One_Click_Active_v11[.]0[.]zip

Resubmissions

26/01/2024, 12:48

240126-p172kafdcj 3

26/01/2024, 11:56

240126-n4faaadac8 7

Sharing

Copy URL Twitter E-mail

General

Target

One_Click_Active_v11.0.zip
Size

15.2MB
MD5

4d56c9cdc189df27bc12fe16f2cc65b9
SHA1

b54a3e62e4df398a0969d45cd851ebec6d19f5c9
SHA256

bba95baaef6b6fb5618c5d9b761ca272a2469d94cf65a549fff7ddcf5dcacb11
SHA512

bc81c50d24d2242b1c896f4d796d1fc1226fca59a84876a43198b3006ea96ca1616dd8adee4c8b4ec6f7880a01ae7d97a070b9777e9a744cc2af1f77843d52a2
SSDEEP

393216:BykmHG5Fr6xvNVu7h9g8uhWH/d1Z02uRl69dgFrxmae:SHGTrLk8uhG/dPNPTimae

Score

3^/10

Malware Config

Signatures

Unsigned PE 10 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Ash_Inet2.Interop.dll
unpack001/Ash_Lang2.Interop.dll
unpack001/Common.dll
unpack001/LangID2.Interop.dll
unpack001/Peru.Interop.dll
unpack001/ash_lang2.dll
unpack001/ash_libcurl.dll
unpack001/langid2.dll
unpack001/langperuid2.exe
unpack001/peru.dll

Files

One_Click_Active_v11.0.zip
.zip

Password: cacas
Ash_Inet2.Interop.dll
.dll windows:4 windows x86 arch:x86

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Ash_Lang2.Interop.dll
.dll windows:4 windows x86 arch:x86

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\development-finals\own\trunk-cs\ash_lang\build\win-x86-dynamic\Ash_Lang2.Interop\obj\Win32\Release\Ash_Lang2.Interop.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Common.dll
.dll windows:4 windows x86 arch:x86

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\development-finals\own\trunk-cs\Common\build\win-x86-dynamic\Common\obj\Win32\Release\Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 526KB - Virtual size: 526KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
InterCommon
.7z
LangID2.Interop.dll
.dll windows:4 windows x86 arch:x86

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\development-finals\own\trunk-cs\LangID\build\win-x86-dynamic\LangID2.Interop\obj\Win32\Release\LangID2.Interop.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 215KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 980B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Languages/CommonCS-bg-BG.ashLang
Languages/CommonCS-ca-ES.ashLang
Languages/CommonCS-cs-CZ.ashLang
Languages/CommonCS-da-DK.ashLang
Languages/CommonCS-de-DE.ashLang
Languages/CommonCS-el-GR.ashLang
Languages/CommonCS-en-GB.ashLang
Languages/CommonCS-en-US.ashLang
Languages/CommonCS-es-ES.ashLang
Languages/CommonCS-fi-FI.ashLang
Languages/CommonCS-fr-FR.ashLang
Languages/CommonCS-hu-HU.ashLang
Languages/CommonCS-it-IT.ashLang
Languages/CommonCS-nl-NL.ashLang
Languages/CommonCS-no-no.ashLang
Languages/CommonCS-pl-PL.ashLang
Languages/CommonCS-pt-BR.ashLang
Languages/CommonCS-pt-PT.ashLang
Languages/CommonCS-ro-RO.ashLang
Languages/CommonCS-ru-RU.ashLang
Languages/CommonCS-sl-SI.ashLang
Languages/CommonCS-sr-RS.ashLang
Languages/CommonCS-sr-YU.ashLang
Languages/CommonCS-sv-SE.ashLang
Languages/CommonCS-tr-TR.ashLang
Languages/CommonCS-zh-TW.ashLang
Languages/ashinet3-ar-EG.ashLang
Languages/ashinet3-ar-SA.ashLang
Languages/ashinet3-be-BY.ashlang
Languages/ashinet3-bg-BG.ashLang
Languages/ashinet3-ca-ES.ashLang
Languages/ashinet3-cs-CZ.ashLang
Languages/ashinet3-da-DK.ashLang
Languages/ashinet3-de-DE.ashLang
Languages/ashinet3-el-gr.ashLang
Languages/ashinet3-en-GB.ashLang
Languages/ashinet3-en-US.ashLang
Languages/ashinet3-es-AR.ashLang
Languages/ashinet3-es-ES.ashlang
Languages/ashinet3-fa-IR.ashLang
Languages/ashinet3-fi-FI.ashLang
Languages/ashinet3-fr-FR.ashLang
Languages/ashinet3-he-IL.ashLang
Languages/ashinet3-hr-HR.ashLang
Languages/ashinet3-hu-HU.ashLang
Languages/ashinet3-hy-AM.ashLang
Languages/ashinet3-it-IT.ashLang
Languages/ashinet3-ja-jp.ashlang
Languages/ashinet3-ko-KR.ashLang
Languages/ashinet3-lv-LV.ashlang
Languages/ashinet3-nl-NL.ashLang
Languages/ashinet3-nn-NO.ashLang
Languages/ashinet3-no-NO.ashlang
Languages/ashinet3-pl-PL.ashLang
Languages/ashinet3-pt-BR.ashLang
Languages/ashinet3-pt-PT.ashLang
Languages/ashinet3-ro-RO.ashlang
Languages/ashinet3-ru-RU.ashLang
Languages/ashinet3-sk-SK.ashLang
Languages/ashinet3-sl-SI.ashLang
Languages/ashinet3-sr-RS.ashLang
Languages/ashinet3-sr-YU.ashLang
Languages/ashinet3-sv-SE.ashLang
Languages/ashinet3-tr-TR.ashLang
Languages/ashinet3-uk-UA.ashLang
Languages/ashinet3-vi-VN.ashLang
Languages/ashinet3-zh-CN.ashlang
Languages/ashinet3-zh-TW.ashLang
Languages/commoncs-nn-NO.ashlang
Languages/edaumio.txt
.ps1
Languages/peru-ar-EG.ashLang
Languages/peru-ar-sa.ashLang
Languages/peru-az-AZ.ashLang
Languages/peru-be-by.ashLang
Languages/peru-bg-bg.ashLang
Languages/peru-bs-BA.ashLang
Languages/peru-ca-es.ashLang
Languages/peru-cs-cz.ashLang
Languages/peru-da-dk.ashLang
Languages/peru-de-de.ashLang
Languages/peru-el-gr.ashLang
Languages/peru-en-gb.ashLang
Languages/peru-en-us.ashLang
Languages/peru-es-ar.ashlang
Languages/peru-es-es.ashLang
Languages/peru-es-uy.ashLang
Languages/peru-et-ee.ashLang
Languages/peru-fa-ir.ashLang
Languages/peru-fi-fi.ashlang
Languages/peru-fr-fr.ashLang
Languages/peru-he-il.ashLang
Languages/peru-hr-hr.ashLang
Languages/peru-hu-hu.ashLang
Languages/peru-hy-am.ashLang
Languages/peru-id-ID.ashLang
Languages/peru-it-it.ashLang
Languages/peru-ja-jp.ashLang
Languages/peru-ka-ge.ashLang
Languages/peru-kk-kz.ashLang
Languages/peru-ko-kr.ashLang
Languages/peru-lt-LT.ashlang
Languages/peru-lv-lv.ashLang
Languages/peru-mk-MK.ashLang
Languages/peru-nl-nl.ashLang
Languages/peru-nn-NO.ashLang
Languages/peru-no-no.ashLang
Languages/peru-pl-pl.ashLang
Languages/peru-pt-br.ashLang
Languages/peru-pt-pt.ashLang
Languages/peru-ro-ro.ashLang
Languages/peru-ru-ru.ashLang
Languages/peru-sk-sk.ashLang
Languages/peru-sl-si.ashlang
Languages/peru-sq-AL.ashLang
Languages/peru-sr-RS.ashLang
Languages/peru-sr-YU.ashLang
Languages/peru-sv-se.ashLang
Languages/peru-th-th.ashLang
Languages/peru-tr-tr.ashLang
Languages/peru-uk-ua.ashLang
Languages/peru-vi-vn.ashLang
Languages/peru-zh-cn.ashLang
Languages/peru-zh-hk.ashlang
Languages/peru-zh-tw.ashLang
Languages/xsaita.txt
.ps1
Peru.Interop.dll
.dll windows:4 windows x86 arch:x86

