.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Grid15.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Grid15.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Grid15.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Grid15.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
It_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
It_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
It_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
It_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Italy.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Itcty590.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Itcty590.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Itcty590.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Itcty590.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Itcty590.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Japan.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty142.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty142.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty142.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty142.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty142.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty_55.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty_55.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty_55.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty_55.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpcty_55.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1back.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1back.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1back.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1back.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1case.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1case.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1case.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1case.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1road.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1road.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1road.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1road.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1wate.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1wate.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1wate.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Jpn1wate.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Mapinfow.prj.8579F016_2E80_11D3_B333_00A0C9DA500E
Mapsym.ttf.8579F016_2E80_11D3_B333_00A0C9DA500E
Mapx30.lic.8579F016_2E80_11D3_B333_00A0C9DA500E
Mapx30.ocx.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll regsvr32 windows:4 windows x86 arch:x86

ff19255ba98688f5646a378ed204c42c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mitmdl30

MICalcAffineAlphas
ord144
ord149
MIModifyIndRanges
ord227
ord196
ord114
ord111
ord175
MISetSelectionDrawTools
MIGetSelectionDrawTools
MINumericToSysIndex
MISysIndexToNumeric
MICanInterleavePen
MIGetLineStyleCount
MIDrawObject
MISetConversionResolution
MISelectWithinFeature
MISrvDeInit
MIEnableSelectionRendering
MINumericDistance
MISelectWithinRect
MISelectWithinRadius
MISelectAtPoint
MISetUsePrintLogicForDIBFlag
ord232
MIMapXNoIncDraw
MIUnloadTMDLResources
MILoadTMDLResources
MIFreeLeadTools
MIInitNadCon
MIAddMIDataColumn
ord173
ord206
MIAddListToSelection
MILabelAtPoint
MISelectAll
ord210
ord167
ord141
MINumericToNative
ord211
MINativeToNumeric
ord180
ord181
ord179
ord182
ord118
ord124
ord212
MIDrawLayer
ord120
ord204
ord205
ord213
ord214
MIRemoveFromSelection
MIAddToSelection
MIGetLayerSelectionList
MISetSelectionDisplay
MILayerSearchWithinDistance
MISelectWithinRegionID
MIInitFindInfo
MIFind
MIReleaseFindInfo
MILayerGetObjectKeyValue
MIMemReAlloc
MIMemAlloc
MILayerGetObject
MIGetObjArea
MIFinishStandaloneFeature
MISysIndexToNumericRect
MIGetObjLen
MIGetObjName
ord231
MIExportMapLeadTools
MIThemeLayerVisible
ord119
ord169
ord170
MIQuoteString
MIFindAboveLayer
MIMoveLayer
MIClearSelection
MILayerEndModify
MILayerBeginModify
MILayerEndSearch
MILayerBeginSearch
MISetLayerInfoEx
MIGetFeatureIDFromKeyValue
MIGetLayerInfoEx
MIDrilldownReset
MIBeginDrilldownSearch
MIEndDrilldownSearch
MIGetDrilldownFeatureByID
MIDrillDownAddFeature
MIOpenDrillDownTables
MICloseDrillDownTables
MIBeginDrilldownModify
MIEndDrilldownModify
MIDrillDownRemoveFeature
MIGetLayerProjectionInfo
MILayerGetFieldIDFromName
MILayerGetFieldNameFromID
MIMemLock
MIMemUnlock
MILayerSearchAll
MILayerSearchWithinRect
MILayerSearchAtPoint
MILayerSearchWithinFeature
MILayerDeleteObject
MILayerAddObject
MILayerModifyObject
MIClearCustomLabels
MIDoubleToPoint
MISetSelectionLayer
ord207
ord102
MIAddUserDrawLayer
MIGetRasterAdjustedProjection
ord168
ord209
MIGetLabelInfo
MIConvertUnits
MISetLabelInfo
MISetLabelFieldDefault
MIget_extension
ord166
ord132
ord131
ord128
ord129
ord136
ord133
ord151
ord150
ord147
ord145
ord142
MIFindIsRefining
MIMemFree
MIGetNextMatch
MICreatePositionedTextObject
MICombineObjects
MIAdjustPointsUsingDistance
MIBufferObject
MICombineObjectList
MISetDrawingContexts
ord134
ord105
MIGetEllipsoidInfo
ord160
ord108
ord161
MIFindIsMultiple
MIGetCSysIndex
ord171
MIEnumSourceRows
MIIsServerLayer
MIGetComputedStringValue
MIGetComputedNumericValue
MIBindDynamicColumns
ord109
ord101
MIRefreshLayer
ord183
MINameDataColumn
MIUnloadCustomSymbols
MIRefreshCustomSymbols
MIGetNumRows
MILoadCustomSymbols
MIGetCustomSymbolCount
MIGetCustomSymbolName
MIInitDatumInfo
MIGetDatumInfo
MIGetDefaultCSYSBounds
ord146
ord164
ord157
ord176
ord156
ord230
ord228
ord113
ord217
ord117
ord229
ord201
ord163
ord127
MIgeodict_GetGeoTableIDFromNameGeodictOnly
ord115
ord159
MIFindIsExact
MIFindUseSubstitution
MIFindIsInRange
MIFindIsIntersect
MIListEnumerate
MIListCount
ord158
MIResetFindInfo
MILayerSysToNumericRect
MIListInitIndexEnumerator
MIListGetByIndex
MIListRemove
MIListIsMember
MIListNew
MIListAdd
MIMemDupHandle
MIMousePointToNumeric
MINumericToSys
MIIsDistanceUnit
ord197
ord177
MIGetAnnotation
MIInitDefaultDatumInfo
MISysToNumeric
MIDeleteColumn
MISetSearchPaths
MIInitCSYSParms

