Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
3ae680ebf18...18.exe
windows7-x64
7ae680ebf18...18.exe
windows10-2004-x64
7$PLUGINSDI...nt.dll
windows7-x64
1$PLUGINSDI...nt.dll
windows10-2004-x64
1$PLUGINSDI...ed.htm
windows7-x64
1$PLUGINSDI...ed.htm
windows10-2004-x64
1$PLUGINSDI...er.dll
windows7-x64
3$PLUGINSDI...er.dll
windows10-2004-x64
3$PLUGINSDI...ss.htm
windows7-x64
1$PLUGINSDI...ss.htm
windows10-2004-x64
1$PLUGINSDI...ls.dll
windows7-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ss.htm
windows7-x64
1$PLUGINSDI...ss.htm
windows10-2004-x64
1$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...en.htm
windows7-x64
1$PLUGINSDI...en.htm
windows10-2004-x64
1$PLUGINSDI...t.html
windows7-x64
1$PLUGINSDI...t.html
windows10-2004-x64
1$PLUGINSDI...r.html
windows7-x64
1$PLUGINSDI...r.html
windows10-2004-x64
1$PLUGINSDI...ed.exe
windows7-x64
1$PLUGINSDI...ed.exe
windows10-2004-x64
1$PLUGINSDI...lay.js
windows7-x64
3$PLUGINSDI...lay.js
windows10-2004-x64
3$PLUGINSDI...min.js
windows7-x64
3$PLUGINSDI...min.js
windows10-2004-x64
3$PLUGINSDI...ger.js
windows7-x64
3$PLUGINSDI...ger.js
windows10-2004-x64
3$PLUGINSDI...ker.js
windows7-x64
3$PLUGINSDI...ker.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
ae680ebf182bad9d6c5dc5297dcdb6d1_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ae680ebf182bad9d6c5dc5297dcdb6d1_JaffaCakes118.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/FDMClient.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/FDMClient.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/Failed.htm
Resource
win7-20240611-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/Failed.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/FirefoxHandler.dll
Resource
win7-20240611-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/FirefoxHandler.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/NoneSilentSuccess.htm
Resource
win7-20240611-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/NoneSilentSuccess.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/Success.htm
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/Success.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240611-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/WelcomeScreen.htm
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/WelcomeScreen.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/manager/init.html
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/manager/init.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/manager/manager.html
Resource
win7-20240611-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/manager/manager.html
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/manager/scripts/gplay.js
Resource
win7-20240611-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/manager/scripts/gplay.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/manager/scripts/jquery-1.10.1.min.js
Resource
win7-20240611-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/manager/scripts/jquery-1.10.1.min.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/manager/scripts/manager.js
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/manager/scripts/manager.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/manager/scripts/sharedWorker.js
Resource
win7-20231129-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/manager/scripts/sharedWorker.js
Resource
win10v2004-20240611-en
Target
ae680ebf182bad9d6c5dc5297dcdb6d1_JaffaCakes118
Size
733KB
MD5
ae680ebf182bad9d6c5dc5297dcdb6d1
SHA1
017435ab8b17b85f6f0cf6e433d1a1e0229d9117
SHA256
d4c3919ec72842ee308477798826f76fec77e2f20e862750b7cf542b385b0433
SHA512
ce8ba8384dc02cb30342a75c0a591c97c5e3428501db10cb52409604f8ac5188687cdaf5a2025b174550933a78dd85cee984f1db726248ab9cb8c2f01f7cef43
SSDEEP
12288:3EEShYO99Vv12R8nvwz7ap2GAKmozGBBvtGAXfmnoILU9TbF9jn8h:3HS999V928vwz7aw7vgAPZd9TbF9jnk
Checks for missing Authenticode signature.
