revengerat | 5be84affded6a459de10d6490bc42f25_JaffaCakes118

resource	yara_rule
static1/unpack001/DataMaster REcolorado.exe	revengerat

resource
unpack001/$PLUGINSDIR/InstallOptions.dll
unpack001/$PLUGINSDIR/NSISdl.dll
unpack001/$PLUGINSDIR/Processes.dll
unpack001/$PLUGINSDIR/System.dll
unpack001/DMCustomControls.dll
unpack001/DMSharedClasses.dll
unpack001/DMStartupWizard.XmlSerializers.dll
unpack001/DMStartupWizard.dll
unpack001/DMUpdater.exe
unpack001/DataMaster Launcher.exe
unpack001/DataMaster REcolorado.XmlSerializers.dll
unpack001/DataMaster REcolorado.exe
unpack001/DataMasterAssociater.exe
unpack001/DataMasterDDE.exe
unpack001/DataMasterPlus.XmlSerializers.dll
unpack001/DataMasterPlus.dll
unpack001/DataMasterRestarter.exe
unpack001/ICSharpCode.SharpZipLib.dll
unpack001/Interop.DataMasterEServiceLib.dll
unpack001/MDS.AppraisalForms.dll
unpack001/MDS.Vendors.XmlSerializers.dll
unpack001/MDS.Vendors.dll
unpack001/NDde.dll
unpack001/RapidReadWrite32.exe
unpack001/ReportViewControls.XmlSerializers.dll
unpack001/ReportViewControls.dll
unpack001/System.Windows.Forms.DataVisualization.Design.dll
unpack001/System.Windows.Forms.DataVisualization.dll
unpack001/librets-dotnet.dll
unpack001/librets-pinvoke.dll

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

5be84affded6a459de10d6490bc42f25_JaffaCakes118

IMPHASH 099c0646ea7282d232219f8807883be0
SHA256 6579f8c3aec9717283fdb6367ec7b17f28858ae704605c76b14198d470bd82b9
MD5 5be84affded6a459de10d6490bc42f25
SHA1 c901557593506294588fe36e85fcb0de94b71778
SHA512 92b7b930aed7b6df7d71d76e404be566f0fccdf507f048cccebfc9d78a14e8086fc05900d88438bcb7527aec96651cbef1c8cec7cccfee71dd1cdbbb741d9ff1
SSDEEP 49152:IARVS4nHwHHzaG0fuEqhfzJ3LKjcniRSVSHo8Vnt9/URlWbEc+YV48GbjMQHaX82:IYPnQHTa3uJ3LKYvVSHoA9/WlWbEyC8X
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

NSIS installer

installer

Digest

73:ac:43:a2:af:b7:72:33:f6:a2:ad:a0:48:f2:a5:1e:cd:20:fb:be

Digest Algorithm

sha1

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=2053297-0160,CN=Market Data Service LLC,O=Market Data Service LLC,L=Layton,ST=Utah,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130455746168,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

May 9, 2017

SERIALNUMBER=2053297-0160,CN=Market Data Service LLC,O=Market Data Service LLC,L=Layton,ST=Utah,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130455746168,1.3.6.1.4.1.311.60.2.1.3=#13025553

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Minor OS version

0

Major OS version

4

Entry point

12860

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CompareFileTime SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA SetCurrentDirectoryA GetFileAttributesA GetLastError CreateDirectoryA SetFileAttributesA Sleep GetTickCount CreateFileA GetFileSize GetModuleFileNameA GetCurrentProcess CopyFileA ExitProcess SetFileTime GetTempPathA GetCommandLineA SetErrorMode LoadLibraryA lstrcpynA GetDiskFreeSpaceA GlobalUnlock GlobalLock CreateThread CreateProcessA RemoveDirectoryA GetTempFileNameA lstrlenA lstrcatA GetSystemDirectoryA GetVersion CloseHandle lstrcmpiA lstrcmpA ExpandEnvironmentStringsA GlobalFree GlobalAlloc WaitForSingleObject GetExitCodeProcess GetModuleHandleA LoadLibraryExA GetProcAddress FreeLibrary MultiByteToWideChar WritePrivateProfileStringA GetPrivateProfileStringA WriteFile ReadFile MulDiv SetFilePointer FindClose FindNextFileA FindFirstFileA DeleteFileA GetWindowsDirectoryA

user32

EndDialog ScreenToClient GetWindowRect EnableMenuItem GetSystemMenu SetClassLongA IsWindowEnabled SetWindowPos GetSysColor GetWindowLongA SetCursor LoadCursorA CheckDlgButton GetMessagePos LoadBitmapA CallWindowProcA IsWindowVisible CloseClipboard SetClipboardData EmptyClipboard RegisterClassA TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow wsprintfA SendMessageTimeoutA FindWindowExA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA CharNextA OpenClipboard ExitWindowsEx IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint ShowWindow

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectA SetBkMode SetTextColor SelectObject

shell32

SHGetPathFromIDListA SHBrowseForFolderA SHGetFileInfoA ShellExecuteA SHFileOperationA SHGetSpecialFolderLocation

advapi32

RegQueryValueExA RegSetValueExA RegEnumKeyA RegEnumValueA RegOpenKeyExA RegDeleteKeyA RegDeleteValueA RegCloseKey RegCreateKeyExA

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

$PLUGINSDIR/InstallOptions.dll

IMPHASH b1cd0d78f652ce5fc63f0879371af012
SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
MD5 325b008aec81e5aaa57096f05d4212b5
SHA1 27a2d89747a20305b6518438eff5b9f57f7df5c3
SHA512 18362b3aee529a27e85cc087627ecf6e2d21196d725f499c4a185cb3a380999f43ff1833a8ebec3f5ba1d3a113ef83185770e663854121f2d8b885790115afdf
SSDEEP 192:86d+dHXLHQOPiY53uiUdigyU+WsPdc/A1A+2jwK72dwF7dBEnbok:86UdHXcIiY535zBt2jw+BEnbo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10696

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

SetCurrentDirectoryA GetCurrentDirectoryA MultiByteToWideChar GetPrivateProfileIntA GlobalLock GetModuleHandleA lstrcmpiA GetPrivateProfileStringA lstrcatA lstrcpynA WritePrivateProfileStringA lstrlenA lstrcpyA GlobalFree GlobalUnlock GlobalAlloc

user32

MapWindowPoints GetDlgCtrlID CloseClipboard GetClipboardData OpenClipboard PtInRect SetWindowRgn LoadIconA LoadImageA SetWindowLongA CreateWindowExA MapDialogRect SetWindowPos GetWindowRect CreateDialogParamA ShowWindow EnableMenuItem GetSystemMenu EnableWindow GetDlgItem DestroyIcon DestroyWindow DispatchMessageA TranslateMessage GetMessageA IsDialogMessageA LoadCursorA SetCursor DrawTextA GetWindowLongA DrawFocusRect CallWindowProcA PostMessageA MessageBoxA CharNextA wsprintfA GetWindowTextA SetWindowTextA SendMessageA GetClientRect

gdi32

SetTextColor CreateCompatibleDC GetObjectA GetDIBits CreateRectRgn CombineRgn DeleteObject SelectObject

shell32

SHBrowseForFolderA SHGetDesktopFolder SHGetPathFromIDListA ShellExecuteA

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

ole32

CoTaskMemFree

$PLUGINSDIR/NSISdl.dll

IMPHASH 9cce555dd3ff1b6c7dc92d64c794c51a
SHA256 dacc88a12d3ba438fdae3535dc7a5a1d389bce13adc993706424874a782e51c9
MD5 a5f8399a743ab7f9c88c645c35b1ebb5
SHA1 168f3c158913b0367bf79fa413357fbe97018191
SHA512 824e567f5211bf09c7912537c7836d761b0934207612808e9a191f980375c6a97383dbc6b4a7121c6b5f508cbfd7542a781d6b6b196ca24841f73892eec5e977
SSDEEP 192:tUZTobBDJ68r67wmsvJI5ad9cXzFOVu+mZ/P3p+57CvpVqDxVp01Dwn2GRPgsfA:6Bo/680dCI5adOjFOg9//p27uNw2Go
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

8903

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/Processes.dll

IMPHASH eaa5f91829171a65db414b9e64ec9548
SHA256 3b5388e13dab53d53e08791f492ed7d3094a0cee51e9841af83ce02534e0621c
MD5 cc0bd4f5a79107633084471dbd4af796
SHA1 09dfcf182b1493161dec8044a5234c35ee24c43a
SHA512 67ba90ec04366e07d0922ffb4dbbb4f12f90b6785b87700adaae29327db9ec2a03d750b229f858db0594f439499d6346fbf1ebc17c77162bf8da027515219ee3
SSDEEP 768:WmswCIbuzwEmd7Fp4KpDAKngV9tV3rJy63JgaVwoz7si4uYqUYWu1gYwmj552RFB:WmswCIbuzwEy7n3YD3Jgw7shKrp55io
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

7219

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

LoadLibraryA GetProcAddress FreeLibrary OpenProcess CloseHandle TerminateProcess GlobalFree lstrcpyA FlushFileBuffers CreateFileA GetCurrentThreadId GetCommandLineA GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetModuleHandleW TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetLastError InterlockedDecrement HeapFree Sleep ExitProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate HeapDestroy VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WriteFile GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapAlloc VirtualAlloc HeapReAlloc InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA HeapSize

user32

GetDesktopWindow FindWindowA UpdateWindow wsprintfA

$PLUGINSDIR/System.dll

IMPHASH 2017f2acbdaa42ab3e4adeb8b4c37e7b
SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
MD5 c17103ae9072a06da581dec998343fc1
SHA1 b72148c6bdfaada8b8c3f950e610ee7cf1da1f8d
SHA512 d32a71aaef18e993f28096d536e41c4d016850721b31171513ce28bbd805a54fd290b7c3e9d935f72e676a1acfb4f0dcc89d95040a0dd29f2b6975855c18986f
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

10544

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

$PLUGINSDIR/ioSpecial.ini

SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
MD5 e2d5070bc28db1ac745613689ff86067
SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
MD5 SHA1 SHA512

NSIS installer

installer

$PLUGINSDIR/modern-header.bmp

SHA256 8e2d7019ef936ba3fde2533652ab337702c9fadf31ff18a3474a9f36c1da0eb9
MD5 4f3eea23adc64d3da9f172927c0b6d51
SHA1 811a33895d0d02449f8df9454948f0c70923c644
SHA512 743e5a3032f35abf7729c9347cb82856398539dbc11fda7a34df4c66ac0928c94cef6b27d93b4cc17aaae944b05851648418362a4a18922dff2e97622aeef523
SSDEEP 192:rje2jFqcy5XPmLtlNuoXP0vp/Mm0YLCm/8Ejvj:2a0cypmJspEzQLUEbj
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

