ddc3a31df2c1e5f9d827f368fb13e654_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

ddc3a31df2c1e5f9d827f368fb13e654_JaffaCakes118
Size

308KB
MD5

ddc3a31df2c1e5f9d827f368fb13e654
SHA1

443347487d392078700c24c246f7fd4e773a1906
SHA256

7cd1a128de610aebaf2823a62b7796d55d9b3e2c876e5dc4531472e5eea9568e
SHA512

bd491a08e7738c219eafa3c3527fcb4347b5d91b3d7d039d97b542fd5cc719a4a335a8a2028882c4b8b924d249d1cd95c9d7cb0adcaa5010cfc7e970ff21bca3
SSDEEP

6144:LOI6jhVW3Wgj+7ZYYKJuuhAKua8PJUCt4FhMQhoI1lD3sV:x6jh8j+i/JnwJUCohMQhoIzq

Score

1^/10

Malware Config

Signatures

Files

ddc3a31df2c1e5f9d827f368fb13e654_JaffaCakes118
.dll windows:5 windows x86 arch:x86

c59026ddc762e8936563a47fcda4ca45

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

21/12/2012, 00:00

Not After

30/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

Issuer

CN=Symantec Time Stamping Services CA - G2,O=Symantec Corporation,C=US

Not Before

18/10/2012, 00:00

Not After

29/12/2020, 23:59

Subject

CN=Symantec Time Stamping Services Signer - G4,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

1a:35:73:39:c3:b7:4c:1f:e1:de:b8:98:1c:f0:27:8d
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Not Before

08/08/2012, 00:00

Not After

08/08/2015, 23:59

Subject

CN=OPSWAT\, Inc.,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Engineering,O=OPSWAT\, Inc.,L=San Francisco,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

08/02/2010, 00:00

Not After

07/02/2020, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2010 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)10,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

