Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
Overview
overview
7Static
static
7d145144344...18.exe
windows7-x64
7d145144344...18.exe
windows10-2004-x64
7$EXEDIR/SAS.exe
windows7-x64
3$EXEDIR/SAS.exe
windows10-2004-x64
3$EXEDIR/TV.dll
windows7-x64
3$EXEDIR/TV.dll
windows10-2004-x64
3$EXEDIR/Te...er.exe
windows7-x64
7$EXEDIR/Te...er.exe
windows10-2004-x64
7$EXEDIR/Te...ce.exe
windows7-x64
3$EXEDIR/Te...ce.exe
windows10-2004-x64
3$EXEDIR/Te...en.dll
windows7-x64
1$EXEDIR/Te...en.dll
windows10-2004-x64
1$PLUGINSDI...dl.dll
windows7-x64
3$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows7-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...on.dll
windows7-x64
3$PLUGINSDI...on.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows7-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDI...fo.dll
windows7-x64
3$PLUGINSDI...fo.dll
windows10-2004-x64
3Behavioral task
behavioral1
Sample
d14514434487588cb65be5e1f68aae81_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d14514434487588cb65be5e1f68aae81_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral3
Sample
$EXEDIR/SAS.exe
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
$EXEDIR/SAS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral5
Sample
$EXEDIR/TV.dll
Resource
win7-20240729-en
Behavioral task
behavioral6
Sample
$EXEDIR/TV.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral7
Sample
$EXEDIR/TeamViewer.exe
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
$EXEDIR/TeamViewer.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral9
Sample
$EXEDIR/TeamViewer_Service.exe
Resource
win7-20240903-en
Behavioral task
behavioral10
Sample
$EXEDIR/TeamViewer_Service.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral11
Sample
$EXEDIR/Teamviewer_Resource_en.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
$EXEDIR/Teamviewer_Resource_en.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/System.dll
Resource
win7-20240903-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win7-20240704-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/TvGetVersion.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral19
Sample
$PLUGINSDIR/UAC.dll
Resource
win7-20240903-en
Behavioral task
behavioral20
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20240802-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win7-20240903-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/UserInfo.dll
Resource
win10v2004-20240802-en
Target
d14514434487588cb65be5e1f68aae81_JaffaCakes118
Size
1.9MB
MD5
d14514434487588cb65be5e1f68aae81
SHA1
f17d10c4abecba80f4010578014f9247ab83e358
SHA256
1448ad8c5b46bbc07eec82e0ec18757cc5b6d8251a54692131df3036b8f66838
SHA512
a2f31b2bf06c53e66c48c326c59ccd40e04d5d5b274f61714f71ce42906ea361a0620022ec5eb75dbe483fb130011e963d61e153bb12121ca965f238c291b0de
SSDEEP
49152:nqUvc3Wlq7zez0HgaR68mREx8nAemqefhF5Y4p:q+chzgy68Px8Ajqefq4p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/$PLUGINSDIR/NSISdl.dll |
unpack001/$PLUGINSDIR/System.dll |
unpack001/$PLUGINSDIR/TvGetVersion.dll |
unpack001/$PLUGINSDIR/UAC.dll |
unpack001/$PLUGINSDIR/UserInfo.dll |
unpack001/out.upx |
resource | yara_rule |
---|---|
static1/unpack001/out.upx | nsis_installer_2 |
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\TeamViewer\SAS Lib\release\SAS.pdb
ProcessIdToSessionId
LocalAlloc
GetModuleHandleW
GetCurrentThread
GetSystemDirectoryW
Sleep
CloseHandle
LocalFree
VerifyVersionInfoW
VerSetConditionMask
GetCurrentProcess
SetLastError
GetProcAddress
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
GetLastError
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
CreateFileA
FlushFileBuffers
TlsAlloc
GetCurrentProcessId
MessageBoxA