resource |
---|
ae680ebf182bad9d6c5dc5297dcdb6d1_JaffaCakes118 |
unpack001/$PLUGINSDIR/manager/scripts/WebBrowser_embedded.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetFileTime
CompareFileTime
SearchPathW
GetShortPathNameW
GetFullPathNameW
MoveFileW
SetCurrentDirectoryW
GetFileAttributesW
GetLastError
CreateDirectoryW
SetFileAttributesW
Sleep
GetTickCount
CreateFileW
GetFileSize
GetModuleFileNameW
GetCurrentProcess
CopyFileW
ExitProcess
GetWindowsDirectoryW
GetTempPathW
GetCommandLineW
SetErrorMode
CloseHandle
lstrlenW
lstrcpynW
GetDiskFreeSpaceW
GlobalUnlock
GlobalLock
CreateThread
LoadLibraryW
CreateProcessW
lstrcmpiA
GetTempFileNameW
lstrcatW
GetProcAddress
LoadLibraryA
GetModuleHandleA
OpenProcess
lstrcpyW
GetVersionExW
GetSystemDirectoryW
GetVersion
lstrcpyA
RemoveDirectoryW
lstrcmpA
lstrcmpiW
lstrcmpW
ExpandEnvironmentStringsW
GlobalAlloc
WaitForSingleObject
GetExitCodeProcess
GlobalFree
GetModuleHandleW
LoadLibraryExW
FreeLibrary
WritePrivateProfileStringW
GetPrivateProfileStringW
WideCharToMultiByte
lstrlenA
MulDiv
WriteFile
ReadFile
MultiByteToWideChar
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
DeleteFileW
lstrcpynA
GetAsyncKeyState
IsDlgButtonChecked
ScreenToClient
GetMessagePos
CallWindowProcW
IsWindowVisible
LoadBitmapW
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
TrackPopupMenu
GetWindowRect
AppendMenuW
CreatePopupMenu
GetSystemMetrics
EndDialog
EnableMenuItem
GetSystemMenu
SetClassLongW
IsWindowEnabled
SetWindowPos
DialogBoxParamW
CheckDlgButton
CreateWindowExW
SystemParametersInfoW
RegisterClassW
SetDlgItemTextW
GetDlgItemTextW
MessageBoxIndirectW
CharNextA
CharUpperW
CharPrevW
wvsprintfW
DispatchMessageW
PeekMessageW
wsprintfA
DestroyWindow
CreateDialogParamW
SetTimer
SetWindowTextW
PostQuitMessage
SetForegroundWindow
ShowWindow
wsprintfW
SendMessageTimeoutW
LoadCursorW
SetCursor
GetWindowLongW
GetSysColor
CharNextW
GetClassInfoW
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongW
LoadImageW
GetDC
EnableWindow
InvalidateRect
SendMessageW
DefWindowProcW
BeginPaint
GetClientRect
FillRect
DrawTextW
EndPaint
FindWindowExW
SetBkColor
GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectW
SetBkMode
SetTextColor
SelectObject
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
ShellExecuteW
SHFileOperationW
SHGetSpecialFolderLocation
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
ImageList_AddMasked
ImageList_Destroy
ord17
ImageList_Create
CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InternetOpenA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetCreateUrlA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
InternetGetCookieA
HttpOpenRequestA
InternetWriteFile
HttpSendRequestExA
HttpEndRequestA
InternetGetLastResponseInfoA
FtpSetCurrentDirectoryA
InternetQueryOptionA
FtpFindFirstFileA
FtpCommandA
InternetSetOptionA
InternetReadFile
InternetConnectA
bind
htons
socket
gethostname
send
connect
accept
listen
closesocket
recv
WSAGetLastError
gethostbyname
WSAStartup
PeekMessageA
TranslateMessage
DispatchMessageA
CharLowerA
MessageBoxA
OleRun
CoUninitialize
CoInitialize
CoCreateInstance
GetCommandLineA
lstrcmpiA
GetProcessHeap
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
GetCurrentDirectoryA
Sleep
lstrcpyA
lstrlenA
GetProcAddress
LoadLibraryA
GetModuleHandleA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