3f:31:9f:d7:4f:1b:5b:11:92:e8:24:c6:c0:bd:61:c2:18:bf:0b:e3
Signer

Actual PE Digest

3f:31:9f:d7:4f:1b:5b:11:92:e8:24:c6:c0:bd:61:c2:18:bf:0b:e3

Digest Algorithm

sha1

PE Digest Matches

true

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SendMessageA

advapi32

RegOpenKeyExW

shell32

SHGetFolderPathW

ole32

CLSIDFromString

oleaut32

SysAllocStringLen

coreutils

?setMillis@typeTime@OESIS@@UAEXH@Z

oesiscore

OESIS_InvokeMethod

msvcp90

??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z

msvcr90

_onexit

Exports

Exports

??0CAVG_Antivirus@OESIS@@QAE@ABV01@@Z
??0CAVG_Antivirus@OESIS@@QAE@XZ
??0CClassFactory@OESIS@@QAE@ABV01@@Z
??0CErrorInfoCollection@OESIS@@QAE@ABV01@@Z
??0CFileVersionInfo@OESIS@@QAE@ABV01@@Z
??0CNameComparisonAnalyzer@OESIS@@QAE@ABV01@@Z
??0CRegKey@OESIS@@QAE@ABV01@@Z
??0CWSCController@OESIS@@QAE@ABV01@@Z
??0TypeInvokedClass@OESIS@@QAE@ABV01@@Z
??0TypeInvokedClass@OESIS@@QAE@XZ
??0TypePersistentClass@OESIS@@QAE@ABV01@@Z
??0TypePersistentClass@OESIS@@QAE@XZ
??0WhiteBoard@@QAE@ABV0@@Z
??0typeInvocationArgs@OESIS@@QAE@ABV01@@Z
??0typeObject@OESIS@@QAE@ABV01@@Z
??0typeObject@OESIS@@QAE@XZ
??1CAVG_Antivirus@OESIS@@UAE@XZ
??1CArchiveLib@@QAE@XZ
??1CSoftwareVersion@OESIS@@QAE@XZ
??1CSoftwareVersionRange@OESIS@@QAE@XZ
??1typeInvocationArgs@OESIS@@UAE@XZ
??4CAVG_API2_Engine@OESIS@@QAEAAV01@ABV01@@Z
??4CAVG_Antivirus@OESIS@@QAEAAV01@ABV01@@Z
??4CClassFactory@OESIS@@QAEAAV01@ABV01@@Z
??4CCriticalSectionFactory@OESIS@@QAEAAV01@ABV01@@Z
??4CDbUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CErrorInfoCollection@OESIS@@QAEAAV01@ABV01@@Z
??4CFileUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CFileVersionInfo@OESIS@@QAEAAV01@ABV01@@Z
??4CGUIUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CGeneralUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CLanguageUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CNameComparisonAnalyzer@OESIS@@QAEAAV01@ABV01@@Z
??4CNorman_Engine_V3@OESIS@@QAEAAV01@ABV01@@Z
??4CProcessUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CQuickHeal_Engine_V3@OESIS@@QAEAAV01@ABV01@@Z
??4CRegKey@OESIS@@QAEAAV01@ABV01@@Z
??4CResourceUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CServiceUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CSqliteUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CStorageUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CStringUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CWSCController@OESIS@@QAEAAV01@ABV01@@Z
??4CWindowsOSUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CXmlUtils@OESIS@@QAEAAV01@ABV01@@Z
??4CriticalSectionManager@OESIS@@QAEAAV01@ABV01@@Z
??4TypeInvokedClass@OESIS@@QAEAAV01@ABV01@@Z
??4TypePersistentClass@OESIS@@QAEAAV01@ABV01@@Z
??4WhiteBoard@@QAEAAV0@ABV0@@Z
??4typeInvocationArgs@OESIS@@QAEAAV01@ABV01@@Z
??4typeObject@OESIS@@QAEAAV01@ABV01@@Z
??_7CAVG_Antivirus@OESIS@@6B@
??_7CFileVersionInfo@OESIS@@6B@
??_7TypeInvokedClass@OESIS@@6B@
??_7TypePersistentClass@OESIS@@6B@
??_7typeInvocationArgs@OESIS@@6B@
??_7typeObject@OESIS@@6B@
?AVG_9x_GetThreatLogCheckIfResultFound@CAVG_Antivirus@OESIS@@SIHAA_NHABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$list@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$allocator@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@2@@4@PBVtypeProperty@2@AAH444@Z
?AVG_9x_GetThreatLogCheckScanTime@CAVG_Antivirus@OESIS@@SIHAA_NHABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$list@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$allocator@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@2@@4@PBVtypeProperty@2@AAVtypeTime@2@@Z
?AVG_9x_GetThreatLogExtractScanResults@CAVG_Antivirus@OESIS@@SIHPAUHWND__@@0HAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAV?$list@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$allocator@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@2@@5@@Z
?AVG_9x_GetThreatLogFindListView@CAVG_Antivirus@OESIS@@SIHABQAUHWND__@@AAV?$list@U_typeWndDescriptor@OESIS@@V?$allocator@U_typeWndDescriptor@OESIS@@@std@@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@5@22_N@Z
?AVG_9x_GetThreatLogFindWindow@CAVG_Antivirus@OESIS@@SIHPAPAUHWND__@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AVG_9x_GetThreatLogManipulateGUI@CAVG_Antivirus@OESIS@@SIHHHHPBVCSoftwareVersion@2@PBVtypeProperty@2@AAV42@_N@Z
?AVG_9x_GetThreatLogOpenHistory@CAVG_Antivirus@OESIS@@SIHPAUHWND__@@@Z
?AVG_9x_GetThreatLogProcessScanData@CAVG_Antivirus@OESIS@@SIHHABV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$list@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$allocator@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@2@@4@01PBVtypeProperty@2@AAV62@HHHHABVtypeTime@2@@Z
?AVG_9x_GetThreatLogReadFromListView@CAVG_Antivirus@OESIS@@SIHPAUHWND__@@AAHAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@AAV?$list@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@V?$allocator@V?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@@2@@5@@Z
?AVG_AV_GetAvgApiInterface@CAVG_Antivirus@OESIS@@QAE_NXZ
