8e4ef54932456ee18e4dacc0fcb0d313

Sharing

Copy URL Twitter E-mail

General

Target

8e4ef54932456ee18e4dacc0fcb0d313
Size

1.0MB
MD5

8e4ef54932456ee18e4dacc0fcb0d313
SHA1

f4696340742610fc9a64456e66bb9764d9d4a2b0
SHA256

0427df18df50e4c247a02f78d1dc2237c00c220533e2d42cc8d4aad3ceb91df5
SHA512

bc4d2821bdb3d8de57b8adaa7af5e6e190757eeb040fba11e178ed28d11d66b8153ae1de5657de3a8469667a8dcedfdb86a33b2bcbdf7b22fc9dcb6d3282c521
SSDEEP

12288:t/WI0diypFoTTbSrbvEZSt8pTm+xBDeD8KtzsQGCpy0R12BSjw:t/W5RpiTTXCoQGC20c

Score

1^/10

Malware Config

Signatures

Files

8e4ef54932456ee18e4dacc0fcb0d313
.exe windows:5 windows x64 arch:x64

cb257161ee0f92dc84e13ce6ba99389e

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

23:4d:a0:4b:d2:42:85:3c:4a:cb:9a:e8:61:c2:19:bb
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

27/08/2009, 00:00

Not After

20/09/2012, 23:59

Subject

CN=Autodesk\, Inc,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Design Solutions Group,O=Autodesk\, Inc,L=San Rafael,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