SetFileTime
lstrcatA
InterlockedDecrement
WriteFile
CreateThread
InterlockedIncrement
SetEndOfFile
GetFileSize
WideCharToMultiByte
MultiByteToWideChar
GetFileTime
CreateFileW
GetFileAttributesW
GetLastError
SetFileAttributesW
SetFilePointer
DeleteFileW
MoveFileW
SetLastError
GetExitCodeThread
TerminateThread
WaitForSingleObject
FreeLibrary
GetCurrentThreadId
CompareStringA
GetModuleFileNameA
CreateDirectoryW
ReadFile
SystemTimeToFileTime
GetTickCount
CreateMutexA
ReleaseMutex
CreateFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
VirtualAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FromCppDownload
Load
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
D:\SmartBar\DevelopmentTools\FF\FirefoxHandler\Release\FirefoxHandler.pdb
EnumProcessModules
GetModuleBaseNameW
GetModuleFileNameExW
EnumProcesses
CopyFileW
CreateFileW
GetFileSize
CloseHandle
GetDiskFreeSpaceExW
ReadFile
MultiByteToWideChar
WideCharToMultiByte
OpenProcess
DeleteFileW
TerminateProcess
Sleep
CreateProcessW
LoadLibraryA
GetProcAddress
GetVersionExW
GetTempPathW
lstrcpynW
GlobalAlloc
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcess
InterlockedCompareExchange
InterlockedExchange
DecodePointer
UnhandledExceptionFilter
EncodePointer
GetWindowThreadProcessId
FindWindowW
CharUpperW
wsprintfW
RegCloseKey
RegOpenKeyExW
DuplicateTokenEx
OpenProcessToken
RegQueryValueExW
PathFileExistsW
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
memset
memcpy
_CxxThrowException
__CxxFrameHandler3
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
memmove
_wfsopen
fwrite
fflush
fclose
??_V@YAXPAX@Z
fseek
ftell
rewind
fread
malloc
realloc
free
_wtoi
calloc
iswspace
_unlock
__dllonexit
_lock
_onexit
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
__CppXcptFilter
_crt_debugger_hook
DllIsFireFoxRunning
DllRestoreFF
DllTerminateFF
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_snprintf
swscanf
_snwprintf
rand
srand
time
_wcsicmp
??2@YAPAXI@Z
wcsncpy
??3@YAXPAX@Z
wcschr
_beginthreadex
memset
ord176
LeaveCriticalSection
lstrcpynW
GlobalFree
MultiByteToWideChar
EnterCriticalSection
GetProcAddress
GetSystemTime
SystemTimeToFileTime
InitializeCriticalSection
DeleteCriticalSection
GetCommandLineW
GetVersionExW
WaitForSingleObject
CloseHandle
Sleep
CreateEventW
GetTickCount
FreeLibrary
LoadLibraryW
GetModuleHandleW
TerminateThread
GlobalAlloc
MessageBoxA
LoadStringW
MessageBoxW
wsprintfW
MsgWaitForMultipleObjects
DispatchMessageW
PeekMessageW
ShellExecuteExW
SHFileOperationW
ShellExecuteW
CoInitialize
CoUninitialize
CoCreateInstance
SysFreeString
SysAllocString
VariantInit
VariantClear
DisableVerboseMode
Dummy
EnableVerboseMode
ExecShellAsUser
ExecShellWait
FormatStr
FormatStr2
FormatStr3
GetAllParameters
GetDays
GetHours
GetMinutes
GetParameter
InvokeShellVerb
Rand
RandList
RandMax
RandMinMax
RevStr
SHFileCopy
SHFileMove
ScanStr
ScanStr2
ScanStr3
Time
TrimStr
TrimStrLeft
TrimStrRight
WaitForProc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyW
lstrcpynW
GetProcAddress
WideCharToMultiByte
lstrcatW
lstrlenW
lstrcmpiW
LoadLibraryW
GetModuleHandleW
MultiByteToWideChar
VirtualAlloc
VirtualProtect
FreeLibrary
wsprintfW
CLSIDFromString
StringFromGUID2
Alloc
Call
Copy
Free
Get
Int64Op
Store
StrAlloc
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
MulDiv
GetModuleFileNameW