?AVG_AV_GetInstallDir@CAVG_Antivirus@OESIS@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AVG_AV_GetLocalProductVersion@CAVG_Antivirus@OESIS@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?AVG_AV_GetVersionOfAPI@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z
?AVSDK_CheckRTPFromWMI@CAVG_Antivirus@OESIS@@QAEHAA_N@Z
?ActivateProductGUI@CAVG_Antivirus@OESIS@@QAEHXZ
?Avg2Api_CreateFinishedScansEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansManager@@AAPAVIAvgApi2FinishedScansEnumerator@@@Z
?Avg2Api_CreateFinishedScansManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2FinishedScansManager@@@Z
?Avg2Api_CreateResidentShieldConfigurator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2ResidentShieldConfigurator@@@Z
?Avg2Api_CreateRunningScansEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2RunningScansManager@@AAPAVIAvgApi2RunningScansEnumerator@@@Z
?Avg2Api_CreateRunningScansManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2RunningScansManager@@@Z
?Avg2Api_CreateScanConfigurator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScan@@AAPAVIAvgApi2ScanConfigurator@@@Z
?Avg2Api_CreateThreatsEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScan@@AAPAVIAvgApi2ThreatsEnumerator@@@Z
?Avg2Api_CreateUIScanManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2UIScanManager@@@Z
?Avg2Api_CreateVersionInfo@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2VersionInfo@@@Z
?Avg2Api_CreateVirusVaultItemsEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultManager@@AAPAVIAvgApi2VirusVaultItemsEnumerator@@@Z
?Avg2Api_CreateVirusVaultManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2Factory@@AAPAVIAvgApi2VirusVaultManager@@@Z
?Avg2Api_DeInit@CAVG_API2_Engine@OESIS@@SIHAAPAUHINSTANCE__@@AAPAVIAvgApi2Factory@@@Z
?Avg2Api_DeInit_apiVersInfo@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VersionInfo@@@Z
?Avg2Api_Init@CAVG_API2_Engine@OESIS@@SIHPAUHINSTANCE__@@AAPAVIAvgApi2Factory@@@Z
?Avg2Api_Release_IAvgApi2FinishedScan@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScan@@@Z
?Avg2Api_Release_IAvgApi2FinishedScansEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansEnumerator@@@Z
?Avg2Api_Release_IAvgApi2FinishedScansManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansManager@@@Z
?Avg2Api_Release_IAvgApi2ResidentSheildConfigurator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ResidentShieldConfigurator@@@Z
?Avg2Api_Release_IAvgApi2RunningScan@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2RunningScan@@@Z
?Avg2Api_Release_IAvgApi2RunningScansEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2RunningScansEnumerator@@@Z
?Avg2Api_Release_IAvgApi2RunningScansManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2RunningScansManager@@@Z
?Avg2Api_Release_IAvgApi2ScanConfigurator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ScanConfigurator@@@Z
?Avg2Api_Release_IAvgApi2ThreatInfo@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ThreatInfo@@@Z
?Avg2Api_Release_IAvgApi2ThreatsEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ThreatsEnumerator@@@Z
?Avg2Api_Release_IAvgApi2UIScanManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2UIScanManager@@@Z
?Avg2Api_Release_IAvgApi2VirusVaultItem@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultItem@@@Z
?Avg2Api_Release_IAvgApi2VirusVaultItemsEnumerator@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultItemsEnumerator@@@Z
?Avg2Api_Release_IAvgApi2VirusVaultManager@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultManager@@@Z
?Call64BitProxy@CQuickHeal_Engine_V3@OESIS@@SIH_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z
?CheckForFreeProductInstalled@CAVG_Antivirus@OESIS@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00AA_N@Z
?CheckForSecurityCenter@CAVG_Antivirus@OESIS@@QAEHXZ
?CheckIfExeRunning@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CheckLicenseFree@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CheckLicenseFull@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CheckRTP64Bit@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?CheckRTP@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?ClickNoRestartButton@CAVG_Antivirus@OESIS@@QAEXXZ
?ConvertToLongPathName@CQuickHeal_Engine_V3@OESIS@@CIHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?DeInitEngine@CNorman_Engine_V3@OESIS@@CA_NAAK@Z
?Destroy@CAVG_Antivirus@OESIS@@UAEXXZ
?FreeAvgApi2DllHandle@CAVG_API2_Engine@OESIS@@CIHAAPAUHINSTANCE__@@@Z
?FreeAvgApi2Interface@CAVG_API2_Engine@OESIS@@CIHAAPAVIAvgApi2Factory@@@Z
?FullSystemScan64Bit@CQuickHeal_Engine_V3@OESIS@@SIHXZ
?FullSystemScan@CAVG_Antivirus@OESIS@@QAEHAAVtypeTime@2@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@1@Z
?FullSystemScan@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetAllUsersDir@CAVG_Antivirus@OESIS@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetAvgApi2DllHandle@CAVG_API2_Engine@OESIS@@CIHAAPAUHINSTANCE__@@PB_W@Z
?GetAvgApi2InterfaceAddress@CAVG_API2_Engine@OESIS@@CAP6GJPAPAXPBU_GUID@@KPBUAvgApi2InstanceParameters@@@ZAAPAUHINSTANCE__@@@Z
