XMouseButtonControlSetup[.]2[.]20[.]5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
XMouseButtonControlSetup.2.20.5.exe
Size 2.9MB
Sample240601-w2mkksbf98
SHA256 2240bf5fb5d80938b0676c46ef9f84bc1739c32f60c473ff85e530ae0eca2818
MD5 2e9725bc1d71ad1b8006dfc5a2510f88
SHA1 6e1f7d12881696944bf5e030a7d131b969de0c6c
SHA512 62bd9cde806f83f911f1068b452084ef2adc01bc0dec2d0f668a781cc0d94e39f6e35618264d8796ca205724725abd40429f463017e6ca5caf7d683429f82d39
SSDEEP 49152:n65SJw48kZN+nCYk7c44+Y0hdwn4Km2A5aT/pVE0hYYajihV2Qso0SWMrboF:tfpeno4oY0QZm2dlNJsrHM4
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 8 IoCs

Checks for missing Authenticode signature.

resource
unpack001/$PLUGINSDIR/ExecCmd.dll
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/ShellExecAsUser.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/$PLUGINSDIR/nsDialogs.dll
unpack001/BugTrapU-x64.dll
unpack002/$PLUGINSDIR/ExecCmd.dll
unpack002/$PLUGINSDIR/System.dll

NSIS installer 4 IoCs

installer

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2
static1/unpack001/uninstaller.exe	nsis_installer_1
static1/unpack001/uninstaller.exe	nsis_installer_2

File Explorer

XMouseButtonControlSetup.2.20.5.exe

.exe 2.9MB
$PLUGINSDIR/ExecCmd.dll

.dll 4KB
$PLUGINSDIR/InstallOptions.dll

.dll 14KB
$PLUGINSDIR/ShellExecAsUser.dll

.dll 7KB
$PLUGINSDIR/System.dll

.dll 10KB
$PLUGINSDIR/ioSpecial.ini

211B
$PLUGINSDIR/modern-wizard.bmp

25KB
$PLUGINSDIR/nsDialogs.dll

.dll 9KB
BugTrapU-x64.dll

.dll 364KB
XMouseButtonControl.exe

.exe 1.7MB
XMouseButtonHook.dll

.dll 1.0MB
uninstaller.exe

.exe 74KB
$PLUGINSDIR/ExecCmd.dll

.dll 4KB
$PLUGINSDIR/System.dll

.dll 10KB

XMouseButtonControlSetup.2.20.5.exe

IMPHASH b1a57b635b23ffd553b3fd1e0960b2bd
SHA256 2240bf5fb5d80938b0676c46ef9f84bc1739c32f60c473ff85e530ae0eca2818
MD5 2e9725bc1d71ad1b8006dfc5a2510f88
SHA1 6e1f7d12881696944bf5e030a7d131b969de0c6c
SHA512 62bd9cde806f83f911f1068b452084ef2adc01bc0dec2d0f668a781cc0d94e39f6e35618264d8796ca205724725abd40429f463017e6ca5caf7d683429f82d39
SSDEEP 49152:n65SJw48kZN+nCYk7c44+Y0hdwn4Km2A5aT/pVE0hYYajihV2Qso0SWMrboF:tfpeno4oY0QZm2dlNJsrHM4
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

1b:51:25:86:af:62:b1:0f:b3:4f:04:0b:21:fe:86:b5:d7:76:3b:fb

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Chains

May 23, 2024

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Serial Number

3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2023 - Apr 3, 2024

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Minor OS version

Major OS version

Entry point

12908

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA SetFileAttributesA CompareFileTime SearchPathA CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess GetWindowsDirectoryA Sleep lstrcmpiA lstrlenA GetVersion SetErrorMode lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread GetLastError CreateDirectoryA CreateProcessA RemoveDirectoryA GetTempFileNameA lstrcatA GetSystemDirectoryA WaitForSingleObject SetFileTime CloseHandle GlobalFree lstrcmpA ExpandEnvironmentStringsA GetExitCodeProcess GlobalAlloc GetCommandLineA GetTempPathA GetProcAddress FindFirstFileA FindNextFileA DeleteFileA SetFilePointer ReadFile FindClose GetPrivateProfileStringA WritePrivateProfileStringA WriteFile MulDiv MultiByteToWideChar LoadLibraryExA GetModuleHandleA FreeLibrary

user32

SetCursor GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor EndDialog ScreenToClient LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetForegroundWindow GetWindowLongA RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA ExitWindowsEx SetTimer PostQuitMessage SetWindowLongA SendMessageTimeoutA LoadImageA wsprintfA GetDlgItem FindWindowExA IsWindow SetClipboardData EmptyClipboard OpenClipboard EndPaint CreateDialogParamA DestroyWindow ShowWindow SetWindowTextA

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_Create ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/ExecCmd.dll

IMPHASH bf44c9fb48bb8c36b3e2527e7252350d
SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
MD5 b9380b0bea8854fd9f93cc1fda0dfeac
SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

5433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/InstallOptions.dll

IMPHASH 738dc9bb91549f627cf1953c2000e1d6
SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
MD5 d753362649aecd60ff434adf171a4e7f
SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

GetCurrentDirectoryA MultiByteToWideChar SetCurrentDirectoryA GetPrivateProfileStringA GetPrivateProfileIntA GetModuleHandleA lstrcmpiA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalAlloc GlobalUnlock GlobalLock

user32

GetDlgCtrlID CloseClipboard GetClipboardData MapWindowPoints LoadCursorA GetClientRect SetWindowRgn LoadIconA GetWindowLongA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow SetCursor PtInRect EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA EnableMenuItem DrawTextA GetSystemMenu OpenClipboard LoadImageA

gdi32

SetTextColor DeleteObject CombineRgn CreateRectRgn GetDIBits SelectObject CreateCompatibleDC GetObjectA

shell32

SHGetPathFromIDListA ShellExecuteA SHBrowseForFolderA SHGetDesktopFolder

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/ShellExecAsUser.dll

IMPHASH fb89301642ac2a39aefdd3cc2610ed81
SHA256 27d61cacd2995f498ba971b3b2c53330bc0e9900c9d23e57b2927aadfdee8115
MD5 86a81b9ab7de83aa01024593a03d1872
SHA1 8fd7c645e6e2cb1f1bcb97b3b5f85ce1660b66be
SHA512 cc37bd5d74d185077bdf6c4a974fb29922e3177e2c5971c664f46c057aad1236e6f3f856c5d82f1d677c29896f0e3e71283ef04f886db58abae151cb27c827ac
SSDEEP 96:GFZf6PnleKYcBVGKLyhkrw0qyz/sRXQVgKXohw8FFtkqCp:Gnf6IKTAKLyGOCqQomItQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

6561

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/nsDialogs.dll

IMPHASH f03b2bab186574d8892d3d73fa9fd3fd
SHA256 4cd17f660560934a001fc8e6fdcea50383b78ca129fb236623a9666fcbd13061
MD5 f832e4279c8ff9029b94027803e10e1b
SHA1 134ff09f9c70999da35e73f57b70522dc817e681
SHA512 bf92b61aa267e3935f0ea7f47d8d96f09f016e648c2a7e7dcd5ecc47da864e824c592098c1e39526b643bd126c5c99d68a7040411a4cf68857df629f24d4107d
SSDEEP 96:ytJ6tC4jcY5rKhkfL9SYdKkcxM2DjDf3GEfKvBKav+Yx4yndY7ndS27gA:yyj6QS8HREf+BYYxbdqn420
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

7410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

BugTrapU-x64.dll

IMPHASH bce0ab64d2b0769ad1d26a0d18fc1cdd
SHA256 0ab8481b44e7d2f0d57b444689aef75b61024487a5cf188c2fc6b8de919b040a
MD5 80d5f32b3fc515402b9e1fe958dedf81
SHA1 a80ffd7907e0de2ee4e13c592b888fe00551b7e0
SHA512 1589246cd480326ca22c2acb1129a3a90edf13b75031343061f0f4ed51580dfb890862162a65957be9026381bb24475fec6ddcb86692c5961a24b18461e5f1f0
SSDEEP 6144:tv+VkJpn803Q9eg3rX9FudjTLNjGGtOCiKTBObg:tvfJp8aQ9eg3rX9Fudjx5Tk
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

177740

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\projects\bugtrap\bin\BugTrapU-x64.pdb

ws2_32

gethostbyname inet_ntoa WSASocketW WSASend WSAGetOverlappedResult WSAEventSelect WSAEnumNetworkEvents WSAGetLastError shutdown setsockopt inet_addr htons connect closesocket WSACleanup WSAStartup gethostname

comctl32

InitCommonControlsEx ImageList_LoadImageW ImageList_Destroy

shlwapi

PathRemoveBackslashW PathRemoveExtensionW PathSkipRootW PathFindNextComponentW PathIsURLW PathAddExtensionW PathIsRootW PathRemoveFileSpecW UrlIsW PathCreateFromUrlW PathAppendW StrTrimW StrTrimA PathIsRelativeW PathCombineW PathFindFileNameW

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

wininet

HttpEndRequestW HttpSendRequestExW HttpOpenRequestW InternetSetStatusCallbackW InternetAttemptConnect InternetWriteFile InternetConnectW InternetCloseHandle InternetOpenW InternetCrackUrlW InternetGetLastResponseInfoW

kernel32

GetStartupInfoW TlsFree TlsSetValue TlsGetValue TlsAlloc Sleep InitializeCriticalSectionAndSpinCount UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry SetLastError GetCPInfo GetOEMCP GetACP IsValidCodePage HeapSize GetModuleFileNameW CreateFileW WriteFile CloseHandle CopyFileW FindClose FindFirstFileW FindNextFileW RaiseException SetEvent WaitForSingleObject MultiByteToWideChar GetFileSize ReadFile SetFilePointer GetStringTypeA MulDiv FreeLibrary GetProcAddress LoadLibraryW GetProfileIntW WideCharToMultiByte GetLastError GetCurrentProcessId OpenProcess GetVersionExW GetModuleHandleW DeleteCriticalSection GetStdHandle IsProcessorFeaturePresent InitializeCriticalSection EnterCriticalSection LeaveCriticalSection WriteConsoleW SetEndOfFile GetLocalTime VirtualProtect VirtualQuery GetModuleHandleA RtlCaptureContext GetEnvironmentStringsW FreeEnvironmentStringsW GetCommandLineW GetCurrentDirectoryW DeleteFileW GetFileAttributesW GetCurrentProcess GetCurrentThread GetCurrentThreadId SuspendThread ResumeThread GetThreadContext GlobalMemoryStatusEx GetSystemInfo ReadProcessMemory LocalAlloc LocalFree FormatMessageW GetComputerNameW SystemTimeToFileTime GetDateFormatW GetTimeFormatW SetUnhandledExceptionFilter CreateEventW TerminateProcess CreateProcessW DisableThreadLibraryCalls GetUserDefaultLangID GetTempPathW ResetEvent GetExitCodeThread LocalReAlloc WaitForMultipleObjects CreateDirectoryW RemoveDirectoryW GetTickCount GetStringTypeW GetWindowsDirectoryW IsDBCSLeadByte IsDebuggerPresent HeapAlloc EncodePointer DecodePointer HeapFree CreateThread ExitThread LoadLibraryExW RtlUnwindEx GetCommandLineA GetSystemTimeAsFileTime ExitProcess GetModuleHandleExW AreFileApisANSI GetProcessHeap GetFileType GetModuleFileNameA QueryPerformanceCounter GetConsoleMode ReadConsoleW SetFilePointerEx GetConsoleCP LCMapStringW HeapReAlloc SetStdHandle OutputDebugStringW FlushFileBuffers

user32

GetCapture SetCapture ReleaseCapture DrawFocusRect PtInRect GetDialogBaseUnits SetScrollPos IsWindowVisible IsZoomed DrawEdge BeginDeferWindowPos DeferWindowPos EndDeferWindowPos MapWindowPoints TabbedTextOutW GetTabbedTextExtentW EnumDisplayDevicesW SendMessageTimeoutW GetActiveWindow GetSystemMenu AppendMenuW GetForegroundWindow GetWindowThreadProcessId DrawTextW GetWindow GetClassLongPtrW LoadCursorW DestroyIcon DrawIconEx CopyIcon GetMessageW GetFocus ScreenToClient GetWindowRect CreateDialogParamW SetWindowPos MessageBoxW SetForegroundWindow LoadImageW SetWindowLongW GetWindowLongW CheckRadioButton ShowWindow UpdateWindow IsWindowEnabled EnableWindow DialogBoxParamW DestroyWindow CreateWindowExW GetClientRect InvalidateRect GetSystemMetrics LoadStringW GetSysColor SetWindowTextW GetDlgCtrlID GetWindowTextLengthW SendMessageW GetParent GetWindowTextW SetFocus SetDlgItemTextW GetDlgItem EndDialog IsChild GetMessagePos SystemParametersInfoW GetScrollInfo SetScrollInfo GetScrollPos ScrollWindowEx ReleaseDC GetDC GetKeyState GetWindowLongPtrW IsRectEmpty FillRect GetSysColorBrush RedrawWindow EndPaint BeginPaint KillTimer SetTimer DefWindowProcW SetWindowLongPtrW PostQuitMessage PostMessageW LoadIconW DispatchMessageW SetCursor

gdi32

CreateDCW GetDeviceCaps GetTextExtentPoint32W TextOutW MoveToEx GetObjectW GetDIBits CreateFontIndirectW PatBlt StretchBlt GetTextMetricsW SetTextColor LineTo SetViewportOrgEx SelectObject GetClipBox DeleteDC CreateCompatibleDC CreateCompatibleBitmap BitBlt DeleteObject SetBkColor

comdlg32

GetSaveFileNameW

advapi32

RegEnumValueW RegEnumKeyExW GetTokenInformation AdjustTokenPrivileges OpenProcessToken RegQueryValueExW RegOpenKeyExW RegCloseKey GetUserNameW

shell32

ExtractIconExW SHGetSpecialFolderPathW SHGetFileInfoW ShellExecuteW

ole32

StringFromGUID2

oleaut32

GetErrorInfo SysFreeString

BT_AddLogFile BT_AddRegFile BT_AppLogEntry BT_AppLogEntryF BT_AppLogEntryV BT_CallCppFilter BT_CallNetFilter BT_CallSehFilter BT_ClearLog BT_ClearLogFiles BT_CloseLogFile BT_CppFilter BT_DeleteLogFile BT_ExportRegistryKey BT_FlushLogFile BT_GetActivityType BT_GetAppName BT_GetAppVersion BT_GetCustomActivityHandler BT_GetDialogMessage BT_GetDumpType BT_GetExitMode BT_GetFlags BT_GetLogEchoMode BT_GetLogFileEntry BT_GetLogFileName BT_GetLogFilesCount BT_GetLogFlags BT_GetLogLevel BT_GetLogSizeInBytes BT_GetLogSizeInEntries BT_GetMailProfile BT_GetModule BT_GetNotificationEMail BT_GetPostErrHandler BT_GetPreErrHandler BT_GetReportFilePath BT_GetReportFormat BT_GetSupportEMail BT_GetSupportHost BT_GetSupportPort BT_GetSupportURL BT_GetUserMessage BT_InsLogEntry BT_InsLogEntryF BT_InsLogEntryV BT_InstallSehFilter BT_InterceptSUEF BT_MailSnapshot BT_MailSnapshotEx BT_NetFilter BT_OpenLogFile BT_ReadVersionInfo BT_SaveSnapshot BT_SaveSnapshotEx BT_SehFilter BT_SendSnapshot BT_SendSnapshotEx BT_SetActivityType BT_SetAppName BT_SetAppVersion BT_SetCustomActivityHandler BT_SetDialogMessage BT_SetDumpType BT_SetExitMode BT_SetFlags BT_SetLogEchoMode BT_SetLogFlags BT_SetLogLevel BT_SetLogSizeInBytes BT_SetLogSizeInEntries BT_SetMailProfile BT_SetModule BT_SetNotificationEMail BT_SetPostErrHandler BT_SetPreErrHandler BT_SetReportFilePath BT_SetReportFormat BT_SetSupportEMail BT_SetSupportHost BT_SetSupportPort BT_SetSupportServer BT_SetSupportURL BT_SetUserMessage BT_SetUserMessageFromCode BT_UninstallSehFilter