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

mfc42

ord6375
ord5618
ord994
ord819
ord269
ord826
ord600
ord1578
ord1255
ord1253
ord1570
ord1197
ord342
ord1182
ord1577
ord1575
ord6412
ord2860
ord1265
ord2714
ord5322
ord3460
ord4713
ord449
ord4252
ord1892
ord355
ord2515
ord3452
ord3639
ord3402
ord4401
ord2581
ord4219
ord6100
ord5890
ord2937
ord1779
ord5953
ord3098
ord4055
ord3918
ord2302
ord2266
ord2301
ord692
ord3577
ord3352
ord4397
ord2576
ord4217
ord2024
ord2413
ord6366
ord1771
ord4644
ord2243
ord5789
ord3993
ord2556
ord283
ord362
ord672
ord6031
ord5918
ord2642
ord3535
ord4092
ord6101
ord2288
ord2299
ord2287
ord2367
ord2284
ord2364
ord2298
ord2370
ord2278
ord746
ord4625
ord3279
ord4438
ord5286
ord6371
ord5011
ord4843
ord4672
ord4570
ord1212
ord818
ord1146
ord5781
ord2379
ord4903
ord5269
ord5233
ord4648
ord5328
ord5325
ord4988
ord3003
ord2988
ord5492
ord6141
ord5008
ord4992
ord6030
ord1099
ord4297
ord4133
ord4317
ord6119
ord472
ord1199
ord4025
ord3920
ord4740
ord4390
ord4735
ord5033
ord4996
ord4788
ord4915
ord4914
ord4771
ord4770
ord4765
ord5573
ord5888
ord4760
ord4756
ord4743
ord4949
ord2541
ord5335
ord5321
ord5332
ord5316
ord1131
ord1132
ord1116
ord1176
ord5265
ord4376
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord3692
ord3571
ord641
ord540
ord324
ord825
ord3626
ord3663
ord800
ord2414
ord4234
ord4853
ord4299
ord3092
ord6197
ord1641
ord1168
ord4710
ord755
ord640
ord939
ord4160
ord5875
ord6172
ord5785
ord5791
ord1640
ord323
ord470
ord6041
ord823
ord4424
ord1206
ord2623
ord1223
ord4622
ord2486
ord4003
ord446
ord743
ord2868
ord3204
ord3206
ord802
ord542
ord2740
ord879
ord2801
ord882
ord860
ord858
ord535
ord922
ord924
ord3978
ord5710
ord4129
ord5609
ord2777
ord940
ord941
ord926
ord537
ord428
ord3573
ord4278
ord4023
ord2557
ord1085
ord5601
ord1200
ord2864
ord3619
ord3237
ord3945
ord1601
ord2795
ord6055
ord1776
ord4396
ord5290
ord3572
ord567
ord609
ord4275
ord2452
ord6241
ord2754
ord2859
ord2614
ord6364
ord3326
ord6365
ord4472
ord5498
ord3278
ord3353
ord3681
ord1226
ord1214
ord2915
ord1567
ord268
ord4277
ord2763
ord5572
ord2764
ord4204
ord715
ord415
ord1081
ord2775
ord5605
ord2730
ord2729
ord4021
ord599
ord2727
ord1243
ord713
ord414
ord5859
ord1175
ord2818
ord1871
ord266
ord5460
ord861
ord1955
ord1572
ord465
ord341
ord654
ord541
ord801
ord568
ord5312
ord3230
ord5861
ord5858
ord2393
ord1770
ord462
ord2460
ord855
ord2817
ord3988
ord464
ord850
ord5440
ord539
ord5597
ord435
ord844
ord396
ord698
ord5630
ord4187
ord911
ord1267
ord1268
ord5683
ord6400
ord1799
ord4226
ord3976
ord996
ord798
ord1997
ord6407
ord5194
ord533
ord5314
ord5331
ord5333
ord5313
ord5327
ord6194
ord2405
ord705
ord5903
ord1705
ord430
ord5571
ord2450
ord2753
ord5865
ord406
ord5678
ord6186
ord6192
ord6021
ord5736
ord857
ord536
ord2652
ord1669
ord5681
ord815
ord4113
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2724
ord4079
ord4698
ord5307
ord5289
ord5714
ord3952
ord3401
ord3670
ord561
ord1193
ord1151
ord6354
ord1216
ord1227
ord290
ord614
ord4666
ord6042
ord1877
ord4006
ord4249
ord2687
ord1177
ord1210
ord5465
ord532
ord2439
ord1693
ord4649
ord4637
ord4342
ord4687
ord4639
ord5674
ord2156
ord4856
ord4920
ord2137
ord1963
ord5213
ord2953
ord3868
ord5150
ord4705
ord4707
ord2876
ord2998
ord5649
ord4738
ord4768
ord4650
ord4548
ord4521
ord4594
ord4925
ord4930
ord4935
ord4659
ord4909
ord4908
ord4668
ord4667
ord2954
ord4689
ord5023
ord4654
ord4354
ord4780
ord2983
ord3148
ord4636
ord5060
ord4584
ord4371
ord4361
ord4356
ord4739
ord4741
ord3080
ord4409
ord4603
ord4415
ord4979
ord2488
ord3404
ord3946
ord2384
ord6370
ord423
ord2388
ord3260
ord4466
ord2986
ord4624
ord5825
ord723
ord6004
ord2794
ord3693
ord6002
ord5787
ord6281