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\development-finals\own\trunk-cs\peru\build\win-x86-dynamic\Peru.Interop\obj\Win32\Release\Peru.Interop.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
[v11.0] One_Click_Active.exe
.exe windows:4 windows x86 arch:x86

Password: cacas

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0c:b5:19:da:ab:4d:05:0f:a4:68:6a:65:da:4a:e0:3f
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

26/03/2020, 00:00

Not After

11/04/2023, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Rastede,ST=Niedersachsen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/01/2021, 00:00

Not After

06/01/2031, 00:00

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07/01/2016, 12:00

Not After

07/01/2031, 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e7:f6:0d:76:44:3a:ce:9b:81:62:05:dd:8e:51:5c:55:ea:70:eb:98:b9:e7:2d:c3:c0:4a:d8:5e:98:2c:a8:6f
Signer

Actual PE Digest

e7:f6:0d:76:44:3a:ce:9b:81:62:05:dd:8e:51:5c:55:ea:70:eb:98:b9:e7:2d:c3:c0:4a:d8:5e:98:2c:a8:6f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\development-finals\own\trunk-cs\win11compat\build\win-x86-dynamic\win11unlocker\obj\Win32\Release\win11unlocker.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 177KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ash_inet2.dll
.dll windows:6 windows x86 arch:x86

Password: cacas

ca4717da65990ae018dad39d574a864a

Code Sign

10:41:fd:bc:e2:d5:86:46:99:ab:f2:46:0d:65:bd:1c
Certificate

Issuer

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/01/2017, 00:00

Not After

11/04/2020, 23:59

Subject

CN=Ashampoo GmbH & Co. KG,O=Ashampoo GmbH & Co. KG,L=Oldenburg,ST=Niedersachsen,C=DE

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

10/12/2013, 00:00

Not After

09/12/2023, 23:59

Subject

CN=Symantec Class 3 SHA256 Code Signing CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

Issuer

CN=VeriSign Universal Root Certification Authority,OU=VeriSign Trust Network+OU=(c) 2008 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

12/01/2016, 00:00

Not After

11/01/2031, 23:59

Subject

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

Issuer

CN=Symantec SHA256 TimeStamping CA,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

23/12/2017, 00:00

Not After

22/03/2029, 23:59

Subject

CN=Symantec SHA256 TimeStamping Signer - G3,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

67:41:52:7e:a9:2f:f6:8c:82:50:7d:c3:0a:8f:13:e9:05:b9:55:1a:5a:ac:5c:a7:05:cf:7a:de:6a:79:28:4d
Signer

Actual PE Digest

67:41:52:7e:a9:2f:f6:8c:82:50:7d:c3:0a:8f:13:e9:05:b9:55:1a:5a:ac:5c:a7:05:cf:7a:de:6a:79:28:4d

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\development-ash_inet\own\trunk\bacon\bin\Release\ash_inet2.pdb

Imports

kernel32

GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
IsBadReadPtr
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LocalFree
InitializeCriticalSectionEx
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
ReleaseMutex
WaitForSingleObject
FindClose
GetDriveTypeA
GetLogicalDrives
SetErrorMode
SleepEx
Sleep
GetCurrentProcessId
GlobalMemoryStatusEx
GetSystemInfo
FreeLibrary
GetModuleHandleA
LoadLibraryA
SetThreadExecutionState
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetSystemTime
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
SetEvent
ResetEvent
GetCurrentThreadId
OpenThread
GetThreadTimes
Thread32First
Thread32Next
SetUnhandledExceptionFilter
OutputDebugStringA
GetNativeSystemInfo
GetFileTime
SetWaitableTimer
CancelWaitableTimer
DeviceIoControl
GetFileSize
SetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GetTickCount
TerminateProcess
GetExitCodeProcess
SetPriorityClass
GetPriorityClass
GetProcessId
RegisterWaitForSingleObject
UnregisterWait
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
SetLastError
SetThreadPriority
GlobalFree
GetCurrentProcess
VirtualAlloc
VirtualFree
VirtualProtect
GetStdHandle
GetFileType
QueryPerformanceCounter
GlobalMemoryStatus
FlushConsoleInputBuffer
EncodePointer
DecodePointer
RaiseException
GetStringTypeW
QueueUserWorkItem
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCPInfo
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
GetExitCodeThread
CompareStringW
LCMapStringW
InitializeSListHead
UnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
FreeLibraryAndExitThread
LoadLibraryExW
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwind
ExitThread
GetModuleHandleExW
SetConsoleCtrlHandler
ExitProcess
GetConsoleMode
ReadConsoleInputA
SetConsoleMode
HeapReAlloc
GetModuleFileNameA
GetACP
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleCP
SetFilePointerEx
ReadConsoleW
SetStdHandle
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
SetEndOfFile
GetCommandLineW
GetModuleHandleExA
GetModuleFileNameW
DebugBreak
GetLastError

user32

FrameRect
DrawIconEx
SetWindowRgn
DrawFrameControl
BeginPaint
EndPaint
SetScrollPos
ShowScrollBar
SetScrollInfo
GetScrollInfo
DeleteMenu
CreatePopupMenu
TrackPopupMenu
DrawMenuBar
CreateMenu
UnionRect
DestroyMenu
SetLayeredWindowAttributes
BringWindowToTop
MonitorFromWindow
SendMessageA
GetWindowRgn
FillRect
GetUserObjectInformationW
MessageBoxA
GetKeyState
EnumDisplayMonitors
GetDC
GetSystemMetrics
TranslateMessage
GetSysColor
ClientToScreen
SetCursor
SetForegroundWindow
AdjustWindowRectEx
GetWindowRect
RedrawWindow
GetUpdateRect
SetMenu
GetMenu
IsWindowEnabled
ReleaseCapture
SetCapture
SetFocus
LockWindowUpdate
RemoveClipboardFormatListener
AddClipboardFormatListener
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
GetClientRect
GetDesktopWindow
EnumWindows
GetWindowThreadProcessId
CopyIcon
IsWindowVisible
GetAsyncKeyState
GetWindowPlacement
SetWindowPos
ShowWindow
DestroyCursor
GetForegroundWindow
AttachThreadInput
GetParent
ChildWindowFromPointEx
ScreenToClient
GetCursorPos
ReleaseDC
GetWindowDC
GetIconInfo
DestroyIcon
KillTimer
SetTimer
DestroyWindow
CreateIconIndirect
GetProcessWindowStation