?GetAvgApi2InternalInterface@CAVG_API2_Engine@OESIS@@CIHAAPAUHINSTANCE__@@AAPAVIAvgApi2Factory@@@Z
?GetCPByIndex@CFileVersionInfo@OESIS@@QBEGI@Z
?GetCurCP@CFileVersionInfo@OESIS@@QBEGXZ
?GetCurLID@CFileVersionInfo@OESIS@@QBEGXZ
?GetCurTrans@CFileVersionInfo@OESIS@@QBEKXZ
?GetCurTransIndex@CFileVersionInfo@OESIS@@QBEIXZ
?GetDataFileTime@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetDataFileVersion@CNorman_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetDefTime@CNorman_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetEngineInfo@CNorman_Engine_V3@OESIS@@CA_NPAX@Z
?GetExclusions@CAVG_Antivirus@OESIS@@QAEHAAVtypeProperty@2@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV45@@Z
?GetExpirationDate@CAVG_Antivirus@OESIS@@QAEHAAVtypeTime@2@@Z
?GetExpirationDate@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetFileVersionBuild@CFileVersionInfo@OESIS@@QBEGXZ
?GetFileVersionMajor@CFileVersionInfo@OESIS@@QBEGXZ
?GetFileVersionMinor@CFileVersionInfo@OESIS@@QBEGXZ
?GetFileVersionQFE@CFileVersionInfo@OESIS@@QBEGXZ
?GetFolderFiles@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@4@@Z
?GetLIDByIndex@CFileVersionInfo@OESIS@@QBEGI@Z
?GetLastFullSystemScanTime@CAVG_Antivirus@OESIS@@QAEHAAVtypeTime@2@@Z
?GetLastFullSystemScanTime@CQuickHeal_Engine_V3@OESIS@@SIHAAVtypeTime@2@@Z
?GetNumberOfViruses@CNorman_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?GetProductVersionBuild@CFileVersionInfo@OESIS@@QBEGXZ
?GetProductVersionMajor@CFileVersionInfo@OESIS@@QBEGXZ
?GetProductVersionMinor@CFileVersionInfo@OESIS@@QBEGXZ
?GetProductVersionQFE@CFileVersionInfo@OESIS@@QBEGXZ
?GetSize@CAVG_Antivirus@OESIS@@QAEHXZ
?GetSize@TypeInvokedClass@OESIS@@QAEHXZ
?GetThreatLogSince64Bit@CQuickHeal_Engine_V3@OESIS@@SIHPBVtypeProperty@2@PAV32@@Z
?GetThreatLogSince@CQuickHeal_Engine_V3@OESIS@@SIHPBVtypeProperty@2@PAV32@@Z
?GetTransCount@CFileVersionInfo@OESIS@@QBEIXZ
?GetUpdateResult@CAVG_Antivirus@OESIS@@QAEHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetVSFFI@CFileVersionInfo@OESIS@@QBEABUtagVS_FIXEDFILEINFO@@XZ
?IAvgApi2FinishedScan_GetEndTime@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScan@@AAU_SYSTEMTIME@@@Z
?IAvgApi2FinishedScan_GetFinishedScanState@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScan@@AAW4AvgApi2FinishedScanState@@@Z
?IAvgApi2FinishedScansEnumerator_GetCurrent@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansEnumerator@@AAPAVIAvgApi2FinishedScan@@@Z
?IAvgApi2FinishedScansEnumerator_MoveNext@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansEnumerator@@AA_N@Z
?IAvgApi2FinishedScansEnumerator_Reset@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2FinishedScansEnumerator@@AA_N@Z
?IAvgApi2ResidentShieldConfigurator_SetScanEnabled@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ResidentShieldConfigurator@@_N@Z
?IAvgApi2RunningScansEnumerator_Reset@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2RunningScansEnumerator@@AA_N@Z
?IAvgApi2ScanConfigurator_GetWholeComputerScan@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ScanConfigurator@@AA_N@Z
?IAvgApi2ScanConfigurator_WholeComputerScan@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2UIScanManager@@@Z
?IAvgApi2ThreatsEnumerator_GetCurrent@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ThreatsEnumerator@@AAPAVIAvgApi2ThreatInfo@@@Z
?IAvgApi2ThreatsEnumerator_MoveNext@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ThreatsEnumerator@@AA_N@Z
?IAvgApi2ThreatsEnumerator_Reset@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2ThreatsEnumerator@@AA_N@Z
?IAvgApi2VersionInfo_GetVdbIncrementalVersion@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VersionInfo@@AAK@Z
?IAvgApi2VersionInfo_GetVdbVersionDate@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VersionInfo@@AAU_SYSTEMTIME@@@Z
?IAvgApi2VirusVaultItemsEnumerator_GetCurrent@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultItemsEnumerator@@AAPAVIAvgApi2VirusVaultItem@@@Z
?IAvgApi2VirusVaultItemsEnumerator_MoveNext@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultItemsEnumerator@@AA_N@Z
?IAvgApi2VirusVaultItemsEnumerator_Reset@CAVG_API2_Engine@OESIS@@SIHAAPAVIAvgApi2VirusVaultItemsEnumerator@@AA_N@Z
?InitEngine@CNorman_Engine_V3@OESIS@@CA_NAAKPA_W@Z
?Invoke@CAVG_Antivirus@OESIS@@UAIHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HHHPBVCSoftwareVersion@2@PBVtypeProperty@2@PAV62@@Z
?IsExpired@CAVG_Antivirus@OESIS@@QAEHAA_N@Z
?IsExpired@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?IsFileSystemProtectionStatusEnforced@CAVG_Antivirus@OESIS@@QAEHHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsFullSystemScanInProgress64Bit@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?IsFullSystemScanInProgress@CAVG_Antivirus@OESIS@@QAEHAA_N@Z
?IsFullSystemScanInProgress@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?IsInstalled@CNorman_Engine_V3@OESIS@@CA_NAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsUpdateInProgress64Bit@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?IsUpdateInProgress@CAVG_Antivirus@OESIS@@QAEHAA_N@Z