$PLUGINSDIR/modern-wizard.bmp

SHA256 a09390a6b33986dd8edc3e0cfbf53ed58eebf6215be702da17673f5fb57d9d95
MD5 90892be20c40c57d0c30aa71cba53c5f
SHA1 98e239c8858f46554f7667f1cf344c7b1f7ad445
SHA512 1c8d69f56efa7adf12ebe97a9a5fccc80046b832f5faa5605a8b0a2909b7e93c1da55809456edecc8745bb133bc833bbeec9228d8c8ea6b034d32fd1ccd74793
SSDEEP 384:tIRRsRRTRRR+RRRHRRRzRRJRRR8RRRARRRCRRDRR1RRR7RRRURRRqRRKRRRjRRRf:QEpRlO/I2YT0waawR
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

DMCustomControls.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 d506b8d06905c601e57bad032d0dfbe4eaf915ac5bbeb8c86b5c9cf6a7b0c44c
MD5 f1821b5cb5e61a819ba6bbe7825a22a4
SHA1 d30bb1676076254a0d48f9eb55f4fa1bdc804636
SHA512 389c9b60a08361e942fa9c217c69c1e5183cf1d651cadcd85696d97ac63c7ef17a8bb50eca525256d4c189ea5fb3c8fbbd36bf8bc955be0a2348e6ac1e7e7867
SSDEEP 1536:9SXKwgV2WaY+4j6CYPGYV4SZZ6Msu9fqe3s3qD52d:9SXKwO2WDj6C9YV3uKfhs
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

71262

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DMSharedClasses.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 65ff876ec36036d771120ff9f8cd5899e5eff32518c1fdb49dc288ea3d61276f
MD5 bd911e6679e23c391a05d789317e6095
SHA1 8d92066b0a3f166712e1831e4f23ba785bd9d498
SHA512 c0cd08d30ffc5d2b603024a84edffee84d07c771badd66390560e9d7a0504e61c1905bfa839addc21e17c14db935a89471e367258257fcad9102d40c1330d4e2
SSDEEP 1536:Bm9fs+I6dH5DTNA2FFQRus7Zpe+P4u5m:BilI6dH5DW2pslhm
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

52206

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DMStartupWizard.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 010a25c647ee6fb61a258689c7028d68b1a5d2e2083055e8abf7c93b7eb736e4
MD5 d67c4e1224cd57f1b77720e73e3f6cbb
SHA1 c0c1dd2281014525a41df8a2adcbf4c9b67b34c5
SHA512 255b1e1f9b638bb6a71d9fd494a59aeb6f9dcd5972870e3c7cf040c1da5c66668fdffe0b66bd93cb05e645a67b5d6ef035a5b5601dfd635424562933d33d81df
SSDEEP 768:+E9kv9kj9EwOZ/Wy7bjjjjjjjjjjjjjjjaofrDQGS27fCXgYPe47G1EECRh8wjH5:+/wGjjjjjjjjjjjjjjjauYPe47G1EEC1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

40622

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DMStartupWizard.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 70c70e21df6e92f156e61c6056e91df9bbc1dad82a04461a8c0b64f299aa3f3b
MD5 445a6d2c117f3cb7e19aaa2099f9fd1b
SHA1 b54bdc47a3c520ecf1a3b7d3b6762e43adb110e5
SHA512 3b95cea3791ea29e14ddd33b082eefb5a34009c90aa7f58fd5ba582e740780b9ae7cb52450fbd47cc106af011ab66223bc7990cb5350fd24fb5c406f2bd42042
SSDEEP 3072:1vBhvBjvBzbDynVr0820q+8G9US77nL7H7V0/LekGpwF92vBwZX6JPD+PjVM5KQ6:LPtzb2RrDjUwjnZie5GswZq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

376126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DMUpdater.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c3edc09dce874bc8614bcf7ba12a28c2697a0b2c72b352260f3eed50f1803503
MD5 745092d6a4bce581417f795d07a27472
SHA1 49a62f00032b7cb0aca20cd798b70f022e8004ed
SHA512 561faa146447c2bb01cee6edbdb9f4651c4136f87114ef1edd72f1660a65d9740c511788a53844354a07c0ef9ece3b0f5bafe4bde3a742d9decc2b898b1ae7d6
SSDEEP 768:2JVDjSa2cr7NkwVqKira6h3PmOQQ7jSa2cr7NkwVqKira6:2vGa2ceXpzFuOQQ7Ga2ceXpz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

53038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DataMaster Launcher.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 833aed1e41c3440ca0752f7ed5409f28bbc8811d263c466b6b73877661f3e31d
MD5 a6fdd40f6ea54c4d908a39e280581ed6
SHA1 4747af60ca59ae9a0eb2c34ad1b4d12a1c680236
SHA512 fb7fa74266b01e45d477e565c59177811c535a08041aab0bcff6d0f8d8e09ae312d603fd5f01b4e35bfd4bb1188cdc3ce780b5fa9e623923679f029e0cd6d218
SSDEEP 768:8JjSa2cr7NkwVqKira6Fp3ASd5jSa2cr7NkwVqKira6:mGa2ceXpzMSd5Ga2ceXpz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

53214

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DataMaster REcolorado.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 8b9d43828cf84bcbf91f960b174aebd059114646e57488ec4ca0969392a6c719
MD5 a188d2e921707a79af4be82f5cf4253f
SHA1 e0db54ed8d11adee65cd898393718ede4572e178
SHA512 e9e9a597fca50fa4dbb74c2ce22be89ecccf0944e1d0ef508cc75c19d6e3fea23c64bbe45aa32017189087c22201e0a4c7dbd99d171e40627ff2447b9648108c
SSDEEP 192:hyG8aFPTIQgnoh2AmgSvO9KYJ61WuCRFpjN4i4udP4MH:EaFjh27O9KYJwWHFpG1udQ
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

21470

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DataMaster REcolorado.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 41fb79f237de3beb6594e47d665bfae91bfa69f3658236f21c07c114b5283f13
MD5 7dc093529330539beccee3b63154f8a0
SHA1 4c6216cb29978f6de490f8225d1aebc7e28e269f
SHA512 f7327e0c9c2b4607f9b473963542d26717d0b1cf03ea937d10561a7b0387d620f7342f63e6d198b9fb3272b71d00aa754a0b3589dad25dbe4b3c34df0a8821ad
SSDEEP 12288:QKdef19LY2DqrUsGXxuA1YSjqiFS+9D0C/OD32kFnYHrwG91SpoD0THE0T99DKJ9:u19LYhgcpoMRAmhWjBrm3XCHniwtP
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

RevengeRat Executable

stealer
Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

3039230

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DataMaster REcolorado.exe.config

SHA256 f41e5f3d5900c702a7b6d869c809a613e1d5003c53ff7de079fea06d48b0124c
MD5 61bf4216795e762bf0b360f46dc95075
SHA1 3ae754211c5651282d7a1734991b5576834dab49
SHA512 76a9c43db8d10d8329eb35c3f05b32c63a392649db206108be664ccaa6c66e34fde4935b48e52b0fe9aec53d3a8d5aaad619875174a43adf4497de5bdd41c684
SSDEEP 48:3oeNKpNJiU3tGEc4qNgKw7mm9QK33DdqyYrqybQK33D0e3+vA7Mtz9IbNkFwkKiI:YecSKhBuw71vjIyY2ybvj0vNhIiNZLrw
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

DataMasterAssociater.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 5d7d123530ff92de959af7b79a8547486169e356e24b83775aaade2d0c991dd7
MD5 33dafe5b1bc50ffa872c707f0bd603e4
SHA1 6648616cfa7785206d5283602ae08054d36a5714
SHA512 745f5b191f98fd50504260be2053afcea3e0f428e932562ee0bbb761473f227d209ea3199b63357c1c9fc67acfdf6baf522e284d4650ec252c323a6e314bf4c5
SSDEEP 768:mflfmv1jSa2cr7NkwVqKira6Gqvg3roDxXWLAbJwTCLvjSa2cr7NkwVqKira6:ma1Ga2ceXpzGqtDVCAKUvGa2ceXpz
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

61790

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DataMasterDDE.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 c2ccc4b59aa95619f4ae4b8096e6f29788ed9b3b0ce2aa03398f368f72265fec
MD5 98a570f6e1c079ec2397ddb564ec4525
SHA1 2ed2af84109eb7074831b1a6c256e57e50de4bf9
SHA512 798ea47b04cd6a11c4f25d752c95d64931b195a8b3313b27603f1d76bdec0c324419aeaba6e8f3be3f84a5e3aceb9c4ec684ae48570ca3f695739f636fc4615d
SSDEEP 384:DGh4oUj2kpIZNM4w9u46m2hq2IinKvRvGuRgP2crsW9NW7QhVqKmdDfokgKbuikw:DFoCpICuw2bnjSa2cr7NkwVqKira6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

17646

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DataMasterPlus.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 f671c5101ee412408df19915fd0108e0b4a18794ec2acb033f66f110e99c166a
MD5 f84d6f5da6c3b0f1b3cdfaf9deff30d9
SHA1 e3b77278aae49df7c3db9506532fa34eed7145a3
SHA512 ff79fb1dc811ef2f4e11d03123ed7ea859e9b733d3ab56767444883f698edb994684e9ed29731f5d083c05680284d0ccf91f1ea40d466a3971df12ae13b7beb7
SSDEEP 1536:u19vB9J6V0/BuOK5fDYQ4kffLz4MG1EErXv0W7yZyoFJ/2SR5PT7DeOqeO2brIbN:u19vBE0/BK5fDYQ4kffLz4MG1EErXv0y
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

84222

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DataMasterPlus.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 145448737a248081439131a663511a0536a882152ebf057bc0ad06af044eaede
MD5 94719118bddae1359d1cb330596af017
SHA1 995e3f03626ccdd847b8c9416380f13f692b01b0
SHA512 8ed7e3e3bb81a75c4432f65f9b93a1a09097cf93e54c4ca7a94babb55d31536604e1379efc2f45acb49306bc2d7ecab79f0ef037ad1d4dd154b4afc45b349f9e
SSDEEP 12288:/1hbRCLlwRrw8m86nfQiqCwsTh+2Wo/IeN1EXkJePmKoMsz0tjAm:/1IhqC3vBRZJWmOR
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1168542

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

DataMasterRestarter.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 59bc31bc07bb0d14ccd6e39eaef96c351fbc9c656291577315ce5c666ea6fbb7
MD5 534ae7810dec475777c7b98f1353708a
SHA1 a8da12192c11e714f92bc55beaf3cd53f75957ca
SHA512 a5dc2a5837975bcd01c208a570aba2f220431cadf0962899730d6954ea34bbdb27aff93b24a05e7b9376a23a020c4f0a1d1aab55b018db0a9850a3f05691d609
SSDEEP 384:eUzyC+77ZKw9p+8apWMyBG7fWRh1x20IpKvRvGuRgP2crsW9NW7QhVqKmdDfokgQ:eUzyCg7XpapjSa2cr7NkwVqKira6
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