Signer

Actual PE Digest

Digest Algorithm

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

U:\develop\global\Release64\bin\common\AdRefMan.pdb

Imports

acdb18

?namedObjectsDictionaryId@AcDbDatabase@@QEAA?AVAcDbObjectId@@XZ
?start@AcDbSymbolTableIterator@@QEAAX_N0@Z
?done@AcDbSymbolTableIterator@@QEBA_NXZ
?step@AcDbSymbolTableIterator@@QEAAX_N0@Z
?kwszPtr@AcString@@QEBAPEB_WXZ
??1AcString@@QEAA@XZ
?newAcRxClass@@YAPEAVAcRxClass@@PEB_W0HP6APEAVAcRxObject@@XZ00@Z
?desc@AcDbDwfDefinition@@SAPEAVAcRxClass@@XZ
?desc@AcDbDgnDefinition@@SAPEAVAcRxClass@@XZ
?desc@AcDbBlockTableRecord@@SAPEAVAcRxClass@@XZ
?pathName@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?setPathName@AcDbBlockTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?isFromExternalReference@AcDbBlockTableRecord@@QEBA_NXZ
?isFromOverlayReference@AcDbBlockTableRecord@@QEBA_NXZ
?getBlockReferenceIds@AcDbBlockTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAV?$AcArray@VAcDbObjectId@@V?$AcArrayMemCopyReallocator@VAcDbObjectId@@@@@@_N1@Z
?getRecord@AcDbBlockTableIterator@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableRecord@@W4OpenMode@AcDb@@_N@Z
?getName@AcDbSymbolTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?newIterator@AcDbBlockTable@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTableIterator@@_N1@Z
?getSymbolTable@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbBlockTable@@W4OpenMode@AcDb@@@Z
??0AcRxObject@@IEAA@XZ
?newIterator@AcDbDictionary@@QEBAPEAVAcDbDictionaryIterator@@XZ
acrx_abort
?acdbOpenAcDbObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@_N@Z
?acdbOpenAcDbObject@@YA?AW4ErrorStatus@Acad@@AEAPEAVAcDbObject@@VAcDbObjectId@@W4OpenMode@AcDb@@PEBVAcRxClass@@_N@Z
?nameAt@AcDbDictionary@@QEBA?AW4ErrorStatus@Acad@@VAcDbObjectId@@AEAPEA_W@Z
?getAt@AcDbDictionary@@QEBA?AW4ErrorStatus@Acad@@PEB_WAEAVAcDbObjectId@@@Z
?dictionaryKey@AcDbUnderlayDefinition@@SA?AVAcString@@PEBVAcRxClass@@@Z
?isLoaded@AcDbUnderlayDefinition@@QEBA_NXZ
?load@AcDbUnderlayDefinition@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?getSourceFileName@AcDbUnderlayDefinition@@QEBAPEB_WXZ
?setSourceFileName@AcDbUnderlayDefinition@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?desc@AcDbPdfDefinition@@SAPEAVAcRxClass@@XZ
?plotSettingsDictionaryId@AcDbDatabase@@QEAA?AVAcDbObjectId@@XZ
?layoutDictionaryId@AcDbDatabase@@QEAA?AVAcDbObjectId@@XZ
?acdbGetReservedString@@YAPEB_WW4reservedStringEnumType@AcDb@@_N@Z
?getCurrentStyleSheet@AcDbPlotSettings@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?getPlotCfgName@AcDbPlotSettings@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?desc@AcDbPlotSettings@@SAPEAVAcRxClass@@XZ
?desc@AcDbLayout@@SAPEAVAcRxClass@@XZ
?getSymbolTable@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbTextStyleTable@@W4OpenMode@AcDb@@@Z
?newIterator@AcDbTextStyleTable@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbTextStyleTableIterator@@_N1@Z
?font@AcDbTextStyleTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEA_WAEAH111@Z
?setBigFontFileName@AcDbTextStyleTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?bigFontFileName@AcDbTextStyleTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?setFileName@AcDbTextStyleTableRecord@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?fileName@AcDbTextStyleTableRecord@@QEBA?AW4ErrorStatus@Acad@@AEAPEB_W@Z