XMouseButtonControl.exe

IMPHASH 78068da28a70bd960404623a154b1bcd
SHA256 7cc348f8d2ee10264e136425059205cf2c17493b4f3f6a43af024aecb926d8c8
MD5 bb632bc4c4414303c783a0153f6609f7
SHA1 eb16bf0d8ce0af4d72dff415741fd0d7aac3020e
SHA512 15b34efe93d53e54c1527705292fbf145d6757f10dd87bc787dc40bf02f0d641468b95c571f7037417f2f626de2afcd68b5d82214e27e9e622ab0475633e9de5
SSDEEP 24576:WB9zyuRx7jLNquqvzbsM/m0GNYbOVgmXUWU7mFNeSOML3QaYyipFovO:WBJpf7j+LOVgmXUWU7UDTQaviXo
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

78:c7:ba:fb:6f:a3:88:57:cd:ac:95:77:3e:44:55:8f:42:b1:3e:37

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Chains

May 23, 2024

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Serial Number

3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2023 - Apr 3, 2024

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Minor OS version

Major OS version

Entry point

699028

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

E:\My Documents\Visual Studio 2015\Projects\XMBC\XMouseButtonControl.root\XMBC\Bin\x64\Release\XMouseButtonControlFull.pdb

psapi

GetModuleFileNameExW EnumProcessModules EnumProcesses

dnsapi

DnsFree DnsQuery_W

wininet

InternetOpenW InternetOpenUrlW InternetCloseHandle DeleteUrlCacheEntryW InternetReadFile