msvcrt

_adjust_fdiv
?terminate@@YAXXZ
malloc
_initterm
_onexit
_except_handler3
??1type_info@@UAE@XZ
time
__dllonexit
_EH_prolog
_open
srand
rand
_findfirst
_close
_mbsnbicmp
_errno
free
_findnext
_findclose
_makepath
fabs
pow
wcslen
atan
_write
cos
sin
sprintf
atoi
strtod
_purecall
sqrt
_mbscmp
_mbsrchr
_CxxThrowException
_splitpath
_mbsinc
_mbsicmp
_mbsnbcpy
_strdup
atof
wcscpy
_ftol
_mbslen
_mbsnccnt
_mbctype
_mbsnbcnt
__CxxFrameHandler
_itoa
_ltoa

kernel32

GetTempFileNameA
LocalAlloc
LocalFree
GetProcAddress
lstrlenA
MulDiv
GetVersionExA
GetModuleHandleA
GetCurrentDirectoryA
SetCurrentDirectoryA
OutputDebugStringA
GetShortPathNameA
DeleteFileA
GetTempPathA
GlobalUnlock
FindResourceA
LoadResource
LockResource
GlobalSize
GetLocaleInfoA
GetUserDefaultLCID
GetSystemDefaultLCID
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameA
lstrcpyA
OpenFile
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalFree

user32

IsClipboardFormatAvailable
SetCursor
OpenClipboard
EmptyClipboard
CloseClipboard
PtInRect
GetClipboardData
SetCaretPos
RedrawWindow
RegisterClipboardFormatA
IntersectRect
EnableWindow
GetWindowRect
GetClientRect
InflateRect
GetSysColor
GetSystemMetrics
DrawFrameControl
GetAsyncKeyState
EqualRect
SetTimer
ScreenToClient
FillRect
CopyRect
OffsetRect
ReleaseCapture
DispatchMessageA
GetCapture
GetMessageA
SetCapture
HideCaret
ShowCaret
CreateCaret
ReleaseDC
GetDC
DrawFocusRect
UnionRect
LoadCursorA
SendMessageA
GetCursorPos
KillTimer
LoadBitmapA
IsWindow
PeekMessageA
SetClipboardData
GetKeyState
DestroyCaret
InvalidateRect

gdi32

GetTextMetricsA
DPtoLP
PatBlt
CreatePen
SelectObject
SaveDC
IntersectClipRect
RestoreDC
GetViewportExtEx
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
SetMapMode
GetMapMode
DeleteDC
DeleteObject
Rectangle
Ellipse
GetStockObject
GetDeviceCaps
CreateDCA
CreateMetaFileA
CloseMetaFile
DeleteMetaFile
CreateCompatibleBitmap
GetNearestColor
CreatePalette
CreateDIBitmap
SelectPalette
GetDIBits
GetMetaFileBitsEx
CreateFontIndirectA
GetTextExtentPointA
CreateSolidBrush
CreateCompatibleDC
RealizePalette
BitBlt
GetObjectA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