?IsUpdateInProgress@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?IsValid@CFileVersionInfo@OESIS@@QBEHXZ
?LoadStringFromDLL_Lua@CResourceUtils@OESIS@@SIHABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@HAAV34@@Z
?ProcessThreatLine@CQuickHeal_Engine_V3@OESIS@@CIHAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAVtypeProperty@2@AAVtypeTime@2@AAH@Z
?RegUtil_FindSubKeysByFilter_64_Lua@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVtypeProperty@2@1AAV52@@Z
?RegUtil_FindSubKeysByFilter_Lua@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVtypeProperty@2@1AAV52@@Z
?RegUtil_ReadMultiStringFromRegistry@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAVtypeProperty@2@@Z
?RegUtil_ReadStringFromRegistry@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV34@@Z
?RegUtil_ReadStringFromRegistry_64Bit@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0AAV34@@Z
?ReturnDir@CAVG_Antivirus@OESIS@@QAEHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z
?SYSTEMTIMEToTypeTime@CQuickHeal_Engine_V3@OESIS@@CAXPBU_SYSTEMTIME@@AAVtypeTime@2@@Z
?SetExclusions@CAVG_Antivirus@OESIS@@QAEHAAVtypeProperty@2@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV45@@Z
?SetFileSystemProtectionStatus@CAVG_Antivirus@OESIS@@QAEHHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?SetRTP64Bit@CQuickHeal_Engine_V3@OESIS@@SIH_NPAVtypeProperty@2@@Z
?SetRTP@CQuickHeal_Engine_V3@OESIS@@SIH_NPAVtypeProperty@2@@Z
?SetValueInt_Lua@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABH@Z
?SetValueInt_Lua_64bit@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0ABH@Z
?SetValueStr_Lua@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?SetValueStr_Lua_64bit@CRegKey@OESIS@@SAHJABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00@Z
?StrToTypeSAction@CQuickHeal_Engine_V3@OESIS@@CAXPBDAAH@Z
?VirusDefinitionFileUpdate64Bit@CQuickHeal_Engine_V3@OESIS@@SIHXZ
?VirusDefinitionFileUpdate@CAVG_Antivirus@OESIS@@QAEHAAH@Z
?VirusDefinitionFileUpdate@CQuickHeal_Engine_V3@OESIS@@SIHPAVtypeProperty@2@@Z
?WindowLIDToOpswatLanguageType_Lua@CFileVersionInfo@OESIS@@SAHJAAJAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?addThreatLocation@CQuickHeal_Engine_V3@OESIS@@CAXPBDAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?addToThreatLog@CQuickHeal_Engine_V3@OESIS@@CIHPBUtagINFECTION_INFOW@@AAVtypeProperty@2@AAVtypeTime@2@AAH@Z
?convertToReturnCode@CQuickHeal_Engine_V3@OESIS@@CIHPBK@Z
?getAttribute@CXpathUtils@OESIS@@SI?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVTiXmlNode@@ABV34@@Z
?getNestedArchiveLimit@CNorman_Engine_V3@OESIS@@CAHXZ
?getType@typeTime@OESIS@@UAE?AW4enumObjectType@typeObject@2@XZ
?initThreat@CQuickHeal_Engine_V3@OESIS@@CAXAAVtypeProperty@2@@Z
@AVG_AV_8_X_Free_Edition_GetServiceList@4
@AVG_AV_9_X_Free_Edition_GetServiceList@4
@CA_Total_Defense_12_X_Helper_GetDataFileTime64Bit@4
@CMC_Antivirus_Free_2_X_ReturnInstallDir@8
@Check_AVCC_Process@0
@Check_AVP_Service_Running@0
@Coranti_Coranti2010_GetDataFileVerAndTimeByCOM@8
@Coranti_Coranti2010_GetDataFileVerAndTimeFromFile@8
@Faronics_FaronicsAVEntWkst_RunCMDFromInstallDir@12
@GetDataFilesPaths@8
@GetRealTimeThreatLogs@32
@GetScanThreatList@32
@GetScanThreatLogs@32
@Helper_Check_Windows@4
@Ikarus_virusutilities_GetDefFileInfo@36
@IsProcessInProgress@40
@Kaspersky_CheckStatusRunning@60
@Kaspersky_FindVersionedRegPathBase@8
@Kaspersky_GenericIsTaskRunning@12
@LANDeskSoftwareLtd_LANDeskAntivirus_8_X_ConvertBinaryToText@32
@LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetUserLanguage@4
@LANDeskSoftwareLtd_LANDeskAntivirus_8_X_ReadUpdateLogFiles@88
@MicroWorld_eScanCorporate_AV_11_X_UpdateProductWithVDFUUnknown@24
@NanoAntivirus_0_X_ConvertBinaryToText@32
@OU_IO_ReadFromBinaryFile@8
@RunScanProgram@40
@SystemSuite_11_ReadFromDefFile@32
@ThreatLogParseOnAccess@16
@ThreatLogParseOnDemand@16
ALWIL_Software_Common_CheckRTP
AVG_AS_IdentityProtection_9_X_GetProductVersion
AVG_AS_IdentityProtection_9_X_GetServiceList
AVG_AS_IdentityProtection_9_X_IsProductAuthentic
AVG_AV_10_X_GetServiceList
AVG_AV_10_X_IsProductAuthentic
AVG_AV_2013_Antivirus_FullSystemScan
AVG_AV_2013_Antivirus_GetDataFileTime
AVG_AV_2013_Antivirus_GetDataFileVersion
AVG_AV_2013_Antivirus_GetLastFullSystemScan
AVG_AV_2013_Antivirus_GetThreatLogEx
AVG_AV_2013_Antivirus_SetRTP
AVG_AV_8_X_Free_Edition_IsProductAuthentic
AVG_AV_8_X_GetServiceList
AVG_AV_8_X_IsProductAuthentic
AVG_AV_9_X_Free_Edition_IsProductAuthentic
AVG_AV_9_X_GetServiceList
AVG_AV_9_X_GetThreatLogEx
AVG_AV_9_X_IsProductAuthentic
AVG_AV_Generic_Free_Edition_GetServiceList
AVG_AV_Generic_Free_Edition_IsProductAuthentic
AVSDK_BridgeLib_ActivateGUI
AVSDK_BridgeLib_CheckRTP
AVSDK_BridgeLib_DataFileDir
AVSDK_BridgeLib_FullSystemScan
AVSDK_BridgeLib_GetDataFileSignature
AVSDK_BridgeLib_GetDataFileTime
AVSDK_BridgeLib_GetDataFileVersion
AVSDK_BridgeLib_GetEngineVersion
AVSDK_BridgeLib_GetExpirationDate
AVSDK_BridgeLib_GetInstalledProductIds