15118

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

ICSharpCode.SharpZipLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 40b3d590f95191f3e33e5d00e534fa40f823d9b1bb2a9afe05f139c4e0a3af8d
MD5 c8164876b6f66616d68387443621510c
SHA1 7a9df9c25d49690b6a3c451607d311a866b131f4
SHA512 44a6accc70c312a16d0e533d3287e380997c5e5d610dbeaa14b2dbb5567f2c41253b895c9817ecd96c85d286795bbe6ab35fd2352fddd9d191669a2fb0774bc4
SSDEEP 3072:hjMibqfQqFyGCDXiW9Pp/+Tl4abpuu201PB1BBXIDwtqSPVINrAfvp1:GibqI59PpOPf201/z7p
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

196446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Interop.DataMasterEServiceLib.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 52666115f7f5b12f7923a0e57b76ca48a19305d8336c2dee502c378343965ded
MD5 53ce67aa82c5bb521f50e3ba927d6c3f
SHA1 e04660c578f9e1f5f0b3edbfbb6b29ec33fe53c7
SHA512 72b23b48e0bb035021aa291856410e5764b84a8f5ada270845cb7dfd1f21111817fba9666a5d8ebce3cb4d275cd7bb86063544d5ec234027d9a742e508d56f57
SSDEEP 96:pYoC2Bnp4Vw3Ad5+yUzN1yc6Gtw32JPgoUq5pu00+k:pq2Bnp4V6XFPyzAT+Z
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

11198

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MDS.AppraisalForms.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9e0fcefdb50a76541c96670989a46e1ad93de1237b32b1e5b419c78ff532d8ec
MD5 b1006ddcbc8930c5f95bd9773cc42735
SHA1 5512a674512271a589fa934ddd70dc6f500301f9
SHA512 41760aff278efaca2ce89e3101378d44b69fbe55c31a4679c2c485aff7ada33af5dad6e47493f28a52844265fe9a09cc6b9175084f6e9dc606768e0b49a2951b
SSDEEP 24576:F78F5TbFvEFu4vUX4t5hFB5gwYw0niFI1bk7wvkBbA4:FVD
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

2466606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MDS.Vendors.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 660e62183be513c3af1be8f8770115b6852b1d1966fe6f7f931311eb41bdd04e
MD5 f71d8cb5687255039cb9d45294cd062a
SHA1 76c7b2cf05042ba5166d253c7ffa8b2728a94544
SHA512 391379daebf4780e3ff908c0cb0af5c8b6d774c45a170a151c1c816d388cdb43ae41f170bf42d349a16ab7538fa47cad85bd11457f8eae06c18f945a3a3df5ab
SSDEEP 192:zpF/pFeEM3alh+VVKRa4R3AmnoNCZ/FvCQcuPyx3Mi4jqKHONVE9END:zpF/pFeEMxVSaY3Qrx3V4jq0ONu9El
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

28702

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MDS.Vendors.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 2eba9c97251bbc3a3cb2f4c8b54f7d5668f68129644fa7ccc18bd1e9dae54604
MD5 3e0722235f4c12f15cea7b194944fd87
SHA1 edfbc2c02f96c45b207756acdf89dc0179874bbf
SHA512 81f273b4c538c9cea18bfc33f2cd449d1f1d053d11193631047c4bc9cf0b65ca98140487f36f9ff0760ef64bfe196110a79a66f40dfeecbdb5b0b0e54dd5f651
SSDEEP 3072:Y5fNmviVExtCRfW+drD3BigX4hlVoxs1vBZvBZvBfgCmMROZGe6Yr/3TjL:+NmviVE133fgCmMROZGe6Yr
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

194446

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

MapDefinition.datamasterusa

SHA256 b465bdd733eba7032dd0ab0529e0e28edabbd3a1e3ed7863b57855097899865b
MD5 453bca165d461430c9733e60d0b3cfc0
SHA1 1329e738b0c9fdbb887eebe60c4f9a38dc89ef1d
SHA512 e223e87d50bbf6cc54e0f507b3f541fd2975451c36171ed3cedc2a358a0fbd555ff2166a04b3556cc4450f4f2c70ddec8ba9c98059b478066adf52b2d87b4d97
SSDEEP 49152:zXuDgLcsHFDCvLyViAd8Puo+0xfaVYadUuRD1YthAO7bmb59ObbmdbyXLldl611x:T
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

NDde.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 98ef49a6ed42c420d8d2c93da0bcb1decc91cd0ed83a7ad3595f353be03e1491
MD5 c1c7beb5231bb058c1a669a05b8701ca
SHA1 38ed866828314ad9df5ce325b65bbfffe0841bde
SHA512 b48dfef6323f5538807cec4623188298b50cdb5c0bdb911f41726455d22f73d33260677d30ddbedeea441631889db48d6b04856eeb18f4e57922ec790ff4b856
SSDEEP 1536:dkV353mDlt18cfmtKRCZzlGcCZn+P+9Lo4cr4nviuCKMjq259mS8OhCC6Biri7UI:dkVJ/HNYLo4bnvBrbMQOUdyaUI
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

106302

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

C:\Documents and Settings\bgideon\My Documents\Visual Studio 2005\Projects\NDde\Source\NDde\obj\Release\NDde.pdb

RapidReadWrite32.exe

SHA256 09f4ba1aef051649c0e01a7986a266a2e37eadf3617c660f8c12f5bcee83b8d2
MD5 8dcf986bc1f84ebb9327fff88c95c03a
SHA1 9e3b3c1ef3311ec439e5b031400d367c49308a94
SHA512 1960d60e4eab4dc79d2dba07b84af15745fa723fd7cd10d4f9e2ff9b85391501d58fdbf41ee25d9dab00bcfb2666f1b65f23b5ca7919ae6418fa445bb2e36a31
SSDEEP 6144:5ggvmMvY1YGyfFd8JMHy8pgj/S3K0iaHEdBCPweLDpxtmMTlKA8:heYYaHsJSUQKdaE0phKX
MD5 SHA1 SHA512 SSDEEP

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

1

Entry point

330160

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

Name

CODE

Size

319KB

Virtual Size

318KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

DATA

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

BSS

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

16B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

43KB

Virtual Size

43KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

ReportViewControls.XmlSerializers.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 4e5bc910cb0b5b4b75d11ecec211453b476bfba8ec4678f507aff0a3c5ae82d0
MD5 5a3fb2168a4722d261197597ea7b3bfd
SHA1 2a5b2cd84b354434af17dc1d53332e880dd91a19
SHA512 9c349f729133303b8832a51859f68c12b5e3d99e577a04e37542a8301c4955025240c0e79406757494721866e5171d729958d4469755c156bc80928a467a65e7
SSDEEP 768:ApuczYS40N0N0N0N0N0N0N8C619OB4pGRj:Brb0N0N0N0N0N0N0N8C619OB4Y5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

27038

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ReportViewControls.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 c334da09ab75d131ece7c1115880eef21e86357d79b4ce9c107de3f15a772fef
MD5 2d1c67c508014ea579b33cfa94a29c4f
SHA1 3b0a3090121ac92d0513a42e9b0a4161617a3141
SHA512 9d83a8bca1f4f47cb87f614a134567c43dd4c39cad6df780fa25e6245480d3097ab3b08776f889cb0d4046f1e717a520ae1183373710784e31e294d97c6876a0
SSDEEP 24576:5Z8ECKo9Fy1e1fteu+4FqdLZHSWvHWT5t:5ONmAJt3+9XHJ2T5
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1838990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.DataVisualization.Design.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 49248d90a581d2e9933b1013b7f2aef8346f6da297851c9215ac45f8fe9fd857
MD5 f9ce119437c7c56eda862b412f5b7dfd
SHA1 092dfc99d44b3d1ff9ef2af7e2a80b7941ff0131
SHA512 c8ba2f65c040946c26657d4e939ff2b069b806c6adde938a1b5971432df6b3796abb23c1bf9722b1e1483480fa488a42642b71c1e71d909a57d134088eabf620
SSDEEP 1536:s6+t3o7NYSEbkRHgNl+Rny/Ze8pRGonffn469DGG41F5rGMg:s6Go7NYSEbkRHgNl+Rny/Ze8j4+DGTo
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

66350

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.DataVisualization.Design.pdb

System.Windows.Forms.DataVisualization.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 9d193f4ac582a024e9c8a386717944e82d281e30b30bd1b3b4d015dcb52a5d56
MD5 4eb366f068876656057fccb2b5360fdb
SHA1 5ca25be2e5fd5205971c931c30ee52bd1855ed05
SHA512 177a0c7f8ac5526ca8622447816412a91c2ff1c6933b6f67bfe3bae4aa9cafd81b787bbc8df106ae96167f1e6f1cdf63ab7b3ed81f9a1370f23af05259abe7dc
SSDEEP 24576:hgJeIVaLNvHf+ccC4yVvgZS2ZEzDZ9G6iE1qNO+H:RIDfizDZ9G6iE1
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

1744990

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

System.Windows.Forms.DataVisualization.pdb

Uninstall DataMaster REcolorado.exe.nsis

SHA256 6890bdcb74a904ea48f8eecbfc7c8ab109ee1d9840e0a8e6ad472aa222f7046b
MD5 ffc8f0050889cad88c01a7e78ee24f9c
SHA1 9a8c8243a8919300ba3ffeab5605ad4ecbe4611a
SHA512 12b07f7667de4537ff8e86ecd2ff0bcd355e0ec53e63e1c81944900d12d5c6b8cede40c3bea40b3430b4f6c9ebd6c5c1a530b9f869ba0d559d8830e5cd931a71
SSDEEP 768:0GfexgRfaKOkr4WI+V+/tNIYyh8cMIrDq21oIu9EGBij7qw:00exWr4WBVSWZpiEV7l
MD5 SHA1 SHA512 SSDEEP

NSIS installer

installer

librets-dotnet.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 57100b335a489e3cbed119c9deef9684f0da3c0a336c119e99de19038ab33570
MD5 d2adf83fe22d6dff4e8014eb1487c64f
SHA1 82c70bc12bf0d0d7f8dac905dbc2bd5c89ddfafa
SHA512 2470be289f314dab241f30c43b9b2305581d50c71610e30c1efd0ffefa8cc5ec89d3bcda6bc66281e9645e6a53a37e95a591890dd26febd625d421e8375ac2d4
SSDEEP 3072:6sdaYi3pGTiPfXHjNwaSRN6FyhFiZx5HXkjorHCDxF7:RS5ISfTlwF
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