bugtrapu-x64

BT_CppFilter BT_CallCppFilter BT_SehFilter BT_SetUserMessage

xmousebuttonhook

?GetName@CIcon@@QEAAPEB_WXZ ?GetPosition@CIcon@@QEAA?AUtagPOINT@@XZ ?IsGadget@CIcon@@QEAA_NXZ ?WindowHandle@CIcon@@QEAAPEAUHWND__@@XZ ?SaveIcons@CIconSettings@@QEAAHXZ ??0CGenericThreadLock@@QEAA@PEAU_RTL_CRITICAL_SECTION@@PEB_W_N@Z ??1CGenericThreadLock@@QEAA@XZ ?GetLayerModifierKeys@CSettings@@QEAAPEAVCLayerModifierKeys@@XZ ?GetActions@CApplicationSettings@@QEAA?AW4_ACTIONS@@HH_N@Z ?GetLayerDisabled@CApplicationSettings@@QEAA_NH@Z ?GetLayerDisabledNextPrev@CApplicationSettings@@QEAA_NH_N@Z ?GetAutoSwitchLayer@CApplicationSettings@@QEAAHH@Z ?GetRevertLayer1@CApplicationSettings@@QEAA_NH@Z ?SetActions@CApplicationSettings@@QEAAXHHW4_ACTIONS@@@Z ?SetLayerName@CApplicationSettings@@QEAAXPEB_WH@Z ?SetActionDescription@CApplicationSettings@@QEAAXHHPEB_W@Z ?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111@Z ?SetLaunchApp@CApplicationSettings@@QEAAXHHPEB_W@Z ?SetMovement2Scroll@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z ?SetChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z ?SetTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z ?SetAutoSwitchLayer@CApplicationSettings@@QEAAXHH@Z ?SetAutoSwitchTime@CApplicationSettings@@QEAAXHN@Z ?SetRevertLayer1@CApplicationSettings@@QEAAXH_N@Z ?SetLayerDisabledNextPrev@CApplicationSettings@@QEAAXH_N@Z ?SetLayerDisabled@CApplicationSettings@@QEAAXH_N@Z ?GetLayerName@CApplicationSettings@@QEAAPEA_WH@Z ?GetActionData@CApplicationSettings@@QEAAPEAVCActionData@@HH@Z ?GetAutoSwitchTime@CApplicationSettings@@QEAANH@Z ?RandomiseDelay@CApplicationSettings@@QEAA_NHH@Z ?BlockMouseActive@CApplicationSettings@@QEAA_NHH@Z ?BlockMouse@CApplicationSettings@@QEAA_NHH@Z ?SendKeyWhenActive@CApplicationSettings@@QEAA_NHH@Z ?SendKeyRepeat@CApplicationSettings@@QEAAHHH@Z ?SendKeyAction@CApplicationSettings@@QEAAHHH@Z ?GetKeystrokes@CApplicationSettings@@QEAAPEA_WHH@Z ?GetLaunchApp@CApplicationSettings@@QEAAPEA_WHH@Z ?CopyChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z ?GetChords@CApplicationSettings@@QEAAPEAVCXMBCChords@@HH@Z ?CopyTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z ?GetTimedClicks@CApplicationSettings@@QEAAPEAVCXMBCTimedClicks@@HH@Z ??0CApplicationSettings@@QEAA@PEAVCSettings@@_NH@Z ??1CApplicationSettings@@UEAA@XZ ?ChordedAction@CActionData@@SAPEAV1@AEAVCXMBCChords@@@Z ?TimedClicksAction@CActionData@@SAPEAV1@AEAVCXMBCTimedClicks@@@Z ?LogOSDebug@CLogger@@SAXKPEB_WZZ ?ForceSPIMessage@CApplicationSettings@@QEAA_NXZ ?InvertedScrolling@CApplicationSettings@@QEAA_NXZ ?InvertedHorzScrolling@CApplicationSettings@@QEAA_NXZ ?ScrollPages@CApplicationSettings@@QEAA_NXZ ?ScrollLines@CApplicationSettings@@QEAAHXZ ?AdvScrollMethod@CApplicationSettings@@QEAAHXZ ?AdvScrollVertical@CApplicationSettings@@QEAAHXZ ?AdvScrollHorizontal@CApplicationSettings@@QEAAHXZ ?SetAdvScrollMethod@CApplicationSettings@@QEAAXH@Z ?SetAdvScrollVertical@CApplicationSettings@@QEAAXH@Z ?SetAdvScrollHorizontal@CApplicationSettings@@QEAAXH@Z ?SetInvertScrolling@CApplicationSettings@@QEAAX_N@Z ?SetInvertHorzScrolling@CApplicationSettings@@QEAAX_N@Z ?SetScrollPages@CApplicationSettings@@QEAAX_N@Z ?SetScrollLines@CApplicationSettings@@QEAAXH@Z ?SetForceSPIMessage@CApplicationSettings@@QEAAX_N@Z ??0CSettings@@QEAA@_NVCMouseInfo@@@Z ?GetStartupMouseInfo@@YAAEBVCMouseInfo@@XZ ??1CSettings@@UEAA@XZ ?SetSetupWindow@@YAXPEAUHWND__@@@Z ?GetShortName@CApplicationSettings@@QEAAHPEA_WH@Z ?IsEnabled@CApplicationSettings@@QEAA_NXZ ?GetSettingsFile@@YAHPEA_W_K_NAEA_N@Z ?CreateFolder@@YA_NPEB_W@Z ?Load@CSettings@@QEAA_NPEB_WAEA_N_N@Z ?GetCaption@CApplicationSettings@@QEAAPEB_WXZ ?GetClass@CApplicationSettings@@QEAAPEB_WXZ ?GetParentClass@CApplicationSettings@@QEAAPEB_WXZ ?IsCustomWindow@CApplicationSettings@@QEAA_NXZ ?GetMatchType@CApplicationSettings@@QEAAHXZ ?GetUseWindowArea@CApplicationSettings@@QEAA_NXZ ?GetWindowMask@CApplicationSettings@@QEAA?AW4WINDOWMASK@@XZ ?GetFullName@CApplicationSettings@@QEAAPEB_WXZ ?SetApplication@CApplicationSettings@@QEAAXPEB_W@Z ?SetDescription@CApplicationSettings@@QEAAXPEB_W@Z ?SetNoParentFlag@CApplicationSettings@@QEAAX_N@Z ?SetRegExMatching@CApplicationSettings@@QEAAX_N@Z ?GetLogFile@@YAHPEA_W_K_N@Z ?SetDefaultLogFolder@@YA_NPEB_W@Z ?GetDefaultLogFolder@@YA_NPEA_WK@Z ?SetDisableLayerModifier@CApplicationSettings@@QEAAX_N@Z ?SetDisableMouseOver@CApplicationSettings@@QEAAX_N@Z ?SetClipMouse@CApplicationSettings@@QEAAX_N@Z ?SetIgnoreHScroll@CApplicationSettings@@QEAAX_N@Z ?SetIgnoreVScroll@CApplicationSettings@@QEAAX_N@Z ?SetAxisLocking@CApplicationSettings@@QEAAX_N@Z ?SetProfileChangeScript@CApplicationSettings@@QEAAXPEB_W@Z ?EnableProfileScript@CApplicationSettings@@QEAAX_N@Z ?ChangeCursor@CApplicationSettings@@QEAAX_N@Z ?SetMouseSpeed@CApplicationSettings@@QEAAXH@Z ?Index@CIcon@@QEAAIXZ ?OverrideMouseSpeed@CApplicationSettings@@QEAAX_N@Z ?ActivateOnHover@CApplicationSettings@@QEAAX_N@Z ?SetDisableScrollUnderCursor@CApplicationSettings@@QEAAX_N@Z ?SetSwapButtons@CApplicationSettings@@QEAAXW4swapbuttons@@@Z ?SetIgnoreHScrollTime@CApplicationSettings@@QEAAXH@Z ?SetIgnoreVScrollTime@CApplicationSettings@@QEAAXH@Z ?GetProfileChangeScript@CApplicationSettings@@QEAAPEB_WXZ ?IsProfileScriptEnabled@CApplicationSettings@@QEAA_NXZ ?ChangeCursor@CApplicationSettings@@QEAA_NXZ ?GetMouseSpeed@CApplicationSettings@@QEAAHXZ ?ActivateOnHover@CApplicationSettings@@QEAA_NXZ ?GetDisableLayerModifier@CApplicationSettings@@QEAA_NXZ ?AxisLocking@CApplicationSettings@@QEAA_NXZ ?GetDisableMouseOver@CApplicationSettings@@QEAA_NXZ ?IsDefault@CApplicationSettings@@QEAA_NXZ ?GetIgnoreHScrollTime@CApplicationSettings@@QEAAHXZ ?GetIgnoreVScrollTime@CApplicationSettings@@QEAAHXZ ?GetIgnoreHScroll@CApplicationSettings@@QEAA_NXZ ?GetIgnoreVScroll@CApplicationSettings@@QEAA_NXZ ?GetDisableScrollUnderCursor@CApplicationSettings@@QEAA_NXZ ?EnhancePointerPrecision@CApplicationSettings@@QEAA_NXZ ?OverrideMouseSpeed@CApplicationSettings@@QEAA_NXZ ?ClipMouse@CApplicationSettings@@QEAA_NXZ ?SetCursor@CApplicationSettings@@QEAAXPEB_W@Z ?GetCursor@CApplicationSettings@@QEAAPEB_WXZ ?SwapButtons@CApplicationSettings@@QEAA?AW4swapbuttons@@XZ ??1CIcon@@UEAA@XZ ?SetSensitivityX@CMovement2Scroll@@QEAAXH@Z ?SetSensitivityY@CMovement2Scroll@@QEAAXH@Z ?SetAxisLock@CMovement2Scroll@@QEAAXH@Z ?SetStickyBlock@CMovement2Scroll@@QEAAX_N@Z ?SetSticky@CMovement2Scroll@@QEAAX_N@Z ?SetInvertHorizontal@CMovement2Scroll@@QEAAX_N@Z ?SetInvertVertical@CMovement2Scroll@@QEAAX_N@Z ?SetBlockMouse@CMovement2Scroll@@QEAAX_N@Z ?GetActionData@CMovement2Scroll@@QEAAPEAVCActionData@@XZ ?getSensitivityX@CMovement2Scroll@@QEAAHXZ ?getSensitivityY@CMovement2Scroll@@QEAAHXZ ?InvertHorizontal@CMovement2Scroll@@QEAA_NXZ ?InvertVertical@CMovement2Scroll@@QEAA_NXZ ?GetAxisLocked@CMovement2Scroll@@QEAAHXZ ?IsStickyBlock@CMovement2Scroll@@QEAA_NXZ ?IsSticky@CMovement2Scroll@@QEAA_NXZ ?IsButtonBlocked@CMovement2Scroll@@QEAA_NXZ ?SetModifier@CHotkey@@QEAAHG@Z ?SetVirtualKey@CHotkey@@QEAAHG@Z ?IsExtended@CHotkey@@QEAA_NXZ ?GetHotkey@CLayerModifierKeys@@QEAAPEAVCHotkey@@W4ModifierKeys@@@Z ?SetLanguage@CSettings@@QEAAXPEB_W@Z ?GetLanguage@CSettings@@QEAAPEB_WXZ ?SetHotkey@CHotkey@@QEAAHK@Z ?GetVirtualKey@CHotkey@@QEAAGXZ ?GetModifier@CHotkey@@QEAAGXZ ?GetHotkey@CHotKeys@@QEAAPEAVCHotkey@@W4GlobalHotkeys@@@Z ?MaxLayers@CSettings@@QEAA?BHXZ ?GetDescription@CApplicationSettings@@QEAAPEB_WXZ ?GetApplication@CApplicationSettings@@QEAAPEB_WXZ ?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@H@Z ?GetApplicationCount@CSettings@@QEAAHXZ ?GetDefaultApp@CSettings@@QEAAPEAVCApplicationSettings@@XZ ?NewAction@CActionData@@SAPEAV1@H@Z ?Clear@CActionData@@QEAAXXZ ?GetTimedClicks@CActionData@@QEAAPEAVCXMBCTimedClicks@@XZ ?GetLaunchApp@CXMBCChord@@QEAAPEB_WXZ ?SendKeyAction@CXMBCChord@@QEAAHXZ ?GetKeys@CXMBCChord@@QEAAPEB_WXZ ?GetChords@CActionData@@QEAAPEAVCXMBCChords@@XZ ?GetApplication@CActionData@@QEAAPEA_WXZ ?SetActionData@CXMBCTimedClick@@QEAAXPEAVCActionData@@@Z ?SetEnabled@CXMBCTimedClicks@@QEAAXH_N@Z ?SetReleaseOnUp@CXMBCTimedClicks@@QEAAX_N@Z ?SetAbort2OnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z ?SetAbortOnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z ?SetTime@CXMBCTimedClicks@@QEAAXHH@Z ?SetDescription@CXMBCTimedClicks@@QEAAXPEB_W@Z ?GetTime@CXMBCTimedClicks@@QEAAHH@Z ?GetDescription@CXMBCTimedClicks@@QEAAPEA_WXZ ?GetActionData@CXMBCTimedClick@@QEAAPEAVCActionData@@XZ ?GetTimedClick@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@H@Z ?GetAction@CXMBCTimedClick@@QEAA?AW4_ACTIONS@@XZ ?GetEnabled@CXMBCTimedClicks@@QEAA_NH@Z ?GetReleaseOnUp@CXMBCTimedClicks@@QEAA_NXZ ?GetAbort2OnMouseMove@CXMBCTimedClicks@@QEAA_NXZ ?GetAbortOnMouseMove@CXMBCTimedClicks@@QEAA_NXZ ?Initialise@CXMBCTimedClicks@@QEAAXW4MouseButtons@@_N@Z ??4CXMBCTimedClicks@@QEAAXPEAV0@@Z ??1CXMBCTimedClicks@@UEAA@XZ ??0CXMBCTimedClicks@@QEAA@XZ ??1CMovement2Scroll@@QEAA@XZ ?SetMovement2Scroll@CActionData@@QEAAXPEAVCMovement2Scroll@@@Z ?GetMovement2Scroll@CActionData@@QEAAPEAVCMovement2Scroll@@XZ ?Copy@CMovement2Scroll@@QEAAXPEAV1@@Z ?SetMatchType@CApplicationSettings@@QEAAXH@Z ?SetWindowMask@CApplicationSettings@@QEAAXW4WINDOWMASK@@@Z ?SetUseWindowArea@CApplicationSettings@@QEAAX_N@Z ?SetWindowArea@CApplicationSettings@@QEAAXUtagRECT@@@Z ?GetIcon@CIconSettings@@QEAAPEAVCIcon@@H@Z ?GetCount@CIconSettings@@QEAAHXZ ?EnhancePointerPrecision@CApplicationSettings@@QEAAX_N@Z ?LoadIcons@CIconSettings@@QEAAHXZ ??0CMovement2Scroll@@QEAA@XZ ?OpenFolderAction@CActionData@@SAPEAV1@PEB_W@Z ?AppAction@CActionData@@SAPEAV1@PEB_W@Z ?KeyAction@CActionData@@SAPEAV1@PEB_WHHH_N1110@Z ?GetDescription@CActionData@@QEAAPEA_WXZ ?RandomiseDelay@CActionData@@QEAA_NXZ ?BlockMouseActive@CActionData@@QEAA_NXZ ?BlockMouse@CActionData@@QEAA_NXZ ?Active@CActionData@@QEAA_NXZ ?KeyRepeat@CActionData@@QEAAHXZ ?KeyAction@CActionData@@QEAAHXZ ?GetKeys@CActionData@@QEAAPEA_WXZ ?SetUnblockTime@CXMBCChords@@QEAAXH@Z ?SetUnblockAfterMovement@CXMBCChords@@QEAAX_N@Z ?SetUnblockAfterDelay@CXMBCChords@@QEAAX_N@Z ?SetDelayUntilChordKnown@CXMBCChords@@QEAAX_N@Z ?SetDescription@CXMBCChords@@QEAAXPEB_W@Z ?SetActionData@CXMBCChord@@QEAAXPEAVCActionData@@@Z ?AddApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z ?NoParent@CApplicationSettings@@QEAA_NXZ ?RegExMatching@CApplicationSettings@@QEAA_NXZ ?GetWindowArea@CApplicationSettings@@QEAA?AUtagRECT@@XZ ?Copy@CApplicationSettings@@QEAAXPEAV1@@Z ?RemoveApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z ?SetDebug@@YAX_NPEB_W@Z ?UpdateSettings@@YA_NXZ ?SetDefaultApp@CSettings@@QEAAXPEAVCApplicationSettings@@@Z ?ClearApplications@CSettings@@QEAAXXZ ?Save@CSettings@@QEAA_NPEB_W@Z ?SavePersistantSettings@@YA_NXZ ?SetEnableFlag@CApplicationSettings@@QEAAX_N@Z ?FlushLog@CLogger@@SAXXZ ?Import@CSettings@@QEAAHPEB_WPEAUHWND__@@0PEAPEAVCApplicationSettings@@@Z ?GetDescription@CXMBCChords@@QEAAPEA_WXZ ?GetActionData@CXMBCChord@@QEAAPEAVCActionData@@XZ ?GetChord@CXMBCChords@@QEAAPEAVCXMBCChord@@W4MouseButtons@@@Z ?GetAction@CXMBCChord@@QEAA?AW4_ACTIONS@@XZ ?UnblockAfterMovement@CXMBCChords@@QEAA_NXZ ?UnblockTime@CXMBCChords@@QEAAHXZ ?UnblockAfterDelay@CXMBCChords@@QEAA_NXZ ?DelayUntilChordKnown@CXMBCChords@@QEAA_NXZ ??4CXMBCChords@@QEAAXPEAV0@@Z ?Export@CSettings@@QEAA_NPEAVCApplicationSettings@@PEB_W@Z ?GetFilename@CSettings@@QEAAPEB_WXZ ?SetSettingsFile@@YAHPEB_W@Z ?GetDefaultSettingsFile@@YAHPEA_W_K@Z ?LoadIcons@CIconSettings@@QEAAHPEB_W@Z ?SaveIcons@CIconSettings@@QEAAHPEB_W@Z ??0CVolumeManager@@QEAA@_NPEB_WK@Z ??1CVolumeManager@@UEAA@XZ ?SetParent@CVolumeManager@@QEAAXPEAUHWND__@@@Z ?ReInitialise@CVolumeManager@@QEAAXXZ ?RemoveListedIcons@CIconSettings@@QEAAHXZ ?AddIcon@CIconSettings@@QEAAHPEAVCIcon@@@Z ??0CIcon@@QEAA@IPEB_WUtagPOINT@@PEAUHWND__@@_N@Z ?ClearIcons@CIconSettings@@QEAAHXZ ?GetDebug@@YA_NXZ ??1CIconSettings@@UEAA@XZ ??0CIconSettings@@QEAA@XZ ?GetHotKeys@CSettings@@QEAAPEAVCHotKeys@@XZ ?SetThreadName@@YAXKPEBD@Z ?SetMaxLayers@CSettings@@QEAA_NH@Z ?RealWindowFromPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z ?SetFindHook@@YA_NPEAUHWND__@@@Z ?LeftClickCycleLayer@@YA_NXZ ?NextLayer@@YAXXZ ?PreviousLayer@@YAXXZ ?RemoveFindHook@@YA_NXZ ?GetProfileWindow@@YAPEAUHWND__@@XZ ?WindowFromPointEx@@YAPEAUHWND__@@UtagPOINT@@H@Z ?GetPhysCursorPos@@YAHPEAUtagPOINT@@@Z ?SetActionData@CMovement2Scroll@@QEAAXPEAVCActionData@@@Z ?MaxLayers@@YAHXZ ?CheckVersionEnabled@@YA_NXZ ?CheckVersionDays@@YAHXZ ?GetLastUpdateCheck@@YAHXZ ?LogDebug@CLogger@@SAXPEB_WZZ ?LogMessage@CLogger@@SAXPEB_WZZ ?CheckBetaVersionEnabled@@YA_NXZ ?SetLastUpdateCheck@@YAXH@Z ?GetSettingsFolder@@YAHPEA_W_K@Z ?GetEXEFolder@@YAHPEA_W_K@Z ?get_ResetStickyOnAnyButton@CSettings@@QEAA_NXZ ?get_ResetStickyOnAnyKey@CSettings@@QEAA_NXZ ?get_ResetStickyOnLayerChange@CSettings@@QEAA_NXZ ?get_EnableDebounce@CSettings@@QEAA_NXZ ?get_DebounceTime@CSettings@@QEAAHXZ ?get_DebounceFromUp@CSettings@@QEAA_NXZ ?put_ResetStickyOnAnyButton@CSettings@@QEAAX_N@Z ?put_ResetStickyOnAnyKey@CSettings@@QEAAX_N@Z ?put_ResetStickyOnLayerChange@CSettings@@QEAAX_N@Z ?put_EnableDebounce@CSettings@@QEAAX_N@Z ?put_DebounceTime@CSettings@@QEAAXH@Z ?put_DebounceFromUp@CSettings@@QEAAX_N@Z ?LogOSMessage@CLogger@@SAXKPEB_WZZ ?GetOSVersion@@YA?AW4_ActionOSVersion@@XZ ??1CBrightness@@QEAA@XZ ??0CBrightness@@QEAA@PEAUHWND__@@@Z ?GetAlwaysShowOSD@@YA_NXZ ?SetBrightness@CBrightness@@QEAA_NH@Z ?Action@CActionData@@QEAA?AW4_ACTIONS@@XZ ?LogThreadDebug@CLogger@@SAXPEB_WZZ ??0CXMBCChords@@QEAA@XZ ??1CXMBCChords@@UEAA@XZ ?SetVolume@CVolumeManager@@QEAA_NM@Z ?Notifiction@CVolumeManager@@UEAAXW4VolumeAction@@@Z ??0ExceptionHandlerInstaller@@QEAA@XZ ??1ExceptionHandlerInstaller@@UEAA@XZ ??0InvalidParameterInstaller@@QEAA@_N@Z ??1InvalidParameterInstaller@@QEAA@XZ ?DebugOutput@CLogger@@SAXPEB_WZZ ?DisableLogging@CLogger@@SAX_N@Z ?SetPortable@@YAX_N@Z ?AddFiles@ExceptionHandlerInstaller@@SAXXZ ?DisableBanner@CLogger@@SAXXZ ?GetProcessIntegrityLevel@@YAHKPEAX@Z ?GetHooktimeoutValue@@YAKXZ ??0CCheckCert@@QEAA@XZ ??1CCheckCert@@QEAA@XZ ?VerifyCert@CCheckCert@@QEAA_NPEB_W@Z ?GetOfficeMouse@@YA_NXZ ?SetOfficeMouse@@YAX_N@Z ?GetShowIcon@@YA_NXZ ?IsDesktopLocked@@YA_NXZ ?SetMouseHook@@YA_NXZ ?RemoveMouseHook@@YA_N_N@Z ?GetLanguageFile@@YA_NPEA_WH@Z ?SetHookVolumeOSDWindow@@YAXPEAUHWND__@@@Z ?SetHookBrightnessOSDWindow@@YAXPEAUHWND__@@@Z ?GetLock@CLogger@@SA_NXZ ?ReleaseLock@CLogger@@SAXXZ ?SetHookMainWindow@@YAXPEAUHWND__@@@Z ?GetHooked@@YA_NXZ ?NotificatcionsEnabled@@YA_NXZ ?IsXMBCDisabled@@YA_N_N@Z ?GetEnableOSD@@YA_NXZ ?GetLayername@@YAPEB_WH@Z ?SetCurrentLayer@@YAXH_N00@Z ?GetReinstallOnResume@@YA_NXZ ?DisplayChanged@@YAXXZ ?UpdateCursors@@YAXXZ ?UpdateSPIThread@@YAXXZ ?GetUseWhenDisabled@CHotkey@@QEAAHXZ ?GetHotkeys@@YAPEAVCHotKeys@@XZ ?GetCycleCursorSpeed@@YAHXZ ?CycleCursorSpeed@@YAXXZ ?HookToggleXAxisLock@@YAXXZ ?HookToggleYAxisLock@@YAXXZ ?HookToggleXAxisInvert@@YAXXZ ?HookToggleYAxisInvert@@YAXXZ ?GetCurrentLayer@@YAHXZ