ReleaseStgMedium
CLSIDFromString
CoGetMalloc
CoGetClassObject
OleInitialize
OleUninitialize

oleaut32

SysAllocString
VariantCopyInd
OleTranslateColor
LoadTypeLi
GetErrorInfo
SafeArrayGetLBound
SafeArrayCreate
SafeArrayPutElement
SafeArrayDestroy
SysAllocStringByteLen
VariantChangeType
SafeArrayGetUBound
SafeArrayGetElement
VariantClear
VariantCopy
VariantInit
SysFreeString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mexico.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Mexico.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Mexico.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Mexico.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Mexico.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Mexico.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Midlg30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

187b5862c77b4063676bd24858443431

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc42

ord6055
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5290
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3402
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord4078
ord1776
ord818
ord1949
ord535
ord433
ord3525
ord4033
ord6093
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord3953
ord2725
ord355
ord2515
ord3452
ord941
ord641
ord1572
ord839
ord537
ord858
ord465
ord850
ord6394
ord5450
ord6383
ord5440
ord860
ord1656
ord2135
ord567
ord464
ord1575
ord1577
ord6412
ord3663
ord798
ord823
ord4129
ord800
ord6283
ord4278
ord2764
ord6282
ord5465
ord532
ord1669
ord1168
ord2141
ord434
ord3131
ord3613
ord2140
ord2393
ord1955
ord5575
ord5651
ord1182
ord342
ord1197
ord1570
ord1253
ord1255
ord1243
ord1578
ord599
ord600
ord826
ord269
ord540
ord825
ord1116
ord2652
ord1176

msvcrt

free
_adjust_fdiv
_onexit
_initterm
_mbscmp
_gcvt
_splitpath
atof
_ltoa
atol
_purecall
__CxxFrameHandler
ceil
malloc
_ftol
_itoa
strchr
_EH_prolog
??1type_info@@UAE@XZ
_except_handler3
?terminate@@YAXXZ
__dllonexit

kernel32

Sleep
lstrlenA
LockResource
LoadResource
FindResourceA
lstrcatA
GetVersionExA
_lclose
_lread
_lopen
lstrcpyA
GetModuleFileNameA
lstrcmpiA
GetModuleHandleA
LoadLibraryA
FreeLibrary
_lwrite
_lcreat
lstrcmpA
LocalFree
LocalAlloc

user32

CallNextHookEx
GetSysColor
ClientToScreen
ScreenToClient
ReleaseCapture
CheckDlgButton
SetCapture
BeginPaint
GetCapture
DestroyWindow
GetDesktopWindow
CreateWindowExA
GetDC
ReleaseDC
DrawTextA
GetFocus
UnhookWindowsHookEx
GetWindowLongA
GetWindowRect
SetWindowPos
SetWindowsHookExA
InvalidateRect
UpdateWindow
DefWindowProcA
GetClientRect
EndPaint
GetCursor
SetCursor
PostMessageA
SetWindowLongA
GetParent
SendMessageA
GetCursorPos
PtInRect
SetFocus
UnregisterClassA
LoadCursorA
RegisterClassA
IsDlgButtonChecked
CheckRadioButton
LoadBitmapA
GetWindowTextA
SetWindowTextA
GetDlgItem
EnableWindow
MessageBeep
EndDialog
SendDlgItemMessageA
WinHelpA
DialogBoxIndirectParamA
LoadStringA
ShowWindow
IsWindowVisible
MoveWindow

gdi32

CreateDCA
GetObjectA
CreateICA
GetSystemPaletteEntries
GetBitmapBits
EnumFontFamiliesA
GetDeviceCaps
CreateFontA
GetTextMetricsA
MoveToEx
LineTo
GetStockObject
CreateCompatibleDC
SelectObject
CreateSolidBrush
Rectangle
CreateCompatibleBitmap
BitBlt
CreatePatternBrush
DeleteDC
StretchBlt
CreatePen
DeleteObject

comdlg32

ChooseColorA

msvcp50

??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
??1_Lockit@std@@QAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
??0_Lockit@std@@QAE@XZ
?_Global@_Locimp@locale@std@@0PAV123@A
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADHD@Z
??1istrstream@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1ios_base@std@@UAE@XZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
?ignore@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@HH@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAF@Z
?ws@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?_Init@locale@std@@CAPAV_Locimp@12@XZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??1strstreambuf@std@@UAE@XZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z

Exports

Exports

?PickText@@YGHPAUHWND__@@PAUIDispatch@@PBDJH@Z
BarThemeStyle
CreateBrushSample
CreateLineSample
CreateSymbolSample
CreateTextSample
DotDensThemeStyle
DrawBrushSample
DrawLineSample
DrawSymbolSample
DrawTextSample
GradSymbThemeStyle
IndividualThemeStyle
LayerControl
LegendStyle
LoadCustomColors
PickBrush
PickCSys
PickLine
PickSymbol
PieThemeStyle
RangedThemeStyle
SaveCustomColors
SaveSampleBitmap