shell32

SHGetSpecialFolderLocation
SHBindToParent
SHGetKnownFolderPath
SHGetDesktopFolder
SHGetDataFromIDListW
CommandLineToArgvW
SHParseDisplayName
SHFileOperationA
ord2
ord4
DragQueryPoint
DragFinish
DragAcceptFiles
SHGetMalloc

comctl32

ImageList_ReplaceIcon
ImageList_GetIcon
InitCommonControlsEx
ord410
ord412
ord413
CreatePropertySheetPageW
DestroyPropertySheetPage
ImageList_Create
ImageList_Destroy

winmm

timeGetTime

shlwapi

PathUnExpandEnvStringsW
SHDeleteKeyW
StrRetToStrW
PathIsRelativeW
AssocQueryStringW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

iphlpapi

GetAdaptersAddresses

ash_libcurl

curl_easy_send
curl_easy_recv
curl_easy_strerror
curl_easy_getinfo
curl_slist_append
curl_formfree
curl_formadd
curl_free
curl_global_init
curl_escape
curl_easy_cleanup
curl_easy_perform
curl_global_cleanup
curl_easy_reset
curl_easy_init
curl_easy_setopt
curl_slist_free_all

ws2_32

select
closesocket

wininet

InternetQueryOptionA
InternetGetPerSiteCookieDecisionA

gdi32

BitBlt
SetTextColor
SetBkColor
CombineRgn
SelectObject
GetStockObject
CreateDIBSection
CreateRectRgn
CreatePen
CreateSolidBrush
CreateBitmap
DeleteObject
DeleteDC
Ellipse
GetClipBox
CreateCompatibleDC
GetDeviceCaps
ExtCreateRegion
OffsetWindowOrgEx
MoveToEx
SetRectRgn
SetPixel
SetMapMode
SetDIBitsToDevice
SetBkMode
SelectClipRgn
LineTo
IntersectClipRect
GetTextColor
GetRgnBox
GetCurrentObject
GetMetaRgn
GetClipRgn

ole32

OleLockRunning
OleSetContainedObject
ReleaseStgMedium
CLSIDFromProgID
CoCreateInstance
CoInitializeEx
CoUninitialize
RevokeDragDrop
DoDragDrop
CoTaskMemFree
CoFileTimeNow
CoTaskMemAlloc
CoCreateGuid
RegisterDragDrop

advapi32

GetUserNameA
RegCloseKey
CloseServiceHandle
ControlService
EnumDependentServicesW
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
StartServiceW
EnumServicesStatusExA
SystemFunction036
DeregisterEventSource
RegisterEventSourceA
ReportEventA

urlmon

CoInternetGetSession
ObtainUserAgentString

oleaut32

VarBstrCmp
SysStringLen
SysAllocString
VariantCopy
VariantClear
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SysAllocStringByteLen
SysStringByteLen
VariantInit
SysFreeString
SysAllocStringLen

Exports

Exports

ainet_AnalyticsManagerAddFeature
ainet_AnalyticsManagerAddInfo
ainet_AnalyticsManagerEndFeature
ainet_AnalyticsManagerIsEnabled
ainet_AnalyticsManagerSetEnabled
ainet_AnalyticsManagerStartFeature
ainet_CanContactSupport
ainet_ChannelsEnable
ainet_ChannelsGetCount
ainet_ChannelsGetDescription
ainet_ChannelsGetEnabled
ainet_ChannelsGetHint
ainet_ChannelsGetID
ainet_ChannelsGetName
ainet_ChannelsSettingsAllowed
ainet_CrashReportSend
ainet_Destroy
ainet_FreeString
ainet_FreeWideString
ainet_GetInAppMessageButtonText
ainet_GetInAppMessageCount
ainet_GetInAppMessageHtml
ainet_GetInAppMessageName
ainet_GetInAppMessageText
ainet_GetInAppMessageType
ainet_GetLogFolder
ainet_GetMenuItemsCount
ainet_GetMenuItemsID
ainet_GetMenuItemsImage
ainet_GetMenuItemsImageByID
ainet_GetMenuItemsImagePNG
ainet_GetMenuItemsImagePNGByID
ainet_GetMenuItemsText
ainet_GetMenuItemsTextByMenuID
ainet_GetProductDisplayVersion
ainet_GetProductRevision
ainet_IOControllerDataReceived
ainet_Idle
ainet_Init
ainet_InitAnalyticsManager
ainet_InitIOControllerMaster
ainet_InitIOControllerSlave
ainet_InitRegistrationManager
ainet_LCIDToLangID
ainet_LanguageAddFile
ainet_LanguageDownload
ainet_LanguageFreeList
ainet_LanguageGetComment
ainet_LanguageGetCount
ainet_LanguageGetISO
ainet_LanguageGetName
ainet_LanguageGetNativeName
ainet_LanguageReceiveList
ainet_LanguageSupportIsEnabled
ainet_MakeLinkTargetURL
ainet_MakeLinkTargetURLFromTarget
ainet_OpenLinkTargetInBrowser
ainet_OpenWebTargetInBrowser
ainet_OpenWebTargetInBrowser2
ainet_ProblemReportAddFile
ainet_ProblemReportAddFileWithAlias
ainet_ProblemReportAddTextInMemory
ainet_ProblemReportClearFiles
ainet_ProblemReportSend
ainet_ProcessInAppMessage
ainet_ProcessMenuItem
ainet_RegistrationManagerDoStartupCheck
ainet_RegistrationManagerGetActivationDate
ainet_RegistrationManagerGetEdition
ainet_RegistrationManagerGetEditionLogo
ainet_RegistrationManagerGetExpirationDate
ainet_RegistrationManagerGetFullDaysLeft
ainet_RegistrationManagerGetKey
ainet_RegistrationManagerGetLicenseState
ainet_RegistrationManagerGetSharewareType
ainet_RegistrationManagerGetTrialDaysLeft
ainet_RegistrationManagerGetUpdateType
ainet_RegistrationManagerGetUpgradeCommandText
ainet_RegistrationManagerGetUpgradeName
ainet_RegistrationManagerGetUpgradeType
ainet_RegistrationManagerHasExpired
ainet_RegistrationManagerIsFirstStart
ainet_RegistrationManagerIsFullVersion
ainet_RegistrationManagerIsKeyValid
ainet_RegistrationManagerIsTrialPeriodExtended
ainet_RegistrationManagerIsUpgradeAvailable
ainet_RegistrationManagerMigrateKey
ainet_RegistrationManagerProcessKey
ainet_RegistrationManagerSetLicenseCheck
ainet_RegistrationManagerSetUpgradeName
ainet_RegistrationManagerStartAllChecks
ainet_RegistrationManagerUpdate
ainet_ResolveWebTargetURI
ainet_SetBaseFolder
ainet_SetContext
ainet_SetFile
ainet_SetIO
ainet_SetOnCloseApplicationCallback
ainet_SetOption
ainet_SetParam
ainet_SetProductEdition
ainet_SetProductFile
ainet_SetProductID
ainet_SetProductLang
ainet_SetProductLangLCID
ainet_SetProductName
ainet_SetProductVersion
ainet_SetProductVersionState
ainet_SetRegisterFile
ainet_SetRegisterIO
ainet_SetRegisterRegistryKey
ainet_SetRegisterValueStore
ainet_SetRegistryKey
ainet_SetSystemFile
ainet_SetSystemIO
ainet_SetSystemRegistryKey
ainet_SetSystemValueStore
ainet_SetUserFile
ainet_SetUserIO
ainet_SetUserRegistryKey
ainet_SetUserValueStore
ainet_SetValueStore
ainet_ShowBuyAndActivate
ainet_Shutdown
ainet_StartAllChecks
ainet_StartAllChecksNeeded
ainet_StartAnalyticsConfig
ainet_StartInfoChannelsConfig
ainet_StartInternal
ainet_StartManualUpdateCheck
ainet_StartManualUpdateCheckFlags
ainet_StartManualUpdatePopupCheck
ainet_StartManualUpgradeCheck
ainet_StartManualUpgradeCheckFlags
ainet_UpdateMessages
ainet_addParam
ainet_ex_AddContentWindowEventListener
ainet_ex_AddEventListener
ainet_ex_CreateContentWindow
ainet_ex_DownloadFileA
ainet_ex_DownloadFileW
ainet_ex_DownloadManagerAddDownloadA
ainet_ex_DownloadManagerAddDownloadW
ainet_ex_DownloadManagerExecute
ainet_ex_DownloadManagerExecuteAbort
ainet_ex_DownloadManagerFree
ainet_ex_DownloadManagerGetCount
ainet_ex_DownloadManagerInit
ainet_ex_FreeContentWindow
ainet_ex_GetEventType
ainet_ex_InitializeContentWindow
ainet_ex_IsEventType
ainet_ex_IsKeyValidForServerW
ainet_ex_IsKeyValidW
ainet_ex_IsModuleAllowed
ainet_ex_ProgressWindowFree
ainet_ex_ProgressWindowInitA
ainet_ex_ProgressWindowInitW
ainet_ex_ProgressWindowSetColor
ainet_ex_ProgressWindowSetTextA
ainet_ex_ProgressWindowSetTextW
ainet_ex_ReceiveNewVersionAvailableA
ainet_ex_ReceiveNewVersionAvailableW
ainet_ex_UpdateContentWindow
ainet_ex_UpdateMessageFree
ainet_ex_UpdateMessageGetDownloadURLA
ainet_ex_UpdateMessageGetDownloadURLW
ainet_ex_UpdateMessageGetInstallArgsA
ainet_ex_UpdateMessageGetInstallArgsW
ainet_ex_UpdateMessageGetSignatureA
ainet_ex_UpdateMessageGetSignatureW