WTSQuerySessionInformationW
WTSFreeMemory
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
_vsnwprintf
GetTokenInformation
RevertToSelf
RegOpenKeyExW
RegDeleteValueW
ImpersonateSelf
OpenThreadToken
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
RegCloseKey
SetTokenInformation
RegQueryValueExW
_SASLibEx_GetFeatures@0
_SASLibEx_GetVersion@0
_SASLibEx_Init@0
_SASLibEx_LockWorkstation@4
_SASLibEx_SendSAS@4
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
c:\TeamViewer5_Release\TeamViewer\qs_release\TV.pdb
InitCommonControlsEx
GetVersionExA
HeapSize
RtlUnwind
InitializeCriticalSection
WriteFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
ReleaseMutex
GetCurrentThreadId
LocalAlloc
CreateMutexA
OpenMutexA
GetTickCount
LoadLibraryA
GetModuleFileNameA
FreeLibrary
LocalUnlock
LocalFree
LocalLock
GetCurrentProcessId
WaitForSingleObject
GetProcAddress
CloseHandle
GetLastError
VirtualQuery
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
BeginPaint
LoadBitmapA
GetClassNameA
RedrawWindow
InvalidateRect
RegisterWindowMessageA
TrackMouseEvent
GetDesktopWindow
GetWindowRect
UnhookWindowsHookEx
GetSysColor
SetWindowPos
SystemParametersInfoA
SetActiveWindow
UnregisterClassA
GetDC
GetSystemMetrics
GetWindowDC
GetWindowLongA
CallNextHookEx
IsWindowVisible
ShowWindow
InflateRect
GetWindowInfo
CreateWindowExA
GetWindowThreadProcessId
EndPaint
GetActiveWindow
RegisterClassA
ReleaseDC
FindWindowExA
SendNotifyMessageA
GetClassInfoA
IsWindow
MoveWindow
DestroyWindow
MapWindowPoints
IsZoomed
PostMessageA
GetClientRect
SetRect
IsRectEmpty
FindWindowA
SendMessageA
SetWindowLongA
DefWindowProcA
UnionRect
SetWindowsHookExA
LoadCursorA
GetStockObject
CreateCompatibleBitmap
DeleteDC
Rectangle
DeleteObject
SelectObject
GetDeviceCaps
Polyline
CreatePen
LineTo
CreateCompatibleDC
ExtCreatePen
CreateSolidBrush
MoveToEx
CreateRectRgn
GetPixel
BitBlt
SetPixel
CombineRgn
GetObjectA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
AddProcessExclusion
GetChangeRegion
GetChangedWindowList
IsTitleBarButtonPressed
RemoveProcessExclusion
SetButtonXOffset
SetSingleWindow
ShowTitleBarButton
StartHooks
StopHooks
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\TeamViewer5_Release\TeamViewer\qs_release\TeamViewer_qs.pdb
waveOutRestart
mixerClose
mixerGetID
mixerOpen
timeEndPeriod
timeBeginPeriod
waveInOpen
waveInGetNumDevs
waveInReset
waveInStart
waveInClose
waveInUnprepareHeader
waveInAddBuffer
waveInPrepareHeader
waveOutClose
waveOutUnprepareHeader
waveOutWrite
waveOutPause
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutReset
mixerSetControlDetails
ImageList_GetIcon
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Create
ImageList_Remove
InitCommonControlsEx
ImageList_GetImageCount
capGetDriverDescriptionA
capCreateCaptureWindowA
DrawDibClose
DrawDibDraw
DrawDibOpen
IsNetworkAlive
GetPriorityClass
SetPriorityClass
GetExitCodeThread
TryEnterCriticalSection
CreateThread
ResumeThread
ResetEvent
GetCurrentThread
LocalLock
LocalSize
LocalUnlock
SetProcessShutdownParameters
GlobalFree
GlobalHandle
CompareStringA
GetModuleHandleA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
SetHandleCount
GetTimeZoneInformation
GetOEMCP
HeapCreate
ExitThread
GetStringTypeA
LCMapStringA
GetStdHandle
GetFileType
ExitProcess
GetStartupInfoA
SetThreadPriority
RtlUnwind
GetDateFormatA
GetTimeFormatA
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
CreateWaitableTimerA
SetWaitableTimer
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
CreateFileMappingA
MapViewOfFileEx
SetEndOfFile
UnmapViewOfFile
GetSystemInfo
FormatMessageA
GetFileTime
GetThreadLocale
GetACP
GetVersionExA
IsProcessorFeaturePresent