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Midlin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

e07e00e45407ff0dd6abc9eaa981fa7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
_adjust_fdiv
free

Sections

.text
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 197B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Migm30.exe.8579F016_2E80_11D3_B333_00A0C9DA500E
.exe windows:4 windows x86 arch:x86

e78b005127bc88312fd41a6876714a63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mitmdl30

ord156
ord160
ord155
ord173
ord105
ord206
ord150
ord145
ord149
ord146
ord226
MIUnloadTMDLResources
ord164
ord147
ord158
ord132
ord131
MILoadTMDLResources
ord202
MIgeotable_RemoveGeosetName
ord152
ord161
ord157
ord142
ord144
ord133
ord136
ord129
ord137
ord130
ord108
ord112
ord201
ord127

mfc42

ord6375
ord3738
ord3626
ord2414
ord1576
ord2340
ord2645
ord2086
ord3499
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord6055
ord1776
ord5290
ord3402
ord4424
ord3721
ord5265
ord4376
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord800
ord795
ord692
ord616
ord641
ord860
ord540
ord567
ord324
ord825
ord609
ord656
ord2299
ord2370
ord2302
ord4234
ord2652
ord2642
ord3092
ord5572
ord2915
ord858
ord4710
ord5981
ord1199
ord6334
ord535
ord537
ord1168
ord4160
ord6199
ord4853
ord3803
ord1200
ord2817
ord3663
ord3573
ord1641
ord470
ord815
ord5787
ord2859
ord2566
ord1126
ord4133
ord4297
ord2753
ord823
ord4275
ord2379
ord2860
ord2864
ord3706
ord5781
ord1567
ord665
ord5583
ord1979
ord353
ord268
ord3790
ord4204
ord4277
ord939
ord940
ord4129
ord2763
ord2614
ord3452
ord2515
ord355
ord4274
ord798
ord4486
ord2554
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord4396
ord715
ord3574
ord415
ord561
ord617
ord1147
ord296
ord2621
ord941
ord1081
ord922
ord5597
ord5605
ord924
ord2725
ord4159
ord4673
ord1997
ord5466
ord5194
ord533
ord2818
ord2819
ord2512
ord2575
ord1768
ord3610
ord1871
ord266
ord4225
ord5232
ord1146
ord2863
ord1669
ord5268
ord755
ord6197
ord5718
ord3797
ord2146

msvcrt

__p__fmode
__p__commode
__setusermatherr
malloc
_controlfp
_adjust_fdiv
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
_findfirst
__set_app_type
_errno
_stricmp
_ftol
_findnext
_findclose
isspace
_strnicmp
_splitpath
_chdrive
_chdir
strncpy
_access
free
_strdup
strrchr
_except_handler3
ceil
__CxxFrameHandler
_setmbcp

kernel32

GetModuleFileNameA
GetStartupInfoA
GetModuleHandleA
FindResourceA
LoadResource
LockResource
GetFileAttributesA
GetShortPathNameA
FreeLibrary
CopyFileA
SetFileAttributesA
LoadLibraryA

user32

SetClassLongA
AppendMenuA
GetSystemMenu
GetWindowRect
SetActiveWindow
LoadIconA
IsWindowEnabled
DrawIcon
GetSystemMetrics
IsIconic
GetActiveWindow
CopyRect
InflateRect
SetRect
PtInRect
RedrawWindow
GetDC
FillRect
ReleaseDC
GetClientRect
GetSysColor
GetWindowLongA
WinHelpA
SendMessageA
EnableWindow
GetKeyState
GetParent

gdi32

CreateSolidBrush
DeleteObject
CreateRectRgnIndirect
GetTextColor
GetBkColor
GetTextMetricsA
Rectangle

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Mitmdl30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

0f5bf0d0240ed7b8383a7d7aa1f9927d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GlobalSize
GlobalHandle
GlobalReAlloc
GlobalAlloc
FindNextFileA
GetLocalTime
FindClose
GlobalUnlock
FindFirstFileA
GlobalLock
SetErrorMode
GlobalFree
GetWindowsDirectoryA
GetLastError
GetTempPathA
GetCurrencyFormatA
GetNumberFormatA
LoadLibraryA
GetTickCount
lstrcmpA
lstrcmpiA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetProcessHeap
lstrlenA
GetLogicalDriveStringsA
HeapFree
HeapAlloc
HeapSize
GetLogicalDrives
GetDriveTypeA
GetVolumeInformationA
GetProcAddress
GetACP
GetOEMCP
GetModuleHandleA
FreeLibrary
GetFileAttributesA
OutputDebugStringA
GetModuleFileNameA
GetVersion
MultiByteToWideChar
IsDBCSLeadByte