Sections

.text
Size: 3.8MB - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 121KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ash_lang2.dll
.dll windows:6 windows x86 arch:x86

Password: cacas

7a85c6ea6747e193d0b2fc4d36522753

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\development-finals\own\trunk\ash_lang\bin\Release\ash_lang2.pdb

Imports

comctl32

ImageList_GetIcon

winmm

timeGetTime

shlwapi

AssocQueryStringW
PathUnExpandEnvStringsW
SHDeleteKeyW
StrRetToStrW
PathIsRelativeW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

iphlpapi

GetAdaptersAddresses

kernel32

GetCurrentDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetDriveTypeA
GetFileAttributesW
GetFullPathNameW
GetLogicalDrives
GetTempPathW
OutputDebugStringW
GetLastError
SetErrorMode
SleepEx
Sleep
GetCurrentProcessId
GlobalMemoryStatusEx
GetSystemInfo
GetWindowsDirectoryW
GetVersionExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
LoadLibraryW
SetThreadExecutionState
MoveFileW
GetComputerNameW
GetSystemDefaultLocaleName
ExpandEnvironmentStringsW
CreateToolhelp32Snapshot
GetSystemTime
GetLocalTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CreateDirectoryW
DeleteFileW
FindNextFileW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
CopyFileExW
SetEvent
ResetEvent
CreateEventW
GetCurrentThreadId
OpenThread
CreateMutexW
Thread32First
Thread32Next
DeleteCriticalSection
GetModuleHandleW
DebugBreak
MultiByteToWideChar
LocalFree
FormatMessageW
GetNativeSystemInfo
GetFileTime
GetDiskFreeSpaceW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
DeviceIoControl
GetFileSize
GetShortPathNameW
SetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GetTickCount
TerminateProcess
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
SetLastError
SetThreadPriority
TryEnterCriticalSection
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObject
GetThreadTimes
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
InitializeSListHead
UnhandledExceptionFilter
ReleaseMutex
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
CloseHandle
GetUserDefaultLocaleName
SetUnhandledExceptionFilter
GetCurrentProcess

user32

CreateIconIndirect
LoadImageW
GetWindowLongW
SetWindowLongW
DestroyWindow
DestroyIcon
wsprintfW
EnumDisplaySettingsW
KillTimer
EnumDisplayDevicesW
GetSystemMetrics
PeekMessageW
DispatchMessageW
CreateWindowExW
RegisterClassW
CallWindowProcW
GetIconInfo
DefWindowProcW
TranslateMessage
GetMessageW
SetTimer
PostMessageW

gdi32

DeleteDC
DeleteObject
CreateDIBSection
GetObjectW
CreateCompatibleDC
CreateBitmap

shell32

ShellExecuteW
ExtractIconExW
SHGetFileInfoW
ord4
ord2
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetKnownFolderPath
SHGetDesktopFolder
SHGetDataFromIDListW
SHBindToParent
SHParseDisplayName
SHFileOperationA

ole32

CoUninitialize
CoTaskMemAlloc
CoFileTimeNow
CoTaskMemFree
CoInitializeEx
CoSetProxyBlanket
CoCreateInstance

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear
VariantChangeType

advapi32

StartServiceW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
EnumDependentServicesW
ControlService
CloseServiceHandle
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
GetUserNameA

msvcp140

?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
_local_unwind4
__current_exception_context
__current_exception
_purecall
__std_terminate
__CxxFrameHandler3
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__RTDynamicCast
memmove
memset
__RTtypeid
__std_type_info_name
wcschr
memcpy
__std_type_info_compare
memchr
strchr

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_initterm
_initterm_e
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_initialize_onexit_table
_beginthreadex
terminate
_initialize_narrow_environment
_seh_filter_dll
_configure_narrow_argv

api-ms-win-crt-string-l1-1-0

_wcsicmp
strncpy
isalpha
wcstok
towlower
towupper
isdigit
iswdigit
wcscoll
tolower
wcscpy_s
isspace
isalnum
strncmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf_s
__stdio_common_vsprintf
__stdio_common_vswprintf
__stdio_common_vsnprintf_s
__stdio_common_vfprintf

api-ms-win-crt-locale-l1-1-0

_create_locale
localeconv
___mb_cur_max_func

api-ms-win-crt-convert-l1-1-0

atof
wctomb

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-utility-l1-1-0

srand

Exports

Exports

ASH_LANG2_FILE_getAppID
ASH_LANG2_FILE_getAuthor
ASH_LANG2_FILE_getComment
ASH_LANG2_FILE_getEnglishName
ASH_LANG2_FILE_getEnglishSubName
ASH_LANG2_FILE_getLanguageID
ASH_LANG2_FILE_getNativeName
ASH_LANG2_FILE_getNativeSubName
ASH_LANG2_add
ASH_LANG2_addEx
ASH_LANG2_findLocalizedFile
ASH_LANG2_freeAshLangFile
ASH_LANG2_freeWideString
ASH_LANG2_getCurrentLanguage
ASH_LANG2_getLanguage
ASH_LANG2_getLanguageCount
ASH_LANG2_getLanguageFile
ASH_LANG2_getLocalString
ASH_LANG2_reload
ASH_LANG2_setCurrentLanguage