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
GetOverlappedResult
DeviceIoControl
LocalAlloc
GetUserDefaultLCID
GetLocaleInfoA
FileTimeToLocalFileTime
CreateFileA
DeleteFileA
SetUnhandledExceptionFilter
FindNextFileA
FindFirstFileA
VirtualFree
VirtualAlloc
HeapAlloc
GetLocalTime
CompareFileTime
SetEnvironmentVariableA
GetConsoleOutputCP
WriteConsoleA
DuplicateHandle
GetCurrentProcess
GetCurrentThreadId
SetEvent
GetSystemTimeAsFileTime
CreateSemaphoreA
ReleaseSemaphore
GetProcessHeap
HeapFree
CreateEventA
GetTickCount
WaitForSingleObject
CloseHandle
FlushInstructionCache
SetLastError
EnterCriticalSection
LeaveCriticalSection
RaiseException
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FindClose
SetErrorMode
LockResource
SystemTimeToFileTime
SetFilePointer
SetFileTime
LocalFileTimeToFileTime
ReadFile
GetFileSize
MoveFileExW
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LoadResource
FlushFileBuffers
FreeLibrary
WriteFile
LocalFree
GetModuleFileNameA
GetCommandLineW
ReleaseMutex
CreateMutexA
SizeofResource
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
OpenProcess
InitializeCriticalSection
Sleep
DeleteCriticalSection
GetCurrentProcessId
GetLastError
WaitForMultipleObjects
GetCommandLineA
IsMenu
GetIconInfo
SetThreadDesktop
GetWindowRgn
GetCursorInfo
OpenInputDesktop
CloseDesktop
GetUserObjectInformationW
GetThreadDesktop
SetCursorPos
CreateIconIndirect
InvalidateRgn
CreatePopupMenu
MsgWaitForMultipleObjects
GetSystemMenu
BeginDeferWindowPos
GetWindowPlacement
SetWindowPlacement
CreateMenu
GetSysColor
GetMessagePos
DestroyAcceleratorTable
GetNextDlgTabItem
DrawEdge
EndDeferWindowPos
FlashWindow
GetDialogBaseUnits
SendDlgItemMessageA
GetDlgItemTextA
GetMenuState
FrameRect
DestroyCursor
DrawFocusRect
SetWindowContextHelpId
UnregisterClassA
OpenDesktopW
SetDlgItemTextA
GetCapture
MoveWindow
TranslateMessage
GetWindow
GetWindowRect
MapWindowPoints
SetWindowPos
IsWindow
InvalidateRect
SetTimer
InflateRect
MapDialogRect
DeferWindowPos
DrawIconEx
SetScrollPos
GetScrollInfo
ScrollWindowEx
SetScrollInfo
SetParent
GetSysColorBrush
GetDesktopWindow
MessageBeep
GetWindowDC
WindowFromPoint
SetRectEmpty
GetMenuItemCount
DestroyIcon
TrackMouseEvent
PtInRect
DestroyWindow
BlockInput
BringWindowToTop
SetActiveWindow
GetParent
DeleteMenu
IsChild
CreateWindowExA
GetCursorPos
ScreenToClient
KillTimer
GetClientRect
BeginPaint
EndPaint
EnableMenuItem
SetFocus
ShowWindow
DestroyMenu
OffsetRect
SetWindowRgn
SetRect
GetSubMenu
CheckMenuRadioItem
ClientToScreen
TrackPopupMenuEx
RemoveMenu
CheckMenuItem
CopyRect
ShowScrollBar
GetSystemMetrics
AdjustWindowRect
FillRect
IsIconic
UpdateWindow
IntersectRect
SetForegroundWindow
IsRectEmpty
ReleaseCapture
GetCursor
SetCapture
EmptyClipboard
SetClipboardData
CloseClipboard
SetClipboardViewer
ChangeClipboardChain
GetClipboardViewer
OpenClipboard
ToAscii
GetKeyboardState
ToUnicode
GetKeyState
SendInput
GetFocus
GetAsyncKeyState
CallNextHookEx
UnhookWindowsHookEx
MessageBoxA
GetDC
GetDlgItem
EndDialog
GetActiveWindow
EqualRect
GetForegroundWindow
GetWindowThreadProcessId
RedrawWindow
GetDlgCtrlID
IsWindowEnabled
GetGUIThreadInfo
EnumWindows
IsWindowVisible
SetCursor
PostQuitMessage
ReleaseDC
UnionRect
SetRectRgn
SelectClipRgn
BitBlt
GetRegionData
GetRgnBox
CombineRgn
CreateRectRgn
CreatePolygonRgn
DeleteDC
DeleteObject
GetStockObject
CreateSolidBrush
DPtoLP
SetBkColor
StretchBlt
SetViewportOrgEx
SetWindowOrgEx
CreatePatternBrush
CreateBitmap
PatBlt
RoundRect
CreateDIBSection
CreateCompatibleBitmap
CreateRectRgnIndirect
MaskBlt
GetObjectType
SetBrushOrgEx
SetStretchBltMode
SetPixel
CreatePalette
SelectPalette
RealizePalette
GetDIBits
GetDCOrgEx
GetSystemPaletteEntries
CreateRoundRectRgn
FrameRgn