CreateThread
RaiseException
InterlockedCompareExchange
GetStartupInfoA
TerminateProcess
Sleep
HeapFree
lstrlenA
MultiByteToWideChar
GetLastError
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcessHeap
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
InterlockedExchange
ShowWindow
RegisterClassW
DispatchMessageW
TranslateMessage
GetWindowTextW
GetClientRect
DefWindowProcW
ReleaseDC
PostMessageW
GetDC
SetRect
LoadCursorW
GetMessageW
CreateWindowExW
GetDeviceCaps
CommandLineToArgvW
CLSIDFromString
OleSetContainedObject
OleCreate
OleInitialize
OleLockRunning
VarBstrCmp
VariantClear
SysAllocString
SysFreeString
exit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
?terminate@@YAXXZ
free
memmove_s
fclose
fseek
ftell
fread
_wfopen
rewind
_itoa
_wtoi
??_U@YAPAXI@Z
??2@YAPAXI@Z
_purecall
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
malloc
__CxxFrameHandler3
_CxxThrowException
_recalloc
memset
?_Tidy@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@IAEX_NI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?append@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV12@I_W@Z
?reserve@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
PathRemoveFileSpecW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW
InternetSetOptionW
InternetConnectW
InternetOpenW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
VirtualQuery
GetSystemTimeAsFileTime
ExitThread
GetCommandLineA
RaiseException
RtlUnwind
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
HeapCreate
HeapDestroy
VirtualFree
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
LCMapStringW
GetSystemInfo
LCMapStringA
GetFileAttributesA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
SetEnvironmentVariableA
CreateProcessA
CreateFileA
VirtualAlloc
VirtualProtect
GetFileType
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WritePrivateProfileStringW
GetFileTime
GetFileSizeEx
GlobalFlags
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
lstrcmpA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
InterlockedIncrement
GetFullPathNameW
GetVolumeInformationW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
GetThreadLocale
FormatMessageW
GetModuleFileNameW
SuspendThread
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
GetVersionExA
GetModuleHandleA
lstrcatW
lstrcmpiW
ReadFile
PeekNamedPipe
FlushFileBuffers
lstrlenW
DuplicateHandle
CreatePipe
GetModuleHandleW
lstrcpyW
SetLastError
lstrcpynW
ExpandEnvironmentStringsW
GetCurrentThreadId
FreeResource
GlobalAlloc
ResumeThread
GlobalFree
MulDiv
GlobalUnlock
GlobalLock
OpenEventW
WideCharToMultiByte
GetUserDefaultLangID
WaitForMultipleObjects
HeapFree
GetProcessHeap
HeapAlloc
FileTimeToSystemTime
GetFileAttributesW
GetCurrentDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetCurrentProcessId
GetWindowsDirectoryW
GetVersionExW
GetSystemTime
LocalAlloc
OpenProcess
Process32NextW
lstrcmpW
Process32FirstW
CreateToolhelp32Snapshot
LocalFree
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryW
CopyFileW
CreateDirectoryW
RemoveDirectoryW
FindNextFileW
DeleteFileW
SetFileAttributesW
TerminateThread
GetExitCodeThread
FindClose
FindFirstFileW
GetTickCount
ResetEvent
WriteFile
CreateFileW
SetEvent
CreateThread
CreateEventW
ReleaseMutex
CreateMutexW
WaitForSingleObject
CloseHandle
GetExitCodeProcess
Sleep
CreateProcessW
GetEnvironmentStringsW