Sections

.text
Size: 724KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ash_libcurl.dll
.dll windows:6 windows x86 arch:x86

bf55867181ddad4371a44a618381e2ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

wldap32

ord50
ord26
ord27
ord60
ord211
ord22
ord41
ord143
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord46

ws2_32

ntohs
listen
htons
getsockname
WSAStartup
accept
WSAGetLastError
send
recv
WSACleanup
closesocket
connect
getpeername
getsockopt
setsockopt
socket
WSASetLastError
WSAIoctl
__WSAFDIsSet
select
recvfrom
sendto
getaddrinfo
freeaddrinfo
ioctlsocket
gethostname
bind
shutdown
getnameinfo

kernel32

GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExA
FindClose
GetFileAttributesExW
HeapReAlloc
FlushFileBuffers
GetACP
GetStringTypeW
LCMapStringW
SetEndOfFile
GetTickCount64
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
ReadFile
GetLastError
PeekNamedPipe
GetCPInfo
GetProcAddress
WaitForMultipleObjects
SleepEx
SetLastError
FormatMessageA
Sleep
CloseHandle
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
WriteConsoleW
GetTimeZoneInformation
HeapSize
DecodePointer
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
FreeLibrary
GetProcessHeap
CompareStringW
FormatMessageW
GetEnvironmentVariableW
WideCharToMultiByte
GetConsoleMode
ReadConsoleA
ReadConsoleW
SetConsoleMode
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FindFirstFileW
WriteFile
GetModuleHandleW
GetSystemTimeAsFileTime
GetModuleHandleExW
QueryPerformanceCounter
GetCurrentProcessId
GetTickCount
GlobalMemoryStatus
SwitchToFiber
DeleteFiber
CreateFiber
LoadLibraryW
ConvertFiberToThread
ConvertThreadToFiber
GetSystemTime
SystemTimeToFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
InterlockedFlushSList
RtlUnwind
LoadLibraryExW
SetFilePointerEx
CreateFileW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CreateThread
ExitThread
FreeLibraryAndExitThread
SetConsoleCtrlHandler
ExitProcess
RaiseException
GetModuleFileNameA
GetConsoleCP
HeapFree
HeapAlloc
SetStdHandle
GetCurrentDirectoryW
GetFullPathNameW

advapi32

CryptSignHashW
CryptDestroyHash
CryptCreateHash
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptDestroyKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
CryptEnumProvidersW

user32

GetProcessWindowStation
MessageBoxW
GetUserObjectInformationW

crypt32

CertFreeCertificateContext
CertDuplicateCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertGetCertificateContextProperty

Exports

Exports

curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_version
curl_version_info

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 387KB - Virtual size: 387KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
langid2.dll
.dll windows:6 windows x86 arch:x86

b5cdb385146af53c9a2282b3958fdde6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\development-finals\own\trunk\langid\bin\Release\langid2.pdb

Imports

kernel32

GetLocaleInfoW
GetUserDefaultLocaleName
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

_CxxThrowException
memcpy
memmove
memset
_except_handler4_common
__std_type_info_destroy_list
__std_exception_copy
__CxxFrameHandler3
__std_exception_destroy

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_cexit
_invalid_parameter_noinfo_noreturn
_initterm
_register_onexit_function

api-ms-win-crt-string-l1-1-0

wcstok
_wcsicmp

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

Exports

Exports

LANGID2_createLanguageID
LANGID2_freeLanguageID
LANGID2_freeWideString
LANGID2_getCountryName
LANGID2_getFullID
LANGID2_getLCID
LANGID2_getLanguageName
LANGID2_getSystemLanguageID

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
langperuid2.exe
.exe windows:4 windows x86 arch:x86

15847eb10d7d06dcd5980e8a9b786fd6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
SysAllocStringByteLen
VariantClear
VariantCopy
SysFreeString

user32

CharLowerA
CharUpperA
CharLowerW
CharPrevExA
CharNextA
CharUpperW

kernel32

SetEndOfFile
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetConsoleCtrlHandler
FileTimeToLocalFileTime
GetCommandLineW
SetFileApisToOEM
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
SetConsoleMode
GetStdHandle
MultiByteToWideChar
WideCharToMultiByte
GetLastError
FreeLibrary
LoadLibraryA
AreFileApisANSI
GetModuleFileNameA
LocalFree
FormatMessageA
FormatMessageW
GetWindowsDirectoryA
GetWindowsDirectoryW
CloseHandle
SetFileTime
CreateFileW
SetLastError
SetFileAttributesA
RemoveDirectoryA
MoveFileA
SetFileAttributesW
RemoveDirectoryW
MoveFileW
CreateDirectoryA
CreateDirectoryW
DeleteFileA
DeleteFileW
lstrlenA
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryW
SearchPathA
SearchPathW
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
CreateFileA
GetFileSize
SetFilePointer
DeviceIoControl
ReadFile
WriteFile
GetCurrentProcess
GetProcAddress
CompareFileTime
FileTimeToSystemTime
GetSystemInfo
GlobalMemoryStatus
GetModuleHandleA
DosDateTimeToFileTime
FileTimeToDosDateTime
SystemTimeToFileTime
GetSystemTime
WaitForMultipleObjects
OpenEventA
UnmapViewOfFile
MapViewOfFile
OpenFileMappingA
GetTickCount
GetProcessTimes
LocalFileTimeToFileTime
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualAlloc
VirtualFree
WaitForSingleObject
CreateEventA
SetEvent
ResetEvent
CreateSemaphoreA
ReleaseSemaphore
InitializeCriticalSection
RtlUnwind
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
ExitProcess
TlsAlloc
SetUnhandledExceptionFilter
TerminateProcess
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetFileType
GetStartupInfoA
FlushFileBuffers
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
InterlockedDecrement
InterlockedIncrement
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 483KB - Virtual size: 483KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
peru.dll
.dll windows:6 windows x86 arch:x86

88ee6f8298505d68a78f2deb643bad57

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\development-finals\own\trunk\peru\bin\Release\peru.pdb