4

Entry point

197086

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

librets-pinvoke.dll

IMPHASH 13ab2c1c2dee8f819217b0f9ae3ab09d
SHA256 94ab9bc5106c31f502917f281ee631667d7a4fd1a18a38f829876cb99ecf874d
MD5 593ba6e9a63a825152af4920d48ec092
SHA1 fa6f9e4136d03ffdca77e3aa7c22bb8b248f54c9
SHA512 23701bd1ff206d7653452977e3d90e07c4de29f6217933f656328763c382cb97b098793c581cb4d9a9edc3e5bb57960aa7ec4aa08ad4e1b4b3e3a6bba5cac134
SSDEEP 49152:viayfusofQwPYlhaBiamc0sdVpbaQxn4N7:ByvofFPXJ
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

0

Major OS version

5

Entry point

1266431

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ws2_32

accept listen __WSAFDIsSet gethostname ioctlsocket shutdown recvfrom sendto WSASetLastError gethostbyname socket connect setsockopt getsockopt htons bind ntohs getsockname send recv WSAGetLastError closesocket WSAStartup WSACleanup select

wldap32

ord46 ord41 ord27 ord301 ord33 ord200 ord22 ord211 ord143 ord60 ord50 ord26 ord30 ord32 ord35 ord79

gdi32

CreateDCA GetDeviceCaps CreateCompatibleBitmap SelectObject GetObjectA BitBlt GetBitmapBits DeleteObject DeleteDC CreateCompatibleDC

user32

GetUserObjectInformationW GetProcessWindowStation MessageBoxA GetDesktopWindow

advapi32

DeregisterEventSource ReportEventA RegisterEventSourceA

msvcp90

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_N@Z ?_Decref@facet@locale@std@@QAEPAV123@XZ ?resize@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z ??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??0?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?_Lock@_Mutex@std@@QAEXXZ ?_Unlock@_Mutex@std@@QAEXXZ ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?uncaught_exception@std@@YA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ?_Incref@facet@locale@std@@QAEXXZ ??1locale@std@@QAE@XZ ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z ?_Id_cnt@id@locale@std@@0HA ??1_Lockit@std@@QAE@XZ ?id@?$ctype@D@std@@2V0locale@2@A ??0_Lockit@std@@QAE@H@Z ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?toupper@?$ctype@D@std@@QBEDD@Z ??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0@Z ?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z ?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z ??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z ??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ ?_Init@locale@std@@CAPAV_Locimp@12@XZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z ?destroy@?$allocator@D@std@@QAEXPAD@Z ?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?deallocate@?$allocator@D@std@@QAEXPADI@Z ?construct@?$allocator@D@std@@QAEXPADABD@Z ?allocate@?$allocator@D@std@@QAEPADI@Z ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@0ABV12@@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z ??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ?_Getcat@?$numpunct@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z ?id@?$numpunct@D@std@@2V0locale@2@A ?thousands_sep@?$numpunct@D@std@@QBEDXZ ?grouping@?$numpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ ?_Xran@_String_base@std@@SAXXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ ?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?underflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z ?_Xsgetn_s@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADIH@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z ?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@JHH@Z ?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z ??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z ??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPADII@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z ?tolower@?$ctype@D@std@@QBEDD@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@V?$_String_const_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@1@0@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z ?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@II@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z ??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ ??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@ ?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z ?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ ?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ID@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ?str@?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z ??0?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z ?length@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ ??_7ios_base@std@@6B@

msvcr90

_stricmp _strdup _close _open _read ??0exception@std@@QAE@ABQBD@Z ?what@exception@std@@UBEPBDXZ ??1exception@std@@UAE@XZ ??3@YAXPAX@Z ??0exception@std@@QAE@XZ __CxxFrameHandler3 _purecall ??2@YAPAXI@Z __RTDynamicCast _invalid_parameter_noinfo _CxxThrowException ??0exception@std@@QAE@ABV01@@Z memmove_s ??8type_info@@QBE_NABV0@@Z __RTtypeid ??0bad_cast@std@@QAE@PBD@Z ??1bad_cast@std@@UAE@XZ ??0bad_cast@std@@QAE@ABV01@@Z memcpy ??_V@YAXPAX@Z tolower _wassert isspace _ctime64 _time64 strerror memmove memset free realloc malloc sprintf isprint sscanf _errno calloc strncpy strrchr __sys_nerr strchr fwrite fread __iob_func strtoul strstr atoi isxdigit fseek isdigit _strtoi64 memchr strncmp fclose fgets fopen fputs strtol fputc _beginthreadex fflush _gmtime64 _fstat64 _lseeki64 getenv isalnum isalpha _stat64 _stat64i32 qsort wcsstr _vsnprintf vfprintf abort strcmp ferror _setmode _fileno ftell feof fprintf isupper signal _getch _encode_pointer _malloc_crt _encoded_null _decode_pointer _initterm _initterm_e _amsg_exit _adjust_fdiv __CppXcptFilter _unlock __dllonexit _lock _onexit ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook __clean_type_info_names_internal _except_handler4_common _strnicmp

kernel32

FlushConsoleInputBuffer GetCurrentThreadId GetVersionExA GlobalMemoryStatus GetCurrentProcessId GetVersion QueryPerformanceCounter ExpandEnvironmentStringsA Sleep LoadLibraryA InterlockedExchange InterlockedCompareExchange GetStdHandle GetFileType PeekNamedPipe ReadFile GetTickCount TerminateThread GetExitCodeThread CreateMutexA CreateEventA WaitForMultipleObjects SetEvent ReleaseMutex WaitForSingleObject TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent DisableThreadLibraryCalls GetSystemTimeAsFileTime SetLastError GetProcAddress GetLastError GetCurrentProcess DuplicateHandle CloseHandle SleepEx FormatMessageA FreeLibrary LocalFree