?isShapeFile@AcDbTextStyleTableRecord@@QEBAHXZ
?desc@AcDbTextStyleTableRecord@@SAPEAVAcRxClass@@XZ
?getRecord@AcDbTextStyleTableIterator@@QEBA?AW4ErrorStatus@Acad@@AEAPEAVAcDbTextStyleTableRecord@@W4OpenMode@AcDb@@_N@Z
acutRelRb
?getNamedObjectsDictionary@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAPEAVAcDbDictionary@@W4OpenMode@AcDb@@@Z
?setFromRbChain@AcDbXrecord@@QEAA?AW4ErrorStatus@Acad@@AEBUresbuf@@PEAVAcDbDatabase@@@Z
?rbChain@AcDbXrecord@@QEBA?AW4ErrorStatus@Acad@@PEAPEAUresbuf@@PEAVAcDbDatabase@@@Z
?desc@AcDbXrecord@@SAPEAVAcRxClass@@XZ
?getCurResbuf@AcDbXrecordIterator@@QEBA?AW4ErrorStatus@Acad@@AEAUresbuf@@PEAVAcDbDatabase@@@Z
?next@AcDbXrecordIterator@@QEAA?AW4ErrorStatus@Acad@@XZ
?done@AcDbXrecordIterator@@QEBA_NXZ
?start@AcDbXrecordIterator@@QEAAXXZ
??1AcDbXrecordIterator@@UEAA@XZ
??0AcDbXrecordIterator@@QEAA@PEBVAcDbXrecord@@@Z
?setSaveproxygraphics@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@F@Z
?setRetainOriginalThumbnailBitmap@AcDbDatabase@@QEAAX_N@Z
?originalFileVersion@AcDbDatabase@@QEBA?AW4AcDbDwgVersion@AcDb@@XZ
?lastSavedAsVersion@AcDbDatabase@@QEBA?AW4AcDbDwgVersion@AcDb@@XZ
?saveAs@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_W_NW4AcDbDwgVersion@AcDb@@PEBUSecurityParams@@@Z
?updateIndexes@AcDbIndexFilterManager@@YA?AW4ErrorStatus@Acad@@PEAVAcDbDatabase@@@Z
?getDictionaryVariable@@YAHPEAVAcDbDatabase@@PEB_WAEAPEA_W@Z
?acrxBuildClassHierarchy@@YAXXZ
?find@AdXREFString@@UEBAHAEBV1@H@Z
?Find@AdXREFString@@UEBAHAEBV1@H@Z
?ReverseFind@AdXREFString@@UEBAHAEBV1@H@Z
?Format@AdXREFString@@UEAAXPEB_WZZ
?Right@AdXREFString@@UEBA?AV1@H@Z
?Mid@AdXREFString@@UEBA?AV1@HH@Z
?setCurrentStyleSheet@AcDbImpPlotSettings@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?setPlotCfgName@AcDbImpPlotSettings@@QEAA?AW4ErrorStatus@Acad@@PEB_W@Z
?Left@AdXREFString@@UEBA?AV1@H@Z
?readDwgFile@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@PEB_WH_N0@Z
??0AcDbDatabase@@QEAA@_N0@Z
?freeRawMem@AcHeapOperators@@CAXPEAX@Z
?allocRawMem@AcHeapOperators@@CAPEAX_K@Z
?setWorkingDatabase@AcDbHostApplicationServices@@QEAAXPEAVAcDbDatabase@@@Z
?desc@AcDbDictionary@@SAPEAVAcRxClass@@XZ
?getAcDbObjectId@AcDbDatabase@@QEAA?AW4ErrorStatus@Acad@@AEAVAcDbObjectId@@_NAEBVAcDbHandle@@K@Z
?objectId@AcDbObject@@QEBA?AVAcDbObjectId@@XZ
?getAcDbHandle@AcDbObject@@QEBAXAEAVAcDbHandle@@@Z
?close@AcDbObject@@QEAA?AW4ErrorStatus@Acad@@XZ
?ownerId@AcDbObject@@QEBA?AVAcDbObjectId@@XZ
?IsEmpty@AdXREFString@@UEBA_NXZ
?MakeLower@AdXREFString@@UEAAXXZ
?clone@AcRxObject@@UEBAPEAV1@XZ
?copyFrom@AcRxObject@@UEAA?AW4ErrorStatus@Acad@@PEBV1@@Z
?isEqualTo@AcRxObject@@UEBAHPEBV1@@Z
?comparedTo@AcRxObject@@UEBA?AW4Ordering@AcRx@@PEBV1@@Z
acdbValidateSetup
?isA@AcDbHostApplicationServices@@UEBAPEAVAcRxClass@@XZ
??0AcDbHostApplicationServices@@QEAA@H@Z
??1AcDbHostApplicationServices@@UEAA@XZ
?fatalError@AcDbHostApplicationServices@@UEAAXPEB_WZZ
?userBreak@AcDbHostApplicationServices@@UEBAH_N@Z
?displayChar@AcDbHostApplicationServices@@UEBAX_W@Z
?displayString@AcDbHostApplicationServices@@UEBAXPEB_WH@Z
?readyToDisplayMessages@AcDbHostApplicationServices@@UEAAHXZ
?enableMessageDisplay@AcDbHostApplicationServices@@UEAAXH@Z
?doFullCRCCheck@AcDbHostApplicationServices@@UEAAHXZ