user32

CharNextA
CharPrevA
CharLowerA
wsprintfA
CharUpperA
IsCharUpperA
IsCharAlphaA
IsCharAlphaNumericA
CharToOemA
IsCharLowerA
OemToCharA
GetActiveWindow
LoadStringA
MessageBoxA
ReleaseDC
GetDC
LoadBitmapA

gdi32

Ellipse
CreateHatchBrush
EnumFontFamiliesExA
SetBkMode
GetTextMetricsA
GetNearestColor
GetDeviceCaps
EndPath
FillPath
BeginPath
RealizePalette
CreateBitmap
SelectPalette
CreateDIBitmap
GetObjectA
SetBkColor
LPtoDP
RestoreDC
SaveDC
SetMapMode
GetWindowOrgEx
GetMapMode
GetViewportOrgEx
SetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
GetViewportExtEx
GetWindowExtEx
DPtoLP
CreateCompatibleDC
SetViewportExtEx
CreateCompatibleBitmap
SetStretchBltMode
SelectObject
PatBlt
CreateSolidBrush
StretchBlt
GetStockObject
DeleteObject
BitBlt
StretchDIBits
DeleteDC
MoveToEx
LineTo
SetTextColor
Arc
Polygon
GetTextFaceA
CreateFontIndirectA
IntersectClipRect
CreatePen
CreatePatternBrush
Polyline
SetROP2
GetTextExtentPoint32A
TextOutA
Pie
RoundRect
Rectangle

ole32

CoInitialize
CoUninitialize
CoGetClassObject

oleaut32

VariantInit
SysAllocStringLen
SysFreeString
SysAllocStringByteLen
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

msvcrt

strpbrk
strcspn
tan
_fdopen
exp
_lseek
_stat
_initterm
_getdrive
_adjust_fdiv
time
localtime
_getdcwd
ceil
srand
_strcmpi
__mb_cur_max
_isctype
rand
_strnicmp
_access
_chsize
strncmp
_msize
strchr
calloc
sscanf
realloc
rename
vsprintf
_read
_write
_sopen
_close
strtod
strtol
sprintf
memmove
pow
log10
fabs
_ftol
atan
fmod
bsearch
strtoul
sqrt
ldexp
log
cos
sin
asin
atan2
_itoa
_splitpath
remove
_pctype
strrchr
strspn
strstr
strtok
__CxxFrameHandler
floor
free
malloc
acos
qsort
_errno
fseek
fclose
ftell
fgetc
fread
fputs
fwrite