AVSDK_BridgeLib_GetLanguage
AVSDK_BridgeLib_GetLastFullSystemScanTime
AVSDK_BridgeLib_GetProductDescription
AVSDK_BridgeLib_GetProductVendor
AVSDK_BridgeLib_GetProductVersion
AVSDK_BridgeLib_GetThreatLogEx
AVSDK_BridgeLib_GetVirusDefServer
AVSDK_BridgeLib_Init
AVSDK_BridgeLib_InstallDir
AVSDK_BridgeLib_IsExpired
AVSDK_BridgeLib_IsGuiShown
AVSDK_BridgeLib_IsProductAuthentic
AVSDK_BridgeLib_IsScanInProgress
AVSDK_BridgeLib_IsUpdateInProgress
AVSDK_BridgeLib_ScanPaths
AVSDK_BridgeLib_ServicesList
AVSDK_BridgeLib_SetRTP
AVSDK_BridgeLib_Uninit
AVSDK_BridgeLib_Uninstall
AVSDK_BridgeLib_Update
AVSDK_CheckRTPFromSecurityCenters
AVSDK_CheckRTPFromSecurityCenters_NoAdmin
AVSDK_CheckRTPFromWMI
AVSDK_GetModuleVersion
AVSDK_IsProductUpToDateFromWSC
AVSDK_ProductLanguage_English
Antiy_Ghostbusters_6X_ActivateGUI
Antiy_Ghostbusters_6X_IsUpdateInProgress
Antiy_Ghostbusters_6X_VirusDefinitionUpdate
Ashampoo_AntiMalware_1_X_IsUpdateInProgress
AviraGMBH_AviraFreeAntivirus_13_X_IAntivirus_CheckRTP
AviraGMBH_AviraFreeAntivirus_13_X_IAntivirus_SetRTP
AviraGMBH_AviraFreeAntivirus_13_X_ISoftwareProduct_GetExpirationDate
AviraGMBH_AviraFreeAntivirus_13_X_ISoftwareProduct_IsExpired
Bitdefender_Endpoint_Security_5x_CheckRTP
Bitdefender_Endpoint_Security_5x_EnableRTP
Bitdefender_Endpoint_Security_5x_FileScan
Bitdefender_Endpoint_Security_5x_GetDataFileSignature
Bitdefender_Endpoint_Security_5x_GetDataFileTime
Bitdefender_Endpoint_Security_5x_GetEngineVersion
Bitdefender_Endpoint_Security_5x_GetLastFullSystemScanTime
Bitdefender_Endpoint_Security_5x_GetThreatLogEX
Bitdefender_Endpoint_Security_5x_StartFullSystemScan
BullGuard_Antivirus_10_X_IAntivirus_FileScan
BullGuard_Antivirus_10_X_IAntivirus_IsFullScaninProgress
BullGuard_Antivirus_12_X_IAntivirus_FileScan
CA_Total_Defense_12_X_GetDataFileSignatures
CA_Total_Defense_12_X_GetDataFileTime
CMC_Antivirus_Free_2_X_GetDataFileDir
CMC_Antivirus_Free_2_X_GetDataFileSignature
CMC_Antivirus_Free_2_X_GetDataFileTime
CMC_Antivirus_Free_2_X_GetEngineVersion
CMC_Antivirus_Free_2_X_GetProductLanguage
CMC_Antivirus_Free_2_X_GetProductVersion
CNorman_Endpoint_Protection_GetDataFileSignatures
CNorman_Endpoint_Protection_GetDataFileTime
CNorman_Endpoint_Protection_GetDataFileVersion
CQuickHeal_Total_Security_CheckRTP
CQuickHeal_Total_Security_FullSystemScan
CQuickHeal_Total_Security_GetDataFileTime
CQuickHeal_Total_Security_GetExpirationDate
CQuickHeal_Total_Security_GetLastFullSystemScanTime
CQuickHeal_Total_Security_GetThreatLogEx
CQuickHeal_Total_Security_IsExpired
CQuickHeal_Total_Security_IsFullSystemScanInProgress
CQuickHeal_Total_Security_IsUpdateInProgress
CQuickHeal_Total_Security_SetRTP
CentralCommandVexiraAVProfessional_6_X_VirDefinitionVersion
CheckPoint_ZoneAlarm_10_GetDefinitionTime
Coranti_Coranti2010_AS_FullSystemScan
Coranti_Coranti2010_AS_GetDataFileDir
Coranti_Coranti2010_AS_IsFileSystemProtectionStatusEnforced
Coranti_Coranti2010_AV_FullSystemScan
Coranti_Coranti2010_AV_GetDataFileDir
Coranti_Coranti2010_AV_IsFileSystemProtectionStatusEnforced
Coranti_Coranti2010_ActivateProductGUI
Coranti_Coranti2010_GetDataFileTime
Coranti_Coranti2010_GetDataFileVersion
Coranti_Coranti2010_GetProductLanguage
Coranti_Coranti2010_GetProductVersion
Coranti_Coranti2010_UninstallProduct
Coranti_Coranti2010_VirusDefinitionFileUpdate
Coranti_Coranti_GetProductVersion
CyberDefenderAV_GetDataFileTime
CyberDefenderAV_GetDataFileVersion
CyberDefenderAV_IsFileSystemProtectionStatusEnabled
DavidCare_Desktop_Protection_8_X_IsFullSystemScanInProgress
DefenderPro_5_FullSysScan
DefenderPro_5_ScanFile
DefenderPro_5_Update
DoctorWeb_DoctorWebAntivirus_7x_IAntivirus_CheckRTP
EarthLinkProtectionControlCenter_10_X_CheckRTP
EarthLinkProtectionControlCenter_10_X_DataFileDate
EarthLinkProtectionControlCenter_10_X_DataFileDir
EarthLinkProtectionControlCenter_10_X_DataFileVersion
Eastlink_Eastlink_Premium_Support_Security_16_X_IAntivirus_CheckRTP
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_CheckRTP
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_FileScan
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_FullSystemScan
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_GetDataFileVersion
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_GetLastFullSystemScanTime
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_GetThreatLogEx
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_IAntivirus_SetRTP
EmsiSoftwareGmbH_EmsisoftAntiMalware_7_X_ISoftwareProduct_UpdateProduct
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_IAntivirus_GetDataFileSignatures
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_IAntivirus_GetDataFileTime
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_IAntivirus_GetEngineVersion
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_IAntivirus_IsFullSystemScanInProgress
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_IAntivirus_Scan
EmsiSoftwareGmbH_EmsisoftAntiMalware_8_X_ISoftwareProduct_IsUpdateInProgress
Emsi_Software_4_X_ActivateGui
Emsi_Software_4_X_FileScan