?getTempPath@AcDbHostApplicationServices@@UEAAIKPEA_W@Z
?getEnv@AcDbHostApplicationServices@@UEAAPEB_WPEB_W@Z
?newProgressMeter@AcDbHostApplicationServices@@UEAAPEAVAcDbHostApplicationProgressMeter@@XZ
?newClipBoundaryRectangular@AcDbHostApplicationServices@@UEAAPEAVAcDbAbstractClipBoundaryDefinition@@XZ
?newClipBoundaryPolygonal@AcDbHostApplicationServices@@UEAAPEAVAcDbAbstractClipBoundaryDefinition@@XZ
?newClipBoundaryArray@AcDbHostApplicationServices@@UEAAPEAVClipBoundaryArray@@XZ
?createWorkingGlobals@AcDbHostApplicationServices@@UEAAPEAVAcDbGlobals@@XZ
?program@AcDbHostApplicationServices@@UEAAPEB_WXZ
?product@AcDbHostApplicationServices@@UEAAPEB_WXZ
?companyName@AcDbHostApplicationServices@@UEAAPEB_WXZ
?prodcode@AcDbHostApplicationServices@@UEAA?BW4ProdIdCode@@XZ
?releaseMajorMinorString@AcDbHostApplicationServices@@UEAAPEB_WXZ
?releaseMajorVersion@AcDbHostApplicationServices@@UEAAHXZ
?releaseMinorVersion@AcDbHostApplicationServices@@UEAAHXZ
?versionString@AcDbHostApplicationServices@@UEAAPEB_WXZ
?acadInternalServices@AcDbHostApplicationServices@@UEAAPEAVAcadInternalServices@@XZ
?isURL@AcDbHostApplicationServices@@UEBAHPEB_W@Z
?isRemoteFile@AcDbHostApplicationServices@@UEBAHPEB_WPEA_W@Z
?getRemoteFile@AcDbHostApplicationServices@@UEBA?AW4ErrorStatus@Acad@@PEB_WPEA_WH@Z
?putRemoteFile@AcDbHostApplicationServices@@UEBA?AW4ErrorStatus@Acad@@PEB_W0@Z
?launchBrowserDialog@AcDbHostApplicationServices@@UEBAHPEA_WPEB_W111H@Z
?drawOleOwnerDrawItem@AcDbHostApplicationServices@@UEAAXPEAVCOleClientItem@@_JJJJJ@Z
?getNewOleClientItem@AcDbHostApplicationServices@@UEAA?AW4ErrorStatus@Acad@@AEAPEAVCOleClientItem@@@Z
?serializeOleItem@AcDbHostApplicationServices@@UEAA?AW4ErrorStatus@Acad@@PEAVCOleClientItem@@PEAVCArchive@@@Z
?_entToWorldTransform@AcDbHostApplicationServices@@UEAAHQEANPEAUflagmat@@@Z
?getSubstituteFont@AcDbHostApplicationServices@@UEAAHPEAPEA_WPEA_WHH@Z
?alert@AcDbHostApplicationServices@@UEBAXPEB_W@Z
?auditPrintReport@AcDbHostApplicationServices@@UEBAXPEAVAcDbAuditInfo@@PEB_WH@Z
?plotSettingsValidator@AcDbHostApplicationServices@@UEBAPEAVAcDbPlotSettingsValidator@@XZ
?layoutManager@AcDbHostApplicationServices@@UEBAPEAVAcDbLayoutManager@@XZ
?loadApp@AcDbHostApplicationServices@@UEAA_NPEB_WW4LoadReasons@AcadApp@@_N2@Z
?getDefaultPlotCfgInfo@AcDbHostApplicationServices@@UEAAXPEA_W0@Z
?signingComplete@AcDbHostApplicationServices@@UEAA?AW4ErrorStatus@Acad@@W423@PEB_WPEA_N@Z
?usedPasswordFromCacheMsg@AcDbHostApplicationServices@@UEAAXPEB_W@Z
?missingCryptoProviderMsg@AcDbHostApplicationServices@@UEAAXXZ
acdbCleanUp
?Empty@AdXREFString@@UEAAXXZ
?GetLength@AdXREFString@@UEBAHXZ
?rightTrim@AdXREFString@@UEAA?AV1@V1@@Z
?leftTrim@AdXREFString@@UEAA?AV1@V1@@Z
PeekMessageW
??0AdXREFString@@QEAA@AEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
??4AdXREFString@@QEAAAEBV0@PEB_W@Z
?CollateNoCase@AdXREFString@@UEBAHAEBV1@@Z
??4AdXREFString@@QEAAAEBV0@AEBV0@@Z
?CompareNoCase@AdXREFString@@UEBAHAEBV1@@Z
??0AdXREFString@@QEAA@XZ
??BAdXREFString@@QEBAPEB_WXZ
acdbModelerEnd
acdbIsModelerStarted
?acdbSetHostApplicationServices@@YA?AW4ErrorStatus@Acad@@PEAVAcDbHostApplicationServices@@@Z
??0AdXREFString@@QEAA@AEBV0@@Z
??0AdXREFString@@QEAA@PEB_W@Z
??1AdXREFString@@UEAA@XZ
acrxSysRegistry
?acdbHostApplicationServices@@YAPEAVAcDbHostApplicationServices@@XZ