_CSharp_BinaryData_AsChar@4 _CSharp_BinaryData_AsString@4 _CSharp_BinaryData_Copy@12 _CSharp_BinaryData_Size@4 _CSharp_ByteVector_Add@8 _CSharp_ByteVector_AddRange@8 _CSharp_ByteVector_Clear@4 _CSharp_ByteVector_Contains@8 _CSharp_ByteVector_GetRange@12 _CSharp_ByteVector_IndexOf@8 _CSharp_ByteVector_Insert@12 _CSharp_ByteVector_InsertRange@12 _CSharp_ByteVector_LastIndexOf@8 _CSharp_ByteVector_Remove@8 _CSharp_ByteVector_RemoveAt@8 _CSharp_ByteVector_RemoveRange@12 _CSharp_ByteVector_Repeat@8 _CSharp_ByteVector_Reverse__SWIG_0@4 _CSharp_ByteVector_Reverse__SWIG_1@12 _CSharp_ByteVector_SetRange@12 _CSharp_ByteVector_capacity@4 _CSharp_ByteVector_getitem@8 _CSharp_ByteVector_getitemcopy@8 _CSharp_ByteVector_reserve@8 _CSharp_ByteVector_setitem@12 _CSharp_ByteVector_size@4 _CSharp_CapabilityUrls_GetActionUrl@4 _CSharp_CapabilityUrls_GetChangePasswordUrl@4 _CSharp_CapabilityUrls_GetGetMetadataUrl@4 _CSharp_CapabilityUrls_GetGetObjectUrl@4 _CSharp_CapabilityUrls_GetLoginCompleteUrl@4 _CSharp_CapabilityUrls_GetLoginUrl@4 _CSharp_CapabilityUrls_GetLogoutUrl@4 _CSharp_CapabilityUrls_GetSearchUrl@4 _CSharp_CapabilityUrls_GetServerInformationUrl@4 _CSharp_CapabilityUrls_GetUpdateUrl@4 _CSharp_CapabilityUrls_SetActionUrl@8 _CSharp_CapabilityUrls_SetChangePasswordUrl@8 _CSharp_CapabilityUrls_SetGetMetadataUrl@8 _CSharp_CapabilityUrls_SetGetObjectUrl@8 _CSharp_CapabilityUrls_SetLoginCompleteUrl@8 _CSharp_CapabilityUrls_SetLoginUrl@8 _CSharp_CapabilityUrls_SetLogoutUrl@8 _CSharp_CapabilityUrls_SetSearchUrl@8 _CSharp_CapabilityUrls_SetServerInformationUrl@8 _CSharp_CapabilityUrls_SetUpdateUrl@8 _CSharp_DmqlCriterionPtr_ToDmql@8 _CSharp_DmqlCriterionPtr_ToDmqlString@4 _CSharp_DmqlCriterionPtr___deref__@4 _CSharp_DmqlCriterionPtr_reset@8 _CSharp_DmqlCriterion_ToDmql@8 _CSharp_DmqlCriterion_ToDmqlString@4 _CSharp_DmqlQueryPtr_AddField@8 _CSharp_DmqlQueryPtr_GetClass@4 _CSharp_DmqlQueryPtr_GetCountType@4 _CSharp_DmqlQueryPtr_GetCriterion@4 _CSharp_DmqlQueryPtr_GetCriterionPtr@4 _CSharp_DmqlQueryPtr_GetFields@4 _CSharp_DmqlQueryPtr_GetFieldsPtr@4 _CSharp_DmqlQueryPtr_GetLimit@4 _CSharp_DmqlQueryPtr_GetOffset@4 _CSharp_DmqlQueryPtr_GetResource@4 _CSharp_DmqlQueryPtr_Print@8 _CSharp_DmqlQueryPtr_SetClass@8 _CSharp_DmqlQueryPtr_SetCountType@8 _CSharp_DmqlQueryPtr_SetCriterion@8 _CSharp_DmqlQueryPtr_SetLimit@8 _CSharp_DmqlQueryPtr_SetOffset@8 _CSharp_DmqlQueryPtr_SetResource@8 _CSharp_DmqlQueryPtr___deref__@4 _CSharp_DmqlQueryPtr_reset@8 _CSharp_DmqlQuery_AddField@8 _CSharp_DmqlQuery_GetClass@4 _CSharp_DmqlQuery_GetCountType@4 _CSharp_DmqlQuery_GetCriterion@4 _CSharp_DmqlQuery_GetCriterionPtr@4 _CSharp_DmqlQuery_GetFields@4 _CSharp_DmqlQuery_GetFieldsPtr@4 _CSharp_DmqlQuery_GetLimit@4 _CSharp_DmqlQuery_GetOffset@4 _CSharp_DmqlQuery_GetResource@4 _CSharp_DmqlQuery_Print@8 _CSharp_DmqlQuery_SetClass@8 _CSharp_DmqlQuery_SetCountType@8 _CSharp_DmqlQuery_SetCriterion@8 _CSharp_DmqlQuery_SetLimit@8 _CSharp_DmqlQuery_SetOffset@8 _CSharp_DmqlQuery_SetResource@8 _CSharp_GetObjectQueryPtr___deref__@4 _CSharp_GetObjectQueryPtr_reset@8 _CSharp_GetObjectRequest_AUDIO_TYPE_get@0 _CSharp_GetObjectRequest_AddAllObjects@8 _CSharp_GetObjectRequest_AddObject@12 _CSharp_GetObjectRequest_GetLocation@4 _CSharp_GetObjectRequest_MAP_TYPE_get@0 _CSharp_GetObjectRequest_PHOTO_TYPE_get@0 _CSharp_GetObjectRequest_PLAT_TYPE_get@0 _CSharp_GetObjectRequest_SetIgnoreMalformedHeaders@8 _CSharp_GetObjectRequest_SetLocation@8 _CSharp_GetObjectRequest_THUMBNAIL_TYPE_get@0 _CSharp_GetObjectRequest_VIDEO_TYPE_get@0 _CSharp_GetObjectRequest_VRIMAGE_TYPE_get@0 _CSharp_GetObjectResponse_NextObject@4 _CSharp_InputStreamBridge_read@16 _CSharp_InputStreamBridge_readByte@4 _CSharp_LoginResponse_GetActionUrl@4 _CSharp_LoginResponse_GetBalance@4 _CSharp_LoginResponse_GetBroker@4 _CSharp_LoginResponse_GetChangePasswordUrl@4 _CSharp_LoginResponse_GetGetMetadataUrl@4 _CSharp_LoginResponse_GetGetObjectUrl@4 _CSharp_LoginResponse_GetLoginCompleteUrl@4 _CSharp_LoginResponse_GetLoginUrl@4 _CSharp_LoginResponse_GetLogoutUrl@4 _CSharp_LoginResponse_GetMemberName@4 _CSharp_LoginResponse_GetMetadataTimestamp@4 _CSharp_LoginResponse_GetMetadataVersion@4 _CSharp_LoginResponse_GetMinMetadataTimestamp@4 _CSharp_LoginResponse_GetOfficeList@4 _CSharp_LoginResponse_GetPasswordExpire@4 _CSharp_LoginResponse_GetSearchUrl@4 _CSharp_LoginResponse_GetServerInformationUrl@4 _CSharp_LoginResponse_GetTimeout@4 _CSharp_LoginResponse_GetUpdateUrl@4 _CSharp_LoginResponse_GetUserInfo@4 _CSharp_LogoutResponseAPtr_GetBillingInfo@4 _CSharp_LogoutResponseAPtr_GetConnectTime@4 _CSharp_LogoutResponseAPtr_GetLogoutMessage@4 _CSharp_LogoutResponseAPtr___deref__@4 _CSharp_LogoutResponseAPtr_reset@8 _CSharp_LogoutResponse_GetBillingInfo@4 _CSharp_LogoutResponse_GetConnectTime@4 _CSharp_LogoutResponse_GetLogoutMessage@4 _CSharp_LookupColumnsQueryPtr_GetClass@4 _CSharp_LookupColumnsQueryPtr_GetResource@4 _CSharp_LookupColumnsQueryPtr_SetClass@8 _CSharp_LookupColumnsQueryPtr_SetResource@8 _CSharp_LookupColumnsQueryPtr___deref__@4 _CSharp_LookupColumnsQueryPtr_reset@8 _CSharp_LookupColumnsQuery_GetClass@4 _CSharp_LookupColumnsQuery_GetResource@4 _CSharp_LookupColumnsQuery_SetClass@8 _CSharp_LookupColumnsQuery_SetResource@8 _CSharp_LookupQueryPtr_GetLookup@4 _CSharp_LookupQueryPtr_GetResource@4 _CSharp_LookupQueryPtr_SetLookup@8 _CSharp_LookupQueryPtr_SetResource@8 _CSharp_LookupQueryPtr___deref__@4 _CSharp_LookupQueryPtr_reset@8 _CSharp_LookupQuery_GetLookup@4 _CSharp_LookupQuery_GetResource@4 _CSharp_LookupQuery_SetLookup@8 _CSharp_LookupQuery_SetResource@8 _CSharp_MetadataClassList_Add@8 _CSharp_MetadataClassList_AddRange@8 _CSharp_MetadataClassList_Clear@4 _CSharp_MetadataClassList_Contains@8 _CSharp_MetadataClassList_GetRange@12 _CSharp_MetadataClassList_IndexOf@8 _CSharp_MetadataClassList_Insert@12 _CSharp_MetadataClassList_InsertRange@12 _CSharp_MetadataClassList_LastIndexOf@8 _CSharp_MetadataClassList_Remove@8 _CSharp_MetadataClassList_RemoveAt@8 _CSharp_MetadataClassList_RemoveRange@12 _CSharp_MetadataClassList_Repeat@8 _CSharp_MetadataClassList_Reverse__SWIG_0@4 _CSharp_MetadataClassList_Reverse__SWIG_1@12 _CSharp_MetadataClassList_SetRange@12 _CSharp_MetadataClassList_capacity@4 _CSharp_MetadataClassList_getitem@8 _CSharp_MetadataClassList_getitemcopy@8 _CSharp_MetadataClassList_reserve@8 _CSharp_MetadataClassList_setitem@12 _CSharp_MetadataClassList_size@4 _CSharp_MetadataClass_GetClassName@4 _CSharp_MetadataClass_GetDescription@4 _CSharp_MetadataClass_GetId@4 _CSharp_MetadataClass_GetMetadataType@4 _CSharp_MetadataClass_GetStandardName@4 _CSharp_MetadataClass_SWIGUpcast@4 _CSharp_MetadataElement_GetAttributeNames@4 _CSharp_MetadataElement_GetBoolAttribute__SWIG_0@12 _CSharp_MetadataElement_GetBoolAttribute__SWIG_1@8 _CSharp_MetadataElement_GetId@4 _CSharp_MetadataElement_GetIntAttribute__SWIG_0@12 _CSharp_MetadataElement_GetIntAttribute__SWIG_1@8 _CSharp_MetadataElement_GetLevel@4 _CSharp_MetadataElement_GetMetadataType@4 _CSharp_MetadataElement_GetPath@4 _CSharp_MetadataElement_GetStringAttribute__SWIG_0@12 _CSharp_MetadataElement_GetStringAttribute__SWIG_1@8 _CSharp_MetadataForeignKeyList_Add@8 _CSharp_MetadataForeignKeyList_AddRange@8 _CSharp_MetadataForeignKeyList_Clear@4 _CSharp_MetadataForeignKeyList_Contains@8 _CSharp_MetadataForeignKeyList_GetRange@12 _CSharp_MetadataForeignKeyList_IndexOf@8 _CSharp_MetadataForeignKeyList_Insert@12 _CSharp_MetadataForeignKeyList_InsertRange@12 _CSharp_MetadataForeignKeyList_LastIndexOf@8 _CSharp_MetadataForeignKeyList_Remove@8 _CSharp_MetadataForeignKeyList_RemoveAt@8 _CSharp_MetadataForeignKeyList_RemoveRange@12 _CSharp_MetadataForeignKeyList_Repeat@8 _CSharp_MetadataForeignKeyList_Reverse__SWIG_0@4 _CSharp_MetadataForeignKeyList_Reverse__SWIG_1@12 _CSharp_MetadataForeignKeyList_SetRange@12 _CSharp_MetadataForeignKeyList_capacity@4 _CSharp_MetadataForeignKeyList_getitem@8 _CSharp_MetadataForeignKeyList_getitemcopy@8 _CSharp_MetadataForeignKeyList_reserve@8 _CSharp_MetadataForeignKeyList_setitem@12 _CSharp_MetadataForeignKeyList_size@4 _CSharp_MetadataForeignKey_GetChildClassID@4 _CSharp_MetadataForeignKey_GetChildResourceID@4 _CSharp_MetadataForeignKey_GetChildSystemName@4 _CSharp_MetadataForeignKey_GetConditionalParentField@4 _CSharp_MetadataForeignKey_GetConditionalParentValue@4 _CSharp_MetadataForeignKey_GetForeignKeyID@4 _CSharp_MetadataForeignKey_GetID@4 _CSharp_MetadataForeignKey_GetMetadataType@4 _CSharp_MetadataForeignKey_GetParentClassID@4 _CSharp_MetadataForeignKey_GetParentResourceID@4 _CSharp_MetadataForeignKey_GetParentSystemName@4 _CSharp_MetadataForeignKey_SWIGUpcast@4 _CSharp_MetadataLookupList_Add@8 _CSharp_MetadataLookupList_AddRange@8 _CSharp_MetadataLookupList_Clear@4 _CSharp_MetadataLookupList_Contains@8 _CSharp_MetadataLookupList_GetRange@12 _CSharp_MetadataLookupList_IndexOf@8 _CSharp_MetadataLookupList_Insert@12 _CSharp_MetadataLookupList_InsertRange@12 _CSharp_MetadataLookupList_LastIndexOf@8 _CSharp_MetadataLookupList_Remove@8 _CSharp_MetadataLookupList_RemoveAt@8 _CSharp_MetadataLookupList_RemoveRange@12 _CSharp_MetadataLookupList_Repeat@8 _CSharp_MetadataLookupList_Reverse__SWIG_0@4 _CSharp_MetadataLookupList_Reverse__SWIG_1@12 _CSharp_MetadataLookupList_SetRange@12 _CSharp_MetadataLookupList_capacity@4 _CSharp_MetadataLookupList_getitem@8 _CSharp_MetadataLookupList_getitemcopy@8 _CSharp_MetadataLookupList_reserve@8 _CSharp_MetadataLookupList_setitem@12 _CSharp_MetadataLookupList_size@4 _CSharp_MetadataLookupTypeList_Add@8 _CSharp_MetadataLookupTypeList_AddRange@8 _CSharp_MetadataLookupTypeList_Clear@4 _CSharp_MetadataLookupTypeList_Contains@8 _CSharp_MetadataLookupTypeList_GetRange@12 _CSharp_MetadataLookupTypeList_IndexOf@8 _CSharp_MetadataLookupTypeList_Insert@12 _CSharp_MetadataLookupTypeList_InsertRange@12 _CSharp_MetadataLookupTypeList_LastIndexOf@8 _CSharp_MetadataLookupTypeList_Remove@8 _CSharp_MetadataLookupTypeList_RemoveAt@8 _CSharp_MetadataLookupTypeList_RemoveRange@12 _CSharp_MetadataLookupTypeList_Repeat@8 _CSharp_MetadataLookupTypeList_Reverse__SWIG_0@4 _CSharp_MetadataLookupTypeList_Reverse__SWIG_1@12 _CSharp_MetadataLookupTypeList_SetRange@12 _CSharp_MetadataLookupTypeList_capacity@4 _CSharp_MetadataLookupTypeList_getitem@8 _CSharp_MetadataLookupTypeList_getitemcopy@8 _CSharp_MetadataLookupTypeList_reserve@8 _CSharp_MetadataLookupTypeList_setitem@12 _CSharp_MetadataLookupTypeList_size@4 _CSharp_MetadataLookupType_GetId@4 _CSharp_MetadataLookupType_GetLongValue@4 _CSharp_MetadataLookupType_GetMetadataType@4 _CSharp_MetadataLookupType_GetShortValue@4 _CSharp_MetadataLookupType_GetValue@4 _CSharp_MetadataLookupType_SWIGUpcast@4 _CSharp_MetadataLookup_GetDate@4 _CSharp_MetadataLookup_GetId@4 _CSharp_MetadataLookup_GetLookupName@4 _CSharp_MetadataLookup_GetMetadataType@4 _CSharp_MetadataLookup_GetVersion@4 _CSharp_MetadataLookup_GetVisibleName@4 _CSharp_MetadataLookup_SWIGUpcast@4 _CSharp_MetadataObjectList_Add@8 _CSharp_MetadataObjectList_AddRange@8 _CSharp_MetadataObjectList_Clear@4 _CSharp_MetadataObjectList_Contains@8 _CSharp_MetadataObjectList_GetRange@12 _CSharp_MetadataObjectList_IndexOf@8 _CSharp_MetadataObjectList_Insert@12 _CSharp_MetadataObjectList_InsertRange@12 _CSharp_MetadataObjectList_LastIndexOf@8 _CSharp_MetadataObjectList_Remove@8 _CSharp_MetadataObjectList_RemoveAt@8 _CSharp_MetadataObjectList_RemoveRange@12 _CSharp_MetadataObjectList_Repeat@8 _CSharp_MetadataObjectList_Reverse__SWIG_0@4 _CSharp_MetadataObjectList_Reverse__SWIG_1@12 _CSharp_MetadataObjectList_SetRange@12 _CSharp_MetadataObjectList_capacity@4 _CSharp_MetadataObjectList_getitem@8 _CSharp_MetadataObjectList_getitemcopy@8 _CSharp_MetadataObjectList_reserve@8 _CSharp_MetadataObjectList_setitem@12 _CSharp_MetadataObjectList_size@4 _CSharp_MetadataObject_GetDescription@4 _CSharp_MetadataObject_GetId@4 _CSharp_MetadataObject_GetMIMEType@4 _CSharp_MetadataObject_GetMetadataType@4 _CSharp_MetadataObject_GetObjectType@4 _CSharp_MetadataObject_GetVisibleName@4 _CSharp_MetadataObject_SWIGUpcast@4 _CSharp_MetadataResourceList_Add@8 _CSharp_MetadataResourceList_AddRange@8 _CSharp_MetadataResourceList_Clear@4 _CSharp_MetadataResourceList_Contains@8 _CSharp_MetadataResourceList_GetRange@12 _CSharp_MetadataResourceList_IndexOf@8 _CSharp_MetadataResourceList_Insert@12 _CSharp_MetadataResourceList_InsertRange@12 _CSharp_MetadataResourceList_LastIndexOf@8 _CSharp_MetadataResourceList_Remove@8 _CSharp_MetadataResourceList_RemoveAt@8 _CSharp_MetadataResourceList_RemoveRange@12 _CSharp_MetadataResourceList_Repeat@8 _CSharp_MetadataResourceList_Reverse__SWIG_0@4 _CSharp_MetadataResourceList_Reverse__SWIG_1@12 _CSharp_MetadataResourceList_SetRange@12 _CSharp_MetadataResourceList_capacity@4 _CSharp_MetadataResourceList_getitem@8 _CSharp_MetadataResourceList_getitemcopy@8 _CSharp_MetadataResourceList_reserve@8 _CSharp_MetadataResourceList_setitem@12 _CSharp_MetadataResourceList_size@4 _CSharp_MetadataResource_GetId@4 _CSharp_MetadataResource_GetKeyField@4 _CSharp_MetadataResource_GetMetadataType@4 _CSharp_MetadataResource_GetResourceID@4 _CSharp_MetadataResource_GetStandardName@4 _CSharp_MetadataResource_SWIGUpcast@4 _CSharp_MetadataSearchHelp_GetId@4 _CSharp_MetadataSearchHelp_GetMetadataType@4 _CSharp_MetadataSearchHelp_GetSearchHelpID@4 _CSharp_MetadataSearchHelp_GetValue@4 _CSharp_MetadataSearchHelp_SWIGUpcast@4 _CSharp_MetadataSystem_GetComments@4 _CSharp_MetadataSystem_GetMetadataType@4 _CSharp_MetadataSystem_GetSystemDescription@4 _CSharp_MetadataSystem_GetSystemID@4 _CSharp_MetadataSystem_SWIGUpcast@4 _CSharp_MetadataTableList_Add@8 _CSharp_MetadataTableList_AddRange@8 _CSharp_MetadataTableList_Clear@4 _CSharp_MetadataTableList_Contains@8 _CSharp_MetadataTableList_GetRange@12 _CSharp_MetadataTableList_IndexOf@8 _CSharp_MetadataTableList_Insert@12 _CSharp_MetadataTableList_InsertRange@12 _CSharp_MetadataTableList_LastIndexOf@8 _CSharp_MetadataTableList_Remove@8 _CSharp_MetadataTableList_RemoveAt@8 _CSharp_MetadataTableList_RemoveRange@12 _CSharp_MetadataTableList_Repeat@8 _CSharp_MetadataTableList_Reverse__SWIG_0@4 _CSharp_MetadataTableList_Reverse__SWIG_1@12 _CSharp_MetadataTableList_SetRange@12 _CSharp_MetadataTableList_capacity@4 _CSharp_MetadataTableList_getitem@8 _CSharp_MetadataTableList_getitemcopy@8 _CSharp_MetadataTableList_reserve@8 _CSharp_MetadataTableList_setitem@12 _CSharp_MetadataTableList_size@4 _CSharp_MetadataTable_GetAlignment@4 _CSharp_MetadataTable_GetDBName@4 _CSharp_MetadataTable_GetDataType@4 _CSharp_MetadataTable_GetDefault@4 _CSharp_MetadataTable_GetEditMaskId@4 _CSharp_MetadataTable_GetIndex@4 _CSharp_MetadataTable_GetInterpretation@4 _CSharp_MetadataTable_GetLongName@4 _CSharp_MetadataTable_GetLookupName@4 _CSharp_MetadataTable_GetMaxSelect@4 _CSharp_MetadataTable_GetMaximum@4 _CSharp_MetadataTable_GetMaximumAsString@4 _CSharp_MetadataTable_GetMaximumLength@4 _CSharp_MetadataTable_GetMetadataType@4 _CSharp_MetadataTable_GetMinimum@4 _CSharp_MetadataTable_GetMinimumAsString@4 _CSharp_MetadataTable_GetPrecision@4 _CSharp_MetadataTable_GetRequired@4 _CSharp_MetadataTable_GetSearchHelpId@4 _CSharp_MetadataTable_GetShortName@4 _CSharp_MetadataTable_GetStandardName@4 _CSharp_MetadataTable_GetSystemName@4 _CSharp_MetadataTable_GetUnits@4 _CSharp_MetadataTable_InKeyIndex@4 _CSharp_MetadataTable_IsSearchable@4 _CSharp_MetadataTable_IsUnique@4 _CSharp_MetadataTable_SWIGUpcast@4 _CSharp_MetadataTable_UseSeparator@4 _CSharp_ObjectDescriptor_GetContentType@4 _CSharp_ObjectDescriptor_GetData@4 _CSharp_ObjectDescriptor_GetDataStreamBridge@4 _CSharp_ObjectDescriptor_GetDescription@4 _CSharp_ObjectDescriptor_GetLocationUrl@4 _CSharp_ObjectDescriptor_GetObjectId@4 _CSharp_ObjectDescriptor_GetObjectKey@4 _CSharp_ObjectDescriptor_GetRetsReplyCode@4 _CSharp_ObjectDescriptor_GetRetsReplyText@4 _CSharp_ObjectDescriptor_GetWildIndicator@4 _CSharp_RetsException_GetExtendedMessage@4 _CSharp_RetsException_GetFullReport@4 _CSharp_RetsException_GetMessage@4 _CSharp_RetsException_GetName@4 _CSharp_RetsHttpException_GetHttpResult@4 _CSharp_RetsHttpException_GetMessage@4 _CSharp_RetsHttpException_GetName@4 _CSharp_RetsHttpException_SWIGUpcast@4 _CSharp_RetsHttpLoggerBridge_SWIGUpcast@4 _CSharp_RetsHttpLoggerBridge_logHttpData@12 _CSharp_RetsHttpLogger_logHttpData@12 _CSharp_RetsMetadata_GetAllClasses@8 _CSharp_RetsMetadata_GetAllForeignKeys@4 _CSharp_RetsMetadata_GetAllLookupTypes__SWIG_0@12 _CSharp_RetsMetadata_GetAllLookupTypes__SWIG_1@8 _CSharp_RetsMetadata_GetAllLookups@8 _CSharp_RetsMetadata_GetAllObjects__SWIG_0@8 _CSharp_RetsMetadata_GetAllObjects__SWIG_1@8 _CSharp_RetsMetadata_GetAllResources@4 _CSharp_RetsMetadata_GetAllTables__SWIG_0@8 _CSharp_RetsMetadata_GetAllTables__SWIG_1@12 _CSharp_RetsMetadata_GetClass@12 _CSharp_RetsMetadata_GetLookup@12 _CSharp_RetsMetadata_GetLookupType@16 _CSharp_RetsMetadata_GetResource@8 _CSharp_RetsMetadata_GetSearchHelp@12 _CSharp_RetsMetadata_GetSystem@4 _CSharp_RetsMetadata_GetTable@16 _CSharp_RetsReplyException_GetExtendedMeaning@4 _CSharp_RetsReplyException_GetMeaning@4 _CSharp_RetsReplyException_GetReplyCode@4 _CSharp_RetsReplyException_SWIGUpcast@4 _CSharp_RetsSession_Cleanup@4 _CSharp_RetsSession_CreateSearchRequest@16 _CSharp_RetsSession_CreateUpdateRequest@12 _CSharp_RetsSession_GetAction@4 _CSharp_RetsSession_GetCapabilityUrls@4 _CSharp_RetsSession_GetDetectedRetsVersion@4 _CSharp_RetsSession_GetLibraryVersion@0 _CSharp_RetsSession_GetLoginResponse@4 _CSharp_RetsSession_GetLoginUrl@4 _CSharp_RetsSession_GetMetadata_@4 _CSharp_RetsSession_GetMetadata__SWIG_0@4 _CSharp_RetsSession_GetMetadata__SWIG_1@8 _CSharp_RetsSession_GetObject@8 _CSharp_RetsSession_GetRetsVersion@4 _CSharp_RetsSession_GetUserAgentAuthType@4 _CSharp_RetsSession_IsIncrementalMetadata@4 _CSharp_RetsSession_Login@12 _CSharp_RetsSession_Logout@4 _CSharp_RetsSession_MODE_CACHE_get@0 _CSharp_RetsSession_MODE_NO_EXPECT_get@0 _CSharp_RetsSession_MODE_NO_SSL_VERIFY_get@0 _CSharp_RetsSession_MODE_NO_STREAM_get@0 _CSharp_RetsSession_RetsVersionToString@8 _CSharp_RetsSession_Search_@8 _CSharp_RetsSession_Search__SWIG_0@8 _CSharp_RetsSession_Search__SWIG_1@12 _CSharp_RetsSession_SetDefaultEncoding@8 _CSharp_RetsSession_SetHttpLogName@8 _CSharp_RetsSession_SetHttpLogger@8 _CSharp_RetsSession_SetIncrementalMetadata@8 _CSharp_RetsSession_SetLogEverything@8 _CSharp_RetsSession_SetModeFlags@8 _CSharp_RetsSession_SetProxy@12 _CSharp_RetsSession_SetRetsVersion@8 _CSharp_RetsSession_SetTimeout@8 _CSharp_RetsSession_SetUserAgent@8 _CSharp_RetsSession_SetUserAgentAuthType@8 _CSharp_RetsSession_SetUserAgentPassword@8 _CSharp_RetsSession_Update@8 _CSharp_RetsSession_UseHttpGet@8 _CSharp_SearchRequestAPtr_GetQueryString@4 _CSharp_SearchRequestAPtr_LIMIT_DEFAULT_get@4 _CSharp_SearchRequestAPtr_LIMIT_NONE_get@4 _CSharp_SearchRequestAPtr_OFFSET_NONE_get@4 _CSharp_SearchRequestAPtr_SetCountType@8 _CSharp_SearchRequestAPtr_SetFormatType@8 _CSharp_SearchRequestAPtr_SetLimit@8 _CSharp_SearchRequestAPtr_SetOffset@8 _CSharp_SearchRequestAPtr_SetQueryType@8 _CSharp_SearchRequestAPtr_SetRestrictedIndicator@8 _CSharp_SearchRequestAPtr_SetSelect@8 _CSharp_SearchRequestAPtr_SetStandardNames@8 _CSharp_SearchRequestAPtr___deref__@4 _CSharp_SearchRequestAPtr_reset@8 _CSharp_SearchRequest_GetQueryString@4 _CSharp_SearchRequest_LIMIT_DEFAULT_get@0 _CSharp_SearchRequest_LIMIT_NONE_get@0 _CSharp_SearchRequest_OFFSET_NONE_get@0 _CSharp_SearchRequest_SetCountType@8 _CSharp_SearchRequest_SetFormatType@8 _CSharp_SearchRequest_SetLimit@8 _CSharp_SearchRequest_SetOffset@8 _CSharp_SearchRequest_SetQueryType@8 _CSharp_SearchRequest_SetRestrictedIndicator@8 _CSharp_SearchRequest_SetSelect@8 _CSharp_SearchRequest_SetStandardNames@8 _CSharp_SearchResultSetAPtr_GetColumns@4 _CSharp_SearchResultSetAPtr_GetCount@4 _CSharp_SearchResultSetAPtr_GetEncoding@4 _CSharp_SearchResultSetAPtr_GetReplyCode@4 _CSharp_SearchResultSetAPtr_GetReplyText@4 _CSharp_SearchResultSetAPtr_GetString__SWIG_0@8 _CSharp_SearchResultSetAPtr_GetString__SWIG_1@8 _CSharp_SearchResultSetAPtr_HasMaxRows@4 _CSharp_SearchResultSetAPtr_HasNext@4 _CSharp_SearchResultSetAPtr_SetEncoding@8 _CSharp_SearchResultSetAPtr_SetInputData@8 _CSharp_SearchResultSetAPtr___deref__@4 _CSharp_SearchResultSetAPtr_reset@8 _CSharp_SearchResultSet_GetColumns@4 _CSharp_SearchResultSet_GetCount@4 _CSharp_SearchResultSet_GetEncoding@4 _CSharp_SearchResultSet_GetReplyCode@4 _CSharp_SearchResultSet_GetReplyText@4 _CSharp_SearchResultSet_GetString__SWIG_0@8 _CSharp_SearchResultSet_GetString__SWIG_1@8 _CSharp_SearchResultSet_HasMaxRows@4 _CSharp_SearchResultSet_HasNext@4 _CSharp_SearchResultSet_SetEncoding@8 _CSharp_SearchResultSet_SetInputData@8 _CSharp_SqlMetadataPtr_IsLookupColumn@12 _CSharp_SqlMetadataPtr___deref__@4 _CSharp_SqlMetadataPtr_reset@8 _CSharp_SqlMetadata_IsLookupColumn@12 _CSharp_SqlMetadata_director_connect@8 _CSharp_SqlToDmqlCompilerPtr_GetDmqlQuery@4 _CSharp_SqlToDmqlCompilerPtr_GetGetObjectQuery@4 _CSharp_SqlToDmqlCompilerPtr_GetLookupColumnsQuery@4 _CSharp_SqlToDmqlCompilerPtr_GetLookupQuery@4 _CSharp_SqlToDmqlCompilerPtr___deref__@4 _CSharp_SqlToDmqlCompilerPtr_reset@8 _CSharp_SqlToDmqlCompilerPtr_sqlToDmql@8 _CSharp_SqlToDmqlCompiler_GetDmqlQuery@4 _CSharp_SqlToDmqlCompiler_GetGetObjectQuery@4 _CSharp_SqlToDmqlCompiler_GetLookupColumnsQuery@4 _CSharp_SqlToDmqlCompiler_GetLookupQuery@4 _CSharp_SqlToDmqlCompiler_sqlToDmql@8 _CSharp_StringVector_Add@8 _CSharp_StringVector_AddRange@8 _CSharp_StringVector_Clear@4 _CSharp_StringVector_Contains@8 _CSharp_StringVector_GetRange@12 _CSharp_StringVector_IndexOf@8 _CSharp_StringVector_Insert@12 _CSharp_StringVector_InsertRange@12 _CSharp_StringVector_LastIndexOf@8 _CSharp_StringVector_Remove@8 _CSharp_StringVector_RemoveAt@8 _CSharp_StringVector_RemoveRange@12 _CSharp_StringVector_Repeat@8 _CSharp_StringVector_Reverse__SWIG_0@4 _CSharp_StringVector_Reverse__SWIG_1@12 _CSharp_StringVector_SetRange@12 _CSharp_StringVector_capacity@4 _CSharp_StringVector_getitem@8 _CSharp_StringVector_getitemcopy@8 _CSharp_StringVector_reserve@8 _CSharp_StringVector_setitem@12 _CSharp_StringVector_size@4 _CSharp_UpdateRequestAPtr_AUTO_POPULATE_get@4 _CSharp_UpdateRequestAPtr_GetAllFields@4 _CSharp_UpdateRequestAPtr_GetAllWarnings@4 _CSharp_UpdateRequestAPtr_GetDelimiter@4 _CSharp_UpdateRequestAPtr_GetField@8 _CSharp_UpdateRequestAPtr_GetUpdateType@4 _CSharp_UpdateRequestAPtr_GetValidateFlag@4 _CSharp_UpdateRequestAPtr_GetWarningResponse__SWIG_0@8 _CSharp_UpdateRequestAPtr_GetWarningResponse__SWIG_1@8 _CSharp_UpdateRequestAPtr_SetDelimiter@8 _CSharp_UpdateRequestAPtr_SetField@12 _CSharp_UpdateRequestAPtr_SetUpdateType@8 _CSharp_UpdateRequestAPtr_SetValidateFlag@8 _CSharp_UpdateRequestAPtr_SetWarningResponse__SWIG_0@12 _CSharp_UpdateRequestAPtr_SetWarningResponse__SWIG_1@12 _CSharp_UpdateRequestAPtr_UPDATE_OK_get@4 _CSharp_UpdateRequestAPtr_VALIDATE_ONLY_get@4 _CSharp_UpdateRequestAPtr___deref__@4 _CSharp_UpdateRequestAPtr_reset@8 _CSharp_UpdateRequest_AUTO_POPULATE_get@0 _CSharp_UpdateRequest_GetAllFields@4 _CSharp_UpdateRequest_GetAllWarnings@4 _CSharp_UpdateRequest_GetDelimiter@4 _CSharp_UpdateRequest_GetField@8 _CSharp_UpdateRequest_GetUpdateType@4 _CSharp_UpdateRequest_GetValidateFlag@4 _CSharp_UpdateRequest_GetWarningResponse__SWIG_0@8 _CSharp_UpdateRequest_GetWarningResponse__SWIG_1@8 _CSharp_UpdateRequest_SetDelimiter@8 _CSharp_UpdateRequest_SetField@12 _CSharp_UpdateRequest_SetUpdateType@8 _CSharp_UpdateRequest_SetValidateFlag@8 _CSharp_UpdateRequest_SetWarningResponse__SWIG_0@12 _CSharp_UpdateRequest_SetWarningResponse__SWIG_1@12 _CSharp_UpdateRequest_UPDATE_OK_get@0 _CSharp_UpdateRequest_VALIDATE_ONLY_get@0 _CSharp_UpdateResponseAPtr_GetColumns@4 _CSharp_UpdateResponseAPtr_GetEncoding@4 _CSharp_UpdateResponseAPtr_GetErrorFieldName@4 _CSharp_UpdateResponseAPtr_GetErrorNumber@4 _CSharp_UpdateResponseAPtr_GetErrorOffset@4 _CSharp_UpdateResponseAPtr_GetErrorText@4 _CSharp_UpdateResponseAPtr_GetReplyCode@4 _CSharp_UpdateResponseAPtr_GetReplyText@4 _CSharp_UpdateResponseAPtr_GetString__SWIG_0@8 _CSharp_UpdateResponseAPtr_GetString__SWIG_1@8 _CSharp_UpdateResponseAPtr_GetWarningFieldName@4 _CSharp_UpdateResponseAPtr_GetWarningNumber@4 _CSharp_UpdateResponseAPtr_GetWarningOffset@4 _CSharp_UpdateResponseAPtr_GetWarningResponseRequired@4 _CSharp_UpdateResponseAPtr_GetWarningText@4 _CSharp_UpdateResponseAPtr_HasNext@4 _CSharp_UpdateResponseAPtr_HasNextError@4 _CSharp_UpdateResponseAPtr_HasNextWarning@4 _CSharp_UpdateResponseAPtr_SetEncoding@8 _CSharp_UpdateResponseAPtr___deref__@4 _CSharp_UpdateResponseAPtr_reset@8 _CSharp_UpdateResponse_GetColumns@4 _CSharp_UpdateResponse_GetEncoding@4 _CSharp_UpdateResponse_GetErrorFieldName@4 _CSharp_UpdateResponse_GetErrorNumber@4 _CSharp_UpdateResponse_GetErrorOffset@4 _CSharp_UpdateResponse_GetErrorText@4 _CSharp_UpdateResponse_GetReplyCode@4 _CSharp_UpdateResponse_GetReplyText@4 _CSharp_UpdateResponse_GetString__SWIG_0@8 _CSharp_UpdateResponse_GetString__SWIG_1@8 _CSharp_UpdateResponse_GetWarningFieldName@4 _CSharp_UpdateResponse_GetWarningNumber@4 _CSharp_UpdateResponse_GetWarningOffset@4 _CSharp_UpdateResponse_GetWarningResponseRequired@4 _CSharp_UpdateResponse_GetWarningText@4 _CSharp_UpdateResponse_HasNext@4 _CSharp_UpdateResponse_HasNextError@4 _CSharp_UpdateResponse_HasNextWarning@4 _CSharp_UpdateResponse_SetEncoding@8 _CSharp_delete_BinaryData@4 _CSharp_delete_ByteVector@4 _CSharp_delete_CapabilityUrls@4 _CSharp_delete_DmqlCriterion@4 _CSharp_delete_DmqlCriterionPtr@4 _CSharp_delete_DmqlQuery@4 _CSharp_delete_DmqlQueryPtr@4 _CSharp_delete_GetObjectQuery@4 _CSharp_delete_GetObjectQueryPtr@4 _CSharp_delete_GetObjectRequest@4 _CSharp_delete_GetObjectResponse@4 _CSharp_delete_LoginResponse@4 _CSharp_delete_LogoutResponse@4 _CSharp_delete_LogoutResponseAPtr@4 _CSharp_delete_LookupColumnsQuery@4 _CSharp_delete_LookupColumnsQueryPtr@4 _CSharp_delete_LookupQuery@4 _CSharp_delete_LookupQueryPtr@4 _CSharp_delete_MetadataClass@4 _CSharp_delete_MetadataClassList@4 _CSharp_delete_MetadataElement@4 _CSharp_delete_MetadataForeignKey@4 _CSharp_delete_MetadataForeignKeyList@4 _CSharp_delete_MetadataLookup@4 _CSharp_delete_MetadataLookupList@4 _CSharp_delete_MetadataLookupType@4 _CSharp_delete_MetadataLookupTypeList@4 _CSharp_delete_MetadataObject@4 _CSharp_delete_MetadataObjectList@4 _CSharp_delete_MetadataResource@4 _CSharp_delete_MetadataResourceList@4 _CSharp_delete_MetadataSearchHelp@4 _CSharp_delete_MetadataSystem@4 _CSharp_delete_MetadataTable@4 _CSharp_delete_MetadataTableList@4 _CSharp_delete_ObjectDescriptor@4 _CSharp_delete_RetsException@4 _CSharp_delete_RetsHttpException@4 _CSharp_delete_RetsHttpLogger@4 _CSharp_delete_RetsHttpLoggerBridge@4 _CSharp_delete_RetsReplyException@4 _CSharp_delete_RetsSession@4 _CSharp_delete_SearchRequest@4 _CSharp_delete_SearchRequestAPtr@4 _CSharp_delete_SearchResultSet@4 _CSharp_delete_SearchResultSetAPtr@4 _CSharp_delete_SqlMetadata@4 _CSharp_delete_SqlMetadataPtr@4 _CSharp_delete_SqlToDmqlCompiler@4 _CSharp_delete_SqlToDmqlCompilerPtr@4 _CSharp_delete_StringVector@4 _CSharp_delete_UpdateRequest@4 _CSharp_delete_UpdateRequestAPtr@4 _CSharp_delete_UpdateResponse@4 _CSharp_delete_UpdateResponseAPtr@4 _CSharp_new_BinaryData@8 _CSharp_new_ByteVector__SWIG_0@0 _CSharp_new_ByteVector__SWIG_1@4 _CSharp_new_ByteVector__SWIG_2@4 _CSharp_new_CapabilityUrls@4 _CSharp_new_DmqlCriterionPtr__SWIG_0@0 _CSharp_new_DmqlCriterionPtr__SWIG_1@4 _CSharp_new_DmqlQuery@0 _CSharp_new_DmqlQueryPtr__SWIG_0@0 _CSharp_new_DmqlQueryPtr__SWIG_1@4 _CSharp_new_GetObjectQueryPtr__SWIG_0@0 _CSharp_new_GetObjectQueryPtr__SWIG_1@4 _CSharp_new_GetObjectRequest@8 _CSharp_new_GetObjectResponse@0 _CSharp_new_LoginResponse@0 _CSharp_new_LogoutResponse@0 _CSharp_new_LogoutResponseAPtr__SWIG_0@0 _CSharp_new_LogoutResponseAPtr__SWIG_1@4 _CSharp_new_LogoutResponseAPtr__SWIG_2@4 _CSharp_new_LookupColumnsQuery@0 _CSharp_new_LookupColumnsQueryPtr__SWIG_0@0 _CSharp_new_LookupColumnsQueryPtr__SWIG_1@4 _CSharp_new_LookupQuery@0 _CSharp_new_LookupQueryPtr__SWIG_0@0 _CSharp_new_LookupQueryPtr__SWIG_1@4 _CSharp_new_MetadataClass@0 _CSharp_new_MetadataClassList__SWIG_0@0 _CSharp_new_MetadataClassList__SWIG_1@4 _CSharp_new_MetadataClassList__SWIG_2@4 _CSharp_new_MetadataForeignKey@0 _CSharp_new_MetadataForeignKeyList__SWIG_0@0 _CSharp_new_MetadataForeignKeyList__SWIG_1@4 _CSharp_new_MetadataForeignKeyList__SWIG_2@4 _CSharp_new_MetadataLookup@0 _CSharp_new_MetadataLookupList__SWIG_0@0 _CSharp_new_MetadataLookupList__SWIG_1@4 _CSharp_new_MetadataLookupList__SWIG_2@4 _CSharp_new_MetadataLookupType@0 _CSharp_new_MetadataLookupTypeList__SWIG_0@0 _CSharp_new_MetadataLookupTypeList__SWIG_1@4 _CSharp_new_MetadataLookupTypeList__SWIG_2@4 _CSharp_new_MetadataObject@0 _CSharp_new_MetadataObjectList__SWIG_0@0 _CSharp_new_MetadataObjectList__SWIG_1@4 _CSharp_new_MetadataObjectList__SWIG_2@4 _CSharp_new_MetadataResource@0 _CSharp_new_MetadataResourceList__SWIG_0@0 _CSharp_new_MetadataResourceList__SWIG_1@4 _CSharp_new_MetadataResourceList__SWIG_2@4 _CSharp_new_MetadataSearchHelp@0 _CSharp_new_MetadataSystem@0 _CSharp_new_MetadataTable@0 _CSharp_new_MetadataTableList__SWIG_0@0 _CSharp_new_MetadataTableList__SWIG_1@4 _CSharp_new_MetadataTableList__SWIG_2@4 _CSharp_new_ObjectDescriptor@0 _CSharp_new_RetsException__SWIG_0@4 _CSharp_new_RetsException__SWIG_1@8 _CSharp_new_RetsHttpException@8 _CSharp_new_RetsHttpLoggerBridge@4 _CSharp_new_RetsReplyException__SWIG_0@8 _CSharp_new_RetsReplyException__SWIG_1@12 _CSharp_new_RetsSession@4 _CSharp_new_SearchRequest@12 _CSharp_new_SearchRequestAPtr__SWIG_0@0 _CSharp_new_SearchRequestAPtr__SWIG_1@4 _CSharp_new_SearchRequestAPtr__SWIG_2@4 _CSharp_new_SearchResultSet@0 _CSharp_new_SearchResultSetAPtr__SWIG_0@0 _CSharp_new_SearchResultSetAPtr__SWIG_1@4 _CSharp_new_SearchResultSetAPtr__SWIG_2@4 _CSharp_new_SqlMetadata@0 _CSharp_new_SqlMetadataPtr__SWIG_0@0 _CSharp_new_SqlMetadataPtr__SWIG_1@4 _CSharp_new_SqlToDmqlCompiler@4 _CSharp_new_SqlToDmqlCompilerPtr__SWIG_0@0 _CSharp_new_SqlToDmqlCompilerPtr__SWIG_1@4 _CSharp_new_StringVector__SWIG_0@0 _CSharp_new_StringVector__SWIG_1@4 _CSharp_new_StringVector__SWIG_2@4 _CSharp_new_UpdateRequest@8 _CSharp_new_UpdateRequestAPtr__SWIG_0@0 _CSharp_new_UpdateRequestAPtr__SWIG_1@4 _CSharp_new_UpdateRequestAPtr__SWIG_2@4 _CSharp_new_UpdateResponse@0 _CSharp_new_UpdateResponseAPtr__SWIG_0@0 _CSharp_new_UpdateResponseAPtr__SWIG_1@4 _CSharp_new_UpdateResponseAPtr__SWIG_2@4 _RetsExceptionRegisterCallback@4 _RetsHttpExceptionRegisterCallback@4 _RetsReplyExceptionRegisterCallback@4 _SWIGRegisterExceptionArgumentCallbacks_librets@12 _SWIGRegisterExceptionCallbacks_librets@44 _SWIGRegisterStringCallback_librets@4