kernel32

OutputDebugStringW GetStringTypeW LCMapStringW GetCPInfo RtlPcToFileHeader RtlUnwindEx ExitThread FreeLibraryAndExitThread GetCommandLineA GetCommandLineW HeapQueryInformation VirtualAlloc VirtualQuery GetStdHandle ExitProcess GetFileType IsValidLocale EnumSystemLocalesW GetTimeZoneInformation GetDriveTypeW FindFirstFileExW IsValidCodePage GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW SetStdHandle GetConsoleCP GetConsoleMode SetFilePointerEx ReadConsoleW GetStartupInfoW WriteConsoleW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx GetUserDefaultLCID SetErrorMode DuplicateHandle UnlockFile SetFilePointer SetEndOfFile LockFile GetVolumeInformationW GetFullPathNameW GetFileSize FlushFileBuffers GetCurrentDirectoryW FindResourceExW GetUserDefaultUILanguage GetSystemDefaultUILanguage GetLocaleInfoW CompareStringW GetThreadLocale LocalReAlloc GlobalHandle GlobalReAlloc TlsFree TlsSetValue TlsGetValue TlsAlloc GlobalFlags GetFileTime GetFileSizeEx GetFileAttributesExW GetPrivateProfileIntW SystemTimeToTzSpecificLocalTime lstrcmpA VirtualProtect LoadLibraryExW GetSystemDirectoryW EncodePointer FormatMessageW MulDiv GetCurrentProcessId GlobalUnlock GlobalLock FreeResource QueryActCtxW FindActCtxSectionStringW DeactivateActCtx ActivateActCtx CreateActCtxW GetModuleHandleExW SetLastError OutputDebugStringA GetACP CopyFileW MoveFileW LocalFree CreateNamedPipeW LocalAlloc ReadFile ConnectNamedPipe SetThreadPriority GetCurrentThread GetSystemInfo GetProcessId GetModuleFileNameW WriteFile WaitNamedPipeW CreateFileW DisconnectNamedPipe GlobalFree GlobalAlloc CreateThread GetProcessHeap HeapDestroy DecodePointer HeapAlloc RaiseException HeapReAlloc HeapSize HeapFree Process32NextW Process32FirstW CreateToolhelp32Snapshot InitializeCriticalSectionAndSpinCount WritePrivateProfileStringW GetPrivateProfileStringW WriteProcessMemory ReadProcessMemory VirtualFreeEx VirtualAllocEx OpenProcess GetCurrentProcess GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW OpenMutexW CreateMutexW ReleaseMutex lstrcmpW GetModuleHandleW FileTimeToSystemTime FileTimeToLocalFileTime ResetEvent TerminateThread SetEvent ResumeThread GetExitCodeThread CloseHandle CreateEventW LeaveCriticalSection EnterCriticalSection DeleteCriticalSection InitializeCriticalSection GetTickCount WaitForSingleObject FindFirstFileW FindClose FindNextFileW FreeLibrary GetProcAddress LoadLibraryW GetVersionExW GetCurrentThreadId lstrcpynW WideCharToMultiByte Sleep DeleteFileW GetFileAttributesW GetTempPathW GetLastError MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource

user32

CharUpperW GetNextDlgGroupItem InvalidateRgn CopyAcceleratorTableW CharNextW RealChildWindowFromPoint RegisterClipboardFormatW PostQuitMessage SetWindowContextHelpId DestroyMenu NotifyWinEvent WindowFromPoint MapDialogRect SetMenuItemInfoW GetMenuCheckMarkDimensions SetMenuItemBitmaps IsDialogMessageW SetDlgItemTextW MonitorFromWindow WinHelpW GetClassLongPtrW MapWindowPoints AdjustWindowRectEx RemovePropW GetPropW SetPropW GetScrollPos ValidateRect TrackPopupMenuEx TrackPopupMenu SetMenu GetMenu IsIconic IsChild IsMenu GetClassInfoW RegisterClassW CallWindowProcW GetMessageTime GetMessagePos PeekMessageW EndPaint BeginPaint TabbedTextOutW GrayStringW GetMenuStringW GetLastActivePopup GetActiveWindow GetNextDlgTabItem CreateDialogIndirectParamW DestroyWindow SendDlgItemMessageA GetForegroundWindow SetCursorPos GetDoubleClickTime CheckMenuItem RemoveMenu SetActiveWindow DrawEdge CreateIconIndirect GetSystemMenu GetWindowLongPtrW EndDialog GetDlgItem SetWindowLongPtrW DialogBoxParamW DialogBoxIndirectParamW ShowScrollBar RegisterWindowMessageW EnableWindow MessageBoxW GetTopWindow GetWindow PostMessageW SendMessageW GetWindowThreadProcessId IsWindowVisible LoadIconW GetClientRect FindWindowExW GetWindowTextW EnumDesktopWindows IsWindow GetWindowRect BeginDeferWindowPos DeferWindowPos EndDeferWindowPos GetSystemMetrics GetComboBoxInfo MoveWindow GetCapture GetWindowLongW SetWindowLongW DrawStateW InflateRect OffsetRect GetSysColor GetFocus FrameRect GetCursorPos ScreenToClient RedrawWindow InvalidateRect UpdateWindow GetParent GetMonitorInfoW MonitorFromPoint CopyRect SystemParametersInfoW SetWindowRgn DestroyIcon FillRect GetSysColorBrush DrawTextExW DrawIconEx GetClassNameW IsRectEmpty PtInRect SetRectEmpty ReleaseCapture SetFocus SetCapture GetDlgCtrlID EqualRect GetKeyState IntersectRect LoadImageW SetCursor LoadCursorW CallNextHookEx SetWindowsHookExW UnhookWindowsHookEx AnimateWindow GetIconInfo KillTimer SetTimer GetDC ReleaseDC ClientToScreen GetClassInfoExW DefWindowProcW RegisterClassExW SetParent GetDesktopWindow SetRect DrawFocusRect GetWindowTextLengthW SetWindowTextW IsWindowEnabled LoadMenuW GetSubMenu GetMenuItemCount GetMenuItemID ModifyMenuW EnableMenuItem GetAsyncKeyState LoadBitmapW GetCursor CreatePopupMenu AppendMenuW ShowWindow GetWindowDC wsprintfW RegisterHotKey UnregisterHotKey GetMessageW TranslateMessage DispatchMessageW PostThreadMessageW UnregisterClassW CreateWindowExW MessageBeep SetWindowPos GetThreadDesktop FindWindowW SetLayeredWindowAttributes DrawTextW GetAncestor SetForegroundWindow LockWindowUpdate GetScrollBarInfo

gdi32

EnumFontFamiliesExW GetDIBits CreateFontW CreateDIBSection PatBlt SetBkMode Ellipse DeleteDC CreateBitmap SetTextColor SetBkColor GetClipBox Rectangle CreatePen GetDeviceCaps GetTextMetricsW SelectObject GetTextExtentPoint32W CreateCompatibleBitmap CreateCompatibleDC SetPixel SelectClipRgn SelectClipPath CreateSolidBrush GetCurrentObject GetStockObject CreateFontIndirectW DeleteObject EndPath BeginPath CreateRoundRectRgn CreateRectRgnIndirect GetObjectW SetDIBits OffsetViewportOrgEx GetRgnBox GetTextColor GetBkColor GetMapMode ScaleWindowExtEx ScaleViewportExtEx BitBlt SetWindowOrgEx SetWindowExtEx SetViewportOrgEx SetViewportExtEx ExtTextOutW TextOutW MoveToEx GetLayout SetLayout SetMapMode ExtSelectClipRgn SaveDC RestoreDC RectVisible PtVisible LineTo GetWindowExtEx GetViewportExtEx Escape

msimg32

GradientFill TransparentBlt

winspool.drv

DocumentPropertiesW OpenPrinterW ClosePrinter

advapi32

GetUserNameW SetSecurityDescriptorDacl RegCloseKey RegOpenKeyExW RegQueryValueExW RegCreateKeyExW RegDeleteKeyW RegDeleteValueW RegSetValueExW RegEnumKeyW RegQueryValueW RegEnumValueW InitializeSecurityDescriptor

shell32

ShellExecuteW ExtractIconExW SHBrowseForFolderW SHGetPathFromIDListW SHGetMalloc Shell_NotifyIconW ord680 SHGetFolderPathW FindExecutableW

comctl32

ImageList_ReplaceIcon ImageList_GetIconSize _TrackMouseEvent ImageList_GetIcon InitCommonControlsEx ord17

shlwapi

PathFileExistsW PathRemoveFileSpecW PathFindExtensionW PathFindFileNameW PathIsUNCW PathStripToRootW

uxtheme

EnableThemeDialogTexture IsThemeActive OpenThemeData CloseThemeData SetWindowTheme GetThemePartSize IsAppThemed DrawThemeBackground

ole32

CoUninitialize CoTaskMemFree CoInitialize CoRegisterMessageFilter OleIsCurrentClipboard OleFlushClipboard CoRevokeClassObject CreateILockBytesOnHGlobal StgOpenStorageOnILockBytes StgCreateDocfileOnILockBytes CoGetClassObject OleUninitialize OleInitialize CoFreeUnusedLibraries CoCreateGuid CLSIDFromProgID CLSIDFromString CoCreateInstance CoInitializeEx CoTaskMemAlloc CoInitializeSecurity

oleaut32

OleCreateFontIndirect VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime SysStringLen SysAllocString VariantChangeType VariantClear VariantInit SysAllocStringLen SysFreeString

oledlg

OleUIBusyW

urlmon

URLDownloadToFileW

oleacc

CreateStdAccessibleObject LresultFromObject

Name

.text

Size

924KB

Virtual Size

923KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

524KB

Virtual Size

523KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.giats

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

25KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=11, id=241, version=40116,

count=170, id=243, version=40116,

count=25, id=242, version=40116,

count=2, id=261, version=23013,

count=12, id=131, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=132, productName=VS2008 SP1 build 30729, version=30729,

count=1, id=135, version=30729,

count=39, id=260, version=24123,

count=10, id=259, version=24123,

count=171, id=261, version=24123,

count=2, id=257, productName=VS2015 UPD3.1 build 24215, version=24215,

count=2, id=221, productName=VS2013 UPD5 build 40629, version=40629,

count=39, id=147, productName=VS2008 SP1 build 30729, version=30729,

count=1047, id=1, productName=Unmarked objects,

count=59, id=265, version=24215,

count=1, id=255, productName=VS2015 UPD3 build 24210, version=24210,

count=1, id=151,

count=1, id=258, productName=VS2015 UPD3.1 build 24215, version=24215,

XMouseButtonHook.dll

IMPHASH 83f608f06cf458d15aa5e304360369b7
SHA256 c845e808dc035329a7c95c846413a7afb9976f09872ba3c05dfa5f492156eef0
MD5 d62a4279ebba19c9bf0037d4f7cbf0bc
SHA1 5257d9505cca6b75fe55dfdaf2ea83a7d2d28170
SHA512 6895a12cddc41bf516279b1235fca238b0b3b0cef2cc25abe14a9160ed23f5bde3d476f885d674537febc7de7eb58b0824d96153c626e1563a5a8a1887fb5323
SSDEEP 24576:k9YEYaUkALnN57d2KiGiccvn+KAUxZswMPOML0MW:FhnrNtScc+KAAZ1MPOML0MW
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x64 arch:x64

NSIS installer

installer

PE Signature issue

Digest

1e:a9:78:57:08:a7:20:9d:f7:bc:c2:4d:02:d3:7c:40:c3:1a:6c:f3

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Chains

May 23, 2024

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Serial Number

3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2023 - Apr 3, 2024

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Minor OS version

Major OS version

Entry point

442252

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

E:\My Documents\Visual Studio 2015\Projects\XMBC\XMouseButtonControl.root\XMBC\Bin\x64\Release\XMouseButtonHookFull.pdb

psapi

EnumProcesses EnumProcessModules GetModuleFileNameExW GetProcessImageFileNameW

bugtrapu-x64

BT_SetSupportServer BT_SetSupportURL BT_SetFlags BT_SetPreErrHandler BT_SetPostErrHandler BT_UninstallSehFilter BT_SetSupportEMail BT_SetAppVersion BT_SetAppName BT_InstallSehFilter BT_AddLogFile BT_CallCppFilter BT_SetNotificationEMail

msimg32

TransparentBlt

kernel32

WideCharToMultiByte QueryPerformanceFrequency QueryPerformanceCounter Sleep WaitForSingleObject CreateEventW SetEvent TerminateThread GetExitCodeThread SetLastError ResetEvent GetCurrentThread SetThreadPriority GlobalAlloc GlobalLock GlobalUnlock RaiseException DecodePointer GetModuleHandleW GetVersionExW GetCurrentProcess GetProcessId GetModuleFileNameW OpenProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetPriorityClass ExitProcess GetTempPathW FindFirstFileW FindClose GetFileAttributesW CreateDirectoryW DeleteTimerQueueTimer CreateTimerQueueTimer LocalAlloc TerminateProcess GetSystemDirectoryW SetEndOfFile ReadFile SetFilePointerEx WriteConsoleW SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FindNextFileA FindFirstFileExA GetProcessHeap ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetConsoleMode GetConsoleCP HeapSize GetFileType GetStdHandle GetACP GetModuleFileNameA HeapReAlloc HeapAlloc HeapFree GetModuleHandleExW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread InterlockedFlushSList LoadLibraryExW RtlUnwindEx RtlPcToFileHeader InitializeSListHead GetCurrentProcessId GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx IsDebuggerPresent GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc GetLocaleInfoW LCMapStringW GetFileSizeEx CompareStringW GetCPInfo EncodePointer GetStringTypeW MultiByteToWideChar CreateFileW LocalFree FormatMessageW WriteFile SetFilePointer GetTickCount TryEnterCriticalSection GetLocalTime FlushFileBuffers DeleteCriticalSection LeaveCriticalSection EnterCriticalSection OutputDebugStringW InitializeCriticalSection GetComputerNameW GetCurrentThreadId FreeLibrary GetProcAddress LoadLibraryW GetLastError InitializeCriticalSectionAndSpinCount CloseHandle

user32

AllowSetForegroundWindow LockSetForegroundWindow AttachThreadInput SwitchToThisWindow FindWindowW GetFocus LoadKeyboardLayoutW GetKeyboardLayoutList SetCapture ReleaseCapture IsChild GetScrollInfo SetForegroundWindow GetMonitorInfoW MessageBeep GetClipboardData SystemParametersInfoW GetAncestor GetClassNameW RegisterWindowMessageW PostMessageW DestroyCursor SetWindowsHookExW UnhookWindowsHookEx ClipCursor UnionRect GetWindowLongPtrW EnumDisplayMonitors LoadImageW CopyIcon GetDC GetSystemMetrics ReleaseDC LockWorkStation ActivateKeyboardLayout GetWindowTextW GetGUIThreadInfo SendMessageTimeoutW CallNextHookEx UnloadKeyboardLayout GetDoubleClickTime SetWindowPos GetWindow GetWindowThreadProcessId EnumChildWindows GetWindowLongW GetParent IsWindowVisible PtInRect IsWindow MonitorFromPoint GetDesktopWindow WindowFromPoint ChildWindowFromPointEx ScreenToClient CopyImage SetTimer DispatchMessageW TranslateMessage KillTimer VkKeyScanW OemKeyScan VkKeyScanExW GetKeyboardLayout CharToOemW GetKeyState CloseClipboard SetClipboardData EmptyClipboard OpenClipboard SendMessageW ShowWindow FindWindowExW MessageBoxW GetMessageW MapVirtualKeyW MapVirtualKeyExW SendInput GetWindowRect ClientToScreen GetForegroundWindow SetCursorPos GetCursorPos PostThreadMessageW LoadCursorW SetSystemCursor DestroyIcon CreateIconIndirect DrawIconEx GetIconInfo FillRect GetAsyncKeyState