adui18

?DoModal@CAdUiBaseDialog@@UEAA_JXZ
?ExchangeData@CAdUiBaseDialog@@UEAAHH@Z
?EnableMultiDocumentActivation@CAdUiBaseDialog@@UEAAHH@Z
?IsMultiDocumentActivationEnabled@CAdUiBaseDialog@@UEAAHXZ
?EnableFloatingWindows@CAdUiBaseDialog@@UEAAXH@Z
?Create@CAdUiBaseDialog@@UEAAHPEB_WPEAVCWnd@@@Z
?Create@CAdUiBaseDialog@@UEAAHIPEAVCWnd@@@Z
?SetAppRootKey@CAdUiBaseDialog@@QEAAXPEB_W@Z
?AppRootKey@CAdUiBaseDialog@@UEAAPEB_WXZ
?AppResourceInstance@CAdUiBaseDialog@@UEAAPEAUHINSTANCE__@@XZ
?AppMainWindow@CAdUiBaseDialog@@UEAAPEAVCWnd@@XZ
?FindContextHelpFullPath@CAdUiBaseDialog@@MEAAHPEB_WAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?OnNotifyUpdateTip@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@PEAVCWnd@@@Z
?OnNotifyControlValid@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@IH@Z
?DoAdUiMessage@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@W4ADUI_NOTIFY@@I_J@Z
?GetThisMessageMap@CAdUiListCtrl@@KAPEBUAFX_MSGMAP@@XZ
?PreSubclassWindow@CAdUiListCtrl@@MEAAXXZ
?OnHitTipRect@CAdUiListCtrl@@MEAAHAEAVCPoint@@@Z
?OnGetTipText@CAdUiListCtrl@@MEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?OnGetTipRect@CAdUiListCtrl@@MEAAHAEAVCRect@@@Z
?OnGetTipSupport@CAdUiListCtrl@@MEAA?AW4ADUI_REPLY@@AEAVCPoint@@@Z
?OnDrawTipText@CAdUiListCtrl@@MEAAHAEAVCAdUiDrawTipText@@@Z
?OnDrawTip@CAdUiListCtrl@@MEAAXAEAVCDC@@@Z
?DoAdUiMessage@CAdUiListCtrl@@MEAA?AW4ADUI_REPLY@@W4ADUI_NOTIFY@@I_J@Z
?GetContentExtent@CAdUiListCtrl@@UEAAXHHPEB_WAEAH1@Z
??1CAdUiListCtrl@@UEAA@XZ
?GetRuntimeClass@CAdUiListCtrl@@UEBAPEAUCRuntimeClass@@XZ
?Exists@CAdUiPathname@@QEAAHXZ
?Parse@CAdUiPathname@@UEAA?AW4PathErr@@PEB_WH@Z
??1CAdUiPathname@@QEAA@XZ
??0CAdUiPathname@@QEAA@XZ
?setTheCERutil@CERutil@@SA_NPEAV1@@Z
?makeBuildVersion@CERutil@@UEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HHHH@Z
?makeRegistryVersion@CERutil@@UEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@HH@Z
?PostNcDestroy@CAdUiBaseDialog@@MEAAXXZ
?getCADMngrSettingsRegPath@CERutil@@UEBA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?getInstalledProductSerialNum@CERutil@@UEBA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?getInstalledProductPath@CERutil@@UEBA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?getInstalledProductKey@CERutil@@UEBA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?getInstalledProductName@CERutil@@UEBA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
??1CERutil@@UEAA@XZ
??0CERutil@@QEAA@XZ
?GetString@CAdUiRegistryAccess@@QEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEBV23@@Z
?EnumValueNames@CAdUiRegistryAccess@@QEAAHKAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEAK@Z
?IsOpen@CAdUiRegistryAccess@@QEAAHXZ
??1CAdUiRegistryAccess@@UEAA@XZ
??0CAdUiRegistryAccess@@QEAA@PEAUHKEY__@@AEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetThisMessageMap@CAdUiDialog@@KAPEBUAFX_MSGMAP@@XZ
?OnOK@CAdUiDialog@@MEAAXXZ
?OnDialogHelp@CAdUiDialog@@UEAAXXZ
?DoDataExchange@CAdUiDialog@@MEAAXPEAVCDataExchange@@@Z
?SetControlProperty@CAdUiDialog@@QEAAHPEAU_dlgControlTag@@K@Z
?SaveColumnSizes@CAdUiDialog@@QEAAHPEAVCListCtrl@@@Z
?GetColumnSizes@CAdUiDialog@@QEAAHPEAVCListCtrl@@@Z
??1CAdUiDialog@@UEAA@XZ
??0CAdUiDialog@@QEAA@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
?GetRuntimeClass@CAdUiDialog@@UEBAPEAUCRuntimeClass@@XZ
?OnInitDialog@CAdUiBaseDialog@@MEAAHXZ
?PreTranslateMessage@CAdUiBaseDialog@@UEAAHPEAUtagMSG@@@Z
?OnNotifyGeneric@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?OnNotifyControlChange@CAdUiBaseDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
??0CAdUiListCtrl@@QEAA@XZ
??1CAdUiComboBox@@UEAA@XZ
??1CAdUiEdit@@UEAA@XZ
??0CAdUiEdit@@QEAA@XZ
??0CAdUiComboBox@@QEAA@XZ
?SetDialogName@CAdUiDialog@@QEAAXPEB_W@Z
?SetRootKey@CAdUiDialog@@QEAAXPEB_W@Z
?DoDialogHelp@CAdUiDialog@@UEAAHXZ
?PreCreateWindow@CAdUiBaseDialog@@MEAAHAEAUtagCREATESTRUCTW@@@Z
?getVersionNumber@CERutil@@UEAA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEA_WAEAH111@Z
?OnInitDialogFinish@CAdUiDialog@@MEAAXXZ
?OnInitDialogBegin@CAdUiDialog@@MEAAXXZ