Exports

Exports

MIAddListToSelection
MIAddMIDataColumn
MIAddToSelection
MIAddUserDrawLayer
MIAdjustPointsUsingDistance
MIBeginDrilldownModify
MIBeginDrilldownSearch
MIBindDynamicColumns
MIBufferObject
MICalcAffineAlphas
MICanInterleavePen
MIClearCustomLabels
MIClearSelection
MICloseDrillDownTables
MICombineObjectList
MICombineObjects
MIConvertUnits
MICreatePositionedTextObject
MICreateTable
MIDeleteColumn
MIDoubleToPoint
MIDrawLayer
MIDrawObject
MIDrillDownAddFeature
MIDrillDownRemoveFeature
MIDrilldownReset
MIEnableSelectionHighlighting
MIEnableSelectionRendering
MIEndDrilldownModify
MIEndDrilldownSearch
MIEnumSourceRows
MIExportMapLeadTools
MIFetchSelection
MIFind
MIFindAboveLayer
MIFindIsExact
MIFindIsInRange
MIFindIsIntersect
MIFindIsMultiple
MIFindIsRefining
MIFindUseSubstitution
MIFinishStandaloneFeature
MIFreeLeadTools
MIGetAnnotation
MIGetCSysFromIndex
MIGetCSysIndex
MIGetCSysIndex2
MIGetComputedNumericValue
MIGetComputedStringValue
MIGetCustomSymbolCount
MIGetCustomSymbolName
MIGetDatumInfo
MIGetDefaultCSYSBounds
MIGetDrilldownFeatureByID
MIGetEllipsoidInfo
MIGetFeatureIDFromKeyValue
MIGetLabelInfo
MIGetLayerInfoEx
MIGetLayerProjectionInfo
MIGetLayerSelectionList
MIGetLineStyleCount
MIGetNextMatch
MIGetNumRows
MIGetNumericCSYS
MIGetObjArea
MIGetObjCentroid
MIGetObjLen
MIGetObjName
MIGetObjType
MIGetRasterAdjustedProjection
MIGetSelectionCount
MIGetSelectionDrawTools
MIGetTableProjectionInfo
MIInitCSYSParms
MIInitDatumInfo
MIInitDefaultCSYS
MIInitDefaultDatumInfo
MIInitExportMapToMTF
MIInitFindInfo
MIInitNadCon
MIIsDistanceUnit
MIIsServerLayer
MILabelAtPoint
MILayerAddObject
MILayerBeginModify
MILayerBeginSearch
MILayerDeleteObject
MILayerEndModify
MILayerEndSearch
MILayerGetFieldIDFromName
MILayerGetFieldNameFromID
MILayerGetObject
MILayerGetObjectKeyValue
MILayerModifyObject
MILayerNumericToSys
MILayerNumericToSysRect
MILayerSearchAll
MILayerSearchAtPoint
MILayerSearchWithinDistance
MILayerSearchWithinFeature
MILayerSearchWithinRect
MILayerSys1ToSys2
MILayerSysToNumeric
MILayerSysToNumericRect
MIListAdd
MIListCount
MIListEnumerate
MIListGetByIndex
MIListInitIndexEnumerator
MIListIsMember
MIListNew
MIListRemove
MILoadCustomSymbols
MILoadTMDLResources
MIMapXNoIncDraw
MIMemAlloc
MIMemDupHandle
MIMemFree
MIMemLock
MIMemReAlloc
MIMemUnlock
MIModifyIndRanges
MIMousePointToNumeric
MIMoveLayer
MINameDataColumn
MINativeToNumeric
MINumericDistance
MINumericToNative
MINumericToSys
MINumericToSysIndex
MINumericToSysIndexRect
MIOpenDrillDownTables
MIOpenTableHidden
MIQuoteString
MIRecordIsSelected
MIRefreshCustomSymbols
MIRefreshLayer
MIReleaseFindInfo
MIReloadCustomSymbols
MIRemoveFromSelection
MIResetFindInfo
MISelectAll
MISelectAtPoint
MISelectWithinDistance
MISelectWithinFeature
MISelectWithinRadius
MISelectWithinRect
MISelectWithinRegion
MISelectWithinRegionID
MISetConversionResolution
MISetDrawingContexts
MISetFindInfo
MISetLabelFieldDefault
MISetLabelInfo
MISetLayerInfoEx
MISetSearchPaths
MISetSelectionDisplay
MISetSelectionDrawTools
MISetSelectionLayer
MISetUsePrintLogicForDIBFlag
MISrvDeInit
MISysIndexToNumeric
MISysIndexToNumericRect
MISysToNumeric
MIThemeLayerVisible
MIUnloadCustomSymbols
MIUnloadTMDLResources
MIgeodict_GetGeoTableIDFromNameGeodictOnly
MIgeomatch_BindDynamicColumn
MIgeomatch_FetchKey
MIgeotable_RemoveGeosetName
MIget_extension
MImake_extension
MapIDListAdd
MapIDListRemove

Sections

.text
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mitmin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

e07e00e45407ff0dd6abc9eaa981fa7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
_adjust_fdiv
free

Sections

.text
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Mx_caps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_caps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_caps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_caps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_caps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_hiway.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Mx_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty364.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty364.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty364.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty364.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty364.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty_2k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty_2k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty_2k.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty_2k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxcty_2k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Mxintl30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

e07e00e45407ff0dd6abc9eaa981fa7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
_adjust_fdiv
free