gdi32

GetDeviceCaps CreateBitmap GetDIBits TextOutW DeleteDC CreatePen Ellipse Rectangle GetTextExtentPointW SetBkColor RoundRect DeleteObject CreateDIBSection CreateCompatibleDC SelectObject CreateSolidBrush SetBkMode SetTextColor CreateFontIndirectW GetObjectW

advapi32

GetSidSubAuthorityCount GetSidSubAuthority GetTokenInformation OpenProcessToken RegOpenKeyExW RegCloseKey RegCreateKeyExW RegQueryValueExW RegDeleteValueW RegSetValueExW GetUserNameW

shell32

ShellExecuteExW

ole32

CoUninitialize CoInitializeEx CoSetProxyBlanket CoCreateInstance CoCreateGuid

oleaut32

VariantClear SysFreeString SysAllocString VariantInit

shlwapi

PathFileExistsW

winmm

timeEndPeriod timeKillEvent timeSetEvent timeGetDevCaps

??0CActionData@@AEAA@XZ ??0CActionData@@QEAA@AEBV0@@Z ??0CApplicationSettings@@QEAA@AEBV0@@Z ??0CApplicationSettings@@QEAA@PEAVCSettings@@_NH@Z ??0CAudioNotificationClient@@QEAA@AEBV0@@Z ??0CAudioNotificationClient@@QEAA@PEB_W@Z ??0CAudioThreadLock@@QEAA@PEB_W@Z ??0CBrightness@@QEAA@PEAUHWND__@@@Z ??0CCheckCert@@QEAA@XZ ??0CGenericThreadLock@@QEAA@PEAU_RTL_CRITICAL_SECTION@@PEB_W_N@Z ??0CHotKeys@@QEAA@AEBV0@@Z ??0CHotKeys@@QEAA@XZ ??0CHotkey@@QEAA@AEBV0@@Z ??0CHotkey@@QEAA@H@Z ??0CIcon@@QEAA@AEBV0@@Z ??0CIcon@@QEAA@IPEB_WHHPEAUHWND__@@_N@Z ??0CIcon@@QEAA@IPEB_WUtagPOINT@@PEAUHWND__@@_N@Z ??0CIconSettings@@QEAA@AEBV0@@Z ??0CIconSettings@@QEAA@XZ ??0CInternalVolumeNotification@@QEAA@$$QEAV0@@Z ??0CInternalVolumeNotification@@QEAA@AEBV0@@Z ??0CInternalVolumeNotification@@QEAA@XZ ??0CLayerModifierKeys@@QEAA@AEBV0@@Z ??0CLayerModifierKeys@@QEAA@XZ ??0CLockAxis@@QEAA@AEBV0@@Z ??0CLockAxis@@QEAA@XZ ??0CMouseInfo@@QEAA@QEAH@Z ??0CMouseInfo@@QEAA@XZ ??0CMovement2Scroll@@QEAA@PEAV0@@Z ??0CMovement2Scroll@@QEAA@W4_ACTIONS@@@Z ??0CMovement2Scroll@@QEAA@XZ ??0CMyRegKey@@QEAA@PEB_WPEAUHKEY__@@K@Z ??0CSecureAttentionSequence@@QEAA@XZ ??0CSettings@@QEAA@AEBV0@@Z ??0CSettings@@QEAA@_NVCMouseInfo@@@Z ??0CThreadLock@@QEAA@PEB_W@Z ??0CVolumeManager@@QEAA@AEBV0@@Z ??0CVolumeManager@@QEAA@_NPEB_WK@Z ??0CVolumeNotification@@QEAA@AEBV0@@Z ??0CVolumeNotification@@QEAA@PEAUHWND__@@PEB_W@Z ??0CXMBCChord@@QEAA@AEBV0@@Z ??0CXMBCChord@@QEAA@XZ ??0CXMBCChords@@QEAA@AEAV0@@Z ??0CXMBCChords@@QEAA@XZ ??0CXMBCTimedClick@@QEAA@AEBV0@@Z ??0CXMBCTimedClick@@QEAA@XZ ??0CXMBCTimedClicks@@QEAA@AEAV0@@Z ??0CXMBCTimedClicks@@QEAA@XZ ??0ExceptionHandlerInstaller@@QEAA@AEBV0@@Z ??0ExceptionHandlerInstaller@@QEAA@XZ ??0InvalidParameterInstaller@@QEAA@_N@Z ??1CActionData@@UEAA@XZ ??1CApplicationSettings@@UEAA@XZ ??1CAudioNotificationClient@@AEAA@XZ ??1CAudioThreadLock@@QEAA@XZ ??1CBrightness@@QEAA@XZ ??1CCheckCert@@QEAA@XZ ??1CGenericThreadLock@@QEAA@XZ ??1CHotKeys@@UEAA@XZ ??1CHotkey@@UEAA@XZ ??1CIcon@@UEAA@XZ ??1CIconSettings@@UEAA@XZ ??1CLayerModifierKeys@@UEAA@XZ ??1CLockAxis@@UEAA@XZ ??1CMovement2Scroll@@QEAA@XZ ??1CMyRegKey@@QEAA@XZ ??1CSecureAttentionSequence@@QEAA@XZ ??1CSettings@@UEAA@XZ ??1CThreadLock@@QEAA@XZ ??1CVolumeManager@@UEAA@XZ ??1CVolumeNotification@@UEAA@XZ ??1CXMBCChord@@UEAA@XZ ??1CXMBCChords@@UEAA@XZ ??1CXMBCTimedClick@@UEAA@XZ ??1CXMBCTimedClicks@@UEAA@XZ ??1ExceptionHandlerInstaller@@UEAA@XZ ??1InvalidParameterInstaller@@QEAA@XZ ??4CActionData@@QEAAAEAV0@AEBV0@@Z ??4CApplicationSettings@@QEAAAEAV0@AEBV0@@Z ??4CAudioNotificationClient@@QEAAAEAV0@AEBV0@@Z ??4CAudioThreadLock@@QEAAAEAV0@AEBV0@@Z ??4CBrightness@@QEAAAEAV0@AEBV0@@Z ??4CCheckCert@@QEAAAEAV0@AEBV0@@Z ??4CGenericThreadLock@@QEAAAEAV0@AEBV0@@Z ??4CHotKeys@@QEAAAEAV0@AEBV0@@Z ??4CHotkey@@QEAAAEAV0@AEBV0@@Z ??4CIcon@@QEAAAEAV0@AEBV0@@Z ??4CIconSettings@@QEAAAEAV0@AEBV0@@Z ??4CInternalVolumeNotification@@QEAAAEAV0@$$QEAV0@@Z ??4CInternalVolumeNotification@@QEAAAEAV0@AEBV0@@Z ??4CLayerModifierKeys@@QEAAAEAV0@AEBV0@@Z ??4CLockAxis@@QEAAAEAV0@AEBV0@@Z ??4CLogger@@QEAAAEAV0@$$QEAV0@@Z ??4CLogger@@QEAAAEAV0@AEBV0@@Z ??4CMouseInfo@@QEAAAEAV0@$$QEAV0@@Z ??4CMouseInfo@@QEAAAEAV0@AEBV0@@Z ??4CMovement2Scroll@@QEAAAEAV0@AEBV0@@Z ??4CMyRegKey@@QEAAAEAV0@AEBV0@@Z ??4CSecureAttentionSequence@@QEAAAEAV0@AEBV0@@Z ??4CSettings@@QEAAAEAV0@AEBV0@@Z ??4CThreadLock@@QEAAAEAV0@AEBV0@@Z ??4CVolumeManager@@QEAAAEAV0@AEBV0@@Z ??4CVolumeNotification@@QEAAAEAV0@AEBV0@@Z ??4CXMBCChord@@QEAAXAEAV0@@Z ??4CXMBCChord@@QEAAXPEAV0@@Z ??4CXMBCChords@@QEAAAEAV0@AEAV0@@Z ??4CXMBCChords@@QEAAXPEAV0@@Z ??4CXMBCTimedClick@@QEAAXAEAV0@@Z ??4CXMBCTimedClick@@QEAAXPEAV0@@Z ??4CXMBCTimedClicks@@QEAAAEAV0@AEAV0@@Z ??4CXMBCTimedClicks@@QEAAXPEAV0@@Z ??4ExceptionHandlerInstaller@@QEAAAEAV0@AEBV0@@Z ??4InvalidParameterInstaller@@QEAAAEAV0@AEBV0@@Z ??_7CActionData@@6B@ ??_7CApplicationSettings@@6B@ ??_7CAudioNotificationClient@@6B@ ??_7CHotKeys@@6B@ ??_7CHotkey@@6B@ ??_7CIcon@@6B@ ??_7CIconSettings@@6B@ ??_7CInternalVolumeNotification@@6B@ ??_7CLayerModifierKeys@@6B@ ??_7CLockAxis@@6B@ ??_7CSettings@@6B@ ??_7CVolumeManager@@6B@ ??_7CVolumeNotification@@6B@ ??_7CXMBCChord@@6B@ ??_7CXMBCChords@@6B@ ??_7CXMBCTimedClick@@6B@ ??_7CXMBCTimedClicks@@6B@ ??_7ExceptionHandlerInstaller@@6B@ ??_FInvalidParameterInstaller@@QEAAXXZ ?Abort@CXMBCTimedClicks@@QEAAXUtagPOINT@@_N@Z ?Action@CActionData@@QEAA?AW4_ACTIONS@@XZ ?ActivateOnHover@CApplicationSettings@@QEAAX_N@Z ?ActivateOnHover@CApplicationSettings@@QEAA_NXZ ?Active@CActionData@@QEAA_NXZ ?AddApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z ?AddCallback@CAudioNotificationClient@@QEAAXPEAVCInternalVolumeNotification@@@Z ?AddFiles@ExceptionHandlerInstaller@@SAXXZ ?AddIcon@CIconSettings@@QEAAHPEAVCIcon@@@Z ?AddRef@CAudioNotificationClient@@UEAAKXZ ?AddRef@CVolumeNotification@@UEAAKXZ ?AdvScrollHorizontal@CApplicationSettings@@QEAAHXZ ?AdvScrollMethod@CApplicationSettings@@QEAAHXZ ?AdvScrollVertical@CApplicationSettings@@QEAAHXZ ?AppAction@CActionData@@SAPEAV1@PEB_W@Z ?AxisLocking@CApplicationSettings@@QEAA_NXZ ?BlockMouse@CActionData@@QEAA_NXZ ?BlockMouse@CApplicationSettings@@QEAA_NHH@Z ?BlockMouse@CXMBCChord@@QEAA_NXZ ?BlockMouse@CXMBCTimedClick@@QEAA_NXZ ?BlockMouseActive@CActionData@@QEAA_NXZ ?BlockMouseActive@CApplicationSettings@@QEAA_NHH@Z ?BlockMouseActive@CXMBCChord@@QEAA_NXZ ?BlockMouseActive@CXMBCTimedClick@@QEAA_NXZ ?CalculateKeystrokesWaitHoldTime@CApplicationSettings@@SAHPEB_WH@Z ?CancelChord@CXMBCChord@@QEAAXXZ ?ChangeCursor@CApplicationSettings@@QEAAX_N@Z ?ChangeCursor@CApplicationSettings@@QEAA_NXZ ?ChangeCursor@CLockAxis@@QEAAXPEAVCSPIThread@@PEAUHICON__@@H@Z ?ChangeCursor@CLockAxis@@QEAAXPEAVCSPIThread@@PEAVCApplicationSettings@@H_N2@Z ?ChangeVolume@CVolumeManager@@QEAA_NM@Z ?CheckAbort@CXMBCTimedClicks@@QEAAXUtagPOINT@@@Z ?CheckBetaVersionEnabled@@YA_NXZ ?CheckVersionDays@@YAHXZ ?CheckVersionEnabled@@YA_NXZ ?ChordCancelled@CXMBCChord@@QEAA_NXZ ?ChordedAction@CActionData@@SAPEAV1@AEAVCXMBCChords@@@Z ?ChordingOccurred@CXMBCChord@@QEAA_NXZ ?Clear@CActionData@@QEAAXXZ ?ClearApplications@CSettings@@QEAAXXZ ?ClearChordedFlag@CXMBCChord@@QEAAXXZ ?ClearIcons@CIconSettings@@QEAAHXZ ?ClearString@CApplicationSettings@@SAXAEAPEA_W@Z ?ClipMouse@CApplicationSettings@@QEAA_NXZ ?CloseLogFile@CLogger@@SAX_N@Z ?Copy@CApplicationSettings@@QEAAXPEAV1@@Z ?Copy@CMovement2Scroll@@QEAAXPEAV1@@Z ?CopyChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z ?CopyMovement2Scrolls@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z ?CopyString@CApplicationSettings@@SAPEA_WAEAPEA_WPEB_W_N@Z ?CopyTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z ?CreateFolder@@YA_NPEB_W@Z ?CreateKey@CMyRegKey@@QEAAHPEB_WPEAUHKEY__@@@Z ?CustomAction@CActionData@@SAPEAV1@HPEB_WHHH_N11100PEAVCXMBCChords@@PEAVCMovement2Scroll@@PEAVCXMBCTimedClicks@@@Z ?CycleCursorSpeed@@YAXXZ ?DebugEnabled@CLogger@@SA_NXZ ?DebugOutput@CLogger@@SAXPEB_WZZ ?DefaultRepeat@CApplicationSettings@@SAKXZ ?DelayUntilChordKnown@CXMBCChords@@QEAA_NXZ ?DeleteApplications@CSettings@@AEAAX_N@Z ?DeleteCS@CAudioThreadLock@@SAXXZ ?DeleteCS@CThreadLock@@SAXXZ ?DeleteValue@CMyRegKey@@QEAAHPEB_W@Z ?DestroyCursors@CLockAxis@@QEAAXXZ ?DisableBanner@CLogger@@SAXXZ ?DisableLogging@CLogger@@SAX_N@Z ?DisplayChanged@@YAXXZ ?Down@CBrightness@@QEAAXAEBUtagPOINT@@@Z ?EnableDebug@CLogger@@SAX_N@Z ?EnableProfileScript@CApplicationSettings@@QEAAX_N@Z ?EnhancePointerPrecision@CApplicationSettings@@QEAAX_N@Z ?EnhancePointerPrecision@CApplicationSettings@@QEAA_NXZ ?EnhancePointerPrecision@CMouseInfo@@QEAA_NXZ ?EnterCS@CAudioThreadLock@@SA_NPEB_W@Z ?EnterCS@CThreadLock@@SA_NPEB_W@Z ?ExecuteTimer@CXMBCTimedClicks@@QEAAXXZ ?Export@CSettings@@QEAA_NPEAVCApplicationSettings@@PEB_W@Z ?FlushLog@CLogger@@SAXXZ ?ForceSPIMessage@CApplicationSettings@@QEAA_NXZ ?GetAbort2OnMouseMove@CXMBCTimedClicks@@QEAA_NXZ ?GetAbortOnMouseMove@CXMBCTimedClicks@@QEAA_NXZ ?GetAborted@CXMBCTimedClicks@@QEAA_NXZ ?GetAction@CXMBCChord@@QEAA?AW4_ACTIONS@@XZ ?GetAction@CXMBCTimedClick@@QEAA?AW4_ACTIONS@@XZ ?GetActionData@CApplicationSettings@@QEAAPEAVCActionData@@HH@Z ?GetActionData@CMovement2Scroll@@QEAAPEAVCActionData@@XZ ?GetActionData@CXMBCChord@@QEAAPEAVCActionData@@XZ ?GetActionData@CXMBCTimedClick@@QEAAPEAVCActionData@@XZ ?GetActionDescription@CApplicationSettings@@QEAAPEA_WHH@Z ?GetActionString@CApplicationSettings@@AEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4MouseButtons@@H@Z ?GetActions@CApplicationSettings@@QEAA?AW4_ACTIONS@@HH_N@Z ?GetAlwaysShowOSD@@YA_NXZ ?GetApplication@CActionData@@QEAAPEA_WXZ ?GetApplication@CApplicationSettings@@QEAAPEB_WXZ ?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@H@Z ?GetApplication@CSettings@@QEAAPEAVCApplicationSettings@@PEB_W@Z ?GetApplicationCount@CSettings@@QEAAHXZ ?GetApplications@CSettings@@QEAAPEAV?$list@PEAVCApplicationSettings@@V?$allocator@PEAVCApplicationSettings@@@std@@@std@@XZ ?GetAutoSwitchLayer@CApplicationSettings@@QEAAHH@Z ?GetAutoSwitchTime@CApplicationSettings@@QEAANH@Z ?GetAxisLocked@CMovement2Scroll@@QEAAHXZ ?GetBrightness@CBrightness@@AEAAHXZ ?GetButtonUpCount@CMovement2Scroll@@QEAAHXZ ?GetCaption@CApplicationSettings@@QEAAPEB_WXZ ?GetChord@CXMBCChords@@QEAAPEAVCXMBCChord@@W4MouseButtons@@@Z ?GetChordButton@CApplicationSettings@@QEAA?AW4MouseButtons@@H@Z ?GetChordSourceButton@CXMBCChord@@QEAA?AW4MouseButtons@@XZ ?GetChordUsed@CXMBCChord@@QEAA_NXZ ?GetChordedButton@CXMBCChord@@QEAA?AW4MouseButtons@@XZ ?GetChords@CActionData@@QEAAPEAVCXMBCChords@@XZ ?GetChords@CApplicationSettings@@QEAAPEAVCXMBCChords@@HH@Z ?GetClass@CApplicationSettings@@QEAAPEB_WXZ ?GetClickAction@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@XZ ?GetCount@CIconSettings@@QEAAHXZ ?GetCurrentChords@CXMBCChord@@QEAAPEAVCXMBCChords@@XZ ?GetCurrentLayer@@YAHXZ ?GetCurrentProcessName@@YAHPEA_WAEAH@Z ?GetCursor@CApplicationSettings@@QEAAPEB_WXZ ?GetCustomApplications@CSettings@@QEAAPEAV?