Imports

comctl32

ImageList_GetIcon

winmm

waveOutPause
waveOutWrite
waveOutUnprepareHeader
waveOutPrepareHeader
waveOutClose
waveOutOpen
waveInStart
waveOutRestart
waveInClose
waveOutGetPosition
waveInOpen
waveInGetErrorTextW
waveOutGetErrorTextW
waveInGetDevCapsW
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutReset
waveInUnprepareHeader
waveInAddBuffer
waveInReset
waveInMessage
waveOutMessage
timeGetTime
waveInPrepareHeader
waveInGetNumDevs

shlwapi

PathIsRelativeW
PathUnExpandEnvStringsW
SHDeleteKeyW
StrRetToStrW
AssocQueryStringW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

iphlpapi

GetAdaptersAddresses

kernel32

SetThreadExecutionState
MoveFileW
GetComputerNameW
GetUserDefaultLocaleName
GetSystemDefaultLocaleName
ExpandEnvironmentStringsW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetSystemTime
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CreateDirectoryW
DeleteFileW
FindNextFileW
RemoveDirectoryW
SetFileAttributesW
CopyFileW
CopyFileExW
SetEvent
ResetEvent
CreateEventW
GetVersionExW
OpenThread
GetThreadTimes
Thread32First
Thread32Next
GlobalAlloc
DebugBreak
OutputDebugStringA
LocalFree
FormatMessageW
GetNativeSystemInfo
GetFileTime
GetDiskFreeSpaceW
GetDriveTypeW
GetLogicalDriveStringsW
GetVolumeInformationW
DeviceIoControl
GetFileSize
GetShortPathNameW
SetFileTime
HeapAlloc
HeapFree
GetProcessHeap
GetTickCount
TerminateProcess
GetPriorityClass
FlushFileBuffers
ReadFile
SetFilePointer
WriteFile
SetLastError
SetThreadPriority
LoadLibraryA
WaitForMultipleObjects
QueryPerformanceCounter
GetCurrentProcess
GetCurrentThread
IsBadReadPtr
WideCharToMultiByte
ExpandEnvironmentStringsA
LoadLibraryExA
SignalObjectAndWait
GetThreadPriority
lstrcmpW
QueryPerformanceFrequency
GetEnvironmentVariableA
HeapSize
InterlockedExchange
InterlockedCompareExchange
GetVersionExA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
lstrlenA
lstrlenW
GetEnvironmentStrings
GetEnvironmentStringsW
GetDiskFreeSpaceA
GlobalMemoryStatus
IsProcessorFeaturePresent
GetWindowsDirectoryW
GetSystemInfo
GlobalMemoryStatusEx
GetCurrentProcessId
SleepEx
SetErrorMode
GetTempPathW
GetLogicalDrives
GetFullPathNameW
GetFileAttributesW
GetDriveTypeA
FindFirstFileW
FindClose
GetModuleHandleA
CreateFileW
GetCurrentDirectoryW
CreateMutexW
ReleaseMutex
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
GlobalFree
GetLocalTime
GetModuleHandleW
WaitForSingleObject
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteCriticalSection
InitializeCriticalSectionEx
GetLastError
SetUnhandledExceptionFilter
OutputDebugStringW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
WaitForSingleObjectEx
InitializeSListHead
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetCurrentThreadId
MultiByteToWideChar

user32

wsprintfW
DestroyIcon
GetIconInfo
EnumDisplaySettingsW
DestroyWindow
CallWindowProcW
MessageBoxW
SetWindowLongW
GetWindowLongW
CreateWindowExW
DefWindowProcW
PostMessageW
SystemParametersInfoW
KillTimer
SetTimer
RegisterClassW
CreateIconIndirect
LoadImageW
GetDC
EnumDisplayDevicesW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW
EnumDisplayMonitors
ReleaseDC
FillRect
FrameRect
DrawIconEx
GetDesktopWindow
GetSystemMetrics
GetWindowDC

gdi32

GetTextColor
GetStockObject
IntersectClipRect
LineTo
SelectClipRgn
SelectObject
GetRgnBox
SetDIBitsToDevice
SetMapMode
SetPixel
SetRectRgn
GetCurrentObject
CreateDIBSection
MoveToEx
TextOutW
OffsetWindowOrgEx
CreateFontIndirectW
GetDeviceCaps
GetTextMetricsW
GetObjectW
GetTextFaceW
CreateBitmap
SetTextColor
CombineRgn
CreateCompatibleDC
CreatePen
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
Ellipse
GetMetaRgn
GetClipBox
SetBkMode
GetTextExtentPoint32W
GetClipRgn
BitBlt

shell32

ExtractIconExW
SHGetFileInfoW
ord4
ord2
SHFileOperationW
SHFileOperationA
ShellExecuteW
SHParseDisplayName
SHBindToParent
SHGetDataFromIDListW
SHGetDesktopFolder
SHGetKnownFolderPath
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc

ole32

PropVariantClear
CoFileTimeNow
CoSetProxyBlanket
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitialize

oleaut32

SysAllocString
VariantInit
VariantClear
SysFreeString
VariantTimeToSystemTime
VariantChangeType

advapi32

OpenSCManagerW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegEnumKeyExW
GetUserNameA
CloseServiceHandle
ControlService
EnumDependentServicesW
RegSetValueExW
OpenServiceW
QueryServiceStatusEx
StartServiceW
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA

msvcp140

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ

concrt140

?_Confirm_cancel@_Cancellation_beacon@details@Concurrency@@QAE_NXZ
?_Trace_ppl_function@Concurrency@@YAXABU_GUID@@EW4ConcRT_EventType@1@@Z
?_SpinOnce@?$_SpinWait@$00@details@Concurrency@@QAE_NXZ
?PPLParallelForEventGuid@Concurrency@@3U_GUID@@B
?_RunAndWait@_StructuredTaskCollection@details@Concurrency@@QAG?AW4_TaskCollectionStatus@23@PAV_UnrealizedChore@23@@Z
??1_StructuredTaskCollection@details@Concurrency@@QAE@XZ
?_CheckTaskCollection@_UnrealizedChore@details@Concurrency@@IAEXXZ
?_UnderlyingYield@details@Concurrency@@YAXXZ
?_GetNumberOfVirtualProcessors@_CurrentScheduler@details@Concurrency@@SAIXZ
?_IsSynchronouslyBlocked@_Context@details@Concurrency@@QBE_NXZ
?_CurrentContext@_Context@details@Concurrency@@SA?AV123@XZ
??1_Cancellation_beacon@details@Concurrency@@QAE@XZ
?_Schedule@_StructuredTaskCollection@details@Concurrency@@QAEXPAV_UnrealizedChore@23@@Z
?Free@Concurrency@@YAXPAX@Z
??0_Cancellation_beacon@details@Concurrency@@QAE@XZ
?_Yield@_Context@details@Concurrency@@SAXXZ

vcruntime140

__std_type_info_destroy_list
__std_type_info_name
__RTtypeid
memset
memmove
__RTDynamicCast
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
__CxxFrameHandler3
_purecall
wcsstr
__std_type_info_compare
strchr
wcschr
_local_unwind4
memchr
_except_handler3
__current_exception
__current_exception_context
memcpy
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

terminate
_invalid_parameter_noinfo_noreturn
_beginthreadex
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-string-l1-1-0

strncmp
isalnum
isspace
isalpha
towlower
tolower
towupper
wcsncpy
isdigit
wcscpy_s
iswdigit
wcscoll
strncpy

api-ms-win-crt-heap-l1-1-0

realloc
_callnewh
malloc
free

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
_libm_sse2_pow_precise
ceil
floor