anav

?GetThisMessageMap@CNavDialog@@KAPEBUAFX_MSGMAP@@XZ
?OnNotifyGeneric@CNavDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?OnNotifyControlChange@CNavDialog@@MEAA?AW4ADUI_REPLY@@I_J@Z
?UpdateUIState@CNavDialog@@MEAAXXZ
?OnFolderChange@CNavDialog@@MEAAXXZ
?OnFolderItemChange@CNavDialog@@MEAAXXZ
?OnFilterChange@CNavDialog@@MEAAXXZ
?OnFileNameSelectionChange@CNavDialog@@MEAAXXZ
?OnFileNameChange@CNavDialog@@MEAAXXZ
?Refresh@CNavDialog@@MEAAXXZ
?OnDoAddToFavorites@CNavDialog@@MEAAXH@Z
?OnDoFind@CNavDialog@@MEAAXXZ
?OnDoLocate@CNavDialog@@MEAAXXZ
?OnURLDownloadSuccess@CNavDialog@@MEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?LaunchBrowserDialog@CNavDialog@@MEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PEB_W11@Z
?GetDefaultBrowserStartURL@CNavDialog@@MEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?DisplaySearchError@CNavDialog@@MEAAXPEB_W@Z
?FindInSearchPath@CNavDialog@@MEAAHPEB_WPEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?ReportURLTransferStatus@CNavDialog@@MEAAHAEAVCDWordArray@@AEAVCStringArray@@1@Z
?OnUrlOK@CNavDialog@@MEAAHXZ
?VerifyURLSave@CNavDialog@@MEAAHXZ
?OnFileNameOK@CNavDialog@@MEAAHXZ
?UpdateFileExtension@CNavDialog@@MEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?CombineDataTextWithFolderName@CNavDialog@@MEAA?AW4OkHandlerErr@@PEAVCNavData@@AEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?PreprocessData@CNavDialog@@MEAA?AW4OkHandlerErr@@AEAVCNavDataArray@@@Z
?OnOK@CNavDialog@@MEAAXXZ
?OnCancel@CNavDialog@@MEAAXXZ
?PrepareViewsMenu@CNavDialog@@MEAAXPEAVCMenu@@@Z
?PrepareToolsMenu@CNavDialog@@MEAAXPEAVCMenu@@@Z
?PrepareOkMenu@CNavDialog@@MEAAXPEAVCMenu@@@Z
?DoDataExchange@CNavDialog@@MEAAXPEAVCDataExchange@@@Z
?PreTranslateMessage@CNavDialog@@MEAAHPEAUtagMSG@@@Z
?OnInitDialog@CNavDialog@@MEAAHXZ
?OnDialogHelp@CNavDialog@@UEAAXPEB_W@Z
?GetDownloadActionCodes@CNavDialog@@UEAAKAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?BeginDownloadFiles@CNavDialog@@UEAAHAEAVCStringArray@@AEAVCDWordArray@@@Z
?GetProductName@CNavDialog@@UEAAHAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?LocateFile@CNavDialog@@UEAAXXZ
?GetAllDialogsData@CNavDialog@@UEAAHAEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAV23@@Z
?GetAllDialogsData@CNavDialog@@UEAAHAEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAK@Z
?SetAllDialogsData@CNavDialog@@UEAAHAEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@AEAV23@@Z
?SetAllDialogsData@CNavDialog@@UEAAHAEBV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@K@Z
??1CNavDialog@@UEAA@XZ
??0CNavDialog@@QEAA@AEAVCNavDataArray@@AEAVCNavFilterArray@@IPEAVCWnd@@PEAUHINSTANCE__@@@Z
?GetThisClass@CNavDialog@@SAPEAUCRuntimeClass@@XZ
??0CNavListCtrl@@QEAA@XZ
?NavSetHostApplication@@YAHPEAVCNavHostApplication@@@Z
??1CNavFilterArray@@UEAA@XZ
??0CNavFilterArray@@QEAA@XZ
?GetText@CNavData@@QEAAPEB_WXZ
?GetCurrentFolderForPersistence@CNavDialog@@QEAAXAEAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?SetFolderListCtrl@CNavDialog@@QEAAXPEAVCNavListCtrl@@@Z
?SetNoFTP@CNavDialog@@QEAAXH@Z
?SetCreatingFile@CNavDialog@@QEAAXH@Z
?SetReadOnlyHidden@CNavDialog@@QEAAXH@Z
?SetReadOnlyAllowed@CNavDialog@@QEAAXH@Z
?SetNoURLsAllowed@CNavDialog@@QEAAXH@Z
?SetNoURLFileTransfer@CNavDialog@@QEAAXH@Z
?SetConfirmReplace@CNavDialog@@QEAAXH@Z
?SetUseRegExtensionFlags@CNavDialog@@QEAAXH@Z
?SetInitialFileName@CNavDialog@@QEAAXPEB_W@Z
?SetForceInitialFolder@CNavDialog@@QEAAXPEB_W@Z
?SetForceFilterIndex@CNavDialog@@QEAAXH@Z
?SetDefaultFileExtension@CNavDialog@@QEAAXPEB_W@Z
?SetDialogCaption@CNavDialog@@QEAAXPEB_W@Z
??1CNavDataArray@@UEAA@XZ
??0CNavDataArray@@QEAA@XZ
?SetDescription@CNavFilter@@QEAAXPEB_W@Z
?SetMultiSelectAllowed@CNavDialog@@QEAAXH@Z
?SetFilterIndex@CNavDialog@@QEAAXH@Z
?GetDefaultFileExtension@CNavDialog@@QEAAPEB_WXZ
?OnCmdMsg@CNavDialog@@MEAAHIHPEAXPEAUAFX_CMDHANDLERINFO@@@Z

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

shlwapi

PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathIsDirectoryW
SHRegGetValueW

acismobj18.dbx

?imageDictionary@AcDbRasterImageDef@@SA?AVAcDbObjectId@@PEAVAcDbDatabase@@@Z
?desc@AcDbRasterImageDef@@SAPEAVAcRxClass@@XZ

shfolder

SHGetFolderPathW

userdata

?GetProductRegistryRootKey@@YAIPEA_WK@Z
?SetWorkingDirectory@@YAXXZ
?InstallUserData@@YAIXZ