$list@PEAVCApplicationSettings@@V?$allocator@PEAVCApplicationSettings@@@std@@@std@@XZ ?GetCycleCursorSpeed@@YAHXZ ?GetDebug@@YA_NXZ ?GetDefaultApp@CSettings@@QEAAPEAVCApplicationSettings@@XZ ?GetDefaultLogFolder@@YA_NPEA_WK@Z ?GetDefaultSettingsFile@@YAHPEA_W_K@Z ?GetDescription@CActionData@@QEAAPEA_WXZ ?GetDescription@CApplicationSettings@@QEAAPEB_WXZ ?GetDescription@CXMBCChords@@QEAAPEA_WXZ ?GetDescription@CXMBCTimedClicks@@QEAAPEA_WXZ ?GetDisableLayerModifier@CApplicationSettings@@QEAA_NXZ ?GetDisableMouseOver@CApplicationSettings@@QEAA_NXZ ?GetDisableScrollUnderCursor@CApplicationSettings@@QEAA_NXZ ?GetEXEFolder@@YAHPEA_W_K@Z ?GetEnableOSD@@YA_NXZ ?GetEnabled@CXMBCTimedClicks@@QEAA_NH@Z ?GetFilename@CSettings@@QEAAPEB_WXZ ?GetFullName@CApplicationSettings@@QEAAPEB_WXZ ?GetHooked@@YA_NXZ ?GetHooktimeoutValue@@YAKXZ ?GetHotKeys@CSettings@@QEAAPEAVCHotKeys@@XZ ?GetHotkey@CHotKeys@@QEAAPEAVCHotkey@@W4GlobalHotkeys@@@Z ?GetHotkey@CHotkey@@QEAAKXZ ?GetHotkey@CLayerModifierKeys@@QEAAPEAVCHotkey@@W4ModifierKeys@@@Z ?GetHotkeys@@YAPEAVCHotKeys@@XZ ?GetIcon@CIconSettings@@QEAAPEAVCIcon@@H@Z ?GetIgnoreHScroll@CApplicationSettings@@QEAA_NXZ ?GetIgnoreHScrollTime@CApplicationSettings@@QEAAHXZ ?GetIgnoreVScroll@CApplicationSettings@@QEAA_NXZ ?GetIgnoreVScrollTime@CApplicationSettings@@QEAAHXZ ?GetIndex@CApplicationSettings@@QEAAHXZ ?GetKey@CApplicationSettings@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?GetKeys@CActionData@@QEAAPEA_WXZ ?GetKeys@CXMBCChord@@QEAAPEB_WXZ ?GetKeys@CXMBCTimedClick@@QEAAPEB_WXZ ?GetKeystrokes@CApplicationSettings@@QEAAPEA_WHH@Z ?GetKeystrokesWaitHoldTime@CActionData@@QEAAHH@Z ?GetKeystrokesWaitHoldTime@CApplicationSettings@@QEAAHHHH@Z ?GetLanguage@CSettings@@QEAAPEB_WXZ ?GetLanguageFile@@YA_NPEA_WH@Z ?GetLastUpdateCheck@@YAHXZ ?GetLaunchApp@CApplicationSettings@@QEAAPEA_WHH@Z ?GetLaunchApp@CXMBCChord@@QEAAPEB_WXZ ?GetLaunchApp@CXMBCTimedClick@@QEAAPEB_WXZ ?GetLayerDisabled@CApplicationSettings@@QEAA_NH@Z ?GetLayerDisabledNextPrev@CApplicationSettings@@QEAA_NH_N@Z ?GetLayerModifierKeys@CSettings@@QEAAPEAVCLayerModifierKeys@@XZ ?GetLayerName@CApplicationSettings@@QEAAPEA_WH@Z ?GetLayername@@YAPEB_WH@Z ?GetLock@CLogger@@SA_NXZ ?GetLogFile@@YAHPEA_W_K_N@Z ?GetLogFolder@@YAHPEA_W_K_N@Z ?GetLogicalCursorPos@@YAHPEAUHWND__@@PEAUtagPOINT@@@Z ?GetMatchType@CApplicationSettings@@QEAAHXZ ?GetModifier@CHotkey@@QEAAGXZ ?GetMouseButton@CMovement2Scroll@@QEAA?AW4MouseButtons@@XZ ?GetMouseInfo@CMouseInfo@@QEAAXAEAY02H@Z ?GetMouseSpeed@CApplicationSettings@@QEAAHXZ ?GetMouseSpeed@CMouseInfo@@QEAAHXZ ?GetMovement2Scroll@CActionData@@QEAAPEAVCMovement2Scroll@@XZ ?GetMovement2Scroll@CApplicationSettings@@QEAAPEAVCMovement2Scroll@@HH@Z ?GetName@CIcon@@QEAAPEB_WXZ ?GetOSVersion@@YA?AW4_ActionOSVersion@@XZ ?GetOfficeMouse@@YA_NXZ ?GetParentClass@CApplicationSettings@@QEAAPEB_WXZ ?GetPhysCursorPos@@YAHPEAUtagPOINT@@@Z ?GetPortable@@YA_NXZ ?GetPosition@CIcon@@QEAA?AUtagPOINT@@XZ ?GetProcessIntegrityLevel@@YAHKPEAX@Z ?GetProcessedDown@CXMBCTimedClick@@QEAA_NXZ ?GetProcessedUp@CXMBCTimedClick@@QEAA_NXZ ?GetProfileChangeScript@CApplicationSettings@@QEAAPEB_WXZ ?GetProfileWindow@@YAPEAUHWND__@@XZ ?GetReinstallOnResume@@YA_NXZ ?GetReleaseOnUp@CXMBCTimedClicks@@QEAA_NXZ ?GetResetKeys@CApplicationSettings@@QEAA_NHH@Z ?GetRevertLayer1@CApplicationSettings@@QEAA_NH@Z ?GetSettings@@YAPEAVCSettings@@XZ ?GetSettingsFile@@YAHPEA_W_K_NAEA_N@Z ?GetSettingsFolder@@YAHPEA_W_K@Z ?GetShortName@CApplicationSettings@@QEAAHPEA_WH@Z ?GetShowIcon@@YA_NXZ ?GetStartupMouseInfo@@YAAEBVCMouseInfo@@XZ ?GetStuckKeys@CApplicationSettings@@QEAAPEB_WHH@Z ?GetTime@CXMBCTimedClicks@@QEAAHH@Z ?GetTimedClick@CXMBCTimedClicks@@QEAAPEAVCXMBCTimedClick@@H@Z ?GetTimedClicks@CActionData@@QEAAPEAVCXMBCTimedClicks@@XZ ?GetTimedClicks@CApplicationSettings@@QEAAPEAVCXMBCTimedClicks@@HH@Z ?GetUseWhenDisabled@CHotkey@@QEAAHXZ ?GetUseWindowArea@CApplicationSettings@@QEAA_NXZ ?GetValue@CMyRegKey@@QEAAHPEB_WPEAK@Z ?GetValue@CMyRegKey@@QEAAHPEB_WPEAKPEAPEAE1@Z ?GetValue@CMyRegKey@@QEAAHPEB_WPEA_WK@Z ?GetVirtualKey@CHotkey@@QEAAGXZ ?GetVolume@CVolumeManager@@QEAAMXZ ?GetWin81CursorPos@@YAHPEAUtagPOINT@@@Z ?GetWindowArea@CApplicationSettings@@QEAA?AUtagRECT@@XZ ?GetWindowMask@CApplicationSettings@@QEAA?AW4WINDOWMASK@@XZ ?HookToggleXAxisInvert@@YAXXZ ?HookToggleXAxisLock@@YAXXZ ?HookToggleYAxisInvert@@YAXXZ ?HookToggleYAxisLock@@YAXXZ ?IPHandler@InvalidParameterInstaller@@CAXPEB_W00I_K@Z ?Import@CSettings@@QEAAHPEB_WPEAUHWND__@@0PEAPEAVCApplicationSettings@@@Z ?IncButtonUpCount@CMovement2Scroll@@QEAAXXZ ?Index@CIcon@@QEAAIXZ ?Init@CLockAxis@@QEAAXXZ ?InitCursors@CLockAxis@@QEAAXPEAUHINSTANCE__@@@Z ?InitGlobalCS@CAudioThreadLock@@SAXXZ ?InitGlobalCS@CThreadLock@@SAXXZ ?InitScalingFunctions@@YAXXZ ?Initialise@CLogger@@SAXXZ ?Initialise@CVolumeManager@@AEAAXXZ ?Initialise@CXMBCTimedClick@@QEAAXW4MouseButtons@@H_N@Z ?Initialise@CXMBCTimedClicks@@QEAAXW4MouseButtons@@_N@Z ?InternalLockXY@CLockAxis@@QEAAXXZ ?InternalUnlockXY@CLockAxis@@QEAAXXZ ?InvertHorizontal@CMovement2Scroll@@QEAA_NXZ ?InvertVertical@CMovement2Scroll@@QEAA_NXZ ?InvertX@CLockAxis@@QEAAXXZ ?InvertXY@CLockAxis@@QEAAXXZ ?InvertY@CLockAxis@@QEAAXXZ ?InvertedHorzScrolling@CApplicationSettings@@QEAA_NXZ ?InvertedScrolling@CApplicationSettings@@QEAA_NXZ ?IsButtonBlocked@CMovement2Scroll@@QEAA_NXZ ?IsCustomWindow@CApplicationSettings@@QEAA_NXZ ?IsDefault@CApplicationSettings@@QEAA_NXZ ?IsDesktopLocked@@YA_NXZ ?IsEnabled@CApplicationSettings@@QEAA_NXZ ?IsExtended@CHotkey@@QEAA_NXZ ?IsGadget@CIcon@@QEAA_NXZ ?IsInverted@CLockAxis@@QEAA_NXZ ?IsProfileScriptEnabled@CApplicationSettings@@QEAA_NXZ ?IsSasAvailable@CSecureAttentionSequence@@QEAA_NXZ ?IsSticky@CMovement2Scroll@@QEAA_NXZ ?IsStickyBlock@CMovement2Scroll@@QEAA_NXZ ?IsValid@CMyRegKey@@QEAAHXZ ?IsXInverted@CLockAxis@@QEAA_NXZ ?IsXMBCDisabled@@YA_N_N@Z ?IsYInverted@CLockAxis@@QEAA_NXZ ?KeyAction@CActionData@@QEAAHXZ ?KeyAction@CActionData@@SAPEAV1@PEB_WHHH_N1110@Z ?KeyExists@CMyRegKey@@QEAAHPEB_W@Z ?KeyRepeat@CActionData@@QEAAHXZ ?KillTimerThreadTimers@@YAXXZ ?LastMTSMoved@CMovement2Scroll@@QEAA_NXZ ?LeaveCS@CAudioThreadLock@@SAXXZ ?LeaveCS@CThreadLock@@SAXXZ ?LeftClickCycleLayer@@YA_NXZ ?Load@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@HAEA_NAEAH@Z ?Load@CMovement2Scroll@@QEAA_NAEAVxml_node@pugi@@H@Z ?Load@CSettings@@QEAA_NPEB_WAEA_N_N@Z ?Load@CXMBCChord@@QEAA_NAEAVxml_node@pugi@@H@Z ?Load@CXMBCChords@@QEAA_N_NAEAVxml_node@pugi@@H@Z ?Load@CXMBCTimedClick@@QEAA_NW4MouseButtons@@H_NAEAVxml_node@pugi@@H@Z ?Load@CXMBCTimedClicks@@QEAA_NW4MouseButtons@@_NAEAVxml_node@pugi@@H@Z ?LoadDefault@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@HAEAH@Z ?LoadIcons@CIconSettings@@QEAAHPEB_W@Z ?LoadIcons@CIconSettings@@QEAAHXZ ?LockCycle@CLockAxis@@QEAAXPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z ?LockToAxis@CLockAxis@@QEAAXPEAVCSPIThread@@H_N@Z ?LockX@CLockAxis@@QEAAXPEAVCSPIThread@@H_N1@Z ?LockXY@CLockAxis@@QEAAXPEAVCSPIThread@@H_N@Z ?LockY@CLockAxis@@QEAAXPEAVCSPIThread@@H_N1@Z ?Locked@CLockAxis@@QEAA_NXZ ?LockedToAxis@CLockAxis@@QEAA_NXZ ?LockedX@CLockAxis@@QEAA_NXZ ?LockedY@CLockAxis@@QEAA_NXZ ?Log@CApplicationSettings@@QEAAXPEB_W@Z ?LogDebug@CLogger@@SAXPEB_WZZ ?LogMessage@CLogger@@SAXPEB_WZZ ?LogOSDebug@CLogger@@SAXKPEB_WZZ ?LogOSMessage@CLogger@@SAXKPEB_WZZ ?LogThreadDebug@CLogger@@SAXPEB_WZZ ?LoggingDisabled@CLogger@@SA_NXZ ?MatchCaption@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?MatchClass@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?MatchParentClass@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?MatchProcess@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z ?MatchProcess@CApplicationSettings@@QEAA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PEAUHWND__@@@Z ?MaxLayers@@YAHXZ ?MaxLayers@CSettings@@QEAA?BHXZ ?NewAction@CActionData@@SAPEAV1@H@Z ?NextLayer@@YAXXZ ?NoParent@CApplicationSettings@@QEAA_NXZ ?NotificatcionsEnabled@@YA_NXZ ?Notifiction@CVolumeManager@@UEAAXW4VolumeAction@@@Z ?OSD_SHOW_WINDOW@CBrightness@@0IA ?OnDefaultDeviceChanged@CAudioNotificationClient@@UEAAJW4__MIDL___MIDL_itf_mmdeviceapi_0000_0000_0001@@W4__MIDL___MIDL_itf_mmdeviceapi_0000_0000_0002@@PEB_W@Z ?OnDeviceAdded@CAudioNotificationClient@@UEAAJPEB_W@Z ?OnDeviceRemoved@CAudioNotificationClient@@UEAAJPEB_W@Z ?OnDeviceStateChanged@CAudioNotificationClient@@UEAAJPEB_WK@Z ?OnNotify@CVolumeNotification@@UEAAJPEAUAUDIO_VOLUME_NOTIFICATION_DATA@@@Z ?OnPropertyValueChanged@CAudioNotificationClient@@UEAAJPEB_WU_tagpropertykey@@@Z ?OpenFolderAction@CActionData@@SAPEAV1@PEB_W@Z ?OpenLogFile@CLogger@@CA_NXZ ?OverrideMouseSpeed@CApplicationSettings@@QEAAX_N@Z ?OverrideMouseSpeed@CApplicationSettings@@QEAA_NXZ ?PreviousLayer@@YAXXZ ?QueryInterface@CAudioNotificationClient@@UEAAJAEBU_GUID@@PEAPEAX@Z ?QueryInterface@CVolumeNotification@@UEAAJAEBU_GUID@@PEAPEAX@Z ?RandomiseDelay@CActionData@@QEAA_NXZ ?RandomiseDelay@CApplicationSettings@@QEAA_NHH@Z ?RandomiseDelay@CXMBCChord@@QEAA_NXZ ?RandomiseDelay@CXMBCTimedClick@@QEAA_NXZ ?ReInitialise@CVolumeManager@@QEAAXXZ ?RealWindowFromPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z ?RealWindowFromPoint_SkipLocked@@YAPEAUHWND__@@AEBUtagPOINT@@_N@Z ?RegExMatching@CApplicationSettings@@QEAA_NXZ ?Release@CAudioNotificationClient@@UEAAKXZ ?Release@CVolumeNotification@@UEAAKXZ ?ReleaseChord@CXMBCChord@@QEAAXXZ ?ReleaseLock@CLogger@@SAXXZ ?RemoveApplication@CSettings@@QEAA_NPEAVCApplicationSettings@@@Z ?RemoveCallback@CAudioNotificationClient@@QEAAXPEAVCInternalVolumeNotification@@@Z ?RemoveFindHook@@YA_NXZ ?RemoveHooks@@YAXXZ ?RemoveListedIcons@CIconSettings@@QEAAHXZ ?RemoveMouseHook@@YA_N_N@Z ?Reset@CXMBCTimedClicks@@QEAAXXZ ?ResetCursor@CLockAxis@@QEAAXPEAVCSPIThread@@@Z ?ResetGlobalCS@CAudioThreadLock@@SAXXZ ?ResetGlobalCS@CThreadLock@@SAXXZ ?Save@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@@Z ?Save@CMovement2Scroll@@QEAAXAEAVxml_node@pugi@@@Z ?Save@CSettings@@QEAA_NPEB_W@Z ?Save@CXMBCChord@@QEAAXAEAVxml_node@pugi@@@Z ?Save@CXMBCChords@@QEAAX_NAEAVxml_node@pugi@@@Z ?Save@CXMBCTimedClick@@QEAAXAEAVxml_node@pugi@@@Z ?Save@CXMBCTimedClicks@@QEAAX_NAEAVxml_node@pugi@@@Z ?SaveDefault@CApplicationSettings@@QEAA_NAEAVxml_node@pugi@@@Z ?SaveIcons@CIconSettings@@QEAAHPEB_W@Z ?SaveIcons@CIconSettings@@QEAAHXZ ?SavePersistantSettings@@YA_NXZ ?ScaleWin81CursorPos@@YAHPEAUtagPOINT@@@Z ?ScrollLines@CApplicationSettings@@QEAAHXZ ?ScrollPages@CApplicationSettings@@QEAA_NXZ ?SendKeyAction@CApplicationSettings@@QEAAHHH@Z ?SendKeyAction@CXMBCChord@@QEAAHXZ ?SendKeyAction@CXMBCTimedClick@@QEAAHXZ ?SendKeyRepeat@CApplicationSettings@@QEAAHHH@Z ?SendKeyRepeat@CXMBCChord@@QEAAHXZ ?SendKeyRepeat@CXMBCTimedClick@@QEAAHXZ ?SendKeyWhenActive@CApplicationSettings@@QEAA_NHH@Z ?SendKeyWhenActive@CXMBCChord@@QEAA_NXZ ?SendKeyWhenActive@CXMBCTimedClick@@QEAA_NXZ ?SendSAS@CSecureAttentionSequence@@QEAA_N_N@Z ?SetAbort2OnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z ?SetAbortOnMouseMove@CXMBCTimedClicks@@QEAAX_N@Z ?SetAction@CXMBCChord@@QEAAXW4_ACTIONS@@@Z ?SetAction@CXMBCTimedClick@@QEAAXW4_ACTIONS@@@Z ?SetActionData@CMovement2Scroll@@QEAAXPEAVCActionData@@@Z ?SetActionData@CXMBCChord@@QEAAXPEAVCActionData@@@Z ?SetActionData@CXMBCTimedClick@@QEAAXPEAVCActionData@@@Z ?SetActionDescription@CApplicationSettings@@QEAAXHHPEB_W@Z ?SetActions@CApplicationSettings@@QEAAXHHW4_ACTIONS@@@Z ?SetAdvScrollHorizontal@CApplicationSettings@@QEAAXH@Z ?SetAdvScrollMethod@CApplicationSettings@@QEAAXH@Z ?SetAdvScrollVertical@CApplicationSettings@@QEAAXH@Z ?SetApplication@CApplicationSettings@@QEAAXPEB_W@Z ?SetAutoSwitchLayer@CApplicationSettings@@QEAAXHH@Z ?SetAutoSwitchTime@CApplicationSettings@@QEAAXHN@Z ?SetAxisLock@CMovement2Scroll@@QEAAXH@Z ?SetAxisLocking@CApplicationSettings@@QEAAX_N@Z ?SetBlockMouse@CMovement2Scroll@@QEAAX_N@Z ?SetBlockMouse@CXMBCChord@@QEAAX_N@Z ?SetBlockMouse@CXMBCTimedClick@@QEAAX_N@Z ?SetBlockMouseActive@CXMBCChord@@QEAAX_N@Z ?SetBlockMouseActive@CXMBCTimedClick@@QEAAX_N@Z ?SetBrightness@CBrightness@@QEAA_NH@Z ?SetChord@CXMBCChords@@QEAAXW4MouseButtons@@AEAVCXMBCChord@@@Z ?SetChordButton@CApplicationSettings@@QEAAXW4MouseButtons@@H@Z ?SetChordSourceButton@CXMBCChord@@QEAAXW4MouseButtons@@@Z ?SetChordUsed@CXMBCChord@@QEAAXXZ ?SetChordedButton@CXMBCChord@@QEAAXW4MouseButtons@@@Z ?SetChords@CApplicationSettings@@QEAAXHHPEAVCXMBCChords@@@Z ?SetClipMouse@CApplicationSettings@@QEAAX_N@Z ?SetCurrentChords@CXMBCChord@@QEAAXPEAVCXMBCChords@@@Z ?SetCurrentLayer@@YAXH_N00@Z ?SetCursor@CApplicationSettings@@QEAAXPEB_W@Z ?SetDebug@@YAX_NPEB_W@Z ?SetDefaultApp@CSettings@@QEAAXPEAVCApplicationSettings@@@Z ?SetDefaultLogFolder@@YA_NPEB_W@Z ?SetDelayUntilChordKnown@CXMBCChords@@QEAAX_N@Z ?SetDescription@CApplicationSettings@@QEAAXPEB_W@Z ?SetDescription@CXMBCChords@@QEAAXPEB_W@Z ?SetDescription@CXMBCTimedClicks@@QEAAXPEB_W@Z ?SetDisableLayerModifier@CApplicationSettings@@QEAAX_N@Z ?SetDisableMouseOver@CApplicationSettings@@QEAAX_N@Z ?SetDisableScrollUnderCursor@CApplicationSettings@@QEAAX_N@Z ?SetEnableFlag@CApplicationSettings@@QEAAX_N@Z ?SetEnabled@CXMBCTimedClicks@@QEAAXH_N@Z ?SetEnhancePointerPrecision@CMouseInfo@@QEAAX_N@Z ?SetFindHook@@YA_NPEAUHWND__@@@Z ?SetForceSPIMessage@CApplicationSettings@@QEAAX_N@Z ?SetHookBrightnessOSDWindow@@YAXPEAUHWND__@@@Z ?SetHookMainWindow@@YAXPEAUHWND__@@@Z ?SetHookVolumeOSDWindow@@YAXPEAUHWND__@@@Z ?SetHotkey@CHotkey@@QEAAHK@Z ?SetIgnoreHScroll@CApplicationSettings@@QEAAX_N@Z ?SetIgnoreHScrollTime@CApplicationSettings@@QEAAXH@Z ?SetIgnoreVScroll@CApplicationSettings@@QEAAX_N@Z ?SetIgnoreVScrollTime@CApplicationSettings@@QEAAXH@Z ?SetInvertHorizontal@CMovement2Scroll@@QEAAX_N@Z ?SetInvertHorzScrolling@CApplicationSettings@@QEAAX_N@Z ?SetInvertScrolling@CApplicationSettings@@QEAAX_N@Z ?SetInvertVertical@CMovement2Scroll@@QEAAX_N@Z ?SetKeys@CMovement2Scroll@@QEAAXPEB_W@Z ?SetKeys@CXMBCChord@@QEAAXPEB_W@Z ?SetKeys@CXMBCTimedClick@@QEAAXPEB_W@Z ?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111@Z ?SetKeystrokes@CApplicationSettings@@QEAAXHHPEB_WHH_N111H@Z ?SetLanguage@CSettings@@QEAAXPEB_W@Z ?SetLastMTS@CMovement2Scroll@@QEAAX_N@Z ?SetLastUpdateCheck@@YAXH@Z ?SetLaunchApp@CApplicationSettings@@QEAAXHHPEB_W@Z ?SetLaunchApp@CMovement2Scroll@@QEAAXPEB_W@Z ?SetLaunchApp@CXMBCChord@@QEAAXPEB_W@Z ?SetLaunchApp@CXMBCTimedClick@@QEAAXPEB_W@Z ?SetLayerDisabled@CApplicationSettings@@QEAAXH_N@Z ?SetLayerDisabledNextPrev@CApplicationSettings@@QEAAXH_N@Z ?SetLayerName@CApplicationSettings@@QEAAXPEB_WH@Z ?SetMatchType@CApplicationSettings@@QEAAXH@Z ?SetMaxLayers@CSettings@@QEAA_NH@Z ?SetModifier@CHotkey@@QEAAHG@Z ?SetMouseButton@CMovement2Scroll@@QEAAXW4MouseButtons@@@Z ?SetMouseHook@@YA_NXZ ?SetMouseSpeed@CApplicationSettings@@QEAAXH@Z ?SetMouseSpeed@CMouseInfo@@QEAAX_K@Z ?SetMovement2Scroll@CActionData@@QEAAXPEAVCMovement2Scroll@@@Z ?SetMovement2Scroll@CApplicationSettings@@QEAAXHHPEAVCMovement2Scroll@@@Z ?SetMovement2Scroll@CXMBCChord@@QEAAXPEAVCMovement2Scroll@@@Z ?SetMovement2Scroll@CXMBCTimedClick@@QEAAXPEAVCMovement2Scroll@@@Z ?SetNoParentFlag@CApplicationSettings@@QEAAX_N@Z ?SetOSD@CBrightness@@QEAAXPEAUHWND__@@@Z ?SetOfficeMouse@@YAX_N@Z ?SetParent@CAudioNotificationClient@@QEAAXPEAUHWND__@@@Z ?SetParent@CVolumeManager@@QEAAXPEAUHWND__@@@Z ?SetParent@CVolumeNotification@@QEAAXPEAUHWND__@@@Z ?SetPortable@@YAX_N@Z ?SetPressed@CXMBCTimedClicks@@QEAAXP6AXPEAV1@PEAVCXMBCTimedClick@@K@ZP6AX01KUtagPOINT@@@ZW4MouseButtons@@H_NPEAUHWND__@@3PEAVCApplicationSettings@@PEAVCSPIThread@@@Z ?SetProcessedDown@CXMBCTimedClick@@QEAAX_N@Z ?SetProcessedUp@CXMBCTimedClick@@QEAAX_N@Z ?SetProfileChangeScript@CApplicationSettings@@QEAAXPEB_W@Z ?SetRandomiseDelay@CXMBCChord@@QEAAX_N@Z ?SetRandomiseDelay@CXMBCTimedClick@@QEAAX_N@Z ?SetRegExMatching@CApplicationSettings@@QEAAX_N@Z ?SetReleaseOnUp@CXMBCTimedClicks@@QEAAX_N@Z ?SetResetKeys@CApplicationSettings@@QEAAXHH_N@Z ?SetRevertLayer1@CApplicationSettings@@QEAAXH_N@Z ?SetScrollLines@CApplicationSettings@@QEAAXH@Z ?SetScrollPages@CApplicationSettings@@QEAAX_N@Z ?SetSendKeyAction@CXMBCChord@@QEAAXH@Z ?SetSendKeyAction@CXMBCTimedClick@@QEAAXH@Z ?SetSendKeyRepeat@CXMBCChord@@QEAAXH@Z ?SetSendKeyRepeat@CXMBCTimedClick@@QEAAXH@Z ?SetSendKeyWhenActive@CXMBCChord@@QEAAX_N@Z ?SetSendKeyWhenActive@CXMBCTimedClick@@QEAAX_N@Z ?SetSensitivityX@CMovement2Scroll@@QEAAXH@Z ?SetSensitivityY@CMovement2Scroll@@QEAAXH@Z ?SetSettingsFile@@YAHPEB_W@Z ?SetSetupWindow@@YAXPEAUHWND__@@@Z ?SetSticky@CMovement2Scroll@@QEAAX_N@Z ?SetStickyBlock@CMovement2Scroll@@QEAAX_N@Z ?SetStuckKeys@CApplicationSettings@@QEAAXHHPEB_W@Z ?SetSwapButtons@CApplicationSettings@@QEAAXW4swapbuttons@@@Z ?SetThreadName@@YAXKPEBD@Z ?SetTime@CXMBCTimedClicks@@QEAAXHH@Z ?SetTimedClick@CXMBCTimedClicks@@QEAAXHAEAVCXMBCTimedClick@@@Z ?SetTimedClicks@CApplicationSettings@@QEAAXHHPEAVCXMBCTimedClicks@@@Z ?SetUnblockAfterDelay@CXMBCChords@@QEAAX_N@Z ?SetUnblockAfterMovement@CXMBCChords@@QEAAX_N@Z ?SetUnblockMPixels@CXMBCChords@@QEAAXH@Z ?SetUnblockTime@CXMBCChords@@QEAAXH@Z ?SetUseWindowArea@CApplicationSettings@@QEAAX_N@Z ?SetValue@CMyRegKey@@QEAAHPEB_W0@Z ?SetValue@CMyRegKey@@QEAAHPEB_WK@Z ?SetVirtualKey@CHotkey@@QEAAHG@Z ?SetVolume@CVolumeManager@@QEAA_NM@Z ?SetWindowArea@CApplicationSettings@@QEAAXUtagRECT@@@Z ?SetWindowMask@CApplicationSettings@@QEAAXW4WINDOWMASK@@@Z ?Settings@CApplicationSettings@@QEAAPEAVCSettings@@XZ ?Shutdown@CLogger@@SAXXZ ?SwapButtons@CApplicationSettings@@QEAA?AW4swapbuttons@@XZ ?TerminateHandler@ExceptionHandlerInstaller@@SAXXZ ?TestCrash@@YAXXZ ?ThreadDebugging@CLogger@@SAX_N@Z ?TimedClickFeedbackTimer@CXMBCTimedClicks@@SAXPEAUHWND__@@IIK@Z ?TimedClickTimer@CXMBCTimedClicks@@SAXPEAUHWND__@@IIK@Z ?TimedClicksAction@CActionData@@SAPEAV1@AEAVCXMBCTimedClicks@@@Z ?ToggleMute@CVolumeManager@@QEAA_NXZ ?TryEnterCS@CAudioThreadLock@@SA_NPEB_W@Z ?TryEnterCS@CThreadLock@@SA_NPEB_W@Z ?UnblockAfterDelay@CXMBCChords@@QEAA_NXZ ?UnblockAfterMovement@CXMBCChords@@QEAA_NXZ ?UnblockMPixels@CXMBCChords@@QEAAHXZ ?UnblockTime@CXMBCChords@@QEAAHXZ ?Uninitialise@CVolumeManager@@AEAAXXZ ?UninvertX@CLockAxis@@QEAAXXZ ?UninvertXY@CLockAxis@@QEAAXXZ ?UninvertY@CLockAxis@@QEAAXXZ ?Unlock@CLockAxis@@QEAA_NPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z ?UnlockX@CLockAxis@@QEAA_NPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z ?UnlockXY@CLockAxis@@QEAA_NPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z ?UnlockY@CLockAxis@@QEAA_NPEAVCSPIThread@@HPEAVCSettings@@PEAVCApplicationSettings@@_N@Z ?Up@CBrightness@@QEAAXAEBUtagPOINT@@@Z ?UpdateCursors@@YAXXZ ?UpdateSPIThread@@YAXXZ ?UpdateSettings@@YA_NXZ ?UpgradeAction@CApplicationSettings@@AEAAXHHW4_ACTIONS@@@Z ?ValueExists@CMyRegKey@@QEAAHPEB_WK@Z ?VerifyCert@CCheckCert@@QEAA_NPEB_W@Z ?WindowFromPhysPoint@@YAPEAUHWND__@@AEBUtagPOINT@@@Z ?WindowFromPointEx@@YAPEAUHWND__@@UtagPOINT@@H@Z ?WindowHandle@CIcon@@QEAAPEAUHWND__@@XZ ?XLocked@CLockAxis@@QEAA_NH@Z ?XPos@CLockAxis@@QEAAHXZ ?YLocked@CLockAxis@@QEAA_NH@Z ?YPos@CLockAxis@@QEAAHXZ ?_InternalLogDebug@CLogger@@SAXPEB_W@Z ?csLogMutex@CLogger@@0U_RTL_CRITICAL_SECTION@@A ?g_GlobalCS@CAudioThreadLock@@0U_RTL_CRITICAL_SECTION@@A ?g_GlobalCS@CThreadLock@@0U_RTL_CRITICAL_SECTION@@A ?getSensitivityX@CMovement2Scroll@@QEAAHXZ ?getSensitivityY@CMovement2Scroll@@QEAAHXZ ?get_DebounceFromUp@CSettings@@QEAA_NXZ ?get_DebounceTime@CSettings@@QEAAHXZ ?get_EnableDebounce@CSettings@@QEAA_NXZ ?get_MouseJigglerTickTimeout@CSettings@@QEAAKXZ ?get_ResetStickyOnAnyButton@CSettings@@QEAA_NXZ ?get_ResetStickyOnAnyKey@CSettings@@QEAA_NXZ ?get_ResetStickyOnLayerChange@CSettings@@QEAA_NXZ ?get_SearchURL@CSettings@@QEAAPEB_WXZ ?m_bDead@CLogger@@0_NA ?m_bDebugging@CLogger@@0_NA ?m_bDisableBanner@CLogger@@0_NA ?m_bDisableLogging@CLogger@@0_NA ?m_bThreadDebugging@CLogger@@0_NA ?m_hLogFile@CLogger@@0PEAXEA ?m_sdwOwner@CAudioThreadLock@@0KA ?m_sdwOwner@CThreadLock@@0KA ?m_sdwTimer@CAudioThreadLock@@0KA ?m_sdwTimer@CThreadLock@@0KA ?m_snEntryCount@CAudioThreadLock@@0HA ?m_snEntryCount@CThreadLock@@0HA ?m_stcName@CAudioThreadLock@@0PA_WA ?m_stcName@CGenericThreadLock@@0PA_WA ?m_stcName@CThreadLock@@0PA_WA ?put_DebounceFromUp@CSettings@@QEAAX_N@Z ?put_DebounceTime@CSettings@@QEAAXH@Z ?put_EnableDebounce@CSettings@@QEAAX_N@Z ?put_ResetStickyOnAnyButton@CSettings@@QEAAX_N@Z ?put_ResetStickyOnAnyKey@CSettings@@QEAAX_N@Z ?put_ResetStickyOnLayerChange@CSettings@@QEAAX_N@Z