WriteConsoleW
GetStdHandle
AllocConsole
GetTimeZoneInformation
GetLastError
InterlockedCompareExchange
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetNextDlgTabItem
GetFocus
GetParent
IsWindowEnabled
GetDlgCtrlID
SetWindowTextW
GetWindowLongW
IsDialogMessageW
SendDlgItemMessageW
GetWindow
FindWindowExW
LoadImageW
UnhookWindowsHookEx
CheckMenuItem
EnableMenuItem
GetMenuState
TranslateMessage
PeekMessageW
MessageBoxW
AllowSetForegroundWindow
SystemParametersInfoW
GetForegroundWindow
IsWindow
SetForegroundWindow
BringWindowToTop
SetActiveWindow
UpdateWindow
IsWindowVisible
EnableScrollBar
SetCursor
PtInRect
ScreenToClient
GetCursorPos
DrawIcon
GetSystemMetrics
IsIconic
AppendMenuW
GetSystemMenu
LoadCursorW
LoadIconW
CopyRect
GetSysColor
FillRect
InvalidateRect
ReleaseDC
GetDC
SetRect
MoveWindow
GetDesktopWindow
DialogBoxParamW
EndDialog
SetFocus
SendMessageW
GetTopWindow
GetLastActivePopup
RemovePropW
GetPropW
SetPropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
GetCapture
SetMenu
GetKeyState
MapWindowPoints
GetMessagePos
RegisterWindowMessageW
GetMessageTime
GetMessageW
PostThreadMessageW
wsprintfW
GetWindowThreadProcessId
EnumWindows
GetWindowTextW
ShowWindow
EnumChildWindows
WaitForInputIdle
SetWindowLongW
IsChild
WinHelpW
DispatchMessageW
AttachThreadInput
SetParent
GetClientRect
GetWindowRect
SetWindowPos
ClientToScreen
GetClassNameW
EnableWindow
PostMessageW
GetDlgItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ValidateRect
RegisterClipboardFormatW
MessageBeep
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
GetSysColorBrush
UnregisterClassW
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CharUpperW
DestroyMenu
SendDlgItemMessageA
CharNextW
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreateBitmap
GetStockObject
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetMapMode
GetRgnBox
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
GetObjectW
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
CreateSolidBrush
DeleteObject
DeleteDC
GetDeviceCaps
SelectObject
GetFileTitleW
OpenPrinterW
DocumentPropertiesW
ClosePrinter
SetTokenInformation
CryptSetHashParam
CryptAcquireContextW
CryptImportKey
CryptSetKeyParam
CryptEncrypt
CryptDecrypt
CryptDestroyKey
CryptReleaseContext
RegEnumKeyW
RegDeleteKeyW
RegQueryValueW
LookupAccountSidW
RegOpenKeyW
RegCreateKeyW
RegEnumValueW
RegEnumKeyExW
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation
CreateProcessAsUserW
GetLengthSid
CryptHashData
ConvertStringSidToSidW
DuplicateTokenEx
OpenProcessToken
GetUserNameW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptDestroyHash
CryptGetHashParam
CryptCreateHash
ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteExW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
PathAddExtensionW
PathAddBackslashW
ord2
ord176
OleUIBusyW
CoTaskMemAlloc
CoDisconnectObject
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRevokeClassObject
OleFlushClipboard
CoRegisterMessageFilter
OleUninitialize
CoTaskMemFree
OleInitialize
CoInitializeEx
CreateStreamOnHGlobal
OleRun
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
CoCreateInstance
CoSetProxyBlanket
OleIsCurrentClipboard
CoInitializeSecurity
LoadTypeLi
OleCreateFontIndirect
VariantCopy
SysAllocStringLen
VariantChangeType
GetErrorInfo
SafeArrayUnaccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