acut

?GetFileStatus@AcUt@@YA_NPEB_WAEAUCFileStatus@@@Z

mfc90u

ord573
ord3747
ord5052
ord4361
ord4454
ord4411
ord4676
ord5043
ord5280
ord4388
ord5297
ord2301
ord1959
ord5337
ord2680
ord5136
ord5139
ord4376
ord4047
ord648
ord4401
ord4243
ord3020
ord5027
ord2227
ord1333
ord2199
ord3017
ord6030
ord3018
ord6032
ord6026
ord3013
ord958
ord5485
ord3074
ord2490
ord2489
ord4126
ord1588
ord403
ord3560
ord1061
ord755
ord563
ord543
ord670
ord5031
ord4662
ord6205
ord3858
ord3862
ord6209
ord2914
ord4840
ord5098
ord4609
ord4578
ord4703
ord4745
ord4579
ord5033
ord2813
ord3173
ord2068
ord642
ord393
ord3141
ord3287
ord3024
ord4321
ord4855
ord3022
ord937
ord2454
ord2477
ord2472
ord4344
ord4203
ord2134
ord4625
ord2559
ord5874
ord1577
ord3253
ord1148
ord641
ord1468
ord5217
ord392
ord1424
ord6412
ord1979
ord1515
ord2218
ord911
ord364
ord4351
ord756
ord2142
ord1626
ord3408
ord728
ord1686
ord1615
ord3381
ord1422
ord2141
ord4207
ord584
ord5848
ord776
ord1110
ord575
ord770
ord266
ord2432
ord3673
ord3161
ord3151
ord1069
ord3583
ord1603
ord6000
ord2946
ord6006
ord2956
ord6008
ord2936
ord2860
ord3979
ord3975
ord671
ord3750
ord885
ord265
ord2435
ord2531
ord2539
ord5532
ord280
ord1576
ord5658
ord4214
ord4148
ord4139
ord777
ord1152
ord1103
ord3269
ord362
ord1582
ord2067
ord4699
ord4856
ord4322
ord617
ord5335
ord4373
ord3740
ord5345
ord5362
ord4050
ord5356
ord3005
ord1966
ord1149
ord3424
ord577
ord3932
ord5511
ord6363
ord5230
ord1025
ord3906
ord5713
ord2065
ord2110
ord4438
ord6424
ord3901
ord6422
ord4581
ord4584
ord4588
ord2303
ord5696
ord4687
ord5358
ord4121
ord772
ord3783
ord4145
ord4596
ord2907
ord2378
ord791
ord887
ord2184
ord296
ord286
ord588
ord789
ord913
ord916
ord4225
ord2437
ord5332
ord1634
ord1698
ord1699
ord2010
ord5307
ord1389
ord3014
ord6027
ord5093
ord3436
ord6425
ord3902
ord6423
ord1553
ord2226
ord2932
ord2233
ord2470
ord2452
ord2450
ord2468
ord2480
ord2457
ord2473
ord2478
ord2461
ord2463
ord2465
ord2459
ord2475
ord2455
ord949
ord945
ord947
ord943
ord938
ord5365
ord5367
ord6101
ord1635
ord4393
ord4843
ord3494
ord5346
ord4294
ord6421
ord5201
ord1954
ord5284
ord4355
ord1430
ord4048
ord4601
ord1658
ord1661
ord6056
ord3137
ord1713
ord1714
ord5013
ord1429
ord6053
ord3135
ord5314
ord2139
ord4349
ord4372
ord4051
ord2709
ord3809
ord3819
ord3818
ord601
ord2598
ord2711
ord2605
ord2780
ord4419
ord2904
ord2797
ord2602
ord779
ord2133
ord598
ord4343
ord1501
ord5870
ord437
ord3107
ord679
ord564
ord5993
ord6070
ord3162
ord6068
ord757
ord424
ord1595
ord2198
ord606
ord1040
ord2388
ord1233
ord1839
ord3288
ord1210
ord4213
ord6381
ord1938
ord6149
ord1516
ord5619
ord2326
ord4187
ord472
ord473
ord1666
ord5540
ord4007
ord804
ord1222
ord5843
ord5845
ord5550
ord319
ord507
ord506
ord824
ord1283
ord1519
ord285
ord3008
ord5938
ord2812
ord2819
ord2816
ord6154
ord6012
ord2536
ord388
ord2767
ord5623
ord3411
ord567
ord6456
ord759
ord3183
ord6288
ord5225
ord5458
ord6441
ord5760
ord935
ord2372
ord1481
ord2179
ord4167
ord6359
ord1840
ord4103
ord3250
ord2769
ord1512
ord3384
ord541
ord6146
ord5844
ord5574
ord735
ord3073
ord3301
ord1589
ord1677
ord2137
ord655
ord4347
ord3428
ord6207
ord1454
ord6234
ord3784
ord336
ord600
ord2433
ord5772
ord5861
ord6179
ord1216
ord1186
ord6428
ord4211
ord568
ord6147
ord5846
ord760
ord3343
ord452
ord1016
ord5564
ord690
ord1335
ord2230
ord3685
ord1633
ord2951
ord2937
ord6002
ord4098
ord3899
ord769
ord4462
ord3780
ord1209
ord3492
ord583
ord1317
ord2025
ord6368
ord2722
ord5966
ord4465
ord1949
ord775
ord1080
ord3331
ord2001
ord2436
ord1497
ord1310
ord2984

msvcr90

_exit
_XcptFilter
__C_specific_handler
__wgetmainargs
_amsg_exit
getc
fseek
fread
_recalloc
_wsplitpath_s
rewind
calloc
_wfopen_s
_wgetcwd
_wrename
_wremove
realloc
_purecall
_wcsicmp
wcsncmp
wcschr
_cexit
_wtoi
fclose
fwrite
_wfopen
malloc
memmove_s
_invalid_parameter_noinfo
??0exception@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBQEBD@Z
??0exception@std@@QEAA@XZ
??1exception@std@@UEAA@XZ
?what@exception@std@@UEBAPEBDXZ
_wcsdup
wcscpy_s
memcpy
_wsetlocale
wcscat_s
wcsstr
wcsrchr
_wcslwr_s
free
_wtof
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
__crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__CxxFrameHandler3
memset
swscanf_s
_CxxThrowException
wcsncpy_s