Name

.text

Size

593KB

Virtual Size

592KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

369KB

Virtual Size

369KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

8KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

604B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

49KB

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

uninstaller.exe

IMPHASH b1a57b635b23ffd553b3fd1e0960b2bd
SHA256 c4e59737ffd988ef4bc7a62e3316a470b1b09a9889f65908110fba3d7b1c6500
MD5 bfffc38fff05079b15a5317e279dc7a9
SHA1 0c18db954f11646d65d0300e58fefcd9ff7634de
SHA512 d30220e024ac242285ea757006e7da3874e5f889951de226d48c372a6a8701b76d4a917134ecc1e72c6c3a8d43444762288e7134a25d837e9f43d972675c81d6
SSDEEP 1536:fRPYqa5pic6jXFdL2KiMcrgCKdO/LeAyNLs9Y0tIdJVgwkL7U3:pPA6jXFN2Mcr/tTeAt9jidJVnkfU
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

PE Signature issue

Digest

e1:39:7b:a1:a7:d9:ac:8e:f6:f5:d4:72:63:aa:a2:c0:63:4e:93:4a

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Chains

May 23, 2024

Subject

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Serial Number

1b:b5:8f:25:2a:df:23:00:49:28:c9:ae:3d:7e:ed:27

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Timespan

May 31, 2021 - Sep 17, 2029

Subject

CN=Open Source Developer\, Phillip Gibbons,O=Open Source Developer,ST=Berkshire,C=GB,1.2.840.113549.1.9.1=#0c127068696c406869676872657a2e636f2e756b

Serial Number

3d:a5:ca:7c:85:af:e6:68:8f:93:68:ae:a4:98:59:23

Issuer

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Apr 4, 2023 - Apr 3, 2024

Subject

CN=Certum Timestamp 2022,O=Asseco Data Systems S.A.,C=PL

Serial Number

2b:d4:ae:70:b9:d0:63:5b:2a:e9:84:c8:d6:74:aa:30

Issuer

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jul 28, 2022 - Jul 27, 2033

Subject

CN=Certum Code Signing 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

99:a3:80:0a:26:55:3b:65:ab:dc:6e:84:a6:b3:ea:39

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

May 19, 2021 - May 18, 2036

Subject

CN=Certum Timestamping 2021 CA,O=Asseco Data Systems S.A.,C=PL

Serial Number

e7:ff:69:c7:3b:35:ce:4b:91:26:d8:74:7c:68:a5:87

Issuer

CN=Certum Trusted Network CA 2,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Key Usages

KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

May 19, 2021 - May 18, 2036

Minor OS version

Major OS version

Entry point

12908

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

user32

gdi32

SelectObject SetBkMode CreateFontIndirectA SetTextColor DeleteObject GetDeviceCaps CreateBrushIndirect SetBkColor

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA SHFileOperationA ShellExecuteA

advapi32

RegDeleteValueA SetFileSecurityA RegOpenKeyExA RegDeleteKeyA RegEnumValueA RegCloseKey RegCreateKeyExA RegSetValueExA RegQueryValueExA RegEnumKeyA

comctl32

ImageList_AddMasked ImageList_Destroy ImageList_Create ord17

ole32

OleUninitialize OleInitialize CoTaskMemFree CoCreateInstance

$PLUGINSDIR/ExecCmd.dll

IMPHASH bf44c9fb48bb8c36b3e2527e7252350d
SHA256 1f4bd9c9376fe1b6913baeca7fb6df6467126f27c9c2fe038206567232a0e244
MD5 b9380b0bea8854fd9f93cc1fda0dfeac
SHA1 edb8d58074e098f7b5f0d158abedc7fc53638618
SHA512 45c3ab0f2bce53b75e72e43bac747dc0618342a3f498be8e2eb62a6db0b137fcdb1735da83051b14824996b5287109aa831e5859d6f21f0ed21b76b3d335418c
SSDEEP 48:ifXNtGNjFizsU35iej7luiwa28mDJmDKUOMQH0glay/Aa4r/:5Fef5iej5txKJKenlV4r/
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

5433

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/System.dll

IMPHASH f2ac1ab587d5531d5f1bf76c094aef4c
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

10512

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Sharing

General

Malware Config

Signatures

File Explorer

XMouseButtonControlSetup.2.20.5.exe

PE Signature issue

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

generic

$PLUGINSDIR/ExecCmd.dll

kernel32

user32

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/ShellExecAsUser.dll

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

msvcrt

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-wizard.bmp

$PLUGINSDIR/nsDialogs.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

BugTrapU-x64.dll

ws2_32

comctl32

shlwapi

version

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

XMouseButtonControl.exe

PE Signature issue

psapi

dnsapi

wininet

bugtrapu-x64

xmousebuttonhook

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32