SetDIBitsToDevice
PtInRegion
CreateCompatibleDC
SelectObject
SetBkMode
Ellipse
Polygon
Rectangle
SetDIBColorTable
GetDeviceCaps
MoveToEx
GetPixel
LineTo
SetTextColor
RectInRegion
OffsetRgn
CreatePen
EqualSid
GetTokenInformation
InitializeSecurityDescriptor
RegSetValueExA
RegEnumKeyExA
RegEnumValueA
GetSidIdentifierAuthority
DuplicateTokenEx
SetTokenInformation
CreateProcessAsUserW
AllocateAndInitializeSid
SetEntriesInAclW
SetNamedSecurityInfoW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
FreeSid
RevertToSelf
ImpersonateLoggedOnUser
RegisterEventSourceW
ReportEventW
DeregisterEventSource
SetSecurityDescriptorDacl
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGenRandom
LookupAccountNameW
ord155
ord680
CommandLineToArgvW
SHAppBarMessage
SHGetSpecialFolderLocation
DragAcceptFiles
CoTaskMemAlloc
CoUninitialize
CoCreateInstance
StringFromGUID2
OleUninitialize
CreateStreamOnHGlobal
CoInitializeSecurity
OleLockRunning
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoInitializeEx
CoCreateGuid
CoTaskMemFree
CoGetClassObject
CoTaskMemRealloc
OleCreatePropertyFrame
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
SafeArrayGetDim
VariantCopy
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
VarUI4FromStr
VariantChangeType
SysAllocString
SafeArrayGetElement
LoadTypeLi
SysFreeString
DeleteIPAddress
GetAdapterIndex
GetAdaptersInfo
WNetOpenEnumW
WNetEnumResourceW
WNetCloseEnum
PathRemoveFileSpecW
PathCompactPathW
ioctlsocket
recv
shutdown
closesocket
gethostname
inet_addr
gethostbyname
WSAStartup
WSACleanup
select
htonl
ntohs
__WSAFDIsSet
getpeername
getsockname
connect
getsockopt
recvfrom
bind
accept
listen
setsockopt
socket
sendto
htons
send
inet_ntoa
WSAGetLastError
HttpSendRequestA
InternetGoOnlineA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetWriteFile
HttpEndRequestA
HttpQueryInfoA
InternetQueryDataAvailable
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetErrorDlg
InternetReadFile
InternetOpenW
InternetSetOptionW
InternetQueryOptionW
InternetCloseHandle
WSACreateEvent
WSAWaitForMultipleEvents
WSAResetEvent
WSACloseEvent
WSASetEvent
WSAEventSelect
CertGetNameStringW
CertGetNameStringA
CertFreeCertificateContext
CryptVerifyMessageSignature
ImageGetCertificateHeader
ImageEnumerateCertificates
ImageGetCertificateData
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
c:\TeamViewer5_Release\HostService\Release\TeamViewer_Service.pdb
CreateEnvironmentBlock
DestroyEnvironmentBlock
CertFreeCertificateContext
CryptVerifyMessageSignature
CertGetNameStringA
ImageEnumerateCertificates
ImageGetCertificateHeader
ImageGetCertificateData
WinVerifyTrust
WTSQuerySessionInformationA
WTSFreeMemory
GetExitCodeProcess
ProcessIdToSessionId
DisconnectNamedPipe
ReadFile
CreateProcessA
DeleteFileA
SetEvent
FindFirstFileA
CreateEventA
GetConsoleCP
SetFilePointer
IsValidLocale
GetCurrentProcess
GetModuleFileNameA
SetCurrentDirectoryA
MultiByteToWideChar
CreateFileA
LocalAlloc
FreeLibrary
SetLastError
CreateNamedPipeA
GetVersionExA
LoadLibraryA
GetProcAddress
GetCurrentProcessId
OpenProcess
GetLastError
CloseHandle
TerminateProcess
Sleep
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
WritePrivateProfileStringA
GetPrivateProfileIntA
LocalFree
GetPrivateProfileStringA
WaitForSingleObject
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapFree
HeapAlloc
RtlUnwind
RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetFileAttributesA
GetFileAttributesA
GetCommandLineA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedExchange
GetStringTypeA
GetStringTypeW
MessageBoxA
ExitWindowsEx
QueryServiceConfigA
StartServiceCtrlDispatcherA
SetServiceStatus
CreateServiceA
ChangeServiceConfigA