Emsi_Software_4_X_FullSystemScan
Emsi_Software_4_X_GetDataFileDir
Emsi_Software_4_X_GetDataFileTime
Emsi_Software_4_X_GetEngineVersion
Emsi_Software_4_X_GetExpirationDate
Emsi_Software_4_X_GetInstallDir
Emsi_Software_4_X_GetProductLanguage
Emsi_Software_4_X_GetProductVersion
Emsi_Software_4_X_IsExpired
Emsi_Software_4_X_IsFullSystemScanInProgress
Emsi_Software_4_X_IsUpdateInProgress
Emsi_Software_4_X_MemoryScan
Emsi_Software_4_X_UninstallProduct
Emsi_Software_4_X_VirusDefinitionUpdate
Emsi_Software_Mamutu_3_X_UpdateProduct
Enigma_SpyHunter_4_X_GetDataFileTime
Enigma_SpyHunter_4_X_GetDataFileVersion
Eset_FSW_4x_GetThreatLog
Eset_NOD32_AntiVirus_5_x_GetThreatLog
Faronics_FaronicsAVEntWkst_3X_IsUpdateInProgress
Faronics_FaronicsAVEntWkst_3X_UpdateProduct
Faronics_FaronicsAVEntWkst_ActivateProductGUI
Faronics_FaronicsAVEntWkst_FullSystemScan
Faronics_FaronicsAVEntWkst_GetDataFileDir
Faronics_FaronicsAVEntWkst_GetDataFileTime
Faronics_FaronicsAVEntWkst_GetDataFileVersion
Faronics_FaronicsAVEntWkst_GetEngineVersion
Faronics_FaronicsAVEntWkst_GetLastFullSystemScanTime
Faronics_FaronicsAVEntWkst_GetProductLanguage
Faronics_FaronicsAVEntWkst_IsFileSystemProtectionStatusEnforced
Faronics_FaronicsAVEntWkst_SetRTP
Faronics_FaronicsAVEntWkst_VirusDefinitionFileUpdate
GFISoftware_Vipre_IAntivirus_GetLastFullSystemScanTime
GFISoftware_Vipre_IAntivirus_Scan
Ikarus_antivirus_Antivirus_FullSystemScan
Ikarus_antivirus_GetDataFileSignatures
Ikarus_antivirus_GetLastFullSystemScanTime
Ikarus_antivirus_GetThreatLogEx
Ikarus_antivirus_Scan
Ikarus_antivirus_SetRTP
Ikarus_virusutilities_CheckRTP
Ikarus_virusutilities_GetDefinitionTime
Ikarus_virusutilities_GetDefinitionVersion
Ikarus_virusutilities_GetEngineVersion
Ikarus_virusutilities_IAntispyware_CheckRTP
Iolo_SystemMechanicProfessional_CheckRTP
JustSystems_JustInternetSecurity_GetLastScanTime
Kaspersky_AV_2010_ActivateGUI
Kaspersky_AV_2010_FullSysScan
Kaspersky_AV_2010_FullSysScanEx
Kaspersky_AV_2010_GetDataFileDir
Kaspersky_AV_2010_GetDataFileSignatures
Kaspersky_AV_2010_GetDataFileTime
Kaspersky_AV_2010_GetDataFileVersion
Kaspersky_AV_2010_GetEngineVersion
Kaspersky_AV_2010_GetInstallDir
Kaspersky_AV_2010_GetLanguage
Kaspersky_AV_2010_GetLastFullScanTime
Kaspersky_AV_2010_GetUpdateURL
Kaspersky_AV_2010_ScanFile
Kaspersky_AV_2010_ScanFileEx
Kaspersky_AV_2010_SetRTP
Kaspersky_AV_2010_UninstallProduct
Kaspersky_AV_2010_UpdateProduct
Kaspersky_AV_2010_UpdateProductEx
Kaspersky_AV_2011_FullSysScan
Kaspersky_AV_2011_ScanFile
Kaspersky_GenericStatusCheck
Kaspersky_Small_Office_Security_9x_UninstallProduct
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_ActivateGui
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_CheckRTP
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_EnableRTP
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetDataFileDir
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetDataFileSignature
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetDataFileTime
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetDataFileVersion
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetEngineVersion
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetInstallDir
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_GetProductVersion
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_IsUpdateInProgress
LANDeskSoftwareLtd_LANDeskAntivirus_8_X_LastScanTime
LANDeskSoftwareLtd_LANDeskAntivirus_9_X_GetDataFileSignature
LANDeskSoftwareLtd_LANDeskAntivirus_9_X_GetDataFileTime
LANDeskSoftwareLtd_LANDeskAntivirus_9_X_UpdateProduct
McAfee_VirusScan_15_X_IAntivirus_FullSystemScan
MicrosoftCorp_SecurityEssentials_AS_DataFileTime
MicrosoftCorp_SecurityEssentials_DataFileTime
MicrosoftCorp_SecurityEssentials_GetLastFullSystemScanTime
MicrosoftCorp_SecurityEssentials_GetThreatLogEx
MicrosoftCorp_SecurityEssentials_SetRTP
MicrosoftCorp_SystemCenterEndpointProtection_4_X_GetDataFileTime
MicrosoftCorp_SystemCenterEndpointProtection_4_X_GetLastFullSystemScanTime
MicrosoftCorp_SystemCenterEndpointProtection_4_X_GetThreatLogEx
MicrosoftCorp_SystemCenterEndpointProtection_4_X_IsFullSystemScanInProgress
MicrosoftCorp_SystemCenterEndpointProtection_4_X_SetRTP
MicrosoftCorp_SystemCenterEndpointProtection_SetRTP
MicrosoftCorp_WindowsDefender_AS_DataFileTime
MicrosoftCorp_WindowsDefender_DataFileTime
MicrosoftCorp_WindowsDefender_GetThreatLogEx
Microsoft_Windows_Intune_2_X_SetRTP
NanoAntivirus_0_X_FullSysScan
NanoAntivirus_0_X_GetDefinitionDate
NanoAntivirus_0_X_GetThreatLogEx
NanoAntivirus_0_X_SetRTP_ON
PCSecurityShield_AV_13X_SetRTP_ON
PCSecurityShield_AV_13X_VirusDefinitionUpdate
PCSecurityShield_GetProductVersion
PCSecurityShield_TheShieldDeluxe2010_GetDefinitionDate
PCSecurityShield_TheShieldDeluxe2010_IsRTPEnabled
Panda_Antivirus_Pro_11_X_CheckRTP
Panda_Antivirus_Pro_11_X_GetDataFileDir
Panda_Antivirus_Pro_11_X_GetDataFileTime
Panda_Antivirus_Pro_11_X_GetDataFileVersion
Panda_Antivirus_Pro_11_X_GetEngineVersion
Panda_Antivirus_Pro_11_X_SetRTP
Panda_Internet_Security_17_X_GetDataFileTime