Sections

.text
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Ne_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ne_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ne_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ne_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Nethrlnd.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Nethrlnd.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Nethrlnd.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Nethrlnd.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Nethrlnd.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
No_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
No_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
No_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
No_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Norway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Norway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Norway.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Norway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Norway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean_ll.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean_ll.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean_ll.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocean_ll.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocn_asia.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocn_asia.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocn_asia.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ocn_asia.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Portugal.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Portugal.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Portugal.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Portugal.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Portugal.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Sample.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Se_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Se_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Se_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Se_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Sp_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Sp_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Sp_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Sp_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Spain.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Sweden.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Sweden.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Sweden.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Sweden.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Sweden.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Switzlnd.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Switzlnd.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Switzlnd.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Switzlnd.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Switzlnd.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Swzhiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Swzhiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Swzhiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Swzhiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ttmicg__.ttf.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_a_rds.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_a_rds.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_a_rds.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_a_rds.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_regns.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_regns.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_regns.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_regns.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Uk_regns.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukcty215.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukcty215.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukcty215.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukcty215.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukcty215.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukmtrway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukmtrway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukmtrway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Ukmtrway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Us.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_cnty.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_cnty.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_cnty.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_cnty.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_cnty.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_hiway.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Us_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa_caps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa_caps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa_caps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa_caps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Usa_caps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_1k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_1k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_1k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_1k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_20.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_20.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_20.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_20.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_8k.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_8k.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_8k.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Uscty_8k.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Wldcty25.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Wldcty25.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Wldcty25.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Wldcty25.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Wldcty25.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
World.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
World.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
World.id.8579F016_2E80_11D3_B333_00A0C9DA500E
World.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
World.map.8579F016_2E80_11D3_B333_00A0C9DA500E
World.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
Worldcap.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
Worldcap.id.8579F016_2E80_11D3_B333_00A0C9DA500E
Worldcap.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
Worldcap.map.8579F016_2E80_11D3_B333_00A0C9DA500E
Worldcap.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
austrlia.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
dc.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_areas.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_areas.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_areas.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_areas.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_areas.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_bdys.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_bdys.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_bdys.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_bdys.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_bdys.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_hiway.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_hiway.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_hiway.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_hiway.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_hiway.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_intst.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_intst.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_intst.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_intst.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_intst.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_pts.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_pts.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_pts.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_pts.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_pts.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_rds.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_rds.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_rds.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_rds.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_rds.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_strds.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_strds.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_strds.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_strds.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_strds.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_water.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_water.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_water.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_water.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_zips.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_zips.id.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_zips.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_zips.map.8579F016_2E80_11D3_B333_00A0C9DA500E
dc_zips.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_caps.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_caps.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_caps.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_caps.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_caps.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_cnty.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_cnty.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_cnty.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_cnty.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_cnty.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_hwy.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_hwy.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_hwy.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_hwy.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_hwy.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_maj.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_maj.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_maj.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_maj.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_maj.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_min.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_min.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_min.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_min.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_min.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_st.dat.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_st.id.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_st.ind.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_st.map.8579F016_2E80_11D3_B333_00A0C9DA500E
mid_st.tab.8579F016_2E80_11D3_B333_00A0C9DA500E
midatlan.gst.8579F016_2E80_11D3_B333_00A0C9DA500E
migmin30.dll.8579F016_2E80_11D3_B333_00A0C9DA500E
.dll windows:4 windows x86 arch:x86

e07e00e45407ff0dd6abc9eaa981fa7b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_initterm
malloc
_adjust_fdiv
free

Sections

.text
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
zipcodes.cpf.8579F016_2E80_11D3_B333_00A0C9DA500E
zipcodes.tab.8579F016_2E80_11D3_B333_00A0C9DA500E

Sharing

General

Malware Config

Signatures

Files

ff19255ba98688f5646a378ed204c42c

Headers

File Characteristics

Imports

mitmdl30

version

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 492KB - Virtual size: 492KB

.rdata Size: 107KB - Virtual size: 107KB

.data Size: 13KB - Virtual size: 19KB

.rsrc Size: 84KB - Virtual size: 83KB

.reloc Size: 42KB - Virtual size: 41KB

187b5862c77b4063676bd24858443431

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

comdlg32

msvcp50

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 2KB - Virtual size: 8KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 10KB - Virtual size: 9KB

e07e00e45407ff0dd6abc9eaa981fa7b

Headers

File Characteristics

Imports

msvcrt

Sections

.text Size: 512B - Virtual size: 438B

.rdata Size: 512B - Virtual size: 197B

.data Size: 512B - Virtual size: 36B

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 512B - Virtual size: 156B

e78b005127bc88312fd41a6876714a63

Headers

File Characteristics

Imports

mitmdl30

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 19KB - Virtual size: 18KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

0f5bf0d0240ed7b8383a7d7aa1f9927d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

.text
Size: 492KB - Virtual size: 492KB

.rdata
Size: 107KB - Virtual size: 107KB

.data
Size: 13KB - Virtual size: 19KB

.rsrc
Size: 84KB - Virtual size: 83KB

.reloc
Size: 42KB - Virtual size: 41KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 2KB - Virtual size: 8KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 10KB - Virtual size: 9KB

.text
Size: 512B - Virtual size: 438B

.rdata
Size: 512B - Virtual size: 197B

.data
Size: 512B - Virtual size: 36B

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 512B - Virtual size: 156B

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 19KB - Virtual size: 18KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.text
Size: 804KB - Virtual size: 804KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 53KB - Virtual size: 1.0MB

.rsrc
Size: 1024B - Virtual size: 960B

.reloc
Size: 27KB - Virtual size: 26KB

.text
Size: 512B - Virtual size: 438B

.rdata
Size: 512B - Virtual size: 138B

.data
Size: 512B - Virtual size: 36B

.rsrc
Size: 62KB - Virtual size: 61KB

.reloc
Size: 512B - Virtual size: 256B

.text
Size: 512B - Virtual size: 438B

.rdata
Size: 512B - Virtual size: 138B

.data
Size: 512B - Virtual size: 36B

.rsrc
Size: 171KB - Virtual size: 171KB

.reloc
Size: 512B - Virtual size: 396B

.text
Size: 512B - Virtual size: 438B

.rdata
Size: 512B - Virtual size: 138B

.data
Size: 512B - Virtual size: 36B

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 512B - Virtual size: 166B