CreateProcessAsUserA
DuplicateToken
ImpersonateLoggedOnUser
RevertToSelf
RegCreateKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
RegSetKeySecurity
DuplicateTokenEx
SetTokenInformation
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
DeleteService
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
ShellExecuteExA
ShellExecuteA
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageContentCommitment
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
lstrcpynA
lstrlenA
lstrcatA
GlobalAlloc
GlobalFree
CloseHandle
GetTickCount
DeleteFileA
Sleep
WriteFile
CreateFileA
lstrcmpiA
lstrcpyA
MulDiv
CreateThread
CharPrevA
SetWindowLongA
RegisterWindowMessageA
CallWindowProcA
DestroyWindow
EnableWindow
GetWindowLongA
CreateWindowExA
GetWindowRect
GetClientRect
ShowWindow
IsWindowVisible
GetFocus
GetDlgItem
FindWindowExA
SetWindowTextA
SendMessageA
wsprintfA
SetDlgItemTextA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
gethostbyname
inet_addr
ioctlsocket
htons
socket
closesocket
shutdown
connect
__WSAFDIsSet
select
recv
WSAGetLastError
send
WSACleanup
WSAStartup
download
download_quiet
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalFree
GlobalSize
GetLastError
lstrcpyA
lstrcpynA
FreeLibrary
lstrcatA
GetProcAddress
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
VirtualAlloc
VirtualProtect
wsprintfA
StringFromGUID2
CLSIDFromString
Alloc
Call
Copy
Free
Get
Int64Op
Store
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetLastError
GlobalFree
CloseHandle
ReadFile
GlobalAlloc
GetFileSize
CreateFileA
GetDriveTypeA
GetCurrentThreadId
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
lstrlenA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
WriteFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
lstrcpynA
lstrcpyA
lstrcmpiA
GetSystemInfo
GetModuleHandleA
GetProcAddress
lstrcatA
HeapDestroy
GetVersionExA
wsprintfA
GetSystemMetrics
SendMessageA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
CloseServiceHandle
OpenServiceA
OpenSCManagerA
DeleteService
ControlService
IsNetPath
IsTvPasswordSet
LoadFile
RemoveService
WindowsName
WindowsPlatformArchitecture
WindowsPlatformId
WindowsServerName
WindowsServicePack
WindowsServicePackBuild
WindowsType
WindowsVersion
WindowsVersionMajor
WindowsVersionMinor
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleFileNameA
SetLastError
CloseHandle
GlobalFree
LocalFree
FormatMessageA
MultiByteToWideChar
GetLastError
CreateProcessA
GlobalAlloc
lstrlenA
LoadLibraryA
FreeLibrary
lstrcatA
GetExitCodeProcess
WaitForSingleObject
lstrcmpiA
lstrcpyA
GetVersionExA
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
Sleep
CreateThread
GetStartupInfoA
GetCommandLineA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetModuleHandleA
EnableWindow
GetWindowLongA
DestroyWindow
LoadImageA
SetWindowLongA
EndDialog
MessageBoxA
SendMessageW
DialogBoxParamA
CharNextA
SendMessageTimeoutA
DefWindowProcA
PostQuitMessage
SetForegroundWindow
DispatchMessageA
GetMessageA
CreateWindowExA
RegisterClassA
UnregisterClassA
PostMessageA
IsWindow
ShowWindow
SetWindowTextA
wsprintfA
GetDlgItem
LoadStringA
SendMessageA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
ShellExecuteExA
CoInitialize
CoUninitialize
Exec
ExecCodeSegment
ExecWait
GetElevationType
IsAdmin
RunElevated
ShellExec
ShellExecWait
SupportsUAC
Unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
GetCurrentThread
lstrcpynA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
GetLastError
GlobalFree
CloseHandle
GlobalAlloc
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
GetUserNameA
OpenThreadToken
GetAccountType
GetName
GetOriginalAccountType
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