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
RaiseException
LocalAlloc
ReleaseMutex
GetVersion
OutputDebugStringW
GetSystemDefaultLCID
lstrlenA
CreateThread
CloseHandle
WaitForMultipleObjects
ResetEvent
CreateMutexW
GetWindowsDirectoryW
ExpandEnvironmentStringsA
LoadLibraryA
FindNextFileW
FindClose
SetLastError
GetLongPathNameW
GetFileAttributesW
FindFirstFileW
GetProcAddress
GetModuleHandleW
LoadLibraryExW
SearchPathW
LocalFree
GlobalUnlock
lstrlenW
FormatMessageW
GlobalAlloc
CreateDirectoryW
SystemTimeToTzSpecificLocalTime
UnregisterWait
FreeLibrary
WaitForSingleObject
SetEvent
LoadLibraryW
GlobalLock
GetModuleFileNameW
RegisterWaitForSingleObject
CreateEventW
lstrcpyW
GetLocaleInfoW
GetProcessHeap
HeapFree
GetCurrentDirectoryW
GetSystemTime
Sleep
GetFullPathNameW
GetTempFileNameW
WideCharToMultiByte
GetTempPathW
DeleteFileW
GetTickCount
GetDateFormatW
GetTimeFormatW
IsDBCSLeadByte
MultiByteToWideChar
GetLastError

user32

CheckMenuItem
RemoveMenu
CopyRect
GetCursorPos
RedrawWindow
TranslateAcceleratorW
AppendMenuW
LoadMenuW
InvalidateRect
LockWindowUpdate
ScreenToClient
PtInRect
LoadAcceleratorsW
MessageBoxW
EnableWindow
GetDesktopWindow
SendMessageW
ReleaseDC
UpdateWindow
GetClientRect
GetParent
GetSubMenu
CreatePopupMenu
GetDC
KillTimer
SetTimer
DefWindowProcW
IsWindowVisible
ReleaseCapture
GetSysColor
GetClassInfoW
GetDoubleClickTime
WindowFromPoint
PostThreadMessageW
PostQuitMessage
LoadImageW
GetWindowRect
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
GetKeyState
TranslateMessage
LoadIconW
DispatchMessageW
ClientToScreen
SetCapture
PostMessageW
GetFocus
LoadCursorW

gdi32

EnumFontFamiliesW
DeleteObject
GetTextExtentPoint32W

advapi32

RegOpenKeyExA
RegOpenKeyW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegQueryValueExW
RegQueryValueExA
RegSetValueExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
RegCreateKeyExW

shell32

DragAcceptFiles
DragQueryFileW
SHBrowseForFolderW
SHGetMalloc
SHGetPathFromIDListW
ShellExecuteExW
DragFinish

ole32

CoUninitialize
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
SysAllocStringByteLen
SysStringByteLen

msvcp90

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@PEB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@XZ
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
??A?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEA_W_K@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NAEBV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2_KB
?assign@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV12@PEB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@AEBV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAAAEAV01@PEB_W@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEBAHPEB_W@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@PEBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@AEBV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QEAA@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QEAA@AEBV01@@Z

Exports

Exports

?getDwgVersion@AcadVersionInfo@@YA?AW4MaintenanceReleaseVersion@AcDb@@PEAW4AcDbDwgVersion@3@@Z
?releaseMinorVersion@AcadVersionInfo@@YAHXZ

Sections

.text
Size: 362KB - Virtual size: 362KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 401KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb257161ee0f92dc84e13ce6ba99389e

Code Sign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

23:4d:a0:4b:d2:42:85:3c:4a:cb:9a:e8:61:c2:19:bbCertificate

Extended Key Usages

Key Usages

Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

acdb18

adui18

anav

version

shlwapi

acismobj18.dbx

shfolder

userdata

acut

mfc90u

msvcr90

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

msvcp90

Exports

Exports

Sections

.text Size: 362KB - Virtual size: 362KB

.rdata Size: 183KB - Virtual size: 183KB

.data Size: 8KB - Virtual size: 16KB

.pdata Size: 31KB - Virtual size: 30KB

.rsrc Size: 401KB - Virtual size: 400KB

.reloc Size: 12KB - Virtual size: 11KB

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

23:4d:a0:4b:d2:42:85:3c:4a:cb:9a:e8:61:c2:19:bb
Certificate

.text
Size: 362KB - Virtual size: 362KB

.rdata
Size: 183KB - Virtual size: 183KB

.data
Size: 8KB - Virtual size: 16KB

.pdata
Size: 31KB - Virtual size: 30KB

.rsrc
Size: 401KB - Virtual size: 400KB

.reloc
Size: 12KB - Virtual size: 11KB