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vswprintf_s
__acrt_iob_func
fread
_wfopen_s
fwrite
_ftelli64
_fseeki64
fopen
__stdio_common_vsprintf
fclose
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
ferror
__stdio_common_vsprintf_s
__stdio_common_vswprintf

api-ms-win-crt-utility-l1-1-0

srand

api-ms-win-crt-locale-l1-1-0

___mb_cur_max_func
_create_locale
localeconv

api-ms-win-crt-convert-l1-1-0

wctomb
atoi
atof

Exports

Exports

PERU_AllocationTracker_Init
PERU_CleanupGlobalInstances
PERU_CreateMail
PERU_DEBUG_OutputDebugString
PERU_DEBUG_WriteLine
PERU_EnumHasMore
PERU_FileObjectCursorCreateSubFolderCursor
PERU_FileObjectCursorGetAttributes
PERU_FileObjectCursorNext
PERU_FileObjectGetCreatedTimeMicros
PERU_FileObjectGetIconURI
PERU_FileObjectGetModifiedTimeMicros
PERU_FileObjectGetName
PERU_FileObjectGetType
PERU_FileObjectGetURI
PERU_FileObjectIsFile
PERU_FileObjectIsFolder
PERU_FileObjectMightContainFolders
PERU_FileObjectMightContainNonVirtualItems
PERU_FileSystemCreateFileObject
PERU_FileSystemCreateFolderContentsCursor
PERU_FileSystemCreateImagingWin32
PERU_FileSystemCreateRootURIEnum
PERU_FileSystemCreateVirtualFolderContentsCursor
PERU_FileSystemCreateWin32
PERU_FileSystemCreateWmdWin32
PERU_FileSystemGetNextMountURI
PERU_FileSystemGetNextRootUri
PERU_FileSystemGetNextTraceFromRootUri
PERU_FileSystemGetNextVolumeID
PERU_FileSystemImagingWin32convertToHumanReadableURI
PERU_FileSystemImagingWin32convertToSystemURI
PERU_FileSystemIsFilesystemWin32
PERU_FileSystemIsImagingWin32Available
PERU_FileSystemManagerAddVolumeListener
PERU_FileSystemManagerCreateFolderContentsCursor
PERU_FileSystemManagerCreateVirtualFolderContentsCursor
PERU_FileSystemManagerFileExists
PERU_FileSystemManagerFolderExists
PERU_FileSystemManagerGetAvailableSpaceInFolder
PERU_FileSystemManagerGetFileObject
PERU_FileSystemManagerGetRootURIEnum
PERU_FileSystemManagerGetVolume
PERU_FileSystemManagerGetVolumeFromURI
PERU_FileSystemManagerGetVolumeIDEnum
PERU_FileSystemManagerIsVolumeID
PERU_FileSystemManagerRemoveVolumeListener
PERU_FileSystemManagerTraceFromRootEnum
PERU_FileSystemRegisterImagingWin32ToFileSystemManager
PERU_FileSystemRegisterWmdWin32ToFileSystemManager
PERU_FileSystemRootURIGetNext
PERU_FileSystemVolumeGetDeviceName
PERU_FileSystemVolumeGetFreeSpace
PERU_FileSystemVolumeGetId
PERU_FileSystemVolumeGetLabel
PERU_FileSystemVolumeGetMountURIEnum
PERU_FileSystemVolumeGetPhysicalSerialNumber
PERU_FileSystemWin32toFileURI
PERU_FileSystem_CopyFile
PERU_FileSystem_CreateZipFileSystem
PERU_FileTypeGetAssociatedApplicationName
PERU_FileTypeGetAssociatedApplicationURI
PERU_FileTypeGetDisplayName
PERU_FileTypeGetFileTypeFromExtension
PERU_FileTypeGetFileTypeFromURI
PERU_FileTypeGetIconURI
PERU_FileWatcherAddListener
PERU_FileWatcherAddUri
PERU_FileWatcherClear
PERU_FileWatcherCreateWin32
PERU_FileWatcherCreateWithUriWin32
PERU_FileWatcherRemoveListener
PERU_GetFileExtension
PERU_GetFilename
PERU_GetLastErrorMessage
PERU_GetLastErrorType
PERU_GetParentFolder
PERU_GetParentFolderUri
PERU_GetScheme
PERU_HasFileExtension
PERU_HasFilename
PERU_HasParentFolder
PERU_IBase_Release
PERU_IHELPMANAGER_CreateHelp
PERU_IHELP_ShowTopic
PERU_ILOGMANAGER_addAllInfos
PERU_ILOGMANAGER_addDisplayInfo
PERU_ILOGMANAGER_addGraphicsAdapterInfo
PERU_ILOGMANAGER_addLog
PERU_ILOGMANAGER_addMainExecutableInfos
PERU_ILOGMANAGER_addModuleInfo
PERU_ILOGMANAGER_addModuleInfoUri
PERU_ILOGMANAGER_addProcessList
PERU_ILOGMANAGER_addProcessorInfo
PERU_ILOGMANAGER_addSystemInfo
PERU_ILOGMANAGER_getInstance
PERU_ILOGMANAGER_removeLog
PERU_ILOG_getMinLogLevel
PERU_ILOG_log
PERU_ILOG_logDebug
PERU_ILOG_logError
PERU_ILOG_logException
PERU_ILOG_logInfo
PERU_ILOG_logWarning
PERU_ILOG_setMinLogLevel
PERU_IMAIL_addAttachmentFile
PERU_IMAIL_addAttachmentFileUri
PERU_IMAIL_addBCCRecipient
PERU_IMAIL_addCCRecipient
PERU_IMAIL_addTORecipient
PERU_IMAIL_clear
PERU_IMAIL_send
PERU_IMAIL_setNote
PERU_IMAIL_setSubject
PERU_IPATHES_IsChildOf
PERU_ISYSTEMINFORMATION_CheckAvailableDisplaySize
PERU_ISYSTEMINFORMATION_CheckAvailableDisplaySizeByPos
PERU_ISYSTEMINFORMATION_GetMonitorCount
PERU_ISYSTEMINFORMATION_GetMonitorDPI
PERU_ISYSTEMINFORMATION_GetMonitorInformation
PERU_ISYSTEMINFORMATION_GetPrimaryMonitorIndex
PERU_ISYSTEM_CopyFile
PERU_ISYSTEM_CreateFolder
PERU_ISYSTEM_CreateTempFile
PERU_ISYSTEM_CreateTempFolder
PERU_ISYSTEM_DeleteAllCreatedTempFiles
PERU_ISYSTEM_DeleteFile
PERU_ISYSTEM_DeleteFileToRecycleBin
PERU_ISYSTEM_DeleteNonEmptyFolder
PERU_ISYSTEM_FileExists
PERU_ISYSTEM_FixInvalidCharsInFilename
PERU_ISYSTEM_FixInvalidCharsInPath
PERU_ISYSTEM_FolderExists
PERU_ISYSTEM_GetOSDescription
PERU_ISYSTEM_GetProcessorCount
PERU_ISYSTEM_MoveFile
PERU_ISYSTEM_MoveFileWithProgress
PERU_ISYSTEM_SetThreadExecutionState
PERU_ISYSTEM_convertUriFromSourceToDestinationFolder
PERU_ISYSTEM_createFolderWithUniqueName
PERU_ISYSTEM_getFileSize
PERU_ISYSTEM_getMainExecutableFile
PERU_ISYSTEM_getOSFolder
PERU_ISYSTEM_getUserFilesFolder
PERU_ISYSTEM_isWinXP
PERU_IURI_CreateUri
PERU_IURI_CreateUri2
PERU_IURI_CreateUri3
PERU_IURI_CreateUri4
PERU_IURI_getEscapedFileExtension
PERU_IURI_getEscapedFilename
PERU_IURI_getEscapedFragment
PERU_IURI_getEscapedPath
PERU_IURI_getEscapedQuery
PERU_IURI_getFileExtension
PERU_IURI_getFilename
PERU_IURI_getFolderURI
PERU_IURI_getFragment
PERU_IURI_getHost
PERU_IURI_getItemname
PERU_IURI_getNextQueryName
PERU_IURI_getParentFolderURI
PERU_IURI_getPath
PERU_IURI_getPort
PERU_IURI_getQuery
PERU_IURI_getQueryNames
PERU_IURI_getQueryParam
PERU_IURI_getScheme
PERU_IURI_getUserInfo
PERU_IURI_hasFileExtension
PERU_IURI_hasFileExtension2
PERU_IURI_hasFilename
PERU_IURI_hasItemname
PERU_IURI_hasParentFolder
PERU_IURI_hasQuery
PERU_IURI_hasScheme
PERU_IURI_hasScheme2
PERU_IURI_isEmpty
PERU_IURI_isFolder
PERU_IURI_isHierarchical
PERU_IURI_isRelative
PERU_IURI_isRoot
PERU_IURI_isRootFolder
PERU_IURI_makeAbsolute
PERU_IURI_makeRelative
PERU_IURI_toString
PERU_ImageObject_GetBuffer
PERU_ImageObject_GetHeight
PERU_ImageObject_GetStride
PERU_ImageObject_GetWidth
PERU_ImageObject_IsValid
PERU_ImageObject_LoadIcon
PERU_IsMailerAvailable
PERU_MEDIA_AudioFormat_GetBits
PERU_MEDIA_AudioFormat_GetChannels
PERU_MEDIA_AudioFormat_GetSampleRate
PERU_MEDIA_AudioInDevice_Close
PERU_MEDIA_AudioInDevice_FindBestFittingAudioFormat
PERU_MEDIA_AudioInDevice_GetMediaAPI
PERU_MEDIA_AudioInDevice_GetName
PERU_MEDIA_AudioInDevice_GetState
PERU_MEDIA_AudioInDevice_GetVolume
PERU_MEDIA_AudioInDevice_IsDefaultDevice
PERU_MEDIA_AudioInDevice_IsLoopBack
PERU_MEDIA_AudioInDevice_IsOpened
PERU_MEDIA_AudioInDevice_Open
PERU_MEDIA_AudioInDevice_PauseRecording
PERU_MEDIA_AudioInDevice_SetVolume
PERU_MEDIA_AudioInDevice_StartRecording
PERU_MEDIA_AudioInDevice_StopRecording
PERU_MEDIA_System_GetAudioIn
PERU_MEDIA_System_GetAudioInDeviceCount
PERU_MEDIA_System_GetAudioInLoopBackDefault
PERU_MEDIA_System_GetAudioInSystemDefault
PERU_MemoryBlock_create
PERU_MemoryBlock_create1
PERU_MemoryBlock_getData
PERU_MemoryBlock_getRawData
PERU_MemoryBlock_getSize
PERU_NativePathToUri
PERU_OpenEmptyXmlValueStore
PERU_OpenSubValueStore
PERU_OpenValueStore
PERU_StringComparer_Compare
PERU_StringComparer_CreateComparer
PERU_TimeManager_getTime1970Micros
PERU_TimeManager_getTime1970Millis
PERU_TimeManager_getTime1970Seconds
PERU_TimeManager_getTimeMicros
PERU_TimeManager_getTimeMillis
PERU_TimeManager_getTimeZoneDeltaMicros
PERU_UriToNativePath
PERU_ValueStoreLoadBool
PERU_ValueStoreLoadDouble
PERU_ValueStoreLoadInt
PERU_ValueStoreLoadString
PERU_ValueStoreStoreBool
PERU_ValueStoreStoreDouble
PERU_ValueStoreStoreInt
PERU_ValueStoreStoreString
PERU_createTextFileLog
PERU_freeWideString
PERU_getString
PERU_initializeCrashhandler