Sections

.text
Size: 254KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c59026ddc762e8936563a47fcda4ca45

Code Sign

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3bCertificate

Extended Key Usages

Key Usages

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50Certificate

Extended Key Usages

Key Usages

1a:35:73:39:c3:b7:4c:1f:e1:de:b8:98:1c:f0:27:8dCertificate

Extended Key Usages

Key Usages

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7Certificate

Extended Key Usages

Key Usages

3f:31:9f:d7:4f:1b:5b:11:92:e8:24:c6:c0:bd:61:c2:18:bf:0b:e3Signer

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

coreutils

oesiscore

msvcp90

msvcr90

Exports

Exports

Sections

.text Size: 254KB - Virtual size: 1.0MB

.rsrc Size: 46KB - Virtual size: 48KB

.reloc Size: 512B - Virtual size: 512B

7e:93:eb:fb:7c:c6:4e:59:ea:4b:9a:77:d4:06:fc:3b
Certificate

0e:cf:f4:38:c8:fe:bf:35:6e:04:d8:6a:98:1b:1a:50
Certificate

1a:35:73:39:c3:b7:4c:1f:e1:de:b8:98:1c:f0:27:8d
Certificate

52:00:e5:aa:25:56:fc:1a:86:ed:96:c9:d4:4b:33:c7
Certificate

3f:31:9f:d7:4f:1b:5b:11:92:e8:24:c6:c0:bd:61:c2:18:bf:0b:e3
Signer

.text
Size: 254KB - Virtual size: 1.0MB

.rsrc
Size: 46KB - Virtual size: 48KB

.reloc
Size: 512B - Virtual size: 512B