Sharing

General

Malware Config

Signatures

File Explorer

5be84affded6a459de10d6490bc42f25_JaffaCakes118

kernel32

user32

gdi32

shell32

advapi32

comctl32

ole32

version

generic

$PLUGINSDIR/InstallOptions.dll

kernel32

user32

gdi32

shell32

comdlg32

ole32

generic

$PLUGINSDIR/NSISdl.dll

kernel32

user32

advapi32

ws2_32

generic

$PLUGINSDIR/Processes.dll

kernel32

user32

generic

$PLUGINSDIR/System.dll

kernel32

user32

ole32

generic

$PLUGINSDIR/ioSpecial.ini

$PLUGINSDIR/modern-header.bmp

$PLUGINSDIR/modern-wizard.bmp

DMCustomControls.dll

mscoree

dotnet

DMSharedClasses.dll

mscoree

dotnet

DMStartupWizard.XmlSerializers.dll

mscoree

dotnet

DMStartupWizard.dll

mscoree

dotnet

DMUpdater.exe

mscoree

dotnet

DataMaster Launcher.exe

mscoree

dotnet

DataMaster REcolorado.XmlSerializers.dll

mscoree

dotnet

DataMaster REcolorado.exe

mscoree

dotnet

DataMaster REcolorado.exe.config

DataMasterAssociater.exe

mscoree

dotnet

DataMasterDDE.exe

mscoree

dotnet

DataMasterPlus.XmlSerializers.dll

mscoree

dotnet

DataMasterPlus.dll

mscoree

dotnet

DataMasterRestarter.exe

mscoree