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 390KB - Virtual size: 389KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Password: cacas

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 23KB - Virtual size: 22KB

.rsrc Size: 1024B - Virtual size: 996B

.reloc Size: 512B - Virtual size: 12B

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 14KB - Virtual size: 13KB

.rsrc Size: 1024B - Virtual size: 996B

.reloc Size: 512B - Virtual size: 12B

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 526KB - Virtual size: 526KB

.rsrc Size: 1024B - Virtual size: 916B

.reloc Size: 512B - Virtual size: 12B

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 215KB - Virtual size: 214KB

.rsrc Size: 1024B - Virtual size: 980B

.reloc Size: 512B - Virtual size: 12B

Password: cacas

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 45KB - Virtual size: 45KB

.rsrc Size: 1024B - Virtual size: 840B

.reloc Size: 512B - Virtual size: 12B

Password: cacas

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

0c:b5:19:da:ab:4d:05:0f:a4:68:6a:65:da:4a:e0:3fCertificate

Extended Key Usages

Key Usages

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2aCertificate

Extended Key Usages

Key Usages

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:ddCertificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

.text
Size: 23KB - Virtual size: 22KB

.rsrc
Size: 1024B - Virtual size: 996B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1024B - Virtual size: 996B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 526KB - Virtual size: 526KB

.rsrc
Size: 1024B - Virtual size: 916B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 215KB - Virtual size: 214KB

.rsrc
Size: 1024B - Virtual size: 980B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 45KB - Virtual size: 45KB

.rsrc
Size: 1024B - Virtual size: 840B

.reloc
Size: 512B - Virtual size: 12B

0c:b5:19:da:ab:4d:05:0f:a4:68:6a:65:da:4a:e0:3f
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

e7:f6:0d:76:44:3a:ce:9b:81:62:05:dd:8e:51:5c:55:ea:70:eb:98:b9:e7:2d:c3:c0:4a:d8:5e:98:2c:a8:6f
Signer

.text
Size: 177KB - Virtual size: 176KB

.rsrc
Size: 305KB - Virtual size: 305KB

.reloc
Size: 512B - Virtual size: 12B

10:41:fd:bc:e2:d5:86:46:99:ab:f2:46:0d:65:bd:1c
Certificate

3d:78:d7:f9:76:49:60:b2:61:7d:f4:f0:1e:ca:86:2a
Certificate

7b:05:b1:d4:49:68:51:44:f7:c9:89:d2:9c:19:9d:12
Certificate

7b:d4:e5:af:ba:cc:07:3f:a1:01:23:04:22:41:4d:12
Certificate

67:41:52:7e:a9:2f:f6:8c:82:50:7d:c3:0a:8f:13:e9:05:b9:55:1a:5a:ac:5c:a7:05:cf:7a:de:6a:79:28:4d
Signer

.text
Size: 3.8MB - Virtual size: 3.8MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 121KB - Virtual size: 136KB

.gfids
Size: 4KB - Virtual size: 3KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 297KB - Virtual size: 296KB