OleLoadPicture
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SysAllocString
VariantClear
VariantInit
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysFreeString
CryptQueryObject
CryptMsgGetParam
CertFindCertificateInStore
CertFreeCertificateContext
CertCloseStore
CryptMsgClose
CertGetNameStringW
CertOpenStore
CryptHashCertificate
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
HttpQueryInfoW
InternetCloseHandle
InternetOpenW
InternetSetOptionW
InternetConnectW
HttpOpenRequestW
InternetReadFile
FtpOpenFileW
InternetQueryOptionW
HttpEndRequestW
InternetCheckConnectionW
HttpSendRequestW
InternetCanonicalizeUrlA
InternetCanonicalizeUrlW
UuidToStringW
UuidCreate
HttpInitialize
HttpSetServiceConfiguration
HttpAddUrl
HttpReceiveHttpRequest
HttpSendHttpResponse
HttpReceiveRequestEntityBody
HttpRemoveUrl
HttpDeleteServiceConfiguration
HttpCreateHttpHandle
inet_addr
htons
LresultFromObject
CreateStdAccessibleObject
BuildClientXML
CallJSMethod
CallJSMethodWithParams
ContinueStart
CreateWebInstallerBrowser
DisableWindow
DownloadAndRunCustomOfferFiles
DownloadFileHttp
EnableCurrentWindow
EnableProxyConsoleLog
ExecKillProcess
ExecWait
GetBunndleParams
GetDONumAvailable
GetDONumToPresent
GetDOParam
GetDmFlowType
GetDoBroswerRestart
GetDynamicAttributesFromVector
GetDynamicHideModeState
GetDynamicIsExternal
GetDynamicOfferId
GetDynamicOffersCount
GetEngineDuration
GetGeneralParams
GetGlobalPageNavigationStatus
GetGlobalUIParams
GetInitToInitCompleteDuration
GetInstallOffersSync
GetIsSkipAllParams
GetLCONavigationStatus
GetMONonSIlentDownloadedFileName
GetMOPosition
GetMainOfferCMD
GetMainSoftwareInnerVersion
GetMainTotalSteps
GetMrsParams
GetNavigateError
GetNextAntiOfferId
GetOfferParam
GetOfferSuccessCodes
GetPixelFireNumUrls
GetPixelFireParams
GetPixelFireUrl
GetProductParams
GetPublisherReportingParams
GetShouldInstallOffer
GetSouldRunUninstaller
GetToolbarParams
GetUIParams
GetVectorAndRuleId
GetWelcomePageParams
Hide
HideBrowser
HmacEncryptQueryString
InitToInitComplete_MeasureAdd
InstallLCO
InstallManagerRetryMO
InstallNonSIlentMO
IsBrowserCompletedNavigation
LoadNavigate
Navigate
NavigateAsync
NavigateAsyncGlobal
NavigateAsyncMO
NotifyStubOnDMFinishInit
PhaseDuration_MeasureGet
PreInstallChecking
PreLoad
PrepareLCO
ReportBI_DownloadComplete
ReportBI_DownloadStart
ReportBI_EndOfSession
ReportBI_Init
ReportBI_InitComplete
ReportBI_InstallStatus
ReportBI_OfferPresented
ReportBI_OfferSuggested
ReportBI_Technical_GlobalPage
ReportBI_Technical_Language
ReportBI_Technical_RegistryCheckEnded
ReportBI_Technical_ReportToPublisher
ReportTechnicalFromNsis
RunNotification
SearchInFile
SearchInFileExtended
SearchInFileExtendedChrome
SearchInText
SearchNumberInText
SetBIAttempt
SetDOParam
SetDownloadBrowserForWelcomePage
SetDynamicParsedParamsInBI
SetOfferFlag
SetOfferParam
SetPhase
SetUserAgent
SetUserProfile
SetUserSelectedSkipAll
Show
ShowBrowser
ShowCertificate
ShowFileOnNonSilent
ShowLoadingScreen
ShowOffersOnSuccessScr
StartDM
StartOffersInstallation
StartOffersLoop
UnLoad1
UrlDecode
WaitAndInstallDynamics
WaitForAsyncExternalShowFinish
WaitForDocComplete
WaitForFinishModal
WebAppHostExec
WebAppHostExecProcess
WebAppHostExecProcessWait
WebAppHostExecWait
WebAppHostShowWelcomeScreenAndContinueRun
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